@atbash/cli 0.1.1

package/dist/commands/history.js

@@ -0,0 +1,72 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerHistoryCommand = registerHistoryCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const client_1 = require("../client");
+const config_1 = require("../config");
+function registerHistoryCommand(program) {
+    program
+        .command("history")
+        .description("Show recent tool call activity")
+        .option("-n, --count <count>", "Number of entries to fetch", "10")
+        .option("--endpoint <url>", "API endpoint URL")
+        .option("--json", "Output result as JSON")
+        .action(async (opts) => {
+        const maxCount = Math.min(parseInt(opts.count, 10) || 10, 50);
+        const spinner = opts.json
+            ? null
+            : (0, ora_1.default)("Fetching recent activity...").start();
+        try {
+            const items = await (0, client_1.getToolCalls)(maxCount, {
+                endpoint: (0, config_1.resolveEndpoint)(opts.endpoint),
+            });
+            spinner?.stop();
+            if (opts.json) {
+                console.log(JSON.stringify(items, null, 2));
+                return;
+            }
+            if (!items.length) {
+                console.log(chalk_1.default.dim("No activity found."));
+                return;
+            }
+            console.log(chalk_1.default.bold(`Recent Activity (${items.length})`));
+            console.log();
+            items.forEach((j, i) => {
+                const action = j.command_text || j.tool_call_id;
+                const truncated = action.length > 80 ? action.slice(0, 77) + "..." : action;
+                const pk = (0, client_1.toPubkeyHex)(j.agent_pubkey);
+                const raw = j;
+                const details = raw.verdict_details || {};
+                const verdictRaw = (details.verdict || raw.verdict || "").toUpperCase();
+                const verdictLabel = verdictRaw === "GREEN"
+                    ? chalk_1.default.green("PASS")
+                    : verdictRaw === "YELLOW"
+                        ? chalk_1.default.yellow("HOLD")
+                        : verdictRaw === "RED"
+                            ? chalk_1.default.red("BLOCK")
+                            : chalk_1.default.dim("—");
+                console.log(chalk_1.default.dim(`  ${String(i + 1).padStart(2)}.`) + ` ${verdictLabel}  ${chalk_1.default.white(truncated)}`);
+                if (j.tool_name) {
+                    console.log(`      ${chalk_1.default.dim("Tool:")}  ${chalk_1.default.yellow(j.tool_name)}`);
+                }
+                if (details.reason) {
+                    console.log(`      ${chalk_1.default.dim("Reason:")} ${details.reason}`);
+                }
+                console.log(`      ${chalk_1.default.dim("Agent:")} ${chalk_1.default.cyan(pk || "—")}`);
+                console.log(`      ${chalk_1.default.dim("ID:")}    ${chalk_1.default.dim(j.tool_call_id)}`);
+                if (i < items.length - 1)
+                    console.log();
+            });
+        }
+        catch (err) {
+            spinner?.fail("Failed to fetch history");
+            console.error(chalk_1.default.red(`\nError: ${err instanceof Error ? err.message : String(err)}`));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=history.js.map

