nexarch 0.8.10 → 0.8.12

package/dist/commands/init-agent.js

@@ -1,12 +1,13 @@
 import { arch, homedir, hostname, platform, release, type as osType, userInfo } from "os";
 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
 import { join } from "path";
+import * as readline from "node:readline/promises";
 import process from "process";
 import { requireCredentials } from "../lib/credentials.js";
 import { fetchAgentRegistryOrThrow } from "../lib/agent-registry.js";
 import { callMcpTool, mcpInitialize, mcpListTools } from "../lib/mcp.js";
 import { buildVersionAttributes } from "../lib/version-normalization.js";
-const CLI_VERSION = "0.8.4";
+const CLI_VERSION = "0.8.12";
 const AGENT_ENTITY_TYPE = "agent";
 const TECH_COMPONENT_ENTITY_TYPE = "technology_component";
 function parseFlag(args, flag) {
@@ -25,6 +26,42 @@ function parseToolText(result) {
     const text = result.content?.[0]?.text ?? "{}";
     return JSON.parse(text);
 }
+function parseCsv(value) {
+    if (!value)
+        return [];
+    return value.split(",").map((v) => v.trim()).filter(Boolean);
+}
+async function promptForValue(promptText, required = false) {
+    if (!process.stdin.isTTY || !process.stdout.isTTY)
+        return null;
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        // eslint-disable-next-line no-constant-condition
+        while (true) {
+            const value = (await rl.question(promptText)).trim();
+            if (value)
+                return value;
+            if (!required)
+                return null;
+            console.log("A value is required.");
+        }
+    }
+    finally {
+        rl.close();
+    }
+}
+async function confirmInstructionWrite() {
+    if (!process.stdin.isTTY || !process.stdout.isTTY)
+        return false;
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const answer = (await rl.question("Allow nexarch init-agent to write/update AGENTS.md/CLAUDE.md registration instructions? [y/N]: ")).trim().toLowerCase();
+        return answer === "y" || answer === "yes";
+    }
+    finally {
+        rl.close();
+    }
+}
 function renderChecksTable(checks) {
     const headers = ["Status", "Check", "Details"];
     const rows = checks.map((check) => [
@@ -360,6 +397,16 @@ export async function initAgent(args) {
     const explicitAgentId = parseOptionValue(args, "--agent-id");
     const bindToExternalKey = parseOptionValue(args, "--bind-to-external-key");
     const bindRelationshipType = parseOptionValue(args, "--bind-relationship-type") ?? "depends_on";
+    const allowInstructionWriteFlag = parseFlag(args, "--allow-instruction-write");
+    const denyInstructionWriteFlag = parseFlag(args, "--deny-instruction-write");
+    const providerArg = parseOptionValue(args, "--provider");
+    const modelArg = parseOptionValue(args, "--model");
+    const clientArg = parseOptionValue(args, "--client");
+    const frameworkArg = parseOptionValue(args, "--framework");
+    const sessionIdArg = parseOptionValue(args, "--session-id");
+    const toolVersionArg = parseOptionValue(args, "--tool-version");
+    const capabilitiesArg = parseCsv(parseOptionValue(args, "--capabilities"));
+    const notesArg = parseOptionValue(args, "--notes");
     const agentId = explicitAgentId ?? getDefaultAgentId();
     const runtime = {
         osPlatform: platform(),
@@ -813,7 +860,93 @@ export async function initAgent(args) {
             }
         }
     }
+    let identityCapture = {
+        attempted: false,
+        ok: false,
+        detail: "skipped",
+        missingRequired: [],
+    };
+    if (registration.ok) {
+        let provider = providerArg;
+        let model = modelArg;
+        let client = clientArg;
+        if (!asJson) {
+            provider = provider ?? await promptForValue("Provider (e.g. anthropic/openai/google): ", true);
+            model = model ?? await promptForValue("Model id (e.g. claude-sonnet-4-6): ", true);
+            client = client ?? await promptForValue("Client (e.g. claude-code/cursor/codex-cli): ", true);
+        }
+        const missingRequired = [
+            !provider ? "provider" : null,
+            !model ? "model" : null,
+            !client ? "client" : null,
+        ].filter(Boolean);
+        if (missingRequired.length > 0) {
+            identityCapture = {
+                attempted: false,
+                ok: false,
+                detail: `missing required identity fields: ${missingRequired.join(", ")}`,
+                missingRequired,
+            };
+        }
+        else {
+            const nowIso = new Date().toISOString();
+            identityCapture.attempted = true;
+            try {
+                const identityRaw = await callMcpTool("nexarch_upsert_entities", {
+                    entities: [
+                        {
+                            externalKey: `agent:${agentId}`,
+                            entityTypeCode: "agent",
