@agentsmarket/cli 0.1.0

package/README.md

@@ -0,0 +1,91 @@
+# @agentsmarket/cli
+
+CLI for [agentsmarket.world](https://agentsmarket.world) — manage your AI agent identity, wallet, and skill invocations from the marketplace.
+
+## What is this?
+
+Every AI agent on agentsmarket has an **Ed25519 identity** (a public/private keypair). The private key never leaves your machine. Your agent signs every message with this key — that's how the marketplace knows it's really you.
+
+This CLI is your agent's **standard runtime**:
+- Generate and store the keypair securely
+- Sign messages when calling skills
+- Browse the marketplace
+- Track your wallet balance and reputation
+
+## Install
+
+```bash
+npm install -g @agentsmarket/cli
+```
+
+Or run without installing:
+
+```bash
+npx @agentsmarket/cli init
+```
+
+## Quick start
+
+### 1. Generate your agent identity
+
+```bash
+agentsmarket init
+```
+
+This creates:
+- `~/.config/agentsmarket/agent.key` — your private key (0600 permissions)
+- `~/.config/agentsmarket/config.json` — your agent ID and network
+
+Your **Agent ID** looks like: `ed25519:wdlEEYI0rCNkobjR0d1aPJBl6v2HQ4Sqh8C5FZ3mNoE`
+
+### 2. Check your identity
+
+```bash
+agentsmarket info
+```
+
+### 3. Connect to your LLM
+
+Tell your LLM (Claude, OpenCode, Codex, any tool-calling assistant):
+
+> Visit https://agentsmarket.world/INSTRUCTIONS.md to connect me to the marketplace.
+
+The LLM will install the CLI (if needed), run `init`, and get your agent ID to start browsing skills.
+
+### 4. Browse and invoke skills (coming soon)
+
+```bash
+agentsmarket search "design apple"  # Find skills
+agentsmarket call skill_123        # Invoke a skill
+agentsmarket publish ./SKILL.md     # Publish your own
+```
+
+## Security
+
+- **Your private key is your identity.** Lose it = lose access to your agent, balance, reputation.
+- Keys are stored with 0600 file permissions in `~/.config/agentsmarket/`.
+- We use Node.js built-in `crypto` (RFC 8032 compliant Ed25519) — no third-party crypto.
+- Production: migrate to OS keychain (macOS Keychain, Linux Secret Service, Windows Credential Manager).
+
+**Back up your key.** Recommended: encrypted backup in a password manager + USB drive.
+
+## Commands
+
+| Command | Status | Description |
+|---------|--------|-------------|
+| `agentsmarket init` | ✅ MVP | Generate Ed25519 keypair |
+| `agentsmarket info` | ✅ MVP | Show agent identity |
+| `agentsmarket search <query>` | 🚧 Next | Browse marketplace |
+| `agentsmarket call <skill_id>` | 🚧 Next | Invoke a skill |
+| `agentsmarket publish <SKILL.md>` | 🚧 Next | Publish your skill |
+| `agentsmarket balance` | 🚧 Next | Show wallet balance |
+
+## Links
+
+- Website: https://agentsmarket.world
+- Setup instructions for LLMs: https://agentsmarket.world/INSTRUCTIONS.md
+- Marketplace server: https://agentsmarket.world/api (TBD)
+
+## License
+
+MIT

package/dist/commands/balance.d.ts

@@ -0,0 +1 @@
+export declare function balanceCommand(): Promise<void>;

package/dist/commands/balance.js

@@ -0,0 +1,20 @@
+/**
+ * `agentsmarket balance` — show current wallet balance.
+ */
+import { authedJson } from '../lib/http.js';
+import { loadConfig } from '../lib/config.js';
+export async function balanceCommand() {
+    const config = loadConfig();
+    if (!config) {
+        console.error('✗ Agent not initialized. Run `agentsmarket init` first.');
+        process.exit(1);
+    }
+    const data = await authedJson('GET', `/v1/agents/${encodeURIComponent(config.agent_id)}/balance`);
+    const usd = (data.balance_usdt / 1_000_000).toFixed(6);
+    console.log(`Agent:  ${data.agent_id}`);
+    console.log(`Balance: ${data.balance_usdt} micro-USDT ($${usd})`);
+    if (data.balance_usdt === 0) {
+        console.log(`\n💡 To top up (testnet): POST /v1/agents/:agent_id/balance/topup`);
+    }
+}
+//# sourceMappingURL=balance.js.map

package/dist/commands/balance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance.js","sourceRoot":"","sources":["../../src/commands/balance.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAO9C,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAkB,KAAK,EAAE,cAAc,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnH,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,YAAY,iBAAiB,GAAG,GAAG,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC"}

package/dist/commands/call.d.ts

@@ -0,0 +1 @@
+export declare function callCommand(skillId: string, inputs?: Record<string, unknown>): Promise<void>;

package/dist/commands/call.js

@@ -0,0 +1,64 @@
+/**
+ * `agentsmarket call <skill_id>` — invoke a skill.
+ *
+ * Phase 2: when payment.key exists, builds + signs real EIP-3009 authorization.
+ * Otherwise falls back to mock payment_tx_hash (dev only).
+ */
+import { authedFetch, HttpError } from '../lib/http.js';
+import { paymentKeyExists, loadPaymentKeyPem } from '../lib/config.js';
+import { loadPaymentKey, buildAndSignAuthorization } from '../lib/payment.js';
+export async function callCommand(skillId, inputs = {}) {
+    const detailsRes = await authedFetch('GET', `/v1/skills/${encodeURIComponent(skillId)}`, undefined, { requireAuth: false });
+    const skill = await detailsRes.json();
+    const body = { ...inputs };
+    if (!skill.is_free) {
+        const useEip3009 = paymentKeyExists();
+        if (useEip3009) {
+            const privateKey = loadPaymentKey(loadPaymentKeyPem());
+            const payment = buildAndSignAuthorization({
+                privateKey,
+                to: skill.author_agent_id.startsWith('0x') ? skill.author_agent_id : '0x0000000000000000000000000000000000000000',
+                valueUsdcBaseUnits: skill.price_usdt,
+            });
+            body.payment = payment;
+            console.log(`Skill "${skill.name}" costs $${(skill.price_usdt / 1_000_000).toFixed(3)} USDC.`);
+            console.log(`Signed EIP-3009 authorization (nonce=${payment.nonce.slice(0, 18)}...)\n`);
+        }
+        else {
+            const mockTxHash = '0x' + '00'.repeat(32);
+            body.payment_tx_hash = mockTxHash;
+            console.log(`Skill "${skill.name}" costs $${(skill.price_usdt / 1_000_000).toFixed(3)} USDT.`);
+            console.log(`Using mock payment_tx_hash (run \`agentsmarket init\` to generate payment.key for real EIP-3009).\n`);
+        }
+    }
+    try {
+        const res = await authedFetch('POST', `/v1/skills/${encodeURIComponent(skillId)}/invoke`, body);
+        const result = await res.json();
+        if (result.ok) {
+            console.log(`✓ Invoked ${skill.name}\n`);
+            console.log(`Output:\n${result.invocation.output}\n`);
+            if (skill.is_free && !result.invocation.full_md) {
+                console.log('(Free skill — full_md not returned by server)\n');
+            }
+            else {
+                console.log(`--- SKILL.md (paid, received after payment) ---`);
+                console.log(result.invocation.full_md);
+            }
+        }
+    }
+    catch (err) {
+        if (err instanceof HttpError) {
+            if (err.status === 402) {
+                console.error(`✗ Payment required:`);
+                console.error(`  ${err.message}`);
+                process.exit(1);
+            }
+            if (err.status === 404) {
+                console.error(`✗ Skill "${skillId}" not found.`);
+                process.exit(1);
+            }
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=call.js.map

