feat: Add IDP CLI tools for CI integration

[LucasSantana-Dev]

Summary

• Add forge-scorecard CLI — evaluate project quality (security, quality, performance, compliance) with configurable thresholds
• Add forge-policy CLI — enforce governance policies with block/warn/log actions
• Integration guides for both tools in docs/guides/
• Version bump to 1.5.0

Changes

• patterns/idp/scorecards/cli.ts — Scorecard CLI entry point
• patterns/idp/policy-engine/cli.ts — Policy engine CLI entry point
• package.json — Added bin entries for both CLIs, version 1.5.0
• tsconfig.json — Include patterns/idp/**/*.ts in compilation
• docs/guides/scorecard-integration.md — Usage guide with CI workflow template
• docs/guides/policy-engine-integration.md — Usage guide with custom policy examples
• README.md — Added IDP section with tool references
• 10 new CLI tests (5 scorecard + 5 policy)

Test plan

• npm run build passes (tsc compiles IDP patterns)
• npm test passes (317 tests, 13 suites)
• forge-scorecard --project-dir . --output summary produces valid output
• forge-policy --policy-dir ./patterns/idp/policies --fail-on-block runs without error
• CLI exits 1 when score below threshold
• CLI exits 1 for non-existent directories

🤖 Generated with Claude Code

[coderabbitai]

Warning

Rate limit exceeded

@LucasSantana-Dev has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 16 minutes and 11 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: b511973b-9b52-47af-946a-780dfc28f3bc

📥 Commits

Reviewing files that changed from the base of the PR and between 00e409f and 9f0c606.

📒 Files selected for processing (11)

• CHANGELOG.md
• README.md
• docs/guides/policy-engine-integration.md
• docs/guides/scorecard-integration.md
• package.json
• patterns/idp/__tests__/policy-cli.test.ts
• patterns/idp/__tests__/scorecard-cli.test.ts
• patterns/idp/policy-engine/cli.ts
• patterns/idp/scorecards/aggregator.ts
• patterns/idp/scorecards/cli.ts
• tsconfig.json

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch feat/idp-ci-integration

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}