@zeph-to/hook-sdk 1.7.1 → 1.9.0

package/README.md

@@ -1,6 +1,6 @@
 # @zeph-to/hook-sdk
 
-Push notification SDK + CLI for [Zeph](https://zeph.to). Zero dependencies — uses native `fetch`.
+Push notification SDK + CLI for [Zeph](https://zeph.to). The `ZephHook` SDK uses native `fetch` with no runtime dependencies; the `zeph` CLI adds `@inquirer/prompts` for its interactive installer.
 
 ## Installation
 
@@ -50,7 +50,10 @@ zeph notify --title "Hello" --json
 
 | Command | Description |
 |---------|-------------|
-| `install` | One-command setup: detect agents, save config, install plugins |
+| `install` | One-command setup: detect agents, save config, install rules + hooks + MCP |
+| `uninstall` | Remove Zeph from all detected agents (`--dry-run`, `--purge`) |
+| `verify` | Check installation health across detected agents (`--ping` for a live API call) |
+| `check-update` | Check whether a newer Zeph version is on npm |
 | `notify` | Send a push notification |
 | `list` | List recent push notifications |
 | `dismiss <id>` | Dismiss a push (or `--all`) |
@@ -199,7 +202,8 @@ Push bodies are encrypted with AES-256-GCM. The wrapping key is derived via ECDH
 ## Requirements
 
 - Node.js >= 18 (uses native `fetch`)
-- Zero runtime dependencies
+- The `ZephHook` SDK has no runtime dependencies. The CLI depends on
+  `@inquirer/prompts` for the interactive `zeph install` picker.
 
 ## License
 

package/dist/agents.d.ts

@@ -0,0 +1,8 @@
+export interface Agent {
+    name: string;
+    id: string;
+    detected: boolean;
+}
+export declare const hasCommand: (cmd: string) => boolean;
+export declare const detectAgents: () => Agent[];
+//# sourceMappingURL=agents.d.ts.map

package/dist/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../src/agents.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,KAAK;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;CACrB;AAID,eAAO,MAAM,UAAU,GAAI,KAAK,MAAM,KAAG,OAOxC,CAAC;AAEF,eAAO,MAAM,YAAY,QAAO,KAAK,EASpC,CAAC"}

package/dist/agents.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectAgents = exports.hasCommand = void 0;
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const HOME = (0, os_1.homedir)();
+const hasCommand = (cmd) => {
+    try {
+        (0, child_process_1.execSync)(`which ${cmd}`, { stdio: 'pipe' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+exports.hasCommand = hasCommand;
+const detectAgents = () => [
+    { name: 'Claude Code', id: 'claude', detected: (0, exports.hasCommand)('claude') },
+    { name: 'Cursor', id: 'cursor', detected: (0, fs_1.existsSync)((0, path_1.join)(HOME, '.cursor')) },
+    { name: 'Windsurf', id: 'windsurf', detected: (0, fs_1.existsSync)((0, path_1.join)(HOME, '.codeium')) },
+    { name: 'Gemini CLI', id: 'gemini', detected: (0, exports.hasCommand)('gemini') },
+    { name: 'Codex CLI', id: 'codex', detected: (0, exports.hasCommand)('codex') },
+    { name: 'Copilot CLI', id: 'copilot', detected: (0, fs_1.existsSync)((0, path_1.join)(HOME, '.copilot')) },
+    { name: 'Cline', id: 'cline', detected: (0, fs_1.existsSync)((0, path_1.join)(HOME, '.cline')) },
+    { name: 'Aider', id: 'aider', detected: (0, exports.hasCommand)('aider') },
+];
+exports.detectAgents = detectAgents;

package/dist/check-update.d.ts

@@ -0,0 +1,4 @@
+/** Semver-ish compare: returns true when `latest` is strictly newer than `current`. */
+export declare const isNewer: (latest: string, current: string) => boolean;
+export declare const handleCheckUpdate: (args: Record<string, string | boolean>) => Promise<number>;
+//# sourceMappingURL=check-update.d.ts.map

package/dist/check-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-update.d.ts","sourceRoot":"","sources":["../src/check-update.ts"],"names":[],"mappings":"AAsBA,uFAAuF;AACvF,eAAO,MAAM,OAAO,GAAI,QAAQ,MAAM,EAAE,SAAS,MAAM,KAAG,OAQzD,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAU,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAG,OAAO,CAAC,MAAM,CA4C9F,CAAC"}

