@epicai/legion 1.0.0 → 1.0.2

package/dist/bin/setup.js

@@ -104,50 +104,6 @@ function loadCredentials() {
     }
     return creds;
 }
-// ─── Category display names ─────────────────────────────────
-const CATEGORY_LABELS = {
-    'ai': 'AI / ML',
-    'cloud': 'Cloud Infrastructure',
-    'collaboration': 'Collaboration',
-    'commerce': 'Commerce & eCommerce',
-    'communication': 'Communication',
-    'compliance': 'Compliance & GRC',
-    'construction': 'Construction',
-    'crm': 'CRM & Sales',
-    'customer-support': 'Customer Support',
-    'cybersecurity': 'Cybersecurity',
-    'data': 'Data & Analytics',
-    'design': 'Design & Creative',
-    'devops': 'DevOps & CI/CD',
-    'education': 'Education',
-    'energy': 'Energy',
-    'engineering': 'Engineering & Aerospace',
-    'erp': 'ERP',
-    'finance': 'Finance & Payments',
-    'government': 'Government',
-    'healthcare': 'Healthcare',
-    'hospitality': 'Hospitality & Food',
-    'hr': 'HR & People',
-    'identity': 'Identity & Access',
-    'insurance': 'Insurance',
-    'iot': 'IoT & Devices',
-    'legal': 'Legal',
-    'logistics': 'Logistics & Shipping',
-    'manufacturing': 'Manufacturing',
-    'marketing': 'Marketing',
-    'media': 'Media & Entertainment',
-    'misc': 'Other',
-    'observability': 'Observability & Monitoring',
-    'productivity': 'Productivity',
-    'real-estate': 'Real Estate & Property',
-    'science': 'Science & Research',
-    'social': 'Social Media',
-    'telecom': 'Telecom',
-    'travel': 'Travel & Transportation',
-};
-function formatCategory(cat) {
-    return CATEGORY_LABELS[cat] || cat.charAt(0).toUpperCase() + cat.slice(1).replace(/-/g, ' ');
-}
 function expandHome(p) {
     return p.startsWith('~') ? join(homedir(), p.slice(1)) : p;
 }
@@ -962,339 +918,35 @@ async function runSetupWizard() {
         p.log.success(`Using ${system.localBackend} on port ${system.localPort}`);
         configuredClients.push('local');
     }
-    // Step 3: Secrets provider
-    const secretsChoice = await p.select({
-        message: 'Where are your API and MCP credentials stored?',
+    // Step 3: Zero-credential live demo
+    const ZERO_CRED = [
+        { id: 'searchcode', name: 'Searchcode', desc: 'Search 75 billion lines of open source code', tools: 6 },
+        { id: 'com-claude-mcp-pubmed-pubmed', name: 'PubMed', desc: 'Search 36 million biomedical research papers', tools: 7 },
+        { id: 'robtex', name: 'Robtex', desc: 'Network intelligence — DNS, IP, ASN lookups', tools: 45 },
+        { id: 'govbase-mcp', name: 'Govbase', desc: 'Government data — legislators, bills, committees', tools: 10 },
+    ];
+    const demoChoice = await p.select({
+        message: 'Try a live data connection? These require no credentials:',
         options: [
-            { value: 'vault', label: 'HashiCorp Vault' },
-            { value: 'aws-sm', label: 'AWS Secrets Manager' },
-            { value: 'azure-kv', label: 'Azure Key Vault' },
-            { value: '1password', label: '1Password CLI' },
-            { value: 'doppler', label: 'Doppler' },
-            { value: 'env', label: 'Environment variables', hint: 'already exported in shell' },
-            { value: 'manual', label: 'I\'ll enter them manually' },
+            ...ZERO_CRED.map(a => ({
+                value: a.id,
+                label: `${a.name}`,
+                hint: `${a.desc} — ${a.tools} tools`,
+            })),
+            { value: 'skip', label: 'Skip for now', hint: 'add adapters later with: npx @epicai/legion add <name>' },
         ],
     });
-    if (p.isCancel(secretsChoice)) {
-        p.cancel('Setup cancelled.');
-        process.exit(0);
-    }
-    let vaultAddr = '';
-    let vaultToken = '';
-    let vaultConnected = false;
-    if (secretsChoice === 'vault') {
-        const envAddr = process.env.VAULT_ADDR;
-        const envToken = process.env.VAULT_TOKEN;
-        if (envAddr && envToken) {
-            p.log.success(`Detected VAULT_ADDR=${envAddr}`);
-            vaultAddr = envAddr;
-            vaultToken = envToken;
-        }
-        else {
-            const addr = await p.text({
-                message: 'Vault address',
-                placeholder: 'https://vault.example.com:8200',
-                validate: (v) => { if (!v)
-                    return 'Required'; if (!v.startsWith('http'))
-                    return 'Must start with http:// or https://'; },
-            });
-            if (p.isCancel(addr)) {
-                p.cancel('Setup cancelled.');
-                process.exit(0);
-            }
-            const token = await p.password({ message: 'Vault token', validate: (v) => { if (!v)
-                    return 'Required'; } });
-            if (p.isCancel(token)) {
