nowaikit 3.0.0 → 4.0.0

package/dist/cli/setup.js

@@ -2,19 +2,24 @@
  * Interactive setup wizard — `nowaikit setup`
  *
  * Walks the user through:
- *   1. ServiceNow instance
- *   2. Auth method (Basic / OAuth)
- *   3. Credentials
- *   4. Connection test
- *   5. Permission tier / tool package
- *   6. Features & shortcuts overview
- *   7. AI client installation
+ *   1.  ServiceNow instance (with reachability auto-detect)
+ *   2.  Auth method (Basic / OAuth)
+ *   3.  Credentials
+ *   4.  Connection test (with auto-fix suggestions on failure)
+ *   5.  Permission tier / tool package
+ *   6.  Component selection — MCP Server / SDK / Apex AI Skills (checkbox multi-select)
+ *   7.  AI Provider — Ollama/LM Studio auto-detect, cloud API key (shown when Apex enabled)
+ *   8.  Power Tools & Capabilities overview
+ *   9.  Prompts, Shortcuts & Resources
+ *   10. AI Client Installation
+ *   11. Auto-Configuration (npm link, starter file, client config)
  */
 import { input, password, select, checkbox, confirm } from '@inquirer/prompts';
 import chalk from 'chalk';
 import ora from 'ora';
 import { execSync } from 'child_process';
 import { fileURLToPath } from 'url';
+import { writeFileSync, existsSync } from 'fs';
 import path from 'path';
 import { addInstance, loadConfig } from './config-store.js';
 import { detectClients } from './detect-clients.js';
@@ -32,10 +37,11 @@ const accent = teal; // accent (AI highlight)
 const success = chalk.hex('#10B981'); // emerald-500
 const warn = chalk.hex('#FF6B35'); // amber/orange
 const err = chalk.hex('#E8466A'); // pink-500
+const gray = chalk.hex('#8B949E'); // muted gray — AI contrast in banner
 const dim = chalk.gray; // terminal-adaptive dim text
 const white = chalk.bold; // terminal-adaptive primary text (works on light + dark)
 const subtle = chalk.dim; // terminal-adaptive secondary text
-const TOTAL_STEPS = 7;
+const TOTAL_STEPS = 11;
 const TOOL_PACKAGES = [
     { value: 'full', name: `${brand('full')}                 ${dim('— all 400+ tools')}` },
     { value: 'service_desk', name: `${brand('service_desk')}        ${dim('— help desk agents')}` },
@@ -87,10 +93,13 @@ function logoText() {
 }
 function banner() {
     console.log('');
-    // ASCII art logo — "NowAIKit" in stylized block text with teal/navy gradient
-    console.log(bright('  ╔╗╔') + teal('╔═╗') + bright('╦ ╦') + dim('  ') + teal('╔═╗') + bright('╦') + teal('╦╔═') + bright('╦') + teal('╔╦╗'));
-    console.log(teal('  ║║║') + navy('║ ║') + teal('║║║') + dim('  ') + teal('╠═╣') + navy('║') + teal('╠╩╗') + navy('║') + teal(' ║ '));
-    console.log(navy('  ╝╚╝') + teal('╚═╝') + navy('╚╩╝') + dim('  ') + navy('╩ ╩') + teal('╩') + navy('╩ ╩') + teal('╩') + navy(' ╩ ') + dim('  ') + teal('✦'));
+    // ASCII art logo — "NowAIKit" in block thick style, NOW/KIT teal, AI gray
+    console.log(teal.bold('  ███╗  ██╗ ██████╗ ██╗    ██╗') + '   ' + gray(' █████╗ ██╗') + '   ' + teal.bold('██╗  ██╗██╗████████╗'));
+    console.log(teal.bold('  ████╗ ██║██╔═══██╗██║    ██║') + '   ' + gray('██╔══██╗██║') + '   ' + teal.bold('██║ ██╔╝██║╚══██╔══╝'));
+    console.log(teal.bold('  ██╔██╗██║██║   ██║██║ █╗ ██║') + '   ' + gray('███████║██║') + '   ' + teal.bold('█████╔╝ ██║   ██║'));
+    console.log(teal.bold('  ██║╚████║██║   ██║██║███╗██║') + '   ' + gray('██╔══██║██║') + '   ' + teal.bold('██╔═██╗ ██║   ██║'));
+    console.log(teal.bold('  ██║ ╚███║╚██████╔╝╚███╔███╔╝') + '   ' + gray('██║  ██║██║') + '   ' + teal.bold('██║  ██╗██║   ██║'));
+    console.log(teal.bold('  ╚═╝  ╚══╝ ╚═════╝  ╚══╝╚══╝') + '   ' + gray('╚═╝  ╚═╝╚═╝') + '   ' + teal.bold('╚═╝  ╚═╝╚═╝   ╚═╝') + '  ' + teal('✦'));
     console.log('');
     console.log(`  ${logoText()}  ${dim('—')} ${subtle('Setup Wizard')}`);
     console.log('');
@@ -140,6 +149,22 @@ function extractFetchError(error) {
     }
     return error.message;
 }
+/**
+ * Quick HEAD check — returns true if the URL is reachable (any HTTP response).
+ * Does not throw; returns false on any network / DNS error.