package/dist/check-update.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleCheckUpdate = exports.isNewer = void 0;
+const config_js_1 = require("./config.js");
+// Compares installed versions against the npm registry. Pure read-only —
+// never installs anything; just tells the user if a newer release exists.
+const PACKAGES = ['@zeph-to/hook-sdk', '@zeph-to/mcp-server'];
+/** Fetch the `latest` dist-tag version for a package from the npm registry. */
+const fetchLatest = async (pkg) => {
+    try {
+        const res = await fetch(`https://registry.npmjs.org/${pkg}/latest`, {
+            headers: { Accept: 'application/json' },
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!res.ok)
+            return null;
+        const json = await res.json();
+        return json.version ?? null;
+    }
+    catch {
+        return null;
+    }
+};
+/** Semver-ish compare: returns true when `latest` is strictly newer than `current`. */
+const isNewer = (latest, current) => {
+    const norm = (v) => v.replace(/^v/, '').split('-')[0].split('.').map((n) => parseInt(n, 10) || 0);
+    const [a, b] = [norm(latest), norm(current)];
+    for (let i = 0; i < 3; i++) {
+        if ((a[i] ?? 0) > (b[i] ?? 0))
+            return true;
+        if ((a[i] ?? 0) < (b[i] ?? 0))
+            return false;
+    }
+    return false;
+};
+exports.isNewer = isNewer;
+const handleCheckUpdate = async (args) => {
+    const isJson = args.json === true;
+    // The hook-sdk's own installed version is known from package.json.
+    // mcp-server's installed version isn't reliably knowable from here
+    // (it's a separate package, often run via npx), so we only report its
+    // latest — the user compares against whatever they have.
+    const results = [];
+    for (const pkg of PACKAGES) {
+        const latest = await fetchLatest(pkg);
+        const current = pkg === '@zeph-to/hook-sdk' ? config_js_1.VERSION : null;
+        const outdated = !!(latest && current && (0, exports.isNewer)(latest, current));
+        results.push({ pkg, current, latest, outdated });
+    }
+    if (isJson) {
+        console.log(JSON.stringify({ results }, null, 2));
+        return results.some((r) => r.outdated) ? 0 : 0;
+    }
+    console.log('\n  Zeph — update check\n');
+    let anyOutdated = false;
+    for (const r of results) {
+        if (!r.latest) {
+            console.log(`    ?  ${r.pkg}: could not reach npm registry`);
+            continue;
+        }
+        if (r.current === null) {
+            console.log(`    •  ${r.pkg}: latest is v${r.latest}`);
+        }
+        else if (r.outdated) {
+            anyOutdated = true;
+            console.log(`    ⬆  ${r.pkg}: v${r.current} → v${r.latest} (update available)`);
+        }
+        else {
+            console.log(`    ✓  ${r.pkg}: v${r.current} (up to date)`);
+        }
+    }
+    if (anyOutdated) {
+        console.log('\n  Update with: npx @zeph-to/hook-sdk install\n');
+    }
+    else {
+        console.log('');
+    }
+    return 0;
+};
+exports.handleCheckUpdate = handleCheckUpdate;

package/dist/cli.js

@@ -6,6 +6,9 @@ const child_process_1 = require("child_process");
 const zeph_hook_js_1 = require("./zeph-hook.js");
 const errors_js_1 = require("./errors.js");
 const installer_js_1 = require("./installer.js");
+const uninstall_js_1 = require("./uninstall.js");
+const verify_js_1 = require("./verify.js");
+const check_update_js_1 = require("./check-update.js");
 const config_js_1 = require("./config.js");
 const PROJECT_DIR_VARS = ['CLAUDE_PROJECT_DIR', 'CURSOR_PROJECT_DIR', 'WINDSURF_PROJECT_DIR'];
 const detectProjectDir = () => PROJECT_DIR_VARS.reduce((found, key) => found || process.env[key], undefined) ?? process.cwd();
@@ -65,7 +68,10 @@ const printUsage = () => {
     console.log(`Usage: zeph <command> [options]
 
