From 85972b73ea32f438cc1866607b1cbc8675640af9 Mon Sep 17 00:00:00 2001
From: catlog22 <catlog22@github.com>
Date: Tue, 13 Jan 2026 21:49:08 +0800
Subject: [PATCH] feat: update CSRF protection logic and enhance GPU detection
 method; improve i18n for hook wizard templates

---
 ccw/src/core/auth/csrf-middleware.ts          |  4 +++-
 .../core/routes/codexlens/config-handlers.ts  | 21 +++++++++++--------
 ccw/src/templates/dashboard-js/i18n.js        | 18 ++++++++++++++--
 3 files changed, 31 insertions(+), 12 deletions(-)

diff --git a/ccw/src/core/auth/csrf-middleware.ts b/ccw/src/core/auth/csrf-middleware.ts
index 119d1fba..5c0a6084 100644
--- a/ccw/src/core/auth/csrf-middleware.ts
+++ b/ccw/src/core/auth/csrf-middleware.ts
@@ -113,7 +113,9 @@ export async function csrfValidation(ctx: CsrfMiddlewareContext): Promise<boolea
   const { pathname, req, res } = ctx;
 
   if (!pathname.startsWith('/api/')) return true;
-  if (envFlagEnabled('CCW_DISABLE_CSRF')) return true;
+  // CSRF is disabled by default for local deployment scenarios.
+  // Set CCW_ENABLE_CSRF=1 to enable CSRF protection.
+  if (!envFlagEnabled('CCW_ENABLE_CSRF')) return true;
 
   const method = (req.method || 'GET').toUpperCase();
   if (!['POST', 'PUT', 'PATCH', 'DELETE'].includes(method)) return true;
diff --git a/ccw/src/core/routes/codexlens/config-handlers.ts b/ccw/src/core/routes/codexlens/config-handlers.ts
index 247eaa90..0e43cb49 100644
--- a/ccw/src/core/routes/codexlens/config-handlers.ts
+++ b/ccw/src/core/routes/codexlens/config-handlers.ts
@@ -451,18 +451,21 @@ export async function handleCodexLensConfigRoutes(ctx: RouteContext): Promise<bo
       const devices: Array<{ name: string; type: string; index: number }> = [];
 
       if (process.platform === 'win32') {
-        // Windows: Use WMIC to get GPU info
+        // Windows: Use PowerShell Get-CimInstance (wmic is deprecated in Windows 11)
         try {
           const { execSync } = await import('child_process');
-          const wmicOutput = execSync('wmic path win32_VideoController get name', {
-            encoding: 'utf-8',
-            timeout: EXEC_TIMEOUTS.SYSTEM_INFO,
-            stdio: ['pipe', 'pipe', 'pipe']
-          });
+          const psOutput = execSync(
+            'powershell -NoProfile -Command "(Get-CimInstance Win32_VideoController).Name"',
+            {
+              encoding: 'utf-8',
+              timeout: EXEC_TIMEOUTS.SYSTEM_INFO,
+              stdio: ['pipe', 'pipe', 'pipe']
+            }
+          );
 
-          const lines = wmicOutput.split('\n')
+          const lines = psOutput.split('\n')
             .map(line => line.trim())
-            .filter(line => line && line !== 'Name');
+            .filter(line => line);
 
           lines.forEach((name, index) => {
             if (name) {
@@ -476,7 +479,7 @@ export async function handleCodexLensConfigRoutes(ctx: RouteContext): Promise<bo
             }
           });
         } catch (e) {
-          console.warn('[CodexLens] WMIC GPU detection failed:', (e as Error).message);
+          console.warn('[CodexLens] PowerShell GPU detection failed:', (e as Error).message);
         }
       } else {
         // Linux/Mac: Try nvidia-smi for NVIDIA GPUs
diff --git a/ccw/src/templates/dashboard-js/i18n.js b/ccw/src/templates/dashboard-js/i18n.js
index 6b81c907..ba49e744 100644
--- a/ccw/src/templates/dashboard-js/i18n.js
+++ b/ccw/src/templates/dashboard-js/i18n.js
@@ -1092,7 +1092,14 @@ const i18n = {
 
     // Hook Wizard Templates
     'hook.wizard.memoryUpdate': 'Memory Update Hook',
-    'hook.wizard.memoryUpdateDesc': 'Automatically update CLAUDE.md documentation based on code changes',
+    'hook.wizard.memoryUpdateDesc': 'Queue-based CLAUDE.md updates with configurable threshold and timeout',
+    'hook.wizard.queueBasedUpdate': 'Queue-Based Update',
+    'hook.wizard.queueBasedUpdateDesc': 'Batch updates when threshold reached or timeout expires',
+    'hook.wizard.thresholdPaths': 'Threshold (paths)',
+    'hook.wizard.thresholdPathsDesc': 'Number of paths to trigger batch update',
+    'hook.wizard.timeoutSeconds': 'Timeout (seconds)',
+    'hook.wizard.timeoutSecondsDesc': 'Auto-flush queue after this time',
+    // Legacy keys (kept for compatibility)
     'hook.wizard.onSessionEnd': 'On Session End',
     'hook.wizard.onSessionEndDesc': 'Update documentation when Claude session ends',
     'hook.wizard.periodicUpdate': 'Periodic Update',
@@ -3238,7 +3245,14 @@ const i18n = {
 
     // Hook Wizard Templates
     'hook.wizard.memoryUpdate': '记忆更新钩子',
-    'hook.wizard.memoryUpdateDesc': '根据代码更改自动更新 CLAUDE.md 文档',
+    'hook.wizard.memoryUpdateDesc': '基于队列的 CLAUDE.md 更新，支持阈值和超时配置',
+    'hook.wizard.queueBasedUpdate': '队列批量更新',
+    'hook.wizard.queueBasedUpdateDesc': '达到路径数量阈值或超时时批量更新',
+    'hook.wizard.thresholdPaths': '阈值（路径数）',
+    'hook.wizard.thresholdPathsDesc': '触发批量更新的路径数量',
+    'hook.wizard.timeoutSeconds': '超时（秒）',
+    'hook.wizard.timeoutSecondsDesc': '超过此时间自动刷新队列',
+    // 保留旧键以兼容
     'hook.wizard.onSessionEnd': '会话结束时',
     'hook.wizard.onSessionEndDesc': 'Claude 会话结束时更新文档',
     'hook.wizard.periodicUpdate': '定期更新',