@ashulab/agent-forge 0.3.0 → 0.4.0

package/README.md

@@ -9,7 +9,7 @@ On each run the launcher:
 - detects installed provider CLIs on your PATH
 - asks which provider to use (or takes it from a flag)
 - starts the provider with the GitHub token and a per-agent git identity injected into the environment
-- writes the agent's `systemPrompt` into the provider's startup memory file (`CLAUDE.md` / `AGENTS.md`) so subagents inherit the identity
+- injects the agent's `systemPrompt` per process (`claude --append-system-prompt`, `codex -c developer_instructions`; antigravity falls back to an `AGENTS.md` block)
 
 Provider auth stays in the provider CLI — the launcher never handles provider API keys.
 
@@ -60,9 +60,10 @@ The shape, for reference — the `"$schema"` line points at the published schema
 }
 ```
 
-- The **installation id is not stored** — it is resolved on each run, in order: the owner of the repo you launch in, then `account`, then the App's sole installation. So the same agent works across every org the App is installed on, and it survives an uninstall/reinstall (which rotates the id).
-- Add `"account": "<org-or-user login>"` only when you run outside a matching repo and the App has more than one installation.
-- `installationId` is still accepted as an explicit override — set it to pin a specific id or skip the lookup (offline, or in a git credential helper).
+- The **installation id is not stored** — it is resolved on each run, in order: the owner of the repo you launch in, then the App's sole installation. So the same agent works across every org the App is installed on, and it survives an uninstall/reinstall (which rotates the id).
+- An App installed on more than one account only resolves when you launch from inside a repo it covers — that repo picks the installation.
+- `installationId` is accepted as an explicit override — set it to pin a specific id or skip the lookup (offline, or in a git credential helper).
+- One agent, many accounts: a **private** GitHub App only installs on the account that owns it. To run the agent on both a personal account and an org, make the App public or use one App per account — see [docs/github-app.md](docs/github-app.md).
 - `botId` is optional. When omitted it is resolved from the GitHub API using `botName` so the git author email links commits to the bot. Set it explicitly only to skip that lookup (e.g. offline).
 - Do not put provider-specific config here — providers are auto-detected from PATH.
 
@@ -93,17 +94,19 @@ On launch, `agent-forge` prints the scope GitHub actually granted (`scope` row i
 
 You need a GitHub App first — its **App ID**, a **private key**, and an **installation**. If you don't have one yet, follow [docs/github-app.md](docs/github-app.md).
 
+Running `agent-forge` with no agents configured offers to run the wizard for you.
+
 ### Guided (recommended)
 
 ```bash
 agent-forge add
 ```
 
-You provide the **GitHub App ID** and the **path to its private key**. The wizard derives the rest from the GitHub API — slug (`botName`), bot user id, and the account (asked only when the App is installed on more than one) — asks for a label and an optional system prompt, mints a test token to confirm it works, and writes the entry. It writes to the resolved config path — the global registry (`~/.config/agent-forge/agents.json`) unless `$AGENT_FORGE_CONFIG` or an existing `./agents.json` redirects it.
+You provide the **GitHub App ID** and the **path to its private key**. The wizard derives the rest from the GitHub API — slug (`botName`), bot user id — asks for a label and an optional system prompt, mints a test token to confirm it works, and writes the entry. It writes to the resolved config path — the global registry (`~/.config/agent-forge/agents.json`) unless `$AGENT_FORGE_CONFIG` or an existing `./agents.json` redirects it.
 
 ### Manual
 
-Copy one agent object inside the `agents` array and set unique values for `name`, `label`, `appId`, `botName`, `privateKeyPath` — plus `account` if the App has more than one installation. Make sure the private key file exists and is readable.
+Copy one agent object inside the `agents` array and set unique values for `name`, `label`, `appId`, `botName`, `privateKeyPath`. Make sure the private key file exists and is readable.
 
 ## Launch
 
@@ -113,13 +116,26 @@ Interactive:
 agent-forge
 ```
 
-Direct flags (passing both skips all prompts; passing one pre-fills it):
+Direct flags (passing both skips the menus; passing one pre-fills it, the other is prompted — or auto-picked when only one agent or provider is available):
 
 ```bash
 agent-forge --agent ops-agent --provider claude
 agent-forge --agent review-agent --provider codex
 ```
 
