@usegraft/cli 0.2.0 → 1.0.0-beta.0

package/README.md

@@ -9,16 +9,20 @@ Part of [Graft](https://github.com/AndersonDesign1/graft), a CMS built so an AI
 ```bash
 npm i -D @usegraft/cli
 # or run it without installing
-npx graft init
+npx @usegraft/cli init
 ```
 
+Once installed, the command is `graft`. Run it without installing under the
+full package name: the bare name `graft` on npm belongs to an unrelated
+package, so `npx graft` fetches the wrong thing.
+
 ## Quickstart, with no database
 
 A content project needs no services at all. `graft compile` writes the index to a SQLite artifact your app reads embedded.
 
 ```bash
-npx graft init      # scaffolds graft.config.ts, content/, llms.txt
-npx graft compile   # → .graft/index.db
+npx @usegraft/cli init      # scaffolds graft.config.ts, content/, llms.txt
+npx @usegraft/cli compile   # → .graft/index.db
 ```
 
 Move to Postgres by setting `DATABASE_URL` and changing one line in `graft.config.ts`:
@@ -34,7 +38,7 @@ export const index = "postgres";
 | `graft init`                   | Scaffold a project                                                                             |
 | `graft compile`                | Validate authored MDX and project it into the index                                            |
 | `graft dev`                    | Recompile on save                                                                              |
-| `graft serve`                  | Run the headless runtime: typed functions, MCP over HTTP, `/healthz`                           |
+| `graft serve`                  | Run the headless runtime: typed functions, MCP, authored-content reads, `/healthz`             |
 | `graft studio`                 | Open the optional editing UI                                                                   |
 | `graft mcp`                    | Serve MCP on stdio, for `.mcp.json`                                                            |
 | `graft add <item>`             | Copy a registry primitive into your repo, shadcn-style                                         |
@@ -57,4 +61,4 @@ graft harden graft_runtime
 
 ---
 
-MIT. [Repository](https://github.com/AndersonDesign1/graft) · [Changelog](https://github.com/AndersonDesign1/graft/blob/feat/core/packages/cli/CHANGELOG.md) · [Security policy](https://github.com/AndersonDesign1/graft/blob/feat/core/SECURITY.md)
+MIT. [Repository](https://github.com/AndersonDesign1/graft) · [Changelog](https://github.com/AndersonDesign1/graft/blob/main/packages/cli/CHANGELOG.md) · [Security policy](https://github.com/AndersonDesign1/graft/blob/main/SECURITY.md)

package/dist/{add-ASXTMYCX.js → add-TCQY3YAN.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   findConfig
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/add.ts
 import { dirname } from "path";

package/dist/approvals-4PAANLA4.js

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+import {
+  approvalsListCommand,
+  decideCommand,
+  formatApproval,
+  operatorName
+} from "./chunk-NBJ4N4O6.js";
+import "./chunk-2LG6TWYY.js";
+export {
+  approvalsListCommand,
+  decideCommand,
+  formatApproval,
+  operatorName
+};

package/dist/{asset-DMNX5JBZ.js → asset-JWER6AOG.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   loadProjectEnv
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/asset.ts
 import { readFileSync, statSync } from "fs";

package/dist/{branch-IDY42TAV.js → branch-U7FFDTFV.js}

@@ -2,7 +2,7 @@
 import {
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/branch.ts
 import { GraftError } from "@usegraft/contracts";

