@gizai/cli 2.1.1 → 2.2.0

package/package.json

@@ -1,27 +1,59 @@
 {
   "name": "@gizai/cli",
-  "version": "2.1.1",
-  "description": "GizStack: natively compiled TypeScript, with the whole stack built in: a modern web framework and server, OLTP and OLAP SQL (PostgreSQL- and Oracle-compatible), vector search, key-value, distributed POSIX and S3 storage, GPU tensors, and local LLM, image and video generation",
-  "homepage": "https://gizstack.com",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/gizai/gizlang.git"
+  "version": "2.2.0",
+  "description": "The official command-line interface for giz.ai: run AI models, Drive, Computers and Apps, connect Claude Code, Codex and other agents over MCP, and run Gizlang (giz init, run, deploy), installed on first use.",
+  "keywords": [
+    "giz",
+    "giz.ai",
+    "cli",
+    "mcp",
+    "model-context-protocol",
+    "ai",
+    "llm",
+    "agent",
+    "claude-code",
+    "codex",
+    "image-generation",
+    "video-generation"
+  ],
+  "homepage": "https://www.giz.ai/mcp/",
+  "bugs": {
+    "email": "support@giz.ai",
+    "url": "https://www.giz.ai/mcp/"
   },
-  "license": "MIT",
-  "publishConfig": {
-    "access": "public"
+  "author": {
+    "name": "Giz Inc.",
+    "url": "https://www.giz.ai"
   },
+  "license": "UNLICENSED",
+  "type": "module",
   "bin": {
-    "giz": "bin/giz.js"
+    "giz": "cli/giz.mjs",
+    "gizdb": "cli/gizdb.mjs"
   },
   "files": [
-    "bin",
-    "skills"
+    "cli",
+    "skills",
+    "plugin.json",
+    "mcp.json",
+    "README.md"
   ],
   "engines": {
-    "node": ">=16"
+    "node": ">=20.12"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "1.29.0",
+    "proper-lockfile": "4.1.2"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/gizai/giz.git",
+    "directory": "apps/giz/external"
+  },
+  "publishConfig": {
+    "access": "public"
   },
-  "optionalDependencies": {
-    "@gizai/cli-linux-x64": "2.1.1"
+  "scripts": {
+    "check": "node --check cli/giz.mjs && node --test test/*.test.mjs"
   }
 }

package/plugin.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "giz",
+  "version": "2.0.1",
+  "description": "Run Giz models, media generation, Drive, tables, Apps and Computers from any agent: the giz skill plus the Giz MCP server.",
+  "author": { "name": "Giz", "url": "https://www.giz.ai" },
+  "homepage": "https://www.giz.ai/mcp/",
+  "license": "UNLICENSED",
+  "keywords": ["giz", "mcp", "media", "drive", "computer"]
+}

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 Giz Systems Inc. and the Gizlang contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/bin/giz.js

@@ -1,78 +0,0 @@
-#!/usr/bin/env node
-// The npm entry of GizStack 0.1.0-preview.20261023.5 (generated by tools/distribution/channels).
-// The giz.ai commands (auth api-key credits model models chat generate job drive table upload computer app connection plugin agent invoke mcp skill engine update __update-check), help and --version run the command line binary of this platform's package
-// (@gizai/cli-OS-CPU, an optional dependency), which needs no toolchain: giz.ai CLI 2.0's users keep working right after
-// `npm install`. Every other command needs the toolchain: the first such run installs this version with install.sh, which
-// finds the platform, downloads its installer from the content address, checks the SHA-256 against the table in this
-// package, and runs it; the installer checks the release signature and every file. Then each run executes the installed
-// giz, which selects the version (a project pin or the active one).
