@junctionpanel/cli 0.1.16

package/dist/commands/onboard.js

@@ -0,0 +1,299 @@
+import { cancel, intro, log, note, outro, spinner } from '@clack/prompts';
+import { Command } from 'commander';
+import path from 'node:path';
+import { buildRelayWebSocketUrl, getOrCreateServerId, loadConfig, loadOrCreateDaemonKeyPair, } from '@junctionpanel/server';
+import { resolveLocalJunctionHome, resolveLocalDaemonState, resolveTcpHostFromListen, startLocalDaemonDetached, tailDaemonLog, } from './daemon/local-daemon.js';
+import { tryConnectToDaemon } from '../utils/client.js';
+const DEFAULT_READY_TIMEOUT_MS = 10 * 60 * 1000;
+const DEFAULT_WEB_APP_URL = 'https://app.junctionpanel.dev';
+const DEFAULT_RELAY_ENDPOINT = 'relay.junctionpanel.dev:443';
+const plainNoteFormat = (line) => line;
+function renderNote(message, title) {
+    note(message, title, { format: plainNoteFormat });
+}
+function sleep(ms) {
+    return new Promise((resolve) => {
+        setTimeout(resolve, ms);
+    });
+}
+function parseTimeoutMs(raw) {
+    if (!raw || raw.trim().length === 0) {
+        return DEFAULT_READY_TIMEOUT_MS;
+    }
+    const seconds = Number(raw);
+    if (!Number.isFinite(seconds) || seconds <= 0) {
+        throw new Error(`Invalid timeout value: ${raw}`);
+    }
+    return Math.ceil(seconds * 1000);
+}
+function toCliOverrides(options) {
+    const cliOverrides = {};
+    if (options.listen) {
+        cliOverrides.listen = options.listen;
+    }
+    else if (options.port) {
+        cliOverrides.listen = `127.0.0.1:${options.port}`;
+    }
+    if (options.relay === false) {
+        cliOverrides.relayEnabled = false;
+    }
+    if (options.allowedHosts) {
+        const raw = options.allowedHosts.trim();
+        cliOverrides.allowedHosts =
+            raw.toLowerCase() === 'true'
+                ? true
+                : raw.split(',').map(host => host.trim()).filter(Boolean);
+    }
+    if (options.mcp === false) {
+        cliOverrides.mcpEnabled = false;
+    }
+    return cliOverrides;
+}
+async function waitForDaemonReady(args) {
+    const deadline = Date.now() + args.timeoutMs;
+    let lastStatus = '';
+    let lastPrintedAt = 0;
+    while (Date.now() < deadline) {
+        const state = resolveLocalDaemonState({ home: args.home });
+        const host = resolveTcpHostFromListen(state.listen);
+        if (state.running && host) {
+            const client = await tryConnectToDaemon({ host, timeout: 1200 });
+            if (client) {
+                try {
+                    await client.fetchAgents();
+                    return { listen: state.listen, host };
+                }
+                catch {
+                    // Daemon process is alive but not API-ready yet.
+                }
+                finally {
+                    await client.close().catch(() => { });
+                }
+            }
+        }
+        else if (state.running && !host) {
+            return { listen: state.listen, host: null };
+        }
+        const statusMessage = 'Waiting for daemon to become ready...';
+        if (statusMessage !== lastStatus) {
+            args.onStatus?.(statusMessage);
+            lastStatus = statusMessage;
+            lastPrintedAt = Date.now();
+        }
+        else if (!args.onStatus && Date.now() - lastPrintedAt >= 3000) {
+            console.log(statusMessage);
+            lastPrintedAt = Date.now();
+        }
+        await sleep(200);
+    }
+    const recentLogs = tailDaemonLog(args.home, 60);
+    throw new Error([
+        `Timed out after ${Math.ceil(args.timeoutMs / 1000)}s waiting for daemon readiness.`,
+        recentLogs ? `Recent daemon logs:\n${recentLogs}` : null,
+    ]
+        .filter(Boolean)
+        .join('\n\n'));
+}
+function printConnectionInfo(readyState, richUi) {
+    const endpointLine = readyState.host
+        ? `WebSocket endpoint: ws://${readyState.host}/ws`
+        : `Daemon listen: ${readyState.listen}`;
+    const infoLines = [
+        endpointLine,
+        `Web app: ${DEFAULT_WEB_APP_URL}`,
+        'Status: ready',
+    ];
+    if (!richUi) {
+        console.log('');
+        console.log('Daemon ready:');
+        for (const line of infoLines) {
+            console.log(line);
+        }
+        return;
+    }
+    renderNote(infoLines.join('\n'), 'Daemon ready');
+}
+async function buildPairingUrl(args) {
+    const pairingUrl = new URL(buildRelayWebSocketUrl({
+        endpoint: args.relayEndpoint,
+        serverId: args.serverId,
+        role: 'client',
+        version: '2',
+    }));
+    const daemonKeyPair = await loadOrCreateDaemonKeyPair(args.junctionHome);
+    pairingUrl.searchParams.set('daemonPublicKeyB64', daemonKeyPair.publicKeyB64);
+    return pairingUrl.toString();
+}
+function printPairingUrl(pairingUrl, richUi) {
+    const lines = [
+        pairingUrl,
+        'Paste this URL into the web app Daemon URL field.',
+    ];
+    if (!richUi) {
+        console.log('');
+        console.log('Pairing URL:');
+        for (const line of lines) {
+            console.log(line);
+        }
+        return;
+    }
+    renderNote(lines.join('\n'), 'Pairing URL');
+}
+function printNextSteps(junctionHome, richUi) {
+    const daemonLogPath = path.join(junctionHome, 'daemon.log');
+    const nextStepsLines = [
+        `1. Open the Junction web app: ${DEFAULT_WEB_APP_URL}`,
