ccjk 10.2.0 → 10.3.0

package/README.md

@@ -133,6 +133,26 @@ ccjk mcp install filesystem puppeteer postgres
 # Done. No manual config.
 ```
 
+### 🔓 Zero-Config Permission Presets (NEW)
+One-click permission configuration for different use cases:
+```bash
+ccjk zc --list              # View available presets
+ccjk zc --preset max        # Maximum permissions (all commands)
+ccjk zc --preset dev        # Developer preset (build tools, git, npm)
+ccjk zc --preset safe       # Safe preset (read-only operations)
+```
+
+**Available Presets:**
+- **max** — All common commands, file operations, and MCP servers (100+ permissions)
+- **dev** — Build tools, git, package managers, and file operations (50+ permissions)
+- **safe** — Read-only commands, no file modifications (20+ permissions)
+
+Each preset automatically:
+- ✅ Backs up your current settings
+- ✅ Merges with existing permissions (no data loss)
+- ✅ Removes invalid/dangerous patterns
+- ✅ Shows exactly what will be added
+
 ## 📖 Essential Commands
 
 ```bash
@@ -158,6 +178,14 @@ ccjk mcp list
 # Memory & Context
 ccjk memory --enable
 ccjk compact         # Clean up conversation
+
+# Zero-Config Permission Presets (NEW)
+ccjk zc --list       # List available presets
+ccjk zc --preset max # Apply maximum permissions
+ccjk zc --preset dev # Apply developer preset
+ccjk zc --preset safe # Apply safe (read-only) preset
+
+# Other Commands
 npx ccjk u         # Update workflows
 npx ccjk sync      # Cloud sync
 npx ccjk doctor    # Health check

package/dist/chunks/ccr.mjs

@@ -27,6 +27,7 @@ import './json-config.mjs';
 import './config.mjs';
 import './claude-config.mjs';
 import './platform.mjs';
+import '../shared/ccjk.BiCrMV5O.mjs';
 import '../shared/ccjk.BFQ7yr5S.mjs';
 import './prompts.mjs';
 import '../shared/ccjk.DHbrGcgg.mjs';
@@ -39,7 +40,7 @@ import './features.mjs';
 import './config2.mjs';
 import 'node:util';
 import './init.mjs';
-import '../shared/ccjk.IbImMVWM.mjs';
+import '../shared/ccjk.DVBW2wxp.mjs';
 import './auto-updater.mjs';
 import './version-checker.mjs';
 import 'node:path';

package/dist/chunks/check-updates.mjs

@@ -33,6 +33,7 @@ import 'semver';
 import 'inquirer';
 import './config.mjs';
 import './claude-config.mjs';
+import '../shared/ccjk.BiCrMV5O.mjs';
 import '../shared/ccjk.BFQ7yr5S.mjs';
 import './prompts.mjs';
 import './package.mjs';

package/dist/chunks/claude-code-config-manager.mjs

@@ -20,6 +20,7 @@ import 'inquirer';
 import './claude-config.mjs';
 import './platform.mjs';
 import 'tinyexec';
+import '../shared/ccjk.BiCrMV5O.mjs';
 
 class ClaudeCodeConfigManager {
   static CONFIG_FILE = ZCF_CONFIG_FILE;

package/dist/chunks/claude-code-incremental-manager.mjs

@@ -4,7 +4,7 @@ import { ensureI18nInitialized, i18n } from './index2.mjs';
 import { ClaudeCodeConfigManager } from './claude-code-config-manager.mjs';
 import { a as addNumbersToChoices } from '../shared/ccjk.BFQ7yr5S.mjs';
 import { p as promptBoolean } from '../shared/ccjk.DHbrGcgg.mjs';
-import { v as validateApiKey } from '../shared/ccjk.IbImMVWM.mjs';
+import { v as validateApiKey } from '../shared/ccjk.DVBW2wxp.mjs';
 import 'node:fs';
 import 'node:process';
 import 'node:url';
@@ -24,6 +24,7 @@ import './config.mjs';
 import './claude-config.mjs';
 import './platform.mjs';
 import 'tinyexec';
+import '../shared/ccjk.BiCrMV5O.mjs';
 import 'inquirer-toggle';
 
 function getAuthTypeLabel(authType) {

package/dist/chunks/codex-config-switch.mjs

@@ -27,6 +27,7 @@ import './ccjk-config.mjs';
 import './config.mjs';
 import './claude-config.mjs';
 import './platform.mjs';
+import '../shared/ccjk.BiCrMV5O.mjs';
 import './prompts.mjs';
 import './package.mjs';
 import 'node:child_process';

package/dist/chunks/codex-provider-manager.mjs

@@ -23,6 +23,7 @@ import './json-config.mjs';
 import './config.mjs';
 import './claude-config.mjs';
 import './platform.mjs';
+import '../shared/ccjk.BiCrMV5O.mjs';
 import '../shared/ccjk.BFQ7yr5S.mjs';
 import './prompts.mjs';
 import './package.mjs';

package/dist/chunks/config-switch.mjs

@@ -24,6 +24,7 @@ import './config.mjs';
 import './claude-config.mjs';
 import './platform.mjs';
 import 'tinyexec';
+import '../shared/ccjk.BiCrMV5O.mjs';
 import 'ora';
 import 'semver';
 import './prompts.mjs';

package/dist/chunks/config.mjs

@@ -8,6 +8,7 @@ import { ensureI18nInitialized, i18n } from './index2.mjs';
 import { s as setPrimaryApiKey, c as addCompletedOnboarding, d as deepMerge } from './claude-config.mjs';
 import { exists, ensureDir, copyDir, writeFileAtomic, copyFile } from './fs-operations.mjs';
 import { readJsonConfig, writeJsonConfig } from './json-config.mjs';
+import { m as mergeAndCleanPermissions } from '../shared/ccjk.BiCrMV5O.mjs';
 
 const MODEL_ENV_KEYS = [
   "ANTHROPIC_MODEL",
@@ -23,99 +24,6 @@ function clearModelEnv(env) {
   }
 }
 
