@usegraft/cli 0.1.1 → 0.2.0

package/README.md

@@ -0,0 +1,60 @@
+# @usegraft/cli
+
+> The `graft` command. Scaffold a project, compile authored content, serve the runtime, split your database credentials.
+
+Part of [Graft](https://github.com/AndersonDesign1/graft), a CMS built so an AI agent is the primary operator.
+
+## Install
+
+```bash
+npm i -D @usegraft/cli
+# or run it without installing
+npx graft init
+```
+
+## Quickstart, with no database
+
+A content project needs no services at all. `graft compile` writes the index to a SQLite artifact your app reads embedded.
+
+```bash
+npx graft init      # scaffolds graft.config.ts, content/, llms.txt
+npx graft compile   # → .graft/index.db
+```
+
+Move to Postgres by setting `DATABASE_URL` and changing one line in `graft.config.ts`:
+
+```ts
+export const index = "postgres";
+```
+
+## Commands
+
+| Command                        | Does                                                                                           |
+| ------------------------------ | ---------------------------------------------------------------------------------------------- |
+| `graft init`                   | Scaffold a project                                                                             |
+| `graft compile`                | Validate authored MDX and project it into the index                                            |
+| `graft dev`                    | Recompile on save                                                                              |
+| `graft serve`                  | Run the headless runtime: typed functions, MCP over HTTP, `/healthz`                           |
+| `graft studio`                 | Open the optional editing UI                                                                   |
+| `graft mcp`                    | Serve MCP on stdio, for `.mcp.json`                                                            |
+| `graft add <item>`             | Copy a registry primitive into your repo, shadcn-style                                         |
+| `graft approve <id>`           | Decide a pending approval. Operator credential only                                            |
+| `graft harden <role>`          | Grant a Postgres role exactly what a deployment needs, and nothing that can decide an approval |
+| `graft branch` / `graft merge` | Copy-on-write content branches                                                                 |
+| `graft migrate`                | Run content codemods when the schema changes                                                   |
+
+Run `graft <command> --help` for flags.
+
+## Two credentials
+
+`graft harden` splits the operator credential from the runtime one. The runtime can serve, project content, and request approvals. It can never decide one, and Postgres enforces that rather than the application.
+
+```bash
+graft harden graft_runtime
+# deploy with the runtime role's URL as DATABASE_URL
+# keep the operator URL for compile, migrate, merge and approve
+```
+
+---
+
+MIT. [Repository](https://github.com/AndersonDesign1/graft) · [Changelog](https://github.com/AndersonDesign1/graft/blob/feat/core/packages/cli/CHANGELOG.md) · [Security policy](https://github.com/AndersonDesign1/graft/blob/feat/core/SECURITY.md)

package/dist/{add-UBAZMSP7.js → add-ASXTMYCX.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   findConfig
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/add.ts
 import { dirname } from "path";

package/dist/{approvals-Z3EOK5AM.js → approvals-MN3IS3FO.js}

@@ -2,7 +2,7 @@
 import {
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/approvals.ts
 import { userInfo } from "os";
@@ -33,12 +33,10 @@ async function decideCommand(options) {
   ]);
   const handle = createDb(url);
   try {
-    const row = await decideApproval(
-      handle.db,
-      options.id,
-      options.decision,
-      options.decidedBy ?? operatorName()
-    );
+    const row = await decideApproval(handle.db, options.id, options.decision, {
+      kind: "human",
+      id: operatorName()
+    });
     if (!row) {
       throw new GraftError({
         code: "APPROVAL_INVALID",

package/dist/{asset-FPEL463J.js → asset-DMNX5JBZ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   loadProjectEnv
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/asset.ts
 import { readFileSync, statSync } from "fs";

package/dist/{branch-HRG46YIL.js → branch-IDY42TAV.js}

@@ -2,7 +2,7 @@
 import {
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/branch.ts
 import { GraftError } from "@usegraft/contracts";

