@permission-slip/cli 0.1.0

package/dist/config/store.js

@@ -0,0 +1,73 @@
+/**
+ * Manages ~/.permission-slip/ — config directory and registrations file.
+ *
+ * Registrations are stored as:
+ *   ~/.permission-slip/registrations.json
+ *
+ * Key files are stored as:
+ *   ~/.ssh/permission_slip_agent        (private key, OpenSSH format)
+ *   ~/.ssh/permission_slip_agent.pub    (public key)
+ */
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+// Paths can be overridden via environment variables for testing.
+export const CONFIG_DIR = process.env["PS_CLI_TEST_CONFIG_DIR"] ??
+    path.join(os.homedir(), ".permission-slip");
+export const REGISTRATIONS_FILE = path.join(CONFIG_DIR, "registrations.json");
+export const SSH_DIR = process.env["PS_CLI_TEST_SSH_DIR"] ?? path.join(os.homedir(), ".ssh");
+export const PRIVATE_KEY_FILE = process.env["PS_CLI_TEST_PRIVATE_KEY"] ??
+    path.join(SSH_DIR, "permission_slip_agent");
+export const PUBLIC_KEY_FILE = process.env["PS_CLI_TEST_PUBLIC_KEY"] ??
+    path.join(SSH_DIR, "permission_slip_agent.pub");
+export function ensureConfigDir() {
+    if (!fs.existsSync(CONFIG_DIR)) {
+        fs.mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });
+    }
+}
+export function loadRegistrations() {
+    if (!fs.existsSync(REGISTRATIONS_FILE)) {
+        return [];
+    }
+    try {
+        const raw = fs.readFileSync(REGISTRATIONS_FILE, "utf-8");
+        const data = JSON.parse(raw);
+        return data.registrations ?? [];
+    }
+    catch {
+        return [];
+    }
+}
+export function saveRegistration(reg) {
+    ensureConfigDir();
+    // Normalize: strip trailing slashes so lookups are consistent regardless of
+    // whether the caller passed "https://host" or "https://host/".
+    const normalized = { ...reg, server: reg.server.replace(/\/+$/, "") };
+    const existing = loadRegistrations();
+    // Upsert: replace existing entry for same server+agent_id if present
+    const idx = existing.findIndex((r) => r.server === normalized.server && r.agent_id === normalized.agent_id);
+    if (idx >= 0) {
+        existing[idx] = normalized;
+    }
+    else {
+        existing.push(normalized);
+    }
+    const data = { registrations: existing };
+    fs.writeFileSync(REGISTRATIONS_FILE, JSON.stringify(data, null, 2) + "\n", {
+        mode: 0o600,
+    });
+}
+/**
+ * Find a registration for the given server. If multiple registrations exist
+ * for the same server (different agent IDs), returns the most recently
+ * registered one.
+ */
+export function findRegistration(server) {
+    const normalizedServer = server.replace(/\/+$/, "");
+    const regs = loadRegistrations();
+    const matching = regs.filter((r) => r.server === normalizedServer);
+    if (matching.length === 0)
+        return undefined;
+    return matching.sort((a, b) => new Date(b.registered_at).getTime() - new Date(a.registered_at).getTime())[0];
+}
+//# sourceMappingURL=store.js.map

package/dist/config/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/config/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B,iEAAiE;AACjE,MAAM,CAAC,MAAM,UAAU,GACrB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,OAAO,GAClB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAC3B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,eAAe,GAC1B,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;AAElD,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QAClD,OAAO,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAiB;IAChD,eAAe,EAAE,CAAC;IAClB,4EAA4E;IAC5E,+DAA+D;IAC/D,MAAM,UAAU,GAAiB,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IACpF,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,qEAAqE;IACrE,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,CAC5E,CAAC;IACF,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,QAAQ,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAAsB,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IAC5D,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QACzE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAC5E,CAAC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+/**
+ * @permission-slip/cli — agent-facing CLI for Permission Slip
+ *
+ * Usage:
+ *   npx @permission-slip/cli <command> [options]
+ *
+ * Commands:
+ *   register      Generate keys and register with a Permission Slip server
+ *   verify        Complete registration with the confirmation code
+ *   status        Show current registration state
+ *   capabilities  List available action configurations and standing approvals
+ *   connectors    List available connectors
+ *   request       Request approval for an action
+ *   execute       Execute an approved action
+ *   config        Show saved configuration and registrations
+ *   whoami        Show agent identity and registration info
+ *
+ * All commands output compact JSON by default. Pass --pretty for pretty-printed JSON.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;GAkBG"}

