coding-friend-cli 1.9.1 → 1.10.0

package/README.md

@@ -29,6 +29,8 @@ cf host [path]       # Build and serve learning docs at localhost:3333
 cf mcp [path]        # Setup MCP server for LLM integration
                      # [path] is optional, default is `docs/learn`
                      # This prints a JSON config snippet to add to your client's MCP
+cf permission        # Manage Claude Code permission rules for Coding Friend
+cf permission --all  # Apply all recommended permissions without prompts
 cf statusline        # Setup coding-friend statusline
 cf update            # Update plugin + CLI + statusline
 cf update --cli      # Update only the CLI (npm package)

package/dist/chunk-4C4EKYM3.js

@@ -0,0 +1,198 @@
+import {
+  readJson,
+  writeJson
+} from "./chunk-HQ5BPWEV.js";
+
+// src/lib/permissions.ts
+var PERMISSION_RULES = [
+  // Core (hooks & infrastructure)
+  {
+    rule: "Bash(cat:*)",
+    description: "[read-only] Read file contents (\u26A0 system-wide scope, project boundary enforced by Claude Code) \xB7 Used by: session-init hook",
+    category: "Core",
+    recommended: true
+  },
+  {
+    rule: "Bash(grep:*)",
+    description: "[read-only] Search file contents (\u26A0 system-wide scope, project boundary enforced by Claude Code) \xB7 Used by: session-init hook, skills",
+    category: "Core",
+    recommended: true
+  },
+  {
+    rule: "Bash(sed:*)",
+    description: "[modify] Text transformation \xB7 Used by: session-init hook",
+    category: "Core",
+    recommended: true
+  },
+  {
+    rule: "Bash(tr:*)",
+    description: "[read-only] Character translation \xB7 Used by: session-init hook",
+    category: "Core",
+    recommended: true
+  },
+  {
+    rule: "Bash(wc:*)",
+    description: "[read-only] Count lines/words \xB7 Used by: cf-verification, skills",
+    category: "Core",
+    recommended: true
+  },
+  {
+    rule: "Bash(mkdir:*)",
+    description: "[write] Create directories \xB7 Used by: docs folder setup",
+    category: "Core",
+    recommended: true
+  },
+  // Git Operations
+  {
+    rule: "Bash(git add:*)",
+    description: "[modify] Stage files for commit \xB7 Used by: /cf-commit, /cf-ship",
+    category: "Git",
+    recommended: true
+  },
+  {
+    rule: "Bash(git commit:*)",
+    description: "[modify] Create commits \xB7 Used by: /cf-commit, /cf-ship",
+    category: "Git",
+    recommended: true
+  },
+  {
+    rule: "Bash(git status:*)",
+    description: "[read-only] Check working tree status \xB7 Used by: /cf-commit, /cf-review, cf-verification",
+    category: "Git",
+    recommended: true
+  },
+  {
+    rule: "Bash(git diff:*)",
+    description: "[read-only] View file changes \xB7 Used by: /cf-commit, /cf-review, cf-verification",
+    category: "Git",
+    recommended: true
+  },
+  {
+    rule: "Bash(git log:*)",
+    description: "[read-only] View commit history \xB7 Used by: /cf-commit, /cf-review, cf-sys-debug",
+    category: "Git",
+    recommended: true
+  },
+  {
+    rule: "Bash(git push:*)",
+    description: "[remote] Push commits to remote \xB7 Used by: /cf-ship",
+    category: "Git",
+    recommended: true
+  },
+  {
+    rule: "Bash(git pull:*)",
+    description: "[remote] Pull changes from remote \xB7 Used by: /cf-ship",
+    category: "Git",
+    recommended: true
+  },
+  {
+    rule: "Bash(gh pr create:*)",
