@synap-core/cli 1.7.0 → 1.8.0

package/dist/commands/graph.js

@@ -0,0 +1,73 @@
+/**
+ * synap graph
+ *
+ * BFS graph traversal from a starting entity via the Hub Protocol.
+ *
+ * Usage:
+ *   synap graph --entity <id>            # traversal depth 2
+ *   synap graph --entity <id> --depth 3
+ *   synap graph --entity <id> --json
+ */
+import chalk from "chalk";
+import { log } from "../utils/logger.js";
+import { resolveHubConfig, resolveUserId, hubGet } from "../lib/hub-client.js";
+export async function graphTraverse(opts) {
+    try {
+        const cfg = await resolveHubConfig(opts);
+        const userId = await resolveUserId(cfg);
+        const maxDepth = parseInt(opts.depth ?? "2", 10);
+        const results = await hubGet("/graph/traverse", {
+            startEntityId: opts.entity,
+            maxDepth,
+            userId,
+        }, cfg);
+        if (opts.json) {
+            console.log(JSON.stringify(results, null, 2));
+            return;
+        }
+        // The API returns a flat array of records — each record is an entity or
+        // relation row from the traversal. Split by whether it has a `sourceEntityId`
+        // (relation) or not (node).
+        const nodes = [];
+        const edges = [];
+        for (const row of (Array.isArray(results) ? results : [])) {
+            if (row.sourceEntityId || row.targetEntityId) {
+                edges.push(row);
+            }
+            else {
+                nodes.push(row);
+            }
+        }
+        console.log(chalk.bold(`\nGraph from ${opts.entity} (depth ${maxDepth})`));
+        console.log(chalk.bold(`\nNodes (${nodes.length}):`));
+        if (nodes.length === 0) {
+            log.dim("(none)");
+        }
+        else {
+            for (const n of nodes) {
+                const profile = String(n.profileSlug ?? n.entityType ?? n.type ?? "entity").padEnd(14);
+                const title = String(n.title ?? n.name ?? "–").slice(0, 40).padEnd(42);
+                const id = chalk.dim(String(n.id ?? "").slice(0, 8));
+                console.log(`  ${chalk.cyan("•")} ${profile} ${title} ${id}`);
+            }
+        }
+        console.log(chalk.bold(`\nEdges (${edges.length}):`));
+        if (edges.length === 0) {
+            log.dim("(none)");
+        }
+        else {
+            for (const e of edges) {
+                const relType = String(e.type ?? e.relationType ?? e.relationshipType ?? "–").padEnd(22);
+                const src = String(e.sourceEntityId ?? "?").slice(0, 8);
+                const tgt = String(e.targetEntityId ?? "?").slice(0, 8);
+                console.log(`  ${chalk.dim(relType)}  ${chalk.dim(src)} → ${chalk.dim(tgt)}`);
+            }
+        }
+        console.log("");
+    }
+    catch (e) {
+        log.error("Error: " + e.message);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=graph.js.map

package/dist/commands/graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.js","sourceRoot":"","sources":["../../src/commands/graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAU/E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,iBAAiB,EAAE;YAC9C,aAAa,EAAE,IAAI,CAAC,MAAM;YAC1B,QAAQ;YACR,MAAM;SACP,EAAE,GAAG,CAAC,CAAC;QAER,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,wEAAwE;QACxE,8EAA8E;QAC9E,4BAA4B;QAC5B,MAAM,KAAK,GAA8B,EAAE,CAAC;QAC5C,MAAM,KAAK,GAA8B,EAAE,CAAC;QAE5C,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1D,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;gBAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,MAAM,WAAW,QAAQ,GAAG,CAAC,CAAC,CAAC;QAE3E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvF,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvE,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,SAAS,GAAI,CAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/home.d.ts

@@ -0,0 +1,12 @@
+/**
+ * synap home
+ *
+ * Show the current bento layout of the active workspace's home screen.
+ * Useful at the start of an agent session to understand what's already
+ * present before proposing UI changes.
+ */
+import type { BaseOpts } from "./data.js";
+export interface HomeOpts extends BaseOpts {
+    workspace?: string;
+}
+export declare function showHome(opts: HomeOpts): Promise<void>;

