@earntori/cli 0.1.2 → 0.2.1

package/dist/index.js

@@ -2,7 +2,9 @@
 // @earntori/cli — tori login | status | key --limit N [--write env] | stats | logout
 import { readFileSync, writeFileSync, mkdirSync, existsSync, appendFileSync, unlinkSync } from "node:fs";
 import { homedir } from "node:os";
-import { join } from "node:path";
+import { join, resolve, relative, isAbsolute, dirname } from "node:path";
+import { execSync } from "node:child_process";
+import { createHash } from "node:crypto";
 const CONFIG_DIR = join(homedir(), ".tori");
 const CONFIG = join(CONFIG_DIR, "config.json");
 const args = process.argv.slice(2);
@@ -21,7 +23,7 @@ function out(o, human) { console.log(json ? JSON.stringify(o, null, 2) : human);
 function die(msg) { console.error(json ? JSON.stringify({ error: msg }) : `\u2717 ${msg}`); process.exit(1); }
 const usd = (c) => `$${(c / 100).toFixed(2)}`;
 async function api(cfg, method, path, body) {
-    const r = await fetch(`${cfg.base}${path}`, { method, headers: { Authorization: `Bearer ${cfg.token}`, "Content-Type": "application/json", "User-Agent": "@earntori/cli/0.1.2" }, body: body ? JSON.stringify(body) : undefined });
+    const r = await fetch(`${cfg.base}${path}`, { method, headers: { Authorization: `Bearer ${cfg.token}`, "Content-Type": "application/json", "User-Agent": "@earntori/cli/0.2.1" }, body: body ? JSON.stringify(body) : undefined });
     const t = await r.text();
     let j = null;
     try {
@@ -108,13 +110,161 @@ async function stats() {
         `\nDeveloper program \u2014 credits earned: ${usd(s.program.creditsEarnedCents)}\n` +
         `  starter ${m.starter ? "\u2713" : "\u00B7"}   first reward claimed ${m.firstRewardClaimed ? "\u2713" : "\u00B7"}   first redemption routed ${m.firstRedemptionRouted ? "\u2713" : "\u00B7"}`);
 }
+// ---- init / check (B2D core) ----------------------------------------------------------
+// `tori init` wires Tori into the current project once: MCP server for Claude Code (.mcp.json)
+// and Cursor (.cursor/mcp.json), plus two Claude Code hooks — Stop runs the checks on changed
+// files before the agent finishes (findings block the stop and are shown to the agent), and
+// SessionStart adds a one-line reminder. `--local` points at this checkout's dist/ builds
+// instead of the published packages (for testing before publish).
+function readJson(p) { try {
+    return JSON.parse(readFileSync(p, "utf8"));
+}
+catch {
+    return null;
+} }
+function writeJson(p, o) { mkdirSync(dirname(resolve(p)), { recursive: true }); writeFileSync(p, JSON.stringify(o, null, 2) + "\n"); }
+function init() {
+    const cfg = loadCfg();
+    if (!cfg)
+        die("Not signed in \u2014 run: tori login");
+    const local = has("local");
+    const cliBin = resolve(process.argv[1] ?? "");
+    const mcpBin = resolve(dirname(cliBin), "..", "..", "mcp", "dist", "index.js");
+    if (local && !existsSync(mcpBin))
+        die(`--local: MCP build not found at ${mcpBin} (run: pnpm --filter @earntori/mcp build)`);
+    const mcp = local ? { command: "node", args: [mcpBin] } : { command: "npx", args: ["-y", "@earntori/mcp"] };
+    const cli = local ? `node ${JSON.stringify(cliBin)}` : "npx -y @earntori/cli";
+    const mergeMcp = (file) => { const j = readJson(file) ?? {}; j.mcpServers = { ...(j.mcpServers ?? {}), tori: mcp }; writeJson(file, j); return file; };
+    const wrote = [mergeMcp(".mcp.json"), mergeMcp(join(".cursor", "mcp.json"))];
+    const sfile = join(".claude", "settings.json");
+    const s = readJson(sfile) ?? {};
+    s.hooks = s.hooks && typeof s.hooks === "object" ? s.hooks : {};
+    const ensure = (event, command) => {
+        const arr = Array.isArray(s.hooks[event]) ? s.hooks[event] : [];