+ */
+async function isUrlReachable(url) {
+    try {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 8000);
+        await fetch(url, { method: 'HEAD', signal: controller.signal, redirect: 'follow' });
+        clearTimeout(timeout);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 async function testConnection(instanceUrl, authMethod, creds) {
     // Pre-flight: verify the hostname is reachable before attempting auth
     const spinner = ora({
@@ -235,6 +260,41 @@ async function ensureGlobalCommand() {
         }
     }
 }
+async function detectLocalProviders() {
+    const result = {
+        ollama: { running: false, models: [] },
+        lmstudio: { running: false, models: [] },
+    };
+    // Ollama: GET http://localhost:11434/api/tags
+    try {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 2000);
+        const res = await fetch('http://localhost:11434/api/tags', { signal: controller.signal });
+        clearTimeout(timeout);
+        if (res.ok) {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            const data = await res.json();
+            result.ollama.running = true;
+            result.ollama.models = (data.models || []).map((m) => m.name.replace(/:latest$/, ''));
+        }
+    }
+    catch { /* not running */ }
+    // LM Studio: GET http://localhost:1234/v1/models
+    try {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 2000);
+        const res = await fetch('http://localhost:1234/v1/models', { signal: controller.signal });
+        clearTimeout(timeout);
+        if (res.ok) {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            const data = await res.json();
+            result.lmstudio.running = true;
+            result.lmstudio.models = (data.data || []).map((m) => m.id);
+        }
+    }
+    catch { /* not running */ }
+    return result;
+}
 // ═══════════════════════════════════════════════════════════════════════════════
 // MAIN SETUP FLOW
 // ═══════════════════════════════════════════════════════════════════════════════
@@ -259,32 +319,91 @@ export async function runSetup(options = {}) {
     sectionLabel('Enter your instance name — just the subdomain, not the full URL');
     console.log(dim('  Example: if your URL is https://acme.service-now.com, enter ') + brand('acme'));
     console.log('');
-    const instanceId = await input({
-        message: brand('?') + ' Instance name ' + dim('(e.g. acme, dev12345)') + brand(':'),
-        validate: (v) => {
-            if (!v.trim())
-                return 'Instance name is required';
-            if (/\s/.test(v))
-                return 'No spaces allowed';
-            return true;
-        },
-    });
     let instanceUrl;
-    let trimmed = instanceId.trim().toLowerCase();
-    // Strip full URL if user pasted one
-    if (trimmed.startsWith('https://')) {
-        instanceUrl = trimmed.replace(/\/+$/, '');
-        trimmed = instanceUrl.replace('https://', '').replace('.service-now.com', '');
-    }
-    else if (trimmed.includes('.service-now.com')) {
-        trimmed = trimmed.replace('.service-now.com', '').replace(/\/+$/, '');
-        instanceUrl = `https://${trimmed}.service-now.com`;
-    }
-    else {
-        instanceUrl = `https://${trimmed}.service-now.com`;
+    let trimmed;
+    // eslint-disable-next-line no-constant-condition
+    while (true) {
+        const instanceId = await input({
+            message: brand('?') + ' Instance name ' + dim('(e.g. acme, dev12345)') + brand(':'),
+            validate: (v) => {
+                if (!v.trim())
+                    return 'Instance name is required';
+                if (/\s/.test(v))
+                    return 'No spaces allowed';
+                return true;
+            },
+        });
+        trimmed = instanceId.trim().toLowerCase();
+        // Strip full URL if user pasted one
+        if (trimmed.startsWith('https://')) {
+            instanceUrl = trimmed.replace(/\/+$/, '');
+            trimmed = instanceUrl.replace('https://', '').replace('.service-now.com', '');
+        }
+        else if (trimmed.includes('.service-now.com')) {
+            trimmed = trimmed.replace('.service-now.com', '').replace(/\/+$/, '');
+            instanceUrl = `https://${trimmed}.service-now.com`;
+        }
+        else {
+            instanceUrl = `https://${trimmed}.service-now.com`;
+        }
+        console.log(`  ${success('→')} ${dim('URL:')} ${accent(instanceUrl)}`);
+        console.log('');
+        // Auto-detect reachability before proceeding
+        const reachSpinner = ora({ text: dim('  Checking if instance is reachable…'), color: 'cyan' }).start();
+        const reachable = await isUrlReachable(instanceUrl);
+        if (reachable) {
+            reachSpinner.succeed(success('  Instance is reachable'));
+            break;
+        }
+        // Not reachable — offer auto-fix options
+        reachSpinner.warn(warn('  Instance not reachable — it may be offline or the name may be wrong'));
+        console.log('');
+        const fixAction = await select({
+            message: warn('?') + ' Auto-fix options' + brand(':'),
+            choices: [
+                { name: `${brand('↻')} Try again with same URL`, value: 'retry' },
+                { name: `${accent('/')} Try with /api prefix ${dim(`(${instanceUrl}/api)`)}`, value: 'try_api' },
+                { name: `${brand('🔒')} Try HTTPS variant ${dim('(already HTTPS — refresh)')}`, value: 'try_https' },
+                { name: `${dim('✏')} Re-enter instance name`, value: 'reenter' },
+                { name: `${subtle('→')} Continue anyway ${dim('(fix manually later)')}`, value: 'continue' },
+            ],
+        });
+        if (fixAction === 'continue') {
+            console.log(`  ${dim('→')} Continuing with unreachable instance — you can fix this in your config later.`);
