@zeroxyz/cli 1.0.0 → 1.2.0

package/dist/index.js

@@ -76582,7 +76582,7 @@ init_esm_shims();
 
 // package.json
 var package_default = {
-  version: "1.0.0"};
+  version: "1.2.0"};
 
 // src/app.ts
 init_esm_shims();
@@ -77578,7 +77578,7 @@ init_esm_shims();
 // ../sdk/dist/index.js
 init_esm_shims();
 
-// ../sdk/dist/chunk-SE2M66VR.js
+// ../sdk/dist/chunk-SLXRHGE4.js
 init_esm_shims();
 
 // ../../node_modules/.pnpm/viem@2.52.2_bufferutil@4.1.0_typescript@5.9.3_utf-8-validate@6.0.6_zod@4.3.6/node_modules/viem/_esm/index.js
@@ -144034,7 +144034,7 @@ var Payments = class {
   };
 };
 var package_default2 = {
-  version: "0.1.0"
+  version: "0.2.0"
 };
 var SDK_VERSION2 = package_default2.version;
 var userWalletDtoSchema = external_exports3.object({
@@ -144999,7 +144999,7 @@ var Wallet = class {
   };
 };
 var DEFAULT_BASE_URL = "https://api.zero.xyz";
-var DEFAULT_TIMEOUT_MS = 6e4;
+var DEFAULT_TIMEOUT_MS = 18e4;
 var DEFAULT_MAX_RETRIES = 2;
 var noopRefresh = async () => {
 };
@@ -145283,11 +145283,44 @@ var recordErrorFetchRun = async (client, opts, result) => {
   } catch {
   }
 };
+var recordTimeoutRun = async (client, opts, err, startedAt, capabilityIdRequested) => {
+  const result = errorFetchResult(
+    startedAt,
+    err.message,
+    "timeout",
+    capabilityIdRequested,
+    "network_error"
+  );
+  await recordErrorFetchRun(client, opts, result);
+};
+var sniffJsonShapeBytes = (buf) => {
+  let i = 0;
+  if (buf.length >= 3 && buf[0] === 239 && buf[1] === 187 && buf[2] === 191) {
+    i = 3;
+  }
+  while (i < buf.length && (buf[i] === 32 || buf[i] === 9 || buf[i] === 10 || buf[i] === 13)) {
+    i++;
+  }
+  if (i >= buf.length) return false;
+  return buf[i] === 123 || buf[i] === 91;
+};
+var withDefaultContentType = (headers, body) => {
+  if (!headers && body === void 0) return void 0;
+  const next = headers ? { ...headers } : {};
+  if (body === void 0) return next;
+  const hasContentType = Object.keys(next).some(
+    (k3) => k3.toLowerCase() === "content-type"
+  );
+  if (!hasContentType) {
+    next["content-type"] = typeof body === "string" || sniffJsonShapeBytes(body) ? "application/json" : "application/octet-stream";
+  }
+  return next;
+};
 var clientFetch = async (client, url4, opts = {}) => {
   const startedAt = Date.now();
   const capabilityIdRequested = opts.capabilityId !== void 0;
   const method = opts.method ?? (opts.body !== void 0 ? "POST" : "GET");
-  const probeHeaders = opts.headers ? { ...opts.headers } : void 0;
+  const probeHeaders = withDefaultContentType(opts.headers, opts.body);
   const requestInit = {
     method,
     headers: probeHeaders,
@@ -145304,6 +145337,16 @@ var clientFetch = async (client, url4, opts = {}) => {
   try {
     response = await configuredFetch(url4, requestInit);
   } catch (err) {
+    if (err instanceof ZeroTimeoutError) {
+      await recordTimeoutRun(
+        client,
+        opts,
+        err,
+        startedAt,
+        capabilityIdRequested
+      );
+      throw err;
+    }
     if (err instanceof ZeroError) throw err;
     const errMessage = err instanceof Error ? err.message : String(err);
     const result2 = errorFetchResult(
@@ -145325,8 +145368,9 @@ var clientFetch = async (client, url4, opts = {}) => {
           url: url4,
           method,
           // Fresh clone for the paid retry — same rationale as
-          // the probe-side clone above.