-"use strict";
-const { spawnSync } = require("child_process");
-const fs = require("fs");
-const os = require("os");
-const path = require("path");
-
-const VERSION = "0.1.0-preview.20261023.5";
-const ACCOUNT = new Set("auth api-key credits model models chat generate job drive table upload computer app connection plugin agent invoke mcp skill engine update __update-check".split(" ").filter(Boolean));
-// 2.0's flags that take no value: the command is the first word that is not a flag or a flag's value.
-const BOOLEANS = new Set(["help", "json", "no-open", "version", "device"]);
-
-function fail(message) {
-	process.stderr.write("giz: " + message + "\n");
-	process.exit(1);
-}
-function commandOf(argv) {
-	for (let i = 0; i < argv.length; i += 1) {
-		const word = argv[i];
-		if (word === "--") return argv[i + 1] || "";
-		if (!word.startsWith("--")) return word;
-		const name = word.slice(2).split("=")[0];
-		if (!word.includes("=") && !BOOLEANS.has(name) && argv[i + 1] && !argv[i + 1].startsWith("--")) i += 1;
-	}
-	return "";
-}
-// The package manager that installed this package, for `giz update`.
-function installer() {
-	const at = __dirname.toLowerCase();
-	if (at.includes(path.sep + ".pnpm" + path.sep) || /[\\/]pnpm[\\/]global[\\/]/.test(at)) return "pnpm";
-	if (at.includes(path.sep + ".bun" + path.sep)) return "bun";
-	if (at.includes(path.sep + ".yarn" + path.sep) || at.includes(path.sep + "yarn" + path.sep + "global" + path.sep)) return "yarn";
-	return "npm";
-}
-function bundled() {
-	const system = { linux: "linux", darwin: "darwin", win32: "win32" }[process.platform];
-	const cpu = { x64: "x64", arm64: "arm64" }[process.arch];
-	if (!system || !cpu || ACCOUNT.size === 0) return undefined;
-	try {
-		const file = path.join(path.dirname(require.resolve("@gizai/cli-" + system + "-" + cpu + "/package.json")), "bin", "giz" + (system === "win32" ? ".exe" : ""));
-		return fs.existsSync(file) ? file : undefined;
-	} catch { return undefined; }
-}
-function run(file, standalone) {
-	const env = { ...process.env, GIZ_INSTALLER: installer(), GIZ_SELF: process.argv[1],
-		GIZ_SKILLS: path.join(__dirname, "..", "skills") };
-	if (standalone) env.GIZ_STANDALONE = "1";
-	const ran = spawnSync(file, process.argv.slice(2), { stdio: "inherit", env });
-	if (ran.error) fail(ran.error.message);
-	if (ran.signal) process.kill(process.pid, ran.signal);
-	process.exit(ran.status === null ? 1 : ran.status);
-}
-
-const argv = process.argv.slice(2);
-const command = commandOf(argv);
-const own = bundled();
-if (process.platform === "win32") {
-	if (!own) fail("the Windows binary package was not installed; reinstall without --omit=optional");
-	run(own, true);
-}
-// `--version` goes to the toolchain: it names the toolchain's version, and the install guide's first command fetches it.
-if (own && (ACCOUNT.has(command) || argv.length === 0 || command === "help" || command === "-h" || (command === "" && argv.includes("--help")))) {
-	run(own, true);
-}
-const root = process.env.GIZ_INSTALL || path.join(os.homedir(), ".giz");
-const bin = path.join(root, "bin", "giz");
-const installed = spawnSync("sh", [path.join(__dirname, "install.sh"), ..."".split(" ").filter(Boolean), "--if-missing", "--no-modify-path", "--version", VERSION],
-	{ stdio: ["inherit", process.stderr, "inherit"], env: { ...process.env, GIZ_INSTALL: root } });
-if (installed.error) fail("cannot run sh: " + installed.error.message + ". Supported platforms: https://gizstack.com/download");
-if (installed.status !== 0) process.exit(installed.status === null ? 1 : installed.status);
-run(bin, false);

package/bin/install.sh

@@ -1,268 +0,0 @@
-#!/bin/sh
-# Install GizStack: curl -fsSL https://gizstack.com/install | sh
-# Install the GizDB server alone: curl -fsSL https://gizstack.com/install | sh -s -- --only gizdb
-# While gizstack.com is in private preview, the command on your signed-in page adds
-# -H "Authorization: Bearer TOKEN": the script served for it carries that access token
-# and stores it in ~/.config/gizstack/access-token, where the installer and
-# `giz upgrade` read it.