package/dist/commands/home.js

@@ -0,0 +1,54 @@
+/**
+ * synap home
+ *
+ * Show the current bento layout of the active workspace's home screen.
+ * Useful at the start of an agent session to understand what's already
+ * present before proposing UI changes.
+ */
+import chalk from "chalk";
+import { log } from "../utils/logger.js";
+import { resolveHubConfig, hubGet } from "../lib/hub-client.js";
+import { getAgentWorkspaceRouting } from "../lib/pod.js";
+export async function showHome(opts) {
+    try {
+        const cfg = await resolveHubConfig(opts);
+        const routing = getAgentWorkspaceRouting();
+        const workspaceId = opts.workspace ??
+            routing?.memoryWorkspaceId ??
+            cfg.workspaceId;
+        if (!workspaceId) {
+            console.error(chalk.red("Error: no workspace resolved. Pass --workspace <id> or run `synap context` to set active workspace."));
+            process.exit(1);
+        }
+        const res = (await hubGet(`/workspaces/${workspaceId}/home`, {}, cfg));
+        if (opts.json) {
+            console.log(JSON.stringify(res, null, 2));
+            return;
+        }
+        const viewLabel = res.homeViewName
+            ? `${res.homeViewName} (${res.homeViewId ?? "no view"})`
+            : res.homeViewId ?? chalk.dim("none");
+        log.info(`Home layout — workspace ${chalk.bold(workspaceId.slice(0, 8))}`);
+        console.log(`  View: ${chalk.cyan(viewLabel)}`);
+        console.log(`  Blocks: ${res.blocks.length}`);
+        if (res.blockSummary.length === 0) {
+            console.log(chalk.dim("  (empty — no bento blocks on home yet)"));
+            return;
+        }
+        console.log("");
+        for (const b of res.blockSummary) {
+            const kindLabel = chalk.dim(`[${b.kind}]`);
+            const typeLabel = b.typeKey ? chalk.cyan(b.typeKey) : "";
+            const nameLabel = b.label ? chalk.white(b.label) : chalk.dim("unlabelled");
+            const idLabel = b.id ? chalk.dim(` ${b.id.slice(0, 8)}`) : "";
+            console.log(`  ${kindLabel} ${typeLabel}  ${nameLabel}${idLabel}`);
+        }
+        console.log("");
+        console.log(chalk.dim("Tip: use `create_proposal` with targetType:\"workspace_home\" to propose adding or removing blocks."));
+    }
+    catch (e) {
+        log.error("Error: " + e.message);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=home.js.map

package/dist/commands/home.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home.js","sourceRoot":"","sources":["../../src/commands/home.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAsBzD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;QAC3C,MAAM,WAAW,GACf,IAAI,CAAC,SAAS;YACd,OAAO,EAAE,iBAAiB;YAC1B,GAAG,CAAC,WAAW,CAAC;QAElB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,qGAAqG,CACtG,CACF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CACvB,eAAe,WAAW,OAAO,EACjC,EAAE,EACF,GAAG,CACJ,CAAiB,CAAC;QAEnB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY;YAChC,CAAC,CAAC,GAAG,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,UAAU,IAAI,SAAS,GAAG;YACxD,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAExC,GAAG,CAAC,IAAI,CAAC,2BAA2B,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAE9C,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,GAAG,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,qGAAqG,CACtG,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,SAAS,GAAI,CAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/init.d.ts

@@ -10,11 +10,9 @@ import { detectOpenClaw } from "../lib/openclaw.js";
 interface InitOptions {
     podUrl?: string;
     apiKey?: string;
-    skipSecurity?: boolean;
     skipIs?: boolean;
 }
 export declare function init(opts: InitOptions): Promise<void>;
-export declare function securityStep(version?: string): Promise<void>;
 export declare function skillStep(openclawFound: boolean, oc?: ReturnType<typeof detectOpenClaw>): Promise<void>;
 export declare function seedStep(podUrl: string, apiKey: string, oc: ReturnType<typeof detectOpenClaw>): Promise<void>;
 export declare function isStep(podUrl: string, apiKey: string, openclawFound: boolean): Promise<void>;