+            break;
+        }
+        if (fixAction === 'try_api') {
+            const apiUrl = `${instanceUrl}/api`;
+            const apiReachable = await isUrlReachable(apiUrl);
+            if (apiReachable) {
+                console.log(`  ${success('✓')} Reachable with /api prefix — continuing`);
+                break;
+            }
+            console.log(`  ${warn('→')} Still not reachable. Try re-entering the instance name.`);
+        }
+        if (fixAction === 'try_https' || fixAction === 'retry') {
+            const recheck = await isUrlReachable(instanceUrl);
+            if (recheck) {
+                console.log(`  ${success('✓')} Instance is now reachable`);
+                break;
+            }
+            console.log(`  ${warn('→')} Still not reachable.`);
+        }
+        // 'reenter' falls through to top of loop naturally
+        if (fixAction !== 'reenter') {
+            // For all non-reenter choices that didn't break, offer to continue or reenter
+            const nextAction = await select({
+                message: warn('?') + ' What next' + brand(':'),
+                choices: [
+                    { name: `${dim('→')} Continue anyway`, value: 'continue' },
+                    { name: `${accent('✏')} Re-enter instance name`, value: 'reenter' },
+                ],
+            });
+            if (nextAction === 'continue')
+                break;
+        }
+        // loop continues for 'reenter'
     }
-    console.log(`  ${success('→')} ${dim('URL:')} ${accent(instanceUrl)}`);
-    console.log('');
     const instanceName = await input({
         message: brand('?') + ' Short name ' + dim('(e.g. prod, dev, acme)') + brand(':'),
         default: trimmed.replace(/\.service-now\.com$/, '').replace(/[^a-z0-9_-]/gi, '-'),
@@ -377,10 +496,12 @@ export async function runSetup(options = {}) {
         }
         console.log('');
         const action = await select({
-            message: warn('?') + ' What would you like to do?' + brand(':'),
+            message: warn('?') + ' Connection failed — what would you like to do?' + brand(':'),
             choices: [
                 { name: `${brand('↻')} Retry connection`, value: 'retry' },
                 { name: `${accent('✏')} Re-enter credentials`, value: 'creds' },
+                { name: `${brand('/')} Auto-fix: try with /api prefix`, value: 'fix_api' },
+                { name: `${brand('🔒')} Auto-fix: switch to HTTPS`, value: 'fix_https' },
                 { name: `${subtle('💾')} Save config anyway ${dim('(fix later)')}`, value: 'save' },
                 { name: `${err('✕')} Cancel setup`, value: 'cancel' },
             ],
@@ -393,6 +514,29 @@ export async function runSetup(options = {}) {
         }
         if (action === 'save')
             break;
+        if (action === 'fix_api') {
+            // Try appending /api to the URL
+            const apiUrl = instanceUrl.endsWith('/api') ? instanceUrl : `${instanceUrl}/api`;
+            console.log(`  ${dim('→')} Trying ${accent(apiUrl)}…`);
+            const reachable = await isUrlReachable(apiUrl);
+            if (reachable) {
+                instanceUrl = apiUrl;
+                console.log(`  ${success('✓')} URL updated to ${accent(instanceUrl)}`);
+            }
+            else {
+                console.log(`  ${warn('→')} /api prefix did not help. Try re-entering credentials.`);
+            }
+        }
+        if (action === 'fix_https') {
+            // Ensure URL uses HTTPS
+            if (instanceUrl.startsWith('http://')) {
+                instanceUrl = instanceUrl.replace('http://', 'https://');
+                console.log(`  ${success('✓')} Switched to HTTPS: ${accent(instanceUrl)}`);
+            }
+            else {
+                console.log(`  ${dim('→')} URL is already HTTPS: ${accent(instanceUrl)}`);
+            }
+        }
         if (action === 'creds') {
             console.log('');
             if (authMethod === 'basic') {
@@ -416,15 +560,302 @@ export async function runSetup(options = {}) {
         choices: TOOL_PACKAGES,
     });
     const writeEnabled = await confirm({
-        message: brand('?') + ' Enable write operations ' + dim('(create/update/delete)') + brand('?'),
+        message: brand('?') + ' Enable write operations ' + dim('(create/update/delete records)') + brand('?'),
         default: false,
     });
+    let scriptingEnabled = false;
+    let cmdbWriteEnabled = false;
+    let atfEnabled = false;
+    if (writeEnabled) {
+        console.log('');
+        sectionLabel('Advanced write permissions');
+        console.log(dim('  These unlock powerful features but should be used carefully in production.'));
+        console.log('');
+        scriptingEnabled = await confirm({
+            message: brand('?') + ' Enable script execution ' + dim('(Background Scripts, server-side JS)') + brand('?'),
+            default: false,
+        });
+        cmdbWriteEnabled = await confirm({
+            message: brand('?') + ' Enable CMDB write operations ' + dim('(create/update CIs and relationships)') + brand('?'),
+            default: false,
+        });
+        atfEnabled = await confirm({
+            message: brand('?') + ' Enable ATF test execution ' + dim('(run Automated Test Framework suites)') + brand('?'),
+            default: false,
+        });
+    }
     const nowAssistEnabled = await confirm({
         message: brand('?') + ' Enable Now Assist / AI features' + brand('?'),
         default: false,
     });
-    // ─── Step 6: Features & Shortcuts ─────────────────────────────────────────
-    step(6, 'Features & Shortcuts');
+    // ─── Step 6: Component Selection (checkbox multi-select) ───────────────────
+    step(6, 'Component Selection');
