@openlife/cli 1.7.4 → 1.7.6

package/CHANGELOG.md

@@ -0,0 +1,186 @@
+# Changelog
+
+All notable changes to OpenLife CLI (`@openlife/cli`) are documented here.
+Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+Project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+Detailed per-milestone notes (story-level breakdown, commit map, scorecard
+deltas) live in `docs/v<N>-changelog.md`.
+
+## [Unreleased]
+
+Hit-10 sprint in progress — see plan for M2→M6 (docs hygiene, first-run
+wizard, observability, aiobuilder depth, self-update).
+
+---
+
+## [1.7.4] — 2026-05-14
+
+### Fixed
+- `openlife --version` now reads dynamically from `package.json` instead
+  of a hardcoded `1.0.0`. After install, the reported version matches
+  the npm tag.
+
+## [1.7.3] — 2026-05-14
+
+### Added
+- `LICENSE` (MIT) at repository root and registered in `package.json`
+  `files[]` so the tarball ships it.
+- `.npmignore` to enforce exclusions over `files[]` whitelist when
+  needed.
+
+### Changed
+- Cleaned external dev-kit branding (AIOX, GSD, AIOS) from every
+  user-facing surface: 33 catalog files scrubbed, 8 unused legacy
+  catalog entries removed, source comments and test function names
+  generalized, `dist-templates/workflows/AIOX_PORT_NOTES.md` renamed
+  to `PORTED_WORKFLOWS.md`.
+- `.planning/` and `CLAUDE.md` untracked and `.gitignore`'d — they
+  remain on disk for the maintainer but never ship publicly.
+- Compact, OpenLife-only `CLAUDE.md` content (local-only).
+
+### Removed
+- 7 unused `aios-*` agents + 1 squad from `.catalog/` (imported mirrors
+  with zero runtime consumers).
+- Internal strategy/study docs moved out of public `docs/`.
+
+## [1.7.2] — 2026-05-14
+
+### Changed
+- Package renamed from `@open-life/cli` → `@openlife/cli` to match
+  the existing npm organization (`openlife`). No code/behavior change.
+
+## [1.7.1] — 2026-05-13
+
+### Fixed
+- `SystemDoctor` graceful downgrade when running on Node 20+ builds
+  that lack `--permission` flag support (e.g. CI runners). Sandbox
+  enforcement check no longer false-fails on unsupported runtimes.
+
+## [1.7.0] — 2026-05-13 — "Enforcement at scale"
+
+See `docs/v1.7-changelog.md` for full per-story breakdown.
+
+### Added
+- Toolset enforcement coverage expanded from 2 to **13 categories**
+  (memory, tts, cron, mcp, skills, workflows, squads, web, file,
+  vision, gateway, plus terminal and delegation from v1.4). Behind
+  `OPENLIFE_TOOLSET_ENFORCEMENT=on` (default still off, calendar-gated
+  flip in 20.1).
+- `OrchestrationLoop` now branches on `OPENLIFE_BRAIN_FORECAST=on` to
+  reach `ConsequenceForecaster.forecastWithBrain()` (shipped v1.5,
+  unwired until now). Brain verdict / risk amplifiers / opportunity
+  factors surfaced into the attempt trace.
+- `test_forecast_brain_wiring.ts` regression guard catches the
+  "shipped but unwired" class of bug.
+- Consolidated `docs/release-process.md` runbook.
+
+### Fixed
+- CI lint `any`-budget grep filter (`-h` flag was stripping filenames,
+  causing test-file matches to count as production). Production `any`
+  count driven to **0** against a filename-aware grep.
+
+### Note on prior measurement
+The v1.4–v1.6 `any` counts (172, 109, 83) reflected the broken filter
+and were inflated. Real production counts were ~30, ~20, 12–14.
+Historical changelogs are not retroactively edited; the correction is
+documented in `docs/v1.7-changelog.md`.
+
+## [1.6.0] — 2026-05-13 — "Sandbox rollout"
+
+See `docs/v1.6-changelog.md`.
+
+### Added
+- `ProcessSandbox` (Story 18.1): Node 20+ `--permission` flag-based
+  process sandboxing. First production wire-in via `openlife doctor`
+  with graceful downgrade when unsupported.
+- `TaskExecutor` opt-in sandbox (Story 18.2) via
+  `OPENLIFE_SANDBOX_TASK_EXEC=on`.
+- Distributed lock primitive for multi-process queue coordination.
+
+### Changed
+- `RuntimeHealthMonitor` exponential backoff (10s base → 1h cap) with
+  10-failure budget per 1h window.
+
+## [1.5.0] — 2026-05-13 — "Evaluation + remote publishing"
+
+See `docs/v1.5-changelog.md` and `docs/v1.5-roadmap.md`.
+
+### Added
+- Brain-driven post-mission evaluation (Story 13.1) — automatic
+  `quality / governance / actionability` scoring via `eval judge`
+  command, results in `.openlife/evaluations/`.
+- SHA-chained governance scope ledger (Story 14.2):
+  `.openlife/governance-ledger.jsonl` with tamper detection via chain
+  walk. PII protection by hashing goals before persistence.
+- Remote asset publishing over HTTPS (Story 14.1) —
+  `RemotePublisher` + signed manifests for catalog distribution.
+- `ConsequenceForecaster.forecastWithBrain()` API (wiring in v1.7).
+- Type safety improvements: structured Telegram API parsing, event
+  iteration typing.
+
+## [1.4.0] / [1.4.1] — 2026-05-12/13 — "Path to 10/10"
+
+See `docs/v1.4-changelog.md`.
+
+### Added (consolidation milestone — no new pillars)
+- Intelligence wiring: `Brain.isAnyProviderAvailable()` opt-in,
+  `SquadCreator/SkillCreator.designWithBrain()`, post-mission memory
+  consolidation hook.
+- Real I/O: `SecurityDownloadGuard.downloadAndScan()` with size cap +
+  filename-pattern scanning; `HostInstaller` real implementations for
+  Gemini CLI and Codex (no longer stubs); seeded
+  `dist-templates/{gemini-cli,codex}/`.
+- Toolset enforcement kernel: `assertToolsetAllowed()` at
+  `TaskExecutor` and `Brain` CLI sites (terminal + delegation
+  categories).
+- Workflow condition parser: tokenize → recursive-descent → evaluate
+  pipeline supporting `AND/OR/NOT/==/!=` + parens + dotted identifiers.
+- CI + perf telemetry: `npm run test:performance-latency`,
+  `.github/workflows/{test,build,lint}.yml`.
+
+### v1.4.1 — Maintenance cut
+- Backport-eligible bug fixes for v1.4 line.
+
+## [1.3.0] — 2026-05-12 — "Agent OS Integration"
+
+### Added
+- 5 blueprint docs covering Agent OS integration architecture.
+- Service Mode contract caller fixes (required `actor` parameter).
+- v1.3 placeholder commands now have real implementations.
+- Capability Pack schema + Capability Genesis Engine — turns free-text
+  briefs into draft capability packs (Stories 1.1, 2.1–2.4, 3.1–3.3).
+
+## [1.2.0] — 2026-05-12 — "Royal Stack"
+
+### Added
+- Workflow engine: `WorkflowSchema` + `WorkflowParser` +
+  `WorkflowEngine` with atomic state persistence and phase-step
+  execution model (Story 4.1).
+- 4 ported workflows shipped in `dist-templates/workflows/`:
+  `story-development-cycle`, `greenfield-fullstack`,
+  `brownfield-discovery`, `qa-loop` (Story 4.4).
+- Squad + Skill creators with interactive UX and Brain-driven design
+  modes (Stories 5.1–5.5).
+- Atomic writer + mission checkpoint API (Stories 6.1–6.2).
+- Runtime reliability: heartbeat, watchdog, distributed lock,
+  exponential backoff health monitor.
+- `aiobuilder` CLI surface with 16 sub-commands (`mode`, `create-agent`,
+  `create-squad`, `build-skill`, `generate-ui`, `discover`, `plan`,
+  `build`, `test`, `preview`, `release`, `infra`, `score`, `evolve`,
+  `ship`, `chat`, `canonize`, `create-capability`).
+
+---
+
+[Unreleased]: https://github.com/GOOODZ/openlife-core/compare/v1.7.4...HEAD
+[1.7.4]: https://github.com/GOOODZ/openlife-core/releases/tag/v1.7.4
+[1.7.3]: https://github.com/GOOODZ/openlife-core/releases/tag/v1.7.3
+[1.7.2]: https://github.com/GOOODZ/openlife-core/releases/tag/v1.7.2
+[1.7.1]: https://github.com/GOOODZ/openlife-core/releases/tag/v1.7.1
+[1.7.0]: https://github.com/GOOODZ/openlife-core/releases/tag/v1.7.0
+[1.6.0]: https://github.com/GOOODZ/openlife-core/releases/tag/v1.6.0
+[1.5.0]: https://github.com/GOOODZ/openlife-core/releases/tag/v1.5.0
+[1.4.1]: https://github.com/GOOODZ/openlife-core/releases/tag/v1.4.1
+[1.4.0]: https://github.com/GOOODZ/openlife-core/releases/tag/v1.4.0
+[1.3.0]: https://github.com/GOOODZ/openlife-core/releases/tag/v1.3.0
+[1.2.0]: https://github.com/GOOODZ/openlife-core/releases/tag/v1.2.0

package/CODE_OF_CONDUCT.md

@@ -0,0 +1,31 @@
+# Code of Conduct
+
+This project welcomes contributions from anyone willing to engage
+constructively. To keep collaboration productive and respectful, all
+participants are expected to:
+
+- Communicate professionally and assume good faith.
+- Focus discussion on ideas, code, and project goals.
+- Accept constructive feedback gracefully and offer it the same way.
+- Respect differing viewpoints and experience levels.
+- Help maintain a focused, useful technical environment.
+
+## Scope
+
+This Code of Conduct applies to all project spaces — issues, pull
+requests, discussions, and any public communication associated with
+OpenLife CLI.
+
+## Reporting
+
+If a concern arises, please contact the maintainer privately by opening
+a confidential issue or via email at the address listed in
+`package.json`. Reports will be reviewed and addressed by the
+maintainer.
+
+## Enforcement
+
+The maintainer is responsible for clarifying acceptable behavior and
+may take appropriate corrective action for participation that disrupts
+the project, including edits to or removal of contributions and, where
+necessary, blocking continued participation.

package/CONTRIBUTING.md

@@ -0,0 +1,133 @@
+# Contributing to OpenLife CLI
+
+Thanks for your interest in improving OpenLife. This document covers the
+dev setup, test discipline, commit conventions, and PR process used in
+this project.
+
+## Quick start (dev setup)
+
+```bash
+git clone https://github.com/GOOODZ/openlife-core.git
+cd openlife-core
+npm install         # postinstall runs scripts/postinstall-check.sh
+npm run build       # tsc → dist/
+node bin/openlife.js --help    # verify the CLI loads
+```
+
+For interactive development without rebuilding each time:
+
+```bash
+npm run dev         # ts-node src/index.ts
+```
+
+## Test discipline
+
+OpenLife does **not** use Jest. Each test is a standalone executable in
+`src/test_*.ts` that the `test:*` script in `package.json` compiles and
+runs directly. Tests `throw` or `process.exit(1)` on failure; success
+prints a summary line ending with `TEST_<NAME>_OK`.
+
+Run the full canonical suite before committing:
+
+```bash
+npm run test:all
+```
+
+Run an individual test:
+
+```bash
+npm run test:workflow-parser
+# or ad-hoc without script:
+npm run build && node dist/test_<name>.js
+```
+
+`prepublishOnly` runs `test:all` automatically — publish will block on
+the suite. Add new tests by:
+
+1. Create `src/test_<feature>.ts` following the existing pattern (use a
+   neighboring test file as template).
+2. Add a matching `test:<feature>` script in `package.json`.
+3. If the test is canonical, append it to the `test:all` chain.
+
+## Commit conventions
+
+- Use [Conventional Commits](https://www.conventionalcommits.org/):
+  `feat:`, `fix:`, `docs:`, `chore:`, `refactor:`, `test:`, `ci:`,
+  `style:`, `perf:`, `build:`.
+- Reference the story or issue: `feat(workflow): add idempotent flag (Story 4.2, v1.2)`.
+- Keep commits atomic — one logical change per commit. Pre-commit
+  validation runs `npm run test:all` indirectly via prepublish gate.
+
+## TypeScript conventions
+
+- **Strict mode** is enforced (`tsconfig.json` has `"strict": true`).
+  Production code must not use `any` — `unknown` + type narrowing is the
+  idiomatic alternative. Test files may use `(x as any)` as a test seam.
+- **Lazy imports** for heavy classes inside `src/index.ts` Commander
+  handlers — never move `Gateway`, `Brain`, `TestHarness`,
+  `OrchestrationLoop`, etc. to module scope. They are inside
+  `.action(...)` via `require(...)` so that deterministic commands
+  (`--help`, `plugin`, tests) stay fast.
+- **Error contract for CLI handlers**: return JSON via
+  `JSON.stringify(...)` with `{ ok: false, error: '<snake_case_code>',
+  ... }`. Use `process.exitCode = 1` (not `process.exit(1)`) for
+  failures in handlers.
+- **Provider pattern**: new asset sources follow `Composite{X}Provider`
+  → `File{X}Provider` / `Cloud{X}Provider` in
+  `src/orchestrator/providers/`.
+- **No external dev-kit paths at runtime** — runtime must not import
+  from `~/.hermes`, Obsidian vaults, or local-only dev-kit dirs.
+
+## Pull request process
+
+1. Fork the repository or create a feature branch (`feat/<short-name>`
+   or `fix/<short-name>`).
+2. Make atomic commits with conventional commit messages.
+3. Ensure `npm run test:all` passes locally.
+4. Run `npm run build` to confirm clean TypeScript compilation.
+5. Open a PR against `main`. Include in the description:
+   - **Summary** of the change (1-3 bullets).
+   - **Tests added/changed** with file paths.
+   - **Risk assessment** for any runtime-behavior change.
+6. CI (`.github/workflows/test.yml`, `build.yml`, `lint.yml`) must pass.
+7. A maintainer will review and merge. **Push to `main` and
+   `gh pr merge` are restricted to the maintainer** to keep the release
+   pipeline deterministic.
+
+## Filing issues
+
+Use the templates in `.github/ISSUE_TEMPLATE/`:
+
+- **Bug report** — for unexpected behavior, crashes, or regressions.
+- **Feature request** — for new capabilities or enhancements.
+- **Question** — for usage questions that don't fit the above.
+
+Include OS, Node version, OpenLife version (`openlife --version`),
+reproduction steps, and expected vs actual behavior.
+
+## Where to put new code
+
+| Adding... | Lives in... |
+|---|---|
+| Commander command | `src/index.ts` (near related commands, reuse banner sections) |
+| Orchestrator class | `src/orchestrator/<ClassName>.ts` |
+| CLI installer/wizard | `src/cli/<ClassName>.ts` |
+| Memory provider | `src/memory/<Name>Provider.ts` + register in `MemoryProviderRegistry.ts` |
+| Asset provider | `src/orchestrator/providers/{File,Cloud,Composite}<X>Provider.ts` |
+| Reversa contract/executor | `src/reversa/Reversa<Name>.ts` |
+| Test | `src/test_<feature>.ts` + matching `test:<feature>` script |
+
+## Code of Conduct
+
+This project adheres to a Contributor Covenant. See
+[CODE_OF_CONDUCT.md](./CODE_OF_CONDUCT.md). By participating, you agree
+to abide by its terms.
+
+## License
+
+By contributing, you agree that your contributions will be licensed
+under the [MIT License](./LICENSE).
+
+## Questions
+
+Open a question issue or check `docs/getting-started.md` (coming soon).

package/README.md

@@ -1,19 +1,18 @@
 # OpenLife CLI
 
+[![npm version](https://img.shields.io/npm/v/@openlife/cli.svg)](https://www.npmjs.com/package/@openlife/cli)
+[![Build](https://github.com/GOOODZ/openlife-core/actions/workflows/test.yml/badge.svg)](https://github.com/GOOODZ/openlife-core/actions/workflows/test.yml)
+[![License: MIT](https://img.shields.io/npm/l/@openlife/cli.svg)](./LICENSE)
+[![Node](https://img.shields.io/node/v/@openlife/cli.svg)](https://nodejs.org)
+[![npm downloads](https://img.shields.io/npm/dm/@openlife/cli.svg)](https://www.npmjs.com/package/@openlife/cli)
+
 OpenLife é um CLI/framework de orquestração com dois modos principais:
 
 - **CLI framework**: uso local por terminal, automações e comandos de operador.
 - **Agente autônomo**: runtime contínuo com daemon, Telegram e governança.
 
-> OpenLife é separado do Hermes. Hermes pode ajudar a operar/desenvolver OpenLife, mas o runtime do OpenLife não deve depender de `~/.hermes` nem de pastas do Obsidian.
-
-## Fonte executável canônica
-
-- Código/dev: `D:\VSCODDE-DEV\openlife-core-main`
-- WSL: `/mnt/d/VSCODDE-DEV/openlife-core-main`
-- GitHub: `https://github.com/GOOODZ/openlife-core`
-
-Obsidian (`OPENLIFE_PRODUCTION` e `LARA/OPEN-LIFE`) é camada estratégica/documental. Catálogos runtime devem viver no repo/cloud, por exemplo:
+OpenLife é um produto standalone. Catálogos runtime vivem no repositório
+e não dependem de dev-kits externos ou pastas de terceiros.
 
 ```txt
 .catalog/agents/
@@ -22,6 +21,23 @@ Obsidian (`OPENLIFE_PRODUCTION` e `LARA/OPEN-LIFE`) é camada estratégica/docum
 .catalog/mcps/
 ```
 
+## Quickstart
+
+```bash
+npm install -g @openlife/cli
+openlife init        # wizard interativo com banner, chaves, OAuth, Telegram
+openlife ask "hello, what can you do?"
+```
+
+Mais detalhes em [INSTALL.md](INSTALL.md) e [docs/getting-started.md](docs/getting-started.md).
+
+## Repositório
+
+- GitHub: <https://github.com/GOOODZ/openlife-core>
+- npm: <https://www.npmjs.com/package/@openlife/cli>
+- Issues: <https://github.com/GOOODZ/openlife-core/issues>
+- Changelog: [CHANGELOG.md](CHANGELOG.md)
+
 ## Quick Start
 
 ### Caminho recomendado — wizard interativo

package/dist/cli/InstallModules.js

@@ -35,6 +35,8 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runPrecheck = runPrecheck;
 exports.maskToken = maskToken;
+exports.providedApiKeyEnvNames = providedApiKeyEnvNames;
+exports.saveApiKeysToEnv = saveApiKeysToEnv;
 exports.saveTelegramConfig = saveTelegramConfig;
 exports.validateTelegramToken = validateTelegramToken;
 exports.checkTelegram409Conflict = checkTelegram409Conflict;
@@ -71,6 +73,41 @@ function maskToken(token) {
         return '***';
     return `${token.slice(0, 6)}...${token.slice(-4)}`;
 }
+const API_KEY_ENV_MAP = {
+    openai: 'OPENAI_API_KEY',
+    anthropic: 'ANTHROPIC_API_KEY',
+    gemini: 'GEMINI_API_KEY',
+    openrouter: 'OPENROUTER_API_KEY',
+    elevenlabs: 'ELEVENLABS_API_KEY',
+};
+function providedApiKeyEnvNames(keys) {
+    return Object.keys(keys)
+        .filter((k) => typeof keys[k] === 'string' && keys[k].trim().length > 0)
+        .map((k) => API_KEY_ENV_MAP[k]);
+}
+function saveApiKeysToEnv(root, keys) {
+    const envPath = path.join(root, '.env');
+    const current = fs.existsSync(envPath) ? fs.readFileSync(envPath, 'utf-8') : '';
+    const provided = Object.keys(keys)
+        .filter((k) => typeof keys[k] === 'string' && keys[k].trim().length > 0);
+    if (provided.length === 0)
+        return { saved: [], path: envPath };
+    const envVars = new Set(provided.map((k) => API_KEY_ENV_MAP[k]));
+    const lines = current
+        .split('\n')
+        .filter(Boolean)
+        .filter((l) => {
+        const eq = l.indexOf('=');
+        if (eq < 0)
+            return true;
+        return !envVars.has(l.slice(0, eq));
+    });
+    for (const k of provided) {
+        lines.push(`${API_KEY_ENV_MAP[k]}=${keys[k].trim()}`);
+    }
+    fs.writeFileSync(envPath, lines.join('\n') + '\n', 'utf-8');
+    return { saved: provided.map((k) => API_KEY_ENV_MAP[k]), path: envPath };
+}
 function saveTelegramConfig(root, token, chatId) {
     const envPath = path.join(root, '.env');
     const current = fs.existsSync(envPath) ? fs.readFileSync(envPath, 'utf-8') : '';

package/dist/cli/InstallWizard.js

@@ -185,9 +185,15 @@ class InstallWizard {
             }
             preExistingAction = idx === 1 ? 'reinstall' : 'repair';
         }
-        // 2. Profile selection
-        const profileIdx = await this.answers.choice('Which profile do you want to install?\n  framework — local interactive CLI (default)\n  autonomous — long-running daemon with Telegram gateway and governance', ['framework', 'autonomous'], 0);
-        const profile = profileIdx === 1 ? 'autonomous' : 'framework';
+        // 2. Profile selection — 3 user-visible options. `both` is an alias for
+        // `autonomous` since autonomous already includes the framework layer
+        // (systemInstaller.install() runs unconditionally in InstallFlow.run()).
+        const profileIdx = await this.answers.choice('Which profile do you want to install?\n  framework — local interactive CLI only\n  autonomous — long-running daemon with Telegram gateway and governance\n  both — autonomous daemon plus framework CLI (recommended for full setup)', ['framework', 'autonomous', 'both'], 0);
+        const profile = profileIdx === 0 ? 'framework' : 'autonomous';
+        const installBoth = profileIdx === 2;
+        if (installBoth) {
+            warnings.push('INSTALLING_BOTH: autonomous profile selected (includes framework layer)');
+        }
         // 3. Host selection — auto-detect, but always ask to confirm.
         const detected = (0, InstallFlow_1.detectHostFromEnv)();
         const hostOptions = [...InstallFlow_1.VALID_HOSTS];
@@ -207,25 +213,53 @@ class InstallWizard {
         if (validatedHost !== 'claude-code') {
             warnings.push(`HOST_NOT_YET_SUPPORTED: ${validatedHost} host-specific install is a no-op for now; .openlife state will still be created`);
         }
-        // 4. Model chain (optional)
+        // 4. API keys (optional) — each prompt accepts paste or blank to skip.
+        //    IMPORTANT: collect first, but only persist after final confirmation.
+        //    An aborted wizard must not mutate .env or write pasted secrets.
+        let savedApiKeyNames = [];
+        const collectedApiKeys = {};
+        const wantsApiKeys = await this.answers.yesNo('Configure LLM API keys now? (You can also set them later in .env)', true);
+        if (wantsApiKeys) {
+            collectedApiKeys.openai = await this.answers.text('OPENAI_API_KEY (paste or Enter to skip)', '');
+            collectedApiKeys.anthropic = await this.answers.text('ANTHROPIC_API_KEY (paste or Enter to skip)', '');
+            collectedApiKeys.gemini = await this.answers.text('GEMINI_API_KEY (paste or Enter to skip)', '');
+            collectedApiKeys.openrouter = await this.answers.text('OPENROUTER_API_KEY (paste or Enter to skip)', '');
+            savedApiKeyNames = (0, InstallModules_1.providedApiKeyEnvNames)(collectedApiKeys);
+            if (savedApiKeyNames.length === 0) {
+                warnings.push('NO_API_KEYS_PROVIDED: model providers will only work via OAuth CLIs or Ollama until keys are added to .env');
+            }
+        }
+        else {
+            warnings.push('SKIPPED_API_KEYS: configure providers later via .env or `openlife auth <provider>`');
+        }
+        // 5. OAuth pointer — informational only. The actual `openlife auth gemini`
+        //    / `auth openai` flows are interactive subprocesses; running them inside
+        //    the wizard would break the canned-answer test seam. We just signal the
+        //    operator that the flag exists so they can opt-in after init completes.
