@iliasalmerekov/aegis 0.5.6 → 0.5.9

package/README.md

@@ -10,9 +10,32 @@ The package downloads the correct Aegis GitHub Release binary for the current
 Linux/macOS x64/arm64 host during `postinstall`, verifies SHA256, and exposes
 the `aegis` command.
 
-NPM installs the binary only. It does not edit `.bashrc`, `.zshrc`, Codex
-configuration, or Claude configuration. After installation, run
-`aegis install-hooks --all` if you want supported agent hooks, or configure
-`SHELL` and `AEGIS_REAL_SHELL` explicitly for shell-proxy usage.
+NPM installs the binary and never edits `.bashrc` or `.zshrc`. As a
+convenience, `postinstall` performs **best-effort** agent-hook setup: if a
+`~/.claude` or `~/.codex` directory already exists, it runs
+`aegis install-hooks --all`. It never creates those directories, and a hook-setup
+failure never fails the npm install. Set `AEGIS_NPM_SKIP_HOOKS=1` to opt out.
+
+If no agent directory exists yet, install one of the agents and then run:
+
+```bash
+aegis install-hooks --all
+```
+
+Claude Code and Codex command execution is protected through these `PreToolUse`
+hooks, not through `setup-shell` — those agents ignore a non-bash/zsh `$SHELL`
+in their Bash tool, so only the hook intercepts their commands.
+
+To opt in to shell-proxy mode for tools that launch commands through `$SHELL -c`:
+
+```bash
+aegis setup-shell
+```
+
+To undo shell-proxy setup later:
+
+```bash
+aegis setup-shell --remove
+```
 
 Native Windows shells are not supported; use Aegis from WSL2 on Windows.

package/checksums.json

@@ -1,10 +1,10 @@
 {
-  "release": "v0.5.6",
+  "release": "v0.5.9",
   "repo": "IliasAlmerekov/aegis",
   "assets": {
-    "aegis-linux-x86_64": "3af320804df191d3a10637e3da103dc306a5d573a85f1d740726d62c0826f683",
-    "aegis-linux-aarch64": "5e900632230750dff271d5816bd7c81a53158005d88c30ec439e59df871d0e31",
-    "aegis-macos-x86_64": "092d91e7b22800e68df8290707031beac531feb44bd02ddb0356ff082299ff2e",
-    "aegis-macos-aarch64": "8768865f2456c115788967ab29db790106e8a87fea8aa654561f8e942ec172b0"
+    "aegis-linux-x86_64": "088cb3c1c927e69b9fdcda852677f08d1e620e87e3e8fa8f7f6019e0d26d8d39",
+    "aegis-linux-aarch64": "2c96a5c880101e046e307a0a83a2d24f1fdc438dbe547cfb43df84eecf8b823b",
+    "aegis-macos-x86_64": "ef64b9af6067ee0343153d87fcf2f210f48219d139d3ad846c139615772a7485",
+    "aegis-macos-aarch64": "c8337ead145038ef25ccbcfa53fbc57cfe841cfed6322de31c77efd8a33576a1"
   }
-}
+}

package/package.json

@@ -1,43 +1,43 @@
-{
-  "name": "@iliasalmerekov/aegis",
-  "version": "0.5.6",
-  "description": "Terminal proxy that intercepts AI agent shell commands and requires human confirmation before destructive operations",
-  "license": "MIT",
-  "homepage": "https://github.com/IliasAlmerekov/aegis",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/IliasAlmerekov/aegis.git"
-  },
-  "bugs": {
-    "url": "https://github.com/IliasAlmerekov/aegis/issues"
-  },
-  "bin": {
-    "aegis": "bin/aegis.js"
-  },
-  "scripts": {
-    "postinstall": "node scripts/install.js",
-    "smoke": "node scripts/smoke.js"
-  },
-  "os": [
-    "darwin",
-    "linux"
-  ],
-  "cpu": [
-    "x64",
-    "arm64"
-  ],
-  "files": [
-    "bin/",
-    "scripts/",
-    "checksums.json",
-    "README.md"
-  ],
-  "keywords": [
-    "aegis",
-    "security",
-    "ai",
-    "shell",
-    "cli",
-    "safety"
-  ]
-}
+{
+  "name": "@iliasalmerekov/aegis",
+  "version": "0.5.9",
+  "description": "Terminal proxy that intercepts AI agent shell commands and requires human confirmation before destructive operations",
+  "license": "MIT",
+  "homepage": "https://github.com/IliasAlmerekov/aegis",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/IliasAlmerekov/aegis.git"
+  },
+  "bugs": {
+    "url": "https://github.com/IliasAlmerekov/aegis/issues"
+  },
+  "bin": {
+    "aegis": "bin/aegis.js"
+  },
+  "scripts": {
+    "postinstall": "node scripts/install.js",
+    "smoke": "node scripts/smoke.js"
+  },
+  "os": [
+    "darwin",
+    "linux"
+  ],
+  "cpu": [
+    "x64",
+    "arm64"
+  ],
+  "files": [
+    "bin/",
+    "scripts/",
+    "checksums.json",
+    "README.md"
+  ],
+  "keywords": [
+    "aegis",
+    "security",
+    "ai",
+    "shell",
+    "cli",
+    "safety"
+  ]
+}