package/dist/index.js

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+/**
+ * @permission-slip/cli — agent-facing CLI for Permission Slip
+ *
+ * Usage:
+ *   npx @permission-slip/cli <command> [options]
+ *
+ * Commands:
+ *   register      Generate keys and register with a Permission Slip server
+ *   verify        Complete registration with the confirmation code
+ *   status        Show current registration state
+ *   capabilities  List available action configurations and standing approvals
+ *   connectors    List available connectors
+ *   request       Request approval for an action
+ *   execute       Execute an approved action
+ *   config        Show saved configuration and registrations
+ *   whoami        Show agent identity and registration info
+ *
+ * All commands output compact JSON by default. Pass --pretty for pretty-printed JSON.
+ */
+import { Command } from "commander";
+import { registerCommand } from "./commands/register.js";
+import { verifyCommand } from "./commands/verify.js";
+import { statusCommand } from "./commands/status.js";
+import { capabilitiesCommand } from "./commands/capabilities.js";
+import { connectorsCommand } from "./commands/connectors.js";
+import { requestCommand } from "./commands/request.js";
+import { executeCommand } from "./commands/execute.js";
+import { configCommand } from "./commands/config.js";
+import { whoamiCommand } from "./commands/whoami.js";
+const program = new Command();
+program
+    .name("permission-slip")
+    .description("Agent-facing CLI for Permission Slip — register, verify, and interact with Permission Slip servers.\n\n" +
+    "All commands output compact JSON by default. Pass --pretty for pretty-printed JSON.\n\n" +
+    "Quick start:\n" +
+    "  1. Register:  permission-slip register --invite-code <code>\n" +
+    "  2. Verify:    permission-slip verify --code <confirmation_code>\n" +
+    "  3. Discover:  permission-slip capabilities")
+    .version("0.1.0");
+registerCommand(program);
+verifyCommand(program);
+statusCommand(program);
+capabilitiesCommand(program);
+connectorsCommand(program);
+requestCommand(program);
+executeCommand(program);
+configCommand(program);
+whoamiCommand(program);
+program.parse(process.argv);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,iBAAiB,CAAC;KACvB,WAAW,CACV,yGAAyG;IACzG,yFAAyF;IACzF,gBAAgB;IAChB,iEAAiE;IACjE,qEAAqE;IACrE,8CAA8C,CAC/C;KACA,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC3B,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,aAAa,CAAC,OAAO,CAAC,CAAC;AAEvB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/output.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Shared output helpers. All commands output JSON by default, or formatted
+ * text when --pretty is passed.
+ */
+export interface OutputOptions {
+    pretty: boolean;
+}
+export declare function output(data: unknown, opts: OutputOptions): void;
+//# sourceMappingURL=output.d.ts.map

package/dist/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI,CAS/D"}

package/dist/output.js

@@ -0,0 +1,16 @@
+/**
+ * Shared output helpers. All commands output JSON by default, or formatted
+ * text when --pretty is passed.
+ */
+export function output(data, opts) {
+    // JSON.stringify(undefined) returns undefined (not a string), which would
+    // print the literal text "undefined" — not valid JSON. Normalise to null.
+    const value = data !== undefined ? data : null;
+    if (opts.pretty) {
+        console.log(JSON.stringify(value, null, 2));
+    }
+    else {
+        console.log(JSON.stringify(value));
+    }
+}
+//# sourceMappingURL=output.js.map

package/dist/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,UAAU,MAAM,CAAC,IAAa,EAAE,IAAmB;IACvD,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/util/shell.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Shell-quoting utilities for generating safe command hints.
+ *
+ * These are used to produce next_step command strings that agents can safely
+ * copy and run in a POSIX shell, even when values contain metacharacters.
+ */
+/**
+ * Wraps a string in single quotes, escaping any embedded single quotes.
+ * Produces output safe for POSIX /bin/sh: `'value'` or `'it'\''s ok'`.
+ */
+export declare function shellQuote(s: string): string;
+//# sourceMappingURL=shell.d.ts.map

package/dist/util/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/util/shell.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5C"}

package/dist/util/shell.js

@@ -0,0 +1,14 @@
+/**
+ * Shell-quoting utilities for generating safe command hints.
+ *
+ * These are used to produce next_step command strings that agents can safely
+ * copy and run in a POSIX shell, even when values contain metacharacters.
+ */
+/**
+ * Wraps a string in single quotes, escaping any embedded single quotes.
+ * Produces output safe for POSIX /bin/sh: `'value'` or `'it'\''s ok'`.
+ */
+export function shellQuote(s) {
+    return `'${s.replace(/'/g, "'\\''")}'`;
+}
+//# sourceMappingURL=shell.js.map

package/dist/util/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/util/shell.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@permission-slip/cli",
+  "version": "0.1.0",
+  "description": "Agent-facing CLI for Permission Slip — register, verify, and interact with Permission Slip servers",
+  "license": "MIT",
+  "type": "module",
+  "engines": {
+    "node": ">=18"
+  },
+  "bin": {
+    "permission-slip": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "node --experimental-vm-modules node_modules/.bin/jest --passWithNoTests",
+    "test:watch": "node --experimental-vm-modules node_modules/.bin/jest --watch",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "commander": "^12.1.0"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.14",
+    "@types/node": "^22.0.0",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.3.0",
+    "typescript": "^5.7.2"
+  },
+  "jest": {
+    "preset": "ts-jest/presets/default-esm",
+    "testEnvironment": "node",
+    "globalSetup": "<rootDir>/tests/setup.ts",
+    "globalTeardown": "<rootDir>/tests/teardown.ts",
+    "moduleNameMapper": {
+      "^(\\.{1,2}/.*)\\.js$": "$1"
+    },
+    "transform": {
+      "^.+\\.tsx?$": [
+        "ts-jest",
+        {
+          "useESM": true,
+          "diagnostics": {
+            "ignoreCodes": [151002]
+          }
+        }
+      ]
+    }
+  }
+}