@epicai/legion 1.0.1 → 1.0.2

package/dist/bin/setup.js

@@ -918,288 +918,35 @@ async function runSetupWizard() {
         p.log.success(`Using ${system.localBackend} on port ${system.localPort}`);
         configuredClients.push('local');
     }
-    // Step 3: Secrets provider
-    const secretsChoice = await p.select({
-        message: 'Where are your API and MCP credentials stored?',
+    // Step 3: Zero-credential live demo
+    const ZERO_CRED = [
+        { id: 'searchcode', name: 'Searchcode', desc: 'Search 75 billion lines of open source code', tools: 6 },
+        { id: 'com-claude-mcp-pubmed-pubmed', name: 'PubMed', desc: 'Search 36 million biomedical research papers', tools: 7 },
+        { id: 'robtex', name: 'Robtex', desc: 'Network intelligence — DNS, IP, ASN lookups', tools: 45 },
+        { id: 'govbase-mcp', name: 'Govbase', desc: 'Government data — legislators, bills, committees', tools: 10 },
+    ];
+    const demoChoice = await p.select({
+        message: 'Try a live data connection? These require no credentials:',
         options: [
-            { value: 'vault', label: 'HashiCorp Vault' },
-            { value: 'aws-sm', label: 'AWS Secrets Manager' },
-            { value: 'azure-kv', label: 'Azure Key Vault' },
-            { value: '1password', label: '1Password CLI' },
-            { value: 'doppler', label: 'Doppler' },
-            { value: 'env', label: 'Environment variables', hint: 'already exported in shell' },
-            { value: 'manual', label: 'I\'ll enter them manually' },
+            ...ZERO_CRED.map(a => ({
+                value: a.id,
+                label: `${a.name}`,
+                hint: `${a.desc} — ${a.tools} tools`,
+            })),
+            { value: 'skip', label: 'Skip for now', hint: 'add adapters later with: npx @epicai/legion add <name>' },
         ],
     });
-    if (p.isCancel(secretsChoice)) {
+    if (p.isCancel(demoChoice)) {
         p.cancel('Setup cancelled.');
         process.exit(0);
     }
-    let vaultAddr = '';
-    let vaultToken = '';
-    let vaultConnected = false;
-    if (secretsChoice === 'vault') {
-        const envAddr = process.env.VAULT_ADDR;
-        const envToken = process.env.VAULT_TOKEN;
-        if (envAddr && envToken) {
-            p.log.success(`Detected VAULT_ADDR=${envAddr}`);
-            vaultAddr = envAddr;
-            vaultToken = envToken;
-        }
-        else {
-            const addr = await p.text({
-                message: 'Vault address',
-                placeholder: 'https://vault.example.com:8200',
-                validate: (v) => { if (!v)
-                    return 'Required'; if (!v.startsWith('http'))
-                    return 'Must start with http:// or https://'; },
-            });
-            if (p.isCancel(addr)) {
-                p.cancel('Setup cancelled.');
-                process.exit(0);
-            }
-            const token = await p.password({ message: 'Vault token', validate: (v) => { if (!v)
-                    return 'Required'; } });
-            if (p.isCancel(token)) {
-                p.cancel('Setup cancelled.');
-                process.exit(0);
-            }
-            vaultAddr = addr;
-            vaultToken = token;
-        }
-        s.start('Connecting to Vault');
-        try {
-            const controller = new AbortController();
-            const t = setTimeout(() => controller.abort(), 5000);
-            const resp = await fetch(`${vaultAddr}/v1/sys/health`, { headers: { 'X-Vault-Token': vaultToken }, signal: controller.signal });
-            clearTimeout(t);
-            if (resp.ok) {
-                vaultConnected = true;
-                s.stop(`Connected to Vault at ${vaultAddr}`);
-                writeCredential('VAULT_ADDR', vaultAddr);
-                writeCredential('VAULT_TOKEN', vaultToken);
-            }
-            else {
-                s.stop(`Vault returned ${resp.status} — check your token`);
-            }
-        }
-        catch {
-            s.stop(`Cannot reach Vault at ${vaultAddr}`);
-        }
-    }
-    if (secretsChoice === '1password') {
-        try {
-            execSync('op --version', { stdio: 'pipe' });
-            p.log.success('1Password CLI detected');
-        }
-        catch {
-            p.log.warning('1Password CLI not found — install from https://1password.com/downloads/command-line');
-        }
-    }
-    if (secretsChoice === 'doppler') {
-        try {
-            execSync('doppler --version', { stdio: 'pipe' });
-            p.log.success('Doppler CLI detected');
-        }
-        catch {
-            p.log.warning('Doppler CLI not found — install from https://docs.doppler.com/docs/install-cli');
-        }
-    }
-    // Step 4: Auto-wire adapters from credentials
     const selectedAdapterIds = [];
-    const existingCreds = loadCredentials();
-    // Match adapters whose required env keys are already present
-    const autoMatched = [];
-    for (const adapter of allAdapters) {
-        const restKey = adapter.rest?.envKey;
-        const mcpKeys = adapter.mcp?.envKeys || [];
-        const allKeys = [...(restKey ? [restKey] : []), ...mcpKeys];
-        if (allKeys.length > 0 && allKeys.every(k => !!existingCreds[k])) {
