chad-bridge 0.1.0

package/dist/cli.js

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const path = __importStar(require("path"));
+const bridge_1 = require("./bridge");
+const VERSION = "0.1.0";
+const program = new commander_1.Command();
+program
+    .name("chad-bridge")
+    .description("Connect your local machine to Chad AI on disclosedcapitol.com")
+    .version(VERSION)
+    .requiredOption("-k, --key <key>", "API key from disclosedcapitol.com/account")
+    .option("-d, --dir <directory>", "Working directory (default: current directory)", process.cwd())
+    .option("--auto-approve", "Auto-approve all commands (dangerous!)", false)
+    .option("-v, --verbose", "Verbose logging", false)
+    .action(async (opts) => {
+    const workingDir = path.resolve(opts.dir);
+    console.log("");
+    console.log("  ╔══════════════════════════════════════════╗");
+    console.log(`  ║  Chad Bridge v${VERSION}                      ║`);
+    console.log("  ║  disclosedcapitol.com                    ║");
+    console.log("  ╠══════════════════════════════════════════╣");
+    console.log(`  ║  Project: ${workingDir.slice(0, 30).padEnd(30)} ║`);
+    console.log("  ╚══════════════════════════════════════════╝");
+    console.log("");
+    if (opts.autoApprove) {
+        console.log("  \x1b[31m⚠  AUTO-APPROVE MODE: All commands will execute without confirmation\x1b[0m");
+        console.log("");
+    }
+    const bridge = new bridge_1.ChadBridge({
+        apiKey: opts.key,
+        workingDir,
+        autoApproveAll: opts.autoApprove,
+        verbose: opts.verbose,
+    });
+    // Graceful shutdown
+    process.on("SIGINT", () => {
+        console.log("\n  Disconnecting...");
+        bridge.disconnect();
+        process.exit(0);
+    });
+    process.on("SIGTERM", () => {
+        bridge.disconnect();
+        process.exit(0);
+    });
+    try {
+        await bridge.connect();
+    }
+    catch (err) {
+        const e = err;
+        console.error(`  \x1b[31m✗ Failed to connect: ${e.message}\x1b[0m`);
+        console.error("  Check your API key and internet connection.");
+        console.error("  Get your API key at: https://disclosedcapitol.com/account?tab=api-keys");
+        process.exit(1);
+    }
+});
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,yCAAoC;AACpC,2CAA6B;AAC7B,qCAAsC;AAEtC,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,aAAa,CAAC;KACnB,WAAW,CAAC,+DAA+D,CAAC;KAC5E,OAAO,CAAC,OAAO,CAAC;KAChB,cAAc,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;KAC9E,MAAM,CAAC,uBAAuB,EAAE,gDAAgD,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KAChG,MAAM,CAAC,gBAAgB,EAAE,wCAAwC,EAAE,KAAK,CAAC;KACzE,MAAM,CAAC,eAAe,EAAE,iBAAiB,EAAE,KAAK,CAAC;KACjD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,yBAAyB,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,iBAAiB,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;QACrG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,mBAAU,CAAC;QAC5B,MAAM,EAAE,IAAI,CAAC,GAAG;QAChB,UAAU;QACV,cAAc,EAAE,IAAI,CAAC,WAAW;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;IAEH,oBAAoB;IACpB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,MAAM,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,MAAM,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAA2B,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { ChadBridge } from "./bridge";
+export { executeAction, AUTO_APPROVE_ACTIONS } from "./actions";
+export type { CommandParams, CommandResult } from "./actions";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTO_APPROVE_ACTIONS = exports.executeAction = exports.ChadBridge = void 0;
+var bridge_1 = require("./bridge");
+Object.defineProperty(exports, "ChadBridge", { enumerable: true, get: function () { return bridge_1.ChadBridge; } });
+var actions_1 = require("./actions");
+Object.defineProperty(exports, "executeAction", { enumerable: true, get: function () { return actions_1.executeAction; } });
+Object.defineProperty(exports, "AUTO_APPROVE_ACTIONS", { enumerable: true, get: function () { return actions_1.AUTO_APPROVE_ACTIONS; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,mCAAsC;AAA7B,oGAAA,UAAU,OAAA;AACnB,qCAAgE;AAAvD,wGAAA,aAAa,OAAA;AAAE,+GAAA,oBAAoB,OAAA"}

