@technomoron/agent-run 0.99.24 → 0.99.26

package/CHANGES

@@ -1,6 +1,25 @@
 CHANGES
 =======
 
+Version 0.99.26 (2026-07-31)
+----------------------------
+* Add `--danger` support for Claude so unattended runs pass
+  `--dangerously-skip-permissions`.
+* Remove Claude's generated `.claude/settings.local.json` after guarded runs,
+  while preserving project-local settings when `--local` is used.
+* Keep nested command-guard tests independent of an outer agent-run session's
+  executable search path.
+
+Version 0.99.25 (2026-07-11)
+----------------------------
+* Add config-root `agent-run.defaults.jsonc` inheritance so project manifests
+  contain only overrides, with nested-object merging and array replacement.
+* Stop creating empty local templates and override directories, require an
+  explicit sparse profile marker for updates and tool runs, and keep `edit` as
+  the command that creates local instructions.
+* Split the TypeScript CLI into focused parsing, configuration, rendering,
+  project-discovery, checking, process, and tool-runtime modules.
+
 Version 0.99.24 (2026-07-11)
 ----------------------------
 * Allow failed tag releases to be retried through a manual workflow dispatch,

package/README.md

@@ -19,11 +19,12 @@ Example:
 ```text
 ~/source/
   agent-config/
+    agent-run.defaults.jsonc
     org/
       my-api/
         agent-run.jsonc
-        local.md.njk
-        overrides/
+        local.md.njk       # optional
+        overrides/         # optional
         live/
           CLAUDE.md
           .claude/
@@ -48,8 +49,9 @@ the agent config tree.
 
 ## File Roles
 
-- `agent-run.jsonc`: profile manifest
-- `local.md.njk`: source file you edit for project-specific instructions
+- `agent-run.defaults.jsonc`: config-root defaults shared by every profile
+- `agent-run.jsonc`: sparse profile manifest and profile-discovery marker
+- `local.md.njk`: optional project-specific instructions
 - `overrides/`: optional per-profile template overrides
 - `live/memories/codex-home/AGENTS.md`: generated Codex instructions
 - `live/memories/codex-home/config.toml`: generated Codex config
@@ -57,7 +59,30 @@ the agent config tree.
 - `live/CLAUDE.md`: generated Claude instructions
 - `live/.claude/`: generated Claude settings and local plugin skills
 
-Edit `local.md.njk` and `agent-run.jsonc`. `agent-run` keeps generated files in sync.
+Edit only the root defaults and profile overrides that differ. `agent-run` keeps
+generated files in sync.
+
+## Manifest Defaults
+
+Manifest values are resolved in this order:
+
+1. built-in defaults
+2. `<config-root>/agent-run.defaults.jsonc`
+3. `<config-root>/<profile>/agent-run.jsonc`
+
+Nested manifest objects are merged. Arrays such as `checks`, `agent.includes`,
+and `skills.install` replace the inherited array instead of being appended.
+The profile name is always inferred from project mapping; the root defaults file
+must not set `profile`.
+
+A profile with no differences from the root defaults needs only this marker:
+
+```json
+{}
+```
+
+`local.md.njk` and `overrides/` are not created unless they contain actual
+profile-specific configuration.
 
 ## Profile Resolution
 
@@ -129,9 +154,8 @@ Codex defaults to `-a on-request -s workspace-write`. `agent-run` sets
 `CODEX_HOME` under the private agent directory, where Codex discovers the
 generated `AGENTS.md`, `config.toml`, and skills natively. It starts Codex from
 that private directory, passes the project root with `-C`, and keeps generated
-guard shims on `PATH`. Use `--danger` explicitly for
-`-a never -s danger-full-access`; use `--network` to enable network access in
-the workspace-write sandbox.
+guard shims on `PATH`. Use `--network` to enable network access in the
+workspace-write sandbox.
 When `~/.codex/auth.json` exists, profile-specific Codex homes link their
 `auth.json` to that shared login cache so changing profiles does not require a
 new ChatGPT login.
@@ -140,7 +164,16 @@ Claude Code currently has no `--cd` equivalent. `agent-run` keeps Claude's
 process cwd at the project root, appends the generated `CLAUDE.md` with
 `--append-system-prompt-file`, passes generated settings with `--settings`, and
 loads generated skills from a local plugin with `--plugin-dir`. It does not
-replace the user's normal `CLAUDE_CONFIG_DIR`.
+replace the user's normal `CLAUDE_CONFIG_DIR`. If Claude writes remembered
+permissions to `.claude/settings.local.json`, `agent-run` removes that file
+after the session unless `--local` was used.
+
+`--danger` runs either tool unattended, with no approval prompts: Codex with
+`-a never -s danger-full-access`, Claude with `--dangerously-skip-permissions`.
+Only use it when the agent may change or delete anything it can reach. Claude
+refuses `--dangerously-skip-permissions` when it runs as root, so run it as a
+normal user. `--sandboxed` and `--network` stay Codex-only because Claude has no
+matching sandbox.
 
 By default, `agent-run codex` and `agent-run claude` fail when local AI files
 such as `AGENTS.md`, `CLAUDE.md`, `CLAUDE.local.md`, `.mcp.json`, `.agents`,
@@ -153,12 +186,9 @@ Initialize mapped files for the current repo:
 agent-run init
 ```
 
