@0dai-dev/cli 4.1.0 → 4.2.0

package/lib/onboarding.js

@@ -104,20 +104,28 @@ async function cmdQuickstart(target, { cmdDoctor, cmdStatus, cmdInit, log, ensur
 
   // Step 1: Auth
   console.log(`\n  [1/${steps}] Checking authentication...`);
+  let signedIn = false;
   let authInfo = "not signed in";
   try {
     const auth = JSON.parse(fs.readFileSync(path.join(require("os").homedir(), ".0dai", "auth.json"), "utf8"));
     if (auth.access_token) {
+      signedIn = true;
       authInfo = `signed in (${auth.plan || "free"} plan)`;
     }
   } catch {}
-  console.log(`           \u2713 ${authInfo}`);
+  if (signedIn) {
+    console.log(`           \u2713 ${authInfo}`);
+  } else {
+    console.log(`           \u26a0 ${authInfo} \u2192 run 0dai auth login`);
+  }
 
   // Step 2: Init
   console.log(`  [2/${steps}] Checking project config...`);
   const aiExists = fs.existsSync(path.join(target, "ai", "VERSION"));
   if (aiExists) {
     console.log("           \u2713 ai/ layer found");
+  } else if (!signedIn) {
+    console.log("           \u26a0 skipped \u2192 sign in before first init");
   } else {
     console.log("           initializing...");
     try {
@@ -132,9 +140,9 @@ async function cmdQuickstart(target, { cmdDoctor, cmdStatus, cmdInit, log, ensur
 
   // Step 3: Doctor
   console.log(`  [3/${steps}] Running health check...`);
-  if (fs.existsSync(path.join(target, "ai"))) {
+  if (fs.existsSync(path.join(target, "ai", "VERSION"))) {
     try {
-      cmdDoctor(target);
+      cmdDoctor(target, { suppressExitCode: true });
     } catch {}
     console.log("           \u2713 health check complete");
   } else {
@@ -143,7 +151,7 @@ async function cmdQuickstart(target, { cmdDoctor, cmdStatus, cmdInit, log, ensur
 
   // Step 4: Status
   console.log(`  [4/${steps}] Project status:`);
-  if (fs.existsSync(path.join(target, "ai"))) {
+  if (fs.existsSync(path.join(target, "ai", "VERSION"))) {
     try {
       cmdStatus(target);
     } catch {}
@@ -155,9 +163,15 @@ async function cmdQuickstart(target, { cmdDoctor, cmdStatus, cmdInit, log, ensur
   const elapsed = ((Date.now() - start) / 1000).toFixed(1);
   console.log(`  [5/${steps}] Ready! (${elapsed}s)`);
   console.log("");
-  console.log("  Your project is set up. Try:");
-  console.log("    0dai swarm run --goal \"add auth\"  (Pro)");
-  console.log("    0dai graph push                   (Pro)");
+  if (!signedIn && !aiExists) {
+    console.log("  Next:");
+    console.log("    0dai auth login                  Sign in to unlock init and sync");
+    console.log("    0dai quickstart                  Re-run after sign-in");
+  } else {
+    console.log("  Your project is set up. Try:");
+    console.log("    0dai swarm run --goal \"add auth\"  (Pro)");
+    console.log("    0dai graph push                   (Pro)");
+  }
   console.log("");
 }
 

package/lib/shared.js

@@ -11,6 +11,7 @@ const http = require("http");
 const fs = require("fs");
 const path = require("path");
 const os = require("os");
+const crypto = require("crypto");
 const { spawnSync } = require("child_process");
 
 const VERSION = require("../package.json").version;
@@ -48,10 +49,15 @@ const CONFIG_DIR = path.join(os.homedir(), ".0dai");
 const AUTH_FILE = path.join(CONFIG_DIR, "auth.json");
 const VERSION_CHECK_FILE = path.join(CONFIG_DIR, ".version_check");
 const PROJECTS_FILE = path.join(CONFIG_DIR, "projects.json");
-const MANAGED_BEGIN = "<!-- 0dai:managed:begin -->";
-const MANAGED_END = "<!-- 0dai:managed:end -->";
-const LEGACY_MANAGED_BEGIN = "<!-- zerodayai:managed:begin -->";
-const LEGACY_MANAGED_END = "<!-- zerodayai:managed:end -->";
+const DRIFT_TRACKED_CONFIGS = [
+  "CLAUDE.md",
+  "AGENTS.md",
+  "GEMINI.md",
+  "opencode.json",
+  ".cursorrules",
+  ".windsurfrules",
+  ".aider.conf.yml",
+];
 