-#
-# This script downloads the official installer for your platform from its
-# content address, checks its SHA-256 against that address and runs it. The
-# installer verifies the release signature and every file hash before it
-# activates the version. Nothing needs root. Docs: https://gizstack.com/docs/start
-#
-# Options (sh -s -- OPTION...):
-#   --only gizdb           install only the GizDB server (bin/gizdb): the same
-#                          signed release, without the compiler, into ~/.gizdb
-#   --version VERSION      install this published version (default: the newest)
-#   --no-modify-path       do not add the bin directory to shell profiles
-#   --installer FILE       use this downloaded installer (the npm and Homebrew
-#                          packages carry it); its SHA-256 is checked the same way
-#   --if-missing           do nothing when this version is installed already
-#                          (the package wrappers run it before each command)
-# Environment: GIZ_INSTALL (default ~/.giz; with --only gizdb,
-#   GIZDB_INSTALL, default ~/.gizdb), NO_MODIFY_PATH=1.
-#
-# Everything runs inside main(), called on the last line, so a download that
-# is cut off does nothing.
-
-set -u
-
-SITE="https://gizstack.com"
-# The access token this script was served for (the server writes it here), or empty.
-ACCESS=''
-
-# Published installers: product (toolchain, or gizdb for the server alone),
-# target, version, installer SHA-256.
-# Generated from $SITE/api/releases when this script was served.
-releases() {
-	cat <<'RELEASES'
-toolchain x86_64-unknown-linux-gnu 0.1.0-preview.20261023.5 1f73b27cdf6024e1f1dee7b428bb1210cc2933851fff75e35361d27a4ad1ef31
-gizdb x86_64-unknown-linux-gnu 0.1.0-preview.20261015.5 cc102bb96abcbe04a98dbc697595310e28b7d997a716f979258ff2afaf4620c6
-RELEASES
-}
-
-say() { printf '%s\n' "$*"; }
-fail() { printf 'giz-install: %s\n' "$*" >&2; exit 1; }
-
-detect_target() {
-	os=$(uname -s)
-	arch=$(uname -m)
-	case "$arch" in
-		x86_64 | amd64) arch=x86_64 ;;
-		aarch64 | arm64) arch=aarch64 ;;
-		*) fail "unsupported CPU architecture: $arch. Supported platforms: $SITE/download" ;;
-	esac
-	case "$os" in
-		Linux)
-			libc=gnu
-			if ls /lib/ld-musl-* >/dev/null 2>&1 || (ldd --version 2>&1 | grep -qi musl); then libc=musl; fi
-			target="$arch-unknown-linux-$libc" ;;
-		Darwin)
-			# A shell under Rosetta reports x86_64 on Apple Silicon.
-			if [ "$arch" = x86_64 ] && [ "$(sysctl -n sysctl.proc_translated 2>/dev/null)" = 1 ]; then arch=aarch64; fi
-			target="$arch-apple-darwin" ;;
-		MINGW* | MSYS* | CYGWIN* | Windows_NT)
-			fail "on Windows, run in PowerShell: irm $SITE/install.ps1 | iex" ;;
-		*) fail "unsupported operating system: $os. Supported platforms: $SITE/download" ;;
-	esac
-}
-
-# Sets digest and version from the table, or explains what exists.
