fix(code): quiet routine ripgrep installer output (#4417)

`dcode` install no longer prints routine ripgrep setup messages unless
verbose mode is enabled or ripgrep setup fails.

---

Routine ripgrep provisioning is an implementation detail of `dcode`
installation, so successful managed setup no longer adds extra status
lines to default installer output. Verbose installs and failure paths
still expose the setup command output for debugging.

libs/code/scripts/install.sh

@@ -993,6 +993,11 @@ ripgrep_manual_hint() {
   esac
 }
 
+ripgrep_managed_failed() {
+  log_warn "Managed ripgrep setup did not complete; the grep tool will use a slower fallback."
+  ripgrep_manual_hint
+}
+
 if [ "$SKIP_OPTIONAL" != "1" ]; then
   if [ "$RIPGREP_INSTALLER" = "managed" ] && [ "$VERIFY_OK" = true ] && [ -n "$DCODE_BIN" ]; then
     # Eager, non-prompting managed install through the freshly installed binary
@@ -1000,14 +1005,28 @@ if [ "$SKIP_OPTIONAL" != "1" ]; then
     # (downloads into ~/.deepagents/bin, no sudo). Doing it here removes the
     # first-run download latency. The binary reuses a system `rg` already on
     # PATH and honors DEEPAGENTS_CODE_OFFLINE and
-    # DEEPAGENTS_CODE_RIPGREP_INSTALLER=system, reporting what it did.
-    echo ""
-    log_info "Setting up ripgrep..."
-    if "$DCODE_BIN" tools install; then
-      fix_owner "${HOME}/.deepagents/bin"
+    # DEEPAGENTS_CODE_RIPGREP_INSTALLER=system. Routine output stays behind
+    # verbose mode because most users do not need ripgrep setup details.
+    if [ "$VERBOSE" = "1" ]; then
+      echo ""
+      log_info "Setting up ripgrep..."
+      if "$DCODE_BIN" tools install; then
+        fix_owner "${HOME}/.deepagents/bin"
+      else
+        ripgrep_managed_failed
+      fi
     else
-      log_warn "Managed ripgrep setup did not complete; the grep tool will use a slower fallback."
-      ripgrep_manual_hint
+      # Quiet path: capture setup output and surface it only on failure, so a
+      # broken install stays debuggable without noise in the common case.
+      ripgrep_setup_out=$(mktemp 2>/dev/null) || ripgrep_setup_out="/tmp/deepagents-ripgrep-setup.$$.out"
+      if "$DCODE_BIN" tools install >"$ripgrep_setup_out" 2>&1; then
+        fix_owner "${HOME}/.deepagents/bin"
+      else
+        echo ""
+        cat "$ripgrep_setup_out" >&2 2>/dev/null || true
+        ripgrep_managed_failed
+      fi
+      rm -f "$ripgrep_setup_out"
     fi
   elif command -v rg >/dev/null 2>&1; then
     if [ "$VERBOSE" = "1" ]; then

libs/code/tests/unit_tests/test_install_script.py

@@ -95,6 +95,7 @@ if [ "${{1:-}}" = "-v" ]; then
 fi
 if [ "${{1:-}}" = "tools" ]; then
   printf '%s\\n' "$*" >> {str(tools_log)!r}
+  printf 'Using ripgrep already on PATH at /tmp/fake-rg\\n'
   exit "${{FAKE_DCODE_TOOLS_RC:-0}}"
 fi
 exit 0
@@ -1409,10 +1410,28 @@ def test_install_script_managed_ripgrep_calls_tools_install(tmp_path: Path) -> N
     assert tools_log.exists(), proc.stdout + proc.stderr
     assert "tools install" in tools_log.read_text()
     combined = proc.stdout + proc.stderr
-    assert "Setting up ripgrep..." in combined
+    assert "Setting up ripgrep..." not in combined
+    assert "Using ripgrep already on PATH" not in combined
     assert "opt out with DEEPAGENTS_CODE_RIPGREP_INSTALLER=system" not in combined
 
 
+def test_install_script_managed_ripgrep_verbose_reports_tools_install(
+    tmp_path: Path,
+) -> None:
+    """Verbose mode prints the otherwise quiet managed-ripgrep setup details."""
+    proc, _ = _invoke(
+        tmp_path,
+        {"DEEPAGENTS_CODE_SKIP_OPTIONAL": "0", "DEEPAGENTS_CODE_VERBOSE": "1"},
+        installed_version="0.1.0",
+        latest_version="0.2.0",
+    )
+
+    assert proc.returncode == 0, proc.stderr
+    combined = proc.stdout + proc.stderr
+    assert "Setting up ripgrep..." in combined
+    assert "Using ripgrep already on PATH" in combined
+
+
 def test_install_script_system_ripgrep_skips_tools_install(tmp_path: Path) -> None:
     """`DEEPAGENTS_CODE_RIPGREP_INSTALLER=system` keeps the package-manager path."""
     proc, _ = _invoke(
@@ -1443,7 +1462,11 @@ def test_install_script_skip_optional_skips_tools_install(tmp_path: Path) -> Non
 
 
 def test_install_script_managed_ripgrep_failure_warns(tmp_path: Path) -> None:
-    """A failed `dcode tools install` falls back with a slow-grep warning."""
+    """A failed `dcode tools install` falls back with a slow-grep warning.
+
+    The captured command output is surfaced on failure — the whole reason the
+    quiet path writes to a temp file instead of discarding to `/dev/null`.
+    """
     proc, _ = _invoke(
         tmp_path,
         {"DEEPAGENTS_CODE_SKIP_OPTIONAL": "0", "FAKE_DCODE_TOOLS_RC": "1"},
@@ -1452,7 +1475,31 @@ def test_install_script_managed_ripgrep_failure_warns(tmp_path: Path) -> None:
     )
 
     assert proc.returncode == 0, proc.stderr
-    assert "slower fallback" in (proc.stdout + proc.stderr)
+    combined = proc.stdout + proc.stderr
+    assert "slower fallback" in combined
+    assert "Using ripgrep already on PATH" in combined
+
+
+def test_install_script_managed_ripgrep_verbose_failure_warns(
+    tmp_path: Path,
+) -> None:
+    """Verbose mode still warns and shows setup output when the install fails."""
+    proc, _ = _invoke(
+        tmp_path,
+        {
+            "DEEPAGENTS_CODE_SKIP_OPTIONAL": "0",
+            "DEEPAGENTS_CODE_VERBOSE": "1",
+            "FAKE_DCODE_TOOLS_RC": "1",
+        },
+        installed_version="0.1.0",
+        latest_version="0.2.0",
+    )
+
+    assert proc.returncode == 0, proc.stderr
+    combined = proc.stdout + proc.stderr
+    assert "Setting up ripgrep..." in combined
+    assert "Using ripgrep already on PATH" in combined
+    assert "slower fallback" in combined
 
 
 def test_install_script_skips_managed_install_when_verify_failed(