package/dist/{chunk-BUPFXTUG.js → chunk-2NH6KYTL.js}

@@ -3,7 +3,7 @@
 // src/config.ts
 import { existsSync } from "fs";
 import { dirname, join, resolve } from "path";
-import { GraftError } from "@usegraft/contracts";
+import { GraftError, STATIC_INDEX_DEFAULT_PATH } from "@usegraft/contracts";
 import { createJiti } from "jiti";
 var CONFIG_FILENAMES = [
   "graft.config.ts",
@@ -97,6 +97,7 @@ async function loadConfig(configPath) {
   const projectDir = dirname(configPath);
   const index = parseIndexConfig(mod.index, projectDir, configPath);
   assertStaticSupports(index, collections, functions, configPath);
+  const mdxTrust = parseMdxTrust(mod.mdxTrust, configPath);
   const contentDirSetting = typeof mod.contentDir === "string" ? mod.contentDir : "content";
   const migrationsDirSetting = typeof mod.migrationsDir === "string" ? mod.migrationsDir : "migrations";
   return {
@@ -106,9 +107,20 @@ async function loadConfig(configPath) {
     migrationsDir: resolve(projectDir, migrationsDirSetting),
     index,
     collections,
-    functions
+    functions,
+    mdxTrust
   };
 }
+function parseMdxTrust(value, configPath) {
+  if (value === void 0) return "restricted";
+  if (value === "restricted" || value === "full") return value;
+  throw new GraftError({
+    code: "CONFIG_INVALID",
+    message: `${configPath} exports \`mdxTrust\` as ${JSON.stringify(value)}, which is not "restricted" or "full".`,
+    fix: 'Export `mdxTrust = "restricted"` (the default: `{\u2026}` expressions and `import` are refused in authored bodies) or `mdxTrust = "full"` (every author has commit access, so code review is the control). Omit the export to keep the default.',
+    details: { mdxTrust: value }
+  });
+}
 function assertStaticSupports(index, collections, functions, configPath) {
   if (index.driver !== "static") return;
   const dbCollections = Object.values(collections).filter((collection) => collection.authority === "db-authoritative").map((collection) => collection.name);
@@ -125,18 +137,17 @@ function assertStaticSupports(index, collections, functions, configPath) {
     details: { dbCollections, functions: functionNames }
   });
 }
-var STATIC_INDEX_DEFAULT = ".graft/index.db";
 function parseIndexConfig(value, projectDir, configPath) {
   if (value === void 0 || value === "postgres") return { driver: "postgres" };
   if (value === "static") {
-    return { driver: "static", path: resolve(projectDir, STATIC_INDEX_DEFAULT) };
+    return { driver: "static", path: resolve(projectDir, STATIC_INDEX_DEFAULT_PATH) };
   }
   if (typeof value === "object" && value !== null && !Array.isArray(value)) {
     const driver = value.driver;
     const path = value.path;
     if (driver === "postgres") return { driver: "postgres" };
     if (driver === "static" && (path === void 0 || typeof path === "string")) {
-      return { driver: "static", path: resolve(projectDir, path ?? STATIC_INDEX_DEFAULT) };
+      return { driver: "static", path: resolve(projectDir, path ?? STATIC_INDEX_DEFAULT_PATH) };
     }
   }
   throw new GraftError({

package/dist/{chunk-LTFTDG6Z.js → chunk-6Z27SGVO.js}

@@ -4,7 +4,7 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/migrate.ts
 import { existsSync, readdirSync, statSync } from "fs";
@@ -99,6 +99,7 @@ Author one as migrations/0001-<name>.ts default-exporting defineContentMigration
             db: branch.db,
             contentDir: config.contentDir,
             collections: config.collections,
+            mdxTrust: config.mdxTrust,
             branchId: writeBranch,
             gitSha
           });

package/dist/{chunk-KZ3FDWUK.js → chunk-GDTOV3DU.js}

@@ -7,7 +7,7 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/compile.ts
 import { GraftError } from "@usegraft/contracts";
@@ -29,6 +29,7 @@ async function compileCommand(options) {
     const result = await compileStatic({
       contentDir: config.contentDir,
       collections: config.collections,
+      mdxTrust: config.mdxTrust,
       indexPath: config.index.path
     });
     console.log(formatCompileResult(result));
@@ -52,6 +53,7 @@ async function compileCommand(options) {
         db: branch.db,
         contentDir: config.contentDir,
         collections: config.collections,
+        mdxTrust: config.mdxTrust,
         branchId: scopeWriteBranch(branch.scope),
         pruneUnknown: options.pruneUnknown
       });

