@imdeadpool/guardex 7.0.12 → 7.0.13

package/README.md

@@ -1,7 +1,13 @@
 # GitGuardex — Guardian T-Rex for your repo
 
-[![npm version](https://img.shields.io/npm/v/%40imdeadpool%2Fguardex?color=cb3837&logo=npm)](https://www.npmjs.com/package/@imdeadpool/guardex)
-[![CI](https://github.com/recodeee/gitguardex/actions/workflows/ci.yml/badge.svg)](https://github.com/recodeee/gitguardex/actions/workflows/ci.yml)
+[![npm version](https://img.shields.io/npm/v/%40imdeadpool%2Fguardex?label=npm&color=cb3837&logo=npm)](https://www.npmjs.com/package/@imdeadpool/guardex)
+[![npm downloads](https://img.shields.io/npm/dm/%40imdeadpool%2Fguardex?label=downloads&color=0b76c5)](https://www.npmjs.com/package/@imdeadpool/guardex)
+[![GitHub stars](https://img.shields.io/github/stars/recodeee/gitguardex?label=stars&color=d4ac0d)](https://github.com/recodeee/gitguardex/stargazers)
+[![License](https://img.shields.io/npm/l/%40imdeadpool%2Fguardex?label=License&color=97ca00)](./LICENSE)
+
+[![CI](https://img.shields.io/github/actions/workflow/status/recodeee/gitguardex/ci.yml?branch=main&label=CI)](https://github.com/recodeee/gitguardex/actions/workflows/ci.yml)
+[![Release](https://img.shields.io/github/actions/workflow/status/recodeee/gitguardex/release.yml?label=Release)](https://github.com/recodeee/gitguardex/actions/workflows/release.yml)
+[![CodeQL](https://img.shields.io/github/actions/workflow/status/recodeee/gitguardex/codeql.yml?branch=main&label=CodeQL)](https://github.com/recodeee/gitguardex/actions/workflows/codeql.yml)
 [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/recodeee/gitguardex/badge)](https://securityscorecards.dev/viewer/?uri=github.com/recodeee/gitguardex)
 
 **GitGuardex is a safety layer for parallel agent work in git repos.** If you're running more than one Codex or Claude agent on the same codebase, this is what keeps them from deleting each other's work.
@@ -20,6 +26,8 @@ I was running ~30 Codex agents in parallel and hit a wall: they kept working on
 
 GitGuardex exists to stop that loop. Every agent gets its own worktree, claims the files it's touching, and can't clobber files another agent has claimed. Your local branch stays clean; agents stay in their lanes.
 
+### Solution
+
 ```mermaid
 flowchart LR
     A[Agent A adds assertions in a shared test] --> S[Several agents touch the same files]
@@ -34,6 +42,8 @@ flowchart LR
     I --> S
 ```
 
+### Dashboard
+
 ![Multi-agent dashboard example](https://raw.githubusercontent.com/recodeee/gitguardex/main/docs/images/dashboard-multi-agent.png)
 
 Coming soon: [recodee.com](https://recodee.com) — live account health, usage, routing, and capacity in one place.
@@ -277,6 +287,7 @@ npm i -g oh-my-codex
 ```
 
 Repo: <https://github.com/Yeachan-Heo/oh-my-codex>
+[![GitHub stars](https://img.shields.io/github/stars/Yeachan-Heo/oh-my-codex?style=social)](https://github.com/Yeachan-Heo/oh-my-codex)
 
 ### oh-my-claudecode — Claude Code equivalent
 
@@ -287,6 +298,7 @@ npm i -g oh-my-claude-sisyphus@latest
 ```
 
 Repo: <https://github.com/Yeachan-Heo/oh-my-claudecode>
+[![GitHub stars](https://img.shields.io/github/stars/Yeachan-Heo/oh-my-claudecode?style=social)](https://github.com/Yeachan-Heo/oh-my-claudecode)
 
 ### Caveman — output compression for long agent runs
 
@@ -297,6 +309,7 @@ npx skills add JuliusBrussee/caveman
 ```
 
 Repo: <https://github.com/JuliusBrussee/caveman>
+[![GitHub stars](https://img.shields.io/github/stars/JuliusBrussee/caveman?style=social)](https://github.com/JuliusBrussee/caveman)
 
 ### Cavemem — local persistent memory for agents
 
@@ -309,6 +322,7 @@ cavemem status
 ```
 
 Repo: <https://github.com/JuliusBrussee/cavemem>
+[![GitHub stars](https://img.shields.io/github/stars/JuliusBrussee/cavemem?style=social)](https://github.com/JuliusBrussee/cavemem)
 
 ### Cavekit — spec-driven build loop
 
@@ -319,6 +333,7 @@ npx skills add JuliusBrussee/cavekit
 ```
 
 Repo: <https://github.com/JuliusBrussee/cavekit>
+[![GitHub stars](https://img.shields.io/github/stars/JuliusBrussee/cavekit?style=social)](https://github.com/JuliusBrussee/cavekit)
 
 ### OpenSpec — spec-driven workflows
 
@@ -329,6 +344,7 @@ npm i -g @fission-ai/openspec
 ```
 
