Skip to content

Commit 1700134

Browse files
MaxHaiComclaude
MaxHaiCom
and
claude
committed
feat: initial CodeCLI community edition 1.0.0
Open-source MPL-2.0 desktop tool for installing, configuring, diagnosing and maintaining Claude Code / Codex CLI on macOS and Windows. Commercial activation, remote assistance and operator infrastructure are excluded by design; see README boundary section. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
0 parents  commit 1700134

100 files changed

Lines changed: 37132 additions & 0 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.cargo/audit.toml‎

Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
# Public dependency-audit policy.
2+
#
3+
# Keep `cargo audit --deny warnings` fail-closed. The exceptions below are
4+
# exact RustSec advisory IDs already present in the current Tauri 2 dependency
5+
# graph; a new advisory, a new crate, or an ID change still fails CI.
6+
#
7+
# Review deadline: 2026-10-15 (or immediately after a Tauri upgrade).
8+
9+
[advisories]
10+
ignore = [
11+
# Linux-only GTK3 stack. CodeCLI is released for macOS and Windows only;
12+
# The release gate parses `cargo tree --edges normal,build` for arm64/x86_64
13+
# macOS and x86_64 Windows and proves these crates are absent from every
14+
# shipped target graph (not merely present somewhere in Cargo.lock).
15+
"RUSTSEC-2024-0411", # gdkwayland-sys: unmaintained
16+
"RUSTSEC-2024-0412", # gdk: unmaintained
17+
"RUSTSEC-2024-0413", # atk: unmaintained
18+
"RUSTSEC-2024-0414", # gdkx11-sys: unmaintained
19+
"RUSTSEC-2024-0415", # gtk: unmaintained
20+
"RUSTSEC-2024-0416", # atk-sys: unmaintained
21+
"RUSTSEC-2024-0417", # gdkx11: unmaintained
22+
"RUSTSEC-2024-0418", # gdk-sys: unmaintained
23+
"RUSTSEC-2024-0419", # gtk3-macros: unmaintained
24+
"RUSTSEC-2024-0420", # gtk-sys: unmaintained
25+
"RUSTSEC-2024-0429", # glib: unsound API, Linux-only and not shipped
26+
"RUSTSEC-2024-0370", # proc-macro-error, reachable only through Linux glib
27+
28+
# Tauri 2.11.5 -> tauri-utils 2.9.3 -> urlpattern 0.3.0 currently pins the
29+
# unmaintained `unic-*` family on every target. These are informational
30+
# maintenance advisories, not reported vulnerabilities or unsoundness.
31+
# There is no direct application dependency to replace; remove these exact
32+
# exceptions as soon as upstream Tauri/urlpattern migrates.
33+
"RUSTSEC-2025-0075", # unic-char-range
34+
"RUSTSEC-2025-0080", # unic-common
35+
"RUSTSEC-2025-0081", # unic-char-property
36+
"RUSTSEC-2025-0098", # unic-ucd-version
37+
"RUSTSEC-2025-0100", # unic-ucd-ident
38+
]
39+
40+
[output]
41+
# Explicitly keep every non-ignored informational category release-blocking.
42+
deny = ["unmaintained", "unsound", "yanked"]
43+
format = "terminal"
44+
quiet = false
45+
show_tree = true
46+
47+
[yanked]
48+
enabled = true
49+
update_index = true

‎.gitattributes‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
* text=auto eol=lf
2+
3+
# Release and security hashes must not depend on a contributor's autocrlf.
4+
*.ps1 text eol=lf
5+
*.sh text eol=lf
6+
7+
*.icns binary
8+
*.ico binary
9+
*.png binary

‎.github/CODEOWNERS‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# Default review owner
2+
* @Hardboiled98k
3+
4+
# Security- and release-sensitive areas
5+
/.github/ @Hardboiled98k
6+
/src-tauri/ @Hardboiled98k
7+
/SECURITY.md @Hardboiled98k
8+
/LICENSE @Hardboiled98k

‎.github/ISSUE_TEMPLATE/bug_report.yml‎

Lines changed: 82 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,82 @@
1+
name: Bug Report
2+
description: 报告可复现的 CodeCLI 缺陷
3+
title: "[Bug]: "
4+
labels:
5+
- bug
6+
body:
7+
- type: markdown
8+
attributes:
9+
value: |
10+
感谢反馈。安全漏洞请不要在这里公开，请改按 SECURITY.md 私下报告。
11+
请删除 API Key、Token、Cookie、用户名、私人路径和项目内容。
12+
- type: checkboxes
13+
id: checks
14+
attributes:
15+
label: 提交前确认
16+
options:
17+
- label: 我已搜索现有 Issue，未发现相同问题。
18+
required: true
19+
- label: 我没有附上 API Key、密码、Token、Cookie 或私人文件。
20+
required: true
21+
- label: 这不是需要私下报告的安全漏洞。
22+
required: true
23+
- type: input
24+
id: version
25+
attributes:
26+
label: CodeCLI 版本或提交号
27+
placeholder: 例如 v1.0.0 或完整 commit SHA
28+
validations:
29+
required: true
30+
- type: dropdown
31+
id: os
32+
attributes:
33+
label: 操作系统
34+
options:
35+
- macOS Apple Silicon
36+
- macOS Intel
37+
- Windows 11 x64
38+
- Windows 10 x64
39+
- 其他 / Unsupported
40+
validations:
41+
required: true
42+
- type: input
43+
id: os_version
44+
attributes:
45+
label: 操作系统版本
46+
placeholder: 例如 macOS 15.5 / Windows 11 24H2
47+
validations:
48+
required: true
49+
- type: textarea
50+
id: steps
51+
attributes:
52+
label: 复现步骤
53+
description: 请给出最小且确定的步骤。
54+
placeholder: |
55+
1. 打开……
56+
2. 选择……
57+
3. 出现……
58+
validations:
59+
required: true
60+
- type: textarea
61+
id: expected
62+
attributes:
63+
label: 预期结果
64+
validations:
65+
required: true
66+
- type: textarea
67+
id: actual
68+
attributes:
69+
label: 实际结果
70+
validations:
71+
required: true
72+
- type: textarea
73+
id: logs
74+
attributes:
75+
label: 已脱敏的日志或截图
76+
description: 可留空。提交前请再次人工检查敏感信息。
77+
render: shell
78+
- type: textarea
79+
id: context
80+
attributes:
81+
label: 其他信息
82+
description: 目标 CLI、Provider、安装来源，以及是否能稳定复现。

