create-metamynd-agent 0.1.0 → 0.2.0

package/index.mjs

@@ -12,13 +12,13 @@
 //   npx create-metamynd-agent
 //   npx create-metamynd-agent --api http://localhost:9926/api/v1 --email you@x.com \
 //       --name "Support Bot" --scope flight-purchase --per-txn-max 500 --out ./support-bot --yes
-import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
+import { readFileSync, writeFileSync, mkdirSync, existsSync, readdirSync } from 'node:fs';
 import { join, resolve } from 'node:path';
 import readline from 'node:readline';
 import crypto from 'node:crypto';
 
 const GUARD_PKG = '@metamynd/agentsafe-guard';
-const GUARD_VERSION = '^0.1.0';
+const GUARD_VERSION = '^0.3.0';
 const DEFAULT_API = 'https://metamynd.ai/api/v1';
 
 // ---------- tiny ANSI ----------
@@ -39,6 +39,8 @@ function parseArgs(argv) {
     if (a === '-h' || a === '--help') { out.help = true; continue; }
     if (a === '-v' || a === '--version') { out.version = true; continue; }
     if (a === '-y' || a === '--yes' || a === '--non-interactive') { out.yes = true; continue; }
+    // Explicit, so `--force ./dir` cannot swallow the path as this flag's value.
+    if (a === '-f' || a === '--force') { out.force = true; continue; }
     if (a.startsWith('--')) {
       const eq = a.indexOf('=');
       if (eq !== -1) { out[a.slice(2, eq)] = a.slice(eq + 1); continue; }
@@ -62,6 +64,7 @@ ${c.b('Options')}
   --request            Delegated: request an agent for an owner's org (--owner <email>, +--byok)
   --claim [--watch]    Delegated: claim the config once the owner approves (reads metamynd-request.json)
   --owner <email>      Target owner's email (with --request)
+  --force, -f          Scaffold into a non-empty directory, overwriting existing files
   --api <url>          API base (default ${DEFAULT_API})
   --email <email>      Owner login email
   --password <pw>      Owner password (prefer the interactive prompt or METAMYND_PASSWORD)
@@ -272,22 +275,48 @@ function gitignore() {
   return `node_modules/\nagent.metamynd.json\n.env\n`;
 }
 
-function writeFileSafe(dir, name, content) {
+function writeFileSafe(dir, name, content, force = false) {
   const p = join(dir, name);
-  if (existsSync(p)) { console.log(`  ${c.yellow('skip')}  ${name} ${c.dim('(exists)')}`); return; }
+  const exists = existsSync(p);
+  if (exists && !force) { console.log(`  ${c.yellow('skip')}  ${name} ${c.dim('(exists)')}`); return; }
   writeFileSync(p, content);
-  console.log(`  ${c.green('create')} ${name}`);
+  console.log(`  ${exists ? c.yellow('overwrite') : c.green('create')} ${name}`);
+}
+
+/**
+ * Refuse to scaffold into a non-empty directory unless --force.
+ *
+ * Silently skipping an existing agent.metamynd.json is worse than it sounds:
+ * provisioning has already minted a NEW agent server-side, so the scaffold prints
+ * success while leaving the OLD config in place. Every later gate call then runs as
+ * the previous identity, against whatever apiBase that file happens to carry — which
+ * is exactly how a stale http:// base survived a re-scaffold and 404'd every call.
+ */
+function assertScaffoldTarget(outDir, force) {
+  if (force || !existsSync(outDir)) return;
+  const entries = readdirSync(outDir);
+  if (entries.length === 0) return;
+  const rel = outDir.replace(resolve('.'), '.').replace(/\\/g, '/');
+  fail(
+    `${rel} is not empty (${entries.length} item${entries.length === 1 ? '' : 's'}).\n\n` +
+      `  Scaffolding here would KEEP the existing files — including any agent.metamynd.json —\n` +
+      `  so this project would keep running as the identity in that file, against the apiBase\n` +
+      `  in that file, and the newly provisioned agent would go unused.\n\n` +
+      `  Scaffold somewhere new:        --out ./another-dir\n` +
+      `  or overwrite this one on purpose: --force`,
+  );
 }
 
