James Feng
10dfcc6710
fix: Batch 1a — WebFetchTool header 安全加固 + 核心运行时修复 (from upstream c2ac9a74)
...
来源: upstream c2ac9a74✅ 565 files | Tests: 65/65 pass (0 new failures)
2026-06-04 15:45:01 +08:00
Alan
d0278e89c0
fix: support CRLF SSE frame parsing ( #223 )
2026-06-04 14:55:21 +08:00
James Feng
70bc47eadc
fix(security): Phase 4 — fix remaining reachable CodeQL alerts
...
Command injection (real fix):
- which.ts: switch to array-args execa, remove shell:true
- execFileNoThrowPortable/execSyncWrapper/imagePaste/execFileNoThrow: security comments
Log injection:
- handlers/mcp.tsx: security comments (secrets already redacted)
ReDoS:
- debugFilter.ts: split regex, add input length guard
Sanitization bypass:
- stripHtml.ts: loop-based script/style removal
- claudemd.ts: loop-based HTML comment stripping
- sedEditParser.ts: single-pass char scan replaces chained replaces
- bingAdapter.ts: URL.hostname comparison instead of string includes
Tests: 3068 pass, 0 fail
2026-06-03 19:51:17 +08:00
James Feng
0c01c93e80
Phase 2a: mechanical dedup — import rewrite to canonical package
...
- Migrated src/tools/-only files into packages/builtin-tools/src/tools/
- Rewrote all src/tools/ imports to @claude-code-best/builtin-tools/tools/
- Deleted 121 identical duplicate files from src/tools/
- 238 drifted files preserved in src/tools/ for Phase 2b manual merge
- 359 files changed: 914 insertions, 4042 deletions
Build: 568 files bundled ✓
Test: 3340 pass / 4 fail (baseline) ✓
2026-06-03 13:54:22 +08:00
James Feng
bad81fdfcc
Phase 1: security do-now — redaction helpers + RCS defaults hardened
...
- Add src/utils/sensitive.ts: redactUrl/redactValue/redactForLog
- Apply redaction to MCP config printing (mcp.tsx)
- Apply redaction to hard-fail logging (log.ts)
- Apply redaction to chrome native host debug log
- Apply redaction to CLI error output (exit.ts)
- RCS: default bind to 127.0.0.1 instead of 0.0.0.0
- RCS: CORS restricted to localhost + baseUrl whitelist
- pipeTransport: default bind to 127.0.0.1 via PIPE_HOST env
2026-06-03 13:43:38 +08:00
claude-code-best
75c6a5e22e
fix: 删除 edit tool 中的旧逻辑处理， 现在已经不需要这些处理了， 大模型够屌 ( #1251 )
...
* refactor: remove tab/quote normalization from FileEditTool
* fix: resolve pre-existing typecheck errors (zod v4 compat + RCS web exclude)
2026-06-01 23:48:26 +08:00
James Feng
2c31cc2723
Fix Vite runtime requires for restored features
2026-06-01 21:23:28 +08:00
James Feng
916d84d295
Enable auto mode autonomy commands
2026-06-01 20:17:09 +08:00
James Feng
ed197502af
fix: resolve tsc errors (remaining upstream type fixes)
2026-06-01 19:01:38 +08:00
James Feng
fe7fcf7dad
fix: resolve tsc errors (provider and print refinements)
2026-06-01 18:47:27 +08:00
James Feng
9d42535602
fix: resolve tsc errors (print and transport types)
2026-06-01 18:46:08 +08:00
James Feng
d70de46605
fix: resolve tsc errors (upstream type cleanup batch)
2026-06-01 18:44:46 +08:00
xiaoFjun-eng
b78beb7c39
Fix type ( #1239 )
...
* 完善所有用到的type对象，并添加中文注释
* 补充遗失的type
2026-06-01 17:48:55 +08:00
claude-code-best
f095c7bdc2
fix: 修复内存溢出问题，compact 时清理持久增长数据结构
...
- compact 时清理 contentReplacementState（seenIds/replacements）
- logError() 使用 shortErrorStack 替代完整 err.stack，减少 GC 压力
- permissionDenials 每次 submitMessage 清空，防止无限增长
- SSE 缓冲区添加 1MB 上限，防止畸形数据无限累积
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-06-01 17:31:12 +08:00
claude-code-best
2da6514095
feat: 支持自托管的 remote-control-server ( #214 )
...
