collide-cli 0.0.0-stage → 1.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Lithometric
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,30 @@
-# Temporary Holding Version
+# collide-cli
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Your coding agents, working as a team. One command installs Collide for every repo on your machine: Claude Code, Codex and Cursor agents in the same repo see each other's changes as they happen, get briefed on the code they are about to touch, and can message each other.
+
+```sh
+npx collide-cli
+```
+
+Free, no account, and nothing leaves your machine. Works on macOS, Linux and Windows (PowerShell, cmd or Git Bash).
+
+It downloads the `collide` program for your platform, checks it against its SHA-256 and Collide's release signature before running it, installs it into `~/.collide/bin`, connects your agent tools, and adds `collide` to your PATH.
+
+## Commands
+
+```sh
+npx collide-cli            # install or update
+npx collide-cli status     # what Collide did on this machine
+npx collide-cli login      # link this machine to a Collide account
+npx collide-cli upgrade    # bring in your team
+```
+
+After install, `collide <command>` works directly in a new terminal.
+
+This package was called `collidemcp` until v1.1.0. It still answers as `collidemcp`, and the old package forwards here, so `npx collidemcp` keeps working.
+
+No Node? `curl -fsSL https://collidemcp.com/install.sh | sh`, or with Python, `pipx run collide-sdk install`.
+
+Is the service up? On a machine signed in to an account, `collide status` adds one line from [collidemcp.com/status](https://collidemcp.com/status) (`Collide service: operational`, or what is not); agents can read [status.json](https://collidemcp.com/status.json).
+
+More at [collidemcp.com](https://collidemcp.com).

package/bin/collide-cli.js

@@ -0,0 +1,215 @@
+#!/usr/bin/env node
+// npx collide-cli: Collide for every repo on this machine, in one command.
+// (It also answers as `collidemcp`, the package's former name.)
+//
+// Downloads the collide program for this platform from Collide's releases,
+// checks it against its SHA-256 and CI's Ed25519 signature before it runs,
+// puts it in ~/.collide/bin, sets it up for Claude Code, Codex and Cursor,
+// and adds it to PATH. The same program the install script installs.
+//
+//   npx collide-cli              install (or update) Collide on this machine
+//   npx collide-cli <command>    run a collide command: login, status, upgrade, ...
+//   npx collide-cli --help       what it does, without installing anything
+
+"use strict";
+
+const crypto = require("node:crypto");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+const { spawnSync } = require("node:child_process");
+
+const SERVER = (process.env.COLLIDE_INSTALL_SERVER || "https://mcp.collidemcp.com").replace(/\/+$/, "");
+// CI's release-signing key; the program checks its own updates against the same one
+const SIGNING_KEY = "17092e6d5632783f1d9b08fc134b0343c7e67b4a4b42feb52df6ca295f325ef8";
+
+const color = process.stdout.isTTY && !process.env.NO_COLOR;
+const paint = (code) => (text) => (color ? `\x1b[${code}m${text}\x1b[0m` : text);
+const mint = paint("38;2;52;211;153");
+const dim = paint("2");
+const bold = paint("1");
+
+function fail(message) {
+  console.error(`Collide: ${message}`);
+  process.exit(1);
+}
+
+function target() {
+  const arch = { arm64: "aarch64", x64: "x86_64" }[process.arch];
+  const system = { darwin: "apple-darwin", linux: "unknown-linux-gnu", win32: "pc-windows-msvc" }[process.platform];
+  if (!arch || !system) fail(`there is no build for ${process.platform}-${process.arch} yet.`);
+  return `${arch}-${system}`;
+}
+
+function verifySignature(statement, signature) {
+  const der = Buffer.concat([Buffer.from("302a300506032b6570032100", "hex"), Buffer.from(SIGNING_KEY, "hex")]);
+  const key = crypto.createPublicKey({ key: der, format: "der", type: "spki" });
+  return crypto.verify(null, Buffer.from(statement), key, Buffer.from(signature, "base64"));
+}
+
+function banner(version) {
+  if (!process.stdout.isTTY) return;
+  const art = [
+    " ██████╗ ██████╗ ██╗     ██╗     ██╗██████╗ ███████╗",
+    "██╔════╝██╔═══██╗██║     ██║     ██║██╔══██╗██╔════╝",
