feat: local memory + local vault wiring + autofix-pr + CI mock isolation (refactor) by claude-code-best · Pull Request #445 · claude-code-best/claude-code

claude-code-best · 2026-05-10T02:45:31Z

^{Need help on this PR? Tag @codesmith with what you need.}

Let Codesmith autofix CI failures and bot reviews

Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

AES-256-GCM 加密 vault，支持 OS keychain 和加密文件回退， scrypt KDF 密钥派生，64KB secret 上限。 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

Markdown 文件存储的本地记忆系统，支持多 store 管理、 entry 增删改查和归档，存储于 ~/.claude/local-memory/。 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

- LocalMemoryRecallTool: 跨会话本地笔记召回，权限门控，大小限制 - VaultHttpFetchTool: 使用 vault 密钥的认证 HTTP 请求，ACL 规则 - agentToolFilter: 子 agent 工具继承过滤层 - ALL_AGENT_DISALLOWED_TOOLS 白名单更新 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

- hostGuard: workspace API key 仅限 api.anthropic.com，OAuth 限定 subscription plane - saveWorkspaceKey: sk-ant-api03- 前缀校验，安全写入缓存 - AuthPlaneSummary/WorkspaceKeyInput: 登录 UI 组件 - getAuthStatus: 认证状态查询 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

- /memory-stores: 远程记忆存储管理 - /vault: 密钥保险库管理 - /schedule: 云端定时触发器管理（cron） - /skill-store: 技能商店浏览和安装 - /agents-platform: 远程 agent 调度管理 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

- /local-memory: 本地记忆管理（store/entry CRUD、搜索、归档） - /local-vault: 本地密钥保险库管理（加解密、keychain 集成） - permissionValidation: vault 权限校验增强 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

- /issue: 通过 gh CLI 创建 GitHub issue，支持标签/指派 - /share: 会话日志分享到 GitHub Gist，支持密钥脱敏 - /autofix-pr: 自动修复 CI 失败的 PR，进度追踪 - launchCommand: 共享命令启动器 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

- /teleport: 从 claude.ai 恢复会话 - /recap: 生成会话摘要 - /break-cache: 提示缓存管理（once/always/off/status） - /env: 环境信息展示（含密钥脱敏） - /tui: 无闪烁 TUI 模式管理 - /onboarding: 引导流程 - /perf-issue: 性能问题诊断 - /debug-tool-call: 工具调用调试 - /usage: 用量统计（合并 /cost 和 /stats 别名） Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

- providerRegistry: OpenAI 兼容 provider 切换（Cerebras/Groq/DeepSeek/Qwen） - StatusLine: 增强状态栏（缓存命中率、TTL 倒计时、自定义 shell 命令） - cacheStats: 缓存命中率和 token 签名追踪 - ultrareviewPreflight: 代码审查预检服务 - SkillsMenu/filterSkills: 技能菜单过滤增强 - MagicDocs/langfuse prompts: 提示词更新 - claude.ts: API 客户端更新 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

- commands.ts: 注册所有新命令（memory-stores、vault、schedule 等），移除 require() 动态加载，统一为 ESM import - tools.ts: 注册 LocalMemoryRecallTool、VaultHttpFetchTool - 补充命令测试（bridge-kick、commit、commit-push-pr、init-verifiers） - 补充工具测试（AgentTool、RemoteTrigger、SkillTool、WebFetch、WebSearch） - 集成测试：autonomy-lifecycle-user-flow 更新 - 探测脚本和功能文档 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

- triggersApi: 添加 assertSubscriptionBaseUrl 防止 OAuth token 泄露 - claude.ts: 修复流式响应 O(n^2) 字符串拼接，改用数组累积 - claude.ts: 移除未使用的 import，动态 import 改为静态 import - StatusLine: BuiltinStatusLine 仅在 statusLineEnabled 时显示，修复双行问题 - local-vault: 修复 --reveal 标志位置解析 bug - share: 修复 sk-proj-* OpenAI 密钥未脱敏问题 - store.ts: 临时文件改用同目录创建，避免跨文件系统 rename 失败 - store.ts: 添加空字符串 key 校验 - permissionValidation: 端口正则限制为有效 TCP 范围 0-65535 - 测试 mock 补全: schedule/vault/skill-store 测试文件 - 移除过期的 biome-ignore 注释 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

mintlify · 2026-05-10T02:45:34Z

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
ccb-863780bf	🟢 Ready	View Preview	May 10, 2026, 2:46 AM

💡 Tip: Enable Workflows to automatically generate PRs for you.

coderabbitai · 2026-05-10T02:45:38Z

Important

Review skipped

Too many files!

