@cspeach/cli 0.6.1 → 0.6.3

package/README.md

@@ -1,108 +1,116 @@
-# CSPeach
-
-AI-assisted ABAP development CLI. 34 skills, direct SAP access, safety
-gates the model cannot bypass.
-
-## Install
-
-```bash
-npm install -g @cspeach/cli
-```
-
-Requires Node.js 20+. After install:
-
-```bash
-cspeach login         # opens browser, authorizes this machine
-cspeach config add-sap
-cspeach               # interactive REPL
-```
-
-## What it does
-
-CSPeach runs an AI consultant against your own SAP. Pick a skill (or type a
-prompt — the classifier picks one for you):
-
-```text
-/abap-spec-gap        find missing questions before any code is written
-/abap-design          object list + dependency DAG
-/abap-estimate        component-level hours with optimistic / realistic /
-                      pessimistic ranges
-/abap-cca             estate-wide custom-code analysis for S/4HANA
-/abap-upgrade-scan    baseline scan against the readiness variant
-/abap-upgrade-fix     interactive fix loop with per-object approval
-/abap-incident        short dump → fix → verify → handover
-cspeach --help        full skill list (34 total)
-```
-
-Every turn runs locally on your machine. SAP source and SAP data flow through
-`api.cspeach.dev` to the LLM. The proxy logs request metadata (skill, model,
-token counts, latency) for billing; the message body is forwarded to
-Anthropic and not stored on the proxy. SAP credentials never leave your
-machine.
-
-## Safety
-
-- **Snapshot gate** — every write auto-snapshots first
-- **Approval gate** — mutating tools require a single-use JWT bound to
-  (object, operation); the model sees a plan, you see each change
-- **Verify gate** — every write is syntax-checked; activation blocked on errors
-- **Transport discipline** — all writes land in your session transport; `$TMP`
-  is opt-in
-
-Ten Forge Rules are non-negotiable. Full philosophy in the `CSPeach Principles`
-preamble shown to the model every turn.
-
-## Configuration
-
-`~/.cspeach/config.toml` is created on first `cspeach config add-sap`:
-
-```toml
-proxy_url     = "https://api.cspeach.dev"
-default_model = "claude-opus-4-7"
-
-[sap.S4H-DEV]
-host     = "sap-dev.company.com"
-port     = 44300
-client   = "100"
-useSsl   = true
-username = "S.LAEEQ"
-```
-
-SAP passwords are stored in your OS keychain.
-
-## Common commands
-
-```text
-cspeach login                    sign in to api.cspeach.dev
-cspeach whoami                   show signed-in identity + plan/trial
-cspeach logout                   clear local auth
-cspeach config add-sap           add a SAP system
-cspeach doctor                   diagnose install + connectivity
-cspeach --resume                 resume a prior session
-cspeach --upgrade                pull the latest CLI release
-cspeach --version
-```
-
-## Troubleshooting
-
-If `cspeach doctor` fails:
-
-- **`auth`** — run `cspeach login` again
-- **`keychain`** — Windows Credential Manager / libsecret missing; CSPeach
-  falls back to per-session prompts, slower but functional
-- **`sap`** — host unreachable; check VPN + the host/port in config
-
-If the REPL hangs on first prompt, check `https://api.cspeach.dev/health`.
-
-## Links
-
-- **Landing**: https://cspeach.dev
-- **Contact**: laeeq.siddique@cremencing.com
-- **LinkedIn**: @laeeqsiddique
-
-## License
-
-Proprietary. Copyright (c) 2026 Cremencing Solutions. All rights reserved.
-Free to use under your active [CSPeach plan](https://cspeach.dev); not free
-to redistribute, fork, or sublicense. Commercial / OEM licensing:
-laeeq.siddique@cremencing.com.
+# CSPeach
+
+AI-assisted ABAP development CLI. 34 skills, direct SAP access, safety
+gates the model cannot bypass.
+
+## Install
+
+```bash
+npm install -g @cspeach/cli
+```
+
+Requires Node.js 20+. After install:
+
+```bash
+cspeach login         # opens browser, authorizes this machine
+cspeach config add-sap
+cspeach               # interactive REPL
+```
+
+## What it does
+
+CSPeach runs an AI consultant against your own SAP. Pick a skill (or type a
+prompt — the classifier picks one for you):
+
+```text
+/abap-spec-gap        find missing questions before any code is written
+/abap-design          object list + dependency DAG
+/abap-estimate        component-level hours with optimistic / realistic /
+                      pessimistic ranges
+/abap-cca             estate-wide custom-code analysis for S/4HANA
+/abap-upgrade-scan    baseline scan against the readiness variant
+/abap-upgrade-fix     interactive fix loop with per-object approval
+/abap-incident        short dump → fix → verify → handover
+cspeach --help        full skill list (34 total)
+```
+
+Every turn runs locally on your machine. SAP source and SAP data flow through
+`api.cspeach.dev` to the LLM. The proxy logs request metadata (skill, model,
+token counts, latency) for billing; the message body is forwarded to
+Anthropic and not stored on the proxy. SAP credentials never leave your
+machine.
+
+## Safety
+
+- **Snapshot gate** — every SAP write auto-snapshots first
+- **SAP approval gate** — SAP-write and transport tools (`sap_set_source`,
+  `sap_create_object`, `sap_delete_object`, `sap_update_method`,
+  `sap_activate`, `sap_transport_*`) require a single-use JWT bound to
+  (object, operation); the model sees a plan, you approve each change
+- **Optional tools default OFF** — filesystem, shell, web, and subagent
+  tools are invisible to the model unless you set `CSPEACH_TOOL_<NAME>=on`
+  in the environment
+- **Batch-write interrupt** — any second mutating call in a single turn
+  (Rule 8, any tool category) pauses for an explicit yes/no before it runs
+- **Verify gate** — every SAP write is syntax-checked; activation blocked on
+  errors
+- **Transport discipline** — all SAP writes land in your session transport;
+  `$TMP` is opt-in
+
+Ten Forge Rules are non-negotiable. Full philosophy in the `CSPeach Principles`
+preamble shown to the model every turn.
+
+## Configuration
+
+`~/.cspeach/config.toml` is created on first `cspeach config add-sap`:
+
+```toml
+proxy_url     = "https://api.cspeach.dev"
+default_model = "claude-opus-4-7"
+
+[sap.S4H-DEV]
+host     = "sap-dev.company.com"
+port     = 44300
+client   = "100"
+useSsl   = true
+username = "S.LAEEQ"
+```
+
+SAP passwords are stored in your OS keychain.
+
+## Common commands
+
+```text
+cspeach login                    sign in to api.cspeach.dev
+cspeach whoami                   show signed-in identity + plan/trial
+cspeach logout                   clear local auth
+cspeach config add-sap           add a SAP system
+cspeach doctor                   diagnose install + connectivity
+cspeach --resume                 resume a prior session
+cspeach --upgrade                pull the latest CLI release
+cspeach --version
+```
+
+## Troubleshooting
+
+If `cspeach doctor` fails:
+
+- **`auth`** — run `cspeach login` again
+- **`keychain`** — Windows Credential Manager / libsecret missing; CSPeach
+  falls back to per-session prompts, slower but functional
+- **`sap`** — host unreachable; check VPN + the host/port in config
+
+If the REPL hangs on first prompt, check `https://api.cspeach.dev/health`.
+
+## Links
+
+- **Landing**: https://cspeach.dev
+- **Contact**: laeeq.siddique@cremencing.com
+- **LinkedIn**: @laeeqsiddique
+
+## License
+
+Proprietary. Copyright (c) 2026 Cremencing Solutions. All rights reserved.
+Free to use under your active [CSPeach plan](https://cspeach.dev); not free
+to redistribute, fork, or sublicense. Commercial / OEM licensing:
+laeeq.siddique@cremencing.com.

