@intent-systems/nexus 2026.1.5-4 → 2026.1.5-5

package/dist/commands/cursor-rules.js

@@ -1,10 +1,10 @@
 import fs from "node:fs";
 import fsp from "node:fs/promises";
 import path from "node:path";
-import { flattenManifest, generateSkillManifest, readSkillManifest, } from "./skills-manifest.js";
 import { resolveStateDir } from "../config/paths.js";
-import { MANAGED_SKILLS_DIR, NEXUS_ROOT, resolveUserPath } from "../utils.js";
 import { defaultRuntime } from "../runtime.js";
+import { MANAGED_SKILLS_DIR, NEXUS_ROOT, resolveUserPath } from "../utils.js";
+import { flattenManifest, generateSkillManifest, readSkillManifest, } from "./skills-manifest.js";
 /**
  * Generate and write `.cursor/rules` for a given workspace.
  *
@@ -35,28 +35,46 @@ function categorizeSkills(skills) {
         "Media & Content": [],
         "Smart Home & Devices": [],
         "Development & Tools": [],
-        "Other": [],
+        Other: [],
     };
     const categoryPatterns = [
-        ["Communication & Messaging", [/imsg|imessage|whatsapp|discord|slack|telegram|sms|message|chat/i]],
-        ["Productivity & Notes", [/note|reminder|bear|obsidian|notion|things|trello|task|todo/i]],
-        ["Google & Cloud Services", [/google|gmail|calendar|drive|sheets|docs|gemini|gog|places/i]],
-        ["Media & Content", [/image|video|audio|camera|gif|pdf|whisper|speech|photo|screenshot/i]],
-        ["Smart Home & Devices", [/hue|sonos|spotify|eight|sleep|smart|home|light|speaker/i]],
-        ["Development & Tools", [/github|git|code|coding|terminal|bash|cli|api|mcp|1password|search/i]],
+        [
+            "Communication & Messaging",
+            [/imsg|imessage|whatsapp|discord|slack|telegram|sms|message|chat/i],
+        ],
+        [
+            "Productivity & Notes",
+            [/note|reminder|bear|obsidian|notion|things|trello|task|todo/i],
+        ],
+        [
+            "Google & Cloud Services",
+            [/google|gmail|calendar|drive|sheets|docs|gemini|gog|places/i],
+        ],
+        [
+            "Media & Content",
+            [/image|video|audio|camera|gif|pdf|whisper|speech|photo|screenshot/i],
+        ],
+        [
+            "Smart Home & Devices",
+            [/hue|sonos|spotify|eight|sleep|smart|home|light|speaker/i],
+        ],
+        [
+            "Development & Tools",
+            [/github|git|code|coding|terminal|bash|cli|api|mcp|1password|search/i],
+        ],
     ];
     for (const skill of skills) {
         const text = `${skill.name} ${skill.description || ""}`;
         let matched = false;
         for (const [category, patterns] of categoryPatterns) {
-            if (patterns.some(p => p.test(text))) {
+            if (patterns.some((p) => p.test(text))) {
                 categories[category].push(skill);
                 matched = true;
                 break;
             }
         }
         if (!matched) {
-            categories["Other"].push(skill);
+            categories.Other.push(skill);
         }
     }
     return categories;
@@ -73,7 +91,8 @@ function formatSkillsSection(skills) {
         lines.push(`### ${category}`);
         for (const skill of categorySkills.sort((a, b) => a.name.localeCompare(b.name))) {
             const desc = skill.description
-                ? skill.description.slice(0, 80) + (skill.description.length > 80 ? "..." : "")
+                ? skill.description.slice(0, 80) +
+                    (skill.description.length > 80 ? "..." : "")
                 : "(no description)";
             lines.push(`- **${skill.name}**: ${desc}`);
         }
@@ -105,7 +124,7 @@ async function loadAgentsMd(workspaceDir) {
 /**
  * Load bootstrap files (IDENTITY.md, PROFILE.md, SOUL.md) if they exist
  */
-async function loadBootstrapFiles(workspaceDir) {
+async function loadBootstrapFiles(_workspaceDir) {
     const files = {};
     const agentId = process.env.NEXUS_AGENT_ID?.trim() || "default";
     const stateDir = resolveStateDir();
@@ -137,6 +156,7 @@ export async function generateCursorRules(options = {}) {
     const workspaceDir = options.workspaceDir || process.cwd();
     const skillsDir = options.skillsDir || MANAGED_SKILLS_DIR;
     const userSkillsDir = options.userSkillsDir || path.join(NEXUS_ROOT, "home", "skills");
+    const managedSkillsDir = path.join(skillsDir, "managed");
     // Try to read existing manifest, or generate one
     let manifest = await readSkillManifest();
     if (!manifest) {
@@ -181,14 +201,14 @@ nexus cursor-rules --output .cursor/rules
 
 ## Available Skills (${skills.length} total)
 
-The following skills are available in \`~/nexus/skills/\`. Read the full \`SKILL.md\` when you need detailed usage instructions.
+The following skills are available in \`${skillsDir}\`. Read the full \`SKILL.md\` when you need detailed usage instructions.
 
 ${skillsSection}
 ## How to Use Skills
 
 1. **When a user's request relates to a skill**, read the corresponding SKILL.md:
    \`\`\`bash
-   cat ~/nexus/skills/<skill>/SKILL.md
+   cat ${path.join(skillsDir, "<skill>", "SKILL.md")}
    \`\`\`
 
 2. **Skills provide CLI tools** - use bash to run them:
@@ -207,13 +227,13 @@ ${skillsSection}
 ${agentsMdSection}${bootstrapSection}
 ## Skill Directory Structure
 
-- **Bundled**: \`~/nexus/skills/\` (${manifest.bundled.count} skills)
-- **Managed**: \`~/nexus/skills/managed/\` (${manifest.managed.count} skills)  
-- **User**: \`~/nexus/home/skills/\` (${manifest.user.count} skills)
+- **Bundled**: \`${skillsDir}\` (${manifest.bundled.count} skills)
+- **Managed**: \`${managedSkillsDir}\` (${manifest.managed.count} skills)
+- **User**: \`${userSkillsDir}\` (${manifest.user.count} skills)
 
 Precedence: User > Managed > Bundled
 `;
-    return rules.trim() + "\n";
+    return `${rules.trim()}\n`;
 }
 /**
  * Write cursor rules to the specified output path

package/dist/commands/doctor.js

@@ -24,7 +24,7 @@ import { ensureSystemdUserLingerInteractive } from "./systemd-linger.js";
 function resolveMode(cfg) {
     return cfg.gateway?.mode === "remote" ? "remote" : "local";
 }
-function resolveLegacyConfigPath(env) {
+function resolveLegacyConfigPath(_env) {
     return path.join(os.homedir(), ".nexus", "nexus.json");
 }
 async function noteSecurityWarnings(cfg) {
@@ -438,8 +438,7 @@ async function maybeMigrateLegacyConfigFile(runtime) {
     const gatewayBind = typeof legacySnapshot.parsed?.gateway?.bind === "string"
         ? legacySnapshot.parsed.gateway?.bind
         : undefined;
-    const agentWorkspace = typeof legacySnapshot.parsed?.agent?.workspace ===
-        "string"
+    const agentWorkspace = typeof legacySnapshot.parsed?.agent?.workspace === "string"
         ? legacySnapshot.parsed.agent?.workspace
         : undefined;
     note([
@@ -471,7 +470,9 @@ async function maybeMigrateLegacyGatewayService(cfg, runtime) {
     const legacyServices = await findLegacyGatewayServices(process.env);
     if (legacyServices.length === 0)
         return;
-    note(legacyServices.map((svc) => `- ${svc.label} (${svc.platform}, ${svc.detail})`).join("\n"), "Legacy Nexus services detected");
+    note(legacyServices
+        .map((svc) => `- ${svc.label} (${svc.platform}, ${svc.detail})`)
+        .join("\n"), "Legacy Nexus services detected");
     const migrate = guardCancel(await confirm({
         message: "Migrate legacy Nexus services to Nexus now?",
         initialValue: true,

package/dist/commands/identity.js

@@ -1,40 +1,37 @@
-import fs from "node:fs";
-import path from "node:path";
-import { resolveStateDir } from "../config/paths.js";
+import { resolveIdentitySnapshot } from "../agents/identity-state.js";
 import { defaultRuntime } from "../runtime.js";
-function readField(pathname, label) {
-    try {
-        const raw = fs.readFileSync(pathname, "utf-8");
-        const regex = new RegExp(`^[-*]?\\s*${label}\\s*:\\s*(.+)$`, "im");
-        const match = raw.match(regex);
-        return match?.[1]?.trim();
-    }
-    catch {
-        return undefined;
-    }
-}
 export async function identityCommand(opts, runtime = defaultRuntime) {
-    const stateDir = resolveStateDir();
-    const agentId = process.env.NEXUS_AGENT_ID?.trim() || "default";
-    const agentIdentityDir = path.join(stateDir, "agents", agentId, "identity");
-    const userIdentityDir = path.join(stateDir, "user", "identity");
-    const agentIdentityPath = path.join(agentIdentityDir, "IDENTITY.md");
-    const agentSoulPath = path.join(agentIdentityDir, "SOUL.md");
-    const agentMemoryPath = path.join(agentIdentityDir, "MEMORY.md");
-    const userProfilePath = path.join(userIdentityDir, "PROFILE.md");
+    const resolution = resolveIdentitySnapshot();
+    if (!resolution.ok) {
+        const payload = {
+            ok: false,
+            error: "multiple_agents",
+            agents: resolution.agentOptions,
+        };
+        if (opts.json) {
+            runtime.log(JSON.stringify(payload, null, 2));
+        }
+        else {
+            runtime.error("Multiple agents detected in state/agents.");
+            runtime.error(`Set NEXUS_AGENT_ID to one of: ${payload.agents.join(", ")}`);
+        }
+        runtime.exit(2);
+        return;
+    }
+    const identity = resolution.snapshot;
     const payload = {
         agent: {
-            id: agentId,
-            name: readField(agentIdentityPath, "Name"),
-            identityPath: agentIdentityPath,
-            soulPath: agentSoulPath,
-            memoryPath: agentMemoryPath,
-            exists: fs.existsSync(agentIdentityPath),
+            id: identity.agentId,
+            name: identity.agentName,
+            identityPath: identity.agentIdentityPath,
+            soulPath: identity.agentSoulPath,
+            memoryPath: identity.agentMemoryPath,
+            exists: identity.agentIdentityExists,
         },
         user: {
-            name: readField(userProfilePath, "Name"),
-            profilePath: userProfilePath,
-            exists: fs.existsSync(userProfilePath),
+            name: identity.userName,
+            profilePath: identity.userProfilePath,
+            exists: identity.userProfileExists,
         },
     };
     if (opts.json) {

package/dist/commands/init.js

@@ -6,9 +6,10 @@ import { ensureAgentWorkspace } from "../agents/workspace.js";
 import { CONFIG_PATH_NEXUS, writeConfigFile } from "../config/config.js";
 import { resolveStateDir } from "../config/paths.js";
 import { defaultRuntime } from "../runtime.js";
-import { NEXUS_ROOT } from "../utils.js";
-import { copyBundledSkills, generateSkillManifest, writeSkillManifest } from "./skills-manifest.js";
+import { MANAGED_SKILLS_DIR, NEXUS_ROOT } from "../utils.js";
+import { scanCredentials } from "./credential.js";
 import { writeCursorRules } from "./cursor-rules.js";
+import { copyBundledSkills, generateSkillManifest, writeSkillManifest, } from "./skills-manifest.js";
 const execFileAsync = promisify(execFile);
 /**
  * Checks if a directory is already a git repository.
@@ -84,30 +85,25 @@ build/
  * - ~/nexus/state/ (state directory)
  */
 export async function initCommand(opts, runtime = defaultRuntime) {
-    const workspaceDir = opts?.workspace?.trim() || path.join(process.env.HOME || "~", "nexus", "home");
+    const workspaceDir = opts?.workspace?.trim() ||
+        path.join(process.env.HOME || "~", "nexus", "home");
+    const createHomeLayout = false;
     // 1. Create workspace directory and Nexus state scaffolding
     const workspace = await ensureAgentWorkspace({
         dir: workspaceDir,
         ensureBootstrapFiles: true,
+        bootstrapMode: "minimal",
+        createHomeLayout,
     });
     runtime.log(`✓ Created workspace: ${workspace.dir}`);
     if (workspace.agentsPath)
         runtime.log(`  - ${path.basename(workspace.agentsPath)}`);
-    if (workspace.toolsPath)
+    if (workspace.toolsPath && createHomeLayout)
         runtime.log(`  - ${path.basename(workspace.toolsPath)}`);
     if (workspace.bootstrapPath)
         runtime.log(`  - ${path.basename(workspace.bootstrapPath)}`);
-    // 2. Create user skills/ directory (for personal custom skills)
+    // 2. Resolve user skills directory (may be created later by user)
     const userSkillsDir = path.join(workspace.dir, "skills");
-    await fs.mkdir(userSkillsDir, { recursive: true });
-    runtime.log(`✓ Created user skills directory: ${userSkillsDir}`);
-    // 3. Create memory/ and projects/ directories
-    const memoryDir = path.join(workspace.dir, "memory");
-    await fs.mkdir(memoryDir, { recursive: true });
-    const projectsDir = path.join(workspace.dir, "projects");
-    await fs.mkdir(projectsDir, { recursive: true });
-    runtime.log(`✓ Created memory directory: ${memoryDir}`);
-    runtime.log(`✓ Created projects directory: ${projectsDir}`);
     // 4. Create state directory (~/nexus/state)
     const stateDir = resolveStateDir();
     await fs.mkdir(stateDir, { recursive: true });
@@ -131,8 +127,11 @@ export async function initCommand(opts, runtime = defaultRuntime) {
     };
     await fs.writeFile(workspaceMetaPath, JSON.stringify(workspaceMeta, null, 2), "utf-8");
     runtime.log(`✓ Created workspace metadata: ${workspaceMetaPath}`);
-    // 6. Create main skills directory (~/nexus/skills) and copy bundled skills
-    const skillsDir = path.join(NEXUS_ROOT, "skills");
+    // 5b. Ensure credential index
+    await scanCredentials();
+    runtime.log(`✓ Created credential index: ${path.join(stateDir, "credentials", "index.json")}`);
+    // 6. Create main skills directory (state/skills) and copy bundled skills
+    const skillsDir = MANAGED_SKILLS_DIR;
     await fs.mkdir(skillsDir, { recursive: true });
     runtime.log(`✓ Created skills directory: ${skillsDir}`);
     // Copy bundled skills from installed package to ~/nexus/skills/
@@ -160,8 +159,6 @@ export async function initCommand(opts, runtime = defaultRuntime) {
         includeBootstrap: false,
     });
     runtime.log(`✓ Created Cursor rules: ${cursorRulesPath}`);
-    // 9. Initialize git repository for workspace
-    await initGitRepo(workspace.dir, runtime);
     runtime.log("\nNexus initialization complete!");
     runtime.log(`\nNext steps:\n  - Run 'nexus status' to orient\n  - Open ${NEXUS_ROOT} in your editor`);
 }

package/dist/commands/log.js

@@ -0,0 +1,134 @@
+import fs from "node:fs";
+import path from "node:path";
+import { parseDurationMs } from "../cli/parse-duration.js";
+import { readSkillUsageEntries } from "../agents/skill-usage.js";
+import { resolveEventLogDir } from "../infra/event-log.js";
+import { defaultRuntime } from "../runtime.js";
+function parseSince(raw) {
+    if (!raw)
+        return undefined;
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return undefined;
+    const parsedDate = Date.parse(trimmed);
+    if (!Number.isNaN(parsedDate)) {
+        return parsedDate;
+    }
+    const ms = parseDurationMs(trimmed, { defaultUnit: "h" });
+    return Date.now() - ms;
+}
+function readEventFiles(dir) {
+    try {
+        return fs
+            .readdirSync(dir, { withFileTypes: true })
+            .filter((entry) => entry.isFile() &&
+            entry.name.startsWith("events-") &&
+            entry.name.endsWith(".jsonl"))
+            .map((entry) => entry.name)
+            .sort();
+    }
+    catch {
+        return [];
+    }
+}
+function parseEventLine(line) {
+    try {
+        const parsed = JSON.parse(line);
+        if (!parsed || typeof parsed !== "object")
+            return null;
+        if (typeof parsed.ts !== "number")
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+function loadEventLogEntries(opts) {
+    const dir = resolveEventLogDir();
+    const files = readEventFiles(dir);
+    const events = [];
+    for (const file of files) {
+        const filePath = path.join(dir, file);
+        let raw = "";
+        try {
+            raw = fs.readFileSync(filePath, "utf-8");
+        }
+        catch {
+            continue;
+        }
+        for (const line of raw.split(/\r?\n/)) {
+            if (!line.trim())
+                continue;
+            const event = parseEventLine(line);
+            if (!event)
+                continue;
+            if (opts.sinceMs && event.ts < opts.sinceMs)
+                continue;
+            if (opts.source && event.source !== opts.source)
+                continue;
+            if (opts.command && event.command_path !== opts.command)
+                continue;
+            if (opts.errors) {
+                const isError = event.status === "error" ||
+                    event.event_type === "command_failed" ||
+                    event.event_type === "cli_session_end";
+                if (!isError)
+                    continue;
+            }
+            events.push(event);
+        }
+    }
+    if (opts.limit && opts.limit > 0 && events.length > opts.limit) {
+        return events.slice(-opts.limit);
+    }
+    return events;
+}
+export async function logCommand(opts, runtime = defaultRuntime) {
+    const sinceMs = parseSince(opts.since);
+    const limit = opts.limit && opts.limit > 0 ? opts.limit : undefined;
+    if (opts.skill) {
+        const entries = readSkillUsageEntries(opts.skill, {
+            sinceMs,
+            limit,
+        });
+        if (opts.json) {
+            runtime.log(JSON.stringify({ skill: opts.skill, entries }, null, 2));
+            return;
+        }
+        if (entries.length === 0) {
+            runtime.log("No skill usage found.");
+            return;
+        }
+        for (const entry of entries) {
+            const time = new Date(entry.ts).toISOString();
+            const status = entry.ok ? "ok" : "error";
+            const duration = typeof entry.durationMs === "number"
+                ? ` ${entry.durationMs}ms`
+                : "";
+            runtime.log(`${time} ${entry.event} ${status}${duration}`);
+        }
+        return;
+    }
+    const events = loadEventLogEntries({
+        sinceMs,
+        errors: opts.errors,
+        source: opts.source,
+        command: opts.command,
+        limit,
+    });
+    if (opts.json) {
+        runtime.log(JSON.stringify({ events }, null, 2));
+        return;
+    }
+    if (events.length === 0) {
+        runtime.log("No events found.");
+        return;
+    }
+    for (const event of events) {
+        const time = new Date(event.ts).toISOString();
+        const status = event.status ?? "-";
+        const command = event.command_path ?? event.event_type ?? "-";
+        runtime.log(`${time} ${event.source}:${command} ${status}`);
+    }
+}

package/dist/commands/models/fallbacks.js

@@ -1,4 +1,4 @@
-import { buildModelAliasIndex, resolveModelRefFromString } from "../../agents/model-selection.js";
+import { buildModelAliasIndex, resolveModelRefFromString, } from "../../agents/model-selection.js";
 import { CONFIG_PATH_NEXUS, loadConfig } from "../../config/config.js";
 import { DEFAULT_PROVIDER, ensureFlagCompatibility, modelKey, resolveModelTarget, updateConfig, } from "./shared.js";
 export async function modelsFallbacksListCommand(opts, runtime) {

package/dist/commands/models/image-fallbacks.js

@@ -1,4 +1,4 @@
-import { buildModelAliasIndex, resolveModelRefFromString } from "../../agents/model-selection.js";
+import { buildModelAliasIndex, resolveModelRefFromString, } from "../../agents/model-selection.js";
 import { CONFIG_PATH_NEXUS, loadConfig } from "../../config/config.js";
 import { DEFAULT_PROVIDER, ensureFlagCompatibility, modelKey, resolveModelTarget, updateConfig, } from "./shared.js";
 export async function modelsImageFallbacksListCommand(opts, runtime) {

package/dist/commands/models/list.js

@@ -5,7 +5,7 @@ import { ensureAuthProfileStore, listProfilesForProvider, } from "../../agents/a
 import { getCustomProviderApiKey, resolveEnvApiKey, } from "../../agents/model-auth.js";
 import { buildModelAliasIndex, parseModelRef, resolveConfiguredModelRef, resolveModelRefFromString, } from "../../agents/model-selection.js";
 import { ensureNexusModelsJson } from "../../agents/models-config.js";
-import { CONFIG_PATH_NEXUS, loadConfig } from "../../config/config.js";
+import { CONFIG_PATH_NEXUS, loadConfig, } from "../../config/config.js";
 import { info } from "../../globals.js";
 import { DEFAULT_MODEL, DEFAULT_PROVIDER, ensureFlagCompatibility, formatTokenK, modelKey, } from "./shared.js";
 const MODEL_PAD = 42;

package/dist/commands/models/scan.js

@@ -1,6 +1,6 @@
 import { cancel, isCancel, multiselect } from "@clack/prompts";
 import { resolveApiKeyForProvider } from "../../agents/model-auth.js";
-import { scanOpenRouterModels } from "../../agents/model-scan.js";
+import { scanOpenRouterModels, } from "../../agents/model-scan.js";
 import { CONFIG_PATH_NEXUS, loadConfig } from "../../config/config.js";
 import { formatMs, formatTokenK, updateConfig } from "./shared.js";
 const MODEL_PAD = 42;

package/dist/commands/onboard-auth.js

@@ -1,11 +1,36 @@
 import { upsertAuthProfile } from "../agents/auth-profiles.js";
 export async function writeOAuthCredentials(provider, creds) {
+    const access = "accessToken" in creds && typeof creds.accessToken === "string"
+        ? creds.accessToken
+        : typeof creds.access === "string"
+            ? creds.access
+            : undefined;
+    const refresh = "refreshToken" in creds && typeof creds.refreshToken === "string"
+        ? creds.refreshToken
+        : typeof creds.refresh === "string"
+            ? creds.refresh
+            : undefined;
+    const rawExpires = "expiresAt" in creds
+        ? creds.expiresAt
+        : creds.expires;
+    const parsedExpires = typeof rawExpires === "number"
+        ? rawExpires
+        : typeof rawExpires === "string"
+            ? Number.parseInt(rawExpires, 10)
+            : undefined;
+    const expires = typeof parsedExpires === "number" && Number.isFinite(parsedExpires)
+        ? parsedExpires
+        : undefined;
+    const email = typeof creds.email === "string" ? creds.email : undefined;
     upsertAuthProfile({
-        profileId: `${provider}:${creds.email ?? "default"}`,
+        profileId: `${provider}:${email ?? "default"}`,
         credential: {
             type: "oauth",
             provider,
-            ...creds,
+            access,
+            refresh,
+            expires,
+            email,
         },
     });
 }

