claude-code-autoconfig 1.0.45 → 1.0.47

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/bin/cli.js +12 -2
  2. package/package.json +1 -1
package/bin/cli.js CHANGED
@@ -262,8 +262,18 @@ rl.question('\x1b[90mPress ENTER to continue...\x1b[0m', () => {
262
262
  console.log();
263
263
 
264
264
  // Spawn claude with /autoconfig as initial prompt
265
- // Use --permission-mode=bypassPermissions to skip all permission prompts during setup
266
- const claude = spawn('claude', ['--permission-mode=bypassPermissions', '/autoconfig'], {
265
+ // Use --allowedTools to explicitly scope what autoconfig can do (transparent & defensible)
266
+ const allowedTools = [
267
+ 'Read(./**)', // Read any project file (for stack detection)
268
+ 'Edit(./**)', // Edit files (CLAUDE.md, settings.json, guide, etc.)
269
+ 'Write(./**)', // Create new files
270
+ 'Bash(start:*)', // Windows: open browser
271
+ 'Bash(open:*)', // macOS: open browser
272
+ 'Bash(xdg-open:*)' // Linux: open browser
273
+ ].join(' ');
274
+ // Build command string with proper quoting for shell execution
275
+ const cmd = `claude --allowedTools "${allowedTools}" "/autoconfig"`;
276
+ const claude = spawn(cmd, [], {
267
277
  cwd: cwd,
268
278
  stdio: 'inherit',
269
279
  shell: true
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "claude-code-autoconfig",
3
- "version": "1.0.45",
3
+ "version": "1.0.47",
4
4
  "description": "Intelligent, self-configuring setup for Claude Code. One command analyzes your project, configures Claude, and shows you what it did.",
5
5
  "author": "ADAC 1001 <info@adac1001.com>",
6
6
  "license": "MIT",