-const INVALID_PERMISSION_NAMES = /* @__PURE__ */ new Set([
-  "AllowEdit",
-  "AllowWrite",
-  "AllowRead",
-  "AllowExec",
-  "AllowCreateProcess",
-  "AllowKillProcess",
-  "AllowNetworkAccess",
-  "AllowFileSystemAccess",
-  "AllowShellAccess",
-  "AllowHttpAccess"
-]);
-const DANGEROUS_BASH_PATTERNS = /* @__PURE__ */ new Set([
-  "Bash(passwd *)",
-  "Bash(reboot *)",
-  "Bash(shutdown *)",
-  "Bash(halt *)",
-  "Bash(poweroff *)",
-  "Bash(init *)",
-  "Bash(telinit *)",
-  "Bash(rm *)",
-  "Bash(kill *)",
-  "Bash(pkill *)",
-  "Bash(killall *)",
-  "Bash(su *)",
-  "Bash(sudo *)",
-  "Bash(visudo *)",
-  "Bash(useradd *)",
-  "Bash(userdel *)",
-  "Bash(usermod *)",
-  "Bash(groupadd *)",
-  "Bash(groupdel *)",
-  "Bash(groupmod *)",
-  "Bash(modprobe *)",
-  "Bash(insmod *)",
-  "Bash(rmmod *)"
-]);
-function isValidPermission(perm) {
-  if (INVALID_PERMISSION_NAMES.has(perm)) {
-    return false;
-  }
-  if (["mcp__.*", "mcp__*", "mcp__(*)"].includes(perm)) {
-    return false;
-  }
-  if (/^[a-z]/.test(perm) && !perm.startsWith("mcp__")) {
-    return false;
-  }
-  return true;
-}
-function isCoveredByWildcard(perm, wildcardPerm) {
-  const wildcardMatch = wildcardPerm.match(/^(\w+)\((.+)\)$/);
-  if (!wildcardMatch) return false;
-  const [, tool, wildcardArg] = wildcardMatch;
-  if (!wildcardArg.includes("*")) return false;
-  const permMatch = perm.match(/^(\w+)\((.+)\)$/);
-  if (!permMatch) return false;
-  const [, permTool, permArg] = permMatch;
-  if (tool !== permTool) return false;
-  const regexStr = wildcardArg.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".+");
-  return new RegExp(`^${regexStr}$`).test(permArg);
-}
-function mergeAndCleanPermissions(templatePermissions, userPermissions) {
-  const template = templatePermissions || [];
-  const user = userPermissions || [];
-  const result = [...template];
-  for (const perm of user) {
-    if (result.includes(perm)) {
-      continue;
-    }
-    if (!isValidPermission(perm)) {
-      continue;
-    }
-    if (DANGEROUS_BASH_PATTERNS.has(perm)) {
-      continue;
-    }
-    let isRedundant = false;
-    for (const templatePerm of template) {
-      if (perm.startsWith(`${templatePerm}(`)) {
-        isRedundant = true;
-        break;
-      }
-      if (isCoveredByWildcard(perm, templatePerm)) {
-        isRedundant = true;
-        break;
-      }
-    }
-    if (!isRedundant) {
-      result.push(perm);
-    }
-  }
-  return result;
-}
-
 function ensureClaudeDir() {
   ensureDir(CLAUDE_DIR);
 }
@@ -468,4 +376,4 @@ const config = {
   updateDefaultModel: updateDefaultModel
 };
 
-export { applyAiLanguageDirective as a, backupExistingConfig as b, copyConfigFiles as c, updateDefaultModel as d, getExistingApiConfig as e, configureApi as f, getExistingModelConfig as g, clearModelEnv as h, ensureClaudeDir as i, config as j, mergeAndCleanPermissions as m, promptApiConfigurationAction as p, switchToOfficialLogin as s, updateCustomModel as u };
+export { applyAiLanguageDirective as a, backupExistingConfig as b, copyConfigFiles as c, updateDefaultModel as d, getExistingApiConfig as e, configureApi as f, getExistingModelConfig as g, clearModelEnv as h, ensureClaudeDir as i, config as j, promptApiConfigurationAction as p, switchToOfficialLogin as s, updateCustomModel as u };

package/dist/chunks/config2.mjs

@@ -21,6 +21,7 @@ import 'tinyexec';
 import './fs-operations.mjs';
 import 'node:crypto';
 import 'node:fs/promises';
+import '../shared/ccjk.BiCrMV5O.mjs';
 import 'inquirer-toggle';
 
 const PROVIDER_PRESETS_URL = "https://pub-0dc3e1677e894f07bbea11b17a29e032.r2.dev/providers.json";

package/dist/chunks/config3.mjs

@@ -19,6 +19,7 @@ import 'node:crypto';
 import 'node:fs/promises';
 import './platform.mjs';
 import 'tinyexec';
+import '../shared/ccjk.BiCrMV5O.mjs';
 
 async function getConfig(key, options = {}) {
   const isZh = i18n.language === "zh-CN";

