✨ 安全重构 ScriptCat MCP 桥接：分级授权、人工确认与商店构建隔离#1573

Draft

cyfung1031 wants to merge 36 commits into

scriptscat:mainfrom

cyfung1031:pr/ScriptCat-MCP-Bridge

Commits on May 24, 2026

feat(native-messaging): Add Native Messaging Host with MCP Server for external script management
icaca
committed

Commits on Jul 11, 2026

Merge branch 'main' into pr/1465
cyfung1031
committed

Commits on Jul 12, 2026

refactor(mcp): remove prelim native-messaging implementation
cyfung1031
committed
feat(build): MCP build gate + mcp_enabled device-local config
cyfung1031
committed
feat(mcp): shared bridge protocol types
cyfung1031
committed
feat(mcp): extension services (repos, URL policy, approval, bridge)
cyfung1031
committed
feat(mcp): controller lifecycle, UI-facing endpoints, service worker wiring
cyfung1031
committed
feat(mcp): native host package scaffold + shared/native/auth core modules
cyfung1031
committed
feat(mcp): broker rate limiting (windowed limiter, concurrency, auth lockout)
cyfung1031
committed
feat(mcp): broker socket layer — HMAC challenge, IPC endpoint, session state machine
cyfung1031
committed
feat(mcp): host<->browser channel and shim socket client
cyfung1031
committed
feat(mcp): shim tool catalog, source resource, official SDK server wiring
cyfung1031
committed
feat(mcp): host.ts + shim.ts entrypoints, real ESM module resolution fix
cyfung1031
committed
feat(mcp): typed manifest generation + per-platform installers
cyfung1031
committed
feat(mcp): Tools settings card, i18n, and a real build-time exclusion bug fix
cyfung1031
committed
feat(build): pack.js MCP profile support and hard store-build assertions
cyfung1031
committed
feat(mcp): install.html MCP banner and approval wiring
cyfung1031
committed
feat(mcp): add mcp_confirm approval page for enable/disable/delete

cyfung1031
and
claude
committed
feat(mcp): wire pairing dialog and host client.sync mirroring

cyfung1031
and
claude
committed
docs(mcp): commit PROTOCOL.md, THREAT-MODEL.md, store-review package; wire CI

cyfung1031
and
claude
committed
test(mcp): add no-listener/no-network structural proofs; hide MCP on Firefox

cyfung1031
and
claude
committed
test(mcp): raise auth/broker/native coverage to doc 08 §11's 90% bar

cyfung1031
and
claude
committed
test(mcp): add host.ts/shim.ts entrypoint tests

cyfung1031
and
claude
committed
fix(mcp): implement --rollback; fix install.sh bash-3.2 incompatibility

cyfung1031
and
claude
committed
test(mcp): raise bridge/approval/url_policy coverage to doc 08 §11's 90% bar

cyfung1031
and
claude
committed
feat(mcp): implement source_disclosure — first-use-per-client consent gate

cyfung1031
and
claude
committed
feat(mcp): render pairing dialog in-page when the options tab is open

cyfung1031
and
claude
committed
docs(mcp): add end-user MCP bridge usage guide

cyfung1031
and
claude
committed
docs(mcp): remove workspace/.ref-docs citations from extension-side comments

cyfung1031
and
claude
committed
docs(mcp): remove workspace/.ref-docs citations from native-host production code

cyfung1031
and
claude
committed
docs(mcp): remove workspace/.ref-docs citations from native-host test files

cyfung1031
and
claude
committed
docs(mcp): remove remaining workspace/.ref-docs and prelim references

cyfung1031
and
claude
committed
docs(mcp): add native-messaging-host README/LICENSE and zh-CN bridge guide

cyfung1031
and
claude
committed
CI fix
cyfung1031
committed
✅ 修复 Native Host 路径测试的跨平台兼容性
 cyfung1031
committed

Commits on Jul 14, 2026

Merge branch 'main' into pr/ScriptCat-MCP-Bridge
cyfung1031
committed