zcf 2.2.0 → 2.4.0

package/README.md

@@ -86,9 +86,11 @@ npx zcf → 选择 2  # 通过菜单执行工作流更新
 
 - 自动检测 Claude Code 安装状态
 - 使用 npm 进行自动安装（确保兼容性）
-- 跨平台支持（Windows/macOS/Linux）
+- 跨平台支持（Windows/macOS/Linux/Termux）
 - 自动配置 MCP 服务
 - 智能配置合并和部分修改支持（v2.0 新增）
+- 增强的命令检测机制（v2.1 新增）
+- 危险操作确认机制（v2.3 新增）
 
 ### 📦 完整配置
 
@@ -123,7 +125,7 @@ npx zcf → 选择 2  # 通过菜单执行工作流更新
 ```bash
 $ npx zcf
 
- ZCF - Zero-Config Claude-Code Flow v2.0.0
+ ZCF - Zero-Config Claude-Code Flow v2.3.0
 
 ? Select ZCF display language / 选择ZCF显示语言:
   ❯ 简体中文
@@ -137,6 +139,7 @@ $ npx zcf
   4. 配置 MCP 服务 - 管理 MCP 集成
   5. 配置默认模型 - 设置默认 AI 模型
   6. 配置 AI 个性 - 设置 AI 助手人格
+  7. 配置 AI 记忆 - 管理 AI 记忆设置
 
   ------------ ZCF ------------
   0. 更改语言 - 切换界面语言
@@ -353,8 +356,12 @@ node bin/zcf.mjs
 1. 重新运行 `npx zcf` 重新配置
 2. 检查 `~/.claude/` 目录下的配置文件
 3. 确保 Claude Code 已正确安装
+4. 如果路径包含空格，ZCF 会自动处理引号包裹
+5. 优先使用 ripgrep (`rg`) 进行文件搜索以获得更好性能
 
-### Windows 平台支持
+### 跨平台支持
+
+#### Windows 平台
 
 ZCF 已完全支持 Windows 平台：
 
@@ -364,6 +371,27 @@ ZCF 已完全支持 Windows 平台：
 
 如果在 Windows 上遇到 MCP 连接问题，运行 `npx zcf` 会自动修复配置格式。
 
+#### Termux 支持（v2.1 新增）
+
+ZCF 现已支持在 Android Termux 环境中运行：
+
+- **自动适配**：自动检测 Termux 环境并使用兼容配置
+- **增强检测**：智能识别可用命令，确保在受限环境中正常工作
+- **完整功能**：在 Termux 中享受与桌面系统相同的完整功能
+
+### 安全特性（v2.3 新增）
+
+#### 危险操作确认机制
+
+为保护用户数据安全，以下操作需要明确确认：
+
+- **文件系统**：删除文件/目录、批量修改、移动系统文件
+- **代码提交**：`git commit`、`git push`、`git reset --hard`
+- **系统配置**：修改环境变量、系统设置、权限变更
+- **数据操作**：数据库删除、模式更改、批量更新
+- **网络请求**：发送敏感数据、调用生产环境 API
+- **包管理**：全局安装/卸载、更新核心依赖
+
 ## 🙏 鸣谢
 
 本项目的部分 Prompt 参考了以下优秀作品：

package/dist/cli.mjs

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import ansis from 'ansis';
 import cac from 'cac';
-import { d as SUPPORTED_LANGS, I as I18N, L as LANG_LABELS, z as updateZcfConfig, Z as ZCF_CONFIG_FILE, B as readZcfConfig, D as resolveAiOutputLanguage, p as applyAiLanguageDirective, E as configureAiPersonality, u as updateDefaultModel, F as isWindows, r as readMcpConfig, x as fixWindowsMcpConfig, w as writeMcpConfig, G as selectMcpServices, s as backupMcpConfig, M as MCP_SERVICES, v as buildMcpServerConfig, t as mergeMcpServers, o as getExistingApiConfig, H as formatApiKeyDisplay, J as modifyApiConfigPartially, K as validateApiKey, l as configureApi, N as displayBanner, O as selectScriptLanguage, S as SETTINGS_FILE, P as updatePromptOnly, Q as version, R as handleExitPromptError, T as handleGeneralError, U as displayBannerWithInfo, i as init } from './shared/zcf.BES32wHt.mjs';
+import { f as SUPPORTED_LANGS, I as I18N, L as LANG_LABELS, E as updateZcfConfig, Z as ZCF_CONFIG_FILE, o as openSettingsJson, b as importRecommendedPermissions, a as importRecommendedEnv, F as readZcfConfig, G as resolveAiOutputLanguage, s as applyAiLanguageDirective, H as configureAiPersonality, u as updateDefaultModel, J as isWindows, v as readMcpConfig, B as fixWindowsMcpConfig, w as writeMcpConfig, K as selectMcpServices, x as backupMcpConfig, M as MCP_SERVICES, z as buildMcpServerConfig, y as mergeMcpServers, r as getExistingApiConfig, N as formatApiKeyDisplay, O as modifyApiConfigPartially, P as validateApiKey, n as configureApi, Q as displayBanner, R as selectScriptLanguage, S as SETTINGS_FILE, T as updatePromptOnly, U as version, V as handleExitPromptError, W as handleGeneralError, X as displayBannerWithInfo, i as init } from './shared/zcf.BvmvOF3q.mjs';
 import inquirer from 'inquirer';
 import { existsSync, unlinkSync } from 'node:fs';
-import 'node:os';
 import 'pathe';
 import 'dayjs';
 import 'node:url';
 import 'tinyexec';
+import 'node:os';
 
 function handleCancellation(scriptLang) {
   console.log(ansis.yellow(I18N[scriptLang].cancelled));
@@ -249,6 +249,50 @@ async function changeScriptLanguageFeature(currentLang) {
   console.log(ansis.green(`\u2714 ${I18N[lang].languageChanged || "Language changed"}`));
   return lang;
 }
+async function configureEnvPermissionFeature(scriptLang) {
+  const i18n = I18N[scriptLang];
+  const { choice } = await inquirer.prompt({
+    type: "list",
+    name: "choice",
+    message: i18n.selectEnvPermissionOption,
+    choices: [
+      {
+        name: `${i18n.importRecommendedEnv} ${ansis.gray("- " + i18n.importRecommendedEnvDesc)}`,
+        value: "env"
+      },
+      {
+        name: `${i18n.importRecommendedPermissions} ${ansis.gray("- " + i18n.importRecommendedPermissionsDesc)}`,
+        value: "permissions"
+      },
+      {
+        name: `${i18n.openSettingsJson} ${ansis.gray("- " + i18n.openSettingsJsonDesc)}`,
+        value: "open"
+      }
+    ]
+  });
+  if (!choice) {
+    handleCancellation(scriptLang);
+    return;
+  }
+  try {
+    switch (choice) {
+      case "env":
+        await importRecommendedEnv();
+        console.log(ansis.green(`\u2705 ${i18n.envImportSuccess}`));
+        break;
+      case "permissions":
+        await importRecommendedPermissions();
+        console.log(ansis.green(`\u2705 ${i18n.permissionsImportSuccess}`));
+        break;
+      case "open":
+        console.log(ansis.cyan(i18n.openingSettingsJson));
+        await openSettingsJson();
+        break;
+    }
+  } catch (error) {