package/dist/{chunk-TUWL7WFD.js → chunk-U25NVB6W.js}

@@ -4,13 +4,14 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/serve.ts
 import { execFileSync } from "child_process";
 import { createServer } from "http";
 import { createActorResolver } from "@usegraft/auth";
 import { GraftError } from "@usegraft/contracts";
+import { setRequestPeer } from "@usegraft/core";
 function createServeRouter(routes) {
   return async (request) => {
     const { pathname } = new URL(request.url);
@@ -41,9 +42,34 @@ var HOP_BY_HOP = /* @__PURE__ */ new Set([
   "upgrade",
   "proxy-connection"
 ]);
-function createNodeListener(handler) {
+function allowedHostsFor(host) {
+  if (host === "0.0.0.0" || host === "::" || host === "") return void 0;
+  if (host === "127.0.0.1" || host === "localhost" || host === "::1") {
+    return ["127.0.0.1", "localhost", "[::1]"];
+  }
+  return [host];
+}
+function hostname(host) {
+  const trimmed = host.trim().toLowerCase();
+  if (trimmed.startsWith("[")) return trimmed.slice(0, trimmed.indexOf("]") + 1);
+  const colon = trimmed.lastIndexOf(":");
+  return colon === -1 ? trimmed : trimmed.slice(0, colon);
+}
+function createNodeListener(handler, options = {}) {
+  const allowed = options.allowedHosts?.map(hostname);
   return async (req, res) => {
     try {
+      if (allowed && !allowed.includes(hostname(req.headers.host ?? ""))) {
+        res.writeHead(400, { "content-type": "application/json" });
+        res.end(
+          JSON.stringify({
+            error: "INPUT_VALIDATION_FAILED",
+            message: `This server does not answer to Host "${req.headers.host ?? ""}".`,
+            fix: `Reach it at one of: ${allowed.join(", ")}. A mismatched Host is either a misconfigured proxy or a DNS-rebinding attempt.`
+          })
+        );
+        return;
+      }
       const chunks = [];
       for await (const chunk of req) chunks.push(chunk);
       const body = Buffer.concat(chunks);
@@ -59,6 +85,8 @@ function createNodeListener(handler) {
         headers,
         body: method === "GET" || method === "HEAD" || body.length === 0 ? void 0 : body
       });
+      const peer = req.socket.remoteAddress;
+      if (peer) setRequestPeer(request, peer);
       const response = await handler(request);
       const outHeaders = {};
       response.headers.forEach((value, key) => {
@@ -120,7 +148,10 @@ async function startServe(options) {
     devTokens: devToken ? { [devToken]: { kind: "agent", id: "graft-serve", scopes } } : void 0
   });
   const approvalPolicy = process.env.GRAFT_APPROVAL_POLICY === "human" ? "human" : "none";
-  const requireMcpActor = process.env.GRAFT_MCP_REQUIRE_AUTH === "1";
+  const host = options.host ?? process.env.HOST ?? "127.0.0.1";
+  const loopback = host === "127.0.0.1" || host === "localhost" || host === "::1";
+  const anonymousOptIn = process.env.GRAFT_MCP_ALLOW_ANONYMOUS === "1";
+  const allowAnonymousMcp = loopback || anonymousOptIn;
   const functions = config.functions ?? {};
   const gitSha = localGitSha(options.cwd);
   const fnHandler = createFunctionsHandler({
@@ -138,11 +169,12 @@ async function startServe(options) {
     contentDir: config.contentDir,
     collections: config.collections,
     functions,
+    mdxTrust: config.mdxTrust,
