@nicotinetool/o7-cli 1.1.0

package/installer/lib/antigravity.sh

@@ -0,0 +1,140 @@
+#!/usr/bin/env bash
+# O7 OpenClaw Installer — Antigravity Self-Healer Integration
+
+ANTIGRAVITY_SCRIPT="${HOME}/.openclaw/workspace/projects/o7-os/module-engine/antigravity.js"
+
+setup_antigravity() {
+  section 9 "Antigravity Self-Healer"
+
+  # Check if Antigravity exists
+  if [[ ! -f "$ANTIGRAVITY_SCRIPT" ]]; then
+    warn "Antigravity script not found at expected path."
+    info "It will be installed when Unified MC is set up."
+    log "ANTIGRAVITY: script not found, skipping"
+    return 0
+  fi
+
+  # Check for Gemini API key (required for Antigravity)
+  local gemini_key
+  gemini_key=$(grep -o '"GEMINI_API_KEY"[[:space:]]*:[[:space:]]*"[^"]*"' ~/.openclaw/openclaw.json 2>/dev/null | head -1 | sed 's/.*: *"//;s/"//')
+
+  if [[ -z "$gemini_key" ]]; then
+    # Check if they set up Gemini in auth phase
+    local has_gemini=false
+    for result in "${AUTH_RESULTS[@]}"; do
+      if [[ "$result" == "gemini:ok" ]]; then
+        has_gemini=true
+        break
+      fi
+    done
+
+    if [[ "$has_gemini" == "false" ]]; then
+      warn "Antigravity needs a Gemini API key (it's free)."
+      echo -e "  ${CYAN}→ https://aistudio.google.com/apikey${RESET}"
+      local ag_key
+      ask "  Paste your Gemini API key (or press Enter to skip):" ag_key true
+      if [[ -n "$ag_key" ]]; then
+        gemini_key="$ag_key"
+      else
+        warn "Skipping Antigravity. You can set it up later."
+        log "ANTIGRAVITY: no gemini key, skipped"
+        return 0
+      fi
+    fi
+  fi
+
+  # Run initial health check
+  info "Running Antigravity health check..."
+  local health_output
+  if [[ -n "$gemini_key" ]]; then
+    health_output=$(GEMINI_API_KEY="$gemini_key" node "$ANTIGRAVITY_SCRIPT" health 2>&1)
+  else
+    health_output=$(node "$ANTIGRAVITY_SCRIPT" health 2>&1)
+  fi
+  local exit_code=$?
+
+  if (( exit_code == 0 )); then
+    ok "Antigravity health check passed"
+  else
+    warn "Antigravity found issues:"
+    echo "$health_output" | while read -r line; do
+      echo -e "  ${DIM}${line}${RESET}"
+    done
+    info "Antigravity will auto-heal these on the next cycle."
+  fi
+
+  # Install launchd timer for periodic health checks (every 30 min)
+  setup_antigravity_timer "$gemini_key"
+
+  log "ANTIGRAVITY: setup complete"
+}
+
+setup_antigravity_timer() {
+  local gemini_key="$1"
+  info "Setting up Antigravity auto-healer (runs every 30 minutes)..."
+
+  local plist_path="${HOME}/Library/LaunchAgents/com.o7.antigravity.plist"
+
+  cat > "$plist_path" << PLIST
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>com.o7.antigravity</string>
+    <key>ProgramArguments</key>
+    <array>
+        <string>$(which node)</string>
+        <string>${ANTIGRAVITY_SCRIPT}</string>
+        <string>health</string>
+    </array>
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>PATH</key>
+        <string>$(dirname "$(which node)"):/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin</string>
+PLIST
+
+  if [[ -n "$gemini_key" ]]; then
+    cat >> "$plist_path" << PLIST
+        <key>GEMINI_API_KEY</key>
+        <string>${gemini_key}</string>
+PLIST
+  fi
+
+  cat >> "$plist_path" << PLIST
+    </dict>
+    <key>StartInterval</key>
+    <integer>1800</integer>
+    <key>RunAtLoad</key>
+    <false/>
+    <key>StandardOutPath</key>
+    <string>/tmp/antigravity.log</string>
+    <key>StandardErrorPath</key>
+    <string>/tmp/antigravity.err</string>
+</dict>
+</plist>
+PLIST
+
+  launchctl unload "$plist_path" 2>/dev/null
+  launchctl load "$plist_path" 2>/dev/null
+
+  if launchctl list | grep -q "com.o7.antigravity"; then
+    ok "Antigravity timer installed (every 30 min)"
+    log "ANTIGRAVITY: launchd timer installed"
+  else
+    warn "Antigravity timer couldn't be loaded. You can load it manually:"
+    detail "launchctl load $plist_path"
+    log "ANTIGRAVITY: launchd timer load failed"
+  fi
+}
+
+# Run Antigravity heal on a specific error from the install
+heal_install_error() {
+  local error_desc="$1"
+  if [[ -f "$ANTIGRAVITY_SCRIPT" ]]; then
+    info "Asking Antigravity to diagnose: ${error_desc}"
+    node "$ANTIGRAVITY_SCRIPT" heal "$error_desc" 2>&1 | while read -r line; do
+      echo -e "  ${DIM}${line}${RESET}"
+    done
+  fi
+}

package/installer/lib/auth.sh

@@ -0,0 +1,286 @@
+#!/usr/bin/env bash
+# O7 OpenClaw Installer — Smart Auth Setup
+# NEVER asks for raw API keys for Claude/ChatGPT. Uses OAuth/CLI flows.
+
+AUTH_RESULTS=()  # Track what worked
+
+setup_claude() {
+  step "Setting up Claude (Anthropic)"
+  echo
+  echo -e "${BOLD}  Claude is the primary AI model. We'll authenticate via browser.${RESET}"
+  echo -e "${DIM}  This opens your browser — sign in with your Anthropic account.${RESET}"
+  echo -e "${DIM}  No API key needed. Just your login.${RESET}"
+  echo
+
+  if ! confirm "  Ready to authenticate with Claude?"; then
+    warn "Skipping Claude setup. You can set it up later with: openclaw configure"
+    AUTH_RESULTS+=("claude:skipped")
+    return 1
+  fi
+
+  info "Launching browser authentication..."
+  openclaw onboard --auth-choice setup-token --non-interactive=false 2>&1 | while read -r line; do
+    echo -e "  ${DIM}${line}${RESET}"
+  done
+  local exit_code=${PIPESTATUS[0]}
+
+  if (( exit_code == 0 )); then
+    ok "Claude authentication complete"
+    AUTH_RESULTS+=("claude:ok")
+    log "AUTH OK: Claude (setup-token)"
+    return 0
+  fi
+
+  # Fallback: try oauth flow
+  warn "Setup token failed. Trying OAuth flow..."
+  openclaw onboard --auth-choice oauth 2>&1 | while read -r line; do
+    echo -e "  ${DIM}${line}${RESET}"
+  done
+
+  if (( ${PIPESTATUS[0]} == 0 )); then
+    ok "Claude OAuth authentication complete"
+    AUTH_RESULTS+=("claude:ok")
+    log "AUTH OK: Claude (oauth fallback)"
+    return 0
+  fi
+
+  fail "Claude authentication failed."
+  info "You can set it up manually later: openclaw configure"
+  AUTH_RESULTS+=("claude:failed")
+  log "AUTH FAIL: Claude"
+  return 1
+}
+
+setup_chatgpt() {
+  step "Setting up ChatGPT / Codex (OpenAI)"
+  echo
+  echo -e "${BOLD}  ChatGPT/Codex uses OAuth — just sign in with your OpenAI account.${RESET}"
+  echo -e "${DIM}  This will open your browser. No API key needed.${RESET}"
+  echo
+
+  if ! confirm "  Ready to authenticate with OpenAI?"; then
+    warn "Skipping ChatGPT/Codex. Set up later: openclaw configure"
+    AUTH_RESULTS+=("openai:skipped")
+    return 1
+  fi
+
+  info "Launching OpenAI OAuth..."
+  openclaw onboard --auth-choice openai-codex 2>&1 | while read -r line; do
+    echo -e "  ${DIM}${line}${RESET}"
+  done
+  local exit_code=${PIPESTATUS[0]}
+
+  if (( exit_code == 0 )); then
+    ok "ChatGPT/Codex authentication complete"
+    AUTH_RESULTS+=("openai:ok")
+    log "AUTH OK: OpenAI (codex oauth)"
+    return 0
+  fi
+
+  fail "OpenAI authentication failed."
+  AUTH_RESULTS+=("openai:failed")
+  log "AUTH FAIL: OpenAI"
+  return 1
+}
+
+setup_gemini() {
+  step "Setting up Gemini (Google)"
+  echo
+  echo -e "${BOLD}  Gemini uses Google OAuth — sign in with your Google account.${RESET}"
+  echo -e "${DIM}  Free tier, no credit card needed. 1M+ context window.${RESET}"
+  echo
+
+  if ! confirm "  Ready to authenticate with Google?"; then
+    warn "Skipping Gemini. Set up later: openclaw configure"
+    AUTH_RESULTS+=("gemini:skipped")
+    return 1
+  fi
+
+  info "Launching Gemini CLI OAuth..."
+  openclaw onboard --auth-choice google-gemini-cli 2>&1 | while read -r line; do
+    echo -e "  ${DIM}${line}${RESET}"
+  done
+  local exit_code=${PIPESTATUS[0]}
+
+  if (( exit_code == 0 )); then
+    ok "Gemini authentication complete"
+    AUTH_RESULTS+=("gemini:ok")
+    log "AUTH OK: Gemini (cli oauth)"
+    return 0
+  fi
+
+  # Fallback: API key
+  warn "OAuth failed. Let's try with an API key instead."
+  echo
+  echo -e "  ${BOLD}Get a free API key:${RESET}"
+  echo -e "  ${CYAN}→ https://aistudio.google.com/apikey${RESET}"
+  echo -e "  ${DIM}  Sign in with Google, click 'Create API Key', copy it.${RESET}"
+  echo
+
+  local gemini_key
+  ask "  Paste your Gemini API key:" gemini_key true
+
+  if [[ -n "$gemini_key" ]]; then
+    openclaw onboard --auth-choice gemini-api-key --gemini-api-key "$gemini_key" 2>&1 | while read -r line; do
+      echo -e "  ${DIM}${line}${RESET}"
+    done
+    if (( ${PIPESTATUS[0]} == 0 )); then
+      ok "Gemini configured with API key"
+      AUTH_RESULTS+=("gemini:ok")
+      log "AUTH OK: Gemini (api key fallback)"
+      return 0
+    fi
+  fi
+
+  fail "Gemini setup failed."
+  AUTH_RESULTS+=("gemini:failed")
+  log "AUTH FAIL: Gemini"
+  return 1
+}
+
+setup_kimi() {
+  step "Setting up Kimi K2.5 (Ollama Cloud)"
+  echo
+  echo -e "${BOLD}  Kimi K2.5 is our design AI. Runs via Ollama Cloud.${RESET}"
+  echo -e "${DIM}  You'll need an API key from ollama.com.${RESET}"
+  echo
+  echo -e "  ${BOLD}Get your key:${RESET}"
+  echo -e "  ${CYAN}→ https://ollama.com/settings/keys${RESET}"
+  echo -e "  ${DIM}  1. Sign in or create an account at ollama.com${RESET}"
+  echo -e "  ${DIM}  2. Go to Settings → API Keys${RESET}"
+  echo -e "  ${DIM}  3. Click 'Create new key', copy it${RESET}"
+  echo
+
+  if ! confirm "  Have your Ollama API key ready?"; then
+    warn "Skipping Kimi. Set up later: openclaw configure"
+    AUTH_RESULTS+=("kimi:skipped")
+    return 1
+  fi
+
+  local ollama_key
+  ask "  Paste your Ollama API key:" ollama_key true
+
+  if [[ -z "$ollama_key" ]]; then
+    warn "No key entered. Skipping Kimi."
+    AUTH_RESULTS+=("kimi:skipped")
+    return 1
+  fi
+
+  # Configure as custom provider
+  info "Configuring Kimi K2.5 via Ollama Cloud..."
+  openclaw onboard \
+    --auth-choice custom-api-key \
+    --custom-api-key "$ollama_key" \
+    --custom-base-url "https://ollama.com/v1" \
+    --custom-provider-id "ollama" \
+    --custom-model-id "kimi-k2.5:cloud" \
+    --custom-compatibility openai \
+    --token-profile-id "ollama:cloud" \
+    2>&1 | while read -r line; do
+    echo -e "  ${DIM}${line}${RESET}"
+  done
+  local exit_code=${PIPESTATUS[0]}
+
+  if (( exit_code == 0 )); then
+    ok "Kimi K2.5 configured"
+    AUTH_RESULTS+=("kimi:ok")
+    log "AUTH OK: Kimi K2.5 (ollama cloud)"
+    return 0
+  fi
+
+  fail "Kimi K2.5 configuration failed."
+  info "You can add it manually later in openclaw.json"
+  AUTH_RESULTS+=("kimi:failed")
+  log "AUTH FAIL: Kimi K2.5"
+  return 1
+}
+
+setup_github_copilot() {
+  step "Setting up GitHub Copilot"
+  echo
+  echo -e "${BOLD}  GitHub Copilot gives access to Claude and GPT models for free.${RESET}"
+  echo -e "${DIM}  Requires a GitHub account. Browser sign-in.${RESET}"
+  echo
+
+  if ! confirm "  Set up GitHub Copilot?"; then
+    warn "Skipping GitHub Copilot."
+    AUTH_RESULTS+=("copilot:skipped")
+    return 1
+  fi
+
+  # Check if gh CLI is installed
+  if ! command -v gh &>/dev/null; then
+    info "Installing GitHub CLI..."
+    brew install gh &
+    spin $! "Installing gh..."
+    wait $!
+  fi
+
+  # Auth with GitHub first if needed
+  if ! gh auth status &>/dev/null 2>&1; then
+    info "Authenticating with GitHub..."
+    gh auth login -w 2>&1 | while read -r line; do
+      echo -e "  ${DIM}${line}${RESET}"
+    done
+  fi
+
+  info "Configuring GitHub Copilot for OpenClaw..."
+  openclaw onboard --auth-choice github-copilot 2>&1 | while read -r line; do
+    echo -e "  ${DIM}${line}${RESET}"
+  done
+  local exit_code=${PIPESTATUS[0]}
+
+  if (( exit_code == 0 )); then
+    ok "GitHub Copilot configured"
+    AUTH_RESULTS+=("copilot:ok")
+    log "AUTH OK: GitHub Copilot"
+    return 0
+  fi
+
+  fail "GitHub Copilot setup failed."
+  AUTH_RESULTS+=("copilot:failed")
+  log "AUTH FAIL: GitHub Copilot"
+  return 1
+}
+
+run_auth_setup() {
+  section 3 "AI Model Authentication"
+  echo
+  echo -e "${BOLD}  Let's connect your AI models. No raw API keys needed —${RESET}"
+  echo -e "${BOLD}  just sign in through your browser for each one.${RESET}"
+  echo
+  echo -e "${DIM}  We'll set up the models in order of priority.${RESET}"
+  echo -e "${DIM}  You need at least ONE working model to continue.${RESET}"
+  echo
+
+  check_internet || return 1
+
+  # Set up each provider
+  setup_claude
+  echo
+  setup_chatgpt
+  echo
+  setup_gemini
+  echo
+  setup_kimi
+  echo
+  setup_github_copilot
+
+  # Check if at least one provider works
+  local working=0
+  for result in "${AUTH_RESULTS[@]}"; do
+    if [[ "$result" == *":ok" ]]; then
+      ((working++))
+    fi
+  done
+
+  echo
+  if (( working == 0 )); then
+    fail "No AI models configured. You need at least one to use OpenClaw."
+    info "Re-run the installer or set up manually: openclaw configure"
+    return 1
+  fi
+
+  ok "${working} model(s) configured successfully"
+  log "AUTH SUMMARY: ${working} working — ${AUTH_RESULTS[*]}"
+}

package/installer/lib/checks.sh

@@ -0,0 +1,177 @@
+#!/usr/bin/env bash
+# O7 OpenClaw Installer — System Checks
+
+check_macos_version() {
+  step "Checking macOS version"
+  local ver
+  ver=$(sw_vers -productVersion 2>/dev/null)
+  if [[ -z "$ver" ]]; then
+    fail "Not running macOS. This installer is for Mac only."
+    log "FAIL: Not macOS"
+    return 1
+  fi
+  local major
+  major=$(echo "$ver" | cut -d. -f1)
+  if (( major < 13 )); then
+    fail "macOS $ver detected. Requires macOS 13 (Ventura) or later."
+    info "Upgrade your Mac at System Settings → General → Software Update"
+    log "FAIL: macOS $ver too old"
+    return 1
+  fi
+  ok "macOS $ver"
+  log "OK: macOS $ver"
+}
+
+check_homebrew() {
+  step "Checking Homebrew"
+  if command -v brew &>/dev/null; then
+    ok "Homebrew $(brew --version | head -1 | awk '{print $2}')"
+    log "OK: Homebrew found"
+    return 0
+  fi
+
+  warn "Homebrew not found. Installing..."
