@stratusagent/cli 0.13.6 → 0.14.0

package/dist/commands/setup.js

@@ -1,18 +1,17 @@
-import { harnessesMissingMessage, installHarnessPackages, missingHarnessPackages } from "../harness-packages.js";
+import { providerPackagesMissingMessage, installProviderPackages, missingProviderPackages, uninstalledProviderPackages } from "../provider-packages.js";
 import { readFile } from 'node:fs/promises';
 import path from 'node:path';
 import { preflightPlugin, readPluginManifest, PluginConfigError, PluginManifestError, } from '@stratusagent/plugins';
-import { DEFAULT_ANTHROPIC_MODEL } from '@stratusagent/provider-anthropic';
-import { DEFAULT_CODEX_MODEL } from '@stratusagent/providers';
 import { formatSoul, parseSoul } from '@stratusagent/agents';
-import { claimSoulFile, collectAvailableModels as collectModels, credentialsPath, defaultApiKeyEnvName, DEFAULT_ANTHROPIC_BASE_URL, DEFAULT_OPENAI_BASE_URL, DEFAULT_OPENAI_MODEL, DEFAULT_STRATUS_AGENT, globalConfigPath, loadChannelCredentials, loadChannelTransportSecrets, loadCredentials, loadRosterSouls, loadSoulFile, isRegisteredProviderName, languageFor, readNonEmptyString, registeredProviderNameOf, readProcessEnv, readWorkingDirectory, resolveAgentApprovals, resolveRuntimeConfig, DEFAULT_CONFIG_FILENAME, loadConfigFile, saveChannelCredentials, saveChannelTransportSecrets, removeChannelTransportSecrets, CREDENTIAL_NAME_PATTERN, saveConfigFile, saveCredentials, resolveAgentPrincipals, CREDENTIAL_PROVIDER_NAMES, verifyProviderKey, } from '@stratusagent/state';
+import { claimSoulFile, collectAvailableModels as collectModels, credentialsPath, defaultApiKeyEnvName, DEFAULT_ANTHROPIC_BASE_URL, DEFAULT_OPENAI_BASE_URL, defaultModelFor as builtInModelDefault, DEFAULT_STRATUS_AGENT, globalConfigPath, loadChannelCredentials, loadChannelTransportSecrets, loadCredentials, loadRosterSouls, loadSoulFile, isRegisteredProviderName, languageFor, readNonEmptyString, registeredProviderNameOf, readProcessEnv, readWorkingDirectory, resolveAgentApprovals, resolveRuntimeConfig, DEFAULT_CONFIG_FILENAME, loadConfigFile, saveChannelCredentials, saveChannelTransportSecrets, removeChannelTransportSecrets, CREDENTIAL_NAME_PATTERN, saveConfigFile, saveCredentials, resolveAgentPrincipals, CREDENTIAL_PROVIDER_NAMES, verifyProviderKey, } from '@stratusagent/state';
 import { installService, readServiceStatus, servicePlatform, serviceUnitPath, uninstallService, } from "../service.js";
 import { classifyApprovalReach, unattendedReachParts } from "../approvals.js";
 import { serviceEnvFor } from "../daemon.js";
 import { writeLine } from "../io.js";
 import { packageInstalled } from "../loaders.js";
 import { isPackageName, isInstallableSpecifier, defaultPackageInstaller } from "../npm.js";
-import { PLUGIN_MARKETPLACE_URL, FIRST_PARTY_CAPABILITY_PACKAGES } from "../plugin-catalog.js";
+import { FIRST_PARTY_CAPABILITY_PACKAGES } from "../plugin-catalog.js";
+import { checkPluginReleases, currentPlatformHost, installSpecifier, readPluginIndex, releaseVerdict } from "../plugin-index.js";
 import { menuPrefixWidth, quoteShellArg, stratusHeaderLines, createSetupPrompter, } from "../prompter.js";
 import { soulGrantsTool } from "../roster.js";
 import { runSingleLoop, printSessionSummary, formatRuntimeBanner } from "../runtime.js";
@@ -145,11 +144,9 @@ export const runSetup = async (command, streams, env = {}) => {
         header: stratusHeaderLines,
         consumeNotices: () => recentNotices.splice(0),
     });
-    const builtInDefaultModel = (provider) => provider === 'openai'
-        ? DEFAULT_OPENAI_MODEL
-        : provider === 'codex'
-            ? DEFAULT_CODEX_MODEL
-            : DEFAULT_ANTHROPIC_MODEL;
+    // The demo model has none of its own; setup names Anthropic's for it,
+    // as it always has.