+    description: "[remote] Create GitHub pull requests \xB7 Used by: /cf-ship",
+    category: "Git",
+    recommended: true
+  },
+  // Testing & Build
+  {
+    rule: "Bash(npm test:*)",
+    description: "[execute] Run test suites \xB7 Used by: cf-verification, /cf-fix, cf-tdd",
+    category: "Testing & Build",
+    recommended: true
+  },
+  {
+    rule: "Bash(npm run:*)",
+    description: "[execute] Run npm scripts (build, lint, format) \xB7 Used by: cf-verification",
+    category: "Testing & Build",
+    recommended: true
+  },
+  // Web & Research
+  {
+    rule: "WebSearch",
+    description: "[network] Perform web searches \xB7 Used by: /cf-research",
+    category: "Web & Research",
+    recommended: false
+  },
+  {
+    rule: "WebFetch(domain:*)",
+    description: "[network] Fetch content from web pages \xB7 Used by: /cf-research",
+    category: "Web & Research",
+    recommended: false
+  }
+];
+function getExistingRules(settingsPath) {
+  const settings = readJson(settingsPath);
+  if (!settings) return [];
+  const permissions = settings.permissions;
+  return permissions?.allow ?? [];
+}
+function getMissingRules(existing, rules) {
+  return rules.filter((r) => !existing.includes(r.rule));
+}
+function buildLearnDirRules(learnPath, autoCommit) {
+  const rules = [
+    {
+      rule: `Read(${learnPath}/**)`,
+      description: "[read-only] Read learning docs \xB7 Used by: /cf-learn",
+      category: "External Learn Directory",
+      recommended: true
+    },
+    {
+      rule: `Edit(${learnPath}/**)`,
+      description: "[modify] Edit learning docs \xB7 Used by: /cf-learn",
+      category: "External Learn Directory",
+      recommended: true
+    },
+    {
+      rule: `Write(${learnPath}/**)`,
+      description: "[write] Write learning docs \xB7 Used by: /cf-learn",
+      category: "External Learn Directory",
+      recommended: true
+    }
+  ];
+  if (autoCommit) {
+    const quoted = learnPath.includes(" ") ? `"${learnPath}"` : learnPath;
+    rules.push({
+      rule: `Bash(cd ${quoted} && git add:*)`,
+      description: "[modify] Stage learning docs for commit \xB7 Used by: /cf-learn auto-commit",
+      category: "External Learn Directory",
+      recommended: true
+    });
+    rules.push({
+      rule: `Bash(cd ${quoted} && git commit:*)`,
+      description: "[modify] Commit learning docs \xB7 Used by: /cf-learn auto-commit",
+      category: "External Learn Directory",
+      recommended: true
+    });
+  }
+  return rules;
+}
+function applyPermissions(settingsPath, toAdd, toRemove) {
+  const settings = readJson(settingsPath) ?? {};
+  const permissions = settings.permissions ?? {};
+  const existing = permissions.allow ?? [];
+  const afterRemove = existing.filter((r) => !toRemove.includes(r));
+  const afterAdd = [
+    ...afterRemove,
+    ...toAdd.filter((r) => !afterRemove.includes(r))
+  ];
+  permissions.allow = afterAdd;
+  settings.permissions = permissions;
+  writeJson(settingsPath, settings);
+}
+function groupByCategory(rules) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const rule of rules) {
+    const list = groups.get(rule.category) ?? [];
+    list.push(rule);
+    groups.set(rule.category, list);
+  }
+  return groups;
+}
+
+export {
+  PERMISSION_RULES,
+  getExistingRules,
+  getMissingRules,
+  buildLearnDirRules,
+  applyPermissions,
+  groupByCategory
+};