+        '2. Connect using the Pairing URL shown above.',
+        '3. Example: junction run "your prompt"',
+    ];
+    const quickReferenceLines = [
+        '1. junction --help',
+        '2. junction ls',
+        '3. junction run "your prompt"',
+        '4. junction status',
+        '5. junction stop',
+        `6. Daemon logs: ${daemonLogPath}`,
+    ];
+    if (!richUi) {
+        console.log('');
+        console.log('Next steps:');
+        for (const line of nextStepsLines) {
+            console.log(line);
+        }
+        console.log('');
+        console.log('CLI quick reference:');
+        for (const line of quickReferenceLines) {
+            console.log(line);
+        }
+        return;
+    }
+    renderNote(nextStepsLines.join('\n'), 'Next steps');
+    renderNote(quickReferenceLines.join('\n'), 'CLI quick reference');
+}
+export function onboardCommand() {
+    return new Command('onboard')
+        .description('Run first-time setup and start the daemon')
+        .option('--listen <listen>', 'Listen target (host:port, port, or unix socket path)')
+        .option('--port <port>', 'Port to listen on (default: 6767)')
+        .option('--home <path>', 'Home directory (default: ~/.junction)')
+        .option('--no-relay', 'Disable relay connection')
+        .option('--no-mcp', 'Disable the Agent MCP HTTP endpoint')
+        .option('--allowed-hosts <hosts>', 'Comma-separated Host allowlist values (example: "localhost,.example.com" or "true")')
+        .option('--timeout <seconds>', 'Max time to wait for daemon readiness (default: 600)')
+        .action(async (options) => {
+        await runOnboard(options);
+    });
+}
+export async function runOnboard(options) {
+    const richUi = process.stdin.isTTY && process.stdout.isTTY;
+    if (richUi) {
+        intro('Welcome to Junction');
+    }
+    if (options.listen && options.port) {
+        cancel('Cannot use --listen and --port together');
+        process.exit(1);
+    }
+    let timeoutMs = DEFAULT_READY_TIMEOUT_MS;
+    let readyState = null;
+    try {
+        timeoutMs = parseTimeoutMs(options.timeout);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        cancel(message);
+        process.exit(1);
+    }
+    const junctionHome = resolveLocalJunctionHome(options.home);
+    if (richUi) {
+        renderNote(junctionHome, 'Junction home');
+    }
+    const cliOverrides = toCliOverrides(options);
+    const daemonConfig = loadConfig(junctionHome, { cli: cliOverrides });
+    const stateBeforeStart = resolveLocalDaemonState({ home: options.home });
+    const startSpinner = richUi ? spinner() : null;
+    if (!stateBeforeStart.running) {
+        try {
+            if (startSpinner) {
+                startSpinner.start('Starting daemon...');
+            }
+            else {
+                log.message('Starting daemon...');
+            }
+            const startup = await startLocalDaemonDetached(options);
+            if (startSpinner) {
+                startSpinner.stop(`Daemon started (PID ${startup.pid ?? 'unknown'})`);
+            }
+            else {
+                log.message(`Daemon started (PID ${startup.pid ?? 'unknown'})`);
+            }
+            log.message(`Logs: ${startup.logPath}`);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            if (startSpinner) {
+                startSpinner.error(message);
+            }
+            else {
+                log.error(message);
+            }
+            process.exit(1);
+        }
+    }
+    else {
+        log.message(`Daemon already running (PID ${stateBeforeStart.pidInfo?.pid ?? 'unknown'}).`);
+    }
+    const readySpinner = richUi ? spinner() : null;
+    try {
+        if (readySpinner) {
+            readySpinner.start('Waiting for daemon to become ready...');
+        }
+        else {
+            log.message('Waiting for daemon to become ready...');
+        }
+        readyState = await waitForDaemonReady({
+            home: options.home ?? junctionHome,
+            timeoutMs,
+            onStatus: readySpinner ? (message) => readySpinner.message(message) : undefined,
+        });
+        if (readySpinner) {
+            readySpinner.stop(`Daemon ready on ${readyState.listen}`);
+        }
+        else {
+            log.message(`Daemon ready on ${readyState.listen}`);
+        }
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (readySpinner) {
+            readySpinner.error(message);
+        }
+        else {
+            log.error(message);
+        }
+        process.exit(1);
+        return;
+    }
+    if (readyState) {
+        printConnectionInfo(readyState, richUi);
+    }
+    if (daemonConfig.relayEnabled) {
+        try {
+            const relayEndpoint = daemonConfig.relayPublicEndpoint ?? daemonConfig.relayEndpoint ?? DEFAULT_RELAY_ENDPOINT;
+            const pairingUrl = await buildPairingUrl({
+                junctionHome,
+                relayEndpoint,
+                serverId: getOrCreateServerId(junctionHome),
+            });
+            printPairingUrl(pairingUrl, richUi);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            log.warn(`Could not generate pairing URL: ${message}`);
+        }
+    }
+    printNextSteps(junctionHome, richUi);
+    if (richUi) {
+        outro('Junction daemon is running.');
+    }
+}
+//# sourceMappingURL=onboard.js.map

