@quireco/cli 0.0.1

package/README.md

@@ -0,0 +1,152 @@
+# Quire CLI
+
+The local `quire` command for Quire authentication and investigations.
+
+## Development
+
+- Install dependencies:
+
+```bash
+vp install
+```
+
+- Run the unit tests:
+
+```bash
+vp test
+```
+
+- Build the library:
+
+```bash
+vp pack
+```
+
+- Run the built CLI after building:
+
+```bash
+node dist/quire.mjs --help
+```
+
+## Workspace target (`quire env`)
+
+`quire env` manages the `.quire/environment.json` file that tells Quire what application to investigate. Configure the target once, then `investigate` will pick it up automatically:
+
+```bash
+quire env init --web --base-url http://localhost:3000     # scaffold a web target
+quire env init --mobile --ios                              # scaffold a mobile target
+quire env                                                  # print the resolved target
+quire env --json                                           # machine-readable form
+
+quire env set platform=ios provider=local appId=com.example.app
+quire env set kind=mobile platform=android                 # switch web → mobile
+quire env unset device
+```
+
+`set` accepts one or more `key=value` pairs and validates the result against the schema before writing. Valid keys depend on `kind`:
+
+- **Web**: `baseUrl`
+- **Mobile**: `platform` (`ios`/`android`), `provider`, `device`, `appiumUrl`, `url`, `appId`, `appPath`
+
+Setting `kind=mobile` (or `kind=web`) switches the union shape and drops incompatible fields. Use `quire env init --force` to start over from a stub.
+
+## Doctor
+
+`quire doctor` diagnoses the current setup before you start an investigation. It checks identity (auth + model broker), workspace (`.quire/environment.json` + target reachability), and run state (runs root writable, no stuck runs):
+
+```bash
+quire doctor                # human-readable report, grouped by section
+quire doctor --json         # structured report for agents/CI
+quire doctor --strict       # exit non-zero on warnings as well as failures
+```
+
+Each check has a stable `id` (e.g. `auth.present`, `target.web.reachable`, `target.mobile.device`) so coding agents can act on specific failures without parsing prose. Failing checks include a `fix.command` you can run to resolve them. Exit code is `0` when all checks pass (or only warnings in non-strict mode) and `1` otherwise.
+
+Target reachability runs by default: web environments are probed with a HEAD request, iOS local environments check `xcrun simctl list devices booted`, Android local checks `adb devices`, and Appium providers ping `/status`.
+
+## Investigations
+
+The primary interface is text-in, durable-run-handle-out. `investigate` starts a background run and returns immediately so coding agents do not need to keep a subprocess open for long investigations:
+
+```bash
+quire investigate "Reproduce the checkout crash" --json
+cat issue.md | quire investigate --stdin --json
+quire report <run-id> --wait --json
+```
+
+`investigate` carries a deliberately small flag surface — everything that describes the target (platform, provider, device, app id, etc.) lives in `.quire/environment.json` via `quire env`. The run-level flags are:
+
+- `--stdin` reads plain-text investigation context from stdin. If a positional prompt is also present, stdin is treated as additional context.
+- `--json` reserves stdout for the started run handle JSON only.
+- `--watch` attaches to the live run log after starting the investigation. Ctrl-C detaches.
+- `--headed` shows the browser window for web targets.
+- `--url <url>` overrides the configured web `baseUrl` for one run.
+- `--no-sync` keeps an authenticated run local instead of uploading it to the Quire web app. Default behavior syncs evidence-tier artifacts.
+
+Top-level shortcuts mirror the most common run subcommands:
+
+```bash
+quire watch <run-id>          # alias for `quire runs watch`
+quire report <run-id>         # alias for `quire runs report`
+```
+
+Less common run operations stay under the canonical `runs` namespace: `quire runs status|cancel|list|sync ...`.
+
+Each run writes `metadata.json`, `report.json`, and raw `emit-report.json` under `~/.quire/runs/<workspace-key>/<run-id>/` by default. Set `QUIRE_RUNS_DIR` to override the run-artifact root.
+
+Local investigations run the Pi agent loop on your machine. Quire prefers local Pi/OpenAI Codex provider auth when it is configured, then falls back to Quire Credits through Quire's authenticated broker. Quire-owned provider auth is read from `~/.quire/model-auth.json` by default, with compatibility fallback to Pi's existing auth file. Set `QUIRE_MODEL_AUTH_PATH` to override the Quire-owned model auth file. `quire login` associates local runs with your Quire account for identity, wallet access, run upload, and future hosted workflows; personal model-provider auth remains a separate local-provider concern.
+
+## Hosted Model-Source Status
+
+Use `quire whoami --json` to check the authenticated account and hosted model-source status before relying on remote Quire Credits behavior:
+
+```json
+{
+  "authenticated": true,
+  "user": { "id": "user_123", "email": "alice@example.com" },
+  "modelSourceBroker": {
+    "available": true,
+    "status": "available",
+    "selectedProviderMode": "quire_wallet",
+    "selectedOrder": ["quire_wallet"],
+    "reason": "wallet_available",
+    "requiredNextAction": null,
+    "requiredBalance": 1,
+    "remainingBalance": 100,
+    "recentUsage": [
+      {
+        "modelId": "gpt-4.1-mini",
+        "status": "succeeded",
+        "totalTokens": 13,
+        "runId": "run_123",
+        "createdAt": "2026-05-18T06:00:00.000Z"
+      }
+    ]
+  }
+}
+```
+
+The hosted status is a redacted summary from Quire's server-side model-source API. It does not include provider credentials, sealed envelopes, raw tokens, prompts, or completions. Local `quire investigate` can use local Pi/OpenAI auth when configured; Quire Credits and hosted/Slack-triggered execution use Quire-managed billing.
+
+Example web environment (write with `quire env init --web` and edit via `quire env set`):
+
+```json
+{
+  "version": 1,
+  "app": { "kind": "web", "baseUrl": "http://localhost:3000" }
+}
+```
+
+Example mobile environment:
+
+```json
+{
+  "version": 1,
+  "app": {
+    "kind": "mobile",
+    "platform": "ios",
+    "provider": "local",
+    "appId": "com.example.app"
+  }
+}
+```