-This creates the mapped profile directory if needed and ensures these source
-files/directories exist:
-
-- `agent-run.jsonc`
-- `local.md.njk`
-- `overrides/`
+This creates `<config-root>/agent-run.defaults.jsonc` when needed and a minimal
+`agent-run.jsonc` marker for the mapped profile. It does not create empty local
+instruction or override files.
 
 Edit the source file for the current repo:
 
@@ -166,8 +196,8 @@ Edit the source file for the current repo:
 agent-run edit
 ```
 
-This creates missing files, syncs generated files, then opens `local.md.njk`
-in your editor.
+This creates `local.md.njk` when needed, syncs generated files, then opens it in
+your editor.
 
 Regenerate the generated files for the current repo:
 
@@ -175,6 +205,10 @@ Regenerate the generated files for the current repo:
 agent-run update
 ```
 
+`update` requires an existing profile marker or local/legacy instruction file;
+it does not silently scaffold an unconfigured project. Use `agent-run init` or
+the tool command's `--create` option first.
+
 Regenerate every profile under the config root without requiring matching code
 checkouts:
 
@@ -193,15 +227,15 @@ agent-run codex --generate
 agent-run claude --generate
 ```
 
-This reads `agent-run.jsonc` and Nunjucks templates from the mapped profile
-directory and rewrites generated files:
+This reads the root defaults, sparse profile manifest, and Nunjucks templates,
+then rewrites generated files:
 
-- `CLAUDE.md`
-- `memories/codex-home/AGENTS.md`
-- `memories/codex-home/config.toml`
-- `memories/codex-home/skills/**`
-- `.claude/**`
-- `bin/**`
+- `live/CLAUDE.md`
+- `live/memories/codex-home/AGENTS.md`
+- `live/memories/codex-home/config.toml`
+- `live/memories/codex-home/skills/**`
+- `live/.claude/**`
+- `live/bin/**`
 
 Per-profile override templates can be placed in:
 
@@ -211,10 +245,10 @@ Per-profile override templates can be placed in:
 ## Starter Config
 
 A complete starter lives in `examples/basic-config`. It includes a minimal
-project, `.agent-run.env`, a config root with global templates and snippets,
-profile-local templates, skill templates, a personal memory skill, profile
-skill overrides, tool config overrides, guardrails, checks, and generated
-runtime paths.
+project, `.agent-run.env`, root manifest defaults, global templates and
+snippets, profile-local templates, skill templates, a personal memory skill,
+profile skill overrides, tool config overrides, guardrails, checks, and
+generated runtime paths.
 
 To copy the packaged starter config root into your default config location:
 
@@ -264,11 +298,11 @@ Migrate an existing config tree to the manifest/template layout:
 agent-run migrate-config ~/.agent-config
 ```
 
-This preserves `AGENTS-MODS.md`, creates `local.md.njk`, `agent-run.jsonc`, and
-`overrides/` for legacy profiles, creates the `global/` templates, moves loose
-review files into `reviews/`, moves loose `memory*.md` files into `memories/`,
-and moves old Codex runtime files into `memories/codex-home` when doing so does
-not overwrite existing files.
+This preserves `AGENTS-MODS.md`, creates `local.md.njk` and a sparse
+`agent-run.jsonc` marker for legacy profiles, creates the root defaults and
+`global/` templates, moves loose review files into `reviews/`, moves loose
+`memory*.md` files into `memories/`, and moves old Codex runtime files into
+`live/memories/codex-home` without overwriting existing files.
 
 ## Systemd Jobs