@reticlehq/init 3.5.0 → 3.7.0

package/dist/run.js

@@ -4,177 +4,25 @@
  * access goes through `InitIo` so the orchestration is unit-testable with an in-memory IO.
  */
 import { OnboardingPhase, OnboardingStepStatus } from '@reticlehq/core/telemetry';
-import { detectMcpClients } from './register/detect-clients.js';
-import { dirname, join } from 'node:path';
-import { CONTAINER_MARKERS, runsDevServer } from './diagnose/containerised-dev-server.js';
 import { explainInstallFailure } from './diagnose/install-retries.js';
-import { CSP_FILES } from './diagnose/csp-doctor.js';
 import { preflight } from './plan/preflight.js';
-import { devCommandFrom, devScriptBody } from './detect/dev-script.js';
+import { devCommandFrom } from './detect/dev-script.js';
 import { restartHint, FEEDBACK_HINT } from './diagnose/closing-hint.js';
 import { projectIdOf, rememberProjectOnDisk } from './project/remember-project.js';
-import { ANGULAR_WORKSPACE_FILE, detect, FORGE_RENDERER_CONFIGS, Framework, UiLibrary, } from './detect/detect.js';
-import { ANGULAR_PROXY_PATH, angularEntry } from './patch/angular.js';
-import { HTML_INDEX_PATH } from './patch/static-page.js';
 import { initWithoutPackageJson } from './no-package-json.js';
+import { sdkPackagesDeclared, sdkPackagesPresent } from './sdk-packages.js';
 import { wasMcpRegistered } from './register/mcp-registered.js';
-import { pickAstroHost } from './patch/astro-host.js';
-import { ELECTRON_VITE_CONFIG_CANDIDATES, NEXT_CONFIG_CANDIDATES, PACKAGE_JSON, VITE_CONFIG_CANDIDATES, } from './detect/workspace-apps.js';
+import { PACKAGE_JSON } from './detect/workspace-apps.js';
 import { redirectToWorkspaceApp } from './detect/workspace-redirect.js';
-import { enclosingWorkspaceRoot } from './detect/workspace-apps.js';
+import { appsAt, enclosingWorkspaceRoot } from './detect/workspace-apps.js';
 import { isConnectStep } from './plan/connect-steps.js';
-import { CURSOR_RULE_PATH, RETICLE_MD_PATH } from './project/agent-rules.js';
-import { CLAUDE_SETTINGS_PATH } from './plan/stop-hook-step.js';
-import { CRA_ENV_PATH } from './patch/cra.js';
-import { NEXT_LAYOUT_CANDIDATES, NEXT_PAGES_APP_CANDIDATES } from './patch/next-patch.js';
 import { formatGeneratedSource } from './patch/format-generated.js';
-import { tanstackStartConnectPath } from './patch/tanstack-start.js';
-import { installedViteMajor } from './patch/vite-owning-config.js';
-/** CRA's bundled entry, in the order create-react-app itself generates them. */
-const CRA_ENTRY_CANDIDATES = ['src/index.tsx', 'src/index.jsx', 'src/index.ts', 'src/index.js'];
-/** Preview snippets must not mint a real machine credential or imply this token is usable. */
-const DRY_RUN_PAIRING_TOKEN = 'DRY_RUN_TOKEN_NOT_FOR_USE';
-function craEntryOf(io) {
-    for (const path of CRA_ENTRY_CANDIDATES) {
-        const source = io.readFile(path);
-        if (source !== null)
-            return { path, source };
-    }
-    return null;
-}
-import { DEPS_TARGET, RETICLE_CONFIG_FILE, frameworkPackages, MCP_TARGET, buildPlan, StepStatus, } from './plan/plan.js';
-import { claudeAvailableProbe, claudeHasReticle } from './register/mcp.js';
-import { reticleDevLocation } from './patch/next-patch.js';
-import { scanTestids, storeHints, scanStores } from './detect/capabilities.js';
-import { CLAUDE_PROJECT_CONFIG, CURSOR_PROJECT_MARKER } from './register/mcp-clients.js';
-import { deriveProjectId, packageName } from './project/project-id.js';
-import { VITE_DEV_MODULE_PATH, ELECTRON_VITE_DEV_MODULE_PATH, nuxtPluginPath, } from './patch/snippets.js';
-import { NUXT_CONFIG_CANDIDATES } from './patch/nuxt-patch.js';
-import { CLAUDE_COMMAND_PATH, CURSOR_COMMAND_PATH } from './register/slash-command.js';
-import { RETICLE_VERSION } from './version.js';
+import { DEPS_TARGET, RETICLE_CONFIG_FILE, MCP_TARGET, buildPlan, StepStatus, } from './plan/plan.js';
 import { InitFailure } from './diagnose/init-failure.js';
 import { resolveLockfiles } from './detect/lockfiles.js';
+import { agentRootOf, gatherPlanInput } from './gather-plan-input.js';
 // Re-exported: it moved to its own module, and every existing importer says `run.js`.
