ccc-yolo-setup

$ccc-yolo-setup — safe YOLO permissions

CC Commander · $ccc-yolo-setup · fewer prompts on safe operations, the auto-mode classifier on everything else, and a backup to roll back to.

Interactive Claude Code sessions start in auto permission mode when no mode is configured: a classifier approves routine actions and denies risky ones without a prompt. Safe-YOLO builds on that default. It adds a vetted allowlist of read-only and non-destructive commands, adds deny rules for secret files, and leaves risky work (writes outside scope, deletes, deploys, force-push, network mutations) to the classifier or a prompt. Plan mode stays available on request for risky changes.

When to use / when not to

• Use when routine reads, git/gh reads or cloud describes keep prompting.
• Use /fewer-permission-prompts (built in) to mine the user's own transcripts for further safe entries.
• Do not use to approve writes, deletes, deploys or cloud mutations; those stay gated.
• revert jumps to Reverse it.

What happens

1. Read the current state

for f in ~/.claude/settings.json .claude/settings.local.json .claude/settings.json; do
  [ -f "$f" ] && node -e 'const s=JSON.parse(require("fs").readFileSync(process.argv[1],"utf8"));const p=s.permissions||{};console.log(process.argv[1]+": defaultMode="+(p.defaultMode||"unset (auto)")+" allow="+(p.allow||[]).length+" deny="+(p.deny||[]).length)' "$f"
done

Report each line. A parse error means the file is already invalid JSON: stop and show the error; do not write to it.

2. Pick a profile

Ask with AskUserQuestion (Codex: plain-text question):

question: "How much should safe-YOLO auto-approve?"
header: "Profile"
options:
  - label: "🟢 Balanced"
    description: "Reads, git/gh reads, read-only cloud describes, and this repo's test/lint/build scripts."
  - label: "Conservative"
    description: "Reads and git/gh read-only only. Everything else goes to auto mode or a prompt."
  - label: "Aggressive-safe"
    description: "Balanced plus file edits scoped to this repo. Still no deletes, deploys, force-push or network mutations."