@earntori/cli 0.2.14 → 0.2.16

package/README.md

@@ -1,17 +1,20 @@
 # @earntori/cli
 
-The Tori command line. Sign in, wire Tori into a repo, run checks, mint AI keys.
+The Tori command line. One command holds your coding agent to a standard.
 
 ```
-npx @earntori/cli login                  sign in with GitHub (device flow)
-npx @earntori/cli init                   wire Tori into this repo (MCP server + Claude Code hooks)
-npx @earntori/cli check [paths…]         run Tori's checks on changed files
-npx @earntori/cli status                 balance + your AI keys
-npx @earntori/cli key --limit 5          mint a spend-capped AI key from your credits (--write env to save it)
-npx @earntori/cli stats                  your integration + developer program numbers
+npx @earntori/cli init                      set up this repo (signs you in with GitHub the first time)
+npx @earntori/cli standards                 what this project is held to; `standards enable <id…>` adds one
+npx @earntori/cli rules add "…"             add a rule of your own
+npx @earntori/cli check [paths…]            run the checks yourself
+npx @earntori/cli ledger                    the signed record of every check and fix
+npx @earntori/cli receipt <id>              verify one receipt
+npx @earntori/cli connector new --label …   a connector for Claude (Chat, Cowork) and agents you build
 npx @earntori/cli logout
 ```
 
-**Earn AI credits by building securely in Claude Code and Cursor.** Tori checks the code your coding agent writes before you ship it, tells the agent how to fix what it finds, and rewards you in AI credits for building with it. Full guide: https://www.earntori.com/docs/mcp · issues: https://github.com/GAishZOEish/Tori-MCP/issues
+Tori checks the code your coding agent writes against OWASP- and CWE-aligned coding standards, and the standards your industry is held to, before the agent calls a task done. Each finding comes with its fix; the agent applies it. Every check and fix goes on a signed record you can verify offline and show whoever needs proof.
 
-Sending rewards to your own users? That's the Partner API: https://www.earntori.com/developers#quickstart
+Coding agents (CLI and IDE): Claude Code, Codex, Cursor. Desktop agents: Claude (Chat, Cowork).
+
+Guide: https://github.com/GAishZOEish/tori-examples#readme · https://usetori.dev · Issues: https://github.com/usetori/Tori-MCP/issues

package/dist/index.js

@@ -163,7 +163,7 @@ function writeJson(p, o) { mkdirSync(dirname(resolve(p)), { recursive: true });
 // `install` writes that harness's files and returns their paths. Add a harness = add a row.
 // Pinned package versions written into agent config (B1b). CLI version = this package's own;
 // MCP version is a constant: bump it in the same commit as a @earntori/mcp release.
-const TORI_MCP_VERSION = "0.1.7";
+const TORI_MCP_VERSION = "0.1.9";
 function cliVersion(cliBin) {
     try {
         return JSON.parse(readFileSync(resolve(dirname(realpathSync(cliBin)), "..", "package.json"), "utf8")).version ?? "latest";
@@ -336,7 +336,7 @@ function formatRun(r, n) {
         return `\u2713 Tori checks clean \u2014 ${n} file(s), no open findings.`;
     const L = [`Tori checks: ${r.findings.length} finding(s) in ${n} file(s). Fix each one, then call the checks_resolve tool with the finding_id and file path so the fix is verified.`];
     for (const f of r.findings)
-        L.push("", `[${f.severity.toUpperCase()}] ${f.path}${f.line ? ":" + f.line : ""}  (${f.rule_id})`, `finding_id: ${f.id}`, f.message, "", "How to fix:", f.fix_hint);
+        L.push("", `[${f.severity.toUpperCase()}] ${f.path}${f.line ? ":" + f.line : ""}  (${f.rule_id}${f.area ? " · " + f.area : ""})`, `finding_id: ${f.id}`, f.message, "", "How to fix:", f.fix_hint);
     if (r.waived?.length)
         L.push("", `Waived (${r.waived.length}, not blocking): ` + r.waived.map((w) => `${w.path}${w.line ? ":" + w.line : ""} ${w.rule_id} \u2014 ${w.reason ?? "no reason"}`).join("; "));
     if (r.reward?.issued)
@@ -539,7 +539,8 @@ async function standards() {
         return;
     }
     const r = await api(cfg, "GET", `/api/v1/standards?project=${encodeURIComponent(project)}`);
-    const line = (s) => `  ${s.enabled ? "on " : "off"}  ${s.id.padEnd(20)} ${s.name}${s.rules ? ` (${s.rules} checks)` : " (no checks yet)"}`;
+    const line = (s) => `  ${s.enabled ? "on " : "off"}  ${s.id.padEnd(20)} ${s.name}${s.rules ? ` (${s.rules} checks)` : " (no checks yet)"}` +
+        (s.areas?.length ? `\n       ${" ".repeat(20)} ${s.areas.map((a) => `${a.name} ${a.rules}`).join(" · ")}` : "");
     out(r, `${project.startsWith("connector:") ? `Project: ${project}\n\n` : ""}Coding standards \u2014 always on:\n${r.standards.filter((s) => s.tier === "coding").map(line).join("\n")}\n\nDomain standards \u2014 choose per project:\n${r.standards.filter((s) => s.tier === "domain").map(line).join("\n")}\n\nEnable: tori standards enable <id…>   Disable: tori standards disable <id…>`);
 }
 async function rules() {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@earntori/cli",
-  "version": "0.2.14",
-  "description": "Tori CLI — sign in with GitHub, check your credits, mint a capped AI key into your tools.",
+  "version": "0.2.16",
+  "description": "Tori CLI — holds your coding agent to a standard: checks before it calls a task done, each finding with its fix, on a signed record you can verify offline.",
   "license": "MIT",
   "type": "module",
   "bin": {
@@ -26,12 +26,12 @@
   "publishConfig": {
     "access": "public"
   },
-  "homepage": "https://www.earntori.com/docs/mcp",
+  "homepage": "https://usetori.dev",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/usetori/tori.git"
   },
   "bugs": {
-    "url": "https://github.com/GAishZOEish/Tori-MCP/issues"
+    "url": "https://github.com/usetori/Tori-MCP/issues"
   }
 }