init

# @truverifai/init

Panel Review is the guardian agent for AI's highest-stakes coding decisions:
four frontier models argue over an agent's riskiest designs, diffs, and
commits before they execute, with review gates the agent cannot silently
skip. One command connects [TruVerifAI](https://truverif.ai) to Claude Code,
Codex CLI, Cursor (IDE + CLI), VS Code / GitHub Copilot, Gemini CLI, and
Antigravity.

[![The write gate blocking a risky auth change, live](https://truverif.ai/media/panel-review-gate.gif)](https://truverif.ai/panel-review)

```
npx @truverifai/init          # detect agents -> browser login -> install gates + tools -> verify
npx @truverifai/init doctor   # re-verify anytime: gates armed, tools connected, key valid
npx @truverifai/init logout   # remove the API key from every config this tool wrote
```

MIT-licensed. **Zero runtime dependencies** — this package is plain,
unminified JavaScript and Python; `npm pack @truverifai/init` and read every
line. There is no build step and no transitive supply chain.

## See it in action

- ▶ [90-second demo](https://youtu.be/8R71q4PkcVM) — the gate, the panel, and the critical flaw it caught
- ▶ [Full walkthrough (8 min)](https://youtu.be/mPKonNkr1Uk) — setup, gates, skips & overrides, custom floors
- ▶ [Extended demo (4 min)](https://youtu.be/7kYjbIZhioE) — the middle ground, with BYOM/BYOK

## Requirements

- **Node 18+** — runs this installer, and every hook command it writes launches
  a gate via `node <launcher> <host> <gate>.py`. No node, no gates, on any host.
- **Python 3** (`python3`, or `py` on Windows) — the gate code itself.

`npx @truverifai/init doctor` checks both and names the missing one, rather
than letting an absent runtime disable the gates silently.

## Turning the gates off (and back on)

The review gates block risky commits and edits. One command controls all of
them:

```bash
npx @truverifai/init gates off       # stop every gate, everywhere
npx @truverifai/init gates on        # turn them back on
npx @truverifai/init gates status    # what's on, and which setting decided it
```

(If you installed globally with `npm i -g @truverifai/init`, the same commands
are available as the shorter `tvai gates off`. Plain `npx` does not leave a
`tvai` binary on your PATH, so use the full form above unless you installed
globally.)

This writes `enable_gates` to `~/.truverifai/config.json`, which **every**
delivery reads — the git pre-commit hook and the Codex, Cursor, Copilot,
VS Code, Gemini and Antigravity hooks alike. The MCP review tools stay
connected either way; only the automatic gating stops.

Two things worth knowing:

- **Claude Code no longer has its own toggle.** `enable_gates` was removed
  from the plugin's settings panel (it could only ever reach Claude Code's own
  hooks — the X8 split), so this command is the single switch. One exception:
  a value stored in the panel *before* the removal may still be exported to
  Claude Code's hooks until you clear it; `gates status` calls that out and
  says how.
- **`TVAI_ENABLE_GATES` overrides everything.** If you have it exported,
  `gates on|off` writes the file underneath it and has no effect until you
  unset it. `gates status` says so.

To remove the gates entirely rather than switch them off, see
[Removing it](#removing-it) below.

## What this installs, exactly

`init` runs as you, interactively, and prints every file it touches. The
complete list:

**Its own home — `~/.truverifai/`**
- `config.json` — your `tvai_…` API key (minted via browser device-flow
  login; this process never sees a password).
- `gates/current/` — the review-gate code (Python + a Node launcher),
  vendored from this package's `vendor/` directory.
- `.nudge_state.json`, `gate_state/` — local rate-limit / state files.

**Per detected agent (user-level; only for agents found on your machine)**
- Claude Code: the plugin's `api_token` option, and one `permissions.allow`
  entry (`mcp__plugin_panel-review_truverifai`) in `~/.claude/settings.json`
  so Claude's auto-mode classifier permits the free gate-release calls.
  Additive merges only — the file is backed up first, never created, and
  never has anything removed.
- Codex CLI: an MCP server block (between `TRUVERIFAI` markers) and
  `[features] hooks = true` in `~/.codex/config.toml`; `~/.codex/hooks.json`.
- Cursor: `~/.cursor/hooks.json` (gates) and `~/.cursor/mcp.json` (tools).
- Copilot CLI: `~/.copilot/mcp-config.json`.
- VS Code: your user `mcp.json`.
- Gemini CLI: `~/.gemini/settings.json` (tools entry).

