zcf 2.2.0 → 2.3.0

package/dist/cli.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import ansis from 'ansis';
 import cac from 'cac';
-import { d as SUPPORTED_LANGS, I as I18N, L as LANG_LABELS, z as updateZcfConfig, Z as ZCF_CONFIG_FILE, B as readZcfConfig, D as resolveAiOutputLanguage, p as applyAiLanguageDirective, E as configureAiPersonality, u as updateDefaultModel, F as isWindows, r as readMcpConfig, x as fixWindowsMcpConfig, w as writeMcpConfig, G as selectMcpServices, s as backupMcpConfig, M as MCP_SERVICES, v as buildMcpServerConfig, t as mergeMcpServers, o as getExistingApiConfig, H as formatApiKeyDisplay, J as modifyApiConfigPartially, K as validateApiKey, l as configureApi, N as displayBanner, O as selectScriptLanguage, S as SETTINGS_FILE, P as updatePromptOnly, Q as version, R as handleExitPromptError, T as handleGeneralError, U as displayBannerWithInfo, i as init } from './shared/zcf.BES32wHt.mjs';
+import { d as SUPPORTED_LANGS, I as I18N, L as LANG_LABELS, z as updateZcfConfig, Z as ZCF_CONFIG_FILE, B as readZcfConfig, D as resolveAiOutputLanguage, p as applyAiLanguageDirective, E as configureAiPersonality, u as updateDefaultModel, F as isWindows, r as readMcpConfig, x as fixWindowsMcpConfig, w as writeMcpConfig, G as selectMcpServices, s as backupMcpConfig, M as MCP_SERVICES, v as buildMcpServerConfig, t as mergeMcpServers, o as getExistingApiConfig, H as formatApiKeyDisplay, J as modifyApiConfigPartially, K as validateApiKey, l as configureApi, N as displayBanner, O as selectScriptLanguage, S as SETTINGS_FILE, P as updatePromptOnly, Q as version, R as handleExitPromptError, T as handleGeneralError, U as displayBannerWithInfo, i as init } from './shared/zcf.ChHPmCup.mjs';
 import inquirer from 'inquirer';
 import { existsSync, unlinkSync } from 'node:fs';
 import 'node:os';

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { A as AI_OUTPUT_LANGUAGES, C as CLAUDE_DIR, a as CLAUDE_MD_FILE, b as ClAUDE_CONFIG_FILE, I as I18N, L as LANG_LABELS, M as MCP_SERVICES, S as SETTINGS_FILE, d as SUPPORTED_LANGS, Z as ZCF_CONFIG_FILE, y as addCompletedOnboarding, p as applyAiLanguageDirective, j as backupExistingConfig, s as backupMcpConfig, v as buildMcpServerConfig, c as commandExists, l as configureApi, k as copyConfigFiles, h as ensureClaudeDir, x as fixWindowsMcpConfig, o as getExistingApiConfig, q as getMcpConfigPath, g as getPlatform, i as init, f as installClaudeCode, e as isClaudeCodeInstalled, m as mergeConfigs, t as mergeMcpServers, n as mergeSettingsFile, r as readMcpConfig, u as updateDefaultModel, w as writeMcpConfig } from './shared/zcf.BES32wHt.mjs';
+export { A as AI_OUTPUT_LANGUAGES, C as CLAUDE_DIR, a as CLAUDE_MD_FILE, b as ClAUDE_CONFIG_FILE, I as I18N, L as LANG_LABELS, M as MCP_SERVICES, S as SETTINGS_FILE, d as SUPPORTED_LANGS, Z as ZCF_CONFIG_FILE, y as addCompletedOnboarding, p as applyAiLanguageDirective, j as backupExistingConfig, s as backupMcpConfig, v as buildMcpServerConfig, c as commandExists, l as configureApi, k as copyConfigFiles, h as ensureClaudeDir, x as fixWindowsMcpConfig, o as getExistingApiConfig, q as getMcpConfigPath, g as getPlatform, i as init, f as installClaudeCode, e as isClaudeCodeInstalled, m as mergeConfigs, t as mergeMcpServers, n as mergeSettingsFile, r as readMcpConfig, u as updateDefaultModel, w as writeMcpConfig } from './shared/zcf.ChHPmCup.mjs';
 import 'inquirer';
 import 'ansis';
 import 'node:fs';

package/dist/shared/{zcf.BES32wHt.mjs → zcf.ChHPmCup.mjs}

@@ -7,7 +7,7 @@ import dayjs from 'dayjs';
 import { fileURLToPath } from 'node:url';
 import { exec } from 'tinyexec';
 