-          headers: opts.headers ? { ...opts.headers } : void 0,
+          // the probe-side clone above. Re-derives the default
+          // Content-Type so the paid leg matches the probe.
+          headers: withDefaultContentType(opts.headers, opts.body),
           body: opts.body,
           maxPay: opts.maxPay,
           account: opts.account,
@@ -145362,6 +145406,15 @@ var clientFetch = async (client, url4, opts = {}) => {
           );
           await recordErrorFetchRun(client, opts, result2);
           return result2;
+        } else if (err instanceof ZeroTimeoutError) {
+          await recordTimeoutRun(
+            client,
+            opts,
+            err,
+            startedAt,
+            capabilityIdRequested
+          );
+          throw err;
         } else {
           throw err;
         }
@@ -146367,7 +146420,7 @@ var fetchCommand = (appContext) => new Command("fetch").description(
   "Read the request body from stdin (equivalent to `-d @-`)."
 ).option("-H, --header <header...>", "Headers in Key:Value format").option("--max-pay <amount>", "Maximum per-call spend limit (USDC)").option(
   "--timeout <seconds>",
-  "Per-request timeout in seconds, overriding the default (60). Applies to each HTTP leg of the call (probe and paid retry), not as a wall-clock deadline."
+  "Per-request timeout in seconds, overriding the default (180). Applies to each HTTP leg of the call (probe and paid retry), not as a wall-clock deadline."
 ).option(
   "--capability <id>",
   "Bind this fetch to a capability (uid or slug) so a reviewable run is recorded even without a prior `zero search`"
@@ -146858,29 +146911,140 @@ var formatRating = (rating) => {
   return `${successPct} success, ${reviews} reviews`;
 };
 var asNode = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : null;
-var placeholderFor = (fieldName, propSchema) => {
+var schemaType = (node) => {
+  const t = node?.type;
+  if (typeof t === "string") return t;
+  if (Array.isArray(t)) {
+    const first = t.find((x2) => typeof x2 === "string" && x2 !== "null");
+    return typeof first === "string" ? first : void 0;
+  }
+  return void 0;
+};
+var coerceToType = (value, type2) => {
+  if (typeof value !== "string") return value;
+  if (type2 === "number" || type2 === "integer") {
+    const n = Number(value);
+    return value.trim() !== "" && Number.isFinite(n) ? n : value;
+  }
+  if (type2 === "boolean") {
+    if (value === "true") return true;
+    if (value === "false") return false;
+  }
+  return value;
+};
+var sampleValueFor = (fieldName, propSchema) => {
   const node = asNode(propSchema);
+  const type2 = schemaType(node);
   const example = node?.example ?? node?.default;
-  if (typeof example === "string") return example;
-  if (typeof example === "number" || typeof example === "boolean") {
-    return String(example);
+  if (example !== void 0 && example !== null) {
+    return coerceToType(example, type2);
+  }
+  switch (type2) {
+    case "number":
+    case "integer":
+      return 0;
+    case "boolean":
+      return false;
+    case "array":
+      return [];
+    case "object":
+      return {};
+    default:
+      return `<${fieldName.toUpperCase()}>`;
   }
-  return `<${fieldName.toUpperCase()}>`;
 };
+var placeholderFor = (fieldName, propSchema) => String(sampleValueFor(fieldName, propSchema));
 var extractInputEnvelope = (bodySchema, method) => {
-  if (!bodySchema) return {};
-  const props = asNode(bodySchema.properties);
+  const root = asNode(bodySchema);
+  if (!root) return {};
+  const props = asNode(root.properties);
   if (!props) return {};
   const inputProps = asNode(asNode(props.input)?.properties);
   if (inputProps) {
     return {
-      queryParams: asNode(asNode(inputProps.queryParams)?.properties) ?? void 0,
-      body: asNode(asNode(inputProps.body)?.properties) ?? void 0
+      queryParams: asNode(inputProps.queryParams) ?? void 0,
+      body: asNode(inputProps.body) ?? void 0
     };
   }
