auriga-cli 1.18.5 → 1.20.0

package/dist/utils.d.ts

@@ -13,6 +13,7 @@ export interface PluginDef {
     package: string;
     description: string;
     marketplace?: MarketplaceRef;
+    defaultOn?: boolean;
 }
 export interface PluginsConfig {
     plugins: PluginDef[];

package/dist/workflow.js

@@ -34,11 +34,39 @@ export async function installWorkflow(packageRoot, opts) {
     const sourceClaude = path.join(packageRoot, langOpt.file);
     const targetClaude = path.join(resolved, "CLAUDE.md");
     const targetAgents = path.join(resolved, "AGENTS.md");
-    // Copy CLAUDE.md
+    // Back up an existing CLAUDE.md before overwriting, but never clobber
+    // a prior .bak.
+    //
+    // Two regressions to defend against:
+    // 1. F1 (v1.19.0 Slice 0): re-install is the update path now, so a
+    //    second install must not overwrite the user's pre-auriga .bak with
+    //    our previous workflow version.
+    // 2. Codex adversarial review: if the user later replaces an
+    //    auriga-managed CLAUDE.md with foreign content (hand-paste, manual
+    //    edits, etc.) and re-runs install, the foreign content must NOT
+    //    be silently overwritten just because .bak already exists.
+    //
+    // Strategy: only consider the file "safe to overwrite without backup"
+    // when its bytes match the packaged source (i.e. it's the workflow we
+    // installed last time, untouched). Otherwise capture it — to .bak when
+    // free, else to a timestamped slot so .bak stays canonical.
     if (fs.existsSync(targetClaude)) {
-        const bakPath = targetClaude + ".bak";
-        fs.copyFileSync(targetClaude, bakPath);
-        log.warn(`Existing CLAUDE.md backed up to CLAUDE.md.bak`);
+        const currentBytes = fs.readFileSync(targetClaude);
+        const sourceBytes = fs.readFileSync(sourceClaude);
+        const diverged = !currentBytes.equals(sourceBytes);
+        if (diverged) {
+            const bakPath = targetClaude + ".bak";
+            if (fs.existsSync(bakPath)) {
+                const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+                const stampedPath = `${bakPath}.${stamp}`;
+                fs.copyFileSync(targetClaude, stampedPath);
+                log.warn(`CLAUDE.md.bak already exists; current CLAUDE.md backed up to ${path.basename(stampedPath)}`);
+            }
+            else {
+                fs.copyFileSync(targetClaude, bakPath);
+                log.warn(`Existing CLAUDE.md backed up to CLAUDE.md.bak`);
+            }
+        }
     }
     fs.copyFileSync(sourceClaude, targetClaude);
     log.ok(`CLAUDE.md copied (${langOpt.label})`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auriga-cli",
-  "version": "1.18.5",
+  "version": "1.20.0",
   "description": "Interactive CLI to install Claude Code harness modules (Workflow, Skills, Recommended Skills, Plugins, Hooks)",
   "license": "MIT",
   "repository": {
@@ -25,8 +25,8 @@
     "dev": "tsc --watch",
     "start": "node dist/cli.js",
     "pretest": "npm run build",
-    "test": "tsc -p tsconfig.test.json && DEV=1 node --test --experimental-test-module-mocks dist-test/tests/hooks.test.js dist-test/tests/hooks-uninstall.test.js dist-test/tests/skills.test.js dist-test/tests/skills-uninstall.test.js dist-test/tests/catalog.test.js dist-test/tests/cli-parse.test.js dist-test/tests/install-nontty.test.js dist-test/tests/plugins.test.js dist-test/tests/plugins-uninstall.test.js dist-test/tests/content-fetch.test.js dist-test/tests/utils.test.js dist-test/tests/guide.test.js dist-test/tests/validators.test.js dist-test/tests/entrypoint.test.js dist-test/tests/state.test.js dist-test/tests/server.test.js dist-test/tests/server-auth.test.js dist-test/tests/server-apply.test.js dist-test/tests/apply-handlers.test.js dist-test/tests/ui-fetch.test.js dist-test/tests/workflow-uninstall.test.js dist-test/tests/tarball-shape.test.js",
-    "test:watch": "tsc -p tsconfig.test.json --watch & node --test --watch --experimental-test-module-mocks dist-test/tests/hooks.test.js dist-test/tests/hooks-uninstall.test.js dist-test/tests/skills.test.js dist-test/tests/skills-uninstall.test.js dist-test/tests/catalog.test.js dist-test/tests/cli-parse.test.js dist-test/tests/install-nontty.test.js dist-test/tests/plugins.test.js dist-test/tests/plugins-uninstall.test.js dist-test/tests/content-fetch.test.js dist-test/tests/utils.test.js dist-test/tests/guide.test.js dist-test/tests/validators.test.js dist-test/tests/entrypoint.test.js dist-test/tests/state.test.js dist-test/tests/server.test.js dist-test/tests/server-auth.test.js dist-test/tests/server-apply.test.js dist-test/tests/apply-handlers.test.js dist-test/tests/ui-fetch.test.js dist-test/tests/workflow-uninstall.test.js dist-test/tests/tarball-shape.test.js",
+    "test": "tsc -p tsconfig.test.json && DEV=1 node --test --experimental-test-module-mocks dist-test/tests/hooks.test.js dist-test/tests/hooks-uninstall.test.js dist-test/tests/skills.test.js dist-test/tests/skills-uninstall.test.js dist-test/tests/catalog.test.js dist-test/tests/cli-parse.test.js dist-test/tests/install-nontty.test.js dist-test/tests/plugins.test.js dist-test/tests/plugins-uninstall.test.js dist-test/tests/content-fetch.test.js dist-test/tests/utils.test.js dist-test/tests/guide.test.js dist-test/tests/validators.test.js dist-test/tests/entrypoint.test.js dist-test/tests/state.test.js dist-test/tests/server.test.js dist-test/tests/server-auth.test.js dist-test/tests/server-apply.test.js dist-test/tests/apply-handlers.test.js dist-test/tests/ui-fetch.test.js dist-test/tests/workflow-install.test.js dist-test/tests/workflow-uninstall.test.js dist-test/tests/tarball-shape.test.js",
+    "test:watch": "tsc -p tsconfig.test.json --watch & node --test --watch --experimental-test-module-mocks dist-test/tests/hooks.test.js dist-test/tests/hooks-uninstall.test.js dist-test/tests/skills.test.js dist-test/tests/skills-uninstall.test.js dist-test/tests/catalog.test.js dist-test/tests/cli-parse.test.js dist-test/tests/install-nontty.test.js dist-test/tests/plugins.test.js dist-test/tests/plugins-uninstall.test.js dist-test/tests/content-fetch.test.js dist-test/tests/utils.test.js dist-test/tests/guide.test.js dist-test/tests/validators.test.js dist-test/tests/entrypoint.test.js dist-test/tests/state.test.js dist-test/tests/server.test.js dist-test/tests/server-auth.test.js dist-test/tests/server-apply.test.js dist-test/tests/apply-handlers.test.js dist-test/tests/ui-fetch.test.js dist-test/tests/workflow-install.test.js dist-test/tests/workflow-uninstall.test.js dist-test/tests/tarball-shape.test.js",
     "pretest:e2e": "npm run build",
     "test:e2e": "tsc -p tsconfig.test.json && node --test dist-test/tests/e2e-install.test.js",
     "pretest:web-ui-e2e": "npm run build && npm --prefix ui ci && npm --prefix ui run build",