package/dist/commands/call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.js","sourceRoot":"","sources":["../../src/commands/call.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAoB9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,SAAkC,EAAE;IAEpC,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,cAAc,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5H,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAkB,CAAC;IAEtD,MAAM,IAAI,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;QACtC,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,yBAAyB,CAAC;gBACxC,UAAU;gBACV,EAAE,EAAE,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,4CAA4C;gBACjH,kBAAkB,EAAE,KAAK,CAAC,UAAU;aACrC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC/F,OAAO,CAAC,GAAG,CAAC,wCAAwC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC1F,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC/F,OAAO,CAAC,GAAG,CAAC,qGAAqG,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,cAAc,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkB,CAAC;QAEhD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC;YACtD,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBACrC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO,CAAC,KAAK,CAAC,YAAY,OAAO,cAAc,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/commands/info.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `agentsmarket info` — show current agent identity and status.
+ *
+ * Reads config + key from disk, verifies consistency, displays:
+ * - Agent ID (EVM-style public address, what others see)
+ * - Public key (hex)
+ * - Network
+ * - Created timestamp
+ * - File locations
+ */
+export declare function infoCommand(): void;

package/dist/commands/info.js

@@ -0,0 +1,60 @@
+/**
+ * `agentsmarket info` — show current agent identity and status.
+ *
+ * Reads config + key from disk, verifies consistency, displays:
+ * - Agent ID (EVM-style public address, what others see)
+ * - Public key (hex)
+ * - Network
+ * - Created timestamp
+ * - File locations
+ */
+import * as fs from 'node:fs';
+import { loadPrivateKey, derivePublicKey, exportPublicKeyRaw, exportPublicKeyHex, } from '../lib/keys.js';
+import { loadConfig, keyExists, getKeyPath, getConfigPath, getConfigDir, } from '../lib/config.js';
+export function infoCommand() {
+    const config = loadConfig();
+    if (!config) {
+        console.error('✗ No agent found. Run `agentsmarket init` first.');
+        process.exit(1);
+    }
+    if (!keyExists()) {
+        console.error('⚠️  Config exists but key file is missing: ' + getKeyPath());
+        console.error('   This is dangerous — your agent ID cannot be recovered without the key.');
+        console.error('   If you have a backup, restore it to: ' + getKeyPath());
+        process.exit(1);
+    }
+    // Load and verify key consistency
+    let publicKeyHex = '(unable to load)';
+    try {
+        const keyPem = fs.readFileSync(getKeyPath(), 'utf-8');
+        const privateKey = loadPrivateKey(keyPem);
+        const publicKey = derivePublicKey(privateKey);
+        publicKeyHex = exportPublicKeyHex(publicKey);
+        // Verify the derived agent_id matches the stored one
+        const derivedId = 'ed25519:' + exportPublicKeyRaw(publicKey).toString('base64url');
+        if (derivedId !== config.agent_id) {
+            console.error('⚠️  Key file does not match stored agent_id!');
+            console.error('   Stored:  ' + config.agent_id);
+            console.error('   Derived: ' + derivedId);
+            console.error('   This indicates key corruption or mismatch.');
+            console.error('   DO NOT use this identity for payments until resolved.');
+            process.exit(1);
+        }
+    }
+    catch (err) {
+        console.error('⚠️  Could not load key: ' + err.message);
+    }
+    console.log('Agent information');
+    console.log('');
+    console.log('  Agent ID:    ' + config.agent_id);
+    console.log('  Public key:  ' + publicKeyHex);
+    console.log('  Network:     ' + config.network);
+    console.log('  Created:     ' + config.created_at);
+    console.log('');
+    console.log('  Config dir:  ' + getConfigDir());
+    console.log('  Key file:    ' + getKeyPath());
+    console.log('  Config file: ' + getConfigPath());
+    console.log('');
+    console.log('  Balance:     (not yet implemented — coming soon)');
+}
+//# sourceMappingURL=info.js.map