+    console.error(ansis.red(`${i18n.error}: ${error.message}`));
+  }
+}
 
 async function update(options = {}) {
   try {
@@ -334,6 +378,11 @@ async function showMainMenu() {
           "- " + i18n.menuDescriptions.configureAiMemory
         )}`
       );
+      console.log(
+        `  ${ansis.cyan("7.")} ${i18n.menuOptions.configureEnvPermission} ${ansis.gray(
+          "- " + i18n.menuDescriptions.configureEnvPermission
+        )}`
+      );
       console.log("");
       console.log("  ------------ ZCF ------------");
       console.log(
@@ -351,7 +400,7 @@ async function showMainMenu() {
         name: "choice",
         message: i18n.enterChoice || "Enter your choice",
         validate: (value) => {
-          const valid = ["1", "2", "3", "4", "5", "6", "0", "-", "q", "Q"];
+          const valid = ["1", "2", "3", "4", "5", "6", "7", "0", "-", "q", "Q"];
           return valid.includes(value) || i18n.invalidChoice;
         }
       });
@@ -379,6 +428,9 @@ async function showMainMenu() {
         case "6":
           await configureAiMemoryFeature(scriptLang);
           break;
+        case "7":
+          await configureEnvPermissionFeature(scriptLang);
+          break;
         case "-":
           await clearZcfCacheFeature(scriptLang);
           break;

package/dist/index.d.mts

@@ -142,6 +142,7 @@ declare const I18N: {
             configureMcp: string;
             configureModel: string;
             configureAiMemory: string;
+            configureEnvPermission: string;
             clearCache: string;
             changeLanguage: string;
             exit: string;
@@ -153,6 +154,7 @@ declare const I18N: {
             configureMcp: string;
             configureModel: string;
             configureAiMemory: string;
+            configureEnvPermission: string;
             clearCache: string;
             changeLanguage: string;
         };
@@ -211,6 +213,16 @@ declare const I18N: {
         forceOverwrite: string;
         initClaudeConfig: string;
         updatePromptsOnly: string;
+        selectEnvPermissionOption: string;
+        importRecommendedEnv: string;
+        importRecommendedEnvDesc: string;
+        importRecommendedPermissions: string;
+        importRecommendedPermissionsDesc: string;
+        openSettingsJson: string;
+        openSettingsJsonDesc: string;
+        envImportSuccess: string;
+        permissionsImportSuccess: string;
+        openingSettingsJson: string;
         spaceToSelectReturn: string;
     };
     en: {
@@ -300,6 +312,7 @@ declare const I18N: {
             configureMcp: string;
             configureModel: string;
             configureAiMemory: string;
+            configureEnvPermission: string;
             clearCache: string;
             changeLanguage: string;
             exit: string;
@@ -311,6 +324,7 @@ declare const I18N: {
             configureMcp: string;
             configureModel: string;
             configureAiMemory: string;
+            configureEnvPermission: string;
             clearCache: string;
             changeLanguage: string;
         };
@@ -369,6 +383,16 @@ declare const I18N: {
         forceOverwrite: string;
         initClaudeConfig: string;
         updatePromptsOnly: string;
+        selectEnvPermissionOption: string;
+        importRecommendedEnv: string;
+        importRecommendedEnvDesc: string;
+        importRecommendedPermissions: string;
+        importRecommendedPermissionsDesc: string;
+        openSettingsJson: string;
+        openSettingsJsonDesc: string;
+        envImportSuccess: string;
+        permissionsImportSuccess: string;
+        openingSettingsJson: string;
         spaceToSelectReturn: string;
     };
 };
@@ -424,5 +448,9 @@ declare function buildMcpServerConfig(baseConfig: McpServerConfig, apiKey?: stri
 declare function fixWindowsMcpConfig(config: ClaudeConfiguration): ClaudeConfiguration;
 declare function addCompletedOnboarding(): void;
 
-export { AI_OUTPUT_LANGUAGES, CLAUDE_DIR, CLAUDE_MD_FILE, ClAUDE_CONFIG_FILE, I18N, LANG_LABELS, MCP_SERVICES, SETTINGS_FILE, SUPPORTED_LANGS, ZCF_CONFIG_FILE, addCompletedOnboarding, applyAiLanguageDirective, backupExistingConfig, backupMcpConfig, buildMcpServerConfig, commandExists, configureApi, copyConfigFiles, ensureClaudeDir, fixWindowsMcpConfig, getExistingApiConfig, getMcpConfigPath, getPlatform, init, installClaudeCode, isClaudeCodeInstalled, mergeConfigs, mergeMcpServers, mergeSettingsFile, readMcpConfig, updateDefaultModel, writeMcpConfig };
+declare function importRecommendedEnv(): Promise<void>;
+declare function importRecommendedPermissions(): Promise<void>;
+declare function openSettingsJson(): Promise<void>;
+
+export { AI_OUTPUT_LANGUAGES, CLAUDE_DIR, CLAUDE_MD_FILE, ClAUDE_CONFIG_FILE, I18N, LANG_LABELS, MCP_SERVICES, SETTINGS_FILE, SUPPORTED_LANGS, ZCF_CONFIG_FILE, addCompletedOnboarding, applyAiLanguageDirective, backupExistingConfig, backupMcpConfig, buildMcpServerConfig, commandExists, configureApi, copyConfigFiles, ensureClaudeDir, fixWindowsMcpConfig, getExistingApiConfig, getMcpConfigPath, getPlatform, importRecommendedEnv, importRecommendedPermissions, init, installClaudeCode, isClaudeCodeInstalled, mergeConfigs, mergeMcpServers, mergeSettingsFile, openSettingsJson, readMcpConfig, updateDefaultModel, writeMcpConfig };