package/package.json

@@ -0,0 +1,73 @@
+{
+  "name": "@quireco/cli",
+  "version": "0.0.1",
+  "description": "Triage and investigation CLI for Quire.",
+  "homepage": "https://github.com/quireco/quire-mono#readme",
+  "bugs": {
+    "url": "https://github.com/quireco/quire-mono/issues"
+  },
+  "license": "MIT",
+  "author": "Quire",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/quireco/quire-mono.git",
+    "directory": "apps/cli"
+  },
+  "bin": {
+    "quire": "./dist/quire.mjs"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "exports": {
+    ".": "./dist/index.mjs",
+    "./quire": "./dist/quire.mjs",
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "vp pack && node scripts/prepare-package-json.mjs",
+    "dev": "vp pack --watch",
+    "quire": "node dist/quire.mjs",
+    "test": "vp test",
+    "check": "vp check",
+    "prepublishOnly": "vp run build"
+  },
+  "dependencies": {
+    "@mariozechner/pi-ai": "^0.73.0",
+    "@mariozechner/pi-coding-agent": "^0.73.0",
+    "@sinclair/typebox": "^0.34.49",
+    "citty": "^0.2.2"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.2",
+    "@typescript/native-preview": "7.0.0-dev.20260509.2",
+    "agent-mobile": "workspace:*",
+    "bumpp": "^11.1.0",
+    "typescript": "^6.0.3",
+    "vite-plus": "^0.1.20"
+  },
+  "inlinedDependencies": {
+    "@limrun/api": "0.28.6",
+    "@nodable/entities": "2.1.0",
+    "agent-base": "7.1.4",
+    "debug": "4.4.3",
+    "eventsource-client": "1.2.0",
+    "eventsource-parser": "3.0.8",
+    "fast-xml-parser": "5.7.3",
+    "has-flag": "4.0.0",
+    "https-proxy-agent": "7.0.6",
+    "ignore": "7.0.5",
+    "ms": "2.1.3",
+    "path-expression-matcher": "1.5.0",
+    "proxy-from-env": "2.1.0",
+    "strnum": "2.3.0",
+    "supports-color": "7.2.0",
+    "undici": "7.24.7",
+    "ws": "8.20.0",
+    "xdelta3-wasm": "1.0.0"
+  }
+}