+    sectionLabel('Choose which NowAIKit components to enable');
+    console.log(dim('  Use Space to toggle, Enter to confirm. At least one must be selected.'));
+    console.log('');
+    let selectedComponents = [];
+    while (true) {
+        selectedComponents = await checkbox({
+            message: brand('?') + ' Enable components ' + dim('(space to toggle, enter to confirm)') + brand(':'),
+            choices: [
+                {
+                    name: `${brand('MCP Server')}      ${dim('— AI clients discover and call tools automatically')}`,
+                    value: 'mcp',
+                    checked: true,
+                },
+                {
+                    name: `${accent('TypeScript SDK')}  ${dim('— import NowAIKit directly in your code')}`,
+                    value: 'sdk',
+                    checked: false,
+                },
+                {
+                    name: `${teal('AI Skills (Apex)')} ${dim('— 26 expert capabilities (scan, review, build, ops, docs)')}`,
+                    value: 'apex',
+                    checked: true,
+                },
+            ],
+        });
+        if (selectedComponents.length > 0)
+            break;
+        console.log(`  ${warn('!')} At least one component must be selected.`);
+        console.log('');
+    }
+    const mcpEnabled = selectedComponents.includes('mcp');
+    const sdkEnabled = selectedComponents.includes('sdk');
+    const apexEnabled = selectedComponents.includes('apex');
+    // Compute legacy integrationMode for backward compat
+    let integrationMode;
+    if (mcpEnabled && sdkEnabled)
+        integrationMode = 'both';
+    else if (sdkEnabled)
+        integrationMode = 'sdk';
+    else
+        integrationMode = 'mcp';
+    console.log('');
+    if (mcpEnabled)
+        console.log(`  ${success('✓')} MCP Server — AI clients will auto-discover your 400+ tools`);
+    if (sdkEnabled)
+        console.log(`  ${success('✓')} TypeScript SDK — import NowAIKit in your project`);
+    if (apexEnabled)
+        console.log(`  ${success('✓')} AI Skills (Apex) — 26 capabilities enabled`);
+    if (!apexEnabled)
+        console.log(`  ${dim('✗')} Apex AI Skills disabled — only MCP tools and ITSM prompts active`);
+    console.log('');
+    if (sdkEnabled) {
+        box([
+            white('SDK mode selected'),
+            dim('Import NowAIKit in your TypeScript/JavaScript code:'),
+            '',
+            brand("  import { ServiceNowClient } from 'nowaikit/sdk';"),
+            brand("  import { executeDirectly } from 'nowaikit/sdk';"),
+            '',
+            ...(mcpEnabled ? [] : [dim('MCP client configuration will be skipped.')]),
+        ]);
+        console.log('');
+    }
+    if (mcpEnabled && sdkEnabled) {
+        console.log(`  ${success('→')} ${dim('Both MCP server and SDK imports will be available.')}`);
+        console.log('');
+    }
+    // ─── Step 7: AI Provider (for Apex capabilities) ──────────────────────────
+    let aiProvider;
+    let aiModel;
+    let aiApiKey;
+    let aiBaseUrl;
+    if (apexEnabled) {
+        step(7, 'AI Provider');
+        sectionLabel('Configure the LLM for Apex AI capabilities (direct mode)');
+        console.log(dim('  Apex capabilities like scan-health need an LLM for analysis.'));
+        console.log(dim('  MCP mode (Claude Desktop, Cursor) uses the host AI — no key needed there.'));
+        console.log('');
+        const detectSpinner = ora({ text: dim('  Detecting local AI providers…'), color: 'cyan' }).start();
+        const localProviders = await detectLocalProviders();
+        detectSpinner.stop();
+        if (localProviders.ollama.running) {
+            const modelList = localProviders.ollama.models.length > 0
+                ? localProviders.ollama.models.slice(0, 5).join(', ')
+                : 'no models pulled yet';
+            console.log(`  ${success('✓')} Ollama detected at localhost:11434 (${dim(modelList)})`);
+        }
+        else {
+            console.log(`  ${dim('✗')} Ollama not detected`);
+        }
+        if (localProviders.lmstudio.running) {
+            const modelList = localProviders.lmstudio.models.length > 0
+                ? localProviders.lmstudio.models.slice(0, 3).join(', ')
+                : 'model loaded';
+            console.log(`  ${success('✓')} LM Studio detected at localhost:1234 (${dim(modelList)})`);
+        }
+        else {
+            console.log(`  ${dim('✗')} LM Studio not detected`);
+        }
+        console.log('');
+        const providerChoices = [];
+        if (localProviders.ollama.running) {
+            providerChoices.push({
+                name: `${brand('Ollama')} ${dim('(local — detected, running)')}`,
+                value: 'ollama',
+            });
+        }
+        else {
+            providerChoices.push({
+                name: `${dim('Ollama')} ${dim('(local — not detected)')}`,
+                value: 'ollama',
+            });
+        }
+        if (localProviders.lmstudio.running) {
+            providerChoices.push({
+                name: `${brand('LM Studio')} ${dim('(local — detected, running)')}`,
+                value: 'lmstudio',
+            });
+        }
+        else {
+            providerChoices.push({
+                name: `${dim('LM Studio')} ${dim('(local — not detected)')}`,
+                value: 'lmstudio',
+            });
+        }
+        providerChoices.push({ name: `${accent('Anthropic')} ${dim('(cloud — requires API key)')}`, value: 'anthropic' }, { name: `${accent('OpenAI')} ${dim('(cloud — requires API key)')}`, value: 'openai' }, { name: `${subtle('Skip')} ${dim('(configure later with --provider flag or env var)')}`, value: 'skip' });
+        const selectedProvider = await select({