+        const wantsOAuth = await this.answers.yesNo('Plan to configure OAuth for Gemini or OpenAI CLI later?', false);
+        if (wantsOAuth) {
+            warnings.push('OAUTH_PENDING: after init completes, run `openlife auth gemini` and/or `openlife auth openai` to log in');
+        }
+        // 6. Model chain (optional)
         const modelsRaw = await this.answers.text('LLM model order (comma-separated provider/model chain, blank = defaults)', '');
         const modelOrder = modelsRaw
             ? modelsRaw.split(',').map((m) => m.trim()).filter(Boolean)
             : undefined;
-        // 5. Telegram (autonomous only)
+        // 7. Telegram (autonomous only)
         if (profile === 'autonomous') {
             const hasTelegram = await this.answers.yesNo('Do you already have TELEGRAM_BOT_TOKEN and OPENLIFE_TELEGRAM_ALLOWED_USER_ID set in your .env?', false);
             if (!hasTelegram) {
                 warnings.push('TELEGRAM_NOT_CONFIGURED: autonomous profile needs TELEGRAM_BOT_TOKEN and OPENLIFE_TELEGRAM_ALLOWED_USER_ID — set them in .env before running `openlife agent start`');
             }
         }
-        // 6. Skip doctor?
+        // 8. Skip doctor?
         const skipDoctor = await this.answers.yesNo('Skip the system doctor run?', false);
-        // 7. Confirm preview
+        // 9. Confirm preview
         const previewLines = [
             'Review your choices:',
-            `  profile      : ${profile}`,
+            `  profile      : ${profile}${installBoth ? ' (both — framework + autonomous)' : ''}`,
             `  host         : ${validatedHost}`,
+            `  apiKeys      : ${savedApiKeyNames.length ? savedApiKeyNames.join(', ') : '(none saved)'}`,
             `  modelOrder   : ${modelOrder ? modelOrder.join(', ') : '(defaults)'}`,
             `  skipDoctor   : ${skipDoctor}`,
             preExistingAction ? `  preExisting  : ${preExistingAction}` : ''
@@ -239,6 +273,10 @@ class InstallWizard {
         if (!confirmed) {
             return { ok: false, reason: 'user_aborted', detail: 'preview_not_confirmed' };
         }
+        if (savedApiKeyNames.length > 0) {
+            const saved = (0, InstallModules_1.saveApiKeysToEnv)(this.root, collectedApiKeys);
+            savedApiKeyNames = saved.saved;
+        }
         const options = {
             profile,
             host: validatedHost,

package/dist/index.js

@@ -298,6 +298,8 @@ program
 program.command('init')
     .description('Interactive install wizard — guided setup for OpenLife into the chosen host CLI')
     .action(async () => {
+    console.log((0, InstallBanner_1.installationBanner)());
+    console.log('');
     // Lazy require preserves the lazy-import contract (`src/index.ts:11-13`).
     const { InstallWizard, ReadlineAnswerProvider } = require('./cli/InstallWizard');
     const { InstallFlow } = require('./cli/InstallFlow');
@@ -320,6 +322,15 @@ program.command('init')
             for (const w of result.warnings)
                 console.log(`  - ${w}`);
         }
+        console.log('');
+        console.log('✅ OpenLife ready.');
+        console.log('');
+        console.log('Try:');
+        console.log('  openlife ask "hello, what can you do?"');
+        console.log('  openlife status');
+        console.log('  openlife --help');
+        console.log('');
+        console.log('Docs: https://github.com/GOOODZ/openlife-core');
     }
     finally {
         // Release the readline interface so the CLI exits cleanly.