Passport Setup

Purpose

Install the kpass CLI on this computer so other Passport skills can run. Grok Bot installs skills but not external dependencies; this skill bridges the gap by installing the CLI itself.

When to Use

Invoke this skill automatically when:

• command -v kpass returns nothing (kpass is not installed)
• Any other Passport skill fails with "command not found: kpass"
• The user asks to "install kpass", "set up Passport", or "prepare my environment for Kite"

Installation

Check First

Before installing, check if kpass is already present:

command -v kpass

If this returns a path, kpass is installed. Skip to verification.

Install on This Computer

If kpass is missing, install it with the official installer.

Security Note: This installer executes a remote script. For Grok Bot and similar autonomous agents running in isolated environments, this step may run automatically per the bot's security model. For interactive agent environments (Claude Code, Cursor, Cline), you must obtain explicit user approval before running this command. Show the user this exact command and wait for their confirmation:

bash <skill-directory>/../scripts/setup.sh

After receiving user approval, run the installer:

bash <skill-directory>/../scripts/setup.sh

If scripts/setup.sh is not available (single-folder skill install), obtain approval for this fallback command, then run it:

get_installer_base() {
  local base=""
  if [[ -n "${KPASS_BASE_URL:-}" ]]; then
    base="$KPASS_BASE_URL"
  else
    local base_file="<skill-directory>/../.installer-base"
    if [[ -f "$base_file" ]]; then
      base="$(tr -d '[:space:]' < "$base_file" 2>/dev/null)"
    fi
  fi
  if [[ -z "$base" ]]; then
    base="https://cli.gokite.ai"
  fi
  [[ $base =~ ^https://cli(\.staging)?\.gokite\.ai$ ]] || { echo "bad installer base: $base" >&2; return 1; }
  printf '%s' "$base"
}
INSTALLER_BASE="$(get_installer_base)" || exit 1
INSTALL_SCRIPT="$(mktemp)"
trap 'rm -f "$INSTALL_SCRIPT"' EXIT
if curl -fsSL --proto '=https' --proto-redir '=https' --max-redirs 0 "$INSTALLER_BASE/install.sh" -o "$INSTALL_SCRIPT" && \
   [[ -s "$INSTALL_SCRIPT" ]] && \
   [[ "$(head -1 "$INSTALL_SCRIPT")" == '#!'* ]]; then
  bash "$INSTALL_SCRIPT"
else
  echo "Installer download failed or is not a shell script" >&2; exit 1
fi

This installer:

• Downloads the latest kpass CLI binary for your platform
• Installs it to ~/.kpass/bin (or $KPASS_INSTALL_DIR/bin), with ~/.local/bin as a fallback
• Updates your shell's PATH if needed

After the installer completes, reload your shell environment:

export PATH="${KPASS_INSTALL_DIR:-$HOME/.kpass}/bin:$HOME/.local/bin:$PATH"
hash -r

Verification

After installation, verify kpass works:

kpass --version

Expected output: a version at or above min_kpass_version in skills.json (currently 6.8.9 or later).

If kpass --version fails, the installation did not succeed. Report the error to the user and stop. Do not proceed to other Passport skills until verification passes.

Next Steps

Once kpass is installed and verified:

• Other Passport skills can now run
• The user may need to authenticate with authenticate-user before using paid features
• Check kpass --help for available commands

Notes

• This skill runs on the bot's own computer, not the user's machine
• The installer is idempotent — safe to run multiple times
• For production use only; the installer URL serves the live kpass release
• No authentication is required to install kpass; authentication happens separately via authenticate-user

Dependencies

None. This is the bootstrap skill that makes other Passport skills possible.