@kyde/score 0.1.0 → 0.9.5

package/README.md

@@ -1,21 +1,26 @@
 # @kyde/score
 
-Kyde Score: a drift score for your AI agents. Call metadata only, never the conversation.
+Behavioral drift scoring for AI agents — [score.kyde.com](https://score.kyde.com).
 
-## Setup
-
-Paste this into your coding agent (Claude Code, Grok CLI, Codex, Cursor):
-
-```
-Read https://score.kyde.com/llms.txt and set up kyde score for this machine.
+```sh
+npx @kyde/score init
 ```
 
-Or run:
+One step, safe to rerun, written so an agent can run it alone:
 
-```
-npx @kyde/score
-```
+1. Creates a scoring key (or uses `$KYDE_KEY`) — shown once, hand it to
+   your human.
+2. Points Claude Code's OpenTelemetry export at score.kyde.com
+   (`~/.claude/settings.json`, global `env` block — never the agent
+   name; names belong where each agent is launched).
+3. Installs the hook: after a tool call Kyde can warn the agent in its
+   own context; on a deviating score or loop alarm the next tool call
+   pauses for the human (`KYDE_BLOCK=deny` blocks outright,
+   `KYDE_BLOCK=off` keeps warnings only).
+4. Sends a test event and confirms that Kyde sees this machine.
 
-`npx @kyde/score prompt` prints only the setup line, so you can pipe it into your agent.
+Equivalent to `curl -fsSL https://score.kyde.com/install.sh | sh` — this
+package fetches and runs exactly that installer, so the two never drift.
 
-More at [score.kyde.com](https://score.kyde.com).
+Docs for agents and humans: <https://score.kyde.com/llms.txt> ·
+Dashboard: <https://score.kyde.com/dashboard>

package/bin/kyde.js

@@ -1,28 +1,101 @@
 #!/usr/bin/env node
+// `npx @kyde/score init` — one-step KYDE Score setup for an agent harness
+// (Claude Code first). A thin wrapper by design (KYDE-421): it fetches
+// the canonical installer from the service and runs it, so the install
+// logic lives in exactly one place (deploy/landing/install.sh, shipped
+// by CI) and `npx @kyde/score init` can never drift from
+// `curl -fsSL https://score.kyde.com/install.sh | sh`.
+//
+// Environment (all optional, passed straight through to the installer):
+//   KYDE_KEY                    use this scoring key instead of creating one
+//   KYDE_ENDPOINT               service base URL (default https://score.kyde.com)
+//   KYDE_BLOCK                  hook mode: ask (default) | deny | off
+//   KYDE_REMOVE_GLOBAL_NAME=1   drop a global OTEL_SERVICE_NAME from settings
 "use strict";
 
-const SETUP_PROMPT =
-  "Read https://score.kyde.com/llms.txt and set up kyde score for this machine.";
+const { spawnSync } = require("node:child_process");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
 
-const text = `
-Kyde Score: a drift score for your AI agents.
-Call metadata only, never the conversation.
+const BASE = process.env.KYDE_ENDPOINT || "https://score.kyde.com";
+const VERSION = require("../package.json").version;
 
-Set up in one step. Paste this into your coding agent
-(Claude Code, Grok CLI, Codex, Cursor, ...):
+function usage(code) {
+  const out = code ? process.stderr : process.stdout;
+  out.write(`kyde ${VERSION} — behavioral drift scoring for AI agents
 
-  ${SETUP_PROMPT}
+Usage:
+  npx @kyde/score init    set up this machine: scoring key, OpenTelemetry
+                          export to ${BASE}, and the warn/pause
+                          hook for Claude Code. Safe to rerun.
 
-Docs:  https://score.kyde.com/llms.txt