-select_release() {
-	digest=""
-	[ -n "$(releases)" ] || fail "no GizStack release supports this install script yet. Download an installer: $SITE/download"
-	found=$(releases | while read -r p t v d; do
-		if [ "$p" = "$product" ] && [ "$t" = "$target" ] && { [ -z "$wanted" ] || [ "$v" = "$wanted" ]; }; then say "$v $d"; break; fi
-	done)
-	if [ -n "$found" ]; then version=${found% *}; digest=${found#* }; return; fi
-	available=$(releases | while read -r p t v d; do if [ "$p" = "$product" ] && [ "$t" = "$target" ]; then printf ' %s' "$v"; fi; done)
-	if [ -n "$available" ]; then fail "$name $wanted is not published for $target. Published:$available"; fi
-	platforms=$(releases | while read -r p t v d; do if [ "$p" = "$product" ]; then printf '\n  %s' "$t"; fi; done)
-	[ -n "$platforms" ] || fail "no $name release supports this install script yet. Release status: $SITE/download"
-	fail "no $name release for $target yet. Published platforms:$platforms
-Use the browser Playground meanwhile: $SITE/play. Release status: $SITE/download"
-}
-
-download() { # URL FILE
-	if command -v curl >/dev/null 2>&1; then
-		if [ -n "$KEY" ]; then curl --proto '=https' --tlsv1.2 -fsSL --retry 3 -H "Authorization: Bearer $KEY" -o "$2" "$1"
-		else curl --proto '=https' --tlsv1.2 -fsSL --retry 3 -o "$2" "$1"; fi
-	elif command -v wget >/dev/null 2>&1; then
-		if [ -n "$KEY" ]; then wget --https-only -q --header="Authorization: Bearer $KEY" -O "$2" "$1"
-		else wget --https-only -q -O "$2" "$1"; fi
-	elif command -v node >/dev/null 2>&1; then
-		# The npm package runs this script, so Node.js is there even where curl and wget are not (node:*-slim, a minimal WSL).
-		node -e 'const [u, f, k] = process.argv.slice(1); if (!u.startsWith("https://")) { console.error("not https: " + u); process.exit(1); }
-require("https").get(u, { headers: k ? { Authorization: "Bearer " + k } : {} }, (r) => {
-	if (r.statusCode !== 200) { console.error("HTTP " + r.statusCode + " for " + u); process.exit(1); }
-	r.pipe(require("fs").createWriteStream(f)).on("error", (e) => { console.error(e.message); process.exit(1); });
-}).on("error", (e) => { console.error(e.message); process.exit(1); });' "$1" "$2" "$KEY"
-	else
-		fail "curl, wget or node is required"
-	fi
-}
-
-sha256() {
-	if command -v sha256sum >/dev/null 2>&1; then sha256sum "$1" | cut -d ' ' -f 1
-	elif command -v shasum >/dev/null 2>&1; then shasum -a 256 "$1" | cut -d ' ' -f 1
-	elif command -v openssl >/dev/null 2>&1; then openssl dgst -sha256 -r "$1" | cut -d ' ' -f 1
-	else fail "sha256sum, shasum or openssl is required to check the installer"
-	fi
-}
-
-add_line() { # FILE LINE: append LINE once
-	if [ -f "$1" ] && grep -qxF "$2" "$1"; then return; fi
-	printf '\n%s\n' "$2" >>"$1" && changed="$changed $1"
-}
-
-# One line in each profile sources $root/env, which adds bin to PATH once.
-modify_path() {
-	bin="$root/bin"
-	cat >"$root/env" <<ENV
-# Added by the $name installer.
-case ":\${PATH}:" in *":$bin:"*) ;; *) export PATH="$bin:\$PATH" ;; esac
-ENV
-	cat >"$root/env.fish" <<ENV
-# Added by the $name installer.
