dmint-cli 1.0.0__tar.gz → 1.0.2__tar.gz

{dmint_cli-1.0.0 → dmint_cli-1.0.2}/CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to `dmint-cli` will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.2] - 2026-09-17
+
+### Added
+- **Dashboard Command (`dmint dashboard`)**:
+  - Integrated local human approval dashboard launcher connecting to Core-owned SQLite.
+  - Added CLI options: `--db-path`, `--host`, `--port`, `--deployment-epoch`, `--authority-issuer`, `--approver-id`.
+  - Added runtime dependency on `dmint-dashboard>=1.0.0,<2.0.0`.
+
+## [1.0.1] - 2026-09-16
+
+### Changed
+- Bump patch version to work around PyPI filename reuse restriction on `dmint-cli-1.0.0`.
+  No functional or security changes from 1.0.0.
+- Update dmint core dependency pin to `>=1.0.0,<2.0.0` following the dmint v1.0.0 release.
+
 ## [1.0.0] - 2026-09-16
 
 ### Security & Hardening

{dmint_cli-1.0.0 → dmint_cli-1.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dmint-cli
-Version: 1.0.0
+Version: 1.0.2
 Summary: CLI tooling for Dmint policy creation, compilation, and management
 Author: Dmint Authors
 License-Expression: Apache-2.0
@@ -17,13 +17,14 @@ Classifier: Topic :: Software Development :: Compilers
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: dmint<0.2.0,>=0.1.0
+Requires-Dist: dmint<2.0.0,>=1.0.0
 Requires-Dist: mcp<3.0.0,>=2.2.0
+Requires-Dist: dmint-dashboard<2.0.0,>=1.0.0
 Provides-Extra: test
 Requires-Dist: pytest>=8.0.0; extra == "test"
 Dynamic: license-file
 
-# dmint-cli (v1.0.0)
+# dmint-cli (v1.0.2)
 
 > **Developer tooling for interactive discovery, authoring, compilation, and offline verification of Dmint security policies and MCP protection artifacts.**
 
@@ -138,7 +139,7 @@ Verify your installation and version:
 
 ```bash
 dmint --version
-# dmint 1.0.0
+# dmint 1.0.2
 ```
 
 ### 3-Step Walkthrough
@@ -290,6 +291,31 @@ When run without `--dest`, `dmint install-skill` displays a numbered menu and al
 
 ---
 
+### Human Approval Dashboard (`dashboard`)
+
+Launch the local human approval web dashboard directly via the CLI:
+
+```bash
+# Launch dashboard pointing to Core-owned SQLite:
+dmint dashboard --db-path /path/to/approvals.sqlite3
+
+# Custom bind host and port:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --host 127.0.0.1 --port 8080
+
+# With specific deployment epoch:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --deployment-epoch prod-v1
+```
+
+Available options:
+- `--db-path`: Path to Core-owned SQLite database (required, or set `DMINT_DB_PATH`)
+- `--host`: Bind host (default: `127.0.0.1`)
+- `--port`: Bind port (default: `8080`)
+- `--deployment-epoch`: Core deployment epoch (default: `default`)
+- `--authority-issuer`: Issuer ID for the dashboard `LocalApprovalAuthority` (default: `dmint-dashboard`)
+- `--approver-id`: Human subject ID recorded in Core when approving/rejecting (default: `dashboard-human`)
+
+---
+
 ## 8. stdio MCP Transport
 
 For local tool servers, `dmint-cli` connects over standard input/output (`stdio`):
@@ -322,7 +348,7 @@ When an MCP endpoint responds with `401 Unauthorized` or `403 Forbidden`:
 1. **RFC 9728 PRM Discovery**: Looks for the `WWW-Authenticate` header and resolves Protected Resource Metadata (PRM) via `/.well-known/oauth-protected-resource`.
 2. **RFC 8414 AS Discovery**: Resolves the OAuth 2.0 Authorization Server metadata via `/.well-known/oauth-authorization-server`.
 3. **Issuer Validation**: Enforces RFC 9207 issuer matching to prevent authorization server mix-up attacks.
-4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.0"`.
+4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.2"`.
 
