hansjone/netx
1
0
Fork 0
mirror of https://github.com/hansjone/netx.git synced 2026-10-09 10:40:46 +08:00
Code Issues Projects Releases 1 Packages Wiki Activity Actions 2

Add opt-in per-NE CLI exec_policy for MCP/API exec.

Browse source 
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-09-22 09:27:40 +08:00
parent bfac0b53c8
commit b9be545a75
20 changed files with 463 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

4
web/src/types.ts
View file

@ -211,6 +211,8 @@ export type ManagedNeItem = {
hop_vrf: string;
hop_target_auth_mode: string;
hop_enter_system_view?: boolean;
/** MCP/API CLI gate: readonly | linux_shell | unrestricted */
exec_policy?: "readonly" | "linux_shell" | "unrestricted";
created_at: string;
updated_at: string;
};
@ -225,6 +227,8 @@ export type ManagedNeListResponse = {
export type ManagedNeMeta = {
device_types: string[];
vendors: string[];
/** When false (default), exec_policy UI/API open policies are disabled. */
exec_policy_enabled?: boolean;
};
export type ManagedNeImportResult = {