package/dist/{chunk-2NH6KYTL.js → chunk-2LG6TWYY.js}

@@ -98,6 +98,7 @@ async function loadConfig(configPath) {
   const index = parseIndexConfig(mod.index, projectDir, configPath);
   assertStaticSupports(index, collections, functions, configPath);
   const mdxTrust = parseMdxTrust(mod.mdxTrust, configPath);
+  const approvalPolicy = parseApprovalPolicy(mod.approvalPolicy, configPath);
   const contentDirSetting = typeof mod.contentDir === "string" ? mod.contentDir : "content";
   const migrationsDirSetting = typeof mod.migrationsDir === "string" ? mod.migrationsDir : "migrations";
   return {
@@ -108,7 +109,8 @@ async function loadConfig(configPath) {
     index,
     collections,
     functions,
-    mdxTrust
+    mdxTrust,
+    approvalPolicy
   };
 }
 function parseMdxTrust(value, configPath) {
@@ -121,6 +123,16 @@ function parseMdxTrust(value, configPath) {
     details: { mdxTrust: value }
   });
 }
+function parseApprovalPolicy(value, configPath) {
+  if (value === void 0) return "none";
+  if (value === "none" || value === "human" || value === "unattended") return value;
+  throw new GraftError({
+    code: "CONFIG_INVALID",
+    message: `${configPath} exports \`approvalPolicy\` as ${JSON.stringify(value)}, which is not "none", "human" or "unattended".`,
+    fix: 'Export `approvalPolicy = "none"` (the default: only `destructive` functions are gated), `"human"` (every mutation is gated), or `"unattended"` (nothing is gated, for a caller with no human behind it). Omit the export to keep the default.',
+    details: { approvalPolicy: value }
+  });
+}
 function assertStaticSupports(index, collections, functions, configPath) {
   if (index.driver !== "static") return;
   const dbCollections = Object.values(collections).filter((collection) => collection.authority === "db-authoritative").map((collection) => collection.name);

package/dist/{chunk-GDTOV3DU.js → chunk-2N3HXYNN.js}

@@ -7,7 +7,7 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/compile.ts
 import { GraftError } from "@usegraft/contracts";