 export { resolveLockfiles };
-const NODE_MODULES_DIR = 'node_modules';
-const SVELTEKIT_HOOKS = 'src/hooks.client.ts';
-const REACT_ROUTER_ENTRY = 'app/entry.client.tsx';
-const TANSTACK_START_ROOT_CANDIDATES = [
-    'src/routes/__root.tsx',
-    'src/routes/__root.jsx',
-    'app/routes/__root.tsx',
-    'app/routes/__root.jsx',
-];
-const SOURCE_FILE = /\.(tsx|jsx|ts|js|svelte|vue|astro)$/;
-/** Files read for the testid scan. A capabilities block is a hint; reading a whole repo for it is not. */
-const MAX_SCANNED_FILES = 200;
-/** Directories that never hold the app's own source, and are expensive or misleading to read. */
-const NOT_SOURCE_DIRS = new Set([
-    'node_modules',
-    'dist',
-    'build',
-    'out',
-    'coverage',
-    'target',
-    'public',
-    'static',
-    '.next',
-    '.svelte-kit',
-    '.nuxt',
-]);
-/** How far below the app root to look. Deep enough for `modules/users/UserList.tsx`, not a repo crawl. */
-const MAX_SCAN_DEPTH = 5;
-/**
- * Read a bounded set of the app's source files, for the `data-testid` scan.
- *
- * This used to walk the fixed list `src, src/components, src/pages, app, components`. Reported from
- * the field (#318) by a repo whose app is at `src/admin`: the scan read directories that were not
- * the app's and correctly reported finding nothing in them, so `init` said "no data-testid values
- * yet" about an app with several — which makes an agent go and write the ones already there. That
- * list had already grown once for a `frontend/` app, and a third report of the same shape is what
- * says the answer is not another name in a list. So: walk the app root, bounded by depth and by a
- * file count.
- */
-function readSourceFiles(io) {
-    const out = [];
-    const read = (path) => {
-        const content = io.readFile(path);
-        if (content !== null)
-            out.push({ path, source: content });
-    };
-    for (const name of io.rootFiles()) {
-        if (out.length >= MAX_SCANNED_FILES)
-            return out;
-        if (SOURCE_FILE.test(name))
-            read(name);
-    }
-    const walk = (dir, depth) => {
-        for (const name of io.listFiles(dir)) {
-            if (out.length >= MAX_SCANNED_FILES)
-                return;
-            if (SOURCE_FILE.test(name))
-                read(`${dir}/${name}`);
-        }
-        if (depth >= MAX_SCAN_DEPTH)
-            return;
-        for (const sub of io.listDirs(dir)) {
-            if (out.length >= MAX_SCANNED_FILES)
-                return;
-            if (sub.startsWith('.') || NOT_SOURCE_DIRS.has(sub))
-                continue;
-            walk(`${dir}/${sub}`, depth + 1);
-        }
-    };
-    for (const dir of io.listDirs('.')) {
-        if (out.length >= MAX_SCANNED_FILES)
-            return out;
-        if (dir.startsWith('.') || NOT_SOURCE_DIRS.has(dir))
-            continue;
-        walk(dir, 1);
-    }
-    return out;
-}
-/** Direct dependency names, for naming the state libraries an app actually has. */
-function dependencyNames(pkg) {
-    const p = (pkg ?? {});
-    return new Set([
-        ...Object.keys(p['dependencies'] ?? {}),
-        ...Object.keys(p['devDependencies'] ?? {}),
-    ]);
-}
-/** electron-vite and the unbundled Electron layouts this repo already ships. */
-const ELECTRON_MAIN_SOURCES = [
-    'src/main/index.ts',
-    'src/main/index.js',
-    'src/main/index.mts',
-    'src/main/index.mjs',
-    'electron/main.cjs',
-    'electron/main.js',
-    'electron/main.ts',
-    'src/main.ts',
-    'src/main.js',
-];
-const ELECTRON_PRELOAD_SOURCES = [
-    'src/preload/index.ts',
-    'src/preload/index.js',
-    'src/preload/index.mts',
-    'src/preload/index.mjs',
-    'electron/preload.cjs',
-    'electron/preload.js',
-    'electron/preload.ts',
-    'src/preload.ts',
-    'src/preload.js',
-];
-const ASTRO_CONFIG_CANDIDATES = [
-    'astro.config.mjs',
-    'astro.config.js',
-    'astro.config.ts',
-    'astro.config.cjs',
-];
-/** Where a conventional Astro app keeps the layout every page wraps itself in. */
-const ASTRO_LAYOUTS_DIR = 'src/layouts';
-/** Also searched: an app with no layouts directory renders the document straight from a page. */
-const ASTRO_PAGES_DIR = 'src/pages';
 /**
  * `⚠` means WORK LEFT TO DO and nothing else — it is what an agent (and the release gate) counts to
  * decide whether the install finished. A notice gets its own mark so "steps remaining" can reach zero
@@ -195,6 +43,8 @@ function resolvedStatus(plan, target, failed, skipped) {
         return StepStatus.MANUAL;
     return step.status;
 }
+/** Every client registration row is titled `MCP server (<client>)`; the closing hint names the unfinished ones. */
+const MCP_CLIENT_TITLE_PREFIX = 'MCP server (';
 const STATUS_SYMBOL = {
     [StepStatus.APPLY]: '✓',
     [StepStatus.MANUAL]: '⚠',
@@ -202,234 +52,6 @@ const STATUS_SYMBOL = {
     [StepStatus.SKIP]: '–',
     [StepStatus.NOTICE]: 'ℹ',
 };
-function firstPresent(files, candidates) {
-    for (const c of candidates)
-        if (files.has(c))
-            return c;
-    return null;
-}
-function firstReadable(io, candidates) {
-    for (const path of candidates) {
-        const source = io.readFile(path);
-        if (source !== null)
-            return { path, source };
-    }
-    return null;
-}
-/**
- * The directory the human's agent runs in, when it is not the app's directory.
- *
- * `undefined` for a single-package repo, which keeps every agent-file path project-relative exactly
- * as it was — the two roots are the same there, which is why writing them beside the app went
- * unnoticed until a repo with its app at `src/admin` reported it.
- */
-function agentRootOf(options) {
-    const root = options.agentRoot;
-    return root === undefined || root === options.cwd ? undefined : root;
-}
-/** What the Angular steps read: the workspace file, the entry it names, and our proxy module. */
-function angularInputs(io) {
-    const workspace = io.readFile(ANGULAR_WORKSPACE_FILE);
-    const entryPath = angularEntry(workspace);
-    const entry = io.readFile(entryPath);
-    return {
-        angularWorkspace: null === workspace ? null : { path: ANGULAR_WORKSPACE_FILE, source: workspace },
-        angularEntry: null === entry ? null : { path: entryPath, source: entry },
-        angularProxySource: io.readFile(ANGULAR_PROXY_PATH),
-    };
-}
-function gatherPlanInput(options, io, pkg) {
-    // Stable identity derived from the app's package.json name + root, so it survives port changes.
-    const projectId = deriveProjectId(packageName(pkg), options.cwd);
-    const rootFiles = new Set(io.rootFiles());
-    const nodeModulesMarkers = new Set(io.listFiles('node_modules'));
-    const detectInput = {
-        pkg: 'object' === typeof pkg && pkg !== null ? pkg : {},
-        configFiles: rootFiles,
-        // Walk up for the lockfile so a monorepo sub-package picks the workspace's package manager —
-        // unless this package's own installed tree already answers it, which outranks an inherited one.
-        lockfiles: resolveLockfiles(rootFiles, options.cwd, io, nodeModulesMarkers),
-        // An already-installed tree names its own manager, which matters when no lockfile is committed.