     db: branch.db,
     branchId: writeBranch,
     scope: branch.scope,
     actor: resolveActor,
-    requireActor: requireMcpActor
+    allowAnonymous: allowAnonymousMcp
   });
   const health = async () => {
     try {
@@ -167,7 +199,6 @@ async function startServe(options) {
       { status: 200, headers: { "content-type": "application/json" } }
     );
   };
-  const host = options.host ?? process.env.HOST ?? "127.0.0.1";
   const requestedPort = options.port ?? Number(process.env.PORT ?? 3903);
   if (!Number.isInteger(requestedPort) || requestedPort < 0 || requestedPort > 65535) {
     await branch.close();
@@ -178,31 +209,39 @@ async function startServe(options) {
       fix: "Pass --port <0-65535> (0 picks a free port) or set PORT."
     });
   }
-  const loopback = host === "127.0.0.1" || host === "localhost" || host === "::1";
-  if (!loopback && !requireMcpActor && issuers.length === 0 && !devToken) {
+  if (!loopback && anonymousOptIn) {
+    console.warn(
+      "[graft serve] WARNING: GRAFT_MCP_ALLOW_ANONYMOUS=1 while bound beyond loopback \u2014 unauthenticated callers can write content, upload assets and decide approvals. Only do this behind an auth proxy you control."
+    );
+  } else if (!loopback && issuers.length === 0 && !devToken) {
     console.warn(
-      "[graft serve] WARNING: binding beyond loopback with no identity configured \u2014 set GRAFT_MCP_REQUIRE_AUTH=1 and provide GRAFT_DEV_TOKEN or GRAFT_TRUSTED_ISSUERS before exposing this to a network."
+      "[graft serve] WARNING: binding beyond loopback with no identity configured \u2014 MCP will refuse every caller, because there is nothing to authenticate them against. Set GRAFT_DEV_TOKEN or GRAFT_TRUSTED_ISSUERS."
     );
   }
   let studioHandler;
   if (studioMod) {
-    const authorize = !loopback && (devToken || issuers.length > 0) ? async (request) => {
+    const authenticate = !loopback && (devToken || issuers.length > 0) ? async (request) => {
       const actor = await resolveActor(request);
-      return actor.kind !== "anonymous";
-    } : !loopback ? () => false : void 0;
+      if (actor.kind === "anonymous" || !actor.id) return null;
+      return { kind: actor.kind, id: actor.id, scopes: actor.scopes ?? [] };
+    } : !loopback ? () => null : void 0;
     studioHandler = studioMod.createStudioHandler({
       db: branch.db,
       collections: config.collections,
       contentDir: config.contentDir,
+      mdxTrust: config.mdxTrust,
       defaultBranch: writeBranch,
-      decidedBy: "studio-serve",
+      // Only reached on a loopback mount, where there is no caller identity to
+      // attribute to. Off loopback the authenticated principal is used instead.
+      decider: { kind: "agent", id: "studio-serve" },
       uiBasePath: "/studio",
-      authorize
+      authenticate
     });
   }
   const server = createServer(
     createNodeListener(
-      createServeRouter({ fn: fnHandler, mcp: mcpHandler, health, studio: studioHandler })
+      createServeRouter({ fn: fnHandler, mcp: mcpHandler, health, studio: studioHandler }),
+      { allowedHosts: allowedHostsFor(host) }
     )
   );
   await new Promise((resolve, reject) => {
@@ -250,6 +289,7 @@ async function serveCommand(options) {
 