package/dist/commands/init.js

@@ -13,7 +13,6 @@ import { execSync } from "child_process";
 import fs from "fs";
 import { log, banner } from "../utils/logger.js";
 import { detectOpenClaw, readOpenClawConfig, writeOpenClawConfig, setConfigValue, } from "../lib/openclaw.js";
-import { runSecurityChecks, computeScore } from "../lib/hardening.js";
 import { checkPodHealth, setupAgent, setupAgentViaCp, provisionUserOnPod, installSynapSkill, enableOpenClawAddonManaged, saveLocalPodConfig, checkServerResources, startOpenClawOnServer, findSynapDeployDir, getLocalPodConfig, } from "../lib/pod.js";
 import { seedAgentEntities } from "../lib/seed.js";
 import { login, isLoggedIn, listPods, getStoredToken, waitForPodCallback } from "../lib/auth.js";
@@ -47,12 +46,13 @@ export async function init(opts) {
         }
     }
     // ── Auto-detect environment ─────────────────────────────────────────────
+    // Pod URL is always the primary decision axis. OpenClaw, if present, is an
+    // optional enhancement that gets wired after the pod connection is set up —
+    // it is no longer the gating condition for which path runs.
     const oc = detectOpenClaw();
     const isServer = detectServer();
     if (oc.found) {
-        log.info(`OpenClaw detected${oc.version ? ` v${oc.version}` : ""} — connect mode`);
-        await pathA(opts, oc);
-        return;
+        log.info(`OpenClaw detected${oc.version ? ` v${oc.version}` : ""} — will wire it after pod setup`);
     }
     if (isServer) {
         // Before assuming fresh install, check if a pod is already running
@@ -61,15 +61,26 @@ export async function init(opts) {
         spinner.stop();
         if (existingPodUrl) {
             log.success(`Found existing pod at ${existingPodUrl}`);
-            log.info("Server detected, no OpenClaw — connecting to existing pod");
-            await pathBExisting(opts, existingPodUrl);
+            if (oc.found) {
+                log.info("Server + OpenClaw — connecting pod then wiring OpenClaw");
+                await pathA(opts, oc);
+            }
+            else {
+                log.info("Server detected — connecting to existing pod");
+                await pathBExisting(opts, existingPodUrl);
+            }
         }
         else {
-            log.info("Server detected, no OpenClaw — fresh setup mode");
+            log.info("Server detected — fresh setup mode");
             await pathB(opts);
         }
         return;
     }
+    if (oc.found) {
+        // Desktop with OpenClaw — use pathA (OpenClaw connect mode)
+        await pathA(opts, oc);
+        return;
+    }
     log.info("Running on desktop — hosting mode");
     await pathC(opts);
 }
@@ -81,10 +92,6 @@ async function pathA(opts, oc) {
     log.heading("Step 1: OpenClaw Detected");
     log.success(`Version: ${oc.version ?? "unknown"}`);
     log.success(`Gateway: ${oc.gatewayRunning ? "running" : "stopped"} (port ${oc.gatewayPort ?? 18789})`);
-    // ── Security ────────────────────────────────────────────────────────────
-    if (!opts.skipSecurity) {
-        await securityStep(oc.version);
-    }
     // ── Pod ─────────────────────────────────────────────────────────────────
     const podUrl = await podChoiceStep(opts);
     if (!podUrl)
@@ -136,7 +143,7 @@ async function pathBExisting(opts, detectedUrl) {
         log.warn("Could not find your Synap deploy directory automatically.");
         log.dim("Start OpenClaw manually from your synap-backend dir:");
         log.dim("  docker compose --profile openclaw up -d openclaw");
-        log.dim("Then run: synap finish");
+        log.dim("Then run: synap update");
         return;
     }
     log.info(`Deploy dir: ${deployDir}`);
@@ -160,14 +167,14 @@ async function pathBExisting(opts, detectedUrl) {
     if (ocStarted) {
         log.info("OpenClaw is initializing (first boot takes 1-2 min).");
         log.info("Once it's ready, run:");
-        console.log(chalk.cyan("\n  synap finish\n"));
+        console.log(chalk.cyan("\n  synap update\n"));
         log.dim("This will install the skill, seed your workspace, and configure AI routing.");
         log.dim("Check progress at any time: synap status");
     }
     else {
         log.info("Start OpenClaw manually:");
         console.log(chalk.cyan(`\n  cd ${deployDir} && docker compose --profile openclaw up -d openclaw\n`));
-        log.dim("Then run: synap finish");
+        log.dim("Then run: synap update");
     }
 }
 // =============================================================================
@@ -233,7 +240,7 @@ async function pathB(opts) {
         }
         log.blank();
         log.info("OpenClaw is initializing. Once it's ready, run:");
-        console.log(chalk.cyan("\n  synap finish\n"));
+        console.log(chalk.cyan("\n  synap update\n"));
         log.dim("Check progress: synap status");
         return;
     }
@@ -344,8 +351,7 @@ async function connectExistingPod(podUrl, opts, podType, podId) {