package/scripts/install.js

@@ -3,7 +3,9 @@
 const crypto = require("node:crypto");
 const fs = require("node:fs");
 const https = require("node:https");
+const os = require("node:os");
 const path = require("node:path");
+const { spawnSync } = require("node:child_process");
 
 const packageRoot = path.join(__dirname, "..");
 const vendorDir = path.join(packageRoot, "vendor");
@@ -25,6 +27,64 @@ function fail(message) {
   process.exit(1);
 }
 
+// Binary-only install: never edit shell startup files here. Point users at the
+// explicit opt-in `aegis setup-shell` command so enabling the shell proxy is a
+// deliberate user action, not a side effect of `npm i -g`.
+function printNextSteps() {
+  console.log("Aegis installed.");
+  console.log("");
+  console.log("Test:");
+  console.log("  aegis -c 'echo hello'");
+  console.log("");
+  console.log("Enable shell-proxy mode for tools that launch commands via $SHELL -c:");
+  console.log("  aegis setup-shell");
+  console.log("");
+  console.log("Undo shell-proxy setup:");
+  console.log("  aegis setup-shell --remove");
+}
+
+// Best-effort agent hook setup. Only runs `aegis install-hooks --all` when a
+// supported agent config directory already exists; never creates one. Failures
+// here must not fail the npm install — the binary is already in place and the
+// user can run `aegis install-hooks --all` manually. Set AEGIS_NPM_SKIP_HOOKS=1
+// to opt out (used by deterministic packaging tests).
+function maybeInstallAgentHooks() {
+  if (process.env.AEGIS_NPM_SKIP_HOOKS === "1") {
+    return;
+  }
+
+  const home = os.homedir();
+  if (!home) {
+    return;
+  }
+
+  const claudeDir = path.join(home, ".claude");
+  const codexDir = path.join(home, ".codex");
+  const hasAgentDir = fs.existsSync(claudeDir) || fs.existsSync(codexDir);
+
+  if (!hasAgentDir) {
+    console.log("");
+    console.log("If you install Claude Code or Codex later, run:");
+    console.log("  aegis install-hooks --all");
+    return;
+  }
+
+  try {
+    const result = spawnSync(binaryPath, ["install-hooks", "--all"], {
+      stdio: "inherit"
+    });
+    if (result.error) {
+      console.log("");
+      console.log("Could not auto-install agent hooks; run manually with:");
+      console.log("  aegis install-hooks --all");
+    }
+  } catch (_error) {
+    console.log("");
+    console.log("Could not auto-install agent hooks; run manually with:");
+    console.log("  aegis install-hooks --all");
+  }
+}
+
 function readChecksums() {
   const raw = fs.readFileSync(checksumsPath, "utf8");
   return JSON.parse(raw);
@@ -111,6 +171,8 @@ async function main() {
 
   if (process.env.AEGIS_NPM_SKIP_DOWNLOAD === "1") {
     fs.writeFileSync(binaryPath, "#!/bin/sh\nprintf 'aegis test binary\\n'\n", { mode: 0o755 });
+    printNextSteps();
+    maybeInstallAgentHooks();
     return;
   }
 
@@ -125,6 +187,8 @@ async function main() {
 
   fs.renameSync(tmpPath, binaryPath);
   fs.chmodSync(binaryPath, 0o755);
+  printNextSteps();
+  maybeInstallAgentHooks();
 }
 
 main().catch(error => {