@codacy/gate-cli 0.2.0 → 0.4.0

package/README.md

@@ -1,19 +1,46 @@
 # @codacy/gate-cli
 
-CLI for [GATE.md](https://gate.md) — the quality gate for AI-generated code.
+CLI for [GATE.md](https://gatemd.lovable.app) — the quality gate for AI-generated code.
 
 ## Install
 
 ```bash
 npm install -g @codacy/gate-cli
+cd your-project
+gate init
 ```
 
-Requires Node.js 20+.
+Then open the project in Claude Code and run `/gate-setup`.
+
+### Permission denied?
+
+If `npm install -g` fails with `EACCES`, your npm global directory needs fixing. Pick one:
+
+**Option A — Fix npm prefix (recommended, one-time):**
+```bash
+mkdir -p ~/.npm-global
+npm config set prefix ~/.npm-global
+echo 'export PATH=~/.npm-global/bin:$PATH' >> ~/.zshrc  # or ~/.bashrc
+source ~/.zshrc
+npm install -g @codacy/gate-cli
+```
 
-## Commands
+**Option B — Use npx (no global install):**
+```bash
+npx @codacy/gate-cli init
+npx @codacy/gate-cli hooks install
+```
+
+**Option C — Use sudo (not recommended):**
+```bash
+sudo npm install -g @codacy/gate-cli
+```
+
+## Quick reference
 
 | Command | Description |
 |---------|-------------|
+| `gate init` | Initialize GATE.md in current project (skills + hooks) |
 | `gate analyze` | Run analysis on changed files (stop hook) |
 | `gate review --files <paths>` | On-demand analysis (advisory) |
 | `gate auth register` | Register a project |
@@ -23,7 +50,6 @@ Requires Node.js 20+.
 | `gate config push` | Upload analysis config |
 | `gate status` | Show project quality status |
 | `gate feedback <msg>` | Send feedback |
-| `gate intent capture` | Capture user intent (hook) |
 
 ## Global flags
 
@@ -43,14 +69,4 @@ GATE.md intercepts AI coding agent output, runs static analysis + independent Ge
 Agent writes code → gate analyze → codacy-analysis + Gemini → PASS/FAIL
 ```
 
-## Setup
-
-```bash
-# Install
-npm install -g @codacy/gate-cli @codacy/analysis-cli
-
-# Wire Claude Code hooks
-gate hooks install
-
-# Then run /gate-setup in Claude Code to register + configure
-```
+Requires Node.js 20+.

package/bin/gate.js

@@ -10326,14 +10326,27 @@ var {
 
 // src/commands/auth.ts
 var import_promises3 = require("node:fs/promises");
-var import_node_child_process2 = require("node:child_process");
-var import_node_path = require("node:path");
+var import_node_child_process3 = require("node:child_process");
+var import_node_path2 = require("node:path");
 
 // src/lib/auth.ts
 var import_promises = require("node:fs/promises");
-var import_node_child_process = require("node:child_process");
+var import_node_child_process2 = require("node:child_process");
 
 // src/constants.ts
+var import_node_child_process = require("node:child_process");
+var import_node_path = require("node:path");
+var _repoRoot = null;
+function repoRoot() {
+  if (_repoRoot === null) {
+    try {
+      _repoRoot = (0, import_node_child_process.execSync)("git rev-parse --show-toplevel", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    } catch {
+      _repoRoot = process.cwd();
+    }
+  }
+  return _repoRoot;
+}
 var GATE_DIR = ".gate";
 var CREDENTIALS_FILE = `${GATE_DIR}/credentials`;
 var GLOBAL_CREDENTIALS_FILE = `${process.env.HOME}/.gate/credentials`;
@@ -10346,6 +10359,9 @@ var GATE_MD_FILE = "GATE.md";
 var CLAUDE_SETTINGS_FILE = ".claude/settings.json";
 var STANDARD_FILE = `${GATE_DIR}/standard.yaml`;
 var CODACY_CONFIG_FILE = ".codacy/codacy.config.json";
+function projectPath(relativePath) {
+  return (0, import_node_path.join)(repoRoot(), relativePath);
+}
 var MAX_DELTA_BYTES = 204800;
 var MAX_FILES = 20;
 var MAX_FILE_BYTES = 51200;
@@ -10460,7 +10476,7 @@ async function resolveToken(flagToken) {