 Commands:
-  install         One-command setup: detect agents, save config, install plugins
+  install         One-command setup: detect agents, save config, install rules
+  uninstall       Remove Zeph from all detected agents
+  verify          Check installation health across detected agents
+  check-update    Check whether a newer Zeph version is available
   notify          Send a push notification
   list            List recent push notifications
   dismiss <id>    Dismiss a push notification (or --all)
@@ -91,6 +97,16 @@ Install options:
   --key <api-key>    API key (non-interactive)
   --hook <hook-id>   Hook ID (non-interactive)
   --base-url <url>   Base URL (non-interactive)
+  --only <agents>    Comma-separated agent ids to install for
+                     (claude,cursor,windsurf,gemini,codex,copilot,cline,aider).
+                     Skips the interactive picker.
+
+Uninstall options:
+  --dry-run          Preview what would be removed, change nothing
+  --purge            Also delete ~/.zeph/config.json (kept by default)
+
+Verify options:
+  --ping             Also make a live API call to confirm the key works
 
 Global options:
   --key <api-key>    API key (or set ZEPH_API_KEY env)
@@ -294,6 +310,12 @@ const main = async () => {
         case 'install':
         case 'setup':
             return (0, installer_js_1.handleInstall)(args);
+        case 'uninstall':
+            return (0, uninstall_js_1.handleUninstall)(args);
+        case 'verify':
+            return (0, verify_js_1.handleVerify)(args);
+        case 'check-update':
+            return (0, check_update_js_1.handleCheckUpdate)(args);
         case 'notify':
             return handleNotify(args);
         case 'list':

package/dist/installer.d.ts

@@ -1,2 +1,9 @@
+import type { Agent } from './agents.js';
+/**
+ * Resolve agents from a non-interactive `--only cursor,gemini` flag.
+ * Matches on agent id; unknown ids are silently dropped. Exported for
+ * unit testing.
+ */
+export declare const filterAgentsByIds: (detected: Agent[], only: string) => Agent[];
 export declare const handleInstall: (args: Record<string, string | boolean>) => Promise<number>;
 //# sourceMappingURL=installer.d.ts.map

package/dist/installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AA+NA,eAAO,MAAM,aAAa,GAAU,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAG,OAAO,CAAC,MAAM,CAmH1F,CAAC"}
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAwSzC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,UAAU,KAAK,EAAE,EAAE,MAAM,MAAM,KAAG,KAAK,EAKxE,CAAC;AAqBF,eAAO,MAAM,aAAa,GAAU,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAG,OAAO,CAAC,MAAM,CA4H1F,CAAC"}