 /** Write the scaffolded project + print next steps. Shared by the provision and sandbox paths. */
-function scaffoldProject({ outDir, config, slug, scope, perTxnMax, sandbox }) {
+function scaffoldProject({ outDir, config, slug, scope, perTxnMax, sandbox, force = false }) {
+  assertScaffoldTarget(outDir, force);
   console.log(`\n  ${c.b('Scaffolding')} ${c.dim(outDir)}`);
   if (!existsSync(outDir)) mkdirSync(outDir, { recursive: true });
-  writeFileSafe(outDir, 'agent.metamynd.json', JSON.stringify(config, null, 2) + '\n');
-  writeFileSafe(outDir, 'index.mjs', exampleIndex(scope, perTxnMax));
-  writeFileSafe(outDir, 'package.json', examplePackageJson(slug));
-  writeFileSafe(outDir, '.gitignore', gitignore());
-  writeFileSafe(outDir, 'README.md', exampleReadme(slug, scope));
+  writeFileSafe(outDir, 'agent.metamynd.json', JSON.stringify(config, null, 2) + '\n', force);
+  writeFileSafe(outDir, 'index.mjs', exampleIndex(scope, perTxnMax), force);
+  writeFileSafe(outDir, 'package.json', examplePackageJson(slug), force);
+  writeFileSafe(outDir, '.gitignore', gitignore(), force);
+  writeFileSafe(outDir, 'README.md', exampleReadme(slug, scope), force);
 
   const rel = outDir.replace(resolve('.'), '.').replace(/\\/g, '/');
   console.log(`\n${c.green(c.b('  ✓ Done.'))} Your governed agent is ready.\n`);
@@ -307,6 +336,10 @@ function scaffoldProject({ outDir, config, slug, scope, perTxnMax, sandbox }) {
 async function runSandbox(args) {
   const apiRaw = (typeof args.api === 'string' ? args.api : undefined) ?? process.env.METAMYND_API ?? DEFAULT_API;
   const base = String(apiRaw).replace(/\/+$/, '');
+  // Check the target BEFORE provisioning: refusing afterwards would mint an agent
+  // server-side and then throw it away.
+  const outDir = resolve(String(args.out || './metamynd-sandbox'));
+  assertScaffoldTarget(outDir, !!args.force);
   console.log(c.dim(`  → requesting a sandbox agent from ${base} …`));
   const provisioned = await apiPost(base, '/onboarding/sandbox', {}, null);
   const config = provisioned?.data;
@@ -314,8 +347,7 @@ async function runSandbox(args) {
   console.log(`  ${c.green('✓')} sandbox agent ${c.b(config.agentDid)} ${c.dim('(shared test identity)')}`);
   const scope = config.mandate?.scope || 'flight-purchase';
   const perTxnMax = Number(config.perTxnMax) || 500;
-  const outDir = resolve(String(args.out || './metamynd-sandbox'));
-  scaffoldProject({ outDir, config, slug: 'metamynd-sandbox', scope, perTxnMax, sandbox: true });
+  scaffoldProject({ outDir, config, slug: 'metamynd-sandbox', scope, perTxnMax, sandbox: true, force: !!args.force });
 }
 
 // ---------- delegated issuance (#6) ----------
@@ -429,7 +461,7 @@ async function runClaim(args) {
 
   const slug = slugify(state.name || 'metamynd-agent');
   const outDir = resolve(String(args.out || `./${slug}`));
-  scaffoldProject({ outDir, config, slug, scope: state.scope || config.mandate?.scope || 'flight-purchase', perTxnMax: Number(state.perTxnMax) || 500, sandbox: false });
+  scaffoldProject({ outDir, config, slug, scope: state.scope || config.mandate?.scope || 'flight-purchase', perTxnMax: Number(state.perTxnMax) || 500, sandbox: false, force: !!args.force });
 }
 
 // ---------- main ----------
@@ -536,7 +568,7 @@ async function main() {
   }
 
   // 4. Scaffold + next steps
-  scaffoldProject({ outDir, config, slug, scope, perTxnMax, sandbox: false });
+  scaffoldProject({ outDir, config, slug, scope, perTxnMax, sandbox: false, force: !!args.force });
 }
 
 main().catch((e) => fail(e?.stack || e?.message || String(e)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-metamynd-agent",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Scaffold a MetaMynd/AgentSafe-governed AI agent in one command — logs in, provisions the agent (identity + mandate + SOP + Standards) in a single call, writes agent.metamynd.json, and drops a runnable example.",
   "type": "module",
   "bin": {