package/dist/{chunk-QQ5SVZET.js → chunk-AHGBESGW.js}

@@ -5,7 +5,7 @@ import {
   globalConfigPath,
   localConfigPath,
   readJson
-} from "./chunk-TPRZHSFS.js";
+} from "./chunk-HQ5BPWEV.js";
 import {
   log
 } from "./chunk-W5CD7WTX.js";
@@ -26,8 +26,8 @@ async function askScope(label = "Save to:") {
   return select({
     message: label,
     choices: [
-      { name: "Global (all projects)", value: "global" },
       { name: "This project only", value: "local" },
+      { name: "Global (all projects)", value: "global" },
       new Separator(),
       { name: "Back", value: "back" }
     ]

package/dist/{chunk-7N64TDZ6.js → chunk-BCYBFGVD.js}

@@ -21,7 +21,7 @@ ${MARKER_START}
 _cf_completions() {
   local cur="\${COMP_WORDS[COMP_CWORD]}"
   local prev="\${COMP_WORDS[COMP_CWORD-1]}"
-  local commands="install uninstall init config host mcp statusline update dev session"
+  local commands="install uninstall init config host mcp permission statusline update dev session"
 
   # Subcommands for 'dev'
   if [[ "\${COMP_WORDS[1]}" == "dev" && \${COMP_CWORD} -eq 2 ]]; then
@@ -55,6 +55,7 @@ var ZSH_FUNCTION_BODY = `_cf() {
     'config:Manage Coding Friend configuration'
     'host:Build and serve learning docs as a static website'
     'mcp:Setup MCP server for learning docs'
+    'permission:Manage Claude Code permission rules for Coding Friend'
     'statusline:Setup coding-friend statusline in Claude Code'
     'update:Update coding-friend plugin and refresh statusline'
     'dev:Switch between local and remote plugin for development'
@@ -103,6 +104,7 @@ complete -c cf -n "__fish_use_subcommand" -a init -d "Initialize coding-friend i
 complete -c cf -n "__fish_use_subcommand" -a config -d "Manage Coding Friend configuration"
 complete -c cf -n "__fish_use_subcommand" -a host -d "Build and serve learning docs as a static website"
 complete -c cf -n "__fish_use_subcommand" -a mcp -d "Setup MCP server for learning docs"
+complete -c cf -n "__fish_use_subcommand" -a permission -d "Manage Claude Code permission rules"
 complete -c cf -n "__fish_use_subcommand" -a statusline -d "Setup coding-friend statusline in Claude Code"
 complete -c cf -n "__fish_use_subcommand" -a update -d "Update coding-friend plugin and refresh statusline"
 complete -c cf -n "__fish_use_subcommand" -a dev -d "Switch between local and remote plugin for development"
@@ -121,7 +123,7 @@ var POWERSHELL_BLOCK = `
 ${MARKER_START}
 Register-ArgumentCompleter -Native -CommandName cf -ScriptBlock {
   param($wordToComplete, $commandAst, $cursorPosition)
-  $commands = @('install','uninstall','init','config','host','mcp','statusline','update','dev','session')
+  $commands = @('install','uninstall','init','config','host','mcp','permission','statusline','update','dev','session')
   $devSubcommands = @('on','off','status','restart','sync','update')
   $sessionSubcommands = @('save','load')
   $words = $commandAst.CommandElements

package/dist/{chunk-FYHHNX7K.js → chunk-EDVZPZ3B.js}

@@ -6,7 +6,7 @@ import {
   localConfigPath,
   readJson,
   resolvePath
-} from "./chunk-TPRZHSFS.js";
+} from "./chunk-HQ5BPWEV.js";
 
 // src/lib/config.ts
 function loadConfig() {

package/dist/{chunk-TPRZHSFS.js → chunk-HQ5BPWEV.js}

@@ -38,6 +38,9 @@ function globalConfigPath() {
 function claudeSettingsPath() {
   return join(homedir(), ".claude", "settings.json");
 }
+function claudeLocalSettingsPath() {
+  return resolve(process.cwd(), ".claude", "settings.local.json");
+}
 function installedPluginsPath() {
   return join(homedir(), ".claude", "plugins", "installed_plugins.json");
 }
@@ -96,6 +99,7 @@ export {
   localConfigPath,
   globalConfigPath,
   claudeSettingsPath,
+  claudeLocalSettingsPath,
   installedPluginsPath,
   pluginCachePath,
   devStatePath,

package/dist/{chunk-HFLBFX6J.js → chunk-TLLWOWYU.js}

@@ -2,7 +2,7 @@ import {
   installedPluginsPath,
   knownMarketplacesPath,
   readJson
-} from "./chunk-TPRZHSFS.js";
+} from "./chunk-HQ5BPWEV.js";
 
 // src/lib/plugin-state.ts
 var MARKETPLACE_NAME = "coding-friend-marketplace";

package/dist/{chunk-VYMXERKM.js → chunk-UR5XUEH5.js}

@@ -1,10 +1,10 @@
 import {
   ensureStatusline,
   getInstalledVersion
-} from "./chunk-BPLN4LDL.js";
+} from "./chunk-YAOUAJZP.js";
 import {
   ensureShellCompletion
-} from "./chunk-7N64TDZ6.js";
+} from "./chunk-BCYBFGVD.js";
 import {
   commandExists,
   run,
@@ -13,7 +13,7 @@ import {
 import {
   claudeSettingsPath,
   readJson
-} from "./chunk-TPRZHSFS.js";
+} from "./chunk-HQ5BPWEV.js";
 import {
   log
 } from "./chunk-W5CD7WTX.js";

package/dist/{chunk-BPLN4LDL.js → chunk-YAOUAJZP.js}

@@ -10,7 +10,7 @@ import {
   pluginCachePath,
   readJson,
   writeJson
-} from "./chunk-TPRZHSFS.js";
+} from "./chunk-HQ5BPWEV.js";
 
 // src/lib/statusline.ts
 import { existsSync, readdirSync } from "fs";

package/dist/{config-VAML7F7K.js → config-6P3SE3NS.js}

@@ -7,19 +7,19 @@ import {
   getScopeLabel,
   injectBackChoice,
   showConfigHint
-} from "./chunk-QQ5SVZET.js";
+} from "./chunk-AHGBESGW.js";
 import {
   findStatuslineHookPath,
   isStatuslineConfigured,
   saveStatuslineConfig,
   selectStatuslineComponents,
   writeStatuslineSettings
-} from "./chunk-BPLN4LDL.js";
+} from "./chunk-YAOUAJZP.js";
 import {
   ensureShellCompletion,
   hasShellCompletion,
   removeShellCompletion
-} from "./chunk-7N64TDZ6.js";
+} from "./chunk-BCYBFGVD.js";
 import {
   ALL_COMPONENT_IDS,
   DEFAULT_CONFIG
@@ -33,7 +33,7 @@ import {
   mergeJson,
   readJson,
   resolvePath
-} from "./chunk-TPRZHSFS.js";
+} from "./chunk-HQ5BPWEV.js";
 import {
   log
 } from "./chunk-W5CD7WTX.js";

