@technomoron/agent-run 0.99.28 → 0.99.30

package/examples/basic-config/agent-config/starter/basic-project/overrides/claude-settings.json.njk

@@ -3,6 +3,7 @@
     "AGENT_DIR": {{ agentDir | dump }},
     "AGENT_PROFILE_DIR": {{ profileDir | dump }},
     "AGENT_RUN_PROJECT_ROOT": {{ projectRoot | dump }},
+    "AGENT_PROJECT_MEMORY_DIR": {{ paths.projectMemoryDir | dump }},
     "AGENT_GLOBAL_MEMORY_DIR": {{ paths.globalMemoryDir | dump }},
     "STARTER_PROFILE": {{ profile | dump }},
     "STARTER_OVERRIDE": "true"
@@ -16,6 +17,7 @@
     "AGENT_DIR": {{ agentDir | dump }},
     "AGENT_PROFILE_DIR": {{ profileDir | dump }},
     "AGENT_RUN_PROJECT_ROOT": {{ projectRoot | dump }},
+    "AGENT_PROJECT_MEMORY_DIR": {{ paths.projectMemoryDir | dump }},
     "AGENT_GLOBAL_MEMORY_DIR": {{ paths.globalMemoryDir | dump }},
     "STARTER_PROFILE": {{ profile | dump }},
     "STARTER_OVERRIDE": "true"

package/examples/basic-config/agent-config/starter/basic-project/overrides/codex-config.toml.njk

@@ -7,6 +7,7 @@ sandbox_mode = "workspace-write"
 writable_roots = [
   {{ projectRoot | dump }},
   {{ paths.reviewDir | dump }},
-  {{ paths.memoriesDir | dump }}
+  {{ paths.memoriesDir | dump }},
+  {{ paths.projectMemoryDir | dump }}
 ]
 network_access = false

package/ops/systemd/ai-tools-update.service

@@ -13,4 +13,4 @@ Environment=XDG_CONFIG_HOME=/root/.config
 Environment=NPM_CONFIG_PREFIX=/usr/local
 Environment=PNPM_HOME=/usr/local
 Environment=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
-ExecStart=/usr/local/lib/agent-run/update-ai-tools.sh
+ExecStart=/usr/local/libexec/agent-run/update-ai-tools

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@technomoron/agent-run",
-  "version": "0.99.28",
+  "version": "0.99.30",
   "packageManager": "pnpm@10.28.1",
   "bin": {
     "agent-run": "dist/agent-run.js"

package/scripts/install-systemd-jobs.sh

@@ -19,10 +19,20 @@ USAGE
 }
 
 ROOT="$(cd "$(dirname "$0")/.." && pwd)"
-INSTALL_LIB_DIR="${INSTALL_LIB_DIR:-/usr/local/lib/agent-run}"
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+INSTALL_LIBEXEC_DIR="${INSTALL_LIBEXEC_DIR:-${INSTALL_LIB_DIR:-/usr/local/libexec/agent-run}}"
 SYSTEMD_DIR="${SYSTEMD_DIR:-/etc/systemd/system}"
 ORIGINAL_ARGS=("$@")
 
+UPDATE_SCRIPT="$ROOT/scripts/update-ai-tools.sh"
+SERVICE_FILE="$ROOT/ops/systemd/ai-tools-update.service"
+TIMER_FILE="$ROOT/ops/systemd/ai-tools-update.timer"
+if [ ! -f "$UPDATE_SCRIPT" ]; then
+	UPDATE_SCRIPT="$SCRIPT_DIR/update-ai-tools.sh"
+	SERVICE_FILE="$SCRIPT_DIR/ai-tools-update.service"
+	TIMER_FILE="$SCRIPT_DIR/ai-tools-update.timer"
+fi
+
 INSTALL_AI_TOOLS=0
 DRY_RUN=0
 
@@ -71,10 +81,10 @@ run() {
 	"$@"
 }
 
-run install -d -m 0755 "$INSTALL_LIB_DIR" "$SYSTEMD_DIR"
-run install -m 0755 "$ROOT/scripts/update-ai-tools.sh" "$INSTALL_LIB_DIR/update-ai-tools.sh"
-run install -m 0644 "$ROOT/ops/systemd/ai-tools-update.service" "$SYSTEMD_DIR/ai-tools-update.service"
-run install -m 0644 "$ROOT/ops/systemd/ai-tools-update.timer" "$SYSTEMD_DIR/ai-tools-update.timer"
+run install -d -m 0755 "$INSTALL_LIBEXEC_DIR" "$SYSTEMD_DIR"
+run install -m 0755 "$UPDATE_SCRIPT" "$INSTALL_LIBEXEC_DIR/update-ai-tools"
+run install -m 0644 "$SERVICE_FILE" "$SYSTEMD_DIR/ai-tools-update.service"
+run install -m 0644 "$TIMER_FILE" "$SYSTEMD_DIR/ai-tools-update.timer"
 
