insta 0.0.13 → 0.0.15

package/dist/commands/setup.js

@@ -7,10 +7,13 @@
 // project doubles as its stack manifest — that install happens on `project create|link`.
 import { spawn } from 'node:child_process';
 import { info } from '../util.js';
-// The skills tool reports agents that don't support user-global installs (Eve, PromptScript, …)
-// as red failures. That's expected reality, not a problem with THIS machine — showing red in the
-// first 30s of onboarding erodes trust (Railway's installer reads all-green for a reason).
-// Classify each output line: drop that expected noise, keep everything real.
+// The `skills` tool we shell out to prints a clack UI: a frame-by-frame clone spinner, an
+// "Installing to all N agents" banner, a full N-line install-path box, and a third-party
+// "Security Risk Assessment" that flags our OWN first-party skill as "Critical Risk". Streamed
+// verbatim during onboarding that reads as noisy and alarming — the opposite of Railway's two
+// clean ✓ lines. So we CAPTURE its output and print our own one-line summary instead. This
+// classifier decides which captured lines are worth showing if the install FAILS (surface the
+// real error; drop the expected no-global-support noise).
 export function classifyInstallLine(line) {
     if (/does not support global skill installation/.test(line))
         return 'skip';
@@ -18,30 +21,70 @@ export function classifyInstallLine(line) {
         return 'skip';
     return 'keep';
 }
+// Map a skill-install target directory to a human agent name. `-a '*'` installs to every agent
+// dir the tool knows (~70+); we name the well-known ones (Railway-style) and roll the long tail
+// into "+N more" rather than dumping every path. Order = display priority.
+const AGENT_NAMES = [
+    [/\.agents\b/, 'Universal (.agents)'],
+    [/\.claude\b/, 'Claude Code'],
+    [/\.codex\b/, 'OpenAI Codex'],
+    [/\.cursor\b/, 'Cursor'],
+    [/opencode\b/, 'OpenCode'],
+    [/copilot\b/, 'GitHub Copilot'],
+    [/\.gemini\b/, 'Gemini CLI'],
+    [/windsurf\b/, 'Windsurf'],
+    [/\.factory\b/, 'Factory Droid'],
+    [/goose\b/, 'Goose'],
+    [/aider\b/, 'Aider'],
+    [/\.continue\b/, 'Continue'],
+    [/\.roo\b/, 'Roo'],
+    [/kilocode\b/, 'Kilo Code'],
+    [/\.qwen\b/, 'Qwen'],
+];
+// Pull install-target paths out of the skills tool's summary lines ("→ ~/.claude/skills/insta")
+// and resolve the well-known ones to names. Returns the total install count + named agents.
+export function parseInstalledAgents(output) {
+    const paths = new Set();
+    for (const line of output.split('\n')) {
+        const plain = line.replace(/\x1b\[[0-9;]*m/g, '');
+        // The tool boxes each line ("│    → ~/.claude/skills/insta   │"), so don't anchor to EOL.
+        const m = plain.match(/→\s*(\S+)\/skills\/[A-Za-z0-9_-]+/);
+        if (m && m[1])
+            paths.add(m[1]);
+    }
+    const names = [];
+    for (const [re, name] of AGENT_NAMES) {
+        if ([...paths].some((p) => re.test(p)))
+            names.push(name);
+    }
+    return { count: paths.size, names };
+}
+// The Railway-style one-liner: a few named agents, the rest as "+N more".
+export function summarizeInstall(output) {
+    const { count, names } = parseInstalledAgents(output);
+    if (count === 0)
+        return '✓ insta skill installed for your coding agents';
+    const shown = names.slice(0, 6);
+    const more = count - shown.length;
+    const list = shown.length
+        ? shown.join(', ') + (more > 0 ? `, +${more} more` : '')
+        : `${count} agent${count === 1 ? '' : 's'}`;
+    return `✓ Agent skills — ${list}`;
+}
+// Capture stdout+stderr silently (don't stream) so we can print our own clean summary.
