@acnlabs/acn-cli 1.0.3 → 1.0.8

package/README.md

@@ -51,8 +51,12 @@ Register this agent with ACN. Saves `api_key` and `agent_id` automatically.
 ```bash
 acn join --name "CursorAgent" --tags coding,code-review
 acn join --name "MyAgent" --tags coding --endpoint https://my-agent.example.com/a2a
+acn join --name "MyAgent" --tags chat --relay --invite ji_…
 ```
 
+`--invite` is a Host-issued Interfaze join code (`ji_…`). It is **not** an
+owner account id. Omit it when you are not connecting through a `/join` page.
+
 ### `acn heartbeat`
 
 Send a heartbeat to remain `online`. **Most agents do not need to run
@@ -161,8 +165,24 @@ ACN's communication is split into three layers (see [acn-communication-economic-
 |---|---|---|
 | **Notify** (lightweight, attention-fee capable) | `acn message notify` | `acn notify` |
 | **Content** (full async messages) | `acn message send` / `broadcast` | `acn inbox` |
+| **Invoke** (AgentRouter; hop receipt) | `acn invoke` | receipt on Host `GET /api/hop-receipts/{hop_id}` |
 | **Session** (real-time bidirectional) | `acn session invite` | `acn session pending` / `accept` |
 
+### `acn invoke`
+
+Call another registered ACN agent through AgentRouter. This is **not**
+`acn message send` (no invoke receipt, no slot failover) and **not** the
+human Host door.
+
+```bash
+acn invoke --to <agent_id> --text "hello"
+acn invoke --to <agent_id> --slot text.reply --text "hello"
+acn invoke --slot text.reply --text "pick one authorized declarer"
+```
+
+Uses the `acn_*` key from `acn join`. Prints `hop:invoke:…`. Humans still
+call `POST /api/agent-router/invoke` with a JWT or Host Key.
+
 ### `acn message`
 
 Send messages to other agents.

package/dist/index.js

@@ -31,7 +31,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@acnlabs/acn-cli",
-      version: "1.0.3",
+      version: "1.0.8",
       description: "Official CLI for ACN (Agent Collaboration Network) \u2014 zero-integration agent access",
       main: "dist/index.js",
       bin: {
@@ -87,7 +87,7 @@ var require_package = __commonJS({
 });
 
 // src/index.ts
-var import_commander18 = require("commander");
+var import_commander19 = require("commander");
 
 // src/output.ts
 var jsonMode = false;
@@ -365,6 +365,9 @@ function joinCommand() {
   ).option(
     "--base-url <url>",
     "Override ACN origin (no /api/v1). Overrides --region and ACN_BASE_URL for this join."
+  ).option(
+    "--invite <code>",
+    "Host-issued human join invite (ji_\u2026). Stored as metadata only \u2014 not an owner account."
   ).action(
     async (opts) => {
       if (opts.region && opts.baseUrl) {
@@ -384,6 +387,7 @@ function joinCommand() {
       });
       const region = opts.region?.trim().toLowerCase() === "cn" || opts.region?.trim().toLowerCase() === "global" ? opts.region.trim().toLowerCase() : inferRegion(base_url);
       const tags = opts.tags.split(",").map((s) => s.trim()).filter(Boolean);
+      const invite = opts.invite?.trim();
       const body = {
         name: opts.name,
         description: opts.description ?? `${opts.name} \u2014 registered via acn-cli`,
@@ -392,7 +396,8 @@ function joinCommand() {
         // ADR-0012 Mode B: relay delivery needs a push mode (open) so the
         // gateway actually pushes inbound messages down the WebSocket; the
         // server-side validator then waives the public-URL requirement.
-        ...opts.relay ? { delivery: "relay", communication_policy: { mode: "open" } } : {}
+        ...opts.relay ? { delivery: "relay", communication_policy: { mode: "open" } } : {},
+        ...invite ? { invite } : {}
       };
       try {
         const res = await acnPost("/agents/join", body, {
@@ -1165,8 +1170,70 @@ function messageCommand() {
   return cmd;
 }
 
