omegon 0.6.23 → 0.6.25

package/extensions/01-auth/auth.ts

@@ -62,7 +62,8 @@ export function diagnoseError(stderr: string): { status: AuthStatus; reason: str
 	// Not logged in — check before invalid to avoid "not authenticated" matching "invalid"
 	if (lower.includes("not logged") || lower.includes("no token") || lower.includes("not authenticated")
 		|| lower.includes("login required") || lower.includes("no credentials")
-		|| lower.includes("no valid credentials")) {
+		|| lower.includes("no valid credentials")
+		|| lower.includes("missing client token")) {
 		return { status: "none", reason: "Not authenticated" };
 	}
 
@@ -75,7 +76,7 @@ export function diagnoseError(stderr: string): { status: AuthStatus; reason: str
 
 	// Forbidden (authenticated but insufficient permissions)
 	if (/\b403\b/.test(lower) || lower.includes("insufficient scope")
-		|| lower.includes("access denied")) {
+		|| lower.includes("access denied") || lower.includes("permission denied")) {
 		return { status: "invalid", reason: `Authenticated but forbidden: ${extractErrorLine(stderr)}` };
 	}
 

package/extensions/bootstrap/deps.ts

@@ -211,6 +211,20 @@ export const DEPS: Dep[] = [
 	},
 
 	// --- Recommended: common workflows ---
+	{
+		id: "vault",
+		name: "Vault CLI",
+		purpose: "HashiCorp Vault authentication status checking and secret management",
+		usedBy: ["01-auth"],
+		tier: "recommended",
+		check: () => hasCmd("vault"),
+		install: [
+			{ platform: "darwin", cmd: "brew install hashicorp/tap/vault" },
+			{ platform: "linux", cmd: "brew install hashicorp/tap/vault" },
+			{ platform: "linux", cmd: "wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --yes --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg && echo \"deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main\" | sudo tee /etc/apt/sources.list.d/hashicorp.list && sudo apt update && sudo apt install -y vault" },
+		],
+		url: "https://developer.hashicorp.com/vault/install",
+	},
 	{
 		id: "gh",
 		name: "GitHub CLI",
@@ -333,20 +347,6 @@ export const DEPS: Dep[] = [
 			{ platform: "any", cmd: "brew install kubectl" },
 		],
 	},
-	{
-		id: "vault",
-		name: "Vault CLI",
-		purpose: "HashiCorp Vault authentication status checking and secret management",
-		usedBy: ["01-auth"],
-		tier: "optional",
-		check: () => hasCmd("vault"),
-		requires: ["nix"],
-		install: [
-			{ platform: "any", cmd: "nix profile install nixpkgs#vault" },
-			{ platform: "any", cmd: "brew install hashicorp/tap/vault" },
-		],
-		url: "https://developer.hashicorp.com/vault/install",
-	},
 ];
 
 export type DepStatus = { dep: Dep; available: boolean };

package/extensions/bootstrap/index.ts

@@ -19,7 +19,7 @@
  *   - Never auto-installs anything — always asks or requires explicit command
  */
 
-import { spawn } from "node:child_process";
+import { spawn, spawnSync } from "node:child_process";
 import { existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -455,18 +455,45 @@ function restartOmegon(): never {
 
 	const parts = [command, ...argvPrefix, ...userArgs].map(shellEscape);
 	const script = join(tmpdir(), `omegon-restart-${process.pid}.sh`);
+	const oldPid = process.pid;
 	writeFileSync(script, [
 		"#!/bin/sh",
-		// Wait for the old process to fully die and release the terminal
-		"sleep 0.3",
-		// Reset terminal to sane cooked state
+		// Trap signals so Ctrl+C works; ignore HUP so parent death doesn't kill us
+		"trap 'stty sane 2>/dev/null; exit 130' INT TERM",
+		"trap '' HUP",
+		// Wait for the old process to fully die (poll with timeout)
+		"_w=0",
+		`while kill -0 ${oldPid} 2>/dev/null; do`,
+		"  sleep 0.1",
+		"  _w=$((_w + 1))",
+		// Bail after ~5 seconds — proceed anyway
+		'  [ "$_w" -ge 50 ] && break',
+		"done",
+		// Extra grace period for fd/terminal release
+		"sleep 0.2",
+		// Reset terminal to sane cooked state (stty sane is sufficient;
+		// avoid printf '\\033c' which nukes scrollback history)
 		"stty sane 2>/dev/null",
-		"printf '\\033c'",
+		// Clean up this script
+		`rm -f "${script}"`,
 		// Replace this shell with new omegon
 		`exec ${parts.join(" ")}`,
 	].join("\n") + "\n", { mode: 0o755 });
 
