@technomoron/agent-run 0.99.41 → 0.99.43

package/CHANGES

@@ -1,6 +1,19 @@
 CHANGES
 =======
 
+Version 0.99.43 (2026-09-25)
+----------------------------
+* Report startup errors without a stack trace and include file ownership and
+  permissions guidance when access is denied.
+
+Version 0.99.42 (2026-09-25)
+----------------------------
+* Apply repository AI-file checks only to project scopes and actual repositories.
+  Default-scope launches from a home directory no longer scan protected Windows
+  folders or treat personal Codex and Claude settings as repository files.
+* Skip the startup scan when the repository AI-file guard is disabled, and
+  preserve personal Claude settings during default-scope postflight checks.
+
 Version 0.99.41 (2026-09-25)
 ----------------------------
 * Use a shared Codex home with native named profiles, keeping project

package/dist/checks.js

@@ -25,7 +25,7 @@ function checkProject(projectRoot) {
         return findings;
     }
     const agentDir = (0, project_1.resolveAgentDir)(projectRoot);
-    if (profileForbidsLocalAiFiles(projectRoot, agentDir, profileResult.profile)) {
+    if ((0, project_1.hasProjectFileScope)(projectRoot, profileResult.profile) && profileForbidsLocalAiFiles(projectRoot, agentDir, profileResult.profile)) {
         for (const file of (0, project_1.findLocalAiFiles)(projectRoot, agentDir)) {
             findings.push({ message: `local AI file in project: ${file}`, severity: 'ERROR' });
         }

package/dist/commands.js

@@ -15,12 +15,18 @@ const renderer_1 = require("./renderer");
 const spawn_agent_1 = require("./runtime/spawn-agent");
 const utils_1 = require("./utils");
 function main(invokedTool, argv) {
-    dispatch((0, cli_1.parseInvocation)(invokedTool, argv));
+    try {
+        dispatch((0, cli_1.parseInvocation)(invokedTool, argv));
+    }
+    catch (error) {
+        process.stderr.write(`agent-run: ${(0, utils_1.formatError)(error)}\n`);
+        process.exitCode = 1;
+    }
 }
 function dispatch(command) {
     switch (command.command) {
         case 'compress':
-            void runCompress(command).catch((error) => { process.stderr.write(`agent-run: ${error instanceof Error ? error.message : String(error)}\n`); process.exitCode = 1; });
+            void runCompress(command).catch((error) => { process.stderr.write(`agent-run: ${(0, utils_1.formatError)(error)}\n`); process.exitCode = 1; });
             return;
         case 'mcp':
         case 'create':
@@ -187,8 +193,10 @@ function requireProfile(tool, agentDir) {
     process.exit(1);
 }
 function checkLocalAiFiles(command, projectRoot, agentDir, context, allowLocal) {
+    if (!context.guardrails.forbidRepoAiFiles || !(0, project_1.hasProjectFileScope)(projectRoot, context.profile))
+        return;
     const files = (0, project_1.findLocalAiFiles)(projectRoot, agentDir);
-    if (!context.guardrails.forbidRepoAiFiles || files.length === 0) {
+    if (files.length === 0) {
         return;
     }
     if (!allowLocal) {

package/dist/project.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveAgentDir = resolveAgentDir;
 exports.findLocalAiFiles = findLocalAiFiles;
 exports.findSourceRepos = findSourceRepos;
+exports.hasProjectFileScope = hasProjectFileScope;
 exports.isIgnoredDir = isIgnoredDir;
 exports.warnForLocalAiFiles = warnForLocalAiFiles;
 exports.failForLocalAiFiles = failForLocalAiFiles;
@@ -74,6 +75,11 @@ function findSourceRepos(rootPath) {
 function looksLikeRepoRoot(dir) {
     return fs.existsSync(path.join(dir, '.git')) || fs.existsSync(path.join(dir, 'package.json'));
 }
+function hasProjectFileScope(projectRoot, profile) {
+    // The default brain scope also serves home directories and other non-project
+    // folders. Personal tool configuration there is not repository-local state.
+    return profile !== 'default' || looksLikeRepoRoot(projectRoot);
+}
 function isIgnoredDir(dir) {
     if (fs.existsSync(path.join(dir, constants_1.IGNORE_FILE_NAME))) {
         return true;

package/dist/runtime/postflight.js

@@ -5,7 +5,7 @@ const fs = require("fs");
 const path = require("path");
 const project_1 = require("../project");
 function postflightProjectCheck(context, allowLocal, code) {
-    if (!context.guardrails.forbidRepoAiFiles) {
+    if (!context.guardrails.forbidRepoAiFiles || !(0, project_1.hasProjectFileScope)(context.projectRoot, context.profile)) {
         return code;
     }
     if (!allowLocal) {

package/dist/utils.js

@@ -35,6 +35,12 @@ function localDateString() {
     return `${year}-${month}-${day}`;
 }
 function formatError(error) {
+    if (error instanceof Error) {
+        const { code, path: filePath } = error;
+        if (code === 'EACCES' || code === 'EPERM') {
+            return `${error.message}\nCheck file ownership and permissions${filePath ? ` for ${filePath}` : ''} and its parent directories. Run agent-run as your normal user, not with sudo.`;
+        }
+    }
     return error instanceof Error ? error.message : String(error);
 }
 function verbose(message) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@technomoron/agent-run",
-  "version": "0.99.41",
+  "version": "0.99.43",
   "packageManager": "pnpm@10.34.5",
   "bin": {
     "agent-run": "dist/agent-run.js",