package/dist/{dev-2GBY3GKC.js → dev-4NLCK6YG.js}

@@ -1,13 +1,13 @@
 import {
   isMarketplaceRegistered,
   isPluginInstalled
-} from "./chunk-HFLBFX6J.js";
+} from "./chunk-TLLWOWYU.js";
 import {
   ensureStatusline
-} from "./chunk-BPLN4LDL.js";
+} from "./chunk-YAOUAJZP.js";
 import {
   ensureShellCompletion
-} from "./chunk-7N64TDZ6.js";
+} from "./chunk-BCYBFGVD.js";
 import "./chunk-PGLUEN7D.js";
 import {
   commandExists,
@@ -19,7 +19,7 @@ import {
   pluginCachePath,
   readJson,
   writeJson
-} from "./chunk-TPRZHSFS.js";
+} from "./chunk-HQ5BPWEV.js";
 import {
   log
 } from "./chunk-W5CD7WTX.js";

package/dist/{host-LOG5RPZ7.js → host-BPO2STZA.js}

@@ -3,13 +3,13 @@ import {
 } from "./chunk-RZRT7NGT.js";
 import {
   resolveDocsDir
-} from "./chunk-FYHHNX7K.js";
+} from "./chunk-EDVZPZ3B.js";
 import "./chunk-PGLUEN7D.js";
 import {
   run,
   streamExec
 } from "./chunk-UFGNO6CW.js";
-import "./chunk-TPRZHSFS.js";
+import "./chunk-HQ5BPWEV.js";
 import {
   log
 } from "./chunk-W5CD7WTX.js";

