titan-agent 2026.4.2 → 2026.4.3

package/dist/cli/index.js

@@ -4629,180 +4629,255 @@ init_config();
 init_constants();
 init_helpers();
 init_memory();
-import { select, input, confirm, password } from "@inquirer/prompts";
+import { select, input, confirm, password, checkbox } from "@inquirer/prompts";
 import chalk3 from "chalk";
-async function runOnboard(installDaemon) {
-  console.log(chalk3.cyan("\n\u{1F680} Welcome to TITAN Setup!\n"));
-  console.log(chalk3.gray("This wizard will help you configure your personal AI assistant.\n"));
+async function fetchOllamaModels(baseUrl) {
+  try {
+    const res = await fetch(`${baseUrl}/api/tags`, { signal: AbortSignal.timeout(3e3) });
+    if (!res.ok) return [];
+    const json = await res.json();
+    return (json.models || []).map((m) => m.name).filter(Boolean);
+  } catch {
+    return [];
+  }
+}
+async function runOnboard(_installDaemon) {
+  console.log(chalk3.cyan("\n\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557"));
+  console.log(chalk3.cyan("\u2551   \u26A1 Welcome to TITAN Setup Wizard!      \u2551"));
+  console.log(chalk3.cyan("\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D\n"));
+  console.log(chalk3.gray("This wizard will configure your personal AI assistant.\n"));
+  console.log(chalk3.gray("Press Ctrl+C at any time to cancel.\n"));
   const config = getDefaultConfig();
-  console.log(chalk3.yellow("\u2500\u2500\u2500 Step 1: AI Provider \u2500\u2500\u2500\n"));
+  console.log(chalk3.yellow("\u2500\u2500\u2500 Step 1 of 7: AI Provider \u2500\u2500\u2500\n"));
   const provider = await select({
-    message: "Which AI provider would you like to use?",
+    message: "Which AI provider would you like to use as your primary?",
     choices: [
-      { name: "Anthropic (Claude) \u2014 Recommended", value: "anthropic" },
-      { name: "OpenAI (GPT-4)", value: "openai" },
-      { name: "Google (Gemini)", value: "google" },
-      { name: "Ollama (Local models)", value: "ollama" }
+      { name: "\u{1F7E3} Anthropic (Claude) \u2014 Best reasoning, recommended", value: "anthropic" },
+      { name: "\u{1F7E2} OpenAI (GPT-4o) \u2014 Great all-rounder", value: "openai" },
+      { name: "\u{1F535} Google (Gemini) \u2014 Fast & multimodal", value: "google" },
+      { name: "\u{1F7E0} Ollama (Local) \u2014 Free, private, runs on your machine", value: "ollama" }
     ]
   });
+  console.log(chalk3.yellow("\n\u2500\u2500\u2500 Step 2 of 7: Model \u2500\u2500\u2500\n"));
   if (provider === "ollama") {
     const ollamaUrl = await input({
       message: "Ollama base URL:",
       default: "http://localhost:11434"
     });
     config.providers.ollama.baseUrl = ollamaUrl;
-    config.agent.model = "ollama/llama3.1";
+    console.log(chalk3.gray(`
+  \u{1F50D} Detecting models at ${ollamaUrl}...`));
+    const installedModels = await fetchOllamaModels(ollamaUrl);
+    if (installedModels.length > 0) {
+      console.log(chalk3.green(`  \u2705 Found ${installedModels.length} installed model(s)
+`));
+      const chosen = await select({
+        message: "Select a model to use:",
+        choices: installedModels.map((m) => ({ name: m, value: `ollama/${m}` }))
+      });
+      config.agent.model = chosen;
+    } else {
+      console.log(chalk3.yellow("  \u26A0\uFE0F  No models detected (Ollama may not be running, or no models pulled yet)."));
+      console.log(chalk3.gray("  Run: ollama pull llama3.1   to install a model\n"));
+      const modelName = await input({
+        message: "Enter the Ollama model name to use:",
+        default: "llama3.1"
+      });
+      config.agent.model = `ollama/${modelName}`;
+    }
   } else {