+// stdin is 'ignore', NOT 'inherit': under the canonical `curl … | sh` install, stdin is the
+// piped install script itself — a child that inherits it (npx/skills reads for keypresses even
+// with -y) consumes the rest of the script, so the shell never runs the trailing "Get started"
+// guidance. Ignoring stdin keeps the installer's own output intact. (-y means no prompt anyway.)
 const defaultRunner = (cmd, args) => new Promise((resolve) => {
-    const env = { ...process.env, AI_AGENT: process.env.AI_AGENT || 'insta', FORCE_COLOR: '1' };
-    const p = spawn(cmd, args, { stdio: ['inherit', 'pipe', 'pipe'], env });
-    let skipped = 0;
-    const sift = (chunk) => {
-        for (const line of chunk.toString().split('\n')) {
-            // strip ANSI before classifying; print the original line to preserve the tool's styling
-            const plain = line.replace(/\x1b\[[0-9;]*m/g, '');
-            if (classifyInstallLine(plain) === 'skip') {
-                skipped++;
-                continue;
-            }
-            if (line.trim())
-                process.stdout.write(line + '\n');
-        }
-    };
-    p.stdout?.on('data', sift);
-    p.stderr?.on('data', sift);
-    p.on('error', () => resolve({ ok: false }));
-    p.on('close', (code) => {
-        if (skipped)
-            info(`  (skipped ${skipped >= 3 ? 'some' : skipped} agent targets that don't support user-global installs — expected)`);
-        resolve({ ok: code === 0 });
-    });
+    const env = { ...process.env, AI_AGENT: process.env.AI_AGENT || 'insta', FORCE_COLOR: '0' };
+    const p = spawn(cmd, args, { stdio: ['ignore', 'pipe', 'pipe'], env });
+    let output = '';
+    const grab = (chunk) => { output += chunk.toString(); };
+    p.stdout?.on('data', grab);
+    p.stderr?.on('data', grab);
+    p.on('error', () => resolve({ ok: false, output }));
+    p.on('close', (code) => resolve({ ok: code === 0, output }));
 });
 // -g = user-level (machine-global); -a '*' = every agent dir the skills tool supports
 // (Claude Code, Codex, Cursor, OpenCode, Copilot, …); --copy = real files, not cache symlinks.
@@ -50,15 +93,23 @@ export async function setupAgent(opts, run = defaultRunner) {
     if (!opts.yes && !process.stdout.isTTY) {
         info('non-interactive shell — assuming -y');
     }
-    info('installing the insta skill (user-global, all agents) …');
+    info('setting up coding-agent skills …');
     const res = await run('npx', SETUP_ARGS);
     if (!res.ok) {
         info('  skill install failed — install manually with:');
         info('    npx skills add InsForge/insta-skills -s insta -a "*" -g -y --copy');
+        // Surface the REAL error: the captured tail, minus the expected no-global-support noise.
+        const tail = (res.output ?? '')
+            .split('\n')
+            .map((l) => l.replace(/\x1b\[[0-9;]*m/g, '').trimEnd())
+            .filter((l) => l.trim() && classifyInstallLine(l) === 'keep')
+            .slice(-6);
+        for (const l of tail)
+            info('    ' + l);
         process.exitCode = 1;
         return;
     }
-    info('done — agents on this machine now know InstaCloud.');
-    info('next: `insta login --oauth github` (cloud) or run instad locally (insta-oss), then `insta project create <name>`.');
+    info(summarizeInstall(res.output ?? ''));
+    info('  every coding agent on this machine now knows InstaCloud (review skills before use — they run with full permissions).');
 }
 //# sourceMappingURL=setup.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "insta",
-  "version": "0.0.13",
+  "version": "0.0.15",
   "type": "module",
   "description": "InstaCloud CLI — a thin client of the platform control-plane API.",
   "keywords": [