package/dist/commands/onboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard.js","sourceRoot":"","sources":["../../src/commands/onboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,UAAU,EACV,yBAAyB,GAE1B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,aAAa,GAEd,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAMvD,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAC/C,MAAM,mBAAmB,GAAG,+BAA+B,CAAA;AAC3D,MAAM,sBAAsB,GAAG,6BAA6B,CAAA;AAE5D,MAAM,eAAe,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAA;AAEtD,SAAS,UAAU,CAAC,OAAe,EAAE,KAAa;IAChD,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;AACnD,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,wBAAwB,CAAA;IACjC,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAA;IAClD,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,OAA2B;IACjD,MAAM,YAAY,GAAuB,EAAE,CAAA;IAE3C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,YAAY,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IACtC,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACxB,YAAY,CAAC,MAAM,GAAG,aAAa,OAAO,CAAC,IAAI,EAAE,CAAA;IACnD,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC5B,YAAY,CAAC,YAAY,GAAG,KAAK,CAAA;IACnC,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAA;QACvC,YAAY,CAAC,YAAY;YACvB,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM;gBAC1B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC/D,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC1B,YAAY,CAAC,UAAU,GAAG,KAAK,CAAA;IACjC,CAAC;IAED,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAIjC;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAA;IAC5C,IAAI,UAAU,GAAG,EAAE,CAAA;IACnB,IAAI,aAAa,GAAG,CAAC,CAAA;IAErB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,uBAAuB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAEnD,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;YAChE,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,WAAW,EAAE,CAAA;oBAC1B,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;gBACvC,CAAC;gBAAC,MAAM,CAAC;oBACP,iDAAiD;gBACnD,CAAC;wBAAS,CAAC;oBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAC7C,CAAC;QAED,MAAM,aAAa,GAAG,uCAAuC,CAAA;QAE7D,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAA;YAC9B,UAAU,GAAG,aAAa,CAAA;YAC1B,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;YAC1B,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,CAAC;QAED,MAAM,KAAK,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC/C,MAAM,IAAI,KAAK,CACb;QACE,mBAAmB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,iCAAiC;QACpF,UAAU,CAAC,CAAC,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI;KACzD;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,MAAM,CAAC,CAChB,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAmD,EAAE,MAAe;IAC/F,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI;QAClC,CAAC,CAAC,4BAA4B,UAAU,CAAC,IAAI,KAAK;QAClD,CAAC,CAAC,kBAAkB,UAAU,CAAC,MAAM,EAAE,CAAA;IACzC,MAAM,SAAS,GAAG;QAChB,YAAY;QACZ,YAAY,mBAAmB,EAAE;QACjC,eAAe;KAChB,CAAA;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAC5B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;QACD,OAAM;IACR,CAAC;IAED,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAA;AAClD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAI9B;IACC,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,sBAAsB,CAAC;QACrB,QAAQ,EAAE,IAAI,CAAC,aAAa;QAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,GAAG;KACb,CAAC,CACH,CAAA;IACD,MAAM,aAAa,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACxE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC,YAAY,CAAC,CAAA;IAC7E,OAAO,UAAU,CAAC,QAAQ,EAAE,CAAA;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB,EAAE,MAAe;IAC1D,MAAM,KAAK,GAAG;QACZ,UAAU;QACV,mDAAmD;KACpD,CAAA;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;QACD,OAAM;IACR,CAAC;IACD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB,EAAE,MAAe;IAC3D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IAC3D,MAAM,cAAc,GAAG;QACrB,iCAAiC,mBAAmB,EAAE;QACtD,