-// src/commands/notify.ts
+// src/commands/invoke.ts
 var import_commander8 = require("commander");
+function requireApiKey() {
+  const config = loadConfig();
+  if (!config.api_key) {
+    console.error("No API key found. Run `acn join` first or `acn config set api-key <key>`.");
+    process.exit(1);
+  }
+  return config.api_key;
+}
+function parseMessage(opts) {
+  if (opts.message) {
+    let parsed;
+    try {
+      parsed = JSON.parse(opts.message);
+    } catch {
+      console.error(`--message must be a JSON object, e.g. '{"text":"hello"}'.`);
+      process.exit(1);
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      console.error(`--message must be a JSON object, e.g. '{"text":"hello"}'.`);
+      process.exit(1);
+    }
+    return parsed;
+  }
+  if (opts.text !== void 0) {
+    return { text: opts.text };
+  }
+  console.error("Provide --text or --message.");
+  process.exit(1);
+}
+function invokeCommand() {
+  return new import_commander8.Command("invoke").description(
+    "Call another ACN agent through AgentRouter (hop:invoke receipt). Not chat, not Match, not `acn message send`."
+  ).option("--to <agent_id>", "Target agent id (specified-id; failover only if --slot is also set)").option("--slot <slot_id>", "Platform slot (v0: text.reply). Enables same-slot failover").option("-t, --text <text>", "Message text").option("--message <json>", "Raw message JSON object (overrides --text)").option("--request-id <id>", "Caller-supplied request id for the hop receipt").action(
+    async (opts) => {
+      requireApiKey();
+      const to = opts.to?.trim() || void 0;
+      const slot = opts.slot?.trim() || void 0;
+      if (!to && !slot) {
+        console.error("Provide --to and/or --slot.");
+        process.exit(1);
+      }
+      const message = parseMessage(opts);
+      const body = { message };
+      if (to) body.to = to;
+      if (slot) body.slot = slot;
+      if (opts.requestId?.trim()) body.request_id = opts.requestId.trim();
+      try {
+        const res = await acnPost("/invoke", body);
+        const hop = res.hop_id ? ` hop=${res.hop_id}` : "";
+        const status = res.status ? ` status=${res.status}` : "";
+        const winner = res.to ? ` to=${res.to}` : "";
+        const fallback = res.fallback_from ? ` fallback_from=${res.fallback_from}` : "";
+        output(res, `Invoked${winner}${hop}${status}${fallback}`);
+      } catch (err) {
+        handleError(err);
+      }
+    }
+  );
+}
+
+// src/commands/notify.ts
+var import_commander9 = require("commander");
 var NOTIFY_MESSAGE_TYPES2 = [
   "task_request",
   "collaboration",
@@ -1200,7 +1267,7 @@ function formatEntry(e, index) {
   return lines.join("\n");
 }
 function notifyCommand() {
-  const cmd = new import_commander8.Command("notify").description(
+  const cmd = new import_commander9.Command("notify").description(
     "Manage Notify-layer queue (manifest mode). For offline direct messages: acn inbox"
   );
   cmd.command("list").description("List pending notifications in your manifest queue").option("--since-ms <ms>", "Only show entries with ts >= this Unix timestamp in ms", parseInt).option("--limit <n>", "Max entries to return (default 50, max 200)", parseInt).option(
@@ -1312,7 +1379,7 @@ ${chunks.join("")}${truncatedHint}`);
 }
 
 // src/commands/inbox.ts
-var import_commander9 = require("commander");
+var import_commander10 = require("commander");
 var POLICY_MODES = ["open", "manifest", "allowlist", "closed"];
 var MODE_DESC = {
   open: "open \u2014 anyone can push messages directly to your inbox",
@@ -1356,7 +1423,7 @@ function formatAllowlistEntry(e, index) {
   Added  : ${e.created_at}${reason}`;
 }
 function inboxCommand() {
-  const cmd = new import_commander9.Command("inbox").description(
+  const cmd = new import_commander10.Command("inbox").description(
     "Offline direct-delivery inbox + reception policy. For Notify-layer pull: acn notify"
   );
   cmd.command("list").description("List offline messages stored when you were unreachable").option("--limit <n>", "Max messages to return (default 100)", parseInt).option("--ack", "Clear the entire inbox after retrieval").option("-i, --agent-id <id>", "Agent ID (defaults to config)").action(async (opts) => {
@@ -1398,7 +1465,7 @@ function inboxCommand() {
       handleError(err);
     }
   });
-  const mode = new import_commander9.Command("mode").description(
+  const mode = new import_commander10.Command("mode").description(
     "Reception policy: who can send to your inbox and how"
   );
   mode.command("get").description("Show current reception policy").option("-i, --agent-id <id>", "Agent ID (defaults to config)").action(async (opts) => {
@@ -1433,7 +1500,7 @@ ${formatPolicy(res)}`);
     }
   );
   cmd.addCommand(mode);
-  const allowlist = new import_commander9.Command("allowlist").description(
+  const allowlist = new import_commander10.Command("allowlist").description(
     "Trusted senders (effective when mode=allowlist)"
   );
   allowlist.command("list").description("List agents on your allowlist").option("--limit <n>", "Max items to return (default 100)", parseInt).option("--offset <n>", "Pagination offset", parseInt).option("-i, --agent-id <id>", "Agent ID (defaults to config)").action(async (opts) => {
@@ -1492,7 +1559,7 @@ ${formatPolicy(res)}`);
 }
 
 // src/commands/listen.ts
-var import_commander10 = require("commander");
+var import_commander11 = require("commander");
 var import_child_process3 = require("child_process");
 var import_ws = __toESM(require("ws"));
 