package/dist/chunks/features.mjs

@@ -12,7 +12,7 @@ import { setupCcrConfiguration } from './config2.mjs';
 import { a as isCcrInstalled, b as installCcr } from './init.mjs';
 import { r as readMcpConfig, f as fixWindowsMcpConfig, w as writeMcpConfig, b as backupMcpConfig, a as buildMcpServerConfig, m as mergeMcpServers } from './claude-config.mjs';
 import { a as applyAiLanguageDirective, g as getExistingModelConfig, u as updateCustomModel, d as updateDefaultModel, e as getExistingApiConfig, p as promptApiConfigurationAction, f as configureApi, s as switchToOfficialLogin } from './config.mjs';
-import { c as configureOutputStyle, a as modifyApiConfigPartially, v as validateApiKey, f as formatApiKeyDisplay } from '../shared/ccjk.IbImMVWM.mjs';
+import { c as configureOutputStyle, a as modifyApiConfigPartially, v as validateApiKey, f as formatApiKeyDisplay } from '../shared/ccjk.DVBW2wxp.mjs';
 import { i as isWindows } from './platform.mjs';
 import { a as addNumbersToChoices } from '../shared/ccjk.BFQ7yr5S.mjs';
 import { openSettingsJson, importRecommendedPermissions, importRecommendedEnv } from './simple-config.mjs';
@@ -43,6 +43,7 @@ import '../shared/ccjk.DKojSRzw.mjs';
 import '../shared/ccjk.DrMygfCF.mjs';
 import './installer.mjs';
 import '../shared/ccjk.BKoi8-Hy.mjs';
+import '../shared/ccjk.BiCrMV5O.mjs';
 import 'inquirer-toggle';
 
 async function handleCancellation() {

package/dist/chunks/init.mjs

@@ -4,7 +4,7 @@ import ansis from 'ansis';
 import inquirer from 'inquirer';
 import { version } from './package.mjs';
 import { m as runCodexFullInit, d as selectMcpServices, g as getMcpServices, M as MCP_SERVICE_CONFIGS } from './codex.mjs';
-import { a as modifyApiConfigPartially, b as configureApiCompletely, n as needsMigration, m as migrateSettingsForTokenRetrieval, d as displayMigrationResult, p as promptMigration, s as selectAndInstallWorkflows, c as configureOutputStyle, f as formatApiKeyDisplay, W as WORKFLOW_CONFIG_BASE } from '../shared/ccjk.IbImMVWM.mjs';
+import { a as modifyApiConfigPartially, b as configureApiCompletely, n as needsMigration, m as migrateSettingsForTokenRetrieval, d as displayMigrationResult, p as promptMigration, s as selectAndInstallWorkflows, c as configureOutputStyle, f as formatApiKeyDisplay, W as WORKFLOW_CONFIG_BASE } from '../shared/ccjk.DVBW2wxp.mjs';
 import { SETTINGS_FILE, DEFAULT_CODE_TOOL_TYPE, CODE_TOOL_BANNERS, API_DEFAULT_URL } from './constants.mjs';
 import { ensureI18nInitialized, i18n } from './index2.mjs';
 import { displayBannerWithInfo, padToDisplayWidth } from './banner.mjs';

package/dist/chunks/mcp.mjs

@@ -26,6 +26,7 @@ import 'semver';
 import 'smol-toml';
 import './ccjk-config.mjs';
 import './config.mjs';
+import '../shared/ccjk.BiCrMV5O.mjs';
 import '../shared/ccjk.BFQ7yr5S.mjs';
 import './prompts.mjs';
 import './package.mjs';

package/dist/chunks/menu.mjs

@@ -363,6 +363,7 @@ async function showSimplifiedMenu() {
   console.log(`  ${ansis.green("5.")} ${isZh ? "\u914D\u7F6E\u9ED8\u8BA4\u6A21\u578B" : "Configure Default Model"} ${ansis.dim(isZh ? "- \u8BBE\u7F6E\u9ED8\u8BA4\u6A21\u578B\uFF08opus/sonnet/sonnet 1m/\u81EA\u5B9A\u4E49\uFF09" : "- Set default model (opus/sonnet/sonnet 1m/custom)")}`);
   console.log(`  ${ansis.green("6.")} ${isZh ? "\u914D\u7F6E Claude \u5168\u5C40\u8BB0\u5FC6" : "Configure Claude Memory"} ${ansis.dim(isZh ? "- \u914D\u7F6E AI \u8F93\u51FA\u8BED\u8A00\u548C\u8F93\u51FA\u98CE\u683C" : "- Configure AI output language and style")}`);
   console.log(`  ${ansis.green("7.")} ${isZh ? "\u5BFC\u5165\u63A8\u8350\u73AF\u5883\u53D8\u91CF\u548C\u6743\u9650\u914D\u7F6E" : "Import Recommended Env & Permissions"} ${ansis.dim(isZh ? "- \u5BFC\u5165\u9690\u79C1\u4FDD\u62A4\u73AF\u5883\u53D8\u91CF\u548C\u7CFB\u7EDF\u6743\u9650\u914D\u7F6E" : "- Import privacy env vars and system permissions")}`);
+  console.log(`  ${ansis.green("8.")} ${isZh ? "\u96F6\u914D\u7F6E\u6743\u9650\u9884\u8BBE" : "Zero-Config Permission Presets"} ${ansis.dim(isZh ? "- \u4E00\u952E\u5E94\u7528\u6743\u9650\u9884\u8BBE\uFF08\u6700\u5927/\u5F00\u53D1\u8005/\u5B89\u5168\uFF09" : "- One-click permission presets (max/dev/safe)")}`);
   console.log("");
   console.log(ansis.dim(`  --------- ${isZh ? "\u5176\u4ED6\u5DE5\u5177" : "Other Tools"} ----------`));
   console.log(`  ${ansis.green("K.")} ${isZh ? "Skills \u7BA1\u7406" : "Skills Manager"} ${ansis.dim(isZh ? "- \u5B89\u88C5/\u66F4\u65B0/\u5220\u9664\u5DE5\u4F5C\u6D41\u6280\u80FD" : "- Install/update/remove workflow skills")}`);
@@ -387,7 +388,7 @@ async function showSimplifiedMenu() {
     message: isZh ? "\u8BF7\u8F93\u5165\u9009\u9879:" : "Enter option:",
     validate: (value) => {
       const normalized2 = normalizeMenuInput(value);
-      const valid = ["0", "1", "2", "3", "4", "5", "6", "7", "k", "m", "a", "p", "r", "b", "s", "-", "+", "d", "h", "q"];
+      const valid = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "k", "m", "a", "p", "r", "b", "s", "-", "+", "d", "h", "q"];
       return valid.includes(normalized2) || (isZh ? "\u8BF7\u8F93\u5165\u6709\u6548\u9009\u9879" : "Please enter a valid option");
     }
   });
@@ -426,6 +427,11 @@ async function showSimplifiedMenu() {
       await configureEnvPermissionFeature();
       break;
     }
+    case "8": {
+      const { zeroConfig } = await import('./zero-config.mjs');
+      await zeroConfig();
+      break;
+    }
     // --------- 其他工具 ----------
     case "k": {
       await ccjkSkills({});