   const upperMethod = method.toUpperCase();
   const isGetLike = upperMethod === "GET" || upperMethod === "DELETE";
-  return isGetLike ? { queryParams: props } : { body: props };
+  return isGetLike ? { queryParams: root } : { body: root };
+};
+var schemaTypeLabel = (node) => {
+  const t = node.type;
+  if (typeof t === "string") return t;
+  if (Array.isArray(t)) {
+    const parts = t.filter((x2) => typeof x2 === "string");
+    return parts.length > 0 ? parts.join(" | ") : "any";
+  }
+  return "any";
+};
+var constraintHint = (node) => {
+  const num2 = (k3) => typeof node[k3] === "number" ? node[k3] : void 0;
+  const min = num2("minimum");
+  const max = num2("maximum");
+  if (min !== void 0 && max !== void 0) return `range: ${min}..${max}`;
+  if (min !== void 0) return `min: ${min}`;
+  if (max !== void 0) return `max: ${max}`;
+  const minLen = num2("minLength");
+  const maxLen = num2("maxLength");
+  if (minLen !== void 0 && maxLen !== void 0)
+    return `length: ${minLen}..${maxLen}`;
+  if (maxLen !== void 0) return `maxLength: ${maxLen}`;
+  if (minLen !== void 0) return `minLength: ${minLen}`;
+  return null;
+};
+var renderParam = (name, propSchema, required3) => {
+  const node = asNode(propSchema) ?? {};
+  const attrs = [schemaTypeLabel(node)];
+  if (required3) attrs.push("required");
+  if (node.default !== void 0)
+    attrs.push(`default: ${JSON.stringify(node.default)}`);
+  if (Array.isArray(node.enum))
+    attrs.push(`one of: ${node.enum.map((v) => String(v)).join(" | ")}`);
+  const hint = constraintHint(node);
+  if (hint) attrs.push(hint);
+  const lines = [`    ${name} (${attrs.join(", ")})`];
+  const desc = typeof node.description === "string" ? node.description.trim() : "";
+  if (desc) lines.push(`      ${desc}`);
+  return lines;
+};
+var renderProps = (node) => {
+  const props = node ? asNode(node.properties) : null;
+  if (!props) return [];
+  const entries = Object.entries(props);
+  if (entries.length === 0) return [];
+  const requiredSet = new Set(
+    Array.isArray(node?.required) ? node.required.filter((x2) => typeof x2 === "string") : []
+  );
+  return entries.flatMap(
+    ([name, schema]) => renderParam(name, schema, requiredSet.has(name))
+  );
+};
+var buildSchemaSection = (capability) => {
+  const { queryParams, body } = extractInputEnvelope(
+    capability.bodySchema,
+    capability.method
+  );
+  return [...renderProps(queryParams), ...renderProps(body)];
+};
+var buildResponseSection = (capability) => {
+  const rs = asNode(capability.responseSchema);
+  if (!rs) return [];
+  if (rs.example !== void 0) {
+    const example = JSON.stringify(rs.example);
+    const truncated = example.length > 300 ? `${example.slice(0, 300)}\u2026` : example;
+    return ["  Returns (example):", `    ${truncated}`];
+  }
+  const props = asNode(rs.properties);
+  if (props) {
+    const fields = Object.entries(props).map(
+      ([k3, v]) => `${k3}: ${schemaTypeLabel(asNode(v) ?? {})}`
+    );
+    if (fields.length > 0)
+      return ["  Returns:", `    { ${fields.join(", ")} }`];
+  }
+  return [];
 };
 var buildTryItExample = (capability) => {
   const method = capability.method.toUpperCase();
@@ -146894,7 +147058,8 @@ var buildTryItExample = (capability) => {
     ([k3, v]) => `-H "${k3}: ${v}"  # [caller-provided]`
   );
   if (method === "GET" || queryParams && !body) {
-    const qs = queryParams ? Object.entries(queryParams).map(
+    const qpProps = queryParams ? asNode(queryParams.properties) : null;
+    const qs = qpProps ? Object.entries(qpProps).map(
       ([k3, schema]) => `${encodeURIComponent(k3)}=${encodeURIComponent(placeholderFor(k3, schema))}`
     ).join("&") : "";
     const url4 = qs ? `${capability.url}?${qs}` : capability.url;
@@ -146908,15 +147073,16 @@ var buildTryItExample = (capability) => {
     }
     if (!queryParams && method === "GET") {
       lines.push(
-        "  # bodySchema did not expose queryParams \u2014 call the URL as-is or inspect the raw schema above."
