create-egregore 0.19.17 → 0.19.18

package/assets/egregore-launcher.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// egregore-launcher-version: 0.19.17
+// egregore-launcher-version: 0.19.18
 //
 // egregore — launch and browse Egregore instances from your terminal.
 // Installed by create-egregore. Reads ~/.egregore/instances.json.
@@ -33,7 +33,7 @@ const crypto = require("node:crypto");
 const { spawnSync, spawn } = require("node:child_process");
 const readline = require("node:readline");
 
-const VERSION = "0.19.17";
+const VERSION = "0.19.18";
 const REGISTRY = path.join(os.homedir(), ".egregore", "instances.json");
 const DEFAULT_FILE = path.join(os.homedir(), ".egregore", "default");
 const UPDATE_CACHE_FILE = path.join(os.homedir(), ".egregore", "update-check.json");
@@ -1211,6 +1211,19 @@ function writeJsonFileAtomic(file, value) {
   atomicWrite(file, JSON.stringify(value, null, 2) + "\n", 0o644);
 }
 
+function normalizeClaudeRegistryDenyRule(instancePath) {
+  const stale = "Write(~/.egregore/instances.json)";
+  const supported = "Edit(~/.egregore/instances.json)";
+  for (const relative of [".claude/settings.json", ".claude/settings.local.json"]) {
+    const file = path.join(instancePath, relative);
+    const settings = readJsonFile(file);
+    const deny = settings?.permissions?.deny;
+    if (!Array.isArray(deny) || !deny.includes(stale)) continue;
+    settings.permissions.deny = [...new Set(deny.map((rule) => rule === stale ? supported : rule))];
+    writeJsonFileAtomic(file, settings);
+  }
+}
+
 function writeEnvValueAtomic(file, key, value) {
   const lines = fs.existsSync(file)
     ? fs.readFileSync(file, "utf-8").split(/\r?\n/)
@@ -1439,6 +1452,7 @@ async function cmdConnect(args) {
     api_url: claim.data.api_url,
   });
   writeEnvValueAtomic(envFile, "EGREGORE_API_KEY", claim.data.api_key);
+  normalizeClaudeRegistryDenyRule(inst.path);
   persistConnectState(inst, {
     status: "backfilling",
     activation_protocol: claim.data.activation_protocol,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-egregore",
-  "version": "0.19.17",
+  "version": "0.19.18",
   "description": "Set up Egregore for your team in one command — installs the egregore launcher and your choice of Claude Code, Codex, or Pi.",
   "license": "MIT",
   "bin": {

package/runtime/codex/.codex/config.toml

@@ -2,6 +2,8 @@
 hooks = true
 
 [tui]
+# Codex currently accepts built-in footer item IDs only. Egregore's dynamic
+# ◆ CONNECTED / ◇ LOCAL identity is rendered by bin/codex-session-start.sh.
 status_line = [
   "model-with-reasoning",
   "git-branch",

package/runtime/codex/bin/codex-session-start.sh

@@ -57,6 +57,7 @@ fi
 
 LOCAL_MODE="false"
 [ "$(_detect_mode)" = "local" ] && LOCAL_MODE="true"
+MODE_BADGE="$(_runtime_mode_badge)"
 
 if [ "$LOCAL_MODE" != "true" ]; then
   if [ -f "$ENV_FILE" ] && grep -q '^EGREGORE_API_KEY=.' "$ENV_FILE" 2>/dev/null; then
@@ -133,7 +134,7 @@ EOF
 render_card() {
   local separator identity_left identity_right line_width pad footer_left footer_right board_url has_failure failed_services
   separator="  ..................................................................."
-  identity_left="  ${GITHUB_ORG:-$ORG_NAME}/${REPO_NAME}"
+  identity_left="  ${GITHUB_ORG:-$ORG_NAME}/${REPO_NAME} · ${MODE_BADGE}"
   identity_right="${DISPLAY_NAME} · ${BRANCH:-?}"
   line_width=67
   pad=$((line_width - ${#identity_left} - ${#identity_right}))

