@iliasalmerekov/aegis 0.5.8 → 0.5.9

package/README.md

@@ -10,11 +10,27 @@ The package downloads the correct Aegis GitHub Release binary for the current
 Linux/macOS x64/arm64 host during `postinstall`, verifies SHA256, and exposes
 the `aegis` command.
 
-NPM installs the binary only. It does not edit `.bashrc`, `.zshrc`, Codex
-configuration, or Claude configuration. After installation, run
-`aegis install-hooks --all` if you want supported agent hooks, or run
-`aegis setup-shell` to opt in to shell-proxy mode for tools that launch commands
-through `$SHELL -c`.
+NPM installs the binary and never edits `.bashrc` or `.zshrc`. As a
+convenience, `postinstall` performs **best-effort** agent-hook setup: if a
+`~/.claude` or `~/.codex` directory already exists, it runs
+`aegis install-hooks --all`. It never creates those directories, and a hook-setup
+failure never fails the npm install. Set `AEGIS_NPM_SKIP_HOOKS=1` to opt out.
+
+If no agent directory exists yet, install one of the agents and then run:
+
+```bash
+aegis install-hooks --all
+```
+
+Claude Code and Codex command execution is protected through these `PreToolUse`
+hooks, not through `setup-shell` — those agents ignore a non-bash/zsh `$SHELL`
+in their Bash tool, so only the hook intercepts their commands.
+
+To opt in to shell-proxy mode for tools that launch commands through `$SHELL -c`:
+
+```bash
+aegis setup-shell
+```
 
 To undo shell-proxy setup later:
 

package/checksums.json

@@ -1,10 +1,10 @@
 {
-  "release": "v0.5.8",
+  "release": "v0.5.9",
   "repo": "IliasAlmerekov/aegis",
   "assets": {
-    "aegis-linux-x86_64": "74128d3c210deddd0f28611f8ecd8aa0846f8d8d0d1651236458ccc4b1379abe",
-    "aegis-linux-aarch64": "40c9e31e7c3378594128d88dbbfb6ee9670e16421e8814b0c387be765b511835",
-    "aegis-macos-x86_64": "f1ae66b27530eac1a4cf92d5faa6e41f49ba22354864ec65636e1cf74a92c7a3",
-    "aegis-macos-aarch64": "1438f71229df288d8108465a1ca5871a77fa7b872158f7fea41a3abf0ade4546"
+    "aegis-linux-x86_64": "088cb3c1c927e69b9fdcda852677f08d1e620e87e3e8fa8f7f6019e0d26d8d39",
+    "aegis-linux-aarch64": "2c96a5c880101e046e307a0a83a2d24f1fdc438dbe547cfb43df84eecf8b823b",
+    "aegis-macos-x86_64": "ef64b9af6067ee0343153d87fcf2f210f48219d139d3ad846c139615772a7485",
+    "aegis-macos-aarch64": "c8337ead145038ef25ccbcfa53fbc57cfe841cfed6322de31c77efd8a33576a1"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iliasalmerekov/aegis",
-  "version": "0.5.8",
+  "version": "0.5.9",
   "description": "Terminal proxy that intercepts AI agent shell commands and requires human confirmation before destructive operations",
   "license": "MIT",
   "homepage": "https://github.com/IliasAlmerekov/aegis",

package/scripts/install.js

@@ -3,7 +3,9 @@
 const crypto = require("node:crypto");
 const fs = require("node:fs");
 const https = require("node:https");
+const os = require("node:os");
 const path = require("node:path");
+const { spawnSync } = require("node:child_process");
 
 const packageRoot = path.join(__dirname, "..");
 const vendorDir = path.join(packageRoot, "vendor");
@@ -41,6 +43,48 @@ function printNextSteps() {
   console.log("  aegis setup-shell --remove");
 }
 
+// Best-effort agent hook setup. Only runs `aegis install-hooks --all` when a
+// supported agent config directory already exists; never creates one. Failures
+// here must not fail the npm install — the binary is already in place and the
+// user can run `aegis install-hooks --all` manually. Set AEGIS_NPM_SKIP_HOOKS=1
+// to opt out (used by deterministic packaging tests).
+function maybeInstallAgentHooks() {
+  if (process.env.AEGIS_NPM_SKIP_HOOKS === "1") {
+    return;
+  }
+
+  const home = os.homedir();
+  if (!home) {
+    return;
+  }
+
+  const claudeDir = path.join(home, ".claude");
+  const codexDir = path.join(home, ".codex");
+  const hasAgentDir = fs.existsSync(claudeDir) || fs.existsSync(codexDir);
+
+  if (!hasAgentDir) {
+    console.log("");
+    console.log("If you install Claude Code or Codex later, run:");
+    console.log("  aegis install-hooks --all");
+    return;
+  }
+
+  try {
+    const result = spawnSync(binaryPath, ["install-hooks", "--all"], {
+      stdio: "inherit"
+    });
+    if (result.error) {
+      console.log("");
+      console.log("Could not auto-install agent hooks; run manually with:");
+      console.log("  aegis install-hooks --all");
+    }
+  } catch (_error) {
+    console.log("");
+    console.log("Could not auto-install agent hooks; run manually with:");
+    console.log("  aegis install-hooks --all");
+  }
+}
+
 function readChecksums() {
   const raw = fs.readFileSync(checksumsPath, "utf8");
   return JSON.parse(raw);
@@ -128,6 +172,7 @@ async function main() {
   if (process.env.AEGIS_NPM_SKIP_DOWNLOAD === "1") {
     fs.writeFileSync(binaryPath, "#!/bin/sh\nprintf 'aegis test binary\\n'\n", { mode: 0o755 });
     printNextSteps();
+    maybeInstallAgentHooks();
     return;
   }
 
@@ -143,6 +188,7 @@ async function main() {
   fs.renameSync(tmpPath, binaryPath);
   fs.chmodSync(binaryPath, 0o755);
   printNextSteps();
+  maybeInstallAgentHooks();
 }
 
 main().catch(error => {