daniel.w
/
AnyBot
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
AnyBot/src
History
AnyBot Dev 410aa75690 Say what the walls are: SECURITY.md + threat model (P5) 
- SECURITY.md (zh) + docs/en/security.md: trust boundaries (app /
  box / Docker API / relay / providers), where every secret lives and
  what a thief holding that thing actually gets, the injection layers
  with an honest limit (no absolute defense — the human at the gate
  is the last line), the network surface, the known-limits list and
  hardening advice
- state.json is written 0600: it carries model keys, and now says so
  with its permissions like the vault's key file
- README (zh + en) link it; reporting = private security advisory
 		2026-11-09 20:33:56 +08:00
..
app Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
agent.rs Meaning beside the words: local embeddings + a document shelf (P6, step 2) 2026-11-09 20:23:35 +08:00
app.rs Shortcuts before GUI (C6): the one-step doors, registered 2026-11-09 20:30:38 +08:00
appctl.rs Memory, searched not carried: FTS index + event log (P6, step 1) 2026-11-09 18:15:24 +08:00
attach.rs Real-use fixes: the person sees the screens the bot shows, files reach the phone, no blank-tab loops 2026-11-06 19:37:45 +08:00
avatar.rs AnyBot: first commit of the working desktop app 2026-11-04 16:51:51 +08:00
axread.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
axwrite.rs High-level semantic actions: menu_click, fill_form, wait_for, batch expect (C3) 2026-11-09 17:15:58 +08:00
bidi.rs AnyBot's browser drives Firefox too, the person's own Firefox profiles included 2026-11-08 00:55:17 +08:00
botbrowser.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
browser.rs System prompt speaks the one-tool shape (H2 follow-up) 2026-11-09 18:12:18 +08:00
channels.rs Routines follow the clock in each timezone; channels resume where they stopped; pages find checks the bot 2026-11-05 15:48:22 +08:00
cloudbox.rs Merge c4/tree-diff: screenshot diffs (C4) 2026-11-09 17:12:25 +08:00
computer.rs Shortcuts before GUI (C6): the one-step doors, registered 2026-11-09 20:30:38 +08:00
desk.rs Linux: the front app is found by its program, and accessibility is switched on when it's off 2026-11-08 00:58:18 +08:00
desktop.rs The quick model runs again, the Mac's own menus get numbers, and an unread window is said 2026-11-09 14:58:40 +08:00
diagram.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
docindex.rs Meaning beside the words: local embeddings + a document shelf (P6, step 2) 2026-11-09 20:23:35 +08:00
egress.rs Egress proxy: bind loopback + detected Docker bridge gateways, never 0.0.0.0 2026-11-09 16:46:47 +08:00
embed.rs Meaning beside the words: local embeddings + a document shelf (P6, step 2) 2026-11-09 20:23:35 +08:00
facts.rs Shortcuts before GUI (C6): the one-step doors, registered 2026-11-09 20:30:38 +08:00
httpd.rs Relay 2FA: TOTP + recovery codes, argon2id, one-page logout (S2) 2026-11-09 17:52:42 +08:00
i18n.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
i18n_table.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
icons.rs Remove what nothing uses and keep one copy of what was written several times 2026-11-05 23:21:47 +08:00
intents.rs Shortcuts before GUI (C6): the one-step doors, registered 2026-11-09 20:30:38 +08:00
lock.rs One AnyBot per data folder: a second copy says so instead of opening 2026-11-09 00:49:42 +08:00
macapps.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
main.rs Shortcuts before GUI (C6): the one-step doors, registered 2026-11-09 20:30:38 +08:00
marks.rs Merge s3/injection: injection defences + red-team bench (S3) 2026-11-09 17:20:10 +08:00
mcp.rs Compaction keeps tool pairs; MCP locks per server; the chosen computer needs whole words to move 2026-11-05 15:48:20 +08:00
memory.rs Memory, searched not carried: FTS index + event log (P6, step 1) 2026-11-09 18:15:24 +08:00
mic.rs Demo recording keeps its last events off the UI thread; dialogs, screensaver probe and installer traps fixed 2026-11-05 15:48:22 +08:00
model.rs Say what the walls are: SECURITY.md + threat model (P5) 2026-11-09 20:33:56 +08:00
notify.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
oplog.rs wip: sqlite audit trail 2026-11-09 18:00:56 +08:00
pages.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
phone.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
platform.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
policy.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
portal.rs Stream deltas keep tool-call slots; chunked bodies accepted; portal sessions race-safe 2026-11-05 15:48:20 +08:00
preview.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
providers.rs Merge c1/prompt-cache: Anthropic prompt caching 2026-11-09 16:44:57 +08:00
remote.rs Audit timeline: what this turn did, on the phone (S5) 2026-11-09 17:59:26 +08:00
routines.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
setup.rs One AnyBot per data folder: a second copy says so instead of opening 2026-11-09 00:49:42 +08:00
share.rs Export drops threads; a broken keyring stops with the secret recoverable 2026-11-05 15:48:20 +08:00
store.rs Meaning beside the words: local embeddings + a document shelf (P6, step 2) 2026-11-09 20:23:35 +08:00
teach.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
teams.rs Remove what nothing uses and keep one copy of what was written several times 2026-11-05 23:21:47 +08:00
theme.rs Remove what nothing uses and keep one copy of what was written several times 2026-11-05 23:21:47 +08:00
tools.rs Meaning beside the words: local embeddings + a document shelf (P6, step 2) 2026-11-09 20:23:35 +08:00
triggers.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
tunnel.rs HTTPS on the local network's own IP, with a certificate the server signs itself 2026-11-07 21:27:07 +08:00
vault.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
vault_store.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
vnc.rs Whole control flow checked against real chats: what the bot sees is what is there, every step lands, nothing done twice 2026-11-06 17:44:59 +08:00
voice.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
web.rs One browser tool: 25 schemas → 2, actions like the CUA prior (H2) 2026-11-09 18:11:36 +08:00
wire.rs Remove what nothing uses and keep one copy of what was written several times 2026-11-05 23:21:47 +08:00
wl.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
x11.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00