+        "  # bodySchema did not expose queryParams \u2014 call the URL as-is."
       );
     }
     return lines;
   }
-  const samplePayload = body ? Object.fromEntries(
-    Object.entries(body).map(([k3, schema]) => [
+  const bodyProps = body ? asNode(body.properties) : null;
+  const samplePayload = bodyProps ? Object.fromEntries(
+    Object.entries(bodyProps).map(([k3, schema]) => [
       k3,
-      placeholderFor(k3, schema)
+      sampleValueFor(k3, schema)
     ])
   ) : null;
   const bodyJson = samplePayload ? JSON.stringify(samplePayload) : "<BODY_JSON>";
@@ -146924,9 +147090,9 @@ var buildTryItExample = (capability) => {
   if (method !== "POST") lines.push(`    -X ${method} \\`);
   for (const h2 of headerFlags) lines.push(`    ${h2} \\`);
   lines.push(`    -d '${bodyJson}'`);
-  if (!body) {
+  if (!bodyProps) {
     lines.push(
-      "  # bodySchema did not expose input.body \u2014 replace <BODY_JSON> with the exact shape shown above."
+      "  # bodySchema did not expose input.body \u2014 replace <BODY_JSON> with the documented request shape."
     );
   }
   return lines;
@@ -146948,6 +147114,12 @@ var formatCapability = (capability) => {
       lines.push(`    ${promptLine}`);
     }
   }
+  const schemaLines = buildSchemaSection(capability);
+  if (schemaLines.length > 0) {
+    lines.push("", "Parameters:");
+    lines.push(...schemaLines);
+  }
+  lines.push(...buildResponseSection(capability));
   lines.push(...buildTryItExample(capability));
   return lines.join("\n");
 };
@@ -147020,9 +147192,293 @@ var getCommand = (appContext) => new Command("get").description(
 
 // src/commands/init-command.ts
 init_esm_shims();
-var INIT_DEPRECATION_MESSAGE = "The recommended way to install Zero and initialize its skill and hooks is via Agent Plugins. See the Zero agent plugin at github.com/officialzeroxyz/zero-plugins. If you need to install Zero manually you can find the binary at https://releases.zero.xyz/latest/zero-<os>-<arch> (one of: zero-macos-arm64, zero-macos-x64, zero-linux-x64, zero-linux-arm64, zero-win-x64.exe) or use npm to install it globally `npm i -g @zeroxyz/cli@latest`. You can find the Zero skill at https://www.zero.xyz/SKILL.md where it can be manually configured with your agent.";
-var initCommand = (_appContext) => new Command("init").description("Deprecated \u2014 install Zero via Agent Plugins").allowExcessArguments(true).allowUnknownOption(true).action(() => {
-  console.log(INIT_DEPRECATION_MESSAGE);
+
+// src/util/install-banner.ts
+init_esm_shims();
+var colorsEnabled = () => {
+  if (process.env.NO_COLOR) return false;
+  if (process.env.FORCE_COLOR) return true;
+  return Boolean(process.stdout.isTTY);
+};
+var wrap5 = (code, text) => colorsEnabled() ? `\x1B[${code}m${text}\x1B[0m` : text;
+var color = {
+  bold: (s) => wrap5("1", s),
+  dim: (s) => wrap5("2", s),
+  cyan: (s) => wrap5("36", s),
+  magenta: (s) => wrap5("35", s),
+  green: (s) => wrap5("32", s),
+  yellow: (s) => wrap5("33", s),
+  red: (s) => wrap5("31", s),
+  gray: (s) => wrap5("90", s),
+  boldCyan: (s) => wrap5("1;36", s),
+  boldMagenta: (s) => wrap5("1;35", s),
+  boldGreen: (s) => wrap5("1;32", s),
+  boldRed: (s) => wrap5("1;31", s)
+};
+var supportsUnicode = () => {
+  if (process.platform !== "win32") return true;
+  return Boolean(
+    process.env.WT_SESSION || process.env.TERM_PROGRAM === "vscode"
+  );
+};
+var SYMBOLS = supportsUnicode() ? { check: "\u2713", arrow: "\u203A", warn: "!" } : { check: "OK", arrow: ">", warn: "!" };