package/dist/{chunk-U25NVB6W.js → chunk-CONTLKSZ.js}

@@ -4,7 +4,7 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/serve.ts
 import { execFileSync } from "child_process";
@@ -18,6 +18,9 @@ function createServeRouter(routes) {
     if (pathname === "/healthz") return routes.health(request);
     if (pathname === "/api/mcp") return routes.mcp(request);
     if (pathname === "/api/fn" || pathname.startsWith("/api/fn/")) return routes.fn(request);
+    if (pathname === "/api/content/v1" || pathname.startsWith("/api/content/v1/")) {
+      return routes.content(request);
+    }
     if (routes.studio && (pathname === "/studio" || pathname.startsWith("/studio/") || pathname.startsWith("/api/studio/"))) {
       return routes.studio(request);
     }
@@ -25,7 +28,7 @@ function createServeRouter(routes) {
     const error = new GraftError({
       code: "ROUTE_NOT_FOUND",
       message: `Nothing is mounted at ${pathname}.`,
-      fix: `Use POST /api/fn/<name> (typed functions), POST /api/mcp (MCP Streamable HTTP), or GET /healthz${studioHint}.`,
+      fix: `Use POST /api/fn/<name> (typed functions), POST /api/mcp (MCP Streamable HTTP), GET /api/content/v1/documents (authored content), GET /api/content/v1/search, or GET /healthz${studioHint}.`,
       details: { pathname }
     });
     return new Response(JSON.stringify(error.toJSON()), {
@@ -128,11 +131,13 @@ async function startServe(options) {
   const [
     { createFunctionsHandler },
     { createGraftMcpHandler },
-    { createDb, resolveBranchHandle, scopeWriteBranch, sql },
+    { createContentApiHandler },
+    { createDb, createDbIndexReader, resolveBranchHandle, scopeWriteBranch, sql },
     studioMod
   ] = await Promise.all([
     import("@usegraft/core"),
     import("@usegraft/mcp"),
+    import("@usegraft/content-api"),
     import("@usegraft/db"),
     enableStudio ? import("@usegraft/studio") : Promise.resolve(null)
   ]);
@@ -147,7 +152,12 @@ async function startServe(options) {
     issuers,
     devTokens: devToken ? { [devToken]: { kind: "agent", id: "graft-serve", scopes } } : void 0
   });
-  const approvalPolicy = process.env.GRAFT_APPROVAL_POLICY === "human" ? "human" : "none";
+  const approvalPolicy = config.approvalPolicy;
+  if (process.env.GRAFT_APPROVAL_POLICY) {
+    console.warn(
+      `[graft serve] GRAFT_APPROVAL_POLICY is set and is now ignored. Approval policy moved to graft.config.ts so that turning off the gate on destructive functions appears in a diff. Export \`approvalPolicy = "${process.env.GRAFT_APPROVAL_POLICY}"\` there instead. Serving with "${approvalPolicy}".`
+    );
+  }
   const host = options.host ?? process.env.HOST ?? "127.0.0.1";
   const loopback = host === "127.0.0.1" || host === "localhost" || host === "::1";
   const anonymousOptIn = process.env.GRAFT_MCP_ALLOW_ANONYMOUS === "1";
@@ -174,7 +184,26 @@ async function startServe(options) {
     branchId: writeBranch,
     scope: branch.scope,
     actor: resolveActor,
-    allowAnonymous: allowAnonymousMcp
+    allowAnonymous: allowAnonymousMcp,
+    // The same backstop the functions handler gets. Without it a function with
+    // no per-function rateLimit was capped over POST /api/fn and uncapped over
+    // run_function, so the transport decided the limit — and tools/functions.ts
+    // claims the two surfaces apply rate limits identically.
+    rateLimit: { limit: 60, windowSeconds: 60 }
+  });
+  const allowedOriginsRaw = process.env.GRAFT_CONTENT_ALLOWED_ORIGINS?.trim();
+  const allowedOrigins = allowedOriginsRaw === void 0 || allowedOriginsRaw === "" ? void 0 : allowedOriginsRaw === "*" ? "*" : allowedOriginsRaw.split(",").map((entry) => entry.trim()).filter(Boolean);
+  const contentHandler = createContentApiHandler({
+    collections: Object.keys(config.collections),
+    branch: writeBranch,
+    index: createDbIndexReader(branch.db),
+    ...allowedOrigins === void 0 ? {} : { allowedOrigins },
+    // The same backstop the functions handler gets, for the same reason. These
+    // routes authenticate nobody and run database listings and full-text
+    // searches, so without a limit here one anonymous caller can keep the index
+    // busy indefinitely — and `graft serve` is the mount most likely to face
+    // the open internet.
+    rateLimit: { limit: 60, windowSeconds: 60 }
   });
   const health = async () => {
     try {
@@ -218,6 +247,11 @@ async function startServe(options) {
       "[graft serve] WARNING: binding beyond loopback with no identity configured \u2014 MCP will refuse every caller, because there is nothing to authenticate them against. Set GRAFT_DEV_TOKEN or GRAFT_TRUSTED_ISSUERS."
     );
   }
+  if (approvalPolicy === "unattended") {
+    console.warn(
+      '[graft serve] WARNING: approvalPolicy = "unattended" in graft.config.ts \u2014 destructive functions run without human approval. Deletes are not recoverable from git: deleteRecord removes rows outright and the asset store keeps no history. Audit rows are still written. This applies to POST /api/fn only; run_function over /api/mcp stays gated, because the policy is not part of the MCP surface.'
+    );
+  }
   let studioHandler;
   if (studioMod) {
     const authenticate = !loopback && (devToken || issuers.length > 0) ? async (request) => {
@@ -240,7 +274,13 @@ async function startServe(options) {
   }
   const server = createServer(
     createNodeListener(
-      createServeRouter({ fn: fnHandler, mcp: mcpHandler, health, studio: studioHandler }),
+      createServeRouter({
+        fn: fnHandler,
+        mcp: mcpHandler,
+        content: contentHandler,
+        health,
+        studio: studioHandler
+      }),
       { allowedHosts: allowedHostsFor(host) }
     )
   );
@@ -272,6 +312,8 @@ async function serveCommand(options) {
       `graft serve \u2014 branch "${running.branch}"`,
       `  functions  POST ${base}/api/fn/<name>`,
       `  mcp        POST ${base}/api/mcp`,
+      `  documents  GET  ${base}/api/content/v1/documents`,
+      `  search     GET  ${base}/api/content/v1/search`,
       `  health     GET  ${base}/healthz`,
       ...studioOn ? [
         `  studio     GET  ${base}/studio`,