 // --- API ---
 function apiCall(endpoint, data) {
@@ -88,7 +94,7 @@ function apiCall(endpoint, data) {
       });
     });
     req.on("error", (e) => resolve({ error: `${e.message}. Is ${API_URL} reachable?` }));
-    req.on("timeout", () => { req.destroy(); resolve({ error: "timeout" }); });
+    req.on("timeout", () => { req.destroy(); resolve({ error: "request timed out after 60s. Check your internet connection or try again." }); });
     if (body) req.write(body);
     req.end();
   });
@@ -164,14 +170,123 @@ async function ensureLicenseActivation() {
 }
 
 // --- Project Heartbeat ---
-async function sendProjectHeartbeat(identity, result, extra = {}) {
+function _hashFileSha256(filePath) {
+  const buf = fs.readFileSync(filePath);
+  return crypto.createHash("sha256").update(buf).digest("hex");
+}
+
+function computeProjectDriftSummary(target) {
+  const hashesPath = path.join(target, "ai", "manifest", "config_hashes.json");
+  if (!fs.existsSync(hashesPath)) return null;
+  let hashes;
+  try {
+    hashes = JSON.parse(fs.readFileSync(hashesPath, "utf8"));
+  } catch {
+    return null;
+  }
+  const findings = [];
+  let totalConfigs = 0;
+  for (const name of DRIFT_TRACKED_CONFIGS) {
+    const filePath = path.join(target, name);
+    const exists = fs.existsSync(filePath) && fs.statSync(filePath).isFile();
+    const recorded = hashes[name];
+    if (exists) totalConfigs += 1;
+    if (recorded && !exists) {
+      findings.push({ config: name, type: "missing", severity: "warning" });
+      continue;
+    }
+    if (!recorded && exists) {
+      findings.push({ config: name, type: "extra", severity: "info" });
+      continue;
+    }
+    if (recorded && exists) {
+      try {
+        const currentHash = _hashFileSha256(filePath);
+        if (currentHash !== String(recorded.hash || "")) {
+          findings.push({ config: name, type: "modified", severity: "warning" });
+        }
+      } catch {
+        findings.push({ config: name, type: "unreadable", severity: "warning" });
+      }
+    }
+  }
+  const driftedCount = findings.filter((f) => f.type === "modified" || f.type === "missing").length;
+  return {
+    available: true,
+    clean: findings.length === 0,
+    drifted_count: driftedCount,
+    total_configs: totalConfigs,
+    findings,
+    updated_at: new Date().toISOString(),
+  };
+}
+
+async function sendProjectHeartbeat(target, identity, result, extra = {}) {
+  const drift = computeProjectDriftSummary(target);
   return apiCall("/v1/projects/heartbeat", {
     project_id: identity.project_id, stack: result.stack || identity.stack || "unknown",
     cli_version: VERSION, activation_status: "active", binding_status: "bound",
-    runtime_sessions: 0, swarm_active: 0, swarm_done: 0, channel: "npm", ...extra,
+    runtime_sessions: 0, swarm_active: 0, swarm_done: 0, channel: "npm",
+    ...(drift ? { drift } : {}),
+    ...extra,
   });
 }
 
+// --- First-run proof gate (issue #342) ---
+//
+// Idempotently appends a `first_run.success` event to ai/manifest/audit.jsonl
+// when all 4 activation gates have passed. Matches scripts/audit.py shape.
+// Returns { fired: boolean, elapsedS: number|null }.
+function logFirstRunSuccess(target, gates) {
+  try {
+    const auditPath = path.join(target, "ai", "manifest", "audit.jsonl");
+    if (!fs.existsSync(path.dirname(auditPath))) {
+      fs.mkdirSync(path.dirname(auditPath), { recursive: true });
+    }
+
+    // Idempotency: skip if a first_run.success event already exists for this project.
+    if (fs.existsSync(auditPath)) {
+      const existing = fs.readFileSync(auditPath, "utf8");
+      if (existing.includes('"action":"first_run.success"') ||
+          existing.includes('"action": "first_run.success"')) {
+        return { fired: false, elapsedS: null };
+      }
+    }
+
+    // Compute elapsed_s from the local first-run marker.
+    let elapsedS = null;
+    try {
+      const ob = require("./onboarding");
+      ob.trackFirstInit(target);
+      elapsedS = ob.getTimeToInit(target);
+    } catch {}
+
+    // Read current ai/VERSION for the entry's ai_version field.
+    let aiVersion = null;
+    try {
+      const vf = path.join(target, "ai", "VERSION");
+      if (fs.existsSync(vf)) aiVersion = fs.readFileSync(vf, "utf8").trim();
+    } catch {}
+
+    const entry = {
+      timestamp: new Date().toISOString(),
+      action: "first_run.success",
+      actor: "cli",
+      user: process.env.USER || process.env.USERNAME || "unknown",
+      ai_version: aiVersion,
+      details: JSON.stringify({
+        elapsed_s: elapsedS,
+        gates: gates || {},
+      }),
+    };
+
+    fs.appendFileSync(auditPath, JSON.stringify(entry) + "\n", "utf8");
+    return { fired: true, elapsedS };
+  } catch {
+    return { fired: false, elapsedS: null };
+  }
+}
+
 // --- File Writing ---
 function mergeSettingsJson(existing, incoming) {
   try {
@@ -184,31 +299,6 @@ function mergeSettingsJson(existing, incoming) {
   } catch { return incoming; }
 }
 
