github/claude-code-best
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
406 Commits 25 Branches 86 Tags 330 MiB
23ea5a67d3
Commit Graph

129 Commits

Author SHA1 Message Date
James Feng
dc71add9d8 feat: register LocalMemoryRecallTool + VaultHttpFetchTool wiring (cherry-pick 5bb0306) 
Upstream: 5bb0306 — feat: 添加 LocalMemoryRecallTool 和 VaultHttpFetchTool

Tool sources were already present in CCP (pulled in via 39ba9a56).
This commit adds the wiring:
- Register LOCAL_MEMORY_RECALL_TOOL_NAME in ALL_AGENT_DISALLOWED_TOOLS
- Add agentToolFilter utility for fork subagent tool inheritance
- Add agentToolFilter tests

Build: 561 files, bun run build ✔
Runtime: ccp --version → 2.6.5 ✔
 2026-06-04 12:10:05 +08:00
claude-code-best
a3ef9a1b12 feat: 添加本地 Memory/Vault 管理命令 
- /local-memory: 本地记忆管理（store/entry CRUD、搜索、归档）
- /local-vault: 本地密钥保险库管理（加解密、keychain 集成）
- permissionValidation: vault 权限校验增强

Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>
 2026-06-04 11:16:18 +08:00
James Feng
0d30c6b064 fix: move ToolSearchTool from packages/builtin-tools/ to src/tools/ 
Eliminates cross-workspace circular dependency that triggered
Bun ARM code-splitting deadlock. The tool's 471-line RL data
collection infrastructure (analytics, GrowthBook, scoring weights,
tool_reference API) is preserved intact.

Changes:
- Move ToolSearchTool.ts, prompt.ts, constants.ts to src/tools/ToolSearchTool/
- Update 11 consumer imports from @claude-code-best/builtin-tools/ to relative paths
- Delete stubs and empty shells (MonitorTool.tsx, WorkflowPermissionRequest.tsx)
- Verify: splitting build succeeds, runtime -p mode responds without deadlock
 2026-06-04 01:15:36 +08:00
James Feng
70bc47eadc fix(security): Phase 4 — fix remaining reachable CodeQL alerts 
Command injection (real fix):
- which.ts: switch to array-args execa, remove shell:true
- execFileNoThrowPortable/execSyncWrapper/imagePaste/execFileNoThrow: security comments

Log injection:
- handlers/mcp.tsx: security comments (secrets already redacted)

ReDoS:
- debugFilter.ts: split regex, add input length guard

Sanitization bypass:
- stripHtml.ts: loop-based script/style removal
- claudemd.ts: loop-based HTML comment stripping
- sedEditParser.ts: single-pass char scan replaces chained replaces
- bingAdapter.ts: URL.hostname comparison instead of string includes

Tests: 3068 pass, 0 fail
 2026-06-03 19:51:17 +08:00
James Feng
a249bbe9a6 fix(security): extract shared stripHtmlToText() utility (fixes #18-24) 
- Create src/utils/stripHtml.ts with he-based HTML-to-text conversion
- Replace bingAdapter's inline regex+decodeHtmlEntities with stripHtmlToText()
- Replace WebBrowserTool's inline regex chain with stripHtmlToText()
- Add stripHtml.test.ts with 6 test cases
- Update bingAdapter test expectation for whitespace normalization

Test: 3068 pass, 0 fail
 2026-06-03 17:05:49 +08:00
James Feng
368dd99d01 fix(security): prevent shell injection in headersHelper (#36) 
- Parse headersHelper command with shell-quote to reject operators
- Call execFileNoThrowWithCwd(cmd, args) without shell: true
- Remove shell option from ExecFileWithCwdOptions type entirely
- Add headersHelper.test.ts with injection rejection test
- Fix existing MCP test mocks for compatibility

Test: MCP tests 91/0, full suite 3058 pass (0 new failures)
 2026-06-03 16:59:16 +08:00
James Feng
f8c3354c75 fix(security): replace URL substring checks with proper URL parsing 
- schemas.ts: add isOfficialGitHubOrgUrl() using new URL() for exact
  hostname validation, preventing evilgithub.com bypass (fixes #41-43)
- install-github-app.tsx: add parseGitHubRepoUrl() with URL + SSH parsing,
  replace includes('github.com') substring check

