@aegisagentics/agent 0.1.0 → 0.2.0

package/README.md

@@ -1,6 +1,6 @@
 # Aegis Agent
 
-Local installer, hook runtime, and public npm bootstrapper for Aegis ControlTower coding-agent telemetry.
+Local installer, hook runtime, and public npm bootstrapper for Aegis ControlTower coding-agent telemetry..
 
 `@aegisagentics/agent` installs a native `aegis-agent` runtime, registers supported local agent hooks, and sends safe, governed telemetry to Aegis ControlTower. The npm package is intentionally thin: it does not ship platform binaries. Release binaries are built by CI, checksummed, uploaded to the Aegis website release path, then downloaded and verified during install.
 
@@ -26,6 +26,59 @@ npx -y @aegisagentics/agent codex-plugin uninstall
 npx -y @aegisagentics/agent uninstall --vendors codex
 ```
 
+## OpenClaw
+
+OpenClaw versions **>=2026.9.6 and <2026.10.0** are supported and qualified
+against **v2026.9.6** and **v2026.9.7**. Use Node.js **>=24.16.0 and <25**, or
+**>=26.1.0 and <27**, on macOS/Linux under the same OS UID. One managed install
+both materializes the Aegis-owned plugin and registers its local path with
+OpenClaw:
+
+```bash
+AEGIS_API_KEY="agk_..." npx -y @aegisagentics/agent install \
+  --api-base-url "https://api.aegisagentics.com" \
+  --otlp-http-base-url "https://otel.aegisagentics.com" \
+  --vendors openclaw
+```
+
+The plugin service launches `aegis-agent openclaw-bridge serve` with a private
+Unix-domain socket. The bridge creates a `0700` parent and `0600` socket, checks
+same-UID peer credentials, accepts bounded length-prefixed frames only, and has
+no TCP listener. Check the local state with `aegis-agent status` and
+`aegis-agent doctor`; remove just this integration with
+`aegis-agent uninstall --vendors openclaw`.
+
+Lifecycle facts go through the existing OTLP trace and activity-log paths.
+`log.record` is supplementary: its bounded message stays inside the same-UID
+UDS handoff until Rust redacts it, then it is sent to the authenticated OTLP
+logs endpoint. In the default metadata policy, the installer leaves OpenClaw
+conversation access disabled and does not register `llm_input` or `llm_output`.
+Raw prompt/response candidates require `--capture-policy redacted`; that opt-in
+atomically enables OpenClaw conversation access and the two capture hooks. The
+candidates are uploaded directly with an expiring capture capability and are
+never written to a plugin or bridge spool. Windows, cross-user, remote,
+cross-Pod, and TCP topologies are unsupported.
+
+## Claude Code and Cursor
+
+Install global per-user hooks for both agents with the same managed command:
+
+```bash
+AEGIS_API_KEY="agk_..." npx -y @aegisagentics/agent install \
+  --api-base-url "https://api.aegisagentics.com" \
+  --otlp-http-base-url "https://otel.aegisagentics.com" \
+  --installation-id "agent_install_..." \
+  --vendors claude,cursor \
+  --capture-policy redacted
+```
+
+Claude hooks are merged into `~/.claude/settings.json`; Cursor hooks are merged
+into `~/.cursor/hooks.json`. Existing settings and third-party hooks are kept.
+The hooks observe sessions, prompts, responses, tool calls (including Cursor MCP
+tools), and failures. Aegis responses are fail-open and never deny an agent
+action. Remove either integration with `aegis-agent uninstall --vendors claude`
+or `aegis-agent uninstall --vendors cursor`.
+
 For local development without downloading a release binary:
 
 ```bash

package/npm/install.js

@@ -135,6 +135,7 @@ function printHelp(binaryPath) {
   console.log(`Aegis Agent installer bootstrap
 
 Usage:
+  AEGIS_API_KEY="<agent-key>" npx -y @aegisagentics/agent install --api-base-url "https://controltower.example.com" --otlp-http-base-url "https://otel.controltower.example.com" --installation-id "agent_install_..." --vendors claude,cursor --capture-policy redacted
   AEGIS_API_KEY="<one-time-key>" npx -y @aegisagentics/agent install --api-base-url "https://controltower.example.com" --otlp-http-base-url "https://otel.controltower.example.com" --installation-id "agent_install_..." --vendors codex,claude,cursor
   npx -y @aegisagentics/agent codex-plugin install
   npx -y @aegisagentics/agent codex-plugin uninstall

package/npm/lib/cli.js

@@ -31,7 +31,7 @@ export function parseBootstrapCommand(args) {
     return {
       codexPluginAction: vendors.includes("codex") ? "uninstall" : null,
       kind: "native",
-      nativeArgs: stripOption(args, "--vendors")
+      nativeArgs: args
     };
   }
 
@@ -62,19 +62,3 @@ function extractVendorList(args, fallback) {
 
   return normalizeVendorList(values.length > 0 ? values.join(",") : fallback);
 }
-
-function stripOption(args, optionName) {
-  const stripped = [];
-  for (let index = 0; index < args.length; index += 1) {
-    const arg = args[index];
-    if (arg === optionName) {
-      index += 1;
-      continue;
-    }
-    if (arg.startsWith(`${optionName}=`)) {
-      continue;
-    }
-    stripped.push(arg);
-  }
-  return stripped;
-}

package/npm/lib/config.js

@@ -7,10 +7,12 @@ const VENDOR_ALIASES = new Map([
   ["claudecode", "claude-code"],
   ["codex", "codex"],
   ["cursor", "cursor"],
-  ["goose", "goose"]
+  ["goose", "goose"],
+  ["openclaw", "openclaw"],
+  ["open-claw", "openclaw"]
 ]);
 
-const VENDOR_ORDER = ["codex", "claude-code", "cursor", "goose"];
+const VENDOR_ORDER = ["codex", "claude-code", "cursor", "openclaw"];
 
 export function normalizeVendorList(value) {
   const raw = Array.isArray(value) ? value : String(value ?? "").split(",");
@@ -30,6 +32,9 @@ export function normalizeVendorList(value) {
     if (normalized === undefined) {
       throw new Error(`Unknown Aegis agent vendor: ${item}`);
     }
+    if (normalized === "goose") {
+      throw new Error("The Aegis Goose installer is not available yet.");
+    }
     seen.add(normalized);
   }
 
@@ -60,6 +65,7 @@ export function aegisPaths(homeDir = process.env.HOME) {
 export function buildLocalConfig({
   agentId,
   apiBaseUrl,
+  captureEndpoint,
   capturePolicy,
   installationId,
   activityLogEndpoint,
@@ -89,12 +95,16 @@ export function buildLocalConfig({
     activityLogEndpoint === undefined || activityLogEndpoint === null || String(activityLogEndpoint).trim() === ""
       ? `${normalizedApiBaseUrl}/v1/agent-activity/logs`
       : String(activityLogEndpoint).trim().replace(/\/+$/, "");
+  const normalizedCaptureEndpoint = normalizeCaptureEndpoint({
+    apiBaseUrl: normalizedApiBaseUrl,
+    captureEndpoint
+  });
   return {
     schemaVersion: "aegis.agent_config.v1",
     agentId,
     apiBaseUrl: normalizedApiBaseUrl,
     activityLogEndpoint: normalizedActivityLogEndpoint,
-    captureEndpoint: `${normalizedApiBaseUrl}/v1/capture/artifacts`,
+    captureEndpoint: normalizedCaptureEndpoint,
     capturePolicy,
     installationId,
     organizationId,
@@ -104,3 +114,16 @@ export function buildLocalConfig({
     workspaceKind
   };
 }
+
+function normalizeCaptureEndpoint({ apiBaseUrl, captureEndpoint }) {
+  const uploadPath = "/v1/capture/artifact-uploads";
+  if (captureEndpoint === undefined || captureEndpoint === null || String(captureEndpoint).trim() === "") {
+    return `${apiBaseUrl}${uploadPath}`;
+  }
+
+  const normalized = String(captureEndpoint).trim().replace(/\/+$/, "");
+  const legacyPath = "/v1/capture/artifacts";
+  return normalized.endsWith(legacyPath)
+    ? `${normalized.slice(0, -legacyPath.length)}${uploadPath}`
+    : normalized;
+}

package/npm/release-manifest.json

@@ -1,23 +1,23 @@
 {
   "schemaVersion": "aegis.agent_release_manifest.v1",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "releaseBaseUrl": "https://aegisagentics.com/releases/aegis-agent",
-  "createdAt": "2026-06-22T18:55:17.615Z",
+  "createdAt": "2026-10-01T08:54:06.769Z",
   "artifacts": {
     "darwin-arm64": {
-      "path": "versions/0.1.0/darwin-arm64/aegis-agent.tar.gz",
-      "sha256": "c11ceb6011c01e9ea2090494b36bf59d98a51058324e338295f68fcf60664fd0",
-      "sizeBytes": 2155326
+      "path": "versions/0.2.0/darwin-arm64/aegis-agent.tar.gz",
+      "sha256": "be7c13efb0f6f644c44d4f4e8f00e79d7ed0853dec84e9628d05cccfc4eb1a3d",
+      "sizeBytes": 2292252
     },
     "darwin-x64": {
-      "path": "versions/0.1.0/darwin-x64/aegis-agent.tar.gz",
-      "sha256": "0d1e1c8f8584dcbe23b47d12712371daf5faf488b614e8699b22d80a7cd3ef35",
-      "sizeBytes": 2248676
+      "path": "versions/0.2.0/darwin-x64/aegis-agent.tar.gz",
+      "sha256": "b5e7b72a9128fa09e36ed81c8859643266fb2b0b2bbe2178c90f8684786f2f1e",
+      "sizeBytes": 2392387
     },
     "linux-x64": {
-      "path": "versions/0.1.0/linux-x64/aegis-agent.tar.gz",
-      "sha256": "82dffedef43a7fefeb431739536ae6d3f26bd82f20ea826a528ffcd2cdb69517",
-      "sizeBytes": 2356443
+      "path": "versions/0.2.0/linux-x64/aegis-agent.tar.gz",
+      "sha256": "ce394577fc7d835591f8a9514c571555c3fc20e21403ddf5980e3874b6808ce6",
+      "sizeBytes": 2523841
     }
   }
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aegisagentics/agent",
-  "version": "0.1.0",
-  "description": "Aegis Agent local installer and hook runtime for Codex, Claude, Cursor, and Goose.",
+  "version": "0.2.0",
+  "description": "Aegis Agent local installer and hook runtime for Codex, Claude Code, Cursor, and OpenClaw.",
   "type": "module",
   "repository": {
     "type": "git",