code-abyss 1.7.7 → 2.0.0

package/README.md

@@ -111,8 +111,8 @@ Code Abyss 是一套 **Claude Code / Codex CLI 个性化配置包**，一条命
 ```
 ~/.claude/（Claude Code）          ~/.codex/（Codex CLI）
 ├── CLAUDE.md          道典        ├── AGENTS.md      道典+风格
-├── output-styles/     输出风格    ├── settings.json
-│   └── abyss-cultivator.md       └── skills/        56 篇秘典
+├── output-styles/     输出风格    ├── config.toml    推荐配置
+│   └── abyss-cultivator.md       ├── prompts/       custom prompts
 ├── settings.json
 └── skills/            56 篇秘典
 
@@ -163,40 +163,59 @@ Code Abyss 是一套 **Claude Code / Codex CLI 个性化配置包**，一条命
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
   "env": {
     "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS": "1",
-    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1"
+    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1",
+    "CLAUDE_CODE_ENABLE_TASKS": "1",
+    "CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION": "1",
+    "ENABLE_TOOL_SEARCH": "auto:10"
   },
+  "defaultMode": "bypassPermissions",
   "alwaysThinkingEnabled": true,
+  "autoMemoryEnabled": true,
   "model": "opus",
   "outputStyle": "abyss-cultivator",
   "attribution": { "commit": "", "pr": "" },
+  "sandbox": { "autoAllowBashIfSandboxed": true },
   "permissions": {
-    "allow": ["Bash", "LS", "Read", "Agent", "Write", "Edit", "MultiEdit",
-              "Glob", "Grep", "WebFetch", "WebSearch", "TodoWrite",
-              "NotebookRead", "NotebookEdit"]
+    "allow": ["Bash", "LS", "Read", "Edit", "Write", "MultiEdit",
+              "Agent", "Glob", "Grep", "WebFetch", "WebSearch",
+              "TodoWrite", "NotebookRead", "NotebookEdit", "mcp__*"]
   }
 }
 ```
 
 | 配置项 | 说明 |
 |--------|------|
+| `defaultMode: bypassPermissions` | 跳过所有权限确认（`.git`等受保护目录仍会提示） |
+| `autoMemoryEnabled` | 启用自动记忆，跨会话保留上下文 |
+| `sandbox.autoAllowBashIfSandboxed` | 沙箱环境内自动放行 Bash 命令 |
 | `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS` | 启用多 Agent 并行协作（实验性） |
 | `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC` | 禁用自动更新、遥测、错误报告 |
+| `CLAUDE_CODE_ENABLE_TASKS` | 启用任务管理功能 |
+| `CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION` | 启用提示建议 |
+| `ENABLE_TOOL_SEARCH` | MCP 工具自动搜索（auto:10 = 自动匹配前10个） |
+| `mcp__*` | 自动放行所有 MCP 工具 |
 | `outputStyle` | 设置为 `abyss-cultivator` 启用邪修风格 |
 
 ---
 
 ### Codex `config.toml` 推荐模板
 
-安装 `--target codex`（尤其 `-y`）时会写入以下模板到 `~/.codex/config.toml`：
+安装 `--target codex`（尤其 `-y`）时会写入以下 **全开默认档** 到 `~/.codex/config.toml`：
 
 ```toml
 model_provider = "custom"
 model = "gpt-5.2-codex"
 model_reasoning_effort = "high"
+model_reasoning_summary = "detailed"
+model_verbosity = "medium"
 approval_policy = "never"
 sandbox_mode = "danger-full-access"
 disable_response_storage = true
 
+[profiles.safe]
+approval_policy = "on-request"
+sandbox_mode = "workspace-write"
+
 [model_providers.custom]
 name = "custom"
 base_url = "https://your-api-endpoint.com/v1"
@@ -208,14 +227,26 @@ web_search = true
 
 [features]
 multi_agent = true
+shell_snapshot = true
+undo = true
 ```
 
+- 默认零审批 + 完全沙箱访问，适合安全研究/CTF/本地开发等高自动化场景
+- `model_reasoning_summary = "detailed"` 输出详细推理摘要
+- `shell_snapshot` / `undo` 启用快照与撤销功能
+- 需要安全姿态时可显式切到 `safe`：`codex -p safe`
 
