@mithran-hq/aegis 0.9.7 → 0.9.10

package/README.md

@@ -27,7 +27,7 @@ candidate and `latest` still names the previous accepted build. Install a pinned
 version when you need a fixed build:
 
 ```bash
-npm install -g @mithran-hq/aegis@0.9.7
+npm install -g @mithran-hq/aegis@0.9.10
 ```
 
 Check the installed version:
@@ -43,9 +43,14 @@ aegis auth login
 aegis auth status
 ```
 
-`aegis auth login` opens the browser for sign-in and always prints the sign-in
-URL. Pass `--no-browser` to skip the browser launch and open that URL yourself.
-Sign out with `aegis auth logout`.
+`aegis auth login` uses the issuer's RFC 8628 device authorization: it prints
+a one-time code and a verification URL, then waits for approval. In human
+output the code and URL go to stderr and the URL is opened in the browser
+unless `--no-browser` is given; success goes to stdout. Pass `--no-browser` to
+open the URL yourself on any device. With `--json` the command is
+noninteractive: the code event and the signed-in or error result go to stdout,
+and it never opens a browser. An issuer without device sign-in is refused; no
+localhost callback is used. Sign out with `aegis auth logout`.
 
 ## Gateway
 
@@ -85,27 +90,20 @@ account.
 
 ## Managed Forge skill
 
-A normal global user install also installs the `aegis-forge` instruction skill
-for Claude and Codex:
+After installing, run `aegis skills install` to install the `aegis-forge`
+instruction skill for Claude and Codex:
 
 - `~/.claude/skills/aegis-forge/SKILL.md`
 - `~/.agents/skills/aegis-forge/SKILL.md`
 
-Automatic installation runs only for a normal global user installation. It
-skips when npm runs as root or through sudo, under CI, from a local or
-dependency install, or through npx. A skip is reported and changes no files;
-run `aegis skills install` to install explicitly.
-
-If npm installs with scripts disabled, install the skill afterwards:
-
-```bash
-aegis skills install
-```
+The CLI prints a one-line reminder on first use until the skill is installed.
+No npm lifecycle script is declared, so npm 11 imposes no script allowlist and
+no `--allow-scripts` step is needed.
 
 Check the installed state with `aegis skills status`. Existing files Aegis does
 not own, changed Aegis-owned files and unexpected entries are preserved and
-reported; unsafe paths are not followed. Automatic installation uses the
-standard OS-account homes. A custom agent home is selected only by an explicit
+reported; unsafe paths are not followed. The standard OS-account homes are
+used by default. A custom agent home is selected only by an explicit
 `aegis skills install --agent-home <path>`.
 
 npm has no uninstall hook, so remove the skill before removing the CLI:

package/aegis.mjs

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createHash } from "node:crypto";
-import { readFileSync, statSync, writeSync } from "node:fs";
+import { existsSync, readFileSync, statSync, writeSync } from "node:fs";
 import { createRequire } from "node:module";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { spawn } from "node:child_process";
-import { release as osRelease } from "node:os";
+import { homedir, release as osRelease, userInfo } from "node:os";
 
 const MANIFEST_SCHEMA = "aegis.npm.platform.v1";
 const CAPABILITY = "aegis:product:reduced-default";
@@ -15,18 +15,107 @@ const MINIMUM_MACOS_MAJOR = 15;
 const MH_MAGIC_64 = 0xfeedfacf;
 const CPU_TYPE_ARM64 = 0x0100000c;
 const FORWARDED_SIGNALS = ["SIGHUP", "SIGINT", "SIGTERM", "SIGQUIT"];
-const SIGNAL_NUMBERS = { SIGHUP: 1, SIGINT: 2, SIGQUIT: 3, SIGTERM: 15 };
+// The conventional 128+signal exit status for a payload that died by a signal.
+// The launcher must never re-deliver that signal to itself: a second core-dump
+// signal from the wrapper is a crash surface of its own and can take the
+// foreground job, and the shell's job control, down with it.
+const SIGNAL_NUMBERS = {
+  SIGHUP: 1,
+  SIGINT: 2,
+  SIGQUIT: 3,
+  SIGILL: 4,
+  SIGABRT: 6,
+  SIGFPE: 8,
+  SIGKILL: 9,