This PR contains 230 files, which is 80 over the limit of 150.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 9e3ef968-ea08-4f88-b963-c9bc58b27326

📥 Commits

Reviewing files that changed from the base of the PR and between 7e2b8e8 and 5c499d3.

📒 Files selected for processing (230)

.github/workflows/ci.yml
.gitignore
codecov.yml
docs/features/all-features-guide.md
docs/features/autofix-pr.md
docs/testing/SLASH-COMMANDS-TEST-CHECKLIST.md
packages/builtin-tools/src/index.ts
packages/builtin-tools/src/tools/AgentTool/AgentTool.tsx
packages/builtin-tools/src/tools/AgentTool/__tests__/resumeAgent.test.ts
packages/builtin-tools/src/tools/AgentTool/resumeAgent.ts
packages/builtin-tools/src/tools/LocalMemoryRecallTool/LocalMemoryRecallTool.ts
packages/builtin-tools/src/tools/LocalMemoryRecallTool/UI.tsx
packages/builtin-tools/src/tools/LocalMemoryRecallTool/__tests__/LocalMemoryRecallTool.test.ts
packages/builtin-tools/src/tools/LocalMemoryRecallTool/__tests__/stripUntrusted.test.ts
packages/builtin-tools/src/tools/LocalMemoryRecallTool/constants.ts
packages/builtin-tools/src/tools/LocalMemoryRecallTool/prompt.ts
packages/builtin-tools/src/tools/LocalMemoryRecallTool/stripUntrusted.ts
packages/builtin-tools/src/tools/RemoteTriggerTool/__tests__/RemoteTriggerTool.test.ts
packages/builtin-tools/src/tools/SkillTool/__tests__/prompt.test.ts
packages/builtin-tools/src/tools/SkillTool/prompt.ts
packages/builtin-tools/src/tools/VaultHttpFetchTool/UI.tsx
packages/builtin-tools/src/tools/VaultHttpFetchTool/VaultHttpFetchTool.ts
packages/builtin-tools/src/tools/VaultHttpFetchTool/__tests__/VaultHttpFetchTool.test.ts
packages/builtin-tools/src/tools/VaultHttpFetchTool/__tests__/scrub.test.ts
packages/builtin-tools/src/tools/VaultHttpFetchTool/constants.ts
packages/builtin-tools/src/tools/VaultHttpFetchTool/prompt.ts
packages/builtin-tools/src/tools/VaultHttpFetchTool/scrub.ts
packages/builtin-tools/src/tools/WebFetchTool/__tests__/headers.test.ts
packages/builtin-tools/src/tools/WebSearchTool/__tests__/bingAdapter.test.ts
packages/builtin-tools/src/tools/WebSearchTool/__tests__/braveAdapter.test.ts
packages/builtin-tools/src/tools/WebSearchTool/__tests__/exaAdapter.test.ts
scripts/defines.ts
scripts/probe-local-wiring.ts
scripts/probe-subscription-endpoints.ts
scripts/smoke-test-commands.ts
scripts/verify-autofix-pr.ts
src/commands.ts
src/commands/__tests__/bridge-kick.test.ts
src/commands/__tests__/commit-push-pr.test.ts
src/commands/__tests__/commit.test.ts
src/commands/__tests__/init-verifiers.test.ts
src/commands/_shared/__tests__/launchCommand.test.ts
src/commands/_shared/launchCommand.ts
src/commands/agents-platform/AgentsPlatformView.tsx
src/commands/agents-platform/__tests__/AgentsPlatformView.test.tsx
src/commands/agents-platform/__tests__/agentsApi.test.ts
src/commands/agents-platform/__tests__/index.test.ts
src/commands/agents-platform/__tests__/launchAgentsPlatform.test.ts
src/commands/agents-platform/__tests__/parseArgs.test.ts
src/commands/agents-platform/agentsApi.ts
src/commands/agents-platform/index.js
src/commands/agents-platform/index.ts
src/commands/agents-platform/launchAgentsPlatform.tsx
src/commands/agents-platform/parseArgs.ts
src/commands/autofix-pr/AutofixProgress.tsx
src/commands/autofix-pr/__tests__/AutofixProgress.test.tsx
src/commands/autofix-pr/__tests__/index.test.ts
src/commands/autofix-pr/__tests__/launchAutofixPr.test.ts
src/commands/autofix-pr/__tests__/monitorState.test.ts
