ccjk 11.1.1 → 11.1.2

package/README.md

@@ -68,6 +68,8 @@ npx ccjk init --silent
 ❌ High API costs
 ❌ Configs lost when switching machines
 ❌ Single-threaded AI execution
+❌ Can't control Claude from mobile/web
+❌ Insecure defaults in production
 ```
 
 **After CCJK:**
@@ -77,6 +79,8 @@ npx ccjk init --silent
 ✅ 30-50% lower costs
 ✅ Cloud sync across devices
 ✅ Parallel AI agents (Agent Teams)
+✅ Remote control from any device (v11.1.1)
+✅ Production-hardened security (v11.1.1)
 ```
 
 ## 🎯 Why Developers Love CCJK
@@ -88,6 +92,8 @@ npx ccjk init --silent
 | ⏰ "Setup takes forever" | 🔧 **Minimal Config** | 30 seconds, one command |
 | 🔄 "Lost my configs again" | ☁️ **Cloud Sync** | GitHub Gist / WebDAV / S3 |
 | 🤖 "Need multiple AI agents" | 🎭 **Agent Teams** | One-click parallel execution |
+| 📱 "Can't control Claude from my phone" | 🌐 **Remote Control** | Web/App control with one-command setup |
+| 🔐 "Worried about production security" | 🛡️ **Production-Grade Security** | HTTPS enforcement, CORS hardening, secrets validation |
 
 ## 🔥 Features That Matter
 
@@ -133,6 +139,30 @@ ccjk mcp install filesystem puppeteer postgres
 # Done. No manual config.
 ```
 
+### 🌐 Remote Control (NEW in v11.1.1)
+Control Claude Code from any device — browser, phone, or tablet.
+```bash
+ccjk remote setup    # One-command: configure server URL, auth token & binding in 30s
+ccjk remote doctor   # Diagnose connectivity, auth, daemon health
+ccjk remote status   # Live runtime status (daemon, server, auth)
+```
+
+**Supports both interactive and non-interactive (CI/CD) modes:**
+```bash
+ccjk remote setup --non-interactive \
+  --server-url https://your-server.com \
+  --auth-token <token> \
+  --binding-code <code>
+```
+
+### 🛡️ Production-Grade Security (NEW in v11.1.1)
+All config defaults are now hardened for real-world deployments:
+- ✅ **HTTPS enforcement** — All service URLs require `https://` in production
+- ✅ **CORS hardening** — Wildcard `*` origins rejected in production
+- ✅ **Secret validation** — Dev-default secrets (`dev-secret`, `dev-session-secret`) blocked at startup
+- ✅ **Fail-fast boot** — Server exits immediately on misconfiguration, no silent fallbacks
+- ✅ **Daemon config loading** — Reads from `~/.ccjk/daemon.json`, validates required fields
+
 ### 🔓 Zero-Config Permission Presets (NEW)
 One-click permission configuration for different use cases:
 ```bash

package/README.zh-CN.md

@@ -37,6 +37,8 @@ CCJK 为 [Claude Code](https://github.com/anthropics/claude-code) 注入超能
 - **⚡ 节省 30-50% Token** — 智能上下文压缩
 - **🔧 最小配置** — 自动检测项目类型，一条命令搞定
 - **☁️ 云端同步** — 跨设备、跨团队共享配置
+- **🌐 远程控制** — 手机/网页随时掌控 Claude Code（v11.1.1 新增）
+- **🛡️ 生产级安全** — HTTPS 强制、CORS 加固、密钥校验（v11.1.1 新增）
 
 ## 快速开始
 
@@ -55,9 +57,45 @@ npx ccjk
 | 60+ 分钟手动配置 | 30 秒，一条命令 |
 | Token 成本高 | 降低 30-50% |
 | 配置只在单设备 | 云端同步所有设备 |
+| 无法通过手机/网页控制 Claude | 远程控制，任意设备操作 |
+| 生产环境配置存局隐患 | 生产级安全加固，开笄1秒失败 |
 
 ## 核心功能
 
+<details>
+<summary><b>🌐 远程控制（v11.1.1 新增）</b></summary>
+
+任意设备控制 Claude Code — 手机、浏览器、应用均可。
+
+```bash
+ccjk remote setup    # 一键远程初始化（互动引导）
+ccjk remote doctor   # 远程连接体检（容错、解决建议）
+ccjk remote status   # 实时运行状态（Daemon 、服务器、认证）
+```
+
+支持 CI/CD 非交互模式:
+```bash
+ccjk remote setup --non-interactive \