package/dist/commands/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/commands/history.ts"],"names":[],"mappings":";;;;;AAMA,wDAsEC;AA3ED,kDAA0B;AAC1B,8CAAsB;AACtB,sCAAsD;AACtD,sCAA4C;AAE5C,SAAgB,sBAAsB,CAAC,OAAgB;IACrD,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,qBAAqB,EAAE,4BAA4B,EAAE,IAAI,CAAC;SACjE,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;SAC9C,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI;YACvB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAA,aAAG,EAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;QAE/C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAA,qBAAY,EAAC,QAAQ,EAAE;gBACzC,QAAQ,EAAE,IAAA,wBAAe,EAAC,IAAI,CAAC,QAAQ,CAAC;aACzC,CAAC,CAAC;YAEH,OAAO,EAAE,IAAI,EAAE,CAAC;YAEhB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,EAAE,CAAC;YAEd,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACrB,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC;gBAChD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC5E,MAAM,EAAE,GAAG,IAAA,oBAAW,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC;gBAEvC,MAAM,GAAG,GAAG,CAAQ,CAAC;gBACrB,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;gBAC1C,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBACxE,MAAM,YAAY,GAAG,UAAU,KAAK,OAAO;oBACzC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC;oBACrB,CAAC,CAAC,UAAU,KAAK,QAAQ;wBACvB,CAAC,CAAC,eAAK,CAAC,MAAM,CAAC,MAAM,CAAC;wBACtB,CAAC,CAAC,UAAU,KAAK,KAAK;4BACpB,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,OAAO,CAAC;4BACpB,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,YAAY,KAAK,eAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC1G,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;oBAChB,OAAO,CAAC,GAAG,CAAC,SAAS,eAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,eAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC3E,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,OAAO,CAAC,GAAG,CAAC,SAAS,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,SAAS,eAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,eAAK,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrE,OAAO,CAAC,GAAG,CAAC,SAAS,eAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,eAAK,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBACzE,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACzC,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/D,CACF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/jail.d.ts

@@ -0,0 +1,6 @@
+/**
+ * `atbash unjail` — Unjail an agent via POST /api/risk-engine action=unjail-agent.
+ * Jail command removed — jailing happens automatically on RED verdict in Enforcement tier.
+ */
+import { Command } from "commander";
+export declare function registerUnjailCommand(program: Command): void;

package/dist/commands/jail.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * `atbash unjail` — Unjail an agent via POST /api/risk-engine action=unjail-agent.
+ * Jail command removed — jailing happens automatically on RED verdict in Enforcement tier.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerUnjailCommand = registerUnjailCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const client_1 = require("../client");
+const config_1 = require("../config");
+function registerUnjailCommand(program) {
+    program
+        .command("unjail")
+        .description("Unjail an agent")
+        .argument("<agent-pubkey>", "Agent public key to unjail (hex)")
+        .option("--endpoint <url>", "API endpoint URL")
+        .option("--json", "Output result as JSON")
+        .action(async (agentPubkey, opts) => {
+        const spinner = opts.json ? null : (0, ora_1.default)("Unjailing agent...").start();
+        try {
+            await (0, client_1.unjailAgent)(agentPubkey, {
+                endpoint: (0, config_1.resolveEndpoint)(opts.endpoint),
+            });
+            spinner?.succeed("Agent unjailed");
+            if (opts.json) {
+                console.log(JSON.stringify({ agentPubkey, action: "unjailed" }, null, 2));
+                return;
+            }
+            console.log();
+            console.log(`  Agent:  ${chalk_1.default.dim(agentPubkey.slice(0, 8) + "..." + agentPubkey.slice(-6))}`);
+            console.log(`  Status: ${chalk_1.default.green.bold("ACTIVE")}`);
+        }
+        catch (err) {
+            spinner?.fail("Failed to unjail agent");
+            console.error(chalk_1.default.red(`\nError: ${err instanceof Error ? err.message : String(err)}`));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=jail.js.map

package/dist/commands/jail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jail.js","sourceRoot":"","sources":["../../src/commands/jail.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;AAQH,sDA+BC;AApCD,kDAA0B;AAC1B,8CAAsB;AACtB,sCAAwC;AACxC,sCAA4C;AAE5C,SAAgB,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,iBAAiB,CAAC;SAC9B,QAAQ,CAAC,gBAAgB,EAAE,kCAAkC,CAAC;SAC9D,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;SAC9C,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,WAAmB,EAAE,IAAI,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,aAAG,EAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,IAAA,oBAAW,EAAC,WAAW,EAAE;gBAC7B,QAAQ,EAAE,IAAA,wBAAe,EAAC,IAAI,CAAC,QAAQ,CAAC;aACzC,CAAC,CAAC;YAEH,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAEnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC1E,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,aAAa,eAAK,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/F,OAAO,CAAC,GAAG,CAAC,aAAa,eAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/judge.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare function registerJudgeCommand(program: Command): void;

