20:"$Sreact.view_transition" 21:I[9754,["/_next/static/chunks/2t36f5p4pjzlb.js","/_next/static/chunks/1gyqeidjm5eoa.js","/_next/static/chunks/0_fjnxc4tt_l_.js","/_next/static/chunks/1ymt1shyhmu-4.js","/_next/static/chunks/3kv2zf0i7s2wc.js","/_next/static/chunks/1vs_3g_g75zmk.js","/_next/static/chunks/2g4dh802s8oz3.js","/_next/static/chunks/1bc3f0shukf1j.js","/_next/static/chunks/192kgs9v_t14j.js","/_next/static/chunks/0z6pw0v5c_lx5.js","/_next/static/chunks/08r60e6icmtkc.js","/_next/static/chunks/3trx6c0i7_x-3.js","/_next/static/chunks/40sro5bzp9bi_.js","/_next/static/chunks/1wgf3tk38y6cf.js"],"ProjectDetail"] 22:T5022, Desktop Commander MCP · 指令公证台账

MCP 服务器 · 指令公证台账

每条 AI 指令，
皆有前序、有证明、有去处。

Desktop Commander MCP 是为 Claude 而设的 MCP 服务器：它让 AI 获得终端控制、文件系统搜索与差异文件编辑的能力，而每一步都被承载、校验并对账为一份可追踪的机器动作。

仓库 wonderwhy-er/desktopcommandermcp 语言 TypeScript 许可 MIT 阶段 Prototype

意图 Intent校验 Verify落地 Execute

T+0.0s 搜索文件系统 / search PENDING 读取相对路径 · 递归

#0042 校验放行 / verify VERIFIED 通过护栏 · 无歧义

…… 落地写回 / write EXECUTED 差异写入 · 可回读

意图校验落地分录流水 · 可追溯而非速度

从意图到落地，
每一笔都落进台账

命令并非凭空发生。一句意图先被校验，再被放行，最终作为可追踪的动作写下。台账以分录形式记载过程、时间戳与状态，而非把终端当背景板展示。

分录	意图 → 校验 → 落地	能力	状态	退回
#0041	读取文本文件并按需修改	文件读写	VERIFIED	T+0.12s
#0042	递归列出目录并搜索文件	系统搜索	VERIFIED	T+0.09s
#0043	执行长时间运行的终端命令	终端控制	EXECUTED	streaming …
#0044	对代码做外科手术式差异替换	差异编辑	VERIFIED	T+0.05s

不是特性墙，
是一组可记账的操作

能力以分录列而非卡片陈列：每笔操作都有归属、有读写方向、有落点编辑位。它们共同构成 AI 在终端与文件间的行使半径。

A. TERMINAL

终端控制与进程管理

执行长时间运行的命令
进程与会话生命周期管理
输出流式传输与分页

B. FILESYSTEM

多格式文件读写

读写文本、Excel、PDF、DOCX
递归目录列表与文件移动
全量搜索范围内定位

C. DIFF

差异文件编辑

外科手术式文本替换
完整文件重写
多文件与基于模式的重写

D. REMOTE

远程 AI 控制

经 Remote MCP 从 ChatGPT、Claude web 使用
把终端与文件能力带到云端会话

放行与拦截，
写在同一本账上

护栏不是沙箱，而是一套在行动前与行动时都记上一笔的规则：能放行的放行，该拦截的拦截，需越界的以 Docker 隔离处理。这里注明真实边界而非亮闪闪的安全标语。

放行 · 已验证

VERIFIED

限定路径下读取与搜索

递归列表与移动文件须落在授权目录，越出即被拦截。

VERIFIED

符号链接放行前的检查

越过符号链接遍历防护才会放行，避免逃逸出边界。

拦截 / 隔离 · 需放行

BLOCKED

命令黑名单

被列入黑名单的命令在签发即被挡下，不进入执行分录。

ISOLATED

Docker 隔离选项

需要越界的操作转入隔离环境执行，并在台账上单独标记。

以一行命令，
开启第一笔分录

安装与落地都写在明面：命令、环境、许可与状态字段一并入账，便于逐项核验。

$ npx @wonderwhy-er/desktop-commander@latest setup

环境需要 Node.js 或 Docker
安装Claude Desktop 及其它 MCP 客户端
许可MIT · 源码公开可审阅

$ npx @wonderwhy-er/desktop-commander@latest remove

回退可移除并重置持久化数据
核验安全防护非沙箱，需谨慎授权
提示部分功能依赖 MCP 客户端支持

每条命令，都签下自己的来路与去处。

wonderwhy-er / DesktopCommanderMCP
TypeScript · MIT · MCP 服务器
desktopcommander.app · GitHub

23:T4bda, Desktop Commander MCP · Command Attestation Ledger

MCP server · command attestation ledger

Every AI command
has a precedent, a proof, a destination.