+  --server-url https://your-server.com \
+  --auth-token <token> \
+  --binding-code <code>
+```
+
+</details>
+
+<details>
+<summary><b>🛡️ 生产级安全加固（v11.1.1 新增）</b></summary>
+
+所有配置默认候均已适配生产环境安全标准：
+
+- ✅ **HTTPS 强制** — 生产环境下所有服务地址必须为 `https://`
+- ✅ **CORS 加固** — 生产环境拒绝通配符 `*` 源
+- ✅ **密鑰校验** — 开发默认密鑰（`dev-secret` 等）启动时直接拦截
+- ✅ **快速失败** — 配置错误即刻退出，没有静默退化
+- ✅ **Daemon 配置** — 从 `~/.ccjk/daemon.json` 读取，必字段校验
+
+</details>
+
 <details>
 <summary><b>🧠 智能技能系统</b></summary>
 
@@ -98,9 +136,17 @@ npx ccjk cloud enable --provider github-gist
 ```bash
 npx ccjk           # 交互式设置
 npx ccjk i         # 完整初始化
-npx ccjk remote setup   # 一键远程初始化（推荐）
-npx ccjk remote doctor  # 远程体检
-npx ccjk remote status  # 远程状态
+
+# 远程控制（v11.1.1 新增）
+ccjk remote setup                       # 一键远程初始化（推荐）
+ccjk remote setup --non-interactive \   # CI/CD 非交互模式
+  --server-url https://... \
+  --auth-token <token> \
+  --binding-code <code>
+ccjk remote doctor                      # 远程体检（含修复建议）
+ccjk remote status                      # 实时运行状态
+
+# 其他
 npx ccjk u         # 更新工作流
 npx ccjk sync      # 云端同步
 npx ccjk doctor    # 健康检查

package/dist/chunks/features.mjs

@@ -1,8 +1,8 @@
+import ansis from 'ansis';
+import inquirer from 'inquirer';
 import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import process__default from 'node:process';
-import ansis from 'ansis';
-import inquirer from 'inquirer';
 import { join } from 'pathe';
 import { d as selectMcpServices, g as getMcpServices } from './codex.mjs';
 import { SUPPORTED_LANGS, LANG_LABELS } from './constants.mjs';
@@ -428,8 +428,8 @@ async function configureAiMemoryFeature() {
         console.log(ansis.green.bold(`
 \u{1F52C} ${isZh ? "Postmortem \u62A5\u544A" : "Postmortem Reports"}:`));
         console.log(ansis.dim("\u2500".repeat(60)));
-        const { readdirSync: readdirSync2 } = await import('node:fs');
-        const files = readdirSync2(postmortemDir).filter((f) => f.endsWith(".md"));
+        const { readdirSync } = await import('node:fs');
+        const files = readdirSync(postmortemDir).filter((f) => f.endsWith(".md"));
         if (files.length === 0) {
           console.log(ansis.yellow(isZh ? "\u6682\u65E0 Postmortem \u62A5\u544A" : "No postmortem reports yet"));
         } else {
@@ -544,29 +544,113 @@ async function changeScriptLanguageFeature(currentLang) {
   console.log(ansis.green(`\u2714 ${i18n.t("language:languageChanged") || "Language changed"}`));
   return lang;
 }
-async function configureEnvPermissionFeature() {
+async function mcpManagerFeature() {
   ensureI18nInitialized();
+  const isZh = i18n.language === "zh-CN";
   const { choice } = await inquirer.prompt({
     type: "list",
     name: "choice",
-    message: i18n.t("configuration:selectEnvPermissionOption") || "Select option",
+    message: isZh ? "\u{1F527} MCP \u7BA1\u7406 \u2014 \u9009\u62E9\u64CD\u4F5C:" : "\u{1F527} MCP Manager \u2014 Select action:",
     choices: addNumbersToChoices([
       {
-        name: `${i18n.t("configuration:importRecommendedEnv") || "Import environment"} ${ansis.gray(
-          `- ${i18n.t("configuration:importRecommendedEnvDesc") || "Import env settings"}`
-        )}`,
