dmint-cli 1.0.1__tar.gz → 1.0.3__tar.gz

{dmint_cli-1.0.1 → dmint_cli-1.0.3}/CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to `dmint-cli` will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.3] - 2026-09-17
+
+### Changed
+- Bump patch version for PyPI release.
+
+### Added
+- **Dashboard Command (`dmint dashboard`)**:
+  - Integrated local human approval dashboard launcher connecting to Core-owned SQLite.
+  - Added CLI options: `--db-path`, `--host`, `--port`, `--deployment-epoch`, `--authority-issuer`, `--approver-id`.
+  - Added runtime dependency on `dmint-dashboard>=1.0.0,<2.0.0`.
+
 ## [1.0.1] - 2026-09-16
 
 ### Changed

{dmint_cli-1.0.1 → dmint_cli-1.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dmint-cli
-Version: 1.0.1
+Version: 1.0.3
 Summary: CLI tooling for Dmint policy creation, compilation, and management
 Author: Dmint Authors
 License-Expression: Apache-2.0
@@ -19,11 +19,13 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: dmint<2.0.0,>=1.0.0
 Requires-Dist: mcp<3.0.0,>=2.2.0
+Requires-Dist: dmint-dashboard<2.0.0,>=1.0.0
+Requires-Dist: questionary>=2.0.0
 Provides-Extra: test
 Requires-Dist: pytest>=8.0.0; extra == "test"
 Dynamic: license-file
 
-# dmint-cli (v1.0.1)
+# dmint-cli (v1.0.3)
 
 > **Developer tooling for interactive discovery, authoring, compilation, and offline verification of Dmint security policies and MCP protection artifacts.**
 
@@ -138,7 +140,7 @@ Verify your installation and version:
 
 ```bash
 dmint --version
-# dmint 1.0.1
+# dmint 1.0.3
 ```
 
 ### 3-Step Walkthrough
@@ -290,6 +292,31 @@ When run without `--dest`, `dmint install-skill` displays a numbered menu and al
 
 ---
 
+### Human Approval Dashboard (`dashboard`)
+
+Launch the local human approval web dashboard directly via the CLI:
+
+```bash
+# Launch dashboard pointing to Core-owned SQLite:
+dmint dashboard --db-path /path/to/approvals.sqlite3
+
+# Custom bind host and port:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --host 127.0.0.1 --port 8080
+
+# With specific deployment epoch:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --deployment-epoch prod-v1
+```
+
+Available options:
+- `--db-path`: Path to Core-owned SQLite database (required, or set `DMINT_DB_PATH`)
+- `--host`: Bind host (default: `127.0.0.1`)
+- `--port`: Bind port (default: `8080`)
+- `--deployment-epoch`: Core deployment epoch (default: `default`)
+- `--authority-issuer`: Issuer ID for the dashboard `LocalApprovalAuthority` (default: `dmint-dashboard`)
+- `--approver-id`: Human subject ID recorded in Core when approving/rejecting (default: `dashboard-human`)
+
+---
+
 ## 8. stdio MCP Transport
 
 For local tool servers, `dmint-cli` connects over standard input/output (`stdio`):
@@ -322,7 +349,7 @@ When an MCP endpoint responds with `401 Unauthorized` or `403 Forbidden`:
 1. **RFC 9728 PRM Discovery**: Looks for the `WWW-Authenticate` header and resolves Protected Resource Metadata (PRM) via `/.well-known/oauth-protected-resource`.
 2. **RFC 8414 AS Discovery**: Resolves the OAuth 2.0 Authorization Server metadata via `/.well-known/oauth-authorization-server`.
 3. **Issuer Validation**: Enforces RFC 9207 issuer matching to prevent authorization server mix-up attacks.
-4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.1"`.
+4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.3"`.
 
 ---
 

dmint_cli-1.0.1/src/dmint_cli.egg-info/PKG-INFO → dmint_cli-1.0.3/README.md

@@ -1,29 +1,4 @@
-Metadata-Version: 2.4
-Name: dmint-cli
-Version: 1.0.1
-Summary: CLI tooling for Dmint policy creation, compilation, and management
-Author: Dmint Authors
-License-Expression: Apache-2.0
-Classifier: Development Status :: 5 - Production/Stable
-Classifier: Environment :: Console
-Classifier: Intended Audience :: Developers
-Classifier: Operating System :: OS Independent
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Classifier: Topic :: Security
-Classifier: Topic :: Software Development :: Compilers
-Requires-Python: >=3.10
-Description-Content-Type: text/markdown
-License-File: LICENSE
-Requires-Dist: dmint<2.0.0,>=1.0.0
-Requires-Dist: mcp<3.0.0,>=2.2.0
-Provides-Extra: test
-Requires-Dist: pytest>=8.0.0; extra == "test"
-Dynamic: license-file
-
-# dmint-cli (v1.0.1)
+# dmint-cli (v1.0.3)
 
