5 Commits

Author	SHA1	Message	Date
LukeMackin	282bc79510	fix: exec默认cwd也走safePath(审查)	2026-07-22 20:30:04 +08:00
LukeMackin	37c6605582	fix: 完全重写tools.ts—safePath全部到位+命令净化+启动验证通过	2026-07-22 20:24:05 +08:00
LukeMackin	fcfedf1ae0	fix: 安全CRITICAL—exec用净化命令+file_read/write/move全加safePath	2026-07-22 20:19:20 +08:00
LukeMackin	12e00bf683	fix: 安全—路径沙箱+命令字符过滤+移除unused spire ... - safePath(): resolve→startsWith(BASE_DIR)防路径遍历 - sanitizeCommand(): 拒绝;&|$(){}等shell元字符 - 移除unused import(spawn,DeviceIdentity)	2026-07-22 20:12:05 +08:00
LukeMackin	f85ce9aa43	feat: P0 — MCP Tool类型(36) + Server框架 + 7个核心Tool实现 ... S-001: packages/shared/src/mcp/tools.ts — 36 Tool接口定义(10模块) S-002: packages/shared/src/mcp/config.ts — DeviceConfig/Gateway类型 C-001: packages/server/src/index.ts — MCP Server框架+SSE传输 C-002~011: packages/server/src/tools.ts — 7个P0核心Tool - file_list, file_read, file_write, file_move - exec, process_list, sysinfo packages/server/src/main.ts — 入口, 环境变量配置	2026-07-22 17:20:38 +08:00