 export type { AiOutputLanguage, ApiConfig, ClaudeConfiguration, McpServerConfig, McpService, SupportedLang };

package/dist/index.d.ts

@@ -142,6 +142,7 @@ declare const I18N: {
             configureMcp: string;
             configureModel: string;
             configureAiMemory: string;
+            configureEnvPermission: string;
             clearCache: string;
             changeLanguage: string;
             exit: string;
@@ -153,6 +154,7 @@ declare const I18N: {
             configureMcp: string;
             configureModel: string;
             configureAiMemory: string;
+            configureEnvPermission: string;
             clearCache: string;
             changeLanguage: string;
         };
@@ -211,6 +213,16 @@ declare const I18N: {
         forceOverwrite: string;
         initClaudeConfig: string;
         updatePromptsOnly: string;
+        selectEnvPermissionOption: string;
+        importRecommendedEnv: string;
+        importRecommendedEnvDesc: string;
+        importRecommendedPermissions: string;
+        importRecommendedPermissionsDesc: string;
+        openSettingsJson: string;
+        openSettingsJsonDesc: string;
+        envImportSuccess: string;
+        permissionsImportSuccess: string;
+        openingSettingsJson: string;
         spaceToSelectReturn: string;
     };
     en: {
@@ -300,6 +312,7 @@ declare const I18N: {
             configureMcp: string;
             configureModel: string;
             configureAiMemory: string;
+            configureEnvPermission: string;
             clearCache: string;
             changeLanguage: string;
             exit: string;
@@ -311,6 +324,7 @@ declare const I18N: {
             configureMcp: string;
             configureModel: string;
             configureAiMemory: string;
+            configureEnvPermission: string;
             clearCache: string;
             changeLanguage: string;
         };
@@ -369,6 +383,16 @@ declare const I18N: {
         forceOverwrite: string;
         initClaudeConfig: string;
         updatePromptsOnly: string;
+        selectEnvPermissionOption: string;
+        importRecommendedEnv: string;
+        importRecommendedEnvDesc: string;
+        importRecommendedPermissions: string;
+        importRecommendedPermissionsDesc: string;
+        openSettingsJson: string;
+        openSettingsJsonDesc: string;
+        envImportSuccess: string;
+        permissionsImportSuccess: string;
+        openingSettingsJson: string;
         spaceToSelectReturn: string;
     };
 };
@@ -424,5 +448,9 @@ declare function buildMcpServerConfig(baseConfig: McpServerConfig, apiKey?: stri
 declare function fixWindowsMcpConfig(config: ClaudeConfiguration): ClaudeConfiguration;
 declare function addCompletedOnboarding(): void;
 
-export { AI_OUTPUT_LANGUAGES, CLAUDE_DIR, CLAUDE_MD_FILE, ClAUDE_CONFIG_FILE, I18N, LANG_LABELS, MCP_SERVICES, SETTINGS_FILE, SUPPORTED_LANGS, ZCF_CONFIG_FILE, addCompletedOnboarding, applyAiLanguageDirective, backupExistingConfig, backupMcpConfig, buildMcpServerConfig, commandExists, configureApi, copyConfigFiles, ensureClaudeDir, fixWindowsMcpConfig, getExistingApiConfig, getMcpConfigPath, getPlatform, init, installClaudeCode, isClaudeCodeInstalled, mergeConfigs, mergeMcpServers, mergeSettingsFile, readMcpConfig, updateDefaultModel, writeMcpConfig };
+declare function importRecommendedEnv(): Promise<void>;
+declare function importRecommendedPermissions(): Promise<void>;
+declare function openSettingsJson(): Promise<void>;
+
+export { AI_OUTPUT_LANGUAGES, CLAUDE_DIR, CLAUDE_MD_FILE, ClAUDE_CONFIG_FILE, I18N, LANG_LABELS, MCP_SERVICES, SETTINGS_FILE, SUPPORTED_LANGS, ZCF_CONFIG_FILE, addCompletedOnboarding, applyAiLanguageDirective, backupExistingConfig, backupMcpConfig, buildMcpServerConfig, commandExists, configureApi, copyConfigFiles, ensureClaudeDir, fixWindowsMcpConfig, getExistingApiConfig, getMcpConfigPath, getPlatform, importRecommendedEnv, importRecommendedPermissions, init, installClaudeCode, isClaudeCodeInstalled, mergeConfigs, mergeMcpServers, mergeSettingsFile, openSettingsJson, readMcpConfig, updateDefaultModel, writeMcpConfig };
 export type { AiOutputLanguage, ApiConfig, ClaudeConfiguration, McpServerConfig, McpService, SupportedLang };

package/dist/index.mjs

@@ -1,9 +1,9 @@
-export { A as AI_OUTPUT_LANGUAGES, C as CLAUDE_DIR, a as CLAUDE_MD_FILE, b as ClAUDE_CONFIG_FILE, I as I18N, L as LANG_LABELS, M as MCP_SERVICES, S as SETTINGS_FILE, d as SUPPORTED_LANGS, Z as ZCF_CONFIG_FILE, y as addCompletedOnboarding, p as applyAiLanguageDirective, j as backupExistingConfig, s as backupMcpConfig, v as buildMcpServerConfig, c as commandExists, l as configureApi, k as copyConfigFiles, h as ensureClaudeDir, x as fixWindowsMcpConfig, o as getExistingApiConfig, q as getMcpConfigPath, g as getPlatform, i as init, f as installClaudeCode, e as isClaudeCodeInstalled, m as mergeConfigs, t as mergeMcpServers, n as mergeSettingsFile, r as readMcpConfig, u as updateDefaultModel, w as writeMcpConfig } from './shared/zcf.BES32wHt.mjs';