-	// Spawn the restart script detached — it will outlive us
+	// Reset terminal to cooked mode BEFORE exiting so the restart script
+	// (and the user) aren't stuck with raw-mode terminal if something goes wrong.
+	try {
+		if (process.stdin.isTTY && typeof process.stdin.setRawMode === "function") {
+			process.stdin.setRawMode(false);
+		}
+		// Also reset via stty — timeout guards against blocking on contested stdin
+		spawnSync("stty", ["sane"], { stdio: "inherit", timeout: 2000 });
+	} catch { /* best-effort */ }
+
+	// Spawn restart script detached (survives parent exit) but with SIGHUP
+	// ignored in the script so process-group teardown doesn't kill it.
+	// detached: true puts it in its own process group; the script's signal
+	// traps ensure Ctrl+C still works once the new omegon exec's.
 	const child = spawn("sh", [script], {
 		stdio: "inherit",
 		detached: true,
@@ -774,7 +801,10 @@ async function interactiveSetup(pi: ExtensionAPI, ctx: CommandContext): Promise<
 	const statuses = checkAll();
 	const missing = statuses.filter((s) => !s.available);
 
-	ctx.ui.notify(formatReport(statuses));
+	// Emit the dep report as a permanent warning-level message so it is never
+	// replaced by subsequent showStatus() calls (showWarning adds nodes to
+	// chatContainer without updating lastStatusText, breaking the deduplication chain).
+	ctx.ui.notify(formatReport(statuses), "warning");
 
 	if (missing.length === 0 && !needsOperatorProfileSetup(getConfigRoot(ctx))) {
 		markDone();
@@ -782,7 +812,7 @@ async function interactiveSetup(pi: ExtensionAPI, ctx: CommandContext): Promise<
 	}
 
 	if (!ctx.hasUI || !ctx.ui) {
-		ctx.ui.notify("\nRun individual install commands above, or use `/bootstrap install` to install all core + recommended deps.");
+		ctx.ui.notify("\nRun individual install commands above, or use `/bootstrap install` to install all core + recommended deps.", "warning");
 		await ensureOperatorProfile(pi, ctx);
 		return;
 	}
@@ -798,6 +828,7 @@ async function interactiveSetup(pi: ExtensionAPI, ctx: CommandContext): Promise<
 			`${coreMissing.length} missing: ${names}`,
 		);
 		if (proceed) {
+			ctx.ui.notify(`Installing ${coreMissing.length} core dep${coreMissing.length > 1 ? "s" : ""}… (this may take a while)`, "info");
 			await installDeps(ctx, coreMissing);
 		}
 	}
@@ -809,14 +840,19 @@ async function interactiveSetup(pi: ExtensionAPI, ctx: CommandContext): Promise<
 			`${recMissing.length} missing: ${names}`,
 		);
 		if (proceed) {
+			ctx.ui.notify(`Installing ${recMissing.length} recommended dep${recMissing.length > 1 ? "s" : ""}… (this may take a while)`, "info");
 			await installDeps(ctx, recMissing);
 		}
 	}
 
+	// Collect remaining summary lines and emit as a single notify at the end
+	// to avoid each line replacing the previous via showStatus() deduplication.
+	const summary: string[] = [];
+
 	if (optMissing.length > 0) {
-		ctx.ui.notify(
-			`\n${optMissing.length} optional dep${optMissing.length > 1 ? "s" : ""} not installed: ${optMissing.map((s) => s.dep.name).join(", ")}.\n`
-			+ "Install individually when needed — see `/bootstrap status` for commands.",
+		summary.push(
+			`${optMissing.length} optional dep${optMissing.length > 1 ? "s" : ""} not installed: ${optMissing.map((s) => s.dep.name).join(", ")}.`
+			+ "\nInstall individually when needed — see `/bootstrap status` for commands.",
 		);
 	}
 