 ### 兼容性说明
 
-- 模板已对齐新版 Codex 配置风格：`[tools].web_search` 与 `[features].multi_agent`
-- 若你本地已有旧配置，安装器不会强制覆盖；会自动补齐 root 默认项（正确写入首段）、清理 removed feature、迁移 deprecated `web_search_*` 到 `[tools].web_search`，并在 `danger-full-access` 下清理 `projects.*.trust_level`
-- 建议在升级后执行一次 `codex --help` / 启动自检，确认无 deprecation warning
+- 模板已对齐新版 Codex 配置风格：root keys、`[profiles.*]`、`[tools].web_search` 与 `[features].multi_agent`
+- 默认档从 safe 切换为全开（`approval_policy = "never"` + `sandbox_mode = "danger-full-access"`），提供 `[profiles.safe]` 作为保守回退
+- Claude Code 默认启用 `bypassPermissions` 模式，跳过所有权限确认（`.git` 等受保护目录仍会提示）
+- 新增实验功能环境变量：`CLAUDE_CODE_ENABLE_TASKS`、`CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION`
+- 新增 `mcp__*` 通配符，自动放行所有 MCP 工具
+- `Codex` 当前支持 `~/.codex/prompts/*.md` 作为 custom prompts；Code Abyss 会继续安装 `~/.codex/skills/`，并从 `user-invocable` skills 自动生成对应的 `prompts/`
+- 安装器不会再为 Codex 写入伪配置 `~/.codex/settings.json`；若检测到旧版遗留文件，会在安装时备份后移除，卸载时恢复
+- 若你本地已有旧配置，安装器不会强制覆盖；会自动补齐默认项、清理 removed feature、迁移 deprecated `web_search_*` 到 `[tools].web_search`
+- 建议升级后执行一次 `codex --help`，或用 `codex -p safe --help` 校验 profile 可见性
 
 ---
 
@@ -228,7 +259,7 @@ multi_agent = true
 - `bin/lib/ccline.js`：Claude 侧状态栏与 ccline 集成
 - `bin/adapters/codex.js`：Codex 侧认证检测、核心文件映射、config 模板流程
 
-当前 Claude/Codex 安装映射分别由 `getClaudeCoreFiles()` 与 `getCodexCoreFiles()` 提供，避免在主流程硬编码目标细节。
+当前 Claude/Codex 安装映射分别由 `getClaudeCoreFiles()` 与 `getCodexCoreFiles()` 提供；Claude 额外生成 `commands/`，Codex 保持 `skills/ + config.toml` 的官方主路径，避免在主流程硬编码目标细节。
 
 ---
 

package/bin/adapters/claude.js

@@ -7,17 +7,25 @@ const SETTINGS_TEMPLATE = {
   $schema: 'https://json.schemastore.org/claude-code-settings.json',
   env: {
     CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS: '1',
-    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '1'
+    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '1',
+    CLAUDE_CODE_ENABLE_TASKS: '1',
+    CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION: '1',
+    ENABLE_TOOL_SEARCH: 'auto:10'
   },
+  defaultMode: 'bypassPermissions',
   alwaysThinkingEnabled: true,
+  autoMemoryEnabled: true,
   model: 'opus',
   outputStyle: 'abyss-cultivator',
   attribution: { commit: '', pr: '' },
+  sandbox: {
+    autoAllowBashIfSandboxed: true
+  },
   permissions: {
     allow: [
-      'Bash', 'LS', 'Read', 'Agent', 'Write', 'Edit', 'MultiEdit',
-      'Glob', 'Grep', 'WebFetch', 'WebSearch', 'TodoWrite',
-      'NotebookRead', 'NotebookEdit'
+      'Bash', 'LS', 'Read', 'Edit', 'Write', 'MultiEdit',
+      'Agent', 'Glob', 'Grep', 'WebFetch', 'WebSearch',
+      'TodoWrite', 'NotebookRead', 'NotebookEdit', 'mcp__*'
     ]
   }
 };

package/bin/adapters/codex.js

@@ -179,7 +179,7 @@ function removeKeyAssignmentsInNonRootSections(content, key) {
 function removeProjectTrustSectionsForFullAccess(content) {
   const eol = content.includes('\r\n') ? '\r\n' : '\n';
   const sandboxMode = readRootStringKey(content, 'sandbox_mode');
-  if (sandboxMode !== CODEX_DEFAULTS.sandboxMode) {
+  if (sandboxMode !== 'danger-full-access') {
     return { merged: content, removed: false };
   }
 

package/bin/install.js

@@ -186,92 +186,154 @@ function scanInvocableSkills(skillsDir) {
   return results;
 }
 