     return { ok: true, data: { token: envToken, source: "env" } };
   }
   try {
-    const content = await (0, import_promises.readFile)(CREDENTIALS_FILE, "utf-8");
+    const content = await (0, import_promises.readFile)(projectPath(CREDENTIALS_FILE), "utf-8");
     const match = content.match(/token:\s*(gate_[a-f0-9]+)/);
     if (match) {
       return { ok: true, data: { token: match[1], source: "local" } };
@@ -10472,7 +10488,7 @@ async function resolveToken(flagToken) {
     const content = await (0, import_promises.readFile)(globalCredentials, "utf-8");
     let remote = "";
     try {
-      remote = (0, import_node_child_process.execSync)("git remote get-url origin", { encoding: "utf-8" }).trim();
+      remote = (0, import_node_child_process2.execSync)("git remote get-url origin", { encoding: "utf-8" }).trim();
     } catch {
     }
     if (remote) {
@@ -10504,7 +10520,7 @@ async function resolveServiceUrl(flagUrl) {
     return { ok: true, data: envUrl };
   }
   try {
-    const creds = await (0, import_promises2.readFile)(CREDENTIALS_FILE, "utf-8");
+    const creds = await (0, import_promises2.readFile)(projectPath(CREDENTIALS_FILE), "utf-8");
     const match = creds.match(/service_url:\s*(https?:\/\/[^\s]+)/);
     if (match) {
       return { ok: true, data: match[1] };
@@ -10512,7 +10528,7 @@ async function resolveServiceUrl(flagUrl) {
   } catch {
   }
   try {
-    const content = await (0, import_promises2.readFile)(GATE_MD_FILE, "utf-8");
+    const content = await (0, import_promises2.readFile)(projectPath(GATE_MD_FILE), "utf-8");
     const boldMatch = content.match(/\*\*url\*\*/i);
     if (boldMatch) {
       const lineMatch = content.split("\n").find((l) => /\*\*url\*\*/i.test(l));
@@ -10621,7 +10637,7 @@ function registerAuthCommands(program2) {
     let remote = opts.remote;
     if (!remote) {
       try {
-        remote = (0, import_node_child_process2.execSync)("git remote get-url origin", { encoding: "utf-8" }).trim();
+        remote = (0, import_node_child_process3.execSync)("git remote get-url origin", { encoding: "utf-8" }).trim();
       } catch {
         printError("No git remote found. Use --remote to specify one.");
         process.exit(1);
@@ -10644,7 +10660,7 @@ function registerAuthCommands(program2) {
 service_url: ${service_url}
 `);
     try {
-      await (0, import_promises3.mkdir)((0, import_node_path.dirname)(GLOBAL_CREDENTIALS_FILE), { recursive: true });
+      await (0, import_promises3.mkdir)((0, import_node_path2.dirname)(GLOBAL_CREDENTIALS_FILE), { recursive: true });
       await (0, import_promises3.appendFile)(GLOBAL_CREDENTIALS_FILE, `${remote} token: ${token}
 `);
     } catch {
@@ -10683,7 +10699,7 @@ service_url: ${service_url}
     let remote = opts.remote;
     if (!remote) {
       try {
-        remote = (0, import_node_child_process2.execSync)("git remote get-url origin", { encoding: "utf-8" }).trim();
+        remote = (0, import_node_child_process3.execSync)("git remote get-url origin", { encoding: "utf-8" }).trim();
       } catch {
         printError("No git remote found. Use --remote to specify one.");
         process.exit(1);
@@ -10711,7 +10727,7 @@ service_url: ${service_url}
 
 // src/lib/hooks.ts
 var import_promises4 = require("node:fs/promises");
-var import_node_path2 = require("node:path");
+var import_node_path3 = require("node:path");
 var GATE_STOP_HOOK = {
   type: "command",
   command: "gate analyze",
@@ -10734,7 +10750,7 @@ async function readSettings() {
   }
 }
 async function writeSettings(settings) {
-  await (0, import_promises4.mkdir)((0, import_node_path2.dirname)(CLAUDE_SETTINGS_FILE), { recursive: true });
+  await (0, import_promises4.mkdir)((0, import_node_path3.dirname)(CLAUDE_SETTINGS_FILE), { recursive: true });
   await (0, import_promises4.writeFile)(CLAUDE_SETTINGS_FILE, JSON.stringify(settings, null, 2) + "\n");
 }
 function checkGateHooks(settings) {
@@ -11208,9 +11224,9 @@ function registerFeedbackCommand(program2) {
 }
 
 // src/lib/git.ts
-var import_node_child_process3 = require("node:child_process");
+var import_node_child_process4 = require("node:child_process");
 var import_node_fs2 = require("node:fs");
-var import_node_path3 = require("node:path");
+var import_node_path4 = require("node:path");
 function resolveFile(relpath) {
   if ((0, import_node_fs2.existsSync)(relpath)) return relpath;
   if ((0, import_node_fs2.existsSync)(".claude/worktrees")) {
@@ -11218,7 +11234,7 @@ function resolveFile(relpath) {
       const entries = (0, import_node_fs2.readdirSync)(".claude/worktrees", { withFileTypes: true });
       for (const entry of entries) {
         if (!entry.isDirectory()) continue;
-        const candidate = (0, import_node_path3.join)(".claude/worktrees", entry.name, relpath);
+        const candidate = (0, import_node_path4.join)(".claude/worktrees", entry.name, relpath);
         if ((0, import_node_fs2.existsSync)(candidate)) return candidate;
       }
     } catch {
@@ -11228,7 +11244,7 @@ function resolveFile(relpath) {
 }
 function execGit(cmd) {
   try {
-    return (0, import_node_child_process3.execSync)(cmd, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    return (0, import_node_child_process4.execSync)(cmd, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
   } catch {
     return "";
   }
@@ -11271,7 +11287,7 @@ function getWorktreeFiles() {
     const entries = (0, import_node_fs2.readdirSync)(worktreeDir, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const wtDir = (0, import_node_path3.join)(worktreeDir, entry.name);
+      const wtDir = (0, import_node_path4.join)(worktreeDir, entry.name);
       scanDir(wtDir, wtDir, fiveMinAgo, result);
     }
   } catch {
@@ -11282,12 +11298,12 @@ function scanDir(baseDir, dir, minMtime, result) {
   try {
     const entries = (0, import_node_fs2.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = (0, import_node_path3.join)(dir, entry.name);
+      const fullPath = (0, import_node_path4.join)(dir, entry.name);
       if (entry.isDirectory()) {
         if (entry.name === "node_modules" || entry.name === ".git") continue;
         scanDir(baseDir, fullPath, minMtime, result);
       } else if (entry.isFile()) {
-        const ext = (0, import_node_path3.extname)(entry.name).slice(1);
+        const ext = (0, import_node_path4.extname)(entry.name).slice(1);
         if (!ANALYZABLE_EXTENSIONS.has(ext)) continue;
         try {
           const stat = (0, import_node_fs2.statSync)(fullPath);
@@ -11304,13 +11320,13 @@ function scanDir(baseDir, dir, minMtime, result) {
 }
 function filterAnalyzable(files) {
   return files.filter((f) => {
-    const ext = (0, import_node_path3.extname)(f).slice(1);
+    const ext = (0, import_node_path4.extname)(f).slice(1);
     return ANALYZABLE_EXTENSIONS.has(ext);
   });
 }
 function filterReviewable(files) {
   return files.filter((f) => {
-    const ext = (0, import_node_path3.extname)(f).slice(1);
+    const ext = (0, import_node_path4.extname)(f).slice(1);
     if (ANALYZABLE_EXTENSIONS.has(ext)) return false;
     if (REVIEWABLE_EXTENSIONS.has(ext)) return true;
     const basename2 = f.split("/").pop() ?? "";
@@ -11330,7 +11346,7 @@ function getCurrentCommit() {
 