package/dist/commands/judge.js

@@ -0,0 +1,218 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerJudgeCommand = registerJudgeCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const client_1 = require("../client");
+const config_1 = require("../config");
+function registerJudgeCommand(program) {
+    program
+        .command("judge")
+        .description("Submit a pending irreversible action for a verdict (allow/hold/block)")
+        .argument("<action>", "The action text to evaluate (max 1000 chars)")
+        .option("-c, --context <context>", "Additional context for the judgment", "")
+        .option("-k, --agent-key <key>", "Agent private key (64 hex chars)")
+        .option("--provider <name>", "AI provider: atbash, openai, google, microsoft, custom")
+        .option("--api-key <key>", "API key for the AI provider")
+        .option("--provider-endpoint <url>", "Custom endpoint for microsoft/custom provider")
+        .option("--model <model>", "Model override (e.g. gpt-4o-mini)")
+        .option("--org <name>", "Org name (for tier validation)")
+        .option("--endpoint <url>", "Judge API base URL")
+        .option("--timeout <ms>", "Max time to wait for verdict (ms)", "60000")
+        .option("--json", "Output result as JSON")
+        .action(async (action, opts) => {
+        const agentKey = (0, config_1.resolveAgentKey)(opts.agentKey);
+        if (!agentKey) {
+            console.error(chalk_1.default.red("Error: Agent key required.\n") +
+                "Provide via --agent-key, ATBASH_AGENT_KEY env var, or run " +
+                chalk_1.default.cyan("atbash set agent-key <key>"));
+            process.exit(1);
+        }
+        const cleanKey = agentKey.replace(/^0x/, "").trim().toLowerCase();
+        if (!(0, client_1.isValidPrivateKey)(cleanKey)) {
+            console.error(chalk_1.default.red("Error: Invalid private key — must be exactly 64 hex characters."));
+            process.exit(1);
+        }
+        if (action.length > 1000) {
+            console.error(chalk_1.default.red("Error: Action text exceeds 1000 character limit."));
+            process.exit(1);
+        }
+        const agentPub = (0, client_1.derivePublicKey)(cleanKey);
+        const provider = (0, config_1.resolveProvider)(opts.provider);
+        const timeoutMs = parseInt(opts.timeout, 10);
+        const clientOpts = { endpoint: (0, config_1.resolveEndpoint)(opts.endpoint) };
+        // ── Pre-flight: org tier check ──
+        const orgName = opts.org || (0, config_1.resolveOrgName)();
+        if (orgName) {
+            const preflight = opts.json
+                ? null
+                : (0, ora_1.default)("Checking org tier...").start();
+            try {
+                const tier = await (0, client_1.getOrgTierInfo)(orgName, clientOpts);
+                preflight?.stop();
+                if (!tier) {
+                    console.error(chalk_1.default.red(`Error: Org "${orgName}" not found.`));
+                    process.exit(1);
+                }
+                if (!tier.verdict_enabled) {
+                    console.error(chalk_1.default.red("Error: Org tier does not support verdicts.\n") +
+                        chalk_1.default.dim(`Current tier: ${tier.tier}. Upgrade to audit+ or enforcement to use judgments.`));
+                    process.exit(1);
+                }
+            }
+            catch {
+                preflight?.stop();
+                if (!opts.json) {
+                    console.warn(chalk_1.default.yellow("Warning: Could not verify org tier — proceeding anyway."));
+                }
+            }
+        }
+        // ── Pre-flight: agent policy check ──
+        {
+            const preflight = opts.json
+                ? null
+                : (0, ora_1.default)("Checking agent policy...").start();
+            try {
+                const pol = await (0, client_1.getAgentPolicy)(agentPub, clientOpts);
+                preflight?.stop();
+                const hasPolicy = (pol.is_custom && pol.policy) || pol.default_policy;
+                if (!hasPolicy) {
+                    console.error(chalk_1.default.red("Error: Agent has no policy configured.\n") +
+                        "Onboard the agent and assign a default or custom policy before requesting judgments.\n" +
+                        chalk_1.default.dim(`Agent: ${agentPub.slice(0, 8)}...${agentPub.slice(-6)}`));
+                    process.exit(1);
+                }
+                if (pol.is_jailed) {
+                    console.error(chalk_1.default.red("Error: Agent is jailed.\n") +
+                        "Unjail the agent in dashboard Settings at " +
+                        chalk_1.default.cyan("https://atbash.ai/") +
+                        " before requesting judgments.");
+                    process.exit(1);
+                }
+            }
+            catch {
+                preflight?.stop();
+                if (!opts.json) {
+                    console.warn(chalk_1.default.yellow("Warning: Could not verify agent policy — proceeding anyway."));
+                }
+            }
+        }
+        if (!opts.json) {
+            console.log(chalk_1.default.dim(`Agent: ${agentPub.slice(0, 8)}...${agentPub.slice(-6)}`));
+            console.log(chalk_1.default.dim(`Provider: ${provider || "server default"}`));