+Before launching, it prints a summary:
+
+```
+│  provider  claude
+│  identity  ops-agent[bot]
+│  account   AshuLab            ← which account the token is for
+│  repo      AshuLab/app        ← the repo you're in (drives account)
+│  scope     write: contents, issues, pull_requests  ·  +4 read
+│  expires   ~59m               ← installation tokens last ~1h
+```
+
+(The `antigravity` provider adds a `memory` row pointing at the `AGENTS.md` it wrote.)
+
 Other commands:
 
 ```bash
@@ -130,10 +146,11 @@ agent-forge --help
 
 ### Provider-specific prompt behavior
 
-- `claude`: passed via `--append-system-prompt` (lands in the real system prompt)
-- `codex` / `antigravity` (`agy`): no CLI flag — identity comes from `AGENTS.md` only (`agy --prompt` is headless `--print`; a codex positional arg is a fake first user turn)
+`systemPrompt` is injected per process — no repo file is touched:
 
-The launcher also writes `systemPrompt` into the provider's startup memory file in the working directory (`CLAUDE.md` for claude, `AGENTS.md` for codex and antigravity), inside a managed `agent-forge:identity` block. This keeps the identity in place for subagents the provider spawns, not just its main thread. The block is rewritten on each run and safe to keep in version control.
+- `claude`: `--append-system-prompt` (lands in the real system prompt)
+- `codex`: `-c developer_instructions=…` (appends a developer message; unlike `model_instructions_file` it does not replace codex's base prompt)
+- `antigravity` (`agy`): no such flag — the launcher writes `systemPrompt` into `AGENTS.md` in the working directory, inside a managed `agent-forge:identity` block. Do not commit it. Run one agent per worktree.
 
 ## Token refresh
 

package/dist/launcher.cjs

@@ -5377,19 +5377,9 @@ function pickInstallation(installations, agent) {
   if (installations.length === 0) {
     throw new Error(`GitHub App ${agent.appId} has no installations. Install it on an account or org first.`);
   }
-  if (agent.account) {
-    const want = String(agent.account).toLowerCase();
-    const match = installations.find((item) => item.account.toLowerCase() === want);
-    if (!match) {
-      throw new Error(
-        `GitHub App ${agent.appId} is not installed on "${agent.account}". Installed on: ${installations.map((item) => item.account).join(", ")}.`
-      );
-    }
-    return match.id;
-  }
   if (installations.length === 1) return installations[0].id;
   throw new Error(
-    `GitHub App ${agent.appId} is installed on ${installations.length} accounts (${installations.map((item) => item.account).join(", ")}). Run inside a repo under one of them, or add "account" to agent "${agent.name}".`
+    `GitHub App ${agent.appId} is installed on ${installations.length} accounts (${installations.map((item) => item.account).join(", ")}). Launch from inside a repo under one of them.`
   );
 }
 function parseGithubRemote(url) {
@@ -5484,7 +5474,9 @@ function getProviderPromptArgs(providerName, agent) {
   if (!prompt) {
     return [];
   }
-  return providerName === "claude" ? ["--append-system-prompt", prompt] : [];
+  if (providerName === "claude") return ["--append-system-prompt", prompt];
+  if (providerName === "codex") return ["-c", `developer_instructions=${JSON.stringify(prompt)}`];
+  return [];
 }
 
 // src/identity.js
@@ -5492,7 +5484,7 @@ var import_node_fs3 = require("node:fs");
 var import_node_path3 = require("node:path");
 var START = "<!-- agent-forge:identity:start -->";
 var END = "<!-- agent-forge:identity:end -->";
-var MEMORY_FILE = { claude: "CLAUDE.md", codex: "AGENTS.md", antigravity: "AGENTS.md" };
+var MEMORY_FILE = { antigravity: "AGENTS.md" };
 function upsertIdentityBlock(content, prompt) {
   const block2 = `${START}
 ${prompt}
@@ -5542,7 +5534,7 @@ var import_node_util3 = require("node:util");
 // package.json
 var package_default = {
   name: "@ashulab/agent-forge",
-  version: "0.3.0",
+  version: "0.4.0",
   description: "Give claude/codex/antigravity their own GitHub identity: a bot account, a scoped token minted per run, git attribution to match",
   license: "MIT",
   author: "Diego Ghersi <ghersidl@gmail.com>",
@@ -5664,17 +5656,8 @@ async function addAgentWizard({ embedded = false } = {}) {
   if (meta.installations.length === 0) {
     throw new Error("This App has no installations. Install it on an account or org first.");
   }
-  let account;
-  if (meta.installations.length === 1) {
-    note(`${meta.installations[0].account} \u2014 resolved automatically each run`, "Installation");
-  } else {
-    account = keep(
-      await select({
-        message: "Which account is this agent for?",
-        options: meta.installations.map((i2) => ({ value: i2.account, label: `${i2.account} (${i2.id})` }))
-      })
-    );
-  }
+  const where = meta.installations.length === 1 ? `${meta.installations[0].account} \u2014 resolved automatically each run` : `${meta.installations.map((i2) => i2.account).join(", ")} \u2014 resolved from the repo you launch in`;
+  note(where, "Installation");
   const name = (keep(await text({ message: "Agent name", placeholder: meta.slug, defaultValue: meta.slug })) || meta.slug).trim();
   const label = (keep(await text({ message: "Label", placeholder: meta.name, defaultValue: meta.name })) || meta.name).trim();
   const systemPrompt = keep(await text({ message: "System prompt (optional)", placeholder: "You are ..." })).trim();
@@ -5684,7 +5667,6 @@ async function addAgentWizard({ embedded = false } = {}) {
     appId,
     botName: meta.slug,
     privateKeyPath,
-    ...account ? { account } : {},
     ...systemPrompt ? { systemPrompt } : {}
   };
   const check = spinner();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ashulab/agent-forge",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Give claude/codex/antigravity their own GitHub identity: a bot account, a scoped token minted per run, git attribution to match",
   "license": "MIT",
   "author": "Diego Ghersi <ghersidl@gmail.com>",

package/schema/agents.schema.json

@@ -25,13 +25,9 @@
             "type": "string",
             "description": "GitHub App ID (numeric, stored as a string)"
           },
-          "account": {
-            "type": "string",
-            "description": "Account/org login where the App is installed. Fallback for installation-id resolution when you run outside a matching repo. Needed only when the App has more than one installation. Resolution order: repo owner, then account, then the sole installation."
-          },
           "installationId": {
             "type": "string",
-            "description": "Optional override. Normally the installation id is resolved (repo owner, then account, then the sole installation). Set this to pin a specific id or skip the lookup (offline, or in a git credential helper)."
+            "description": "Optional override. Normally the installation id is resolved (repo owner, then the App's sole installation). Set this to pin a specific id or skip the lookup (offline, or in a git credential helper)."
           },
           "botName": {
             "type": "string",