**Per repository (written in the repo you run `init` from, with a prompt)**
- `.github/hooks/truverifai-gate.json` + `truverifai-vscode.json`
  (Copilot CLI / VS Code gate hooks), `.gemini/settings.json` (Gemini
  hooks), `.agents/hooks.json` (Antigravity hooks).
- Optional agent-rules blocks (marked `TRUVERIFAI_RULES_START…END`) in
  `AGENTS.md` / `CLAUDE.md` / `GEMINI.md` — you are asked first.
- `.git/hooks/pre-commit` — the git gate, which catches commits made
  **outside any agent** (and is the one layer `--no-verify` makes an
  explicit, auditable act). Installed automatically when you run `init`
  inside a git repo. It is the only repo-scoped gate, so add it to other
  repos with `cd <repo> && npx @truverifai/init hook`. An existing
  pre-commit hook you wrote is never overwritten — init reports it and
  prints the line to add by hand.

`logout` strips the API key from every config listed above. Nothing is
installed as a service, daemon, or startup item; the gates only run when
your agent host invokes its hooks.

## What leaves your machine

- **Login:** a device-flow handshake with `truverif.ai` mints your API key
  in the browser.
- **Gate checks (on risky writes/commits):** the gates POST to
  `api.truverif.ai` a hashed repo fingerprint (SHA-256 of your git remote
  URL or repo path — the raw path/URL never leaves the machine),
  content hashes of the changed hunks, and the local classifier's category
  labels and scores. **Not** your source code, and **not** your file paths
  (only coarse path-class tags like "test/docs").
- **Review tools (`audit_coding` etc.):** send only what your agent
  explicitly passes when it invokes a review — that is the product: the
  diff/context you choose to submit is analyzed by multiple frontier
  models.
- **Update check:** gate responses may include a "newer version available"
  note computed server-side against the public npm registry; the client
  sends only its own version string.
- Diagnostics (`TVAI_PAYLOAD_LOG`) are **local-only and opt-in** — nothing
  is uploaded.

The gates **fail open by design**: if our server is unreachable or anything
errors, your commit/write proceeds and a visible notice says the change was
not gated. This tool never blocks your work on its own failure.

## Verifying this package

The full source is public at
[github.com/TruVerifAI/init](https://github.com/TruVerifAI/init) — every
release is synced there. To verify a tarball by hand:
`npm pack @truverifai/init`, extract, and diff against the repo —
`bin/tvai.js`, `lib/*.js`, and `vendor/gates/*.py` are the entire runtime
surface, dependency-free. The gate code (`vendor/gates/`) is also
published at
[github.com/TruVerifAI/claude-plugins](https://github.com/TruVerifAI/claude-plugins)
(`plugins/panel-review/hooks/`). Build provenance attestation (CI publish
with cryptographic linkage to this repo) is the planned next step.

## Removing it

```bash
npx @truverifai/init uninstall
```

Removes every hook config `init` wrote (Codex, Cursor, Copilot, VS Code,
Gemini, Antigravity, and the git pre-commit hook), the vendored gate code under
`~/.truverifai/gates/`, the MCP server entries, and your stored key. Hook files
you share with other tools are edited, not deleted — only our own entries are
taken out, matched by marker.

Marketplace plugins belong to their host, so remove those with the host's own
command (e.g. `claude plugin uninstall panel-review@truverifai`).

`npx @truverifai/init logout` is the lighter option: it clears the key and the MCP entries but
**leaves the hooks installed**. They then fail open for want of a key, and a
later `npx @truverifai/init login` re-arms them.

## Support

- Setup page: https://truverif.ai/settings/mcp
- Issues / questions: support@truverif.ai