-if not contains -- "$bin" \$PATH; set -gx PATH "$bin" \$PATH; end
-ENV
-	line=". \"$root/env\""
-	zshrc="${ZDOTDIR:-$HOME}/.zshrc"
-	for profile in "$HOME/.profile" "$HOME/.bashrc" "$HOME/.bash_profile" "$zshrc"; do
-		case "$profile" in
-			"$HOME/.bash_profile") [ -f "$profile" ] || continue ;;
-			"$zshrc") [ -f "$profile" ] || command -v zsh >/dev/null 2>&1 || continue ;;
-		esac
-		add_line "$profile" "$line"
-	done
-	if command -v fish >/dev/null 2>&1 || [ -d "$HOME/.config/fish" ]; then
-		mkdir -p "$HOME/.config/fish/conf.d"
-		fishline="source \"$root/env.fish\""
-		fishrc="$HOME/.config/fish/conf.d/$command.fish"
-		add_line "$fishrc" "$fishline"
-	fi
-}
-
-# The installer, `giz upgrade` and package reads send this token to gizstack.com.
-store_access() {
-	[ -n "$ACCESS" ] || return 0
-	config="${XDG_CONFIG_HOME:-$HOME/.config}/gizstack"
-	(umask 077 && mkdir -p "$config" && printf '%s\n' "$ACCESS" >"$config/access-token.new" && mv "$config/access-token.new" "$config/access-token") || fail "cannot store the access token in $config"
-}
-
-# A script not served with a key (npm, or a rerun) takes the key the way access.giz does: GIZ_ACCESS_TOKEN, else the
-# file. Only the downloads below use it, and only from $SITE. A value outside the token alphabet is refused whole, as
-# access.giz refuses it, so a bad value is never sent.
-resolve_access() {
-	KEY=$ACCESS
-	if [ -z "$KEY" ]; then KEY=$(printf '%s' "${GIZ_ACCESS_TOKEN:-}" | tr -d ' \t\r\n'); fi
-	if [ -z "$KEY" ] && [ -n "${HOME:-}" ]; then
-		KEY=$(tr -d ' \t\r\n' 2>/dev/null <"${XDG_CONFIG_HOME:-$HOME/.config}/gizstack/access-token")
-	fi
-	case "$KEY" in *[!0-9a-z_]*) KEY='' ;; esac
-}
-
-main() {
-	wanted=""
-	local_installer=""
-	if_missing=0
-	product=toolchain
-	path_changes=1
-	if [ -n "${NO_MODIFY_PATH:-}" ]; then path_changes=0; fi
-	while [ $# -gt 0 ]; do
-		case "$1" in
-			--only) [ $# -ge 2 ] || fail "--only needs a value"; [ "$2" = gizdb ] || fail "--only takes gizdb (the GizDB server alone), not $2"; product=gizdb; shift 2 ;;
-			--version) [ $# -ge 2 ] || fail "--version needs a value"; wanted=$2; shift 2 ;;
-			--no-modify-path) path_changes=0; shift ;;
-			--if-missing) if_missing=1; shift ;;
-			--installer) [ $# -ge 2 ] || fail "--installer needs a value"; local_installer=$2; shift 2 ;;
-			-h | --help) say "Usage: curl -fsSL $SITE/install | sh -s -- [--only gizdb] [--version VERSION] [--no-modify-path]"; say "Docs: $SITE/docs/start"; exit 0 ;;
-			*) fail "unknown option: $1 (see $SITE/docs/start)" ;;
-		esac
-	done
-	# The GizDB server alone is its own installation, beside a toolchain's, never inside it.
-	if [ "$product" = gizdb ]; then
-		name=GizDB; command=gizdb; variable=GIZDB_INSTALL; root="${GIZDB_INSTALL:-}"; home=.gizdb
-	else
-		name=GizStack; command=giz; variable=GIZ_INSTALL; root="${GIZ_INSTALL:-}"; home=.giz
-	fi
-	if [ -z "$root" ]; then
-		[ -n "${HOME:-}" ] || fail "HOME is not set; set $variable to the installation directory"
-		root="$HOME/$home"
-		# An install from before the command was gizstack (~/.gizlang) is upgraded in place: the installer then removes
-		# its gizlang command, and no second command stays on PATH.