+        name: isZh ? `\u{1F4CA} \u67E5\u770B MCP \u72B6\u6001  ${ansis.gray("- \u5DF2\u5B89\u88C5\u670D\u52A1\u603B\u89C8 + \u6027\u80FD\u9884\u8B66")}` : `\u{1F4CA} MCP Status  ${ansis.gray("- Installed services overview + performance warning")}`,
+        value: "status"
+      },
+      {
+        name: isZh ? `\u{1FA7A} MCP \u8BCA\u65AD  ${ansis.gray("- \u5065\u5EB7\u68C0\u67E5\u3001\u51B2\u7A81\u68C0\u6D4B\u3001\u4F18\u5316\u5EFA\u8BAE")}` : `\u{1FA7A} MCP Doctor  ${ansis.gray("- Health check, conflict detection, optimization tips")}`,
+        value: "doctor"
+      },
+      {
+        name: isZh ? `\u{1F4CB} \u5217\u51FA\u5DF2\u5B89\u88C5\u670D\u52A1  ${ansis.gray("- \u67E5\u770B\u5DF2\u914D\u7F6E\u7684 MCP \u670D\u52A1\u8BE6\u60C5")}` : `\u{1F4CB} List installed services  ${ansis.gray("- View details of configured MCP services")}`,
+        value: "list"
+      },
+      {
+        name: isZh ? `\u{1F504} \u5207\u6362\u914D\u7F6E\u9884\u8BBE  ${ansis.gray("- minimal\uFF08\u8F7B\u91CF\uFF09/ dev\uFF08\u5F00\u53D1\uFF09/ full\uFF08\u5B8C\u6574\uFF09")}` : `\u{1F504} Switch profile  ${ansis.gray("- minimal / dev / full preset")}`,
+        value: "profile"
+      },
+      {
+        name: isZh ? `\u{1F5D1}\uFE0F \u91CA\u653E\u95F2\u7F6E\u670D\u52A1  ${ansis.gray("- \u505C\u7528\u957F\u671F\u672A\u4F7F\u7528\u7684\u670D\u52A1\u4EE5\u8282\u7701\u8D44\u6E90")}` : `\u{1F5D1}\uFE0F Release idle services  ${ansis.gray("- Disable unused services to free resources")}`,
+        value: "release"
+      },
+      {
+        name: isZh ? `\u{1F4E6} \u5B89\u88C5/\u66F4\u65B0 MCP \u670D\u52A1  ${ansis.gray("- \u8FDB\u5165\u670D\u52A1\u9009\u62E9\u5411\u5BFC\uFF08\u540C\u83DC\u5355\u9009\u9879 4\uFF09")}` : `\u{1F4E6} Install / Update services  ${ansis.gray("- Open install wizard (same as menu option 4)")}`,
+        value: "install"
+      }
+    ])
+  });
+  if (!choice) {
+    await handleCancellation();
+    return;
+  }
+  try {
+    switch (choice) {
+      case "status": {
+        const { mcpStatus } = await import('./mcp.mjs');
+        await mcpStatus();
+        break;
+      }
+      case "doctor": {
+        const { mcpDoctor } = await import('./mcp.mjs');
+        await mcpDoctor();
+        break;
+      }
+      case "list": {
+        const { mcpList } = await import('./mcp.mjs');
+        await mcpList();
+        break;
+      }
+      case "profile": {
+        const { listProfiles, useProfile } = await import('./mcp.mjs');
+        await listProfiles();
+        const { profileId } = await inquirer.prompt({
+          type: "list",
+          name: "profileId",
+          message: isZh ? "\u9009\u62E9\u8981\u5207\u6362\u7684\u9884\u8BBE:" : "Select profile to switch:",
+          choices: [
+            { name: isZh ? "minimal \u2014 \u4EC5\u6838\u5FC3\u670D\u52A1\uFF08\u6700\u4F4E\u8D44\u6E90\u5360\u7528\uFF09" : "minimal \u2014 Core services only (least resources)", value: "minimal" },
+            { name: isZh ? "dev \u2014 \u5F00\u53D1\u5E38\u7528\u670D\u52A1\u5957\u88C5" : "dev \u2014 Dev-oriented service bundle", value: "dev" },
+            { name: isZh ? "full \u2014 \u5B8C\u6574\u670D\u52A1\uFF08\u9AD8\u6027\u80FD\u673A\u5668\u63A8\u8350\uFF09" : "full \u2014 Full services (high-end machines)", value: "full" }