+var stepSuccess = (label, detail) => {
+  const line = detail ? `  ${color.boldGreen(SYMBOLS.check)} ${label}  ${color.dim(detail)}` : `  ${color.boldGreen(SYMBOLS.check)} ${label}`;
+  console.log(line);
+};
+var stepWarn = (label, detail) => {
+  const line = detail ? `  ${color.yellow(SYMBOLS.warn)} ${label}  ${color.dim(detail)}` : `  ${color.yellow(SYMBOLS.warn)} ${label}`;
+  console.log(line);
+};
+var stepSkip = (label, detail) => {
+  const line = detail ? `  ${color.gray(SYMBOLS.arrow)} ${color.dim(`${label}  ${detail}`)}` : `  ${color.gray(SYMBOLS.arrow)} ${color.dim(label)}`;
+  console.log(line);
+};
+var stepInfo = (message2) => {
+  console.log(`      ${color.gray("\xB7")} ${color.dim(message2)}`);
+};
+var sectionDivider = () => {
+  console.log("");
+  console.log(color.gray("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log("");
+};
+
+// src/commands/init-command.ts
+var SKILL_DIRS = [".claude/skills", ".agents/skills"];
+var ZERO_SANDBOX_DOMAIN = "*.zero.xyz";
+var PLUGIN_HOOKS_ROOT = "${CLAUDE_PLUGIN_ROOT}/hooks";
+var SCRIPT_NAME_PATTERN = /\$\{CLAUDE_PLUGIN_ROOT\}\/hooks\/([a-z0-9][a-z0-9-]*\.sh)/;
+var fetchText = async (url4) => {
+  const res = await fetch(url4);
+  if (!res.ok) {
+    throw new Error(`GET ${url4} failed with ${res.status}`);
+  }
+  return await res.text();
+};
+var entryScriptNames = (entry) => {
+  const names = [];
+  for (const hook of entry.hooks ?? []) {
+    if (typeof hook.command !== "string") continue;
+    const match = hook.command.match(SCRIPT_NAME_PATTERN);
+    if (match?.[1]) names.push(match[1]);
+  }
+  return names;
+};
+var expandHome = (path3, home) => {
+  if (path3 === "~") return home;
+  if (path3.startsWith("~/")) return join(home, path3.slice(2));
+  return path3;
+};
+var installSkill = (skillsDirs, skillMd, verbose) => {
+  const installed = [];
+  for (const dir of skillsDirs) {
+    const dest = join(dir, "zero");
+    try {
+      mkdirSync(dest, { recursive: true });
+      writeFileSync(join(dest, "SKILL.md"), skillMd);
+      installed.push(join(dest, "SKILL.md"));
+      if (verbose) stepInfo(`wrote ${join(dest, "SKILL.md")}`);
+    } catch (err) {
+      stepWarn(
+        `Could not write the skill under ${dir}`,
+        err instanceof Error ? err.message : String(err)
+      );
+    }
+  }
+  return installed;
+};
+var installHookScripts = async (home, hooksJson, webBase, verbose) => {
+  const names = /* @__PURE__ */ new Set();
+  for (const entries of Object.values(hooksJson.hooks)) {
+    for (const entry of entries ?? []) {
+      for (const name of entryScriptNames(entry)) names.add(name);
+    }
+  }
+  if (names.size === 0) {
+    throw new Error("hooks.json declared no recognizable hook scripts");
+  }
+  const hooksDir = join(home, ".zero", "hooks");
+  mkdirSync(hooksDir, { recursive: true });
+  return await Promise.all(
+    [...names].map(async (name) => {
+      const body = await fetchText(`${webBase}/hooks/${name}`);
+      const dest = join(hooksDir, name);
+      writeFileSync(dest, body);
+      chmodSync(dest, 493);
+      if (verbose) stepInfo(`wrote ${dest}`);
+      return name;
+    })
+  );
+};
+var registerHooksInClaudeSettings = (home, hooksJson, verbose) => {
+  const hooksDir = join(home, ".zero", "hooks");
+  const settingsPath = join(home, ".claude", "settings.json");
+  let settings = {};
+  if (existsSync(settingsPath)) {
+    try {
+      settings = JSON.parse(readFileSync(settingsPath, "utf-8"));
+    } catch {
+      stepWarn(
+        "Hooks not registered",
+        `${settingsPath} is not valid JSON \u2014 fix it and re-run \`zero init\``
+      );
+      return false;
+    }
+  }
+  if (!settings.hooks || typeof settings.hooks !== "object") {
+    settings.hooks = {};
+  }
+  const hooks = settings.hooks;
+  for (const [event, entries] of Object.entries(hooksJson.hooks)) {
+    for (const entry of entries ?? []) {
+      const scripts = entryScriptNames(entry);
+      if (scripts.length === 0) {
+        if (verbose) {
+          stepInfo(`${event}: entry has no plugin hook script \u2014 skipped`);
+        }
+        continue;
+      }
+      const rewritten = {
+        ...entry,
+        hooks: (entry.hooks ?? []).map((hook) => ({
+          ...hook,
+          command: typeof hook.command === "string" ? hook.command.replaceAll(PLUGIN_HOOKS_ROOT, hooksDir) : hook.command
+        }))
+      };
+      if (!Array.isArray(hooks[event])) hooks[event] = [];
+      const list2 = hooks[event];
+      const existingIdx = list2.findIndex((existing) => {
+        const existingHooks = existing?.hooks;
+        if (!Array.isArray(existingHooks)) return false;
+        return existingHooks.some(
+          (h2) => typeof h2.command === "string" && scripts.some((s) => h2.command.includes(s))
+        );
+      });
+      if (existingIdx >= 0) {
+        list2[existingIdx] = rewritten;
+        if (verbose) stepInfo(`${event}: ${scripts.join(", ")} entry replaced`);
+      } else {
+        list2.push(rewritten);
+        if (verbose) stepInfo(`${event}: ${scripts.join(", ")} entry appended`);
+      }
+    }
+  }
+  if (!settings.sandbox || typeof settings.sandbox !== "object") {
+    settings.sandbox = {};
+  }
+  const sandbox = settings.sandbox;
+  if (!sandbox.network || typeof sandbox.network !== "object") {
+    sandbox.network = {};
+  }
+  const network = sandbox.network;
+  if (!Array.isArray(network.allowedDomains)) {
+    network.allowedDomains = [];
+  }
+  const allowedDomains = network.allowedDomains;
+  if (!allowedDomains.includes(ZERO_SANDBOX_DOMAIN)) {
+    allowedDomains.push(ZERO_SANDBOX_DOMAIN);
+    if (verbose) {
+      stepInfo(`sandbox.network.allowedDomains += ${ZERO_SANDBOX_DOMAIN}`);
+    }
+  }
+  mkdirSync(join(home, ".claude"), { recursive: true });
+  writeFileSync(settingsPath, `${JSON.stringify(settings, null, 2)}
+`);
+  return true;
+};
+var runInit = async (appContext, options = {}) => {
+  const verbose = options.verbose ?? false;
+  appContext.services.analyticsService.capture("init_started", {});
+  let currentStep = "fetch";
+  try {
+    console.log("");
+    console.log(`  ${color.boldCyan("Installing Zero")}`);
+    console.log("");
+    console.log(color.gray("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+    console.log("");
+    const home = homedir();
+    const webBase = appContext.env.ZERO_WEB_URL;
+    const [skillMd, hooksJsonRaw] = await Promise.all([
+      fetchText(`${webBase}/SKILL.md`),
+      fetchText(`${webBase}/hooks.json`)
+    ]);
+    let hooksJson;
+    try {
+      hooksJson = JSON.parse(hooksJsonRaw);
+    } catch {
+      throw new Error(`${webBase}/hooks.json is not valid JSON`);
+    }
+    if (!hooksJson?.hooks || typeof hooksJson.hooks !== "object") {
+      throw new Error(`${webBase}/hooks.json has no "hooks" object`);
+    }
+    if (verbose) {
+      stepInfo(`fetched ${webBase}/SKILL.md and ${webBase}/hooks.json`);
+    }
+    currentStep = "skill";
+    const skillsDirs = [
+      .../* @__PURE__ */ new Set([
+        ...SKILL_DIRS.map((dir) => join(home, dir)),