 ---
 

dmint_cli-1.0.0/src/dmint_cli.egg-info/PKG-INFO → dmint_cli-1.0.2/README.md

@@ -1,29 +1,4 @@
-Metadata-Version: 2.4
-Name: dmint-cli
-Version: 1.0.0
-Summary: CLI tooling for Dmint policy creation, compilation, and management
-Author: Dmint Authors
-License-Expression: Apache-2.0
-Classifier: Development Status :: 5 - Production/Stable
-Classifier: Environment :: Console
-Classifier: Intended Audience :: Developers
-Classifier: Operating System :: OS Independent
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Classifier: Topic :: Security
-Classifier: Topic :: Software Development :: Compilers
-Requires-Python: >=3.10
-Description-Content-Type: text/markdown
-License-File: LICENSE
-Requires-Dist: dmint<0.2.0,>=0.1.0
-Requires-Dist: mcp<3.0.0,>=2.2.0
-Provides-Extra: test
-Requires-Dist: pytest>=8.0.0; extra == "test"
-Dynamic: license-file
-
-# dmint-cli (v1.0.0)
+# dmint-cli (v1.0.2)
 
 > **Developer tooling for interactive discovery, authoring, compilation, and offline verification of Dmint security policies and MCP protection artifacts.**
 
@@ -138,7 +113,7 @@ Verify your installation and version:
 
 ```bash
 dmint --version
-# dmint 1.0.0
+# dmint 1.0.2
 ```
 
 ### 3-Step Walkthrough
@@ -290,6 +265,31 @@ When run without `--dest`, `dmint install-skill` displays a numbered menu and al
 
 ---
 
+### Human Approval Dashboard (`dashboard`)
+
+Launch the local human approval web dashboard directly via the CLI:
+
+```bash
+# Launch dashboard pointing to Core-owned SQLite:
+dmint dashboard --db-path /path/to/approvals.sqlite3
+
+# Custom bind host and port:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --host 127.0.0.1 --port 8080
+
+# With specific deployment epoch:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --deployment-epoch prod-v1
+```
+
+Available options:
+- `--db-path`: Path to Core-owned SQLite database (required, or set `DMINT_DB_PATH`)
+- `--host`: Bind host (default: `127.0.0.1`)
+- `--port`: Bind port (default: `8080`)
+- `--deployment-epoch`: Core deployment epoch (default: `default`)
+- `--authority-issuer`: Issuer ID for the dashboard `LocalApprovalAuthority` (default: `dmint-dashboard`)
+- `--approver-id`: Human subject ID recorded in Core when approving/rejecting (default: `dashboard-human`)
+
+---
+
 ## 8. stdio MCP Transport
 
 For local tool servers, `dmint-cli` connects over standard input/output (`stdio`):
@@ -322,7 +322,7 @@ When an MCP endpoint responds with `401 Unauthorized` or `403 Forbidden`:
 1. **RFC 9728 PRM Discovery**: Looks for the `WWW-Authenticate` header and resolves Protected Resource Metadata (PRM) via `/.well-known/oauth-protected-resource`.
 2. **RFC 8414 AS Discovery**: Resolves the OAuth 2.0 Authorization Server metadata via `/.well-known/oauth-authorization-server`.
 3. **Issuer Validation**: Enforces RFC 9207 issuer matching to prevent authorization server mix-up attacks.
-4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.0"`.
+4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.2"`.
 
 ---
 

{dmint_cli-1.0.0 → dmint_cli-1.0.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "dmint-cli"
-version = "1.0.0"
+version = "1.0.2"
 description = "CLI tooling for Dmint policy creation, compilation, and management"
 readme = "README.md"
 license = "Apache-2.0"
@@ -25,8 +25,9 @@ classifiers = [
     "Topic :: Software Development :: Compilers",
 ]
 dependencies = [
-    "dmint>=0.1.0,<0.2.0",
+    "dmint>=1.0.0,<2.0.0",
     "mcp>=2.2.0,<3.0.0",
+    "dmint-dashboard>=1.0.0,<2.0.0",
 ]
 