package/dist/chunks/package.mjs

@@ -1,4 +1,4 @@
-const version = "10.2.0";
+const version = "10.3.0";
 const homepage = "https://github.com/miounet11/ccjk";
 
 export { homepage, version };

package/dist/chunks/quick-provider.mjs

@@ -566,6 +566,8 @@ const KNOWN_COMMANDS = /* @__PURE__ */ new Set([
   "vim",
   "permissions",
   "perm",
+  "zero-config",
+  "zc",
   "skills",
   "sk",
   "skill",

package/dist/chunks/quick-setup.mjs

@@ -28,11 +28,12 @@ import 'ora';
 import 'semver';
 import './config.mjs';
 import './claude-config.mjs';
+import '../shared/ccjk.BiCrMV5O.mjs';
 import '../shared/ccjk.BFQ7yr5S.mjs';
 import './prompts.mjs';
 import '../shared/ccjk.DHbrGcgg.mjs';
 import 'inquirer-toggle';
-import '../shared/ccjk.IbImMVWM.mjs';
+import '../shared/ccjk.DVBW2wxp.mjs';
 import './banner.mjs';
 import './config2.mjs';
 import 'node:util';

package/dist/chunks/simple-config.mjs

@@ -4,7 +4,7 @@ import { join, dirname } from 'pathe';
 import { exec } from 'tinyexec';
 import { SETTINGS_FILE, CLAUDE_DIR } from './constants.mjs';
 import { ensureDir, writeFileAtomic } from './fs-operations.mjs';
-import { m as mergeAndCleanPermissions } from './config.mjs';
+import { m as mergeAndCleanPermissions } from '../shared/ccjk.BiCrMV5O.mjs';
 import { g as getPlatform } from './platform.mjs';
 import 'node:os';
 import './index2.mjs';
@@ -13,11 +13,6 @@ import 'i18next';
 import 'i18next-fs-backend';
 import 'node:crypto';
 import 'node:fs/promises';
-import 'ansis';
-import 'dayjs';
-import 'inquirer';
-import './claude-config.mjs';
-import './json-config.mjs';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 function getTemplateSettings() {

package/dist/chunks/update.mjs

@@ -9,7 +9,7 @@ import { displayBanner } from './banner.mjs';
 import { readZcfConfig, updateZcfConfig } from './ccjk-config.mjs';
 import { r as readMcpConfig } from './claude-config.mjs';
 import { c as copyConfigFiles } from './config.mjs';
-import { n as needsMigration, m as migrateSettingsForTokenRetrieval, d as displayMigrationResult, p as promptMigration, u as updatePromptOnly, s as selectAndInstallWorkflows } from '../shared/ccjk.IbImMVWM.mjs';
+import { n as needsMigration, m as migrateSettingsForTokenRetrieval, d as displayMigrationResult, p as promptMigration, u as updatePromptOnly, s as selectAndInstallWorkflows } from '../shared/ccjk.DVBW2wxp.mjs';
 import { h as handleExitPromptError, a as handleGeneralError } from '../shared/ccjk.DrMygfCF.mjs';
 import { i as installMcpServices } from '../shared/ccjk.DB2UYcq0.mjs';
 import { resolveAiOutputLanguage } from './prompts.mjs';
@@ -34,6 +34,7 @@ import 'inquirer-toggle';
 import 'node:child_process';
 import 'i18next';
 import 'i18next-fs-backend';
+import '../shared/ccjk.BiCrMV5O.mjs';
 import 'node:path';
 import 'node:util';
 

