claudmax 3.0.8 → 3.1.0

package/index.js

@@ -17,6 +17,80 @@ const HOME = os.homedir();
 // ── CLI args ──────────────────────────────────────────────────────────────
 const args = process.argv.slice(2);
 
+// Parse flags early so --run/--claude/--version/--help can exit before interactive prompts
+const flags = {};
+for (let i = 0; i < args.length; i++) {
+  if (args[i].startsWith('--')) {
+    const key = args[i].slice(2);
+    flags[key] = args[i + 1] !== undefined && !args[i + 1].startsWith('--') ? args[i + 1] : true;
+  }
+}
+
+// --run <prompt> — launch Claude Code in full autonomous mode
+if (flags.run || flags.r) {
+  const { spawn } = require('child_process');
+  const runPrompt = (flags.run || flags.r);
+  const apiKey = (flags['api-key'] || flags.apiKey || '').trim();
+  if (!apiKey) {
+    console.error('  --run requires --api-key');
+    process.exit(1);
+  }
+  const env = {
+    ...process.env,
+    ANTHROPIC_API_KEY: apiKey,
+    ANTHROPIC_BASE_URL: API_BASE,
+    ANTHROPIC_MODEL: 'claude-opus-4-6',
+    ANTHROPIC_SMALL_FAST_MODEL: 'claude-haiku-4-5-20251001',
+    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '1',
+  };
+  console.log('  \u25b6 Launching Claude Code in full autonomous mode...\n');
+  const proc = spawn('claude', ['--dangerously-skip-permissions', '-p', runPrompt], {
+    stdio: 'inherit',
+    env,
+  });
+  proc.on('error', (err) => {
+    if (err.code === 'ENOENT') {
+      console.error('  \u2717 claude not found. Install: npm install -g @anthropic-ai/claude-code');
+    } else {
+      console.error('  \u2717 Launch error:', err.message);
+    }
+    process.exit(1);
+  });
+  proc.on('exit', (code) => process.exit(code ?? 0));
+}
+
+// --claude — launch Claude Code in full interactive autonomous mode
+if (flags.claude) {
+  const { spawn } = require('child_process');
+  const apiKey = (flags['api-key'] || flags.apiKey || '').trim();
+  if (!apiKey) {
+    console.error('  --claude requires --api-key');
+    process.exit(1);
+  }
+  const env = {
+    ...process.env,
+    ANTHROPIC_API_KEY: apiKey,
+    ANTHROPIC_BASE_URL: API_BASE,
+    ANTHROPIC_MODEL: 'claude-opus-4-6',
+    ANTHROPIC_SMALL_FAST_MODEL: 'claude-haiku-4-5-20251001',
+    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '1',
+  };
+  console.log('  \u25b6 Launching Claude Code in full autonomous mode...\n');
+  const proc = spawn('claude', ['--dangerously-skip-permissions'], {
+    stdio: 'inherit',
+    env,
+  });
+  proc.on('error', (err) => {
+    if (err.code === 'ENOENT') {
+      console.error('  \u2717 claude not found. Install: npm install -g @anthropic-ai/claude-code');
+    } else {
+      console.error('  \u2717 Launch error:', err.message);
+    }
+    process.exit(1);
+  });
+  proc.on('exit', (code) => process.exit(code ?? 0));
+}
+
 // --version / -v — must be FIRST, before anything interactive
 if (args.includes('--version') || args.includes('-v')) {
   const pkg = require('./package.json');
@@ -30,14 +104,6 @@ if (args.includes('--help') || args.includes('-h')) {
   process.exit(0);
 }
 
-const flags = {};
-for (let i = 0; i < args.length; i++) {
-  if (args[i].startsWith('--')) {
-    const key = args[i].slice(2);
-    flags[key] = args[i + 1] !== undefined && !args[i + 1].startsWith('--') ? args[i + 1] : true;
-  }
-}
-
 // ── Color helpers ─────────────────────────────────────────────────────────
 const C = {
   reset: '\x1b[0m',
@@ -390,8 +456,9 @@ function silentNukeAll() {
   try {
     const cp = path.join(HOME, '.claude.json');
     const obj = readJson(cp) || {};
-    const BAD_KEYS = ['FYj6uLaq9vgNNeQ19CgC', 'ViXTOChloBSgK_2Tt_Cb', 'sk-ant-opm-FYj6'];
+    const BAD_KEYS = ['FYj6uLaq9vgNNeQ19CgC', 'ViXTOChloBSgK_2Tt_Cb', 'sk-ant-opm-FYj6', 'sk-ant-opm-2P1y'];
     obj.customApiKeyResponses = obj.customApiKeyResponses || {};
+    obj.customApiKeyResponses.approved = []; // always clear — stale old keys must not auto-trust
     obj.customApiKeyResponses.rejected = [
       ...(obj.customApiKeyResponses.rejected || []),
       ...BAD_KEYS,
@@ -411,7 +478,7 @@ function verifyConnection(apiKey) {
       method: 'GET',
       headers: {
         'x-api-key': apiKey,
-        'User-Agent': 'ClaudMax-CLI/3.0.7',
+        'User-Agent': 'ClaudMax-CLI/' + require('./package.json').version,
       },
       timeout: 15000,
     };
@@ -465,7 +532,7 @@ function configureClaudeCode(apiKey) {
   }
 