-        nodeModulesMarkers,
-    };
-    const detection = detect(detectInput);
-    // Forge has no `vite.config.*`; its renderer config IS the Vite config the plugin belongs in, and
-    // handing it over under that name is what lets the ordinary Vite patcher do the work.
-    const vitePath = firstPresent(rootFiles, Framework.ELECTRON_FORGE === detection.framework
-        ? FORGE_RENDERER_CONFIGS
-        : VITE_CONFIG_CANDIDATES);
-    const viteSource = null === vitePath ? null : io.readFile(vitePath);
-    const viteConfig = vitePath !== null && viteSource !== null ? { path: vitePath, source: viteSource } : null;
-    const electronVitePath = firstPresent(rootFiles, ELECTRON_VITE_CONFIG_CANDIDATES);
-    const electronViteSource = null === electronVitePath ? null : io.readFile(electronVitePath);
-    const electronViteConfig = electronVitePath !== null && electronViteSource !== null
-        ? { path: electronVitePath, source: electronViteSource }
-        : null;
-    const electronMain = firstReadable(io, ELECTRON_MAIN_SOURCES);
-    const electronPreload = firstReadable(io, ELECTRON_PRELOAD_SOURCES);
-    // Global MCP registration targets each agent that's present: Claude via its CLI, Cursor via its
-    // global config file. Only probe when the MCP step is in play.
-    const availableProbe = claudeAvailableProbe();
-    const claudeCli = options.mcp ? io.probe(availableProbe.command, availableProbe.args) : false;
-    // Read from Claude's config, never `claude mcp get`: that launches the server — see claudeHasReticle.
-    const mcpExists = claudeCli ? claudeHasReticle(io, io.cwd()) : false;
-    // Every MCP client this machine shows evidence of. Conservative and one-directional: we write
-    // into a config a client ALREADY has, and never create ~/.gemini or ~/.codeium for somebody who
-    // does not use them.
-    const detectedClients = options.mcp ? detectMcpClients(io) : [];
-    const astroPath = firstPresent(rootFiles, ASTRO_CONFIG_CANDIDATES);
-    const astroSource = null === astroPath ? null : io.readFile(astroPath);
-    // Which file owns the DOCUMENT, not how many files sit in a directory. The old rule ("exactly one
-    // .astro in src/layouts") fired on neither real Astro app: one has no layouts directory and
-    // renders from src/pages/index.astro, the other has three files there of which two are partials.
-    // `</body>` is the discriminator — see astro-host.
-    const astroCandidates = [ASTRO_LAYOUTS_DIR, ASTRO_PAGES_DIR].flatMap((dir) => io
-        .listFiles(dir)
-        .filter((f) => f.endsWith('.astro'))
-        .map((f) => ({ path: `${dir}/${f}`, source: io.readFile(`${dir}/${f}`) }))
-        .filter((c) => c.source !== null));
-    const astroHost = pickAstroHost(astroCandidates);
-    const layoutRelPath = astroHost?.path ?? null;
-    const astroLayoutSource = astroHost?.source ?? null;
-    const nuxtConfigPath = firstPresent(rootFiles, NUXT_CONFIG_CANDIDATES);
-    const nuxtConfigSource = null === nuxtConfigPath ? null : io.readFile(nuxtConfigPath);
-    // Nuxt 4's default srcDir is `app/`, Nuxt 3's is the root — and a plugin written into the
-    // directory Nuxt does not scan is never registered, silently.
-    const nuxtHasAppDir = io.listDirs('.').includes('app');
-    const nextConfigFile = firstPresent(rootFiles, NEXT_CONFIG_CANDIDATES);
-    // App Router first; a Pages Router app has no layout, and its mount point is pages/_app.
-    const layoutPath = NEXT_LAYOUT_CANDIDATES.find((p) => io.exists(p)) ??
-        NEXT_PAGES_APP_CANDIDATES.find((p) => io.exists(p)) ??
-        null;
-    const layoutSource = null === layoutPath ? null : io.readFile(layoutPath);
-    // Where the component goes depends on WHICH router mounts it: `pages/` routes on presence, so a
-    // component there becomes a broken route; `app/` routes on filename, so a sibling is inert.