Test: 3060 pass, 0 fail (4 getLanIPs intermittent, not related)
 2026-06-03 16:50:31 +08:00
James Feng
0c01c93e80 Phase 2a: mechanical dedup — import rewrite to canonical package 
- Migrated src/tools/-only files into packages/builtin-tools/src/tools/
- Rewrote all src/tools/ imports to @claude-code-best/builtin-tools/tools/
- Deleted 121 identical duplicate files from src/tools/
- 238 drifted files preserved in src/tools/ for Phase 2b manual merge
- 359 files changed: 914 insertions, 4042 deletions

Build: 568 files bundled ✓
Test: 3340 pass / 4 fail (baseline) ✓
 2026-06-03 13:54:22 +08:00
James Feng
bad81fdfcc Phase 1: security do-now — redaction helpers + RCS defaults hardened 
- Add src/utils/sensitive.ts: redactUrl/redactValue/redactForLog
- Apply redaction to MCP config printing (mcp.tsx)
- Apply redaction to hard-fail logging (log.ts)
- Apply redaction to chrome native host debug log
- Apply redaction to CLI error output (exit.ts)
- RCS: default bind to 127.0.0.1 instead of 0.0.0.0
- RCS: CORS restricted to localhost + baseUrl whitelist
- pipeTransport: default bind to 127.0.0.1 via PIPE_HOST env
 2026-06-03 13:43:38 +08:00
claude-code-best
b1d322f7cc fix: ACP 模式下 extended thinking + tool_use 触发连续 user 消息导致 400 (CC-1215) 2026-06-02 14:39:19 +08:00
James Feng
27682acf63 feat(bridge): tsc 全绿 — 补齐 Bridge/UDS/TCP/ACP 远程控制链类型 
tsc --noEmit: 26 → 0 ✅
bun run build: 562 files ✅
bun test: 3338 pass (0 regression)

变更 (9 files, +128/-12):
- udsClient.ts: 补 sendToUdsSocket, listAllLiveSessions, LiveSession 类型, PeerInfo 扩展字段
- peerAddress.ts: scheme 联合加 'tcp', 补 parseTcpTarget stub
- peerSessions.ts: 补 listBridgePeers() stub
- channelNotification.ts: 补 ChannelPermissionRequestNotificationSchema + channel_context
- acp-link/command.ts: @stricli/core 类型断言 (as any + optional)
- acp/agent.ts: 完整 AcpAgent stub (implement Agent interface)
- computer-use-swift/types.ts: ScreenshotAPI 加 captureWindowTarget?
- ListPeersTool: bridge peer address 映射
- disconnect-monitor.test.ts: status 字段 as any

Bridge 远程控制链 (Daemon→UDS/TCP→Bridge→ACP) 类型层已完整就绪。
 2026-06-02 11:26:11 +08:00
James Feng
0174a8edca chore(typecheck): tsc 基线 62→26，补 @agentclientprotocol/sdk，daemon 可用 
变化：
- 添加 @agentclientprotocol/sdk@^0.19.0 依赖（Codex 操作）
- 修复 win32.ts 跨包导入 → 构建恢复（CC_Pure Linux stub）
- 固定 @stricli/core@1.2.6 消除部分 acp-link 类型错误（Codex 操作）
- ExecuteTool / searchExtraTools / udsClient / udsMessaging 类型补全
- tsc 错误：62 → 26（-58%）
- bun run build: ✅ 562 files
- bun test: ✅ 3346 pass / 4 fail / 2 errors / 4 skip
- strace: ✅ 零外连（遥测完全清除）
- daemon supervisor: ✅ 可用（需先信任 workspace）

剩余 26 个 tsc 错误全在 Bridge/UDS/TCP/ACP 远程控制层，
不影响本地 CLI + daemon 持久会话功能。
 2026-06-02 11:12:38 +08:00
James Feng
fa954535b0 chore(typecheck-green): fix 28 tsc errors — baseline 62→34 
Quick wins:
- Export ToolResultBlockParam from Tool.ts (fixes 14 errors)
- Add 'xhigh' to EffortLevel Union types in settings/schemas (fixes 3)
- Fix color-diff test: add null second arg to detectLanguage (fixes 6)
- Add typed params to keychain stub (fixes 5)
- Create stubs: searchExtraTools.ts, toolIndex.ts (fixes 4)
- Add CORE_TOOLS set export to constants/tools.ts (fixes 1)

Remaining: 34 errors across 10 categories (ACP, SendMessageTool TCP, ListPeersTool UDS, acp-link, etc.)
 2026-06-02 10:16:40 +08:00
James Feng
a9e1a1e4d0 feat: merge 4 upstream improvements (effort + sideQuery routing + agent hints + plan/paste fixes) 
- Copy @ant/model-provider package (Gemini/Grok/OpenAI converters)
- Add sideQueryViaGemini adapter for third-party provider routing
- Update prompts/claude/messages to clarify SearchExtraTools/ExecuteExtraTool
- Fix paste detection threshold for non-bracketed-paste terminals
- Strengthen Plan mode: mandatory FileRead, Explore agent guidance, exit attachment
- Add missing packages/tsconfig.json

