@firedrill-run/ci-client 0.1.0

package/NOTICE.md

@@ -0,0 +1,15 @@
+# Distribution notices
+
+The Firedrill CI client wrapper and platform-authored orchestration are proprietary
+to Reload Tech Inc. This package does not grant a source redistribution license
+for those components and imposes no local license-key execution check.
+
+Bundled historical Firedrill engine contributions retain their Apache-2.0 license.
+They are limited to compiler, schema, target invocation and capture support; no
+world kernel, state store or server is distributed. Third-party modules retain
+their original licenses. Complete package license and NOTICE files are included
+under `dist/licenses/`; inline license notices are preserved in the bundle.
+
+`dist/distribution.json` records the reviewed emitted module paths and the source
+revision used to build the client. It is a dependency-boundary receipt, not a
+claim that npm can publicly verify a private source repository.

package/README.md

@@ -0,0 +1,42 @@
+# Firedrill CI client
+
+Install on a Node.js 24 runner with `npm install --save-dev @firedrill-run/cloud @firedrill-run/ci-client`.
+Run `npx firedrill ci --help` (or `npx firedrill-ci --help`). This package is an
+authenticated client, not a standalone world runtime. Your own agent command
+runs in a separate process on your runner.
+
+```sh
+firedrill ci run --auth github \
+  --project prj_... --environment env_... --repository-binding repo_... \
+  --revision "$CHECKED_OUT_SHA" \
+  --agent-command python --agent-arguments '["test/firedrill_agent.py"]'
+```
+
+GitHub jobs require `id-token: write` and a configured Firedrill repository
+binding. Check out the exact base/head revision for a pull request, never its
+synthetic merge commit. Other triggers run their exact revision. OIDC exchange
+and the managed service retain repository, project and invocation authorization.
+
+Other runners can use `--auth token` with a service credential supplied through
+`FIREDRILL_CREDENTIAL`, plus explicit `--runner-id` and `--idempotency-scope`.
+Keep the same scope and exact arguments after uncertain network outcomes. This
+does not create a repository connection, approve Tools, or invent missing builds.
+
+An explicit `--agent-command` is required even when source declares a module,
+command or HTTP target. The source's target identity, protocol bindings and
+timeout remain authoritative; only its launcher is replaced by your selected
+subprocess. The command receives invocation JSON on stdin and scoped world
+bindings in its environment, writes one JSON value to stdout, and logs to stderr.
+No shell is used. GitHub, OIDC, control and dynamic-loader variables are stripped;
+model credentials remain caller-owned. File/capture content is caller-provided
+and must be redacted before collection. This is not an OS sandbox.
+
+Exit 0 means the service's returned gate allows the suite, 1 blocks it, and 2
+means setup failed. JSON, JUnit and terminal reports remain under `.firedrill/ci`.
+Capture is off unless explicitly selected. `--capture-logs always` (or
+`retain-on-failure`) captures subprocess stderr through the canonical capture
+manager. The screenshots/video/files options are retention policies, not
+automatic browser recording or a subprocess file-submission protocol; use the
+SDK's explicit capture callback when that integration is needed.
+This client does not run a local world
+or require access to the private source repository or a private GitHub Action.

package/dist/client-bin.js

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+import { runCiCli } from "./client-cli.js";
+const controller = new AbortController();
+let signalExitCode;
+const interrupt = () => {
+  signalExitCode = 130;
+  controller.abort();
+};
+const terminate = () => {
+  signalExitCode = 143;
+  controller.abort();
+};
+process.once("SIGINT", interrupt);
+process.once("SIGTERM", terminate);
+try {
+  process.exitCode = await runCiCli(process.argv.slice(2), {
+    cwd: process.cwd(),
+    environment: process.env,
+    stdout: process.stdout,
+    stderr: process.stderr,
+    signal: controller.signal
+  });
+} finally {
+  if (signalExitCode !== void 0) process.exitCode = signalExitCode;
+  process.removeListener("SIGINT", interrupt);
+  process.removeListener("SIGTERM", terminate);
+}