🔒 全面加固跨世界 GM RPC、用户脚本、Sandbox 与 Agent 边界 - #1747

Draft

cyfung1031 wants to merge 243 commits into

scriptscat:mainfrom

cyfung1031:codex/main-world-security-refactor

Commits on Sep 16, 2026

🔒 harden MAIN-world GM RPC capability binding
cyfung1031
committed
c0444dc
🐛 allow async GM XHR page RPC alias
cyfung1031
committed
a6e69ed
🔒 harden userscript invocation against page substitution
cyfung1031
committed
ef945e8

Commits on Sep 17, 2026

🔒 isolate USER_SCRIPT GM transport and binding rotation
cyfung1031
committed
1eb1839
🐛 route USER_SCRIPT GM calls to service worker
cyfung1031
committed
3037623
🧹 format USER_SCRIPT transport regression test
cyfung1031
committed
25714ff
🔒 harden page and USER_SCRIPT execution bindings
cyfung1031
committed
a46b042
🔒 secure USER_SCRIPT bootstrap and page capability checks
cyfung1031
committed
d65bcf3
🐛 preserve GM API registry enumeration
cyfung1031
committed
e1ccf07
🐛 make GM API registry merge-compatible
cyfung1031
committed
9f98995
⚡ reduce native reflection overhead
cyfung1031
committed
9868594
⚡ reduce content callback overhead
cyfung1031
committed
f49053a
Merge remote-tracking branch 'origin/main' into codex/main-world-security-refactor
cyfung1031
committed
d56b7a8
⚡ avoid receiver binding for pure agent APIs
cyfung1031
committed
47c2704
⚡ capture native collection methods on subclasses
cyfung1031
committed
8bcad36
⚡ remove GM API receiver binding
cyfung1031
committed
f2aad91

Commits on Sep 18, 2026

⚡️ reduce runtime function overhead
cyfung1031
committed
f13f7e2
⚡️ remove redundant native collection factories
cyfung1031
committed
edc3ab3
⚡️ simplify native set initialization
cyfung1031
committed
b5007df
📄 补充跨世界安全边界维护注释
 cyfung1031
committed
4d194e1
🔒 separate asynchronous page RPC transport
cyfung1031
committed
9d0de58
🔒 hide GM broker state behind script facade
cyfung1031
committed
3448728
🔒 reject executable values at GM clone boundaries
cyfung1031
committed
6a014bf
🐛 settle GM XHR aborts without callbacks
cyfung1031
committed
eb66888
🐛 continue page script loading after early reconciliation
cyfung1031
committed
1d0dd85
🔒 clone DOM bridge payloads before validation
cyfung1031
committed
7780934
🔒 validate Blob page RPC payloads
cyfung1031
committed
2993bbc
🔒 reject executable GM values
cyfung1031
committed
9c0650d
🔒 reject non-cloneable GM values
cyfung1031
committed
398c884
🔒 harden page RPC intrinsic boundaries
cyfung1031
committed
06bbf29
🐛 preserve zero-valued tab identities
cyfung1031
committed
4a4a127
🐛 delete falsy GM values consistently
cyfung1031
committed
a5a9b84
🔒 avoid accessor execution in GM_setValues
cyfung1031
committed
340fea9
🔒 preserve none grant capability boundary
cyfung1031
committed
884642a
🔒 capture grant alias intrinsics
cyfung1031
committed
3d45436
🔒 isolate grant capability map lookups
cyfung1031
committed
764a550
🔒 harden capability collection construction
cyfung1031
committed
525b2ed
🔒 seal page RPC collection iteration
cyfung1031
committed
c37446a
🐛 honor early GM XHR aborts
cyfung1031
committed
18255a0
🐛 settle GM XHR connection failures
cyfung1031
committed
ad61560
🐛 settle GM XHR setup errors
cyfung1031
committed
68f4d3c
🔒 discard stale page load bindings
cyfung1031
committed
f4edd72
🔒 harden GM value transport collection writes
cyfung1031
committed
842d5ee
🔒 bind page execution handles to navigation URL
cyfung1031
committed
fa26a1b
🔒 hide CAT conversation state behind private fields
cyfung1031
committed
86193c0
🔒 close GM XHR connections on setup failure
cyfung1031
committed
0bc23a6
🔒 avoid accessor execution in GM DOM attributes
cyfung1031
committed
35b6766
🔒 copy GM menu options without accessors
cyfung1031
committed
cb49bf8
🔒 copy GM XHR headers without accessors
cyfung1031
committed
ef3adf5
🔒 copy GM tab options without accessors
cyfung1031
committed
5acba1b
🔒 copy notification details without accessors
cyfung1031
committed
13d6645
⚡️ reduce USER_SCRIPT callback dispatch scans
cyfung1031
committed
6bf76fd
🔒 prune revoked USER_SCRIPT connections
cyfung1031
committed
714008e
🔒 harden USER_SCRIPT reconnect sessions
cyfung1031
committed
63b01b3
🔒 validate inject page bootstrap DTOs
cyfung1031
committed
3a8c561
🔒 validate inject runtime callback DTOs
cyfung1031
committed
cf9ee7b
🔒 avoid duplicate USER_SCRIPT bootstrap execution
cyfung1031
committed
d2b2d84
🔒 route MAIN privileged traffic over native channel
cyfung1031
committed
a64a1cb
🔒 redact early-start preload values
cyfung1031
committed
281e449
🔒 settle XHR errors without broker loadend
cyfung1031
committed
50a08b2
🔒 isolate protected GM facade keys
cyfung1031
committed
b84ccaf
🔒 keep service worker bridge bundle DOM-free
cyfung1031
committed
cfb698c
🔒 validate USER_SCRIPT bridge DTOs
cyfung1031
committed
8df243d
🔒 bind CAT tasks to script owners
cyfung1031
committed
beb742c
🔒 bind CAT conversations to script owners
cyfung1031
committed
e2738c9
🔒 bind USER_SCRIPT tokens to page URLs
cyfung1031
committed
283edd2
🔒 bind early-start metadata to injected wrappers
cyfung1031
committed
c8516c9
🔒 restore early-start manifest execution
cyfung1031
committed
20d39af
🔒 retire stale page bindings on navigation
cyfung1031
committed
3372fbe
🔒 bind CAT agent service identities
cyfung1031
committed
f371261
🔒 target private callbacks to frame zero
cyfung1031
committed
3ab6b2d
🔒 bind DOM monitors to script owners
cyfung1031
committed
2f5b1fb
🔒 gate MAIN page bootstrap transport
cyfung1031
committed
1f769a6
🔒 preserve USER_SCRIPT native fallback
cyfung1031
committed
2f8dcd6
🔒 queue USER_SCRIPT value updates across reconnects
cyfung1031
committed
901016d
🔒 protect GM value stores from prototype keys
cyfung1031
committed
643af56
🔒 reject hostile page message envelopes
cyfung1031
committed
8f4cf28
🔒 validate sandbox message envelopes
cyfung1031
committed
5b25310
🔒 validate custom event envelopes
cyfung1031
committed
898fcc4
🔒 guard server action dispatch inputs
cyfung1031
committed
35ce581
🔒 inspect collection payload entries before cloning
cyfung1031
committed
276196c
🔒 validate collection RPC payloads without accessors
cyfung1031
committed
c783a7a
🔒 remove live document references from CAT fetch
cyfung1031
committed
671c445
🔒 bind early-start wrappers to document URLs
cyfung1031
committed
284b968
🔒 reject page RPC replay window overflow
cyfung1031
committed
3693b58
🔒 close service worker page RPC replay window
cyfung1031
committed
9cf16de
🔒 validate page RPC identity before replay state
cyfung1031
committed
9dd323e
🔒 harden GM value result records
cyfung1031
committed
2acb238
🔒 restrict script attachment reads
cyfung1031
committed
39b695d
🔒 keep MAIN script payload off page bridge
cyfung1031
committed
c46dfe1
🔒 isolate service worker value records
cyfung1031
committed
deea129
🔒 serialize CDP monitor transitions
cyfung1031
committed
71022c7
🔒 allow long-lived page RPC bindings
cyfung1031
committed
8528137
🔒 preserve early wrappers across same-document navigation
cyfung1031
committed
96c577c
🔒 require a native MAIN page-load handshake
cyfung1031
committed
6ee8ba4
✅ bound E2E waits and replay invariant tests
cyfung1031
committed
babadbc
🔧 restore PR E2E timeout settings
cyfung1031
committed
0541cdb
🔒 route MAIN bootstrap over extension transport
cyfung1031
committed
3217aca

Commits on Sep 19, 2026

🔒 restore MAIN bootstrap page load
cyfung1031
committed
dbad992
⚡️ 优化跨上下文消息解析热路径
 cyfung1031
committed
0057ee8
⚡️ 精简跨上下文消息体校验
 cyfung1031
committed
cf6cf21
⚡️ reuse PageMessage connection sender
cyfung1031
committed
2d8a75a
⚡️ 优化 structuredClone 调用
 cyfung1031
committed
5b07c7e
📚 更新 Agent 与消息传输架构文档
 cyfung1031
committed
dcd220c
📄 Pareto review tracked documentation
cyfung1031
committed
d9cb85c

Commits on Sep 20, 2026

🧪 修复 Vitest 测试框架版本固定
 cyfung1031
committed
1937c31
Merge remote-tracking branch 'origin/main' into codex/main-world-security-refactor
cyfung1031
committed
46b639a
revert sctest version from 8d6f7eb7319601d0c76a58595803dcbf37b24c12 to b8c6d0839c75ee5e4e4276dd10e201011c445df8
cyfung1031
committed
6a471df
🔒 harden MAIN-world userscript capabilities
cyfung1031
committed
973f0c1
📝 clarify MAIN-world transport and execution
cyfung1031
committed
3bf259f
Revert "📝 clarify MAIN-world transport and execution"
cyfung1031
committed
04b9ff5
Revert "🔒 harden MAIN-world userscript capabilities"
cyfung1031
committed
164b07e
🔒 revert descriptor-as-authentication drift in MAIN-world mount

cyfung1031
and
claude
committed
4691fa7
✅ lock MAIN-world fallback compatibility
cyfung1031
committed
fc195a8
🔒 harden userscript wrapper provenance
cyfung1031
committed
4b08699
🔒 use template interpolation for wrapper validation
cyfung1031
committed
4b9b7d3
🔒 harden userscript sandbox intrinsics
cyfung1031
committed
989bc31
🔒 restore captured wrapper source validation
cyfung1031
committed
5e36545
🧹 simplify MAIN fallback regression coverage
cyfung1031
committed
6f4a94e

Commits on Sep 21, 2026

🔒 reject stale early-start privilege binding
cyfung1031
committed
76f7fea
🔒 bound page GM replay state and tighten validation
cyfung1031
committed
50853d7
🔒 bind compiled revisions to registered userscripts
cyfung1031
committed
a01653b
🔒 bind early wrappers to compiled revisions
cyfung1031
committed
2f06a1c
📝 document MAIN fallback security boundary
cyfung1031
committed
23cd962
🔒 attach executionHandle to MAIN-world page RPC requests

cyfung1031
and
claude
committed
487bfb8
🔒 unify context-menu grant policy across page RPC consumers

cyfung1031
and
claude
committed
bd39276
🔒 restrict executionHandle to the direct-SW page RPC transport

cyfung1031
and
claude
committed
311e133
⚡️ compact the generated MAIN-world wrapper source

cyfung1031
and
claude
committed
232a331
`Native.functionToString` is not necessary. (over-engineering)
cyfung1031
committed
c3a1fd3
`structuredClone` function binding is not necessary. (over-engineering)
cyfung1031
committed
7f08c4a
Revert "`Native.functionToString` is not necessary. (over-engineering)"
cyfung1031
committed
5d95b05
⚡️ skip descriptor machinery for the null-prototype event-descriptor map

cyfung1031
and
claude
committed
7e4e277
⚡️ assign directly into GM_getValues' null-prototype result record

cyfung1031
and
claude
committed
06c090e
⚡️ assign directly into getScriptValueDetails' null-prototype record

cyfung1031
and
claude
committed
2198a52
🔒 harden Native.bind argument delivery

cyfung1031
and
claude
committed
5d9b567
🐛 allow replay windows to advance across large forward gaps

cyfung1031
and
claude
committed
2062b5f
🔒 narrow Page RPC v2 wire identity to handle

cyfung1031
and
claude
committed
c150157

Commits on Sep 22, 2026

🔒 harden value-listener storage and invocation

cyfung1031
and
claude
committed
4c2454a
Merge remote-tracking branch 'origin/main' into claude/pr1747-pareto-refactor-7c31b0
cyfung1031
committed
92fcb97
🔒 simplify context lifecycle visibility boundary

cyfung1031
and
claude
committed
9055980
♻️ remove pseudo-window descriptor scaffolding

cyfung1031
and
claude
committed
601e550
🔒 bind and migrate normal wrappers to compiled revisions

cyfung1031
and
claude
committed
caf1e26
🔒 reject normal wrappers from a different compiled revision