+    const builtInDefaultModel = (provider) => builtInModelDefault(provider === 'demo' ? 'anthropic' : provider);
     // A contributed provider's default is its own, so setup has none to
     // name for it — and none to write into a config or a soul.
     const defaultModelFor = (provider) => isRegisteredProviderName(provider) ? undefined : builtInDefaultModel(provider);
@@ -1524,11 +1521,16 @@ export const runSetup = async (command, streams, env = {}) => {
                         : 'installed, not enabled';
                 return fitMenuRow(short.padEnd(18) + status, reserved);
             });
-            options.push('Back');
-            const choice = await prompter.select('Plugins — what your agents can do (installing one grants nothing on its own)', options, { footnote: `More plugins — ${PLUGIN_MARKETPLACE_URL}` });
+            const more = options.length;
+            options.push('More plugins… (checks npm)', 'Back');
+            const choice = await prompter.select('Plugins — what your agents can do (installing one grants nothing on its own)', options);
             if (choice.kind !== 'index' || choice.index === options.length - 1) {
                 return;
             }
+            if (choice.index === more) {
+                await chooseMorePlugins();
+                continue;
+            }
             const name = packages[choice.index];
             if (!name) {
                 return;
@@ -1536,7 +1538,70 @@ export const runSetup = async (command, streams, env = {}) => {
             await choosePlugin(name);
         }
     };
-    const choosePlugin = async (name) => {
+    /**
+     * The plugins that release apart from this CLI, from the curated index
+     * (`plugin-index.ts`). Asked for, never fetched on its own: it runs npm,
+     * which reaches the registry, and the main menu has to work offline.
+     *
+     * An entry is offered only when its latest release would install and
+     * load here (`releaseVerdict` says what that takes), and the install is
+     * pinned to that release. The rest are named with the reason, so a plugin
+     * missing from the list is not a mystery. Picking one goes to the same
+     * install-then-enable path as every other row, which still asks first and
+     * still reads what it contributes from its own manifest.
+     */
+    const chooseMorePlugins = async () => {
+        writeLine(streams.stdout);
+        writeLine(streams.stdout, 'Checking npm for plugins…');
+        const index = await readPluginIndex(env);
+        if (index.source === 'bundled') {
+            writeLine(streams.stdout, 'npm has no plugin index this CLI can read, so this is the list it shipped with.');
+        }
+        const listed = new Set(pluginPackages());
+        const candidates = index.entries.filter((entry) => !listed.has(entry.name));
+        const releases = await checkPluginReleases(candidates.map((entry) => entry.name), env);
+        const host = currentPlatformHost();
+        const offered = [];
+        const skipped = [];
+        for (const entry of candidates) {
+            const verdict = releaseVerdict(entry.name, releases.get(entry.name) ?? { status: 'unknown' }, host);
+            if (verdict.offer) {
+                offered.push({ ...entry, version: verdict.version });
+            }
+            else {
+                // At least one space after a name longer than the column: a
+                // third-party name has no @stratusagent/ to shorten.
+                skipped.push(`  ${entry.name.replace('@stratusagent/', '').padEnd(17)} ${verdict.reason}`);
+            }
+        }
+        if (skipped.length > 0) {
+            writeLine(streams.stdout, 'Not offered here:');
+            for (const line of skipped) {
+                writeLine(streams.stdout, line);
+            }
+        }
+        if (offered.length === 0) {
+            writeLine(streams.stdout, 'There are no more plugins to offer here right now.');
+            await prompter.ask('Press Enter to return to the menu… ');
+            return;
+        }
+        const reserved = menuPrefixWidth(offered.length + 1);
+        const options = offered.map((entry) => fitMenuRow(`${entry.name.replace('@stratusagent/', '').padEnd(17)} ${entry.description}`, reserved));
+        options.push('Back');
+        const choice = await prompter.select('More plugins — installing one grants nothing on its own', options);
+        if (choice.kind !== 'index' || choice.index === options.length - 1) {
+            return;
+        }
+        const entry = offered[choice.index];
+        if (entry) {
+            await choosePlugin(entry.name, installSpecifier(entry.name, entry.version));
+        }
+    };
+    /**
+     * `install` is what `npm install -g` is handed, when it isn't the bare
+     * name: More plugins pins the version it checked.
+     */
+    const choosePlugin = async (name, install = name) => {
         const setup = PLUGIN_SETUP[name];
         const installed = packageInstalled(name, env);
         const enabled = pluginEnabled(name);
@@ -1605,15 +1670,15 @@ export const runSetup = async (command, streams, env = {}) => {
                 disablePlugin(name);
                 return;
             }
-            writeLine(streams.stdout, `Running: npm install -g ${name}`);
-            const result = await (env.packageInstaller ?? defaultPackageInstaller)([name])
+            writeLine(streams.stdout, `Running: npm install -g ${install}`);
+            const result = await (env.packageInstaller ?? defaultPackageInstaller)([install])
                 .catch((error) => ({
                 ok: false,
                 message: error instanceof Error ? error.message : String(error),
             }));
             if (!result.ok) {
                 writeLine(streams.stderr, `Could not install: ${result.message}`);
-                writeLine(streams.stderr, `Run \`npm install -g ${name}\` yourself, then re-run setup to enable it.`);
+                writeLine(streams.stderr, `Run \`npm install -g ${install}\` yourself, then re-run setup to enable it.`);
                 return;
             }
             writeLine(streams.stdout, `Installed ${name}.`);
@@ -2320,6 +2385,15 @@ export const runSetup = async (command, streams, env = {}) => {
         if (!runtime) {
             return;
         }
+        // The CLI carries no provider package, and this row comes before Save,
+        // which installs the one picked. Without this, the first hello on a
+        // fresh install failed on the missing package and told someone already
+        // in setup to choose the provider again in setup. Installed the way
+        // Save does it, without a question: choosing the provider was the
+        // decision. A failed install has already said so, with the command.
+        if (!(await installProviderPackages(uninstalledProviderPackages([runtime], env), streams, env))) {
+            return;
+        }
         writeLine(streams.stdout, `Running a quick hello (${formatRuntimeBanner(runtime).replace('Starting Stratus Agent local loop with ', '')})…`);
         try {
             const session = await runSingleLoop('Say hello and introduce yourself in one short sentence.', streams, { events: false, runtime, env });
@@ -2359,116 +2433,53 @@ export const runSetup = async (command, streams, env = {}) => {
         };
     };
     /**
-     * Whether `stratus dashboard` can work. Read before the offer and set by
-     * it, so the closing suggestions never name a command this machine cannot
-     * run — the failure that sends someone to the logs to find out why.
-     */
-    let dashboardReady = packageInstalled('@stratusagent/control-api', env)
-        && packageInstalled('@stratusagent/dashboard', env);
-    const missingPackageGroups = () => {
-        const groups = [];
-        const slackAgents = Object.keys(state.channels.slack ?? {}).length;
-        if (slackAgents > 0 && !packageInstalled('@stratusagent/channel-slack', env)) {
-            groups.push({
-                id: 'slack',
-                label: 'Slack channel',
-                why: `Slack tokens are stored for ${slackAgents} agent(s), but nothing connects to Slack without it`,
-                packages: ['@stratusagent/channel-slack'],
-            });
-        }
-        // Both, because the dashboard is what was offered: the control API is
-        // the port and the dashboard is the page served on it. Only the missing
-        // half is installed, so accepting this on a machine that already has
-        // the API does not reinstall it.
-        const dashboardPackages = ['@stratusagent/control-api', '@stratusagent/dashboard']
-            .filter((name) => !packageInstalled(name, env));
-        if (dashboardPackages.length > 0) {
-            groups.push({
-                id: 'dashboard',
-                label: 'Web dashboard',
-                why: '`stratus dashboard` needs it, and it opens an authenticated port on 127.0.0.1',
-                packages: dashboardPackages,
-            });
-        }
-        return groups;
-    };
-    /**
-     * Offers the packages above. Declining is a real answer and prints the
-     * command; the control API in particular binds a port, and installing it
-     * is how an operator says they want one open, so this asks rather than
-     * deciding for them.
