apm/cmd/

init.rs

use anyhow::Result;
use serde_json::Value;
use std::io::{self, BufRead, IsTerminal, Write};
use std::path::{Path, PathBuf};
use std::process::Command;

pub fn run(root: &Path, no_claude: bool, migrate: bool, with_docker: bool, quiet: bool, yes: bool) -> Result<()> {
    if migrate {
        let msgs = apm_core::init::migrate(root)?;
        for msg in msgs {
            println!("{msg}");
        }
        return Ok(());
    }

    let is_tty = std::io::stdin().is_terminal();
    let yes = yes || !is_tty;

    // Check if git_host is configured
    let has_git_host = {
        let config_path = root.join(".apm/config.toml");
        config_path.exists() && apm_core::config::Config::load(root)
            .map(|cfg| cfg.git_host.provider.is_some())
            .unwrap_or(false)
    };
    let local_toml = root.join(".apm/local.toml");

    let username = if !has_git_host && !local_toml.exists() && is_tty {
        let gh_default = apm_core::github::gh_username();
        prompt_username(gh_default.as_deref())?
    } else {
        String::new()
    };

    let default_name = root.file_name().and_then(|n| n.to_str()).unwrap_or("project").to_string();
    let (name, description) = if is_tty && !root.join(".apm/config.toml").exists() {
        prompt_project_info(&default_name)?
    } else {
        (String::new(), String::new())
    };

    let name_opt = if name.is_empty() { None } else { Some(name.as_str()) };
    let desc_opt = if description.is_empty() { None } else { Some(description.as_str()) };
    let user_opt = if username.is_empty() { None } else { Some(username.as_str()) };

    let workers_default = if no_claude { Some("debug/worker") } else { None };
    let setup_out = apm_core::init::setup(root, name_opt, desc_opt, user_opt, workers_default)?;
    for msg in &setup_out.messages {
        println!("{msg}");
    }

    if with_docker {
        let docker_out = apm_core::init::setup_docker(root)?;
        for msg in &docker_out.messages {
            if msg.is_empty() {
                println!();
            } else {
                println!("{msg}");
            }
        }
    }
    update_claude_settings(root, no_claude, yes)?;
    update_user_claude_settings(yes)?;
    warn_if_settings_untracked(root);
    println!("apm initialized.");
    if std::io::stdout().is_terminal() && !quiet {
        println!();
        println!("Next steps:");
        println!("  * Commit the config:   git add .apm/ && git commit -m 'chore: init apm'");
        println!("  * Create a ticket:     apm new");
        println!("  * Open the web UI:     apm-server");
        println!("  * Full CLI reference:  apm --help");
    }
    Ok(())
}

fn prompt_username(default: Option<&str>) -> Result<String> {
    let mut stdout = std::io::stdout();
    let stdin = std::io::stdin();
    match default {
        Some(d) => print!("Username [{}]: ", d),
        None => print!("Username []: "),
    }
    stdout.flush()?;
    let mut input = String::new();
    stdin.lock().read_line(&mut input)?;
    let trimmed = input.trim();
    if trimmed.is_empty() {
        Ok(default.unwrap_or("").to_string())
    } else {
        Ok(trimmed.to_string())
    }
}

fn prompt_project_info(default_name: &str) -> Result<(String, String)> {
    let mut stdout = std::io::stdout();
    let stdin = std::io::stdin();

    print!("Project name [{}]: ", default_name);
    stdout.flush()?;
    let mut name_input = String::new();
    stdin.lock().read_line(&mut name_input)?;
    let name = {
        let trimmed = name_input.trim();
        if trimmed.is_empty() {
            default_name.to_string()
        } else {
            trimmed.to_string()
        }
    };

    print!("Project description []: ");
    stdout.flush()?;
    let mut desc_input = String::new();
    stdin.lock().read_line(&mut desc_input)?;
    let description = desc_input.trim().to_string();