+export { A as AI_OUTPUT_LANGUAGES, C as CLAUDE_DIR, d as CLAUDE_MD_FILE, e as ClAUDE_CONFIG_FILE, I as I18N, L as LANG_LABELS, M as MCP_SERVICES, S as SETTINGS_FILE, f as SUPPORTED_LANGS, Z as ZCF_CONFIG_FILE, D as addCompletedOnboarding, s as applyAiLanguageDirective, l as backupExistingConfig, x as backupMcpConfig, z as buildMcpServerConfig, c as commandExists, n as configureApi, m as copyConfigFiles, k as ensureClaudeDir, B as fixWindowsMcpConfig, r as getExistingApiConfig, t as getMcpConfigPath, g as getPlatform, a as importRecommendedEnv, b as importRecommendedPermissions, i as init, j as installClaudeCode, h as isClaudeCodeInstalled, p as mergeConfigs, y as mergeMcpServers, q as mergeSettingsFile, o as openSettingsJson, v as readMcpConfig, u as updateDefaultModel, w as writeMcpConfig } from './shared/zcf.BvmvOF3q.mjs';
 import 'inquirer';
 import 'ansis';
 import 'node:fs';
-import 'node:os';
 import 'pathe';
 import 'dayjs';
 import 'node:url';
 import 'tinyexec';
+import 'node:os';

package/dist/shared/{zcf.BES32wHt.mjs → zcf.BvmvOF3q.mjs}

@@ -1,13 +1,13 @@
 import inquirer from 'inquirer';
 import ansis from 'ansis';
 import { existsSync, mkdirSync, copyFileSync, writeFileSync, readFileSync, readdirSync, statSync } from 'node:fs';
-import { homedir, platform } from 'node:os';
 import { join, dirname } from 'pathe';
 import dayjs from 'dayjs';
 import { fileURLToPath } from 'node:url';
 import { exec } from 'tinyexec';
+import { homedir, platform } from 'node:os';
 
-const version = "2.2.0";
+const version = "2.4.0";
 const homepage = "https://github.com/UfoMiao/zcf";
 
 const CLAUDE_DIR = join(homedir(), ".claude");
@@ -115,6 +115,7 @@ const I18N = {
       configureMcp: "\u914D\u7F6E MCP",
       configureModel: "\u914D\u7F6E\u9ED8\u8BA4\u6A21\u578B",
       configureAiMemory: "\u914D\u7F6E Claude \u5168\u5C40\u8BB0\u5FC6",
+      configureEnvPermission: "\u5BFC\u5165\u63A8\u8350\u73AF\u5883\u53D8\u91CF\u548C\u6743\u9650\u914D\u7F6E",
       clearCache: "\u6E05\u9664\u504F\u597D\u7F13\u5B58",
       changeLanguage: "\u66F4\u6539\u663E\u793A\u8BED\u8A00 / Select display language",
       exit: "\u9000\u51FA"
@@ -126,6 +127,7 @@ const I18N = {
       configureMcp: "\u914D\u7F6E MCP \u670D\u52A1\uFF08\u542B Windows \u4FEE\u590D\uFF09",
       configureModel: "\u8BBE\u7F6E\u9ED8\u8BA4\u6A21\u578B\uFF08opus/sonnet\uFF09",
       configureAiMemory: "\u914D\u7F6E AI \u8F93\u51FA\u8BED\u8A00\u548C\u89D2\u8272\u98CE\u683C",
+      configureEnvPermission: "\u5BFC\u5165\u9690\u79C1\u4FDD\u62A4\u73AF\u5883\u53D8\u91CF\u548C\u7CFB\u7EDF\u6743\u9650\u914D\u7F6E",
       clearCache: "\u6E05\u9664\u504F\u597D\u8BED\u8A00\u7B49\u7F13\u5B58",
       changeLanguage: "\u66F4\u6539 ZCF \u754C\u9762\u8BED\u8A00"
     },
@@ -198,6 +200,17 @@ const I18N = {
     forceOverwrite: "\u5F3A\u5236\u8986\u76D6\u73B0\u6709\u914D\u7F6E",
     initClaudeConfig: "\u521D\u59CB\u5316 Claude Code \u914D\u7F6E",
     updatePromptsOnly: "\u4EC5\u66F4\u65B0 Claude Code \u63D0\u793A",
+    // Environment variables and permissions
+    selectEnvPermissionOption: "\u8BF7\u9009\u62E9\u914D\u7F6E\u9009\u9879",
+    importRecommendedEnv: "\u5BFC\u5165 ZCF \u63A8\u8350\u73AF\u5883\u53D8\u91CF",
+    importRecommendedEnvDesc: "\u9690\u79C1\u4FDD\u62A4\u53D8\u91CF\u7B49",
+    importRecommendedPermissions: "\u5BFC\u5165 ZCF \u63A8\u8350\u6743\u9650\u914D\u7F6E",
+    importRecommendedPermissionsDesc: "\u51E0\u4E4E\u5168\u90E8\u6743\u9650\uFF0C\u51CF\u5C11\u9891\u7E41\u8BF7\u6C42\u6743\u9650\uFF0C\u5371\u9669\u64CD\u4F5C\u7531\u89C4\u5219\u9650\u5236",
+    openSettingsJson: "\u6253\u5F00 settings.json \u624B\u52A8\u914D\u7F6E",
+    openSettingsJsonDesc: "\u9AD8\u7EA7\u7528\u6237\u81EA\u5B9A\u4E49",
+    envImportSuccess: "\u73AF\u5883\u53D8\u91CF\u5DF2\u5BFC\u5165",
+    permissionsImportSuccess: "\u6743\u9650\u914D\u7F6E\u5DF2\u5BFC\u5165",
+    openingSettingsJson: "\u6B63\u5728\u6253\u5F00 settings.json...",
     // Misc
     spaceToSelectReturn: "- \u7A7A\u683C\u9009\u62E9\uFF0C\u56DE\u8F66\u63D0\u4EA4"
   },
@@ -290,6 +303,7 @@ const I18N = {
       configureMcp: "Configure MCP",
       configureModel: "Configure default model",
       configureAiMemory: "Configure Claude global memory",
+      configureEnvPermission: "Import recommended environment variables and permissions",
       clearCache: "Clear preference cache",
       changeLanguage: "Select display language / \u66F4\u6539\u663E\u793A\u8BED\u8A00",
       exit: "Exit"
@@ -301,6 +315,7 @@ const I18N = {
       configureMcp: "Configure MCP services (includes Windows fix)",
       configureModel: "Set default model (opus/sonnet)",
       configureAiMemory: "Configure AI output language and personality",
+      configureEnvPermission: "Import privacy protection environment variables and system permissions",
       clearCache: "Clear preference language and other caches",
       changeLanguage: "Change ZCF interface language"
     },
@@ -373,6 +388,17 @@ const I18N = {
