3 Commits

Author SHA1 Message Date
Wechat-ggGitHub f8774b1c00 feat: integrate community PRs (#9, #11 partial, #12 partial)
- Pass through Anthropic API env vars in daemon.sh (macOS/Linux) (#9)
- Add session resume retry on corrupted session (#9)
- Add chat history with /history command (#11 partial)
- Add npm run run for foreground debugging (#11 partial)
- Add third-party API provider docs to READMEs (#12 partial)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-24 00:02:57 +08:00
Wechat-ggGitHub 00aff9bf6f feat: cross-platform support + security hardening
Integrate community contributions from PR #2, #4, and #5:

Security (from PR #4 by wangjialiang678):
- Command injection: execSync → spawnSync for file opening
- Path traversal: accountId validation with relaxed regex
- SSRF protection: baseUrl whitelist validation (warn, not throw)
- Info leakage: generic error messages to users, details in logs
- URL injection: encodeURIComponent for qrcodeId
- Timer leak: clear existing pending before creating new one
- Centralized DATA_DIR via constants.ts using homedir()

Cross-platform (from PR #5 by dopawei + PR #2 by zmoon460):
- Windows: skip chmodSync, use cmd /c start for file opening
- Linux: systemd user service with nohup fallback
- Headless Linux: qrcode-terminal for QR display in terminal
- macOS: launchd daemon (preserved)

Existing features preserved:
- Permission race condition fix (120s timeout + 15s grace period)
- /permission auto mode (dangerously skip permissions)
- /permission, /model, /clear, /status, /skills commands

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-23 11:44:01 +08:00
Wechat-ggGitHub 5f0b5b5758 Initial commit: wechat-claude-code v1.0.0
A Claude Code Skill that bridges personal WeChat to local Claude Code.
Supports text chat, image recognition, permission approval, and slash commands.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-22 23:14:22 +08:00