dealgo 1.0.0

package/README.md

@@ -0,0 +1,301 @@
+# dealgo - DeAlgo CLI
+
+**Git for AI Decisions** - Command-line interface for managing DeAlgo decisions, agents, and API keys.
+
+## Installation
+
+### Global Install (Recommended)
+```bash
+npm install -g dealgo
+```
+
+### From Source
+```bash
+cd cli
+npm install
+npm run build
+npm link
+```
+
+### Direct Run (npx)
+```bash
+npx dealgo status
+```
+
+## Quick Start
+
+### 1. Configure API Access
+```bash
+# Set API key (via environment variable - most secure)
+export DEALGO_API_KEY=dg_live_your_key_here
+
+# Or store in config file (plaintext warning shown)
+dealgo config set apiKey dg_live_your_key_here
+
+# Set custom API URL (optional)
+dealgo config set apiUrl https://dealgo-saas.vercel.app
+```
+
+### 2. Verify Connection
+```bash
+dealgo status
+```
+
+### 3. Log Your First Decision
+```bash
+dealgo decisions log \
+  --verdict APPROVE \
+  --score 85 \
+  --rationale "Feature request approved after safety review"
+```
+
+## Commands
+
+### System Status
+```bash
+dealgo status              # Check system health and tenant usage
+dealgo status --json       # JSON output for scripting
+```
+
+### Decision Management
+```bash
+# Log a decision
+dealgo decisions log \
+  --verdict APPROVE \
+  --score 90 \
+  --rationale "Safe to proceed" \
+  --agentId agent_123      # Optional: link to specific agent
+
+# List recent decisions
+dealgo decisions list --limit 20
+
+# List in JSON format
+dealgo decisions list --json
+```
+
+**Supported Verdicts:** `APPROVE`, `DENY`, `DELAY`, `FOUNDER_REQUIRED`
+
+### Chain Verification
+```bash
+dealgo verify-chain        # Verify cryptographic chain integrity
+dealgo verify-chain --json # JSON output
+```
+
+### API Key Management
+```bash
+# List API keys
+dealgo keys list
+
+# Create new key with specific scopes
+dealgo keys create \
+  --name "Production Key" \
+  --scopes "decisions:write,decisions:read,ops:read"
+
+# Full access key (all scopes)
+dealgo keys create \
+  --name "Admin Key" \
+  --scopes "decisions:write,decisions:read,ops:read,keys:manage"
+```
+
+**Available Scopes:**
+- `decisions:write` - Log decisions
+- `decisions:read` - Read decisions
+- `ops:read` - View system status
+- `keys:manage` - Manage API keys
+
+### Configuration
+```bash
+# Set values
+dealgo config set apiUrl https://dealgo-saas.vercel.app
+dealgo config set apiKey dg_live_...
+
+# List all profiles
+dealgo config list
+
+# Switch profiles
+dealgo config use production
+dealgo config use local
+```
+
+## Profiles
+
+DeAlgo CLI supports multiple environment profiles:
+
+```bash
+# Use production (default)
+dealgo status
+
+# Use local development
+dealgo --profile local status
+
+# Create custom profile
+dealgo --profile staging config set apiUrl https://staging.dealgo.com
+dealgo --profile staging config set apiKey dg_test_...
