Skip to content

Cancel npm package; install.sh becomes the one installer for both hosts - #3

Merged
ndisisnd merged 1 commit into
mainfrom
install-script-only
Aug 8, 2026
Merged

ndisisnd merged 1 commit into
mainfrom
install-script-only

Conversation

@ndisisnd

@ndisisnd ndisisnd commented Aug 8, 2026

Copy link
Copy Markdown
Owner

Why

Product decision: no npm package. npx wdym-prompt was cancelled before ever being published (the registry name still 404s, so nothing external breaks). That leaves the shell installer as the whole install story — which means install.sh must absorb the Codex support that lived only in the Node CLI, or v1.2's Codex feature has no install path.

What changed

  • install.sh is now the one installer for both hosts. Ported from the battle-tested bin/wdym-prompt.js: --claude / --codex / --both (default: detected hosts), Codex skill at ~/.agents/skills/wdym as a symlink to the canonical copy with automatic copy fallback and --copy to force, hooks.json wiring with dedupe by prompt-detect.py, AGENTS.md trust contract, the four-beat trust notice printed last on every Codex-touching run. Codex stays global-only: --codex --local refuses; --both --local degrades to Claude-local.
  • Deleted bin/wdym-prompt.js and package.json; .gitignore drops the npm artifacts.
  • Docs swept: README install section back to two options (installer + npx skills add), comparison table, FAQ, ARCHITECTURE file map and two-host section, llms.txt, and the RELEASES.md v1.2.0 section corrected — it was selling an npm command that never existed.

Verification

  • Implemented and independently re-verified by separate Opus agents. Review caught two port bugs before commit: the Codex skill manifest (agents/openai.yaml) was silently missing from the copy loop (Codex would never auto-invoke the skill), and duplicate contract-block removal stranded blank lines.
  • 78-assertion port harness plus 30 adversarial assertions, all in throwaway HOMEs: byte-idempotent re-runs, foreign hooks survive, non-object JSON refused not clobbered, contract blocks written by the old npx installer recognized as already-current (no ping-pong), zero writes outside the sandbox. bash -n and the detect bench green.

Follow-ups (not in this PR)

  • The published GitHub release v1.2.0 notes still reference npx wdym-prompt; correct them after merge (see PR discussion).
  • Known pre-existing wrinkle: refs/init.md's contract template and install.sh phrase the activation state line differently — worth unifying in a small follow-up.

🤖 Generated with Claude Code

…installer for both hosts

- install.sh absorbs the Codex wiring from bin/wdym-prompt.js: --claude/
  --codex/--both host flags, symlinked ~/.agents skill path with copy
  fallback (--copy), hooks.json wiring with dedupe, AGENTS.md contract,
  trust notice last on every Codex-touching run; Codex stays global-only
- bin/wdym-prompt.js and package.json deleted; npx wdym-prompt was never
  published (registry 404s), so nothing external breaks
- README/ARCHITECTURE/llms.txt/RELEASES swept clean of the npm story;
  npx skills add stays documented as the file-delivery route
- Review fixes: agents/openai.yaml now ships in the skill copy (Codex
  manifest was silently missing), duplicate contract removal closes its
  gap, RELEASES.md v1.2.0 section corrected
- Verified: 78-assertion port harness + 30 adversarial assertions in
  sandbox HOMEs; contract blocks written by the old npx installer are
  recognized as already-current; detect bench green

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@ndisisnd
ndisisnd merged commit b92b3f3 into main Aug 8, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant