@ngockhoale/ukit 3.1.4 → 3.1.5

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 All notable changes to UKit are documented here.
 
+## 3.1.5 - 2026-09-26
+
+- **Install/update warns when the decision lane has no API key.** After a project refresh, `ukit install` (and `ukit update`'s refresh) prints a bold-red warning with setup instructions — `ukit decision --base-url <url> --key <key>`, `~/.ukit/storage/gatewayDecision.json`, or `UKIT_DECISION_API_KEY` — whenever no dedicated decision key and no shared UNIC token are resolvable. When a key (or the shared UNIC token fallback) is found, a one-line confirmation is printed instead.
+
 ## 3.1.4 - 2026-09-26
 
 - **`ukit decision` — user-facing decision-lane gateway setup.** Resolution order (per field): env `UKIT_DECISION_BASE_URL`/`UKIT_DECISION_API_KEY`/`UKIT_DECISION_SCHEME` → `~/.ukit/storage/gatewayDecision.json` (new per-lane file; `gateway<Lane>.json` pattern) → `~/.ukit/storage/config.json` `decisionGateway` → `openai.unicjsc.com` + shared UNIC token. File field names mirror the env vars; `scheme` selects `Authorization: Bearer` vs `x-api-key`. Both files are seeded by `ukit install` with the full key set (`mergeStrategy: skip` — `ukit update` never overwrites user values). Commands: `--status`, `--base-url/--key/--scheme`, `--set-unic`, `--clear`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ngockhoale/ukit",
-  "version": "3.1.4",
+  "version": "3.1.5",
   "description": "Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).",
   "license": "MIT",
   "type": "module",

package/src/cli/commands/install.js

@@ -2,6 +2,7 @@ import { buildPathConfig } from '../../core/paths.js';
 import { runInstallPipeline } from '../../core/runInstallPipeline.js';
 import { formatRepairReport } from '../../core/repairBrokenHooks.js';
 import { formatGatewayResilienceReport } from '../../core/gatewayResilienceEnv.js';
+import { resolveDecisionApiKey, resolveDecisionBaseUrl } from '../../core/gatewayProbe.js';
 import { buildCodeIndex, buildDerivedIndexArtifacts } from '../../index/buildIndex.js';
 import { installIndexRefreshHooks } from '../../index/gitHooks.js';
 import fs from 'node:fs/promises';
@@ -339,6 +340,29 @@ export async function runInstall({ packageRoot, projectRoot, packageVersion, arg
     console.log(`[UKit] ${line}`);
   }
 
+  // Decision-lane credential check: warn (bold red) when no dedicated key is
+  // configured. Resolution: env UKIT_DECISION_API_KEY →
+  // ~/.ukit/storage/gatewayDecision.json → config.json decisionGateway →
+  // shared UNIC token. Tell the user exactly how to set it.
+  try {
+    const decisionKey = await resolveDecisionApiKey({ projectRoot });
+    const decisionBase = resolveDecisionBaseUrl({});
+    const R = '';
+    const X = '';
+    if (!decisionKey?.value) {
+      console.warn(`${R}[UKit] WARNING — decision lane (unic-decision) has NO API key configured.${X}`);
+      console.warn(`${R}[UKit] The typed-decision features will report 'unavailable' and fall back to deterministic rules.${X}`);
+      console.warn(`${R}[UKit] Set it with:  ukit decision --base-url https://openai.unicjsc.com --key <YOUR_KEY>${X}`);
+      console.warn(`${R}[UKit] Or edit ~/.ukit/storage/gatewayDecision.json -> UKIT_DECISION_API_KEY, or export UKIT_DECISION_API_KEY=<key>.${X}`);
+    } else if (decisionKey.source === 'shared-unic-token') {
+      console.log(`[UKit] Decision lane: using shared UNIC token at ${decisionBase.baseUrl} (no dedicated key needed).`);
+    } else {
+      console.log(`[UKit] Decision lane: key configured (${decisionKey.source}) at ${decisionBase.baseUrl}.`);
+    }
+  } catch {
+    // advisory only — never fail install on the check
+  }
+
   const docsLabels = [
     'docs/PROJECT.md',
     'docs/MEMORY.md',