+dealgo --profile staging status
+```
+
+**Config Location:** `~/.dealgo/config.json`
+
+## Environment Variables
+
+Environment variables override config file values:
+
+```bash
+export DEALGO_API_URL=https://dealgo-saas.vercel.app
+export DEALGO_API_KEY=dg_live_your_key_here
+
+dealgo status  # Uses env vars
+```
+
+## Examples
+
+### E2E Governance Loop (Terminal Only)
+```bash
+# 1. Check system health
+dealgo status
+
+# 2. Log a decision
+dealgo decisions log \
+  --verdict APPROVE \
+  --score 92 \
+  --rationale "Code review passed, security scan clean"
+
+# 3. Verify decision appears in log
+dealgo decisions list --limit 5
+
+# 4. Verify cryptographic chain
+dealgo verify-chain
+```
+
+### CI/CD Integration (GitHub Actions)
+```yaml
+name: Log Deployment Decision
+on: [deployment]
+jobs:
+  log:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Log to DeAlgo
+        env:
+          DEALGO_API_KEY: ${{ secrets.DEALGO_API_KEY }}
+        run: |
+          npx dealgo decisions log \
+            --verdict APPROVE \
+            --score 95 \
+            --rationale "Deployment to production approved" \
+            --json
+```
+
+### JSON Output for Scripts
+```bash
+# Get status as JSON
+STATUS=$(dealgo status --json)
+echo $STATUS | jq '.tenant.currentMonthUsage'
+
+# Log decision and capture ID
+RESULT=$(dealgo decisions log \
+  --verdict APPROVE \
+  --score 90 \
+  --rationale "Test" \
+  --json)
+DECISION_ID=$(echo $RESULT | jq -r '.data.id')
+echo "Logged decision: $DECISION_ID"
+```
+
+## Security Best Practices
+
+### ✅ Recommended
+- Store API key in `DEALGO_API_KEY` environment variable
+- Use OS-level secret management (AWS Secrets Manager, 1Password, etc.)
+- Create scoped keys (minimum required permissions)
+- Rotate keys regularly
+
+### ⚠️ Avoid
+- Committing `~/.dealgo/config.json` to git
+- Sharing API keys in plain text
+- Using `*` scope unless necessary
+
+## Troubleshooting
+
+### Missing API Key
+```
+✗ Error: Missing API key
+  Set DEALGO_API_KEY environment variable or run:
+  dealgo config set apiKey dg_live_...
+```
+
+**Solution:** Configure API key via environment variable or config file.
+
+### Invalid or Revoked Key
+```
+✗ Error: Invalid or revoked API key (401)
+```
+
+**Solution:** Create a new key via web dashboard or `dealgo keys create`.
+
+### Insufficient Scope
+```
+✗ Error: Insufficient scope (403)
+  Your key needs: ops:read
+```
+
+**Solution:** Create new key with required scopes:
+```bash
+dealgo keys create --scopes "decisions:write,decisions:read,ops:read"
+```
+
+## Development
+
+### Build from Source
+```bash
+cd cli
+npm install
+npm run build
+```
+
+### Local Testing
+```bash
+npm run dev -- status
+npm run dev -- decisions log --verdict APPROVE --score 90 --rationale "Test"
+```
+
+### Link for Global Use
+```bash
+npm link
+dealgo status
+```
+
+## License
+
+Apache-2.0
+
+## Support
+
+- **Docs:** https://dealgo-saas.vercel.app/developers
+- **GitHub:** https://github.com/Jtjr86/ssi-protocol
+- **Issues:** https://github.com/Jtjr86/ssi-protocol/issues
+
+ssictl health
+ssictl logs --follow
+```
+
+## Development
+
+```bash
+# Clone repo
+git clone https://github.com/Jtjr86/ssi-protocol.git
+cd ssi-protocol/cli
+
+# Install dependencies
+npm install
+
+# Run locally
+npm run dev health
+
+# Build
+npm run build
+```
+
+## Documentation
+
+Full docs at [ssi-protocol.org](https://ssi-protocol.org)

package/dist/index.js

@@ -0,0 +1,477 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * dealgo - DeAlgo CLI
+ * Git for AI Decisions
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const chalk_1 = __importDefault(require("chalk"));
+const node_fetch_1 = __importDefault(require("node-fetch"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const program = new commander_1.Command();