+            console.log(chalk_1.default.dim(`Action: ${action.length > 80 ? action.slice(0, 77) + "..." : action}`));
+            if (opts.context)
+                console.log(chalk_1.default.dim(`Context: ${opts.context}`));
+            console.log();
+        }
+        const spinner = opts.json
+            ? null
+            : (0, ora_1.default)("Submitting action for judgment...").start();
+        try {
+            const result = await (0, client_1.judgeAction)(action, opts.context || "", {
+                pubkey: agentPub,
+                privkey: cleanKey,
+            }, {
+                endpoint: (0, config_1.resolveEndpoint)(opts.endpoint),
+                timeout: timeoutMs,
+                provider,
+                apiKey: (0, config_1.resolveProviderApiKey)(opts.apiKey),
+                providerEndpoint: (0, config_1.resolveProviderEndpoint)(opts.providerEndpoint),
+                model: (0, config_1.resolveProviderModel)(opts.model),
+            });
+            spinner?.stop();
+            const verdictUpper = result.verdict.toUpperCase();
+            if (opts.json) {
+                console.log(JSON.stringify({
+                    verdict: result.verdict.toLowerCase(),
+                    action_type: result.action_type,
+                    reason: result.reason,
+                    confidence: result.confidence,
+                    provider: result.provider,
+                    latency_ms: result.latency_ms,
+                    tool_call_id: result.tool_call_id,
+                    on_chain: result.on_chain,
+                    agentPubkey: agentPub,
+                }, null, 2));
+                process.exit(verdictUpper === "RED" ? 2 : 0);
+            }
+            const verdictColor = verdictUpper === "GREEN"
+                ? chalk_1.default.green
+                : verdictUpper === "YELLOW"
+                    ? chalk_1.default.yellow
+                    : verdictUpper === "RED"
+                        ? chalk_1.default.red
+                        : chalk_1.default.gray;
+            const label = verdictUpper === "GREEN"
+                ? "PASS"
+                : verdictUpper === "YELLOW"
+                    ? "HOLD"
+                    : verdictUpper === "RED"
+                        ? "BLOCK"
+                        : "PENDING";
+            console.log(verdictColor.bold(`  ${label}  ${verdictUpper}`));
+            console.log();
+            if (result.reason) {
+                console.log(chalk_1.default.white("  Reason: ") + result.reason);
+            }
+            console.log();
+            if (result.confidence) {
+                console.log(chalk_1.default.dim(`  Confidence: ${(result.confidence * 100).toFixed(0)}%`));
+            }
+            if (result.provider) {
+                console.log(chalk_1.default.dim(`  Provider: ${result.provider}`));
+            }
+            if (result.latency_ms) {
+                console.log(chalk_1.default.dim(`  Latency: ${result.latency_ms}ms`));
+            }
+            if (result.tool_call_id) {
+                console.log(chalk_1.default.dim(`  Tool call ID: ${result.tool_call_id}`));
+            }
+            if (result.on_chain) {
+                console.log(chalk_1.default.dim("  On-chain: yes"));
+            }
+            if (verdictUpper === "YELLOW") {
+                console.log();
+                console.log(chalk_1.default.yellow("  ⟶  Action held for operator review."));
+                console.log(chalk_1.default.dim("     Run ") +
+                    chalk_1.default.cyan("atbash held --org <name>") +
+                    chalk_1.default.dim(" to review pending actions."));
+            }
+            if (verdictUpper === "RED") {
+                console.log();
+                console.log(chalk_1.default.red("  ⟶  Action blocked. Agent is now jailed."));
+                console.log(chalk_1.default.dim("     An operator must review and unjail this agent via the Atbash dashboard."));
+            }
+            process.exit(verdictUpper === "RED" ? 2 : 0);
+        }
+        catch (err) {
+            spinner?.fail("Judgment failed");
+            const msg = err instanceof Error ? err.message : String(err);
+            if (msg.includes("Agent not registered") || msg.includes("404")) {
+                console.error(chalk_1.default.red("\nError: Agent not onboarded.\n") +
+                    "Onboard this agent at " +
+                    chalk_1.default.cyan("https://atbash.ai/") +
+                    " — assign it to an organisation and attach an operator policy, then retry.");
+            }
+            else if (msg.includes("audit tier") ||
+                (msg.includes("Upgrade to Audit+") && msg.includes("403"))) {
+                console.error(chalk_1.default.red("\nError: Organisation is on Audit tier — verdicts are disabled.\n") +
+                    "Upgrade the org to " +
+                    chalk_1.default.bold("Audit+") +
+                    " or " +
+                    chalk_1.default.bold("Enforcement") +
+                    " in dashboard Settings at " +
+                    chalk_1.default.cyan("https://atbash.ai/") +
+                    ", then retry.");
+            }
+            else {
+                console.error(chalk_1.default.red(`\nError: ${msg}`));
+            }
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=judge.js.map