@@ -1507,6 +1574,33 @@ function asRecord(v) {
 function asNonEmptyString(v) {
   return typeof v === "string" && v.length > 0 ? v : null;
 }
+function asInferencePath(v) {
+  return v === "official" || v === "byo" ? v : null;
+}
+var HOST_INFERENCE_HOSTS = /* @__PURE__ */ new Set([
+  "api.agentplanet.org",
+  "api.agenticplanet.space"
+]);
+function asHostInferenceUrl(v) {
+  const raw = asNonEmptyString(v);
+  if (!raw) return null;
+  try {
+    const u = new URL(raw);
+    if (u.pathname.replace(/\/+$/, "") !== "/api/inference/v1") return null;
+    if (u.search || u.hash) return null;
+    const host = u.hostname.toLowerCase();
+    const loopback = host === "localhost" || host === "127.0.0.1" || host === "::1";
+    if (u.protocol === "https:" && HOST_INFERENCE_HOSTS.has(host)) {
+      return `${u.origin}/api/inference/v1`;
+    }
+    if (u.protocol === "http:" && loopback) {
+      return `${u.origin}/api/inference/v1`;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
 function parseJsonRpcBody(bodyText) {
   let parsed;
   try {
@@ -1598,7 +1692,10 @@ function extractChatEnvelope(message) {
     gateway_message_id: asNonEmptyString(ap.message_id) ?? asNonEmptyString(ap.messageId),
     user_text: extractUserText(message),
     requested_model: requested ? requested.slice(0, 200) : null,
-    max_output_tokens: maxOut
+    max_output_tokens: maxOut,
+    hop_id: asNonEmptyString(ap.hop_id),
+    inference_path: asInferencePath(ap.inference_path),
+    host_inference_url: asHostInferenceUrl(ap.host_inference_url)
   };
 }
 function normalizeEvent(body, opts = {}) {
@@ -1657,6 +1754,115 @@ var DedupeStore = class {
   }
 };
 
