the-grimoire-cli 0.4.0 → 0.5.0

package/.agents/NAVIGATOR.md

@@ -108,10 +108,15 @@ never edit `.agents/` in a consuming project — restate it in `local/` (loads l
 
 ### `bootstrap` — wire plugins / MCP / skills
 Reads base `tooling.json` ∪ `local/tooling.json` (base wins on key conflict; local adds new keys).
-- Dry-run (default): prints missing plugins, MCP servers to ensure, and skill install hints.
-- `--apply`: enables missing plugins in `~/.claude/settings.json` (backs it up first, only **adds**,
-  never disables), and merges MCP servers into `.mcp.json` (never clobbers an existing server). Flags
-  unresolved `${ENV}` placeholders.
+For every missing plugin it prints the **paste-in-Claude** install command (`/plugin marketplace add
+<source> && /plugin install <name>@<marketplace>`) — the CLI can only flip the enable flag, it cannot
+register a marketplace or run a slash command.
+- **Interactive** (default, in a terminal): asks `enable <plugin>? [y/N]` per missing plugin, then
+  enables the chosen ones in `~/.claude/settings.json` and merges MCP servers.
+- **Dry-run** (no TTY — CI/piped, and the `init`-embedded preview): prints the plan, writes nothing.
+- `--apply`: non-interactive enable-all — enables every missing plugin in `~/.claude/settings.json`
+  (backs it up first, only **adds**, never disables), and merges MCP servers into `.mcp.json` (never
+  clobbers an existing server). Flags unresolved `${ENV}` placeholders.
 
 ### `index` — regenerate per-folder `INDEX.md`
 One-line-per-file table built from each file's frontmatter `description:` or its H1 + first sentence.

package/.agents/VERSION

@@ -1,4 +1,4 @@
-grimoire v0.4.0
+grimoire v0.5.0
 source: this repository IS the template (canonical source of truth)
 note: informational only — package.json `version` is the single source of truth;
       `grimoire init` / `grimoire sync` regenerate this from it and stamp the build sha.

package/.agents/stack/README.md

@@ -60,7 +60,9 @@ simplify away" guardrail, and the `ponytail:` shortcut marker — tool-agnostic,
 Codex, OpenCode, Gemini, pi); install is per-machine, optional.
 
 - **Install** (Claude Code): `/plugin marketplace add DietrichGebert/ponytail` then
-  `/plugin install ponytail@ponytail`. Other hosts: see the ponytail README.
+  `/plugin install ponytail@ponytail`. Other hosts: see the ponytail README. ponytail is declared in
+  `tooling.json` (with a `source` field = the marketplace repo), so `grimoire bootstrap` lists it and
+  prints exactly this paste command.
 - **`/ponytail-review`** — review the current diff for over-engineering; hands back a delete-list.
 - **`/ponytail-audit`** — same, whole repo instead of the diff.
 - **`/ponytail-debt`** — harvest the `ponytail:` shortcut markers into a ledger so "later" isn't

package/.agents/tooling.json

@@ -6,7 +6,8 @@
     { "name": "ui-ux-pro-max", "marketplace": "ui-ux-pro-max-skill", "scope": "user" },
     { "name": "andrej-karpathy-skills", "marketplace": "karpathy-skills", "scope": "user" },
     { "name": "pordee", "marketplace": "pordee", "scope": "user" },
-    { "name": "caveman", "marketplace": "caveman", "scope": "user" }
+    { "name": "caveman", "marketplace": "caveman", "scope": "user" },
+    { "name": "ponytail", "marketplace": "ponytail", "scope": "user", "source": "DietrichGebert/ponytail" }
   ],
   "skills": [
     { "name": "mattpocock", "install": "npx skills@latest add mattpocock/skills", "setup": "/setup-matt-pocock-skills", "source": "https://github.com/mattpocock/skills", "scope": "user" },

package/bin/grimoire.mjs

@@ -7,6 +7,7 @@ import path from "node:path";
 import fs from "node:fs";
 import os from "node:os";
 import { execFileSync } from "node:child_process";
+import { createInterface } from "node:readline";
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const TEMPLATE_ROOT = path.resolve(__dirname, "..");
@@ -82,6 +83,25 @@ function applyPlugins(sp, settings, missing) {
   fs.writeFileSync(sp, JSON.stringify(settings, null, 2) + "\n");
 }
 
+// The Claude `/plugin …` commands the user pastes to actually install a plugin: enabling the flag
+// in settings.json only works once its marketplace is registered, and the CLI can't run a slash
+// command. Official-marketplace plugins need no `marketplace add`; a custom one needs its `source`
+// repo (omit the add line when we don't know it).
+function pluginInstallHint(pl) {
+  const key = pluginKey(pl);
+  if (pl.marketplace === "claude-plugins-official") return `/plugin install ${key}`;
+  if (pl.source) return `/plugin marketplace add ${pl.source} && /plugin install ${key}`;
+  return `/plugin install ${key}  (add its marketplace first)`;
+}
+
+// ponytail: TTY-only y/N prompt; callers must guard on process.stdin.isTTY so CI never blocks here.
+function promptYesNo(question) {
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve) => {
+    rl.question(`${question} [y/N] `, (a) => { rl.close(); resolve(/^y(es)?$/i.test(a.trim())); });
+  });
+}
+
 // Collect unresolved ${ENV} placeholders anywhere in a server definition (env for stdio servers,
 // headers/url for http servers, etc.). Recurses over strings so transport shape does not matter.
 function unresolvedEnv(node, out) {
@@ -301,7 +321,9 @@ function init({ dir }) {
   log("  project-owned (seeded if absent): codex/ journal/ local/");
   log("  next: set the active stack profile + testing policy in local/AGENTS.local.md");
 