package/dist/chunks/zero-config.mjs

@@ -0,0 +1,359 @@
+import { existsSync, readFileSync } from 'node:fs';
+import ansis from 'ansis';
+import inquirer from 'inquirer';
+import { SETTINGS_FILE, CLAUDE_DIR } from './constants.mjs';
+import { i18n } from './index2.mjs';
+import { ensureDir, writeFileAtomic } from './fs-operations.mjs';
+import { m as mergeAndCleanPermissions } from '../shared/ccjk.BiCrMV5O.mjs';
+import { a as addNumbersToChoices } from '../shared/ccjk.BFQ7yr5S.mjs';
+import 'node:os';
+import 'pathe';
+import 'node:process';
+import 'node:url';
+import 'i18next';
+import 'i18next-fs-backend';
+import 'node:crypto';
+import 'node:fs/promises';
+
+const MAX_PRESET = {
+  id: "max",
+  name: "Maximum Permissions",
+  description: "All common commands, file operations, and MCP servers",
+  permissions: [
+    // Package managers
+    "Bash(pnpm *)",
+    "Bash(npm *)",
+    "Bash(npx *)",
+    "Bash(NODE_ENV=* pnpm *)",
+    "Bash(yarn *)",
+    "Bash(bun *)",
+    "Bash(deno *)",
+    // Version control
+    "Bash(git *)",
+    // Build tools
+    "Bash(make *)",
+    "Bash(cmake *)",
+    "Bash(cargo *)",
+    "Bash(go *)",
+    "Bash(rustc *)",
+    // Container tools
+    "Bash(docker *)",
+    "Bash(docker-compose *)",
+    "Bash(podman *)",
+    // Programming languages
+    "Bash(python *)",
+    "Bash(python3 *)",
+    "Bash(node *)",
+    "Bash(ruby *)",
+    "Bash(php *)",
+    "Bash(java *)",
+    "Bash(javac *)",
+    // Shell utilities
+    "Bash(which *)",
+    "Bash(cat *)",
+    "Bash(ls *)",
+    "Bash(echo *)",
+    "Bash(grep *)",
+    "Bash(find *)",
+    "Bash(head *)",
+    "Bash(tail *)",
+    "Bash(wc *)",
+    "Bash(sort *)",
+    "Bash(uniq *)",
+    "Bash(cut *)",
+    "Bash(sed *)",
+    "Bash(awk *)",
+    "Bash(tr *)",
+    "Bash(xargs *)",
+    // File operations
+    "Bash(mkdir *)",
+    "Bash(touch *)",
+    "Bash(cp *)",
+    "Bash(mv *)",
+    "Bash(chmod *)",
+    "Bash(chown *)",
+    "Bash(ln *)",
+    // Network tools
+    "Bash(curl *)",
+    "Bash(wget *)",
+    "Bash(ping *)",
+    "Bash(netstat *)",
+    "Bash(ss *)",
+    // System info
+    "Bash(ps *)",
+    "Bash(top *)",
+    "Bash(htop *)",
+    "Bash(df *)",
+    "Bash(du *)",
+    "Bash(free *)",
+    "Bash(uname *)",
+    // Text editors
+    "Bash(vim *)",
+    "Bash(nano *)",
+    "Bash(emacs *)",
+    "Bash(code *)",
+    // Compression
+    "Bash(tar *)",
+    "Bash(gzip *)",
+    "Bash(gunzip *)",
+    "Bash(zip *)",
+    "Bash(unzip *)",
+    // Package managers (system)
+    "Bash(brew *)",
+    "Bash(apt *)",
+    "Bash(apt-get *)",
+    "Bash(yum *)",
+    "Bash(dnf *)",
+    "Bash(pacman *)",
+    // File operations (Claude Code tools)
+    "Read(*)",
+    "Edit(*)",
+    "Write(*)",
+    "NotebookEdit(*)",
+    // Web access
+    "WebFetch(*)",
+    // MCP servers (wildcard for all)
+    "MCP(*)"
+  ],
+  env: {
+    ANTHROPIC_MODEL: "",
+    ANTHROPIC_DEFAULT_HAIKU_MODEL: "",
+    ANTHROPIC_DEFAULT_SONNET_MODEL: "",
+    ANTHROPIC_DEFAULT_OPUS_MODEL: ""
+  }
+};
+const DEV_PRESET = {
+  id: "dev",
+  name: "Developer Preset",
+  description: "Build tools, git, package managers, and file operations",
+  permissions: [
+    // Package managers
+    "Bash(pnpm *)",
+    "Bash(npm *)",
+    "Bash(npx *)",
+    "Bash(NODE_ENV=* pnpm *)",
+    "Bash(yarn *)",
+    "Bash(bun *)",
+    // Version control
+    "Bash(git *)",
+    // Build tools
+    "Bash(make *)",
+    "Bash(cargo *)",
+    "Bash(go *)",
+    // Programming languages
+    "Bash(python *)",
+    "Bash(python3 *)",
+    "Bash(node *)",
+    // Shell utilities
+    "Bash(which *)",
+    "Bash(cat *)",
+    "Bash(ls *)",
+    "Bash(echo *)",
+    "Bash(grep *)",
+    "Bash(find *)",
+    "Bash(head *)",
+    "Bash(tail *)",
+    "Bash(wc *)",
+    "Bash(sort *)",
+    // File operations
+    "Bash(mkdir *)",
+    "Bash(touch *)",
+    "Bash(cp *)",
+    "Bash(mv *)",
+    "Bash(chmod *)",
+    // File operations (Claude Code tools)
+    "Read(*)",
+    "Edit(*)",
+    "Write(*)",
+    "NotebookEdit(*)",
+    // Web access for docs
+    "WebFetch(*)"
+  ],
+  env: {
+    ANTHROPIC_MODEL: ""
+  }
+};
+const SAFE_PRESET = {
+  id: "safe",
+  name: "Safe Preset",
+  description: "Read-only commands, no file modifications",
+  permissions: [
+    // Read-only shell utilities
+    "Bash(which *)",
+    "Bash(cat *)",
+    "Bash(ls *)",
+    "Bash(echo *)",
+    "Bash(grep *)",
+    "Bash(find *)",
+    "Bash(head *)",
+    "Bash(tail *)",
+    "Bash(wc *)",
+    "Bash(sort *)",
+    "Bash(uniq *)",
+    "Bash(cut *)",
+    // System info (read-only)
+    "Bash(ps *)",
+    "Bash(df *)",
+    "Bash(du *)",
+    "Bash(uname *)",
+    // Git read operations
+    "Bash(git status *)",
+    "Bash(git log *)",
+    "Bash(git diff *)",
+    "Bash(git show *)",
+    "Bash(git branch *)",
+    // File operations (read-only)
+    "Read(*)",
+    // Web access
+    "WebFetch(*)"
+  ]
+};
+const PRESETS = [MAX_PRESET, DEV_PRESET, SAFE_PRESET];
+function loadCurrentSettings() {
+  if (!existsSync(SETTINGS_FILE)) {
+    return {};
+  }
+  try {
+    const content = readFileSync(SETTINGS_FILE, "utf-8");
+    return JSON.parse(content);
+  } catch {
+    return {};
+  }
+}
+function saveSettings(settings) {
+  ensureDir(CLAUDE_DIR);
+  writeFileAtomic(SETTINGS_FILE, JSON.stringify(settings, null, 2));
+}
+function backupSettings() {
+  if (!existsSync(SETTINGS_FILE)) {
+    return null;
+  }
+  const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, -5);
+  const backupDir = `${CLAUDE_DIR}/backup`;