package/dist/index.js

@@ -14,35 +14,39 @@ program.name("cf").description(
   "coding-friend CLI \u2014 host learning docs, setup MCP, init projects"
 ).version(pkg.version, "-v, --version");
 program.command("install").description("Install the Coding Friend plugin into Claude Code").action(async () => {
-  const { installCommand } = await import("./install-D4NW3OAA.js");
+  const { installCommand } = await import("./install-YEAWW7ZX.js");
   await installCommand();
 });
 program.command("uninstall").description("Uninstall the Coding Friend plugin from Claude Code").action(async () => {
-  const { uninstallCommand } = await import("./uninstall-SOHU5WGK.js");
+  const { uninstallCommand } = await import("./uninstall-3ISPGQHE.js");
   await uninstallCommand();
 });
 program.command("init").description("Initialize coding-friend in current project").action(async () => {
-  const { initCommand } = await import("./init-CIEDOFNC.js");
+  const { initCommand } = await import("./init-BG2ESQQC.js");
   await initCommand();
 });
 program.command("config").description("Manage Coding Friend configuration").action(async () => {
-  const { configCommand } = await import("./config-VAML7F7K.js");
+  const { configCommand } = await import("./config-6P3SE3NS.js");
   await configCommand();
 });
 program.command("host").description("Build and serve learning docs as a static website").argument("[path]", "path to docs folder").option("-p, --port <port>", "port number", "3333").action(async (path, opts) => {
-  const { hostCommand } = await import("./host-LOG5RPZ7.js");
+  const { hostCommand } = await import("./host-BPO2STZA.js");
   await hostCommand(path, opts);
 });
 program.command("mcp").description("Setup MCP server for learning docs").argument("[path]", "path to docs folder").action(async (path) => {
-  const { mcpCommand } = await import("./mcp-ORMYETXQ.js");
+  const { mcpCommand } = await import("./mcp-54UB5MF2.js");
   await mcpCommand(path);
 });
+program.command("permission").description("Manage Claude Code permission rules for Coding Friend").option("--all", "Apply all recommended permissions without prompts").action(async (opts) => {
+  const { permissionCommand } = await import("./permission-GPOUJUZS.js");
+  await permissionCommand(opts);
+});
 program.command("statusline").description("Setup coding-friend statusline in Claude Code").action(async () => {
-  const { statuslineCommand } = await import("./statusline-5HWRTSVL.js");
+  const { statuslineCommand } = await import("./statusline-L2CYEV4H.js");
   await statuslineCommand();
 });
 program.command("update").description("Update coding-friend plugin, CLI, and statusline").option("--cli", "Update only the CLI (npm package)").option("--plugin", "Update only the Claude Code plugin").option("--statusline", "Update only the statusline").action(async (opts) => {
-  const { updateCommand } = await import("./update-LA4B3LN4.js");
+  const { updateCommand } = await import("./update-EN6S3FKT.js");
   await updateCommand(opts);
 });
 var session = program.command("session").description("Save and load Claude Code sessions across machines");
@@ -57,11 +61,11 @@ session.command("save").description("Save current Claude Code session to sync fo
   "-s, --session-id <id>",
   "session UUID to save (default: auto-detect newest)"
 ).option("-l, --label <label>", "label for this session").action(async (opts) => {
-  const { sessionSaveCommand } = await import("./session-74F7L5LV.js");
+  const { sessionSaveCommand } = await import("./session-STYOO4A4.js");
   await sessionSaveCommand(opts);
 });
 session.command("load").description("Load a saved session from sync folder").action(async () => {
-  const { sessionLoadCommand } = await import("./session-74F7L5LV.js");
+  const { sessionLoadCommand } = await import("./session-STYOO4A4.js");
   await sessionLoadCommand();
 });
 var dev = program.command("dev").description("Development mode commands");
@@ -77,35 +81,35 @@ Dev subcommands:
   dev update [path]   Update local dev plugin to latest version`
 );
 dev.command("on").description("Switch to local plugin source").argument("[path]", "path to local coding-friend repo (default: cwd)").action(async (path) => {
-  const { devOnCommand } = await import("./dev-2GBY3GKC.js");
+  const { devOnCommand } = await import("./dev-4NLCK6YG.js");
   await devOnCommand(path);
 });
 dev.command("off").description("Switch back to remote marketplace").action(async () => {
-  const { devOffCommand } = await import("./dev-2GBY3GKC.js");
+  const { devOffCommand } = await import("./dev-4NLCK6YG.js");
   await devOffCommand();
 });
 dev.command("status").description("Show current dev mode").action(async () => {
-  const { devStatusCommand } = await import("./dev-2GBY3GKC.js");
+  const { devStatusCommand } = await import("./dev-4NLCK6YG.js");
   await devStatusCommand();
 });
 dev.command("sync").description(
   "Copy local source files to plugin cache (no version bump needed)"
 ).action(async () => {
-  const { devSyncCommand } = await import("./dev-2GBY3GKC.js");
+  const { devSyncCommand } = await import("./dev-4NLCK6YG.js");
   await devSyncCommand();
 });
 dev.command("restart").description("Reinstall local dev plugin (off + on)").argument(
   "[path]",
   "path to local coding-friend repo (default: saved path or cwd)"
 ).action(async (path) => {
-  const { devRestartCommand } = await import("./dev-2GBY3GKC.js");
+  const { devRestartCommand } = await import("./dev-4NLCK6YG.js");
   await devRestartCommand(path);
 });
 dev.command("update").description("Update local dev plugin to latest version (off + on)").argument(
   "[path]",
   "path to local coding-friend repo (default: saved path or cwd)"
 ).action(async (path) => {
-  const { devUpdateCommand } = await import("./dev-2GBY3GKC.js");
+  const { devUpdateCommand } = await import("./dev-4NLCK6YG.js");
   await devUpdateCommand(path);
 });
 program.parse();

