hansjone/netx
1
0
Fork 0
mirror of https://github.com/hansjone/netx.git synced 2026-10-09 04:20:45 +08:00
Code Issues Projects Releases 1 Packages Wiki Activity Actions 2

Add opt-in per-NE CLI exec_policy for MCP/API exec.

Browse source 
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-09-22 09:27:40 +08:00
parent bfac0b53c8
commit b9be545a75
20 changed files with 463 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

14
netx_api/config.py
View file

@ -1,10 +1,20 @@
from __future__ import annotations
from pathlib import Path
from pydantic_settings import BaseSettings, SettingsConfigDict
# Always load repo-root `.env` (cwd-independent). Optional cwd `.env` overrides last.
_NETX_ROOT = Path(__file__).resolve().parents[1]
_ENV_FILES = (str(_NETX_ROOT / ".env"), ".env")
class Settings(BaseSettings):
model_config = SettingsConfigDict(env_file=".env", env_prefix="NETX_", extra="ignore")
model_config = SettingsConfigDict(
env_file=_ENV_FILES,
env_prefix="NETX_",
extra="ignore",
)
database_url: str = "postgresql+psycopg://netx:netx@127.0.0.1:5432/netx"
host: str = "127.0.0.1"
@ -114,6 +124,8 @@ class Settings(BaseSettings):
biz_state_heavy_workers: int = 4
# Managed NE exec: max CLI commands per request (lab can raise; hard-capped in ne_exec).
ne_exec_max_commands: int = 5
# Opt-in: allow per-NE exec_policy (linux_shell/unrestricted). Default off — UI hidden.
ne_exec_policy_enabled: bool = False
# WebCRT interactive terminal sessions (multi-operator concurrent terminals).
webcrt_max_sessions: int = 40
# Per-user cap (0 = unlimited beyond global max).