+            message: brand('?') + ' Select AI provider' + brand(':'),
+            choices: providerChoices,
+            default: localProviders.ollama.running ? 'ollama'
+                : localProviders.lmstudio.running ? 'lmstudio'
+                    : undefined,
+        });
+        if (selectedProvider !== 'skip') {
+            aiProvider = selectedProvider;
+            // Model selection for local providers with detected models
+            if (selectedProvider === 'ollama' && localProviders.ollama.models.length > 0) {
+                const modelChoices = localProviders.ollama.models.map(m => ({
+                    name: brand(m),
+                    value: m,
+                }));
+                aiModel = await select({
+                    message: brand('?') + ' Select Ollama model' + brand(':'),
+                    choices: modelChoices,
+                });
+                console.log(`  ${success('✓')} Ollama configured with ${accent(aiModel)} — no API key needed`);
+            }
+            else if (selectedProvider === 'lmstudio' && localProviders.lmstudio.models.length > 0) {
+                const modelChoices = localProviders.lmstudio.models.map(m => ({
+                    name: brand(m),
+                    value: m,
+                }));
+                aiModel = await select({
+                    message: brand('?') + ' Select LM Studio model' + brand(':'),
+                    choices: modelChoices,
+                });
+                console.log(`  ${success('✓')} LM Studio configured with ${accent(aiModel)} — no API key needed`);
+            }
+            else if (selectedProvider === 'ollama') {
+                aiModel = await input({
+                    message: brand('?') + ' Ollama model name ' + dim('(e.g. llama3.3, codellama)') + brand(':'),
+                    default: 'llama3.3',
+                });
+                console.log(`  ${success('✓')} Ollama configured with ${accent(aiModel)} — no API key needed`);
+            }
+            else if (selectedProvider === 'lmstudio') {
+                console.log(`  ${success('✓')} LM Studio configured — uses whatever model is loaded`);
+            }
+            else if (selectedProvider === 'anthropic') {
+                aiApiKey = await password({
+                    message: brand('?') + ' Anthropic API key ' + dim('(sk-ant-...)') + brand(':'),
+                    mask: '•',
+                });
+                aiModel = await input({
+                    message: brand('?') + ' Model ' + dim('(Enter for default)') + brand(':'),
+                    default: 'claude-sonnet-4-6-20250514',
+                });
+                console.log(`  ${success('✓')} Anthropic configured with ${accent(aiModel)}`);
+            }
+            else if (selectedProvider === 'openai') {
+                aiApiKey = await password({
+                    message: brand('?') + ' OpenAI API key ' + dim('(sk-...)') + brand(':'),
+                    mask: '•',
+                });
+                aiModel = await input({
+                    message: brand('?') + ' Model ' + dim('(Enter for default)') + brand(':'),
+                    default: 'gpt-5.4',
+                });
+                console.log(`  ${success('✓')} OpenAI configured with ${accent(aiModel)}`);
+            }
+            // Custom base URL option for advanced users
+            const useCustomUrl = await confirm({
+                message: brand('?') + ' Use a custom API endpoint URL' + brand('?'),
+                default: false,
+            });
+            if (useCustomUrl) {
+                aiBaseUrl = await input({
+                    message: brand('?') + ' Custom endpoint URL' + brand(':'),
+                });
+            }
+        }
+        else {
+            console.log(`  ${dim('→')} AI provider skipped — use --provider flag or environment variables when running capabilities.`);
+        }
+        console.log('');
+    }
+    // ─── Step 8: Power Tools & Capabilities ─────────────────────────────────────
+    step(8, 'Power Tools & Capabilities');
+    console.log(`  ${accent('▸')} ${white('Power Tools')} ${dim('— advanced features included in NowAIKit v3.0')}`);
+    console.log('');
+    console.log(`    ${brand('fluent_query')}       ${dim('GlideQuery-style queries from your AI — structured,')}`);
+    console.log(`                       ${dim('no scripts needed. Filter, aggregate, group, sort.')}`);
+    console.log('');
+    console.log(`    ${brand('batch_request')}      ${dim('Bundle up to 50 API calls in one request.')}`);
+    console.log(`                       ${dim('Dramatically faster for bulk operations.')}`);
+    console.log('');
+    console.log(`    ${brand('execute_script')}     ${dim('Run server-side JavaScript directly on your instance.')}`);
+    console.log(`                       ${dim('Requires scripting permission (Step 5).')}`);
+    console.log('');
+    divider();
+    console.log('');
+    if (apexEnabled) {
+        console.log(`  ${accent('▸')} ${white('26 AI Capabilities')} ${dim('— run directly from terminal (no MCP client needed)')}`);
+        console.log('');
+        const capCategories = [
+            { icon: '🔍', label: 'Scan & Monitor', items: ['health', 'security', 'debt', 'upgrade', 'cmdb', 'automation'] },
+            { icon: '📋', label: 'Review & Audit', items: ['code', 'acls', 'scripts', 'flows'] },
+            { icon: '🔨', label: 'Build & Generate', items: ['business-rule', 'client-script', 'test-plan', 'app', 'flow', 'portal', 'uib', 'catalog', 'rest-api'] },
+            { icon: '⚡', label: 'Operations', items: ['triage', 'deploy', 'risk'] },
+            { icon: '📄', label: 'Documentation', items: ['app', 'release', 'runbook', 'script'] },
+        ];
+        for (const cat of capCategories) {