+          ]
+        });
+        await useProfile(profileId);
+        break;
+      }
+      case "release": {
+        const { mcpRelease } = await import('./mcp.mjs');
+        await mcpRelease();
+        break;
+      }
+      case "install": {
+        await configureMcpFeature();
+        break;
+      }
+    }
+  } catch (error) {
+    console.error(ansis.red(`${i18n.t("common:error")}: ${error.message}`));
+  }
+}
+async function configureMergedPermissionsFeature() {
+  ensureI18nInitialized();
+  const isZh = i18n.language === "zh-CN";
+  const { choice } = await inquirer.prompt({
+    type: "list",
+    name: "choice",
+    message: isZh ? "\u6743\u9650 & \u73AF\u5883\u914D\u7F6E \u2014 \u9009\u62E9\u64CD\u4F5C:" : "Permissions & Env Setup \u2014 Select action:",
+    choices: addNumbersToChoices([
+      {
+        name: isZh ? `\u5BFC\u5165\u63A8\u8350\u73AF\u5883\u53D8\u91CF  ${ansis.gray("- \u5199\u5165\u9690\u79C1\u4FDD\u62A4 env \u5230 settings.json")}` : `Import recommended env vars  ${ansis.gray("- Write privacy env to settings.json")}`,
         value: "env"
       },
       {
-        name: `${i18n.t("configuration:importRecommendedPermissions") || "Import permissions"} ${ansis.gray(
-          `- ${i18n.t("configuration:importRecommendedPermissionsDesc") || "Import permission settings"}`
-        )}`,
+        name: isZh ? `\u5BFC\u5165\u63A8\u8350\u6743\u9650\u914D\u7F6E  ${ansis.gray("- \u8FFD\u52A0\u63A8\u8350 allow \u89C4\u5219\u5230 settings.json")}` : `Import recommended permissions  ${ansis.gray("- Append recommended allow rules")}`,
         value: "permissions"
       },
       {
-        name: `${i18n.t("configuration:openSettingsJson") || "Open settings"} ${ansis.gray(
-          `- ${i18n.t("configuration:openSettingsJsonDesc") || "View settings file"}`
-        )}`,
+        name: isZh ? `\u4E00\u952E\u6743\u9650\u9884\u8BBE  ${ansis.gray("- \u6700\u5927(max) / \u5F00\u53D1\u8005(dev) / \u5B89\u5168(safe) \u9884\u8BBE")}` : `Zero-config permission preset  ${ansis.gray("- max / dev / safe preset")}`,
+        value: "preset"
+      },
+      {
+        name: isZh ? `\u6253\u5F00 settings.json  ${ansis.gray("- \u5728\u7F16\u8F91\u5668\u4E2D\u67E5\u770B\u5F53\u524D\u914D\u7F6E")}` : `Open settings.json  ${ansis.gray("- View current config in editor")}`,
         value: "open"
       }
     ])
@@ -585,6 +669,11 @@ async function configureEnvPermissionFeature() {
         await importRecommendedPermissions();
         console.log(ansis.green(`\u2705 ${i18n.t("configuration:permissionsImportSuccess") || "Permissions imported"}`));
         break;
+      case "preset": {
+        const { zeroConfig } = await import('./zero-config.mjs');
+        await zeroConfig();
+        break;
+      }
       case "open":
         console.log(ansis.green(i18n.t("configuration:openingSettingsJson") || "Opening settings.json..."));
         await openSettingsJson();
@@ -595,4 +684,4 @@ async function configureEnvPermissionFeature() {
   }
 }
 
-export { changeScriptLanguageFeature, configureAiMemoryFeature, configureApiFeature, configureDefaultModelFeature, configureEnvPermissionFeature, configureMcpFeature, handleCustomApiMode, promptCustomModels };
+export { changeScriptLanguageFeature, configureAiMemoryFeature, configureApiFeature, configureDefaultModelFeature, configureMcpFeature, configureMergedPermissionsFeature, handleCustomApiMode, mcpManagerFeature, promptCustomModels };

package/dist/chunks/menu.mjs

@@ -1,7 +1,7 @@
-import { existsSync } from 'node:fs';
-import process__default from 'node:process';
 import ansis from 'ansis';
 import inquirer from 'inquirer';
+import { existsSync } from 'node:fs';
+import process__default from 'node:process';
 import { join } from 'pathe';
 import { M as MCP_SERVICE_CONFIGS } from './codex.mjs';
 import { CODE_TOOL_BANNERS, CLAUDE_DIR, isCodeToolType, DEFAULT_CODE_TOOL_TYPE } from './constants.mjs';
@@ -11,7 +11,7 @@ import { updateZcfConfig, readZcfConfig } from './ccjk-config.mjs';
 import { r as readMcpConfig } from './claude-config.mjs';
 import { r as resolveCodeType } from '../shared/ccjk.CxtuJxaS.mjs';
 import { h as handleExitPromptError, a as handleGeneralError } from '../shared/ccjk.DrMygfCF.mjs';
-import { changeScriptLanguageFeature, configureMcpFeature, configureEnvPermissionFeature, configureAiMemoryFeature, configureDefaultModelFeature, configureApiFeature } from './features.mjs';
+import { changeScriptLanguageFeature, mcpManagerFeature, configureMergedPermissionsFeature, configureAiMemoryFeature, configureDefaultModelFeature, configureMcpFeature, configureApiFeature } from './features.mjs';
 import { p as promptBoolean } from '../shared/ccjk.DHbrGcgg.mjs';
 import { homedir } from 'node:os';
 import { runCcrStop, runCcrStart, runCcrRestart, runCcrStatus, runCcrUi } from './commands.mjs';
@@ -359,15 +359,14 @@ async function showSimplifiedMenu() {
   console.log(`  ${ansis.green("1.")} ${isZh ? "\u5B8C\u6574\u521D\u59CB\u5316" : "Full Init"} ${ansis.dim(isZh ? "- \u5B89\u88C5 Claude Code + \u5BFC\u5165\u5DE5\u4F5C\u6D41 + \u914D\u7F6E API \u6216 CCR \u4EE3\u7406 + \u914D\u7F6E MCP \u670D\u52A1" : "- Install Claude Code + Import workflows + Configure API or CCR proxy + Configure MCP")}`);
   console.log(`  ${ansis.green("2.")} ${isZh ? "\u5BFC\u5165\u5DE5\u4F5C\u6D41" : "Import Workflows"} ${ansis.dim(isZh ? "- \u4EC5\u5BFC\u5165/\u66F4\u65B0\u5DE5\u4F5C\u6D41\u76F8\u5173\u6587\u4EF6" : "- Import/update workflow files only")}`);
   console.log(`  ${ansis.green("3.")} ${isZh ? "\u914D\u7F6E API \u6216 CCR \u4EE3\u7406" : "Configure API or CCR Proxy"} ${ansis.dim(isZh ? "- \u914D\u7F6E API URL\u3001\u8BA4\u8BC1\u4FE1\u606F\u6216 CCR \u4EE3\u7406" : "- Configure API URL, auth info or CCR proxy")}`);
-  console.log(`  ${ansis.green("4.")} ${isZh ? "\u914D\u7F6E MCP" : "Configure MCP"} ${ansis.dim(isZh ? "- \u914D\u7F6E MCP \u670D\u52A1\uFF08\u542B Windows \u4FEE\u590D\uFF09" : "- Configure MCP services (with Windows fix)")}`);
+  console.log(`  ${ansis.green("4.")} ${isZh ? "\u5B89\u88C5/\u66F4\u65B0 MCP \u670D\u52A1" : "Install / Update MCP Services"} ${ansis.dim(isZh ? "- \u591A\u9009\u5B89\u88C5\u63A8\u8350\u670D\u52A1\uFF0C\u81EA\u52A8\u5408\u5E76/\u4FEE\u590D Windows \u914D\u7F6E" : "- Multi-select & install recommended services, auto-fix Windows config")}`);