+    "██║     ██║   ██║██║     ██║     ██║██║  ██║█████╗  ",
+    "██║     ██║   ██║██║     ██║     ██║██║  ██║██╔══╝  ",
+    "╚██████╗╚██████╔╝███████╗███████╗██║██████╔╝███████╗",
+    " ╚═════╝ ╚═════╝ ╚══════╝╚══════╝╚═╝╚═════╝ ╚══════╝",
+  ];
+  console.log("\n" + art.map(mint).join("\n"));
+  console.log(`  ${dim(`free · v${version} · your agents, working as a team`)}\n`);
+}
+
+/** `collide` by name in every new terminal: ~/.collide/bin joins PATH once. */
+function addToPath(binDir) {
+  if (process.env.COLLIDE_NO_MODIFY_PATH === "1") return "";
+  const home = os.homedir();
+  if (process.platform === "win32") {
+    // the user's own PATH, read and written through PowerShell (setx truncates long values)
+    const script =
+      `$p=[Environment]::GetEnvironmentVariable('Path','User'); if(-not $p){$p=''}; ` +
+      `if(($p -split ';') -notcontains '${binDir}'){[Environment]::SetEnvironmentVariable('Path',($p.TrimEnd(';')+';${binDir}').TrimStart(';'),'User'); 'added'}`;
+    const out = spawnSync("powershell", ["-NoProfile", "-Command", script], { encoding: "utf8" });
+    return out.stdout && out.stdout.includes("added") ? "your user PATH" : "";
+  }
+  const shell = process.env.SHELL || "";
+  const files = shell.endsWith("/zsh")
+    ? [".zshrc"]
+    : shell.endsWith("/bash")
+      ? process.platform === "darwin" ? [".bashrc", ".bash_profile"] : [".bashrc"]
+      : shell.endsWith("/fish")
+        ? [".config/fish/conf.d/collide.fish"]
+        : [".profile"];
+  const added = [];
+  for (const name of files) {
+    const file = path.join(home, name);
+    let current = "";
+    try {
+      current = fs.readFileSync(file, "utf8");
+    } catch {}
+    if (current.includes(".collide/bin")) continue;
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.appendFileSync(
+      file,
+      name.endsWith(".fish") ? 'fish_add_path "$HOME/.collide/bin"\n' : '\n# Collide\nexport PATH="$HOME/.collide/bin:$PATH"\n',
+    );
+    added.push(`~/${name}`);
+  }
+  return added.join(", ");
+}
+
+async function install(args) {
+  const triple = target();
+  let index;
+  try {
+    const response = await fetch(`${SERVER}/artifacts/hooks`, { headers: { "user-agent": "collide-cli-npm" } });
+    if (!response.ok) throw new Error(String(response.status));
+    index = await response.json();
+  } catch (err) {
+    fail(`could not reach Collide's releases (${err.message}). Check your connection and run it again.`);
+  }
+  // a release whose builds are still on their way: the version before,
+  // which every installed copy then updates from by itself
+  let version = index.version;
+  let build = (index.free_builds || []).find((b) => b.target === triple);
+  if (!build && index.previous) {
+    build = (index.previous.free_builds || []).find((b) => b.target === triple);
+    if (build) version = index.previous.version;
+  }
+  if (!build) fail(`there is no build for ${triple} in release v${index.version} yet; try again in a few minutes.`);
+  banner(version);
+
+  console.log(`  ${dim(`Downloading collide for ${triple}...`)}`);
+  const response = await fetch(build.url, { headers: { "user-agent": "collide-cli-npm" } });
+  if (!response.ok) fail(`the download failed (${response.status}). Run it again.`);
+  const bytes = Buffer.from(await response.arrayBuffer());
+  const digest = crypto.createHash("sha256").update(bytes).digest("hex");
+  if (digest !== build.sha256) fail("the download did not match its checksum, so nothing was installed.");
+  if (!build.sig || !verifySignature(`collide ${triple} v${version} sha256:${digest}`, build.sig)) {
+    fail("the download is not signed by Collide's release key, so nothing was installed.");
+  }
+  console.log(`  ${mint("✓")} Downloaded and verified ${dim("(SHA-256 and signature)")}`);
+
+  const binDir = path.join(os.homedir(), ".collide", "bin");
+  fs.mkdirSync(binDir, { recursive: true });
+  const program = path.join(binDir, process.platform === "win32" ? "collide.exe" : "collide");
+  const staged = `${program}.part`;
+  fs.writeFileSync(staged, bytes, { mode: 0o755 });
+  // a running copy on Windows cannot be replaced, only renamed aside
+  if (fs.existsSync(program)) {
+    try {
+      fs.renameSync(program, `${program}.old`);
+    } catch {}
+  }
+  fs.renameSync(staged, program);