-    const devLocation = reticleDevLocation(layoutPath ?? 'app/layout.tsx', detection.typescript);
-    // Read once: both the testid scan and the store scan want the same bounded set of files.
-    const sourceFiles = readSourceFiles(io);
-    const agentRoot = agentRootOf(options);
-    const agentFile = (relPath) => agentRoot === undefined ? relPath : join(agentRoot, relPath);
-    const cspSources = {};
-    for (const file of CSP_FILES) {
-        const source = io.readFile(file);
-        if (null !== source)
-            cspSources[file] = source;
-    }
-    return {
-        detection,
-        captureBodies: options.captureBodies,
-        hooks: options.hooks,
-        cspSources,
-        claudeCli,
-        mcpExists,
-        insideClaudeCode: io.host.insideClaudeCode(),
-        claudeProjectConfig: options.mcp ? io.readFile(agentFile(CLAUDE_PROJECT_CONFIG)) : undefined,
-        platform: process.platform,
-        detectedClients,
-        cursorProjectPresent: io.exists(CURSOR_PROJECT_MARKER),
-        // Looked for beside the app AND one level up, because the app is routinely a subdirectory of the
-        // repo that containerises it — `frontend/` under a root `docker-compose.yml` is the shape this
-        // came from. Only the first match is reported; the note is the same whichever file found it.
-        ...(() => {
-            // Only a file that RUNS the dev server: a production-only image is the common case, and
-            // React Router's template ships one. See runsDevServer.
-            const devScript = devScriptBody(pkg);
-            const marker = CONTAINER_MARKERS.find((name) => [name, join('..', name)].some((path) => {
-                const content = io.readFile(path);
-                return null !== content && runsDevServer(name, content, devScript);
-            }));
-            return marker === undefined ? {} : { containerMarker: marker };
-        })(),
-        viteConfig,
-        electronViteConfig,
-        electronPreload,
-        electronMain,
-        astroConfig: astroPath !== null && astroSource !== null ? { path: astroPath, source: astroSource } : null,
-        astroLayout: layoutRelPath !== null && astroLayoutSource !== null
-            ? { path: layoutRelPath, source: astroLayoutSource }
-            : null,
-        astroEnvDts: io.readFile('src/env.d.ts'),
-        astroReticleDev: io.readFile('src/components/ReticleDev.ts'),
-        nextConfigFile,
-        nextConfigSource: null === nextConfigFile ? null : io.readFile(nextConfigFile),
-        nextLayout: layoutPath !== null && layoutSource !== null
-            ? { path: layoutPath, source: layoutSource }
-            : null,
-        // Capabilities: scanned, never asked for. Bounded — a hint for the agent, not a repo index.
-        testids: scanTestids(sourceFiles.map((f) => f.source)),
-        storeHints: storeHints(dependencyNames(pkg), sourceFiles),
-        foundStores: scanStores(sourceFiles, dependencyNames(pkg)),
-        nextFoundStores: scanStores(sourceFiles, dependencyNames(pkg), dirname(devLocation.path)),
-        viteDevModuleExists: io.exists(detection.framework === Framework.ELECTRON_VITE
-            ? ELECTRON_VITE_DEV_MODULE_PATH
-            : VITE_DEV_MODULE_PATH),
-        nextReticleDevPath: devLocation.path,
-        nextReticleDevImport: devLocation.importSpecifier,
-        nextReticleDevExists: io.exists(devLocation.path),
-        nextReticleDevSource: io.readFile(devLocation.path),
-        svelteKitHooksExists: io.exists(SVELTEKIT_HOOKS),
-        svelteKitHooksSource: io.readFile(SVELTEKIT_HOOKS),
-        reactRouterEntryExists: io.exists(REACT_ROUTER_ENTRY),
-        // The SOURCE, so an entry the app already owns is ADDED TO rather than replaced — it is an
-        // override of React Router's default, and everything in it is load-bearing.