-const version = "2.2.0";
+const version = "2.3.0";
 const homepage = "https://github.com/UfoMiao/zcf";
 
 const CLAUDE_DIR = join(homedir(), ".claude");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "zcf",
   "type": "module",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "Zero-Config Claude-Code Flow - One-click configuration tool for Claude Code",
   "license": "MIT",
   "homepage": "https://github.com/UfoMiao/zcf",

package/templates/en/commands/feat.md

@@ -1,23 +1,5 @@
 ---
 description: Add New Feature
-
-allowed-tools:
-  - Task
-  - Bash
-  - Glob
-  - Grep
-  - Read
-  - Edit
-  - MultiEdit
-  - Write
-  - WebFetch
-  - WebSearch
-  - Notebook.*
-  - Edit|Write
-  - mcp__.*
-  - mcp__memory__.*
-  - mcp__filesystem__.*
-  - mcp__github__.*
 ---
 
 $ARGUMENTS

package/templates/en/commands/workflow.md

@@ -1,22 +1,5 @@
 ---
 description: 'Professional AI programming assistant with structured workflow (Research -> Ideate -> Plan -> Execute -> Optimize -> Review) for developers'
-allowed-tools:
-  - Task
-  - Bash
-  - Glob
-  - Grep
-  - Read
-  - Edit
-  - MultiEdit
-  - Write
-  - WebFetch
-  - WebSearch
-  - Notebook.*
-  - Edit|Write
-  - mcp__.*
-  - mcp__memory__.*
-  - mcp__filesystem__.*
-  - mcp__github__.*
 ---
 
 # Workflow - Professional Development Assistant

package/templates/en/technical-guides.md

@@ -1,74 +1,73 @@
 # Technical Execution Guidelines
 
-This document provides best practices that Claude Code should follow when executing specific technical tasks.
+This document provides best practices for Claude Code when executing technical tasks.
+
+## Dangerous Operations Confirmation
+
+**Important**: The following operations require explicit user confirmation before execution:
+
+### Operations Requiring Confirmation
+- **File System**: Delete files/directories, bulk modifications, move system files
+- **Code Commits**: `git commit`, `git push`, `git reset --hard`
+- **System Config**: Modify environment variables, system settings, permissions
+- **Data Operations**: Database deletions, schema changes, bulk updates
+- **Network Requests**: Send sensitive data, call production APIs
+- **Package Management**: Global install/uninstall, update core dependencies
+
+### Confirmation Process
+Before executing dangerous operations:
+1. Clearly explain the operation and its impacts
+2. Wait for explicit user confirmation (e.g., "yes", "confirm", "proceed")
+3. If user hesitates or declines, provide more information or alternatives
 
 ## Command Execution Best Practices
 
 ### Path Handling Standards
 
-**Important**: Always use double quotes to wrap file paths when executing commands on all operating systems, especially on Windows.
+**Important**: Always use double quotes to wrap file paths when executing commands.
 
-#### Correct Examples
 ```bash
-# ✅ Correct: Paths wrapped in double quotes
+# ✅ Correct
 cd "C:\Users\name\My Documents"
-python "C:\Program Files\MyApp\script.py"
 node "/path/with spaces/app.js"
-```
 
-#### Incorrect Examples
-```bash
-# ❌ Incorrect: No quotes, backslashes will be swallowed on Windows
+# ❌ Incorrect
 cd C:\Users\name\My Documents
-python C:\Program Files\MyApp\script.py
 ```
 
 ### Cross-Platform Compatibility
+- Prefer forward slashes `/` as path separators
+- When using backslashes, ensure paths are double-quoted
 
-- Prefer forward slashes `/` as path separators (supported by most tools)
-- When backslashes must be used, ensure paths are wrapped in double quotes
-- Be mindful of spaces and special characters even with relative paths
+## Search Tool Usage
 
-## Search Tool Usage Guidelines
+### Content Search
+**Always prioritize `rg` (ripgrep)** - faster and won't timeout.
 
