Skip to content

feat: add tool parallelism & shell security deep-dives, update compression#32

Merged
wenshao merged 1 commit into
mainfrom
feat/three-deep-dives
Apr 3, 2026
Merged

feat: add tool parallelism & shell security deep-dives, update compression#32
wenshao merged 1 commit into
mainfrom
feat/three-deep-dives

Conversation

@wenshao

@wenshao wenshao commented Apr 3, 2026

Copy link
Copy Markdown
Owner

Summary

Three comparison articles (795 new lines) covering Claude Code vs Qwen Code architectural differences:

1. context-compression-deep-dive.md (updated)

  • Rewrote Claude Code section: 3-layer compression (MicroCompact + API + Full), cache_edits API, ~93% auto-trigger, 9-section summary prompt, post-compact file restoration
  • Rewrote Qwen Code section: 70% threshold, character-based split, XML state_snapshot
  • Removed "仍未知" from Claude Code闭源 section (now source-verified)

2. tool-parallelism-deep-dive.md (new, 315 lines)

Dimension Claude Code Qwen Code
Concurrency Smart batching (isConcurrencySafe) Type-based (Agent only)
Max concurrent 10 1 (non-Agent)
Streaming execution
Context queue N/A

3. shell-security-deep-dive.md (new, 373 lines)

Dimension Claude Code Qwen Code
Approach 25+ pattern validators AST read-only classification
Decision 3-state (allow/ask/deny) 2-state (allow/ask)
Subcommand maps Minimal 52 git + 10 tools
Execution child_process + sandbox PTY (node-pty)

Test plan

  • Verify markdown tables render correctly
  • Spot-check 3+ source code line number references

🤖 Generated with Claude Code

…ssion article

Three articles covering Claude Code vs Qwen Code architectural differences:

1. context-compression-deep-dive.md (updated, 556 lines)
   - Rewrote Claude Code section with source-verified details: 3-layer compression,
     MicroCompact cache_edits API, autocompact ~93% threshold, 9-section summary
     prompt, post-compact 5-file restoration
   - Rewrote Qwen Code section: 70% threshold, character-based split, XML snapshot
   - Updated 闭源 section: Claude Code no longer has "仍未知" items

2. tool-parallelism-deep-dive.md (new, 315 lines)
   - Claude Code: smart batching via isConcurrencySafe(), max 10 concurrent,
     context modification queuing, StreamingToolExecutor, Bash error cascading
   - Qwen Code: type-based split (Agent parallel, others sequential),
     7-state tool machine, 5-level permission flow

3. shell-security-deep-dive.md (new, 373 lines)
   - Claude Code: 25+ validators pipeline, 3 quote extraction variants,
     tree-sitter AST for false positive elimination, 18 Zsh commands
   - Qwen Code: AST-first read-only classification, 41 root commands,
     52 git subcommands, PTY execution, minimum-scope permission rules

4 rounds of audit: markdown tables, line count verification, terminology.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@wenshao wenshao merged commit 4438ce5 into main Apr 3, 2026
wenshao added a commit that referenced this pull request Apr 5, 2026
Closed PR #72 (qwen3.6-plus) — 22 of 26 items duplicated existing 183.
Extracted 4 new items to p2-tools:
- #31 /plan (plan mode)
- #32 /rename (session rename)
- #33 /upgrade (version upgrade + changelog)
- #34 Plugin system (aggregated container for commands+skills+hooks+MCP)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
wenshao added a commit that referenced this pull request Apr 5, 2026
PR #102: 3/5 duplicated, 2 new (useTaskListWatcher, useDirectConnect).
PR #104: 4/5 duplicated with PR #101, 1 new (useAssistantHistory).

New P3 items: #32-#34. Total: 217 items.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
wenshao added a commit that referenced this pull request Apr 5, 2026
New items from second round of source code comparison:

P0 (2 items):
- #19: Environment variable sanitization (25+ patterns)
- #20: Dangerous command blacklist (rm -rf, find -exec, git -c, etc.)

P1 (4 items):
- #21: Edit fuzzy matching with Levenshtein distance (10% tolerance)
- #22: Omission placeholder detection (prevent "// ... rest")
- #23: JIT context discovery for read/write/edit tools
- #24: OS-level sandbox (Linux bwrap, macOS Seatbelt, Windows)

P2 (6 items):
- #25: Folder trust discovery (pre-execution scanning)
- #26: Web fetch rate limiting + SSRF hardening
- #27: Grep advanced parameters (include/exclude/names_only)
- #28: Advanced vim operations (big words, find, replace, toggle)
- #29: Footer customization dialog
- #30: Write file LLM content correction

P3 (2 items):
- #31: OAuth flow refactoring (shared utils + RFC 9728)
- #32: Conseca safety framework (context-aware policy)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant