@scalequality/cli 0.1.0

package/README.md

@@ -0,0 +1,96 @@
+# @scalequality/cli
+
+Run the ScaleQuality AI Workspace coding engine on your own machine, in your
+repository folder. The conversation stays in the browser; the files, the
+commands and the git working tree stay on your computer.
+
+```bash
+cd path/to/your/repository
+npx @scalequality/cli connect <code>
+```
+
+Get the command, with its code, in the AI Workspace: choose **Use a folder on
+your computer**. The code opens only that session; treat it like a password.
+
+Options:
+
+| Flag | Default | Meaning |
+|------|---------|---------|
+| `--dir PATH` | current folder | The repository folder to work in |
+| `--api URL` | `https://app.scalequality.io` | ScaleQuality address (for example `https://staging.scalequality.io`) |
+| `--verbose` | off | Also print diagnostic logs |
+
+Requires Node.js 18 or newer and git. The folder must be the root of a git
+repository; the CLI never runs `git init`, clones or fetches for you.
+
+## What runs where
+
+On your machine:
+
+- the coding engine (Claude Agent SDK), reading and editing files **only inside
+  the folder**;
+- the commands it wants to run, **each one after you allow it** in the
+  terminal;
+- the diff of your folder against `HEAD` at connect time, which is what the
+  browser shows and what a pull request carries.
+
+In ScaleQuality:
+
+- the session, the conversation and every approval card;
+- the model, through the ScaleQuality AI gateway of your organization;
+- ScaleQuality tools (measurements, findings, agents);
+- pull requests: the changed files are sent to ScaleQuality, which opens the
+  pull request with your organization's repository connection after you approve
+  it in the browser. Your machine never needs a provider token and never pushes.
+
+Measuring uncommitted local changes (`measure_change`) runs only in the cloud
+workspace, where the scanners are; open a pull request to have the change
+measured.
+
+The engine never pushes, never changes git remotes or credentials, and cannot
+read credential stores such as `~/.ssh`, `~/.aws`, `~/.netrc`, your home
+`.npmrc` or the system keychain. Your shell environment is not passed through:
+only a fixed list of variables (PATH, HOME, locale, toolchain locations, proxies
+and CA settings) reaches the engine and its commands.
+
+## Permission prompts
+
+Before any command runs you see it in the terminal:
+
+```
+The workspace wants to run a command in /home/you/repo
+  model's description: Run the tests
+  $ npm test
+  y run once   a always allow this exact command in this folder   n deny
+>
+```
+
+- `y` runs it once.
+- `a` allows that exact command, in this folder, until you disconnect.
+- `n` denies it; you can type a reason, which the model receives.
+
+Pressing Enter alone never approves. File edits are not asked: they are shown
+in the browser as they happen, and each file can be discarded there.
+
+## Stopping
+
+- `Ctrl+C` once stops the current request (a pending command is denied).
+- `Ctrl+C` again disconnects, after saving the session's checkpoint. Your
+  folder keeps every change.
+- Closing the session in the browser also ends the command.
+
+## For maintainers
+
+`dist/connect.cjs` is built in the ScaleQuality ai-governance service from
+`src/main/workspace-connect.ts`:
+
+```bash
+# in scalequality-ai-governance-service
+npm run build:cli            # -> dist-cli/connect.cjs
+# here (scalequality-cli/connect)
+npm run sync                 # copies it into dist/, or: npm run sync -- --from <dist-cli folder>
+npm test
+```
+
+`sync` refuses a bundle built for a different `@anthropic-ai/claude-agent-sdk`
+version than the one in `package.json`.

package/bin/scalequality.mjs

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+// ScaleQuality CLI. The engine of `connect` is built in the ScaleQuality
+// ai-governance service (src/main/workspace-connect.ts) and copied into
+// dist/connect.cjs by `npm run sync`.
+import { createRequire } from 'node:module'
+import { existsSync, readFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+
+const require = createRequire(import.meta.url)
+const pkg = JSON.parse(readFileSync(fileURLToPath(new URL('../package.json', import.meta.url)), 'utf8'))
+const engine = fileURLToPath(new URL('../dist/connect.cjs', import.meta.url))
+
+const HELP = `ScaleQuality CLI ${pkg.version}
+
+Usage:
+  scalequality connect <code> [--api URL] [--dir PATH]
+      Work on this repository folder from the ScaleQuality AI Workspace.
+      Get the command with its code in the AI Workspace: "Use a folder on your computer".
+  scalequality --help
+  scalequality --version
+
+Run "scalequality connect --help" for the options of connect.`
+
+const [command] = process.argv.slice(2)
+
+if (!command || command === '--help' || command === '-h' || command === 'help') {
+  process.stdout.write(`${HELP}\n`)
+  process.exit(command ? 0 : 2)
+}
+if (command === '--version' || command === '-v' || command === 'version') {
+  process.stdout.write(`${pkg.version}\n`)
+  process.exit(0)
+}
+if (command !== 'connect') {
+  process.stderr.write(`Unknown command: ${command}\n\n${HELP}\n`)
+  process.exit(2)
+}
+
+const major = Number(process.versions.node.split('.')[0])
+if (major < 18) {
+  process.stderr.write(`ScaleQuality CLI needs Node.js 18 or newer (this is ${process.versions.node}).\n`)
+  process.exit(1)
+}
+if (!existsSync(engine)) {
+  process.stderr.write('This installation of @scalequality/cli is incomplete (dist/connect.cjs is missing). Reinstall it, or run npm run sync in a checkout.\n')
+  process.exit(1)
+}
+process.env.SCALEQUALITY_CLI_VERSION = pkg.version
+// The engine reads process.argv itself: [node, this file, 'connect', <code>, ...options].
+require(engine)

package/dist/connect.build.json

@@ -0,0 +1,5 @@
+{
+  "sdkVersion": "0.3.281",
+  "sha256": "6d37ff3ee7a2a7406dacdaf3ae10b032d83f3081a79fba5aa0f01f45edc5cb21",
+  "sourceCommit": "e87056e8f67d5b19a950795ef2884c8075211fb4"
+}