+        ...(options.skillsDir ?? []).map((dir) => expandHome(dir, home))
+      ])
+    ];
+    const skillsInstalled = installSkill(skillsDirs, skillMd, verbose);
+    if (skillsInstalled.length === 0) {
+      throw new Error("could not write the Zero skill to any skills directory");
+    }
+    stepSuccess("Skill installed", `${skillsInstalled.length} locations`);
+    currentStep = "hooks";
+    const hookScriptsInstalled = await installHookScripts(
+      home,
+      hooksJson,
+      webBase,
+      verbose
+    );
+    stepSuccess("Hook scripts installed", "~/.zero/hooks");
+    currentStep = "settings";
+    const settingsRegistered = registerHooksInClaudeSettings(
+      home,
+      hooksJson,
+      verbose
+    );
+    if (settingsRegistered) {
+      stepSuccess("Hooks registered", "~/.claude/settings.json");
+    }
+    currentStep = "complete";
+    appContext.services.analyticsService.capture("init_completed", {
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      skills_installed: skillsInstalled,
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      skills_installed_count: skillsInstalled.length,
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      hook_scripts_installed: hookScriptsInstalled,
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      settings_registered: settingsRegistered
+    });
+    sectionDivider();
+    console.log(`  ${color.boldGreen("Zero is set up.")}`);
+    console.log(
+      `  ${color.dim("Next: sign in with `zero auth login` \u2014 it prints a URL to approve in your browser.")}`
+    );
+    console.log("");
+    return { skillsInstalled, hookScriptsInstalled, settingsRegistered };
+  } catch (err) {
+    appContext.services.analyticsService.capture("init_failed", {
+      step: currentStep,
+      error: truncateError(err instanceof Error ? err.message : String(err))
+    });
+    throw err;
+  }
+};
+var initCommand = (appContext) => new Command("init").description(
+  "Install the Zero skill and hooks for the agent harnesses on this machine"
+).option(
+  "-v, --verbose",
+  "Explain why each install step was taken or skipped"
+).option(
+  "--skills-dir <dir...>",
+  "Additional skills directories to install the skill into, for harnesses with bespoke locations (e.g. ~/.kiro/skills). ~/.claude/skills and ~/.agents/skills are always written. Note: `zero uninstall` only cleans the default locations."
+).action(async (options) => {
+  await runInit(appContext, options);
 });
 
 // src/commands/review-command.ts
@@ -147288,58 +147744,6 @@ Examples:
 
 // src/commands/search-command.ts
 init_esm_shims();
-
-// src/util/install-banner.ts
-init_esm_shims();
-var colorsEnabled = () => {
-  if (process.env.NO_COLOR) return false;
-  if (process.env.FORCE_COLOR) return true;
-  return Boolean(process.stdout.isTTY);
-};
-var wrap5 = (code, text) => colorsEnabled() ? `\x1B[${code}m${text}\x1B[0m` : text;
-var color = {
-  bold: (s) => wrap5("1", s),
-  dim: (s) => wrap5("2", s),
-  cyan: (s) => wrap5("36", s),
-  magenta: (s) => wrap5("35", s),
-  green: (s) => wrap5("32", s),
-  yellow: (s) => wrap5("33", s),
-  red: (s) => wrap5("31", s),
-  gray: (s) => wrap5("90", s),
-  boldCyan: (s) => wrap5("1;36", s),
-  boldMagenta: (s) => wrap5("1;35", s),
-  boldGreen: (s) => wrap5("1;32", s),
-  boldRed: (s) => wrap5("1;31", s)
-};
-var supportsUnicode = () => {
-  if (process.platform !== "win32") return true;
-  return Boolean(
-    process.env.WT_SESSION || process.env.TERM_PROGRAM === "vscode"