    Ok((name, description))
}

fn warn_if_settings_untracked(root: &Path) {
    let settings = root.join(".claude/settings.json");
    if !settings.exists() {
        return;
    }
    let tracked = Command::new("git")
        .args(["ls-files", "--error-unmatch", ".claude/settings.json"])
        .current_dir(root)
        .output()
        .map(|o| o.status.success())
        .unwrap_or(false);
    if !tracked {
        eprintln!(
            "Warning: .claude/settings.json exists but is not committed. \
Agent worktrees won't have it — run: git add .claude/settings.json && git commit"
        );
    }
}

const APM_ALLOW_ENTRIES: &[&str] = &[
    "Bash(apm sync*)",
    "Bash(apm next*)",
    "Bash(apm list*)",
    "Bash(apm show*)",
    "Bash(apm set *)",
    "Bash(apm state *)",
    "Bash(apm start *)",
    "Bash(apm spec *)",
    "Bash(apm agents*)",
    "Bash(apm _hook *)",
    "Bash(apm verify*)",
    "Bash(apm new *)",
    "Bash(apm worktrees*)",
    "Bash(apm help*)",
    "Bash(apm review *)",
    "Bash(apm close *)",
    "Bash(apm assign *)",
    "Bash(apm validate*)",
    "Bash(apm work *)",
    "Bash(apm move *)",
    "Bash(apm archive *)",
    "Bash(apm clean *)",
    "Bash(apm workers*)",
    "Bash(apm epic *)",
    "Bash(apm register *)",
    "Bash(apm sessions *)",
    "Bash(apm revoke *)",
    "Bash(apm version*)",
    "Bash(apm instructions*)",
    // code editing
    "Edit",
    "Write",
    // read-only tools
    "Read",
    "Glob",
    "Grep",
    // git ops in worktree
    "Bash(git -C *)",
    // read helpers
    "Bash(ls *)",
    "Bash(rg *)",
    "Bash(grep *)",
    "Bash(find *)",
    "Bash(cat *)",
    "Bash(head *)",
    "Bash(tail *)",
    "Bash(wc *)",
    "Bash(sort *)",
    "Bash(uniq *)",
    "Bash(diff *)",
    "Bash(which *)",
    // text manipulation
    "Bash(sed *)",
    "Bash(awk *)",
    // file ops (safe areas)
    "Bash(mv *)",
    "Bash(cp *)",
    "Bash(rm /tmp/*)",
    "Bash(mkdir -p /tmp/*)",
    // shell building blocks
    "Bash(echo *)",
    "Bash(test *)",
    "Bash(true)",
    "Bash(false)",
];

/// Entries added to ~/.claude/settings.json so subagents running in isolated
/// worktrees (which don't inherit project settings) can use git and apm.
const APM_USER_ALLOW_ENTRIES: &[&str] = &[
    "Bash(git add*)",
    "Bash(git commit*)",
    "Bash(git -C*)",
    "Bash(apm sync*)",
    "Bash(apm next*)",
    "Bash(apm list*)",
    "Bash(apm show*)",
    "Bash(apm set *)",
    "Bash(apm state *)",
    "Bash(apm start *)",
    "Bash(apm spec *)",
    "Bash(apm agents*)",
    "Bash(apm verify*)",
    "Bash(apm new *)",
    "Bash(apm worktrees*)",
    "Bash(apm help*)",
    "Bash(apm review *)",
    "Bash(apm close *)",
    "Bash(apm assign *)",
    "Bash(apm validate*)",
    "Bash(apm work *)",
    "Bash(apm move *)",
    "Bash(apm archive *)",
    "Bash(apm clean *)",
    "Bash(apm workers*)",
    "Bash(apm epic *)",
    "Bash(apm register *)",
    "Bash(apm sessions *)",
    "Bash(apm revoke *)",
    "Bash(apm version*)",
    "Bash(apm instructions*)",
    // code editing
    "Edit",
    "Write",
    // read-only tools
    "Read",
    "Glob",
    "Grep",
    // git ops in worktree
    "Bash(git -C *)",
    // read helpers
    "Bash(ls *)",
    "Bash(rg *)",
    "Bash(grep *)",
    "Bash(find *)",
    "Bash(cat *)",
    "Bash(head *)",
    "Bash(tail *)",
    "Bash(wc *)",
    "Bash(sort *)",
    "Bash(uniq *)",
    "Bash(diff *)",
    "Bash(which *)",
    // text manipulation
    "Bash(sed *)",
    "Bash(awk *)",
    // file ops (safe areas)
    "Bash(mv *)",
    "Bash(cp *)",
    "Bash(rm /tmp/*)",
    "Bash(mkdir -p /tmp/*)",
    // shell building blocks
    "Bash(echo *)",
    "Bash(test *)",
    "Bash(true)",
    "Bash(false)",
    // language toolchains (unconditional at user level)
    "Bash(cargo *)",
    "Bash(npm *)",
    "Bash(npx *)",
    "Bash(python3 *)",
];