package/dist/{chunk-6Z27SGVO.js → chunk-DW6WTDRX.js}

@@ -4,7 +4,7 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/migrate.ts
 import { existsSync, readdirSync, statSync } from "fs";

package/dist/{approvals-MN3IS3FO.js → chunk-NBJ4N4O6.js}

@@ -2,7 +2,7 @@
 import {
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/approvals.ts
 import { userInfo } from "os";
@@ -59,7 +59,9 @@ function formatApproval(row) {
     `  input:     ${JSON.stringify(row.input)}`
   ].join("\n");
 }
+
 export {
+  operatorName,
   approvalsListCommand,
   decideCommand,
   formatApproval

package/dist/{compilations-72DJ2VEP.js → compilations-CH6AIOFG.js}

@@ -2,7 +2,7 @@
 import {
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/compilations.ts
 async function compilationsListCommand(options) {

package/dist/{compile-TCBGZZAU.js → compile-AWPSEA7U.js}

@@ -2,9 +2,9 @@
 import {
   assertNoStaticBranch,
   compileCommand
-} from "./chunk-GDTOV3DU.js";
+} from "./chunk-2N3HXYNN.js";
 import "./chunk-GPA66AP5.js";
-import "./chunk-2NH6KYTL.js";
+import "./chunk-2LG6TWYY.js";
 export {
   assertNoStaticBranch,
   compileCommand

package/dist/{content-VLKNYIHL.js → content-ZULMTJMD.js}

@@ -4,7 +4,7 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/content.ts
 async function contentListCommand(options) {

package/dist/{db-WACSH3HN.js → db-5YMFKHGO.js}

@@ -4,7 +4,7 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/db.ts
 import { GraftError } from "@usegraft/contracts";

package/dist/{dev-4YSMWIAS.js → dev-WHTIRWMR.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   assertNoStaticBranch
-} from "./chunk-GDTOV3DU.js";
+} from "./chunk-2N3HXYNN.js";
 import {
   formatCompileResult,
   printGraftError
@@ -12,7 +12,7 @@ import {
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/dev.ts
 import { existsSync, watch } from "fs";

package/dist/{harden-QASY2KMI.js → harden-QONL2MAO.js}

@@ -2,7 +2,7 @@
 import {
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/harden.ts
 async function hardenCommand(options) {