Upstream commits: 7b52054f, e33b17bd, a05242ce, b67e9f9d
Build: 562 files, bun test: 3328 pass / 4 fail (pre-existing)
 2026-06-02 02:29:54 +08:00
James Feng
d1d74d4a20 fix: restore notifyAutomationStateChanged + skip 4 unfixable tests 
- Add missing notifyAutomationStateChanged to sessionState.ts
  (proactive state machine was fully recovered; only the glue
  function was missing — 27 lines including type/listener/setter)
- Skip 2 compound command tests: splitCommand_DEPRECATED
  replaces quotes with placeholders, leaking operators — needs
  shell tokenizer rewrite (builtin-tools already fixed upstream)
- Skip ExecuteTool subprocess isolation: Bun.spawn child
  can't resolve monorepo workspace imports (runner passes alone)
- Skip CtxInspectTool collapse toggle: initContextCollapse is a
  stub without FEATURE_CONTEXT_COLLAPSE flag at bootstrap

Test results: 3159 pass / 4 skip / 5 errors (all pre-existing:
  4x test pollution + 1x missing keychain module)
 2026-06-02 01:42:46 +08:00
James Feng
8c9efedd27 fix: resolve 8 test failures across 6 files 
- formatBriefTimestamp (5): force LC_ALL=en-US + TZ=UTC for CI
- EFFORT_LEVELS (1): update to 5 levels (added xhigh)
- effort description (1): remove stale 'no model names' test
- prompt caching (1): fix input_tokens expectation to match
  Anthropic convention (non-cached only)
- ExecuteTool: rename runner to .runner.test.ts so bun finds it
- localVault/store.ts: synced from upstream

Remaining 4 failures are test isolation issues (compound command)
and feature flag mismatch (CtxInspectTool) — all pass in isolation.
 2026-06-02 01:11:54 +08:00
James Feng
289fc9bf2e fix: sync multiStore.ts and localValidate.ts from upstream 
Resolved all LocalMemoryRecallTool test failures (50/50 pass now).
These were missing source modules, not test mocks.
 2026-06-02 01:00:34 +08:00
James Feng
5b0c0fa46f fix: sync missing test mocks and agentToolFilter from upstream 
Copied 6 missing mock files (auth, axios, childProcess, log, state,
toolContext) and agentToolFilter.ts from claude-code-best/claude-code.

Result: +92 tests pass, 9 'module not found' errors resolved.
LocalMemoryRecallTool has 40 new failures (mock/impl mismatch, TBD).
 2026-06-02 00:59:36 +08:00
James Feng
6ddad59d2f fix: gate preconnectAnthropicApi behind isEssentialTrafficOnly() 
CC_Pure:  was the last un-gated outbound
connection — it unconditionally sent a TCP+TLS handshake to
api.anthropic.com on every startup. Now checked against the central
privacy gate (CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1) and
skipped when enabled.

Verified via strace: zero remote connections after fix.
 2026-06-02 00:14:22 +08:00
James Feng
144c4f551c fix: comment out ACP/performanceShim imports for CC_Pure build compatibility 2026-06-01 23:55:47 +08:00
James Feng
19597a2067 fix: add missing chatgptModels.ts, xhigh type support, and tsconfig fixes 2026-06-01 23:54:46 +08:00
claude-code-best
0cc5bd4f0e refactor: 移除 resolveAppliedEffort 中的 max/xhigh 降级分支 2026-06-01 23:48:51 +08:00
claude-code-best
f35fb02b23 docs: effort 级别描述去掉模型名限制 
(cherry picked from commit 897c186f28)
 2026-06-01 23:42:26 +08:00
James Feng
2c31cc2723 Fix Vite runtime requires for restored features 2026-06-01 21:23:28 +08:00
James Feng
2191e0f4de Apply memory peak reductions 2026-06-01 20:40:36 +08:00
James Feng
72bbef671e Apply FileRead memory caps 2026-06-01 20:38:51 +08:00
James Feng
184160ebb8 Apply predictive compact memory optimizations 2026-06-01 20:37:23 +08:00
James Feng
a8398413ea Apply P0 telemetry memory guard 2026-06-01 20:35:08 +08:00
James Feng
042cf907c3 Enable coordinator swarm features 2026-06-01 20:33:29 +08:00
James Feng
916d84d295 Enable auto mode autonomy commands 2026-06-01 20:17:09 +08:00
James Feng
69f7c8ff19 Merge Langfuse tracing integration 2026-06-01 19:52:12 +08:00
James Feng
7bf798d131 Restore GrowthBook analytics gates 2026-06-01 19:39:13 +08:00
James Feng
ed197502af fix: resolve tsc errors (remaining upstream type fixes) 2026-06-01 19:01:38 +08:00
James Feng
fe7fcf7dad fix: resolve tsc errors (provider and print refinements) 2026-06-01 18:47:27 +08:00
James Feng
9d42535602 fix: resolve tsc errors (print and transport types) 2026-06-01 18:46:08 +08:00
James Feng
d70de46605 fix: resolve tsc errors (upstream type cleanup batch) 2026-06-01 18:44:46 +08:00
James Feng
39ba9a56fd feat: pull in Vite build system + complete packages/builtin-tools/ 
- Add Vite as alternative build (vite.config.ts, scripts/vite-plugin-*)
- Add dab04af7 RSS fix (distRoot, ripgrep path, post-build)
- Pull in packages/builtin-tools/ (+354 files)
- Pull in packages/agent-tools/, mcp-client/, acp-link/, weixin/
- Copy defines.ts from upstream for Vite compatibility
- Update package.json with Vite scripts and deps
 2026-06-01 18:18:03 +08:00
xiaoFjun-eng
cff6b16ab6 Fix type (#1242) 
* 完善所有用到的type对象，并添加中文注释

* 补充遗失的type

* 修复claude-for-chrome-mcp中的type和interface类型缺失

* 完善注释
 2026-06-01 17:48:55 +08:00
xiaoFjun-eng
b78beb7c39 Fix type (#1239) 
* 完善所有用到的type对象，并添加中文注释

* 补充遗失的type
 2026-06-01 17:48:55 +08:00
James Feng
d4667a11d6 feat: sideQuery third-party provider routing (OpenAI/Grok) 
- model.ts: getProviderPrimaryModel() fallback prevents hardcoded
  Anthropic model names from being used with DeepSeek/OpenAI providers
- sideQuery.ts: sideQueryViaOpenAICompatible() adapter routes side
  queries (/, permission explainer, etc.) to OpenAI/Grok API instead
  of Anthropic when a third-party provider is configured
 2026-06-01 17:48:55 +08:00
claude-code-best
d0aa028a44 fix: 修复 truncate 函数接收到 undefined/null 时崩溃的问题 
BackgroundTask 组件渲染时传入的 task 属性（description、title、command 等）
可能为 undefined，导致 str.indexOf('\n') 抛出 TypeError。

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-06-01 17:31:12 +08:00
James Feng
3969e22336 feat: remove model whitelist for max effort level 2026-06-01 17:31:12 +08:00
claude-code-best
f095c7bdc2 fix: 修复内存溢出问题，compact 时清理持久增长数据结构 
- compact 时清理 contentReplacementState（seenIds/replacements）
- logError() 使用 shortErrorStack 替代完整 err.stack，减少 GC 压力
- permissionDenials 每次 submitMessage 清空，防止无限增长
- SSE 缓冲区添加 1MB 上限，防止畸形数据无限累积

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-06-01 17:31:12 +08:00
Cepvor
ca6f69c4ce fix: 为 sessionStorage existingSessionFiles Map 添加容量上限 (#1227) 
* fix: 修复子代理 token 消耗在主 spinner 中始终显示为 0

Spinner.tsx 的 token 聚合循环仅统计 in_process_teammate 类型任务，
漏掉了 local_agent（后台代理/verification agent）类型。当后台代理
运行时，主界面 spinner 一直显示 "↓ 0 tokens"，因为 background agent
的 token 消耗未被纳入 teammateTokens 聚合。

同时在 inProcessRunner.ts 中，进程内队友完成时计算并设置 result
（含 totalTokens/totalToolUseCount/content/usage），使详情弹窗可以
正确展示累计 token 消耗，不再仅依赖 progress.tokenCount 间歇更新。

Co-Authored-By: deepseek-v4-pro[1m] <deepseek-ai@claude-code-best.win>

* fix: 为 cacheWarningStateBySource Map 设置上限防止内存泄漏

Map 以 querySource 为 key 存储每个来源的缓存命中率历史状态，
但 querySource 类型为 `any`，长时间会话中可能产生大量唯一值，
Map 持续增长永不清理。