src/commands/autofix-pr/__tests__/parseArgs.test.ts
src/commands/autofix-pr/inProcessAgent.ts
src/commands/autofix-pr/index.d.ts
src/commands/autofix-pr/index.js
src/commands/autofix-pr/index.ts
src/commands/autofix-pr/launchAutofixPr.ts
src/commands/autofix-pr/monitorState.ts
src/commands/autofix-pr/parseArgs.ts
src/commands/autofix-pr/skillDetect.ts
src/commands/break-cache/__tests__/break-cache.test.ts
src/commands/break-cache/index.js
src/commands/break-cache/index.ts
src/commands/break-cache/panel.tsx
src/commands/cost/index.ts
src/commands/ctx_viz/index.d.ts
src/commands/debug-tool-call/__tests__/debug-tool-call.test.ts
src/commands/debug-tool-call/index.js
src/commands/debug-tool-call/index.ts
src/commands/env/__tests__/env.test.ts
src/commands/env/index.js
src/commands/env/index.ts
src/commands/issue/__tests__/issue-gh.test.ts
src/commands/issue/__tests__/issue-template.test.ts
src/commands/issue/__tests__/issue.test.ts
src/commands/issue/index.js
src/commands/issue/index.ts
src/commands/local-memory/LocalMemoryView.tsx
src/commands/local-memory/__tests__/launchLocalMemory.test.ts
src/commands/local-memory/__tests__/parseArgs.test.ts
src/commands/local-memory/index.tsx
src/commands/local-memory/launchLocalMemory.tsx
src/commands/local-memory/parseArgs.ts
src/commands/local-vault/LocalVaultView.tsx
src/commands/local-vault/__tests__/launchLocalVault.test.ts
src/commands/local-vault/__tests__/parseArgs.test.ts
src/commands/local-vault/index.tsx
src/commands/local-vault/launchLocalVault.tsx
src/commands/local-vault/parseArgs.ts
src/commands/login/AuthPlaneSummary.tsx
src/commands/login/WorkspaceKeyInput.tsx
src/commands/login/__tests__/AuthPlaneSummary.test.tsx
src/commands/login/__tests__/WorkspaceKeyInput.test.tsx
src/commands/login/__tests__/getAuthStatus.test.ts
src/commands/login/getAuthStatus.ts
src/commands/login/login.tsx
src/commands/memory-stores/MemoryStoresView.tsx
src/commands/memory-stores/__tests__/api.test.ts
src/commands/memory-stores/__tests__/index.test.ts
src/commands/memory-stores/__tests__/launchMemoryStores.test.ts
src/commands/memory-stores/__tests__/parseArgs.test.ts
src/commands/memory-stores/index.ts
src/commands/memory-stores/launchMemoryStores.tsx
src/commands/memory-stores/memoryStoresApi.ts
src/commands/memory-stores/parseArgs.ts
src/commands/onboarding/__tests__/onboarding.test.tsx
src/commands/onboarding/index.d.ts
src/commands/onboarding/index.js
src/commands/onboarding/index.ts
src/commands/onboarding/launchOnboarding.tsx
src/commands/perf-issue/__tests__/perf-issue.test.ts
src/commands/perf-issue/index.js
src/commands/perf-issue/index.ts
src/commands/recap/__tests__/recap.test.ts
src/commands/recap/generateRecap.ts
src/commands/recap/index.ts
src/commands/review/UltrareviewPreflightDialog.tsx
src/commands/review/__tests__/ultrareviewCommand.test.tsx
src/commands/schedule/ScheduleView.tsx
src/commands/schedule/__tests__/api.test.ts
src/commands/schedule/__tests__/index.test.ts
src/commands/schedule/__tests__/launchSchedule.test.ts
src/commands/schedule/__tests__/parseArgs.test.ts
src/commands/schedule/index.ts
src/commands/schedule/launchSchedule.tsx
src/commands/schedule/parseArgs.ts
src/commands/schedule/triggersApi.ts
src/commands/share/__tests__/share-gh.test.ts
src/commands/share/__tests__/share-projectdir.test.ts
src/commands/share/__tests__/share.test.ts
src/commands/share/index.js
src/commands/share/index.ts
src/commands/skill-store/SkillStoreView.tsx