-### Content Search Priority
-
-**Always prioritize `rg` (ripgrep) for file content searches** over `grep`.
-
-> **Note**: ripgrep requires user installation. Most developers already have this tool installed. If `rg` command is not found, remind users to install:
-> - macOS: `brew install ripgrep`
-> - Windows: `scoop install ripgrep` or `choco install ripgrep`
-> - Linux: `sudo apt-get install ripgrep` or see [official installation guide](https://github.com/BurntSushi/ripgrep#installation)
-
-#### Reasons
-1. **Superior Performance**: rg won't timeout in large codebases (e.g., Chromium, Emacs)
-2. **Faster Execution**: rg is significantly faster than grep
-3. **Smarter Defaults**: Automatically respects .gitignore files
-
-#### Usage Examples
 ```bash
-# ✅ Prefer rg
-rg "search pattern" .
-rg -i "case insensitive" src/
+# ✅ Preferred
+rg "pattern" .
 rg -t js "console.log" .
 
-# ⚠️ Only use grep when rg is unavailable
+# ⚠️ Fallback
 grep -r "pattern" .
 ```
 
+> Note: If `rg` unavailable, remind user to install: `brew/scoop/apt install ripgrep`
+
 ### File Finding
-- Use Glob tool for filename pattern matching
+- Use Glob tool for pattern matching
 - Use LS tool for directory listings
-- Avoid using `find` command (specialized tools are more efficient)
+- Avoid using `find` command
 
 ## Tool Usage Principles
 
-1. **Prefer Specialized Tools**: Use Read, Write, Edit tools instead of cat, echo commands
+1. **Prefer Specialized Tools**: Use Read, Write, Edit instead of cat, echo
 2. **Batch Operations**: Call multiple tools simultaneously for efficiency
-3. **Error Handling**: Check for path quoting issues first when commands fail
+3. **Error Handling**: Check path quoting first when commands fail
 
-## Performance Optimization Tips
+## Performance Optimization
 
 - Use Task tool for complex searches in large projects
-- Understand project structure before searching to narrow scope
-- Use search parameters wisely (e.g., file type filters) for efficiency
+- Understand project structure before searching
+- Use file type filters wisely for efficiency

package/templates/settings.json

@@ -8,19 +8,23 @@
   "includeCoAuthoredBy": false,
   "permissions": {
     "allow": [
-      "Bash(*)",
-      "LS(*)",
-      "Read(*)",
-      "Write(*)",
-      "Edit(*)",
-      "MultiEdit(*)",
-      "Glob(*)",
-      "Grep(*)",
-      "WebFetch(*)",
-      "WebSearch(*)",
-      "TodoWrite(*)",
-      "NotebookRead(*)",
-      "NotebookEdit(*)"
+      "Bash",
+      "LS",
+      "Read",
+      "Write",
+      "Edit",
+      "MultiEdit",
+      "Glob",
+      "Grep",
+      "WebFetch",
+      "WebSearch",
+      "TodoWrite",
+      "NotebookRead",
+      "NotebookEdit",
+      "mcp__exa",
+      "mcp__context7",
+      "mcp__mcp-deepwiki",
+      "mcp__Playwright"
     ],
     "deny": []
   },

package/templates/zh-CN/commands/feat.md

@@ -1,23 +1,5 @@
 ---
 description: '用于新增功能开发的命令，支持完整的开发流程和工具集成'
-
-allowed-tools:
-  - Task
-  - Bash
-  - Glob
-  - Grep
-  - Read
-  - Edit
-  - MultiEdit
-  - Write
-  - WebFetch
-  - WebSearch
-  - Notebook.*
-  - Edit|Write
-  - mcp__.*
-  - mcp__memory__.*
-  - mcp__filesystem__.*
-  - mcp__github__.*
 ---
 
 $ARGUMENTS

package/templates/zh-CN/commands/workflow.md

@@ -1,22 +1,5 @@
 ---
 description: '专业AI编程助手，提供结构化六阶段开发工作流（研究→构思→计划→执行→优化→评审），适用于专业开发者'
-allowed-tools:
-  - Task
-  - Bash
-  - Glob
-  - Grep
-  - Read
-  - Edit
-  - MultiEdit
-  - Write
-  - WebFetch
-  - WebSearch
-  - Notebook.*
-  - Edit|Write
-  - mcp__.*
-  - mcp__memory__.*
-  - mcp__filesystem__.*
-  - mcp__github__.*
 ---
 