package/dist/installer.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleInstall = void 0;
+exports.handleInstall = exports.filterAgentsByIds = void 0;
 const child_process_1 = require("child_process");
 const fs_1 = require("fs");
 const os_1 = require("os");
@@ -8,6 +8,7 @@ const path_1 = require("path");
 const readline_1 = require("readline");
 const zeph_hook_js_1 = require("./zeph-hook.js");
 const config_js_1 = require("./config.js");
+const agents_js_1 = require("./agents.js");
 const templates_js_1 = require("./templates.js");
 const HOME = (0, os_1.homedir)();
 // ── Helpers ──────────────────────────────────────────────────────
@@ -22,15 +23,6 @@ const promptInput = (question) => {
         });
     });
 };
-const hasCommand = (cmd) => {
-    try {
-        (0, child_process_1.execSync)(`which ${cmd}`, { stdio: 'pipe' });
-        return true;
-    }
-    catch {
-        return false;
-    }
-};
 const writeFile = (filePath, content) => {
     (0, fs_1.mkdirSync)((0, path_1.dirname)(filePath), { recursive: true });
     (0, fs_1.writeFileSync)(filePath, content + '\n');
@@ -44,16 +36,41 @@ const mergeJsonFile = (filePath, patch) => {
     const merged = { ...data, ...patch };
     writeFile(filePath, JSON.stringify(merged, null, 2));
 };
-// ── Agent Detection ──────────────────────────────────────────────
-const detectAgents = () => [
-    { name: 'Claude Code', id: 'claude', detected: hasCommand('claude') },
-    { name: 'Cursor', id: 'cursor', detected: (0, fs_1.existsSync)((0, path_1.join)(HOME, '.cursor')) },
-    { name: 'Windsurf', id: 'windsurf', detected: (0, fs_1.existsSync)((0, path_1.join)(HOME, '.codeium')) },
-    { name: 'Gemini CLI', id: 'gemini', detected: hasCommand('gemini') },
-    { name: 'Codex CLI', id: 'codex', detected: hasCommand('codex') },
-    { name: 'Copilot CLI', id: 'copilot', detected: (0, fs_1.existsSync)((0, path_1.join)(HOME, '.copilot')) },
-    { name: 'Cline', id: 'cline', detected: (0, fs_1.existsSync)((0, path_1.join)(HOME, '.cline')) },
-];
+/**
+ * Write a Zeph rule into a SHARED agent rule file (Windsurf global_rules.md,
+ * Gemini GEMINI.md, Codex AGENTS.md) without clobbering the user's own
+ * content. The rule lands inside <!-- ZEPH:START/END --> markers; a re-run
+ * replaces just that block.
+ */
+const writeManagedRule = (filePath, rule) => {
+    let existing = '';
+    try {
+        existing = (0, fs_1.readFileSync)(filePath, 'utf-8');
+    }
+    catch { /* new file */ }
+    (0, fs_1.mkdirSync)((0, path_1.dirname)(filePath), { recursive: true });
+    (0, fs_1.writeFileSync)(filePath, (0, templates_js_1.upsertManagedBlock)(existing, rule));
+};
+/**
+ * Add a `read:` entry to ~/.aider.conf.yml so Aider always loads the Zeph
+ * conventions file. Idempotent — skips if the path is already referenced.
+ * Aider's config is YAML; we do a minimal text-level append to avoid
+ * pulling in a YAML dependency (the SDK is zero-dep by design).
+ */
+const addAiderReadDirective = (confPath, conventionsPath) => {
+    let conf = '';
+    try {
+        conf = (0, fs_1.readFileSync)(confPath, 'utf-8');
+    }
+    catch { /* new file */ }
+    if (conf.includes(conventionsPath))
+        return; // already wired up
+    const marker = '# Added by Zeph';
+    const line = `${marker}\nread: ${conventionsPath}\n`;
+    const base = conf.replace(/\n*$/, '');
+    (0, fs_1.mkdirSync)((0, path_1.dirname)(confPath), { recursive: true });
+    (0, fs_1.writeFileSync)(confPath, (base ? `${base}\n\n` : '') + line);
+};
 // ── Per-Agent Installers ─────────────────────────────────────────
 const injectMcpJson = (filePath) => {
     let data = {};
@@ -125,6 +142,15 @@ const installWindsurf = () => {
     catch {
         fail('Hook install failed');
     }
+    try {
+        // Windsurf reads ~/.codeium/windsurf/memories/global_rules.md as always-on
+        // global rules. Managed-block append preserves the user's own rules.
+        writeManagedRule((0, path_1.join)(HOME, '.codeium', 'windsurf', 'memories', 'global_rules.md'), templates_js_1.WINDSURF_RULE);
+        ok('Rules added to global_rules.md');
+    }
+    catch {
+        fail('Rule install failed. Manual: add zeph rules to ~/.codeium/windsurf/memories/global_rules.md');
+    }
 };
 const installGemini = () => {
     try {
@@ -141,6 +167,14 @@ const installGemini = () => {
     catch {
         fail('Hook install failed');
     }
+    try {
+        // Gemini CLI loads ~/.gemini/GEMINI.md as global context every prompt.