+const CONFIG_DIR = path.join(os.homedir(), '.dealgo');
+const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
+function ensureConfigDir() {
+    if (!fs.existsSync(CONFIG_DIR)) {
+        fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    }
+}
+function loadConfig() {
+    ensureConfigDir();
+    if (!fs.existsSync(CONFIG_FILE)) {
+        const defaultConfig = {
+            defaultProfile: 'production',
+            profiles: {
+                production: {
+                    apiUrl: 'https://dealgo-saas.vercel.app',
+                },
+            },
+        };
+        fs.writeFileSync(CONFIG_FILE, JSON.stringify(defaultConfig, null, 2));
+        return defaultConfig;
+    }
+    return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf-8'));
+}
+function saveConfig(config) {
+    ensureConfigDir();
+    fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
+}
+function getProfile(profileName) {
+    const config = loadConfig();
+    const name = profileName || config.defaultProfile;
+    const profile = config.profiles[name];
+    if (!profile) {
+        console.error(chalk_1.default.red(`✗ Error: Profile "${name}" not found`));
+        console.log(chalk_1.default.gray(`  Available profiles: ${Object.keys(config.profiles).join(', ')}`));
+        process.exit(1);
+    }
+    return profile;
+}
+function getApiKey(profile) {
+    // Priority: env var > config file
+    const apiKey = process.env.DEALGO_API_KEY || profile.apiKey;
+    if (!apiKey) {
+        console.error(chalk_1.default.red('✗ Error: Missing API key'));
+        console.log(chalk_1.default.gray('  Set DEALGO_API_KEY environment variable or run:'));
+        console.log(chalk_1.default.gray('  dealgo config set apiKey dg_live_...'));
+        process.exit(1);
+    }
+    return apiKey;
+}
+function getApiUrl(profile) {
+    return process.env.DEALGO_API_URL || profile.apiUrl;
+}
+// ============================================================================
+// API Client
+// ============================================================================
+async function apiCall(endpoint, options = {}) {
+    const profile = getProfile(options.profile);
+    const apiKey = getApiKey(profile);
+    const apiUrl = getApiUrl(profile);
+    const url = `${apiUrl}${endpoint}`;
+    const headers = {
+        'x-dealgo-key': apiKey,
+    };
+    if (options.body) {
+        headers['Content-Type'] = 'application/json';
+    }
+    try {
+        const response = await (0, node_fetch_1.default)(url, {
+            method: options.method || 'GET',
+            headers,
+            body: options.body ? JSON.stringify(options.body) : undefined,
+        });
+        const data = await response.json();
+        if (!response.ok) {
+            if (response.status === 401) {
+                console.error(chalk_1.default.red('✗ Error: Invalid or revoked API key (401)'));
+                console.log(chalk_1.default.gray('  Check your API key configuration'));
+            }
+            else if (response.status === 403) {
+                console.error(chalk_1.default.red('✗ Error: Insufficient scope (403)'));
+                const errorMsg = typeof data === 'object' && data.message ? data.message : '';
+                if (errorMsg) {
+                    console.log(chalk_1.default.gray(`  ${errorMsg}`));
+                }
+            }
+            else if (response.status === 429) {
+                console.error(chalk_1.default.red('✗ Error: Rate limit exceeded (429)'));
+            }
+            else {
+                console.error(chalk_1.default.red(`✗ Error: HTTP ${response.status}`));
+                if (typeof data === 'object' && data.error) {
+                    console.log(chalk_1.default.gray(`  ${data.error}`));
+                }
+            }
+            process.exit(1);
+        }
