@skillguard/cli 0.1.1 → 0.4.0

package/dist/lib/help.js

@@ -0,0 +1,240 @@
+const COMMAND_ALIASES = {
+    man: 'help',
+};
+function normalizeTopic(topic) {
+    if (!topic) {
+        return null;
+    }
+    const normalized = topic.trim().toLowerCase();
+    const aliased = COMMAND_ALIASES[normalized] || normalized;
+    if (aliased === 'help' ||
+        aliased === 'init' ||
+        aliased === 'scan' ||
+        aliased === 'gate' ||
+        aliased === 'limits' ||
+        aliased === 'verify' ||
+        aliased === 'workflow') {
+        return aliased;
+    }
+    return null;
+}
+export function renderGeneralHelp(version) {
+    return `SkillGuard CLI ${version}
+
+Usage:
+  skillguard <command> [options]
+
+Core commands:
+  init        Save API key in local CLI config
+  scan        Scan one file or recursively scan a directory
+  gate        CI gate mode (0 pass, 1 fail)
+  limits      Show anonymous/owner/agent remaining limits
+  verify      Verify signed SKILL.md via SkillGuard JWKS
+  workflow    Generate GitHub Actions workflow file
+
+Help commands:
+  help [command]
+  man [command]
+
+Quick start:
+  skillguard scan SKILL.md
+  skillguard gate .
+  skillguard workflow
+  skillguard workflow --auto-gh-push
+
+Global flags:
+  -h, --help     Show help
+  -v, --version  Show version
+  --workflow     Alias for "workflow"
+
+Run "skillguard help <command>" for full command details.`;
+}
+function renderHelpCommandHelp() {
+    return `NAME
+  skillguard help, skillguard man - show detailed command help
+
+SYNOPSIS
+  skillguard help [command]
+  skillguard man [command]
+
+DESCRIPTION
+  Shows command-level help in a man-page style format.
+  If no command is provided, prints general CLI help.
+
+EXAMPLES
+  skillguard help scan
+  skillguard man workflow`;
+}
+function renderInitHelp() {
+    return `NAME
+  skillguard init - save API key in local config
+
+SYNOPSIS
+  skillguard init [--api-key <key>] [--base-url <url>]
+
+DESCRIPTION
+  Writes ~/.config/skillguard/config.json with apiKey and apiUrl.
+  If --api-key is omitted, prompts interactively.
+
+OPTIONS
+  --api-key <key>     API key to persist
+  --base-url <url>    API base URL (default: https://skillguard.ai)
+
+EXIT CODES
+  0 success
+  4 usage/input/config error
+  5 external runtime error`;
+}
+function renderScanHelp() {
+    return `NAME
+  skillguard scan - scan SKILL.md content for risk
+
+SYNOPSIS
+  skillguard scan [path] [options]
+
+DESCRIPTION
+  Scans one file or recursively scans a directory for SKILL.md files.
+  If no path is provided, scans from current directory.
+  If no API key is configured, uses anonymous mode (rate-limited).
+
+OPTIONS
+  --json                       Machine-readable JSON output
+  --fail-on <safe|warning|dangerous>
+                               Explicit threshold mode (exit 0/1)
+  --timeout <ms>              Request timeout (default: 30000)
+  --base-url <url>            API base URL
+  --api-key <key>             Override API key
+  --dry-run                   Show target files, skip API call
+  --quiet                     Suppress output, keep exit code
+  --no-color                  Disable ANSI colors
+  --skip-node-modules         Skip node_modules (default: enabled)
+  --scan-all                  Disable skip filters for recursive scan
+
+EXIT CODES
+  default mode (no --fail-on): safe=0, warning=1, dangerous=2
+  threshold mode (--fail-on): 0 below threshold, 1 threshold reached
+  4 usage/input/config error
+  5 network/API/runtime failure`;
+}
+function renderGateHelp() {
+    return `NAME
+  skillguard gate - CI gate mode for deterministic pass/fail
+
+SYNOPSIS
+  skillguard gate [path] [options]
+
+DESCRIPTION
+  Wrapper around scan with explicit threshold mode enabled.
+  Default fail-on is warning.
+
+OPTIONS
+  Same as "skillguard scan".
+  --fail-on defaults to warning in gate mode.
+
+EXIT CODES
+  0 below threshold
+  1 threshold reached
+  4 usage/input/config error
+  5 network/API/runtime failure`;
+}
+function renderLimitsHelp() {
+    return `NAME
+  skillguard limits - show remaining limits/quota
+
+SYNOPSIS
+  skillguard limits [--json] [--timeout <ms>] [--base-url <url>] [--api-key <key>] [--no-color]
+
+DESCRIPTION
+  Fetches /api/v1/limits and prints current request mode:
+  anonymous, owner, or agent.
+
+OPTIONS
+  --json             JSON output
+  --timeout <ms>     Request timeout (default: 30000)
+  --base-url <url>   API base URL
+  --api-key <key>    Optional API key
+  --no-color         Disable ANSI colors
+
+EXIT CODES
+  0 success
+  4 usage/input/config error
+  5 network/API/runtime failure`;
+}
+function renderVerifyHelp() {
+    return `NAME
+  skillguard verify - verify signed SKILL.md content
+
+SYNOPSIS
+  skillguard verify <path> [--json] [--timeout <ms>] [--base-url <url>]
+
+DESCRIPTION
+  Verifies SkillGuard Ed25519 signature and content hash using JWKS.
+
+OPTIONS
+  --json             JSON output
+  --timeout <ms>     Request timeout (default: 30000)
+  --base-url <url>   API base URL
+
+EXIT CODES
+  0 signature valid
+  1 invalid/tampered/expired signature
+  4 usage/input/config error
+  5 network/API/runtime failure`;
+}
+function renderWorkflowHelp() {
+    return `NAME
+  skillguard workflow - generate GitHub Actions workflow for CI gate
+
+SYNOPSIS
+  skillguard workflow [options]
+  skillguard --workflow [options]
+
+DESCRIPTION
+  Writes .github/workflows/skillguard.yml configured to run:
+  npx @skillguard/cli gate . --fail-on warning
+
+OPTIONS
+  --path <file>              Output workflow path
+                             (default: .github/workflows/skillguard.yml)
+  --scan-path <path>         Path passed to gate command (default: .)
+  --fail-on <safe|warning|dangerous>
+                             Gate threshold (default: warning)
+  --print                    Print YAML to stdout, do not write files
+  --force                    Overwrite existing file
+  --auto-gh-push             Run git add/commit/push after writing
+
+EXIT CODES
+  0 success
+  4 usage/input/config error
+  5 runtime/git failure
+
+EXAMPLES
+  skillguard workflow
+  skillguard workflow --print
+  skillguard workflow --auto-gh-push
+  skillguard --workflow --force`;
+}
+export function renderTopicHelp(command) {
+    const topic = normalizeTopic(command);
+    if (!topic) {
+        return null;
+    }
+    switch (topic) {
+        case 'help':
+            return renderHelpCommandHelp();
+        case 'init':
+            return renderInitHelp();
+        case 'scan':
+            return renderScanHelp();
+        case 'gate':
+            return renderGateHelp();
+        case 'limits':
+            return renderLimitsHelp();
+        case 'verify':
+            return renderVerifyHelp();
+        case 'workflow':
+            return renderWorkflowHelp();
+        default:
+            return null;
+    }
+}

package/dist/lib/version.d.ts

@@ -0,0 +1 @@
+export declare const CLI_VERSION = "0.4.0";

package/dist/lib/version.js

@@ -0,0 +1 @@
+export const CLI_VERSION = '0.4.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillguard/cli",
-  "version": "0.1.1",
+  "version": "0.4.0",
   "description": "Security scanner for AI agent skill files",
   "type": "module",
   "bin": {