   console.log(`  ${ansis.green("5.")} ${isZh ? "\u914D\u7F6E\u9ED8\u8BA4\u6A21\u578B" : "Configure Default Model"} ${ansis.dim(isZh ? "- \u8BBE\u7F6E\u9ED8\u8BA4\u6A21\u578B\uFF08opus/sonnet/sonnet 1m/\u81EA\u5B9A\u4E49\uFF09" : "- Set default model (opus/sonnet/sonnet 1m/custom)")}`);
   console.log(`  ${ansis.green("6.")} ${isZh ? "\u914D\u7F6E Claude \u5168\u5C40\u8BB0\u5FC6" : "Configure Claude Memory"} ${ansis.dim(isZh ? "- \u914D\u7F6E AI \u8F93\u51FA\u8BED\u8A00\u548C\u8F93\u51FA\u98CE\u683C" : "- Configure AI output language and style")}`);
-  console.log(`  ${ansis.green("7.")} ${isZh ? "\u5BFC\u5165\u63A8\u8350\u73AF\u5883\u53D8\u91CF\u548C\u6743\u9650\u914D\u7F6E" : "Import Recommended Env & Permissions"} ${ansis.dim(isZh ? "- \u5BFC\u5165\u9690\u79C1\u4FDD\u62A4\u73AF\u5883\u53D8\u91CF\u548C\u7CFB\u7EDF\u6743\u9650\u914D\u7F6E" : "- Import privacy env vars and system permissions")}`);
-  console.log(`  ${ansis.green("8.")} ${isZh ? "\u96F6\u914D\u7F6E\u6743\u9650\u9884\u8BBE" : "Zero-Config Permission Presets"} ${ansis.dim(isZh ? "- \u4E00\u952E\u5E94\u7528\u6743\u9650\u9884\u8BBE\uFF08\u6700\u5927/\u5F00\u53D1\u8005/\u5B89\u5168\uFF09" : "- One-click permission presets (max/dev/safe)")}`);
+  console.log(`  ${ansis.green("7.")} ${isZh ? "\u6743\u9650 & \u73AF\u5883\u914D\u7F6E" : "Permissions & Env Setup"} ${ansis.dim(isZh ? "- \u5BFC\u5165\u73AF\u5883\u53D8\u91CF / \u5BFC\u5165\u63A8\u8350\u6743\u9650 / \u4E00\u952E\u6743\u9650\u9884\u8BBE\uFF08\u6700\u5927/\u5F00\u53D1\u8005/\u5B89\u5168\uFF09" : "- Import env vars / import permissions / one-click presets (max/dev/safe)")}`);
   console.log("");
   console.log(ansis.dim(`  --------- ${isZh ? "\u5176\u4ED6\u5DE5\u5177" : "Other Tools"} ----------`));
   console.log(`  ${ansis.green("K.")} ${isZh ? "Skills \u7BA1\u7406" : "Skills Manager"} ${ansis.dim(isZh ? "- \u5B89\u88C5/\u66F4\u65B0/\u5220\u9664\u5DE5\u4F5C\u6D41\u6280\u80FD" : "- Install/update/remove workflow skills")}`);
-  console.log(`  ${ansis.green("M.")} ${isZh ? "MCP \u7BA1\u7406" : "MCP Manager"} ${ansis.dim(isZh ? "- \u914D\u7F6E Model Context Protocol \u670D\u52A1" : "- Configure MCP services")}`);
+  console.log(`  ${ansis.green("M.")} ${isZh ? "MCP \u7BA1\u7406" : "MCP Manager"} ${ansis.dim(isZh ? "- \u72B6\u6001/\u8BCA\u65AD/\u5DF2\u88C5\u5217\u8868/\u5207\u6362\u9884\u8BBE/\u91CA\u653E\u95F2\u7F6E\u670D\u52A1" : "- Status / doctor / list / switch profile / release idle services")}`);
   console.log(`  ${ansis.green("A.")} ${isZh ? "Agents \u7BA1\u7406" : "Agents Manager"} ${ansis.dim(isZh ? "- \u521B\u5EFA/\u7BA1\u7406 AI \u667A\u80FD\u4F53" : "- Create/manage AI agents")}`);
   console.log(`  ${ansis.green("P.")} ${isZh ? "\u6301\u4E45\u5316\u7BA1\u7406" : "Persistence Manager"} ${ansis.dim(isZh ? "- \u7BA1\u7406\u4E0A\u4E0B\u6587\u5B58\u50A8\u548C\u5C42\u7EA7" : "- Manage context storage and tiers")}`);
   console.log(`  ${ansis.green("R.")} ${isZh ? "CCR" : "CCR"} ${ansis.dim(isZh ? "- \u914D\u7F6E Claude Code Router \u4EE5\u4F7F\u7528\u591A\u4E2A AI \u6A21\u578B" : "- Configure Claude Code Router for multiple AI models")}`);
@@ -377,8 +376,7 @@ async function showSimplifiedMenu() {