-/**
- * 根据 SKILL.md 元数据生成 command .md 内容
- *
- * 设计原则：
- * - 读取 SKILL.md + 执行脚本合并为一气呵成的指令流
- * - 禁止「先…然后…」的分步模式，避免 Claude 在步骤间停顿
- * - 无脚本的 skill：仅读取 SKILL.md 作为知识库提供指导
- *
- * @param {Object} meta - parseFrontmatter 返回的元数据
- * @param {string} skillRelPath - 相对于 skills/ 的路径（如 'tools/gen-docs'）
- * @param {boolean} hasScripts - 是否有可执行脚本
- * @returns {string} command .md 文件内容
- */
-function generateCommandContent(meta, skillRelPath, hasScripts) {
-  const name = meta.name;
+const INVOCABLE_TARGETS = {
+  claude: {
+    dir: 'commands',
+    label: '斜杠命令',
+    skillRoot: '~/.claude/skills',
+  },
+  codex: {
+    dir: 'prompts',
+    label: 'custom prompts',
+    skillRoot: '~/.codex/skills',
+  },
+};
+
+function getInvocableTarget(targetName) {
+  const targetCfg = INVOCABLE_TARGETS[targetName];
+  if (!targetCfg) throw new Error(`不支持的 invocable target: ${targetName}`);
+  return targetCfg;
+}
+
+function getSkillPath(skillRoot, skillRelPath) {
+  return skillRelPath
+    ? `${skillRoot}/${skillRelPath}/SKILL.md`
+    : `${skillRoot}/SKILL.md`;
+}
+
+function buildCommandFrontmatter(meta) {
   const desc = (meta.description || '').replace(/"/g, '\\"');
   const argHint = meta['argument-hint'];
   const tools = meta['allowed-tools'] || 'Read';
-  const skillPath = skillRelPath
-    ? `~/.claude/skills/${skillRelPath}/SKILL.md`
-    : '~/.claude/skills/SKILL.md';
-
-  const lines = [
-    '---',
-    `name: ${name}`,
-    `description: "${desc}"`,
-  ];
+  const lines = ['---', `name: ${meta.name}`, `description: "${desc}"`];
+
   if (argHint) lines.push(`argument-hint: "${argHint}"`);
   lines.push(`allowed-tools: ${tools}`);
-  lines.push('---');
-  lines.push('');
+  lines.push('---', '');
+  return lines;
+}
 
+function buildClaudeBody(skillPath, meta, hasScripts) {
+  const lines = [];
   if (hasScripts) {
-    // ── 有脚本的 skill：读取规范 + 执行脚本，一气呵成 ──
-    lines.push('以下所有步骤一气呵成，不要在步骤间停顿等待用户输入：');
-    lines.push('');
+    lines.push('以下所有步骤一气呵成，不要在步骤间停顿等待用户输入：', '');
     lines.push(`1. 读取规范：${skillPath}`);
-    lines.push(`2. 执行命令：\`node ~/.claude/skills/run_skill.js ${name} $ARGUMENTS\``);
-    lines.push('3. 按规范分析输出，完成后续动作');
-    lines.push('');
+    lines.push(`2. 执行命令：\`node ~/.claude/skills/run_skill.js ${meta.name} $ARGUMENTS\``);
+    lines.push('3. 按规范分析输出，完成后续动作', '');
     lines.push('全程不要停顿，不要询问是否继续。');
-  } else {
-    // ── 无脚本的 skill：知识库模式 ──
-    lines.push('读取以下秘典，根据内容为用户提供专业指导：');
-    lines.push('');
-    lines.push('```');
-    lines.push(skillPath);
-    lines.push('```');
+    return lines;
   }
 