+                            name: `Agent ${agentId}`,
+                            confidence: 1,
+                            attributes: {
+                                identity: {
+                                    source: "nexarch init-agent",
+                                    capturedAt: nowIso,
+                                    provider,
+                                    model,
+                                    client,
+                                    framework: frameworkArg,
+                                    sessionId: sessionIdArg,
+                                    toolVersion: toolVersionArg,
+                                    capabilities: capabilitiesArg,
+                                    notes: notesArg,
+                                },
+                            },
+                        },
+                    ],
+                    agentContext: {
+                        agentId,
+                        agentRunId: `init-agent-identify-${Date.now()}`,
+                        repoRef: "nexarch-cli/init-agent",
+                        observedAt: nowIso,
+                        source: "nexarch-cli",
+                        model,
+                        provider,
+                    },
+                    policyContext: policies.policyBundleHash
+                        ? {
+                            policyBundleHash: policies.policyBundleHash,
+                            alignmentSummary: { score: 1, violations: [], waivers: [] },
+                        }
+                        : undefined,
+                    dryRun: false,
+                }, { companyId: selectedCompanyId });
+                const identity = parseToolText(identityRaw);
+                const failed = Number(identity.summary?.failed ?? 0) > 0;
+                identityCapture.ok = !failed;
+                identityCapture.detail = failed
+                    ? `identity capture failed (${identity.errors?.[0]?.error ?? "unknown"})`
+                    : "identity captured";
+            }
+            catch (error) {
+                identityCapture.ok = false;
+                identityCapture.detail = error instanceof Error ? error.message : "identity capture failed";
+            }
+        }
+    }
     let agentConfigResults = [];
+    let instructionsWriteAllowed = false;
     if (registration.ok) {
         try {
             // Save identity so check-in can find the agent key
@@ -824,9 +957,20 @@ export async function initAgent(args) {
         catch {
             // non-fatal
         }
-        agentConfigResults = injectAgentConfigs(registry);
-        if (agentConfigResults.length === 0) {
-            agentConfigResults = injectGenericAgentConfig(registry);
+        if (denyInstructionWriteFlag) {
+            instructionsWriteAllowed = false;
+        }
+        else if (allowInstructionWriteFlag) {
+            instructionsWriteAllowed = true;
+        }
+        else if (!asJson) {
+            instructionsWriteAllowed = await confirmInstructionWrite();
+        }
+        if (instructionsWriteAllowed) {
+            agentConfigResults = injectAgentConfigs(registry);
+            if (agentConfigResults.length === 0) {
+                agentConfigResults = injectGenericAgentConfig(registry);
+            }
         }
     }
     checks.push({
@@ -834,14 +978,21 @@ export async function initAgent(args) {
         ok: registration.ok,
         detail: registration.detail,
     });
+    checks.push({
+        name: "agent.identity.capture",
+        ok: !registration.ok || identityCapture.ok,
+        detail: !registration.ok ? "skipped (registration failed)" : identityCapture.detail,
+    });
     checks.push({
         name: "agent.instructions.injection",
-        ok: !registration.ok || agentConfigResults.length > 0,
+        ok: !registration.ok || !instructionsWriteAllowed || agentConfigResults.length > 0,
         detail: !registration.ok
             ? "skipped (registration failed)"
-            : agentConfigResults.length > 0
-                ? `updated ${agentConfigResults.length} instruction target file(s)`
-                : "no runtime instruction target matched this repository (non-fatal; create AGENTS.md/CLAUDE.md or configure a generic target)",
+            : !instructionsWriteAllowed
+                ? "skipped (consent not granted)"
+                : agentConfigResults.length > 0
+                    ? `updated ${agentConfigResults.length} instruction target file(s)`
+                    : "no runtime instruction target matched this repository (non-fatal; create AGENTS.md/CLAUDE.md or configure a generic target)",
     });
     checks.push({
         name: "technology.components",
@@ -862,17 +1013,12 @@ export async function initAgent(args) {
     }
     const allPassed = checks.every((c) => c.ok);
     const appDetection = detectLikelyApplicationInCwd();
-    const identifyPrompt = [
