@atbash/cli 0.5.15-dev.17 → 0.5.15-dev.18

package/README.md

@@ -380,40 +380,12 @@ npx --yes @atbash/cli setup
 | `--host <url>` | Deployment to check the agent's registration against |
 | `--runtime <ids...>` | Only configure these runtimes (currently: `openclaw`) |
 | `--dry-run` | Show which files would change, and the diffs, then exit WITHOUT writing |
-| `-y, --yes` | Do not ask for confirmation before writing (does **not** consent to replacing the agent — see `--replace-key`) |
-| `--replace-key` | Consent to changing which agent this machine signs as, when the key supplied names a different agent than the one already here. Needed only for non-interactive runs |
+| `-y, --yes` | Do not ask for confirmation before writing |
 | `--no-install` | Write the key file and configs only; install no packages |
 | `--skip-verify` | Make no network calls at all |
 | `--allow-unrecognized-host` | Permit a `--host` outside the built-in Atbash allowlist |
 | `--home <dir>` | Home directory to configure (for testing) |
 
-**Onboarding a different agent on a machine that already has one.**
-
-Supply the new agent's key and setup will offer to switch. This is the one change
-it makes that is a *substitution* rather than an addition: afterwards every
-integration reading `~/.config/atbash/guard-client-key` signs as the new agent, so
-tool calls are attributed to it. So it is asked on its own:
-
-```
-This machine is about to change which agent it signs as.
-  now:  0237722e87b6636d67ee495f57e27eae0e2624a382d0603c3b3a396643f230bf94
-  new:  02b95c249d84f417e3e395a127425428b540671cc15881eb828c17b722a53fc599
-Every integration on this machine reading ~/.config/atbash/guard-client-key
-will switch to the new agent. The current key is archived first, to
-~/.config/atbash/keys/0237722e….key, so the old agent stays recoverable.
-
-Replace the agent this machine signs as? [y/N]
-```
-
-Answer **no** and nothing is changed at all — the run stops rather than configuring
-a runtime for an agent whose key was never installed, which would leave the machine
-signing as one agent while the dashboard shows another.
-
-`-y/--yes` deliberately does **not** answer this question: agreeing to write files
-is not the same as agreeing to become a different agent. A script that means it
-passes `--replace-key`. A fresh machine, or a re-run with the same agent, never sees
-the prompt.
-
 If no key is supplied, setup looks in order at `--key`, `--key-file`, `--keys-dir`,
 `ATBASH_AGENT_KEY`, the existing `~/.config/atbash/guard-client-key`, your
 `atbash config`, and finally a hidden prompt that accepts **either** a key or a path.
@@ -425,11 +397,11 @@ Wherever it comes from, the key is written once to
 
 - It never transmits the private key. The only network call is a registration
   check, and that sends the **public** key.
-- It never writes the private key into an MCP client config. The entry it writes
-  points at `atbash mcp`, which reads the key from `guard-client-key` and hands it
-  to the server through the child process environment — so the config file carries
-  no credential, and an entry you previously hand-wired with one has the key
-  removed.
+- It never writes the private key into an MCP client config. The documented
+  `@atbash/mcp` wiring carries the key as an `ATBASH_AGENT_PRIVKEY` value inside
+  files like `claude_desktop_config.json`, and that package has no key-file
+  fallback today. MCP clients are detected and the snippet is printed for you to
+  add by hand.
 - It never edits your application source. Code-level integrations (LangChain,
   LangGraph, AutoGen, Eliza, the SDK boundary) stay yours to write.
 - It never rewrites a config that uses comments or trailing commas — reserializing
@@ -441,27 +413,6 @@ Wherever it comes from, the key is written once to
 Every file it changes is copied to a `.atbash-bak` alongside it first, and repeat
 runs are idempotent.
 