-  );
-};
-var SYMBOLS = supportsUnicode() ? { check: "\u2713", arrow: "\u203A", warn: "!" } : { check: "OK", arrow: ">", warn: "!" };
-var stepSuccess = (label, detail) => {
-  const line = detail ? `  ${color.boldGreen(SYMBOLS.check)} ${label}  ${color.dim(detail)}` : `  ${color.boldGreen(SYMBOLS.check)} ${label}`;
-  console.log(line);
-};
-var stepWarn = (label, detail) => {
-  const line = `  ${color.yellow(SYMBOLS.warn)} ${label}  ${color.dim(detail)}` ;
-  console.log(line);
-};
-var stepSkip = (label, detail) => {
-  const line = detail ? `  ${color.gray(SYMBOLS.arrow)} ${color.dim(`${label}  ${detail}`)}` : `  ${color.gray(SYMBOLS.arrow)} ${color.dim(label)}`;
-  console.log(line);
-};
-var stepInfo = (message2) => {
-  console.log(`      ${color.gray("\xB7")} ${color.dim(message2)}`);
-};
-var sectionDivider = () => {
-  console.log("");
-  console.log(color.gray("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  console.log("");
-};
-
-// src/commands/search-command.ts
 var DEFAULT_MAX_COST_USD = "30";
 var formatReviewCount2 = (count) => {
   if (count >= 1e3) return `${(count / 1e3).toFixed(1)}k`;
@@ -147528,8 +147932,12 @@ var AGENT_TOOLS = [
   },
   { name: "Cursor", detectDir: ".cursor", skillsDir: ".cursor/skills" }
 ];
-var HOOK_FILES = ["auto-approve-zero.sh", "zero-context.sh"];
-var ZERO_SANDBOX_DOMAIN = "*.zero.xyz";
+var HOOK_FILES = [
+  "auto-approve-zero.sh",
+  "zero-context.sh",
+  "ensure-runner.sh"
+];
+var ZERO_SANDBOX_DOMAIN2 = "*.zero.xyz";
 var LEGACY_SKILL_NAMES = ["zero"];
 var removeSkills = (home, verbose = false) => {
   const skillNames = LEGACY_SKILL_NAMES;
@@ -147604,7 +148012,8 @@ var stripZeroFromSettings = (settings, verbose) => {
   if (hooks) {
     changed = removeHookEntries(hooks, "PreToolUse", "auto-approve-zero", verbose) || changed;
     changed = removeHookEntries(hooks, "UserPromptSubmit", "zero-context", verbose) || changed;
-    for (const key of ["PreToolUse", "UserPromptSubmit"]) {
+    changed = removeHookEntries(hooks, "SessionStart", "ensure-runner", verbose) || changed;
+    for (const key of ["PreToolUse", "UserPromptSubmit", "SessionStart"]) {
       const arr = hooks[key];
       if (Array.isArray(arr) && arr.length === 0) delete hooks[key];
     }
@@ -147614,11 +148023,11 @@ var stripZeroFromSettings = (settings, verbose) => {
   const network = sandbox?.network && typeof sandbox.network === "object" ? sandbox.network : null;
   if (network && Array.isArray(network.allowedDomains)) {
     const domains = network.allowedDomains;
-    const next = domains.filter((d3) => d3 !== ZERO_SANDBOX_DOMAIN);
+    const next = domains.filter((d3) => d3 !== ZERO_SANDBOX_DOMAIN2);
     if (next.length !== domains.length) {
       changed = true;
       if (verbose) {
-        stepInfo(`sandbox.network.allowedDomains -= ${ZERO_SANDBOX_DOMAIN}`);
+        stepInfo(`sandbox.network.allowedDomains -= ${ZERO_SANDBOX_DOMAIN2}`);
       }
       if (next.length === 0) {
         delete network.allowedDomains;
@@ -148648,7 +149057,7 @@ var createApp = (appContext) => {
       command: actionCommand.name()
     });
   });
-  program2.addCommand(initCommand());
+  program2.addCommand(initCommand(appContext));
   program2.addCommand(uninstallCommand(appContext));
   program2.addCommand(searchCommand(appContext));
   program2.addCommand(getCommand(appContext));

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@zeroxyz/cli",
-	"version": "1.0.0",
+	"version": "1.2.0",
 	"type": "module",
 	"bin": {
 		"zero": "dist/index.js",