-        reactRouterEntrySource: io.readFile(REACT_ROUTER_ENTRY),
-        nuxtConfig: nuxtConfigPath !== null && nuxtConfigSource !== null
-            ? { path: nuxtConfigPath, source: nuxtConfigSource }
-            : null,
-        nuxtHasAppDir,
-        viteMajor: installedViteMajor(io, detectInput.pkg),
-        nuxtPluginExists: io.exists(nuxtPluginPath(nuxtHasAppDir)),
-        nuxtPluginSource: io.readFile(nuxtPluginPath(nuxtHasAppDir)),
-        ...(() => {
-            const root = TANSTACK_START_ROOT_CANDIDATES.find((file) => io.exists(file));
-            return root === undefined
-                ? {}
-                : {
-                    tanstackStartRoot: root,
-                    tanstackStartRootSource: io.readFile(root),
-                    tanstackStartConnectExists: io.exists(tanstackStartConnectPath(root)),
-                    tanstackStartConnectSource: io.readFile(tanstackStartConnectPath(root)),
-                };
-        })(),
-        ...(Framework.ANGULAR === detection.framework ? angularInputs(io) : {}),
-        ...(Framework.HTML === detection.framework
-            ? { htmlIndexSource: io.readFile(HTML_INDEX_PATH) }
-            : {}),
-        craEntry: craEntryOf(io),
-        craEnv: io.readFile(CRA_ENV_PATH),
-        pairingToken: options.dryRun ? DRY_RUN_PAIRING_TOKEN : io.host.pairingToken(),
-        installSource: io.host.installSource(),
-        reticleConfigExists: io.exists(RETICLE_CONFIG_FILE),
-        // The CONTENT, so a config that exists can be checked rather than trusted — a `"port"` set to
-        // the app's own dev-server port used to survive every re-run of `init`.
-        reticleConfigSource: io.readFile(RETICLE_CONFIG_FILE),
-        // Read the agent instruction files so the rule merge stays idempotent across re-runs — from the
-        // agent's own root, or the merge would idempotently check a file it is not going to write.
-        claudeMdContent: io.readFile(agentFile('CLAUDE.md')),
-        agentsMdContent: io.readFile(agentFile('AGENTS.md')),
-        reticleMdContent: io.readFile(agentFile(RETICLE_MD_PATH)),
-        cursorRuleContent: io.readFile(agentFile(CURSOR_RULE_PATH)),
-        claudeCommandContent: io.readFile(agentFile(CLAUDE_COMMAND_PATH)),
-        cursorCommandContent: io.readFile(agentFile(CURSOR_COMMAND_PATH)),
-        // Read only to MERGE into: the settings file is the user's, and other tools write in it too.
-        claudeSettingsContent: true === options.hooks ? io.readFile(agentFile(CLAUDE_SETTINGS_PATH)) : undefined,
-        ...(agentRoot === undefined
-            ? {}
-            : {
-                agentFileRoot: agentRoot,
-                // The config the AGENT's cwd already has, if any — see agentRootConfigStep.
-                agentRootConfigSource: io.readFile(agentFile(RETICLE_CONFIG_FILE)),
-            }),
-        options: {
-            port: options.port,
-            mcp: options.mcp,
-            install: options.install,
-            projectId,
-            // The SDK must match the CLI asking for it — see pinnedPackages.
-            sdkVersion: RETICLE_VERSION,
-        },
-    };
-}
 /** Where workspace tooling conventionally puts packages. */
 /** pnpm's workspace declaration, read when present — it is authoritative about where packages live. */
 const SKIPPED_DETAIL = 'skipped — the dependency install above failed, and wiring the app to a package that is not ' +
@@ -477,6 +99,8 @@ continuesToRuntime = false) {
     // the app never dials the daemon and every tool answers "no browser session connected". `ok` was
     // hardcoded true, so a run that could not possibly work reported success.
     let connectPending = false;
+    // Other clients' registrations the run left for the reader, named for the closing hint.
+    const manualClients = [];
     for (const s of plan.steps) {
         // A side effect that failed to apply is reported as a manual step with its fallback command.
         const note = degraded.get(s.target);
@@ -504,6 +128,9 @@ continuesToRuntime = false) {
                 manual++;
                 if (isConnectStep(s.title))
                     connectPending = true;
+                if (s.target !== MCP_TARGET && s.title.startsWith(MCP_CLIENT_TITLE_PREFIX)) {
+                    manualClients.push(s.title);
+                }
             }
             for (const line of detail.split('\n'))
                 io.print(`      ${line}`);
@@ -525,7 +152,7 @@ continuesToRuntime = false) {
     }
     const mcpStatus = resolvedStatus(plan, MCP_TARGET, failed, skipped);
     if (!continuesToRuntime) {
-        io.print(restartHint(mcpStatus, devCommand));
+        io.print(restartHint(mcpStatus, devCommand, manualClients));
     }
     // Carried out even when the hint above was printed, because the RUNTIME path needs the same fact
     // and could not reach it: `restartHint` is only printed when this run stops at the files, and the
@@ -547,25 +174,6 @@ continuesToRuntime = false) {
  * MODULE_NOT_FOUND, so the app stops booting *because* Reticle was installed. A skipped step is a
  * message; a half-wired app is a broken project.
