godmode 0.0.2 → 0.0.3

package/dist/permissions-E4G66OUZ.js

@@ -0,0 +1,125 @@
+#!/usr/bin/env node
+import {
+  explainPermission,
+  matchRoute,
+  resourceFromRawPath,
+  resourceFromSegments,
+  suggestedAllowRule
+} from "./chunk-4EU5JX6C.js";
+import {
+  EXIT_CODES
+} from "./chunk-XFFBFBN6.js";
+import {
+  warnSettingsErrors
+} from "./chunk-SMQBMG24.js";
+import {
+  loadManifest
+} from "./chunk-KHFZI7IA.js";
+import "./chunk-3AQ2CZKC.js";
+import "./chunk-YDXTIN53.js";
+
+// src/commands/permissions.ts
+function showPermissionsHelp() {
+  console.log(`Inspect godmode permission policy.
+
+Usage:
+  godmode permissions list
+  godmode permissions explain <extension> <interface> <target> [method]
+
+Exit codes:
+  0   success / allowed
+  2   usage or parse error
+  3   extension or route not found
+  4   permission denied
+  10  upstream HTTP 4xx
+  11  upstream HTTP 5xx
+  12  upstream failure`);
+}
+async function runPermissions(rest) {
+  const cmd = rest[0];
+  if (!cmd || cmd === "--help" || cmd === "-h") {
+    warnSettingsErrors();
+    showPermissionsHelp();
+    return;
+  }
+  if (cmd === "list") {
+    const { loadSettingsDetailed } = await import("./settings-3FF5WWEY.js");
+    const loaded = loadSettingsDetailed();
+    for (const error of loaded.errors) {
+      process.stderr.write(`Warning: cannot parse ${error.path}: ${error.message}
+`);
+    }
+    const sources = loaded.sources.flatMap((source) => {
+      const extensions = source.settings.extensions ?? {};
+      return Object.entries(extensions).flatMap(([slug, settings]) => {
+        const permissions = settings.permissions;
+        if (!permissions?.allow?.length && !permissions?.deny?.length) return [];
+        return [{ slug, permissions, origin: `${source.scope}:${source.path}` }];
+      });
+    });
+    if (!sources.length) {
+      console.log("No permissions configured.");
+      return;
+    }
+    for (const { slug, permissions, origin } of sources) {
+      console.log(`${slug}:`);
+      for (const effect of ["allow", "deny"]) {
+        for (const rule of permissions[effect] ?? []) {
+          const resources = rule.resources?.join(", ") || "*";
+          const methods = rule.methods?.join(", ") || "*";
+          console.log(`  ${effect} resources=[${resources}] methods=[${methods}] origin=${origin}`);
+        }
+      }
+    }
+    return;
+  }
+  if (cmd === "explain") {
+    const [extension, iface, target, maybeMethod] = rest.slice(1);
+    if (!extension || !iface || !target) {
+      process.stderr.write("Usage: godmode permissions explain <extension> <interface> <target> [method]\n");
+      process.exit(EXIT_CODES.usage);
+    }
+    const method = iface === "mcp" ? "mcp" : maybeMethod || "GET";
+    const resource = await explainResource(extension, iface, target, method);
+    const decision = explainPermission({ extension, resource, method });
+    console.log(`${decision.allowed ? "allow" : "deny"} ${extension} ${iface} ${target} ${method.toUpperCase()}`);
+    if (decision.reason) console.log(decision.reason);
+    if (decision.rule) {
+      console.log(`winning rule: resources=[${decision.rule.resources?.join(", ") || "*"}] methods=[${decision.rule.methods?.join(", ") || "*"}] origin=${decision.origin || "settings.yaml"}`);
+    }
+    if (!decision.allowed) {
+      console.log(`suggested allow rule:
+${suggestedAllowRule({ extension, resource, method })}`);
+      process.exit(EXIT_CODES.permissionDenied);
+    }
+    return;
+  }
+  process.stderr.write(`Unknown permissions command '${cmd}'.
+`);
+  process.stderr.write(`Try 'godmode permissions --help' for more information.
+`);
+  process.exit(EXIT_CODES.usage);
+}
+async function explainResource(extension, iface, target, method) {
+  if (iface === "mcp") return target;
+  if (iface === "api" || iface === "graphql") {
+    try {
+      const manifest = await loadManifest(extension, iface);
+      const normalizedMethod = method.toLowerCase();
+      if (target.startsWith("/")) {
+        const exact = manifest.routes.find((route) => route.method === normalizedMethod && route.path === target);
+        if (exact) return resourceFromSegments(exact.segments);
+      }
+      const segments = target.replace(/^\/+/, "").split(/[/.]/).filter(Boolean);
+      const match = matchRoute(manifest, segments, normalizedMethod);
+      if (match) return resourceFromSegments(match.route.segments);
+      return resourceFromRawPath(target);
+    } catch {
+      return target.replace(/^\/+/, "").replace(/\//g, ".").replace(/^v\d+\./i, "") || "*";
+    }
+  }
+  return target.replace(/^\/+/, "").replace(/\//g, ".").replace(/^v\d+\./i, "") || "*";
+}
+export {
+  runPermissions
+};

