Ziang Xie 9698307f27 fix(adapters): harden credential file storage in pairing.ts ...

Three security improvements for adapters.json storage:

- Use crypto.randomBytes for temp filename instead of predictable
  Date.now(), preventing TOCTOU symlink race during atomic write.
- Enforce 0o600 permissions on adapters.json via writeFileSync mode
  option to prevent credential leakage via permissive umask.
- Enforce 0o700 permissions on ~/.claude/ config directory via
  mkdirSync mode option.

adapters.json contains sensitive credentials including Feishu app
secrets and Telegram bot tokens.

2026-05-02 00:40:44 +08:00

..

__tests__

chore(adapters): snapshot pre-attachment WIP (permission card v2, handler serialization, markdown style)

2026-04-11 15:24:10 +08:00

attachment

fix: batch resolve 5 issues from Feishu bug tracker

2026-04-12 13:36:14 +08:00

chat-queue.ts

feat: add IM adapter integration (Telegram + Feishu) with web settings UI

2026-04-08 19:38:51 +08:00

config.ts

feat(pairing): extend type definitions with pairing and pairedUsers fields

2026-04-08 20:06:37 +08:00

format.ts

fix(desktop): unblock rollout with reliable session and IM flows

2026-04-10 16:41:59 +08:00

http-client.ts

fix: 为飞书适配器的 HTTP 请求添加超时机制

2026-04-26 15:10:14 +08:00

message-buffer.ts

feat: add IM adapter integration (Telegram + Feishu) with web settings UI

2026-04-08 19:38:51 +08:00

message-dedup.ts

feat: add IM adapter integration (Telegram + Feishu) with web settings UI

2026-04-08 19:38:51 +08:00

pairing.ts

fix(adapters): harden credential file storage in pairing.ts

2026-05-02 00:40:44 +08:00

session-store.ts

feat: add IM adapter integration (Telegram + Feishu) with web settings UI

2026-04-08 19:38:51 +08:00

ws-bridge.ts

feat(adapters): extend WsBridge.sendUserMessage to carry attachments

2026-04-11 15:25:57 +08:00