     const apiKey = await password({
-      message: `Enter your ${provider} API key:`
+      message: `Enter your ${provider} API key:`,
+      mask: "*"
+    });
+    const modelChoices = {
+      anthropic: [
+        { name: "claude-sonnet-4-20250514 (Latest, recommended)", value: "anthropic/claude-sonnet-4-20250514" },
+        { name: "claude-opus-4-0 (Most capable, slower)", value: "anthropic/claude-opus-4-0" },
+        { name: "claude-3-5-haiku-20241022 (Fastest, cheapest)", value: "anthropic/claude-3-5-haiku-20241022" }
+      ],
+      openai: [
+        { name: "gpt-4o (Recommended)", value: "openai/gpt-4o" },
+        { name: "gpt-4o-mini (Fast & cheap)", value: "openai/gpt-4o-mini" },
+        { name: "o3 (Best reasoning)", value: "openai/o3" },
+        { name: "o4-mini (Fast reasoning)", value: "openai/o4-mini" }
+      ],
+      google: [
+        { name: "gemini-2.5-flash (Recommended)", value: "google/gemini-2.5-flash" },
+        { name: "gemini-2.5-pro (Most capable)", value: "google/gemini-2.5-pro" },
+        { name: "gemini-2.0-flash (Fast)", value: "google/gemini-2.0-flash" }
+      ]
+    };
+    const models = modelChoices[provider] || [];
+    const selectedModel = await select({
+      message: "Which model would you like to use?",
+      choices: [...models, { name: "\u270F\uFE0F  Enter manually", value: "__manual__" }]
     });
+    if (selectedModel === "__manual__") {
+      config.agent.model = await input({ message: "Enter model identifier:" });
+    } else {
+      config.agent.model = selectedModel;
+    }
     if (provider === "anthropic") {
       config.providers.anthropic.apiKey = apiKey;
-      config.agent.model = "anthropic/claude-sonnet-4-20250514";
     } else if (provider === "openai") {
       config.providers.openai.apiKey = apiKey;
-      config.agent.model = "openai/gpt-4o";
     } else if (provider === "google") {
       config.providers.google.apiKey = apiKey;
-      config.agent.model = "google/gemini-2.5-flash";
     }
-  }
-  console.log(chalk3.yellow("\n\u2500\u2500\u2500 Step 2: Model \u2500\u2500\u2500\n"));
-  const useDefault = await confirm({
-    message: `Use default model (${config.agent.model})?`,
-    default: true
-  });
-  if (!useDefault) {
-    const model = await input({
-      message: "Enter model identifier (e.g., anthropic/claude-opus-4-0):",
-      default: config.agent.model
+    const addFallback = await confirm({
+      message: "Add a second provider as fallback (for failover if the primary is unavailable)?",
+      default: false
     });
-    config.agent.model = model;
-  }
-  console.log(chalk3.yellow("\n\u2500\u2500\u2500 Step 3: Channels \u2500\u2500\u2500\n"));
-  const enableChannels = await confirm({
-    message: "Would you like to set up messaging channels (Discord, Telegram, Slack)?",
-    default: false
-  });
-  if (enableChannels) {
-    const selectedChannels = await select({
-      message: "Which channel to configure?",
-      choices: [
-        { name: "Discord", value: "discord" },
-        { name: "Telegram", value: "telegram" },
-        { name: "Slack", value: "slack" },
-        { name: "Skip for now", value: "skip" }
-      ]
-    });
-    if (selectedChannels !== "skip") {
-      const token = await password({
-        message: `Enter your ${selectedChannels} bot token:`
+    if (addFallback) {
+      const fallbackProviders = ["anthropic", "openai", "google", "ollama"].filter((p) => p !== provider);
+      const fallback = await select({
+        message: "Select fallback provider:",
+        choices: fallbackProviders.map((p) => ({ name: p.charAt(0).toUpperCase() + p.slice(1), value: p }))
       });