+  ensureDir(backupDir);
+  const backupPath = `${backupDir}/settings-${timestamp}.json`;
+  const content = readFileSync(SETTINGS_FILE, "utf-8");
+  writeFileAtomic(backupPath, content);
+  return backupPath;
+}
+function applyPreset(preset, currentSettings) {
+  const newSettings = { ...currentSettings };
+  if (!newSettings.permissions) {
+    newSettings.permissions = { allow: [] };
+  }
+  newSettings.permissions.allow = mergeAndCleanPermissions(
+    preset.permissions,
+    newSettings.permissions.allow || []
+  );
+  if (preset.env) {
+    newSettings.env = {
+      ...newSettings.env,
+      ...preset.env
+    };
+  }
+  return newSettings;
+}
+function showPresetDiff(preset, currentSettings) {
+  const isZh = i18n.language === "zh-CN";
+  const currentPermissions = new Set(currentSettings.permissions?.allow || []);
+  const newPermissions = preset.permissions.filter((p) => !currentPermissions.has(p));
+  console.log("");
+  console.log(ansis.bold.cyan(isZh ? "\u{1F4CB} \u9884\u8BBE\u8BE6\u60C5" : "\u{1F4CB} Preset Details"));
+  console.log(ansis.dim("\u2500".repeat(60)));
+  console.log(`${ansis.green("Name:")} ${preset.name}`);
+  console.log(`${ansis.green("Description:")} ${preset.description}`);
+  console.log("");
+  if (newPermissions.length > 0) {
+    console.log(ansis.bold.yellow(isZh ? "\u2728 \u5C06\u6DFB\u52A0\u7684\u6743\u9650:" : "\u2728 Permissions to be added:"));
+    console.log(ansis.dim(`  ${isZh ? "\u603B\u8BA1" : "Total"}: ${newPermissions.length} ${isZh ? "\u9879" : "items"}`));
+    const bashPerms = newPermissions.filter((p) => p.startsWith("Bash("));
+    const filePerms = newPermissions.filter((p) => ["Read", "Edit", "Write", "NotebookEdit"].some((t) => p.startsWith(t)));
+    const otherPerms = newPermissions.filter((p) => !bashPerms.includes(p) && !filePerms.includes(p));
+    if (bashPerms.length > 0) {
+      console.log(`  ${ansis.cyan("Bash:")} ${bashPerms.length} ${isZh ? "\u4E2A\u547D\u4EE4" : "commands"}`);
+    }
+    if (filePerms.length > 0) {
+      console.log(`  ${ansis.cyan("File:")} ${filePerms.length} ${isZh ? "\u4E2A\u64CD\u4F5C" : "operations"}`);
+    }
+    if (otherPerms.length > 0) {
+      console.log(`  ${ansis.cyan("Other:")} ${otherPerms.length} ${isZh ? "\u9879" : "items"}`);
+    }
+  } else {
+    console.log(ansis.yellow(isZh ? "\u2713 \u6240\u6709\u6743\u9650\u5DF2\u5B58\u5728" : "\u2713 All permissions already exist"));
+  }
+  console.log(ansis.dim("\u2500".repeat(60)));
+  console.log("");
+}
+async function zeroConfig(options = {}) {
+  const isZh = i18n.language === "zh-CN";
+  if (options.list) {
+    console.log("");
+    console.log(ansis.bold.cyan(isZh ? "\u{1F4E6} \u53EF\u7528\u7684\u6743\u9650\u9884\u8BBE" : "\u{1F4E6} Available Permission Presets"));
+    console.log(ansis.dim("\u2500".repeat(60)));
+    for (const preset of PRESETS) {
+      console.log(`  ${ansis.green(preset.id.padEnd(8))} - ${preset.name}`);
+      console.log(`  ${ansis.dim(" ".repeat(10))}${preset.description}`);
+      console.log(`  ${ansis.dim(" ".repeat(10))}${preset.permissions.length} ${isZh ? "\u9879\u6743\u9650" : "permissions"}`);
+      console.log("");
+    }
+    console.log(ansis.dim("\u2500".repeat(60)));
+    console.log(ansis.gray(isZh ? "\u4F7F\u7528: npx ccjk zc --preset=<id>" : "Usage: npx ccjk zc --preset=<id>"));
+    console.log("");
+    return;
+  }
+  let selectedPreset;
+  if (options.preset) {
+    selectedPreset = PRESETS.find((p) => p.id === options.preset);
+    if (!selectedPreset) {
+      console.error(ansis.red(isZh ? `\u9519\u8BEF: \u672A\u627E\u5230\u9884\u8BBE "${options.preset}"` : `Error: Preset "${options.preset}" not found`));
+      console.log(ansis.gray(isZh ? "\u4F7F\u7528 --list \u67E5\u770B\u53EF\u7528\u9884\u8BBE" : "Use --list to see available presets"));
+      return;
+    }
+  } else {
+    const { presetId } = await inquirer.prompt({
+      type: "list",
+      name: "presetId",
+      message: isZh ? "\u9009\u62E9\u6743\u9650\u9884\u8BBE:" : "Select permission preset:",
+      choices: addNumbersToChoices(
+        PRESETS.map((p) => ({
+          name: `${p.name} - ${ansis.gray(p.description)}`,
+          value: p.id,
+          short: p.name
+        }))
+      )
+    });
+    selectedPreset = PRESETS.find((p) => p.id === presetId);
+    if (!selectedPreset) {
+      console.log(ansis.yellow(i18n.t("common:cancelled")));
+      return;
+    }
+  }
+  const currentSettings = loadCurrentSettings();
+  showPresetDiff(selectedPreset, currentSettings);
+  if (!options.preset) {
+    const { confirm } = await inquirer.prompt({
+      type: "confirm",
+      name: "confirm",
+      message: isZh ? "\u786E\u8BA4\u5E94\u7528\u6B64\u9884\u8BBE?" : "Confirm applying this preset?",
+      default: true
+    });
+    if (!confirm) {
+      console.log(ansis.yellow(i18n.t("common:cancelled")));
+      return;
+    }
+  }
+  if (!options.skipBackup) {
+    const backupPath = backupSettings();
+    if (backupPath) {
+      console.log(ansis.gray(`\u2714 ${isZh ? "\u5DF2\u5907\u4EFD\u5230" : "Backed up to"}: ${backupPath}`));
+    }
+  }
+  const newSettings = applyPreset(selectedPreset, currentSettings);
+  saveSettings(newSettings);
+  console.log("");
+  console.log(ansis.green(`\u2705 ${isZh ? "\u6743\u9650\u9884\u8BBE\u5DF2\u5E94\u7528" : "Permission preset applied"}: ${selectedPreset.name}`));
+  console.log(ansis.gray(`   ${isZh ? "\u914D\u7F6E\u6587\u4EF6" : "Config file"}: ${SETTINGS_FILE}`));
+  console.log("");
+}
+
+export { zeroConfig };