+     * The Slack channel package, when this setup has Slack tokens stored and
+     * it is not installed. Setup knows that before the daemon does, so it is
+     * the one place that can offer the install rather than leave the gap to
+     * be found in a log after the fact.
+     *
+     * The dashboard is deliberately not offered here: its control API binds a
+     * port, and the time to ask about that is when someone runs
+     * `stratus dashboard`, which offers its own packages (card 308).
+     * Declining is a real answer and prints the command.
      */
     const offerOptionalPackages = async () => {
-        const groups = missingPackageGroups();
-        if (groups.length === 0) {
+        const slackPackage = '@stratusagent/channel-slack';
+        const slackAgents = Object.keys(state.channels.slack ?? {}).length;
+        if (slackAgents === 0 || packageInstalled(slackPackage, env)) {
             return;
         }
         writeLine(streams.stdout);
-        writeLine(streams.stdout, groups.length === 1
-            ? 'One optional package is not installed:'
-            : `${groups.length} optional packages are not installed:`);
-        for (const group of groups) {
-            writeLine(streams.stdout, `  ${group.packages.join(' ')}`);
-            writeLine(streams.stdout, `    ${group.why}.`);
-        }
-        const answer = await prompter.select('Install now with npm install -g?', groups.length === 1
-            ? ['Install it now', 'Skip']
-            : ['Install all of them now', ...groups.map((group) => `Install the ${group.label} only`), 'Skip']);
-        const chosen = (() => {
-            if (answer.kind !== 'index') {
-                return [];
-            }
-            if (groups.length === 1) {
-                return answer.index === 0 ? groups : [];
-            }
-            if (answer.index === 0) {
-                return groups;
-            }
-            const only = groups[answer.index - 1];
-            return only ? [only] : [];
-        })();
-        // Held before the install rather than derived after it: picking one
-        // group is not a decision about the other, and the daemon starts a few
-        // lines below and warns about exactly what is still missing — the
-        // notice this whole offer exists to pre-empt.
-        const declined = groups.filter((group) => !chosen.includes(group));
-        if (chosen.length > 0) {
-            const packages = chosen.flatMap((group) => group.packages);
-            writeLine(streams.stdout, `Running: npm install -g ${packages.join(' ')}`);
-            // Never fails setup — not even its exit code, unlike the always-on
-            // service step below: the config and credentials are already written,
-            // and a package that did not install is a warning at the next start,
-            // not a broken machine.
-            const result = await (env.packageInstaller ?? defaultPackageInstaller)(packages)
-                .catch((error) => ({
-                ok: false,
-                message: error instanceof Error ? error.message : String(error),
-            }));
-            if (result.ok) {
-                writeLine(streams.stdout, `Installed ${packages.join(' ')}.`);
-                // npm's exit code, not a second resolve: a package written into the
-                // global prefix a moment ago need not be resolvable from THIS
-                // process, whose module resolution was fixed when it started.
-                if (chosen.some((group) => group.id === 'dashboard')) {
-                    dashboardReady = true;
-                }
-            }
-            else {
-                writeLine(streams.stderr, `Could not install: ${result.message}`);
-                writeLine(streams.stderr, `Setup is saved either way — run \`npm install -g ${packages.join(' ')}\` yourself.`);
-            }
+        writeLine(streams.stdout, 'One optional package is not installed:');
+        writeLine(streams.stdout, `  ${slackPackage}`);
+        writeLine(streams.stdout, `    Slack tokens are stored for ${slackAgents} agent(s), but nothing connects to Slack without it.`);
+        const answer = await prompter.select('Install now with npm install -g?', ['Install it now', 'Skip']);
+        if (answer.kind !== 'index' || answer.index !== 0) {
+            writeLine(streams.stdout, `Skipped. Install it yourself with: npm install -g ${slackPackage}`);
+            return;
         }
-        if (declined.length > 0) {
-            const rest = declined.flatMap((group) => group.packages).join(' ');
-            writeLine(streams.stdout, chosen.length > 0
-                ? `Still missing. Install with: npm install -g ${rest}`
-                : `Skipped. Install them yourself with: npm install -g ${rest}`);
+        writeLine(streams.stdout, `Running: npm install -g ${slackPackage}`);
+        // Never fails setup — not even its exit code, unlike the always-on
+        // service step below: the config and credentials are already written,
+        // and a package that did not install is a warning at the next start,
+        // not a broken machine.