+            const cmds = cat.items.map(i => brand('/' + cat.label.split(' ')[0].toLowerCase() + '-' + i)).join(dim(', '));
+            console.log(`    ${cat.icon} ${white(cat.label)}: ${cmds}`);
+        }
+        console.log('');
+        console.log(dim('  Run any capability with: ') + brand('npx nowaikit run <capability>'));
+        console.log(dim('  Supports: markdown, ') + accent('PDF (branded)') + dim(', ') + accent('PPTX (slide deck)') + dim(' output'));
+        console.log(dim('  Generate reports:      ') + brand('npx nowaikit report scan-health --format pdf'));
+        console.log(dim('  Supports: ') + accent('Anthropic') + dim(', ') + accent('OpenAI') + dim(', ') + accent('Ollama') + dim(' (BYOK — bring your own key)'));
+        console.log('');
+        const showMoreCaps = await confirm({
+            message: brand('?') + ' Would you like to list all 26 capabilities in detail' + brand('?'),
+            default: false,
+        });
+        if (showMoreCaps) {
+            console.log('');
+            try {
+                const { getCapabilityMeta } = await import('../prompts/index.js');
+                const caps = getCapabilityMeta();
+                for (const c of caps) {
+                    console.log(`    ${brand('/' + c.name.padEnd(24))} ${dim(c.description)}`);
+                }
+            }
+            catch {
+                console.log(dim('  (Capability metadata not available — run ') + brand('npx nowaikit capabilities') + dim(' to see the full list)'));
+            }
+            console.log('');
+        }
+    }
+    else {
+        console.log(`  ${dim('▸')} ${dim('Apex AI Skills disabled — 26 capabilities not loaded.')}`);
+        console.log('');
+    }
+    // ─── Step 9: Prompts, Shortcuts & Resources ────────────────────────────────
+    step(9, 'Prompts, Shortcuts & Resources');
     console.log(`  ${accent('▸')} ${white('Slash Commands')} ${dim('(type / in your AI client)')}`);
     console.log('');
     const commands = [
@@ -471,8 +902,19 @@ export async function runSetup(options = {}) {
         clientSecret,
         authMode,
         writeEnabled,
+        scriptingEnabled,
+        cmdbWriteEnabled,
+        atfEnabled,
         toolPackage,
         nowAssistEnabled,
+        integrationMode,
+        mcpEnabled,
+        sdkEnabled,
+        apexEnabled,
+        aiProvider,
+        aiModel,
+        aiApiKey,
+        aiBaseUrl,
         group: group || undefined,
         environment,
         addedAt: new Date().toISOString(),
@@ -482,8 +924,26 @@ export async function runSetup(options = {}) {
         success(`✓ Instance "${instance.name}" saved`),
         dim(`  ~/.config/nowaikit/instances.json`),
     ], success);
-    // ─── Step 7: AI Client Installation ───────────────────────────────────────
-    step(7, 'Install into AI Client(s)');
+    // ─── Step 10: AI Client Installation ──────────────────────────────────────
+    step(10, 'Install into AI Client(s)');
+    // SDK-only mode: skip MCP client configuration
+    if (!mcpEnabled) {
+        console.log(`  ${dim('Skipping AI client installation — MCP Server not enabled.')}`);
+        console.log('');
+        box([
+            white('SDK / Apex mode — no MCP client needed'),
+            '',
+            dim('  Use NowAIKit directly in your code:'),
+            brand("    import { ServiceNowClient } from 'nowaikit/sdk';"),
+            '',
+            dim('  Or run capabilities from the terminal:'),
+            brand('    npx nowaikit run scan-health'),
+        ]);
+        await ensureGlobalCommand();
+        await runAutoConfiguration(instance, mcpEnabled, sdkEnabled, []);
+        printSummary(instance);
+        return;
+    }
     const clients = detectClients();
     const detected = clients.filter(c => c.detected);
     const notDetected = clients.filter(c => !c.detected);
@@ -493,6 +953,7 @@ export async function runSetup(options = {}) {
         const result = writeClientConfig(dotenvClient, instance);
         console.log(result.success ? success(`  ✓ ${result.message}`) : err(`  ✗ ${result.message}`));
         await ensureGlobalCommand();
+        await runAutoConfiguration(instance, mcpEnabled, sdkEnabled, []);
         printSummary(instance);
         return;
     }
@@ -512,6 +973,7 @@ export async function runSetup(options = {}) {
     if (chosen.length === 0) {
         console.log(warn('\n  No clients selected. Nothing written.'));
         await ensureGlobalCommand();
+        await runAutoConfiguration(instance, mcpEnabled, sdkEnabled, []);
         printSummary(instance);
         return;
     }
@@ -531,16 +993,130 @@ export async function runSetup(options = {}) {
         }
     }
     await ensureGlobalCommand();
+    await runAutoConfiguration(instance, mcpEnabled, sdkEnabled, chosen);
     printSummary(instance);
 }
+// ─── Step 11: Auto-Configuration ──────────────────────────────────────────────
+async function runAutoConfiguration(instance, mcpEnabled, sdkEnabled, chosenClientIds) {
+    step(11, 'Auto-Configuration');
+    // npm link (already handled by ensureGlobalCommand, but we surface it here)
+    console.log(`  ${accent('▸')} ${white('Global command')} ${dim('— already handled by npm link above')}`);
+    console.log('');
+    // MCP: detect ALL clients and offer to configure any that weren't already chosen
+    if (mcpEnabled) {
+        const clients = detectClients();
+        const allDetected = clients.filter(c => c.detected && c.id !== 'dotenv');
+        const unconfigured = allDetected.filter(c => !chosenClientIds.includes(c.id));
+        if (unconfigured.length > 0) {
+            console.log(`  ${accent('▸')} ${white('Additional AI clients found')}`);
+            console.log('');
