CLI

node src/ticket16/cli.mjs <capabilityId> [jsonPayload]. The key comes from TRUMPET_API_KEY in the environment. The payload is one JSON object as the second argument.

export TRUMPET_API_KEY=trk_...

node src/ticket16/cli.mjs ticket6:readLedger '{}'

A success prints the result as one JSON line and exits 0.

{"balanceMinor":3000,"currency":"USD","entries":[...]}

A refusal prints one code on stderr and exits 1. There is no message, because a message can quote a connection string or a key.

{"error":"ACCESS_REFUSED"}

• Exit 0 means the capability ran.
• Exit 1 means a refusal. The code is on stderr.
• Exit 2 means the arguments were wrong, or the payload was not a JSON object.

These run in process with the runtime environment. Each one is a person at a terminal, not an agent.

npm run migrate

Applies the migrations. It takes a separate owner connection in TRUMPET_MIGRATION_DATABASE_URL, because migrations create roles and policies that the runtime role must not be able to create.

npm start

Runs the poller and the served listener. It reads TRUMPET_DATABASE_URL, STRIPE_RESTRICTED_KEY, TRUMPET_WORKSPACE and TRUMPET_PROGRAM, plus TRUMPET_API_KEY_PEPPER for the served surface.

npm run held

list, replay <evt_id> and close <evt_id> --reason <text> --correction <ref>. Replay and close are human gates. The operator identity comes from TRUMPET_OPERATOR and is recorded on each row the command resolves.

npm run approvals

list, approve <request_id> and reject <request_id> --reason <text>. The operator approval channel. It runs as a human actor on the cli surface. No served key, MCP key or partner read can produce that actor.

npm run workspace:create

Creates a workspace and prints its first service key once. It refuses the runtime connection and demands a separate least privilege operator connection in TRUMPET_OPERATOR_DATABASE_URL.

npm run golive:check

A read only preflight. It writes nothing.

93 capabilities declare the cli surface. The CLI lists only the automation safe ones as commands. A human gate still refuses an agent and creates an approval request.

Generated from shyftai/trumpet at cbc30f1 by scripts/gen-reference.mjs.