@pdpp/cli 0.0.0

package/README.md

@@ -0,0 +1,40 @@
+# @pdpp/cli
+
+Command-line tools for PDPP providers.
+
+## Status
+
+This package is the public npm home for the `pdpp` command. The initial package
+scaffold is intentionally narrow: package startup, help output, and shared
+package metadata are in place before the no-owner-token `pdpp connect` flow is
+advertised by provider metadata or hosted docs.
+
+## Install
+
+```bash
+npx -y @pdpp/cli@beta --help
+```
+
+Use the `beta` dist-tag until PDPP intentionally enables stable `latest`
+publication.
+
+## Ownership And Publishing
+
+The intended npm scope is `@pdpp`, owned by the durable PDPP/Vana project
+organization rather than an individual maintainer. Normal publication is handled
+by semantic-release from GitHub Actions using npm trusted publishing/OIDC and
+registry provenance.
+
+After the package exists on npm, configure the trusted publisher with npm CLI
+11.5.1+:
+
+```bash
+npm trust github @pdpp/cli --repo vana-com/pdpp --file semantic-release.yml
+npm trust list @pdpp/cli
+```
+
+The existing organization `NPM_TOKEN` may be used only to bootstrap first
+package creation or recover from an emergency publishing incident. It is not the
+steady-state release credential. If used, it must be granular,
+automation-scoped, time-limited, rotated after use, and removed from the normal
+release path once npm trusted publishing is verified.

package/bin/pdpp.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+
+import { runCli } from '../src/index.js';
+
+const exitCode = await runCli(process.argv.slice(2), {
+  stderr: process.stderr,
+  stdout: process.stdout,
+});
+
+process.exitCode = exitCode;

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@pdpp/cli",
+  "version": "0.0.0",
+  "description": "Command-line tools for PDPP providers.",
+  "type": "module",
+  "bin": {
+    "pdpp": "./bin/pdpp.js"
+  },
+  "exports": {
+    ".": "./src/index.js",
+    "./package-info": "./src/package-info.js"
+  },
+  "files": [
+    "bin/",
+    "src/",
+    "README.md"
+  ],
+  "scripts": {
+    "test": "node --test test/*.test.js",
+    "verify": "pnpm test",
+    "pack:dry-run": "pnpm pack --dry-run"
+  },
+  "keywords": [
+    "pdpp",
+    "personal-data",
+    "oauth",
+    "cli"
+  ],
+  "license": "ISC",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vana-com/pdpp.git",
+    "directory": "packages/cli"
+  },
+  "bugs": {
+    "url": "https://github.com/vana-com/pdpp/issues"
+  },
+  "homepage": "https://github.com/vana-com/pdpp#readme",
+  "engines": {
+    "node": ">=22.14.0"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": false,
+    "registry": "https://registry.npmjs.org/",
+    "tag": "beta"
+  }
+}

package/src/index.js

@@ -0,0 +1,77 @@
+import {
+  createPdppCliCommand,
+  getPdppCliPackageInfo,
+  PDPP_CLI_BIN_NAME,
+  PDPP_CLI_PACKAGE_NAME,
+} from './package-info.js';
+
+const HELP = `PDPP CLI
+
+Usage:
+  ${PDPP_CLI_BIN_NAME} --help
+  ${PDPP_CLI_BIN_NAME} package-info [--provider-url <url>]
+  ${PDPP_CLI_BIN_NAME} connect <provider-url>
+
+Agent access:
+  ${createPdppCliCommand()}
+
+Notes:
+  connect is gated until the reference AS supports no-owner-token scoped grant completion.
+  Do not ask users for owner bearer tokens for routine delegated access.
+`;
+
+export async function runCli(argv, io = { stdout: process.stdout, stderr: process.stderr }) {
+  const [command, ...rest] = argv;
+
+  if (!command || command === '--help' || command === '-h' || command === 'help') {
+    io.stdout.write(`${HELP}\n`);
+    return 0;
+  }
+
+  if (command === 'package-info') {
+    const providerUrl = readOption(rest, '--provider-url');
+    io.stdout.write(`${JSON.stringify(getPdppCliPackageInfo(providerUrl), null, 2)}\n`);
+    return 0;
+  }
+
+  if (command === 'connect') {
+    const providerUrl = rest[0];
+    if (!providerUrl) {
+      io.stderr.write('Usage: pdpp connect <provider-url>\n');
+      return 64;
+    }
+
+    const normalizedProviderUrl = normalizeProviderUrl(providerUrl);
+    if (!normalizedProviderUrl) {
+      io.stderr.write(`Invalid provider URL: ${providerUrl}\n`);
+      return 64;
+    }
+
+    io.stderr.write(
+      `${PDPP_CLI_PACKAGE_NAME} connect is not enabled yet. The reference AS still needs no-owner-token scoped grant completion before this command can be advertised.\n`
+    );
+    return 69;
+  }
+
+  io.stderr.write(`Unknown command: ${command}\n\n${HELP}\n`);
+  return 64;
+}
+
+export function normalizeProviderUrl(value) {
+  try {
+    const parsed = new URL(value.includes('://') ? value : `https://${value}`);
+    parsed.hash = '';
+    return parsed.origin;
+  } catch {
+    return null;
+  }
+}
+
+function readOption(argv, name) {
+  const index = argv.indexOf(name);
+  if (index === -1) {
+    return undefined;
+  }
+
+  return argv[index + 1];
+}

package/src/package-info.js

@@ -0,0 +1,19 @@
+export const PDPP_CLI_PACKAGE_NAME = '@pdpp/cli';
+export const PDPP_CLI_BIN_NAME = 'pdpp';
+export const PDPP_CLI_VERSION_POLICY = 'beta';
+export const PDPP_CLI_PACKAGE_SPECIFIER = `${PDPP_CLI_PACKAGE_NAME}@${PDPP_CLI_VERSION_POLICY}`;
+
+export function createPdppCliCommand(providerUrl = '<provider-url>') {
+  return `npx -y ${PDPP_CLI_PACKAGE_SPECIFIER} connect ${providerUrl}`;
+}
+
+export function getPdppCliPackageInfo(providerUrl) {
+  return {
+    packageName: PDPP_CLI_PACKAGE_NAME,
+    packageSpecifier: PDPP_CLI_PACKAGE_SPECIFIER,
+    binName: PDPP_CLI_BIN_NAME,
+    versionPolicy: PDPP_CLI_VERSION_POLICY,
+    runCommand: createPdppCliCommand(providerUrl),
+    noOwnerToken: true,
+  };
+}