     const oc = detectOpenClaw();
     if (oc.found) {
         log.success(`OpenClaw detected${oc.version ? ` v${oc.version}` : ""}`);
-        if (!opts.skipSecurity)
-            await securityStep(oc.version);
+        // Security audit removed — no longer OpenClaw-specific
     }
     // Get API key
     const apiKey = await connectStep(podUrl, opts, oc.found, podId);
@@ -431,44 +437,10 @@ async function connectExistingPod(podUrl, opts, podType, podId) {
         log.info("Pod connected. Once OpenClaw is running:");
         log.dim("  Local:  openclaw skills install synap");
         log.dim("  Docker: docker exec openclaw openclaw skills install synap");
-        log.dim("  Or run: synap finish");
+        log.dim("  Or run: synap update");
     }
     printSummary(podUrl, ocAfter.found);
 }
-// =============================================================================
-// SHARED STEPS
-// =============================================================================
-export async function securityStep(version) {
-    log.heading("Security Audit");
-    const checks = runSecurityChecks(version);
-    const failed = checks.filter((c) => !c.passed);
-    const score = computeScore(checks);
-    const passed = checks.filter((c) => c.passed).length;
-    console.log(`  ${passed}/${checks.length} passed — Score: ${score === "A" ? chalk.green.bold("A") : score === "B" ? chalk.yellow.bold("B") : chalk.red.bold(score)}`);
-    if (failed.length > 0) {
-        const fixable = failed.filter((c) => c.fixable && c.fix);
-        if (fixable.length > 0) {
-            const { doFix } = await prompts({
-                type: "confirm",
-                name: "doFix",
-                message: `Auto-fix ${fixable.length} issue(s)?`,
-                initial: true,
-            });
-            if (doFix) {
-                for (const check of fixable) {
-                    check.fix();
-                    log.success(`Fixed: ${check.name}`);
-                }
-            }
-        }
-        for (const check of failed.filter((c) => !c.fixable)) {
-            log.warn(`${check.name} — ${check.message}`);
-        }
-    }
-    else {
-        log.success("All checks passed");
-    }
-}
 async function podChoiceStep(opts) {
     log.heading("Synap Pod");
     if (opts.podUrl) {
@@ -837,11 +809,11 @@ export async function isStep(podUrl, apiKey, openclawFound) {
                     }
                     else if (!provData?.subscribed) {
                         log.dim("No AI subscription — subscribe at https://synap.live/pricing");
-                        log.dim("Skip this step with: synap finish --skip-is");
+                        log.dim("Skip this step with: synap update --skip-is");
                     }
                     else if (provData?.cpProvisioned) {
                         log.dim("IS provisioned on CP but not yet confirmed on pod.");
-                        log.dim("Re-run 'synap finish' in a minute, or reprovision from Browser Settings.");
+                        log.dim("Re-run 'synap update' in a minute, or reprovision from Browser Settings.");
                     }
                 }
                 else {
@@ -861,40 +833,47 @@ export async function isStep(podUrl, apiKey, openclawFound) {
             log.blank();
             log.dim("To enable AI routing via Synap:");
             log.dim("  1. Log in:  synap login --token <token>  (get token at synap.live/account/tokens)");
-            log.dim("  2. Re-run:  synap finish");
+            log.dim("  2. Re-run:  synap update");
             log.blank();
-            log.dim("Or skip AI for now: synap finish --skip-is");
+            log.dim("Or skip AI for now: synap update --skip-is");
         }
     }
     // 3. Configure OpenClaw provider (if found and IS is active)
     if (openclawFound && isActive) {
         const ocRuntime = detectOpenClaw();
-        if (ocRuntime.runtime === "docker") {
-            // Docker path: write via openclaw config set
-            const containerName = ocRuntime.containerName ?? "openclaw";
-            const { configureOc } = await prompts({
-                type: "confirm",
-                name: "configureOc",
-                message: "Configure Synap IS as OpenClaw AI provider?",
-                initial: true,
-            });
-            if (configureOc) {
-                const synapProvider = {
-                    baseUrl: `${podUrl}/v1`,
-                    api: "openai-completions",
-                    apiKey,
-                    models: [
-                        { id: "synap/auto", name: "Synap Auto", contextWindow: 200000, maxTokens: 8192 },
-                        { id: "synap/balanced", name: "Synap Balanced", contextWindow: 131072, maxTokens: 8192 },
-                        { id: "synap/advanced", name: "Synap Advanced", contextWindow: 200000, maxTokens: 8192 },
-                    ],
-                };
+        const { configureOc } = await prompts({
