@antonior/claude-code-setup 2.0.0 → 2.0.2

package/README.md

@@ -41,6 +41,7 @@ The installer installs these for you if missing:
 | `jq` | hooks (JSON parsing) | **Required** — install aborts without it. |
 | `python3` | `transcript-search` MCP + video-FPS hook | Best-effort — feature stays dormant if it can't install. |
 | `ffmpeg` | `claude-video-vision` MCP | Best-effort. |
+| `tmux` | optional `cr` tmux launch workflow (lives in shell config, not shipped) | Best-effort. |
 | `git`, `eslint`, `tsc` | commit-scan / lint / typecheck hooks | Optional — hooks no-op cleanly when absent. |
 
 ## What it installs (into `~/.claude/`)
@@ -85,6 +86,33 @@ The installer reproduces **100% of the configuration and behaviour**. Two things
 1. **Log into Claude Code** (your account — you'd do this on any new machine anyway).
 2. **Give `claude-video-vision` your own API key** if you use video analysis.
 
+## Shell workflow (optional, not shipped)
+
+The package mirrors `~/.claude` only, so anything in your shell config (`~/.zshrc`) is **not** shipped. Add it per machine. These two bits drive how I launch Claude:
+
+**Start Claude in bypass mode** (skips per-tool permission prompts). Note: `skipDangerousModePermissionPrompt` in `settings.json` only suppresses the warning; this alias is what actually starts a session in bypass mode:
+
+```sh
+alias claude="claude --dangerously-skip-permissions"
+```
+
+**`cr` — launch Claude inside a tmux session** (named after the current directory, or pass a name: `cr myname`):
+
+```sh
+cr() {
+  local session="${1:-$(basename "$PWD")}"
+  if tmux has-session -t "$session" 2>/dev/null; then
+    tmux attach-session -t "$session"
+  else
+    tmux new-session -s "$session" -d -c "$PWD"
+    tmux send-keys -t "$session" "claude --dangerously-skip-permissions --remote-control '$session'" Enter
+    tmux attach-session -t "$session"
+  fi
+}
+```
+
+`cr` needs `tmux`, which the installer now installs best effort (see the dependencies table). After editing `~/.zshrc`, run `source ~/.zshrc` or open a new terminal.
+
 ## Maintaining (for me)
 
 The package is an exact mirror of my own `~/.claude`. To refresh it from my live config and publish:

package/bin/install.js

@@ -153,6 +153,7 @@ function main() {
     if (!brewInstall('jq', { required: true })) process.exit(1);
     brewInstall('python3');
     brewInstall('ffmpeg');
+    brewInstall('tmux');
   }
 
   // 2. Mirror every shipped config file into ~/.claude at the same relative

package/files/commands/updateClaudeNpm.md

@@ -24,7 +24,7 @@ The allowlist in `scripts/sync-from-local.sh` already encodes this. Do NOT widen
 2. **Clone fresh** into a temp dir: `gh repo clone RadosavAntonio/claude-code-setup <tmp>` (or `git pull` if already cloned). Work there.
 3. **Sync.** Run `bash scripts/sync-from-local.sh`. It rebuilds `files/` as an exact mirror of my current allowlisted config.
 4. **No-op guard.** `git add -A`, then `git diff --cached --quiet`. If it reports no changes, STOP and tell me "already in sync, nothing to publish." Do not bump or publish.
-5. **Secret gate.** Run `/scan-secrets` over the staged files. If it flags anything, STOP and show me — do not publish.
+5. **Secret gate.** From the clone, run `bash scripts/scan-staged.sh`. It scans the staged diff for token signatures (AWS, GitHub, Slack, OpenAI, PEM keys, JWTs, generic `key/secret/token=...`) and exits non-zero if it finds any. Do NOT rely on `/scan-secrets` here — the shell cwd may not be this repo, so a skill that scans the current dir would falsely report clean. If the script exits non-zero, STOP and show me — do not publish.
 6. **Bump.** `npm version patch --no-git-tag-version`.
 7. **Commit + push.** Commit with a normal-English message summarising the diff (end with the `Co-Authored-By: Claude ...` line), push to `main`.
 8. **Publish.** `npm publish --access public`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@antonior/claude-code-setup",
-  "version": "2.0.0",
+  "version": "2.0.2",
   "description": "Install Antonio's full Claude Code setup: hooks, slash commands, skills, statusline, settings, and MCP servers (transcript-search + video-vision)",
   "bin": {
     "claude-code-setup": "bin/install.js"