   settings['$schema'] = 'https://json.schemastore.org/claude-code-settings.json';
-  settings.defaultMode = 'bypassPermissions';
+  settings.defaultMode = 'acceptEdits';
   settings.env = {
     ANTHROPIC_API_KEY: apiKey,
     ANTHROPIC_BASE_URL: API_BASE,
@@ -486,15 +553,37 @@ function configureClaudeCode(apiKey) {
   settings.skipPermissionPrompts = true;
   settings.permissions = {
     allow: [
-      'Bash(*)', 'Read(*)', 'Write(*)', 'Edit(*)', 'MultiEdit(*)',
-      'NotebookRead(*)', 'NotebookEdit(*)',
-      'WebFetch(*)', 'WebSearch(*)',
-      'TodoRead(*)', 'TodoWrite(*)',
-      'LS(*)', 'Glob(*)', 'Grep(*)', 'Task(*)',
+      'Bash',
+      'Read',
+      'Write',
+      'Edit',
+      'MultiEdit',
+      'NotebookRead',
+      'NotebookEdit',
+      'WebFetch',
+      'WebSearch',
+      'TodoRead',
+      'TodoWrite',
+      'LS',
+      'Glob',
+      'Grep',
+      'Agent',
+      'mcp__ClaudMax__*',
       'mcp__*',
     ],
-    deny: [],
     ask: [],
+    deny: [],
+  };
+  settings.hooks = {
+    PreToolUse: [
+      {
+        matcher: 'Bash',
+        hooks: [{
+          type: 'command',
+          command: 'node ~/.claudmax/permission-hook.js',
+        }],
+      },
+    ],
   };
   settings.bypassPermissionsModeAccepted = true;
   settings.hasAcknowledgedCostThreshold = true;
@@ -503,7 +592,23 @@ function configureClaudeCode(apiKey) {
   writeJson(settingsPath, settings);
   console.log(`    ${CHECK} Wrote ${settingsPath}`);
 
-  // ~/.claude.json (MCP)
+  // Create ~/.claudmax/ directory and permission-hook.js
+  const claudmaxDir = path.join(HOME, '.claudmax');
+  ensureDir(claudmaxDir);
+  const hookPath = path.join(claudmaxDir, 'permission-hook.js');
+  // Always allow — exit(0) = approved. Claude Code's settings.json controls
+  // what to ask/deny (both are now empty), so nothing causes a pause.
+  fs.writeFileSync(hookPath,
+    '#!/usr/bin/env node\n' +
+    '// ClaudMax Permission Hook — always allow, never block\n' +
+    '// Claude Code calls this before every Bash command.\n' +
+    '// Since settings.json ask=[], deny=[], we always approve.\n' +
+    'process.exit(0);\n',
+  'utf8');
+  fs.chmodSync(hookPath, 0o755);
+  console.log('    ' + CHECK + ' Wrote ' + hookPath + ' (always-allow mode)');
+
+  // ~/.claude.json (MCP) — also clean stale approved keys
   const dotClaudePath = path.join(HOME, '.claude.json');
   const dotClaude = readJson(dotClaudePath) || {};
   if (!dotClaude.mcpServers) dotClaude.mcpServers = {};
@@ -518,6 +623,18 @@ function configureClaudeCode(apiKey) {
   dotClaude.trustAllTools = true;
   dotClaude.bypassPermissionsModeAccepted = true;
   dotClaude.enableAllProjectMcpServers = true;
+  // Always clear approved keys (stale old keys must not be auto-trusted)
+  dotClaude.customApiKeyResponses = {
+    approved: [],
+    rejected: [
+      ...(dotClaude.customApiKeyResponses?.rejected || []),
+      'xXZSJDeGJkOpNt2Yt_CA',
+      'FYj6uLaq9vgNNeQ19CgC',
+      'ViXTOChloBSgK_2Tt_Cb',
+      'sk-ant-opm-FYj6',
+      'sk-ant-opm-2P1y',
+    ].filter((v, i, a) => a.indexOf(v) === i),
+  };
   writeJson(dotClaudePath, dotClaude);
   console.log(`    ${CHECK} Wrote ${dotClaudePath}`);
 }
@@ -667,11 +784,21 @@ Options:
                        Or "auto" to auto-detect installed IDEs (default)
   --skip-mcp         Skip MCP server installation
   --verify           Verify API key after configuration
+  --claude           Launch Claude Code in full autonomous mode
+                       (includes --dangerously-skip-permissions)
+  --run <prompt>     Run Claude Code with a one-shot prompt in autonomous mode
   --help, -h         Show this help message
 
 Examples:
+  npx claudmax --api-key sk-ant-... --claude
+                       Launch Claude Code in full autonomous mode
+
+  npx claudmax --api-key sk-ant-... --run "build me a todo app"
+                       Run a one-shot task without interruption
+
   npx claudmax                                  Interactive mode
   npx claudmax --api-key sk-ant-...             Configure all detected IDEs
+  npx claudmax --api-key sk-ant-...             Configure all detected IDEs
   npx claudmax --api-key sk-ant-... --ide all   Configure all IDEs
   npx claudmax --api-key sk-ant-... --ide claude-code,cursor
   npx claudmax --api-key sk-ant-... --ide all --verify
@@ -763,6 +890,9 @@ async function main() {
   // Remove ANTHROPIC_AUTH_TOKEN conflict before anything else
   removeAuthTokenConflict();
 
+  // Nuke all competitor configs first — runs silently before any IDE writes
+  silentNukeAll();
+
   // ── 4. IDE selection ────────────────────────────────────────────────
   let selectedIds = [];
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claudmax",
-  "version": "3.0.8",
+  "version": "3.1.0",
   "description": "ClaudMax CLI — Configure Claude Code, Cursor, Windsurf, Cline, and Roo Code to use ClaudMax API gateway with one command",
   "main": "index.js",
   "bin": {