 [project.optional-dependencies]

{dmint_cli-1.0.0 → dmint_cli-1.0.2}/src/dmint_cli/__main__.py

@@ -8,6 +8,7 @@ import sys
 from dmint_cli.compile_policy import main_compile
 from dmint_cli.create_mcp_policy import main_create_mcp
 from dmint_cli.create_policy import main_create
+from dmint_cli.dashboard import main_dashboard
 from dmint_cli.install_skill import main_install_skill
 from dmint_cli.verify_policy import main_verify
 from dmint_cli.version import __version__
@@ -73,6 +74,7 @@ Recommended Workflow:
   create-mcp-policy   Specialized MCP workflow: live tool discovery + policy authoring + mcp_protection.json generation
   verify-policy       Deterministic offline validation of policy.json against Dmint schema and invariants (LLM-free)
   install-skill       Install Dmint AI coding agent skill into workspace (.agents/skills/) or global config
+  dashboard           Launch the local human approval dashboard (connects to Core SQLite)
 
 Compatibility Commands:
   compile-policy      [Compatibility] Legacy batch compilation of policy requirements (prefer 'create-policy')
@@ -108,6 +110,11 @@ Compatibility Commands:
         help="Install Dmint AI coding agent skill into workspace (.agents/skills/) or global config",
         add_help=False,
     )
+    subparsers.add_parser(
+        "dashboard",
+        help="Launch the local human approval dashboard (connects to Core SQLite)",
+        add_help=False,
+    )
     subparsers.add_parser(
         "compile-policy",
         help="[Compatibility] Legacy batch compilation of policy requirements (prefer 'create-policy')",
@@ -140,6 +147,8 @@ Compatibility Commands:
         return main_compile(cmd_args)
     elif cmd == "install-skill":
         return main_install_skill(cmd_args)
+    elif cmd == "dashboard":
+        return main_dashboard(cmd_args)
     else:
         parser.print_help(file=sys.stderr)
         return 2

dmint_cli-1.0.2/src/dmint_cli/dashboard.py

@@ -0,0 +1,27 @@
+"""Dashboard launcher for dmint CLI."""
+
+from __future__ import annotations
+
+import sys
+
+
+def main_dashboard(args: list[str] | None = None) -> int:
+    """Launch the Dmint local human approval dashboard."""
+    try:
+        from dmint_dashboard import main as dashboard_main
+    except ImportError as exc:
+        print(
+            f"Error: dmint-dashboard is required for this command: {exc}\n"
+            f"Install it with: pip install dmint-dashboard",
+            file=sys.stderr,
+        )
+        return 1
+
+    try:
+        dashboard_main(argv=args, prog="dmint dashboard")
+        return 0
+    except SystemExit as exc:
+        return exc.code if isinstance(exc.code, int) else (0 if exc.code is None else 1)
+    except Exception as exc:
+        print(f"Error starting dashboard: {exc}", file=sys.stderr)
+        return 1

{dmint_cli-1.0.0 → dmint_cli-1.0.2}/src/dmint_cli/version.py

@@ -6,16 +6,16 @@ Single source of truth for package version, User-Agent strings, and client metad
 from __future__ import annotations
 
 # Canonical package version (single source of truth for runtime code)
-__version__ = "1.0.0"
+__version__ = "1.0.2"
 
 
 def get_user_agent(component: str | None = None) -> str:
     """Return the canonical User-Agent header string.
 
     Examples:
-        get_user_agent() -> 'dmint-cli/1.0.0'
-        get_user_agent('oauth') -> 'dmint-oauth/1.0.0'
-        get_user_agent('policy-author') -> 'dmint-policy-author/1.0.0'
+        get_user_agent() -> 'dmint-cli/1.0.1'
+        get_user_agent('oauth') -> 'dmint-oauth/1.0.1'
+        get_user_agent('policy-author') -> 'dmint-policy-author/1.0.1'
     """
     if component:
         return f"dmint-{component}/{__version__}"