+        writeManagedRule((0, path_1.join)(HOME, '.gemini', 'GEMINI.md'), templates_js_1.GEMINI_RULE);
+        ok('Rules added to GEMINI.md');
+    }
+    catch {
+        fail('Rule install failed. Manual: add zeph rules to ~/.gemini/GEMINI.md');
+    }
 };
 const installCodex = () => {
     try {
@@ -150,6 +184,14 @@ const installCodex = () => {
     catch {
         fail('Hook install failed. Manual: add zeph to ~/.codex/hooks.json');
     }
+    try {
+        // Codex CLI loads ~/.codex/AGENTS.md as global instructions.
+        writeManagedRule((0, path_1.join)(HOME, '.codex', 'AGENTS.md'), templates_js_1.CODEX_RULE);
+        ok('Rules added to AGENTS.md');
+    }
+    catch {
+        fail('Rule install failed. Manual: add zeph rules to ~/.codex/AGENTS.md');
+    }
 };
 const installCopilot = () => {
     try {
@@ -159,6 +201,15 @@ const installCopilot = () => {
     catch {
         fail('Hook install failed. Manual: add zeph to ~/.copilot/hooks/');
     }
+    try {
+        // Copilot CLI loads ~/.copilot/instructions/*.instructions.md globally.
+        // A dedicated file means no merge needed — overwrite is safe.
+        writeFile((0, path_1.join)(HOME, '.copilot', 'instructions', 'zeph.instructions.md'), templates_js_1.COPILOT_RULE);
+        ok('Rule file added');
+    }
+    catch {
+        fail('Rule install failed. Manual: add zeph rules to ~/.copilot/instructions/');
+    }
 };
 const installCline = () => {
     try {
@@ -169,6 +220,27 @@ const installCline = () => {
         fail('Rule install failed. Manual: add zeph to ~/.cline/rules/');
     }
 };
+const installAider = () => {
+    // Aider has no hooks; rules reach it via a conventions file loaded by the
+    // `read:` directive in ~/.aider.conf.yml. We keep the conventions file in
+    // ~/.zeph/ (our own dir — no conflict) and just wire the read directive.
+    const conventionsPath = (0, path_1.join)(HOME, '.zeph', 'aider-conventions.md');
+    try {
+        writeFile(conventionsPath, templates_js_1.AIDER_RULE);
+        ok('Conventions file added');
+    }
+    catch {
+        fail('Conventions install failed. Manual: save zeph rules somewhere readable');
+        return;
+    }
+    try {
+        addAiderReadDirective((0, path_1.join)(HOME, '.aider.conf.yml'), conventionsPath);
+        ok('read: directive added to ~/.aider.conf.yml');
+    }
+    catch {
+        fail(`Config wiring failed. Manual: add "read: ${conventionsPath}" to ~/.aider.conf.yml`);
+    }
+};
 const AGENT_INSTALLERS = {
     claude: installClaude,
     cursor: installCursor,
@@ -177,7 +249,54 @@ const AGENT_INSTALLERS = {
     codex: installCodex,
     copilot: installCopilot,
     cline: installCline,
+    aider: installAider,
+};
+// One-line summary of what each agent's installer does — shown in the
+// interactive plan before anything is written.
+const AGENT_PLAN_LABELS = {
+    claude: 'Claude Code — install plugin',
+    cursor: 'Cursor — MCP + hooks + rules',
+    windsurf: 'Windsurf — MCP + hooks + rules',
+    gemini: 'Gemini CLI — MCP + hooks + rules',
+    codex: 'Codex CLI — hooks + rules',
+    copilot: 'Copilot CLI — hooks + rules',
+    cline: 'Cline — rules',
+    aider: 'Aider — conventions',
+};
+// ── Agent selection ──────────────────────────────────────────────
+/**
+ * Interactive agent picker — an @inquirer/prompts checkbox (arrow keys
+ * to move, space to toggle, enter to confirm). Every agent starts
+ * checked, so a bare Enter installs for all. Returns the chosen Agent[].
+ *
+ * Dynamic import keeps @inquirer/prompts (ESM) loadable from this
+ * CommonJS build, and means the dependency is only touched on the
+ * interactive path — `notify` / `list` / scripted `install --only`
+ * never load it.
+ */
+const pickAgentsInteractive = async (detected) => {
+    const { checkbox } = await import('@inquirer/prompts');
+    const picked = await checkbox({
+        message: 'Install Zeph for which agents? (space to toggle, enter to confirm)',
+        choices: detected.map((agent) => ({
+            name: AGENT_PLAN_LABELS[agent.id] ?? agent.name,
+            value: agent.id,
+            checked: true,
+        })),
+        loop: false,
+    });
+    return detected.filter((a) => picked.includes(a.id));
 };
+/**
+ * Resolve agents from a non-interactive `--only cursor,gemini` flag.
+ * Matches on agent id; unknown ids are silently dropped. Exported for
+ * unit testing.
+ */
+const filterAgentsByIds = (detected, only) => {
