633a9d55bd
Harden auth scopes, SQL/WebCRT gates, and per-install JWT secrets.
...
Add capability RBAC, Alembic bootstrap, optional worker schedulers, and close public docs by default so lab installs stay usable without shared signing keys.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-02 16:24:34 +08:00
88479245bb
feat(ne-exec): make max CLI commands configurable and allow traceroute
...
Add NETX_NE_EXEC_MAX_COMMANDS (default 5, cap 50) and whitelist traceroute/tracert/trace/trace6 prefixes for lab/ops use.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-28 10:57:55 +08:00
a6a5abc9ef
fix(ne-exec): allow no-more in managed NE CLI pipe whitelist
...
Support Huawei-style display ... | no-more alongside existing read-only pipe filters.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-14 16:49:44 +08:00
33af0efc98
fix(ne-exec): allow read-only pipe filters in managed NE CLI
...
Whitelist include/exclude/begin/section/count/match/grep/one-line after show/display pipes while blocking redirect/append/tee/send.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-14 16:24:47 +08:00
38a1c7f3a9
feat(cli): UME lazy exec via shared profiles and ume_ne_id MCP support
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-26 17:13:49 +08:00
9a39ddfcc7
feat(ne-exec): allow ping and ping6 on managed NE CLI path
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-05 16:14:59 +08:00
0361472ede
fix(ne-exec): allow only show/display CLI and harden agent injection
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-04 20:51:06 +08:00
981347b5b1
feat(ne): add managed NE read-only exec API
...
Add a guarded managed-ne exec endpoint for oclaw ops tools to login managed devices and run read-only CLI safely.
Include request schema and unit tests for command guardrails and execution flow.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-28 22:12:50 +08:00
