mirror of
https://github.com/NanmiCoder/cc-haha
synced 2026-07-16 13:03:31 +08:00
- security: XSS sanitization with DOMPurify in Markdown/Mermaid/PermissionDialog; path whitelist in filesystem API; fake keys in test/config files - perf: fine-grained Zustand selectors in Sidebar/StatusBar/ContentRouter; 50ms throttle on streaming deltas; React.memo + useMemo in MessageList; useRef for frequent keyboard shortcut state; AbortController 30s timeout - leaks: WS session TTL timers (5-min cleanup on close); batch splice for sdkMessages/stderrLines; folderPath validation in cronScheduler - quality: optimistic update rollback in settingsStore; error state in providerStore/teamStore; i18n for all hardcoded English strings - docs: desktop architecture and features docs updated; VitePress nav fixed Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
104 lines
2.6 KiB
JSON
104 lines
2.6 KiB
JSON
{
|
|
"$schema": "https://raw.githubusercontent.com/nicegui/nicegui/main/nicegui/static/tauri-capabilities-schema-v2.json",
|
|
"identifier": "default",
|
|
"description": "Default capabilities for Claude Code Desktop",
|
|
"windows": ["main"],
|
|
"permissions": [
|
|
"core:default",
|
|
"core:window:allow-start-dragging",
|
|
"shell:allow-open",
|
|
{
|
|
"identifier": "shell:allow-execute",
|
|
"allow": [
|
|
{
|
|
"args": [
|
|
"server",
|
|
{ "validator": "regex", "value": "^(--port|--host|--config)=.+$" }
|
|
],
|
|
"name": "binaries/claude-sidecar",
|
|
"sidecar": true
|
|
},
|
|
{
|
|
"args": [
|
|
"adapters",
|
|
{ "validator": "regex", "value": "^(feishu|telegram|lark|slack)(:.+)?$" }
|
|
],
|
|
"name": "binaries/claude-sidecar",
|
|
"sidecar": true
|
|
},
|
|
{
|
|
"args": [
|
|
"cli",
|
|
{ "validator": "regex", "value": "^.+$" }
|
|
],
|
|
"name": "binaries/claude-sidecar",
|
|
"sidecar": true
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"identifier": "shell:allow-spawn",
|
|
"allow": [
|
|
{
|
|
"args": [
|
|
"server",
|
|
{ "validator": "regex", "value": "^(--port|--host|--config)=.+$" }
|
|
],
|
|
"name": "binaries/claude-sidecar",
|
|
"sidecar": true
|
|
},
|
|
{
|
|
"args": [
|
|
"adapters",
|
|
{ "validator": "regex", "value": "^(feishu|telegram|lark|slack)(:.+)?$" }
|
|
],
|
|
"name": "binaries/claude-sidecar",
|
|
"sidecar": true
|
|
},
|
|
{
|
|
"args": [
|
|
"cli",
|
|
{ "validator": "regex", "value": "^.+$" }
|
|
],
|
|
"name": "binaries/claude-sidecar",
|
|
"sidecar": true
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"identifier": "shell:allow-kill",
|
|
"allow": [
|
|
{
|
|
"args": [
|
|
"server",
|
|
{ "validator": "regex", "value": "^(--port|--host|--config)=.+$" }
|
|
],
|
|
"name": "binaries/claude-sidecar",
|
|
"sidecar": true
|
|
},
|
|
{
|
|
"args": [
|
|
"adapters",
|
|
{ "validator": "regex", "value": "^(feishu|telegram|lark|slack)(:.+)?$" }
|
|
],
|
|
"name": "binaries/claude-sidecar",
|
|
"sidecar": true
|
|
},
|
|
{
|
|
"args": [
|
|
"cli",
|
|
{ "validator": "regex", "value": "^.+$" }
|
|
],
|
|
"name": "binaries/claude-sidecar",
|
|
"sidecar": true
|
|
}
|
|
]
|
|
},
|
|
"dialog:allow-open",
|
|
"dialog:allow-save",
|
|
"process:allow-exit",
|
|
"process:allow-restart",
|
|
"updater:default"
|
|
]
|
|
}
|