-                p.cancel('Setup cancelled.');
-                process.exit(0);
-            }
-            vaultAddr = addr;
-            vaultToken = token;
-        }
-        s.start('Connecting to Vault');
-        try {
-            const controller = new AbortController();
-            const t = setTimeout(() => controller.abort(), 5000);
-            const resp = await fetch(`${vaultAddr}/v1/sys/health`, { headers: { 'X-Vault-Token': vaultToken }, signal: controller.signal });
-            clearTimeout(t);
-            if (resp.ok) {
-                vaultConnected = true;
-                s.stop(`Connected to Vault at ${vaultAddr}`);
-                writeCredential('VAULT_ADDR', vaultAddr);
-                writeCredential('VAULT_TOKEN', vaultToken);
-            }
-            else {
-                s.stop(`Vault returned ${resp.status} — check your token`);
-            }
-        }
-        catch {
-            s.stop(`Cannot reach Vault at ${vaultAddr}`);
-        }
-    }
-    if (secretsChoice === '1password') {
-        try {
-            execSync('op --version', { stdio: 'pipe' });
-            p.log.success('1Password CLI detected');
-        }
-        catch {
-            p.log.warning('1Password CLI not found — install from https://1password.com/downloads/command-line');
-        }
-    }
-    if (secretsChoice === 'doppler') {
-        try {
-            execSync('doppler --version', { stdio: 'pipe' });
-            p.log.success('Doppler CLI detected');
-        }
-        catch {
-            p.log.warning('Doppler CLI not found — install from https://docs.doppler.com/docs/install-cli');
-        }
-    }
-    // Step 4: Adapter selection — tree structure (group → category → adapters)
-    // Build category map
-    const categories = new Map();
-    for (const adapter of allAdapters) {
-        const cat = adapter.category || 'other';
-        if (!categories.has(cat))
-            categories.set(cat, []);
-        categories.get(cat).push(adapter);
-    }
-    // Top-level groups that map to subcategories
-    const GROUPS = {
-        'security': {
-            label: 'Security & Identity',
-            cats: ['cybersecurity', 'identity', 'compliance'],
-        },
-        'devops': {
-            label: 'DevOps & Infrastructure',
-            cats: ['devops', 'cloud', 'observability', 'engineering'],
-        },
-        'business': {
-            label: 'Business & Finance',
-            cats: ['finance', 'crm', 'commerce', 'marketing', 'customer-support', 'hr', 'productivity', 'erp'],
-        },
-        'comms': {
-            label: 'Communication & Collaboration',
-            cats: ['communication', 'collaboration'],
-        },
-        'data-ai': {
-            label: 'Data & AI',
-            cats: ['data', 'ai', 'science'],
-        },
-        'industry': {
-            label: 'Industry',
-            cats: ['healthcare', 'hospitality', 'construction', 'manufacturing', 'real-estate', 'travel', 'education', 'insurance', 'legal', 'energy', 'automotive', 'telecom', 'logistics', 'government', 'iot'],
-        },
-        'media': {
-            label: 'Media & Social',
-            cats: ['media', 'social', 'design'],
-        },
-        'other': {
-            label: 'Other',
-            cats: ['misc', 'other'],
-        },
-    };
-    // Count adapters per group
-    function countGroup(cats) {
-        let total = 0;
-        for (const cat of cats)
-            total += (categories.get(cat) || []).length;
-        return total;
-    }
-    // Collect any categories not in a group
-    const allGroupedCats = new Set(Object.values(GROUPS).flatMap(g => g.cats));
-    const ungrouped = Array.from(categories.keys()).filter(c => !allGroupedCats.has(c));
-    if (ungrouped.length > 0) {
-        GROUPS['other'].cats.push(...ungrouped);
-    }
-    const groupOptions = Object.entries(GROUPS)
-        .filter(([_, g]) => countGroup(g.cats) > 0)
-        .map(([key, g]) => ({
-        value: key,
-        label: `${g.label} (${countGroup(g.cats)})`,
-    }));
-    const selectedGroups = await p.multiselect({
-        message: 'What do you work with? (Space to select, Enter to confirm)',
-        options: groupOptions,
-        required: false,
-    });
-    if (p.isCancel(selectedGroups)) {
+    if (p.isCancel(demoChoice)) {
         p.cancel('Setup cancelled.');
         process.exit(0);
     }
     const selectedAdapterIds = [];
-    for (const groupKey of selectedGroups) {
-        const group = GROUPS[groupKey];
-        if (!group)
-            continue;
-        // Show subcategories within this group
-        const subCatOptions = group.cats
-            .filter(cat => (categories.get(cat) || []).length > 0)