 if [ "$INSTALL_AI_TOOLS" -eq 1 ]; then
 	run systemctl daemon-reload

package/scripts/update-ai-tools.sh

@@ -1,38 +1,49 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-export HOME="${HOME:-/root}"
-export NPM_CONFIG_PREFIX="${NPM_CONFIG_PREFIX:-/usr/local}"
-export PNPM_HOME="${PNPM_HOME:-/usr/local}"
-export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:${PATH:-}"
+export HOME=/root
+export NPM_CONFIG_PREFIX=/usr/local
+export PNPM_HOME=/usr/local
+export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 
-NPM_BIN="${AI_TOOLS_NPM_BIN:-/usr/local/bin/npm}"
-APT_GET_BIN="${AI_TOOLS_APT_GET_BIN:-/usr/bin/apt-get}"
+NPM_BIN=/usr/local/bin/npm
+NODE_BIN=/usr/local/bin/node
+PNPM_BIN=/usr/local/bin/pnpm
+APT_GET_BIN=/usr/bin/apt-get
 
-AI_TOOLS_NPM_PACKAGES="${AI_TOOLS_NPM_PACKAGES:-npm@latest pnpm@latest corepack@latest fallow@latest ripgrep@latest pm2@latest tsx@latest typescript@latest @openai/codex@latest @anthropic-ai/claude-code@latest @technomoron/agent-run@latest}"
-AI_TOOLS_PNPM_PACKAGE="${AI_TOOLS_PNPM_PACKAGE:-pnpm@latest}"
 AI_TOOLS_APT_PACKAGES="${AI_TOOLS_APT_PACKAGES:-gh}"
 
+packages=(
+	npm@latest corepack@latest fallow@latest ripgrep@latest
+	pm2@latest tsx@latest typescript@latest @openai/codex@latest
+	@anthropic-ai/claude-code@latest @google/gemini-cli@latest
+	@xai-official/grok@latest @technomoron/agent-run@latest
+)
+
 if [ "$(id -u)" -ne 0 ]; then
 	echo "update-ai-tools.sh must run as root" >&2
 	exit 1
 fi
 
-if [ -n "$AI_TOOLS_NPM_PACKAGES" ]; then
-	read -r -a npm_packages <<<"$AI_TOOLS_NPM_PACKAGES"
-	"$NPM_BIN" install -g --force "${npm_packages[@]}"
+if [ "$("$NPM_BIN" prefix -g)" != /usr/local ] || [ "$("$NPM_BIN" root -g)" != /usr/local/lib/node_modules ]; then
+	echo "npm global tooling must use /usr/local" >&2
+	exit 1
 fi
 
+"$NPM_BIN" install -g --force "${packages[@]}"
+
 # corepack and pnpm both own the pnpm/pnpx shims; install pnpm last so npm's
 # current pnpm package remains the command users execute.
-if [ -n "$AI_TOOLS_PNPM_PACKAGE" ]; then
-	read -r -a pnpm_packages <<<"$AI_TOOLS_PNPM_PACKAGE"
-	"$NPM_BIN" install -g --force "${pnpm_packages[@]}"
-fi
+"$NPM_BIN" install -g --force pnpm@latest
+
+install -d -o root -g root -m 0755 /usr/local/share/pnpm/global /usr/local/share/pnpm/store /usr/local/bin
+"$PNPM_BIN" config set --global global-dir /usr/local/share/pnpm/global
+"$PNPM_BIN" config set --global global-bin-dir /usr/local/bin
+"$PNPM_BIN" config set --global store-dir /usr/local/share/pnpm/store
 
 CLAUDE_INSTALL="$("$NPM_BIN" root -g)/@anthropic-ai/claude-code/install.cjs"
 if [ -f "$CLAUDE_INSTALL" ]; then
-	/usr/local/bin/node "$CLAUDE_INSTALL"
+	"$NODE_BIN" "$CLAUDE_INSTALL"
 fi
 
 if [ -n "$AI_TOOLS_APT_PACKAGES" ] && command -v "$APT_GET_BIN" >/dev/null 2>&1; then