+// src/commands/official-hop-door.ts
+var import_node_http = __toESM(require("http"));
+function shouldOpenOfficialDoor(opts) {
+  return Boolean(
+    opts.inferencePath === "official" && opts.hopId?.trim() && asHostInferenceUrl(opts.hostInferenceUrl) && opts.jwt?.trim()
+  );
+}
+function readBody(req) {
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+    req.on("data", (c) => chunks.push(Buffer.from(c)));
+    req.on("end", () => resolve(Buffer.concat(chunks)));
+    req.on("error", reject);
+  });
+}
+function send(res, status, body, contentType = "application/json") {
+  res.writeHead(status, {
+    "content-type": contentType,
+    "content-length": String(body.length)
+  });
+  res.end(body);
+}
+async function handleDoorRequest(req, res, opts) {
+  const path = (req.url ?? "").split("?")[0];
+  if (req.method !== "POST" || path !== "/v1/chat/completions" && path !== "/chat/completions") {
+    send(res, 404, Buffer.from('{"error":"not_found"}'));
+    return;
+  }
+  let payload;
+  try {
+    const raw = await readBody(req);
+    payload = JSON.parse(raw.length ? raw.toString("utf-8") : "{}");
+  } catch {
+    send(res, 400, Buffer.from('{"error":"invalid_json"}'));
+    return;
+  }
+  if (payload === null || typeof payload !== "object" || Array.isArray(payload)) {
+    send(res, 400, Buffer.from('{"error":"invalid_json"}'));
+    return;
+  }
+  const body = { ...payload };
+  delete body.agent_id;
+  body.hop_id = opts.hopId;
+  const headers = {
+    authorization: `Bearer ${opts.jwt}`,
+    "content-type": "application/json",
+    "X-Hop-Id": opts.hopId
+  };
+  if (opts.agentId) headers["X-Agent-Id"] = opts.agentId;
+  try {
+    const upstream = await opts.fetchFn(opts.upstream, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(body)
+    });
+    const out = Buffer.from(await upstream.arrayBuffer());
+    const ct = upstream.headers.get("content-type") || "application/json";
+    send(res, upstream.status, out, ct);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    send(
+      res,
+      502,
+      Buffer.from(JSON.stringify({ error: `upstream_unreachable:${msg.slice(0, 120)}` }))
+    );
+  }
+}
+function closeServer(server) {
+  return new Promise((resolve) => {
+    server.closeAllConnections?.();
+    server.close(() => resolve());
+  });
+}
+async function startOfficialHopDoor(opts) {
+  const dest = asHostInferenceUrl(opts.hostInferenceUrl);
+  const hopId = opts.hopId.trim();
+  const jwt = opts.jwt.trim();
+  if (!dest || !hopId || !jwt) return null;
+  const fetchFn = opts.fetchFn ?? fetch;
+  const upstream = `${dest}/chat/completions`;
+  const server = import_node_http.default.createServer((req, res) => {
+    void handleDoorRequest(req, res, {
+      upstream,
+      hopId,
+      agentId: opts.agentId,
+      jwt,
+      fetchFn
+    });
+  });
+  try {
+    await new Promise((resolve, reject) => {
+      server.once("error", reject);
+      server.listen(0, "127.0.0.1", () => resolve());
+    });
+  } catch {
+    return null;
+  }
+  const addr = server.address();
+  const port = typeof addr === "object" && addr ? addr.port : 0;
+  if (!port) {
+    await closeServer(server);
+    return null;
+  }
+  return {
+    baseUrl: `http://127.0.0.1:${port}/v1`,
+    close: () => closeServer(server)
+  };
+}
+
 // src/commands/chat-writeback.ts
 var DEFAULT_COMPLETE_TIMEOUT_MS = 12e4;
 var DEFAULT_WRITEBACK_TIMEOUT_MS = 3e4;
@@ -1823,6 +2029,34 @@ async function mintAgentJwt(opts, fetchFn = fetch) {
 function clearAgentJwtCache() {
   cachedJwt = null;
 }
+function completeInferenceEnv(event, opts, jwt, door) {
+  const extra = { ACN_AGENT_ID: opts.agentId };
+  const chat = event.chat;
+  if (chat?.hop_id) extra.ACN_CHAT_HOP_ID = chat.hop_id;
+  if (chat?.inference_path) extra.ACN_INFERENCE_PATH = chat.inference_path;
+  if (chat?.host_inference_url) {
+    extra.ACN_HOST_INFERENCE_URL = chat.host_inference_url;
+  }
+  if (jwt) extra.ACN_AGENT_JWT = jwt;
+  if (door?.baseUrl && jwt) {
+    extra.OPENAI_BASE_URL = door.baseUrl;
+    extra.OPENAI_API_KEY = jwt;
+  }
+  return { ...process.env, ...extra };
+}
+function completeInferenceHeaders(event, opts) {
+  const headers = {
+    "content-type": "application/json"
+  };
+  if (opts.agentId) headers["X-ACN-Agent-Id"] = opts.agentId;
+  const chat = event.chat;
+  if (chat?.hop_id) headers["X-ACN-Hop-Id"] = chat.hop_id;
+  if (chat?.inference_path) headers["X-ACN-Inference-Path"] = chat.inference_path;
+  if (chat?.host_inference_url) {
+    headers["X-ACN-Host-Inference-Url"] = chat.host_inference_url;
+  }
+  return headers;
+}
 async function completeViaHttp(event, opts, deps) {
   const fetchFn = deps.fetchFn ?? fetch;
   const timeoutMs = opts.completeTimeoutMs ?? DEFAULT_COMPLETE_TIMEOUT_MS;
@@ -1831,7 +2065,7 @@ async function completeViaHttp(event, opts, deps) {
   try {
     const res = await fetchFn(opts.completeUrl, {
       method: "POST",
-      headers: { "content-type": "application/json" },
+      headers: completeInferenceHeaders(event, opts),
       body: JSON.stringify(event),
       signal: controller.signal
     });
@@ -1856,13 +2090,16 @@ async function completeViaHttp(event, opts, deps) {
     clearTimeout(timer);
   }
 }
-function completeViaExec(event, opts, deps) {
+function spawnCompleteExec(event, opts, deps, jwt, door) {
   const spawnFn = deps.spawnFn ?? import_child_process.spawn;
   const timeoutMs = opts.completeTimeoutMs ?? DEFAULT_COMPLETE_TIMEOUT_MS;
   const body = Buffer.from(JSON.stringify(event), "utf-8");
   return new Promise((resolve) => {
     let settled = false;
-    const child = spawnFn(opts.completeExec, { shell: true });
+    const child = spawnFn(opts.completeExec, {
+      shell: true,
+      env: completeInferenceEnv(event, opts, jwt, door)
+    });
     const stdout = [];
     const stderr = [];
     const finish = (result) => {
@@ -1901,6 +2138,44 @@ function completeViaExec(event, opts, deps) {
     child.stdin?.end(body);
   });
 }
+async function completeViaExec(event, opts, deps, jwt) {
+  let door = null;
+  const logFn = deps.logFn ?? ((line) => console.error(line));
+  try {
+    if (shouldOpenOfficialDoor({
+      inferencePath: event.chat?.inference_path,
+      hopId: event.chat?.hop_id,
+      hostInferenceUrl: event.chat?.host_inference_url,
+      jwt
+    })) {
+      try {
+        door = await startOfficialHopDoor({
+          hostInferenceUrl: event.chat.host_inference_url,
+          hopId: event.chat.hop_id,