cyfung1031
and
claude
committed
efd82a7
🔒 fix compiled wrapper closure binding
cyfung1031
committed
c6894af
🔒 constrain page-load keys before runtime object merge

cyfung1031
and
claude
committed
7a04703
✅ lock runtime merge prototype invariants

cyfung1031
and
claude
committed
57de77b
🔒 validate CAT stream events at page-bridge ingestion

cyfung1031
and
claude
committed
04cbba2
Revert "🔒 validate CAT stream events at page-bridge ingestion"
cyfung1031
committed
75732b5
Revert "✅ lock runtime merge prototype invariants"
cyfung1031
committed
8caf020
Revert "🔒 constrain page-load keys before runtime object merge"
cyfung1031
committed
9b41f65
🔒 validate CAT stream events at page-bridge ingestion

cyfung1031
and
claude
committed
fafb56f
🔒 install trusted state as own data properties instead of Object.assign

cyfung1031
and
claude
committed
41b55e7
Merge branch 'main' into codex/main-world-security-refactor
cyfung1031
committed
c42f058

Commits on Sep 23, 2026

refactor(message): hide MAIN bridge behind keyed performance events
cyfung1031
committed
e95fce8
refactor(main-world): remove native fallback state machine
cyfung1031
committed
d02ae34
✅ verify MAIN keyed bridge bootstrap
cyfung1031
committed
0c6d815
docs(message): document keyed MAIN bridge policy
cyfung1031
committed
cbccf45
🎨 format keyed message transport
cyfung1031
committed
0ee327e
📄 correct MAIN bridge documentation
cyfung1031
committed
29e2b88
🔒 isolate deferred navigation URL checks
cyfung1031
committed
12372d2
🐛 support Node MessageChannel fallback
cyfung1031
committed
ba6f24e
🔒 route sandbox traffic through private MessagePort
cyfung1031
committed
2b59e40
🧪 make sandbox MessagePort leak E2E event-driven
cyfung1031
committed
c6e5551
🔒 harden private MessagePort event reads
cyfung1031
committed
43cae45
📚 document private sandbox MessagePort boundary
cyfung1031
committed
2070210
fix coding
cyfung1031
committed
c6e16a0
🐛 avoid browser MessageChannel getter invocation
cyfung1031
committed
c08a879

Commits on Sep 24, 2026

📚 document MessageChannel build fallback
cyfung1031
committed
0c810f0
fix(gm): restore userscript storage clone compatibility
cyfung1031
committed
39bd3cd
test(gm): cover storage clone compatibility semantics
cyfung1031
committed
2639098
test(gm): align proxy expectations with compatibility fallback
cyfung1031
committed
e09d053
fix(early-start): restore synchronous preload state
cyfung1031
committed
e57e202
fix(early-start): preserve pre-bootstrap value writes
cyfung1031
committed
a4625f4
perf(early-start): prefetch authoritative page bootstrap
cyfung1031
committed
8f54306
style(early-start): format bootstrap prefetch
cyfung1031
committed
415fe43
fix(early-start): normalize bootstrap prefetch formatting
cyfung1031
committed
b6152a4
test(early-start): lock first-line synchronous GM state
cyfung1031
committed
34f3131
fix(value): serialize early snapshot refresh with storage commits
cyfung1031
committed
16d1ef0
fix(early-start): refresh shared storage snapshots atomically
cyfung1031
committed
536b9a9
refactor(early-start): decouple storage values from script revision
cyfung1031
committed
617d935
test(early-start): isolate snapshot batch assertions
cyfung1031
committed
a66ca1d
perf(early-start): keep value refresh out of static caches
cyfung1031
committed
cf296a4
test(early-start): lock promise storage freshness barrier
cyfung1031
committed
6838d2f
style(early-start): match runtime formatting
cyfung1031
committed
1898b8a
fix(storage): await mutation freshness before UI success
cyfung1031
committed
bb583f8
fix(early-start): serialize registration mutations
cyfung1031
committed
b9c7480
style(early-start): normalize registration update method
cyfung1031
committed
2404c5e
test(gm): add storage clone compatibility userscript
cyfung1031
committed
eba8a38
style(test): format storage clone e2e
cyfung1031
committed
c4c45f6
fix(gm): resolve async value writes from RPC completion
cyfung1031
committed
6cccc00
fix(early-start): recover snapshot refresh without blocking storage
cyfung1031
committed
efe6226
test(early-start): fix snapshot refresh coverage
cyfung1031
committed
bbab274
perf(early-start): reuse committed values and page cache
cyfung1031
committed
9857747
test(early-start): lock value refresh fast path
cyfung1031
committed
7d8e3fb
test(early-start): stabilize snapshot refresh assertions
cyfung1031
committed
6f6beb5
fix(early-start): isolate snapshot maintenance failures
cyfung1031
committed
11561c7
fix(gm): preserve async batch rejection semantics
cyfung1031
committed
cab82e9
style(early-start): match runtime prettier layout
cyfung1031
committed
2fb51b3
lint fix
cyfung1031
committed
0d9c602
lint(gm): remove obsolete value update id binding
cyfung1031
committed
270ff47
fix(gm): normalize storage values before local mutation
cyfung1031
committed
76e7ce4
test(gm): lock storage value normalization compatibility
cyfung1031
committed
917b48d
test(gm): allow ScriptCat and Tampermonkey top-level storage results
cyfung1031
committed
7a8210b
test(e2e): surface page errors before SCTest timeout
cyfung1031
committed
a60caa1
Revert "test(e2e): surface page errors before SCTest timeout"
cyfung1031
committed
0d954f9

