@cef-ai/cli 0.2.7 → 0.4.0

package/dist/commands/inspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.d.ts","sourceRoot":"","sources":["../../src/commands/inspect.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEzD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,iFAAiF;IACjF,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,mFAAmF;IACnF,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE;QACR,oCAAoC;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,SAAS,EAAE,SAAS,CAAC;KACtB,CAAC;IACF,WAAW,EAAE,iBAAiB,EAAE,CAAC;CAClC;AAkBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,gBAAgB,CAAC,CAsE3B"}

package/dist/commands/inspect.js

@@ -0,0 +1,135 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import vm from "node:vm";
+/**
+ * Inspect a built agent directory.
+ *
+ * Reads `<agentDir>/manifest.json` for the per-engagement routing tables
+ * and executes `<agentDir>/bundle.js` in a fresh `node:vm` context to
+ * enumerate the methods actually exposed on each
+ * `globalThis.__cefAgent.engagements[id]` instance. The two views are
+ * useful for confirming that each manifest engagement's `handlerName`
+ * strings match real methods on the bundled instance.
+ *
+ * Pure exploration: no files are written, no network. Safe to run on any
+ * `dist/<agentId>/` directory.
+ */
+export async function cefInspect(opts) {
+    const { agentDir, print = true } = opts;
+    const manifestPath = path.join(agentDir, "manifest.json");
+    const bundlePath = path.join(agentDir, "bundle.js");
+    const manifest = JSON.parse(await fs.readFile(manifestPath, "utf8"));
+    const bundle = await fs.readFile(bundlePath, "utf8");
+    // Run the bundle in an isolated context. The IIFE assigns
+    // { engagements: { id: instance } } to globalThis.__cefAgent.
+    const sandbox = { console };
+    sandbox.globalThis = sandbox;
+    vm.runInNewContext(bundle, sandbox);
+    const cefAgent = sandbox.__cefAgent;
+    const instances = cefAgent?.engagements ?? {};
+    const engagements = (manifest.engagements ?? []).map((e) => {
+        const inst = instances[e.id];
+        const exposedMethods = [];
+        if (inst) {
+            const seen = new Set();
+            let proto = Object.getPrototypeOf(inst);
+            while (proto && Object.getPrototypeOf(proto) !== null) {
+                for (const k of Object.getOwnPropertyNames(proto)) {
+                    if (k === "constructor")
+                        continue;
+                    if (typeof inst[k] === "function") {
+                        seen.add(k);
+                    }
+                }
+                proto = Object.getPrototypeOf(proto);
+            }
+            exposedMethods.push(...[...seen].sort());
+        }
+        const exposedSet = new Set(exposedMethods);
+        const missingMethods = [];
+        const handles = e.handles ?? {};
+        for (const handlerName of Object.values(handles)) {
+            if (!exposedSet.has(handlerName))
+                missingMethods.push(handlerName);
+        }
+        const out = {
+            id: e.id,
+            handles,
+            exposedMethods,
+            missingMethods,
+        };
+        if (e.goal !== undefined)
+            out.goal = e.goal;
+        return out;
+    });
+    const result = {
+        manifest: {
+            // Pre-publish manifests carry an empty `agentId`; the marketplace alias
+            // is the single human-friendly identifier (`prototype.md` §"AgentManifest.Alias").
+            alias: manifest.alias ?? manifest.agentId ?? "",
+            version: manifest.version,
+            cubbies: (manifest.cubbies ?? []).map((c) => c.alias),
+            models: Object.keys(manifest.models ?? {}),
+            handles: manifest.handles ?? [],
+            publishes: manifest.publishes ?? [],
+            targeting: manifest.targeting ?? { engagements: [] },
+        },
+        engagements,
+    };
+    if (print)
+        printInspectResult(result, cefAgent !== undefined);
+    return result;
+}
+function printInspectResult(r, hasInstance) {
+    const m = r.manifest;
+    console.log(`# ${m.alias} v${m.version}`);
+    console.log("");
+    console.log("## Manifest engagements:");
+    if (r.engagements.length === 0) {
+        console.log("  (none)");
+    }
+    for (const e of r.engagements) {
+        console.log(`  - ${e.id}${e.goal ? ` — ${e.goal}` : ""}`);
+        console.log(`    handles:`);
+        const handleEntries = Object.entries(e.handles);
+        if (handleEntries.length === 0) {
+            console.log(`      (none)`);
+        }
+        for (const [type, handlerName] of handleEntries) {
+            console.log(`      - ${type} -> ${handlerName}`);
+        }
+    }
+    console.log("");
+    console.log(`## handles: ${JSON.stringify(m.handles)}`);
+    console.log(`## publishes: ${JSON.stringify(m.publishes)}`);
+    console.log(`## targeting:`);
+    const targetingLines = JSON.stringify(m.targeting, null, 2)
+        .split("\n")
+        .map((l) => "  " + l);
+    for (const line of targetingLines)
+        console.log(line);
+    console.log(`## cubbies: ${JSON.stringify(m.cubbies)}`);
+    console.log(`## models: ${JSON.stringify(m.models)}`);
+    console.log("");
+    console.log("## Bundle methods per engagement");
+    if (!hasInstance) {
+        console.log("  (no __cefAgent set - bundle did not initialise)");
+        return;
+    }
+    for (const e of r.engagements) {
+        console.log(`  - ${e.id}:`);
+        if (e.exposedMethods.length === 0) {
+            console.log(`    (no methods)`);
+        }
+        for (const name of e.exposedMethods) {
+            console.log(`    - ${name}`);
+        }
+        if (e.missingMethods.length > 0) {
+            console.log(`    WARNING manifest references methods not on bundle:`);
+            for (const name of e.missingMethods) {
+                console.log(`      - ${name}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=inspect.js.map