 # Workflow - 专业开发助手

package/templates/zh-CN/technical-guides.md

@@ -1,74 +1,73 @@
 # 技术执行指南
 
-本文档提供 Claude Code 在执行具体技术任务时应遵循的最佳实践。
+本文档提供 Claude Code 执行技术任务时的最佳实践。
+
+## 危险操作确认机制
+
+**重要**：以下操作需要明确的用户确认后才能执行：
+
+### 需确认的操作类型
+- **文件系统**：删除文件/目录、批量修改、移动系统文件
+- **代码提交**：`git commit`、`git push`、`git reset --hard`
+- **系统配置**：修改环境变量、系统设置、权限变更
+- **数据操作**：数据库删除、结构变更、批量更新
+- **网络请求**：发送敏感数据、调用生产环境API
+- **包管理**：全局安装/卸载、更新核心依赖
+
+### 确认方式
+执行危险操作前，必须：
+1. 明确说明即将执行的操作及其影响
+2. 等待用户明确确认（如"是"、"确认"、"继续"）
+3. 用户未确认或表示犹豫时，提供更多信息或替代方案
 
 ## 命令执行最佳实践
 
 ### 路径处理规范
 
-**重要**：在所有操作系统上执行命令时，**始终使用双引号包裹文件路径**，特别是在 Windows 系统上。
+**重要**：执行命令时**始终使用双引号包裹文件路径**。
 
-#### 正确示例
 ```bash
-# ✅ 正确：路径使用双引号
+# ✅ 正确
 cd "C:\Users\name\My Documents"
-python "C:\Program Files\MyApp\script.py"
 node "/path/with spaces/app.js"
-```
 
-#### 错误示例
-```bash
-# ❌ 错误：未使用引号，Windows 下反斜杠会被吞掉
+# ❌ 错误
 cd C:\Users\name\My Documents
-python C:\Program Files\MyApp\script.py
 ```
 
 ### 跨平台兼容性
+- 优先使用正斜杠 `/` 作为路径分隔符
+- 使用反斜杠时确保路径被双引号包裹
 
-- 优先使用正斜杠 `/` 作为路径分隔符（大多数工具都支持）
-- 当必须使用反斜杠时，确保路径被双引号包裹
-- 使用相对路径时也要注意空格和特殊字符
+## 搜索工具使用
 
-## 搜索工具使用指南
+### 内容搜索
+**始终优先使用 `rg` (ripgrep)**，速度更快且不会超时。
 
-### 内容搜索优先级
-
-**始终优先使用 `rg` (ripgrep) 进行文件内容搜索**，而不是 `grep`。
-
-> **注意**：ripgrep 需要用户自行安装。大多数开发者已经安装了此工具，如果遇到 `rg` 命令不存在，请提醒用户安装：
-> - macOS: `brew install ripgrep`
-> - Windows: `scoop install ripgrep` 或 `choco install ripgrep`
-> - Linux: `sudo apt-get install ripgrep` 或查看 [官方安装指南](https://github.com/BurntSushi/ripgrep#installation)
-
-#### 原因
-1. **性能优越**：在大型代码库（如 Chromium、Emacs）中，rg 不会超时
-2. **速度更快**：rg 的执行速度显著快于 grep
-3. **默认配置更智能**：自动忽略 .gitignore 中的文件
-
-#### 使用示例
 ```bash
-# ✅ 优先使用 rg
-rg "search pattern" .
-rg -i "case insensitive" src/
+# ✅ 优先使用
+rg "pattern" .
 rg -t js "console.log" .
 
-# ⚠️ 仅在 rg 不可用时才使用 grep
+# ⚠️ 备选方案
 grep -r "pattern" .
 ```
 
+> 提示：如 `rg` 不可用，提醒用户安装：`brew/scoop/apt install ripgrep`
+
 ### 文件查找
-- 使用 Glob 工具查找文件名模式
-- 使用 LS 工具列出目录内容
-- 避免使用 `find` 命令（使用专门的工具更高效）
+- 使用 Glob 工具进行模式匹配
+- 使用 LS 工具列出目录
+- 避免使用 `find` 命令
 
 ## 工具使用原则
 
-1. **优先使用专门的工具**：使用 Read、Write、Edit 等专门工具，而不是 cat、echo 等命令
-2. **批量操作**：可以同时调用多个工具以提高效率
-3. **错误处理**：命令失败后，先检查路径引号问题再重试
+1. **优先专用工具**：使用 Read、Write、Edit 而非 cat、echo
+2. **批量操作**：同时调用多个工具以提高效率
+3. **错误处理**：命令失败时先检查路径引号问题
 
-## 性能优化建议
+## 性能优化
 
-- 对于大型项目，使用 Task 工具进行复杂搜索
-- 搜索前先了解项目结构，缩小搜索范围
-- 合理使用搜索参数（如文件类型过滤）以提高效率
+- 大型项目使用 Task 工具进行复杂搜索
+- 搜索前了解项目结构，缩小范围
+- 合理使用文件类型过滤提高效率