getaura 0.1.4 → 0.1.6

package/README.md

@@ -25,7 +25,7 @@ To install the `aura` command yourself: `npm install -g getaura`. Without it, us
 ## What you get
 
 - **An Aura score** from deterministic checks across security, agent setup, foundations and structure, explained in plain language.
-- **Next steps** in priority order: `aura next`.
+- **Next steps** in priority order. After a scan (or with `aura next`), tick the ones you want in the terminal and Aura does them.
 - **Fixes as pull requests you approve**: `aura apply foundation` puts your brief, agent rules, skills, CI and env example in place in one PR, and `aura fix <finding>` has Aura's agent make code changes on a branch.
 - **An agent that keeps it that way**: the rules and skills Aura installs teach your coding agent your standards, and GitHub Actions re-scans every push.
 

package/dist/index.js

@@ -990,10 +990,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path21) {
-  if (!path21)
+function getElementAtPath(obj, path22) {
+  if (!path22)
     return obj;
-  return path21.reduce((acc, key) => acc?.[key], obj);
+  return path22.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -1333,11 +1333,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path21, issues) {
+function prefixIssues(path22, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path21);
+    iss.path.unshift(path22);
     return iss;
   });
 }
@@ -1787,16 +1787,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path21 = []) => {
+  const processError = (error63, path22 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path21, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path22, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else {
-        const fullpath = [...path21, ...issue2.path];
+        const fullpath = [...path22, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -1835,17 +1835,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path21 = []) => {
+  const processError = (error63, path22 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path21, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path22, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else {
-        const fullpath = [...path21, ...issue2.path];
+        const fullpath = [...path22, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -1884,8 +1884,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path21 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path21) {
+  const path22 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path22) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -18987,13 +18987,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path21 = ref.slice(1).split("/").filter(Boolean);
-  if (path21.length === 0) {
+  const path22 = ref.slice(1).split("/").filter(Boolean);
+  if (path22.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path21[0] === defsKey) {
-    const key = path21[1] === void 0 ? void 0 : decodeJSONPointerSegment(path21[1]);
+  if (path22[0] === defsKey) {
+    const key = path22[1] === void 0 ? void 0 : decodeJSONPointerSegment(path22[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -20429,7 +20429,7 @@ function pmCommands(pm) {
 // package.json
 var package_default = {
   name: "getaura",
-  version: "0.1.4",
+  version: "0.1.6",
   description: "Aura helps you and your coding agent follow best practices while you vibe code.",
   type: "module",
   bin: {
@@ -21545,7 +21545,7 @@ var AuraClient = class _AuraClient {
   get hasKey() {
     return Boolean(this.key);
   }
-  async request(method, path21, body, timeoutMs = 6e4) {
+  async request(method, path22, body, timeoutMs = 6e4) {
     if (!this.key) throw new AuraApiError("no_key", "No pilot key");
     let payload;
     if (body !== void 0) {
@@ -21555,7 +21555,7 @@ var AuraClient = class _AuraClient {
     }
     let res;
     try {
-      res = await fetch(`${this.baseUrl}/v1/${path21}`, {
+      res = await fetch(`${this.baseUrl}/v1/${path22}`, {
         method,
         headers: { authorization: `Bearer ${this.key}`, "content-type": "application/json", "user-agent": `getaura/${AURA_VERSION}` },
         body: payload,
@@ -21857,8 +21857,8 @@ var typecheck = {
   async run(ctx) {
     if (ctx.options.fast) return { status: "unknown", summary: "Skipped in fast mode." };
     const { existsSync: existsSync17 } = await import("fs");
-    const path21 = await import("path");
-    const tsc = path21.join(ctx.root, "node_modules", ".bin", process.platform === "win32" ? "tsc.cmd" : "tsc");
+    const path22 = await import("path");
+    const tsc = path22.join(ctx.root, "node_modules", ".bin", process.platform === "win32" ? "tsc.cmd" : "tsc");
     if (!existsSync17(tsc)) return { status: "unknown", summary: "Dependencies not installed, so the type check was skipped." };
     const r = await run(tsc, ["--noEmit", "--pretty", "false"], { cwd: ctx.root, timeoutMs: 18e4 });
     if (r.timedOut) return { status: "unknown", summary: "Type check timed out." };
@@ -23394,6 +23394,53 @@ function explainSignIn(outcome) {
   }
 }
 