package/dist/index.js

@@ -50,6 +50,11 @@ function printHelp() {
     "  --port <n>       Port for `graft serve` / `graft studio` (serve default 3903; studio 4983)",
     "  --host <h>       Host for `graft serve` / `graft studio` (default: 127.0.0.1, or HOST)",
     "  --studio         Mount opt-in Studio on `graft serve` at /studio (or GRAFT_STUDIO=1)",
+    "  --elicit-approvals",
+    "                   `graft mcp` asks THIS terminal's operator to decide a destructive call,",
+    "                   instead of failing with an id for `graft approve`. Local only: the human",
+    "                   must be present and the client must support MCP elicitation. Decisions",
+    "                   are recorded as the OS user, exactly as `graft approve` records them.",
     "  --from <name>    Parent to fork from (branch create; default: main)",
     "  --into <name>    Merge target (merge; default: main)",
     "  --backend <kind> Branch backend: overlay (default) or neon (branch create)",
@@ -80,6 +85,7 @@ function parseArgs(rest) {
   let overwrite = false;
   let pruneUnknown = false;
   let studio = false;
+  let elicitApprovals = false;
   let initDriver;
   const value = (flag, raw) => {
     if (!raw || raw.startsWith("-")) {
@@ -115,6 +121,8 @@ function parseArgs(rest) {
       pruneUnknown = true;
     } else if (arg === "--studio") {
       studio = true;
+    } else if (arg === "--elicit-approvals") {
+      elicitApprovals = true;
     } else if (arg === "--postgres") {
       initDriver = "postgres";
     } else if (arg === "--static") {
@@ -138,6 +146,7 @@ function parseArgs(rest) {
     overwrite,
     pruneUnknown,
     studio,
+    elicitApprovals,
     initDriver
   };
 }
@@ -156,7 +165,7 @@ async function run(argv, options = {}) {
     const args = parseArgs(rest);
     switch (command) {
       case "init": {
-        const { initCommand } = await import("./init-TRPSGUYW.js");
+        const { initCommand } = await import("./init-FV7Q6VXM.js");
         const result = initCommand({
           targetDir: args.positionals[0] ?? cwd,
           driver: args.initDriver
@@ -187,12 +196,12 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "compile": {
-        const { compileCommand } = await import("./compile-TCBGZZAU.js");
+        const { compileCommand } = await import("./compile-AWPSEA7U.js");
         await compileCommand({ cwd, branchId: args.branchId, pruneUnknown: args.pruneUnknown });
         return 0;
       }
       case "dev": {
-        const { devCommand } = await import("./dev-4YSMWIAS.js");
+        const { devCommand } = await import("./dev-WHTIRWMR.js");
         await devCommand({ cwd, branchId: args.branchId });
         return 0;
       }
@@ -203,7 +212,7 @@ async function run(argv, options = {}) {
             subcommand ? `unknown db subcommand "${subcommand}" \u2014 the only one is \`graft db migrate\`` : "usage: graft db migrate [--dry-run]"
           );
         }
-        const { dbMigrateCommand, formatMigrateResult } = await import("./db-WACSH3HN.js");
+        const { dbMigrateCommand, formatMigrateResult } = await import("./db-5YMFKHGO.js");
         const result = await dbMigrateCommand({ cwd, dryRun: args.dryRun });
         console.log(formatMigrateResult(result));
         return 0;
@@ -213,7 +222,7 @@ async function run(argv, options = {}) {
         if (subcommand !== "put" || !file) {
           throw new UsageError("usage: graft asset put <file> [key]");
         }
-        const { assetPutCommand } = await import("./asset-DMNX5JBZ.js");
+        const { assetPutCommand } = await import("./asset-JWER6AOG.js");
         const result = await assetPutCommand({ cwd, file, key });
         console.log(`Uploaded ${result.key} (${result.contentType}, ${result.bytes} bytes)`);
         console.log(
@@ -228,7 +237,7 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "approvals": {
-        const { approvalsListCommand, formatApproval } = await import("./approvals-MN3IS3FO.js");
+        const { approvalsListCommand, formatApproval } = await import("./approvals-4PAANLA4.js");
         const pending = await approvalsListCommand({ cwd });
         if (pending.length === 0) {
           console.log("No pending approvals.");
@@ -245,7 +254,7 @@ async function run(argv, options = {}) {
       case "deny": {
         const id = args.positionals[0];
         if (!id) throw new UsageError(`usage: graft ${command} <approval-id>`);
-        const { decideCommand } = await import("./approvals-MN3IS3FO.js");
+        const { decideCommand } = await import("./approvals-4PAANLA4.js");
         const decision = command === "approve" ? "approved" : "denied";
         const row = await decideCommand({ cwd, id, decision });
         console.log(
@@ -259,7 +268,7 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "migrate": {
-        const { migrateCommand } = await import("./migrate-QB44VL6R.js");
+        const { migrateCommand } = await import("./migrate-6ZYG2H5C.js");
         await migrateCommand({ cwd, branchId: args.branchId, apply: args.apply });
         return 0;
       }
@@ -273,7 +282,7 @@ async function run(argv, options = {}) {
         if (subcommand && !name) {
           throw new UsageError(`usage: graft branch ${subcommand} <name>`);
         }
-        const mod = await import("./branch-IDY42TAV.js");
+        const mod = await import("./branch-U7FFDTFV.js");
         if (!subcommand) {
           const rows = await mod.branchListCommand({ cwd });
           if (rows.length === 0) {
@@ -316,12 +325,12 @@ async function run(argv, options = {}) {
         const branch = args.positionals[0];
         if (!branch)
           throw new UsageError("usage: graft merge <branch> [--into <target>] [--apply]");
-        const { mergeCommand } = await import("./merge-XMTFPLHO.js");
+        const { mergeCommand } = await import("./merge-ZWYZJVFE.js");
         await mergeCommand({ cwd, branch, into: args.into, apply: args.apply });
         return 0;
       }
       case "add": {
-        const { addCommand } = await import("./add-ASXTMYCX.js");
+        const { addCommand } = await import("./add-TCQY3YAN.js");
         await addCommand({
           cwd,
           names: args.positionals,
@@ -331,12 +340,12 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "mcp": {
-        const { mcpCommand } = await import("./mcp-LUJMTAQO.js");
-        await mcpCommand({ cwd, branchId: args.branchId });
+        const { mcpCommand } = await import("./mcp-77QFFJXK.js");
+        await mcpCommand({ cwd, branchId: args.branchId, elicitApprovals: args.elicitApprovals });
         return 0;
       }
       case "serve": {
-        const { serveCommand } = await import("./serve-ZGXLEAEB.js");
+        const { serveCommand } = await import("./serve-5ADUQG66.js");
         await serveCommand({
           cwd,
           branchId: args.branchId,
@@ -347,7 +356,7 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "studio": {
-        const { studioCommand } = await import("./studio-HXVSO4WJ.js");
+        const { studioCommand } = await import("./studio-7VAYFEWS.js");
         await studioCommand({
           cwd,
           branchId: args.branchId,
@@ -357,7 +366,7 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "content": {
-        const { contentListCommand, formatContentLine } = await import("./content-VLKNYIHL.js");
+        const { contentListCommand, formatContentLine } = await import("./content-ZULMTJMD.js");
         const { branch, lines } = await contentListCommand({ cwd, branchId: args.branchId });
         if (lines.length === 0) {
           console.log(`No content on branch "${branch}" (run graft compile).`);
@@ -369,7 +378,7 @@ async function run(argv, options = {}) {
         return 0;
       }
       case "compilations": {
-        const { compilationsListCommand, formatCompilation } = await import("./compilations-72DJ2VEP.js");
+        const { compilationsListCommand, formatCompilation } = await import("./compilations-CH6AIOFG.js");
         const rows = await compilationsListCommand({ cwd, branchId: args.branchId });
         if (rows.length === 0) {
           console.log("No compilations recorded yet (run graft compile).");
@@ -381,7 +390,7 @@ async function run(argv, options = {}) {
       case "harden": {
         const role = args.positionals[0];
         if (!role) throw new UsageError("usage: graft harden <role>");
-        const { hardenCommand } = await import("./harden-QASY2KMI.js");
+        const { hardenCommand } = await import("./harden-QONL2MAO.js");
         const result = await hardenCommand({ cwd, role });
         console.log(`Hardened runtime role "${result.role}" (${result.statements.length} grants):`);
         for (const statement of result.statements) console.log(`  ${statement}`);