+            type: "confirm",
+            name: "configureOc",
+            message: "Configure Synap IS as OpenClaw AI provider?",
+            initial: true,
+        });
+        if (configureOc) {
+            // Fetch real model IDs from the pod so OpenClaw shows actual provider names
+            const { fetchPodProviders } = await import("./providers.js");
+            const podProviders = await fetchPodProviders(podUrl, apiKey);
+            const models = podProviders.flatMap((p) => p.models.map((m) => ({
+                id: `${p.providerId}/${m.id}`,
+                name: `${p.name} — ${m.id}`,
+                ...(m.contextWindow ? { contextWindow: m.contextWindow } : {}),
+            })));
+            if (models.length === 0) {
+                log.warn("No model IDs found — configure models in pod admin → Intelligence → Providers.");
+                log.dim("Skipping OpenClaw AI provider setup. Re-run: synap update");
+                return;
+            }
+            const synapProvider = {
+                baseUrl: `${podUrl}/v1`,
+                api: "openai-completions",
+                apiKey,
+                models,
+            };
+            if (ocRuntime.runtime === "docker") {
+                const containerName = ocRuntime.containerName ?? "openclaw";
                 const spinner = ora("Writing Synap IS provider to OpenClaw config...").start();
                 try {
                     execSync(`docker exec ${containerName} openclaw config set models.providers.synap ${JSON.stringify(JSON.stringify(synapProvider))}`, { stdio: "pipe", timeout: 15000 });
                     spinner.succeed("Synap IS registered as OpenClaw provider");
-                    log.dim("Available models: synap/auto, synap/balanced, synap/advanced");
-                    // Restart to apply (Docker has no hot reload)
+                    log.dim(`Models: ${models.slice(0, 3).map((m) => m.id).join(", ")}${models.length > 3 ? ` +${models.length - 3} more` : ""}`);
                     try {
                         execSync(`docker restart ${containerName}`, { stdio: "pipe", timeout: 30000 });
                         log.dim("Container restarted to pick up new config");
@@ -908,34 +887,15 @@ export async function isStep(podUrl, apiKey, openclawFound) {
                     spinner.fail("Failed to set Synap IS provider");
                     if (stderr)
                         log.dim(stderr);
-                    log.dim("Run manually:");
                     log.dim(`  docker exec ${containerName} openclaw config set models.providers.synap.baseUrl ${podUrl}/v1`);
-                    log.dim(`  docker exec ${containerName} openclaw config set models.providers.synap.api openai-completions`);
                 }
             }
-        }
-        else {
-            // Local install path: write to config file directly
-            const { configureOc } = await prompts({
-                type: "confirm",
-                name: "configureOc",
-                message: "Configure Synap IS as OpenClaw AI provider?",
-                initial: true,
-            });
-            if (configureOc) {
+            else {
                 const config = readOpenClawConfig() ?? {};
-                setConfigValue(config, "models.providers.synap", {
-                    baseUrl: `${podUrl}/v1`,
-                    api: "openai-completions",
-                    apiKey,
-                    models: [
-                        { id: "synap/auto", name: "Synap Auto", contextWindow: 200000, maxTokens: 8192 },
-                        { id: "synap/balanced", name: "Synap Balanced", contextWindow: 131072, maxTokens: 8192 },
-                        { id: "synap/advanced", name: "Synap Advanced", contextWindow: 200000, maxTokens: 8192 },
-                    ],
-                });
+                setConfigValue(config, "models.providers.synap", synapProvider);
                 writeOpenClawConfig(config);
                 log.success("Synap IS configured as OpenClaw provider — restart OpenClaw to apply");
+                log.dim(`Models: ${models.slice(0, 3).map((m) => m.id).join(", ")}${models.length > 3 ? ` +${models.length - 3} more` : ""}`);
             }
         }
     }
@@ -957,13 +917,13 @@ function printSummary(podUrl, openclawConnected) {
     }
     log.blank();
     log.dim("  synap status         — health check");
-    log.dim("  synap security-audit — verify security");
+    log.dim("  synap status          — verify security");
     log.blank();
     if (!openclawConnected) {
         log.info("OpenClaw is provisioning on your pod server (2-5 min).");
         log.info("Once it's ready, run:");
         log.blank();
-        console.log(chalk.cyan("  synap finish"));
+        console.log(chalk.cyan("  synap update"));
         log.blank();
         log.dim("This will install the skill, seed your workspace, and configure AI routing.");
         log.dim("Check progress: synap status");