getaura 0.1.2 → 0.1.4

package/README.md

@@ -18,7 +18,9 @@ Your agent runs the setup and sends you a link to connect your pilot key in the
 npx getaura init
 ```
 
-`init` checks git and the GitHub CLI, asks which coding agent you use, opens your browser to connect your pilot key, drafts your product brief, installs the Aura skill and runs your first scan.
+`init` checks git and the GitHub CLI, asks which coding agent you use, opens your browser to connect your pilot key, drafts your product brief, installs the Aura skill, offers to install the `aura` command and runs your first scan. After that, run `aura scan` from any folder.
+
+To install the `aura` command yourself: `npm install -g getaura`. Without it, use `npx getaura <command>` (for example `npx getaura scan`).
 
 ## What you get
 

package/dist/index.js

@@ -20031,16 +20031,20 @@ import { fileURLToPath } from "url";
 
 // src/core/exec.ts
 import { spawn, spawnSync } from "child_process";
+var WINDOWS_PROGRAMS = /* @__PURE__ */ new Set(["git", "gh", "node", "tar", "where"]);
+function quoteForCmd(arg) {
+  return /^[\w@%+=:,./\\-]+$/.test(arg) ? arg : `"${arg.replace(/"/g, '\\"')}"`;
+}
+function spawnPlan(cmd, args, platform = process.platform) {
+  const direct = platform !== "win32" || cmd.includes("/") || cmd.includes("\\") || WINDOWS_PROGRAMS.has(cmd.toLowerCase());
+  return direct ? { args, shell: false } : { args: args.map(quoteForCmd), shell: true };
+}
 function run(cmd, args, opts = {}) {
   return new Promise((resolve) => {
     let child;
     try {
-      child = spawn(cmd, args, {
-        cwd: opts.cwd,
-        env: opts.env ?? process.env,
-        stdio: ["pipe", "pipe", "pipe"],
-        shell: process.platform === "win32" && !cmd.includes("/") && !cmd.includes("\\")
-      });
+      const plan = spawnPlan(cmd, args);
+      child = spawn(cmd, plan.args, { cwd: opts.cwd, env: opts.env ?? process.env, stdio: ["pipe", "pipe", "pipe"], shell: plan.shell });
     } catch (err) {
       resolve({ code: 127, stdout: "", stderr: String(err) });
       return;
@@ -20076,7 +20080,11 @@ var AURA_DIR = ".aura";
 var ALWAYS_IGNORED = ["node_modules", ".next", ".git", "dist", "build", "out", ".vercel", ".turbo", "coverage", ".aura"];
 async function findRepoRoot(cwd = process.cwd()) {
   const r = await run("git", ["rev-parse", "--show-toplevel"], { cwd });
-  return r.code === 0 ? r.stdout.trim() : cwd;
+  return path.resolve(r.code === 0 ? r.stdout.trim() : cwd);
+}
+function isInside(root, full, p2 = path) {
+  const rel = p2.relative(p2.resolve(root), p2.resolve(full));
+  return rel !== "" && rel !== ".." && !rel.startsWith(`..${p2.sep}`) && !p2.isAbsolute(rel);
 }
 async function isGitRepo(cwd) {
   return (await run("git", ["rev-parse", "--is-inside-work-tree"], { cwd })).code === 0;
@@ -20421,7 +20429,7 @@ function pmCommands(pm) {
 // package.json
 var package_default = {
   name: "getaura",
-  version: "0.1.2",
+  version: "0.1.4",
   description: "Aura helps you and your coding agent follow best practices while you vibe code.",
   type: "module",
   bin: {
@@ -21591,6 +21599,10 @@ import path9 from "path";
 async function git(root, ...args) {
   return run("git", args, { cwd: root });
 }
+function ghInstallHint(platform = process.platform) {
+  const how = platform === "win32" ? "Install it with `winget install --id GitHub.cli`" : platform === "darwin" ? "Install it with `brew install gh` (or download it from https://cli.github.com)" : "Install it from https://cli.github.com";
+  return `${how}, open a new terminal, then run \`gh auth login\`.`;
+}
 async function ghStatus(root) {
   const v = await run("gh", ["--version"]);
   if (v.code !== 0) return { installed: false, authed: false, hasRemote: false };
@@ -21618,7 +21630,7 @@ async function freeBranchName(root, base) {
 function writeChanges(root, changes) {
   for (const c of changes) {
     const full = path9.join(root, c.path);
-    if (!full.startsWith(root + path9.sep)) throw new Error(`Refusing to write outside the repo: ${c.path}`);
+    if (!isInside(root, full)) throw new Error(`Refusing to write outside the repo: ${c.path}`);
     if (c.content === null) rmSync(full, { force: true });
     else {
       mkdirSync2(path9.dirname(full), { recursive: true });
@@ -22762,7 +22774,7 @@ function safePath(root, rel) {
   if (normalized.startsWith("../") || normalized === ".." || path13.isAbsolute(normalized)) throw new Error(`Path is outside the repo: ${rel}`);
   if (FORBIDDEN.test(normalized)) throw new Error(`Aura doesn\u2019t let the agent touch ${normalized}.`);
   const full = path13.join(root, normalized);
-  if (!full.startsWith(root + path13.sep)) throw new Error(`Path is outside the repo: ${rel}`);
+  if (!isInside(root, full)) throw new Error(`Path is outside the repo: ${rel}`);
   return normalized;
 }
 function clip(text) {
@@ -23845,7 +23857,7 @@ ${pc.bold(action2.title)}`);
     const gh = await ghStatus(root);
     if (!gh.installed || !gh.authed || !gh.hasRemote) {
       say.error(
-        !gh.installed ? "The GitHub CLI isn\u2019t installed. Run `aura guide install-github-cli`." : !gh.authed ? "Run `gh auth login` first." : "This repo has no GitHub remote. Push it to GitHub first."