src/commands/skill-store/__tests__/api.test.ts
src/commands/skill-store/__tests__/index.test.ts
src/commands/skill-store/__tests__/launchSkillStore.test.ts
src/commands/skill-store/__tests__/parseArgs.test.ts
src/commands/skill-store/index.tsx
src/commands/skill-store/launchSkillStore.tsx
src/commands/skill-store/parseArgs.ts
src/commands/skill-store/skillsApi.ts
src/commands/stats/index.ts
src/commands/teleport/__tests__/index.test.ts
src/commands/teleport/__tests__/launchTeleport.test.ts
src/commands/teleport/index.js
src/commands/teleport/index.ts
src/commands/teleport/launchTeleport.ts
src/commands/tui/__tests__/tui.test.ts
src/commands/tui/index.ts
src/commands/tui/panel.tsx
src/commands/usage/__tests__/usage.test.ts
src/commands/usage/index.ts
src/commands/usage/usage.tsx
src/commands/vault/VaultView.tsx
src/commands/vault/__tests__/api.test.ts
src/commands/vault/__tests__/index.test.ts
src/commands/vault/__tests__/launchVault.test.ts
src/commands/vault/__tests__/parseArgs.test.ts
src/commands/vault/index.tsx
src/commands/vault/launchVault.tsx
src/commands/vault/parseArgs.ts
src/commands/vault/vaultsApi.ts
src/commands/version.ts
src/components/BuiltinStatusLine.tsx
src/components/StatusLine.tsx
src/components/__tests__/StatusLine.test.tsx
src/components/skills/SkillsMenu.tsx
src/components/skills/__tests__/filterSkills.test.ts
src/components/skills/filterSkills.ts
src/constants/tools.ts
src/keybindings/validate.ts
src/services/MagicDocs/__tests__/prompts.test.ts
src/services/MagicDocs/prompts.ts
src/services/SessionMemory/__tests__/multiStore.test.ts
src/services/SessionMemory/__tests__/prompts.test.ts
src/services/SessionMemory/multiStore.ts
src/services/SessionMemory/prompts.ts
src/services/api/__tests__/ultrareviewPreflight.test.ts
src/services/api/claude.ts
src/services/api/ultrareviewPreflight.ts
src/services/auth/__tests__/hostGuard.test.ts
src/services/auth/__tests__/saveWorkspaceKey.test.ts
src/services/auth/hostGuard.ts
src/services/auth/saveWorkspaceKey.ts
src/services/langfuse/__tests__/langfuse.test.ts
src/services/langfuse/sanitize.ts
src/services/localVault/__tests__/keychain.test.ts
src/services/localVault/__tests__/store.test.ts
src/services/localVault/keychain.ts
src/services/localVault/store.ts
src/services/mcp/__tests__/officialRegistry.test.ts
src/services/providerRegistry/__tests__/loader.test.ts
src/services/providerRegistry/__tests__/providerCompatMatrix.test.ts
src/services/providerRegistry/__tests__/switcher.test.ts
src/services/providerRegistry/loader.ts
src/services/providerRegistry/providerCompatMatrix.ts
src/services/providerRegistry/switcher.ts
src/services/providerRegistry/types.ts
src/tools.ts
src/types/internal-modules.d.ts
src/utils/__tests__/agentToolFilter.test.ts
src/utils/__tests__/cacheStats.test.ts
src/utils/__tests__/lanBeacon.test.ts
src/utils/__tests__/localValidate.test.ts
src/utils/agentToolFilter.ts
src/utils/cacheStats.ts
src/utils/cacheStatsState.ts
src/utils/config.ts
src/utils/localValidate.ts
src/utils/sanitizeId.ts
src/utils/settings/__tests__/permissionValidation-vault.test.ts
src/utils/settings/permissionValidation.ts
src/utils/settings/types.ts
src/utils/settings/validation.ts
src/utils/teleport.tsx
src/utils/teleport/__tests__/api.test.ts
src/utils/teleport/api.ts
tests/integration/autonomy-lifecycle-user-flow.test.ts
tests/mocks/axios.ts
tests/mocks/childProcess.ts
tests/mocks/state.ts
tests/mocks/toolContext.ts

