mirror of
https://gitcode.com/JianFeeeee/HomeAgent.git
synced 2026-09-21 09:28:14 +00:00
安全修复(客户端鉴权): - remotedevice 服务端移除授权状态存储(authorized map/SetAuthorized/handleDeviceAuth) - DeviceMeta.Authorized 改为设备 hello 自报,服务端仅透传展示 - device_ctl_* 工具移除服务端授权检查,无条件转发,设备端自行决定是否执行 - 共享设备桥库 Bridge 新增本地 authorized 状态,未授权收到 cmd 直接拒绝 - waiter: --device-authorized / device_authorized 配置控制本地授权 - GUI: 授权存 gui-prefs 本地文件;设备页仅本机可切换开关 - webui /device/auth 旧路径返回 410 Gone - 根因:agent 可经 config_set 篡改服务端授权配置自行授权设备 插件管理强化: - 内置插件禁止卸载(IsBuiltinPlugin + 409),外部插件卸载即时生效 - 卸载不存在插件返回 404;移除误导性 reload_required 提示 - webui 插件路由:名称白名单校验防路径穿越、保留字路径保护
49 lines
648 B
Plaintext
49 lines
648 B
Plaintext
/homed
|
|
/waiter
|
|
*.exe
|
|
*.log
|
|
*.test
|
|
build/
|
|
*.so
|
|
*.db
|
|
data/
|
|
.tmp-plugins/
|
|
.go/
|
|
.local/
|
|
internal/meta/
|
|
|
|
*.hmap
|
|
dev/
|
|
|
|
login.json
|
|
|
|
# GUI
|
|
cmd/gui/node_modules/
|
|
cmd/gui/dist/
|
|
|
|
.gopath/
|
|
|
|
# SDK 工具链 — 核心仓不追踪
|
|
third_party/homeagent-sdk/bin/
|
|
third_party/homeagent-sdk/tools/
|
|
third_party/homeagent-sdk/package/
|
|
third_party/homeagent-sdk/.gitignore
|
|
third_party/homeagent-sdk/README*
|
|
third_party/homeagent-sdk/example/
|
|
.codegraph/
|
|
|
|
# codegraph 本地索引配置(含嵌套 SDK 仓放行,仅本地生效)
|
|
codegraph.json
|
|
|
|
# 运行时产物(不提交)
|
|
adapters/
|
|
knowledge/
|
|
memory/
|
|
scripts/
|
|
terminal_locked_log.txt
|
|
|
|
dist/
|
|
.pi-glla/
|
|
.omo/
|
|
.pi/
|