Repository navigation

✨ 安全重构 ScriptCat MCP 桥接：sctl 本地守护进程、分级授权与人工确认 - #1573

Merged

CodFrm merged 78 commits into

scriptscat:mainfrom

cyfung1031:pr/ScriptCat-MCP-Bridge

Aug 5, 2026

Merged

✨ 安全重构 ScriptCat MCP 桥接：sctl 本地守护进程、分级授权与人工确认#1573
CodFrm merged 78 commits into
scriptscat:mainfrom
cyfung1031:pr/ScriptCat-MCP-Bridge

Commits on May 24, 2026
- feat(native-messaging): Add Native Messaging Host with MCP Server for external script management
  icaca
  committed
  04371e0
Commits on Jul 11, 2026
- Merge branch 'main' into pr/1465
  cyfung1031
  committed
  1091cf8
Commits on Jul 12, 2026
- refactor(mcp): remove prelim native-messaging implementation
  cyfung1031
  committed
  09e15ce
- feat(build): MCP build gate + mcp_enabled device-local config
  cyfung1031
  committed
  8595ea7
- feat(mcp): shared bridge protocol types
  cyfung1031
  committed
  8c8fac3
- feat(mcp): extension services (repos, URL policy, approval, bridge)
  cyfung1031
  committed
  5f50bc1
- feat(mcp): controller lifecycle, UI-facing endpoints, service worker wiring
  cyfung1031
  committed
  a060a90
- feat(mcp): native host package scaffold + shared/native/auth core modules
  cyfung1031
  committed
  4632b55
- feat(mcp): broker rate limiting (windowed limiter, concurrency, auth lockout)
  cyfung1031
  committed
  060c813
- feat(mcp): broker socket layer — HMAC challenge, IPC endpoint, session state machine
  cyfung1031
  committed
  31182b0
- feat(mcp): host<->browser channel and shim socket client
  cyfung1031
  committed
  5c68117
- feat(mcp): shim tool catalog, source resource, official SDK server wiring
  cyfung1031
  committed
  89bf3e0
- feat(mcp): host.ts + shim.ts entrypoints, real ESM module resolution fix
  cyfung1031
  committed
  569ffd0
- feat(mcp): typed manifest generation + per-platform installers
  cyfung1031
  committed
  189467a
- feat(mcp): Tools settings card, i18n, and a real build-time exclusion bug fix
  cyfung1031
  committed
  a9e9b44
- feat(build): pack.js MCP profile support and hard store-build assertions
  cyfung1031
  committed
  29986ca
- feat(mcp): install.html MCP banner and approval wiring
  cyfung1031
  committed
  0f10068
- feat(mcp): add mcp_confirm approval page for enable/disable/delete
  
  cyfung1031
  and
  claude
  committed
  dbada12
- feat(mcp): wire pairing dialog and host client.sync mirroring
  
  cyfung1031
  and
  claude
  committed
  351c605
- docs(mcp): commit PROTOCOL.md, THREAT-MODEL.md, store-review package; wire CI
  
  cyfung1031
  and
  claude
  committed
  984d5b5
- test(mcp): add no-listener/no-network structural proofs; hide MCP on Firefox
  
  cyfung1031
  and
  claude
  committed
  23cc1e0
- test(mcp): raise auth/broker/native coverage to doc 08 §11's 90% bar
  
  cyfung1031
  and
  claude
  committed
  d0da780
- test(mcp): add host.ts/shim.ts entrypoint tests
  
  cyfung1031
  and
  claude
  committed
  0dd0a5f
- fix(mcp): implement --rollback; fix install.sh bash-3.2 incompatibility
  
  cyfung1031
  and
  claude
  committed
  5a58f28
- test(mcp): raise bridge/approval/url_policy coverage to doc 08 §11's 90% bar
  
  cyfung1031
  and
  claude
  committed
  ef0b2ab
- feat(mcp): implement source_disclosure — first-use-per-client consent gate
  
  cyfung1031
  and
  claude
  committed
  545ed73
- feat(mcp): render pairing dialog in-page when the options tab is open
  
  cyfung1031
  and
  claude
  committed
  4ecbeaf
- docs(mcp): add end-user MCP bridge usage guide
  
  cyfung1031
  and
  claude
  committed
  edf0239
- docs(mcp): remove workspace/.ref-docs citations from extension-side comments
  
  cyfung1031
  and
  claude
  committed
  ebcb9b9
- docs(mcp): remove workspace/.ref-docs citations from native-host production code
  