package/runtime/codex/bin/lib/config.sh

@@ -59,13 +59,22 @@ _get_base_branch() {
 # Detect local vs connected mode
 _detect_mode() {
   local config="${CONFIG:-$SCRIPT_DIR/egregore.json}"
-  local mode
-  mode=$(jq -r '.mode // empty' "$config" 2>/dev/null || true)
-  local api_url
-  api_url=$(jq -r '.api_url // empty' "$config" 2>/dev/null || true)
-  if [ "$mode" = "local" ] || [ -z "$api_url" ]; then
+  if [ -f "$config" ] && jq -e \
+    '(.mode // "") != "local" and ((.api_url // "") | length > 0)' \
+    "$config" >/dev/null 2>&1; then
+    echo "connected"
+  else
     echo "local"
+  fi
+}
+
+# Compact runtime identity shared by terminal surfaces. The sigils deliberately
+# distinguish an active hosted connection from the self-contained local mode
+# without implying that local Egregore is unhealthy.
+_runtime_mode_badge() {
+  if [ "$(_detect_mode)" = "connected" ]; then
+    echo "◆ CONNECTED"
   else
-    echo "connected"
+    echo "◇ LOCAL"
   fi
 }

package/runtime/pi/.codex/config.toml

@@ -2,6 +2,8 @@
 hooks = true
 
 [tui]
+# Codex currently accepts built-in footer item IDs only. Egregore's dynamic
+# ◆ CONNECTED / ◇ LOCAL identity is rendered by bin/codex-session-start.sh.
 status_line = [
   "model-with-reasoning",
   "git-branch",

package/runtime/pi/bin/codex-session-start.sh

@@ -57,6 +57,7 @@ fi
 
 LOCAL_MODE="false"
 [ "$(_detect_mode)" = "local" ] && LOCAL_MODE="true"
+MODE_BADGE="$(_runtime_mode_badge)"
 
 if [ "$LOCAL_MODE" != "true" ]; then
   if [ -f "$ENV_FILE" ] && grep -q '^EGREGORE_API_KEY=.' "$ENV_FILE" 2>/dev/null; then
@@ -133,7 +134,7 @@ EOF
 render_card() {
   local separator identity_left identity_right line_width pad footer_left footer_right board_url has_failure failed_services
   separator="  ..................................................................."
-  identity_left="  ${GITHUB_ORG:-$ORG_NAME}/${REPO_NAME}"
+  identity_left="  ${GITHUB_ORG:-$ORG_NAME}/${REPO_NAME} · ${MODE_BADGE}"
   identity_right="${DISPLAY_NAME} · ${BRANCH:-?}"
   line_width=67
   pad=$((line_width - ${#identity_left} - ${#identity_right}))

package/runtime/pi/bin/lib/config.sh

@@ -59,13 +59,22 @@ _get_base_branch() {
 # Detect local vs connected mode
 _detect_mode() {
   local config="${CONFIG:-$SCRIPT_DIR/egregore.json}"
-  local mode
-  mode=$(jq -r '.mode // empty' "$config" 2>/dev/null || true)
-  local api_url
-  api_url=$(jq -r '.api_url // empty' "$config" 2>/dev/null || true)
-  if [ "$mode" = "local" ] || [ -z "$api_url" ]; then
+  if [ -f "$config" ] && jq -e \
+    '(.mode // "") != "local" and ((.api_url // "") | length > 0)' \
+    "$config" >/dev/null 2>&1; then
+    echo "connected"
+  else
     echo "local"
+  fi
+}
+
+# Compact runtime identity shared by terminal surfaces. The sigils deliberately
+# distinguish an active hosted connection from the self-contained local mode
+# without implying that local Egregore is unhealthy.
+_runtime_mode_badge() {
+  if [ "$(_detect_mode)" = "connected" ]; then
+    echo "◆ CONNECTED"
   else
-    echo "connected"
+    echo "◇ LOCAL"
   fi
 }