@skillgate-io/cli 1.0.0

package/README.md

@@ -0,0 +1,72 @@
+# @skillgate-io/cli
+
+Optional npm/npx wrapper for the Python-native SkillGate CLI.
+
+Important:
+- Canonical runtime is Python package distribution (`pipx`/PyPI).
+- This wrapper does not embed the scanning engine.
+- This wrapper does not auto-install Python or SkillGate.
+
+This means:
+- Use Python install path for the simplest setup.
+- Use this npm package only if you prefer Node-based command entrypoint.
+
+## Usage
+
+Global install:
+
+```bash
+npm install -g @skillgate-io/cli
+skillgate version
+```
+
+Direct run:
+
+```bash
+npx @skillgate-io/cli version
+```
+
+Recommended direct Python path (no npm required):
+
+```bash
+pipx install skillgate
+skillgate version
+```
+
+## Prerequisites
+
+Install Python runtime first (required):
+
+```bash
+pipx install skillgate
+```
+
+or
+
+```bash
+python -m pip install --upgrade skillgate
+```
+
+### Required environment variables
+
+At minimum, set an API key before entitlement-resolved CLI commands:
+
+```bash
+export SKILLGATE_API_KEY="sg_free_or_paid_key_here"
+```
+
+Optional (only when needed):
+
+```bash
+export SKILLGATE_API_URL="https://api.skillgate.io"
+```
+
+Full variable reference: `../.env.example` in the repository.
+
+## Python override
+
+If needed, force a Python executable:
+
+```bash
+SKILLGATE_PYTHON=/path/to/python skillgate version
+```

package/bin/skillgate.js

@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+'use strict';
+
+const { spawnSync } = require('node:child_process');
+
+/**
+ * Optional npm wrapper for the Python-native SkillGate CLI.
+ *
+ * Fail-closed behavior:
+ * - Do not auto-install Python or SkillGate.
+ * - Exit with actionable guidance if prerequisites are missing.
+ */
+
+const userArgs = process.argv.slice(2);
+const envPython = process.env.SKILLGATE_PYTHON;
+
+const candidates = [];
+if (envPython && envPython.trim()) {
+  candidates.push({ cmd: envPython.trim(), prefix: [] });
+}
+candidates.push({ cmd: 'python3', prefix: [] });
+candidates.push({ cmd: 'python', prefix: [] });
+if (process.platform === 'win32') {
+  candidates.push({ cmd: 'py', prefix: ['-3'] });
+}
+
+function probePythonWithSkillgate(candidate) {
+  const probeArgs = [...candidate.prefix, '-c', 'import skillgate'];
+  const result = spawnSync(candidate.cmd, probeArgs, {
+    stdio: 'ignore',
+    env: process.env,
+  });
+  if (result.error) return false;
+  return result.status === 0;
+}
+
+const selected = candidates.find(probePythonWithSkillgate);
+
+if (!selected) {
+  process.stderr.write(
+    [
+      '[skillgate-npm-shim] SkillGate Python runtime not found.',
+      'Install canonical runtime first:',
+      '  pipx install skillgate',
+      'or',
+      '  python -m pip install --upgrade skillgate',
+      'Then re-run: skillgate <args>',
+      '',
+      'Optional override:',
+      '  SKILLGATE_PYTHON=/path/to/python skillgate <args>',
+      '',
+    ].join('\n'),
+  );
+  process.exit(1);
+}
+
+const runArgs = [...selected.prefix, '-m', 'skillgate.cli.app', ...userArgs];
+const runResult = spawnSync(selected.cmd, runArgs, {
+  stdio: 'inherit',
+  env: process.env,
+});
+
+if (runResult.error) {
+  process.stderr.write(
+    `[skillgate-npm-shim] Failed to execute Python runtime: ${runResult.error.message}\n`,
+  );
+  process.exit(1);
+}
+
+if (typeof runResult.status === 'number') {
+  process.exit(runResult.status);
+}
+
+process.exit(1);

package/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@skillgate-io/cli",
+  "version": "1.0.0",
+  "description": "Optional npm/npx wrapper for SkillGate CLI (Python core runtime)",
+  "license": "UNLICENSED",
+  "private": false,
+  "bin": {
+    "skillgate": "bin/skillgate.js"
+  },
+  "files": [
+    "bin/skillgate.js",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "skillgate",
+    "security",
+    "cli",
+    "governance",
+    "agent-security"
+  ]
+}