package/dist/{init-TRPSGUYW.js → init-FV7Q6VXM.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CONFIG_FILENAMES
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/init.ts
 import { existsSync, mkdirSync, writeFileSync } from "fs";

package/dist/{mcp-LUJMTAQO.js → mcp-77QFFJXK.js}

@@ -1,14 +1,17 @@
 #!/usr/bin/env node
 import {
   assertNoStaticBranch
-} from "./chunk-GDTOV3DU.js";
+} from "./chunk-2N3HXYNN.js";
 import "./chunk-GPA66AP5.js";
+import {
+  operatorName
+} from "./chunk-NBJ4N4O6.js";
 import {
   findConfig,
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/mcp.ts
 import { createActorResolver } from "@usegraft/auth";
@@ -38,6 +41,7 @@ async function mcpCommand(options) {
       const resolved = await resolveActor(request);
       return resolved.kind === "anonymous" ? cliActor : resolved;
     };
+    const approvalElicitation = options.elicitApprovals ? { decider: { kind: "human", id: operatorName() } } : void 0;
     const server = createGraftMcp({
       name: "graft",
       contentDir: config.contentDir,
@@ -56,7 +60,8 @@ async function mcpCommand(options) {
       // Local agents may upload a file from the project; remote mounts get no
       // `path` argument at all.
       localUploadRoot: config.projectDir,
-      defaultAuthorization: devToken
+      defaultAuthorization: devToken,
+      approvalElicitation
     });
     await serveStdio(server);
   } finally {