+// src/commands/pick-steps.ts
+function stepRun(step, hasKey) {
+  const [, sub, arg = step.actionId] = step.command.split(" ");
+  if (sub === "apply") return { kind: "apply", actionId: arg };
+  if (sub === "fix") return { kind: "fix", actionId: arg, withOwnAgent: !hasKey };
+  if (sub === "guide") return { kind: "guide", topic: arg };
+  return { kind: "inventory" };
+}
+function hint(step, hasKey) {
+  const run2 = stepRun(step, hasKey);
+  const what = run2.kind === "apply" ? "opens a pull request" : run2.kind === "fix" ? run2.withOwnAgent ? "writes a task for your coding agent" : "Aura\u2019s agent fixes it in a pull request" : run2.kind === "guide" ? "shows step-by-step instructions" : "a few questions";
+  return [what, step.impact > 0 ? `+${step.impact} points` : "", effortLabel(step.effort)].filter(Boolean).join(" \xB7 ");
+}
+async function pickAndRunSteps(steps, limit = 10) {
+  if (steps.length === 0) {
+    console.log(pc.green("\n  Nothing to do right now."));
+    return 0;
+  }
+  const hasKey = Boolean(getApiKey());
+  console.log("");
+  const chosen = unwrap(
+    await p.multiselect({
+      message: "Next steps: pick what Aura should do now (space to select, enter to confirm, enter with none to skip)",
+      options: steps.slice(0, limit).map((s) => ({ value: s.actionId, label: s.title, hint: hint(s, hasKey) })),
+      required: false
+    })
+  );
+  if (chosen.length === 0) {
+    say.dim("Nothing selected. Run `aura next` any time to pick again.");
+    return 0;
+  }
+  const results = [];
+  for (const step of steps.filter((s) => chosen.includes(s.actionId))) {
+    console.log(`
+${pc.magenta("\u2726")} ${pc.bold(step.title)}`);
+    const run2 = stepRun(step, hasKey);
+    const code = run2.kind === "apply" ? await applyCommand(run2.actionId, { yes: true }) : run2.kind === "fix" ? await fixCommand(run2.actionId, run2.withOwnAgent ? { agent: true } : { yes: true }) : run2.kind === "guide" ? await guideCommand(run2.topic, {}) : await inventoryCommand({});
+    results.push({ title: step.title, ok: code === 0 });
+  }
+  if (results.length > 1) {
+    console.log(`
+${pc.bold("  Done")}`);
+    for (const r of results) console.log(`  ${r.ok ? pc.green("\u2714") : pc.red("\u2716")} ${r.title}`);
+  }
+  return results.every((r) => r.ok) ? 0 : 1;
+}
+
 // src/commands/simple.ts
 async function latestScan(root) {
   const file2 = auraPath(root, "scan.json");
@@ -23412,8 +23459,10 @@ async function nextCommand(flags) {
   const root = await findRepoRoot();
   const scan = await latestScan(root);
   const steps = nextSteps(scan, { includeFoundationBundle: true, accounts: accountState(root, scan.stack.services) });
+  const limit = flags.limit ? Number(flags.limit) : 10;
   if (flags.json) printJson({ score: scan.score, nextSteps: steps });
-  else console.log(renderNextSteps(steps, flags.limit ? Number(flags.limit) : 10));
+  else if (interactive()) return pickAndRunSteps(steps, limit);
+  else console.log(renderNextSteps(steps, limit));
   return 0;
 }
 async function historyCommand(flags) {
@@ -23970,7 +24019,7 @@ async function undoPlan(root, plan) {
 