     forceOverwrite: "Force overwrite existing configuration",
     initClaudeConfig: "Initialize Claude Code configuration",
     updatePromptsOnly: "Update Claude Code prompts only",
+    // Environment variables and permissions
+    selectEnvPermissionOption: "Select configuration option",
+    importRecommendedEnv: "Import ZCF recommended environment variables",
+    importRecommendedEnvDesc: "Privacy protection variables, etc.",
+    importRecommendedPermissions: "Import ZCF recommended permissions",
+    importRecommendedPermissionsDesc: "Almost all permissions, reduce frequent permission requests, dangerous ops limited by rules",
+    openSettingsJson: "Open settings.json for manual configuration",
+    openSettingsJsonDesc: "Advanced user customization",
+    envImportSuccess: "Environment variables imported",
+    permissionsImportSuccess: "Permissions imported",
+    openingSettingsJson: "Opening settings.json...",
     // Misc
     spaceToSelectReturn: "- Space to select. Return to submit"
   }
@@ -1719,4 +1745,72 @@ async function init(options = {}) {
   }
 }
 
-export { AI_OUTPUT_LANGUAGES as A, readZcfConfig as B, CLAUDE_DIR as C, resolveAiOutputLanguage as D, configureAiPersonality as E, isWindows as F, selectMcpServices as G, formatApiKeyDisplay as H, I18N as I, modifyApiConfigPartially as J, validateApiKey as K, LANG_LABELS as L, MCP_SERVICES as M, displayBanner as N, selectScriptLanguage as O, updatePromptOnly as P, version as Q, handleExitPromptError as R, SETTINGS_FILE as S, handleGeneralError as T, displayBannerWithInfo as U, ZCF_CONFIG_FILE as Z, CLAUDE_MD_FILE as a, ClAUDE_CONFIG_FILE as b, commandExists as c, SUPPORTED_LANGS as d, isClaudeCodeInstalled as e, installClaudeCode as f, getPlatform as g, ensureClaudeDir as h, init as i, backupExistingConfig as j, copyConfigFiles as k, configureApi as l, mergeConfigs as m, mergeSettingsFile as n, getExistingApiConfig as o, applyAiLanguageDirective as p, getMcpConfigPath as q, readMcpConfig as r, backupMcpConfig as s, mergeMcpServers as t, updateDefaultModel as u, buildMcpServerConfig as v, writeMcpConfig as w, fixWindowsMcpConfig as x, addCompletedOnboarding as y, updateZcfConfig as z };
+const __dirname = dirname(fileURLToPath(import.meta.url));
+function getTemplateSettings() {
+  const templatePath = join(__dirname, "../../templates/settings.json");
+  const content = readFileSync(templatePath, "utf-8");
+  return JSON.parse(content);
+}
+function loadCurrentSettings() {
+  if (!existsSync(SETTINGS_FILE)) {
+    return {};
+  }
+  try {
+    const content = readFileSync(SETTINGS_FILE, "utf-8");
+    return JSON.parse(content);
+  } catch {
+    return {};
+  }
+}
+function saveSettings(settings) {
+  ensureDir(CLAUDE_DIR);
+  writeFileSync(SETTINGS_FILE, JSON.stringify(settings, null, 2));
+}
+async function importRecommendedEnv() {
+  const templateSettings = getTemplateSettings();
+  const currentSettings = loadCurrentSettings();
+  currentSettings.env = {
+    ...currentSettings.env,
+    ...templateSettings.env
+  };
+  saveSettings(currentSettings);
+}
+async function importRecommendedPermissions() {
+  const templateSettings = getTemplateSettings();
+  const currentSettings = loadCurrentSettings();
+  currentSettings.permissions = templateSettings.permissions;
+  saveSettings(currentSettings);
+}
+async function openSettingsJson() {
+  ensureDir(CLAUDE_DIR);
+  if (!existsSync(SETTINGS_FILE)) {
+    saveSettings({});
+  }
+  const platform = getPlatform();
+  let command;
+  switch (platform) {
+    case "macos":
+      command = "open";
+      break;
+    case "windows":
+      command = "start";
+      break;
+    default:
+      command = "xdg-open";
+  }
+  try {
+    await exec(command, [SETTINGS_FILE]);
+  } catch (error) {
+    try {
+      await exec("code", [SETTINGS_FILE]);
+    } catch {
+      try {
+        await exec("vim", [SETTINGS_FILE]);
+      } catch {
+        await exec("nano", [SETTINGS_FILE]);
+      }
+    }
+  }
+}
+
+export { AI_OUTPUT_LANGUAGES as A, fixWindowsMcpConfig as B, CLAUDE_DIR as C, addCompletedOnboarding as D, updateZcfConfig as E, readZcfConfig as F, resolveAiOutputLanguage as G, configureAiPersonality as H, I18N as I, isWindows as J, selectMcpServices as K, LANG_LABELS as L, MCP_SERVICES as M, formatApiKeyDisplay as N, modifyApiConfigPartially as O, validateApiKey as P, displayBanner as Q, selectScriptLanguage as R, SETTINGS_FILE as S, updatePromptOnly as T, version as U, handleExitPromptError as V, handleGeneralError as W, displayBannerWithInfo as X, ZCF_CONFIG_FILE as Z, importRecommendedEnv as a, importRecommendedPermissions as b, commandExists as c, CLAUDE_MD_FILE as d, ClAUDE_CONFIG_FILE as e, SUPPORTED_LANGS as f, getPlatform as g, isClaudeCodeInstalled as h, init as i, installClaudeCode as j, ensureClaudeDir as k, backupExistingConfig as l, copyConfigFiles as m, configureApi as n, openSettingsJson as o, mergeConfigs as p, mergeSettingsFile as q, getExistingApiConfig as r, applyAiLanguageDirective as s, getMcpConfigPath as t, updateDefaultModel as u, readMcpConfig as v, writeMcpConfig as w, backupMcpConfig as x, mergeMcpServers as y, buildMcpServerConfig as z };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "zcf",
