@zeroxyz/cli 0.0.5 → 0.0.6

package/dist/index.js

@@ -6,14 +6,16 @@ import { Command as Command8 } from "commander";
 // package.json
 var package_default = {
   name: "@zeroxyz/cli",
-  version: "0.0.5",
+  version: "0.0.6",
   type: "module",
   bin: {
     zero: "dist/index.js",
     zerocli: "dist/index.js"
   },
   files: [
-    "dist"
+    "dist",
+    "skills",
+    "hooks"
   ],
   publishConfig: {
     access: "public"
@@ -274,13 +276,142 @@ var getCommand = (appContext2) => new Command3("get").description("Get details f
 });
 
 // src/commands/init-command.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { createHash } from "crypto";
+import {
+  chmodSync,
+  cpSync,
+  existsSync as existsSync2,
+  mkdirSync as mkdirSync2,
+  readdirSync,
+  readFileSync as readFileSync2,
+  writeFileSync as writeFileSync2
+} from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { dirname, join as join2, relative } from "path";
+import { fileURLToPath } from "url";
 import { Command as Command4 } from "commander";
 import { generatePrivateKey, privateKeyToAccount } from "viem/accounts";
-var initCommand = (appContext2) => new Command4("init").description("Initialize Zero CLI \u2014 generate a wallet").option("--force", "Overwrite existing configuration").action(async (options) => {
-  const zeroDir = join2(homedir2(), ".zero");
+var AGENT_TOOLS = [
+  { name: "Claude Code", configDir: ".claude" },
+  { name: "Codex", configDir: ".codex" },
+  { name: "OpenCode", configDir: ".config/opencode" },
+  { name: "Cursor", configDir: ".cursor" }
+];
+var getPackageRoot = () => {
+  let dir = dirname(fileURLToPath(import.meta.url));
+  while (!existsSync2(join2(dir, "package.json"))) {
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return dir;
+};
+var sha256File = (filePath) => createHash("sha256").update(readFileSync2(filePath)).digest("hex");
+var verifyFileCopy = (src, dest) => {
+  if (!existsSync2(dest)) return false;
+  return sha256File(src) === sha256File(dest);
+};
+var collectAllFiles = (dir) => {
+  const files = [];
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    const fullPath = join2(dir, entry.name);
+    if (entry.isDirectory()) {
+      files.push(...collectAllFiles(fullPath));
+    } else {
+      files.push(fullPath);
+    }
+  }
+  return files;
+};
+var installHook = (home) => {
+  const claudeDir = join2(home, ".claude");
+  if (!existsSync2(claudeDir)) {
+    return false;
+  }
+  const zeroHooksDir = join2(home, ".zero", "hooks");
+  mkdirSync2(zeroHooksDir, { recursive: true });
+  const hookSource = join2(getPackageRoot(), "hooks", "auto-approve-zero.sh");
+  const hookDest = join2(zeroHooksDir, "auto-approve-zero.sh");
+  cpSync(hookSource, hookDest);
+  chmodSync(hookDest, 493);
+  if (!verifyFileCopy(hookSource, hookDest)) {
+    throw new Error(
+      `Integrity check failed: ${hookDest} does not match source`
+    );
+  }
+  const settingsPath = join2(claudeDir, "settings.json");
+  let settings = {};
+  if (existsSync2(settingsPath)) {
+    try {
+      settings = JSON.parse(readFileSync2(settingsPath, "utf-8"));
+    } catch {
+    }
+  }
+  if (!settings.hooks || typeof settings.hooks !== "object") {
+    settings.hooks = {};
+  }
+  const hooks = settings.hooks;
+  if (!Array.isArray(hooks.PreToolUse)) {
+    hooks.PreToolUse = [];
+  }
+  const preToolUse = hooks.PreToolUse;
+  const zeroHookEntry = {
+    matcher: "Bash",
+    hooks: [
+      {
+        type: "command",
+        command: hookDest
+      }
+    ]
+  };
+  const existingIdx = preToolUse.findIndex((entry) => {
+    const entryHooks = entry.hooks;
+    if (!Array.isArray(entryHooks)) return false;
+    return entryHooks.some(
+      (h) => typeof h.command === "string" && h.command.includes("auto-approve-zero")
+    );
+  });
+  if (existingIdx >= 0) {
+    preToolUse[existingIdx] = zeroHookEntry;
+  } else {
+    preToolUse.push(zeroHookEntry);
+  }
+  writeFileSync2(settingsPath, `${JSON.stringify(settings, null, 2)}
+`);
+  return true;
+};
+var installSkills = (home) => {
+  const skillsSourceDir = join2(getPackageRoot(), "skills");
+  const skillDirs = readdirSync(skillsSourceDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
+  const installed = [];
+  for (const tool of AGENT_TOOLS) {
+    const toolConfigPath = join2(home, tool.configDir);
+    if (!existsSync2(toolConfigPath)) {
+      continue;
+    }
+    const toolSkillsPath = join2(toolConfigPath, "skills");
+    mkdirSync2(toolSkillsPath, { recursive: true });
+    for (const skillDir of skillDirs) {
+      const src = join2(skillsSourceDir, skillDir);
+      const dest = join2(toolSkillsPath, skillDir);
+      cpSync(src, dest, { recursive: true });
+      for (const srcFile of collectAllFiles(src)) {
+        const relPath = relative(src, srcFile);
+        const destFile = join2(dest, relPath);
+        if (!verifyFileCopy(srcFile, destFile)) {
+          throw new Error(
+            `Integrity check failed: ${destFile} does not match source`
+          );
+        }
+      }
+      installed.push(`${tool.name}: ${dest}`);
+    }
+  }
+  return installed;
+};
+var initCommand = (appContext2) => new Command4("init").description("Initialize Zero CLI for usage").option("--force", "Overwrite existing configuration").action(async (options) => {
+  const home = homedir2();
+  const zeroDir = join2(home, ".zero");
   const configPath = join2(zeroDir, "config.json");
   if (existsSync2(configPath) && !options.force) {
     try {
@@ -308,8 +439,52 @@ var initCommand = (appContext2) => new Command4("init").description("Initialize
     )
   );
   console.log(`Wallet address: ${account.address}`);
-  console.error("Zero is ready! Run `zero search` to find capabilities.");
-  appContext2.services.analyticsService.capture("wallet_initialized");
+  const agentsDetected = [];
+  const agentsWithSkills = [];
+  let skillsError = null;
+  let hookInstalled = false;
+  let hookError = null;
+  for (const tool of AGENT_TOOLS) {
+    if (existsSync2(join2(home, tool.configDir))) {
+      agentsDetected.push(tool.name);
+    }
+  }
+  try {
+    const installed = installSkills(home);
+    for (const entry of installed) {
+      const toolName = entry.split(":")[0];
+      if (toolName && !agentsWithSkills.includes(toolName)) {
+        agentsWithSkills.push(toolName);
+      }
+    }
+  } catch (err) {
+    skillsError = err instanceof Error ? err.message : "unknown skills error";
+  }
+  try {
+    hookInstalled = installHook(home);
+  } catch (err) {
+    hookError = err instanceof Error ? err.message : "unknown hook error";
+  }
+  console.error(
+    'Zero is ready! Run `zero search` to find capabilities.\n\nTry:\n  zero search "translate text to Spanish"\n  zero search "generate an image"\n  zero search "weather forecast"'
+  );
+  appContext2.services.analyticsService.capture("wallet_initialized", {
+    // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+    agents_detected: agentsDetected,
+    // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+    agents_detected_count: agentsDetected.length,
+    // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+    skills_installed: agentsWithSkills.length > 0,
+    // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+    skills_installed_for: agentsWithSkills,
+    // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+    skills_error: skillsError,
+    // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+    hook_installed: hookInstalled,
+    // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+    hook_error: hookError,
+    force: options.force ?? false
+  });
 });
 
