feat(cli): connect newly created machines in Scalar

[Shengming Liang (AgentWings)]

Pull Request

Note

TL;DR: Scalar's CLI now supports dedalus machines create --connect as regeneration-safe custom code.
Authorship: AI-assisted by Codex, directed and reviewed by Shengming Liang.
Review context: Slack discussion.

Linear Issue

Ref DCS-317

Summary

What:

Adds a handwritten machines create adapter under src/custom. It sends an empty JSON object through Scalar's generated client so the API supplies the default machine shape, then --connect creates and polls an SSH session and opens the local OpenSSH client with ephemeral credentials and strict host trust.

Why:

First-run users should be able to create and enter a machine with one readable command. This keeps the onboarding command stable while Scalar owns SDK generation and release publication.

Important

Lines added MUST be under +500. Use stacked diffs for larger changes. Deletions are always welcome.

Lines added: 499

Test Plan

• npm test (124 tests)
• npm run typecheck
• SCALAR_BASE_REF=upstream/scalar-next npm run scalar:check
• node dist/esm/custom/bin.js machines create --help
• Transport test verifies {}, Bearer auth, and a generated idempotency key
• Command test verifies the returned machine_id is passed to the connector

Repro / Showcase

dedalus machines create --connect

Tests Added

• Unit tests
• Integration tests
• E2E tests
• N/A (no new code paths)

Documentation

• Internal (docs/):

  • N/A - no internal documentation changed.

• External:

  • README documents the one-command flow and its OpenSSH dependency.

Reviewers

• Domain: Windsor Nguyễn (@windsornguyen)
• Readability: Tsion Kergo (@tsiongk)

Notes for Reviewers

This follows Scalar's custom-code branch model: the change adds separate handwritten files under src/custom and does not edit scalar-generated or the generated SDK. It is temporarily stacked on #35 because that PR establishes the Scalar custom entry point. Once #35 lands, this branch should advance to scalar-next; Scalar then carries scalar-next into its release PR for main.

The generated snapshot still calls the operation machine-lifecycle create and predates the optional machine-shape schema. This adapter provides the desired public command without modifying generated files. Server-side defaults landed in dedalus-labs/dedalus#5343.

Changelog

2026-08-24

Feedback received:

• Retarget the implementation from Stainless to Scalar's release platform.

Changes made:

• Replaced the Go/Stainless implementation with Scalar TypeScript custom code.
• Added create-and-connect transport, SSH session polling, ephemeral OpenSSH credentials, tests, and README guidance.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​ansis@​4.3.1
	npm/​@​types/​ws@​8.18.1
	npm/​proper-lockfile@​4.1.2
	npm/​@​napi-rs/​keyring@​1.3.0
	npm/​@​types/​proper-lockfile@​4.1.4
	npm/​@​types/​node@​20.19.43
	npm/​yaml@​2.9.0
	npm/​commander@​14.0.3
	npm/​open@​11.0.1
	npm/​typescript@​6.0.3
	npm/​ws@​8.21.3

View full report