-function mergeManagedMarkdown(existing, incoming) {
-  let src = incoming;
-  if (src.startsWith("# managed: true")) {
-    src = src.split("\n").slice(1).join("\n").trimStart();
-  }
-  const managedBody = `${MANAGED_BEGIN}\n${src.trim()}\n${MANAGED_END}\n`;
-  if (existing.includes(MANAGED_BEGIN) && existing.includes(MANAGED_END)) {
-    const start = existing.indexOf(MANAGED_BEGIN);
-    const finish = existing.indexOf(MANAGED_END) + MANAGED_END.length;
-    return existing.slice(0, start) + managedBody + existing.slice(finish);
-  }
-  if (existing.includes(LEGACY_MANAGED_BEGIN) && existing.includes(LEGACY_MANAGED_END)) {
-    const finish = existing.indexOf(LEGACY_MANAGED_END) + LEGACY_MANAGED_END.length;
-    const rest = existing.slice(finish).trimStart();
-    return rest ? `${managedBody}\n${rest}` : managedBody;
-  }
-  return `${managedBody}\n${existing}`;
-}
-
-function contentLooksManaged(existing) {
-  return existing.includes("managed: true") || existing.includes('"managed": true') ||
-    (existing.includes(MANAGED_BEGIN) && existing.includes(MANAGED_END)) ||
-    (existing.includes(LEGACY_MANAGED_BEGIN) && existing.includes(LEGACY_MANAGED_END));
-}
-
 function writeFiles(target, files) {
   let created = 0, updated = 0, unchanged = 0, merged = 0, skipped = 0;
   const targetResolved = path.resolve(target);
@@ -241,54 +331,6 @@ function writeFiles(target, files) {
   return created + updated;
 }
 
-function writeManagedFiles(target, files) {
-  let created = 0, updated = 0, unchanged = 0, merged = 0, staged = 0, skipped = 0;
-  const targetResolved = path.resolve(target);
-  for (const [rel, content] of Object.entries(files)) {
-    if (typeof rel !== "string" || !rel || path.isAbsolute(rel) || rel.split(/[/\\]/).includes("..")) {
-      skipped++; continue;
-    }
-    const p = path.resolve(targetResolved, rel);
-    if (!p.startsWith(targetResolved + path.sep) && p !== targetResolved) { skipped++; continue; }
-    fs.mkdirSync(path.dirname(p), { recursive: true });
-    if (!fs.existsSync(p)) {
-      fs.writeFileSync(p, content, "utf8");
-      created++;
-      continue;
-    }
-    const existing = fs.readFileSync(p, "utf8");
-    if (existing === content) {
-      unchanged++;
-      continue;
-    }
-
-    if (rel.endsWith("settings.json")) {
-      fs.writeFileSync(p, mergeSettingsJson(existing, content), "utf8");
-      merged++;
-      continue;
-    }
-    if (rel === "AGENTS.md" || rel.endsWith("/CLAUDE.md")) {
-      fs.writeFileSync(p, mergeManagedMarkdown(existing, content), "utf8");
-      merged++;
-      continue;
-    }
-    if (!contentLooksManaged(existing)) {
-      fs.writeFileSync(`${p}.generated`, content, "utf8");
-      staged++;
-      continue;
-    }
-
-    fs.writeFileSync(p, content, "utf8");
-    updated++;
-  }
-  const parts = [`${created} created`, `${updated} updated`, `${unchanged} unchanged`];
-  if (merged) parts.push(`${merged} merged`);
-  if (staged) parts.push(`${staged} staged`);
-  if (skipped) parts.push(`${skipped} skipped (unsafe path)`);
-  log(parts.join(", "));
-  return created + updated + merged;
-}
-
 // --- Repo Script Lookup ---
 function findRepoScript(target, scriptName) {
   const candidates = [
@@ -350,9 +392,9 @@ module.exports = {
   // Plan / Tier
   _detectPlanLocal, requirePlan, getSwarmQuotaLocal,
   // Project
-  sendProjectHeartbeat, recordExperienceEvent,
+  sendProjectHeartbeat, recordExperienceEvent, logFirstRunSuccess,
   // Files
-  mergeSettingsJson, mergeManagedMarkdown, writeFiles, writeManagedFiles, findRepoScript,
+  mergeSettingsJson, writeFiles, findRepoScript,
   // Version
   checkVersion,
   // Re-exports for convenience