@getmikie/cli 1.1.128 → 1.1.130

package/README.md

@@ -9,7 +9,7 @@ npx --yes --ignore-scripts --registry=https://registry.npmjs.org @getmikie/cli@1
 For a persistent command path on Windows PowerShell:
 
 ```powershell
-npm.cmd install --global @getmikie/cli@1.1.108 --allow-scripts=@getmikie/cli --registry=https://registry.npmjs.org
+npm.cmd install --global @getmikie/cli@1.1.108 --registry=https://registry.npmjs.org
 ```
 
 Mikie does not change your PowerShell execution policy. Keep the exact package
@@ -19,12 +19,13 @@ incorrectly targets the current directory.
 For a persistent command path on macOS or Linux:
 
 ```sh
-npm install --global @getmikie/cli@1.1.108 --allow-scripts=@getmikie/cli --registry=https://registry.npmjs.org
+npm install --global @getmikie/cli@1.1.108 --registry=https://registry.npmjs.org
 ```
 
-These persistent npm commands allow only `@getmikie/cli`'s reconciliation
-script and pin the public npm registry. npm 11.5.1 or newer is required for
-`--allow-scripts`; the temporary `npx` command above keeps scripts disabled.
+Keep `--global`: Mikie is a command-line tool, not a project dependency.
+The package has no npm install script, so there is nothing to allow; the
+first `mikie` command finishes setting up the runtime and client hooks.
+These commands pin the public npm registry.
 The public OS installers additionally authenticate exact wrapper
 and native tarball bytes, install them offline, and explicitly run only Mikie's
 authenticated reconciliation script.

package/bin/mikie.mjs

@@ -2,7 +2,7 @@
 
 import { createRequire } from "node:module";
 import { homedir } from "node:os";
-import { access } from "node:fs/promises";
+import { access, mkdir, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 
@@ -61,6 +61,23 @@ const packageMetadata = require("../package.json");
 const arguments_ = process.argv.slice(2);
 // Updating Codex/Claude Code registrations can wait for a busy client; the
 // command itself still runs and the update is retried on the next command.
+/**
+ * Say once per installed version that client setup is unfinished, not on
+ * every command: the message repeated for as long as it stayed deferred.
+ */
+async function reportDeferredOnce(version) {
+  const marker = path.join(homedir(), ".mikie", `client-setup-deferred-${version}`);
+  try {
+    await access(marker);
+    return;
+  } catch {}
+  console.error(CLIENT_REPAIR_DEFERRED);
+  try {
+    await mkdir(path.dirname(marker), { recursive: true });
+    await writeFile(marker, "");
+  } catch {}
+}
+
 const CLIENT_REPAIR_DEFERRED =
   "mikie: Mikie will finish updating its Codex and Claude Code setup next time. If Mikie stops working there, run `mikie setup codex` or `mikie setup claude`.";
 const singleFlag = arguments_.length === 1 ? arguments_[0].toLowerCase() : null;
@@ -136,11 +153,11 @@ Account:
       const spec = `@getmikie/cli@${resolved.version}`;
       const reinstall = await commands.run(
         "npm",
-        ["install", "--global", spec, "--allow-scripts=@getmikie/cli"],
+        ["install", "--global", spec],
         { shell: false, capture: true },
       );
       if (reinstall.code !== 0) {
-        throw new Error(`reinstalling the CLI failed; run: npm install --global ${spec} --allow-scripts=@getmikie/cli`);
+        throw new Error(`reinstalling the CLI failed; run: npm install --global ${spec}`);
       }
       console.log(`Reinstalled Mikie ${resolved.version}. Run \`mikie doctor\` to check client setup.`);
       process.exit(0);
@@ -325,7 +342,7 @@ Account:
         allowDeferred: nativeArguments[0] === "serve",
       });
       if (clients.status === "deferred") {
-        console.error(CLIENT_REPAIR_DEFERRED);
+        await reportDeferredOnce(packageMetadata.version);
       }
     } else if (shouldCompleteSkippedInstall(nativeArguments)) {
       // An invalid install fails here, once, before any client repair.
@@ -333,7 +350,7 @@ Account:
       try {
         const clients = await completeSkippedInstall({ version: packageMetadata.version });
         if (clients.status === "deferred") {
-          console.error(CLIENT_REPAIR_DEFERRED);
+          await reportDeferredOnce(packageMetadata.version);
         }
       } catch (error) {
         const reason = error instanceof Error ? error.message : "unavailable";

package/lib/launcher.mjs

@@ -521,7 +521,8 @@ export function shouldReconcileInstalledClients(arguments_) {
 
 /**
  * Return whether a customer command first finishes an install whose npm
- * postinstall never ran (npm's allow-scripts policy skips it by default).
+ * install setup has not run yet: the package has no npm install script, so
+ * the first command a person types finishes it.
  * Only commands a person types: hook and internal entrypoints (for example
  * `efficiency-hook`, run on every prompt) and read-only doctor never do.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmikie/cli",
-  "version": "1.1.128",
+  "version": "1.1.130",
   "description": "Native Mikie relay launcher for MCP clients",
   "license": "Apache-2.0",
   "repository": {
@@ -11,9 +11,6 @@
   "bin": {
     "mikie": "bin/mikie.mjs"
   },
-  "scripts": {
-    "postinstall": "node ./scripts/reconcile-install.mjs"
-  },
   "files": [
     "bin",
     "lib",
@@ -24,12 +21,13 @@
     "node": ">=22"
   },
   "optionalDependencies": {
-    "@getmikie/darwin-arm64": "1.1.128",
-    "@getmikie/linux-x64-gnu": "1.1.128",
-    "@getmikie/win32-x64": "1.1.128"
+    "@getmikie/darwin-arm64": "1.1.130",
+    "@getmikie/linux-x64-gnu": "1.1.130",
+    "@getmikie/win32-x64": "1.1.130"
   },
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org"
-  }
+  },
+  "mikieReleaseNote": "mikie update works again, and Codex keeps its hook approval across updates"
 }