@stablebaseline/cli 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Orixian Solutions Pty Ltd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,89 @@
+# @stablebaseline/cli — `sb`
+
+[![npm](https://img.shields.io/npm/v/@stablebaseline/cli?color=orange)](https://www.npmjs.com/package/@stablebaseline/cli)
+
+Command-line client for **[Stable Baseline](https://stablebaseline.io)** — the simplest, most complete, end-to-end agent-managed company brain. Drive 163 MCP tools (docs, diagrams, plans, Knowledge Graph, members, billing, settings) from your terminal.
+
+## Install
+
+```bash
+npm install -g @stablebaseline/cli
+```
+
+Or run without installing:
+
+```bash
+npx @stablebaseline/cli auth login --api-key sta_...
+```
+
+## First-time setup
+
+```bash
+# Mint a key at app.stablebaseline.io/settings/mcp-keys, then:
+sb auth login --api-key sta_xxx
+
+sb auth whoami
+# ✓ Vineet Nair
+#   email: vineet@example.com
+#   user_id: 8d8b55ea-...
+#   source: file: ~/.config/stablebaseline/auth.json
+```
+
+OAuth-from-the-CLI (PKCE loopback) is on the roadmap (CLI v0.2). For non-interactive use, the API-key path is the cleanest today.
+
+## Usage
+
+```bash
+# Discover tools
+sb tool list                          # all categories grouped
+sb tool list --category=documents     # filter by category
+sb tool search "schedule a task"      # natural-language search
+
+# Call any tool (163 of them)
+sb tool call listOrganisations
+sb tool call createDocument --json '{"folderId":"<uuid>","title":"X","cdmd":"# Hi"}'
+sb tool call kg_search --json '{"query":"compliance posture","mode":"global"}' --pretty
+
+# JSON output is the default — pipe into jq for filtering
+sb tool call listProjects --json '{"workspaceId":"<uuid>"}' | jq '.[].name'
+
+# Use a JSON file for big inputs
+sb tool call insertDiagramInDocument --json-file diagram.json
+```
+
+## Auth
+
+| Source | How |
+|---|---|
+| **API key** (recommended for scripts/CI) | `sb auth login --api-key sta_...` writes to `~/.config/stablebaseline/auth.json` (0600 perms). |
+| **Env override** | `SB_API_KEY=sta_...` or `SB_ACCESS_TOKEN=...` — wins over the on-disk credential. Useful for CI. |
+| **OAuth (browser)** | `sb auth login` opens the browser. Full PKCE-loopback in CLI v0.2; for now, paste the access token via `SB_ACCESS_TOKEN`. |
+
+Forget the credential:
+
+```bash
+sb auth logout
+```
+
+## Output formats
+
+By default `sb tool call` prints compact JSON to stdout (machine-friendly). Use `--pretty` for indented JSON, or pipe to `jq`/`fx` for further processing.
+
+`sb tool list` prints a grouped human-readable table by default; pass `--json` for raw JSON.
+
+## What this CLI is (and isn't)
+
+It's a **thin formatter on top of the [Stable Baseline REST API](https://api.stablebaseline.io/functions/v1/cloud-serve/api/v1/docs)** — every command maps to a single REST call against the same handlers the MCP server uses. There is no business logic in this package; if a feature works on the MCP server, it works here on the same day, no CLI release needed.
+
+## Companion packages
+
+| Surface | Package | Use case |
+|---|---|---|
+| **CLI** (this) | `@stablebaseline/cli` (binary `sb`) | Shells, scripts, CI/CD |
+| **TypeScript SDK** | `@stablebaseline/sdk` | Node, browsers, Deno, Bun |
+| **Python SDK** | `stablebaseline` (PyPI) | Python apps, data work |
+| **MCP server** | `https://api.stablebaseline.io/functions/v1/cloud-serve/mcp` | AI agents (Claude Code, Cursor, Windsurf, ChatGPT, Gemini, …) |
+
+## License
+
+MIT — see [LICENSE](../../LICENSE) at the repo root. The Stable Baseline product itself is proprietary SaaS at [stablebaseline.io](https://stablebaseline.io).

package/dist/sb.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/sb.js

@@ -0,0 +1,257 @@
+#!/usr/bin/env node
+
+// src/bin/sb.ts
+import { Command } from "commander";
+
+// src/commands/auth.ts
+import kleur from "kleur";
+import open from "open";
+
+// src/config.ts
+import { readFile, writeFile, mkdir, chmod, unlink } from "fs/promises";
+import { existsSync } from "fs";
+import path from "path";
+import os from "os";
+function configDir() {
+  if (process.platform === "win32") {
+    const appData = process.env.APPDATA ?? path.join(os.homedir(), "AppData", "Roaming");
+    return path.join(appData, "stablebaseline");
+  }
+  const xdg = process.env.XDG_CONFIG_HOME;
+  return path.join(xdg ?? path.join(os.homedir(), ".config"), "stablebaseline");
+}
+function authFile() {
+  return path.join(configDir(), "auth.json");
+}
+async function readCredential() {
+  const file = authFile();
+  if (!existsSync(file)) return null;
+  try {
+    const raw = await readFile(file, "utf8");
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+async function writeCredential(cred) {
+  const dir = configDir();
+  if (!existsSync(dir)) {
+    await mkdir(dir, { recursive: true });
+  }
+  const file = authFile();
+  await writeFile(file, JSON.stringify(cred, null, 2) + "\n", "utf8");
+  if (process.platform !== "win32") {
+    try {
+      await chmod(file, 384);
+    } catch {
+    }
+  }
+  return file;
+}
+async function clearCredential() {
+  const file = authFile();
+  if (!existsSync(file)) return false;
+  await unlink(file);
+  return true;
+}
+function getStoredCredentialPath() {
+  return authFile();
+}
+var DEFAULT_BASE_URL = process.env.SB_API_BASE_URL || "https://api.stablebaseline.io/functions/v1/cloud-serve/api/v1";
+
+// src/client.ts
+import { StableBaseline } from "@stablebaseline/sdk";
+async function makeSdkClient() {
+  const envKey = process.env.SB_API_KEY;
+  const envToken = process.env.SB_ACCESS_TOKEN;
+  if (envKey) {
+    return new StableBaseline({ apiKey: envKey, baseUrl: DEFAULT_BASE_URL });
+  }
+  if (envToken) {
+    return new StableBaseline({ accessToken: envToken, baseUrl: DEFAULT_BASE_URL });
+  }
+  const cred = await readCredential();
+  if (!cred) {
+    throw new NotAuthenticatedError();
+  }
+  if (cred.type === "api_key") {
+    return new StableBaseline({ apiKey: cred.value, baseUrl: DEFAULT_BASE_URL });
+  }
+  return new StableBaseline({ accessToken: cred.value, baseUrl: DEFAULT_BASE_URL });
+}
+var NotAuthenticatedError = class extends Error {
+  constructor() {
+    super(
+      "Not authenticated. Run `sb auth login --api-key sta_...` (or `sb auth login` for OAuth via browser)."