-  lines.push('');
-  return lines.join('\n');
+  lines.push('读取以下秘典，根据内容为用户提供专业指导：', '');
+  lines.push('```', skillPath, '```');
+  return lines;
 }
 
-/**
- * 扫描 skills 并为 user-invocable 的 skill 生成 command 包装，文件级合并安装
- */
-function installGeneratedCommands(skillsSrcDir, targetDir, backupDir, manifest) {
+function buildCodexPromptBody(skillPath, meta, hasScripts) {
+  const lines = [];
+  if (meta['argument-hint']) lines.push(`Arguments: ${meta['argument-hint']}`, '');
+  lines.push(`Read \`${skillPath}\` before acting.`, '');
+  if (hasScripts) {
+    lines.push(`Then run \`node ~/.codex/skills/run_skill.js ${meta.name} $ARGUMENTS\`.`);
+    lines.push('Do not stop between steps unless blocked by permissions or missing required inputs.');
+    lines.push('Use the skill guidance plus script output to complete the task end-to-end.');
+    return lines;
+  }
+
+  lines.push('Use that skill as the authoritative playbook for the task.');
+  lines.push('Respond with concrete actions instead of generic advice.');
+  return lines;
+}
+
+function generateInvocableContent(meta, skillRelPath, hasScripts, targetName) {
+  const targetCfg = getInvocableTarget(targetName);
+  const skillPath = getSkillPath(targetCfg.skillRoot, skillRelPath);
+  const lines = targetName === 'claude' ? buildCommandFrontmatter(meta) : [];
+  const body = targetName === 'claude'
+    ? buildClaudeBody(skillPath, meta, hasScripts)
+    : buildCodexPromptBody(skillPath, meta, hasScripts);
+  return [...lines, ...body, ''].join('\n');
+}
+
+function generateCommandContent(meta, skillRelPath, hasScripts) {
+  return generateInvocableContent(meta, skillRelPath, hasScripts, 'claude');
+}
+
+function generatePromptContent(meta, skillRelPath, hasScripts) {
+  return generateInvocableContent(meta, skillRelPath, hasScripts, 'codex');
+}
+
+function installGeneratedArtifacts(skillsSrcDir, targetDir, backupDir, manifest, targetName) {
   const skills = scanInvocableSkills(skillsSrcDir);
   if (skills.length === 0) return 0;
 
-  const cmdsDir = path.join(targetDir, 'commands');
-  fs.mkdirSync(cmdsDir, { recursive: true });
+  const targetCfg = getInvocableTarget(targetName);
+  const installDir = path.join(targetDir, targetCfg.dir);
+  fs.mkdirSync(installDir, { recursive: true });
 
   skills.forEach(({ meta, relPath, hasScripts }) => {
     const fileName = `${meta.name}.md`;
-    const destFile = path.join(cmdsDir, fileName);
-    const relFile = path.posix.join('commands', fileName);
+    const destFile = path.join(installDir, fileName);
+    const relFile = path.posix.join(targetCfg.dir, fileName);
 
     if (fs.existsSync(destFile)) {
-      const cmdsBackupDir = path.join(backupDir, 'commands');
-      fs.mkdirSync(cmdsBackupDir, { recursive: true });
-      fs.copyFileSync(destFile, path.join(cmdsBackupDir, fileName));
+      const backupSubdir = path.join(backupDir, targetCfg.dir);
+      fs.mkdirSync(backupSubdir, { recursive: true });
+      fs.copyFileSync(destFile, path.join(backupSubdir, fileName));
       manifest.backups.push(relFile);
       info(`备份: ${c.d(relFile)}`);
     }
 
-    const content = generateCommandContent(meta, relPath, hasScripts);
+    const content = generateInvocableContent(meta, relPath, hasScripts, targetName);
     fs.writeFileSync(destFile, content);
     manifest.installed.push(relFile);
   });
 
-  ok(`commands/ ${c.d(`(自动生成 ${skills.length} 个斜杠命令)`)}`);
+  ok(`${targetCfg.dir}/ ${c.d(`(自动生成 ${skills.length} 个 ${targetCfg.label})`)}`);
   return skills.length;
 }
 
