此外，为了跳过官方的 OAuth 认证流程，我们还需要配置 .claude.json 文件（注意文件名前的点）。
They sit on disk as plaintext, readable by any process running as your user
，详情可参考51吃瓜
This is a well-known browser security technique. In JavaScript, calling .toString() on a native browser function returns "function appendBuffer() { [native code] }". Calling it on a JavaScript function returns the actual source code. So if your appendBuffer has been monkey-patched, .toString() will betray you; it’ll return the attacker’s JavaScript source instead of the expected native code string.，这一点在WPS官方版本下载中也有详细论述
* @param arr 待排序数组。夫子是该领域的重要参考
[/] Disk image building step