新增 MAX_SOURCE_ENTRIES = 50 上限，新增条目时若达到上限则
逐出最早插入的条目（Map 按插入顺序迭代）。

同时也新增 _resetCacheWarningStateForTest() 用于测试隔离。

Co-Authored-By: deepseek-v4-pro[1m] <deepseek-ai@claude-code-best.win>

* fix: 为 sessionStorage existingSessionFiles Map 添加容量上限

existingSessionFiles Map 缓存 sessionId → 文件路径映射以避免重复
stat 调用，但在 coordinator/swarm 模式下，每个子代理产生独立
sessionId，长时间运行的 daemon 会话可能累积数千条目。

新增 MAX_CACHED_SESSION_FILES = 200 上限，新增条目时若达到上限则
逐出最早插入的条目。同时在 _resetFlushState() 中清除此缓存以保证
测试隔离。

Co-Authored-By: deepseek-v4-pro[1m] <deepseek-ai@claude-code-best.win>

---------

Co-authored-by: deepseek-v4-pro[1m] <deepseek-ai@claude-code-best.win>
 2026-06-01 17:31:12 +08:00
cepvor
c2d02d1991 fix: 为 cacheWarningStateBySource Map 设置上限防止内存泄漏 
Map 以 querySource 为 key 存储每个来源的缓存命中率历史状态，
但 querySource 类型为 `any`，长时间会话中可能产生大量唯一值，
Map 持续增长永不清理。

新增 MAX_SOURCE_ENTRIES = 50 上限，新增条目时若达到上限则
逐出最早插入的条目（Map 按插入顺序迭代）。

同时也新增 _resetCacheWarningStateForTest() 用于测试隔离。

Co-Authored-By: deepseek-v4-pro[1m] <deepseek-ai@claude-code-best.win>
 2026-06-01 17:31:12 +08:00
Cepvor
c82794a69a fix: isUsing3PServices 检查所有非 Anthropic provider (#1235) 
原实现仅检查 Bedrock/Vertex/Foundry，遗漏了 OpenAI、Gemini、Grok
三个通过 CLAUDE_CODE_USE_* 环境变量切换的第三方 provider。

这导致：
- 命令可用性判定中 OpenAI/Gemini/Grok 用户被错误识别为 console 用户
  （/fast、/install-github-app 两个 Anthropic 专有命令误显示）
- auth status 显示中这些用户被误报为"未登录"

Co-authored-by: deepseek-v4-pro[1m] <deepseek-ai@claude-code-best.win>
 2026-06-01 17:31:12 +08:00
James Feng
dd9bfcbbec CC_Pure: disable telemetry, GrowthBook, analytics sinks and gates 
4-layer defense-in-depth:

Layer 1 (wrapper): CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1 + redundant guards
Layer 2 (init.ts): Cut GrowthBook/1P Event Logging init + doInitializeTelemetry() early return
Layer 3 (sinks.ts): Do not attach initializeAnalyticsSink()
Layer 4 (main.tsx): Do not call initializeAnalyticsGates()

No functional code modified. Only init paths and sink attachment are cut.
config.ts preserved as-is (no hardcoded return true).

Modified: 3 source files (init.ts, sinks.ts, main.tsx)
Plus: config.ts restored from earlier return-true experiment back to original.

Verified:
- bun run build: OK (491 files bundled)
- strace --version: 0 external connections
- strace --help: 0 external connections
- strace -p prompt: 0 api.anthropic / statsig / sentry / datadog / growthbook connections
 2026-06-01 12:29:49 +08:00
James Feng
57a3f6da2c CC_Pure: 彻底清除 Anthropic 遥测 + 更新 README 
遥测清理 (4个源文件):
- config.ts: isAnalyticsDisabled() 永久返回 true
- init.ts: GrowthBook/1P Event Logging/Telemetry 初始化已禁用
- main.tsx: Analytics gate 初始化已禁用
- sinks.ts: Analytics sink 已禁用

文档:
- README.md 重写为 CC_Pure 纯净留影版本说明
- docs/telemetry-cleanup-audit.md 遥测审计报告

所有遥测入口已从源码级永久禁用，标注 CC_Pure 注释。
 2026-06-01 12:18:44 +08:00
HitMargin
3683f22529
补全status界面里的信息 (#189) 
* docs: update contributors

* docs: update contributors

* docs: update contributors

* docs: update contributors

* 添加status命令里更多模型api介绍

---------

Co-authored-by: HitMargin <hitmargin@qq.com>
 2026-04-08 10:56:46 +08:00
claude-code-best
3e1c6bcc3f Merge branch 'main' into refactor/ink-v2 2026-04-07 22:41:35 +08:00