+    );
+    this.name = "NotAuthenticatedError";
+  }
+};
+
+// src/commands/auth.ts
+var OAUTH_AUTHORIZE_URL = "https://app.stablebaseline.io/oauth/authorize";
+var KEYS_PAGE = "https://app.stablebaseline.io/settings/mcp-keys";
+function registerAuthCommands(program) {
+  const auth = program.command("auth").description("Sign in / out and inspect the active credential.");
+  auth.command("login").description("Sign in. Default uses OAuth in the browser; pass --api-key to skip OAuth.").option("--api-key <key>", "Use an API key (sta_*) directly. Mint at " + KEYS_PAGE).action(async (opts) => {
+    if (opts.apiKey) {
+      if (!opts.apiKey.startsWith("sta_")) {
+        console.error(kleur.red("\u2717 ") + "API key must start with `sta_`.");
+        console.error("  Mint a key at " + kleur.cyan(KEYS_PAGE) + ".");
+        process.exitCode = 1;
+        return;
+      }
+      const path2 = await writeCredential({ type: "api_key", value: opts.apiKey });
+      console.log(kleur.green("\u2713 ") + `Saved API key to ${kleur.dim(path2)}`);
+      return;
+    }
+    console.log(kleur.bold("Sign in to Stable Baseline"));
+    console.log("  " + kleur.cyan(OAUTH_AUTHORIZE_URL));
+    console.log("");
+    console.log("  Or run " + kleur.bold("sb auth login --api-key sta_...") + " for a non-interactive flow.");
+    console.log("  Mint an API key at " + kleur.cyan(KEYS_PAGE) + ".");
+    console.log("");
+    try {
+      await open(OAUTH_AUTHORIZE_URL);
+    } catch {
+    }
+    console.log(kleur.yellow("Note") + ": full PKCE-loopback OAuth from the CLI is on the roadmap (CLI v0.2). For now, prefer --api-key.");
+  });
+  auth.command("logout").description("Forget the stored credential.").action(async () => {
+    const removed = await clearCredential();
+    if (removed) {
+      console.log(kleur.green("\u2713 ") + "Logged out.");
+    } else {
+      console.log(kleur.dim("Already logged out."));
+    }
+  });
+  auth.command("whoami").description("Show the current credential (truncated) and the user it's bound to.").action(async () => {
+    const cred = await readCredential();
+    if (!cred && !process.env.SB_API_KEY && !process.env.SB_ACCESS_TOKEN) {
+      console.log(kleur.dim("Not authenticated."));
+      console.log(kleur.dim("  Run `sb auth login` (or `sb auth login --api-key sta_...`)."));
+      process.exitCode = 1;
+      return;
+    }
+    const sdk = await makeSdkClient();
+    try {
+      const user = await sdk.callTool("getCurrentUser", {});
+      const source = process.env.SB_API_KEY ? "env: SB_API_KEY" : process.env.SB_ACCESS_TOKEN ? "env: SB_ACCESS_TOKEN" : `file: ${getStoredCredentialPath()}`;
+      console.log(kleur.green("\u2713 ") + (user.display_name || user.full_name || user.user_id));
+      if (user.email) console.log("  " + kleur.dim("email: ") + user.email);
+      console.log("  " + kleur.dim("user_id: ") + user.user_id);
+      console.log("  " + kleur.dim("source: ") + source);
+    } catch (err) {
+      const e = err;
+      console.error(kleur.red("\u2717 ") + (e.message || String(err)));
+      process.exitCode = 1;
+    }
+  });
+}
+
+// src/commands/tool.ts
+import kleur2 from "kleur";
+import { readFile as readFile2 } from "fs/promises";
+function registerToolCommands(program) {
+  const tool = program.command("tool").description("Direct tool dispatch \u2014 call any of the 163 MCP tools.");
+  tool.command("list").description("List all tools (catalogue summary).").option("--category <category>", "Filter by category (e.g. documents, plans, knowledge_graph)").option("--json", "Output JSON instead of a table").action(async (opts) => {
+    const sdk = await makeSdkClient();
+    const { tools } = await sdk.listTools();
+    const filtered = opts.category ? tools.filter((t) => t.category === opts.category) : tools;
+    if (opts.json) {
+      console.log(JSON.stringify(filtered, null, 2));
+      return;
+    }
+    const byCategory = /* @__PURE__ */ new Map();
+    for (const t of filtered) {
+      const arr = byCategory.get(t.category) ?? [];
+      arr.push(t);
+      byCategory.set(t.category, arr);
+    }
+    const cats = [...byCategory.keys()].sort();
+    for (const cat of cats) {
+      console.log(kleur2.bold(kleur2.cyan(cat)) + kleur2.dim(` (${byCategory.get(cat).length})`));
+      for (const t of byCategory.get(cat)) {
+        const desc = t.description.slice(0, 80) + (t.description.length > 80 ? "\u2026" : "");