@@ -826,13 +862,12 @@ async function interactiveSetup(pi: ExtensionAPI, ctx: CommandContext): Promise<
 		(r: AuthResult) => r.status === "ok" && r.provider !== "local",
 	);
 	if (!hasAnyCloudKey) {
-		ctx.ui.notify(
-			"\n🔑 **No cloud API keys detected.**\n" +
+		summary.push(
+			"🔑 **No cloud API keys detected.**\n" +
 			"Omegon needs at least one provider key to function. The fastest options:\n" +
 			"  • Anthropic: `/secrets configure ANTHROPIC_API_KEY` (get key at console.anthropic.com)\n" +
 			"  • OpenAI: `/secrets configure OPENAI_API_KEY` (get key at platform.openai.com)\n" +
-			"  • GitHub Copilot: `/login github` (requires Copilot subscription)\n",
-			"warning"
+			"  • GitHub Copilot: `/login github` (requires Copilot subscription)",
 		);
 	}
 
@@ -842,19 +877,21 @@ async function interactiveSetup(pi: ExtensionAPI, ctx: CommandContext): Promise<
 	const stillMissing = recheck.filter((s) => !s.available && (s.dep.tier === "core" || s.dep.tier === "recommended"));
 
 	if (stillMissing.length === 0 && hasAnyCloudKey) {
-		ctx.ui.notify("\n🎉 Setup complete! All core and recommended dependencies are available.");
+		summary.push("🎉 Setup complete! All core and recommended dependencies are available.");
 		markDone();
 	} else if (stillMissing.length === 0) {
-		ctx.ui.notify(
-			"\n✅ Dependencies installed. Configure an API key (see above) to start using Omegon.",
-		);
+		summary.push("✅ Dependencies installed. Configure an API key (see above) to start using Omegon.");
 		markDone();
 	} else {
-		ctx.ui.notify(
-			`\n⚠️  ${stillMissing.length} dep${stillMissing.length > 1 ? "s" : ""} still missing. `
+		summary.push(
+			`⚠️  ${stillMissing.length} dep${stillMissing.length > 1 ? "s" : ""} still missing. `
 			+ "Run `/bootstrap` again after installing manually.",
 		);
 	}
+
+	if (summary.length > 0) {
+		ctx.ui.notify(summary.join("\n\n"), "info");
+	}
 }
 
 async function installMissing(ctx: CommandContext, tiers: DepTier[]): Promise<void> {
@@ -951,9 +988,6 @@ function isSignificantLine(raw: string): boolean {
  * piped so output is captured and forwarded through pi's notification
  * system rather than fighting with the TUI renderer.
  *
- * A heartbeat tick fires every `heartbeatMs` so the operator knows the
- * process is still alive during long compilations (e.g. cargo build).
- *
  * The install commands come exclusively from the static `deps.ts`
  * registry and are never influenced by operator input.
  *
@@ -963,7 +997,6 @@ export function runAsync(
 	cmd: string,
 	onLine: (line: string) => void,
 	timeoutMs: number = 600_000,
-	heartbeatMs: number = 15_000,
 ): Promise<number> {
 	return new Promise((resolve) => {
 		const env = {
@@ -987,23 +1020,15 @@ export function runAsync(
 
 		let settled = false;
 		let sigkillTimer: ReturnType<typeof setTimeout> | undefined;
-		let elapsedSec = 0;
 
 		const settle = (code: number) => {
 			if (settled) return;
 			settled = true;
 			clearTimeout(timer);
-			clearInterval(heartbeat);
 			clearTimeout(sigkillTimer);
 			resolve(code);
 		};
 
-		// Heartbeat — fires every heartbeatMs while the process is running.
-		const heartbeat = setInterval(() => {
-			elapsedSec += heartbeatMs / 1000;
-			onLine(`   ⏳ still running… (${elapsedSec}s)`);
-		}, heartbeatMs);
-
 		// Forward captured lines from both streams.
 		const attachStream = (stream: NodeJS.ReadableStream | null) => {
 			if (!stream) return;
@@ -1084,6 +1109,15 @@ async function installDeps(ctx: CommandContext, deps: DepStatus[]): Promise<void
 			}
 		}
 