+          agentId: opts.agentId,
+          jwt,
+          fetchFn: deps.fetchFn
+        });
+      } catch {
+        door = null;
+      }
+      if (door) {
+        logFn(
+          `[acn listen] official_door chat_id=${event.chat.chat_id} base=${door.baseUrl}`
+        );
+      } else {
+        logFn(
+          `[acn listen] official_door_skipped chat_id=${event.chat.chat_id}`
+        );
+      }
+    }
+    return await spawnCompleteExec(event, opts, deps, jwt, door);
+  } finally {
+    if (door) {
+      await door.close().catch(() => void 0);
+    }
+  }
+}
 async function postWriteback(event, complete, opts, deps) {
   const chat = event.chat;
   if (!chat) return { ok: false, reason: "no_chat_envelope" };
@@ -2019,7 +2294,12 @@ async function postWriteback(event, complete, opts, deps) {
 async function handleChatWriteback(event, opts, deps = {}) {
   const logFn = deps.logFn ?? ((line) => console.error(line));
   if (!event.chat) return { ok: false, reason: "no_chat_envelope" };
-  const completed = opts.completeUrl ? await completeViaHttp(event, opts, deps) : await completeViaExec(event, opts, deps);
+  let jwt = null;
+  if (event.chat.inference_path === "official" && opts.completeExec) {
+    const minted = await mintAgentJwt(opts, deps.fetchFn ?? fetch);
+    if (minted.ok) jwt = minted.token;
+  }
+  const completed = opts.completeUrl ? await completeViaHttp(event, opts, deps) : await completeViaExec(event, opts, deps, jwt);
   if (!completed.ok) {
     logFn(
       `[acn listen] chat_complete_failed chat_id=${event.chat.chat_id} message_id=${event.message_id} reason=${completed.reason}`
@@ -2244,7 +2524,7 @@ function formatWakeFailed(event, reason) {
 function formatDeduped(event) {
   return `[acn listen] deduped key=${dedupeKey(event)}`;
 }
-function dispatchLocalReceiver(correlationId, bodyText, opts, dedupeStore, send, deps = {}) {
+function dispatchLocalReceiver(correlationId, bodyText, opts, dedupeStore, send2, deps = {}) {
   const logFn = deps.logFn ?? ((line) => console.error(line));
   const result = processIncomingRequest(
     correlationId,
@@ -2253,7 +2533,7 @@ function dispatchLocalReceiver(correlationId, bodyText, opts, dedupeStore, send,
     dedupeStore,
     deps
   );
-  send(result.response);
+  send2(result.response);
   if (result.dedupeHit && result.event) {
     logFn(formatDeduped(result.event));
     return;
@@ -2314,7 +2594,7 @@ function errorResponse(id, status, detail) {
     body: JSON.stringify({ error: detail })
   };
 }
-async function dispatchA2aRequest(frame, opts, send, deps = {}) {
+async function dispatchA2aRequest(frame, opts, send2, deps = {}) {
   const bodyBuf = decodeBody(frame);
   try {
     if (opts.runtime) {
@@ -2324,7 +2604,7 @@ async function dispatchA2aRequest(frame, opts, send, deps = {}) {
         bodyBuf.toString("utf-8"),
         opts.runtime,
         store,
-        send,
+        send2,
         {
           fetchFn: deps.fetchFn,
           spawnFn: deps.spawnFn,
@@ -2334,17 +2614,17 @@ async function dispatchA2aRequest(frame, opts, send, deps = {}) {
       return;
     }
     if (opts.forward) {
-      await forwardToHttp(frame, bodyBuf, opts.forward, deps.fetchFn ?? fetch, send);
+      await forwardToHttp(frame, bodyBuf, opts.forward, deps.fetchFn ?? fetch, send2);
       return;
     }
     if (opts.exec) {
-      send(await runExec(frame, bodyBuf, opts.exec, deps.spawnFn ?? import_child_process3.spawn));
+      send2(await runExec(frame, bodyBuf, opts.exec, deps.spawnFn ?? import_child_process3.spawn));
       return;
     }
-    send(errorResponse(frame.id, 500, "no handler configured"));
+    send2(errorResponse(frame.id, 500, "no handler configured"));
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    send(errorResponse(frame.id, 502, `handler failed: ${msg}`));
+    send2(errorResponse(frame.id, 502, `handler failed: ${msg}`));
   }
 }
 function buildForwardHeaders(frame) {
@@ -2354,7 +2634,7 @@ function buildForwardHeaders(frame) {
   }
   return headers;
 }
-async function forwardToHttp(frame, bodyBuf, base, fetchFn, send) {
+async function forwardToHttp(frame, bodyBuf, base, fetchFn, send2) {
   const suffix = frame.path && frame.path !== "/" ? "/" + frame.path.replace(/^\//, "") : "";
   const targetUrl = base.replace(/\/$/, "") + suffix;
   const method = (frame.method ?? "POST").toUpperCase();
@@ -2372,7 +2652,7 @@ async function forwardToHttp(frame, bodyBuf, base, fetchFn, send) {
         const { done, value } = await reader.read();
         if (done) break;
         if (value && value.length > 0) {
-          send({
+          send2({
             type: "a2a_stream_chunk",
             id: frame.id,
             seq: seq++,
@@ -2381,17 +2661,17 @@ async function forwardToHttp(frame, bodyBuf, base, fetchFn, send) {
           });
         }
       }
-      send({ type: "a2a_stream_end", id: frame.id, status: res.status });
+      send2({ type: "a2a_stream_end", id: frame.id, status: res.status });
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      send({ type: "a2a_stream_end", id: frame.id, error: msg });
+      send2({ type: "a2a_stream_end", id: frame.id, error: msg });
     } finally {
       reader.releaseLock();
     }
     return;
   }
   const respText = await res.text();
-  send({
+  send2({
     type: "a2a_response",
     id: frame.id,
     status: res.status,
@@ -2502,12 +2782,12 @@ function runListener(cfg) {
       if (!frame || typeof frame !== "object") return;
       const f = frame;
       if (f.type === "a2a_request" && typeof f.id === "string") {
-        const send = (out) => {
+        const send2 = (out) => {
           if (ws.readyState === import_ws.default.OPEN) {
             ws.send(JSON.stringify(out));
           }
         };
-        void dispatchA2aRequest(f, cfg, send, { dedupeStore });
+        void dispatchA2aRequest(f, cfg, send2, { dedupeStore });
       }
     });
     ws.on("close", (code, reason) => {
@@ -2556,7 +2836,7 @@ function validateListenHandlerFlags(opts) {
   });
 }
 function listenCommand() {
-  const cmd = new import_commander10.Command("listen").description(
+  const cmd = new import_commander11.Command("listen").description(
     "Hold an outbound connection to ACN and answer relayed A2A requests in real time (ADR-0012 Mode B). Prefer --runtime for production; --forward/--exec remain as compatibility tunnels."
   ).option(
     "--runtime <id>",
@@ -2734,7 +3014,7 @@ function listenCommand() {
 }
 