fn update_settings_json(
    path: &Path,
    entries: &[&str],
    prompt_header: &str,
    prompt_confirm: &str,
    updated_msg: &str,
    create_if_missing: bool,
    yes: bool,
) -> Result<()> {
    let mut val: Value = if path.exists() {
        let raw = std::fs::read_to_string(path)?;
        serde_json::from_str(&raw).unwrap_or(Value::Object(Default::default()))
    } else if create_if_missing {
        Value::Object(Default::default())
    } else {
        return Ok(());
    };

    let allow = val.pointer_mut("/permissions/allow").and_then(|v| v.as_array_mut());
    let missing: Vec<&str> = if let Some(arr) = allow {
        entries.iter().filter(|&&e| !arr.iter().any(|v| v.as_str() == Some(e))).copied().collect()
    } else {
        entries.to_vec()
    };

    if missing.is_empty() {
        return Ok(());
    }

    if !yes {
        println!("{prompt_header}");
        for e in &missing {
            println!("  {e}");
        }
        print!("{prompt_confirm} [y/N] ");
        io::stdout().flush()?;

        let mut line = String::new();
        io::stdin().lock().read_line(&mut line)?;
        if !line.trim().eq_ignore_ascii_case("y") {
            println!("Skipped.");
            return Ok(());
        }
    }

    if val.pointer("/permissions/allow").is_none() {
        let perms = val
            .as_object_mut()
            .ok_or_else(|| anyhow::anyhow!("settings.json root is not an object"))?
            .entry("permissions")
            .or_insert_with(|| Value::Object(Default::default()));
        perms.as_object_mut().unwrap()
            .entry("allow")
            .or_insert_with(|| Value::Array(vec![]));
    }

    let arr = val.pointer_mut("/permissions/allow")
        .and_then(|v| v.as_array_mut())
        .unwrap();
    for e in missing {
        arr.push(Value::String(e.to_string()));
    }

    if let Some(parent) = path.parent() {
        std::fs::create_dir_all(parent)?;
    }
    let updated = serde_json::to_string_pretty(&val)?;
    std::fs::write(path, updated + "\n")?;
    println!("{updated_msg}");
    Ok(())
}

fn detected_toolchain_entries(root: &Path) -> Vec<&'static str> {
    let mut entries = Vec::new();
    if root.join("Cargo.toml").exists() {
        entries.push("Bash(cargo *)");
    }
    if root.join("package.json").exists() {
        entries.extend_from_slice(&["Bash(npm *)", "Bash(npx *)"]);
    }
    if root.join("pyproject.toml").exists() || root.join("requirements.txt").exists() {
        entries.push("Bash(python3 *)");
    }
    entries
}

fn update_claude_settings(root: &Path, skip: bool, yes: bool) -> Result<()> {
    if skip {
        return Ok(());
    }
    let claude_dir = root.join(".claude");
    if !claude_dir.exists() {
        return Ok(());
    }
    let mut entries: Vec<&str> = APM_ALLOW_ENTRIES.to_vec();
    entries.extend(detected_toolchain_entries(root));
    update_settings_json(
        &claude_dir.join("settings.json"),
        &entries,
        "The following entries will be added to .claude/settings.json permissions.allow:",
        "Add apm commands to Claude allow list?",
        "Updated .claude/settings.json",
        true,
        yes,
    )
}

fn update_user_claude_settings(yes: bool) -> Result<()> {
    let home = match std::env::var("HOME") {
        Ok(h) if !h.is_empty() => h,
        _ => return Ok(()),
    };
    update_settings_json(
        &PathBuf::from(&home).join(".claude/settings.json"),
        APM_USER_ALLOW_ENTRIES,
        "The following entries will be added to ~/.claude/settings.json (user-level,\nrequired so apm subagents in isolated worktrees can run git and apm commands):",
        "Add to ~/.claude/settings.json?",
        "Updated ~/.claude/settings.json",
        true,
        yes,
    )
}