dmint_cli-1.0.0/README.md → dmint_cli-1.0.2/src/dmint_cli.egg-info/PKG-INFO

@@ -1,4 +1,30 @@
-# dmint-cli (v1.0.0)
+Metadata-Version: 2.4
+Name: dmint-cli
+Version: 1.0.2
+Summary: CLI tooling for Dmint policy creation, compilation, and management
+Author: Dmint Authors
+License-Expression: Apache-2.0
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Compilers
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: dmint<2.0.0,>=1.0.0
+Requires-Dist: mcp<3.0.0,>=2.2.0
+Requires-Dist: dmint-dashboard<2.0.0,>=1.0.0
+Provides-Extra: test
+Requires-Dist: pytest>=8.0.0; extra == "test"
+Dynamic: license-file
+
+# dmint-cli (v1.0.2)
 
 > **Developer tooling for interactive discovery, authoring, compilation, and offline verification of Dmint security policies and MCP protection artifacts.**
 
@@ -113,7 +139,7 @@ Verify your installation and version:
 
 ```bash
 dmint --version
-# dmint 1.0.0
+# dmint 1.0.2
 ```
 
 ### 3-Step Walkthrough
@@ -265,6 +291,31 @@ When run without `--dest`, `dmint install-skill` displays a numbered menu and al
 
 ---
 
+### Human Approval Dashboard (`dashboard`)
+
+Launch the local human approval web dashboard directly via the CLI:
+
+```bash
+# Launch dashboard pointing to Core-owned SQLite:
+dmint dashboard --db-path /path/to/approvals.sqlite3
+
+# Custom bind host and port:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --host 127.0.0.1 --port 8080
+
+# With specific deployment epoch:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --deployment-epoch prod-v1
+```
+
+Available options:
+- `--db-path`: Path to Core-owned SQLite database (required, or set `DMINT_DB_PATH`)
+- `--host`: Bind host (default: `127.0.0.1`)
+- `--port`: Bind port (default: `8080`)
+- `--deployment-epoch`: Core deployment epoch (default: `default`)
+- `--authority-issuer`: Issuer ID for the dashboard `LocalApprovalAuthority` (default: `dmint-dashboard`)
+- `--approver-id`: Human subject ID recorded in Core when approving/rejecting (default: `dashboard-human`)
+
+---
+
 ## 8. stdio MCP Transport
 
 For local tool servers, `dmint-cli` connects over standard input/output (`stdio`):
@@ -297,7 +348,7 @@ When an MCP endpoint responds with `401 Unauthorized` or `403 Forbidden`:
 1. **RFC 9728 PRM Discovery**: Looks for the `WWW-Authenticate` header and resolves Protected Resource Metadata (PRM) via `/.well-known/oauth-protected-resource`.
 2. **RFC 8414 AS Discovery**: Resolves the OAuth 2.0 Authorization Server metadata via `/.well-known/oauth-authorization-server`.
 3. **Issuer Validation**: Enforces RFC 9207 issuer matching to prevent authorization server mix-up attacks.
-4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.0"`.
+4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.2"`.
 
 ---
 

{dmint_cli-1.0.0 → dmint_cli-1.0.2}/src/dmint_cli.egg-info/SOURCES.txt

@@ -10,6 +10,7 @@ src/dmint_cli/api.py
 src/dmint_cli/compile_policy.py
 src/dmint_cli/create_mcp_policy.py
 src/dmint_cli/create_policy.py
+src/dmint_cli/dashboard.py
 src/dmint_cli/errors.py
 src/dmint_cli/install_skill.py
 src/dmint_cli/io_utils.py

dmint_cli-1.0.2/src/dmint_cli.egg-info/requires.txt

@@ -0,0 +1,6 @@
+dmint<2.0.0,>=1.0.0
+mcp<3.0.0,>=2.2.0
+dmint-dashboard<2.0.0,>=1.0.0
+
+[test]
+pytest>=8.0.0

dmint_cli-1.0.0/src/dmint_cli.egg-info/requires.txt

@@ -1,5 +0,0 @@
-dmint<0.2.0,>=0.1.0
-mcp<3.0.0,>=2.2.0
-
-[test]
-pytest>=8.0.0