 // src/lib/files.ts
 var import_node_fs3 = require("node:fs");
-var import_node_path4 = require("node:path");
+var import_node_path5 = require("node:path");
 var LANG_MAP = {
   // Analyzable (static analysis + Gemini)
   ts: "typescript",
@@ -11398,7 +11414,7 @@ var LANG_MAP = {
   mk: "make"
 };
 function detectLanguage(filepath) {
-  const ext = (0, import_node_path4.extname)(filepath).slice(1);
+  const ext = (0, import_node_path5.extname)(filepath).slice(1);
   return LANG_MAP[ext] ?? ext;
 }
 function sortByMtime(files) {
@@ -11577,7 +11593,7 @@ function writeIteration(iteration, commit) {
 }
 
 // src/lib/static-analysis.ts
-var import_node_child_process4 = require("node:child_process");
+var import_node_child_process5 = require("node:child_process");
 var import_node_fs5 = require("node:fs");
 var SEVERITY_ORDER = {
   Error: 0,
@@ -11590,7 +11606,7 @@ var SEVERITY_ORDER = {
 };
 function isCodacyAvailable() {
   try {
-    (0, import_node_child_process4.execSync)("which codacy-analysis", { stdio: "pipe" });
+    (0, import_node_child_process5.execSync)("which codacy-analysis", { stdio: "pipe" });
     return true;
   } catch {
     return false;
@@ -11614,7 +11630,7 @@ function runCodacyAnalysis(files) {
   const fileArgs = existingFiles.join(" ");
   let output;
   try {
-    output = (0, import_node_child_process4.execSync)(
+    output = (0, import_node_child_process5.execSync)(
       `codacy-analysis analyze --install-dependencies --files ${fileArgs} --output-format json --log-level error --parallel-tools 3`,
       { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], maxBuffer: 10 * 1024 * 1024 }
     );
@@ -11668,7 +11684,7 @@ function runCodacyAnalysis(files) {
 
 // src/lib/specs.ts
 var import_node_fs6 = require("node:fs");
-var import_node_path5 = require("node:path");
+var import_node_path6 = require("node:path");
 var SPEC_CANDIDATES = [
   "CLAUDE.md",
   "AGENTS.md",
@@ -11730,7 +11746,7 @@ function findMdFiles(dir, maxDepth, depth = 0) {
   try {
     const entries = (0, import_node_fs6.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = (0, import_node_path5.join)(dir, entry.name);
+      const fullPath = (0, import_node_path6.join)(dir, entry.name);
       if (entry.isFile() && entry.name.endsWith(".md")) {
         result.push(fullPath);
       } else if (entry.isDirectory() && depth < maxDepth - 1) {
@@ -11747,7 +11763,7 @@ function discoverPlans() {
   const result = [];
   try {
     const entries = (0, import_node_fs6.readdirSync)(plansDir).filter((f) => f.endsWith(".md")).map((f) => {
-      const fullPath = (0, import_node_path5.join)(plansDir, f);
+      const fullPath = (0, import_node_path6.join)(plansDir, f);
       try {
         const stat = (0, import_node_fs6.statSync)(fullPath);
         return { name: f, path: fullPath, mtime: stat.mtimeMs, size: stat.size };
@@ -11847,11 +11863,11 @@ async function runAnalyze(opts, globals) {
   }
   const tokenResult = await resolveToken(globals.token);
   if (!tokenResult.ok) {
-    passAndExit("Not configured yet. Run /gate-setup to enable.");
+    passAndExit("Not configured yet \u2014 run /gate-setup in Claude Code to enable quality gates.");
   }
   const urlResult = await resolveServiceUrl(globals.serviceUrl);
   if (!urlResult.ok) {
-    passAndExit("No GATE.md service URL found \u2014 skipping analysis");
+    passAndExit("Not configured yet \u2014 run /gate-setup in Claude Code to enable quality gates.");
   }
   const currentCommit = getCurrentCommit();
   const maxIterations = parseInt(opts.maxIterations, 10);
@@ -12020,12 +12036,12 @@ async function runReview(opts, globals) {