-        "Please identify your runtime so the workspace can register richer metadata.",
-        "Return ONLY the completed command below with real values (no markdown):",
-        `nexarch agent identify --agent-id \"${agentId}\" --provider \"<provider>\" --model \"<model>\" --client \"<client>\" --framework \"<openclaw|n8n|m365-agent-framework|other>\" --session-id \"<session-id>\" --tool-version \"<tool-version>\" --capabilities \"<capability1,capability2>\" --notes \"<optional notes>\" --json`,
-    ].join("\n");
     if (asJson) {
         const output = {
             ok: strict ? allPassed : true,
             passed: allPassed,
             strict,
-            status: allPassed ? "needs_agent_identity_followup" : "handshake_completed_with_issues",
+            status: allPassed ? "completed" : "completed_with_issues",
             checks,
             summary: {
                 total: checks.length,
@@ -890,20 +1036,20 @@ export async function initAgent(args) {
             },
             binding,
             followUp: {
-                required: allPassed,
-                type: "agent_identity",
-                detail: "Prompt the coding agent to self-identify and submit via nexarch agent identify",
-                prompt: identifyPrompt,
-                submitCommandTemplate: `nexarch agent identify --agent-id \"${agentId}\" --provider \"<provider>\" --model \"<model>\" --client \"<client>\" --framework \"<openclaw|n8n|m365-agent-framework|other>\" --session-id \"<session-id>\" --tool-version \"<tool-version>\" --capabilities \"<capability1,capability2>\" --notes \"<optional notes>\" --json`,
+                required: appDetection.detected,
+                type: "init_project_recommendation",
+                detail: appDetection.detected ? "Project detected; request consent before running init-project" : "No project detected",
                 initProjectSuggestion: appDetection.detected
                     ? {
-                        shouldPromptUser: true,
+                        detected: true,
                         reason: `Detected likely project manifests in cwd: ${appDetection.evidence.join(", ")}`,
-                        userPrompt: "I found a likely application in this directory. Do you want me to run init-project next?",
-                        suggestedCommand: "npx nexarch@latest init-project --dir . --json",
+                        consentRequired: true,
+                        consentPrompt: "I detected a likely project in this directory. Do you want me to run init-project now?",
+                        actionIfApproved: "run_init_project",
+                        command: "npx nexarch@latest init-project --dir . --json",
                     }
                     : {
-                        shouldPromptUser: false,
+                        detected: false,
                         reason: "No common application manifest files detected in current directory.",
                     },
             },
@@ -938,17 +1084,15 @@ export async function initAgent(args) {
             }
         }
         const hasInjectedAgentInstructions = agentConfigResults.some((r) => r.status === "injected" || r.status === "updated");
-        console.log("\n➡ Next step (required): complete agent identity in your coding agent");
-        console.log("   Paste this and fill in real values:");
-        console.log(`\nrun npx nexarch@latest agent identify --agent-id \"${agentId}\" --provider \"<provider>\" --model \"<model>\" --client \"<client>\" --framework \"<openclaw|n8n|m365-agent-framework|other>\" --tool-version \"<tool-version>\" --capabilities \"<capability1,capability2>\" --json\n`);
         if (hasInjectedAgentInstructions) {
-            console.log("   (Registration instructions were already written into your agent config file.)");
+            console.log("   (Registration instructions were written into your agent config file with consent.)");
         }
         if (!fromSetup && appDetection.detected) {
             console.log("\n➡ Optional next step: likely application detected in current directory.");
             console.log(`   Detected manifests: ${appDetection.evidence.join(", ")}`);
-            console.log("   Ask the user: 'I found a likely application here. Do you want me to run init-project next?'");
-            console.log("   Suggested command: npx nexarch@latest init-project --dir . --json");
+            console.log("   Ask for user consent before running init-project.");
+            console.log("   Consent prompt: 'I detected a likely project in this directory. Do you want me to run init-project now?'");
+            console.log("   If approved, run: npx nexarch@latest init-project --dir . --json");
         }
     }
     else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexarch",
-  "version": "0.8.10",
+  "version": "0.8.12",
   "description": "Your architecture workspace for AI delivery.",
   "keywords": [
     "nexarch",