-### `atbash mcp`
-
-Runs the Atbash MCP server, reading the agent key from `~/.config/atbash/guard-client-key` instead of from a config file. You do not normally run this by hand — it is what `atbash setup` puts in your MCP client's server list:
-
-```json
-{ "mcpServers": { "atbash": { "command": "npx", "args": ["--yes", "@atbash/cli", "mcp"] } } }
-```
-
-| Flag | Description |
-|------|-------------|
-| `--key-file <path>` | Agent key file to read (default: `~/.config/atbash/guard-client-key`) |
-| `--endpoint <url>` | Atbash endpoint the server should use |
-
-**Why this exists.** `@atbash/mcp` reads its identity from `ATBASH_AGENT_PRIVKEY` and has no key-file fallback, so the wiring in its own docs puts a raw private key inside `claude_desktop_config.json` — a file people sync between machines and paste into help requests. This launcher keeps the key in the 0600 file and passes it to the server through the child process environment, so nothing secret is written to a config file.
-
-An `ATBASH_AGENT_PRIVKEY` already present in the environment still wins, so if you deliberately inject the key at launch time nothing changes for you.
-
-**Known issue it works around.** Every published `@atbash/mcp` (0.1.0–0.1.3) fails to start: they import `getOrgTierInfo` as a named export from `@atbash/sdk`, and `@atbash/sdk@0.3.24` removed it, so their `^0.3.19` range resolves to a version that cannot satisfy the import. This launcher installs the compatible pair together (`@atbash/mcp@0.1.3` with `@atbash/sdk@0.3.23`). That pinned SDK is itself deprecated — the real fix is republishing `@atbash/mcp` against `@atbash/sdk@^0.7`.
-
-First launch takes ~10–15s while npx caches the packages, then about a second. A client with a short startup timeout may fail once and succeed on retry.
-
 ### `atbash judge <action>`
 
 Submit a pending action for judgment. The action string is the exact operation the agent is about to execute — a transfer, a command, a mutation.

package/dist/bin/atbash.js

@@ -20,12 +20,11 @@ const tools_1 = require("../commands/tools");
 const held_1 = require("../commands/held");
 const connect_1 = require("../commands/connect");
 const setup_1 = require("../commands/setup");
-const mcp_cmd_1 = require("../commands/mcp-cmd");
 // ── Autocomplete ────────────────────────────────────────────────
 const commands = [
     "judge", "whoami", "policy", "tier", "tools", "held",
     "history", "stats", "status", "keygen", "set", "unset",
-    "wipe", "config", "connect", "setup", "mcp", "help",
+    "wipe", "config", "connect", "setup", "help",
 ];
 const subcommands = {
     judge: ["--context", "--agent-key", "--provider", "--model", "--org", "--endpoint", "--timeout", "--json"],
@@ -33,7 +32,6 @@ const subcommands = {
     tools: ["--agent", "--org", "--count", "--json", "inspect", "count"],
     held: ["--org", "--count", "--json", "reviews"],
     connect: ["--host", "--home"],
-    mcp: ["--key-file", "--endpoint"],
     setup: ["--key", "--key-file", "--keys-dir", "--host", "--runtime", "--dry-run", "--yes", "--no-install", "--skip-verify", "--home"],
     set: ["agent-key", "org-name", "endpoint", "rid", "provider", "model"],
     unset: ["agent-key", "org-name", "endpoint", "rid", "provider", "model"],
@@ -90,7 +88,6 @@ program
 // Onboarding
 (0, connect_1.registerConnectCommand)(program);
 (0, setup_1.registerSetupCommand)(program);
-(0, mcp_cmd_1.registerMcpCommand)(program);
 async function main() {
     await program.parseAsync(process.argv);
     await (0, sdk_1.shutdownTelemetry)();