+CAA+C;QAC/C,wCAAwC;KACzC,CAAA;IACD,MAAM,mBAAmB,GAAG;QAC1B,oBAAoB;QACpB,gBAAgB;QAChB,+BAA+B;QAC/B,oBAAoB;QACpB,kBAAkB;QAClB,mBAAmB,aAAa,EAAE;KACnC,CAAA;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QAC1B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;QACnC,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;QACD,OAAM;IACR,CAAC;IAED,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAA;IACnD,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC,CAAA;AACnE,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC;SAC1B,WAAW,CAAC,2CAA2C,CAAC;SACxD,MAAM,CAAC,mBAAmB,EAAE,sDAAsD,CAAC;SACnF,MAAM,CAAC,eAAe,EAAE,mCAAmC,CAAC;SAC5D,MAAM,CAAC,eAAe,EAAE,uCAAuC,CAAC;SAChE,MAAM,CAAC,YAAY,EAAE,0BAA0B,CAAC;SAChD,MAAM,CAAC,UAAU,EAAE,qCAAqC,CAAC;SACzD,MAAM,CACL,yBAAyB,EACzB,qFAAqF,CACtF;SACA,MAAM,CAAC,qBAAqB,EAAE,sDAAsD,CAAC;SACrF,MAAM,CAAC,KAAK,EAAE,OAAuB,EAAE,EAAE;QACxC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAA;IAC1D,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC9B,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,yCAAyC,CAAC,CAAA;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,IAAI,SAAS,GAAG,wBAAwB,CAAA;IACxC,IAAI,UAAU,GAAmD,IAAI,CAAA;IACrE,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,MAAM,CAAC,OAAO,CAAC,CAAA;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3D,IAAI,MAAM,EAAE,CAAC;QACX,UAAU,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAC3C,CAAC;IAED,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IAC5C,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAA;IAEpE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACxE,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAE9C,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,CAAC;gBACjB,YAAY,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;YAC1C,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;YACnC,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAA;YACvD,IAAI,YAAY,EAAE,CAAC;gBACjB,YAAY,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,GAAG,IAAI,SAAS,GAAG,CAAC,CAAA;YACvE,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,OAAO,CAAC,uBAAuB,OAAO,CAAC,GAAG,IAAI,SAAS,GAAG,CAAC,CAAA;YACjE,CAAC;YACD,GAAG,CAAC,OAAO,CAAC,SAAS,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,YAAY,EAAE,CAAC;gBACjB,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC7B,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACpB,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,+BAA+B,gBAAgB,CAAC,OAAO,EAAE,GAAG,IAAI,SAAS,IAAI,CAAC,CAAA;IAC5F,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9C,IAAI,CAAC;QACH,IAAI,YAAY,EAAE,CAAC;YACjB,YAAY,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC7D,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAA;QACtD,CAAC;QACD,UAAU,GAAG,MAAM,kBAAkB,CAAC;YACpC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,YAAY;YAClC,SAAS;YACT,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAChF,CAAC,CAAA;QACF,IAAI,YAAY,EAAE,CAAC;YACjB,YAAY,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;QAC3D,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,mBAAmB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,IAAI,YAAY,EAAE,CAAC;YACjB,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7B,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACpB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACf,OAAM;IACR,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IACzC,CAAC;IAED,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,aAAa,GACjB,YAAY,CAAC,mBAAmB,IAAI,YAAY,CAAC,aAAa,IAAI,sBAAsB,CAAA;YAC1F,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC;gBACvC,YAAY;gBACZ,aAAa;gBACb,QAAQ,EAAE,mBAAmB,CAAC,YAAY,CAAC;aAC5C,CAAC,CAAA;YACF,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,GAAG,CAAC,IAAI,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAA;QACxD,CAAC;IACH,CAAC;IAED,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IACpC,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,6BAA6B,CAAC,CAAA;IACtC,CAAC;AACH,CAAC"}