package/dist/commands/judge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge.js","sourceRoot":"","sources":["../../src/commands/judge.ts"],"names":[],"mappings":";;;;;AAoBA,oDAqSC;AAxTD,kDAA0B;AAC1B,8CAAsB;AACtB,sCAMmB;AACnB,sCAQmB;AAEnB,SAAgB,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,uEAAuE,CAAC;SACpF,QAAQ,CAAC,UAAU,EAAE,8CAA8C,CAAC;SACpE,MAAM,CACL,yBAAyB,EACzB,qCAAqC,EACrC,EAAE,CACH;SACA,MAAM,CAAC,uBAAuB,EAAE,kCAAkC,CAAC;SACnE,MAAM,CACL,mBAAmB,EACnB,wDAAwD,CACzD;SACA,MAAM,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;SACxD,MAAM,CACL,2BAA2B,EAC3B,+CAA+C,CAChD;SACA,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,CAAC;SAC9D,MAAM,CAAC,cAAc,EAAE,gCAAgC,CAAC;SACxD,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;SAChD,MAAM,CAAC,gBAAgB,EAAE,mCAAmC,EAAE,OAAO,CAAC;SACtE,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,IAAI,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,IAAA,wBAAe,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC;gBACvC,4DAA4D;gBAC5D,eAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAC3C,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAClE,IAAI,CAAC,IAAA,0BAAiB,EAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,iEAAiE,CAClE,CACF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAC9D,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,wBAAe,EAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAA,wBAAe,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,EAAE,QAAQ,EAAE,IAAA,wBAAe,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAEhE,mCAAmC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,IAAA,uBAAc,GAAE,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI;gBACzB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAA,aAAG,EAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAA,uBAAc,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACvD,SAAS,EAAE,IAAI,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,eAAe,OAAO,cAAc,CAAC,CAChD,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1B,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,8CAA8C,CAAC;wBACvD,eAAK,CAAC,GAAG,CACP,iBAAiB,IAAI,CAAC,IAAI,sDAAsD,CACjF,CACJ,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,EAAE,IAAI,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,OAAO,CAAC,IAAI,CACV,eAAK,CAAC,MAAM,CAAC,yDAAyD,CAAC,CACxE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,CAAC;YACC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI;gBACzB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAA,aAAG,EAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAA,uBAAc,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBACvD,SAAS,EAAE,IAAI,EAAE,CAAC;gBAClB,MAAM,SAAS,GACb,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC;gBACtD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,0CAA0C,CAAC;wBACnD,wFAAwF;wBACxF,eAAK,CAAC,GAAG,CACP,UAAU,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CACzD,CACJ,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClB,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC;wBACpC,4CAA4C;wBAC5C,eAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC;wBAChC,+BAA+B,CAClC,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,EAAE,IAAI,