package/dist/bin/atbash.js.map

@@ -1 +1 @@
-{"version":3,"file":"atbash.js","sourceRoot":"","sources":["../../src/bin/atbash.ts"],"names":[],"mappings":";;;;;;AACA,yCAAoC;AACpC,wDAAgC;AAChC,qCAAgE;AAChE,6CAAyD;AACzD,+CAA2D;AAC3D,+CAA2D;AAC3D,iDAA6D;AAC7D,6CAAyD;AACzD,uDAA+D;AAC/D,+CAA2D;AAC3D,+CAA2D;AAC3D,2CAAuD;AACvD,6CAAyD;AACzD,2CAAuD;AACvD,iDAA6D;AAC7D,6CAAyD;AACzD,iDAAyD;AAEzD,mEAAmE;AACnE,MAAM,QAAQ,GAAG;IACf,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IACpD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO;IACtD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM;CACpD,CAAC;AAEF,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC;IAC1G,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;IACpE,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;IAC/C,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC7B,GAAG,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IACjC,KAAK,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC;IACpI,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;IACtE,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;IACxE,IAAI,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC;IAC7C,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;IACvC,YAAY,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC;CAC1D,CAAC;AAEF,MAAM,UAAU,GAAG,IAAA,kBAAQ,EAAC,wCAAwC,CAAC,CAAC;AACtE,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3D,UAAU,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI;QAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE;IACzD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI;QAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AACH,UAAU,CAAC,IAAI,EAAE,CAAC;AAElB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;IAChD,UAAU,CAAC,kBAAkB,EAAE,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,IAAA,oBAAc,EAAC;IACb,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,IAAI;CACvB,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,6EAA6E,CAAC;KAC1F,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAEnE,OAAO;AACP,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAC9B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;AAE7B,aAAa;AACb,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAE9B,oBAAoB;AACpB,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;AAE7B,OAAO;AACP,IAAA,gCAAsB,EAAC,OAAO,CAAC,CAAC;AAChC,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAC9B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAE/B,QAAQ;AACR,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,kCAAqB,EAAC,OAAO,CAAC,CAAC;AAE/B,aAAa;AACb,IAAA,gCAAsB,EAAC,OAAO,CAAC,CAAC;AAChC,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAC9B,IAAA,4BAAkB,EAAC,OAAO,CAAC,CAAC;AAE5B,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAA,uBAAiB,GAAE,CAAC;AAC5B,CAAC;AAED,IAAI,EAAE,CAAC"}
+{"version":3,"file":"atbash.js","sourceRoot":"","sources":["../../src/bin/atbash.ts"],"names":[],"mappings":";;;;;;AACA,yCAAoC;AACpC,wDAAgC;AAChC,qCAAgE;AAChE,6CAAyD;AACzD,+CAA2D;AAC3D,+CAA2D;AAC3D,iDAA6D;AAC7D,6CAAyD;AACzD,uDAA+D;AAC/D,+CAA2D;AAC3D,+CAA2D;AAC3D,2CAAuD;AACvD,6CAAyD;AACzD,2CAAuD;AACvD,iDAA6D;AAC7D,6CAAyD;AAEzD,mEAAmE;AACnE,MAAM,QAAQ,GAAG;IACf,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IACpD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO;IACtD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM;CAC7C,CAAC;AAEF,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC;IAC1G,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;IACpE,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;IAC/C,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC7B,KAAK,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC;IACpI,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;IACtE,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;IACxE,IAAI,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC;IAC7C,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;IACvC,YAAY,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC;CAC1D,CAAC;AAEF,MAAM,UAAU,GAAG,IAAA,kBAAQ,EAAC,wCAAwC,CAAC,CAAC;AACtE,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3D,UAAU,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI;QAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE;IACzD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI;QAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AACH,UAAU,CAAC,IAAI,EAAE,CAAC;AAElB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;IAChD,UAAU,CAAC,kBAAkB,EAAE,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,IAAA,oBAAc,EAAC;IACb,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,IAAI;CACvB,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,6EAA6E,CAAC;KAC1F,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAEnE,OAAO;AACP,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAC9B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;AAE7B,aAAa;AACb,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAE9B,oBAAoB;AACpB,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;AAE7B,OAAO;AACP,IAAA,gCAAsB,EAAC,OAAO,CAAC,CAAC;AAChC,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAC9B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAE/B,QAAQ;AACR,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;AAC/B,IAAA,kCAAqB,EAAC,OAAO,CAAC,CAAC;AAE/B,aAAa;AACb,IAAA,gCAAsB,EAAC,OAAO,CAAC,CAAC;AAChC,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;AAE9B,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAA,uBAAiB,GAAE,CAAC;AAC5B,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/commands/connect.d.ts