+        const present = arr.some((g) => Array.isArray(g?.hooks) && g.hooks.some((h) => typeof h?.command === "string" && h.command.includes("@earntori/cli check") || (local && typeof h?.command === "string" && h.command.includes(cliBin))));
+        if (!present)
+            arr.push({ hooks: [{ type: "command", command }] });
+        s.hooks[event] = arr;
+    };
+    ensure("Stop", `${cli} check --hook`);
+    ensure("SessionStart", `${cli} check --reminder`);
+    writeJson(sfile, s);
+    wrote.push(sfile);
+    out({ ok: true, wrote, local }, `\u2713 Tori installed in this project${local ? " (local builds)" : ""}\n` +
+        wrote.map((w) => `  ${w}`).join("\n") +
+        `\n\nClaude Code: restart the session (hooks and .mcp.json load at start). Cursor: reload the window.\nTori's checks now run when the agent finishes a turn; findings are shown to the agent before it stops.`);
+}
+const CODE_EXT = /\.(ts|tsx|js|jsx|mjs|cjs|py|go|rb|php|java|kt|cs)$/i;
+function projectId() {
+    try {
+        const url = execSync("git config --get remote.origin.url", { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+        if (url)
+            return url.replace(/^https?:\/\/[^@]*@/, "https://").replace(/\.git$/, "").toLowerCase();
+    }
+    catch { }
+    return "local:" + createHash("sha256").update(process.cwd()).digest("hex").slice(0, 12);
+}
+function gitChanged() {
+    try {
+        const o = execSync("git status --porcelain --untracked-files=all", { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+        return o.split("\n").map((l) => l.slice(3).trim()).filter(Boolean).map((p) => (p.includes(" -> ") ? p.split(" -> ")[1] : p));
+    }
+    catch {
+        return [];
+    }
+}
+function readCode(paths) {
+    const files = [];
+    for (const p of paths) {
+        const abs = isAbsolute(p) ? p : resolve(p);
+        const rel = relative(process.cwd(), abs);
+        if (rel.startsWith("..") || rel.includes("node_modules/") || !CODE_EXT.test(rel) || !existsSync(abs))
+            continue;
+        try {
+            const c = readFileSync(abs, "utf8");
+            if (c.length <= 200_000)
+                files.push({ path: rel, content: c });
+        }
+        catch { }
+    }
+    return files;
+}
+function formatRun(r, n) {
+    if (r.clean)
+        return `\u2713 Tori checks clean \u2014 ${n} file(s), no open findings.`;
+    const L = [`Tori checks: ${r.findings.length} finding(s) in ${n} file(s). Fix each one, then call the checks_resolve tool with the finding_id and file path so the fix is verified.`];
+    for (const f of r.findings)
+        L.push("", `[${f.severity.toUpperCase()}] ${f.path}${f.line ? ":" + f.line : ""}  (${f.rule_id})`, `finding_id: ${f.id}`, f.message, "", "How to fix:", f.fix_hint);
+    if (r.waived?.length)
+        L.push("", `Waived (${r.waived.length}, not blocking): ` + r.waived.map((w) => `${w.path}${w.line ? ":" + w.line : ""} ${w.rule_id} \u2014 ${w.reason ?? "no reason"}`).join("; "));
+    if (r.reward?.issued)
+        L.push("", `Tori rewarded you (${r.reward.reward}) \u2014 details in your Tori ledger.`);
+    return L.join("\n");
+}
+async function check() {
+    if (has("reminder")) {
+        console.log("Tori is installed in this project. Before finishing any work that touches webhooks, payments, banking, identity or third-party APIs, call the checks_run tool on the files you changed; after fixing a finding, call checks_resolve with the finding_id and path. Tori also runs automatically when you stop.");
+        return;
+    }
+    const hook = has("hook");
+    let stopActive = false;
+    if (hook) {
+        try {
+            const raw = readFileSync(0, "utf8");
+            stopActive = !!JSON.parse(raw || "{}").stop_hook_active;
+        }
+        catch { }
+    }
+    const cfg = loadCfg();
+    if (!cfg) {
+        if (hook)
