@contextai-core/cli 0.1.2 → 0.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@contextai-core/cli",
-    "version": "0.1.2",
+    "version": "0.1.4",
     "description": "Give your AI agents persistent memory. Install pre-built context packs for Cursor, Windsurf, Copilot & more.",
     "author": "ContextAI",
     "license": "ISC",

package/src/actions/init.js

@@ -2,10 +2,10 @@
 import chalk from "chalk";
 import path from "path";
 import fs from "fs";
-import { installPackage } from "./install.js";
 
 /**
- * Initializes the ContextAI Shared Brain (.ai) by installing the Core UCP.
+ * Initializes the ContextAI Shared Brain (.ai).
+ * Creates the directory structure but installs NO packs by default.
  */
 export async function init() {
     console.log(chalk.green('🧠 Initializing ContextAI Shared Brain...'));
@@ -14,44 +14,13 @@ export async function init() {
     // 1. Create .ai directory if missing
     if (!fs.existsSync(aiDir)) {
         fs.mkdirSync(aiDir);
+        console.log(chalk.blue('   Created .ai/ directory.'));
+    } else {
+        console.log(chalk.yellow('   .ai/ directory already exists.'));
     }
 
-    // 2. Check overlap
-    if (fs.existsSync(path.join(aiDir, 'ucp'))) {
-        console.log(chalk.yellow('⚠️  .ai/ucp already exists. Skipping core installation.'));
-        return;
-    }
-
-    try {
-        // 3. Delegate to Install Action
-        // "universal-context-protocol" should be the slug of the Core UCP in our DB.
-        // For now, if that pack doesn't exist, we fallback to the "seed" method?
-        // NO, we should enforce the "Git/Marketplace" model.
-
-        console.log(chalk.blue('⬇️  Downloading Universal Context Protocol (Core OS)...'));
-
-        // We call installPackage directly.
-        // We assume "universal-context-protocol" is free and public.
-        await installPackage("universal-context-protocol", {});
-
-        // 4. Create Bootloader (Traffic Cop) if missing
-        const bootPath = path.join(aiDir, 'boot.md');
-        if (!fs.existsSync(bootPath)) {
-            fs.writeFileSync(
-                bootPath,
-                `# AI Context Container\n\nThis project uses multiple context protocols.\n\n## Active Protocols\n1. **UCP** (Core OS): [Unified Context Protocol](./ucp/README.md)\n   - Use for: General Project Context, Workflows.\n`
-            );
-        }
-
-        console.log(chalk.green('\n✅ Initialization Complete!'));
-        console.log(chalk.gray('   Your agent now has a brain in .ai/'));
-
-    } catch (error) {
-        console.error(chalk.red(`\n❌ Init Failed: ${error.message}`));
-        console.error(chalk.yellow('   Ensure you have internet connection and the "universal-context-protocol" pack is live.'));
-        // Fallback or exit?
-        // For resilience, maybe write a minimal skeleton if download fails?
-        // User asked to "download from live ucp template link".
-        process.exit(1);
-    }
+    console.log(chalk.green('\n✅ Initialization Complete!'));
+    console.log(chalk.white('   Your project is ready context.'));
+    console.log(chalk.cyan('\n   Next Step: Install a Context Pack'));
+    console.log(chalk.gray('   $ npx contextai install @<username>/ucp'));
 }

package/src/logic/file-ops.js

@@ -8,6 +8,14 @@ import chalk from 'chalk';
  */
 export async function smartWriteFile(filePath, content, reason) {
     const fullPath = path.resolve(process.cwd(), filePath);
+
+    // SAFETY: Restrict usage to .ai directory (and context folders)
+    // This prevents the tool from conflicting with the Agent's native coding capabilities.
+    const relPath = path.relative(process.cwd(), fullPath);
+    if (!relPath.startsWith('.ai') && !relPath.startsWith('.context')) {
+        throw new Error(`ACCESS DENIED: 'contextai write' is restricted to the .ai/ directory.\nUse your native 'write_file' tool for application code.`);
+    }
+
     const dir = path.dirname(fullPath);
 
     // 1. Write the file
@@ -16,19 +24,23 @@ export async function smartWriteFile(filePath, content, reason) {
     }
     fs.writeFileSync(fullPath, content, 'utf8');
 
-    // 2. Update Changelog
-    const aiDir = path.join(process.cwd(), '.ai', 'context');
-    const changelogPath = path.join(aiDir, 'changelog.md');
+    // 2. System Audit Log (Immutable)
+    // Tracks "What happened" for safety/replay.
+    // Agent cannot modify this directly; it's a side-effect of the tool.
+    const aiDir = path.join(process.cwd(), '.ai');
+    const auditPath = path.join(aiDir, 'audit.log');
 
-    if (fs.existsSync(changelogPath)) {
-        const today = new Date().toISOString().split('T')[0];
-        const entry = `| ${today} | Agent | ${reason} |`;
+    if (!fs.existsSync(aiDir)) {
+        try { fs.mkdirSync(aiDir); } catch (e) { }
+    }
 
-        let changelog = fs.readFileSync(changelogPath, 'utf8');
-        // append to table (simplistic approach: append before last empty line or at end)
-        changelog += `\n${entry}`;
+    const timestamp = new Date().toISOString();
+    const logEntry = `[${timestamp}] ACTION:WRITE file="${filePath}" reason="${reason}"\n`;
 
-        fs.writeFileSync(changelogPath, changelog, 'utf8');
+    try {
+        fs.appendFileSync(auditPath, logEntry, 'utf8');
+    } catch (e) {
+        // Silently fail logging rather than breaking the build
     }
 
     return { success: true, path: fullPath };