-      if (selectedChannels === "discord") {
-        config.channels.discord.enabled = true;
-        config.channels.discord.token = token;
-      } else if (selectedChannels === "telegram") {
-        config.channels.telegram.enabled = true;
-        config.channels.telegram.token = token;
-      } else if (selectedChannels === "slack") {
-        config.channels.slack.enabled = true;
-        config.channels.slack.token = token;
+      if (fallback === "ollama") {
+        const ollamaUrl = await input({ message: "Ollama base URL:", default: "http://localhost:11434" });
+        config.providers.ollama.baseUrl = ollamaUrl;
+      } else {
+        const fallbackKey = await password({ message: `Enter your ${fallback} API key:`, mask: "*" });
+        if (fallback === "anthropic") config.providers.anthropic.apiKey = fallbackKey;
+        else if (fallback === "openai") config.providers.openai.apiKey = fallbackKey;
+        else if (fallback === "google") config.providers.google.apiKey = fallbackKey;
       }
     }
   }
-  console.log(chalk3.yellow("\n\u2500\u2500\u2500 Step 4: Security \u2500\u2500\u2500\n"));
-  const sandboxMode = await select({
-    message: "Sandbox mode for non-main sessions:",
-    choices: [
-      { name: "Host (full access, single-user)", value: "host" },
-      { name: "Docker (isolated containers)", value: "docker" },
-      { name: "None (no restrictions)", value: "none" }
-    ]
-  });
-  config.security.sandboxMode = sandboxMode;
-  console.log(chalk3.yellow("\n\u2500\u2500\u2500 Step 5: Autonomy \u2500\u2500\u2500\n"));
-  console.log(chalk3.gray("  This controls how much freedom TITAN has to act on its own.\n"));
+  console.log(chalk3.yellow("\n\u2500\u2500\u2500 Step 3 of 7: Autonomy \u2500\u2500\u2500\n"));
+  console.log(chalk3.gray("  Controls how independently TITAN acts.\n"));
   const autonomyMode = await select({
     message: "How much autonomy should TITAN have?",
     choices: [
       {
-        name: "\u{1F7E1} Supervised (Recommended) \u2014 Safe ops run freely, dangerous ops ask you first",
+        name: "\u{1F7E1} Supervised (Recommended) \u2014 safe ops run freely, dangerous ops ask first",
         value: "supervised"
       },
       {
-        name: "\u{1F7E2} Autonomous \u2014 Full auto, TITAN acts without asking. Best for power users.",
+        name: "\u{1F7E2} Autonomous \u2014 full auto, acts without asking. Best for power users.",
         value: "autonomous"
       },
       {
-        name: "\u{1F534} Locked \u2014 Every action requires your approval. Maximum control.",
+        name: "\u{1F534} Locked \u2014 every single action requires your approval.",
         value: "locked"
       }
     ]
   });
-  config.autonomy = { mode: autonomyMode };
-  console.log(chalk3.yellow("\n\u2500\u2500\u2500 Step 6: Gateway \u2500\u2500\u2500\n"));
-  const gatewayPort = await input({
-    message: "Gateway port:",
-    default: "18789"
+  config.autonomy.mode = autonomyMode;
+  console.log(chalk3.yellow("\n\u2500\u2500\u2500 Step 4 of 7: Security \u2500\u2500\u2500\n"));
+  const sandboxMode = await select({
+    message: "Sandbox mode for shell commands:",
+    choices: [
+      { name: "\u{1F5A5}\uFE0F  Host (Full access \u2014 single user machines)", value: "host" },
+      { name: "\u{1F433} Docker (Isolated containers \u2014 recommended for shared machines)", value: "docker" },
+      { name: "\u{1F6AB} None (No restrictions \u2014 not recommended)", value: "none" }
+    ]
+  });
+  config.security.sandboxMode = sandboxMode;
+  const enableShield = await confirm({
+    message: "Enable Prompt Injection Shield? (blocks attempts to hijack TITAN via chat messages)",