@@ -14,6 +14,25 @@ import { Command } from "commander";
  * The discovery mirrors the dashboard's src/lib/scan/discover.ts and produces
  * the same relay-safe payload the session endpoint expects.
  */
+/**
+ * Official Atbash deployments that legitimately serve the onboarding flow.
+ *
+ * The pairing screen builds `--host` from the page you opened, so every origin
+ * that can host onboarding must appear here. If production were missing, the real
+ * atbash.ai would be flagged "unrecognized destination" — a false alarm on the
+ * genuine article, which is worse than silence: it teaches people and agents to
+ * wave through the one warning that actually catches a swapped host.
+ *
+ * Matched on EXACT hostname, never a suffix — "atbash.ai.evil.com" must not pass.
+ * Deliberately not a *.vercel.app wildcard: that would bless anyone's preview.
+ */
+export declare const KNOWN_HOSTS: Set<string>;
+/**
+ * Used when neither --host nor ATBASH_HOST is given. Still the dev deployment,
+ * because it is the one running the current connector API; switch this to
+ * https://atbash.ai once production serves it (KNOWN_HOSTS already allows it).
+ */
+export declare const DEFAULT_HOST = "https://chromia-verified-ai-dev-two.vercel.app";
 interface DeclaredTool {
     name: string;
     description?: string;
@@ -34,7 +53,6 @@ type Agent = {
     detail: string;
     declaredTools: DeclaredTool[];
     surfaceEvidence?: SurfaceEvidence;
-    governance?: Governance;
 } | {
     type: "config";
     label: string;
@@ -43,7 +61,6 @@ type Agent = {
         mcpServers: Record<string, unknown>;
     };
 };
-declare const MAX_RELAY_SERVERS = 200;
 /** One-line skill description from SKILL.md frontmatter `description:` or first heading.
  *  Frontmatter is parsed with a real YAML parser (handles quotes, block scalars,
  *  folded/multiline values and nested maps that the previous regex mis-read). */
@@ -53,6 +70,10 @@ declare function describeSkill(text: string | undefined, fallback: string): stri
 declare function safeDescription(raw: string): string | undefined;
 /** Walk a skills root (bounded) → declared tools. Mirrors src/lib/scan/adapters/local-skills.ts. */
 declare function enumerateSkills(root: string, maxDepth?: number, cap?: number): DeclaredTool[];
+export declare const MCP_CONFIGS: {
+    label: string;
+    segs: string[];
+}[];
 /**
  * THE sanitization boundary. Reduce an mcpServers map to the SANITIZED structural
  * signal the hosted scanner needs — server name, host+path of the endpoint, and
@@ -66,88 +87,7 @@ declare function enumerateSkills(root: string, maxDepth?: number, cap?: number):
  * size against the input size and label the result partial — see `discover()`.
  */
 declare function relaySafeServers(servers: Record<string, unknown>): Record<string, unknown>;
-/**
- * Atbash's own wiring on this machine — is the boundary actually in place?
- *
- * The relay reported an agent's TOOL SURFACE and nothing about whether Atbash
- * governs it, so the dashboard's "re-scan to confirm it reports as enforcing"
- * had nothing to read. Worse, the two failures that matter most are invisible in
- * a file listing: a plugin installed but never enabled, and a plugin enabled but
- * pointed at no key. Both leave a machine that looks wired and enforces nothing.
- *
- * FILE READS ONLY. No processes are spawned, so this stays inside the read-only
- * promise the onboarding page makes about this command. Everything below is a
- * documented location:
- *
- *  - OpenClaw: the plugin entry in `~/.openclaw/openclaw.json`. Both the current
- *    `openclaw` key and the legacy `atbash-plugin` key count, since the dashboard