+  // Darwin numbers SIGBUS 10 (Linux uses 7); this launcher refuses every
+  // non-Darwin host before spawning a payload.
+  SIGBUS: 10,
+  SIGSEGV: 11,
+  SIGPIPE: 13,
+  SIGALRM: 14,
+  SIGTERM: 15,
+};
+const QUIET_COMMANDS = new Set(["skills", "help", "--version", "--help", "-h", "-V"]);
+const VALUE_FLAGS = new Set(["--agent-home", "--config", "--connection", "--state-dir"]);
+const FORGE_SKILL_PATHS = [
+  [".claude", "skills", "aegis-forge", "SKILL.md"],
+  [".agents", "skills", "aegis-forge", "SKILL.md"],
+];
 
 function refuse(message) {
   const text = Buffer.from(`aegis: ${message}\n`, "utf8");
   try {
     writeSync(2, text);
   } catch {
-    process.stderr.write(text.toString("utf8"));
+    // A missing stderr must not mask the refusal or change the exit status.
   }
   process.exit(1);
 }
 
+function warn(message) {
+  const text = Buffer.from(`aegis: ${message}\n`, "utf8");
+  try {
+    // Best effort only. Falling back to process.stderr.write() can emit an
+    // asynchronous error on a broken pipe and terminate the launcher.
+    writeSync(2, text);
+  } catch {
+    // A missing stderr must not change the launcher's exit status.
+  }
+}
+
+function explicitAgentHome(argv) {
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === "--agent-home") {
+      return argv[index + 1] ?? null;
+    }
+    if (arg.startsWith("--agent-home=")) {
+      return arg.slice("--agent-home=".length);
+    }
+  }
+  return null;
+}
+
+function firstCommand(argv) {
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (VALUE_FLAGS.has(arg)) {
+      index += 1;
+      continue;
+    }
+    if (arg.startsWith("-")) {
+      continue;
+    }
+    return arg;
+  }
+  return null;
+}
+
+function accountHome() {
+  try {
+    // The native CLI ignores HOME for its default skill homes; match it.
+    return userInfo().homedir;
+  } catch {
+    return homedir();
+  }
+}
+
+function forgeSkillInstalled(argv) {
+  const home = explicitAgentHome(argv) ?? accountHome();
+  return FORGE_SKILL_PATHS.some((parts) => existsSync(join(home, ...parts)));
+}
+
+function reportsFirstRunHint(argv) {
+  if (argv.some((arg) => QUIET_COMMANDS.has(arg))) {
+    return false;
+  }
+  const command = firstCommand(argv);
+  if (command === null || QUIET_COMMANDS.has(command)) {
+    return false;
+  }
+  return !forgeSkillInstalled(argv);
+}
+
 function readJson(path, label) {
   let bytes;
   try {
@@ -198,7 +287,13 @@ if (
   refuse("native payload is not a Darwin arm64 Mach-O binary");
 }
 
-const child = spawn(payloadPath, process.argv.slice(2), { stdio: "inherit" });
+const argv = process.argv.slice(2);
+if (reportsFirstRunHint(argv)) {
+  warn(
+    "the Forge skill is not installed; run `aegis skills install` to install it for Claude and Codex.",
+  );
+}
+const child = spawn(payloadPath, argv, { stdio: "inherit" });
 const forwarders = new Map();
 for (const signal of FORWARDED_SIGNALS) {
   const handler = () => {
@@ -222,11 +317,9 @@ child.on("exit", (code, signal) => {
     for (const name of FORWARDED_SIGNALS) {
       process.removeAllListeners(name);
     }
-    try {
-      process.kill(process.pid, signal);
-    } catch {
-      // Fall through to the conventional 128+signal status below.
-    }
+    // Report the payload's fatal signal as a conventional exit status. Do not
+    // re-raise it: the wrapper must not die by a second core-dump signal, which
+    // is what a terminal sees as the foreground job (and its shell) crashing.
     process.exitCode = 128 + (SIGNAL_NUMBERS[signal] ?? 0);
     return;
   }

package/package.json

@@ -28,7 +28,7 @@
   "license": "Apache-2.0",
   "name": "@mithran-hq/aegis",
   "optionalDependencies": {
-    "@mithran-hq/aegis-darwin-arm64": "0.9.7"
+    "@mithran-hq/aegis-darwin-arm64": "0.9.10"
   },
   "os": [
     "darwin"
@@ -37,8 +37,5 @@
     "type": "git",
     "url": "git+https://github.com/mithran-hq/aegis.git"
   },
-  "scripts": {
-    "postinstall": "node aegis.mjs skills install --npm-postinstall"
-  },
-  "version": "0.9.7"
+  "version": "0.9.10"
 }