   const codeDelta = collectCodeDelta(allFiles);
   const tokenResult = await resolveToken(globals.token);
   if (!tokenResult.ok) {
-    printError(tokenResult.error);
+    printError("Not configured yet \u2014 run /gate-setup in Claude Code to enable quality gates.");
     process.exit(0);
   }
   const urlResult = await resolveServiceUrl(globals.serviceUrl);
   if (!urlResult.ok) {
-    printError(urlResult.error);
+    printError("Not configured yet \u2014 run /gate-setup in Claude Code to enable quality gates.");
     process.exit(0);
   }
   let specs;
@@ -12093,8 +12109,138 @@ async function runReview(opts, globals) {
   process.exit(0);
 }
 
+// src/commands/init.ts
+var import_node_fs9 = require("node:fs");
+var import_promises8 = require("node:fs/promises");
+var import_node_path7 = require("node:path");
+var import_node_child_process6 = require("node:child_process");
+function resolveDataDir() {
+  const candidates = [
+    (0, import_node_path7.join)(__dirname, "..", "data"),
+    // installed: node_modules/@codacy/gate-cli/data
+    (0, import_node_path7.join)(__dirname, "..", "..", "data"),
+    // edge case: nested resolution
+    (0, import_node_path7.join)(process.cwd(), "cli", "data")
+    // local dev: running from repo root
+  ];
+  for (const candidate of candidates) {
+    if ((0, import_node_fs9.existsSync)((0, import_node_path7.join)(candidate, "skills"))) {
+      return candidate;
+    }
+  }
+  throw new Error(
+    "Could not find GATE.md skill data. Reinstall: npm install -g @codacy/gate-cli"
+  );
+}
+async function copyDir(src, dest) {
+  await (0, import_promises8.mkdir)(dest, { recursive: true });
+  await (0, import_promises8.cp)(src, dest, { recursive: true, force: true });
+}
+function registerInitCommand(program2) {
+  program2.command("init").description("Initialize GATE.md in the current project").option("--force", "Overwrite existing skills and hooks").action(async (opts) => {
+    const force = opts.force ?? false;
+    const projectMarkers = [".git", "package.json", "pyproject.toml", "go.mod", "Cargo.toml", "Gemfile", "pom.xml", "build.gradle"];
+    const isProject = projectMarkers.some((m) => (0, import_node_fs9.existsSync)(m));
+    if (!isProject) {
+      printError("No project detected in the current directory.");
+      printInfo('Run "gate init" from your project root.');
+      process.exit(1);
+    }
+    console.log("");
+    printInfo("Initializing GATE.md in this project...");
+    console.log("");
+    printInfo("Checking prerequisites...");
+    const nodeVersion = process.version;
+    const nodeMajor = parseInt(nodeVersion.slice(1), 10);
+    if (nodeMajor < 20) {
+      printError(`Node.js 20+ required (found ${nodeVersion}). Update from https://nodejs.org`);
+      process.exit(1);
+    }
+    printInfo(`  Node.js ${nodeVersion} \u2713`);
+    try {
+      const gitVersion = (0, import_node_child_process6.execSync)("git --version", { encoding: "utf-8" }).trim();
+      printInfo(`  ${gitVersion} \u2713`);
+    } catch {
+      printError("git is required but not installed. Install from https://git-scm.com");
+      process.exit(1);
+    }
+    try {
+      (0, import_node_child_process6.execSync)("which claude", { encoding: "utf-8" });
+      printInfo("  Claude Code \u2713");
+    } catch {
+      printWarn("  Claude Code not found \u2014 hooks will be configured but need Claude Code to run.");
+    }
+    try {
+      (0, import_node_child_process6.execSync)("which codacy-analysis", { encoding: "utf-8" });
+      printInfo("  @codacy/analysis-cli \u2713");
+    } catch {