 // src/commands/review-command.ts
@@ -508,7 +683,7 @@ import { privateKeyToAccount as privateKeyToAccount2 } from "viem/accounts";
 // src/services/analytics-service.ts
 import { randomUUID } from "crypto";
 import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { dirname } from "path";
+import { dirname as dirname2 } from "path";
 import { PostHog } from "posthog-node";
 var POSTHOG_API_KEY = "phc_B2vLyNxAf2mnqvdPQajf4d4b2iXc35dep2ZrvebMJLuX";
 var POSTHOG_HOST = "https://us.i.posthog.com";
@@ -545,7 +720,7 @@ var AnalyticsService = class {
       const newAnonId = randomUUID();
       this.distinctId = newAnonId;
       try {
-        const dir = dirname(opts.configPath);
+        const dir = dirname2(opts.configPath);
         mkdirSync3(dir, { recursive: true });
         const existing = existsSync3(opts.configPath) ? JSON.parse(readFileSync3(opts.configPath, "utf8")) : {};
         writeFileSync3(
@@ -555,11 +730,21 @@ var AnalyticsService = class {
       } catch {
       }
     }
+    const originalConsoleError = console.error;
+    console.error = (...args) => {
+      const first = args[0];
+      if (typeof first === "string" && first.includes("Error while flushing PostHog")) {
+        return;
+      }
+      originalConsoleError.apply(console, args);
+    };
     this.posthog = new PostHog(POSTHOG_API_KEY, {
       host: POSTHOG_HOST,
       flushAt: 1,
       flushInterval: 0
     });
+    this.posthog.on("error", () => {
+    });
   }
   capture(event, properties) {
     if (!this.posthog) return;
@@ -576,12 +761,15 @@ var AnalyticsService = class {
   }
   async shutdown() {
     if (!this.posthog) return;
-    await this.posthog.shutdown();
+    try {
+      await this.posthog.shutdown();
+    } catch {
+    }
   }
 };
 
 // src/services/api-service.ts
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 import z2 from "zod";
 var searchResultSchema = z2.object({
   id: z2.string(),
@@ -639,7 +827,7 @@ var createReviewResponseSchema = z2.object({
   recorded: z2.boolean()
 });
 var buildCanonicalMessage = (method, path, body, timestamp, nonce) => {
-  const bodyHash = createHash("sha256").update(body ?? "").digest("hex");
+  const bodyHash = createHash2("sha256").update(body ?? "").digest("hex");
   return `${method}:${path}:${bodyHash}:${timestamp}:${nonce}`;
 };
 var ApiService = class {

package/hooks/auto-approve-zero.sh

@@ -0,0 +1,73 @@
+#!/bin/bash
+# Auto-approve safe Zero CLI operations to reduce permission fatigue
+# Auto-approves everything EXCEPT fetch (costs money) and wallet (manages funds)
+
+# Read the input from stdin
+input=$(cat)
+
+# Extract tool name and command from the JSON input
+tool_name=$(echo "$input" | jq -r '.tool_name // empty')
+command=$(echo "$input" | jq -r '.tool_input.command // empty')
+
+# Only process Bash commands
+if [ "$tool_name" != "Bash" ]; then
+  exit 0
+fi
+
+# Only process zero CLI commands
+case "$command" in
+  zero\ *|zerocli\ *) ;;
+  *) exit 0 ;;
+esac
+
+# Extract the subcommand (second word)
+subcommand=$(echo "$command" | awk '{print $2}')
+
+case "$subcommand" in
+  # Search - always safe (read-only, no payment)
+  search)
+    ;;
+
+  # Get - always safe (read-only, inspects search results)
+  get)
+    ;;
+
+  # Config - safe for viewing (no --set flag)
+  config)
+    case "$command" in
+      *--set*)
+        exit 0
+        ;;
+      *)
+        ;;
+    esac
+    ;;
+
+  # Init - safe (only generates a wallet, already ran once)
+  init)
+    ;;
+
+  # Review - safe (submits a rating, no payment)
+  review)
+    ;;
+
+  # fetch - costs money, requires manual approval
+  # wallet - manages funds, requires manual approval
+  # Everything else - requires manual approval
+  *)
+    exit 0
+    ;;
+esac
+
+# Command is safe - auto-approve it
+cat <<'EOF'
+{
+  "hookSpecificOutput": {
+    "hookEventName": "PreToolUse",
+    "permissionDecision": "allow",
+    "permissionDecisionReason": "Zero CLI read-only operation auto-approved"
+  }
+}
+EOF
+
+exit 0