+    default: true
+  });
+  config.security.shield.enabled = enableShield;
+  if (enableShield) {
+    const shieldMode = await select({
+      message: "Shield strictness:",
+      choices: [
+        { name: "Strict (recommended) \u2014 blocks suspicious payloads aggressively", value: "strict" },
+        { name: "Standard \u2014 blocks only obvious injection attempts", value: "standard" }
+      ]
+    });
+    config.security.shield.mode = shieldMode;
+  }
+  console.log(chalk3.yellow("\n\u2500\u2500\u2500 Step 5 of 7: Messaging Channels \u2500\u2500\u2500\n"));
+  console.log(chalk3.gray("  Connect TITAN to Discord, Telegram, Slack, etc. (all optional)\n"));
+  const channelChoices = await checkbox({
+    message: "Which channels would you like to configure? (space to select, enter to continue)",
+    choices: [
+      { name: "\u{1F3AE} Discord", value: "discord" },
+      { name: "\u2708\uFE0F  Telegram", value: "telegram" },
+      { name: "\u{1F4BC} Slack", value: "slack" },
+      { name: "\u23ED\uFE0F  Skip \u2014 configure later with `titan config`", value: "skip" }
+    ]
+  });
+  if (!channelChoices.includes("skip")) {
+    for (const channel of channelChoices) {
+      const token = await password({ message: `  ${channel} bot token:`, mask: "*" });
+      if (channel === "discord") {
+        config.channels.discord.enabled = true;
+        config.channels.discord.token = token;
+      } else if (channel === "telegram") {
+        config.channels.telegram.enabled = true;
+        config.channels.telegram.token = token;
+      } else if (channel === "slack") {
+        config.channels.slack.enabled = true;
+        config.channels.slack.token = token;
+      }
+    }
+  }
+  console.log(chalk3.yellow("\n\u2500\u2500\u2500 Step 6 of 7: Gateway \u2500\u2500\u2500\n"));
+  console.log(chalk3.gray("  Mission Control is served at http://127.0.0.1:<port>\n"));
+  const useDefaultPort = await confirm({
+    message: "Use default gateway port (18789)?",
+    default: true
   });
-  config.gateway.port = parseInt(gatewayPort, 10);
+  if (!useDefaultPort) {
+    const port = await input({ message: "Enter gateway port:", default: "18789" });
+    config.gateway.port = parseInt(port, 10);
+  }
+  const enableGatewayAuth = await confirm({
+    message: "Enable gateway authentication? (recommended if accessible from other devices)",
+    default: false
+  });
+  if (enableGatewayAuth) {
+    const authMode = await select({
+      message: "Authentication mode:",
+      choices: [
+        { name: "Token (API key in request header)", value: "token" },
+        { name: "Password (browser prompt)", value: "password" }
+      ]
+    });
+    config.gateway.auth.mode = authMode;
+    if (authMode === "token") {
+      config.gateway.auth.token = await password({ message: "Set a gateway token:", mask: "*" });
+    } else {
+      config.gateway.auth.password = await password({ message: "Set a gateway password:", mask: "*" });
+    }
+  }
+  console.log(chalk3.yellow("\n\u2500\u2500\u2500 Step 7 of 7: Logging \u2500\u2500\u2500\n"));
+  const logLevel = await select({
+    message: "Log level:",
+    choices: [
+      { name: "info (recommended)", value: "info" },
+      { name: "debug (verbose \u2014 for troubleshooting)", value: "debug" },
+      { name: "warn (quiet \u2014 warnings and errors only)", value: "warn" },
+      { name: "silent (no logs)", value: "silent" }
+    ]
+  });
+  config.logging.level = logLevel;
   console.log(chalk3.yellow("\n\u2500\u2500\u2500 Setting up workspace \u2500\u2500\u2500\n"));
   ensureDir(TITAN_HOME);
   ensureDir(TITAN_WORKSPACE);
   ensureDir(TITAN_SKILLS_DIR);