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,OAAO,CAAC,IAAI,CACV,eAAK,CAAC,MAAM,CAAC,6DAA6D,CAAC,CAC5E,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,GAAG,CAAC,UAAU,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CACpE,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,aAAa,QAAQ,IAAI,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,GAAG,CACP,WAAW,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CACvE,CACF,CAAC;YACF,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI;YACvB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAA,aAAG,EAAC,mCAAmC,CAAC,CAAC,KAAK,EAAE,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,oBAAW,EAC9B,MAAM,EACN,IAAI,CAAC,OAAO,IAAI,EAAE,EAClB;gBACE,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,QAAQ;aAClB,EACD;gBACE,QAAQ,EAAE,IAAA,wBAAe,EAAC,IAAI,CAAC,QAAQ,CAAC;gBACxC,OAAO,EAAE,SAAS;gBAClB,QAAQ;gBACR,MAAM,EAAE,IAAA,8BAAqB,EAAC,IAAI,CAAC,MAAM,CAAC;gBAC1C,gBAAgB,EAAE,IAAA,gCAAuB,EAAC,IAAI,CAAC,gBAAgB,CAAC;gBAChE,KAAK,EAAE,IAAA,6BAAoB,EAAC,IAAI,CAAC,KAAK,CAAC;aACxC,CACF,CAAC;YAEF,OAAO,EAAE,IAAI,EAAE,CAAC;YAEhB,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAElD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;oBACE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE;oBACrC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,WAAW,EAAE,QAAQ;iBACtB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,YAAY,GAChB,YAAY,KAAK,OAAO;gBACtB,CAAC,CAAC,eAAK,CAAC,KAAK;gBACb,CAAC,CAAC,YAAY,KAAK,QAAQ;oBACzB,CAAC,CAAC,eAAK,CAAC,MAAM;oBACd,CAAC,CAAC,YAAY,KAAK,KAAK;wBACtB,CAAC,CAAC,eAAK,CAAC,GAAG;wBACX,CAAC,CAAC,eAAK,CAAC,IAAI,CAAC;YAErB,MAAM,KAAK,GACT,YAAY,KAAK,OAAO;gBACtB,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,YAAY,KAAK,QAAQ;oBACzB,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,YAAY,KAAK,KAAK;wBACtB,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,SAAS,CAAC;YAEpB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,YAAY,EAAE,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,EAAE,CAAC;YAEd,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CACpE,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CAAC,uCAAuC,CAAC,CACtD,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,GAAG,CAAC,WAAW,CAAC;oBACpB,eAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC;oBACtC,eAAK,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,CACvD,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,GAAG,CACP,8EAA8E,CAC/E,CACF,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC;oBAC1C,wBAAwB;oBACxB,eAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC;oBAChC,4EAA4E,CAC/E,CAAC;YACJ,CAAC;iBAAM,IACL,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC1B,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAC1D,CAAC;gBACD,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CACP,mEAAmE,CACpE;oBACC,qBAAqB;oBACrB,eAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACpB,MAAM;oBACN,eAAK,CAAC,IAAI,CAAC,aAAa,CAAC;oBACzB,4BAA4B;oBAC5B,eAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC;oBAChC,eAAe,CAClB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/keygen.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare function registerKeygenCommand(program: Command): void;

