@getmarrow/install 0.1.7 → 0.1.8

package/README.md

@@ -11,13 +11,13 @@ npx @getmarrow/install --repair
 npx @getmarrow/install doctor
 ```
 
-## What's New in v0.1.6
+## What's New in v0.1.8
 
-- Installer doctor/repair now detects npm token/config path mismatches like `~/.openclaw/.env` versus `~/.npmrc` without printing token values.
-- `--repair` can sync the active npm token into `~/.npmrc` when a mismatch is detected, preserving a local backup.
-- Generated SDK passive runtime now requires outcome closure by default with `MARROW_REQUIRE_OUTCOME_CLOSURE=true`.
-- Self-test still creates a harmless decision, commits the outcome, checks status, calls the one-call runtime, and prints first-value proof.
-- Doctor/repair output gives exact safe setup and repair commands without exposing credentials.
+- First-run output now explains the value in agent/user language: your agent is no longer starting from zero.
+- Self-test prints first proof: setup decision captured, outcome closed, runtime gate active, and risky work now gets a pre-action brief.
+- Fresh accounts get a guided prompt to try immediately: "I am about to deploy to production. What should I check first?"
+- Existing accounts/fleets show stronger proof when available: avoided mistakes, reused winning decisions, prevented risky actions, and token/time savings.
+- Generated SDK passive runtime now fails soft if `@getmarrow/sdk` is missing and the installer prints the exact dependency fix.
 
 ## Agent Value Proof Quickstart
 
@@ -32,8 +32,20 @@ Expected result:
 - Marrow writes the safest detected MCP/SDK/agent config.
 - A harmless setup decision is created and its outcome is committed.
 - `/v1/agent/status` confirms capture health and missing hooks.
-- `/v1/agent/runtime` returns the first "before you act" lesson or exact next action.
-- The installer prints first-value proof such as captured surfaces, reused lessons, prevented risky actions, or estimated time/token savings when enough history exists.
+- `/v1/agent/runtime` verifies the one-call runtime gate.
+- The installer prints: "Your agent is no longer starting from zero."
+- Fresh accounts get a first useful action to try immediately.
+- Accounts with history get proof such as avoided mistakes, reused winning decisions, prevented risky actions, or estimated time/token savings.
+
+## First Five-Minute Proof
+
+After install, ask the agent:
+
+```text
+I am about to deploy to production. What should I check first?
+```
+
+Marrow should answer with a pre-action risk gate, required proof, and matching fleet lessons before the agent acts. This is the first product moment: not just "hooks installed", but "the agent is being warned before risky work."
 
 ## What It Detects
 
@@ -91,6 +103,16 @@ Repair missing hooks/config:
 MARROW_API_KEY=mrw_live_xxx npx @getmarrow/install --repair
 ```
 
+## SDK Dependency
+
+When the installer writes `.marrow/passive-runtime.mjs`, the project should have `@getmarrow/sdk` installed:
+
+```bash
+npm install @getmarrow/sdk
+```
+
+The generated runtime now fails soft with an explicit warning if the SDK package is missing, so onboarding does not crash a user process.
+
 ## Trust Model
 
 This package is intended to be open source and auditable. It prints every file it will touch, requires `--yes` to write, does not store API keys in project files, and supports MCP-only, SDK-only, both, and markdown-only setups.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmarrow/install",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Universal installer for Marrow passive agent setup.",
   "bin": {
     "marrow-install": "bin/marrow-install.js"

package/src/installer.js

@@ -295,27 +295,30 @@ ${MARROW_BLOCK_END}`;
 }
 
 function passiveRuntimeSource() {
-  return `import { MarrowClient } from '@getmarrow/sdk';
-
-const apiKey = process.env.MARROW_API_KEY;
+  return `const apiKey = process.env.MARROW_API_KEY;
 if (apiKey && !globalThis.__MARROW_PASSIVE_RUNTIME__) {
-  const marrow = new MarrowClient(apiKey, {
-    baseUrl: process.env.MARROW_BASE_URL,
-    agentId: process.env.MARROW_FLEET_AGENT_ID || process.env.MARROW_AGENT_ID,
-    sessionId: process.env.MARROW_SESSION_ID,
-    mode: process.env.MARROW_ENFORCEMENT_MODE || 'auto',
-  });
+  try {
+    const { MarrowClient } = await import('@getmarrow/sdk');
+    const marrow = new MarrowClient(apiKey, {
+      baseUrl: process.env.MARROW_BASE_URL,
+      agentId: process.env.MARROW_FLEET_AGENT_ID || process.env.MARROW_AGENT_ID,
+      sessionId: process.env.MARROW_SESSION_ID,
+      mode: process.env.MARROW_ENFORCEMENT_MODE || 'auto',
+    });
 