 Repo: <https://github.com/Fission-AI/OpenSpec>
+[![GitHub stars](https://img.shields.io/github/stars/Fission-AI/OpenSpec?style=social)](https://github.com/Fission-AI/OpenSpec)
 
 ### codex-auth — multi-account switcher
 
@@ -344,6 +360,7 @@ codex-auth current
 ```
 
 Repo: [recodeecom/codex-account-switcher-cli](https://github.com/recodeecom/codex-account-switcher-cli)
+[![GitHub stars](https://img.shields.io/github/stars/recodeecom/codex-account-switcher-cli?style=social)](https://github.com/recodeecom/codex-account-switcher-cli)
 
 ### GitHub CLI (`gh`)
 
@@ -490,6 +507,11 @@ npm pack --dry-run
 <details>
 <summary><strong>v7.x</strong></summary>
 
+### v7.0.13
+- `gx status` and `gx setup` now present the Claude companion as `oh-my-claudecode` while still installing the published npm package `oh-my-claude-sisyphus`.
+- When that dependency is inactive or the user declines the optional install, Guardex now prints the upstream repo URL so the missing dependency is explicit instead of hidden behind the npm package name.
+- Bumped `@imdeadpool/guardex` from `7.0.12` → `7.0.13` after npm rejected a republish over the already-published `7.0.12`.
+
 ### v7.0.12
 - Fixed the self-update handoff after `gx` installs a newer global package. When the on-disk install advances, GitGuardex now restarts into the installed CLI instead of continuing in the old process and printing the stale in-memory version.
 - This removes the confusing `Updated to latest published version` followed by `CLI: ...7.0.10` mismatch that happened when `7.0.11` finished installing during the same `gx` invocation.

package/bin/multiagent-safety.js

@@ -13,15 +13,26 @@ const SHORT_TOOL_NAME = 'gx';
 const LEGACY_NAMES = ['guardex', 'multiagent-safety'];
 const OPENSPEC_PACKAGE = '@fission-ai/openspec';
 const OMC_PACKAGE = 'oh-my-claude-sisyphus';
+const OMC_REPO_URL = 'https://github.com/Yeachan-Heo/oh-my-claudecode';
 const CAVEMEM_PACKAGE = 'cavemem';
 const NPX_BIN = process.env.GUARDEX_NPX_BIN || 'npx';
 const GUARDEX_HOME_DIR = path.resolve(process.env.GUARDEX_HOME_DIR || os.homedir());
+const GLOBAL_TOOLCHAIN_SERVICES = [
+  { name: 'oh-my-codex', packageName: 'oh-my-codex' },
+  {
+    name: 'oh-my-claudecode',
+    packageName: OMC_PACKAGE,
+    dependencyUrl: OMC_REPO_URL,
+  },
+  { name: OPENSPEC_PACKAGE, packageName: OPENSPEC_PACKAGE },
+  { name: CAVEMEM_PACKAGE, packageName: CAVEMEM_PACKAGE },
+  {
+    name: '@imdeadpool/codex-account-switcher',
+    packageName: '@imdeadpool/codex-account-switcher',
+  },
+];
 const GLOBAL_TOOLCHAIN_PACKAGES = [
-  'oh-my-codex',
-  OMC_PACKAGE,
-  OPENSPEC_PACKAGE,
-  CAVEMEM_PACKAGE,
-  '@imdeadpool/codex-account-switcher',
+  ...GLOBAL_TOOLCHAIN_SERVICES.map((service) => service.packageName),
 ];
 const OPTIONAL_LOCAL_COMPANION_TOOLS = [
   {
@@ -3629,6 +3640,36 @@ function resolveGlobalInstallApproval(options) {
   return { approved: true, source: 'prompt' };
 }
 
+function getGlobalToolchainService(packageName) {
+  const service = GLOBAL_TOOLCHAIN_SERVICES.find(
+    (candidate) => candidate.packageName === packageName,
+  );
+  return service || { name: packageName, packageName };
+}
+
+function formatGlobalToolchainServiceName(packageName) {
+  return getGlobalToolchainService(packageName).name;
+}
+
+function describeMissingGlobalDependencyWarnings(packageNames) {
+  return packageNames
+    .map((packageName) => getGlobalToolchainService(packageName))
+    .filter((service) => service.dependencyUrl)
+    .map(
+      (service) =>
+        `Guardex needs ${service.name} as a dependency: ${service.dependencyUrl}`,
+    );
+}
+
+function buildMissingCompanionInstallPrompt(missingPackages, missingLocalTools) {
+  const dependencyWarnings = describeMissingGlobalDependencyWarnings(missingPackages);
+  const installCommands = describeCompanionInstallCommands(missingPackages, missingLocalTools);
+  const dependencyPrefix = dependencyWarnings.length > 0
+    ? `${dependencyWarnings.join(' ')} `
+    : '';
+  return `${dependencyPrefix}Install missing companion tools now? (${installCommands.join(' && ')})`;
+}
+
 function detectGlobalToolchainPackages() {
   const result = run(NPM_BIN, ['list', '-g', '--depth=0', '--json']);
   if (result.status !== 0) {
@@ -3721,17 +3762,15 @@ function describeCompanionInstallCommands(missingPackages, missingLocalTools) {
   return commands;