+        !gh.installed ? `The GitHub CLI isn\u2019t installed. ${ghInstallHint()}` : !gh.authed ? "Run `gh auth login` first." : "This repo has no GitHub remote. Push it to GitHub first."
       );
       say.dim("Or run with --no-pr to commit the change on a local branch.");
       return 1;
@@ -24048,6 +24060,21 @@ async function draftBrief(client, answers, summary) {
   return res.brief.trim() + "\n";
 }
 
+// src/core/aura-command.ts
+function hasAuraCommand() {
+  return commandExists("aura");
+}
+var INSTALL_AURA = `npm install -g getaura@${AURA_VERSION}`;
+async function installAuraCommand() {
+  const r = await run("npm", ["install", "-g", `getaura@${AURA_VERSION}`], { timeoutMs: 18e4 });
+  if (r.code !== 0) return { ok: false, needsAdmin: /EACCES|EPERM|permission denied/i.test(r.stderr + r.stdout) };
+  return { ok: true, onPath: await hasAuraCommand() };
+}
+function installFallback(result, platform = process.platform) {
+  const admin = result.needsAdmin && platform !== "win32" ? `Run \`sudo ${INSTALL_AURA}\` and enter your computer password, or use` : "Use";
+  return `${admin} \`npx getaura <command>\` in place of \`aura <command>\` (for example \`npx getaura scan\`).`;
+}
+
 // src/commands/scan.ts
 import { mkdtempSync as mkdtempSync3, rmSync as rmSync7, writeFileSync as writeFileSync7 } from "fs";
 import os5 from "os";
@@ -24174,8 +24201,7 @@ async function initCommand(flags) {
   }
   const root = await findRepoRoot(cwd);
   const gh = await ghStatus(root);
-  if (!gh.installed)
-    say.warn("The GitHub CLI (gh) isn\u2019t installed. Aura needs it to open pull requests. Run `aura guide install-github-cli`. You can keep going and scan now.");
+  if (!gh.installed) say.warn(`The GitHub CLI (gh) isn\u2019t installed. Aura needs it to open pull requests. ${ghInstallHint()} You can keep going and scan now.`);
   else if (!gh.authed) say.warn("The GitHub CLI isn\u2019t signed in. Run `gh auth login` before applying fixes.");
   else if (!gh.hasRemote) say.warn("This repo has no GitHub remote yet. Push it to GitHub before applying fixes (`gh repo create`).");
   else say.ok("git and the GitHub CLI are ready.");
@@ -24196,6 +24222,8 @@ async function initCommand(flags) {
         required: true
       })
     ) : detected.length ? detected : ["claude"];
+  } else {
+    agents = [.../* @__PURE__ */ new Set([...config2.agents, ...agents])];
   }
   config2.agents = agents;
   let key = flags.key ?? getApiKey();
@@ -24231,10 +24259,11 @@ async function initCommand(flags) {
   const ctx = await buildContext(root, { fast: true, noDownload: true }, config2);
   const briefPath = auraPath(root, "brief.md");
   let brief2 = null;
+  let keptBrief = false;
   if (flags.briefFile) {
     brief2 = readFileSync15(flags.briefFile, "utf8");
-  } else if (existsSync16(briefPath) && !(tty && unwrap(await p.confirm({ message: "A product brief already exists. Draft a new one?", initialValue: false })))) {
-    brief2 = readFileSync15(briefPath, "utf8");
+  } else if (!flags.answers && existsSync16(briefPath) && !(tty && unwrap(await p.confirm({ message: "A product brief already exists. Draft a new one?", initialValue: false })))) {
+    keptBrief = true;
   } else {
     let answers = null;
     if (flags.answers) {
@@ -24286,7 +24315,9 @@ async function initCommand(flags) {
       console.log(briefHandoff());
     }
   }
-  if (brief2) {
+  if (keptBrief) {
+    say.ok("Kept your existing product brief (.aura/brief.md).");
+  } else if (brief2) {
     writeAuraFile(root, "brief.md", brief2);
     if (tty) {
       p.note(brief2.split("\n").slice(0, 24).join("\n") + (brief2.split("\n").length > 24 ? "\n\u2026" : ""), "Product brief draft");
@@ -24313,6 +24344,26 @@ async function initCommand(flags) {
   }
   saveConfig(root, config2);
   ensureGitignore(root);
+  if (!process.env.CI && !await hasAuraCommand()) {
+    if (tty) {
+      if (unwrap(await p.confirm({ message: "Install the `aura` command so you can run `aura scan` any time?", initialValue: true }))) {
+        const s = spin(true);
+        s.start("Installing the aura command");
+        const installed = await installAuraCommand();
+        if (installed.ok)
+          s.stop(installed.onPath ? "Installed. Run `aura scan` from any folder." : "Installed. Open a new terminal window, then run `aura scan`.");
+        else {
+          s.stop("Couldn\u2019t install the aura command");
+          say.warn(installFallback(installed));
+        }
+      } else say.dim(`Use \`npx getaura <command>\` instead, or install it later with \`${INSTALL_AURA}\`.`);
+    } else {
+      console.log(`
+${pc.magenta("\u2726")} ${pc.bold("Give the user the aura command")}`);
+      console.log(`  Run \`${INSTALL_AURA}\` so they can type \`aura scan\` from now on. Until then, use \`npx getaura <command>\`.
+`);
+    }
+  }
   if (flags.scan === false) {
     if (tty) p.outro("Done. Run `aura scan` when you\u2019re ready.");
     return 0;