+            return;
+        die("Not signed in \u2014 run: tori login");
+    }
+    const explicit = args.slice(1).filter((a) => !a.startsWith("--"));
+    const files = readCode(explicit.length ? explicit : gitChanged());
+    if (files.length === 0) {
+        if (!hook)
+            out({ clean: true, files: 0 }, "Nothing to check \u2014 no changed code files.");
+        return;
+    }
+    let r;
+    try {
+        const res = await fetch(`${cfg.base}/api/v1/checks/run`, { method: "POST", headers: { Authorization: `Bearer ${cfg.token}`, "Content-Type": "application/json", "User-Agent": "@earntori/cli/check" }, body: JSON.stringify({ files, project: projectId() }) });
+        const t = await res.text();
+        if (!res.ok)
+            throw new Error(`Tori API ${res.status}${t ? ": " + t.slice(0, 200) : ""}`);
+        r = JSON.parse(t);
+    }
+    catch (e) {
+        if (hook)
+            return;
+        die(e.message);
+    }
+    const text = formatRun(r, files.length);
+    if (hook) {
+        if (r.clean)
+            return;
+        if (stopActive) {
+            console.log(`Tori: ${r.findings.length} finding(s) still open \u2014 run \`tori check\` to see them.`);
+            return;
+        }
+        console.error(text);
+        process.exit(2); // exit 2 = block the stop; stderr goes to the agent
+    }
+    out(r, text);
+    if (!r.clean)
+        process.exitCode = 1;
+}
 function logout() { if (existsSync(CONFIG))
     unlinkSync(CONFIG); out({ ok: true }, "\u2713 Signed out"); }
-function help() { console.log(`tori \u2014 Tori CLI\n\n  tori login [--base URL]              sign in with GitHub (device flow)\n  tori status [--json]                 balance + your AI keys\n  tori key --limit 5 [--write env] [--file .env] [--json]\n  tori stats [--json]                  your integration + developer program numbers\n  tori logout\n`); }
+function help() { console.log(`tori \u2014 Tori CLI\n\n  tori login [--base URL]              sign in with GitHub (device flow)\n  tori status [--json]                 balance + your AI keys\n  tori key --limit 5 [--write env] [--file .env] [--json]\n  tori stats [--json]                  your integration + developer program numbers\n  tori init [--local]                  wire Tori into this project (MCP + Claude Code hooks)\n  tori check [paths...] [--json]       run Tori's checks on changed files\n  tori logout\n`); }
 (async () => {
     switch (cmd) {
         case "login": return login();
         case "status": return status();
+        case "init": return init();
+        case "check": return check();
         case "key": return key();
         case "stats": return stats();
         case "logout": return logout();

package/package.json

@@ -1,13 +1,29 @@
 {
   "name": "@earntori/cli",
-  "version": "0.1.2",
-  "description": "Tori CLI — sign in with GitHub, check your credits, mint a capped AI key into your tools.",
+  "version": "0.2.1",
+  "description": "Tori CLI \u2014 sign in with GitHub, check your credits, mint a capped AI key into your tools.",
   "license": "MIT",
   "type": "module",
-  "bin": { "tori": "dist/index.js" },
-  "files": ["dist", "README.md"],
-  "engines": { "node": ">=18" },
-  "scripts": { "build": "tsc -p tsconfig.json && chmod +x dist/index.js", "typecheck": "tsc --noEmit -p tsconfig.json", "test": "echo no tests" },
-  "devDependencies": { "typescript": "^5.6.0", "@types/node": "^20.0.0" },
-  "publishConfig": { "access": "public" }
+  "bin": {
+    "tori": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json && chmod +x dist/index.js",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "echo no tests"
+  },
+  "devDependencies": {
+    "typescript": "^5.6.0",
+    "@types/node": "^20.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
 }