+function installGeneratedCommands(skillsSrcDir, targetDir, backupDir, manifest) {
+  return installGeneratedArtifacts(skillsSrcDir, targetDir, backupDir, manifest, 'claude');
+}
+
+function installGeneratedPrompts(skillsSrcDir, targetDir, backupDir, manifest) {
+  return installGeneratedArtifacts(skillsSrcDir, targetDir, backupDir, manifest, 'codex');
+}
+
+function backupPathIfExists(targetDir, backupDir, relPath, manifest) {
+  const targetPath = path.join(targetDir, relPath);
+  if (!fs.existsSync(targetPath)) return false;
+
+  const backupPath = path.join(backupDir, relPath);
+  rmSafe(backupPath);
+  copyRecursive(targetPath, backupPath);
+  manifest.backups.push(relPath);
+  info(`备份: ${c.d(relPath)}`);
+  return true;
+}
+
+function pruneLegacyCodexSettings(targetDir, backupDir, manifest) {
+  const relPath = 'settings.json';
+  const settingsPath = path.join(targetDir, relPath);
+  if (!fs.existsSync(settingsPath)) return null;
+
+  backupPathIfExists(targetDir, backupDir, relPath, manifest);
+  rmSafe(settingsPath);
+  warn('移除 legacy settings.json（Codex 已改用 config.toml）');
+  return settingsPath;
+}
+
 function installCore(tgt) {
   const targetDir = path.join(HOME, `.${tgt}`);
   const backupDir = path.join(targetDir, '.sage-backup');
@@ -309,30 +371,37 @@ function installCore(tgt) {
     rmSafe(destPath); copyRecursive(srcPath, destPath); manifest.installed.push(dest);
   });
 
-  // 为 Claude 目标自动生成 user-invocable 斜杠命令
+  // 为目标 CLI 自动生成 user-invocable artifacts
   if (tgt === 'claude') {
     const skillsSrc = path.join(PKG_ROOT, 'skills');
     installGeneratedCommands(skillsSrc, targetDir, backupDir, manifest);
+  } else if (tgt === 'codex') {
+    const skillsSrc = path.join(PKG_ROOT, 'skills');
+    installGeneratedPrompts(skillsSrc, targetDir, backupDir, manifest);
   }
 
-  const settingsPath = path.join(targetDir, 'settings.json');
+  let settingsPath = null;
   let settings = {};
-  if (fs.existsSync(settingsPath)) {
-    try {
-      settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
-    } catch (e) {
-      warn(`settings.json 解析失败，将使用空配置`);
-      settings = {};
-    }
-    fs.copyFileSync(settingsPath, path.join(backupDir, 'settings.json'));
-    manifest.backups.push('settings.json');
-  }
   if (tgt === 'claude') {
+    settingsPath = path.join(targetDir, 'settings.json');
+    if (fs.existsSync(settingsPath)) {
+      try {
+        settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
+      } catch (e) {
+        warn('settings.json 解析失败，将使用空配置');
+        settings = {};
+      }
+      fs.copyFileSync(settingsPath, path.join(backupDir, 'settings.json'));
+      manifest.backups.push('settings.json');
+    }
     settings.outputStyle = 'abyss-cultivator';
     ok(`outputStyle = ${c.mag('abyss-cultivator')}`);
+    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
+    manifest.installed.push('settings.json');
+  } else {
+    pruneLegacyCodexSettings(targetDir, backupDir, manifest);
   }
-  fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
-  manifest.installed.push('settings.json');
+
   fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2) + '\n');
 
   const uSrc = path.join(PKG_ROOT, 'bin', 'uninstall.js');
@@ -438,5 +507,9 @@ if (require.main === module) {
 module.exports = {
   deepMergeNew, detectClaudeAuth, detectCodexAuth,
   detectCclineBin, copyRecursive, shouldSkip, SETTINGS_TEMPLATE,
-  scanInvocableSkills, generateCommandContent, installGeneratedCommands
+  scanInvocableSkills,
+  generateCommandContent,
+  generatePromptContent,
+  installGeneratedCommands,
+  installGeneratedPrompts,
 };