package/dist/commands/permit/allow.d.ts

@@ -0,0 +1,20 @@
+import type { Command } from 'commander';
+import type { CommandOptions, ListResult, OutputSchema } from '../../output/index.js';
+/** Permission response item for display */
+export interface PermissionResponseItem {
+    requestId: string;
+    agentId: string;
+    agentShortId: string;
+    name: string;
+    result: string;
+}
+/** Schema for permit allow/deny output */
+export declare const permitResponseSchema: OutputSchema<PermissionResponseItem>;
+export type PermitAllowResult = ListResult<PermissionResponseItem>;
+export interface PermitAllowOptions extends CommandOptions {
+    all?: boolean;
+    input?: string;
+    host?: string;
+}
+export declare function runAllowCommand(agentIdOrPrefix: string, reqId: string | undefined, options: PermitAllowOptions, _command: Command): Promise<PermitAllowResult>;
+//# sourceMappingURL=allow.d.ts.map

package/dist/commands/permit/allow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow.d.ts","sourceRoot":"","sources":["../../../src/commands/permit/allow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAGxC,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAgB,MAAM,uBAAuB,CAAA;AAEnG,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED,0CAA0C;AAC1C,eAAO,MAAM,oBAAoB,EAAE,YAAY,CAAC,sBAAsB,CAiBrE,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAA;AAElE,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,wBAAsB,eAAe,CACnC,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAqH5B"}

package/dist/commands/permit/allow.js

@@ -0,0 +1,134 @@
+import { connectToDaemon, getDaemonHost } from '../../utils/client.js';
+/** Schema for permit allow/deny output */
+export const permitResponseSchema = {
+    idField: 'requestId',
+    columns: [
+        { header: 'REQUEST ID', field: 'requestId', width: 12 },
+        { header: 'AGENT', field: 'agentShortId', width: 10 },
+        { header: 'TOOL', field: 'name', width: 20 },
+        {
+            header: 'RESULT',
+            field: 'result',
+            width: 10,
+            color: (value) => {
+                if (value === 'allowed')
+                    return 'green';
+                if (value === 'denied')
+                    return 'red';
+                return undefined;
+            },
+        },
+    ],
+};
+export async function runAllowCommand(agentIdOrPrefix, reqId, options, _command) {
+    const host = getDaemonHost({ host: options.host });
+    // No validation needed - if no reqId provided, allow all by default
+    // Parse input JSON if provided
+    let updatedInput;
+    if (options.input) {
+        try {
+            updatedInput = JSON.parse(options.input);
+        }
+        catch (err) {
+            const error = {
+                code: 'INVALID_JSON',
+                message: `Invalid JSON for --input: ${err instanceof Error ? err.message : String(err)}`,
+                details: 'Provide valid JSON, e.g., --input \'{"key": "value"}\'',
+            };
+            throw error;
+        }
+    }
+    let client;
+    try {
+        client = await connectToDaemon({ host: options.host });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const error = {
+            code: 'DAEMON_NOT_RUNNING',
+            message: `Cannot connect to daemon at ${host}: ${message}`,
+            details: 'Start the daemon with: junction daemon start',
+        };
+        throw error;
+    }
+    try {
+        const fetchResult = await client.fetchAgent(agentIdOrPrefix);
+        if (!fetchResult) {
+            await client.close();
+            const error = {
+                code: 'AGENT_NOT_FOUND',
+                message: `Agent not found: ${agentIdOrPrefix}`,
+                details: 'Use "junction ls" to list available agents',
+            };
+            throw error;
+        }
+        const agent = fetchResult.agent;
+        const resolvedAgentId = agent.id;
+        // Get pending permissions for this agent
+        const pendingPermissions = agent.pendingPermissions || [];
+        if (pendingPermissions.length === 0) {
+            await client.close();
+            const error = {
+                code: 'NO_PENDING_PERMISSIONS',
+                message: `No pending permissions for agent ${agent.id.slice(0, 7)}`,
+            };
+            throw error;
+        }
+        // Determine which permissions to allow
+        let permissionsToAllow;
+        if (!reqId || options.all) {
+            // Default: allow all pending permissions if no req_id specified
+            // --all flag is kept as an explicit alias for clarity
+            permissionsToAllow = pendingPermissions;
+        }
+        else {
+            // Find permission by ID prefix
+            const permission = pendingPermissions.find((p) => p.id === reqId || p.id.startsWith(reqId));
+            if (!permission) {
+                await client.close();
+                const error = {
+                    code: 'PERMISSION_NOT_FOUND',
+                    message: `Permission request not found: ${reqId}`,
+                    details: `Available requests: ${pendingPermissions.map((p) => p.id.slice(0, 8)).join(', ')}`,
+                };
+                throw error;
+            }
+            permissionsToAllow = [permission];
+        }
+        // Allow permissions
+        const results = [];
+        for (const permission of permissionsToAllow) {
+            await client.respondToPermission(resolvedAgentId, permission.id, {
+                behavior: 'allow',
+                ...(updatedInput ? { updatedInput } : {}),
+            });
+            results.push({
+                requestId: permission.id.slice(0, 8),
+                agentId: resolvedAgentId,
+                agentShortId: resolvedAgentId.slice(0, 7),
+                name: permission.name,
+                result: 'allowed',
+            });
+        }
+        await client.close();
+        return {
+            type: 'list',
+            data: results,
+            schema: permitResponseSchema,
+        };
+    }
+    catch (err) {
+        await client.close().catch(() => { });
+        // Re-throw CommandErrors
+        if (err && typeof err === 'object' && 'code' in err) {
+            throw err;
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        const error = {
+            code: 'ALLOW_PERMISSION_FAILED',
+            message: `Failed to allow permission: ${message}`,
+        };
+        throw error;
+    }
+}
+//# sourceMappingURL=allow.js.map