-  const runtime = marrow.createPassiveRuntime({
-    includeValueReport: process.env.MARROW_PASSIVE_VALUE_REPORT !== 'false',
-    valueReportPeriod: process.env.MARROW_VALUE_REPORT_PERIOD || '7d',
-    useAgentRuntime: process.env.MARROW_AGENT_RUNTIME !== 'false',
-    useWorkflowGate: process.env.MARROW_WORKFLOW_GATE !== 'false',
-    requireOutcomeClosure: process.env.MARROW_REQUIRE_OUTCOME_CLOSURE !== 'false',
-  });
+    const runtime = marrow.createPassiveRuntime({
+      includeValueReport: process.env.MARROW_PASSIVE_VALUE_REPORT !== 'false',
+      valueReportPeriod: process.env.MARROW_VALUE_REPORT_PERIOD || '7d',
+      useAgentRuntime: process.env.MARROW_AGENT_RUNTIME !== 'false',
+      useWorkflowGate: process.env.MARROW_WORKFLOW_GATE !== 'false',
+      requireOutcomeClosure: process.env.MARROW_REQUIRE_OUTCOME_CLOSURE !== 'false',
+    });
 
-  runtime.install();
-  globalThis.__MARROW_PASSIVE_RUNTIME__ = runtime;
+    runtime.install();
+    globalThis.__MARROW_PASSIVE_RUNTIME__ = runtime;
+  } catch {
+    console.warn('[Marrow] passive runtime skipped: install @getmarrow/sdk or verify SDK initialization. Run npm install @getmarrow/sdk, then rerun npx @getmarrow/install --repair.');
+  }
 }
 `;
 }
@@ -403,6 +406,38 @@ function upsertMcpServerConfig(filePath) {
   return JSON.stringify(config, null, 2) + '\n';
 }
 
+function inspectSdkDependency(detection) {
+  if (!detection.node) {
+    return { required: false, present: false, install_command: null };
+  }
+
+  const raw = safeRead(detection.paths.packageJson);
+  let packageJson = {};
+  try {
+    packageJson = raw ? JSON.parse(raw) : {};
+  } catch {
+    return {
+      required: true,
+      present: false,
+      install_command: 'npm install @getmarrow/sdk',
+      warning: 'package.json could not be parsed; verify @getmarrow/sdk manually.',
+    };
+  }
+
+  const dependencyBlocks = [
+    packageJson.dependencies,
+    packageJson.devDependencies,
+    packageJson.optionalDependencies,
+    packageJson.peerDependencies,
+  ];
+  const present = dependencyBlocks.some((deps) => deps && Object.prototype.hasOwnProperty.call(deps, '@getmarrow/sdk'));
+  return {
+    required: true,
+    present,
+    install_command: present ? null : 'npm install @getmarrow/sdk',
+  };
+}
+
 function buildPlan(detection, options) {
   const mode = options.mode === 'auto'
     ? detection.node && (detection.claudeCode || detection.cursor || detection.codex || detection.openclaw)
@@ -576,6 +611,7 @@ async function runSelfTest(options) {
       error: error instanceof Error ? error.message : String(error),
     }));
   const firstValueSignal = buildFirstValueSignal(status, runtime, performance);
+  const installValueMoment = buildInstallValueMoment(firstValueSignal, status, runtime, performance);
   return {
     skipped: false,
     decision_id: decisionId,
@@ -589,6 +625,7 @@ async function runSelfTest(options) {
     runtime_exact_next_action: runtime.exact_next_action || null,
     runtime_before_you_act: runtime.before_you_act || null,
     first_value_signal: firstValueSignal,
+    install_value_moment: installValueMoment,
     performance_proof: performance && performance.ok !== false ? {
       avoided_mistakes: performance.avoided_mistakes ?? performance.avoided_repeated_mistakes ?? 0,
       reused_winning_decisions: performance.reused_winning_decisions ?? 0,
@@ -600,6 +637,31 @@ async function runSelfTest(options) {
   };
 }
 