+  info "This is the standard macOS package manager. Safe and widely used."
+  if ! confirm "Install Homebrew?"; then
+    fail "Homebrew is required. Can't continue without it."
+    return 1
+  fi
+
+  /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)" &
+  spin $! "Installing Homebrew..."
+  wait $!
+  local exit_code=$?
+
+  if (( exit_code != 0 )); then
+    fail "Homebrew installation failed (exit code $exit_code)"
+    info "Try running manually: /bin/bash -c \"\$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)\""
+    log "FAIL: Homebrew install exit $exit_code"
+    return 1
+  fi
+
+  # Add to PATH for Apple Silicon
+  if [[ -f /opt/homebrew/bin/brew ]]; then
+    eval "$(/opt/homebrew/bin/brew shellenv)"
+  fi
+
+  if command -v brew &>/dev/null; then
+    ok "Homebrew installed successfully"
+    log "OK: Homebrew installed"
+  else
+    fail "Homebrew installed but not in PATH. Restart your terminal and re-run."
+    return 1
+  fi
+}
+
+check_node() {
+  step "Checking Node.js"
+  if command -v node &>/dev/null; then
+    local node_ver
+    node_ver=$(node -v | sed 's/v//')
+    local node_major
+    node_major=$(echo "$node_ver" | cut -d. -f1)
+    if (( node_major >= 22 )); then
+      ok "Node.js v${node_ver}"
+      log "OK: Node $node_ver"
+      return 0
+    else
+      warn "Node.js v${node_ver} found but v22+ is required."
+    fi
+  fi
+
+  info "Installing Node.js via Homebrew..."
+  brew install node &
+  spin $! "Installing Node.js..."
+  wait $!
+
+  if command -v node &>/dev/null; then
+    local installed_ver
+    installed_ver=$(node -v | sed 's/v//')
+    ok "Node.js v${installed_ver} installed"
+    log "OK: Node $installed_ver installed"
+  else
+    fail "Node.js installation failed."
+    info "Try: brew install node"
+    log "FAIL: Node install failed"
+    return 1
+  fi
+}
+
+check_git() {
+  step "Checking Git"
+  if command -v git &>/dev/null; then
+    ok "Git $(git --version | awk '{print $3}')"
+    log "OK: Git found"
+    return 0
+  fi
+
+  info "Installing Git..."
+  brew install git &
+  spin $! "Installing Git..."
+  wait $!
+
+  if command -v git &>/dev/null; then
+    ok "Git installed"
+    log "OK: Git installed"
+  else
+    fail "Git installation failed. Try: brew install git"
+    log "FAIL: Git install failed"
+    return 1
+  fi
+}
+
+check_pnpm() {
+  step "Checking pnpm"
+  if command -v pnpm &>/dev/null; then
+    ok "pnpm $(pnpm --version)"
+    log "OK: pnpm found"
+    return 0
+  fi
+
+  info "Installing pnpm..."
+  npm install -g pnpm &
+  spin $! "Installing pnpm..."
+  wait $!
+
+  if command -v pnpm &>/dev/null; then
+    ok "pnpm installed"
+    log "OK: pnpm installed"
+  else
+    fail "pnpm installation failed. Try: npm install -g pnpm"
+    log "FAIL: pnpm install failed"
+    return 1
+  fi
+}
+
+check_disk_space() {
+  step "Checking disk space"
+  local free_gb
+  free_gb=$(df -g / | tail -1 | awk '{print $4}')
+  if (( free_gb < 2 )); then
+    fail "Only ${free_gb}GB free. Need at least 2GB."
+    info "Free up disk space and try again."
+    log "FAIL: Only ${free_gb}GB free"
+    return 1
+  fi
+  ok "${free_gb}GB free"
+  log "OK: ${free_gb}GB free"
+}
+
+run_all_checks() {
+  section 1 "System Check"
+  local failed=0
+  check_macos_version || ((failed++))
+  check_homebrew      || ((failed++))
+  check_node          || ((failed++))
+  check_git           || ((failed++))
+  check_pnpm          || ((failed++))
+  check_disk_space    || ((failed++))
+
+  if (( failed > 0 )); then
+    echo
+    fail "$failed prerequisite(s) failed. Fix the issues above and re-run."
+    return 1
+  fi
+  echo
+  ok "All system checks passed!"
+}