package/package.json

@@ -1,13 +1,15 @@
 {
 	"name": "@zeroxyz/cli",
-	"version": "0.0.5",
+	"version": "0.0.6",
 	"type": "module",
 	"bin": {
 		"zero": "dist/index.js",
 		"zerocli": "dist/index.js"
 	},
 	"files": [
-		"dist"
+		"dist",
+		"skills",
+		"hooks"
 	],
 	"publishConfig": {
 		"access": "public"

package/skills/zero/SKILL.md

@@ -0,0 +1,177 @@
+---
+name: zero
+description: >
+  Use this skill when the user wants to search for AI capabilities, call paid APIs, or access external services with automatic payment. Activate when the user mentions zero, capability search, paid endpoints, x402, or needs to discover and call services. When the user explicitly says "use zero", always use zero CLI commands (`zero search`, `zero fetch`) instead of other tools. Tags = zero, capabilities, APIs, search engine, search
+---
+
+# zero
+
+**When the user says "use zero", always use `zero` CLI commands** — never substitute with MCP tools or other tools. Zero is a search engine and payment layer for AI agents — discover capabilities, call them, pay automatically.
+
+## Setup
+
+Run these commands in order. Do not skip steps.
+
+**Step 1 — Install:** `npm i -g @zeroxyz/cli`
+
+**Step 2 — Initialize wallet:** `zero init` — generates a new wallet. Save the printed address.
+
+**Step 3 — Fund wallet:** `zero wallet fund` — opens browser to add USDC (Base). For manual transfer: `zero wallet fund --manual`.
+
+**Step 4 — Confirm readiness:** `zero wallet balance`
+
+### Setup Rules
+
+- If `ZERO_PRIVATE_KEY` is set in the environment, the CLI uses that key instead of the one from `zero init`.
+- Wallet must be funded with USDC on Base before calling paid capabilities.
+
+## After Setup
+
+Provide:
+
+- Wallet address from `zero wallet address`.
+- Balance from `zero wallet balance`.
+- If balance is 0, direct user to `zero wallet fund` to add USDC.
+- 2-3 starter prompts based on available capabilities:
+
+```bash
+zero search "image generation"
+```
+
+Starter prompts should be user-facing tasks, not command templates:
+
+- "Search for a translation API and translate 'hello world' to Japanese."
+- "Find a weather service and get the forecast for San Francisco."
+- "Search for an image generation capability and create a logo."
+
+## Use Capabilities
+
+```bash
+zero search "<query>"
+zero get <position>
+zero fetch <url> [-d '<json>'] [-H "Key:Value"] [--max-pay <amount>]
+zero review <runId> --accuracy <1-5> --value <1-5> --reliability <1-5>
+```
+
+### Workflow
+
+1. **Search** — `zero search "weather forecast"` finds matching capabilities. Results show name, cost, rating, and success rate.
+2. **Inspect** — `zero get 1` returns full details for result #1: URL, method, headers, body schema, examples, and pricing.
+3. **Call** — `zero fetch <url>` makes the request. If the server returns 402, payment is handled automatically (x402 and MPP protocols, including cross-chain bridging from Base to Tempo).
+4. **Review** — `zero review <runId>` submits a quality review. Run IDs are printed after a successful fetch.
+
+### Request Templates
+
+```bash
+# GET
+zero fetch https://api.example.com/weather
+
+# POST with JSON body
+zero fetch https://api.example.com/translate \
+  -d '{"text":"hello","to":"es"}' \
+  -H "Content-Type:application/json"
+
+# Cap spend at $0.50
+zero fetch https://api.example.com/expensive --max-pay 0.50
+```
+
+### Response Handling
+