package/dist/commands/onboard-eve-identity.js

@@ -5,7 +5,10 @@ const execFileAsync = promisify(execFile);
 function coerceStringArray(input) {
     if (!Array.isArray(input))
         return [];
-    return input.map((v) => String(v)).map((s) => s.trim()).filter(Boolean);
+    return input
+        .map((v) => String(v))
+        .map((s) => s.trim())
+        .filter(Boolean);
 }
 function parseEveWhoamiJson(stdout) {
     const raw = stdout.trim();
@@ -78,18 +81,14 @@ export async function maybeSetupIdentityFromEve(params) {
         await prompter.note(`Eve whoami failed: ${err instanceof Error ? err.message : String(err)}`, "Eve whoami");
         return;
     }
-    if (!whoami?.name && (!whoami?.phones?.length && !whoami?.emails?.length)) {
+    if (!whoami?.name && !whoami?.phones?.length && !whoami?.emails?.length) {
         await prompter.note("Eve ran, but didn't return identity info in a readable format.", "Eve whoami");
         return;
     }
     const summaryLines = [
         whoami.name ? `Name: ${whoami.name}` : undefined,
-        whoami.phones && whoami.phones.length
-            ? `Phones: ${whoami.phones.join(", ")}`
-            : undefined,
-        whoami.emails && whoami.emails.length
-            ? `Emails: ${whoami.emails.join(", ")}`
-            : undefined,
+        whoami.phones?.length ? `Phones: ${whoami.phones.join(", ")}` : undefined,
+        whoami.emails?.length ? `Emails: ${whoami.emails.join(", ")}` : undefined,
     ].filter(Boolean);
     await prompter.note(summaryLines.join("\n"), "Detected identity (Eve)");
     // NOTE: We don't directly edit IDENTITY.md / PROFILE.md here yet; the bootstrap ritual

package/dist/commands/onboard-non-interactive.js

@@ -5,9 +5,9 @@ import { resolveGatewayProgramArguments } from "../daemon/program-args.js";
 import { resolveGatewayService } from "../daemon/service.js";
 import { defaultRuntime } from "../runtime.js";
 import { resolveUserPath, sleep } from "../utils.js";
+import { applyBootstrapPreset } from "./bootstrap-preset.js";
 import { healthCommand } from "./health.js";
 import { applyAuthProfileConfig, applyMinimaxConfig, setAnthropicApiKey, } from "./onboard-auth.js";
-import { applyBootstrapPreset } from "./bootstrap-preset.js";
 import { applyWizardMetadata, DEFAULT_WORKSPACE, ensureWorkspaceAndSessions, randomToken, } from "./onboard-helpers.js";
 import { ensureSystemdUserLingerNonInteractive } from "./systemd-linger.js";
 export async function runNonInteractiveOnboarding(opts, runtime = defaultRuntime) {
@@ -180,7 +180,9 @@ export async function runNonInteractiveOnboarding(opts, runtime = defaultRuntime
         skipBootstrap: Boolean(nextConfig.agent?.skipBootstrap),
     });
     // Scripted bootstrap (test harness / automation): fill identity files + delete BOOTSTRAP.md.
-    if (opts.bootstrapPreset || opts.bootstrapAgentName || opts.bootstrapUserName) {
+    if (opts.bootstrapPreset ||
+        opts.bootstrapAgentName ||
+        opts.bootstrapUserName) {
         await applyBootstrapPreset({
             workspaceDir,
             runtime,