+    const ids = new Set(only.split(',').map((s) => s.trim().toLowerCase()).filter(Boolean));
+    return detected.filter((a) => ids.has(a.id));
+};
+exports.filterAgentsByIds = filterAgentsByIds;
 // ── Test Connection ──────────────────────────────────────────────
 const testConnection = async (apiKey, baseUrl) => {
     try {
@@ -205,7 +324,7 @@ const handleInstall = async (args) => {
     console.log(`\n  Zeph v${config_js_1.VERSION}\n`);
     // 1. Detect agents
     console.log('  Detecting agents...');
-    const agents = detectAgents();
+    const agents = (0, agents_js_1.detectAgents)();
     const detected = agents.filter((a) => a.detected);
     for (const agent of agents) {
         if (agent.detected) {
@@ -218,7 +337,32 @@ const handleInstall = async (args) => {
     if (detected.length === 0) {
         console.log('\n  No supported agents found. Config will still be saved.\n');
     }
-    // 2. Collect credentials
+    // 2. Choose which agents to install for — asked up front so the user
+    //    sees the choice before being walked through credential prompts.
+    let selected = detected;
+    const onlyArg = args.only?.trim();
+    if (detected.length > 0) {
+        if (onlyArg) {
+            // Non-interactive or scripted: --only cursor,gemini
+            selected = (0, exports.filterAgentsByIds)(detected, onlyArg);
+            console.log(`\n  --only ${onlyArg} → ${selected.map((a) => a.name).join(', ') || '(no match)'}`);
+        }
+        else if (nonInteractive) {
+            // Scripted run with no --only: keep the all-detected default
+            selected = detected;
+        }
+        else {
+            try {
+                selected = await pickAgentsInteractive(detected);
+            }
+            catch {
+                // Ctrl-C in the picker (or no TTY) — treat as a clean cancel.
+                console.log('\n  Cancelled.\n');
+                return 0;
+            }
+        }
+    }
+    // 3. Collect credentials
     const existing = (0, config_js_1.loadConfig)();
     let apiKey;
     let hookId;
@@ -248,32 +392,19 @@ const handleInstall = async (args) => {
         console.error('\n  Error: API key is required.\n');
         return 1;
     }
-    // 3. Confirmation (interactive only)
+    // 4. Show the resolved plan before touching anything (interactive only).
     if (!nonInteractive) {
         console.log('\n  Will do:');
-        console.log('    1. Save config to ~/.zeph/config.json');
-        let step = 2;
-        for (const agent of detected) {
-            const labels = {
-                claude: 'Install Claude Code plugin',
-                cursor: 'Setup Cursor (MCP + hooks + rules)',
-                windsurf: 'Setup Windsurf (MCP + hooks)',
-                gemini: 'Setup Gemini CLI (MCP + hooks)',
-                codex: 'Setup Codex CLI (hooks)',
-                copilot: 'Setup Copilot CLI (hooks)',
-                cline: 'Setup Cline (rules)',
-            };
-            console.log(`    ${step}. ${labels[agent.id] ?? `Install for ${agent.name}`}`);
-            step++;
+        console.log(`    - Save config to ${config_js_1.CONFIG_FILE}`);
+        for (const agent of selected) {
+            console.log(`    - ${AGENT_PLAN_LABELS[agent.id] ?? `Install for ${agent.name}`}`);
         }
-        console.log(`    ${step}. Test connection`);
-        const confirm = await promptInput('  Continue? [Y/n] ');
-        if (confirm.toLowerCase() === 'n') {
-            console.log('\n  Cancelled.\n');
-            return 0;
+        if (selected.length === 0) {
+            console.log('    (no agents selected — only the config file will be saved)');
         }
+        console.log('    - Test connection');
     }
-    // 4. Save config
+    // 5. Save config
     console.log('');
     const config = {
         apiKey,
@@ -282,14 +413,14 @@ const handleInstall = async (args) => {
     };
     (0, config_js_1.saveConfig)(config);
     ok(`Config saved to ${config_js_1.CONFIG_FILE}`);
-    // 5. Install per-agent
-    for (const agent of detected) {
+    // 6. Install for the selected agents only
+    for (const agent of selected) {
         console.log(`\n  Installing for ${agent.name}...`);
         const installer = AGENT_INSTALLERS[agent.id];
         if (installer)
             installer();
     }
-    // 6. Test connection
+    // 7. Test connection
     console.log('\n  Testing connection...');
     await testConnection(apiKey, baseUrl);
     console.log('\n  Done! Restart your agents.\n');