-		if [ "$product" != gizdb ] && [ ! -e "$root" ] && [ -f "$HOME/.gizlang/active-toolchain" ]; then root="$HOME/.gizlang"; fi
-	fi
-	if [ "$wanted" = latest ]; then wanted=""; fi
-	case "$root" in
-		/*) ;;
-		*) fail "$variable must be an absolute path: $root" ;;
-	esac
-	case "$root" in
-		*[\"\$\`\\]*) fail "$variable cannot contain quotes, \$, backquotes or backslashes: $root" ;;
-	esac
-
-	detect_target
-	select_release
-	if [ "$if_missing" = 1 ]; then
-		for installed in "$root/versions/$product-$target-$version-"*; do
-			if [ -f "$installed/release.json" ]; then exit 0; fi
-		done
-	fi
-
-	work=$(mktemp -d 2>/dev/null || mktemp -d -t giz) || fail "cannot create a temporary directory"
-	trap 'rm -rf "$work"' EXIT
-	installer="$work/$command-installer"
-	if [ -n "$local_installer" ]; then
-		cp "$local_installer" "$installer" || fail "cannot read the installer $local_installer"
-	else
-		say "Downloading the $name $version installer for $target"
-		resolve_access
-		if ! download "$SITE/objects/sha256/$digest" "$installer"; then
-			[ -n "$KEY" ] || fail "the installer download was refused: $name is in private preview. Signed in at $SITE, your install command on $SITE/download carries your access key (or set GIZ_ACCESS_TOKEN). No invitation yet: $SITE/access-request"
-			fail "the installer download failed: $SITE/objects/sha256/$digest"
-		fi
-	fi
-	actual=$(sha256 "$installer")
-	[ "$actual" = "$digest" ] || fail "the installer SHA-256 is $actual, not $digest; nothing was installed"
-	chmod u+x "$installer"
-	# A copy that came through a browser or an archive tool carries the macOS
-	# quarantine attribute, and Gatekeeper then refuses the ad-hoc signed program.
-	# The SHA-256 check above replaces what the attribute would have asked the user to trust.
-	if [ "$os" = Darwin ] && command -v xattr >/dev/null 2>&1; then xattr -d com.apple.quarantine "$installer" 2>/dev/null || :; fi
-
-	store_access
-	mkdir -p "$root" || fail "cannot create $root"
-	"$installer" --root "$root" || fail "the installer failed; the previous version, if any, stays active"
-
-	changed=""
-	if [ "$path_changes" = 1 ]; then modify_path; fi
-	say ""
-	if [ "$product" = gizdb ]; then
-		# gizdb has no --version; its usage proves the installed server runs here.
-		"$root/bin/gizdb" --help >/dev/null || fail "$root/bin/gizdb does not run on this computer"
-		say "GizDB $version for $target is installed: $root/bin/gizdb"
-	else
-		"$root/bin/giz" --version || fail "$root/bin/giz does not run on this computer"
-	fi
-	say ""
-	if [ -n "$changed" ]; then
-		say "Added $root/bin to PATH in:$changed"
-		say "Open a new terminal, or run:  . \"$root/env\""
-	elif [ "$path_changes" = 1 ]; then
-		say "$root/bin is already on PATH in your shell profiles."
-	else
-		say "Add $root/bin to PATH to run $command."
-	fi
-	say ""
-	if [ "$product" = gizdb ]; then
-		say "Next:  GIZDB_PASSWORD=... gizdb serve --dir ~/gizdb-data --port 5432"
-		say "Docs:  $SITE/docs/operations/gizdb-server (systemd unit, backups, upgrades)"
-	else
-		say "Next:  giz init hello && cd hello && giz run main.giz"
-		say "Docs:  $SITE/docs/start"
-	fi
-}
-
-main "$@"