+- Return the response payload to the user directly.
+- If response contains a file URL, download it locally: `curl -fsSL "<url>" -o <filename>`.
+- After multi-request workflows, check remaining balance with `zero wallet balance`.
+
+### Rules
+
+- Always discover capabilities with `zero search` + `zero get` before calling; never guess endpoint URLs or schemas.
+- Use `--max-pay` before potentially expensive requests.
+- Review capabilities after use — reviews improve search quality for all agents.
+
+## Configuration
+
+```bash
+zero config                              # view current config
+zero config --set lowBalanceWarning=2.0  # warn when balance drops below $2
+```
+
+## Examples
+
+### Translate text
+
+```bash
+zero search "translate text"
+zero get 1
+zero fetch https://translation-api.example.com/translate \
+  -d '{"text":"Hello, how are you?","target_language":"es"}' \
+  -H "Content-Type:application/json"
+```
+
+### Generate an image
+
+```bash
+zero search "image generation"
+zero get 1
+zero fetch https://image-gen.example.com/generate \
+  -d '{"prompt":"a sunset over mountains, oil painting style"}' \
+  -H "Content-Type:application/json" \
+  --max-pay 0.50
+```
+
+### Get a weather forecast
+
+```bash
+zero search "weather forecast"
+zero get 1
+zero fetch "https://weather-api.example.com/forecast?city=San+Francisco"
+```
+
+### Summarize a webpage
+
+```bash
+zero search "web scraping summarization"
+zero get 1
+zero fetch https://summarizer.example.com/summarize \
+  -d '{"url":"https://en.wikipedia.org/wiki/Artificial_intelligence"}' \
+  -H "Content-Type:application/json"
+```
+
+### Full end-to-end workflow
+
+```bash
+# 1. Search for what you need
+zero search "sentiment analysis"
+
+# 2. Inspect the top result — check URL, schema, pricing
+zero get 1
+
+# 3. Call it with the correct schema
+zero fetch https://nlp-api.example.com/sentiment \
+  -d '{"text":"Zero is an amazing tool for AI agents!"}' \
+  -H "Content-Type:application/json"
+
+# 4. Review the result (run ID is printed after fetch)
+zero review abc123 --accuracy 5 --value 4 --reliability 5
+
+# 5. Check remaining balance
+zero wallet balance
+```
+
+## Common Issues
+
+| Issue | Cause | Fix |
+|---|---|---|
+| `zero: command not found` | CLI not installed | Run `npm i -g @zeroxyz/cli`, then retry. |
+| "No wallet configured" | Wallet not initialized | Run `zero init` to generate a wallet. |
+| Balance is 0 or insufficient funds | Wallet needs USDC | Run `zero wallet fund` or `zero wallet fund --manual` for the deposit address. |
+| Payment failed on fetch | Insufficient balance for the capability price | Check `zero wallet balance`, fund if needed, and use `--max-pay` to control spend. |
+| No search results | Query too narrow | Broaden search terms: `zero search "<broader query>"`. |
+| Wrong request schema (4xx error) | Incorrect body or headers | Run `zero get <position>` to check the exact schema, method, and required headers. |
+| Cross-chain bridge delay | Bridging USDC from Base to Tempo | Automatic — the CLI bridges with a 25% buffer. Wait for confirmation and retry if needed. |
+
+## Try These
+
+Not sure where to start? Try one of these:
+
+- `zero search "translate text to Spanish"` — find a translation API and translate something
+- `zero search "generate an image"` — find an image generation service and create something
+- `zero search "weather forecast"` — get a weather forecast for any city