@aegisagentics/agent 0.2.1 → 0.2.3

package/README.md

@@ -48,7 +48,7 @@ no TCP listener. Check the local state with `aegis-agent status` and
 `aegis-agent doctor`; remove just this integration with
 `aegis-agent uninstall --vendors openclaw`.
 
-Lifecycle facts go through the existing OTLP trace and activity-log paths.
+Lifecycle facts go through the governed OTLP trace path.
 `log.record` is supplementary: its bounded message stays inside the same-UID
 UDS handoff until Rust redacts it, then it is sent to the authenticated OTLP
 logs endpoint. In the default metadata policy, the installer leaves OpenClaw
@@ -107,7 +107,7 @@ crates/aegis-agent/                  Native Rust runtime
 5. The bootstrapper verifies byte size and SHA-256 before extracting.
 6. The native runtime writes local config and owner-only credentials.
 7. Vendor-specific hook files are installed. Codex currently uses both plugin registration and Aegis-owned direct `hooks.json` entries for reliable local execution.
-8. Agent hooks send safe metadata, OTLP facts, queue-backed human-readable logs, and governed capture candidates according to local capture policy.
+8. Agent hooks send safe metadata, canonical OTLP facts/logs, and governed capture candidates according to local capture policy.
 
 ## Local Files
 
@@ -146,8 +146,8 @@ The plugin intentionally separates facts, logs, and artifacts:
 | Data type | Path | Notes |
 | --- | --- | --- |
 | Run/session/tool facts | Plugin -> OTLP collector -> ControlTower API | Metadata and span facts. Collector forwards agent auth. |
-| Human-readable logs | Plugin -> API -> queue -> worker -> Postgres | Safe operator log lines only. No raw prompts or tool payloads. |
-| Capture artifacts | Plugin/gateway -> Capture API -> queue -> worker -> Presidio -> database | Redacted content only after server-side sanitization. |
+| Human-readable logs | Plugin -> OTLP collector -> ControlTower API -> ClickHouse | Bounded operator log records only. No raw prompts or tool payloads. |
+| Capture artifacts | Plugin/gateway -> Capture API -> governed redaction -> MongoDB or encrypted object storage | Small redacted text may be retained inline; large or binary redacted bodies use object storage with a manifest and preview. |
 
 The local safe queue is removed only after required downstream delivery succeeds. If the collector or API is unavailable, retry with:
 

package/npm/install.js

@@ -8,10 +8,12 @@ import { aegisPaths } from "./lib/config.js";
 import { parseBootstrapCommand } from "./lib/cli.js";
 import {
   hookFilesForCodexUninstall,
-  installAegisHooksFiles,
   scrubAegisHooksFiles
 } from "./lib/codex-hooks.js";
-import { installCodexPlugin, uninstallCodexPlugin } from "./lib/codex-plugin.js";
+import {
+  installCodexPluginAsSingleHookSource,
+  uninstallCodexPlugin
+} from "./lib/codex-plugin.js";
 import {
   detectCodexHome,
   prepareCodexPluginInstallTarget
@@ -159,22 +161,22 @@ async function runCodexPluginAction(action, paths, { softFail }) {
           `Codex marketplace file not found at ${target.marketplaceFile}. Run the Aegis install command first.`
         );
       }
-      const hookInstallResults = await installAegisHooksFiles({
-        binaryPath: target.binaryFile,
-        files: hookFilesForCodexUninstall({
+      const scrubResults = await installCodexPluginAsSingleHookSource({
+        marketplaceFile: target.marketplaceFile,
+        legacyHookFiles: hookFilesForCodexUninstall({
           codexHome: target.codexHome,
           userPaths: paths
         })
       });
-      const addedHooks = hookInstallResults.reduce((sum, result) => sum + result.added, 0);
-      const replacedHooks = hookInstallResults.reduce((sum, result) => sum + result.replaced, 0);
-      await installCodexPlugin({ marketplaceFile: target.marketplaceFile });
+      const removedHooks = scrubResults.reduce((sum, result) => sum + result.removed, 0);
       if (target.mirrored) {
         console.log(`Prepared Codex-isolated Aegis runtime: ${target.codexHome}`);
       }
-      console.log(
-        `Installed Aegis Codex hooks.json entries: ${addedHooks} added, ${replacedHooks} replaced`
-      );
+      if (removedHooks > 0) {
+        console.log(
+          `Removed ${removedHooks} legacy Aegis hook entr${removedHooks === 1 ? "y" : "ies"} from Codex hooks.json`
+        );
+      }
       console.log("Codex plugin installed: aegis@aegis");
       return 0;
     }

package/npm/lib/codex-plugin.js

@@ -1,6 +1,8 @@
 import { spawn } from "node:child_process";
 import path from "node:path";
 
+import { scrubAegisHooksFiles } from "./codex-hooks.js";
+
 export const DEFAULT_CODEX_PLUGIN_ID = "aegis@aegis";
 export const DEFAULT_CODEX_PLUGIN_NAME = "aegis";
 
@@ -55,6 +57,16 @@ export async function installCodexPlugin({
   });
 }
 
+export async function installCodexPluginAsSingleHookSource({
+  legacyHookFiles,
+  marketplaceFile,
+  installPlugin = installCodexPlugin,
+  scrubHooks = scrubAegisHooksFiles
+}) {
+  await installPlugin({ marketplaceFile });
+  return await scrubHooks(legacyHookFiles);
+}
+
 export async function uninstallCodexPlugin({
   codexCommand = "codex",
   pluginId = DEFAULT_CODEX_PLUGIN_ID,

package/npm/lib/config.js

@@ -68,7 +68,6 @@ export function buildLocalConfig({
   captureEndpoint,
   capturePolicy,
   installationId,
-  activityLogEndpoint,
   otlpHttpBaseUrl,
   otlpTracesEndpoint,
   organizationId,
@@ -91,10 +90,6 @@ export function buildLocalConfig({
       "OTLP HTTP base URL is required; pass otlpHttpBaseUrl or otlpTracesEndpoint"
     );
   }
-  const normalizedActivityLogEndpoint =
-    activityLogEndpoint === undefined || activityLogEndpoint === null || String(activityLogEndpoint).trim() === ""
-      ? `${normalizedApiBaseUrl}/v1/agent-activity/logs`
-      : String(activityLogEndpoint).trim().replace(/\/+$/, "");
   const normalizedCaptureEndpoint = normalizeCaptureEndpoint({
     apiBaseUrl: normalizedApiBaseUrl,
     captureEndpoint
@@ -103,7 +98,6 @@ export function buildLocalConfig({
     schemaVersion: "aegis.agent_config.v1",
     agentId,
     apiBaseUrl: normalizedApiBaseUrl,
-    activityLogEndpoint: normalizedActivityLogEndpoint,
     captureEndpoint: normalizedCaptureEndpoint,
     capturePolicy,
     installationId,

package/npm/release-manifest.json

@@ -1,23 +1,23 @@
 {
   "schemaVersion": "aegis.agent_release_manifest.v1",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "releaseBaseUrl": "https://aegisagentics.com/releases/aegis-agent",
-  "createdAt": "2026-10-01T09:22:45.760Z",
+  "createdAt": "2026-10-29T09:20:59.864Z",
   "artifacts": {
     "darwin-arm64": {
-      "path": "versions/0.2.1/darwin-arm64/aegis-agent.tar.gz",
-      "sha256": "36a561e524273dc7c08b1388a01d6c5f0f43ffdcff0643ecc876e5194a54a608",
-      "sizeBytes": 2295321
+      "path": "versions/0.2.3/darwin-arm64/aegis-agent.tar.gz",
+      "sha256": "4b98c1192c635337eb1d03b5f3dbdc0618408ef06bfa299d208181f5ee905dc5",
+      "sizeBytes": 2337557
     },
     "darwin-x64": {
-      "path": "versions/0.2.1/darwin-x64/aegis-agent.tar.gz",
-      "sha256": "76b5bf4ad9bdd7cc036ae52cc4b8a741819c174b56fd39f43d9459ca72cd896a",
-      "sizeBytes": 2395547
+      "path": "versions/0.2.3/darwin-x64/aegis-agent.tar.gz",
+      "sha256": "166f2eefaaab9aefba640277d83bf01c76ede875e3c29dfec59d0a50855a3220",
+      "sizeBytes": 2441306
     },
     "linux-x64": {
-      "path": "versions/0.2.1/linux-x64/aegis-agent.tar.gz",
-      "sha256": "8d00dd70e95138263a94209bda17c17537371c3a1b2ec4b0971912fb0d0c4177",
-      "sizeBytes": 2526674
+      "path": "versions/0.2.3/linux-x64/aegis-agent.tar.gz",
+      "sha256": "5aa2539a3829ca805ec262cf46ecaa7597ee4b9cbdd297a3ebced2338dd8d09a",
+      "sizeBytes": 2575075
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aegisagentics/agent",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Aegis Agent local installer and hook runtime for Codex, Claude Code, Cursor, and OpenClaw.",
   "type": "module",
   "repository": {