package/dist/commands/permit/allow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow.js","sourceRoot":"","sources":["../../../src/commands/permit/allow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAYtE,0CAA0C;AAC1C,MAAM,CAAC,MAAM,oBAAoB,GAAyC;IACxE,OAAO,EAAE,WAAW;IACpB,OAAO,EAAE;QACP,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE;QACvD,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE;QACrD,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAC5C;YACE,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;gBACf,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,OAAO,CAAA;gBACvC,IAAI,KAAK,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAA;gBACpC,OAAO,SAAS,CAAA;YAClB,CAAC;SACF;KACF;CACF,CAAA;AAUD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,eAAuB,EACvB,KAAyB,EACzB,OAA2B,EAC3B,QAAiB;IAEjB,MAAM,IAAI,GAAG,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAElD,oEAAoE;IAEpE,+BAA+B;IAC/B,IAAI,YAAiD,CAAA;IACrD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAiB;gBAC1B,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBACxF,OAAO,EAAE,wDAAwD;aAClE,CAAA;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAA;IACV,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,+BAA+B,IAAI,KAAK,OAAO,EAAE;YAC1D,OAAO,EAAE,8CAA8C;SACxD,CAAA;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAA;QAC5D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACpB,MAAM,KAAK,GAAiB;gBAC1B,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,oBAAoB,eAAe,EAAE;gBAC9C,OAAO,EAAE,4CAA4C;aACtD,CAAA;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAA;QAC/B,MAAM,eAAe,GAAG,KAAK,CAAC,EAAE,CAAA;QAEhC,yCAAyC;QACzC,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAA;QACzD,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACpB,MAAM,KAAK,GAAiB;gBAC1B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;aACpE,CAAA;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QAED,uCAAuC;QACvC,IAAI,kBAA4C,CAAA;QAChD,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1B,gEAAgE;YAChE,sDAAsD;YACtD,kBAAkB,GAAG,kBAAkB,CAAA;QACzC,CAAC;aAAM,CAAC;YACN,+BAA+B;YAC/B,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,KAAM,CAAC,CACjD,CAAA;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;gBACpB,MAAM,KAAK,GAAiB;oBAC1B,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,iCAAiC,KAAK,EAAE;oBACjD,OAAO,EAAE,uBAAuB,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC7F,CAAA;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;YACD,kBAAkB,GAAG,CAAC,UAAU,CAAC,CAAA;QACnC,CAAC;QAED,oBAAoB;QACpB,MAAM,OAAO,GAA6B,EAAE,CAAA;QAC5C,KAAK,MAAM,UAAU,IAAI,kBAAkB,EAAE,CAAC;YAC5C,MAAM,MAAM,CAAC,mBAAmB,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,EAAE;gBAC/D,QAAQ,EAAE,OAAO;gBACjB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,CAAC,CAAA;YACF,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpC,OAAO,EAAE,eAAe;gBACxB,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzC,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAEpB,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,oBAAoB;SAC7B,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpC,yBAAyB;QACzB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YACpD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,+BAA+B,OAAO,EAAE;SAClD,CAAA;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/commands/permit/deny.d.ts