   "type": "module",
-  "version": "2.2.0",
+  "version": "2.4.0",
   "description": "Zero-Config Claude-Code Flow - One-click configuration tool for Claude Code",
   "license": "MIT",
   "homepage": "https://github.com/UfoMiao/zcf",

package/templates/en/commands/feat.md

@@ -1,23 +1,5 @@
 ---
 description: Add New Feature
-
-allowed-tools:
-  - Task
-  - Bash
-  - Glob
-  - Grep
-  - Read
-  - Edit
-  - MultiEdit
-  - Write
-  - WebFetch
-  - WebSearch
-  - Notebook.*
-  - Edit|Write
-  - mcp__.*
-  - mcp__memory__.*
-  - mcp__filesystem__.*
-  - mcp__github__.*
 ---
 
 $ARGUMENTS

package/templates/en/commands/workflow.md

@@ -1,22 +1,5 @@
 ---
 description: 'Professional AI programming assistant with structured workflow (Research -> Ideate -> Plan -> Execute -> Optimize -> Review) for developers'
-allowed-tools:
-  - Task
-  - Bash
-  - Glob
-  - Grep
-  - Read
-  - Edit
-  - MultiEdit
-  - Write
-  - WebFetch
-  - WebSearch
-  - Notebook.*
-  - Edit|Write
-  - mcp__.*
-  - mcp__memory__.*
-  - mcp__filesystem__.*
-  - mcp__github__.*
 ---
 
 # Workflow - Professional Development Assistant

package/templates/en/rules.md

@@ -11,6 +11,7 @@ Throughout the entire workflow, you must internalize and strictly adhere to the
   - **I (Interface Segregation Principle):** Interfaces should be specific and focused, avoiding "fat interfaces."
   - **D (Dependency Inversion Principle):** Depend on abstractions, not concrete implementations.
 - **Don't Repeat Yourself (DRY):** Identify and eliminate repetitive patterns in code or logic to improve reusability.
+- **Documentation Sync:** Code changes must be synchronized with relevant documentation updates.
 
 **Please strictly follow the workflow and output requirements below:**
 
@@ -35,6 +36,7 @@ Throughout the entire workflow, you must internalize and strictly adhere to the
    - Focus on specific implementation details for [project type, e.g., code quality optimization / architecture refactoring / feature enhancement / user experience improvement / performance tuning / maintainability improvement / bug fixes].
 
 4. **Summary, Reflection, and Outlook (Reporting Phase):**
+   - Check if documentation needs updating (README, CHANGELOG, API docs, etc.).
    - Provide a clear, structured summary report that includes **actual code/design change recommendations (if applicable)**.
    - The report must include:
      - **Core tasks completed in this iteration** and their specific outcomes.

package/templates/en/technical-guides.md

@@ -1,74 +1,97 @@
 # Technical Execution Guidelines
 
-This document provides best practices that Claude Code should follow when executing specific technical tasks.
+This document provides best practices for Claude Code when executing technical tasks.
+
+## Dangerous Operations Confirmation
+
+**Important**: The following operations require explicit user confirmation before execution:
+
+### Operations Requiring Confirmation
+- **File System**: Delete files/directories, bulk modifications, move system files
+- **Code Commits**: `git commit`, `git push`, `git reset --hard`
+- **System Config**: Modify environment variables, system settings, permissions
+- **Data Operations**: Database deletions, schema changes, bulk updates
+- **Network Requests**: Send sensitive data, call production APIs
+- **Package Management**: Global install/uninstall, update core dependencies
+
+### Confirmation Process
+Before executing dangerous operations:
+1. Clearly explain the operation and its impacts
+2. Wait for explicit user confirmation (e.g., "yes", "confirm", "proceed")
+3. If user hesitates or declines, provide more information or alternatives
 
 ## Command Execution Best Practices
 
 ### Path Handling Standards
 
-**Important**: Always use double quotes to wrap file paths when executing commands on all operating systems, especially on Windows.
+**Important**: Always use double quotes to wrap file paths when executing commands.
 
-#### Correct Examples
 ```bash
-# ✅ Correct: Paths wrapped in double quotes
+# ✅ Correct
 cd "C:\Users\name\My Documents"
-python "C:\Program Files\MyApp\script.py"
 node "/path/with spaces/app.js"
-```
 
-#### Incorrect Examples
-```bash
-# ❌ Incorrect: No quotes, backslashes will be swallowed on Windows
+# ❌ Incorrect
 cd C:\Users\name\My Documents
-python C:\Program Files\MyApp\script.py
 ```
 
 ### Cross-Platform Compatibility
+- Prefer forward slashes `/` as path separators
+- When using backslashes, ensure paths are double-quoted
 
-- Prefer forward slashes `/` as path separators (supported by most tools)
-- When backslashes must be used, ensure paths are wrapped in double quotes
-- Be mindful of spaces and special characters even with relative paths
+## Search Tool Usage
 
-## Search Tool Usage Guidelines
+### Content Search
+**Always prioritize `rg` (ripgrep)** - faster and won't timeout.
 
-### Content Search Priority
-
-**Always prioritize `rg` (ripgrep) for file content searches** over `grep`.