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "chad-bridge",
+  "version": "0.1.0",
+  "description": "Connect your local machine to Chad AI on disclosedcapitol.com",
+  "main": "dist/index.js",
+  "bin": {
+    "chad-bridge": "dist/cli.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "ts-node src/cli.ts",
+    "start": "node dist/cli.js"
+  },
+  "keywords": ["chad", "ai", "coding-assistant", "disclosedcapitol", "bridge"],
+  "author": "Disclosed Capitol",
+  "license": "MIT",
+  "dependencies": {
+    "ws": "^8.18.0",
+    "chalk": "^5.3.0",
+    "commander": "^12.1.0",
+    "chokidar": "^4.0.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.5.0",
+    "@types/node": "^22.0.0",
+    "@types/ws": "^8.5.0",
+    "ts-node": "^10.9.0"
+  }
+}

package/src/actions.ts

@@ -0,0 +1,235 @@
+import * as fs from "fs";
+import * as path from "path";
+import { execSync, spawn } from "child_process";
+
+export interface CommandParams {
+  path?: string;
+  content?: string;
+  command?: string;
+  cwd?: string;
+  pattern?: string;
+  glob?: string;
+  message?: string;
+  branch?: string;
+  [key: string]: unknown;
+}
+
+export interface CommandResult {
+  status: "success" | "error" | "stream";
+  data?: Record<string, unknown>;
+  error?: string;
+}
+
+// Actions that don't need user approval
+export const AUTO_APPROVE_ACTIONS = new Set([
+  "read_file",
+  "list_dir",
+  "file_info",
+  "search_files",
+  "git_status",
+  "git_diff",
+  "git_log",
+]);
+
+function resolvePath(filePath: string, workingDir: string): string {
+  if (path.isAbsolute(filePath)) return filePath;
+  return path.resolve(workingDir, filePath);
+}
+
+export function executeAction(
+  action: string,
+  params: CommandParams,
+  workingDir: string
+): CommandResult {
+  try {
+    switch (action) {
+      case "read_file": {
+        const p = resolvePath(params.path || "", workingDir);
+        if (!fs.existsSync(p)) return { status: "error", error: `File not found: ${p}` };
+        const content = fs.readFileSync(p, "utf-8");
+        const stat = fs.statSync(p);
+        return {
+          status: "success",
+          data: {
+            content,
+            size: stat.size,
+            modified: stat.mtime.toISOString(),
+          },
+        };
+      }
+
+      case "write_file": {
+        const p = resolvePath(params.path || "", workingDir);
+        const dir = path.dirname(p);
+        if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+        fs.writeFileSync(p, params.content || "", "utf-8");
+        return {
+          status: "success",
+          data: { path: p, size: Buffer.byteLength(params.content || "", "utf-8") },
+        };
+      }
+
+      case "edit_file": {
+        const p = resolvePath(params.path || "", workingDir);
+        if (!fs.existsSync(p)) return { status: "error", error: `File not found: ${p}` };
+        // For now, full replacement. Diff-based patching can come later.
+        fs.writeFileSync(p, params.content || "", "utf-8");
+        return { status: "success", data: { path: p } };
+      }
+
+      case "delete_file": {
+        const p = resolvePath(params.path || "", workingDir);
+        if (!fs.existsSync(p)) return { status: "error", error: `File not found: ${p}` };
+        fs.unlinkSync(p);
+        return { status: "success", data: { deleted: p } };
+      }
+
+      case "list_dir": {
+        const p = resolvePath(params.path || ".", workingDir);
+        if (!fs.existsSync(p)) return { status: "error", error: `Directory not found: ${p}` };
+        const entries = fs.readdirSync(p, { withFileTypes: true });
+        const items = entries.map((e) => ({
+          name: e.name,
+          type: e.isDirectory() ? "directory" : "file",
+          size: e.isFile() ? fs.statSync(path.join(p, e.name)).size : undefined,
+        }));
+        return { status: "success", data: { path: p, entries: items } };
+      }
+
+      case "search_files": {
+        const searchPath = resolvePath(params.path || ".", workingDir);
+        const pattern = params.pattern || "";
+        try {
+          const result = execSync(
+            `grep -rn --include="*" -l "${pattern.replace(/"/g, '\\"')}" "${searchPath}"`,
+            { timeout: 10000, maxBuffer: 1024 * 1024 }
+          ).toString().trim();
+          const files = result ? result.split("\n").slice(0, 50) : [];
+          return { status: "success", data: { pattern, files, count: files.length } };
+        } catch {
+          return { status: "success", data: { pattern, files: [], count: 0 } };
+        }
+      }
+
+      case "file_info": {
+        const p = resolvePath(params.path || "", workingDir);
+        if (!fs.existsSync(p)) return { status: "error", error: `File not found: ${p}` };
+        const stat = fs.statSync(p);
+        return {
+          status: "success",
+          data: {
+            path: p,
+            size: stat.size,
+            isDirectory: stat.isDirectory(),
+            modified: stat.mtime.toISOString(),
+            created: stat.birthtime.toISOString(),
+          },
+        };
+      }
+
+      case "run_command": {
+        const cwd = params.cwd ? resolvePath(params.cwd, workingDir) : workingDir;
+        const cmd = params.command || "";
+        try {
+          const output = execSync(cmd, {
+            cwd,
+            timeout: 60000,
+            maxBuffer: 5 * 1024 * 1024,
+            encoding: "utf-8",
+          });
+          return { status: "success", data: { output, exitCode: 0 } };
+        } catch (err: unknown) {
+          const e = err as { status?: number; stdout?: string; stderr?: string; message?: string };
+          return {
+            status: "success",
+            data: {
+              output: (e.stdout || "") + (e.stderr || ""),
+              exitCode: e.status || 1,
+              error: e.message,
+            },
+          };
+        }
+      }
+
+      case "run_script": {
+        const p = resolvePath(params.path || "", workingDir);
+        if (!fs.existsSync(p)) return { status: "error", error: `Script not found: ${p}` };
+        const cwd = params.cwd ? resolvePath(params.cwd, workingDir) : workingDir;
+        try {
+          const output = execSync(`python3 "${p}"`, {
+            cwd,
+            timeout: 120000,
+            maxBuffer: 5 * 1024 * 1024,
+            encoding: "utf-8",
+          });
+          return { status: "success", data: { output, exitCode: 0 } };
+        } catch (err: unknown) {
+          const e = err as { status?: number; stdout?: string; stderr?: string };
+          return {
+            status: "success",
+            data: { output: (e.stdout || "") + (e.stderr || ""), exitCode: e.status || 1 },
+          };
+        }
+      }
+
+      case "git_status": {
+        const cwd = params.cwd ? resolvePath(params.cwd, workingDir) : workingDir;
+        const output = execSync("git status --porcelain", { cwd, encoding: "utf-8" });
+        const branch = execSync("git branch --show-current", { cwd, encoding: "utf-8" }).trim();
+        return { status: "success", data: { branch, status: output.trim(), clean: !output.trim() } };
+      }
+
+      case "git_diff": {
+        const cwd = params.cwd ? resolvePath(params.cwd, workingDir) : workingDir;
+        const output = execSync("git diff", { cwd, encoding: "utf-8", maxBuffer: 5 * 1024 * 1024 });
+        return { status: "success", data: { diff: output } };
+      }
+
+      case "git_log": {
+        const cwd = params.cwd ? resolvePath(params.cwd, workingDir) : workingDir;
+        const output = execSync('git log --oneline -20', { cwd, encoding: "utf-8" });
+        return { status: "success", data: { log: output.trim() } };
+      }
+
+      case "git_commit": {
+        const cwd = params.cwd ? resolvePath(params.cwd, workingDir) : workingDir;
+        const msg = params.message || "Update via Chad Bridge";
+        execSync("git add -A", { cwd });
+        const output = execSync(`git commit -m "${msg.replace(/"/g, '\\"')}"`, { cwd, encoding: "utf-8" });
+        return { status: "success", data: { output: output.trim() } };
+      }
+
+      case "git_push": {
+        const cwd = params.cwd ? resolvePath(params.cwd, workingDir) : workingDir;
+        const output = execSync("git push", { cwd, encoding: "utf-8", timeout: 30000 });
+        return { status: "success", data: { output: output.trim() } };
+      }
+
+      case "git_pull": {
+        const cwd = params.cwd ? resolvePath(params.cwd, workingDir) : workingDir;
+        const output = execSync("git pull", { cwd, encoding: "utf-8", timeout: 30000 });
+        return { status: "success", data: { output: output.trim() } };
+      }
+
+      case "git_branch": {
+        const cwd = params.cwd ? resolvePath(params.cwd, workingDir) : workingDir;
+        const branch = params.branch || "main";
+        const output = execSync(`git checkout -b "${branch}"`, { cwd, encoding: "utf-8" });
+        return { status: "success", data: { output: output.trim(), branch } };
+      }
+
+      case "install_deps": {
+        const cwd = params.cwd ? resolvePath(params.cwd, workingDir) : workingDir;
+        const cmd = params.command || "pip install -r requirements.txt";
+        const output = execSync(cmd, { cwd, encoding: "utf-8", timeout: 120000, maxBuffer: 10 * 1024 * 1024 });
+        return { status: "success", data: { output: output.trim() } };
+      }
+
+      default:
+        return { status: "error", error: `Unknown action: ${action}` };
+    }
+  } catch (err: unknown) {
+    const e = err as { message?: string };
+    return { status: "error", error: e.message || String(err) };
+  }
+}