package/dist/{merge-XMTFPLHO.js → merge-ZWYZJVFE.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   discoverMigrations
-} from "./chunk-6Z27SGVO.js";
+} from "./chunk-DW6WTDRX.js";
 import {
   findConfig,
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/merge.ts
 import { basename } from "path";

package/dist/{migrate-QB44VL6R.js → migrate-6ZYG2H5C.js}

@@ -2,8 +2,8 @@
 import {
   discoverMigrations,
   migrateCommand
-} from "./chunk-6Z27SGVO.js";
-import "./chunk-2NH6KYTL.js";
+} from "./chunk-DW6WTDRX.js";
+import "./chunk-2LG6TWYY.js";
 export {
   discoverMigrations,
   migrateCommand

package/dist/{serve-ZGXLEAEB.js → serve-5ADUQG66.js}

@@ -5,8 +5,8 @@ import {
   createServeRouter,
   serveCommand,
   startServe
-} from "./chunk-U25NVB6W.js";
-import "./chunk-2NH6KYTL.js";
+} from "./chunk-CONTLKSZ.js";
+import "./chunk-2LG6TWYY.js";
 export {
   allowedHostsFor,
   createNodeListener,

package/dist/{studio-HXVSO4WJ.js → studio-7VAYFEWS.js}

@@ -2,13 +2,13 @@
 import {
   allowedHostsFor,
   createNodeListener
-} from "./chunk-U25NVB6W.js";
+} from "./chunk-CONTLKSZ.js";
 import {
   findConfig,
   loadConfig,
   loadProjectEnv,
   requireDatabaseUrl
-} from "./chunk-2NH6KYTL.js";
+} from "./chunk-2LG6TWYY.js";
 
 // src/commands/studio.ts
 import { execFile } from "child_process";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usegraft/cli",
-  "version": "0.2.0",
+  "version": "1.0.0-beta.0",
   "description": "The graft CLI: scaffold, compile authored content, serve the runtime, and split your database credentials.",
   "keywords": [
     "agent",
@@ -34,21 +34,22 @@
     "access": "public"
   },
   "dependencies": {
-    "@usegraft/assets": "0.2.0",
-    "@usegraft/auth": "0.2.0",
-    "@usegraft/compiler": "0.2.0",
-    "@usegraft/content-migrations": "0.2.0",
-    "@usegraft/contracts": "0.2.0",
-    "@usegraft/core": "0.2.0",
-    "@usegraft/db": "0.2.0",
-    "@usegraft/mcp": "0.2.0",
-    "@usegraft/mdx-safety": "0.2.0",
-    "@usegraft/registry": "0.2.0",
-    "@usegraft/studio": "0.2.0",
+    "@usegraft/assets": "1.0.0-beta.0",
+    "@usegraft/auth": "1.0.0-beta.0",
+    "@usegraft/compiler": "1.0.0-beta.0",
+    "@usegraft/content-api": "1.0.0-beta.0",
+    "@usegraft/content-migrations": "1.0.0-beta.0",
+    "@usegraft/contracts": "1.0.0-beta.0",
+    "@usegraft/core": "1.0.0-beta.0",
+    "@usegraft/db": "1.0.0-beta.0",
+    "@usegraft/mcp": "1.0.0-beta.0",
+    "@usegraft/mdx-safety": "1.0.0-beta.0",
+    "@usegraft/registry": "1.0.0-beta.0",
+    "@usegraft/studio": "1.0.0-beta.0",
     "jiti": "^2.4.0"
   },
   "devDependencies": {
-    "@usegraft/sdk-core": "0.2.0"
+    "@usegraft/sdk-core": "1.0.0-beta.0"
   },
   "engines": {
     "node": ">=22.16"