package/dist/{prompt-SWOWWAOH.js → prompt-YPAZ5433.js}

@@ -2,7 +2,7 @@
 
 // src/prompt.ts
 import prompts from "prompts";
-import { writeFileSync } from "fs";
+import { mkdirSync, writeFileSync } from "fs";
 import { resolve } from "path";
 import { stringify } from "yaml";
 async function configWizard() {
@@ -60,11 +60,15 @@ async function configWizard() {
   } });
   const config = {
     name: response.name.charAt(0).toUpperCase() + response.name.slice(1),
-    type: "api",
-    spec: response.spec
+    slug: response.name.toLowerCase().replace(/[^a-z0-9-]/g, "-"),
+    interfaces: {
+      api: {
+        spec: response.spec
+      }
+    }
   };
   if (response.description) config.description = response.description;
-  if (response.url) config.url = response.url;
+  if (response.url) config.interfaces.api.url = response.url;
   if (response.envVar) {
     config.auth = { env: response.envVar };
     if (response.authType && response.authType !== "bearer") {
@@ -72,7 +76,8 @@ async function configWizard() {
     }
   }
   const yaml = stringify(config);
-  const filename = `${response.name.toLowerCase().replace(/[^a-z0-9]/g, "-")}.yaml`;
+  const dirname = response.name.toLowerCase().replace(/[^a-z0-9-]/g, "-");
+  const filename = `${dirname}/manifest.yaml`;
   console.log(`
 \x1B[2m${yaml}\x1B[0m`);
   const { write } = await prompts({
@@ -86,10 +91,11 @@ async function configWizard() {
     return;
   }
   const filepath = resolve(process.cwd(), filename);
+  mkdirSync(resolve(process.cwd(), dirname), { recursive: true });
   writeFileSync(filepath, yaml);
   console.log(`
 Saved ${filepath}`);
-  console.log(`Run \x1B[1mgodmode extension add ${response.name.toLowerCase()}\x1B[0m to register it.`);
+  console.log(`Run \x1B[1mgodmode ext install ./${dirname}\x1B[0m to register it.`);
 }
 export {
   configWizard

package/dist/{server-4YVOAJJG.js → server-L3L4TKK3.js}

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
 import {
   executeToString
-} from "./chunk-GJCJO7YT.js";
+} from "./chunk-AWGLXW3B.js";
 import {
   executeMcpTool
-} from "./chunk-EXWYJU2I.js";
+} from "./chunk-3AQ2CZKC.js";
+import "./chunk-YDXTIN53.js";
 
 // ../../interfaces/mcp/src/server.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -98,6 +99,15 @@ async function serveMcp(manifest, options = {}) {
     }
     try {
       let result;
+      const extension = manifest.config.slug || manifest.name;
+      const resource = type === "mcp" ? resourceFromTool(toolName) : resourceFromSegments(tool.route.segments);
+      const method = type === "mcp" ? "mcp" : tool.route.method;
+      if (options.checkPermission) {
+        const check = options.checkPermission({ extension, resource, method });
+        if (!check.allowed) {
+          return { content: [{ type: "text", text: `Blocked: ${check.reason}` }], isError: true };
+        }
+      }
       if (type === "mcp") {
         result = await executeMcpTool(manifest.config, toolName, args, {});
       } else if (type === "graphql") {
@@ -124,6 +134,13 @@ async function serveMcp(manifest, options = {}) {
   });
   await server.connect(new StdioServerTransport());
 }
+function resourceFromSegments(segments) {
+  const parts = segments.filter((s) => !s.isParam).map((s) => s.value).filter((v) => !/^v\d+$/i.test(v));
+  return parts.join(".") || "*";
+}
+function resourceFromTool(toolName) {
+  return toolName;
+}
 export {
   serveMcp
 };

package/dist/settings-3FF5WWEY.js

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+import {
+  extensionSettings,
+  loadSettings,
+  loadSettingsDetailed,
+  resetSettingsCache,
+  settingsErrorMessage,
+  warnSettingsErrors
+} from "./chunk-SMQBMG24.js";
+export {
+  extensionSettings,
+  loadSettings,
+  loadSettingsDetailed,
+  resetSettingsCache,
+  settingsErrorMessage,
+  warnSettingsErrors
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "godmode",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "any API as CLI. any API as MCP. zero code generation.",
   "type": "module",
   "license": "MIT",
@@ -26,6 +26,7 @@
   "exports": {
     "./spec": "./src/spec.ts",
     "./config": "./src/config.ts",
+    "./permissions": "./src/permissions.ts",
     "./help": "./src/help.ts"
   },
   "files": [
@@ -34,23 +35,23 @@
     "README.md"
   ],
   "dependencies": {
-    "@hey-api/openapi-ts": "^0.94.0",
-    "@modelcontextprotocol/sdk": "^1.12.1",
+    "@hey-api/openapi-ts": "^0.97.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "fuzzysort": "^3.1.0",
     "prompts": "^2.4.2",
-    "yaml": "^2.8.0",
+    "yaml": "^2.8.4",
     "@godmode-cli/cli": "0.0.1",
     "@godmode-cli/command-agent": "0.0.1",
-    "@godmode-cli/interface-graphql": "0.0.1",
     "@godmode-cli/interface-api": "0.0.1",
+    "@godmode-cli/interface-graphql": "0.0.1",
     "@godmode-cli/interface-mcp": "0.0.1"
   },
   "devDependencies": {
-    "@types/node": "^22.0.0",
+    "@types/node": "^25.6.0",
     "@types/prompts": "^2.4.9",
-    "tsup": "^8.0.0",
-    "typescript": "^5.5.0",
-    "vitest": "^4.1.0"
+    "tsup": "^8.5.1",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.5"
   },
   "engines": {
     "node": ">=20.0.0"