 // src/commands/init.ts
 import { existsSync as existsSync16, readFileSync as readFileSync15 } from "fs";
-import { spawnSync as spawnSync2 } from "child_process";
+import { spawnSync as spawnSync3 } from "child_process";
 
 // src/brief.ts
 import path18 from "path";
@@ -24061,6 +24110,7 @@ async function draftBrief(client, answers, summary) {
 }
 
 // src/core/aura-command.ts
+import { spawnSync as spawnSync2 } from "child_process";
 function hasAuraCommand() {
   return commandExists("aura");
 }
@@ -24070,6 +24120,10 @@ async function installAuraCommand() {
   if (r.code !== 0) return { ok: false, needsAdmin: /EACCES|EPERM|permission denied/i.test(r.stderr + r.stdout) };
   return { ok: true, onPath: await hasAuraCommand() };
 }
+async function installWithSudo() {
+  const r = spawnSync2("sudo", ["npm", "install", "-g", `getaura@${AURA_VERSION}`], { stdio: "inherit" });
+  return r.status === 0 && await hasAuraCommand();
+}
 function installFallback(result, platform = process.platform) {
   const admin = result.needsAdmin && platform !== "win32" ? `Run \`sudo ${INSTALL_AURA}\` and enter your computer password, or use` : "Use";
   return `${admin} \`npx getaura <command>\` in place of \`aura <command>\` (for example \`npx getaura scan\`).`;
@@ -24140,13 +24194,15 @@ async function scanCommand(flags) {
     return exitCode;
   }
   console.log(renderTerminal(scan, { previous: flags.ci ? base?.score ?? null : previous }));
-  if (!flags.ci) console.log(renderNextSteps(steps, 3));
+  const pick2 = !flags.ci && interactive();
+  if (!flags.ci && !pick2) console.log(renderNextSteps(steps, 3));
   say.dim(
     `
   Full report: .aura/report.md${client.hasKey || flags.explain === false ? "" : "  \xB7  Add a pilot key (aura login) for plain-language explanations."}`
   );
   if (base) say.info(`
   Compared with ${flags.base}: ${base.score} \u2192 ${scan.score}${exitCode ? ` (dropped more than ${maxDrop})` : ""}`);
+  if (pick2) await pickAndRunSteps(steps);
   return exitCode;
 }
 
@@ -24162,7 +24218,7 @@ function detectAgents(root) {
 }
 function openEditor(file2) {
   const editor = process.env.VISUAL || process.env.EDITOR || (process.platform === "win32" ? "notepad" : "nano");
-  const r = spawnSync2(editor, [file2], { stdio: "inherit", shell: process.platform === "win32" });
+  const r = spawnSync3(editor, [file2], { stdio: "inherit", shell: process.platform === "win32" });
   return r.status === 0;
 }
 var EXAMPLE_ANSWERS = '{"whatItDoes": "\u2026", "audience": "\u2026", "chargesMoney": false, "dataHandled": ["personal"], "userRegions": ["Canada"]}';
@@ -24354,7 +24410,10 @@ async function initCommand(flags) {
           s.stop(installed.onPath ? "Installed. Run `aura scan` from any folder." : "Installed. Open a new terminal window, then run `aura scan`.");
         else {
           s.stop("Couldn\u2019t install the aura command");
-          say.warn(installFallback(installed));
+          const useSudo = installed.needsAdmin && process.platform !== "win32" && unwrap(await p.confirm({ message: "Your computer needs your password to install it. Enter your password now?", initialValue: true }));
+          if (!useSudo) say.warn(installFallback(installed));
+          else if (await installWithSudo()) say.ok("Installed. Run `aura scan` from any folder.");
+          else say.warn(installFallback({ needsAdmin: false }));
         }
       } else say.dim(`Use \`npx getaura <command>\` instead, or install it later with \`${INSTALL_AURA}\`.`);
     } else {
@@ -24474,10 +24533,62 @@ ${body}`);
   return 0;
 }
 