 // src/commands/delivery.ts
-var import_commander11 = require("commander");
+var import_commander12 = require("commander");
 var DELIVERY_DESC = {
   direct: "direct (Mode A) \u2014 ACN dials your public A2A endpoint over HTTP",
   relay: "relay (Mode B) \u2014 hold an outbound WebSocket with `acn listen`; no public URL",
@@ -2773,7 +3053,7 @@ function formatDelivery(d) {
   return lines.join("\n");
 }
 function deliveryCommand() {
-  const cmd = new import_commander11.Command("delivery").description(
+  const cmd = new import_commander12.Command("delivery").description(
     "Inbound delivery transport (Mode A direct / Mode B relay). Orthogonal to reception policy (`acn inbox mode`)."
   );
   cmd.command("get").description("Show derived delivery transport (direct | relay | none)").option("-i, --agent-id <id>", "Agent ID (defaults to config)").action(async (opts) => {
@@ -2834,7 +3114,7 @@ function deliveryCommand() {
 }
 
 // src/commands/session.ts
-var import_commander12 = require("commander");
+var import_commander13 = require("commander");
 function requireAgentId4() {
   const config = loadConfig();
   if (!config.api_key) {
@@ -2879,7 +3159,7 @@ function formatEntry2(s, index) {
   return lines.join("\n");
 }
 function sessionCommand() {
-  const cmd = new import_commander12.Command("session").description(
+  const cmd = new import_commander13.Command("session").description(
     "Real-time session layer: bidirectional channel between two agents"
   );
   cmd.command("invite <target_agent_id>").description("Invite an agent to a real-time session").option("--ttl-seconds <s>", "Session TTL in seconds (60\u20131800, default 300)", parseInt).option("--metadata <json>", "Optional JSON object attached to the invitation (max 4KB)").action(
@@ -2957,7 +3237,7 @@ ${formatEntry2(res)}`);
 }
 