package/dist/commands/onboard-quickstart.js

@@ -1,18 +1,18 @@
 import net from "node:net";
+import { CLAUDE_CLI_PROFILE_ID, CODEX_CLI_PROFILE_ID, ensureAuthProfileStore, } from "../agents/auth-profiles.js";
 import { CONFIG_PATH_NEXUS, readConfigFileSnapshot, resolveGatewayPort, writeConfigFile, } from "../config/config.js";
-import { resolveGatewayService } from "../daemon/service.js";
-import { resolveGatewayProgramArguments } from "../daemon/program-args.js";
 import { GATEWAY_LAUNCH_AGENT_LABEL } from "../daemon/constants.js";
+import { resolveGatewayProgramArguments } from "../daemon/program-args.js";
+import { resolveGatewayService } from "../daemon/service.js";
 import { ensureControlUiAssetsBuilt } from "../infra/control-ui-assets.js";
 import { defaultRuntime } from "../runtime.js";
 import { resolveUserPath, sleep } from "../utils.js";
+import { applyBootstrapPreset } from "./bootstrap-preset.js";
 import { healthCommand } from "./health.js";
 import { applyAuthProfileConfig, setAnthropicApiKey } from "./onboard-auth.js";
-import { applyBootstrapPreset } from "./bootstrap-preset.js";
 import { applyWizardMetadata, DEFAULT_WORKSPACE, detectBrowserOpenSupport, ensureWorkspaceAndSessions, openUrl, resolveControlUiLinks, } from "./onboard-helpers.js";
-import { CLAUDE_CLI_PROFILE_ID, CODEX_CLI_PROFILE_ID, ensureAuthProfileStore, } from "../agents/auth-profiles.js";
-import { ensureSystemdUserLingerNonInteractive } from "./systemd-linger.js";
 import { applyOpenAICodexModelDefault } from "./openai-codex-model-default.js";
+import { ensureSystemdUserLingerNonInteractive } from "./systemd-linger.js";
 async function isPortFree(port) {
     try {
         await new Promise((resolve, reject) => {
@@ -51,7 +51,7 @@ async function pickGatewayPort(preferred) {
     });
 }
 function applyQuickstartAuth(cfg, runtime) {
-    // Sync external credentials (Keychain on macOS, ~/.claude, ~/.codex) into the store.
+    // Quickstart only considers credentials already imported into the store.
     const store = ensureAuthProfileStore();
     // 1) Prefer OpenAI Codex credentials if present (works without API keys).
     if (store.profiles[CODEX_CLI_PROFILE_ID]) {
@@ -79,9 +79,9 @@ function applyQuickstartAuth(cfg, runtime) {
     // valid for general Anthropic API requests. We avoid auto-selecting them here.
     // Users can still opt in via `nexus onboard` interactive.
     if (store.profiles[CLAUDE_CLI_PROFILE_ID]) {
-        runtime.log('Detected Claude Code credentials, but Nexus may require an Anthropic API key (or another provider) for API access. Run `nexus onboard` to choose billing/auth.');
+        runtime.log("Detected Claude Code credentials, but Nexus may require an Anthropic API key (or another provider) for API access. Run `nexus onboard` to choose billing/auth.");
     }
-    runtime.log("No Claude/Codex credentials detected yet. You can set this later via `nexus onboard` or `nexus configure`.");
+    runtime.log("No Claude/Codex credentials detected yet. If you use the CLIs, run `nexus credential import claude-cli` or `nexus credential import codex-cli`.");
     return cfg;
 }
 export async function runQuickstartOnboarding(opts, runtime = defaultRuntime) {
@@ -113,14 +113,19 @@ export async function runQuickstartOnboarding(opts, runtime = defaultRuntime) {
         },
     };
     nextConfig = applyQuickstartAuth(nextConfig, runtime);
-    nextConfig = applyWizardMetadata(nextConfig, { command: "onboard", mode: "local" });
+    nextConfig = applyWizardMetadata(nextConfig, {
+        command: "onboard",
+        mode: "local",
+    });
     await writeConfigFile(nextConfig);
     runtime.log(`Updated ${CONFIG_PATH_NEXUS}`);
     await ensureWorkspaceAndSessions(workspaceDir, runtime, {
         skipBootstrap: Boolean(nextConfig.agent?.skipBootstrap),
     });
     // Scripted bootstrap (test harness / automation): fill identity files + delete BOOTSTRAP.md.
-    if (opts.bootstrapPreset || opts.bootstrapAgentName || opts.bootstrapUserName) {
+    if (opts.bootstrapPreset ||
+        opts.bootstrapAgentName ||
+        opts.bootstrapUserName) {
         await applyBootstrapPreset({
             workspaceDir,
             runtime,
@@ -142,7 +147,9 @@ export async function runQuickstartOnboarding(opts, runtime = defaultRuntime) {
             const { programArguments, workingDirectory } = await resolveGatewayProgramArguments({ port, dev: devMode });
             const environment = {
                 PATH: process.env.PATH,
-                NEXUS_LAUNCHD_LABEL: process.platform === "darwin" ? GATEWAY_LAUNCH_AGENT_LABEL : undefined,
+                NEXUS_LAUNCHD_LABEL: process.platform === "darwin"
+                    ? GATEWAY_LAUNCH_AGENT_LABEL
+                    : undefined,
             };
             await service.install({
                 env: process.env,