 > **Developer tooling for interactive discovery, authoring, compilation, and offline verification of Dmint security policies and MCP protection artifacts.**
 
@@ -138,7 +113,7 @@ Verify your installation and version:
 
 ```bash
 dmint --version
-# dmint 1.0.1
+# dmint 1.0.3
 ```
 
 ### 3-Step Walkthrough
@@ -290,6 +265,31 @@ When run without `--dest`, `dmint install-skill` displays a numbered menu and al
 
 ---
 
+### Human Approval Dashboard (`dashboard`)
+
+Launch the local human approval web dashboard directly via the CLI:
+
+```bash
+# Launch dashboard pointing to Core-owned SQLite:
+dmint dashboard --db-path /path/to/approvals.sqlite3
+
+# Custom bind host and port:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --host 127.0.0.1 --port 8080
+
+# With specific deployment epoch:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --deployment-epoch prod-v1
+```
+
+Available options:
+- `--db-path`: Path to Core-owned SQLite database (required, or set `DMINT_DB_PATH`)
+- `--host`: Bind host (default: `127.0.0.1`)
+- `--port`: Bind port (default: `8080`)
+- `--deployment-epoch`: Core deployment epoch (default: `default`)
+- `--authority-issuer`: Issuer ID for the dashboard `LocalApprovalAuthority` (default: `dmint-dashboard`)
+- `--approver-id`: Human subject ID recorded in Core when approving/rejecting (default: `dashboard-human`)
+
+---
+
 ## 8. stdio MCP Transport
 
 For local tool servers, `dmint-cli` connects over standard input/output (`stdio`):
@@ -322,7 +322,7 @@ When an MCP endpoint responds with `401 Unauthorized` or `403 Forbidden`:
 1. **RFC 9728 PRM Discovery**: Looks for the `WWW-Authenticate` header and resolves Protected Resource Metadata (PRM) via `/.well-known/oauth-protected-resource`.
 2. **RFC 8414 AS Discovery**: Resolves the OAuth 2.0 Authorization Server metadata via `/.well-known/oauth-authorization-server`.
 3. **Issuer Validation**: Enforces RFC 9207 issuer matching to prevent authorization server mix-up attacks.
-4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.1"`.
+4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.3"`.
 
 ---
 

{dmint_cli-1.0.1 → dmint_cli-1.0.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "dmint-cli"
-version = "1.0.1"
+version = "1.0.3"
 description = "CLI tooling for Dmint policy creation, compilation, and management"
 readme = "README.md"
 license = "Apache-2.0"
@@ -27,6 +27,8 @@ classifiers = [
 dependencies = [
     "dmint>=1.0.0,<2.0.0",
     "mcp>=2.2.0,<3.0.0",
+    "dmint-dashboard>=1.0.0,<2.0.0",
+    "questionary>=2.0.0",
 ]
 
 [project.optional-dependencies]

{dmint_cli-1.0.1 → dmint_cli-1.0.3}/src/dmint_cli/__main__.py

@@ -8,6 +8,7 @@ import sys
 from dmint_cli.compile_policy import main_compile
 from dmint_cli.create_mcp_policy import main_create_mcp
 from dmint_cli.create_policy import main_create
+from dmint_cli.dashboard import main_dashboard
 from dmint_cli.install_skill import main_install_skill
 from dmint_cli.verify_policy import main_verify
 from dmint_cli.version import __version__
@@ -73,6 +74,7 @@ Recommended Workflow:
   create-mcp-policy   Specialized MCP workflow: live tool discovery + policy authoring + mcp_protection.json generation
   verify-policy       Deterministic offline validation of policy.json against Dmint schema and invariants (LLM-free)
   install-skill       Install Dmint AI coding agent skill into workspace (.agents/skills/) or global config
+  dashboard           Launch the local human approval dashboard (connects to Core SQLite)
 
 Compatibility Commands:
   compile-policy      [Compatibility] Legacy batch compilation of policy requirements (prefer 'create-policy')
@@ -108,6 +110,11 @@ Compatibility Commands:
         help="Install Dmint AI coding agent skill into workspace (.agents/skills/) or global config",
         add_help=False,
     )
+    subparsers.add_parser(
+        "dashboard",
+        help="Launch the local human approval dashboard (connects to Core SQLite)",
+        add_help=False,
+    )
     subparsers.add_parser(
         "compile-policy",
         help="[Compatibility] Legacy batch compilation of policy requirements (prefer 'create-policy')",
@@ -140,6 +147,8 @@ Compatibility Commands:
         return main_compile(cmd_args)
     elif cmd == "install-skill":
         return main_install_skill(cmd_args)
+    elif cmd == "dashboard":
+        return main_dashboard(cmd_args)
     else:
         parser.print_help(file=sys.stderr)
         return 2

