code-abyss 1.8.0 → 2.0.0

package/README.md

@@ -163,43 +163,58 @@ Code Abyss 是一套 **Claude Code / Codex CLI 个性化配置包**，一条命
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
   "env": {
     "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS": "1",
-    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1"
+    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1",
+    "CLAUDE_CODE_ENABLE_TASKS": "1",
+    "CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION": "1",
+    "ENABLE_TOOL_SEARCH": "auto:10"
   },
+  "defaultMode": "bypassPermissions",
   "alwaysThinkingEnabled": true,
+  "autoMemoryEnabled": true,
   "model": "opus",
   "outputStyle": "abyss-cultivator",
   "attribution": { "commit": "", "pr": "" },
+  "sandbox": { "autoAllowBashIfSandboxed": true },
   "permissions": {
-    "allow": ["Bash", "LS", "Read", "Agent", "Write", "Edit", "MultiEdit",
-              "Glob", "Grep", "WebFetch", "WebSearch", "TodoWrite",
-              "NotebookRead", "NotebookEdit"]
+    "allow": ["Bash", "LS", "Read", "Edit", "Write", "MultiEdit",
+              "Agent", "Glob", "Grep", "WebFetch", "WebSearch",
+              "TodoWrite", "NotebookRead", "NotebookEdit", "mcp__*"]
   }
 }
 ```
 
 | 配置项 | 说明 |
 |--------|------|
+| `defaultMode: bypassPermissions` | 跳过所有权限确认（`.git`等受保护目录仍会提示） |
+| `autoMemoryEnabled` | 启用自动记忆，跨会话保留上下文 |
+| `sandbox.autoAllowBashIfSandboxed` | 沙箱环境内自动放行 Bash 命令 |
 | `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS` | 启用多 Agent 并行协作（实验性） |
 | `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC` | 禁用自动更新、遥测、错误报告 |
+| `CLAUDE_CODE_ENABLE_TASKS` | 启用任务管理功能 |
+| `CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION` | 启用提示建议 |
+| `ENABLE_TOOL_SEARCH` | MCP 工具自动搜索（auto:10 = 自动匹配前10个） |
+| `mcp__*` | 自动放行所有 MCP 工具 |
 | `outputStyle` | 设置为 `abyss-cultivator` 启用邪修风格 |
 
 ---
 
 ### Codex `config.toml` 推荐模板
 
-安装 `--target codex`（尤其 `-y`）时会写入以下 **safe 默认档** 到 `~/.codex/config.toml`：
+安装 `--target codex`（尤其 `-y`）时会写入以下 **全开默认档** 到 `~/.codex/config.toml`：
 
 ```toml
 model_provider = "custom"
 model = "gpt-5.2-codex"
 model_reasoning_effort = "high"
-approval_policy = "on-request"
-sandbox_mode = "workspace-write"
-disable_response_storage = true
-
-[profiles.full_access]
+model_reasoning_summary = "detailed"
+model_verbosity = "medium"
 approval_policy = "never"
 sandbox_mode = "danger-full-access"
+disable_response_storage = true
+
+[profiles.safe]
+approval_policy = "on-request"
+sandbox_mode = "workspace-write"
 
 [model_providers.custom]
 name = "custom"
@@ -212,18 +227,26 @@ web_search = true
 
 [features]
 multi_agent = true
+shell_snapshot = true
+undo = true
 ```
 
-- 日常交互默认使用 `on-request + workspace-write`，更贴近当前 Codex CLI 的低摩擦安全姿态
-- 需要高自动化时可显式切到 `full_access`：`codex -p full_access`
+- 默认零审批 + 完全沙箱访问，适合安全研究/CTF/本地开发等高自动化场景
+- `model_reasoning_summary = "detailed"` 输出详细推理摘要
+- `shell_snapshot` / `undo` 启用快照与撤销功能
+- 需要安全姿态时可显式切到 `safe`：`codex -p safe`
 
 ### 兼容性说明
 
 - 模板已对齐新版 Codex 配置风格：root keys、`[profiles.*]`、`[tools].web_search` 与 `[features].multi_agent`
+- 默认档从 safe 切换为全开（`approval_policy = "never"` + `sandbox_mode = "danger-full-access"`），提供 `[profiles.safe]` 作为保守回退
+- Claude Code 默认启用 `bypassPermissions` 模式，跳过所有权限确认（`.git` 等受保护目录仍会提示）
+- 新增实验功能环境变量：`CLAUDE_CODE_ENABLE_TASKS`、`CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION`
+- 新增 `mcp__*` 通配符，自动放行所有 MCP 工具
 - `Codex` 当前支持 `~/.codex/prompts/*.md` 作为 custom prompts；Code Abyss 会继续安装 `~/.codex/skills/`，并从 `user-invocable` skills 自动生成对应的 `prompts/`
 - 安装器不会再为 Codex 写入伪配置 `~/.codex/settings.json`；若检测到旧版遗留文件，会在安装时备份后移除，卸载时恢复
-- 若你本地已有旧配置，安装器不会强制覆盖；会自动补齐 safe root 默认项、清理 removed feature、迁移 deprecated `web_search_*` 到 `[tools].web_search`，并仅在 `danger-full-access` 下清理 `projects.*.trust_level`
-- 建议升级后执行一次 `codex --help`，或用 `codex -p full_access --help` 校验 profile 可见性
+- 若你本地已有旧配置，安装器不会强制覆盖；会自动补齐默认项、清理 removed feature、迁移 deprecated `web_search_*` 到 `[tools].web_search`
+- 建议升级后执行一次 `codex --help`，或用 `codex -p safe --help` 校验 profile 可见性
 
 ---
 

package/bin/adapters/claude.js

@@ -7,17 +7,25 @@ const SETTINGS_TEMPLATE = {
   $schema: 'https://json.schemastore.org/claude-code-settings.json',
   env: {
     CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS: '1',
-    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '1'
+    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '1',
+    CLAUDE_CODE_ENABLE_TASKS: '1',
+    CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION: '1',
+    ENABLE_TOOL_SEARCH: 'auto:10'
   },
+  defaultMode: 'bypassPermissions',
   alwaysThinkingEnabled: true,
+  autoMemoryEnabled: true,
   model: 'opus',
   outputStyle: 'abyss-cultivator',
   attribution: { commit: '', pr: '' },
+  sandbox: {
+    autoAllowBashIfSandboxed: true
+  },
   permissions: {
     allow: [
-      'Bash', 'LS', 'Read', 'Agent', 'Write', 'Edit', 'MultiEdit',
-      'Glob', 'Grep', 'WebFetch', 'WebSearch', 'TodoWrite',
-      'NotebookRead', 'NotebookEdit'
+      'Bash', 'LS', 'Read', 'Edit', 'Write', 'MultiEdit',
+      'Agent', 'Glob', 'Grep', 'WebFetch', 'WebSearch',
+      'TodoWrite', 'NotebookRead', 'NotebookEdit', 'mcp__*'
     ]
   }
 };

package/bin/adapters/codex.js

@@ -4,8 +4,8 @@ const fs = require('fs');
 const path = require('path');
 
 const CODEX_DEFAULTS = {
-  approvalPolicy: 'on-request',
-  sandboxMode: 'workspace-write',
+  approvalPolicy: 'never',
+  sandboxMode: 'danger-full-access',
   featureFlag: 'multi_agent',
 };