package/dist/tools.js

@@ -1,119 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.runCodex = runCodex;
-exports.runClaude = runClaude;
-exports.getDangerArgs = getDangerArgs;
-exports.getPermissionArgs = getPermissionArgs;
-const fs = require("fs");
-const path = require("path");
-const process_1 = require("./process");
-const project_1 = require("./project");
-function runCodex(realBinary, permissionArgs, context, args, wrapperArgs) {
-    const liveDir = context.paths.liveDir;
-    const codexHomeDir = context.paths.codexHomeDir;
-    const projectRoot = context.projectRoot;
-    if (!fs.existsSync(path.join(codexHomeDir, 'AGENTS.md'))) {
-        failMissingConfig('codex', context.profileDir);
-    }
-    const realPath = process.env.AGENT_RUN_REAL_PATH ?? process.env.PATH ?? '';
-    fs.mkdirSync(codexHomeDir, { recursive: true });
-    const env = {
-        ...process.env,
-        CODEX_HOME: codexHomeDir,
-        AGENT_DIR: liveDir,
-        AGENT_PROFILE_DIR: context.profileDir,
-        AGENT_RUN_PROJECT_ROOT: projectRoot,
-        AGENT_RUN_REAL_PATH: realPath,
-        PATH: `${path.join(liveDir, 'bin')}${path.delimiter}${realPath}`
-    };
-    const runtimeArgs = wrapperArgs.sandboxMode === 'danger' ? getDangerArgs('codex') : ['-a', 'on-request', '-s', 'workspace-write'];
-    (0, process_1.execCommand)(realBinary, [
-        ...permissionArgs,
-        ...runtimeArgs,
-        '-C',
-        projectRoot,
-        ...(wrapperArgs.sandboxMode !== 'danger' && wrapperArgs.codexNetwork
-            ? ['--config', 'sandbox_workspace_write.network_access=true']
-            : []),
-        ...args
-    ], env, codexHomeDir, (code) => postflightProjectCheck(context, wrapperArgs.local, code));
-}
-function runClaude(realBinary, permissionArgs, context, args, wrapperArgs) {
-    const liveDir = context.paths.liveDir;
-    const claudePath = path.join(liveDir, 'CLAUDE.md');
-    if (!fs.existsSync(claudePath)) {
-        failMissingConfig('claude', context.profileDir);
-    }
-    const claudeConfigDir = path.join(liveDir, '.claude');
-    const realPath = process.env.AGENT_RUN_REAL_PATH ?? process.env.PATH ?? '';
-    const env = {
-        ...process.env,
-        AGENT_DIR: liveDir,
-        AGENT_PROFILE_DIR: context.profileDir,
-        AGENT_RUN_PROJECT_ROOT: context.projectRoot,
-        AGENT_RUN_REAL_PATH: realPath,
-        PATH: `${path.join(liveDir, 'bin')}${path.delimiter}${realPath}`
-    };
-    const runtimeArgs = wrapperArgs.sandboxMode === 'danger' ? getDangerArgs('claude') : permissionArgs;
-    (0, process_1.execCommand)(realBinary, [
-        ...runtimeArgs,
-        '--append-system-prompt-file',
-        claudePath,
-        '--settings',
-        path.join(claudeConfigDir, 'agent-run-settings.json'),
-        '--plugin-dir',
-        claudeConfigDir,
-        ...args
-    ], env, context.projectRoot, (code) => postflightProjectCheck(context, wrapperArgs.local, code));
-}
-function postflightProjectCheck(context, allowLocal, code) {
-    if (!context.guardrails.forbidRepoAiFiles) {
-        return code;
-    }
-    if (!allowLocal) {
-        removeClaudeLocalSettings(context.projectRoot);
-    }
-    const localAiFiles = (0, project_1.findLocalAiFiles)(context.projectRoot, context.profileDir);
-    if (localAiFiles.length === 0) {
-        return code;
-    }
-    (0, project_1.warnForLocalAiFiles)(null, context.projectRoot, localAiFiles);
-    return allowLocal ? code : 1;
-}
-function removeClaudeLocalSettings(projectRoot) {
-    const claudeDir = path.join(projectRoot, '.claude');
-    const localSettingsPath = path.join(claudeDir, 'settings.local.json');
-    if (!fs.existsSync(localSettingsPath)) {
-        return;
-    }
-    fs.rmSync(localSettingsPath);
-    try {
-        fs.rmdirSync(claudeDir);
-    }
-    catch (error) {
-        if (!isDirectoryNotEmptyError(error)) {
-            throw error;
-        }
-    }
-    process.stderr.write(`agent-run: removed Claude's project-local settings: ${localSettingsPath}\n`);
-}
-function isDirectoryNotEmptyError(error) {
-    return error instanceof Error && 'code' in error && error.code === 'ENOTEMPTY';
-}
-function failMissingConfig(tool, agentDir) {
-    process.stderr.write(`agent-run: no ${tool} config found for this project: ${agentDir}\n`);
-    process.stderr.write(`agent-run: run \`agent-run ${tool} --none\` to bypass agent setup, or \`agent-run ${tool} --create\` to create profile files.\n`);
-    process.exit(1);
-}
-function getDangerArgs(tool) {
-    return tool === 'codex' ? ['-a', 'never', '-s', 'danger-full-access'] : ['--dangerously-skip-permissions'];
-}
-function getPermissionArgs(tool) {
-    if (process.env.AGENT_WRAPPER_FORCE_PERMISSIVE !== '1') {
-        return [];
-    }
-    if (tool === 'claude' && typeof process.getuid === 'function' && process.getuid() !== 0) {
-        return ['--permission-mode', 'bypassPermissions'];
-    }
-    return [];
-}