package/dist/{init-CIEDOFNC.js → init-BG2ESQQC.js}

@@ -1,3 +1,9 @@
+import {
+  applyPermissions,
+  buildLearnDirRules,
+  getExistingRules,
+  getMissingRules
+} from "./chunk-4C4EKYM3.js";
 import {
   BACK,
   applyDocsDirChange,
@@ -7,18 +13,18 @@ import {
   getScopeLabel,
   injectBackChoice,
   showConfigHint
-} from "./chunk-QQ5SVZET.js";
+} from "./chunk-AHGBESGW.js";
 import {
   findStatuslineHookPath,
   isStatuslineConfigured,
   saveStatuslineConfig,
   selectStatuslineComponents,
   writeStatuslineSettings
-} from "./chunk-BPLN4LDL.js";
+} from "./chunk-YAOUAJZP.js";
 import {
   ensureShellCompletion,
   hasShellCompletion
-} from "./chunk-7N64TDZ6.js";
+} from "./chunk-BCYBFGVD.js";
 import {
   DEFAULT_CONFIG
 } from "./chunk-PGLUEN7D.js";
@@ -31,9 +37,8 @@ import {
   localConfigPath,
   mergeJson,
   readJson,
-  resolvePath,
-  writeJson
-} from "./chunk-TPRZHSFS.js";
+  resolvePath
+} from "./chunk-HQ5BPWEV.js";
 import {
   log
 } from "./chunk-W5CD7WTX.js";
@@ -411,35 +416,23 @@ async function stepStatusline() {
 async function stepClaudePermissions(outputDir, autoCommit) {
   const resolved = resolvePath(outputDir);
   const homePath = resolved.startsWith(homedir()) ? resolved.replace(homedir(), "~") : resolved;
-  const rules = [
-    `Read(${homePath}/**)`,
-    `Edit(${homePath}/**)`,
-    `Write(${homePath}/**)`
-  ];
-  if (autoCommit) {
-    rules.push(`Bash(cd ${homePath} && git add:*)`);
-    rules.push(`Bash(cd ${homePath} && git commit:*)`);
-  }
   const settingsPath = claudeSettingsPath();
-  const settings = readJson(settingsPath);
-  if (!settings) {
+  const existing = getExistingRules(settingsPath);
+  if (existing.length === 0 && !readJson(settingsPath)) {
     log.warn(
       "~/.claude/settings.json not found. Create it via Claude Code settings first."
     );
     return;
   }
-  const permissions = settings.permissions ?? {};
-  const existing = permissions.allow ?? [];
-  const missing = rules.filter(
-    (r) => !existing.some((e) => e === r || e.includes(homePath))
-  );
+  const learnRules = buildLearnDirRules(homePath, autoCommit);
+  const missing = getMissingRules(existing, learnRules);
   if (missing.length === 0) {
     log.dim("All permission rules already configured.");
     return;
   }
   console.log("\nTo avoid repeated permission prompts, add these rules:");
   for (const r of missing) {
-    console.log(`  ${r}`);
+    console.log(`  ${r.rule}`);
   }
   const ok = await confirm({
     message: "Add these to ~/.claude/settings.json?",
@@ -449,10 +442,13 @@ async function stepClaudePermissions(outputDir, autoCommit) {
     log.dim("Skipped. You'll get prompted each time.");
     return;
   }
-  permissions.allow = [...existing, ...missing];
-  settings.permissions = permissions;
-  writeJson(settingsPath, settings);
+  applyPermissions(
+    settingsPath,
+    missing.map((r) => r.rule),
+    []
+  );
   log.success(`Added ${missing.length} permission rules.`);
+  log.dim("For all plugin permissions, run: `cf permission`");
 }
 async function initCommand() {
   _stepIndex = 0;
@@ -485,6 +481,12 @@ async function initCommand() {
   const docsDir = getDocsDir(updatedGlobal, updatedLocal);
   if (gitAvailable) {
     await stepGitignore(docsDir);
+  } else {
+    printStepHeader(
+      `Configure .gitignore ${chalk.dim("[skipped]")}`,
+      "Keeps AI-generated docs and config out of your git history."
+    );
+    log.dim("Skipped \u2014 not inside a git repo.");
   }
   await stepDocsLanguage(globalCfg, localCfg);
   const { outputDir, autoCommit, isExternal } = await stepLearnConfig(
@@ -500,6 +502,14 @@ async function initCommand() {
       "Grants Claude read/write access to your external learn folder without repeated prompts."
     );
     await stepClaudePermissions(outputDir, autoCommit);
+  } else {
+    printStepHeader(
+      `Configure Claude permissions ${chalk.dim("[skipped]")}`,
+      "Grants Claude read/write access to your external learn folder without repeated prompts."
+    );
+    log.dim(
+      "Skipped \u2014 learn directory is inside the project. Run `cf permission` for other permissions."
+    );
   }
   console.log();
   log.congrats("Setup complete!");

package/dist/{install-D4NW3OAA.js → install-YEAWW7ZX.js}

@@ -1,20 +1,20 @@
 import {
   getLatestVersion,
   semverCompare
-} from "./chunk-VYMXERKM.js";
+} from "./chunk-UR5XUEH5.js";
 import {
   isMarketplaceRegistered
-} from "./chunk-HFLBFX6J.js";
+} from "./chunk-TLLWOWYU.js";
 import {
   getInstalledVersion
-} from "./chunk-BPLN4LDL.js";
-import "./chunk-7N64TDZ6.js";
+} from "./chunk-YAOUAJZP.js";
+import "./chunk-BCYBFGVD.js";
 import "./chunk-PGLUEN7D.js";
 import {
   commandExists,
   run
 } from "./chunk-UFGNO6CW.js";
-import "./chunk-TPRZHSFS.js";
+import "./chunk-HQ5BPWEV.js";
 import {
   log
 } from "./chunk-W5CD7WTX.js";

package/dist/{mcp-ORMYETXQ.js → mcp-54UB5MF2.js}

@@ -3,12 +3,12 @@ import {
 } from "./chunk-RZRT7NGT.js";
 import {
   resolveDocsDir
-} from "./chunk-FYHHNX7K.js";
+} from "./chunk-EDVZPZ3B.js";
 import "./chunk-PGLUEN7D.js";
 import {
   run
 } from "./chunk-UFGNO6CW.js";
-import "./chunk-TPRZHSFS.js";
+import "./chunk-HQ5BPWEV.js";
 import {
   log
 } from "./chunk-W5CD7WTX.js";

