create-egregore 0.19.17 → 0.19.19

package/assets/egregore-launcher.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// egregore-launcher-version: 0.19.17
+// egregore-launcher-version: 0.19.19
 //
 // egregore — launch and browse Egregore instances from your terminal.
 // Installed by create-egregore. Reads ~/.egregore/instances.json.
@@ -33,7 +33,7 @@ const crypto = require("node:crypto");
 const { spawnSync, spawn } = require("node:child_process");
 const readline = require("node:readline");
 
-const VERSION = "0.19.17";
+const VERSION = "0.19.19";
 const REGISTRY = path.join(os.homedir(), ".egregore", "instances.json");
 const DEFAULT_FILE = path.join(os.homedir(), ".egregore", "default");
 const UPDATE_CACHE_FILE = path.join(os.homedir(), ".egregore", "update-check.json");
@@ -42,7 +42,6 @@ const UPDATE_REGISTRY_URL =
   process.env.EGREGORE_UPDATE_REGISTRY_URL ||
   `https://registry.npmjs.org/${PUBLIC_NPX_PACKAGE}/latest`;
 const UPDATE_AVAILABLE_CACHE_TTL_MS = 6 * 60 * 60 * 1000;
-const UPDATE_CURRENT_CACHE_TTL_MS = 5 * 60 * 1000;
 const UPDATE_FAILURE_CACHE_TTL_MS = 5 * 60 * 1000;
 const UPDATE_CHECK_TIMEOUT_MS = 1500;
 const CONNECT_API_URL = (
@@ -1051,11 +1050,14 @@ function readUpdateCache() {
     const age = Date.now() - new Date(cache.checked_at).getTime();
     const cachedUpdate = cache.latest ? cliUpdateState(cache.latest) : null;
     if (cache.latest && !cachedUpdate) return null;
+    // A cached "current" result is never authoritative. Startup has already
+    // rendered by the time this check runs, so revalidate it in the background
+    // on every launch. Otherwise a release published seconds after a user opens
+    // Egregore stays invisible until the cache TTL expires.
+    if (cachedUpdate && !cachedUpdate.available) return null;
     const ttl = !cache.latest
       ? UPDATE_FAILURE_CACHE_TTL_MS
-      : cachedUpdate.available
-        ? UPDATE_AVAILABLE_CACHE_TTL_MS
-        : UPDATE_CURRENT_CACHE_TTL_MS;
+      : UPDATE_AVAILABLE_CACHE_TTL_MS;
     if (!Number.isFinite(age) || age < 0 || age > ttl) return null;
     if (!cache.latest) return { current: VERSION, latest: null, available: false };
     return cachedUpdate;
@@ -1211,6 +1213,19 @@ function writeJsonFileAtomic(file, value) {
   atomicWrite(file, JSON.stringify(value, null, 2) + "\n", 0o644);
 }
 
+function normalizeClaudeRegistryDenyRule(instancePath) {
+  const stale = "Write(~/.egregore/instances.json)";
+  const supported = "Edit(~/.egregore/instances.json)";
+  for (const relative of [".claude/settings.json", ".claude/settings.local.json"]) {
+    const file = path.join(instancePath, relative);
+    const settings = readJsonFile(file);
+    const deny = settings?.permissions?.deny;
+    if (!Array.isArray(deny) || !deny.includes(stale)) continue;
+    settings.permissions.deny = [...new Set(deny.map((rule) => rule === stale ? supported : rule))];
+    writeJsonFileAtomic(file, settings);
+  }
+}
+
 function writeEnvValueAtomic(file, key, value) {
   const lines = fs.existsSync(file)
     ? fs.readFileSync(file, "utf-8").split(/\r?\n/)
@@ -1439,6 +1454,7 @@ async function cmdConnect(args) {
     api_url: claim.data.api_url,
   });
   writeEnvValueAtomic(envFile, "EGREGORE_API_KEY", claim.data.api_key);
+  normalizeClaudeRegistryDenyRule(inst.path);
   persistConnectState(inst, {
     status: "backfilling",
     activation_protocol: claim.data.activation_protocol,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-egregore",
-  "version": "0.19.17",
+  "version": "0.19.19",
   "description": "Set up Egregore for your team in one command — installs the egregore launcher and your choice of Claude Code, Codex, or Pi.",
   "license": "MIT",
   "bin": {

package/runtime/codex/.codex/config.toml

@@ -2,6 +2,8 @@
 hooks = true
 
 [tui]
+# Codex currently accepts built-in footer item IDs only. Egregore's dynamic
+# ◆ CONNECTED / ◇ LOCAL identity is rendered by bin/codex-session-start.sh.
 status_line = [
   "model-with-reasoning",
   "git-branch",

package/runtime/codex/bin/codex-session-start.sh

@@ -57,6 +57,7 @@ fi
 
 LOCAL_MODE="false"
 [ "$(_detect_mode)" = "local" ] && LOCAL_MODE="true"
+MODE_BADGE="$(_runtime_mode_badge)"
 
