Leo
0 Followers · 0 Following
Repositories
7
 Projects Packages Public Activity Starred Repositories
Leo created branch fix/acr-update-gitea-source in Leo/Arcrun 2026-07-07 08:13:17 +00:00
Leo pushed to fix/acr-update-gitea-source at Leo/Arcrun 2026-07-07 08:13:17 +00:00
794e3eba3a fix(cli): acr update/deploy 下載源由 GitHub codeload 改指 Gitea archive（Arcrun#4）
Leo opened issue Leo/Arcrun#24 2026-07-07 08:07:44 +00:00
[總管交辦] 搜尋 Portal 拆分：獨立的知識庫查詢面（登入殼＋三模式＋溯源，Arcrun 品牌）— rag-wave1 T1
Leo opened issue Leo/Arcrun#25 2026-07-07 08:07:44 +00:00
[總管交辦] Portal 多用戶：user CRUD＋email/密碼登入＋session — rag-wave1 T2
Leo pushed to docs/mcp-readme-install at Leo/Arcrun 2026-07-07 08:06:32 +00:00
5491409003 docs(mcp): README 加「更新 / acr update」段
Leo commented on pull request Leo/Arcrun#22 2026-07-07 07:17:34 +00:00
WIP: docs(mcp): README 改安裝+使用導向，零件投稿拆成 CONTRIBUTING-components.md

[總管] 結構定案（leo 拍板 2026-07-07）：零件貢獻整層搬到獨立 repo Leo/arcrun-components（已建，README＝含紅線框＋PR 人審閘的投稿指南）。對本 PR 的指示更新：

  1. **`mcp/CONTRIBUTING-components…
Leo commented on issue Leo/Arcrun#23 2026-07-07 07:17:34 +00:00
[總管交辦·安全] arcrun_publish_component 零人閘上架——提交即 active/public，MCP 已上 claude.ai 全域＝攻擊面，須加人審閘

[總管] leo 拍板結構解（2026-07-07），本 issue 範圍更新——不做 pending/promote 佇列，直接廢除 MCP 發布路徑：

  1. 下架 arcrun_publish_component MCP 工具（registry 的 POST /components…
Leo opened issue Leo/Arcrun#23 2026-07-07 07:03:54 +00:00
[總管交辦·安全] arcrun_publish_component 零人閘上架——提交即 active/public，MCP 已上 claude.ai 全域＝攻擊面，須加人審閘
Leo commented on pull request Leo/Arcrun#22 2026-07-07 07:03:18 +00:00
WIP: docs(mcp): README 改安裝+使用導向，零件投稿拆成 CONTRIBUTING-components.md

[總管] PR #22 審查——拆分方向對，但 CONTRIBUTING-components.md 照現狀不能 merge，且審查過程挖出一個機制級安全洞（另開 issue #23）。

✅ 通過面

  • README 改安裝+使用導向正確；三種前端安裝、MC…
Leo created pull request Leo/Arcrun#22 2026-07-07 06:39:38 +00:00
docs(mcp): README 改安裝+使用導向，零件投稿拆成 CONTRIBUTING-components.md
Leo created branch docs/mcp-readme-install in Leo/Arcrun 2026-07-07 06:39:13 +00:00
Leo pushed to docs/mcp-readme-install at Leo/Arcrun 2026-07-07 06:39:13 +00:00
0617dab70a docs(mcp): README 改為安裝+使用導向，零件投稿拆成 CONTRIBUTING-components.md
Leo pushed to main at Leo/Arcrun 2026-07-07 06:02:11 +00:00
b13b4dfe49 Merge pull request 'refactor(mcp): u6u_* tool rename → arcrun_* + 前綴收斂單一來源' (#20) from feat/mcp-tool-rename-arcrun into main
9a609c4a04 Merge branch 'main' into feat/mcp-tool-rename-arcrun
53080ffa53 docs(mcp): GUIDE/README 全面改教 arcrun_*，清掉死 u6u_ 工具名
5fc7277c3c refactor(mcp): u6u_* tool 全面 rename 為 arcrun_* + 前綴收斂單一來源
Compare 4 commits »
Leo merged pull request Leo/Arcrun#20 2026-07-07 06:02:10 +00:00
refactor(mcp): u6u_* tool rename → arcrun_* + 前綴收斂單一來源
Leo pushed to feat/mcp-tool-rename-arcrun at Leo/Arcrun 2026-07-07 06:02:08 +00:00
9a609c4a04 Merge branch 'main' into feat/mcp-tool-rename-arcrun
a981dde1d3 Merge pull request 'feat(mcp): OAuth 2.1 server for claude.ai remote connector（修明碼-namespace bearer 漏洞）' (#15) from feat/mcp-oauth-server into main
5fa3b79a4c fix(mcp): validate/normalize RFC 8707 resource at issuance; store canonical aud
92cfb9c59f fix(mcp): address PR #15 review — aud validation, OAUTH_KV auto-inject, TTL/​sunset docs, drift test
7d9d478baa feat(mcp): OAuth 2.1 server for claude.ai remote connector; close plaintext-namespace bearer hole
Compare 5 commits »
Leo pushed to main at Leo/Arcrun 2026-07-07 06:01:53 +00:00
a981dde1d3 Merge pull request 'feat(mcp): OAuth 2.1 server for claude.ai remote connector（修明碼-namespace bearer 漏洞）' (#15) from feat/mcp-oauth-server into main
5fa3b79a4c fix(mcp): validate/normalize RFC 8707 resource at issuance; store canonical aud
92cfb9c59f fix(mcp): address PR #15 review — aud validation, OAUTH_KV auto-inject, TTL/​sunset docs, drift test
7d9d478baa feat(mcp): OAuth 2.1 server for claude.ai remote connector; close plaintext-namespace bearer hole
Compare 4 commits »
Leo merged pull request Leo/Arcrun#15 2026-07-07 06:01:51 +00:00
feat(mcp): OAuth 2.1 server for claude.ai remote connector（修明碼-namespace bearer 漏洞）
Leo opened issue Leo/Arcrun#21 2026-07-07 05:54:32 +00:00
[總管交辦] console 品牌 Mira → Arcrun（GUI 是產品門面，品牌字樣收斂單一來源）
Leo commented on pull request Leo/Arcrun#20 2026-07-07 05:52:43 +00:00
refactor(mcp): u6u_* tool rename → arcrun_* + 前綴收斂單一來源

[總管] 覆核 53080ff 通過 ✅

  • mcp/GUIDE.md／mcp/README.md grep 零 u6u 屬實；已刪 tool 的流程改指現役（validate→push→run），參數修正一併核實。
  • brand.ts 註解釐清、cli/list.ts 範圍補申報，皆…
Leo commented on pull request Leo/Arcrun#15 2026-07-07 05:52:42 +00:00
feat(mcp): OAuth 2.1 server for claude.ai remote connector（修明碼-namespace bearer 漏洞）

[總管] 覆核 5fa3b79 通過 ✅

  • normalizeResource（scheme/host 小寫、去預設 port、去尾斜線）＋等價形接受、存 canonical aud——你的技術裁決正確，比我 review 字面寫的「拒絕等價形」更對：拒等價形…