package/dist/permission-GPOUJUZS.js

@@ -0,0 +1,168 @@
+import {
+  PERMISSION_RULES,
+  applyPermissions,
+  getExistingRules,
+  groupByCategory
+} from "./chunk-4C4EKYM3.js";
+import {
+  claudeLocalSettingsPath
+} from "./chunk-HQ5BPWEV.js";
+import {
+  log
+} from "./chunk-W5CD7WTX.js";
+
+// src/commands/permission.ts
+import { checkbox, confirm, select } from "@inquirer/prompts";
+import chalk from "chalk";
+import { homedir } from "os";
+var TAG_COLORS = {
+  "[read-only]": chalk.green,
+  "[modify]": chalk.yellow,
+  "[write]": chalk.yellow,
+  "[remote]": chalk.red,
+  "[execute]": chalk.magenta,
+  "[network]": chalk.magenta
+};
+function colorDescription(desc) {
+  const parts = desc.split(" \xB7 ");
+  const main = parts[0];
+  const usedBy = parts.length > 1 ? chalk.dim("\xB7 " + parts.slice(1).join(" \xB7 ")) : "";
+  const tagMatch = main.match(/^(\[[^\]]+\])\s*(.*)/);
+  if (tagMatch) {
+    const colorFn = TAG_COLORS[tagMatch[1]] ?? chalk.cyan;
+    return `${colorFn(tagMatch[1])} ${tagMatch[2]} ${usedBy}`;
+  }
+  return `${main} ${usedBy}`;
+}
+async function interactiveFlow(allRules, existing) {
+  const groups = groupByCategory(allRules);
+  const allRuleStrings = allRules.map((r) => r.rule);
+  const managedExisting = existing.filter((r) => allRuleStrings.includes(r));
+  const enabled = new Set(managedExisting);
+  console.log(
+    chalk.dim(
+      "Full reference: https://cf.dinhanhthi.com/docs/reference/permissions/"
+    )
+  );
+  console.log();
+  let browsing = true;
+  while (browsing) {
+    const categoryChoices = [];
+    for (const [category, rules] of groups) {
+      const configured = rules.filter((r) => enabled.has(r.rule)).length;
+      const total = rules.length;
+      let suffix;
+      if (configured === total)
+        suffix = chalk.green(`${configured}/${total} \u2713`);
+      else if (configured > 0) suffix = chalk.yellow(`${configured}/${total}`);
+      else suffix = chalk.dim(`0/${total}`);
+      categoryChoices.push({
+        name: `${category} (${suffix})`,
+        value: category
+      });
+    }
+    categoryChoices.push({
+      name: chalk.green("\u2192 Apply changes"),
+      value: "__apply__"
+    });
+    const chosen = await select({
+      message: "Select a category to configure:",
+      choices: categoryChoices
+    });
+    if (chosen === "__apply__") {
+      browsing = false;
+      continue;
+    }
+    const categoryRules = groups.get(chosen);
+    const selected = await checkbox({
+      message: `${chosen} permissions:`,
+      choices: categoryRules.map((rule) => ({
+        name: rule.rule,
+        value: rule.rule,
+        checked: enabled.has(rule.rule),
+        description: colorDescription(rule.description)
+      }))
+    });
+    for (const rule of categoryRules) {
+      if (selected.includes(rule.rule)) {
+        enabled.add(rule.rule);
+      } else {
+        enabled.delete(rule.rule);
+      }
+    }
+  }
+  const toAdd = [...enabled].filter((r) => !existing.includes(r));
+  const toRemove = managedExisting.filter((r) => !enabled.has(r));
+  return { toAdd, toRemove };
+}
+async function permissionCommand(opts) {
+  console.log("=== \u{1F33F} Coding Friend Permissions \u{1F33F} ===");
+  console.log();
+  const settingsPath = claudeLocalSettingsPath();
+  const settingsLabel = settingsPath.replace(homedir(), "~");
+  const existing = getExistingRules(settingsPath);
+  const allRules = PERMISSION_RULES;
+  const allRuleStrings = allRules.map((r) => r.rule);
+  const managedExisting = existing.filter((r) => allRuleStrings.includes(r));
+  const unmanagedExisting = existing.filter((r) => !allRuleStrings.includes(r));
+  log.dim(`Settings: ${settingsLabel} (project-local)`);
+  log.dim(
+    `Current: ${managedExisting.length}/${allRules.length} Coding Friend rules configured`
+  );
+  if (unmanagedExisting.length > 0) {
+    log.dim(
+      `(${unmanagedExisting.length} other permission rules will not be touched)`
+    );
+  }
+  console.log();
+  if (opts.all) {
+    const recommended = allRules.filter((r) => r.recommended);
+    const toAdd2 = recommended.map((r) => r.rule).filter((r) => !existing.includes(r));
+    if (toAdd2.length === 0) {
+      log.success("All recommended permissions already configured.");
+      return;
+    }
+    console.log("Adding recommended permissions:");
+    for (const r of toAdd2) {
+      console.log(`  ${chalk.green("+")} ${r}`);
+    }
+    console.log();
+    applyPermissions(settingsPath, toAdd2, []);
+    log.success(`Added ${toAdd2.length} permission rules.`);
+    return;
+  }
+  const { toAdd, toRemove } = await interactiveFlow(allRules, existing);
+  if (toAdd.length === 0 && toRemove.length === 0) {
+    log.dim("No changes.");
+    return;
+  }
+  console.log();
+  if (toAdd.length > 0) {
+    console.log(chalk.green(`Adding ${toAdd.length} rules:`));
+    for (const r of toAdd) {
+      console.log(`  ${chalk.green("+")} ${r}`);
+    }
+  }
+  if (toRemove.length > 0) {
+    console.log(chalk.red(`Removing ${toRemove.length} rules:`));
+    for (const r of toRemove) {
+      console.log(`  ${chalk.red("-")} ${r}`);
+    }
+  }
+  console.log();
+  const ok = await confirm({
+    message: `Apply changes to ${settingsLabel}?`,
+    default: true
+  });
+  if (!ok) {
+    log.dim("Skipped.");
+    return;
+  }
+  applyPermissions(settingsPath, toAdd, toRemove);
+  log.success(
+    `Done \u2014 added ${toAdd.length}, removed ${toRemove.length} rules.`
+  );
+}
+export {
+  permissionCommand
+};

