mirror of
https://github.com/claude-code-best/claude-code.git
synced 2026-06-15 12:55:51 +00:00
e3264a1691
Phase 1: Replace @ant/computer-use-mcp stub (12 files, 6517 lines). Phase 2: Remove 8 macOS-only guards in src/: - main.tsx: remove getPlatform()==='macos' check - swiftLoader.ts: remove darwin-only throw - executor.ts: extend platform guard, clipboard dispatch, paste key - drainRunLoop.ts: skip CFRunLoop pump on non-darwin - escHotkey.ts: non-darwin returns false (Ctrl+C fallback) - hostAdapter.ts: non-darwin permissions granted - common.ts: dynamic platform + screenshotFiltering - gates.ts: enabled:true, subscription check removed Phase 3: Add Linux backends (xdotool/scrot/xrandr/wmctrl): - computer-use-input/backends/linux.ts (173 lines) - computer-use-swift/backends/linux.ts (278 lines) Verified on Windows x64: mouse, screenshot, displays, foreground app. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
44 lines
1.5 KiB
TypeScript
44 lines
1.5 KiB
TypeScript
/**
|
|
* Bundle IDs that are escalations-in-disguise. The approval UI shows a warning
|
|
* badge for these; they are NOT blocked. Power users may legitimately want the
|
|
* model controlling a terminal.
|
|
*
|
|
* Imported by the renderer via the `./sentinelApps` subpath (package.json
|
|
* `exports`), which keeps Next.js from reaching index.ts → mcpServer.ts →
|
|
* @modelcontextprotocol/sdk (devDep, would fail module resolution). Keep
|
|
* this file import-free so the subpath stays clean.
|
|
*/
|
|
|
|
/** These apps can execute arbitrary shell commands. */
|
|
const SHELL_ACCESS_BUNDLE_IDS = new Set([
|
|
"com.apple.Terminal",
|
|
"com.googlecode.iterm2",
|
|
"com.microsoft.VSCode",
|
|
"dev.warp.Warp-Stable",
|
|
"com.github.wez.wezterm",
|
|
"io.alacritty",
|
|
"net.kovidgoyal.kitty",
|
|
"com.jetbrains.intellij",
|
|
"com.jetbrains.pycharm",
|
|
]);
|
|
|
|
/** Finder in the allowlist ≈ browse + open-any-file. */
|
|
const FILESYSTEM_ACCESS_BUNDLE_IDS = new Set(["com.apple.finder"]);
|
|
|
|
const SYSTEM_SETTINGS_BUNDLE_IDS = new Set(["com.apple.systempreferences"]);
|
|
|
|
export const SENTINEL_BUNDLE_IDS: ReadonlySet<string> = new Set([
|
|
...SHELL_ACCESS_BUNDLE_IDS,
|
|
...FILESYSTEM_ACCESS_BUNDLE_IDS,
|
|
...SYSTEM_SETTINGS_BUNDLE_IDS,
|
|
]);
|
|
|
|
export type SentinelCategory = "shell" | "filesystem" | "system_settings";
|
|
|
|
export function getSentinelCategory(bundleId: string): SentinelCategory | null {
|
|
if (SHELL_ACCESS_BUNDLE_IDS.has(bundleId)) return "shell";
|
|
if (FILESYSTEM_ACCESS_BUNDLE_IDS.has(bundleId)) return "filesystem";
|
|
if (SYSTEM_SETTINGS_BUNDLE_IDS.has(bundleId)) return "system_settings";
|
|
return null;
|
|
}
|