-Web:   https://score.kyde.com
-`;
+Options via environment: KYDE_KEY, KYDE_ENDPOINT, KYDE_BLOCK (ask|deny|off),
+KYDE_REMOVE_GLOBAL_NAME=1 — see https://score.kyde.com/llms.txt
+`);
+  process.exit(code);
+}
 
-const arg = process.argv[2];
+async function fetchInstaller() {
+  const res = await fetch(`${BASE}/install.sh`, {
+    redirect: "follow",
+    signal: AbortSignal.timeout(20000),
+  });
+  if (!res.ok) {
+    throw new Error(`GET ${BASE}/install.sh -> HTTP ${res.status}`);
+  }
+  return await res.text();
+}
 
-if (arg === "--version" || arg === "-v") {
-  console.log(require("../package.json").version);
-} else if (arg === "prompt") {
-  console.log(SETUP_PROMPT);
+async function init() {
+  if (process.platform === "win32" && !process.env.SHELL) {
+    process.stderr.write(
+      "kyde init needs a POSIX shell (sh), python3 and curl, which plain " +
+        "Windows does not provide.\nRun it inside WSL or Git Bash, or " +
+        "follow the manual steps: https://score.kyde.com/llms.txt\n",
+    );
+    process.exit(1);
+  }
+  let script;
+  try {
+    script = await fetchInstaller();
+  } catch (err) {
+    process.stderr.write(
+      `kyde init: could not fetch the installer (${err.message}).\n` +
+        `Check outbound HTTPS to ${BASE}, or follow the manual steps: ` +
+        `${BASE}/llms.txt\n`,
+    );
+    process.exit(1);
+  }
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "kyde-init-"));
+  const file = path.join(dir, "install.sh");
+  try {
+    fs.writeFileSync(file, script, { mode: 0o700 });
+    const run = spawnSync("sh", [file], {
+      stdio: "inherit",
+      env: { ...process.env, KYDE_INSTALL_SOURCE: "npx" },
+    });
+    if (run.error) {
+      process.stderr.write(
+        `kyde init: could not run sh (${run.error.message}). ` +
+          `Manual steps: ${BASE}/llms.txt\n`,
+      );
+      process.exit(1);
+    }
+    process.exit(run.status === null ? 1 : run.status);
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+  }
+}
+
+const arg = process.argv[2];
+if (arg === "init") {
+  init();
+} else if (!arg || arg === "--help" || arg === "-h" || arg === "help") {
+  usage(arg ? 0 : 2);
+} else if (arg === "--version" || arg === "-v") {
+  process.stdout.write(VERSION + "\n");
 } else {
-  console.log(text);
+  process.stderr.write(`kyde: unknown command "${arg}"\n\n`);
+  usage(2);
 }

package/package.json

@@ -1,30 +1,28 @@
 {
   "name": "@kyde/score",
-  "version": "0.1.0",
-  "description": "Kyde Score: a drift score for your AI agents. Call metadata only, never the conversation.",
-  "bin": {
-    "kyde": "bin/kyde.js"
-  },
-  "files": [
-    "bin/",
-    "README.md"
-  ],
+  "version": "0.9.5",
+  "description": "KYDE Score setup: `npx @kyde/score init` wires an agent harness (Claude Code first) to score.kyde.com — OpenTelemetry export plus the warn/pause hook, in one step.",
   "keywords": [
-    "ai-agents",
-    "agent-monitoring",
-    "drift",
+    "agent",
     "observability",
     "opentelemetry",
-    "mcp",
-    "claude-code"
+    "claude-code",
+    "drift",
+    "monitoring"
   ],
   "homepage": "https://score.kyde.com",
   "license": "MIT",
-  "author": "KYDE",
-  "engines": {
-    "node": ">=18"
-  },
   "publishConfig": {
     "access": "public"
+  },
+  "author": "KYDE (https://kyde.com)",
+  "bin": {
+    "kyde": "bin/kyde.js"
+  },
+  "files": [
+    "bin/"
+  ],
+  "engines": {
+    "node": ">=18"
   }
 }