package/dist/cli.mjs

@@ -382,6 +382,27 @@ const COMMANDS = [
       };
     }
   },
+  {
+    name: "zero-config [preset]",
+    description: "Apply zero-config permission presets (max, dev, safe)",
+    aliases: ["zc"],
+    tier: "extended",
+    options: [
+      { flags: "--preset, -p <preset>", description: "Preset to apply (max, dev, safe)" },
+      { flags: "--list, -l", description: "List available presets" },
+      { flags: "--skip-backup", description: "Skip backup before applying" }
+    ],
+    loader: async () => {
+      const { zeroConfig } = await import('./chunks/zero-config.mjs');
+      return async (options, preset) => {
+        await zeroConfig({
+          preset: preset || options.preset,
+          list: options.list,
+          skipBackup: options.skipBackup
+        });
+      };
+    }
+  },
   {
     name: "vim",
     description: "Vim mode configuration and keybindings",

package/dist/i18n/locales/en/configuration.json

@@ -103,6 +103,39 @@
     "validationErrors": "Configuration validation errors",
     "configUpToDate": "Configuration is up to date"
   },
+  "zeroConfig": {
+    "title": "Zero-Config Permission Presets",
+    "selectPreset": "Select permission preset",
+    "confirmApply": "Confirm applying this preset?",
+    "presetApplied": "Permission preset applied",
+    "backedUpTo": "Backed up to",
+    "configFile": "Config file",
+    "presetNotFound": "Error: Preset not found",
+    "useListToSee": "Use --list to see available presets",
+    "availablePresets": "Available Permission Presets",
+    "presetDetails": "Preset Details",
+    "permissionsToAdd": "Permissions to be added",
+    "total": "Total",
+    "items": "items",
+    "commands": "commands",
+    "operations": "operations",
+    "allPermissionsExist": "All permissions already exist",
+    "usage": "Usage: npx ccjk zc --preset=<id>",
+    "presets": {
+      "max": {
+        "name": "Maximum Permissions",
+        "description": "All common commands, file operations, and MCP servers"
+      },
+      "dev": {
+        "name": "Developer Preset",
+        "description": "Build tools, git, package managers, and file operations"
+      },
+      "safe": {
+        "name": "Safe Preset",
+        "description": "Read-only commands, no file modifications"
+      }
+    }
+  },
   "fields": {
     "language": {
       "label": "Response Language",

package/dist/i18n/locales/zh-CN/configuration.json

@@ -101,6 +101,39 @@
     "validationErrors": "配置验证错误",
     "configUpToDate": "配置已是最新版本"
   },
+  "zeroConfig": {
+    "title": "零配置权限预设",
+    "selectPreset": "选择权限预设",
+    "confirmApply": "确认应用此预设?",
+    "presetApplied": "权限预设已应用",
+    "backedUpTo": "已备份到",
+    "configFile": "配置文件",
+    "presetNotFound": "错误: 未找到预设",
+    "useListToSee": "使用 --list 查看可用预设",
+    "availablePresets": "可用的权限预设",
+    "presetDetails": "预设详情",
+    "permissionsToAdd": "将添加的权限",
+    "total": "总计",
+    "items": "项",
+    "commands": "个命令",
+    "operations": "个操作",
+    "allPermissionsExist": "所有权限已存在",
+    "usage": "使用: npx ccjk zc --preset=<id>",
+    "presets": {
+      "max": {
+        "name": "最大权限",
+        "description": "所有常用命令、文件操作和 MCP 服务"
+      },
+      "dev": {
+        "name": "开发者预设",
+        "description": "构建工具、git、包管理器和文件操作"
+      },
+      "safe": {
+        "name": "安全预设",
+        "description": "只读命令，不修改文件"
+      }
+    }
+  },
   "fields": {
     "language": {
       "label": "响应语言",