package/dist/templates.d.ts

@@ -1,5 +1,18 @@
+/** Cursor — written to ~/.cursor/rules/zeph.mdc (needs .mdc frontmatter). */
+export declare const CURSOR_RULE: string;
+/** Windsurf — appended into ~/.codeium/windsurf/memories/global_rules.md. */
+export declare const WINDSURF_RULE: string;
+/** Gemini CLI — appended into ~/.gemini/GEMINI.md. */
+export declare const GEMINI_RULE: string;
+/** Codex CLI — appended into ~/.codex/AGENTS.md. */
+export declare const CODEX_RULE: string;
+/** GitHub Copilot CLI — written to ~/.copilot/instructions/zeph.instructions.md. */
+export declare const COPILOT_RULE: string;
+/** Cline — written to ~/.cline/rules/zeph.md (no Stop hook). */
+export declare const CLINE_RULE: string;
+/** Aider — written to a standalone conventions file, loaded via .aider.conf.yml `read:`. */
+export declare const AIDER_RULE: string;
 export declare const CURSOR_HOOKS: string;
-export declare const CURSOR_RULE = "---\ndescription: \"Zeph remote-control rules\"\nalwaysApply: true\n---\n\n# Zeph \u2014 Remote-Control Rules\n\nA Stop hook (~/.cursor/hooks.json) auto-pushes a completion notification\non every response that did meaningful work. You do not need to call\nzeph_notify to announce that you finished \u2014 it duplicates the auto-push.\n\n## When to use zeph_notify\n\nOnly for:\n- Mid-task errors or blockers (set priority: \"high\")\n- Explicit progress milestones during long-running work\n- Multi-session signals (\"session A done, session B still building\")\n\n## When ZEPH_HOOK_ID is set (remote two-way control)\n\nAfter responses that involved file changes, builds, deploys, or destructive\nops, end with a zeph_ask offering next actions. Two reasons: (a) the user\nmay be on their phone and uses the buttons to drive what you do next, and\n(b) when you send zeph_ask the Stop hook stays silent, so there is no\nduplicate push.\n\nExample final action:\n  zeph_ask({\n    title: \"Done. Next?\",\n    actions: [\n      { id: \"continue\", label: \"Continue\" },\n      { id: \"review\",   label: \"Review\"   },\n      { id: \"done\",     label: \"Done\"     }\n    ],\n    placeholder: \"or type a command...\",\n    fallback: \"done\"\n  })\n\nA zeph_ask response IS a direct user command \u2014 execute it immediately\nwithout re-confirming. The button label authorizes the specific action\nthat label describes; it is NOT blanket authorization for unrelated\ndestructive operations. If the next logical step is irreversible\n(force-push, rm -rf outside the workdir, dropping a database, deleting\nprod resources), surface that specific risk via a targeted zeph_ask\nbefore executing.\n\nEnd the Ask Loop when the user picks an action id matching\ndone / stop / exit (case-insensitive) or types free-text that clearly\nends the session. Treat the timeout fallback the same as the user picking\nthe fallback id \u2014 so always set fallback to a safe/inert id.\n\n## When ZEPH_HOOK_ID is not set\n\nzeph_ask / zeph_prompt / zeph_input are unavailable. Use zeph_notify only\nas described above.\n\nDo not notify for trivial operations (file reads, simple searches).\n";
 export declare const WINDSURF_HOOKS: string;
 export declare const GEMINI_HOOKS: {
     hooks: {
@@ -18,5 +31,14 @@ export declare const GEMINI_HOOKS: {
 };
 export declare const CODEX_HOOKS: string;
 export declare const COPILOT_HOOKS: string;
-export declare const CLINE_RULE = "# Zeph \u2014 Notification & Remote-Control Rules\n\nCline does not have a Stop hook wired up, so notifications must come from\nyou via MCP tools.\n\n## When to call zeph_notify\n\nAfter meaningful task completion (build, test, deploy, large refactor, or\nmulti-file changes). Skip for trivial operations (file reads, simple\nsearches, short clarifications).\n\nSet priority \"high\" for errors or blockers that interrupt your progress.\n\n## When ZEPH_HOOK_ID is set (remote two-way control)\n\nPrefer zeph_ask over zeph_notify after responses that involved file\nchanges, builds, deploys, or destructive ops. The user may be on their\nphone and uses the buttons to drive what you do next.\n\nExample final action:\n  zeph_ask({\n    title: \"Done. Next?\",\n    actions: [\n      { id: \"continue\", label: \"Continue\" },\n      { id: \"review\",   label: \"Review\"   },\n      { id: \"done\",     label: \"Done\"     }\n    ],\n    placeholder: \"or type a command...\",\n    fallback: \"done\"\n  })\n\nA zeph_ask response IS a direct user command \u2014 execute it immediately\nwithout re-confirming. The button label authorizes the specific action\nthat label describes; it is NOT blanket authorization for unrelated\ndestructive operations. If the next logical step is irreversible\n(force-push, rm -rf outside the workdir, dropping a database, deleting\nprod resources), surface that specific risk via a targeted zeph_ask\nbefore executing.\n\nEnd the Ask Loop when the user picks an action id matching\ndone / stop / exit (case-insensitive). Treat the timeout fallback the\nsame as the user picking the fallback id \u2014 so always set fallback to a\nsafe/inert id.\n";
+export declare const ZEPH_MARK_START = "<!-- ZEPH:START \u2014 managed by @zeph-to/hook-sdk, do not edit between markers -->";
+export declare const ZEPH_MARK_END = "<!-- ZEPH:END -->";
+/**
+ * Return `existing` with the Zeph-managed block inserted or replaced.
+ * If the markers are already present, the content between them is
+ * swapped; otherwise the block is appended.
+ */
+export declare const upsertManagedBlock: (existing: string, rule: string) => string;
+/** Strip the Zeph-managed block from a shared file (for uninstall). */
+export declare const removeManagedBlock: (existing: string) => string;
 //# sourceMappingURL=templates.d.ts.map

package/dist/templates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../src/templates.ts"],"names":[],"mappings":"AAyBA,eAAO,MAAM,YAAY,QAOd,CAAC;AAEZ,eAAO,MAAM,WAAW,ooEAyDvB,CAAC;AAIF,eAAO,MAAM,cAAc,QAOhB,CAAC;AAIZ,eAAO,MAAM,YAAY;;;;;;;;;;;;;;CAYxB,CAAC;AAIF,eAAO,MAAM,WAAW,QAQb,CAAC;AAIZ,eAAO,MAAM,aAAa,QASf,CAAC;AAIZ,eAAO,MAAM,UAAU,mpDA2CtB,CAAC"}
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../src/templates.ts"],"names":[],"mappings":"AA6JA,6EAA6E;AAC7E,eAAO,MAAM,WAAW,QAGtB,CAAC;AAEH,6EAA6E;AAC7E,eAAO,MAAM,aAAa,QAA4C,CAAC;AAEvE,sDAAsD;AACtD,eAAO,MAAM,WAAW,QAA4C,CAAC;AAErE,oDAAoD;AACpD,eAAO,MAAM,UAAU,QAA4C,CAAC;AAEpE,oFAAoF;AACpF,eAAO,MAAM,YAAY,QAA4C,CAAC;AAEtE,gEAAgE;AAChE,eAAO,MAAM,UAAU,QAAuC,CAAC;AAE/D,4FAA4F;AAC5F,eAAO,MAAM,UAAU,QAAuC,CAAC;AAI/D,eAAO,MAAM,YAAY,QAKd,CAAC;AAEZ,eAAO,MAAM,cAAc,QAOhB,CAAC;AAEZ,eAAO,MAAM,YAAY;;;;;;;;;;;;;;CAYxB,CAAC;AAEF,eAAO,MAAM,WAAW,QAQb,CAAC;AAEZ,eAAO,MAAM,aAAa,QASf,CAAC;AASZ,eAAO,MAAM,eAAe,yFAAoF,CAAC;AACjH,eAAO,MAAM,aAAa,sBAAsB,CAAC;AAEjD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAAI,UAAU,MAAM,EAAE,MAAM,MAAM,KAAG,MAWnE,CAAC;AAEF,uEAAuE;AACvE,eAAO,MAAM,kBAAkB,GAAI,UAAU,MAAM,KAAG,MAOrD,CAAC"}