-  bootstrap({ dir, apply: false });
+  // init only previews; `grimoire bootstrap` does the interactive install. The dry-run path has no
+  // await today, but .catch keeps a future async step from becoming a silent unhandled rejection.
+  bootstrap({ dir, apply: false, prompt: false }).catch((e) => fail(e.message));
 }
 
 function sync({ dir }) {
@@ -336,24 +358,39 @@ function sync({ dir }) {
   log("  tooling.json may have changed; run `grimoire bootstrap` to apply plugin/MCP updates.");
 }
 
-function bootstrap({ dir, apply }) {
+async function bootstrap({ dir, apply, prompt = true }) {
   const tooling = mergedTooling(dir); // base ∪ local/tooling.json
   const sp = claudeSettingsPath();
   const settings = readSettings(sp);
   const missing = missingPlugins(tooling, settings);
+  // Interactive (per-plugin y/N) only in a real terminal; --apply forces enable-all; otherwise
+  // (CI / piped stdin / the init-embedded call) stay a dry-run so it never blocks on input.
+  const interactive = !apply && prompt && !!process.stdin.isTTY;
+  const writes = apply || interactive;
 
-  log(`grimoire bootstrap (${apply ? "apply" : "dry-run"})`);
+  log(`grimoire bootstrap (${apply ? "apply" : interactive ? "interactive" : "dry-run"})`);
 
   if (missing.length === 0) {
     log("  plugins: all required plugins already enabled.");
   } else {
     log("  plugins missing:");
     for (const pl of missing) log(`    - ${pluginKey(pl)}`);
-    if (apply) {
-      applyPlugins(sp, settings, missing);
-      log(`  enabled ${missing.length} plugin(s); backup at ${sp}.bak`);
-    } else {
-      log(`  (dry-run) re-run with --apply to enable them in ${sp}`);
+    // The flag flip alone can't register a marketplace, so always show the paste-in-Claude commands.
+    log("  to install, paste in Claude Code:");
+    for (const pl of missing) log(`    ${pluginInstallHint(pl)}`);
+
+    let chosen = missing; // --apply enables all; interactive narrows to the user's picks
+    if (interactive) {
+      chosen = [];
+      for (const pl of missing) if (await promptYesNo(`  enable ${pluginKey(pl)}?`)) chosen.push(pl);
+    }
+    if (writes && chosen.length) {
+      applyPlugins(sp, settings, chosen);
+      log(`  enabled ${chosen.length} plugin(s); backup at ${sp}.bak`);
+    } else if (interactive) {
+      log("  no plugins selected.");
+    } else if (!writes) {
+      log(`  (dry-run) re-run with --apply to enable all, or run \`grimoire bootstrap\` in a terminal to choose`);
     }
   }
 
@@ -364,7 +401,7 @@ function bootstrap({ dir, apply }) {
     }
   }
 
-  if (apply) {
+  if (writes) {
     const { added, needsEnv } = mergeMcp(dir, tooling);
     if (added.length) log(`  mcp: added ${added.join(", ")} to .mcp.json`);
     else log("  mcp: all servers already present.");
@@ -607,7 +644,7 @@ function help() {
   log("grimoire <command> [--dir <path>]\n");
   log("  init        scaffold .agents/ + CLAUDE.md + codex/ journal/ local/ (migrates an old layout; backs up first)");
   log("  sync        wholesale-replace the .agents/ contract from the template (codex/ journal/ local/ untouched)");
-  log("  bootstrap   enable required plugins / MCP / skills (dry-run; --apply to write)");
+  log("  bootstrap   enable plugins / MCP / skills — interactive y/N in a terminal, --apply enables all (dry-run otherwise)");
   log("  index       regenerate per-folder INDEX.md (--check fails on drift, for CI)");
   log("  doctor      health-check the project's wiring (exits non-zero on error, for CI)");
   log("  --version   print the release version + build sha (-v)");
@@ -620,7 +657,7 @@ if (import.meta.url === `file://${process.argv[1]}` || process.argv[1]?.endsWith
   switch (args.cmd) {
     case "init": init(args); break;
     case "sync": sync(args); break;
-    case "bootstrap": bootstrap(args); break;
+    case "bootstrap": await bootstrap(args); break;
     case "index": index(args); break;
     case "doctor": doctor(args); break;
     case "--version": case "-v": version(); break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "the-grimoire-cli",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "A reusable, tool-agnostic AI-agent operating system. Init it into any project; sync template updates without clobbering local customization.",
   "type": "module",
   "bin": {