 // src/commands/subnet.ts
-var import_commander13 = require("commander");
+var import_commander14 = require("commander");
 function requireAgentId5() {
   const config = loadConfig();
   if (!config.api_key) {
@@ -2970,7 +3250,7 @@ function requireAgentId5() {
   }
   return config.agent_id;
 }
-function requireApiKey() {
+function requireApiKey2() {
   const config = loadConfig();
   if (!config.api_key) {
     console.error("No API key found. Run `acn join` first or `acn config set api-key <key>`.");
@@ -3045,7 +3325,7 @@ function formatSubnet(s, index) {
   return lines.join("\n");
 }
 function subnetCommand() {
-  const cmd = new import_commander13.Command("subnet").description("Manage ACN subnets");
+  const cmd = new import_commander14.Command("subnet").description("Manage ACN subnets");
   cmd.command("list").description(
     "List subnets. Without --all/--parent shows only subnets you have joined."
   ).option("--all", "Show all public subnets on ACN (not just your own)").option(
@@ -3262,7 +3542,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
       handleError(err);
     }
   });
-  const requests = new import_commander13.Command("requests").description(
+  const requests = new import_commander14.Command("requests").description(
     "Manage join-requests for a subnet (ADR-0004)"
   );
   requests.command("list <subnet_id>").description(
@@ -3276,7 +3556,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
     "join_request"
   ).option("--limit <n>", "Page size (1-500, default 100)", "100").option("--offset <n>", "Page offset (default 0)", "0").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       const params = {};
       if (opts.status) params.status = opts.status;
       if (opts.kind) params.kind = opts.kind;
@@ -3342,7 +3622,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
   });
   requests.command("approve <subnet_id>").description("Owner-only: approve a pending join_request (CAS pending \u2192 approved).").requiredOption("--request-id <rid>", "Join request ID to approve").option("--note <text>", "Optional audit note (\u2264500 chars)").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       const body = {};
       if (opts.note !== void 0) body.note = opts.note;
       try {
@@ -3361,7 +3641,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
   );
   requests.command("reject <subnet_id>").description("Owner-only: reject a pending join_request (CAS pending \u2192 rejected).").requiredOption("--request-id <rid>", "Join request ID to reject").option("--note <text>", "Optional audit note (\u2264500 chars)").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       const body = {};
       if (opts.note !== void 0) body.note = opts.note;
       try {
@@ -3382,7 +3662,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
     "Applicant-only: withdraw your own pending join_request (CAS pending \u2192 withdrawn)."
   ).requiredOption("--request-id <rid>", "Your join request ID").option("--note <text>", "Optional audit note (\u2264500 chars)").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       const body = {};
       if (opts.note !== void 0) body.note = opts.note;
       try {
@@ -3404,14 +3684,14 @@ ${JSON.stringify(res.agents, null, 2)}`);
     }
   );
   cmd.addCommand(requests);
-  const invitations = new import_commander13.Command("invitations").description(
+  const invitations = new import_commander14.Command("invitations").description(
     "Manage invitations on a subnet (ADR-0004)"
   );
   invitations.command("send <subnet_id>").description(
     "Owner-only: invite an agent to a subnet. Auto-merges with a target's pending join_request (collapses to auto-approval)."
   ).requiredOption("--agent-id <aid>", "Agent ID to invite").option("--note <text>", "Optional audit note (\u2264500 chars)").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       const body = { agent_id: opts.agentId };
       if (opts.note !== void 0) body.note = opts.note;
       try {
@@ -3430,7 +3710,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
     "Filter by status: pending | approved | rejected | withdrawn"
   ).option("--limit <n>", "Page size (1-500, default 100)", "100").option("--offset <n>", "Page offset (default 0)", "0").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       const params = {};
       if (opts.status) params.status = opts.status;
       if (opts.limit) params.limit = opts.limit;
@@ -3483,7 +3763,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
     "Invitee-only: accept a pending invitation (CAS pending \u2192 approved). Side effect: you join the subnet."
   ).requiredOption("--invitation-id <iid>", "Invitation ID to accept").option("--note <text>", "Optional audit note (\u2264500 chars)").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       const body = {};
       if (opts.note !== void 0) body.note = opts.note;
       try {
@@ -3504,7 +3784,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
     "Invitee-only: reject a pending invitation (CAS pending \u2192 rejected). No membership change."
   ).requiredOption("--invitation-id <iid>", "Invitation ID to reject").option("--note <text>", "Optional audit note (\u2264500 chars)").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       const body = {};
       if (opts.note !== void 0) body.note = opts.note;
       try {
@@ -3525,7 +3805,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
     "Owner-only: cancel a pending invitation (CAS pending \u2192 withdrawn)."
   ).requiredOption("--invitation-id <iid>", "Invitation ID to cancel").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       try {
         const res = await acnDelete(
           `/subnets/${subnetId}/invitations/${opts.invitationId}`
@@ -3540,12 +3820,12 @@ ${JSON.stringify(res.agents, null, 2)}`);
     }
   );
   cmd.addCommand(invitations);
-  const allowlist = new import_commander13.Command("allowlist").description(
+  const allowlist = new import_commander14.Command("allowlist").description(
     "Manage a subnet allowlist (ADR-0004)"
   );
   allowlist.command("list <subnet_id>").description("Owner-only: list allowlist entries for a subnet.").option("--limit <n>", "Page size (1-500, default 100)", "100").option("--offset <n>", "Page offset (default 0)", "0").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       const params = {};
       if (opts.limit) params.limit = opts.limit;
       if (opts.offset) params.offset = opts.offset;
@@ -3574,7 +3854,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
     "Owner-only: pre-authorise an agent on the subnet allowlist. 409 ALREADY_ON_ALLOWLIST on duplicate."
   ).requiredOption("--agent-id <aid>", "Agent ID to add").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       try {
         const res = await acnPost(
           `/subnets/${subnetId}/allowlist`,
@@ -3593,7 +3873,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
     "Owner-only: remove an agent from the subnet allowlist. Idempotent (204 even if missing)."
   ).requiredOption("--agent-id <aid>", "Agent ID to remove").action(
     async (subnetId, opts) => {
-      requireApiKey();
+      requireApiKey2();
       try {
         await acnDelete(
           `/subnets/${subnetId}/allowlist/${opts.agentId}`
@@ -3608,7 +3888,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
     }
   );
   cmd.addCommand(allowlist);
-  const harness = new import_commander13.Command("harness").description("Manage Org Harness webhook for a subnet");
+  const harness = new import_commander14.Command("harness").description("Manage Org Harness webhook for a subnet");
   harness.command("set <subnet_id>").description("Register an Org Harness webhook on a subnet you own").requiredOption("--url <url>", "Harness webhook URL (HTTPS)").option("--secret <secret>", "HMAC-SHA256 signing secret (recommended)").action(async (subnetId, opts) => {
     const config = loadConfig();
     if (!config.api_key) {
@@ -3651,7 +3931,7 @@ ${JSON.stringify(res.agents, null, 2)}`);
 }
 
 // src/commands/org.ts
-var import_commander14 = require("commander");
+var import_commander15 = require("commander");
 function formatOrg(o) {
   const lines = [
     `  ID       : ${o.org_id}`,
@@ -3668,7 +3948,7 @@ function formatOrg(o) {
   return lines.join("\n");
 }
 function orgCommand() {
-  const cmd = new import_commander14.Command("org").description("Manage ACN organisations (Org Harness)");
+  const cmd = new import_commander15.Command("org").description("Manage ACN organisations (Org Harness)");
   cmd.command("create").description("Create an Org (binds/creates a subnet fence)").requiredOption("--name <name>", "Display name").option("--steward <agent_id>", "Steward agent (required for human JWT callers)").option("--subnet <slug>", "Bind existing subnet slug (must be owned by steward)").option("--join-policy <policy>", "open | approval", "open").option("--private", "Private subnet fence", false).option("--harness-url <url>", "Register Org Harness webhook on the fence subnet").option("--harness-secret <secret>", "HMAC secret for harness webhook").action(
     async (opts) => {
       try {
@@ -3936,7 +4216,7 @@ function orgCommand() {
 }
 