 export {
   createServeRouter,
+  allowedHostsFor,
   createNodeListener,
   startServe,
   serveCommand

package/dist/{compilations-6P45MPAE.js → compilations-72DJ2VEP.js}

@@ -2,7 +2,7 @@
 import {
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/compilations.ts
 async function compilationsListCommand(options) {

package/dist/{compile-AAUC4G7H.js → compile-TCBGZZAU.js}

@@ -2,9 +2,9 @@
 import {
   assertNoStaticBranch,
   compileCommand
-} from "./chunk-KZ3FDWUK.js";
+} from "./chunk-GDTOV3DU.js";
 import "./chunk-GPA66AP5.js";
-import "./chunk-BUPFXTUG.js";
+import "./chunk-2NH6KYTL.js";
 export {
   assertNoStaticBranch,
   compileCommand

package/dist/{content-DY2YI3LT.js → content-VLKNYIHL.js}

@@ -4,7 +4,7 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/content.ts
 async function contentListCommand(options) {

package/dist/{db-VGDWG4QA.js → db-WACSH3HN.js}

@@ -4,7 +4,7 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/db.ts
 import { GraftError } from "@usegraft/contracts";

package/dist/{dev-MX7TQOJ2.js → dev-4YSMWIAS.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   assertNoStaticBranch
-} from "./chunk-KZ3FDWUK.js";
+} from "./chunk-GDTOV3DU.js";
 import {
   formatCompileResult,
   printGraftError
@@ -12,7 +12,7 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/dev.ts
 import { existsSync, watch } from "fs";
@@ -42,6 +42,7 @@ async function devCommand(options) {
   const branch = control !== void 0 && url !== void 0 ? await resolveBranchHandle(control.db, options.branchId ?? "main", { databaseUrl: url }) : void 0;
   const writeBranch = branch !== void 0 ? scopeWriteBranch(branch.scope) : "main";
   let timer;
+  let rewatchContent;
   let compiling = false;
   let dirty = false;
   let configDirty = false;
@@ -54,17 +55,21 @@ async function devCommand(options) {
     try {
       if (configDirty) {
         configDirty = false;
+        const previousContentDir = config.contentDir;
         config = await loadConfig(configPath);
         console.log(`reloaded ${basename(configPath)}`);
+        if (config.contentDir !== previousContentDir) rewatchContent?.(config.contentDir);
       }
       const result = branch !== void 0 ? await compile({
         db: branch.db,
         contentDir: config.contentDir,
         collections: config.collections,
+        mdxTrust: config.mdxTrust,
         branchId: writeBranch
       }) : await compileStatic({
         contentDir: config.contentDir,
         collections: config.collections,
+        mdxTrust: config.mdxTrust,
         indexPath: config.index.path
       });
       console.log(formatCompileResult(result));
@@ -85,12 +90,17 @@ async function devCommand(options) {
     timer = setTimeout(() => void runCompile(), DEBOUNCE_MS);
   };
   await runCompile();
+  let contentWatcher = watch(config.contentDir, { recursive: true }, () => schedule());
   const watchers = [
-    watch(config.contentDir, { recursive: true }, () => schedule()),
     watch(config.projectDir, (_event, filename) => {
       if (filename && CONFIG_FILENAMES.includes(filename)) schedule(true);
     })
   ];
+  rewatchContent = (dir) => {
+    contentWatcher.close();
+    contentWatcher = watch(dir, { recursive: true }, () => schedule());
+    console.log(`now watching ${relative(options.cwd, dir) || "."}`);
+  };
   const watchedContent = relative(options.cwd, config.contentDir) || ".";
   const branchLabel = branch === void 0 ? "static index" : branch.scope.kind === "physical" ? `${branch.name} (neon)` : options.branchId ?? "main";
   console.log(
@@ -99,6 +109,7 @@ async function devCommand(options) {
   await new Promise((resolveStopped) => {
     const stop = () => {
       clearTimeout(timer);
+      contentWatcher.close();
       for (const watcher of watchers) watcher.close();
       resolveStopped();
     };

package/dist/{harden-HQHONZPH.js → harden-QASY2KMI.js}

@@ -2,7 +2,7 @@
 import {
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/harden.ts
 async function hardenCommand(options) {