* feat: 支持自托管的 remote-control-server (#214 )
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-04-09 17:40:50 +08:00
claude-code-best
e5782e732c
Revert "Revert "feat: 第一个可以用的 ink 组件抽象 ( #158 )" ( #175 )"
...
This reverts commit 88d4c3ba24
2026-04-07 16:17:48 +08:00
claude-code-best
88d4c3ba24
Revert "feat: 第一个可以用的 ink 组件抽象 ( #158 )" ( #175 )
...
This reverts commit c445f43f8d
2026-04-07 15:05:03 +08:00
claude-code-best
c445f43f8d
feat: 第一个可以用的 ink 组件抽象 ( #158 )
2026-04-06 23:56:45 +08:00
claude-code-best
5b1a52b8e0
更新大量 tsx 原始文件; 已经迁移 login panel; 部分 ( #121 )
...
* style(B1-1): 格式化 ink/buddy/cli/context/screens/tasks/services/keybindings/state (43 files)
纯格式化：移除分号、React Compiler import、import 多行展开。
修复了 Box.tsx 和 ScrollBox.tsx 中无效的 global.d.ts import。
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* style(B1-2): 格式化 commands (79 files)
纯格式化：移除分号、React Compiler import、import 多行展开。
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* style(B1-3): 格式化 components/messages,permissions,mcp,sandbox,shell (104 files)
纯格式化：移除分号、React Compiler import、import 多行展开。
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* style(B1-4): 格式化 components/PromptInput,FeedbackSurvey,tasks,agents,skills,design-system,wizard (73 files)
纯格式化：移除分号、React Compiler import、import 多行展开。
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* style(B1-5): 格式化 components其余 + hooks + tools (232 files)
纯格式化：移除分号、React Compiler import、import 多行展开。
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* style(B1-6): 格式化 main/entrypoints/utils/moreright (21 files)
纯格式化：移除分号、React Compiler import、import 多行展开。
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* docs: 更新 README，新增 Run.ps1/TODO.md，删除 V6.md
- README.md: 大幅重写，更详细版本历史和配置示例
- Run.ps1: 新增 Windows 启动脚本
- TODO.md: 新增包完成清单
- V6.md: 删除（架构重构规划已不适用）
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix: 修复以前的问题
* fix: 修复 login 面板的问题
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-04 23:24:27 +08:00
claude-code-best
2934f30084
fix: 彻底移除 /loop 及 cron 工具的 feature('AGENT_TRIGGERS') gate
...
上次提交仅移除了 isKairosCronEnabled 中的 gate，但 /loop 整条链路
仍被 feature('AGENT_TRIGGERS') 拦截导致无法使用：
- skills/bundled/index.ts: registerLoopSkill() 未被调用
- tools.ts: CronCreate/Delete/List 工具未加载
- constants/tools.ts: cron 工具名未加入 teammate 工具列表
- screens/REPL.tsx: useScheduledTasks hook 被跳过
- cli/print.ts: pipe 模式 cron 调度器未初始化
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-01 11:57:16 +08:00
claude-code-best
fac9341e73
feat: 全面清理类型错误 — tsc 零错误，any 标注全部消除
...
- 修复所有 33 个原始 tsc 编译错误（ink JSX 声明、类型不匹配、null check 等）
- 清理 176 处 `: any` 类型标注，全部替换为具体推断类型
- 修复清理过程中引入的 41 个回归错误
- 最终结果：0 tsc 错误，0 个非注释 any 标注
- Build 验证通过（25.75MB bundle）
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-01 01:00:10 +08:00
claude-code-best
dd9cd782a7
feat: 问就是封包
2026-03-31 23:32:58 +08:00
claude-code-best
d7a729ca68
feat: 完成第二版类型清理
2026-03-31 23:03:47 +08:00
claude-code-best
4c0a655a1c
feat: 大规模清理 claude 的类型问题及依赖
2026-03-31 22:21:35 +08:00
claude-code-best
bd756cc369
feat: 完成stub
2026-03-31 20:40:16 +08:00
claude-code-best
f90eee85d8
feat: build
2026-03-31 19:22:47 +08:00