+        console.log(`  ${kleur2.green(t.name)} ${kleur2.dim("\u2014 " + desc)}`);
+      }
+      console.log("");
+    }
+    console.log(kleur2.dim(`${filtered.length} tools`));
+  });
+  tool.command("call <name>").description("Call a tool by name. Provide input via --json '{...}' or --json-file path.").option("--json <json>", "Inline JSON input").option("--json-file <path>", "Path to a file containing JSON input").option("--pretty", "Pretty-print the response").action(async (name, opts) => {
+    let input = {};
+    if (opts.json && opts.jsonFile) {
+      console.error(kleur2.red("\u2717 ") + "Pass either --json or --json-file, not both.");
+      process.exitCode = 1;
+      return;
+    }
+    if (opts.jsonFile) {
+      const raw = await readFile2(opts.jsonFile, "utf8");
+      input = JSON.parse(raw);
+    } else if (opts.json) {
+      input = JSON.parse(opts.json);
+    }
+    const sdk = await makeSdkClient();
+    try {
+      const result = await sdk.callTool(name, input);
+      const out = opts.pretty ? JSON.stringify(result, null, 2) : JSON.stringify(result);
+      console.log(out);
+    } catch (err) {
+      const e = err;
+      console.error(kleur2.red(`\u2717 ${e.code ?? "error"}: `) + (e.message ?? String(err)));
+      if (e.status) console.error(kleur2.dim(`  HTTP ${e.status}`));
+      process.exitCode = 1;
+    }
+  });
+  tool.command("search <query>").description("Search the tool catalogue (passthrough to the searchTools meta-tool).").action(async (query) => {
+    const sdk = await makeSdkClient();
+    try {
+      const result = await sdk.callTool("searchTools", { query });
+      console.log(JSON.stringify(result, null, 2));
+    } catch (err) {
+      console.error(kleur2.red("\u2717 ") + (err.message ?? String(err)));
+      process.exitCode = 1;
+    }
+  });
+}
+
+// src/bin/sb.ts
+async function getVersion() {
+  try {
+    const url = new URL("../package.json", import.meta.url);
+    const { readFile: readFile3 } = await import("fs/promises");
+    const text = await readFile3(url, "utf8");
+    return JSON.parse(text).version ?? "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+async function main() {
+  const program = new Command();
+  program.name("sb").description(
+    "Stable Baseline CLI \u2014 end-to-end agent-managed company brain. Docs, diagrams, plans, and a self-learning Knowledge Graph from your terminal."
+  ).version(await getVersion(), "-v, --version", "Print version and exit");
+  registerAuthCommands(program);
+  registerToolCommands(program);
+  program.addHelpText(
+    "after",
+    `
+Examples:
+  $ sb auth login --api-key sta_xxx
+  $ sb auth whoami
+  $ sb tool list --category=documents
+  $ sb tool call listOrganisations
+  $ sb tool call createDocument --json '{"folderId":"...","title":"X","cdmd":"# Hi"}'
+  $ sb tool search "build a plan"
+
+Docs:    https://stablebaseline.io/docs/mcp
+Issues:  https://github.com/stablebaseline/mcp/issues
+`
+  );
+  await program.parseAsync(process.argv);
+}
+main().catch((err) => {
+  console.error(err instanceof Error ? err.message : err);
+  process.exit(1);
+});

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@stablebaseline/cli",
+  "version": "0.1.0",
+  "description": "sb — command-line client for Stable Baseline. End-to-end agent-managed company brain (docs, diagrams, plans, Knowledge Graph). 163 tools across 16 categories, all exposed at the CLI.",
+  "homepage": "https://stablebaseline.io",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/stablebaseline/mcp.git",
+    "directory": "packages/cli"
+  },
+  "bugs": "https://github.com/stablebaseline/mcp/issues",
+  "license": "MIT",
+  "keywords": [
+    "stablebaseline",
+    "stable-baseline",
+    "sb",
+    "cli",
+    "mcp",
+    "model-context-protocol",
+    "knowledge-graph",
+    "company-brain",
+    "documentation",
+    "diagrams",
+    "plans",
+    "ai-agent"
+  ],
+  "type": "module",
+  "bin": {
+    "sb": "./dist/sb.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsup src/bin/sb.ts --format esm --dts --clean --shims",
+    "dev": "tsx src/bin/sb.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@stablebaseline/sdk": "^0.1.0",
+    "commander": "^12.1.0",
+    "kleur": "^4.1.5",
+    "open": "^10.1.0"
+  },
+  "devDependencies": {
+    "tsup": "^8.3.5",
+    "tsx": "^4.19.2",
+    "typescript": "^5.6.3",
+    "@types/node": "^22.10.0"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}