package/src/bridge.ts

@@ -0,0 +1,219 @@
+import WebSocket from "ws";
+import * as readline from "readline";
+import { executeAction, AUTO_APPROVE_ACTIONS, CommandParams, CommandResult } from "./actions";
+
+const API_URL = process.env.CHAD_API_URL || "wss://api.disclosedcapitol.com";
+
+interface BridgeOptions {
+  apiKey: string;
+  workingDir: string;
+  autoApproveAll?: boolean;
+  verbose?: boolean;
+}
+
+interface IncomingCommand {
+  type: "command";
+  id: string;
+  action: string;
+  params: CommandParams;
+}
+
+interface ApprovalResponse {
+  type: "approval_response";
+  id: string;
+  approved: boolean;
+}
+
+export class ChadBridge {
+  private ws: WebSocket | null = null;
+  private options: BridgeOptions;
+  private rl: readline.Interface;
+  private reconnectAttempts = 0;
+  // Infinite reconnect — a Fly deploy can take 30-60s to come back, and a
+  // capped retry loop leaves the bridge silently stranded. Better to keep
+  // trying forever with an exponential backoff that caps at 30s.
+  private maxReconnects = Number.POSITIVE_INFINITY;
+  private pendingApprovals: Map<string, (approved: boolean) => void> = new Map();
+  private log: (msg: string) => void;
+
+  constructor(options: BridgeOptions) {
+    this.options = options;
+    this.rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    this.log = options.verbose
+      ? (msg: string) => console.log(`  [${new Date().toLocaleTimeString()}] ${msg}`)
+      : () => {};
+  }
+
+  async connect(): Promise<void> {
+    const url = `${API_URL}/bridge/ws?key=${this.options.apiKey}&dir=${encodeURIComponent(this.options.workingDir)}`;
+
+    return new Promise((resolve, reject) => {
+      this.ws = new WebSocket(url);
+
+      this.ws.on("open", () => {
+        this.reconnectAttempts = 0;
+        console.log("  Status: \x1b[32m● Online\x1b[0m");
+        console.log("");
+        console.log("  Waiting for commands from Chad...");
+        console.log("  Auto-approve: file reads, directory listings, git status/diff/log");
+        console.log("  Require approval: file writes, terminal commands, git push/commit");
+        console.log("");
+        resolve();
+      });
+
+      this.ws.on("message", (data) => {
+        try {
+          const msg = JSON.parse(data.toString());
+          this.handleMessage(msg);
+        } catch (err) {
+          this.log(`Parse error: ${err}`);
+        }
+      });
+
+      this.ws.on("close", (code) => {
+        console.log(`  \x1b[33m● Disconnected\x1b[0m (code: ${code})`);
+        if (this.reconnectAttempts < this.maxReconnects) {
+          const delay = Math.min(1000 * Math.pow(2, this.reconnectAttempts), 30000);
+          this.reconnectAttempts++;
+          console.log(`  Reconnecting in ${delay / 1000}s... (attempt ${this.reconnectAttempts}/${this.maxReconnects})`);
+          setTimeout(() => this.connect(), delay);
+        }
+      });
+
+      this.ws.on("error", (err) => {
+        if (this.reconnectAttempts === 0) {
+          reject(err);
+        }
+        this.log(`WebSocket error: ${err.message}`);
+      });
+    });
+  }
+
+  private async handleMessage(msg: IncomingCommand | ApprovalResponse | { type: string; message?: string; user_id?: number; working_dir?: string }) {
+    // Surface server-side errors (auth, etc.) so the user sees WHY the
+    // connection dropped instead of just "Disconnected (code: 1000)".
+    if (msg.type === "error") {
+      const m = (msg as { message?: string }).message || "(no message)";
+      console.log(`  \x1b[31m✗ Server error: ${m}\x1b[0m`);
+      return;
+    }
+    if (msg.type === "connected") {
+      // Confirms the server accepted our auth. Server already sent this on