   initMemory();
   saveConfig(config);
-  if (installDaemon) {
-    console.log(chalk3.yellow("\n\u2500\u2500\u2500 Installing daemon \u2500\u2500\u2500\n"));
-    await installDaemonService();
-  }
   const modeEmoji = autonomyMode === "autonomous" ? "\u{1F7E2}" : autonomyMode === "locked" ? "\u{1F534}" : "\u{1F7E1}";
-  console.log(chalk3.green("\n\u2705 TITAN setup complete!\n"));
-  console.log(chalk3.white("  Configuration:"));
-  console.log(chalk3.gray(`  Model:    ${config.agent.model}`));
-  console.log(chalk3.gray(`  Autonomy: ${modeEmoji} ${autonomyMode}`));
-  console.log(chalk3.gray(`  Sandbox:  ${config.security.sandboxMode}`));
-  console.log(chalk3.white("\n  Quick start:"));
-  console.log(chalk3.gray("  $ titan gateway          # Start Mission Control"));
-  console.log(chalk3.gray('  $ titan agent -m "Hello" # Send a message'));
-  console.log(chalk3.gray("  $ titan doctor           # Check everything is OK"));
-  console.log(chalk3.gray(`
-  Config:    ${TITAN_CONFIG_PATH}`));
-  console.log(chalk3.gray(`  Dashboard: http://127.0.0.1:${config.gateway.port}
-`));
-}
-async function installDaemonService() {
-  const platform = process.platform;
-  if (platform === "linux") {
-    console.log(chalk3.gray("Creating systemd user service..."));
-    const serviceContent = `[Unit]
-Description=TITAN Gateway
-After=network.target
-
-[Service]
-Type=simple
-ExecStart=${process.execPath} ${process.argv[1]} gateway
-Restart=on-failure
-RestartSec=10
-
-[Install]
-WantedBy=default.target
-`;
-    const { writeFileSync: writeFileSync9, mkdirSync: mkdirSync4, existsSync: existsSync14 } = await import("fs");
-    const { join: join8 } = await import("path");
-    const { homedir: homedir2 } = await import("os");
-    const serviceDir = join8(homedir2(), ".config", "systemd", "user");
-    if (!existsSync14(serviceDir)) mkdirSync4(serviceDir, { recursive: true });
-    writeFileSync9(join8(serviceDir, "titan.service"), serviceContent);
-    console.log(chalk3.green("  Service file installed. Enable with:"));
-    console.log(chalk3.gray("  $ systemctl --user enable titan"));
-    console.log(chalk3.gray("  $ systemctl --user start titan"));
-  } else if (platform === "darwin") {
-    console.log(chalk3.gray("Creating launchd plist..."));
-    console.log(chalk3.yellow("  macOS daemon installation - create a LaunchAgent plist manually."));
-  } else {
-    console.log(chalk3.yellow("  Daemon installation not supported on this platform."));
-  }
+  console.log(chalk3.green("\n\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557"));
+  console.log(chalk3.green("\u2551   \u2705  TITAN is ready!                    \u2551"));
+  console.log(chalk3.green("\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D\n"));
+  console.log(chalk3.white("  Your configuration:"));
+  console.log(chalk3.gray(`    Model:    ${config.agent.model}`));
+  console.log(chalk3.gray(`    Autonomy: ${modeEmoji} ${autonomyMode}`));
+  console.log(chalk3.gray(`    Sandbox:  ${config.security.sandboxMode}`));
+  console.log(chalk3.gray(`    Logs:     ${config.logging.level}`));
+  console.log(chalk3.gray(`    Config:   ${TITAN_CONFIG_PATH}`));
+  console.log(chalk3.white("\n  Next steps:"));
+  console.log(chalk3.cyan("    titan gateway          ") + chalk3.gray(`\u2192 Open Mission Control at http://127.0.0.1:${config.gateway.port}`));
+  console.log(chalk3.cyan('    titan agent -m "Hello" ') + chalk3.gray("\u2192 Send a direct message"));
+  console.log(chalk3.cyan("    titan doctor           ") + chalk3.gray("\u2192 Diagnose configuration & connectivity"));
+  console.log();
 }
 
 // src/security/pairing.ts