{dmint_cli-1.0.1 → dmint_cli-1.0.3}/src/dmint_cli/create_policy.py

@@ -7,6 +7,7 @@ import ast
 import getpass
 import json
 import sys
+import questionary
 from pathlib import Path
 from typing import Any
 
@@ -186,19 +187,22 @@ def run_create_policy_wizard(
             policy_text = f"[DISCOVERED TOOL DECLARATIONS VIA AST IN {Path(tools_file).name}]\n{tools_summary}\n\n[HUMAN SECURITY REQUIREMENTS]\n{policy_text}"
 
     # 1. Provider & Key setup
-    selected_provider = (provider or "").lower().strip()
     if is_tty and not selected_provider:
-        prov_in = input("Select provider (openai/gemini/groq/openrouter/ollama/custom) [default: openai]: ").strip()
-        selected_provider = prov_in.lower() if prov_in else "openai"
+        selected_provider = questionary.select(
+            "Select provider",
+            choices=["openai", "gemini", "groq", "openrouter", "ollama", "custom"],
+            default="openai"
+        ).ask()
     elif not selected_provider:
         selected_provider = "openai"
 
     resolved_key = resolve_api_key(api_key, selected_provider)
     if is_tty and not resolved_key and selected_provider != "ollama":
-        key_in = getpass.getpass(f"Enter API Key for {selected_provider} (leave blank if using env var): ").strip()
-        if key_in:
-            resolved_key = key_in
-            api_key = key_in
+        resolved_key = questionary.password(
+            f"Enter API Key for {selected_provider} (leave blank if using env var):"
+        ).ask()
+        if resolved_key:
+            api_key = resolved_key
 
     # 2. Model Discovery & Selection
     client = OpenAICompatClient(
@@ -213,28 +217,14 @@ def run_create_policy_wizard(
     if is_tty and not selected_model:
         try:
             available_models = client.list_models()
-            print("\n[✓] Discovered available models:")
-            for idx, m_id in enumerate(available_models[:15], start=1):
-                print(f"  {idx}) {m_id}")
-            if len(available_models) > 15:
-                print(f"  ... and {len(available_models) - 15} more")
-
-            default_m = available_models[0]
-            choice = input(f"\nSelect model number (1-{min(len(available_models), 15)}) or type model ID [default: {default_m}]: ").strip()
-            if choice.isdigit():
-                c_idx = int(choice) - 1
-                if 0 <= c_idx < len(available_models):
-                    selected_model = available_models[c_idx]
-                else:
-                    selected_model = default_m
-            elif choice:
-                selected_model = choice
-            else:
-                selected_model = default_m
+            selected_model = questionary.select(
+                "Select model",
+                choices=available_models,
+                default=available_models[0] if available_models else "gpt-4o-mini"
+            ).ask()
         except Exception as exc:
             print(f"\n[!] Could not list models: {exc}. Please enter model ID manually.")
-            manual_m = input("Enter model ID [default: gpt-4o-mini]: ").strip()
-            selected_model = manual_m or "gpt-4o-mini"
+            selected_model = questionary.text("Enter model ID [default: gpt-4o-mini]:", default="gpt-4o-mini").ask()
     elif not selected_model:
         selected_model = "gpt-4o-mini"
 

dmint_cli-1.0.3/src/dmint_cli/dashboard.py

@@ -0,0 +1,27 @@
+"""Dashboard launcher for dmint CLI."""
+
+from __future__ import annotations
+
+import sys
+
+
+def main_dashboard(args: list[str] | None = None) -> int:
+    """Launch the Dmint local human approval dashboard."""
+    try:
+        from dmint_dashboard import main as dashboard_main
+    except ImportError as exc:
+        print(
+            f"Error: dmint-dashboard is required for this command: {exc}\n"
+            f"Install it with: pip install dmint-dashboard",
+            file=sys.stderr,
+        )
+        return 1
+
+    try:
+        dashboard_main(argv=args, prog="dmint dashboard")
+        return 0
+    except SystemExit as exc:
+        return exc.code if isinstance(exc.code, int) else (0 if exc.code is None else 1)
+    except Exception as exc:
+        print(f"Error starting dashboard: {exc}", file=sys.stderr)
+        return 1