  cyfung1031
  and
  claude
  committed
  5644cfc
- docs(mcp): remove workspace/.ref-docs citations from native-host test files
  
  cyfung1031
  and
  claude
  committed
  249c913
- docs(mcp): remove remaining workspace/.ref-docs and prelim references
  
  cyfung1031
  and
  claude
  committed
  8a1031a
- docs(mcp): add native-messaging-host README/LICENSE and zh-CN bridge guide
  
  cyfung1031
  and
  claude
  committed
  b3c19f2
- CI fix
  cyfung1031
  committed
  f452b7c
- ✅ 修复 Native Host 路径测试的跨平台兼容性
   cyfung1031
  committed
  643a8ad
Commits on Jul 14, 2026
- Merge branch 'main' into pr/ScriptCat-MCP-Bridge
  cyfung1031
  committed
  4dcd1ad
Commits on Jul 17, 2026
- Merge branch 'main' into pr/ScriptCat-MCP-Bridge
  cyfung1031
  committed
  fa25d25
- fix
  cyfung1031
  committed
  2e8821c
- Update test.yaml
  cyfung1031
  committed
  23861a3
- ♻️ MCP 协议层 WS 化:action 9→6、operations.* 移除、protocol.json 单源
   CodFrm
  committed
  bd130e5
- ♻️ MCP 传输层 WS 化:offscreen WebSocket client + 双向 HMAC 握手,替换 Native Messaging
  CodFrm
  committed
  210607f
Commits on Jul 18, 2026
- ✨ MCP 扩展侧收尾:写审批阻塞化 + 设置 UI + sctl-cli 身份 + 7 语言包
   CodFrm
  committed
  6b82a77
- 📝 MCP 文档改写:Native Messaging → sctl/WS,清理死链与失效构建门
   CodFrm
  committed
  4a066e6
Commits on Jul 20, 2026
Commits on Jul 21, 2026
- Merge remote-tracking branch 'origin/main' into pr1573/mcp-bridge-ws
  CodFrm
  committed
  e003d9d
- ✅ 补齐 MCP 工具页测试客户端桩
   CodFrm
  committed
  cca7d2d
- ♻️ 合并 main 并解决保活功能冲突
   CodFrm
  committed
  2def266
- Merge branch 'main' into pr/ScriptCat-MCP-Bridge
  CodFrm
  authored
  fdd7526
- 💚 修复 storageName 跨上下文 E2E 就绪竞态
   CodFrm
  committed
  99e98a0
- Merge remote-tracking branch 'origin/main' into pr/ScriptCat-MCP-Bridge
  CodFrm
  committed
  3bb5718
Commits on Jul 22, 2026
- Merge remote-tracking branch 'origin/main' into pr/ScriptCat-MCP-Bridge
  CodFrm
  committed
  b8fed67
Commits on Jul 23, 2026
- ♻️ 外部接入安全模型重构:扁平信任 + 带外接入 + 三档决策
   CodFrm
  committed
  f9323b8
- ♻️ 统一外部接入内部命名
   CodFrm
  committed
  ec61166
- 💄 完善外部接入确认与设置界面
   CodFrm
  committed
  1e8c7f8
Commits on Jul 24, 2026
- ♻️ 外部接入协议显式分两层 + 删除 pair/client 死类型
   CodFrm
  committed
  f178825
Commits on Aug 3, 2026
Commits on Aug 4, 2026
- ♻️ 重构外部接入为 JSON-RPC 2.0
  CodFrm
  committed
  3bd0ce4
- 🐛 使用生成校验器避免 MV3 CSP 阻断启动
   CodFrm
  committed
  9412954
Commits on Aug 5, 2026
- 🔒 收紧外部接入授权与协议边界
   CodFrm
  committed
  7f2f19a
- ♻️ 放宽外部接入限制并按脚本授权会话
   CodFrm
  committed
  80b0e09
- ✨ 限制 MCP 整份源码读取预算
   CodFrm
  committed
  e32bb5a
- 🐛 保留日志预设筛选条件
   CodFrm
  committed
  60c07cf

Commits

Commits on May 24, 2026

Commits on Jul 11, 2026

Commits on Jul 12, 2026

Commits on Jul 14, 2026

Commits on Jul 17, 2026

Commits on Jul 18, 2026

Commits on Jul 20, 2026

Commits on Jul 21, 2026

Commits on Jul 22, 2026

Commits on Jul 23, 2026

Commits on Jul 24, 2026

Commits on Aug 3, 2026

Commits on Aug 4, 2026

Commits on Aug 5, 2026