+      // every successful connect; we just log it for visibility.
+      return;
+    }
+    if (msg.type === "heartbeat_ack") {
+      return;
+    }
+    if (msg.type === "approval_response") {
+      // Web-side approval came through
+      const resolver = this.pendingApprovals.get((msg as ApprovalResponse).id);
+      if (resolver) {
+        resolver((msg as ApprovalResponse).approved);
+        this.pendingApprovals.delete((msg as ApprovalResponse).id);
+      }
+      return;
+    }
+
+    if (msg.type !== "command") return;
+
+    const cmd = msg as IncomingCommand;
+    const { id, action, params } = cmd;
+    const needsApproval = !AUTO_APPROVE_ACTIONS.has(action) && !this.options.autoApproveAll;
+
+    if (needsApproval) {
+      const approved = await this.requestApproval(id, action, params);
+      if (!approved) {
+        this.send({ type: "result", id, status: "rejected", error: "User rejected the command" });
+        console.log(`  \x1b[31m✗\x1b[0m ${action}: rejected by user`);
+        return;
+      }
+    }
+
+    // Execute the action
+    const result = executeAction(action, params, this.options.workingDir);
+
+    if (result.status === "success") {
+      console.log(`  \x1b[32m✓\x1b[0m ${action}${params.path ? `: ${params.path}` : ""}${params.command ? `: ${params.command}` : ""}`);
+    } else {
+      console.log(`  \x1b[31m✗\x1b[0m ${action}: ${result.error}`);
+    }
+
+    this.send({ type: "result", id, ...result });
+  }
+
+  private async requestApproval(id: string, action: string, params: CommandParams): Promise<boolean> {
+    // Send approval request to server (web UI will show popup)
+    this.send({
+      type: "approval_required",
+      id,
+      action,
+      params,
+      description: this.describeAction(action, params),
+    });
+
+    // Also prompt locally as fallback
+    const desc = this.describeAction(action, params);
+    console.log(`  \x1b[33m⚠\x1b[0m  APPROVAL NEEDED: ${desc}`);
+
+    return new Promise((resolve) => {
+      // Store resolver for web-side approval
+      this.pendingApprovals.set(id, resolve);
+
+      // CLI fallback with 30s timeout
+      const timeout = setTimeout(() => {
+        if (this.pendingApprovals.has(id)) {
+          this.pendingApprovals.delete(id);
+          resolve(false);
+          console.log("  Timed out — rejected");
+        }
+      }, 30000);
+
+      this.rl.question("     Allow? [y/n]: ", (answer) => {
+        clearTimeout(timeout);
+        if (this.pendingApprovals.has(id)) {
+          this.pendingApprovals.delete(id);
+          const approved = answer.toLowerCase().startsWith("y");
+          resolve(approved);
+        }
+      });
+    });
+  }
+
+  private describeAction(action: string, params: CommandParams): string {
+    switch (action) {
+      case "write_file":
+      case "edit_file":
+        return `${action} "${params.path}"`;
+      case "delete_file":
+        return `delete "${params.path}"`;
+      case "run_command":
+        return `run: ${params.command}`;
+      case "run_script":
+        return `run script: ${params.path}`;
+      case "git_commit":
+        return `git commit -m "${params.message}"`;
+      case "git_push":
+        return "git push";
+      case "git_pull":
+        return "git pull";
+      case "git_branch":
+        return `git checkout -b ${params.branch}`;
+      case "install_deps":
+        return `install: ${params.command}`;
+      default:
+        return `${action} ${JSON.stringify(params)}`;
+    }
+  }
+
+  private send(data: Record<string, unknown>) {
+    if (this.ws?.readyState === WebSocket.OPEN) {
+      this.ws.send(JSON.stringify(data));
+    }
+  }
+
+  disconnect() {
+    this.ws?.close();
+    this.rl.close();
+  }
+}