+            unconfigured.forEach(c => console.log(`    ${warn('○')} ${white(c.name)} ${dim('— not yet configured')}`));
+            console.log('');
+            const configureAll = await confirm({
+                message: brand('?') + ' Auto-configure these additional clients too' + brand('?'),
+                default: false,
+            });
+            if (configureAll) {
+                console.log('');
+                for (const client of unconfigured) {
+                    const result = writeClientConfig(client, instance);
+                    console.log(result.success
+                        ? `  ${success('✓')} ${white(client.name)}: ${dim(result.message)}`
+                        : `  ${err('✗')} ${white(client.name)}: ${err(result.message)}`);
+                }
+            }
+        }
+        else {
+            console.log(`  ${success('✓')} All detected AI clients are already configured`);
+        }
+        console.log('');
+    }
+    // SDK: create starter nowaikit-example.ts in cwd
+    if (sdkEnabled) {
+        const examplePath = path.join(process.cwd(), 'nowaikit-example.ts');
+        if (existsSync(examplePath)) {
+            console.log(`  ${dim('→')} ${dim('Starter file already exists:')} ${accent(examplePath)}`);
+        }
+        else {
+            const shouldCreate = await confirm({
+                message: brand('?') + ' Create a starter ' + brand('nowaikit-example.ts') + ' in the current directory' + brand('?'),
+                default: true,
+            });
+            if (shouldCreate) {
+                const instanceUrl = instance.instanceUrl;
+                const starter = [
+                    `/**`,
+                    ` * NowAIKit SDK — starter example`,
+                    ` * Generated by \`nowaikit setup\``,
+                    ` *`,
+                    ` * Docs: https://nowaikit.com/docs/sdk`,
+                    ` */`,
+                    `import { ServiceNowClient } from 'nowaikit/sdk';`,
+                    ``,
+                    `const client = new ServiceNowClient({`,
+                    `  instanceUrl: '${instanceUrl}',`,
+                    `  authMethod: '${instance.authMethod}',`,
+                    instance.authMethod === 'basic'
+                        ? `  basic: { username: process.env.SN_USERNAME!, password: process.env.SN_PASSWORD! },`
+                        : `  oauth: { clientId: process.env.SN_CLIENT_ID!, clientSecret: process.env.SN_CLIENT_SECRET!, username: process.env.SN_USERNAME!, password: process.env.SN_PASSWORD! },`,
+                    `});`,
+                    ``,
+                    `// Query open P1 incidents`,
+                    `const incidents = await client.queryRecords({`,
+                    `  table: 'incident',`,
+                    `  query: 'priority=1^state!=6',`,
+                    `  fields: 'number,short_description,assigned_to,state',`,
+                    `  limit: 10,`,
+                    `});`,
+                    ``,
+                    `console.log('Open P1 incidents:', incidents.records);`,
+                    ``,
+                    `// Create an incident`,
+                    `const newIncident = await client.createRecord('incident', {`,
+                    `  short_description: 'Test incident from NowAIKit SDK',`,
+                    `  priority: '3',`,
+                    `  category: 'software',`,
+                    `});`,
+                    ``,
+                    `console.log('Created incident:', newIncident.sys_id);`,
+                ].join('\n');
+                writeFileSync(examplePath, starter, 'utf8');
+                console.log(`  ${success('✓')} Created starter file: ${accent(examplePath)}`);
+            }
+        }
+        console.log('');
+    }
+    // Getting Started summary
+    console.log(`  ${accent('▸')} ${white('Getting Started')}`);
+    console.log('');
+    if (mcpEnabled) {
+        console.log(`    ${brand('1.')} Restart your AI client (Claude Desktop, Cursor, etc.)`);
+        console.log(`    ${brand('2.')} Ask: ${accent('"List my 5 most recent open incidents"')}`);
+        console.log(`    ${brand('3.')} Try a slash command: ${accent('/morning-standup')}`);
+    }
+    else if (sdkEnabled) {
+        console.log(`    ${brand('1.')} Install dependencies: ${accent('npm install nowaikit')}`);
+        console.log(`    ${brand('2.')} Run the example: ${accent('npx tsx nowaikit-example.ts')}`);
+        console.log(`    ${brand('3.')} Explore capabilities: ${accent('npx nowaikit caps')}`);
+    }
+    else {
+        console.log(`    ${brand('1.')} Explore capabilities: ${accent('npx nowaikit caps')}`);
+        console.log(`    ${brand('2.')} Run a capability: ${accent('npx nowaikit run scan-health')}`);
+        console.log(`    ${brand('3.')} See all commands: ${accent('npx nowaikit shortcuts')}`);
+    }
+    console.log('');
+}
 // ─── Final summary ──────────────────────────────────────────────────────────
 function printSummary(instance) {
     console.log('');
     divider();
     console.log('');
-    console.log(bright('  ╔╗╔') + teal('╔═╗') + bright('╦ ╦') + dim('  ') + teal('╔═╗') + bright('╦') + teal('╦╔═') + bright('╦') + teal('╔╦╗'));
-    console.log(teal('  ║║║') + navy('║ ║') + teal('║║║') + dim('  ') + teal('╠═╣') + navy('║') + teal('╠╩╗') + navy('║') + teal(' ║ '));
-    console.log(navy('  ╝╚╝') + teal('╚═╝') + navy('╚╩╝') + dim('  ') + navy('╩ ╩') + teal('╩') + navy('╩ ╩') + teal('╩') + navy(' ╩ ') + dim('  ') + teal('✦'));
+    console.log(teal.bold('  ███╗  ██╗ ██████╗ ██╗    ██╗') + '   ' + gray(' █████╗ ██╗') + '   ' + teal.bold('██╗  ██╗██╗████████╗'));
+    console.log(teal.bold('  ████╗ ██║██╔═══██╗██║    ██║') + '   ' + gray('██╔══██╗██║') + '   ' + teal.bold('██║ ██╔╝██║╚══██╔══╝'));