-            autoMatched.push(adapter);
-        }
-    }
-    if (autoMatched.length > 0) {
-        p.note(autoMatched.map(a => `${pc.green('✓')} ${a.name || a.id}`).join('\n'), `${autoMatched.length} adapter${autoMatched.length !== 1 ? 's' : ''} matched from your credentials`);
-        selectedAdapterIds.push(...autoMatched.map(a => a.id));
-    }
-    else {
-        p.log.info('No adapters matched from credentials — use ' + pc.cyan('npx @epicai/legion add <name>') + ' to connect adapters.');
-    }
-    // Optional: search for additional adapters
-    const addMore = await p.confirm({
-        message: 'Search for additional adapters to configure?',
-        initialValue: false,
-    });
-    if (!p.isCancel(addMore) && addMore) {
-        let searching = true;
-        while (searching) {
-            const searchTerm = await p.text({
-                message: 'Search adapters (name or keyword)',
-                placeholder: 'e.g. grafana, paypal, github',
-            });
-            if (p.isCancel(searchTerm) || !searchTerm)
-                break;
-            const term = searchTerm.toLowerCase();
-            const matches = allAdapters.filter(a => !selectedAdapterIds.includes(a.id) && (a.id.includes(term) ||
-                (a.name || '').toLowerCase().includes(term) ||
-                (a.description || '').toLowerCase().includes(term) ||
-                (a.category || '').includes(term)));
-            if (matches.length === 0) {
-                p.log.warning(`No adapters found for "${searchTerm}"`);
-            }
-            else {
-                const options = matches.slice(0, 50).map(a => ({
-                    value: a.id,
-                    label: a.name || a.id,
-                    hint: a.description?.slice(0, 60),
-                }));
-                const picked = await p.multiselect({
-                    message: `${matches.length} match${matches.length !== 1 ? 'es' : ''} — select to add`,
-                    options,
-                    required: false,
-                });
-                if (!p.isCancel(picked)) {
-                    selectedAdapterIds.push(...picked);
-                }
-            }
-            const cont = await p.confirm({ message: 'Search for more?', initialValue: false });
-            if (p.isCancel(cont) || !cont)
-                searching = false;
-        }
-    }
-    // Step 5: Credentials
-    if (selectedAdapterIds.length > 0) {
-        if (secretsChoice === 'vault' && vaultConnected) {
-            s.start('Pulling credentials from Vault');
-            let pulled = 0;
-            for (const adapterId of selectedAdapterIds) {
-                try {
-                    const controller = new AbortController();
-                    const t = setTimeout(() => controller.abort(), 3000);
-                    const resp = await fetch(`${vaultAddr}/v1/secret/data/${adapterId}`, {
-                        headers: { 'X-Vault-Token': vaultToken },
-                        signal: controller.signal,
-                    });
-                    clearTimeout(t);
-                    if (resp.ok) {
-                        const data = await resp.json();
-                        const secrets = data?.data?.data;
-                        if (secrets) {
-                            for (const [k, v] of Object.entries(secrets)) {
-                                writeCredential(k, v);
-                            }
-                            pulled++;
-                        }
-                    }
-                }
-                catch { /* skip */ }
-            }
-            s.stop(`Pulled credentials for ${pulled} of ${selectedAdapterIds.length} adapters`);
-        }
-        else if (secretsChoice === '1password') {
-            s.start('Pulling credentials from 1Password');
-            let pulled = 0;
-            for (const adapterId of selectedAdapterIds) {
-                try {
-                    const result = execSync(`op item get "${adapterId}" --format json 2>/dev/null`, { encoding: 'utf-8', timeout: 5000 });
-                    const item = JSON.parse(result);
-                    const fields = item.fields || [];
-                    for (const field of fields) {
-                        if (field.value && field.label) {
-                            const envKey = `${adapterId.toUpperCase().replace(/-/g, '_')}_${field.label.toUpperCase().replace(/\s+/g, '_')}`;
-                            writeCredential(envKey, field.value);
-                        }
-                    }
-                    pulled++;
-                }
-                catch { /* skip */ }
-            }
-            s.stop(`Pulled credentials for ${pulled} of ${selectedAdapterIds.length} adapters`);
-        }
-        else if (secretsChoice === 'doppler') {
-            s.start('Pulling credentials from Doppler');
-            try {
-                const result = execSync('doppler secrets download --no-file --format json 2>/dev/null', { encoding: 'utf-8', timeout: 10000 });
-                const secrets = JSON.parse(result);
-                for (const [k, v] of Object.entries(secrets)) {
-                    if (typeof v === 'string')
-                        writeCredential(k, v);
-                }