+      printWarn("  @codacy/analysis-cli not found \u2014 static analysis will be unavailable.");
+      printWarn("  Install: npm install -g @codacy/analysis-cli");
+    }
+    console.log("");
+    printInfo("Installing skills...");
+    const dataDir = resolveDataDir();
+    const skillsSource = (0, import_node_path7.join)(dataDir, "skills");
+    const skillsDest = ".claude/skills";
+    const skills = ["gate-setup", "gate-analyze", "gate-status", "gate-feedback"];
+    let skillsInstalled = 0;
+    for (const skill of skills) {
+      const src = (0, import_node_path7.join)(skillsSource, skill);
+      const dest = (0, import_node_path7.join)(skillsDest, skill);
+      if (!(0, import_node_fs9.existsSync)(src)) {
+        printWarn(`  Skill data not found: ${skill}`);
+        continue;
+      }
+      if ((0, import_node_fs9.existsSync)(dest) && !force) {
+        const srcSkill = (0, import_node_path7.join)(src, "SKILL.md");
+        const destSkill = (0, import_node_path7.join)(dest, "SKILL.md");
+        if ((0, import_node_fs9.existsSync)(destSkill)) {
+          try {
+            const srcContent = await (0, import_promises8.readFile)(srcSkill, "utf-8");
+            const destContent = await (0, import_promises8.readFile)(destSkill, "utf-8");
+            if (srcContent === destContent) {
+              skillsInstalled++;
+              continue;
+            }
+          } catch {
+          }
+        }
+      }
+      await copyDir(src, dest);
+      skillsInstalled++;
+    }
+    printInfo(`  ${skillsInstalled}/${skills.length} skills installed to .claude/skills/ \u2713`);
+    printInfo("Wiring Claude Code hooks...");
+    const settings = await readSettings();
+    const hookResult = installGateHooks(settings, force);
+    if (hookResult.ok) {
+      await writeSettings(hookResult.data);
+      printInfo("  Stop hook: gate analyze \u2713");
+      printInfo("  Intent hook: gate intent capture \u2713");
+    } else {
+      printWarn(`  ${hookResult.error}`);
+      printInfo('  Run "gate hooks install --force" to overwrite.');
+    }
+    await (0, import_promises8.mkdir)(GATE_DIR, { recursive: true });
+    const globalGateDir = (0, import_node_path7.join)(process.env.HOME ?? "", ".gate");
+    await (0, import_promises8.mkdir)(globalGateDir, { recursive: true });
+    console.log("");
+    printInfo("GATE.md initialized!");
+    console.log("");
+    console.log("  Installed:");
+    console.log("    .claude/skills/gate-setup/     \u2014 project configuration");
+    console.log("    .claude/skills/gate-analyze/   \u2014 on-demand analysis");
+    console.log("    .claude/skills/gate-status/    \u2014 project health");
+    console.log("    .claude/skills/gate-feedback/  \u2014 beta feedback");
+    console.log("    .claude/settings.json          \u2014 hooks (gate analyze + intent capture)");
+    console.log("");
+    console.log("  Next step: open this project in Claude Code and run /gate-setup");
+    console.log("");
+  });
+}
+
 // src/cli.ts
-program.name("gate").description("CLI for GATE.md quality gate service").version("0.1.0").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr");
+program.name("gate").description("CLI for GATE.md quality gate service").version("0.4.0").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr");
 registerAuthCommands(program);
 registerHooksCommands(program);
 registerIntentCommands(program);
@@ -12104,4 +12250,5 @@ registerStatusCommand(program);
 registerFeedbackCommand(program);
 registerAnalyzeCommand(program);
 registerReviewCommand(program);
+registerInitCommand(program);
 program.parse();