package/dist/commands/inspect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.js","sourceRoot":"","sources":["../../src/commands/inspect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAwDzB;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAuB;IAEvB,MAAM,EAAE,QAAQ,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAgB,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAErD,0DAA0D;IAC1D,8DAA8D;IAC9D,MAAM,OAAO,GAA4B,EAAE,OAAO,EAAE,CAAC;IACrD,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC;IAC7B,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAEZ,CAAC;IACd,MAAM,SAAS,GAAG,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC;IAE9C,MAAM,WAAW,GAAwB,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9E,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,IAAI,KAAK,GAAkB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACvD,OAAO,KAAK,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBACtD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClD,IAAI,CAAC,KAAK,aAAa;wBAAE,SAAS;oBAClC,IAAI,OAAQ,IAAgC,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;wBAC/D,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;YACD,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAChC,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,GAAG,GAAsB;YAC7B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,OAAO;YACP,cAAc;YACd,cAAc;SACf,CAAC;QACF,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAqB;QAC/B,QAAQ,EAAE;YACR,wEAAwE;YACxE,mFAAmF;YACnF,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,IAAI,EAAE;YAC/C,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YACrD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;YAC1C,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,EAAE;YACnC,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;SACrD;QACD,WAAW;KACZ,CAAC;IAEF,IAAI,KAAK;QAAE,kBAAkB,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAmB,EAAE,WAAoB;IACnE,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,aAAa,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,WAAW,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;SACxD,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,cAAc;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAEtD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAClC,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACtE,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/keypair.d.ts

@@ -0,0 +1,21 @@
+export interface CefKeypairGenerateOptions {
+    /** Write the JSON keypair to this path. Mutually exclusive with `profile`. */
+    out?: string;
+    /** Write/merge into the shared credentials file under this section. */
+    profile?: string;
+    /** Allow overwriting an existing file or profile. */
+    force?: boolean;
+    /** Override the credentials file path (tests). */
+    configFilePath?: string;
+}
+export interface CefKeypairGenerateResult {
+    pubkey: string;
+    /** Hex-encoded private seed. */
+    privkey: string;
+    /** File path written, when `out` or `profile` was set. */
+    path?: string;
+    /** Profile name written, when `profile` was set. */
+    profile?: string;
+}
+export declare function cefKeypairGenerate(opts?: CefKeypairGenerateOptions): Promise<CefKeypairGenerateResult>;
+//# sourceMappingURL=keypair.d.ts.map

package/dist/commands/keypair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keypair.d.ts","sourceRoot":"","sources":["../../src/commands/keypair.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,yBAAyB;IACxC,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAiCD,wBAAsB,kBAAkB,CACtC,IAAI,GAAE,yBAA8B,GACnC,OAAO,CAAC,wBAAwB,CAAC,CA8CnC"}