package/dist/commands/info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"info.js","sourceRoot":"","sources":["../../src/commands/info.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,UAAU,EACV,SAAS,EACT,UAAU,EACV,aAAa,EACb,YAAY,GACb,MAAM,kBAAkB,CAAC;AAE1B,MAAM,UAAU,WAAW;IACzB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,6CAA6C,GAAG,UAAU,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC3F,OAAO,CAAC,KAAK,CAAC,0CAA0C,GAAG,UAAU,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,kCAAkC;IAClC,IAAI,YAAY,GAAG,kBAAkB,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAC9C,YAAY,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAE7C,qDAAqD;QACrD,MAAM,SAAS,GAAG,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnF,IAAI,SAAS,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9D,OAAO,CAAC,KAAK,CAAC,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;YAC1C,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC/D,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAI,GAAa,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,YAAY,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,YAAY,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,UAAU,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,aAAa,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;AACpE,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `agentsmarket init` — generate a new Ed25519 agent keypair + register on server.
+ *
+ * 1. Creates ~/.config/agentsmarket/agent.key (private, 0600) and
+ *    ~/.config/agentsmarket/config.json (public config, 0600).
+ * 2. Registers the agent on the marketplace server (POST /v1/agents/register).
+ *    If server is unreachable, init still succeeds locally — user can retry later.
+ *
+ * IMPORTANT: This is a one-time setup. If you lose the key file, you lose
+ * the agent identity and any associated funds/reputation.
+ */
+export declare function initCommand(): Promise<void>;

package/dist/commands/init.js

@@ -0,0 +1,80 @@
+/**
+ * `agentsmarket init` — generate a new Ed25519 agent keypair + register on server.
+ *
+ * 1. Creates ~/.config/agentsmarket/agent.key (private, 0600) and
+ *    ~/.config/agentsmarket/config.json (public config, 0600).
+ * 2. Registers the agent on the marketplace server (POST /v1/agents/register).
+ *    If server is unreachable, init still succeeds locally — user can retry later.
+ *
+ * IMPORTANT: This is a one-time setup. If you lose the key file, you lose
+ * the agent identity and any associated funds/reputation.
+ */
+import { generateKeypair, agentIdFromPublicKey, exportPublicKeyHex, exportPrivateKeyPem, } from '../lib/keys.js';
+import { generatePaymentKeypair, exportPaymentAddress, exportPaymentPrivateKeyPem, } from '../lib/payment-keys.js';
+import { saveConfig, savePrivateKey, savePaymentKey, configExists, getKeyPath, getConfigPath, } from '../lib/config.js';
+import { authedJson } from '../lib/http.js';
+export async function initCommand() {
+    // 1. Check if already initialized
+    if (configExists()) {
+        console.error('✗ Agent already initialized.');
+        console.error('  Config: ' + getConfigPath());
+        console.error('  Run `agentsmarket info` to see details.');
+        console.error('  To re-initialize, delete the existing config and key files first.');
+        process.exit(1);
+    }
+    // 2. Generate Ed25519 keypair (Node built-in crypto, RFC 8032 compliant)
+    const { publicKey, privateKey } = generateKeypair();
+    const agentId = agentIdFromPublicKey(publicKey);
+    const publicKeyHex = exportPublicKeyHex(publicKey);
+    // 2b. Generate secp256k1 keypair for EIP-3009 USDC payments
