claude-yolo 1.5.0 → 1.6.0

package/README.md

@@ -2,12 +2,18 @@
 
 A wrapper for the Claude CLI that always enables danger mode by bypassing Docker and internet permission checks.
 
+⚠️ **SECURITY WARNING**: This wrapper bypasses important safety checks by forcibly adding the `--dangerously-skip-permissions` flag to all commands. This bypasses file access permissions that protect your system and privacy.
+
 ## Installation
 
 ```bash
 npm install -g claude-yolo
 ```
 
+During installation, you will be presented with a consent prompt explaining the security implications. You must explicitly agree to continue with the installation.
+
+![Consent Prompt](/installation-consent.png)
+
 GitHub: [https://github.com/eastlondoner/claude-yolo](https://github.com/eastlondoner/claude-yolo)
 
 ## Usage
@@ -29,6 +35,12 @@ This wrapper:
 5. Adds the `--dangerously-skip-permissions` flag to command line arguments
 6. Imports the modified copy of the CLI
 
+## New in Version 1.6.0
+
+- **Installation Consent Prompt**: Now requires explicit user consent during installation
+- **Enhanced Security Warnings**: Clear explanations of the security implications
+- **Installation Abort Option**: Users can cancel installation if they don't agree with the security implications
+
 ## New in Version 1.5.0
 
 - **YOLO Mode Warning**: Displays a "🔥 YOLO MODE ACTIVATED 🔥" warning in yellow text
@@ -74,6 +86,16 @@ Claude YOLO automatically checks for updates to the Claude package each time it
    - Notify you that an update was applied
 3. This ensures you're always using the latest Claude CLI features
 
-## Disclaimer
+## Important Security Disclaimer
+
+This is an unofficial tool and not supported by Anthropic. Use at your own risk.
 
-This is an unofficial tool and not supported by Anthropic. Use at your own risk.
+**SECURITY WARNING**:
+- This tool bypasses safety mechanisms intentionally built into the Claude CLI
+- The `--dangerously-skip-permissions` flag was designed for use in container environments
+- By using this tool, you acknowledge that:
+  - Important safety checks are being bypassed
+  - Claude may access files it normally would not have permission to access
+  - You accept full responsibility for any security implications
+  
+Anthropic designed these safety checks for good reason. Only use claude-yolo if you fully understand and accept these risks.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-yolo",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "YOLO wrapper for Claude CLI with danger mode always enabled, auto-updates, and colorful loading messages",
   "bin": {
     "claude-yolo": "./bin/claude-yolo.js"
@@ -8,5 +8,28 @@
   "dependencies": {
     "@anthropic-ai/claude-code": "0.2.14"
   },
-  "type": "module"
-}
+  "type": "module",
+  "scripts": {
+    "postinstall": "node postinstall.js"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/eastlondoner/claude-yolo.git"
+  },
+  "keywords": [
+    "claude",
+    "cli",
+    "anthropic",
+    "wrapper",
+    "yolo"
+  ],
+  "author": "eastlondoner",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/eastlondoner/claude-yolo/issues"
+  },
+  "homepage": "https://github.com/eastlondoner/claude-yolo#readme",
+  "engines": {
+    "node": ">=14.16"
+  }
+}

package/postinstall.js

@@ -0,0 +1,52 @@
+#!/usr/bin/env node
+
+import readline from 'readline';
+
+// ANSI color codes
+const RED = '\x1b[31m';
+const YELLOW = '\x1b[33m';
+const CYAN = '\x1b[36m';
+const RESET = '\x1b[0m';
+const BOLD = '\x1b[1m';
+
+// Create readline interface for user input
+const rl = readline.createInterface({
+  input: process.stdin,
+  output: process.stdout
+});
+
+console.log(`\n${BOLD}${YELLOW}🔥 CLAUDE-YOLO INSTALLATION CONSENT REQUIRED 🔥${RESET}\n`);
+console.log(`${CYAN}----------------------------------------${RESET}`);
+console.log(`${BOLD}What is claude-yolo?${RESET}`);
+console.log(`This package creates a wrapper around the official Claude CLI tool that:`);
+console.log(`  1. ${RED}BYPASSES safety checks${RESET} by automatically adding the --dangerously-skip-permissions flag`);
+console.log(`  2. Automatically updates to the latest Claude CLI version`);
+console.log(`  3. Adds colorful YOLO-themed loading messages\n`);
+
+console.log(`${BOLD}${RED}⚠️ IMPORTANT SECURITY WARNING ⚠️${RESET}`);
+console.log(`The ${BOLD}--dangerously-skip-permissions${RESET} flag was designed for use in containers`);
+console.log(`and bypasses important safety checks. This includes ignoring file access`);
+console.log(`permissions that protect your system and privacy.\n`);
+
+console.log(`${BOLD}By using claude-yolo:${RESET}`);
+console.log(`  • You acknowledge these safety checks are being bypassed`);
+console.log(`  • You understand this may allow Claude CLI to access sensitive files`);
+console.log(`  • You accept full responsibility for any security implications\n`);
+
+console.log(`${CYAN}----------------------------------------${RESET}\n`);
+
+// Ask for explicit consent
+rl.question(`${YELLOW}Do you consent to installing claude-yolo with these modifications? (yes/no): ${RESET}`, (answer) => {
+  const lowerAnswer = answer.toLowerCase().trim();
+  
+  if (lowerAnswer === 'yes' || lowerAnswer === 'y') {
+    console.log(`\n${YELLOW}🔥 YOLO MODE INSTALLATION APPROVED 🔥${RESET}`);
+    console.log(`Installation will continue. Use 'claude-yolo' instead of 'claude' to run in YOLO mode.`);
+    process.exit(0); // Success exit code
+  } else {
+    console.log(`\n${CYAN}Installation cancelled by user.${RESET}`);
+    console.log(`If you want the official Claude CLI with normal safety features, run:`);
+    console.log(`npm install -g @anthropic-ai/claude-code`);
+    process.exit(1); // Error exit code to abort installation
+  }
+});