 }
 
-function askGlobalInstallForMissing(options, missingPackages) {
+function askGlobalInstallForMissing(options, missingPackages, missingLocalTools) {
   const approval = resolveGlobalInstallApproval(options);
   if (!approval.approved) {
     return approval;
   }
 
-  const missingLocalTools = detectOptionalLocalCompanionTools().filter((tool) => tool.status !== 'active');
-  const installCommands = describeCompanionInstallCommands(missingPackages, missingLocalTools);
   if (approval.source === 'prompt') {
     const approved = promptYesNoStrict(
-      `Install missing companion tools now? (${installCommands.join(' && ')})`,
+      buildMissingCompanionInstallPrompt(missingPackages, missingLocalTools),
     );
     return { approved, source: 'prompt' };
   }
@@ -3750,7 +3789,10 @@ function installGlobalToolchain(options) {
     console.log(`[${TOOL_NAME}] ⚠️ Could not detect global packages: ${detection.error}`);
   } else {
     if (detection.installed.length > 0) {
-      console.log(`[${TOOL_NAME}] Already installed globally: ${detection.installed.join(', ')}`);
+      console.log(
+        `[${TOOL_NAME}] Already installed globally: ` +
+        `${detection.installed.map((pkg) => formatGlobalToolchainServiceName(pkg)).join(', ')}`,
+      );
     }
     const installedLocalTools = localCompanionTools
       .filter((tool) => tool.status === 'active')
@@ -3765,9 +3807,14 @@ function installGlobalToolchain(options) {
 
   const missingPackages = detection.ok ? detection.missing : [...GLOBAL_TOOLCHAIN_PACKAGES];
   const missingLocalTools = localCompanionTools.filter((tool) => tool.status !== 'active');
-  const approval = askGlobalInstallForMissing(options, missingPackages);
+  const approval = askGlobalInstallForMissing(options, missingPackages, missingLocalTools);
   if (!approval.approved) {
-    return { status: 'skipped', reason: approval.source };
+    return {
+      status: 'skipped',
+      reason: approval.source,
+      missingPackages,
+      missingLocalTools,
+    };
   }
 
   const installed = [];
@@ -4142,11 +4189,21 @@ function status(rawArgs) {
 
   const toolchain = detectGlobalToolchainPackages();
   const npmServices = GLOBAL_TOOLCHAIN_PACKAGES.map((pkg) => {
+    const service = getGlobalToolchainService(pkg);
     if (!toolchain.ok) {
-      return { name: pkg, status: 'unknown' };
+      return {
+        name: service.name,
+        displayName: service.name,
+        packageName: pkg,
+        dependencyUrl: service.dependencyUrl || null,
+        status: 'unknown',
+      };
     }
     return {
-      name: pkg,
+      name: service.name,
+      displayName: service.name,
+      packageName: pkg,
+      dependencyUrl: service.dependencyUrl || null,
       status: toolchain.installed.includes(pkg) ? 'active' : 'inactive',
     };
   });
@@ -4224,6 +4281,13 @@ function status(rawArgs) {
     console.log(
       `[${TOOL_NAME}] Optional companion tools inactive: ${inactiveOptionalCompanions.join(', ')}`,
     );
+    for (const warning of describeMissingGlobalDependencyWarnings(
+      npmServices
+        .filter((service) => service.status === 'inactive')
+        .map((service) => service.packageName),
+    )) {
+      console.log(`[${TOOL_NAME}] ${warning}`);
+    }
     console.log(
       `[${TOOL_NAME}] Run '${SHORT_TOOL_NAME} setup' to install missing companions with an explicit Y/N prompt.`,
     );
@@ -4881,6 +4945,13 @@ function setup(rawArgs) {
       `[${TOOL_NAME}] Skipping companion installs (non-interactive mode). ` +
       `Use --yes-global-install to force or run interactively for Y/N prompt.`,
     );
+  } else if (globalInstallStatus.status === 'skipped') {
+    console.log(`[${TOOL_NAME}] ⚠️ Companion installs skipped by user choice.`);
+    for (const warning of describeMissingGlobalDependencyWarnings(
+      globalInstallStatus.missingPackages || [],
+    )) {
+      console.log(`[${TOOL_NAME}] ⚠️ ${warning}`);
+    }
   }
   const requiredSystemTools = detectRequiredSystemTools();
   const missingSystemTools = requiredSystemTools.filter((tool) => tool.status !== 'active');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@imdeadpool/guardex",
-  "version": "7.0.12",
+  "version": "7.0.13",
   "description": "GitGuardex: hardened multi-agent git guardrails for parallel agent work.",
   "license": "MIT",
   "preferGlobal": true,