@@ -0,0 +1,12 @@
+import type { Command } from 'commander';
+import type { CommandOptions, ListResult } from '../../output/index.js';
+import { type PermissionResponseItem } from './allow.js';
+export type PermitDenyResult = ListResult<PermissionResponseItem>;
+export interface PermitDenyOptions extends CommandOptions {
+    all?: boolean;
+    message?: string;
+    interrupt?: boolean;
+    host?: string;
+}
+export declare function runDenyCommand(agentIdOrPrefix: string, reqId: string | undefined, options: PermitDenyOptions, _command: Command): Promise<PermitDenyResult>;
+//# sourceMappingURL=deny.d.ts.map

package/dist/commands/permit/deny.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deny.d.ts","sourceRoot":"","sources":["../../../src/commands/permit/deny.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAGxC,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAgB,MAAM,uBAAuB,CAAA;AACrF,OAAO,EAAwB,KAAK,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAE9E,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAA;AAEjE,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,wBAAsB,cAAc,CAClC,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,gBAAgB,CAAC,CA6G3B"}

package/dist/commands/permit/deny.js

@@ -0,0 +1,106 @@
+import { connectToDaemon, getDaemonHost } from '../../utils/client.js';
+import { permitResponseSchema } from './allow.js';
+export async function runDenyCommand(agentIdOrPrefix, reqId, options, _command) {
+    const host = getDaemonHost({ host: options.host });
+    // Validate arguments
+    if (!options.all && !reqId) {
+        const error = {
+            code: 'MISSING_ARGUMENT',
+            message: 'Request ID is required unless --all is specified',
+            details: 'Usage: junction permit deny <agent> <req_id> or junction permit deny <agent> --all',
+        };
+        throw error;
+    }
+    let client;
+    try {
+        client = await connectToDaemon({ host: options.host });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const error = {
+            code: 'DAEMON_NOT_RUNNING',
+            message: `Cannot connect to daemon at ${host}: ${message}`,
+            details: 'Start the daemon with: junction daemon start',
+        };
+        throw error;
+    }
+    try {
+        const fetchResult = await client.fetchAgent(agentIdOrPrefix);
+        if (!fetchResult) {
+            await client.close();
+            const error = {
+                code: 'AGENT_NOT_FOUND',
+                message: `Agent not found: ${agentIdOrPrefix}`,
+                details: 'Use "junction ls" to list available agents',
+            };
+            throw error;
+        }
+        const agent = fetchResult.agent;
+        const resolvedAgentId = agent.id;
+        // Get pending permissions for this agent
+        const pendingPermissions = agent.pendingPermissions || [];
+        if (pendingPermissions.length === 0) {
+            await client.close();
+            const error = {
+                code: 'NO_PENDING_PERMISSIONS',
+                message: `No pending permissions for agent ${agent.id.slice(0, 7)}`,
+            };
+            throw error;
+        }
+        // Determine which permissions to deny
+        let permissionsToDeny;
+        if (options.all) {
+            permissionsToDeny = pendingPermissions;
+        }
+        else {
+            // Find permission by ID prefix
+            const permission = pendingPermissions.find((p) => p.id === reqId || p.id.startsWith(reqId));
+            if (!permission) {
+                await client.close();
+                const error = {
+                    code: 'PERMISSION_NOT_FOUND',
+                    message: `Permission request not found: ${reqId}`,
+                    details: `Available requests: ${pendingPermissions.map((p) => p.id.slice(0, 8)).join(', ')}`,
+                };
+                throw error;
+            }
+            permissionsToDeny = [permission];
+        }
+        // Deny permissions
+        const results = [];
+        for (const permission of permissionsToDeny) {
+            await client.respondToPermission(resolvedAgentId, permission.id, {
+                behavior: 'deny',
+                ...(options.message ? { message: options.message } : {}),
+                ...(options.interrupt ? { interrupt: true } : {}),
+            });
+            results.push({
+                requestId: permission.id.slice(0, 8),
+                agentId: resolvedAgentId,
+                agentShortId: resolvedAgentId.slice(0, 7),
+                name: permission.name,
+                result: 'denied',
+            });
+        }
+        await client.close();
+        return {
+            type: 'list',
+            data: results,
+            schema: permitResponseSchema,
+        };
+    }
+    catch (err) {
+        await client.close().catch(() => { });
+        // Re-throw CommandErrors
+        if (err && typeof err === 'object' && 'code' in err) {
+            throw err;
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        const error = {
+            code: 'DENY_PERMISSION_FAILED',
+            message: `Failed to deny permission: ${message}`,
+        };
+        throw error;
+    }
+}
+//# sourceMappingURL=deny.js.map