package/dist/index.js

@@ -156,7 +156,7 @@ async function run(argv, options = {}) {
     const args = parseArgs(rest);
     switch (command) {
       case "init": {
-        const { initCommand } = await import("./init-3H2IP5US.js");
+        const { initCommand } = await import("./init-TRPSGUYW.js");
         const result = initCommand({
           targetDir: args.positionals[0] ?? cwd,
           driver: args.initDriver
@@ -187,12 +187,12 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "compile": {
-        const { compileCommand } = await import("./compile-AAUC4G7H.js");
+        const { compileCommand } = await import("./compile-TCBGZZAU.js");
         await compileCommand({ cwd, branchId: args.branchId, pruneUnknown: args.pruneUnknown });
         return 0;
       }
       case "dev": {
-        const { devCommand } = await import("./dev-MX7TQOJ2.js");
+        const { devCommand } = await import("./dev-4YSMWIAS.js");
         await devCommand({ cwd, branchId: args.branchId });
         return 0;
       }
@@ -203,7 +203,7 @@ async function run(argv, options = {}) {
             subcommand ? `unknown db subcommand "${subcommand}" \u2014 the only one is \`graft db migrate\`` : "usage: graft db migrate [--dry-run]"
           );
         }
-        const { dbMigrateCommand, formatMigrateResult } = await import("./db-VGDWG4QA.js");
+        const { dbMigrateCommand, formatMigrateResult } = await import("./db-WACSH3HN.js");
         const result = await dbMigrateCommand({ cwd, dryRun: args.dryRun });
         console.log(formatMigrateResult(result));
         return 0;
@@ -213,7 +213,7 @@ async function run(argv, options = {}) {
         if (subcommand !== "put" || !file) {
           throw new UsageError("usage: graft asset put <file> [key]");
         }
-        const { assetPutCommand } = await import("./asset-FPEL463J.js");
+        const { assetPutCommand } = await import("./asset-DMNX5JBZ.js");
         const result = await assetPutCommand({ cwd, file, key });
         console.log(`Uploaded ${result.key} (${result.contentType}, ${result.bytes} bytes)`);
         console.log(
@@ -228,7 +228,7 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "approvals": {
-        const { approvalsListCommand, formatApproval } = await import("./approvals-Z3EOK5AM.js");
+        const { approvalsListCommand, formatApproval } = await import("./approvals-MN3IS3FO.js");
         const pending = await approvalsListCommand({ cwd });
         if (pending.length === 0) {
           console.log("No pending approvals.");
@@ -245,7 +245,7 @@ async function run(argv, options = {}) {
       case "deny": {
         const id = args.positionals[0];
         if (!id) throw new UsageError(`usage: graft ${command} <approval-id>`);
-        const { decideCommand } = await import("./approvals-Z3EOK5AM.js");
+        const { decideCommand } = await import("./approvals-MN3IS3FO.js");
         const decision = command === "approve" ? "approved" : "denied";
         const row = await decideCommand({ cwd, id, decision });
         console.log(
@@ -259,7 +259,7 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "migrate": {
-        const { migrateCommand } = await import("./migrate-RRW4Z6RB.js");
+        const { migrateCommand } = await import("./migrate-QB44VL6R.js");
         await migrateCommand({ cwd, branchId: args.branchId, apply: args.apply });
         return 0;
       }
@@ -273,7 +273,7 @@ async function run(argv, options = {}) {
         if (subcommand && !name) {
           throw new UsageError(`usage: graft branch ${subcommand} <name>`);
         }
-        const mod = await import("./branch-HRG46YIL.js");
+        const mod = await import("./branch-IDY42TAV.js");
         if (!subcommand) {
           const rows = await mod.branchListCommand({ cwd });
           if (rows.length === 0) {
@@ -316,12 +316,12 @@ async function run(argv, options = {}) {
         const branch = args.positionals[0];
         if (!branch)
           throw new UsageError("usage: graft merge <branch> [--into <target>] [--apply]");
-        const { mergeCommand } = await import("./merge-CZUNMMB5.js");
+        const { mergeCommand } = await import("./merge-XMTFPLHO.js");
         await mergeCommand({ cwd, branch, into: args.into, apply: args.apply });
         return 0;
       }
       case "add": {
-        const { addCommand } = await import("./add-UBAZMSP7.js");
+        const { addCommand } = await import("./add-ASXTMYCX.js");
         await addCommand({
           cwd,
           names: args.positionals,
@@ -331,12 +331,12 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "mcp": {
-        const { mcpCommand } = await import("./mcp-US3QFLOR.js");
+        const { mcpCommand } = await import("./mcp-LUJMTAQO.js");
         await mcpCommand({ cwd, branchId: args.branchId });
         return 0;
       }
       case "serve": {
-        const { serveCommand } = await import("./serve-Q63UTTER.js");
+        const { serveCommand } = await import("./serve-ZGXLEAEB.js");
         await serveCommand({
           cwd,
           branchId: args.branchId,
@@ -347,7 +347,7 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "studio": {
-        const { studioCommand } = await import("./studio-TNPOB665.js");
+        const { studioCommand } = await import("./studio-HXVSO4WJ.js");
         await studioCommand({
           cwd,
           branchId: args.branchId,
@@ -357,7 +357,7 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "content": {
-        const { contentListCommand, formatContentLine } = await import("./content-DY2YI3LT.js");
+        const { contentListCommand, formatContentLine } = await import("./content-VLKNYIHL.js");
         const { branch, lines } = await contentListCommand({ cwd, branchId: args.branchId });
         if (lines.length === 0) {
           console.log(`No content on branch "${branch}" (run graft compile).`);
@@ -369,7 +369,7 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "compilations": {
-        const { compilationsListCommand, formatCompilation } = await import("./compilations-6P45MPAE.js");
+        const { compilationsListCommand, formatCompilation } = await import("./compilations-72DJ2VEP.js");
         const rows = await compilationsListCommand({ cwd, branchId: args.branchId });
         if (rows.length === 0) {
           console.log("No compilations recorded yet (run graft compile).");
@@ -381,7 +381,7 @@ async function run(argv, options = {}) {
       case "harden": {
         const role = args.positionals[0];
         if (!role) throw new UsageError("usage: graft harden <role>");
-        const { hardenCommand } = await import("./harden-HQHONZPH.js");
+        const { hardenCommand } = await import("./harden-QASY2KMI.js");
         const result = await hardenCommand({ cwd, role });
         console.log(`Hardened runtime role "${result.role}" (${result.statements.length} grants):`);
         for (const statement of result.statements) console.log(`  ${statement}`);