+        return data;
+    }
+    catch (error) {
+        console.error(chalk_1.default.red('✗ Error: Request failed'));
+        console.log(chalk_1.default.gray(`  ${error.message}`));
+        console.log(chalk_1.default.gray(`  URL: ${url}`));
+        process.exit(1);
+    }
+}
+// ============================================================================
+// CLI Commands
+// ============================================================================
+program
+    .name('dealgo')
+    .description('CLI for DeAlgo - Git for AI Decisions')
+    .version('1.0.0')
+    .option('--profile <name>', 'Use specific profile');
+// ----------------------------------------------------------------------------
+// Status Command
+// ----------------------------------------------------------------------------
+program
+    .command('status')
+    .description('Check system health and tenant usage')
+    .option('--json', 'Output JSON format')
+    .action(async (options) => {
+    const data = await apiCall('/api/v1/ops/status', {
+        profile: program.opts().profile,
+        json: options.json
+    });
+    if (options.json) {
+        console.log(JSON.stringify(data, null, 2));
+        return;
+    }
+    console.log(chalk_1.default.green('✓ System Operational'));
+    // Health metrics
+    if (data.health) {
+        console.log(chalk_1.default.gray('\n  Health:'));
+        if (data.health.db) {
+            console.log(chalk_1.default.gray(`  - Database: ${data.health.db.connected ? 'Connected' : 'Disconnected'} (${data.health.db.latencyMs}ms)`));
+        }
+        if (data.health.upstash) {
+            console.log(chalk_1.default.gray(`  - Upstash: ${data.health.upstash.reachable ? 'Reachable' : 'Unreachable'} (${data.health.upstash.latencyMs}ms)`));
+        }
+    }
+    // Usage statistics
+    if (data.usage) {
+        const u = data.usage;
+        console.log(chalk_1.default.gray('\n  Usage:'));
+        console.log(chalk_1.default.gray(`  - Plan: ${u.plan}`));
+        console.log(chalk_1.default.gray(`  - Decisions logged: ${u.decisionsLogged}`));
+        console.log(chalk_1.default.gray(`  - Quota remaining: ${u.quotaRemaining}`));
+    }
+    // Chain info
+    if (data.chain) {
+        console.log(chalk_1.default.gray('\n  Chain:'));
+        console.log(chalk_1.default.gray(`  - Total decisions: ${data.chain.totalDecisions}`));
+        console.log(chalk_1.default.gray(`  - Head height: ${data.chain.headHeight}`));
+    }
+    if (data.tenant) {
+        const t = data.tenant;
+        console.log(chalk_1.default.gray('\n  Your Tenant:'));
+        console.log(chalk_1.default.gray(`  - Name: ${t.name || 'N/A'}`));
+        console.log(chalk_1.default.gray(`  - Status: ${t.status || 'N/A'}`));
+        if (t.monthlyDecisionQuota !== undefined && t.currentMonthUsage !== undefined) {
+            const pct = ((t.currentMonthUsage / t.monthlyDecisionQuota) * 100).toFixed(1);
+            console.log(chalk_1.default.gray(`  - Decisions: ${t.currentMonthUsage} / ${t.monthlyDecisionQuota} (${pct}%)`));
+        }
+    }
+});
+// ----------------------------------------------------------------------------
+// Decisions Commands
+// ----------------------------------------------------------------------------
+const decisionsCmd = program
+    .command('decisions')
+    .description('Decision operations');
+decisionsCmd
+    .command('log')
+    .description('Log a new decision')
+    .requiredOption('--verdict <type>', 'Verdict: APPROVE, DENY, DELAY, FOUNDER_REQUIRED')
+    .requiredOption('--score <number>', 'Survival score (-100 to 100)')
+    .requiredOption('--rationale <text>', 'Decision rationale')
+    .option('--agentId <id>', 'Optional agent ID')
+    .option('--json', 'Output JSON format')
+    .action(async (options) => {
+    const verdict = options.verdict.toUpperCase();
