@minhpnq1807/contextos 0.5.30 → 0.5.31

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.5.31
+
+- **Complete stdio audit — eliminate all output leakage:** Changed every remaining `stdio: "inherit"` in `skillshare-sync.js` and `ruler-sync.js` to `stdio: "pipe"`. When subprocess calls use `inherit`, child processes write directly to the parent's fd — bypassing both `console.log` and `process.stderr.write` interception in `captureSetupOutput`. With `pipe`, all subprocess output is captured as return values and re-emitted through `console.log`, ensuring the `◇`/`│` formatting is applied consistently. Also changed `runShell` default from `"inherit"` to `"pipe"` to prevent future regressions.
+
 ## 0.5.30
 
 - **Fix Windows skillshare post-install hang:** After the PowerShell installer adds skillshare to PATH, the current Node.js process still has the old `process.env.PATH`. Now injects the known Windows install directory (`%LOCALAPPDATA%\\Programs\\skillshare`) into `process.env.PATH` immediately after install, so `skillshare --version`, `skillshare init`, and subsequent calls resolve without restarting the terminal.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minhpnq1807/contextos",
-  "version": "0.5.30",
+  "version": "0.5.31",
   "description": "Task-aware AGENTS.md context injection and compliance reporting for Codex, Claude Code, and Antigravity.",
   "type": "module",
   "bin": {

package/plugins/ctx/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ctx",
-  "version": "0.1.6",
+  "version": "0.5.31",
   "description": "Inject task-relevant AGENTS.md rules into Codex through plugin hooks.",
   "author": {
     "name": "ContextOS"

package/plugins/ctx/lib/ruler-sync.js

@@ -94,13 +94,13 @@ export async function installRuler({ run = runCommand, yes = false, dryRun = fal
   if (!accepted) {
     throw new Error("Ruler is required for ctx sync --rules. Install it with `npm install -g @intellectronica/ruler` or rerun with --yes.");
   }
-  run("npm", ["install", "-g", "@intellectronica/ruler"], { stdio: "inherit", dryRun });
+  run("npm", ["install", "-g", "@intellectronica/ruler"], { stdio: "pipe", dryRun });
 }
 
 export function ensureRulerInit({ cwd = process.cwd(), run = runCommand, dryRun = false } = {}) {
   const tomlPath = rulerTomlPath(cwd);
   if (fs.existsSync(tomlPath)) return { created: false, tomlPath };
-  run("ruler", ["init"], { cwd, stdio: "inherit", dryRun });
+  run("ruler", ["init"], { cwd, stdio: "pipe", dryRun });
   return { created: true, tomlPath };
 }
 
@@ -444,7 +444,7 @@ export function injectCtxMcp({ tomlPath, mcpServerPath, agents = DEFAULT_AGENTS,
 }
 
 export function runRulerApply({ agents = DEFAULT_AGENTS, cwd = process.cwd(), run = runCommand, dryRun = false } = {}) {
-  run("ruler", ["apply", "--agents", normalizeAgentList(agents).join(",")], { cwd, stdio: "inherit", dryRun });
+  run("ruler", ["apply", "--agents", normalizeAgentList(agents).join(",")], { cwd, stdio: "pipe", dryRun });
 }
 
 function fileContains(filePath, pattern) {

package/plugins/ctx/lib/skillshare-sync.js

@@ -25,7 +25,7 @@ function runCommand(command, args = [], { cwd = process.cwd(), stdio = "pipe", d
   return { stdout: stdout || "" };
 }
 
-function runShell(command, { cwd = process.cwd(), stdio = "inherit", dryRun = false } = {}) {
+function runShell(command, { cwd = process.cwd(), stdio = "pipe", dryRun = false } = {}) {
   if (dryRun) return { stdout: "", skipped: true };
   const stdout = execSync(command, { cwd, stdio, encoding: "utf8" });
   return { stdout: stdout || "" };
@@ -120,7 +120,7 @@ export async function installSkillshare({
 
   const osName = detectOS(platform);
   if (osName === "windows") {
-    runShellCommand(`powershell -NoProfile -ExecutionPolicy Bypass -Command "irm ${INSTALL_PS_URL} | iex"`, { stdio: "inherit", dryRun });
+    runShellCommand(`powershell -NoProfile -ExecutionPolicy Bypass -Command "irm ${INSTALL_PS_URL} | iex"`, { stdio: "pipe", dryRun });
     // The installer adds to the system PATH, but the current Node process
     // still has the old PATH. Inject the known install dir so subsequent
     // skillshare calls in this session can resolve the binary.
@@ -129,7 +129,7 @@ export async function installSkillshare({
       process.env.PATH = `${winInstallDir}${path.delimiter}${process.env.PATH}`;
     }
   } else {
-    runShellCommand(`curl -fsSL ${INSTALL_SH_URL} | sh`, { stdio: "inherit", dryRun });
+    runShellCommand(`curl -fsSL ${INSTALL_SH_URL} | sh`, { stdio: "pipe", dryRun });
   }
 
   const check = checkSkillshareInstalled({ run });
@@ -352,13 +352,13 @@ export async function syncSkills({
       logger("[ctx] No existing skills found.");
     }
 
-    run("skillshare", ["init"], { cwd, stdio: "inherit", dryRun: options.dryRun });
+    run("skillshare", ["init"], { cwd, stdio: "pipe", dryRun: options.dryRun });
     logger(statusLine("Initializing skillshare...", options.dryRun ? "dry-run" : "✓ initialized"));
 
     if (existing.length && !options.noCollect) {
-      run("skillshare", ["backup"], { cwd, stdio: "inherit", dryRun: options.dryRun });
+      run("skillshare", ["backup"], { cwd, stdio: "pipe", dryRun: options.dryRun });
       logger(statusLine("Backing up...", options.dryRun ? "dry-run" : "✓ backup created"));
-      run("skillshare", ["collect", "--all"], { cwd, stdio: "inherit", dryRun: options.dryRun });
+      run("skillshare", ["collect", "--all"], { cwd, stdio: "pipe", dryRun: options.dryRun });
       const collected = countSkillFiles(skillshareSourceDir({ home }));
       logger(statusLine("Collecting from all agents...", options.dryRun ? "dry-run" : `✓ ${collected} skills collected`));
     }