package/dist/commands/keypair.js

@@ -0,0 +1,91 @@
+/**
+ * `cef keypair generate` — explicit AS Ed25519 keypair provisioning.
+ *
+ * The AS keypair represents an Agent Service identity, potentially shared
+ * across a team. This command is the *only* place a keypair is materialised;
+ * `cef publish` never auto-generates. Output sinks:
+ *
+ *   - stdout (default): JSON `{ pubkey, privkey }`. Useful for `| pbcopy` or
+ *     piping into a secrets manager.
+ *   - `--out <path>`: writes the JSON to a file with mode 0600. Refuses
+ *     existing files unless `--force`.
+ *   - `--profile <name>`: writes/merges into the shared
+ *     `~/.config/cef/credentials` INI file, mode 0600. Refuses to overwrite
+ *     an existing profile unless `--force`. Atomic via temp + rename.
+ *
+ * The post-write banner reminds the developer this is identity material
+ * meant to be shared with their team, not generated per-developer.
+ */
+import fs from "node:fs/promises";
+import path from "node:path";
+import { defaultCredentialsFilePath, parseConfigFile, serializeConfigFile, } from "../lib/credentials.js";
+import { generateKeypair } from "../lib/signing.js";
+function bytesToHex(b) {
+    let s = "";
+    for (let i = 0; i < b.length; i++)
+        s += b[i].toString(16).padStart(2, "0");
+    return s;
+}
+async function exists(p) {
+    try {
+        await fs.stat(p);
+        return true;
+    }
+    catch (e) {
+        if (e.code === "ENOENT")
+            return false;
+        throw e;
+    }
+}
+async function atomicWrite(filePath, content) {
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+    // Temp in the same dir so rename stays atomic across the same fs.
+    const tmp = `${filePath}.tmp.${process.pid}.${Date.now()}`;
+    await fs.writeFile(tmp, content, { encoding: "utf8", mode: 0o600 });
+    try {
+        await fs.rename(tmp, filePath);
+    }
+    catch (e) {
+        await fs.rm(tmp, { force: true });
+        throw e;
+    }
+    // chmod after rename in case the file pre-existed with looser perms.
+    await fs.chmod(filePath, 0o600).catch(() => { });
+}
+export async function cefKeypairGenerate(opts = {}) {
+    if (opts.out !== undefined && opts.profile !== undefined) {
+        throw new Error("cef keypair generate: --out and --profile are mutually exclusive");
+    }
+    const { pubkey, privkeyBytes } = await generateKeypair();
+    const privkey = bytesToHex(privkeyBytes);
+    // Profile sink: merge into the shared credentials file.
+    if (opts.profile !== undefined) {
+        const filePath = opts.configFilePath ?? defaultCredentialsFilePath();
+        let parsed = {};
+        try {
+            const existing = await fs.readFile(filePath, "utf8");
+            parsed = parseConfigFile(existing);
+        }
+        catch (e) {
+            if (e.code !== "ENOENT")
+                throw e;
+        }
+        if (parsed[opts.profile] && !opts.force) {
+            throw new Error(`cef keypair generate: profile [${opts.profile}] already exists in ${filePath} (pass --force to overwrite)`);
+        }
+        parsed[opts.profile] = { pubkey, privkey };
+        await atomicWrite(filePath, serializeConfigFile(parsed));
+        return { pubkey, privkey, path: filePath, profile: opts.profile };
+    }
+    // File sink: write the JSON keystore to `out`.
+    if (opts.out !== undefined) {
+        if ((await exists(opts.out)) && !opts.force) {
+            throw new Error(`cef keypair generate: ${opts.out} already exists (pass --force to overwrite)`);
+        }
+        await atomicWrite(opts.out, JSON.stringify({ pubkey, privkey }, null, 2) + "\n");
+        return { pubkey, privkey, path: opts.out };
+    }
+    // Default sink: stdout. Caller (CLI wrapper) prints the JSON.
+    return { pubkey, privkey };
+}
+//# sourceMappingURL=keypair.js.map

package/dist/commands/keypair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keypair.js","sourceRoot":"","sources":["../../src/commands/keypair.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAuBpD,SAAS,UAAU,CAAC,CAAa;IAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAK,CAAC,CAAC,CAAC,CAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACjE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAe;IAC1D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,kEAAkE;IAClE,MAAM,GAAG,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC;IACV,CAAC;IACD,qEAAqE;IACrE,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAkC,EAAE;IAEpC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAEzC,wDAAwD;IACxD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,IAAI,0BAA0B,EAAE,CAAC;QACrE,IAAI,MAAM,GAA2C,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,CAAC,OAAO,uBAAuB,QAAQ,8BAA8B,CAC5G,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC3C,MAAM,WAAW,CAAC,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IAED,+CAA+C;IAC/C,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,GAAG,6CAA6C,CAC/E,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,CACf,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACpD,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;IAED,8DAA8D;IAC9D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC"}