+    const validVerdicts = ['APPROVE', 'DENY', 'DELAY', 'FOUNDER_REQUIRED'];
+    if (!validVerdicts.includes(verdict)) {
+        console.error(chalk_1.default.red('✗ Error: Invalid verdict'));
+        console.log(chalk_1.default.gray(`  Must be one of: ${validVerdicts.join(', ')}`));
+        process.exit(1);
+    }
+    const score = parseInt(options.score);
+    if (isNaN(score) || score < -100 || score > 100) {
+        console.error(chalk_1.default.red('✗ Error: Invalid score'));
+        console.log(chalk_1.default.gray('  Must be a number between -100 and 100'));
+        process.exit(1);
+    }
+    const body = {
+        verdict,
+        survivalScore: score,
+        rationale: [options.rationale],
+    };
+    if (options.agentId) {
+        body.agentId = options.agentId;
+    }
+    const data = await apiCall('/api/v1/decisions', {
+        method: 'POST',
+        body,
+        profile: program.opts().profile,
+    });
+    if (options.json) {
+        console.log(JSON.stringify(data, null, 2));
+        return;
+    }
+    if (data.ok && data.data) {
+        const d = data.data;
+        console.log(chalk_1.default.green('✓ Decision logged'));
+        console.log(chalk_1.default.gray(`  ID: ${d.id || 'N/A'}`));
+        console.log(chalk_1.default.gray(`  Chain Height: ${d.chainHeight || 'N/A'}`));
+        console.log(chalk_1.default.gray(`  Hash: ${d.hash ? d.hash.substring(0, 16) + '...' : 'N/A'}`));
+        console.log(chalk_1.default.gray(`  Timestamp: ${d.ts || 'N/A'}`));
+    }
+});
+decisionsCmd
+    .command('list')
+    .description('List recent decisions')
+    .option('--limit <number>', 'Number of decisions to show', '10')
+    .option('--json', 'Output JSON format')
+    .action(async (options) => {
+    const limit = parseInt(options.limit);
+    const data = await apiCall(`/api/v1/decisions?limit=${limit}`, {
+        profile: program.opts().profile,
+    });
+    if (options.json) {
+        console.log(JSON.stringify(data, null, 2));
+        return;
+    }
+    if (data.ok && data.data) {
+        const decisions = data.data;
+        if (decisions.length === 0) {
+            console.log(chalk_1.default.yellow('No decisions found'));
+            return;
+        }
+        console.log(chalk_1.default.bold('\nRecent Decisions:\n'));
+        console.log(chalk_1.default.gray('TIMESTAMP              ') +
+            chalk_1.default.gray('VERDICT  ') +
+            chalk_1.default.gray('SCORE  ') +
+            chalk_1.default.gray('HEIGHT  ') +
+            chalk_1.default.gray('HASH'));
+        console.log(chalk_1.default.gray('─'.repeat(80)));
+        decisions.forEach((d) => {
+            const ts = d.ts ? new Date(d.ts).toISOString().substring(0, 19) + 'Z' : 'N/A';
+            const verdict = (d.verdict || 'N/A').padEnd(8);
+            const score = String(d.survivalScore ?? 'N/A').padEnd(6);
+            const height = String(d.chainHeight ?? 'N/A').padEnd(7);
+            const hash = d.hash ? d.hash.substring(0, 16) : 'N/A';
+            console.log(`${ts}  ${verdict} ${score} ${height} ${hash}`);
+        });
+        console.log(chalk_1.default.gray(`\nTotal: ${decisions.length} decisions`));
+    }
+});
+// ----------------------------------------------------------------------------
+// Verify Chain Command
+// ----------------------------------------------------------------------------
+program
+    .command('verify-chain')
+    .description('Verify cryptographic chain integrity')
+    .option('--json', 'Output JSON format')
+    .action(async (options) => {
+    const data = await apiCall('/api/v1/verify-chain', {
+        profile: program.opts().profile,
+    });
+    if (options.json) {
+        console.log(JSON.stringify(data, null, 2));
+        return;
+    }
+    if (data.ok && data.data) {
