feat: require paired browser receiver

2026-07-10 03:37:12 +08:00
parent 89c261824f
commit 0f293640f9
11 changed files with 316 additions and 26 deletions
@@ -50,6 +50,7 @@ func (r *Registry) registerDefaults() {
 		{Name: "secrets.read", Description: "Read secrets from the secret store", Dangerous: true},
 		{Name: "secrets.write", Description: "Write secrets to the secret store", Dangerous: true},
 		{Name: "sync.participate", Description: "Participate in vault sync", Dangerous: true},
+		{Name: "browser.receiver.manage", Description: "View and rotate the local browser receiver pairing token", Dangerous: true},
 	}
 	for _, e := range defaults {
 		r.permissions[e.Name] = e