+        const result = await (env.packageInstaller ?? defaultPackageInstaller)([slackPackage])
+            .catch((error) => ({
+            ok: false,
+            message: error instanceof Error ? error.message : String(error),
+        }));
+        if (result.ok) {
+            writeLine(streams.stdout, `Installed ${slackPackage}.`);
+        }
+        else {
+            writeLine(streams.stderr, `Could not install: ${result.message}`);
+            writeLine(streams.stderr, `Setup is saved either way — run \`npm install -g ${slackPackage}\` yourself.`);
         }
     };
     /**
      * Write everything the menu decided, then report whether the always-on
      * service step it performed — installing the service, or removing one the
-     * user chose not to run — and the install of the provider harness the
+     * user chose not to run — and the install of the provider package the
      * config runs on both succeeded.
      *
      * A boolean rather than a throw: the service is the one optional part of
@@ -2620,14 +2631,15 @@ export const runSetup = async (command, streams, env = {}) => {
         // already present, instead of warning about them in a log nobody reads
         // until the dashboard fails.
         // The provider package comes first, and without a question: choosing
-        // Claude by subscription or Codex was the decision, and the CLI no
-        // longer carries either harness, so a daemon started without it fails
-        // every turn. Through the saved files, so a soul's own pin counts.
+        // the provider was the decision, and the CLI carries none of the
+        // packages (the Anthropic adapter, the claude-code and codex harnesses),
+        // so a daemon started without it fails every turn. Through the saved
+        // files, so a soul's own pin counts.
         // A failed install is carried like a failed service step: everything is
         // saved, but the exit code and the closing line must not call a config
         // whose every turn fails ready.
-        const harnesses = await missingHarnessPackages(env, configPath, { asService: true });
-        const harnessInstallFailed = !(await installHarnessPackages(harnesses, streams, env));
+        const providerPackages = await missingProviderPackages(env, configPath, { asService: true });
+        const providerInstallFailed = !(await installProviderPackages(providerPackages, streams, env));
         await offerOptionalPackages();
         // Last, so the daemon starts against the config and credentials that
         // were just written rather than the ones it would have found a moment
@@ -2730,8 +2742,8 @@ export const runSetup = async (command, streams, env = {}) => {
             ...(flagged.has('STRATUS_MODEL') ? { model: String(state.model ?? defaultModelFor(state.provider)) } : {}),
             ...(flagged.has('STRATUS_BASE_URL') ? { baseUrl: state.baseUrl ?? DEFAULT_OPENAI_BASE_URL } : {}),
         };
-        const readBackFailure = harnessInstallFailed
-            ? harnessesMissingMessage(harnesses)
+        const readBackFailure = providerInstallFailed
+            ? providerPackagesMissingMessage(providerPackages)
             : await resolveRuntimeConfig(readBackSelection, env).then(() => undefined, (error) => (error instanceof Error ? error.message : String(error)));
         const failedReadBack = () => {
             if (readBackFailure === undefined) {
@@ -2771,10 +2783,9 @@ export const runSetup = async (command, streams, env = {}) => {
             }
         }
         writeLine(streams.stdout, `  stratus run${extraFlags}${runConfigFlag}${shadowConfigFlag} "say hello"`);
-        if (dashboardReady) {
-            writeLine(streams.stdout, '  stratus dashboard');
-        }
-        return !serviceStepFailed && !harnessInstallFailed;
+        // Whether or not its packages are here: the command offers them itself.
+        writeLine(streams.stdout, '  stratus dashboard');
+        return !serviceStepFailed && !providerInstallFailed;
     };
     try {
         if (!interactive) {