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch feature/many-feature-packagee

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

codecov-commenter · 2026-05-10T02:48:50Z

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 99.50187% with 12 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
src/commands/memory-stores/parseArgs.ts	91.42%	12 Missing ⚠️

📢 Thoughts on this report? Let us know!

使用 URL.origin 替代完整 URL，避免明文泄露 OAuth 配置中的敏感路径信息（CodeQL js/clear-text-logging）。 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

mock.module('axios', ...) 是 process-global last-write-wins，多个测试文件各自注册时只有最后一个 handle 的闭包被保留，导致前面的测试 stub 不生效。改为全局单例注册，所有 handle 共享一个 mock.module，路由器运行时扫描活跃 handle 分派请求。 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

将 orgUUID 截断长度从 8 字符缩减到 4 字符，消除 CodeQL js/clear-text-logging 对 oauthAccount 敏感数据的告警。 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

claude-code-best and others added 13 commits May 9, 2026 23:04

chore: 添加 CI 配置、codecov 和测试 mock 基础设施

eebda57

Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

feat: 添加 Local Vault 加密存储服务

b8d86e5

AES-256-GCM 加密 vault，支持 OS keychain 和加密文件回退， scrypt KDF 密钥派生，64KB secret 上限。 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

feat: 添加 Session Memory 多存储支持

a2ea69c

Markdown 文件存储的本地记忆系统，支持多 store 管理、 entry 增删改查和归档，存储于 ~/.claude/local-memory/。 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

chore: 移除废弃的 ctx_viz 类型声明

4f493c8

Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

claude-code-best self-assigned this May 10, 2026

mintlify Bot deployed to staging May 10, 2026 02:46 View deployment

github-advanced-security AI found potential problems May 10, 2026

View reviewed changes

Comment thread scripts/probe-subscription-endpoints.ts Fixed

Comment thread scripts/probe-subscription-endpoints.ts Fixed

claude-code-best and others added 2 commits May 10, 2026 11:40

fix: 脱敏 probe-subscription-endpoints 日志中的 API base URL

8fccd32

使用 URL.origin 替代完整 URL，避免明文泄露 OAuth 配置中的敏感路径信息（CodeQL js/clear-text-logging）。 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

mintlify Bot deployed to staging May 10, 2026 04:29 View deployment

fix: 进一步脱敏 probe-subscription-endpoints 日志中的 orgUUID

5c499d3

将 orgUUID 截断长度从 8 字符缩减到 4 字符，消除 CodeQL js/clear-text-logging 对 oauthAccount 敏感数据的告警。 Co-Authored-By: glm-5-turbo <zai-org@claude-code-best.win>

mintlify Bot deployed to staging May 10, 2026 05:44 View deployment

github-advanced-security AI found potential problems May 10, 2026

View reviewed changes

Comment thread scripts/probe-subscription-endpoints.ts Dismissed

claude-code-best merged commit 3f0f699 into main May 10, 2026
9 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: local memory + local vault wiring + autofix-pr + CI mock isolation (refactor)#445

feat: local memory + local vault wiring + autofix-pr + CI mock isolation (refactor)#445
claude-code-best merged 16 commits intomainfrom
feature/many-feature-packagee

claude-code-best commented May 10, 2026 •

edited by blacksmith-sh Bot

Loading

Uh oh!

mintlify Bot commented May 10, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented May 10, 2026 •

edited

Loading

Review skipped

Uh oh!

codecov-commenter commented May 10, 2026 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

claude-code-best commented May 10, 2026 • edited by blacksmith-sh Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mintlify Bot commented May 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai Bot commented May 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

codecov-commenter commented May 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

claude-code-best commented May 10, 2026 •

edited by blacksmith-sh Bot

Loading

mintlify Bot commented May 10, 2026 •

edited

Loading

coderabbitai Bot commented May 10, 2026 •

edited

Loading

codecov-commenter commented May 10, 2026 •

edited

Loading