✨ 安全重构 ScriptCat MCP 桥接：sctl 本地守护进程、分级授权与人工确认 - #1573

Merged

CodFrm merged 78 commits into

scriptscat:mainfrom

cyfung1031:pr/ScriptCat-MCP-Bridge

Aug 5, 2026

Commits on May 24, 2026

feat(native-messaging): Add Native Messaging Host with MCP Server for external script management
icaca
committed
04371e0

Commits on Jul 11, 2026

Merge branch 'main' into pr/1465
cyfung1031
committed
1091cf8

Commits on Jul 12, 2026

refactor(mcp): remove prelim native-messaging implementation
cyfung1031
committed
09e15ce
feat(build): MCP build gate + mcp_enabled device-local config
cyfung1031
committed
8595ea7
feat(mcp): shared bridge protocol types
cyfung1031
committed
8c8fac3
feat(mcp): extension services (repos, URL policy, approval, bridge)
cyfung1031
committed
5f50bc1
feat(mcp): controller lifecycle, UI-facing endpoints, service worker wiring
cyfung1031
committed
a060a90
feat(mcp): native host package scaffold + shared/native/auth core modules
cyfung1031
committed
4632b55
feat(mcp): broker rate limiting (windowed limiter, concurrency, auth lockout)
cyfung1031
committed
060c813
feat(mcp): broker socket layer — HMAC challenge, IPC endpoint, session state machine
cyfung1031
committed
31182b0
feat(mcp): host<->browser channel and shim socket client
cyfung1031
committed
5c68117
feat(mcp): shim tool catalog, source resource, official SDK server wiring
cyfung1031
committed
89bf3e0
feat(mcp): host.ts + shim.ts entrypoints, real ESM module resolution fix
cyfung1031
committed
569ffd0
feat(mcp): typed manifest generation + per-platform installers
cyfung1031
committed
189467a
feat(mcp): Tools settings card, i18n, and a real build-time exclusion bug fix
cyfung1031
committed
a9e9b44
feat(build): pack.js MCP profile support and hard store-build assertions
cyfung1031
committed
29986ca
feat(mcp): install.html MCP banner and approval wiring
cyfung1031
committed
0f10068
feat(mcp): add mcp_confirm approval page for enable/disable/delete

cyfung1031
and
claude
committed
dbada12
feat(mcp): wire pairing dialog and host client.sync mirroring

cyfung1031
and
claude
committed
351c605
docs(mcp): commit PROTOCOL.md, THREAT-MODEL.md, store-review package; wire CI

cyfung1031
and
claude
committed
984d5b5
test(mcp): add no-listener/no-network structural proofs; hide MCP on Firefox

cyfung1031
and
claude
committed
23cc1e0
test(mcp): raise auth/broker/native coverage to doc 08 §11's 90% bar

cyfung1031
and
claude
committed
d0da780
test(mcp): add host.ts/shim.ts entrypoint tests

cyfung1031
and
claude
committed
0dd0a5f
fix(mcp): implement --rollback; fix install.sh bash-3.2 incompatibility

cyfung1031
and
claude
committed
5a58f28
test(mcp): raise bridge/approval/url_policy coverage to doc 08 §11's 90% bar

cyfung1031
and
claude
committed
ef0b2ab
feat(mcp): implement source_disclosure — first-use-per-client consent gate

cyfung1031
and
claude
committed
545ed73
feat(mcp): render pairing dialog in-page when the options tab is open

cyfung1031
and
claude
committed
4ecbeaf
docs(mcp): add end-user MCP bridge usage guide

cyfung1031
and
claude
committed
edf0239
docs(mcp): remove workspace/.ref-docs citations from extension-side comments

cyfung1031
and
claude
committed
ebcb9b9
docs(mcp): remove workspace/.ref-docs citations from native-host production code

cyfung1031
and
claude
committed
5644cfc
docs(mcp): remove workspace/.ref-docs citations from native-host test files

cyfung1031
and
claude
committed
249c913
docs(mcp): remove remaining workspace/.ref-docs and prelim references

cyfung1031
and
claude
committed
8a1031a
docs(mcp): add native-messaging-host README/LICENSE and zh-CN bridge guide

cyfung1031
and
claude
committed
b3c19f2
CI fix
cyfung1031
committed
f452b7c
✅ 修复 Native Host 路径测试的跨平台兼容性
 cyfung1031
committed
643a8ad

Commits on Jul 14, 2026

Merge branch 'main' into pr/ScriptCat-MCP-Bridge
cyfung1031
committed
4dcd1ad

Commits on Jul 17, 2026

Commits on Jul 18, 2026

Commits on Jul 20, 2026

Commits on Jul 21, 2026

Merge remote-tracking branch 'origin/main' into pr1573/mcp-bridge-ws
CodFrm
committed
e003d9d
✅ 补齐 MCP 工具页测试客户端桩
 CodFrm
committed
cca7d2d
♻️ 合并 main 并解决保活功能冲突
 CodFrm
committed
2def266
Merge branch 'main' into pr/ScriptCat-MCP-Bridge
CodFrm
authored
fdd7526
💚 修复 storageName 跨上下文 E2E 就绪竞态
 CodFrm
committed
99e98a0
Merge remote-tracking branch 'origin/main' into pr/ScriptCat-MCP-Bridge
CodFrm
committed
3bb5718

Commits on Jul 22, 2026

Merge remote-tracking branch 'origin/main' into pr/ScriptCat-MCP-Bridge
CodFrm
committed
b8fed67

Commits on Jul 23, 2026

♻️ 外部接入安全模型重构:扁平信任 + 带外接入 + 三档决策
 CodFrm
committed
f9323b8
♻️ 统一外部接入内部命名
 CodFrm
committed
ec61166
💄 完善外部接入确认与设置界面
 CodFrm
committed
1e8c7f8

Commits on Jul 24, 2026

♻️ 外部接入协议显式分两层 + 删除 pair/client 死类型
 CodFrm
committed
f178825

Commits on Aug 3, 2026

Commits on Aug 4, 2026

♻️ 重构外部接入为 JSON-RPC 2.0
CodFrm
committed
3bd0ce4
🐛 使用生成校验器避免 MV3 CSP 阻断启动
 CodFrm
committed
9412954

Commits on Aug 5, 2026