+
+  const noLogin = args.includes("--no-login") || process.env.COLLIDE_NO_LOGIN === "1";
+  const passed = args.filter((a) => a !== "--no-login");
+  const setup = spawnSync(program, ["install", ...passed], { stdio: "inherit", env: { ...process.env, COLLIDE_STYLE: "1" } });
+  if (setup.status !== 0) process.exit(setup.status || 1);
+  const added = addToPath(binDir);
+  if (added) console.log(`  ${mint("✓")} Added to your PATH ${dim(`(${added})`)}`);
+
+  // one sign-in, in the browser, as part of the install: the dashboard opens
+  // there, and this terminal comes back to the front when it is done
+  if (!noLogin && process.stdin.isTTY && process.stdout.isTTY && !linked()) {
+    console.log(`\n  ${bold("Sign in")} ${dim("(opens your browser · free · links this machine to your dashboard)")}`);
+    const login = spawnSync(program, ["login"], { stdio: "inherit" });
+    focusTerminal();
+    if (login.status !== 0) console.log(`  ${dim("Not signed in. Any time:")} ${mint("collide login")}`);
+  }
+
+  console.log(`\n  ${bold("Next")}`);
+  console.log(`    ${mint("1")}  Open a new terminal, so the ${bold("collide")} command works`);
+  console.log(`    ${mint("2")}  Start or restart your agent sessions: agents in the same repo now see`);
+  console.log("       each other's work and can message each other");
+  console.log(`\n  ${dim("Bring in your team:")} ${mint("collide upgrade")} ${dim("($10/seat, 14 days free)")}\n`);
+}
+
+/** This machine already signed in (`collide login` keeps the account in
+ * machine.json): the install leaves it as it is. */
+function linked() {
+  try {
+    return Boolean(JSON.parse(fs.readFileSync(path.join(os.homedir(), ".collide", "machine.json"), "utf8")).account);
+  } catch {
+    return false;
+  }
+}
+
+/** Back to the app the install was run from, once the browser is done with
+ * the sign-in. macOS names that app in __CFBundleIdentifier (Terminal,
+ * iTerm, Ghostty, VS Code, Cursor...); elsewhere the person switches back. */
+function focusTerminal() {
+  const app = process.env.__CFBundleIdentifier;
+  if (process.platform === "darwin" && app && /^[\w.-]+$/.test(app)) spawnSync("open", ["-b", app]);
+}
+
+function run(args) {
+  const program = path.join(os.homedir(), ".collide", "bin", process.platform === "win32" ? "collide.exe" : "collide");
+  if (!fs.existsSync(program)) return install([]).then(() => run(args));
+  const result = spawnSync(program, args, { stdio: "inherit" });
+  process.exit(result.status ?? 1);
+}
+
+function help() {
+  const name = path.basename(process.argv[1] || "collide-cli").replace(/\.js$/, "");
+  console.log(`${bold("collide-cli")} ${dim(`v${require("../package.json").version}`)}: Collide for every repo on this machine.
+
+  ${mint(`npx ${name}`)}              install or update Collide (checks SHA-256 and signature first)
+  ${mint(`npx ${name} --no-login`)}   install without the browser sign-in
+  ${mint(`npx ${name} <command>`)}    run a collide command: status, login, upgrade, ...
+  ${mint(`npx ${name} --help`)}       this text
+
+After the install, ${bold("collide <command>")} works directly in a new terminal.
+More at https://collidemcp.com/docs/cli`);
+}
+
+const args = process.argv.slice(2);
+if (args[0] === "--help" || args[0] === "-h") {
+  help();
+} else if (args.length === 0 || args[0] === "install" || args[0].startsWith("--")) {
+  install(args[0] === "install" ? args.slice(1) : args).catch((err) => fail(err.message));
+} else {
+  run(args);
+}

package/package.json

@@ -1,6 +1,33 @@
 {
   "name": "collide-cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.1.0",
+  "description": "Collide: your coding agents (Claude Code, Codex, Cursor) working as a team. One command installs it for every repo on your machine.",
+  "bin": {
+    "collide-cli": "bin/collide-cli.js",
+    "collidemcp": "bin/collide-cli.js"
+  },
+  "files": [
+    "bin/collide-cli.js",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "claude-code",
+    "codex",
+    "cursor",
+    "mcp",
+    "ai-agents",
+    "multi-agent",
+    "collaboration"
+  ],
+  "homepage": "https://collidemcp.com",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/lithometric/collide"
+  },
+  "license": "MIT",
+  "author": "Lithometric"
+}