+		// Stream install output: consecutive notify("info") calls update the
+		// same text node in place via showStatus() deduplication. A final
+		// notify("warning") pins the completed output permanently.
+		let output = `${step} 📦 Installing ${dep.name}…`;
+		const stream = (line: string) => {
+			output += `\n${line}`;
+			ctx.ui.notify(output, "info");
+		};
+
 		// Check prerequisites — re-verify availability live (not from stale array)
 		if (dep.requires?.length) {
 			const unmet = dep.requires.filter((reqId) => {
@@ -1091,29 +1125,20 @@ async function installDeps(ctx: CommandContext, deps: DepStatus[]): Promise<void
 				return reqDep ? !reqDep.check() : false;
 			});
 			if (unmet.length > 0) {
-				ctx.ui.notify(`\n${step} ⚠️  Skipping ${dep.name} — requires ${unmet.join(", ")} (not yet available)`);
+				ctx.ui.notify(`${step} ⚠️  Skipping ${dep.name} — requires ${unmet.join(", ")} (not yet available)`, "info");
 				continue;
 			}
 		}
 
 		const cmd = bestInstallCmd(dep);
 		if (!cmd) {
-			ctx.ui.notify(`\n${step} ⚠️  No install command available for ${dep.name} on this platform`);
+			ctx.ui.notify(`${step} ⚠️  No install command available for ${dep.name} on this platform`, "info");
 			continue;
 		}
 
-		ctx.ui.notify(`\n${step} 📦 Installing ${dep.name}…\n   → \`${cmd}\``);
-
-		// Collect output lines — show progress inline but also keep them
-		// so we can dump a readable block on failure.
-		const outputLines: string[] = [];
-		const exitCode = await runAsync(
-			cmd,
-			(line) => {
-				outputLines.push(line);
-				ctx.ui.notify(line);
-			},
-		);
+		stream(`   → \`${cmd}\``);
+
+		const exitCode = await runAsync(cmd, stream);
 
 		// Patch PATH immediately after installing bootstrapping deps so the rest
 		// of the install sequence can find them without a new shell.
@@ -1125,25 +1150,20 @@ async function installDeps(ctx: CommandContext, deps: DepStatus[]): Promise<void
 		}
 
 		if (exitCode === 0 && dep.check()) {
-			ctx.ui.notify(`${step} ✅ ${dep.name} installed successfully`);
+			output += `\n${step} ✅ ${dep.name} installed successfully`;
 		} else if (exitCode === 124) {
-			ctx.ui.notify(`${step} ❌ ${dep.name} install timed out (10 min limit)`);
+			output += `\n${step} ❌ ${dep.name} install timed out (10 min limit)`;
+		} else if (exitCode === 0) {
+			output += `\n${step} ⚠️  Command succeeded but ${dep.name} not found on PATH — you may need to open a new shell.`;
 		} else {
-			// Dump the last N lines of output so the operator can see what went wrong
-			const tail = outputLines.slice(-20).join("\n");
-			const status = exitCode === 0
-				? `Command succeeded but ${dep.name} not found on PATH`
-				: `Failed to install ${dep.name} (exit ${exitCode})`;
-			const block = [
-				`${step} ❌ ${status}`,
-				"",
-				"Output (last 20 lines):",
-				"```",
-				tail,
-				"```",
-				...(dep.url ? [`Manual install: ${dep.url}`] : []),
-			].join("\n");
-			ctx.ui.notify(block);
+			output += `\n${step} ❌ Failed to install ${dep.name} (exit ${exitCode})`;
+			const hints = dep.install.filter((o) => o.cmd !== cmd);
+			if (hints.length > 0) output += `\n   Alternative: \`${hints[0]!.cmd}\``;
+			if (dep.url) output += `\n   Manual install: ${dep.url}`;
 		}
+
+		// Pin the completed output permanently as warning so subsequent
+		// showStatus() calls cannot overwrite it.
+		ctx.ui.notify(output, "warning");
 	}
 }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "omegon",
-	"version": "0.6.23",
+	"version": "0.6.25",
 	"description": "Omegon — an opinionated distribution of pi (by Mario Zechner) with extensions for lifecycle management, memory, orchestration, and visualization",
 	"bin": {
 		"omegon": "bin/omegon.mjs",