package/dist/{init-3H2IP5US.js → init-TRPSGUYW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CONFIG_FILENAMES
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/init.ts
 import { existsSync, mkdirSync, writeFileSync } from "fs";

package/dist/{mcp-US3QFLOR.js → mcp-LUJMTAQO.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   assertNoStaticBranch
-} from "./chunk-KZ3FDWUK.js";
+} from "./chunk-GDTOV3DU.js";
 import "./chunk-GPA66AP5.js";
 import {
   findConfig,
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/mcp.ts
 import { createActorResolver } from "@usegraft/auth";
@@ -25,21 +25,25 @@ async function mcpCommand(options) {
   try {
     const devToken = process.env.GRAFT_DEV_TOKEN;
     const scopes = (process.env.GRAFT_DEV_SCOPES ?? "").split(/[,\s]+/).map((s) => s.trim()).filter(Boolean);
+    const cliActor = {
+      kind: "agent",
+      id: "graft-cli",
+      scopes: [.../* @__PURE__ */ new Set(["content:write", ...scopes])]
+    };
     const resolveActor = createActorResolver({
       issuers: [],
-      devTokens: devToken ? {
-        [devToken]: {
-          kind: "agent",
-          id: "graft-cli",
-          scopes
-        }
-      } : void 0
+      devTokens: devToken ? { [devToken]: cliActor } : void 0
     });
+    const resolveStdioActor = async (request) => {
+      const resolved = await resolveActor(request);
+      return resolved.kind === "anonymous" ? cliActor : resolved;
+    };
     const server = createGraftMcp({
       name: "graft",
       contentDir: config.contentDir,
       collections: config.collections,
       functions: config.functions,
+      mdxTrust: config.mdxTrust,
       ...branch !== void 0 ? {
         db: branch.db,
         branchId: scopeWriteBranch(branch.scope),
@@ -47,7 +51,11 @@ async function mcpCommand(options) {
         // overlay branch searches its full parent chain, not just its own rows.
         scope: branch.scope
       } : { staticIndexPath: config.index.path },
-      actor: resolveActor,
+      actor: resolveStdioActor,
+      connectionActor: cliActor,
+      // Local agents may upload a file from the project; remote mounts get no
+      // `path` argument at all.
+      localUploadRoot: config.projectDir,
       defaultAuthorization: devToken
     });
     await serveStdio(server);

package/dist/{merge-CZUNMMB5.js → merge-XMTFPLHO.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   discoverMigrations
-} from "./chunk-LTFTDG6Z.js";
+} from "./chunk-6Z27SGVO.js";
 import {
   findConfig,
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/merge.ts
 import { basename } from "path";
@@ -144,6 +144,7 @@ async function mergeCommand(options) {
         db: target.db,
         contentDir: config.contentDir,
         collections: config.collections,
+        mdxTrust: config.mdxTrust,
         branchId: targetWrite,
         gitSha
       });

package/dist/{migrate-RRW4Z6RB.js → migrate-QB44VL6R.js}

@@ -2,8 +2,8 @@
 import {
   discoverMigrations,
   migrateCommand
-} from "./chunk-LTFTDG6Z.js";
-import "./chunk-BUPFXTUG.js";
+} from "./chunk-6Z27SGVO.js";
+import "./chunk-2NH6KYTL.js";
 export {
   discoverMigrations,
   migrateCommand

package/dist/{serve-Q63UTTER.js → serve-ZGXLEAEB.js}

@@ -1,12 +1,14 @@
 #!/usr/bin/env node
 import {
+  allowedHostsFor,
   createNodeListener,
   createServeRouter,
   serveCommand,
   startServe
-} from "./chunk-TUWL7WFD.js";
-import "./chunk-BUPFXTUG.js";
+} from "./chunk-U25NVB6W.js";
+import "./chunk-2NH6KYTL.js";
 export {
+  allowedHostsFor,
   createNodeListener,
   createServeRouter,
   serveCommand,

package/dist/{studio-TNPOB665.js → studio-HXVSO4WJ.js}

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
 import {
+  allowedHostsFor,
   createNodeListener
-} from "./chunk-TUWL7WFD.js";
+} from "./chunk-U25NVB6W.js";
 import {
   findConfig,
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-BUPFXTUG.js";
+} from "./chunk-2NH6KYTL.js";
 