package/dist/postinstall.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   ensureShellCompletion
-} from "./chunk-7N64TDZ6.js";
+} from "./chunk-BCYBFGVD.js";
 import "./chunk-W5CD7WTX.js";
 
 // src/postinstall.ts

package/dist/{session-74F7L5LV.js → session-STYOO4A4.js}

@@ -1,13 +1,13 @@
 import {
   loadConfig
-} from "./chunk-FYHHNX7K.js";
+} from "./chunk-EDVZPZ3B.js";
 import "./chunk-PGLUEN7D.js";
 import {
   claudeSessionDir,
   encodeProjectPath,
   readJson,
   writeJson
-} from "./chunk-TPRZHSFS.js";
+} from "./chunk-HQ5BPWEV.js";
 import {
   log
 } from "./chunk-W5CD7WTX.js";

package/dist/{statusline-5HWRTSVL.js → statusline-L2CYEV4H.js}

@@ -4,11 +4,11 @@ import {
   saveStatuslineConfig,
   selectStatuslineComponents,
   writeStatuslineSettings
-} from "./chunk-BPLN4LDL.js";
+} from "./chunk-YAOUAJZP.js";
 import {
   ALL_COMPONENT_IDS
 } from "./chunk-PGLUEN7D.js";
-import "./chunk-TPRZHSFS.js";
+import "./chunk-HQ5BPWEV.js";
 import {
   log
 } from "./chunk-W5CD7WTX.js";

package/dist/{uninstall-SOHU5WGK.js → uninstall-3ISPGQHE.js}

@@ -1,11 +1,11 @@
 import {
   isMarketplaceRegistered,
   isPluginInstalled
-} from "./chunk-HFLBFX6J.js";
+} from "./chunk-TLLWOWYU.js";
 import {
   hasShellCompletion,
   removeShellCompletion
-} from "./chunk-7N64TDZ6.js";
+} from "./chunk-BCYBFGVD.js";
 import {
   commandExists,
   run
@@ -18,7 +18,7 @@ import {
   marketplaceClonePath,
   readJson,
   writeJson
-} from "./chunk-TPRZHSFS.js";
+} from "./chunk-HQ5BPWEV.js";
 import {
   log
 } from "./chunk-W5CD7WTX.js";

package/dist/{update-LA4B3LN4.js → update-EN6S3FKT.js}

@@ -2,12 +2,12 @@ import {
   getLatestVersion,
   semverCompare,
   updateCommand
-} from "./chunk-VYMXERKM.js";
-import "./chunk-BPLN4LDL.js";
-import "./chunk-7N64TDZ6.js";
+} from "./chunk-UR5XUEH5.js";
+import "./chunk-YAOUAJZP.js";
+import "./chunk-BCYBFGVD.js";
 import "./chunk-PGLUEN7D.js";
 import "./chunk-UFGNO6CW.js";
-import "./chunk-TPRZHSFS.js";
+import "./chunk-HQ5BPWEV.js";
 import "./chunk-W5CD7WTX.js";
 export {
   getLatestVersion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coding-friend-cli",
-  "version": "1.9.1",
+  "version": "1.10.0",
   "description": "CLI for coding-friend — host learning docs, setup MCP server, initialize projects",
   "type": "module",
   "bin": {