package/dist/commands/permit/deny.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deny.js","sourceRoot":"","sources":["../../../src/commands/permit/deny.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAEtE,OAAO,EAAE,oBAAoB,EAA+B,MAAM,YAAY,CAAA;AAW9E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,eAAuB,EACvB,KAAyB,EACzB,OAA0B,EAC1B,QAAiB;IAEjB,MAAM,IAAI,GAAG,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAElD,qBAAqB;IACrB,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,kDAAkD;YAC3D,OAAO,EAAE,oFAAoF;SAC9F,CAAA;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IAED,IAAI,MAAM,CAAA;IACV,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,+BAA+B,IAAI,KAAK,OAAO,EAAE;YAC1D,OAAO,EAAE,8CAA8C;SACxD,CAAA;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAA;QAC5D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACpB,MAAM,KAAK,GAAiB;gBAC1B,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,oBAAoB,eAAe,EAAE;gBAC9C,OAAO,EAAE,4CAA4C;aACtD,CAAA;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAA;QAC/B,MAAM,eAAe,GAAG,KAAK,CAAC,EAAE,CAAA;QAEhC,yCAAyC;QACzC,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAA;QACzD,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACpB,MAAM,KAAK,GAAiB;gBAC1B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;aACpE,CAAA;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QAED,sCAAsC;QACtC,IAAI,iBAA2C,CAAA;QAC/C,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,iBAAiB,GAAG,kBAAkB,CAAA;QACxC,CAAC;aAAM,CAAC;YACN,+BAA+B;YAC/B,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,KAAM,CAAC,CACjD,CAAA;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;gBACpB,MAAM,KAAK,GAAiB;oBAC1B,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,iCAAiC,KAAK,EAAE;oBACjD,OAAO,EAAE,uBAAuB,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC7F,CAAA;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;YACD,iBAAiB,GAAG,CAAC,UAAU,CAAC,CAAA;QAClC,CAAC;QAED,mBAAmB;QACnB,MAAM,OAAO,GAA6B,EAAE,CAAA;QAC5C,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;YAC3C,MAAM,MAAM,CAAC,mBAAmB,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,EAAE;gBAC/D,QAAQ,EAAE,MAAM;gBAChB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,CAAC,CAAA;YACF,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpC,OAAO,EAAE,eAAe;gBACxB,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzC,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAEpB,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,oBAAoB;SAC7B,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpC,yBAAyB;QACzB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YACpD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,8BAA8B,OAAO,EAAE;SACjD,CAAA;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/commands/permit/index.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function createPermitCommand(): Command;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/permit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/permit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAMnC,wBAAgB,mBAAmB,IAAI,OAAO,CAkC7C"}

package/dist/commands/permit/index.js

@@ -0,0 +1,37 @@
+import { Command } from 'commander';
+import { runLsCommand } from './ls.js';
+import { runAllowCommand } from './allow.js';
+import { runDenyCommand } from './deny.js';
+import { withOutput } from '../../output/index.js';
+export function createPermitCommand() {
+    const permit = new Command('permit').description('Manage permission requests');
+    permit
+        .command('ls')
+        .description('List all pending permissions')
+        .option('--json', 'Output in JSON format')
+        .option('--host <host>', 'Daemon host:port (default: localhost:6767)')
+        .action(withOutput(runLsCommand));
+    permit
+        .command('allow')
+        .description('Allow a permission request')
+        .argument('<agent>', 'Agent ID (or prefix)')
+        .argument('[req_id]', 'Permission request ID (optional if --all)')
+        .option('--all', 'Allow all pending permissions for this agent')
+        .option('--input <json>', 'Modified input parameters (JSON)')
+        .option('--json', 'Output in JSON format')
+        .option('--host <host>', 'Daemon host:port (default: localhost:6767)')
+        .action(withOutput(runAllowCommand));
+    permit
+        .command('deny')
+        .description('Deny a permission request')
+        .argument('<agent>', 'Agent ID (or prefix)')
+        .argument('[req_id]', 'Permission request ID (optional if --all)')
+        .option('--all', 'Deny all pending permissions for this agent')
+        .option('--message <msg>', 'Denial reason message')
+        .option('--interrupt', 'Stop agent after denial')
+        .option('--json', 'Output in JSON format')
+        .option('--host <host>', 'Daemon host:port (default: localhost:6767)')
+        .action(withOutput(runDenyCommand));
+    return permit;
+}
+//# sourceMappingURL=index.js.map