package/dist/index.mjs

@@ -25,6 +25,7 @@ import './chunks/json-config.mjs';
 import './chunks/fs-operations.mjs';
 import 'node:crypto';
 import 'node:fs/promises';
+import './shared/ccjk.BiCrMV5O.mjs';
 import 'tinyexec';
 
 const execAsync$1 = promisify(exec);

package/dist/shared/ccjk.BiCrMV5O.mjs

@@ -0,0 +1,94 @@
+const INVALID_PERMISSION_NAMES = /* @__PURE__ */ new Set([
+  "AllowEdit",
+  "AllowWrite",
+  "AllowRead",
+  "AllowExec",
+  "AllowCreateProcess",
+  "AllowKillProcess",
+  "AllowNetworkAccess",
+  "AllowFileSystemAccess",
+  "AllowShellAccess",
+  "AllowHttpAccess"
+]);
+const DANGEROUS_BASH_PATTERNS = /* @__PURE__ */ new Set([
+  "Bash(passwd *)",
+  "Bash(reboot *)",
+  "Bash(shutdown *)",
+  "Bash(halt *)",
+  "Bash(poweroff *)",
+  "Bash(init *)",
+  "Bash(telinit *)",
+  "Bash(rm *)",
+  "Bash(kill *)",
+  "Bash(pkill *)",
+  "Bash(killall *)",
+  "Bash(su *)",
+  "Bash(sudo *)",
+  "Bash(visudo *)",
+  "Bash(useradd *)",
+  "Bash(userdel *)",
+  "Bash(usermod *)",
+  "Bash(groupadd *)",
+  "Bash(groupdel *)",
+  "Bash(groupmod *)",
+  "Bash(modprobe *)",
+  "Bash(insmod *)",
+  "Bash(rmmod *)"
+]);
+function isValidPermission(perm) {
+  if (INVALID_PERMISSION_NAMES.has(perm)) {
+    return false;
+  }
+  if (["mcp__.*", "mcp__*", "mcp__(*)"].includes(perm)) {
+    return false;
+  }
+  if (/^[a-z]/.test(perm) && !perm.startsWith("mcp__")) {
+    return false;
+  }
+  return true;
+}
+function isCoveredByWildcard(perm, wildcardPerm) {
+  const wildcardMatch = wildcardPerm.match(/^(\w+)\((.+)\)$/);
+  if (!wildcardMatch) return false;
+  const [, tool, wildcardArg] = wildcardMatch;
+  if (!wildcardArg.includes("*")) return false;
+  const permMatch = perm.match(/^(\w+)\((.+)\)$/);
+  if (!permMatch) return false;
+  const [, permTool, permArg] = permMatch;
+  if (tool !== permTool) return false;
+  const regexStr = wildcardArg.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".+");
+  return new RegExp(`^${regexStr}$`).test(permArg);
+}
+function mergeAndCleanPermissions(templatePermissions, userPermissions) {
+  const template = templatePermissions || [];
+  const user = userPermissions || [];
+  const result = [...template];
+  for (const perm of user) {
+    if (result.includes(perm)) {
+      continue;
+    }
+    if (!isValidPermission(perm)) {
+      continue;
+    }
+    if (DANGEROUS_BASH_PATTERNS.has(perm)) {
+      continue;
+    }
+    let isRedundant = false;
+    for (const templatePerm of template) {
+      if (perm.startsWith(`${templatePerm}(`)) {
+        isRedundant = true;
+        break;
+      }
+      if (isCoveredByWildcard(perm, templatePerm)) {
+        isRedundant = true;
+        break;
+      }
+    }
+    if (!isRedundant) {
+      result.push(perm);
+    }
+  }
+  return result;
+}
+
+export { mergeAndCleanPermissions as m };

package/dist/shared/{ccjk.IbImMVWM.mjs → ccjk.DVBW2wxp.mjs}

@@ -2,12 +2,13 @@ import ansis from 'ansis';
 import inquirer from 'inquirer';
 import { CLAUDE_DIR, SETTINGS_FILE } from '../chunks/constants.mjs';
 import { ensureI18nInitialized, i18n } from '../chunks/index2.mjs';
-import { m as mergeAndCleanPermissions, e as getExistingApiConfig, f as configureApi, s as switchToOfficialLogin, b as backupExistingConfig, a as applyAiLanguageDirective } from '../chunks/config.mjs';
+import { e as getExistingApiConfig, f as configureApi, s as switchToOfficialLogin, b as backupExistingConfig, a as applyAiLanguageDirective } from '../chunks/config.mjs';
 import { fileURLToPath } from 'node:url';
 import { join, dirname } from 'pathe';
 import { updateZcfConfig } from '../chunks/ccjk-config.mjs';
 import { exists, removeFile, ensureDir, copyFile } from '../chunks/fs-operations.mjs';
 import { readJsonConfig, writeJsonConfig } from '../chunks/json-config.mjs';
+import { m as mergeAndCleanPermissions } from './ccjk.BiCrMV5O.mjs';
 import { a as addNumbersToChoices } from './ccjk.BFQ7yr5S.mjs';
 import { p as promptBoolean } from './ccjk.DHbrGcgg.mjs';
 import { existsSync } from 'node:fs';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ccjk",
   "type": "module",
-  "version": "10.2.0",
+  "version": "10.3.0",
   "packageManager": "pnpm@10.17.1",
   "description": "CLI toolkit for Claude Code and Codex setup. Simplifies MCP service installation, API configuration, workflow management, and multi-provider support with guided interactive setup.",
   "author": {