   console.log(`  ${ansis.green("S.")} ${isZh ? "\u5207\u6362\u4EE3\u7801\u5DE5\u5177" : "Switch Code Tool"} ${ansis.dim(isZh ? "- \u5728\u652F\u6301\u7684\u4EE3\u7801\u5DE5\u5177\u4E4B\u95F4\u5207\u6362 (Claude Code, Codex)" : "- Switch between supported code tools (Claude Code, Codex)")}`);
   console.log(`  ${ansis.green("-.")} ${isZh ? "\u5378\u8F7D\u548C\u5220\u9664\u914D\u7F6E" : "Uninstall & Remove Config"} ${ansis.dim(isZh ? "- \u4ECE\u7CFB\u7EDF\u4E2D\u5220\u9664 Claude Code \u914D\u7F6E\u548C\u5DE5\u5177" : "- Remove Claude Code config and tools from system")}`);
   console.log(`  ${ansis.green("+.")} ${isZh ? "\u68C0\u67E5\u66F4\u65B0" : "Check Updates"} ${ansis.dim(isZh ? "- \u68C0\u67E5\u5E76\u66F4\u65B0 Claude Code\u3001CCR \u7684\u7248\u672C" : "- Check and update Claude Code, CCR versions")}`);
-  console.log(`  ${ansis.green("D.")} ${isZh ? "\u4E00\u952E\u4F53\u68C0" : "Diagnostics"} ${ansis.dim(isZh ? "- \u8BCA\u65AD\u95EE\u9898\u5E76\u81EA\u52A8\u4FEE\u590D" : "- Diagnose issues and auto-fix")}`);
-  console.log(`  ${ansis.green("B.")} ${isZh ? "\u{1F9E0} Brain Dashboard" : "\u{1F9E0} Brain Dashboard"} ${ansis.dim(isZh ? "- \u67E5\u770B\u914D\u7F6E\u5065\u5EB7\u5206\u6570\u548C\u4F18\u5316\u5EFA\u8BAE" : "- Setup health score & recommendations")}`);
+  console.log(`  ${ansis.green("D.")} ${isZh ? "\u{1F9E0} \u4F53\u68C0 & \u5065\u5EB7\u770B\u677F" : "\u{1F9E0} Health Check & Dashboard"} ${ansis.dim(isZh ? "- \u5065\u5EB7\u5206\u6570 + \u4F18\u5316\u5EFA\u8BAE + \u81EA\u52A8\u4FEE\u590D" : "- Health score + recommendations + auto-fix")}`);
   console.log(`  ${ansis.green("H.")} ${isZh ? "\u5E2E\u52A9\u6587\u6863" : "Help"} ${ansis.dim(isZh ? "- \u67E5\u770B\u4F7F\u7528\u6307\u5357" : "- View user guide")}`);
   console.log(`  ${ansis.green("Q.")} ${isZh ? "\u9000\u51FA" : "Exit"}`);
   console.log("");
@@ -388,7 +386,7 @@ async function showSimplifiedMenu() {
     message: isZh ? "\u8BF7\u8F93\u5165\u9009\u9879:" : "Enter option:",
     validate: (value) => {
       const normalized2 = normalizeMenuInput(value);
-      const valid = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "k", "m", "a", "p", "r", "b", "s", "-", "+", "d", "h", "q"];
+      const valid = ["0", "1", "2", "3", "4", "5", "6", "7", "k", "m", "a", "p", "r", "s", "-", "+", "d", "h", "q"];
       return valid.includes(normalized2) || (isZh ? "\u8BF7\u8F93\u5165\u6709\u6548\u9009\u9879" : "Please enter a valid option");
     }
   });
@@ -424,12 +422,7 @@ async function showSimplifiedMenu() {
       break;
     }
     case "7": {
-      await configureEnvPermissionFeature();
-      break;
-    }
-    case "8": {
-      const { zeroConfig } = await import('./zero-config.mjs');
-      await zeroConfig();
+      await configureMergedPermissionsFeature();
       break;
     }
     // --------- 其他工具 ----------
@@ -438,7 +431,7 @@ async function showSimplifiedMenu() {
       break;
     }
     case "m": {
-      await configureMcpFeature();
+      await mcpManagerFeature();
       break;
     }
     case "a": {
@@ -456,12 +449,6 @@ async function showSimplifiedMenu() {
       printSeparator();
       return void 0;
     }
-    case "b": {
-      const { dashboardCommand } = await import('./dashboard.mjs');
-      await dashboardCommand();
-      await inquirer.prompt({ type: "input", name: "_", message: isZh ? "\u6309\u56DE\u8F66\u8FD4\u56DE\u83DC\u5355..." : "Press Enter to return..." });