package/dist/commands/keygen.js

@@ -0,0 +1,90 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerKeygenCommand = registerKeygenCommand;
+const fs = __importStar(require("fs"));
+const chalk_1 = __importDefault(require("chalk"));
+const client_1 = require("../client");
+const config_1 = require("../config");
+function registerKeygenCommand(program) {
+    program
+        .command("keygen")
+        .description("Generate a new agent keypair and save it to config")
+        .option("--no-save", "Don't save the key to config")
+        .option("-o, --output <file>", "Export keys to a file")
+        .option("--json", "Output as JSON")
+        .action((opts) => {
+        const keyPair = (0, client_1.generateKeyPair)();
+        const privKeyHex = keyPair.privKey;
+        const pubKeyHex = keyPair.pubKey;
+        // Save to config by default
+        if (opts.save !== false) {
+            const config = (0, config_1.loadConfig)();
+            config.agentKey = privKeyHex;
+            (0, config_1.saveConfig)(config);
+        }
+        // Export to file if requested
+        if (opts.output) {
+            const content = `Agent Public Key:  ${pubKeyHex}\nAgent Private Key: ${privKeyHex}\n`;
+            fs.writeFileSync(opts.output, content, "utf-8");
+        }
+        if (opts.json) {
+            console.log(JSON.stringify({
+                privateKey: privKeyHex,
+                publicKey: pubKeyHex,
+                saved: opts.save !== false,
+            }, null, 2));
+            return;
+        }
+        console.log(chalk_1.default.bold("New Agent Keypair"));
+        console.log();
+        console.log(chalk_1.default.white("  Public Key:  ") + chalk_1.default.cyan(pubKeyHex));
+        console.log(chalk_1.default.white("  Private Key: ") + chalk_1.default.red(privKeyHex));
+        console.log();
+        if (opts.save !== false) {
+            console.log(chalk_1.default.green("  Saved to config.") +
+                chalk_1.default.dim(" Run `atbash config` to verify."));
+        }
+        if (opts.output) {
+            console.log(chalk_1.default.green(`  Exported to ${opts.output}`));
+        }
+        console.log();
+        console.log(chalk_1.default.yellow("  Save your private key securely — it cannot be recovered."));
+    });
+}
+//# sourceMappingURL=keygen.js.map

package/dist/commands/keygen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keygen.js","sourceRoot":"","sources":["../../src/commands/keygen.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,sDA8DC;AApED,uCAAyB;AAEzB,kDAA0B;AAC1B,sCAA4C;AAC5C,sCAAmD;AAEnD,SAAgB,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,oDAAoD,CAAC;SACjE,MAAM,CAAC,WAAW,EAAE,8BAA8B,CAAC;SACnD,MAAM,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;SACtD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,OAAO,GAAG,IAAA,wBAAe,GAAE,CAAC;QAElC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;QACnC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjC,4BAA4B;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;YAC5B,MAAM,CAAC,QAAQ,GAAG,UAAU,CAAC;YAC7B,IAAA,mBAAU,EAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,sBAAsB,SAAS,wBAAwB,UAAU,IAAI,CAAC;YACtF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;gBACE,UAAU,EAAE,UAAU;gBACtB,SAAS,EAAE,SAAS;gBACpB,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,KAAK;aAC3B,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;YACF,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,eAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC;gBAC/B,eAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAC/C,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CACV,4DAA4D,CAC7D,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/org.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare function registerOrgCommand(program: Command): void;