Desktop Commander MCP is an MCP server for Claude. It hands the model terminal control, filesystem search, and diff-file editing — and every step is carried, checked, and reconciled into a traceable machine action.

Repo wonderwhy-er/desktopcommandermcp Language TypeScript License MIT Stage Prototype

IntentVerifyExecute

T+0.0s search filesystem PENDING scoped path · recursive

#0042 check & verify VERIFIED passed guardrail · unambiguous

…… write & close EXECUTED diff written · re-checkable

IntentVerifyExecute entry stream · traced, not timed

From intent to effect,
every entry hits the ledger

Commands do not happen out of thin air. An intent is verified, released, then written as a traceable action. The ledger records the what, the when, and the state — its texture is a book of entries, not a terminal backdrop.

Entry	intent → verify → execute	capability	state	return
#0041	Read a text file and amend it on request	file read/write	VERIFIED	T+0.12s
#0042	Recursively list a directory and search files	filesystem search	VERIFIED	T+0.09s
#0043	Run a long-running terminal command	terminal control	EXECUTED	streaming …
#0044	Apply a surgical diff edit to code	diff editing	VERIFIED	T+0.05s

Not a wall of features,
a set of bookable operations

Capabilities are entered as ledger columns rather than displayed as cards: each operation carries a scope, a read/write direction, and an edit site. Together they draw the radius of what the agent may do across terminal and files.

A. TERMINAL

Terminal & process control

Run long-running commands
Manage process and session lifecycles
Stream output with pagination

B. FILESYSTEM

Multi-format file read/write

Read and write text, Excel, PDF, DOCX
Recursive directory listing and file moves
Locate within a full search scope

C. DIFF

Diff file editing

Surgical text replacements
Complete file rewrites
Multi-file and pattern-based rewrites

D. REMOTE

Remote AI control

Use from ChatGPT, Claude web via Remote MCP
Carry terminal and file power into cloud sessions

Release and block,
both on the same page

Guardrails are not a sandbox. They are a set of rules that post an entry before and during an action: release what is safe, block what is not, and isolate what needs to cross. This is the real boundary, stated plainly rather than as a security slogan.

Release · verified

VERIFIED

Reads and searches inside a scoped path

Recursive listing and file moves stay within an authorized directory; crossing out is blocked.

VERIFIED

Symlink traversal checked first

A release only happens past the symlink traversal prevention, so nothing escapes the boundary.

Block / isolate · needs release

BLOCKED

Command blocklist

Listed commands are stopped at issuance and never reach the execution entry.

ISOLATED

Docker isolation option

Operations that must cross run in an isolated environment and carry their own ledger mark.

One line opens
the first entry

Setup and landing are posted in the open: the command, the environment, the license, and the status fields all go on record for verification item by item.

$ npx @wonderwhy-er/desktop-commander@latest setup

EnvironmentRequires Node.js or Docker
InstallClaude Desktop and other MCP clients
LicenseMIT · source open for review

$ npx @wonderwhy-er/desktop-commander@latest remove

RevertRemoves and resets persistent data
VerifyGuardrails are not a sandbox — authorize with care
NoteSome features depend on MCP client support

Every command signs its own provenance and course.

wonderwhy-er / DesktopCommanderMCP
TypeScript · MIT · MCP server
desktopcommander.app · GitHub

每条 AI 指令，皆有前序、有证明、有去处。

从意图到落地，每一笔都落进台账

不是特性墙，是一组可记账的操作

终端控制与进程管理

多格式文件读写

差异文件编辑

远程 AI 控制

放行与拦截，写在同一本账上

限定路径下读取与搜索

符号链接放行前的检查

命令黑名单

Docker 隔离选项

以一行命令，开启第一笔分录

Every AI commandhas a precedent, a proof, a destination.

From intent to effect,every entry hits the ledger

Not a wall of features,a set of bookable operations

Terminal & process control

Multi-format file read/write

Diff file editing

Remote AI control

Release and block,both on the same page

Reads and searches inside a scoped path

Symlink traversal checked first

Command blocklist

Docker isolation option

One line opensthe first entry

每条 AI 指令，
皆有前序、有证明、有去处。

从意图到落地，
每一笔都落进台账

不是特性墙，
是一组可记账的操作

放行与拦截，
写在同一本账上

以一行命令，
开启第一笔分录

Every AI command
has a precedent, a proof, a destination.

From intent to effect,
every entry hits the ledger

Not a wall of features,
a set of bookable operations

Release and block,
both on the same page

One line opens
the first entry