 if [ "$LOCAL_MODE" != "true" ]; then
   if [ -f "$ENV_FILE" ] && grep -q '^EGREGORE_API_KEY=.' "$ENV_FILE" 2>/dev/null; then
@@ -133,7 +134,7 @@ EOF
 render_card() {
   local separator identity_left identity_right line_width pad footer_left footer_right board_url has_failure failed_services
   separator="  ..................................................................."
-  identity_left="  ${GITHUB_ORG:-$ORG_NAME}/${REPO_NAME}"
+  identity_left="  ${GITHUB_ORG:-$ORG_NAME}/${REPO_NAME} · ${MODE_BADGE}"
   identity_right="${DISPLAY_NAME} · ${BRANCH:-?}"
   line_width=67
   pad=$((line_width - ${#identity_left} - ${#identity_right}))

package/runtime/codex/bin/lib/config.sh

@@ -59,13 +59,22 @@ _get_base_branch() {
 # Detect local vs connected mode
 _detect_mode() {
   local config="${CONFIG:-$SCRIPT_DIR/egregore.json}"
-  local mode
-  mode=$(jq -r '.mode // empty' "$config" 2>/dev/null || true)
-  local api_url
-  api_url=$(jq -r '.api_url // empty' "$config" 2>/dev/null || true)
-  if [ "$mode" = "local" ] || [ -z "$api_url" ]; then
+  if [ -f "$config" ] && jq -e \
+    '(.mode // "") != "local" and ((.api_url // "") | length > 0)' \
+    "$config" >/dev/null 2>&1; then
+    echo "connected"
+  else
     echo "local"
+  fi
+}
+
+# Compact runtime identity shared by terminal surfaces. The sigils deliberately
+# distinguish an active hosted connection from the self-contained local mode
+# without implying that local Egregore is unhealthy.
+_runtime_mode_badge() {
+  if [ "$(_detect_mode)" = "connected" ]; then
+    echo "◆ CONNECTED"
   else
-    echo "connected"
+    echo "◇ LOCAL"
   fi
 }

package/runtime/pi/.codex/config.toml

@@ -2,6 +2,8 @@
 hooks = true
 
 [tui]
+# Codex currently accepts built-in footer item IDs only. Egregore's dynamic
+# ◆ CONNECTED / ◇ LOCAL identity is rendered by bin/codex-session-start.sh.
 status_line = [
   "model-with-reasoning",
   "git-branch",

package/runtime/pi/bin/codex-session-start.sh

@@ -57,6 +57,7 @@ fi
 
 LOCAL_MODE="false"
 [ "$(_detect_mode)" = "local" ] && LOCAL_MODE="true"
+MODE_BADGE="$(_runtime_mode_badge)"
 
 if [ "$LOCAL_MODE" != "true" ]; then
   if [ -f "$ENV_FILE" ] && grep -q '^EGREGORE_API_KEY=.' "$ENV_FILE" 2>/dev/null; then
@@ -133,7 +134,7 @@ EOF
 render_card() {
   local separator identity_left identity_right line_width pad footer_left footer_right board_url has_failure failed_services
   separator="  ..................................................................."
-  identity_left="  ${GITHUB_ORG:-$ORG_NAME}/${REPO_NAME}"
+  identity_left="  ${GITHUB_ORG:-$ORG_NAME}/${REPO_NAME} · ${MODE_BADGE}"
   identity_right="${DISPLAY_NAME} · ${BRANCH:-?}"
   line_width=67
   pad=$((line_width - ${#identity_left} - ${#identity_right}))

package/runtime/pi/bin/lib/config.sh

@@ -59,13 +59,22 @@ _get_base_branch() {
 # Detect local vs connected mode
 _detect_mode() {
   local config="${CONFIG:-$SCRIPT_DIR/egregore.json}"
-  local mode
-  mode=$(jq -r '.mode // empty' "$config" 2>/dev/null || true)
-  local api_url
-  api_url=$(jq -r '.api_url // empty' "$config" 2>/dev/null || true)
-  if [ "$mode" = "local" ] || [ -z "$api_url" ]; then
+  if [ -f "$config" ] && jq -e \
+    '(.mode // "") != "local" and ((.api_url // "") | length > 0)' \
+    "$config" >/dev/null 2>&1; then
+    echo "connected"
+  else
     echo "local"
+  fi
+}
+
+# Compact runtime identity shared by terminal surfaces. The sigils deliberately
+# distinguish an active hosted connection from the self-contained local mode
+# without implying that local Egregore is unhealthy.
+_runtime_mode_badge() {
+  if [ "$(_detect_mode)" = "connected" ]; then
+    echo "◆ CONNECTED"
   else
-    echo "connected"
+    echo "◇ LOCAL"
   fi
 }