package/dist/commands/org.js

@@ -0,0 +1,72 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerOrgCommand = registerOrgCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const client_1 = require("../client");
+const config_1 = require("../config");
+function registerOrgCommand(program) {
+    const org = program
+        .command("org")
+        .description("Manage org membership");
+    org
+        .command("join")
+        .description("Add your agent to an org")
+        .option("--org <name>", "Org name to join")
+        .option("-k, --agent-key <key>", "Agent private key (to derive pubkey)")
+        .option("--agent-pubkey <pubkey>", "Agent public key directly (66 hex chars)")
+        .option("--endpoint <url>", "API endpoint URL")
+        .option("--json", "Output result as JSON")
+        .action(async (opts) => {
+        const orgName = opts.org || (0, config_1.resolveOrgName)();
+        if (!orgName) {
+            console.error(chalk_1.default.red("Error: Org name required.\n") +
+                "Provide via --org, ATBASH_ORG_NAME env var, or run " +
+                chalk_1.default.cyan("atbash set org-name <name>"));
+            process.exit(1);
+        }
+        let pubkey = opts.agentPubkey || "";
+        if (!pubkey) {
+            const agentKey = (0, config_1.resolveAgentKey)(opts.agentKey);
+            if (!agentKey) {
+                console.error(chalk_1.default.red("Error: Agent key or --agent-pubkey required.\n") +
+                    "Provide via --agent-key, --agent-pubkey, or run " +
+                    chalk_1.default.cyan("atbash set agent-key <key>"));
+                process.exit(1);
+                return;
+            }
+            const cleanKey = agentKey.replace(/^0x/, "").trim().toLowerCase();
+            if (!(0, client_1.isValidPrivateKey)(cleanKey)) {
+                console.error(chalk_1.default.red("Error: Invalid private key."));
+                process.exit(1);
+            }
+            pubkey = (0, client_1.derivePublicKey)(cleanKey);
+        }
+        const spinner = opts.json
+            ? null
+            : (0, ora_1.default)(`Adding agent to ${orgName}...`).start();
+        try {
+            await (0, client_1.addAgentToOrg)(pubkey, orgName, {
+                endpoint: (0, config_1.resolveEndpoint)(opts.endpoint),
+            });
+            spinner?.succeed(`Agent added to ${orgName}`);
+            if (opts.json) {
+                console.log(JSON.stringify({ agentPubkey: pubkey, orgName, status: "added" }, null, 2));
+                return;
+            }
+            console.log();
+            console.log(`  Agent: ${chalk_1.default.cyan(pubkey)}`);
+            console.log(`  Org:   ${chalk_1.default.white(orgName)}`);
+        }
+        catch (err) {
+            spinner?.fail("Failed to add agent to org");
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(chalk_1.default.red(`\nError: ${msg}`));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=org.js.map

package/dist/commands/org.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org.js","sourceRoot":"","sources":["../../src/commands/org.ts"],"names":[],"mappings":";;;;;AAMA,gDAyEC;AA9ED,kDAA0B;AAC1B,8CAAsB;AACtB,sCAA8E;AAC9E,sCAA6E;AAE7E,SAAgB,kBAAkB,CAAC,OAAgB;IACjD,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAExC,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC;SAC1C,MAAM,CAAC,uBAAuB,EAAE,sCAAsC,CAAC;SACvE,MAAM,CAAC,yBAAyB,EAAE,0CAA0C,CAAC;SAC7E,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;SAC9C,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,IAAA,uBAAc,GAAE,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,6BAA6B,CAAC;gBACtC,qDAAqD;gBACrD,eAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAC3C,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,IAAA,wBAAe,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CACX,eAAK,CAAC,GAAG,CAAC,gDAAgD,CAAC;oBACzD,kDAAkD;oBAClD,eAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAC3C,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClE,IAAI,CAAC,IAAA,0BAAiB,EAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;gBACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,IAAA,wBAAe,EAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI;YACvB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAA,aAAG,EAAC,mBAAmB,OAAO,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,IAAA,sBAAa,EAAC,MAAM,EAAE,OAAO,EAAE;gBACnC,QAAQ,EAAE,IAAA,wBAAe,EAAC,IAAI,CAAC,QAAQ,CAAC;aACzC,CAAC,CAAC;YAEH,OAAO,EAAE,OAAO,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;YAE9C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAC3E,CAAC;gBACF,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,YAAY,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,YAAY,eAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/policy.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare function registerPolicyCommand(program: Command): void;