- *    recognizes either.
- *  - Hermes: plugins are OPT-IN via a `plugins.enabled` allow-list in
- *    `~/.hermes/config.yaml` (hermes_cli/plugins.py:_get_enabled_plugins — a
- *    missing key means nothing loads), and the plugin reads its key path from
- *    `~/.hermes/.env`.
- *
- * `enforcing` is only ever true when BOTH the hook is switched on and a key path
- * is configured. Reporting enforcement on the strength of an installed package
- * would recreate the exact false green this is meant to catch.
- */
-interface Governance {
-    installed: boolean;
-    enforcing: boolean;
-    entry?: string;
-    keyPathConfigured: boolean;
-    agentPubkey?: string;
-    /**
-     * Every agent this machine has been wired to, newest-known last.
-     *
-     * A machine governs exactly ONE agent at a time: the plugin config names one
-     * key path and that file holds one identity, so each `atbash setup` run
-     * displaces the previous agent and archives its key under
-     * `~/.config/atbash/keys/<pubkey>.key`. On a real box that had quietly rotated
-     * five times, nothing anywhere said so — the browser could not tell "already
-     * protected" from "protected, but for a different agent than the one you are
-     * onboarding".
-     *
-     * Only PUBLIC keys leave the machine, and only from filenames — the archived
-     * files are never opened. The current agent's key is included so the caller can
-     * mark which of the list is live without a second lookup.
-     */
-    knownAgents?: string[];
-}
 /** Enumerate the agents/MCP tools configured on this machine. Read-only. */
 declare function discover(home: string): Agent[];
-/**
- * Vet the SHAPE of a relay destination — a separate, earlier question than
- * whether the host is one of ours.
- *
- * `--host` is copied off a web page and everything `discover()` finds is POSTed
- * to it, so the string itself is attacker-influenced. Four refusals:
- *
- *  - **Unparseable.** Anything unrecognized is refused rather than tried.
- *  - **Credentials** (`user:pass@`). They have no use here, and they are how a
- *    lookalike URL hides its real host from someone skimming a pasted command.
- *  - **A query string or fragment.** The endpoint path is APPENDED to this
- *    value, so a `?` or `#` swallows it and sends the payload somewhere nobody
- *    reviewed: `https://h/?x=` + `/api/agent-scan/...` requests `/` instead.
- *  - **Plain HTTP**, except to loopback so a local dev server still works.
- *
- * The KNOWN_HOSTS allowlist is the SEPARATE gate applied after this one, and it
- * is what makes a swapped host non-exfiltrating; this is the shape check that
- * keeps a well-formed-looking URL from quietly redirecting the request. Both
- * must pass before anything is sent.
- */
-export interface HostVerdict {
-    /** Normalized `scheme://host[/path]`; the raw trimmed input if unparseable. */
-    host: string;
-    hostname: string;
-    isLoopback: boolean;
-    /** An official Atbash deployment, or this machine for local development. */
-    recognized: boolean;
-    /** Non-null means refuse to send. User-facing text. */
-    problem: string | null;
-    /** Optional remediation line shown after `problem`. */
-    hint?: string;
-}
-export declare function checkRelayHost(raw: string): HostVerdict;
 export declare function registerConnectCommand(program: Command): void;
-export { discover, enumerateSkills, describeSkill, relaySafeServers, safeDescription, MAX_RELAY_SERVERS };
+export { discover, enumerateSkills, describeSkill, relaySafeServers, safeDescription };