{dmint_cli-1.0.1 → dmint_cli-1.0.3}/src/dmint_cli/version.py

@@ -6,7 +6,7 @@ Single source of truth for package version, User-Agent strings, and client metad
 from __future__ import annotations
 
 # Canonical package version (single source of truth for runtime code)
-__version__ = "1.0.1"
+__version__ = "1.0.3"
 
 
 def get_user_agent(component: str | None = None) -> str:

dmint_cli-1.0.1/README.md → dmint_cli-1.0.3/src/dmint_cli.egg-info/PKG-INFO

@@ -1,4 +1,31 @@
-# dmint-cli (v1.0.1)
+Metadata-Version: 2.4
+Name: dmint-cli
+Version: 1.0.3
+Summary: CLI tooling for Dmint policy creation, compilation, and management
+Author: Dmint Authors
+License-Expression: Apache-2.0
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Compilers
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: dmint<2.0.0,>=1.0.0
+Requires-Dist: mcp<3.0.0,>=2.2.0
+Requires-Dist: dmint-dashboard<2.0.0,>=1.0.0
+Requires-Dist: questionary>=2.0.0
+Provides-Extra: test
+Requires-Dist: pytest>=8.0.0; extra == "test"
+Dynamic: license-file
+
+# dmint-cli (v1.0.3)
 
 > **Developer tooling for interactive discovery, authoring, compilation, and offline verification of Dmint security policies and MCP protection artifacts.**
 
@@ -113,7 +140,7 @@ Verify your installation and version:
 
 ```bash
 dmint --version
-# dmint 1.0.1
+# dmint 1.0.3
 ```
 
 ### 3-Step Walkthrough
@@ -265,6 +292,31 @@ When run without `--dest`, `dmint install-skill` displays a numbered menu and al
 
 ---
 
+### Human Approval Dashboard (`dashboard`)
+
+Launch the local human approval web dashboard directly via the CLI:
+
+```bash
+# Launch dashboard pointing to Core-owned SQLite:
+dmint dashboard --db-path /path/to/approvals.sqlite3
+
+# Custom bind host and port:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --host 127.0.0.1 --port 8080
+
+# With specific deployment epoch:
+dmint dashboard --db-path /path/to/approvals.sqlite3 --deployment-epoch prod-v1
+```
+
+Available options:
+- `--db-path`: Path to Core-owned SQLite database (required, or set `DMINT_DB_PATH`)
+- `--host`: Bind host (default: `127.0.0.1`)
+- `--port`: Bind port (default: `8080`)
+- `--deployment-epoch`: Core deployment epoch (default: `default`)
+- `--authority-issuer`: Issuer ID for the dashboard `LocalApprovalAuthority` (default: `dmint-dashboard`)
+- `--approver-id`: Human subject ID recorded in Core when approving/rejecting (default: `dashboard-human`)
+
+---
+
 ## 8. stdio MCP Transport
 
 For local tool servers, `dmint-cli` connects over standard input/output (`stdio`):
@@ -297,7 +349,7 @@ When an MCP endpoint responds with `401 Unauthorized` or `403 Forbidden`:
 1. **RFC 9728 PRM Discovery**: Looks for the `WWW-Authenticate` header and resolves Protected Resource Metadata (PRM) via `/.well-known/oauth-protected-resource`.
 2. **RFC 8414 AS Discovery**: Resolves the OAuth 2.0 Authorization Server metadata via `/.well-known/oauth-authorization-server`.
 3. **Issuer Validation**: Enforces RFC 9207 issuer matching to prevent authorization server mix-up attacks.
-4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.1"`.
+4. **Dynamic Client Registration**: Performs RFC 7591 Dynamic Client Registration if the server supports it, advertising `client_name="dmint-cli"` and `software_version="1.0.3"`.
 
 ---
 

{dmint_cli-1.0.1 → dmint_cli-1.0.3}/src/dmint_cli.egg-info/SOURCES.txt

@@ -10,6 +10,7 @@ src/dmint_cli/api.py
 src/dmint_cli/compile_policy.py
 src/dmint_cli/create_mcp_policy.py
 src/dmint_cli/create_policy.py
+src/dmint_cli/dashboard.py
 src/dmint_cli/errors.py
 src/dmint_cli/install_skill.py
 src/dmint_cli/io_utils.py

{dmint_cli-1.0.1 → dmint_cli-1.0.3}/src/dmint_cli.egg-info/requires.txt

@@ -1,5 +1,7 @@
 dmint<2.0.0,>=1.0.0
 mcp<3.0.0,>=2.2.0
+dmint-dashboard<2.0.0,>=1.0.0
+questionary>=2.0.0
 
 [test]
 pytest>=8.0.0