@cspeach/cli 0.6.0

package/LICENSE

@@ -0,0 +1,8 @@
+Copyright (c) 2026 Cremencing Solutions.
+All rights reserved.
+
+This software is proprietary and confidential. Unauthorized copying,
+distribution, modification, or use of this software, via any medium,
+is strictly prohibited.
+
+For licensing inquiries, contact: laeeq@cremencing.com

package/README.md

@@ -0,0 +1,108 @@
+# CSPeach
+
+AI-assisted ABAP development CLI. 34 skills, direct SAP access, safety
+gates the model cannot bypass.
+
+## Install
+
+```bash
+npm install -g @cspeach/cli
+```
+
+Requires Node.js 20+. After install:
+
+```bash
+cspeach login         # opens browser, authorizes this machine
+cspeach config add-sap
+cspeach               # interactive REPL
+```
+
+## What it does
+
+CSPeach runs an AI consultant against your own SAP. Pick a skill (or type a
+prompt — the classifier picks one for you):
+
+```text
+/abap-spec-gap        find missing questions before any code is written
+/abap-design          object list + dependency DAG
+/abap-estimate        component-level hours with optimistic / realistic /
+                      pessimistic ranges
+/abap-cca             estate-wide custom-code analysis for S/4HANA
+/abap-upgrade-scan    baseline scan against the readiness variant
+/abap-upgrade-fix     interactive fix loop with per-object approval
+/abap-incident        short dump → fix → verify → handover
+cspeach --help        full skill list (34 total)
+```
+
+Every turn runs locally on your machine. SAP source and SAP data flow through
+`api.cspeach.dev` to the LLM. The proxy logs request metadata (skill, model,
+token counts, latency) for billing; the message body is forwarded to
+Anthropic and not stored on the proxy. SAP credentials never leave your
+machine.
+
+## Safety
+
+- **Snapshot gate** — every write auto-snapshots first
+- **Approval gate** — mutating tools require a single-use JWT bound to
+  (object, operation); the model sees a plan, you see each change
+- **Verify gate** — every write is syntax-checked; activation blocked on errors
+- **Transport discipline** — all writes land in your session transport; `$TMP`
+  is opt-in
+
+Ten Forge Rules are non-negotiable. Full philosophy in the `CSPeach Principles`
+preamble shown to the model every turn.
+
+## Configuration
+
+`~/.cspeach/config.toml` is created on first `cspeach config add-sap`:
+
+```toml
+proxy_url     = "https://api.cspeach.dev"
+default_model = "claude-opus-4-7"
+
+[sap.S4H-DEV]
+host     = "sap-dev.company.com"
+port     = 44300
+client   = "100"
+useSsl   = true
+username = "S.LAEEQ"
+```
+
+SAP passwords are stored in your OS keychain.
+
+## Common commands
+
+```text
+cspeach login                    sign in to api.cspeach.dev
+cspeach whoami                   show signed-in identity + plan/trial
+cspeach logout                   clear local auth
+cspeach config add-sap           add a SAP system
+cspeach doctor                   diagnose install + connectivity
+cspeach --resume                 resume a prior session
+cspeach --upgrade                pull the latest CLI release
+cspeach --version
+```
+
+## Troubleshooting
+
+If `cspeach doctor` fails:
+
+- **`auth`** — run `cspeach login` again
+- **`keychain`** — Windows Credential Manager / libsecret missing; CSPeach
+  falls back to per-session prompts, slower but functional
+- **`sap`** — host unreachable; check VPN + the host/port in config
+
+If the REPL hangs on first prompt, check `https://api.cspeach.dev/health`.
+
+## Links
+
+- **Landing**: https://cspeach.dev
+- **Contact**: laeeq@cremencing.com
+- **LinkedIn**: @laeeqsiddique
+
+## License
+
+Proprietary. Copyright (c) 2026 Cremencing Solutions. All rights reserved.
+Free to use under your active [CSPeach plan](https://cspeach.dev); not free
+to redistribute, fork, or sublicense. Commercial / OEM licensing:
+laeeq@cremencing.com.

package/dist/agent/anthropic-provider.js

@@ -0,0 +1,59 @@
+/**
+ * AnthropicProvider — wraps the Anthropic SDK for streaming messages.
+ *
+ * Per coordination doc:
+ * §3: device fingerprint + User-Agent sent on every request via defaultHeaders.
+ * §4: CLI sends anthropic-beta: compact-2026-01-12.
+ * §1: X-CSForge-Skill forwarded via per-call options.headers.
+ */
+import Anthropic from '@anthropic-ai/sdk';
+import { getDeviceFingerprint } from '../auth/device.js';
+import { createManagedSkillSource } from '../skills/source-managed.js';
+export function createManagedProvider(cfg, getBearer) {
+    const skillSource = createManagedSkillSource(cfg, getBearer);
+    return {
+        name: 'anthropic-managed',
+        mode: 'managed',
+        skillSource,
+        async createStream(params, options = {}) {
+            const bearer = await getBearer();
+            const device = await getDeviceFingerprint();
+            const cliVersion = process.env['npm_package_version'] ?? '0.5.0';
+            const sdk = new Anthropic({
+                apiKey: 'proxy-bearer-auth', // ignored by our proxy; SDK requires non-empty
+                baseURL: cfg.proxy_url.replace(/\/$/, '') + '/',
+                defaultHeaders: {
+                    'authorization': `Bearer ${bearer}`,
+                    'anthropic-beta': 'compact-2026-01-12',
+                    'x-device-machine-id': device.machineId,
+                    'x-device-hostname': device.hostname,
+                    'User-Agent': `cspeach/${cliVersion}`,
+                },
+            });
+            // Per-call headers (e.g. X-CSForge-Skill) passed as second argument to the SDK.
+            // The SDK forwards them alongside defaultHeaders on this specific request.
+            // v0.6 — also forward AbortSignal for hard-interrupt support.
+            const sdkOptions = {};
+            if (options.headers)
+                sdkOptions.headers = options.headers;
+            if (options.signal)
+                sdkOptions.signal = options.signal;
+            return sdk.messages.stream(params, Object.keys(sdkOptions).length > 0 ? sdkOptions : undefined);
+        },
+        async healthCheck() {
+            try {
+                const bearer = await getBearer();
+                const r = await fetch(`${cfg.proxy_url.replace(/\/$/, '')}/health`, {
+                    headers: { Authorization: `Bearer ${bearer}` },
+                    signal: AbortSignal.timeout(5000),
+                });
+                if (r.ok)
+                    return { ok: true, message: 'managed proxy reachable, bearer valid' };
+                return { ok: false, message: `HTTP ${r.status} from ${cfg.proxy_url}/health`, hint: 'Check proxy URL and bearer token' };
+            }
+            catch (e) {
+                return { ok: false, message: `Managed proxy unreachable: ${e.message}`, hint: 'Check network + proxy_url' };
+            }
+        },
+    };
+}

package/dist/agent/llm-provider.js

@@ -0,0 +1 @@
+export {};