-            .map(cat => ({
-            value: cat,
-            label: `${formatCategory(cat)} (${(categories.get(cat) || []).length})`,
-        }));
-        if (subCatOptions.length === 0)
-            continue;
-        const selectedSubCats = await p.multiselect({
-            message: `${group.label} — select categories (Space to select, Enter to confirm)`,
-            options: subCatOptions,
-            required: false,
-        });
-        if (p.isCancel(selectedSubCats))
-            continue;
-        if (selectedSubCats.length > 0) {
-            // Show adapters from selected subcategories
-            const available = [];
-            for (const cat of selectedSubCats) {
-                for (const a of categories.get(cat) || []) {
-                    available.push({ value: a.id, label: a.name || a.id, hint: a.description?.slice(0, 60) });
-                }
-            }
-            if (available.length > 0) {
-                const selected = await p.multiselect({
-                    message: `Select adapters (${available.length} available)`,
-                    options: available.slice(0, 50),
-                    required: false,
-                });
-                if (!p.isCancel(selected)) {
-                    selectedAdapterIds.push(...selected);
-                }
-            }
-        }
-    }
-    // Step 5: Credentials
-    if (selectedAdapterIds.length > 0) {
-        if (secretsChoice === 'vault' && vaultConnected) {
-            s.start('Pulling credentials from Vault');
-            let pulled = 0;
-            for (const adapterId of selectedAdapterIds) {
-                try {
-                    const controller = new AbortController();
-                    const t = setTimeout(() => controller.abort(), 3000);
-                    const resp = await fetch(`${vaultAddr}/v1/secret/data/${adapterId}`, {
-                        headers: { 'X-Vault-Token': vaultToken },
-                        signal: controller.signal,
-                    });
-                    clearTimeout(t);
-                    if (resp.ok) {
-                        const data = await resp.json();
-                        const secrets = data?.data?.data;
-                        if (secrets) {
-                            for (const [k, v] of Object.entries(secrets)) {
-                                writeCredential(k, v);
-                            }
-                            pulled++;
-                        }
-                    }
-                }
-                catch { /* skip */ }
-            }
-            s.stop(`Pulled credentials for ${pulled} of ${selectedAdapterIds.length} adapters`);
-        }
-        else if (secretsChoice === '1password') {
-            s.start('Pulling credentials from 1Password');
-            let pulled = 0;
-            for (const adapterId of selectedAdapterIds) {
-                try {
-                    const result = execSync(`op item get "${adapterId}" --format json 2>/dev/null`, { encoding: 'utf-8', timeout: 5000 });
-                    const item = JSON.parse(result);
-                    const fields = item.fields || [];
-                    for (const field of fields) {
-                        if (field.value && field.label) {
-                            const envKey = `${adapterId.toUpperCase().replace(/-/g, '_')}_${field.label.toUpperCase().replace(/\s+/g, '_')}`;
-                            writeCredential(envKey, field.value);
-                        }
-                    }
-                    pulled++;
-                }
-                catch { /* skip */ }
-            }
-            s.stop(`Pulled credentials for ${pulled} of ${selectedAdapterIds.length} adapters`);
-        }
-        else if (secretsChoice === 'doppler') {
-            s.start('Pulling credentials from Doppler');
-            try {
-                const result = execSync('doppler secrets download --no-file --format json 2>/dev/null', { encoding: 'utf-8', timeout: 10000 });
-                const secrets = JSON.parse(result);
-                for (const [k, v] of Object.entries(secrets)) {
-                    if (typeof v === 'string')
-                        writeCredential(k, v);
-                }
-                s.stop('Credentials pulled from Doppler');
-            }
-            catch {
-                s.stop('Doppler pull failed — configure with: doppler setup');
-            }
-        }
-        else if (secretsChoice === 'manual') {
-            for (const adapterId of selectedAdapterIds) {
-                const adapter = allAdapters.find(a => a.id === adapterId);
-                if (!adapter)
-                    continue;
-                const envKey = adapter.rest?.envKey || `${adapterId.toUpperCase().replace(/-/g, '_')}_API_KEY`;