+        const d = data.data;
+        if (d.verified) {
+            console.log(chalk_1.default.green('✓ Chain verified'));
+        }
+        else {
+            console.log(chalk_1.default.red('✗ Chain verification failed'));
+        }
+        console.log(chalk_1.default.gray(`  Total Decisions: ${d.totalDecisions || 0}`));
+        console.log(chalk_1.default.gray(`  Chain Height: ${d.chainHeight || 0}`));
+        if (d.headHash) {
+            console.log(chalk_1.default.gray(`  Head Hash: ${d.headHash.substring(0, 16)}...`));
+        }
+        if (d.breaks && d.breaks.length > 0) {
+            console.log(chalk_1.default.red(`\n  Chain Breaks Detected: ${d.breaks.length}`));
+            d.breaks.forEach((b, i) => {
+                console.log(chalk_1.default.red(`    ${i + 1}. Height ${b.height}: ${b.reason}`));
+            });
+        }
+        else {
+            console.log(chalk_1.default.gray('  Breaks: 0'));
+        }
+    }
+});
+// ----------------------------------------------------------------------------
+// Keys Commands
+// ----------------------------------------------------------------------------
+const keysCmd = program
+    .command('keys')
+    .description('API key management');
+keysCmd
+    .command('list')
+    .description('List API keys')
+    .option('--json', 'Output JSON format')
+    .action(async (options) => {
+    const data = await apiCall('/api/v1/keys', {
+        profile: program.opts().profile,
+    });
+    if (options.json) {
+        console.log(JSON.stringify(data, null, 2));
+        return;
+    }
+    if (data.keys) {
+        if (data.keys.length === 0) {
+            console.log(chalk_1.default.yellow('No API keys found'));
+            return;
+        }
+        console.log(chalk_1.default.bold('\nAPI Keys:\n'));
+        console.log(chalk_1.default.gray('ID                      ') +
+            chalk_1.default.gray('NAME           ') +
+            chalk_1.default.gray('LAST4   ') +
+            chalk_1.default.gray('CREATED'));
+        console.log(chalk_1.default.gray('─'.repeat(80)));
+        data.keys.forEach((k) => {
+            const id = (k.apiKeyId || 'N/A').padEnd(23);
+            const name = (k.name || 'Default Key').substring(0, 14).padEnd(14);
+            const last4 = (k.last4 || 'N/A').padEnd(7);
+            const created = k.createdAt ? new Date(k.createdAt).toISOString().substring(0, 10) : 'N/A';
+            console.log(`${id} ${name} ${last4} ${created}`);
+        });
+        console.log(chalk_1.default.gray(`\nTotal: ${data.keys.length} keys`));
+    }
+});
+keysCmd
+    .command('create')
+    .description('Create new API key')
+    .option('--name <name>', 'Key name', 'CLI Key')
+    .option('--scopes <scopes>', 'Comma-separated scopes', 'decisions:write,decisions:read,ops:read,keys:manage')
+    .option('--json', 'Output JSON format')
+    .action(async (options) => {
+    const scopes = options.scopes.split(',').map((s) => s.trim());
+    const data = await apiCall('/api/v1/keys', {
+        method: 'POST',
+        body: { scopes },
+        profile: program.opts().profile,
+    });
+    if (options.json) {
+        console.log(JSON.stringify(data, null, 2));
+        return;
+    }
+    if (data.apiKey) {
+        console.log(chalk_1.default.green('\n✓ API key created'));
+        console.log(chalk_1.default.yellow('\n⚠️  COPY THIS KEY NOW - It will not be shown again:'));
+        console.log(chalk_1.default.bold(`\n  ${data.apiKey}\n`));
+        console.log(chalk_1.default.gray(`  ID: ${data.apiKeyId || 'N/A'}`));
+        console.log(chalk_1.default.gray(`  Scopes: ${data.scopes ? data.scopes.join(', ') : 'N/A'}`));
+    }
+});
+// ----------------------------------------------------------------------------
+// Config Commands