‎.github/ISSUE_TEMPLATE/config.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
blank_issues_enabled: false
2+
contact_links:
3+
- name: 安全漏洞 / Security vulnerability
4+
url: https://github.com/Hardboiled98k/codecli/blob/main/SECURITY.md
5+
about: 请勿公开漏洞细节或密钥；请按安全政策私下报告。
6+
- name: 社区支持边界 / Support policy
7+
url: https://github.com/Hardboiled98k/codecli/blob/main/SUPPORT.md
8+
about: 提交问题前请先阅读支持范围和敏感信息规则。

‎.github/ISSUE_TEMPLATE/feature_request.yml‎

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
name: Feature Request
2+
description: 建议一个符合社区版边界的新功能
3+
title: "[Feature]: "
4+
labels:
5+
- enhancement
6+
body:
7+
- type: markdown
8+
attributes:
9+
value: |
10+
大型功能、新网络请求或新增依赖应先讨论设计。社区版不接受远程控制、静默遥测或运营方激活 DRM。
11+
- type: checkboxes
12+
id: checks
13+
attributes:
14+
label: 提交前确认
15+
options:
16+
- label: 我已搜索现有 Issue 和 Pull Request。
17+
required: true
18+
- label: 该建议不要求远程控制、静默遥测、密钥收集或鉴权绕过。
19+
required: true
20+
- type: textarea
21+
id: problem
22+
attributes:
23+
label: 要解决的问题
24+
description: 请描述用户场景，而不只是指定实现。
25+
validations:
26+
required: true
27+
- type: textarea
28+
id: proposal
29+
attributes:
30+
label: 建议方案
31+
description: 请说明交互、平台范围和失败时如何恢复。
32+
validations:
33+
required: true
34+
- type: textarea
35+
id: alternatives
36+
attributes:
37+
label: 已考虑的替代方案
38+
- type: textarea
39+
id: security_privacy
40+
attributes:
41+
label: 安全与隐私影响
42+
description: 是否增加网络请求、依赖、文件写入、提权或敏感数据处理？
43+
validations:
44+
required: true
45+
- type: textarea
46+
id: context
47+
attributes:
48+
label: 其他背景

‎.github/PULL_REQUEST_TEMPLATE.md‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
## 变更说明
2+
3+
<!-- 说明问题、解决方案和为什么需要这项变更。关联 Issue，例如 Closes #123。 -->
4+
5+
## 验证
6+
7+
<!-- 列出实际运行的命令及结果；无法验证的平台请明确写出。 -->
8+
9+
- [ ] `pnpm build`
10+
- [ ] `cargo fmt --all -- --check`
11+
- [ ] `cargo check --all-targets --locked`
12+
- [ ] `cargo test --all-targets --locked`
13+
- [ ] `cargo clippy --all-targets --locked -- -D warnings`
14+
15+
## 风险与回滚
16+
17+
<!-- 说明涉及的平台、网络、权限、文件写入和回滚方式。 -->
18+
19+
## 提交检查
20+
21+
- [ ] 变更聚焦，没有无关重构或降低现有门禁。
22+
- [ ] 没有提交密钥、Token、Cookie、真实用户数据、生产地址或签名材料。
23+
- [ ] 没有新增远程控制、静默遥测或运营方激活 DRM。
24+
- [ ] 新增网络请求、下载源和依赖已说明目的、来源、完整性与许可证。
25+
- [ ] 配置写入/删除仍限制在可证明由 CodeCLI 管理的范围。
26+
- [ ] 用户可见行为变化已同步更新文档；UI 变化已附脱敏截图。
27+
- [ ] 我有权提交这些内容，并同意贡献按 MPL-2.0 分发。

‎.github/dependabot.yml‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: npm
4+
directory: /
5+
schedule:
6+
interval: weekly
7+
day: monday
8+
time: "02:00"
9+
timezone: Asia/Shanghai
10+
open-pull-requests-limit: 5
11+
groups:
12+
javascript-dependencies:
13+
patterns:
14+
- "*"
15+
16+
- package-ecosystem: cargo
17+
directory: /src-tauri
18+
schedule:
19+
interval: weekly
20+
day: monday
21+
time: "02:15"
22+
timezone: Asia/Shanghai
23+
open-pull-requests-limit: 5
24+
groups:
25+
rust-dependencies:
26+
patterns:
27+
- "*"
28+
29+
- package-ecosystem: github-actions
30+
directory: /
31+
schedule:
32+
interval: weekly
33+
day: monday
34+
time: "02:30"
35+
timezone: Asia/Shanghai
36+
open-pull-requests-limit: 5

0 commit comments

Comments
 (0)