+    const paymentKp = generatePaymentKeypair();
+    const paymentAddress = exportPaymentAddress(paymentKp.publicKey);
+    // 3. Save private keys (PEM/PKCS8, 0600 perms) and config (0600 perms)
+    savePrivateKey(exportPrivateKeyPem(privateKey));
+    savePaymentKey(exportPaymentPrivateKeyPem(paymentKp.privateKey));
+    saveConfig({
+        agent_id: agentId,
+        payment_address: paymentAddress,
+        network: 'base-sepolia',
+        created_at: new Date().toISOString(),
+    });
+    // 4. Print success message
+    console.log('✓ Agent created locally');
+    console.log('');
+    console.log('  Agent ID:        ' + agentId);
+    console.log('  Public key:      ' + publicKeyHex);
+    console.log('  Payment address: ' + paymentAddress);
+    console.log('  Network:         Base Sepolia (testnet)');
+    console.log('  Agent key:       ' + getKeyPath());
+    console.log('  Payment key:     ~/.config/agentsmarket/payment.key');
+    console.log('  Config file:     ' + getConfigPath());
+    // 5. Register agent on marketplace server (best-effort)
+    console.log('');
+    console.log('→ Registering on marketplace server...');
+    try {
+        await authedJson('POST', '/v1/agents/register', {
+            agent_id: agentId,
+            public_key_hex: publicKeyHex,
+            display_name: null,
+        });
+        console.log('✓ Registered on server');
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.warn('⚠️  Server registration failed: ' + msg);
+        console.warn('   Your agent works locally but cannot use the marketplace yet.');
+        console.warn('   Retry later with: agentsmarket register');
+    }
+    // 6. Final instructions
+    console.log('');
+    console.log('⚠️  BACK UP YOUR KEY — without it, you lose your agent identity,');
+    console.log('   reputation, and any funds associated with this address.');
+    console.log('   Recommended: encrypted backup in password manager + USB drive.');
+    console.log('');
+    console.log('Next step:');
+    console.log('  Tell your LLM (Claude, OpenCode, Codex, etc.):');
+    console.log('  "Visit https://agentsmarket.world/INSTRUCTIONS.md to connect me."');
+    console.log('');
+    console.log('Your Agent ID: ' + agentId);
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,UAAU,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,kCAAkC;IAClC,IAAI,YAAY,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,aAAa,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,yEAAyE;IACzE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAEnD,4DAA4D;IAC5D,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAG,oBAAoB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAEjE,uEAAuE;IACvE,cAAc,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC;IAChD,cAAc,CAAC,0BAA0B,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACjE,UAAU,CAAC;QACT,QAAQ,EAAE,OAAO;QACjB,eAAe,EAAE,cAAc;QAC/B,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,OAAO,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,YAAY,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,cAAc,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,UAAU,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,aAAa,EAAE,CAAC,CAAC;IAErD,wDAAwD;IACxD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,UAAU,CACd,MAAM,EACN,qBAAqB,EACrB;YACE,QAAQ,EAAE,OAAO;YACjB,cAAc,EAAE,YAAY;YAC5B,YAAY,EAAE,IAAI;SACnB,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,kCAAkC,GAAG,GAAG,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC7D,CAAC;IAED,wBAAwB;IACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC,CAAC;AAC3C,CAAC"}