  */
-/**
- * Are the SDK packages actually on disk, whatever the install step reported?
- *
- * `dependsOnInstall` exists to stop init writing a `next.config.ts` that imports a package which is
- * not there — that took a dev server down once, and installing Reticle must never be why an app
- * stops booting. The invariant it protects is "the import RESOLVES", but it was gated on "our
- * install subprocess exited 0", and those come apart in exactly the situation the failure creates:
- * init tells the user to install by hand, they do, they re-run init, the install step fails again
- * (wrong package manager, not on PATH) and every wiring step is skipped a second time. Reported from
- * a Next 16 app where npm had already installed both packages successfully — leaving an init that
- * could not be retried into working, which is the shape this guard was written to prevent.
- *
- * Reading node_modules answers the real question and costs one `exists` call per package.
- */
-function sdkPackagesPresent(framework, uiLibrary, io) {
-    const packages = frameworkPackages(framework, uiLibrary);
-    return (packages.length > 0 &&
-        packages.every((p) => io.exists(`${NODE_MODULES_DIR}/${p}/${PACKAGE_JSON}`)));
-}
 function applyEffects(plan, io, packageManager) {
     const why = new Map();
     const failed = new Set();
@@ -635,14 +243,17 @@ function applyEffects(plan, io, packageManager) {
                 continue;
             }
             // Verify, don't re-run: give the install step itself the same sdkPackagesPresent benefit
-            // already given to the wiring it gates below (#683).
-            if (s.target === DEPS_TARGET && sdkPackagesPresent(plan.framework, plan.uiLibrary, io))
+            // already given to the wiring it gates below (#683) — but only when package.json DECLARES
+            // them. Reported from a Tauri + Next app: `pnpm add` died on ERR_PNPM_UNEXPECTED_STORE, the
+            // packages happened to resolve, init printed success, and the manifest never gained them.
+            const present = s.target === DEPS_TARGET && sdkPackagesPresent(plan.framework, plan.uiLibrary, io);
+            if (present && sdkPackagesDeclared(plan.framework, plan.uiLibrary, io))
                 continue;
             failed.add(s.target);
             // A failed install only blocks the wiring when the packages are genuinely ABSENT. See
             // sdkPackagesPresent: the guard protects "the import resolves", not "our subprocess exited 0".
             if (s.target === DEPS_TARGET) {
-                installFailed = true;
+                installFailed = !present;
                 const explained = explainInstallFailure(io, packageManager, exec, s.detail);
                 if (explained !== undefined)
                     why.set(s.target, explained);
@@ -687,7 +298,9 @@ function withWorkspaceRoot(options, io) {
     if (options.agentRoot !== undefined || true === options.redirected)
         return options;
     const root = enclosingWorkspaceRoot(options.cwd, io);
-    return root === undefined ? options : { ...options, agentRoot: root };
+    if (root === undefined)
+        return options;
+    return { ...options, agentRoot: root, severalApps: 1 < appsAt(root, io).length };
 }
 export function runInit(options, io) {
     const result = runInitSteps(withWorkspaceRoot(options, io), io);
@@ -752,11 +365,11 @@ function runInitSteps(options, io) {
     // `--app frontend`, the flag that exists for exactly this, was never read because the bail came
     // first. Reported twice by the same user, who tried the documented workaround and hit the same
     // wall. Discovery already handles the case (it scans top-level directories, not just declared
-    // workspaces); it was simply unreachable.
-    //
-    // `'{}'` because the redirect only needs the manifest to ask "is THIS directory the app", and a
-    // directory with no package.json is definitively not.
+    // workspaces); it was simply unreachable. `'{}'`: a directory with no manifest is not the app.
     const redirectedEarly = redirectToWorkspaceApp(options, io, pkgRaw ?? {}, runInit);
+    // Listing the apps below still counts as "no app here", in the same series as before.