package/src/cli.ts

@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+
+import { Command } from "commander";
+import * as path from "path";
+import { ChadBridge } from "./bridge";
+
+const VERSION = "0.1.0";
+
+const program = new Command();
+
+program
+  .name("chad-bridge")
+  .description("Connect your local machine to Chad AI on disclosedcapitol.com")
+  .version(VERSION)
+  .requiredOption("-k, --key <key>", "API key from disclosedcapitol.com/account")
+  .option("-d, --dir <directory>", "Working directory (default: current directory)", process.cwd())
+  .option("--auto-approve", "Auto-approve all commands (dangerous!)", false)
+  .option("-v, --verbose", "Verbose logging", false)
+  .action(async (opts) => {
+    const workingDir = path.resolve(opts.dir);
+
+    console.log("");
+    console.log("  ╔══════════════════════════════════════════╗");
+    console.log(`  ║  Chad Bridge v${VERSION}                      ║`);
+    console.log("  ║  disclosedcapitol.com                    ║");
+    console.log("  ╠══════════════════════════════════════════╣");
+    console.log(`  ║  Project: ${workingDir.slice(0, 30).padEnd(30)} ║`);
+    console.log("  ╚══════════════════════════════════════════╝");
+    console.log("");
+
+    if (opts.autoApprove) {
+      console.log("  \x1b[31m⚠  AUTO-APPROVE MODE: All commands will execute without confirmation\x1b[0m");
+      console.log("");
+    }
+
+    const bridge = new ChadBridge({
+      apiKey: opts.key,
+      workingDir,
+      autoApproveAll: opts.autoApprove,
+      verbose: opts.verbose,
+    });
+
+    // Graceful shutdown
+    process.on("SIGINT", () => {
+      console.log("\n  Disconnecting...");
+      bridge.disconnect();
+      process.exit(0);
+    });
+
+    process.on("SIGTERM", () => {
+      bridge.disconnect();
+      process.exit(0);
+    });
+
+    try {
+      await bridge.connect();
+    } catch (err: unknown) {
+      const e = err as { message?: string };
+      console.error(`  \x1b[31m✗ Failed to connect: ${e.message}\x1b[0m`);
+      console.error("  Check your API key and internet connection.");
+      console.error("  Get your API key at: https://disclosedcapitol.com/account?tab=api-keys");
+      process.exit(1);
+    }
+  });
+
+program.parse();

package/src/index.ts

@@ -0,0 +1,3 @@
+export { ChadBridge } from "./bridge";
+export { executeAction, AUTO_APPROVE_ACTIONS } from "./actions";
+export type { CommandParams, CommandResult } from "./actions";