+// src/index.ts
+import pc4 from "picocolors";
+
+// src/core/update-check.ts
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync16, writeFileSync as writeFileSync8 } from "fs";
+import os6 from "os";
+import path21 from "path";
+var DAY_MS = 24 * 60 * 60 * 1e3;
+var cacheFile = () => path21.join(os6.homedir(), ".aura", "update-check.json");
+function isNewer(a, b) {
+  if (!/^\d+\.\d+\.\d+$/.test(a) || !/^\d+\.\d+\.\d+$/.test(b)) return false;
+  const [x, y] = [a, b].map((v) => v.split(".").map(Number));
+  for (let i = 0; i < 3; i++) if (x[i] !== y[i]) return x[i] > y[i];
+  return false;
+}
+async function fetchLatest() {
+  try {
+    const res = await fetch("https://registry.npmjs.org/getaura/latest", { signal: AbortSignal.timeout(1500) });
+    const body = await res.json();
+    return res.ok && typeof body.version === "string" ? body.version : null;
+  } catch {
+    return null;
+  }
+}
+async function newerVersion(opts = {}) {
+  const now = opts.now ?? Date.now();
+  let latest = null;
+  try {
+    const cached2 = JSON.parse(readFileSync16(cacheFile(), "utf8"));
+    if (now - cached2.checkedAt < DAY_MS) latest = cached2.latest;
+    else throw new Error("stale");
+  } catch {
+    latest = await (opts.fetchLatest ?? fetchLatest)();
+    try {
+      mkdirSync6(path21.dirname(cacheFile()), { recursive: true });
+      writeFileSync8(cacheFile(), JSON.stringify({ checkedAt: now, latest }));
+    } catch {
+    }
+  }
+  return latest && isNewer(latest, opts.current ?? AURA_VERSION) ? latest : null;
+}
+function startUpdateCheck() {
+  if (!process.stdout.isTTY || process.env.CI || process.env.AURA_NO_UPDATE_CHECK) return Promise.resolve(null);
+  return newerVersion().catch(() => null);
+}
+function updateNotice(latest, argv1 = process.argv[1] ?? "") {
+  const viaNpx = /[\\/]_npx[\\/]/.test(argv1);
+  const how = viaNpx ? "use `npx getaura@latest`" : "update with `npm install -g getaura@latest`";
+  return `Aura ${latest} is available (you have ${AURA_VERSION}): ${how}.`;
+}
+
 // src/index.ts
 var program = new Command();
 program.name("aura").description("Aura helps you and your coding agent follow best practices while you vibe code.").version(AURA_VERSION).showHelpAfterError();
 program.addHelpText("before", () => interactive() ? banner() : "");
+var update = startUpdateCheck();
 function action(fn) {
   return async (...args) => {
     try {
@@ -24491,6 +24602,9 @@ function action(fn) {
       if (process.env.AURA_DEBUG) console.error(err);
       process.exitCode = 1;
     }
+    const latest = await update;
+    if (latest) console.error(pc4.dim(`
+${updateNotice(latest)}`));
   };
 }
 program.command("init").description("Set up Aura: pick your agent, write the product brief, install the Aura skill and run the first scan").option("--agent <id...>", "coding agent(s): claude, codex, cursor, pi").option("-y, --yes", "no prompts; use detected defaults").option("--key <key>", "Aura pilot key, for CI and scripts (otherwise a browser page asks for it)").option("--wait <seconds>", "how long to wait for the browser sign-in (default: until the link expires; 90 for agents)").option("--brief-file <path>", "use this file as the product brief").option("--answers <path>", "JSON file with the setup answers").option("--no-scan", "skip the first scan").addOption(new Option("--telemetry", "share scores and action names with the Aura team")).addOption(new Option("--no-telemetry", "don\u2019t share anything")).action(action((flags) => initCommand(flags)));