calt-cli

library0.2.1jsnpmunverified

CALT (Copilot Agent Lint Tool) CLI v0.2.1 is a linter, validator, and analyzer for Microsoft 365 Copilot Agent configurations. It supports scanning local Declarative Agent manifests, project folders, and remote tenant agents via a beta Microsoft Graph API endpoint. Key differentiators: no-config local scanning, auto-fix capability, support for SARIF and JSON output for CI/CD, and optional tenant scanning with Entra app setup. Requires Node.js >=18.0.0. Active development on GitHub.

devops

npm install calt-cli

github ↗package ↗homepage ↗

INSTALL

IMPORT

SIG · CALT-CLI

calt-cli

devopsjavascriptv0.2.1

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

CALT CLI

✓ npx calt scan ./declarativeAgent.json

✗ calt scan ./declarativeAgent.json (without installing globally)

Global install recommended: npm install -g calt-cli. Local scanning is supported without any auth.

ScanCommand

✓ calt scan --format sarif ./declarativeAgent.json

✗ calt scan --output sarif (wrong flag)

Use --format for output format (json, sarif, text). --output is for directory when fetching.

SetupCommand

✓ calt setup --login

✗ calt setup (without --login will not authenticate)

--login triggers Azure CLI login. Use --help for more options.

InitCommand

✓ calt init

✗ calt initialize

Init creates config file without authentication.

LoginCommand

✓ calt login --client-id YOUR_CLIENT_ID --tenant YOUR_TENANT_ID

✗ calt login --client-id YOUR_CLIENT_ID (without tenant ID, will prompt)

Tenant ID is required if not set in config.

FetchCommand

✓ calt fetch --all --output ./agents/

✗ calt fetch --all (without --output will print agent info)

--output directory saves agent manifest files locally.

Installs CALT globally, scans a local manifest, auto-fixes issues, and outputs SARIF for CI/CD.

npm install -g calt-cli calt scan ./declarativeAgent.json calt scan --fix ./declarativeAgent.json calt scan --format sarif ./declarativeAgent.json 2>&1

Debug

Known issues

breakingNode.js version below 18 is not supported.

fix

Upgrade Node.js to version 18 or higher.

affects: <18.0.0

gotchaTenant scanning requires the Microsoft Graph beta endpoint /beta/copilot/admin/catalog/packages, which may not be available in all tenants or regions.

fix

Fall back to local scanning by exporting agents manually. Check Microsoft documentation for endpoint availability.

affects: all

deprecatedThe --format option may be renamed in future versions.

fix

Use --format consistently; check release notes for changes.

affects: >=0.1.0

gotchaScanning tenant agents requires an Entra admin role (AI Administrator or Global Admin). Regular users receive 403 Forbidden.

fix

Use a service account with the required administrator role or scan locally.

affects: all

breakingThe CLI command 'fetch' is used to list and download agents, not to scan.

fix

Use 'scan' with '--remote' to scan remote agents; 'fetch' is for retrieval only.

affects: ==0.2.1

Errors

Common errors & fixes

Error: Cannot find module 'calt-cli'

Package not installed globally.

fix

Run 'npm install -g calt-cli' to install globally, or use 'npx calt-cli scan ...'

Error: The API returned a 403 Forbidden

User does not have the required Entra admin role for the Graph API.

fix

Assign the AI Administrator role to the user or use a service account with that role.

Error: This client has not been set up to use the device code flow.

Entra app registration missing public client flow or incorrect redirect URI.

fix

In Azure Portal, enable 'Allow public client flows' and add 'https://login.microsoftonline.com/common/oauth2/nativeclient' as redirect URI for mobile and desktop applications.

Error: No tenant ID provided

Missing --tenant flag or configuration.

fix

Provide --tenant with your Entra tenant ID or set it in the .calt-config file.

Error: No agent found with ID: <id>

Invalid or non-existent agent ID when using '--id' with '--remote'.

fix

Use 'calt fetch --list' to get a list of available agent IDs.

Upgrade

Version history

0.2.1latest on npm

Audit

Dependencies

noderequiredRuntime requirement: Node.js >=18.0.0 and CLI runs on Node.

@azure/identityoptionalUsed for Entra authentication when scanning tenant agents.

@microsoft/microsoft-graph-clientoptionalUsed to call Graph API for tenant scanning.

Agent activity

2 hits · last 30 days

node

Resources

githubhttps://github.com/stephanbisser/calt ↗

packagecalt-cli ↗

homepagehttps://github.com/stephanbisser/calt#readme ↗