@runbandit/cli

bandit is the command-line client for the Bandits platform (auth, project/experiment management, etc.).

Install

Standalone binary (no Node.js required):

curl -fsSL https://app.runbandit.com/api/install.sh | bash

The installer downloads the latest binary from the cli-latest GitHub Release (force-updated on every @runbandit/cli publish).

Via npm (requires Node.js):

npm install -g @runbandit/cli
# or
npx @runbandit/cli --help

Building standalone binaries

Standalone binaries are built with Bun (must be installed locally):

pnpm --filter @runbandit/cli build:binary

Outputs land in dist/binaries/ (one binary per OS/arch target).

Dependency lockfile

This package has two lockfiles for two different purposes:

• The monorepo's root pnpm-lock.yaml — used for normal pnpm/Turborepo installs and dev.
• packages/cli/bun.lock — the source of truth for the binary-build path. This lockfile is honored by the release workflow (release.yml), which installs with bun install --frozen-lockfile when building the @runbandit/cli binaries.

Whenever CLI dependencies in package.json change, regenerate bun.lock and commit it:

cd packages/cli && bun install

Otherwise the release build will fail because --frozen-lockfile rejects a lockfile that's out of sync with package.json.