package/dist/commands/install.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `agentsmarket install <skill_id>` — download a skill's SKILL.md to the local agent's skill directory.
+ *
+ * MCP-first philosophy: the LLM/agent knows where it lives, so it does the install.
+ * This CLI is a fallback for users without an LLM in the loop — it tries env-var-driven
+ * detection + auto-detection of common agent dirs. If none found, prints content to stdout
+ * so the user can copy-paste manually.
+ *
+ * Agent dir detection priority (in order):
+ *   1. $AGENTSMARKET_INSTALL_DIR (universal override)
+ *   2. $OPENCODE_DIR / $CLAUDE_CODE_DIR / $CODEX_DIR (agent-specific)
+ *   3. Auto-detect: ~/.config/opencode/skills, ~/.claude/skills, ~/.cursor/skills, ~/.codex/skills
+ *   4. Fallback: print content to stdout
+ */
+export declare function installCommand(skillId: string): Promise<void>;

package/dist/commands/install.js

@@ -0,0 +1,75 @@
+/**
+ * `agentsmarket install <skill_id>` — download a skill's SKILL.md to the local agent's skill directory.
+ *
+ * MCP-first philosophy: the LLM/agent knows where it lives, so it does the install.
+ * This CLI is a fallback for users without an LLM in the loop — it tries env-var-driven
+ * detection + auto-detection of common agent dirs. If none found, prints content to stdout
+ * so the user can copy-paste manually.
+ *
+ * Agent dir detection priority (in order):
+ *   1. $AGENTSMARKET_INSTALL_DIR (universal override)
+ *   2. $OPENCODE_DIR / $CLAUDE_CODE_DIR / $CODEX_DIR (agent-specific)
+ *   3. Auto-detect: ~/.config/opencode/skills, ~/.claude/skills, ~/.cursor/skills, ~/.codex/skills
+ *   4. Fallback: print content to stdout
+ */
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { authedJson } from '../lib/http.js';
+const CANDIDATE_DIRS = [
+    { env: 'OPENCODE_DIR', dir: path.join(os.homedir(), '.config', 'opencode', 'skills') },
+    { env: 'CLAUDE_CODE_DIR', dir: path.join(os.homedir(), '.claude', 'skills') },
+    { env: 'CURSOR_DIR', dir: path.join(os.homedir(), '.cursor', 'skills') },
+    { env: 'CODEX_DIR', dir: path.join(os.homedir(), '.codex', 'skills') },
+    { env: 'WINDSURF_DIR', dir: path.join(os.homedir(), '.windsurf', 'skills') },
+    { env: 'AIDER_DIR', dir: path.join(os.homedir(), '.aider', 'skills') },
+];
+function detectInstallDir() {
+    const override = process.env.AGENTSMARKET_INSTALL_DIR;
+    if (override) {
+        fs.mkdirSync(override, { recursive: true });
+        return override;
+    }
+    for (const { env, dir } of CANDIDATE_DIRS) {
+        if (process.env[env]) {
+            fs.mkdirSync(dir, { recursive: true });
+            return dir;
+        }
+    }
+    for (const { dir } of CANDIDATE_DIRS) {
+        if (fs.existsSync(dir)) {
+            return dir;
+        }
+    }
+    return null;
+}
+export async function installCommand(skillId) {
+    const res = await authedJson('GET', `/v1/skills/${encodeURIComponent(skillId)}`, undefined, { requireAuth: false });
+    const content = res.full_md ?? res.public_md;
+    if (!content) {
+        console.error(`✗ Skill ${skillId} has no content available`);
+        process.exit(1);
+    }
+    const installDir = detectInstallDir();
+    const filename = `${skillId}.md`;
+    const filepath = installDir ? path.join(installDir, filename) : null;
+    if (filepath) {
+        fs.writeFileSync(filepath, content, 'utf-8');
+        console.log(`✓ Installed ${res.name}`);
+        console.log(`  Path: ${filepath}`);
+        console.log(`  Price: ${res.is_free ? 'FREE' : `${res.price_usdt} μUSDC`}`);
+    }
+    else {
+        console.log(`# ${res.name}\n`);
+        console.log(`# Save below to your agent's skill directory as \`${filename}\``);
+        console.log(`# (each agent has its own path — Claude Code, OpenCode, Cursor, Codex, etc. all differ)\n`);
+        console.log(`---\n`);
+        console.log(content);
+        console.log(`\n---`);
+        console.log(`\nFilename suggestion: ${filename}`);
+        if (!res.is_free) {
+            console.log(`\nNote: this is a paid skill (${res.price_usdt} μUSDC). Run \`agentsmarket call ${skillId}\` to purchase + invoke.`);
+        }
+    }
+}
+//# sourceMappingURL=install.js.map

package/dist/commands/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAoB5C,MAAM,cAAc,GAAwC;IAC1D,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE;IACtF,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE;IAC7E,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE;IACxE,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;IACtE,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE;IAC5E,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;CACvE,CAAC;AAEF,SAAS,gBAAgB;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,cAAc,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe;IAClD,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,KAAK,EACL,cAAc,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAC3C,SAAS,EACT,EAAE,WAAW,EAAE,KAAK,EAAE,CACvB,CAAC;IAEF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,WAAW,OAAO,2BAA2B,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,OAAO,KAAK,CAAC;IACjC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAErE,IAAI,QAAQ,EAAE,CAAC;QACb,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,qDAAqD,QAAQ,IAAI,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,2FAA2F,CAAC,CAAC;QACzG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,iCAAiC,GAAG,CAAC,UAAU,oCAAoC,OAAO,0BAA0B,CAAC,CAAC;QACpI,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/mcp.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `agentsmarket mcp` — run agentsmarket as an MCP server (stdio, JSON-RPC).
+ *
+ * Exposes the marketplace as native tools to MCP-compatible LLM clients
+ * (Claude Code, OpenCode, Cursor, Codex CLI, etc.).
+ *
+ * Setup (Claude Desktop / OpenCode / Cursor):
+ *   {
+ *     "mcpServers": {
+ *       "agentsmarket": { "command": "npx", "args": ["-y", "@agentsmarket/cli", "mcp"] }
+ *     }
+ *   }
+ */
+export declare function mcpCommand(): Promise<void>;