-      return void 0;
-    }
     // ------------ CCJK ------------
     case "0": {
       const currentLang = i18n.language;
@@ -488,7 +475,18 @@ async function showSimplifiedMenu() {
       return void 0;
     }
     case "d": {
-      await doctor();
+      const { dashboardCommand } = await import('./dashboard.mjs');
+      await dashboardCommand();
+      const isZhD = i18n.language === "zh-CN";
+      const { runDoctor } = await inquirer.prompt({
+        type: "confirm",
+        name: "runDoctor",
+        message: isZhD ? "\u662F\u5426\u540C\u65F6\u8FD0\u884C\u81EA\u52A8\u4FEE\u590D\u8BCA\u65AD\uFF1F" : "Also run auto-fix diagnostics?",
+        default: false
+      });
+      if (runDoctor) {
+        await doctor();
+      }
       printSeparator();
       return void 0;
     }

package/dist/chunks/package.mjs

@@ -1,4 +1,4 @@
-const version = "11.1.1";
+const version = "11.1.2";
 const homepage = "https://github.com/miounet11/ccjk";
 
 export { homepage, version };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ccjk",
   "type": "module",
-  "version": "11.1.1",
+  "version": "11.1.2",
   "packageManager": "pnpm@10.17.1",
   "description": "CLI toolkit for Claude Code and Codex setup. Simplifies MCP service installation, API configuration, workflow management, and multi-provider support with guided interactive setup.",
   "author": {

package/templates/claude-code/common/settings.json

@@ -1,53 +1,37 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
   "description": "CCJK settings template — auto-migrated on upgrade",
-
   "model": "default",
-
   "env": {
     "ANTHROPIC_MODEL": "",
     "ANTHROPIC_DEFAULT_HAIKU_MODEL": "",
     "ANTHROPIC_DEFAULT_SONNET_MODEL": "",
     "ANTHROPIC_DEFAULT_OPUS_MODEL": ""
   },
-
   "language": "",
-
   "showTurnDuration": false,
-
   "respectGitignore": true,
-
   "auto": {
     "mcp": 0
   },
-
   "agent": "",
-
   "thinking": {
     "enabled": false,
     "budgetTokens": 10240
   },
-
   "fileSuggestion": {
     "type": "command",
     "command": "git"
   },
-
   "allowUnsandboxedCommands": false,
-
   "disallowedTools": [],
-
   "attribution": {},
-
   "index": {
     "maxFiles": 10000,
     "maxFileSize": 2097152
   },
-
   "allowBrowser": false,
-
   "statusLine": {},
-
   "plansDirectory": ".claude/plans",
   "hooks": {
     "PreToolUse": [],
@@ -85,13 +69,37 @@
       "Read(*)",
       "Edit(*)",
       "Write(*)",
-      "NotebookEdit(*)"
+      "NotebookEdit(*)",
+      "Bash(cd *)",
+      "Bash(for *)",
+      "Bash(while *)",
+      "Bash(if *)",
+      "Bash(source *)",
+      "Bash(export *)",
+      "Bash(unset *)",
+      "Bash(rm *)",
+      "Bash(rmdir *)",
+      "Bash(tee *)",
+      "Bash(env *)",
+      "Bash(time *)",
+      "Bash(printf *)",
+      "Bash(sed *)",
+      "Bash(awk *)",
+      "Bash(tr *)",
+      "Bash(xargs *)",
+      "Bash(cut *)",
+      "Bash(curl *)",
+      "Bash(node *)",
+      "Bash(python *)",
+      "Bash(python3 *)",
+      "Bash(pip *)",
+      "Bash(pip3 *)",
+      "WebFetch(*)",
+      "MCP(*)"
     ]
   },
-
   "chat": {
     "alwaysApprove": []
   },
-
   "experimental": {}
-}
+}