+    console.log(teal.bold('  ██╔██╗██║██║   ██║██║ █╗ ██║') + '   ' + gray('███████║██║') + '   ' + teal.bold('█████╔╝ ██║   ██║'));
+    console.log(teal.bold('  ██║╚████║██║   ██║██║███╗██║') + '   ' + gray('██╔══██║██║') + '   ' + teal.bold('██╔═██╗ ██║   ██║'));
+    console.log(teal.bold('  ██║ ╚███║╚██████╔╝╚███╔███╔╝') + '   ' + gray('██║  ██║██║') + '   ' + teal.bold('██║  ██╗██║   ██║'));
+    console.log(teal.bold('  ╚═╝  ╚══╝ ╚═════╝  ╚══╝╚══╝') + '   ' + gray('╚═╝  ╚═╝╚═╝') + '   ' + teal.bold('╚═╝  ╚═╝╚═╝   ╚═╝') + '  ' + teal('✦'));
     console.log('');
     box([
         success('  Setup Complete!'),
@@ -551,20 +1127,64 @@ function printSummary(instance) {
         ...(instance.group ? [`${dim('  Group:')}      ${white(instance.group)}`] : []),
         `${dim('  Tools:')}      ${white(instance.toolPackage || 'full')}`,
         `${dim('  Write:')}      ${instance.writeEnabled ? success('enabled') : dim('disabled')}`,
+        ...(instance.scriptingEnabled ? [`${dim('  Scripting:')}  ${success('enabled')}`] : []),
+        ...(instance.cmdbWriteEnabled ? [`${dim('  CMDB Write:')} ${success('enabled')}`] : []),
+        ...(instance.atfEnabled ? [`${dim('  ATF:')}        ${success('enabled')}`] : []),
         `${dim('  NowAssist:')}  ${instance.nowAssistEnabled ? success('enabled') : dim('disabled')}`,
+        `${dim('  MCP:')}        ${instance.mcpEnabled !== false ? success('enabled') : dim('disabled')}`,
+        `${dim('  SDK:')}        ${instance.sdkEnabled ? success('enabled') : dim('disabled')}`,
+        `${dim('  Apex:')}       ${instance.apexEnabled !== false ? success('enabled') : dim('disabled')}`,
+        ...(instance.aiProvider ? [`${dim('  AI:')}         ${success(instance.aiProvider)}${instance.aiModel ? dim(' / ' + instance.aiModel) : ''}`] : []),
     ], brand);
+    // ── What's Next ──────────────────────────────────────────────────────────
     console.log('');
-    console.log(`  ${accent('▸')} ${white('Get started — restart your AI client, then try:')}`);
+    console.log(`  ${accent('▸')} ${white("What's Next")} ${dim('— 3 recommended first actions:')}`);
+    console.log('');
+    if (instance.mcpEnabled !== false) {
+        console.log(`    ${brand('1.')} ${white('Restart your AI client')} ${dim('so it picks up the new MCP server config')}`);
+        console.log(`    ${brand('2.')} ${white('Ask your AI')} ${dim('→')} ${accent('"Show me my open P1 incidents"')}`);
+        console.log(`    ${brand('3.')} ${white('Try a slash command')} ${dim('→')} ${accent('/morning-standup')}`);
+    }
+    else if (instance.sdkEnabled) {
+        console.log(`    ${brand('1.')} ${white('Install')} ${dim('→')} ${accent('npm install nowaikit')}`);
+        console.log(`    ${brand('2.')} ${white('Run the starter')} ${dim('→')} ${accent('npx tsx nowaikit-example.ts')}`);
+        console.log(`    ${brand('3.')} ${white('Explore capabilities')} ${dim('→')} ${accent('nowaikit caps')}`);
+    }
+    else {
+        console.log(`    ${brand('1.')} ${white('Explore capabilities')} ${dim('→')} ${accent('nowaikit caps')}`);
+        console.log(`    ${brand('2.')} ${white('Run a capability')} ${dim('→')} ${accent('nowaikit run scan-health')}`);
+        console.log(`    ${brand('3.')} ${white('See all shortcuts')} ${dim('→')} ${accent('nowaikit shortcuts')}`);
+    }
+    console.log('');
+    console.log(`  ${accent('▸')} ${white('Power Tools')} ${dim('(available to your AI automatically):')}`);
+    console.log('');
+    console.log(`    ${brand('fluent_query')}          ${dim('Structured queries — no scripts needed')}`);
+    console.log(`    ${brand('batch_request')}         ${dim('Up to 50 API calls in one request')}`);
+    if (instance.scriptingEnabled) {
+        console.log(`    ${brand('execute_script')}        ${dim('Run server-side JS on your instance')}`);
+    }
+    console.log('');
+    if (instance.sdkEnabled) {
+        console.log(`  ${accent('▸')} ${white('SDK Mode')} ${dim('(import in your TypeScript/JavaScript code):')}`);
+        console.log('');
+        console.log(`    ${brand("import { ServiceNowClient } from 'nowaikit/sdk';")} `);
+        console.log(`    ${brand("import { executeDirectly } from 'nowaikit/sdk';")} `);
+        console.log(`    ${brand("import { ServiceNowClient } from 'nowaikit/client';")} ${dim('// just the client')}`);
+        console.log('');
+    }
+    console.log(`  ${accent('▸')} ${white('Direct Mode')} ${dim('(run capabilities from terminal — no MCP client):')}`);
     console.log('');
-    console.log(`    ${brand('❯')} ${white('List my 5 most recent open incidents')}`);
-    console.log(`    ${brand('❯')} ${accent('/morning-standup')}`);
-    console.log(`    ${brand('❯')} ${accent('@my-incidents')}`);
+    console.log(`    ${brand('npx nowaikit capabilities')}    ${dim('List all 26 capabilities')}`);
+    console.log(`    ${brand('npx nowaikit run scan-health')} ${dim('Run a capability directly')}`);
+    console.log(`    ${brand('npx nowaikit report scan-health')} ${dim('Generate branded PDF report')}`);
+    console.log(`    ${brand('nowaikit shortcuts')}           ${dim('Show all commands & keyboard shortcuts')}`);
     console.log('');
     console.log(`  ${accent('▸')} ${white('Manage from the terminal:')}`);
     console.log('');
     console.log(`    ${brand('nowaikit setup --add')}         ${dim('Add another instance')}`);
     console.log(`    ${brand('nowaikit instances list')}      ${dim('Show configured instances')}`);
     console.log(`    ${brand('nowaikit instances remove')}    ${dim('Remove an instance')}`);
+    console.log(`    ${brand('nowaikit web')}                 ${dim('Open web dashboard')}`);
     if (instance.authMode === 'per-user') {
         console.log(`    ${brand('nowaikit auth login')}          ${dim('Authenticate as yourself')}`);
     }