Commits on Sep 27, 2026

fix(values): encode non-finite numbers losslessly
cyfung1031
committed
4625b06
fix(gm): align all-values dictionary shape
cyfung1031
committed
8b6adca
fix(gm): align storage serialization with measured behavior
cyfung1031
committed
d0cac19
fix(gm): align top-level BigInt storage behavior
cyfung1031
committed
dd0e17c
test(gm): lock deep storage compatibility behavior
cyfung1031
committed
c2316e0
test(gm): expand deep storage persistence matrix
cyfung1031
committed
778f8ed
test(gm): accept measured cross-manager storage variants
cyfung1031
committed
ac5a0d8
test(gm): separate transient storage compatibility states
cyfung1031
committed
6394630
test(e2e): fail fast on userscript startup errors
cyfung1031
committed
27e8d2c
🐛 avoid replying to disconnected RPC callers
cyfung1031
committed
b1f88e5
✅ compare storage snapshots independent of key order
cyfung1031
committed
1faba89
✅ handle expected GM XHR abort rejection
cyfung1031
committed
da06f27
✅ use the E2E error buffer constant
cyfung1031
committed
a07d5cd
♻️ reuse shared page message envelope
cyfung1031
committed
b4eca47
♻️ simplify sandbox channel bootstrap marker
cyfung1031
committed
277ce9a
♻️ narrow CAT stream event validation
cyfung1031
committed
5aaadd5
🧪 matrix unsupported top-level storage values
cyfung1031
committed
010726d
🧪 matrix effective grants across page worlds
cyfung1031
committed
9d41b5c
🧪 reuse early execution fixture in executor tests
cyfung1031
committed
203b63a
♻️ remove redundant page RPC declarations
cyfung1031
committed
d04d2fe
♻️ centralize USER_SCRIPT delivery match
cyfung1031
committed
062c5b6
📝 shorten data installer comments
cyfung1031
committed
2c9f226
🧪 matrix early snapshot failure outcomes
cyfung1031
committed
5d2d709

Commits on Sep 28, 2026

✅ consolidate GM storage example tests
cyfung1031
committed
315d278
✅ run GM storage suites from one URL
cyfung1031
committed
9b09dc0
🔀 sync latest main into PR #1747
cyfung1031
committed
1b52de9
♻️ reuse WindowMessageConnect for page event channels
cyfung1031
committed
735dc75
🧪 consolidate early-start executor fixtures
cyfung1031
committed
bc83cab
🧪 matrix repeated page RPC policy regressions
cyfung1031
committed
9dfb1d3

Commits on Sep 29, 2026

🧪 fix GM XHR E2E summary accounting
cyfung1031
committed
a758ca7
Update gm_storage_test.js
cyfung1031
committed
ee351f7
test(e2e): align GM storage summary expectation
cyfung1031
committed
5f8a64b
Update gm-api.spec.ts
cyfung1031
committed
8ad8eed
Merge branch 'main' into codex/main-world-security-refactor
cyfung1031
committed
cc19578
chore: remove unused SC_ZN_RAND define
cyfung1031
committed
33065d6
refactor: make stream shape assertions type-only
cyfung1031
committed
88594ad
引入 realmBridgeToken 减低监听风险
 cyfung1031
committed
1a890a2

Commits on Sep 30, 2026

realmBridgeToken -> realmBridgeFaceID
cyfung1031
committed
5a7ea5d