@kyde/score 0.0.0-stage → 0.9.5

package/README.md

@@ -1,3 +1,26 @@
-# Temporary Holding Version
+# @kyde/score
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Behavioral drift scoring for AI agents — [score.kyde.com](https://score.kyde.com).
+
+```sh
+npx @kyde/score init
+```
+
+One step, safe to rerun, written so an agent can run it alone:
+
+1. Creates a scoring key (or uses `$KYDE_KEY`) — shown once, hand it to
+   your human.
+2. Points Claude Code's OpenTelemetry export at score.kyde.com
+   (`~/.claude/settings.json`, global `env` block — never the agent
+   name; names belong where each agent is launched).
+3. Installs the hook: after a tool call Kyde can warn the agent in its
+   own context; on a deviating score or loop alarm the next tool call
+   pauses for the human (`KYDE_BLOCK=deny` blocks outright,
+   `KYDE_BLOCK=off` keeps warnings only).
+4. Sends a test event and confirms that Kyde sees this machine.
+
+Equivalent to `curl -fsSL https://score.kyde.com/install.sh | sh` — this
+package fetches and runs exactly that installer, so the two never drift.
+
+Docs for agents and humans: <https://score.kyde.com/llms.txt> ·
+Dashboard: <https://score.kyde.com/dashboard>

package/bin/kyde.js

@@ -0,0 +1,101 @@
+#!/usr/bin/env node
+// `npx @kyde/score init` — one-step KYDE Score setup for an agent harness
+// (Claude Code first). A thin wrapper by design (KYDE-421): it fetches
+// the canonical installer from the service and runs it, so the install
+// logic lives in exactly one place (deploy/landing/install.sh, shipped
+// by CI) and `npx @kyde/score init` can never drift from
+// `curl -fsSL https://score.kyde.com/install.sh | sh`.
+//
+// Environment (all optional, passed straight through to the installer):
+//   KYDE_KEY                    use this scoring key instead of creating one
+//   KYDE_ENDPOINT               service base URL (default https://score.kyde.com)
+//   KYDE_BLOCK                  hook mode: ask (default) | deny | off
+//   KYDE_REMOVE_GLOBAL_NAME=1   drop a global OTEL_SERVICE_NAME from settings
+"use strict";
+
+const { spawnSync } = require("node:child_process");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+
+const BASE = process.env.KYDE_ENDPOINT || "https://score.kyde.com";
+const VERSION = require("../package.json").version;
+
+function usage(code) {
+  const out = code ? process.stderr : process.stdout;
+  out.write(`kyde ${VERSION} — behavioral drift scoring for AI agents
+
+Usage:
+  npx @kyde/score init    set up this machine: scoring key, OpenTelemetry
+                          export to ${BASE}, and the warn/pause
+                          hook for Claude Code. Safe to rerun.
+
+Options via environment: KYDE_KEY, KYDE_ENDPOINT, KYDE_BLOCK (ask|deny|off),
+KYDE_REMOVE_GLOBAL_NAME=1 — see https://score.kyde.com/llms.txt
+`);
+  process.exit(code);
+}
+
+async function fetchInstaller() {
+  const res = await fetch(`${BASE}/install.sh`, {
+    redirect: "follow",
+    signal: AbortSignal.timeout(20000),
+  });
+  if (!res.ok) {
+    throw new Error(`GET ${BASE}/install.sh -> HTTP ${res.status}`);
+  }
+  return await res.text();
+}
+
+async function init() {
+  if (process.platform === "win32" && !process.env.SHELL) {
+    process.stderr.write(
+      "kyde init needs a POSIX shell (sh), python3 and curl, which plain " +
+        "Windows does not provide.\nRun it inside WSL or Git Bash, or " +
+        "follow the manual steps: https://score.kyde.com/llms.txt\n",
+    );
+    process.exit(1);
+  }
+  let script;
+  try {
+    script = await fetchInstaller();
+  } catch (err) {
+    process.stderr.write(
+      `kyde init: could not fetch the installer (${err.message}).\n` +
+        `Check outbound HTTPS to ${BASE}, or follow the manual steps: ` +
+        `${BASE}/llms.txt\n`,
+    );
+    process.exit(1);
+  }
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "kyde-init-"));
+  const file = path.join(dir, "install.sh");
+  try {
+    fs.writeFileSync(file, script, { mode: 0o700 });
+    const run = spawnSync("sh", [file], {
+      stdio: "inherit",
+      env: { ...process.env, KYDE_INSTALL_SOURCE: "npx" },
+    });
+    if (run.error) {
+      process.stderr.write(
+        `kyde init: could not run sh (${run.error.message}). ` +
+          `Manual steps: ${BASE}/llms.txt\n`,
+      );
+      process.exit(1);
+    }
+    process.exit(run.status === null ? 1 : run.status);
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+  }
+}
+
+const arg = process.argv[2];
+if (arg === "init") {
+  init();
+} else if (!arg || arg === "--help" || arg === "-h" || arg === "help") {
+  usage(arg ? 0 : 2);
+} else if (arg === "--version" || arg === "-v") {
+  process.stdout.write(VERSION + "\n");
+} else {
+  process.stderr.write(`kyde: unknown command "${arg}"\n\n`);
+  usage(2);
+}

package/package.json

@@ -1,6 +1,28 @@
 {
   "name": "@kyde/score",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.9.5",
+  "description": "KYDE Score setup: `npx @kyde/score init` wires an agent harness (Claude Code first) to score.kyde.com — OpenTelemetry export plus the warn/pause hook, in one step.",
+  "keywords": [
+    "agent",
+    "observability",
+    "opentelemetry",
+    "claude-code",
+    "drift",
+    "monitoring"
+  ],
+  "homepage": "https://score.kyde.com",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "author": "KYDE (https://kyde.com)",
+  "bin": {
+    "kyde": "bin/kyde.js"
+  },
+  "files": [
+    "bin/"
+  ],
+  "engines": {
+    "node": ">=18"
+  }
+}