-                s.stop('Credentials pulled from Doppler');
-            }
-            catch {
-                s.stop('Doppler pull failed — configure with: doppler setup');
-            }
-        }
-        else if (secretsChoice === 'manual') {
-            for (const adapterId of selectedAdapterIds) {
-                const adapter = allAdapters.find(a => a.id === adapterId);
-                if (!adapter)
-                    continue;
-                const envKey = adapter.rest?.envKey || `${adapterId.toUpperCase().replace(/-/g, '_')}_API_KEY`;
-                const key = await p.password({ message: `${envKey} for ${adapter.name || adapterId}` });
-                if (!p.isCancel(key) && key) {
-                    writeCredential(envKey, key);
-                }
-            }
-        }
-        else if (secretsChoice === 'env') {
-            p.log.info('Using credentials from environment variables');
-        }
-        // Step 6: Install stdio dependencies
-        for (const adapterId of selectedAdapterIds) {
-            const adapter = allAdapters.find(a => a.id === adapterId);
-            if (!adapter?.mcp?.packageName || adapter.mcp.transport !== 'stdio')
-                continue;
-            s.start(`Installing ${adapter.name || adapterId}`);
-            try {
-                execSync(`npm install -g --ignore-scripts ${adapter.mcp.packageName}`, { stdio: 'pipe', timeout: 60000 });
-                // Verify artifact integrity
-                try {
-                    const { ArtifactVerifier } = await import('../trust/ArtifactVerifier.js');
-                    const verifier = new ArtifactVerifier({ verifyDigests: true });
-                    const pkgPath = execSync(`npm root -g`, { encoding: 'utf-8', timeout: 5000 }).trim();
-                    const mainFile = join(pkgPath, adapter.mcp.packageName, 'package.json');
-                    const result = await verifier.verify(adapter.mcp.packageName, mainFile);
-                    if (!result.valid) {
-                        s.stop(`${pc.red('✗')} ${adapter.name || adapterId} — integrity check failed`);
-                    }
-                    else {
-                        s.stop(`${pc.green('✓')} ${adapter.name || adapterId} installed — verified`);
-                    }
-                }
-                catch {
-                    s.stop(`${pc.green('✓')} ${adapter.name || adapterId} installed`);
-                }
-            }
-            catch {
-                s.stop(`${pc.yellow('!')} ${adapter.name || adapterId} — run manually: npm install -g ${adapter.mcp.packageName}`);
-            }
-        }
-        // Step 7: Verify
-        s.start('Verifying connections');
-        const creds = loadCredentials();
-        let verified = 0;
-        const results = [];
-        for (const adapterId of selectedAdapterIds) {
-            const adapter = allAdapters.find(a => a.id === adapterId);
-            if (!adapter)
-                continue;
-            const hasKey = adapter.rest?.envKey ? !!creds[adapter.rest.envKey] : false;
-            if (hasKey) {
-                verified++;
-                results.push(`${pc.green('✓')} ${adapter.name || adapterId}  ${adapter.rest?.toolCount || 0} tools`);
-            }
-            else {
-                results.push(`${pc.yellow('○')} ${adapter.name || adapterId}  credentials needed`);
-            }
-        }
-        s.stop('Verification complete');
-        if (results.length > 0) {
-            p.note(results.join('\n'), `${verified} of ${selectedAdapterIds.length} adapters ready`);
-        }
+    if (demoChoice !== 'skip') {
+        const picked = ZERO_CRED.find(a => a.id === demoChoice);
+        selectedAdapterIds.push(demoChoice);
+        p.log.success(`${picked.name} connected — ${picked.tools} tools ready`);
     }
-    // Step 8: Save state and config
+    // Step 4: Save state and config
     const state = loadState();
     for (const id of selectedAdapterIds) {
         const adapter = allAdapters.find(a => a.id === id);
@@ -1213,16 +960,14 @@ async function runSetupWizard() {
     saveState(state);
     saveConfig({
         selectedAdapters: selectedAdapterIds,
-        secretsProvider: secretsChoice,
+        secretsProvider: 'manual',
         aiClient: configuredClients.join(','),
         localBackend: system.localBackend || undefined,
     });
     // Outro
     p.note([
-        `Add adapters:     ${pc.cyan('npx @epicai/legion add <name>')}`,
-        `Remove adapters:  ${pc.cyan('npx @epicai/legion remove <name>')}`,
+        `Connect more:     ${pc.cyan('npx @epicai/legion add <name>')}`,
         `Health check:     ${pc.cyan('npx @epicai/legion health')}`,
-        `Update adapters:  ${pc.cyan('npx @epicai/legion update')}`,
         `List adapters:    ${pc.cyan('npx @epicai/legion list')}`,
     ].join('\n'), 'Manage your adapters');
     p.outro(`${pc.green('Legion is ready.')} Your credentials never leave this machine.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epicai/legion",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Epic AI® Legion — 35,020 tools. One self-hosted MCP server. Intelligent Virtual Assistant (IVA) integration layer for AI agents.",
   "type": "module",
   "main": "./dist/index.js",