-
-> **Note**: ripgrep requires user installation. Most developers already have this tool installed. If `rg` command is not found, remind users to install:
-> - macOS: `brew install ripgrep`
-> - Windows: `scoop install ripgrep` or `choco install ripgrep`
-> - Linux: `sudo apt-get install ripgrep` or see [official installation guide](https://github.com/BurntSushi/ripgrep#installation)
-
-#### Reasons
-1. **Superior Performance**: rg won't timeout in large codebases (e.g., Chromium, Emacs)
-2. **Faster Execution**: rg is significantly faster than grep
-3. **Smarter Defaults**: Automatically respects .gitignore files
-
-#### Usage Examples
 ```bash
-# ✅ Prefer rg
-rg "search pattern" .
-rg -i "case insensitive" src/
+# ✅ Preferred
+rg "pattern" .
 rg -t js "console.log" .
 
-# ⚠️ Only use grep when rg is unavailable
+# ⚠️ Fallback
 grep -r "pattern" .
 ```
 
+> Note: If `rg` unavailable, remind user to install: `brew/scoop/apt install ripgrep`
+
 ### File Finding
-- Use Glob tool for filename pattern matching
+- Use Glob tool for pattern matching
 - Use LS tool for directory listings
-- Avoid using `find` command (specialized tools are more efficient)
+- Avoid using `find` command
 
 ## Tool Usage Principles
 
-1. **Prefer Specialized Tools**: Use Read, Write, Edit tools instead of cat, echo commands
+1. **Prefer Specialized Tools**: Use Read, Write, Edit instead of cat, echo
 2. **Batch Operations**: Call multiple tools simultaneously for efficiency
-3. **Error Handling**: Check for path quoting issues first when commands fail
+3. **Error Handling**: Check path quoting first when commands fail
 
-## Performance Optimization Tips
+## Performance Optimization
 
 - Use Task tool for complex searches in large projects
-- Understand project structure before searching to narrow scope
-- Use search parameters wisely (e.g., file type filters) for efficiency
+- Understand project structure before searching
+- Use file type filters wisely for efficiency
+
+## Documentation Update Check
+
+Automatically check documentation update needs after task completion:
+
+### Criteria
+- **New Features**: Update README, CHANGELOG, usage docs
+- **API Changes**: Update API docs, type definitions, interface specs
+- **Config Changes**: Update config guides, CLAUDE.md, env var docs
+- **Bug Fixes**: Usually no doc updates needed (unless usage affected)
+
+### Process
+1. Analyze code change type and impact scope
+2. Auto-identify documentation files in project
+3. List documents needing updates
+4. Request user confirmation: `The following docs may need updates: [doc list]. Would you like me to update them?`
+5. Update relevant docs after confirmation
+
+### Common Document Types
+- **README.md**: Features, usage, configuration
+- **CHANGELOG.md**: Version history
+- **CLAUDE.md**: AI assistant config and instructions
+- **API Docs**: Interface definitions, parameters
+- **Config Docs**: Environment variables, settings

package/templates/settings.json

@@ -8,19 +8,24 @@
   "includeCoAuthoredBy": false,
   "permissions": {
     "allow": [
-      "Bash(*)",
-      "LS(*)",
-      "Read(*)",
-      "Write(*)",
-      "Edit(*)",
-      "MultiEdit(*)",
-      "Glob(*)",
-      "Grep(*)",
-      "WebFetch(*)",
-      "WebSearch(*)",
-      "TodoWrite(*)",
-      "NotebookRead(*)",
-      "NotebookEdit(*)"
+      "Bash",
+      "LS",
+      "Read",
+      "Agent",
+      "Write",
+      "Edit",
+      "MultiEdit",
+      "Glob",
+      "Grep",
+      "WebFetch",
+      "WebSearch",
+      "TodoWrite",
+      "NotebookRead",
+      "NotebookEdit",
+      "mcp__exa",
+      "mcp__context7",
+      "mcp__mcp-deepwiki",
+      "mcp__Playwright"
     ],
     "deny": []
   },

package/templates/zh-CN/commands/feat.md

@@ -1,23 +1,5 @@
 ---
 description: '用于新增功能开发的命令，支持完整的开发流程和工具集成'
-
-allowed-tools:
-  - Task
-  - Bash
-  - Glob
-  - Grep
-  - Read
-  - Edit
-  - MultiEdit
-  - Write