 // src/commands/studio.ts
 import { execFile } from "child_process";
@@ -17,11 +18,11 @@ import { GraftError } from "@usegraft/contracts";
 function isLoopback(host) {
   return host === "127.0.0.1" || host === "localhost" || host === "::1";
 }
-function operatorName() {
+function operatorIdentity() {
   try {
-    return userInfo().username;
+    return { kind: "human", id: userInfo().username };
   } catch {
-    return process.env.USERNAME ?? process.env.USER ?? "operator";
+    return { kind: "human", id: process.env.USERNAME ?? process.env.USER ?? "operator" };
   }
 }
 function openBrowser(url) {
@@ -58,19 +59,24 @@ async function studioCommand(options) {
       "[graft studio] WARNING: binding beyond loopback with no GRAFT_DEV_TOKEN \u2014 set a bearer token before exposing Studio to a network."
     );
   }
-  const authorize = !loopback && devToken ? (request) => {
+  const authenticate = !loopback && devToken ? (request) => {
     const header = request.headers.get("authorization") ?? "";
-    return header === `Bearer ${devToken}`;
-  } : !loopback ? () => false : void 0;
+    if (header !== `Bearer ${devToken}`) return null;
+    return {
+      ...operatorIdentity(),
+      scopes: ["studio:read", "studio:write", "approvals:decide"]
+    };
+  } : !loopback ? () => null : void 0;
   const handler = createStudioHandler({
     db: branch.db,
     collections: config.collections,
     contentDir: config.contentDir,
+    mdxTrust: config.mdxTrust,
     defaultBranch: writeBranch,
-    decidedBy: operatorName,
-    authorize
+    decider: operatorIdentity,
+    authenticate
   });
-  const server = createServer(createNodeListener(handler));
+  const server = createServer(createNodeListener(handler, { allowedHosts: allowedHostsFor(host) }));
   await new Promise((resolve, reject) => {
     server.once("error", reject);
     server.listen(requestedPort, host, () => resolve());

package/package.json

@@ -1,6 +1,22 @@
 {
   "name": "@usegraft/cli",
-  "version": "0.1.1",
+  "version": "0.2.0",
+  "description": "The graft CLI: scaffold, compile authored content, serve the runtime, and split your database credentials.",
+  "keywords": [
+    "agent",
+    "ai",
+    "cli",
+    "cms",
+    "content",
+    "graft",
+    "headless-cms",
+    "mcp",
+    "postgres",
+    "scaffolding",
+    "static-site",
+    "typescript"
+  ],
+  "homepage": "https://github.com/AndersonDesign1/graft#readme",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -18,20 +34,21 @@
     "access": "public"
   },
   "dependencies": {
-    "@usegraft/assets": "0.1.1",
-    "@usegraft/auth": "0.1.1",
-    "@usegraft/compiler": "0.1.1",
-    "@usegraft/content-migrations": "0.1.1",
-    "@usegraft/contracts": "0.1.1",
-    "@usegraft/core": "0.1.1",
-    "@usegraft/db": "0.1.1",
-    "@usegraft/mcp": "0.1.1",
-    "@usegraft/registry": "0.1.1",
-    "@usegraft/studio": "0.1.1",
+    "@usegraft/assets": "0.2.0",
+    "@usegraft/auth": "0.2.0",
+    "@usegraft/compiler": "0.2.0",
+    "@usegraft/content-migrations": "0.2.0",
+    "@usegraft/contracts": "0.2.0",
+    "@usegraft/core": "0.2.0",
+    "@usegraft/db": "0.2.0",
+    "@usegraft/mcp": "0.2.0",
+    "@usegraft/mdx-safety": "0.2.0",
+    "@usegraft/registry": "0.2.0",
+    "@usegraft/studio": "0.2.0",
     "jiti": "^2.4.0"
   },
   "devDependencies": {
-    "@usegraft/sdk-core": "0.1.1"
+    "@usegraft/sdk-core": "0.2.0"
   },
   "engines": {
     "node": ">=22.16"
@@ -40,7 +57,6 @@
     "build": "tsup",
     "dev": "tsup --watch",
     "typecheck": "tsc --noEmit",
-    "test": "vitest run --passWithNoTests",
-    "lint": "oxlint ."
+    "test": "vitest run --passWithNoTests"
   }
 }