-                const key = await p.password({ message: `${envKey} for ${adapter.name || adapterId}` });
-                if (!p.isCancel(key) && key) {
-                    writeCredential(envKey, key);
-                }
-            }
-        }
-        else if (secretsChoice === 'env') {
-            p.log.info('Using credentials from environment variables');
-        }
-        // Step 6: Install stdio dependencies
-        for (const adapterId of selectedAdapterIds) {
-            const adapter = allAdapters.find(a => a.id === adapterId);
-            if (!adapter?.mcp?.packageName || adapter.mcp.transport !== 'stdio')
-                continue;
-            s.start(`Installing ${adapter.name || adapterId}`);
-            try {
-                execSync(`npm install -g --ignore-scripts ${adapter.mcp.packageName}`, { stdio: 'pipe', timeout: 60000 });
-                // Verify artifact integrity
-                try {
-                    const { ArtifactVerifier } = await import('../trust/ArtifactVerifier.js');
-                    const verifier = new ArtifactVerifier({ verifyDigests: true });
-                    const pkgPath = execSync(`npm root -g`, { encoding: 'utf-8', timeout: 5000 }).trim();
-                    const mainFile = join(pkgPath, adapter.mcp.packageName, 'package.json');
-                    const result = await verifier.verify(adapter.mcp.packageName, mainFile);
-                    if (!result.valid) {
-                        s.stop(`${pc.red('✗')} ${adapter.name || adapterId} — integrity check failed`);
-                    }
-                    else {
-                        s.stop(`${pc.green('✓')} ${adapter.name || adapterId} installed — verified`);
-                    }
-                }
-                catch {
-                    s.stop(`${pc.green('✓')} ${adapter.name || adapterId} installed`);
-                }
-            }
-            catch {
-                s.stop(`${pc.yellow('!')} ${adapter.name || adapterId} — run manually: npm install -g ${adapter.mcp.packageName}`);
-            }
-        }
-        // Step 7: Verify
-        s.start('Verifying connections');
-        const creds = loadCredentials();
-        let verified = 0;
-        const results = [];
-        for (const adapterId of selectedAdapterIds) {
-            const adapter = allAdapters.find(a => a.id === adapterId);
-            if (!adapter)
-                continue;
-            const hasKey = adapter.rest?.envKey ? !!creds[adapter.rest.envKey] : false;
-            if (hasKey) {
-                verified++;
-                results.push(`${pc.green('✓')} ${adapter.name || adapterId}  ${adapter.rest?.toolCount || 0} tools`);
-            }
-            else {
-                results.push(`${pc.yellow('○')} ${adapter.name || adapterId}  credentials needed`);
-            }
-        }
-        s.stop('Verification complete');
-        if (results.length > 0) {
-            p.note(results.join('\n'), `${verified} of ${selectedAdapterIds.length} adapters ready`);
-        }
+    if (demoChoice !== 'skip') {
+        const picked = ZERO_CRED.find(a => a.id === demoChoice);
+        selectedAdapterIds.push(demoChoice);
+        p.log.success(`${picked.name} connected — ${picked.tools} tools ready`);
     }
-    // Step 8: Save state and config
+    // Step 4: Save state and config
     const state = loadState();
     for (const id of selectedAdapterIds) {
         const adapter = allAdapters.find(a => a.id === id);
@@ -1308,16 +960,14 @@ async function runSetupWizard() {
     saveState(state);
     saveConfig({
         selectedAdapters: selectedAdapterIds,
-        secretsProvider: secretsChoice,
+        secretsProvider: 'manual',
         aiClient: configuredClients.join(','),
         localBackend: system.localBackend || undefined,
     });
     // Outro
     p.note([
-        `Add adapters:     ${pc.cyan('npx @epicai/legion add <name>')}`,
-        `Remove adapters:  ${pc.cyan('npx @epicai/legion remove <name>')}`,
+        `Connect more:     ${pc.cyan('npx @epicai/legion add <name>')}`,
         `Health check:     ${pc.cyan('npx @epicai/legion health')}`,
-        `Update adapters:  ${pc.cyan('npx @epicai/legion update')}`,
         `List adapters:    ${pc.cyan('npx @epicai/legion list')}`,
     ].join('\n'), 'Manage your adapters');
     p.outro(`${pc.green('Legion is ready.')} Your credentials never leave this machine.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epicai/legion",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Epic AI® Legion — 35,020 tools. One self-hosted MCP server. Intelligent Virtual Assistant (IVA) integration layer for AI agents.",
   "type": "module",
   "main": "./dist/index.js",