package/dist/agent/anthropic-provider.js

@@ -9,6 +9,7 @@
 import Anthropic from '@anthropic-ai/sdk';
 import { getDeviceFingerprint } from '../auth/device.js';
 import { createManagedSkillSource } from '../skills/source-managed.js';
+import { CLI_VERSION } from '../lib/version.js';
 export function createManagedProvider(cfg, getBearer) {
     const skillSource = createManagedSkillSource(cfg, getBearer);
     return {
@@ -18,7 +19,7 @@ export function createManagedProvider(cfg, getBearer) {
         async createStream(params, options = {}) {
             const bearer = await getBearer();
             const device = await getDeviceFingerprint();
-            const cliVersion = process.env['npm_package_version'] ?? '0.5.0';
+            const cliVersion = CLI_VERSION;
             const sdk = new Anthropic({
                 apiKey: 'proxy-bearer-auth', // ignored by our proxy; SDK requires non-empty
                 baseURL: cfg.proxy_url.replace(/\/$/, '') + '/',

package/dist/cli.js

@@ -1,4 +1,5 @@
 import chalk from 'chalk';
+import { CLI_VERSION } from './lib/version.js';
 import { runAddSapWizard } from './sap/onboarding.js';
 import { runGcOnStartup } from './session/gc.js';
 import { checkForUpgrade } from './upgrade-check.js';
@@ -12,7 +13,7 @@ export async function main(argv) {
         return 0;
     }
     if (args[0] === '--version') {
-        console.log(process.env.npm_package_version ?? '0.5.0');
+        console.log(CLI_VERSION);
         return 0;
     }
     if (args[0] === '--upgrade') {

package/dist/lib/version.js

@@ -0,0 +1,16 @@
+/**
+ * CLI_VERSION — read once from the package.json at module load.
+ *
+ * Why not process.env.npm_package_version: that env var is only set when
+ * npm itself invokes a script (e.g. `npm run start`). When a user runs the
+ * installed `cspeach` binary directly, the env var is undefined and we'd
+ * fall back to a hardcoded literal — which silently rots on every release.
+ */
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, resolve } from 'node:path';
+const here = dirname(fileURLToPath(import.meta.url));
+// dist/lib/version.js → dist/lib/.. → dist → ../../package.json
+const pkgPath = resolve(here, '../../package.json');
+const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+export const CLI_VERSION = pkg.version;

package/dist/renderer/banners.js

@@ -1,4 +1,5 @@
 import chalk from 'chalk';
+import { CLI_VERSION } from '../lib/version.js';
 /** CSPeach brand colour — used for the brand-name text in the startup line,
  *  the tool-dispatch bullet (⏺), and the result continuation glyph (⎿).
  *  Single source of truth so a future rebrand is one find-replace.
@@ -26,7 +27,7 @@ export const PEACH = '#FFCBA4';
  * which is why the literal exists at all.
  */
 export function printStartupBanner() {
-    const version = process.env.npm_package_version ?? '0.5.0';
+    const version = CLI_VERSION;
     console.log('');
     console.log(`🍑 ${chalk.hex(PEACH).bold('CSPeach')}  ${chalk.white.bold('v' + version)}`);
     console.log(`   ${chalk.gray('ABAP + AI + safety gates')} ${chalk.dim('·')} ${chalk.gray('by Cremencing Solutions')}`);

package/dist/upgrade-check.js

@@ -1,5 +1,6 @@
 import chalk from 'chalk';
 import { loadConfig } from './config/loader.js';
+import { CLI_VERSION } from './lib/version.js';
 function compareVersions(a, b) {
     const pa = a.split('.').map(Number);
     const pb = b.split('.').map(Number);
@@ -16,7 +17,7 @@ export async function checkForUpgrade() {
     try {
         const r = await fetch(`${cfg.proxy_url}/v1/skills/abap-radar`, { method: 'HEAD', signal: AbortSignal.timeout(3000) });
         const minCli = r.headers.get('x-skill-min-cli-version');
-        const current = process.env.npm_package_version ?? '0.5.0';
+        const current = CLI_VERSION;
         if (minCli && compareVersions(current, minCli) < 0) {
             console.log(chalk.yellow.bold(`\n⚠  Your cspeach (${current}) is older than the minimum required (${minCli}).`));
             console.log(chalk.yellow(`   Run:  cspeach --upgrade\n`));

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cspeach/cli",
-  "version": "0.6.1",
-  "description": "CSPeach — AI-assisted ABAP development CLI. Direct SAP access, 33 skills, safety gates.",
+  "version": "0.6.3",
+  "description": "CSPeach — AI-assisted ABAP development CLI. Direct SAP access, 34 skills, safety gates.",
   "keywords": [
     "abap",
     "sap",