+    if (true === redirectedEarly?.listedAppsBelow && !options.dryRun)
+        io.host.reportOutcome({ ok: false, reason: InitFailure.NO_PACKAGE_JSON });
     if (redirectedEarly !== null)
         return redirectedEarly;
     if (null === pkgRaw)

package/dist/sdk-packages.d.ts

@@ -0,0 +1,19 @@
+import type { Framework, UiLibrary } from './detect/detect.js';
+import type { InitIo } from './run-types.js';
+/**
+ * Are the SDK packages actually on disk, whatever the install step reported?
+ *
+ * `dependsOnInstall` exists to stop init writing a `next.config.ts` that imports a package which is
+ * not there — that took a dev server down once, and installing Reticle must never be why an app
+ * stops booting. The invariant it protects is "the import RESOLVES", but it was gated on "our
+ * install subprocess exited 0", and those come apart in exactly the situation the failure creates:
+ * init tells the user to install by hand, they do, they re-run init, the install step fails again
+ * (wrong package manager, not on PATH) and every wiring step is skipped a second time. Reported from
+ * a Next 16 app where npm had already installed both packages successfully — leaving an init that
+ * could not be retried into working, which is the shape this guard was written to prevent.
+ *
+ * Reading node_modules answers the real question and costs one `exists` call per package.
+ */
+export declare function sdkPackagesPresent(framework: Framework, uiLibrary: UiLibrary, io: Pick<InitIo, 'exists'>): boolean;
+/** Does package.json list every SDK package? On disk without this, the next clean install drops them. */
+export declare function sdkPackagesDeclared(framework: Framework, uiLibrary: UiLibrary, io: Pick<InitIo, 'readFile'>): boolean;

package/dist/sdk-packages.js

@@ -0,0 +1,34 @@
+import { PACKAGE_JSON } from './detect/workspace-apps.js';
+import { frameworkPackages } from './plan/plan.js';
+const NODE_MODULES_DIR = 'node_modules';
+/**
+ * Are the SDK packages actually on disk, whatever the install step reported?
+ *
+ * `dependsOnInstall` exists to stop init writing a `next.config.ts` that imports a package which is
+ * not there — that took a dev server down once, and installing Reticle must never be why an app
+ * stops booting. The invariant it protects is "the import RESOLVES", but it was gated on "our
+ * install subprocess exited 0", and those come apart in exactly the situation the failure creates:
+ * init tells the user to install by hand, they do, they re-run init, the install step fails again
+ * (wrong package manager, not on PATH) and every wiring step is skipped a second time. Reported from
+ * a Next 16 app where npm had already installed both packages successfully — leaving an init that
+ * could not be retried into working, which is the shape this guard was written to prevent.
+ *
+ * Reading node_modules answers the real question and costs one `exists` call per package.
+ */
+export function sdkPackagesPresent(framework, uiLibrary, io) {
+    const packages = frameworkPackages(framework, uiLibrary);
+    return (packages.length > 0 &&
+        packages.every((p) => io.exists(`${NODE_MODULES_DIR}/${p}/${PACKAGE_JSON}`)));
+}
+/** Does package.json list every SDK package? On disk without this, the next clean install drops them. */
+export function sdkPackagesDeclared(framework, uiLibrary, io) {
+    let manifest;
+    try {
+        manifest = JSON.parse(io.readFile(PACKAGE_JSON) ?? '{}');
+    }
+    catch {
+        return false;
+    }
+    const m = (manifest ?? {});
+    return frameworkPackages(framework, uiLibrary).every((p) => m['dependencies']?.[p] !== undefined || m['devDependencies']?.[p] !== undefined);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reticlehq/init",
-  "version": "3.5.0",
+  "version": "3.7.0",
   "description": "Reticle project scaffolder — detects the framework, writes the config, patches the build and registers the MCP server. The build-time half of `reticle init`.",
   "type": "module",
   "main": "./dist/index.js",
@@ -13,7 +13,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@reticlehq/core": "3.5.0"
+    "@reticlehq/core": "3.7.0"
   },
   "license": "FSL-1.1-ALv2",
   "author": "Reticle contributors",