+function buildInstallValueMoment(firstValueSignal = {}, status = {}, runtime = {}, performance = {}) {
+  const proof = firstValueSignal.value_proof || [];
+  const hasFleetSignal = proof.length > 0;
+  const runtimeLesson = runtime.before_you_act
+    || runtime.before_you_act_injection?.message
+    || runtime.exact_next_action
+    || firstValueSignal.first_lesson;
+
+  return {
+    headline: 'Your agent is no longer starting from zero.',
+    proof: [
+      'Captured this setup decision',
+      'Closed the outcome successfully',
+      'Runtime gate is ' + (firstValueSignal.active ? 'active' : 'installed'),
+      runtimeLesson ? 'Future risky work now gets a pre-action brief' : 'Future risky work now gets checked before action',
+    ],
+    fleet_signal: hasFleetSignal
+      ? 'Marrow already found signal: ' + proof.join('; ') + '.'
+      : 'Fresh account: Marrow will start building fleet memory from this first captured outcome.',
+    try_this_now: 'Ask your agent: "I am about to deploy to production. What should I check first?"',
+    expected_response: 'Marrow should answer with a risk gate, required proof, and any matching fleet lessons before the agent acts.',
+    first_lesson: runtimeLesson || 'Marrow will surface prior lessons before risky or repeated work.',
+  };
+}
+
 function buildFirstValueSignal(status, runtime, performance) {
   const capture = status.capture_coverage || {};
   const closure = status.auto_outcome_closure || {};
@@ -664,12 +726,22 @@ function printReport(report) {
     if (report.selfTest.next_action) process.stdout.write(`- next action: ${report.selfTest.next_action}\n`);
     if (report.selfTest.first_value_signal) {
       process.stdout.write('\nFirst value:\n');
-      process.stdout.write(`- ${report.selfTest.first_value_signal.headline}\n`);
-      process.stdout.write(`- First useful lesson: ${report.selfTest.first_value_signal.first_lesson}\n`);
-      if (report.selfTest.first_value_signal.value_proof.length) {
-        process.stdout.write(`- Proof: ${report.selfTest.first_value_signal.value_proof.join('; ')}\n`);
+      const valueMoment = report.selfTest.install_value_moment;
+      if (valueMoment) {
+        process.stdout.write(`- ${valueMoment.headline}\n`);
+        process.stdout.write('- First proof:\n');
+        for (const proof of valueMoment.proof) process.stdout.write(`  - ${proof}\n`);
+        process.stdout.write(`- ${valueMoment.fleet_signal}\n`);
+        process.stdout.write(`- Try this now: ${valueMoment.try_this_now}\n`);
+        process.stdout.write(`- Expected: ${valueMoment.expected_response}\n`);
+      } else {
+        process.stdout.write(`- ${report.selfTest.first_value_signal.headline}\n`);
+        process.stdout.write(`- First useful lesson: ${report.selfTest.first_value_signal.first_lesson}\n`);
+        if (report.selfTest.first_value_signal.value_proof.length) {
+          process.stdout.write(`- Proof: ${report.selfTest.first_value_signal.value_proof.join('; ')}\n`);
+        }
+        process.stdout.write(`- Next: ${report.selfTest.first_value_signal.next_action}\n`);
       }
-      process.stdout.write(`- Next: ${report.selfTest.first_value_signal.next_action}\n`);
     }
   }
 
@@ -697,6 +769,13 @@ function printReport(report) {
     }
   }
 
+  if (report.sdkDependency?.required) {
+    process.stdout.write('\nSDK dependency:\n');
+    process.stdout.write(`- @getmarrow/sdk: ${report.sdkDependency.present ? 'present' : 'missing'}\n`);
+    if (report.sdkDependency.install_command) process.stdout.write(`- exact fix: ${report.sdkDependency.install_command}\n`);
+    if (report.sdkDependency.warning) process.stdout.write(`- warning: ${report.sdkDependency.warning}\n`);
+  }
+
   if (report.writeMode === 'doctor') {
     process.stdout.write('\nDoctor:\n');
     process.stdout.write(`- Marrow active: ${report.doctor.active ? 'yes' : 'no'}\n`);
@@ -724,6 +803,7 @@ async function install(options) {
   const writeMode = options.doctor ? 'doctor' : options.dryRun ? 'dry-run' : options.repair ? 'repair' : options.yes ? 'write' : 'dry-run';
   const changes = applyPlan(plan, options);
   const configInspection = inspectNpmTokenConfig();
+  const sdkDependency = inspectSdkDependency(detection);
   const configDiagnostics = configInspection.safe;
   const configRepairs = options.repair && !options.dryRun && !options.doctor
     ? repairConfigDiagnostics(configDiagnostics)
@@ -779,6 +859,7 @@ async function install(options) {
     remediation,
     configDiagnostics,
     configRepairs,
+    sdkDependency,
     selfTest,
     warnings: options.keyFromArg
       ? ['Avoid --key in shared shells because command-line arguments can be visible in process listings. Prefer MARROW_API_KEY in your environment or secret manager.']
@@ -810,4 +891,6 @@ module.exports = {
   runCli,
   passiveRuntimeSource,
   inspectNpmTokenConfig,
+  inspectSdkDependency,
+  buildInstallValueMoment,
 };