okooooooo/vps-switch
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
39 Commits 1 Branch 0 Tags
main
Commit Graph
5 Commits
Author SHA1 Message Date
weidu12123 9d35744dd0 feat(gpui): add local proxy routing and polish terminal, file browser, and UI interactions 2026-10-19 00:26:34 +08:00
weidu12123andClaude Fable 5 ff160f41ca docs: settle the GPUI client plan and the development baseline 
The plan pins gpui-kit 0.7.3 (locked to gpui-pre 0.3.9) as the client
stack, keeps the backend untouched behind the existing HTTP/WS API, and
ships the client for Windows, macOS and Linux. The dev baseline records
the verified versions, the knowledge sources that outrank memory, the
entry-point skeleton, and the platform facts the next sessions must not
relitigate.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-10-17 17:02:46 +08:00
weidu12123andClaude Opus 4.8 67031b31b1 chore(release): prepare v0.1.0 release packaging and clean sensitive data 
- Scrub hardcoded hostnames from MCP descriptions, UI placeholders,
  and documentation examples to prevent environment leakage.
- Remove hardcoded development database fallback from src/db.rs.
- Untrack .cargo/config.toml from version control and ignore local mirrors.
- Ignore test artifacts, screenshots, and WiX temporary outputs in .gitignore.
- Add Inno Setup script (installer.iss) for Windows Setup.exe wizard installer.
- Add WiX configuration (wix/main.wxs) for Windows MSI installer.
- Add systemd service template (vps-switch.service) for Linux deployments.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-10-16 10:39:35 +08:00
weidu12123andClaude Opus 4.8 7bf552952f feat: add command blacklist guardrail for MCP command channels 
MCP 工具一旦被外部 agent 放行，参数里的命令就不再受它自身权限系统检查
（Claude Code 的 MCP 权限规则只按工具名匹配、不带参数内容），
vps_exec 里的 rm -rf / 在 agent 侧零提示。这是唯一的兜底。

- src/guard.rs：名单判定。归一化（剥引号、\/ 还原、折叠空白、转小写、
  短选项聚簇排序，故 -rf/-fr/-r -f 等价）+ * 通配 + 词边界匹配 + 截断标记检查
- data/deny-list.txt：首启写出内置 25 条不可逆灾难，用户可增删，每次判定重读
- 挂在 vps_exec 与 vps_terminal 的 send 上，命中即拒绝执行、不产生输出
- 工具描述写明护栏存在，并告诉 agent 被拦时不要换写法重试
- GET/PUT /api/guard + 设置页 MCP 标签下的名单编辑区
- 没有白名单、确认流程、风险分级与安全挡位

边界：防手滑，不防蓄意绕过（r\m -rf /、$(echo rm) -rf / 这类纯模式匹配必然漏）。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-10-13 23:55:31 +08:00
weidu12123 d2348d0c00 feat: initial commit of vps-switch core modules and desktop frontend 2026-10-13 16:36:22 +08:00