 // src/commands/follow.ts
-var import_commander15 = require("commander");
+var import_commander16 = require("commander");
 function requireAgentId6() {
   const config = loadConfig();
   if (!config.api_key) {
@@ -3959,7 +4239,7 @@ function formatAgent2(a, i) {
   ].join("\n");
 }
 function followCommand() {
-  const cmd = new import_commander15.Command("follow").description("Follow/unfollow agents and inspect follow graph");
+  const cmd = new import_commander16.Command("follow").description("Follow/unfollow agents and inspect follow graph");
   cmd.command("add <target_id>").description("Follow another agent").option("-i, --agent-id <id>", "Agent ID (defaults to config)").action(async (targetId, opts) => {
     const agentId = opts.agentId ?? requireAgentId6();
     try {
@@ -4050,7 +4330,7 @@ function followCommand() {
 }
 
 // src/commands/wallet.ts
-var import_commander16 = require("commander");
+var import_commander17 = require("commander");
 function requireAgentId7() {
   const config = loadConfig();
   if (!config.api_key) {
@@ -4093,7 +4373,7 @@ async function showWalletInfo(opts) {
   }
 }
 function walletCommand() {
-  const cmd = new import_commander16.Command("wallet").description("View and manage agent's wallet & payment info");
+  const cmd = new import_commander17.Command("wallet").description("View and manage agent's wallet & payment info");
   cmd.command("info", { isDefault: true }).description("Show wallet, payment methods, pricing, and ERC-8004 status").option("-i, --agent-id <id>", "Agent ID (defaults to config)").action(showWalletInfo);
   cmd.command("set-capability").description("Declare which payment methods, networks, and wallets you accept").requiredOption(
     "--methods <csv>",
@@ -4272,7 +4552,7 @@ function walletCommand() {
 }
 
 // src/commands/pay.ts
-var import_commander17 = require("commander");
+var import_commander18 = require("commander");
 function requireAgentId8() {
   const config = loadConfig();
   if (!config.api_key) {
@@ -4286,8 +4566,8 @@ function requireAgentId8() {
   return config.agent_id;
 }
 function payCommand() {
-  const cmd = new import_commander17.Command("pay").description("Manage payment tasks between agents");
-  const createCmd = new import_commander17.Command("create").description("Create a payment task to another agent");
+  const cmd = new import_commander18.Command("pay").description("Manage payment tasks between agents");
+  const createCmd = new import_commander18.Command("create").description("Create a payment task to another agent");
   createCmd.requiredOption("--to <agent>", "Recipient agent ID").requiredOption("--amount <n>", "Payment amount (positive number)").requiredOption("--currency <c>", "Currency code, e.g. USD, USDC").requiredOption("--method <m>", "Payment method, e.g. usdc, eth, platform_credits").requiredOption("--network <n>", "Network, e.g. ethereum, base, solana").option("--description <text>", "Free-text description for the payment task").option("--metadata <json>", "Additional metadata as JSON object").action(
     async (opts) => {
       const fromAgent = requireAgentId8();
@@ -4333,7 +4613,7 @@ function payCommand() {
       }
     }
   );
-  const confirmCmd = new import_commander17.Command("confirm").description(
+  const confirmCmd = new import_commander18.Command("confirm").description(
     "Confirm an external payment has been made (buyer only)"
   );
   confirmCmd.requiredOption("--task-id <id>", "Payment task ID to confirm").requiredOption(
@@ -4355,7 +4635,7 @@ function payCommand() {
       handleError(err);
     }
   });
-  const statusCmd = new import_commander17.Command("status").description(
+  const statusCmd = new import_commander18.Command("status").description(
     "Show payment tasks for the authenticated agent"
   );
   statusCmd.option("--status <s>", "Filter by status (e.g. created, payment_confirmed)").option("--limit <n>", "Max results (default 50)", "50").action(async (opts) => {
@@ -4378,7 +4658,7 @@ function payCommand() {
 
 // src/index.ts
 var { version } = require_package();
-var program = new import_commander18.Command();
+var program = new import_commander19.Command();
 program.name("acn").description("ACN CLI \u2014 Agent Collaboration Network command-line interface").version(version).option("--json", "Output raw JSON (useful for agent parsing)").hook("preAction", (thisCommand) => {
   const opts = thisCommand.opts();
   if (opts.json) setJsonMode(true);
@@ -4390,6 +4670,7 @@ program.addCommand(rotateKeyCommand());
 program.addCommand(agentsCommand());
 program.addCommand(tasksCommand());
 program.addCommand(messageCommand());
+program.addCommand(invokeCommand());
 program.addCommand(notifyCommand());
 program.addCommand(inboxCommand());
 program.addCommand(listenCommand());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@acnlabs/acn-cli",
-  "version": "1.0.3",
+  "version": "1.0.8",
   "description": "Official CLI for ACN (Agent Collaboration Network) \u2014 zero-integration agent access",
   "main": "dist/index.js",
   "bin": {