+// ----------------------------------------------------------------------------
+const configCmd = program
+    .command('config')
+    .description('Manage configuration');
+configCmd
+    .command('set')
+    .description('Set configuration value')
+    .argument('<key>', 'Configuration key (apiUrl, apiKey)')
+    .argument('<value>', 'Configuration value')
+    .action((key, value) => {
+    const config = loadConfig();
+    const profileName = program.opts().profile || config.defaultProfile;
+    if (!config.profiles[profileName]) {
+        config.profiles[profileName] = { apiUrl: '' };
+    }
+    if (key === 'apiUrl') {
+        config.profiles[profileName].apiUrl = value;
+        saveConfig(config);
+        console.log(chalk_1.default.green(`✓ Set ${key} = ${value} for profile "${profileName}"`));
+    }
+    else if (key === 'apiKey') {
+        console.log(chalk_1.default.yellow('⚠️  Warning: This will store your API key in plaintext'));
+        console.log(chalk_1.default.gray(`   at ${CONFIG_FILE}`));
+        console.log(chalk_1.default.gray('   Use DEALGO_API_KEY environment variable for better security\n'));
+        config.profiles[profileName].apiKey = value;
+        saveConfig(config);
+        console.log(chalk_1.default.green(`✓ Set ${key} for profile "${profileName}"`));
+    }
+    else {
+        console.error(chalk_1.default.red(`✗ Error: Unknown configuration key "${key}"`));
+        console.log(chalk_1.default.gray('  Valid keys: apiUrl, apiKey'));
+        process.exit(1);
+    }
+});
+configCmd
+    .command('use')
+    .description('Switch default profile')
+    .argument('<profile>', 'Profile name')
+    .action((profileName) => {
+    const config = loadConfig();
+    if (!config.profiles[profileName]) {
+        console.error(chalk_1.default.red(`✗ Error: Profile "${profileName}" not found`));
+        console.log(chalk_1.default.gray(`  Available: ${Object.keys(config.profiles).join(', ')}`));
+        process.exit(1);
+    }
+    config.defaultProfile = profileName;
+    saveConfig(config);
+    console.log(chalk_1.default.green(`✓ Switched to profile "${profileName}"`));
+});
+configCmd
+    .command('list')
+    .description('List all profiles')
+    .action(() => {
+    const config = loadConfig();
+    console.log(chalk_1.default.bold('\nProfiles:\n'));
+    Object.entries(config.profiles).forEach(([name, profile]) => {
+        const marker = name === config.defaultProfile ? chalk_1.default.green('* ') : '  ';
+        console.log(`${marker}${chalk_1.default.bold(name)}`);
+        console.log(chalk_1.default.gray(`    API URL: ${profile.apiUrl}`));
+        console.log(chalk_1.default.gray(`    API Key: ${profile.apiKey ? '***' + profile.apiKey.slice(-4) : 'Not set'}`));
+    });
+    console.log();
+});
+// Parse CLI arguments
+program.parse();

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "dealgo",
+  "version": "1.0.0",
+  "description": "CLI for DeAlgo - Git for AI Decisions. Manage AI decisions, verify cryptographic chains, and control API keys from the terminal.",
+  "main": "dist/index.js",
+  "bin": {
+    "dealgo": "./dist/index.js"
+  },
+  "homepage": "https://dealgo-saas.vercel.app",
+  "scripts": {
+    "build": "tsc",
+    "dev": "ts-node src/index.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "dealgo",
+    "cli",
+    "ai",
+    "decisions",
+    "governance",
+    "audit"
+  ],
+  "author": "DeAlgo Contributors",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Jtjr86/ssi-protocol.git",
+    "directory": "cli"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=16.0.0"
+  },
+  "dependencies": {
+    "commander": "^11.0.0",
+    "chalk": "^4.1.2",
+    "node-fetch": "^2.7.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.10.0",
+    "@types/node-fetch": "^2.6.9",
+    "typescript": "^5.6.0",
+    "ts-node": "^10.9.0"
+  }
+}