-  - WebFetch
-  - WebSearch
-  - Notebook.*
-  - Edit|Write
-  - mcp__.*
-  - mcp__memory__.*
-  - mcp__filesystem__.*
-  - mcp__github__.*
 ---
 
 $ARGUMENTS

package/templates/zh-CN/commands/workflow.md

@@ -1,22 +1,5 @@
 ---
 description: '专业AI编程助手，提供结构化六阶段开发工作流（研究→构思→计划→执行→优化→评审），适用于专业开发者'
-allowed-tools:
-  - Task
-  - Bash
-  - Glob
-  - Grep
-  - Read
-  - Edit
-  - MultiEdit
-  - Write
-  - WebFetch
-  - WebSearch
-  - Notebook.*
-  - Edit|Write
-  - mcp__.*
-  - mcp__memory__.*
-  - mcp__filesystem__.*
-  - mcp__github__.*
 ---
 
 # Workflow - 专业开发助手

package/templates/zh-CN/rules.md

@@ -11,6 +11,7 @@
   - **I (接口隔离):** 接口应专一，避免"胖接口"。
   - **D (依赖倒置):** 依赖抽象而非具体实现。
 - **杜绝重复 (DRY):** 识别并消除代码或逻辑中的重复模式，提升复用性。
+- **文档同步 (Doc Sync):** 代码变更必须同步更新相关文档，保持一致性。
 
 **请严格遵循以下工作流程和输出要求：**
 
@@ -35,6 +36,7 @@
     - 重点关注[项目类型，例如：代码质量优化 / 架构重构 / 功能增强 / 用户体验提升 / 性能调优 / 可维护性改善 / Bug 修复]的具体实现细节。
 
 4.  **总结、反思与展望（汇报阶段）：**
+    - 检查是否需要更新文档（README、CHANGELOG、API文档等）。
     - 提供一个清晰、结构化且包含**实际代码/设计变动建议（如果适用）**的总结报告。
     - 报告中必须包含：
       - **本次迭代已完成的核心任务**及其具体成果。

package/templates/zh-CN/technical-guides.md

@@ -1,74 +1,97 @@
 # 技术执行指南
 
-本文档提供 Claude Code 在执行具体技术任务时应遵循的最佳实践。
+本文档提供 Claude Code 执行技术任务时的最佳实践。
+
+## 危险操作确认机制
+
+**重要**：以下操作需要明确的用户确认后才能执行：
+
+### 需确认的操作类型
+- **文件系统**：删除文件/目录、批量修改、移动系统文件
+- **代码提交**：`git commit`、`git push`、`git reset --hard`
+- **系统配置**：修改环境变量、系统设置、权限变更
+- **数据操作**：数据库删除、结构变更、批量更新
+- **网络请求**：发送敏感数据、调用生产环境API
+- **包管理**：全局安装/卸载、更新核心依赖
+
+### 确认方式
+执行危险操作前，必须：
+1. 明确说明即将执行的操作及其影响
+2. 等待用户明确确认（如"是"、"确认"、"继续"）
+3. 用户未确认或表示犹豫时，提供更多信息或替代方案
 
 ## 命令执行最佳实践
 
 ### 路径处理规范
 
-**重要**：在所有操作系统上执行命令时，**始终使用双引号包裹文件路径**，特别是在 Windows 系统上。
+**重要**：执行命令时**始终使用双引号包裹文件路径**。
 
-#### 正确示例
 ```bash
-# ✅ 正确：路径使用双引号
+# ✅ 正确
 cd "C:\Users\name\My Documents"
-python "C:\Program Files\MyApp\script.py"
 node "/path/with spaces/app.js"
-```
 
-#### 错误示例
-```bash
-# ❌ 错误：未使用引号，Windows 下反斜杠会被吞掉
+# ❌ 错误
 cd C:\Users\name\My Documents
-python C:\Program Files\MyApp\script.py
 ```
 
 ### 跨平台兼容性
+- 优先使用正斜杠 `/` 作为路径分隔符
+- 使用反斜杠时确保路径被双引号包裹
 
-- 优先使用正斜杠 `/` 作为路径分隔符（大多数工具都支持）
-- 当必须使用反斜杠时，确保路径被双引号包裹
-- 使用相对路径时也要注意空格和特殊字符
-
-## 搜索工具使用指南
-
-### 内容搜索优先级
+## 搜索工具使用
 
-**始终优先使用 `rg` (ripgrep) 进行文件内容搜索**，而不是 `grep`。
+### 内容搜索
+**始终优先使用 `rg` (ripgrep)**，速度更快且不会超时。
 
-> **注意**：ripgrep 需要用户自行安装。大多数开发者已经安装了此工具，如果遇到 `rg` 命令不存在，请提醒用户安装：
-> - macOS: `brew install ripgrep`
-> - Windows: `scoop install ripgrep` 或 `choco install ripgrep`
-> - Linux: `sudo apt-get install ripgrep` 或查看 [官方安装指南](https://github.com/BurntSushi/ripgrep#installation)
-
-#### 原因
-1. **性能优越**：在大型代码库（如 Chromium、Emacs）中，rg 不会超时
-2. **速度更快**：rg 的执行速度显著快于 grep
-3. **默认配置更智能**：自动忽略 .gitignore 中的文件
-
-#### 使用示例
 ```bash
-# ✅ 优先使用 rg
-rg "search pattern" .
-rg -i "case insensitive" src/
+# ✅ 优先使用
+rg "pattern" .
 rg -t js "console.log" .
 
-# ⚠️ 仅在 rg 不可用时才使用 grep
+# ⚠️ 备选方案
 grep -r "pattern" .
 ```
 
+> 提示：如 `rg` 不可用，提醒用户安装：`brew/scoop/apt install ripgrep`
+
 ### 文件查找
-- 使用 Glob 工具查找文件名模式
-- 使用 LS 工具列出目录内容
-- 避免使用 `find` 命令（使用专门的工具更高效）
+- 使用 Glob 工具进行模式匹配
+- 使用 LS 工具列出目录
+- 避免使用 `find` 命令
 
 ## 工具使用原则
 
-1. **优先使用专门的工具**：使用 Read、Write、Edit 等专门工具，而不是 cat、echo 等命令
-2. **批量操作**：可以同时调用多个工具以提高效率
-3. **错误处理**：命令失败后，先检查路径引号问题再重试
+1. **优先专用工具**：使用 Read、Write、Edit 而非 cat、echo
+2. **批量操作**：同时调用多个工具以提高效率
+3. **错误处理**：命令失败时先检查路径引号问题
+
+## 性能优化
+
+- 大型项目使用 Task 工具进行复杂搜索
+- 搜索前了解项目结构，缩小范围
+- 合理使用文件类型过滤提高效率
+
+## 文档更新检查
+
+任务完成后自动检查文档更新需求：
+
+### 判断标准
+- **新功能**：需更新 README、CHANGELOG、使用文档
+- **API变更**：需更新 API文档、类型定义、接口说明
+- **配置变更**：需更新配置说明、CLAUDE.md、环境变量文档
+- **Bug修复**：通常无需更新文档（除非影响使用方式）
 
-## 性能优化建议
+### 执行流程
+1. 分析代码变更类型和影响范围
+2. 自动识别项目中的文档文件
+3. 列出需更新的文档清单
+4. 向用户确认：`检测到以下文档可能需要更新：[文档列表]，是否需要我帮您更新？`
+5. 获得确认后逐一更新相关文档
 
-- 对于大型项目，使用 Task 工具进行复杂搜索
-- 搜索前先了解项目结构，缩小搜索范围
-- 合理使用搜索参数（如文件类型过滤）以提高效率
+### 常见文档类型
+- **README.md**：功能说明、使用方法、配置说明
+- **CHANGELOG.md**：版本更新记录
+- **CLAUDE.md**：AI助手配置和指令
+- **API文档**：接口定义、参数说明
+- **配置文档**：环境变量、配置项说明