package/dist/commands/publish.d.ts

@@ -0,0 +1,40 @@
+import { type AsCredentials, type ResolveCredentialsOptions } from "../lib/credentials.js";
+export interface CefPublishOptions {
+    /** Resolved marketplace base URL — no trailing slash assumed. */
+    marketplaceUrl: string;
+    /** Which `dist/<id>/` to publish; auto-detected when undefined. */
+    agentId?: string;
+    /** Hex private seed (pairs with `pubkey`); highest-priority credential source. */
+    privkey?: string;
+    /** Hex public key paired with `privkey`. */
+    pubkey?: string;
+    /** Path to a JSON keystore file `{ pubkey, privkey }`. */
+    keystore?: string;
+    /** Profile name within the shared `~/.config/cef/credentials` file. */
+    profile?: string;
+    /** Defaults to `<cwd>/dist`. */
+    distDir?: string;
+    /** Defaults to `process.cwd()`. */
+    cwd?: string;
+    /**
+     * `fetch` override — defaults to `globalThis.fetch`. Tests pass a stub so
+     * the integration spec can assert on the wire shape without touching the
+     * network.
+     */
+    fetchImpl?: typeof fetch;
+    /**
+     * Override the credential resolver. Tests inject a fixed keypair this way
+     * so they don't have to set up flags/env/files.
+     */
+    resolveCredentialsImpl?: (opts: ResolveCredentialsOptions) => Promise<AsCredentials>;
+}
+export interface CefPublishResult {
+    /** Whatever `agentId` the marketplace returned (plain alias today). */
+    agentId: string;
+    version: string;
+    manifestCid: string;
+    /** Pubkey the manifest was published as (hex). */
+    pubkey: string;
+}
+export declare function cefPublish(opts: CefPublishOptions): Promise<CefPublishResult>;
+//# sourceMappingURL=publish.d.ts.map

package/dist/commands/publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AA4BA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAI/B,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;OAGG;IACH,sBAAsB,CAAC,EAAE,CACvB,IAAI,EAAE,yBAAyB,KAC5B,OAAO,CAAC,aAAa,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;CAChB;AAqBD,wBAAsB,UAAU,CAC9B,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,gBAAgB,CAAC,CAqH3B"}

package/dist/commands/publish.js

@@ -0,0 +1,187 @@
+/**
+ * `cef publish` — POSTs a built agent's manifest to the CEF marketplace.
+ *
+ * Wire contract (matches `marketplace/scripts/smoke-publish.ts`):
+ *
+ *   POST <marketplaceUrl>/api/v1/marketplace/agents
+ *   Headers:
+ *     Content-Type: application/json
+ *     X-AS-Pubkey:    <hex Ed25519 pubkey>
+ *     X-AS-Signature: <hex Ed25519 signature over canonical body bytes>
+ *   Body (JCS-canonicalized JSON):
+ *     {
+ *       agentId:  <plain alias>,
+ *       version:  <semver>,
+ *       manifest: <full AgentManifest, with agentId + agentServicePubkey filled>,
+ *       issuedAt: <ISO 8601>,
+ *       nonce:    <base64url 16 random bytes>
+ *     }
+ *
+ * `cef build` emits the manifest with `agentId` / `agentServicePubkey` left
+ * as empty strings; this command stamps them in (alias for `agentId`, the
+ * loaded AS pubkey for `agentServicePubkey`) before signing so the manifest
+ * the server hashes is byte-for-byte the manifest the publisher signs.
+ */
+import crypto from "node:crypto";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { resolveCredentials, } from "../lib/credentials.js";
+import { canonicalize } from "../lib/jcs.js";
+import { signBody } from "../lib/signing.js";
+const DEFAULT_DIST = "dist";
+export async function cefPublish(opts) {
+    const cwd = opts.cwd ? path.resolve(opts.cwd) : process.cwd();
+    const distDir = opts.distDir
+        ? path.resolve(cwd, opts.distDir)
+        : path.join(cwd, DEFAULT_DIST);
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    if (!fetchImpl) {
+        throw new Error("[cef publish] no fetch implementation available (pass opts.fetchImpl or run on Node ≥18)");
+    }
+    const agentId = opts.agentId ?? (await autodetectAgentId(distDir));
+    const agentDir = path.join(distDir, agentId);
+    const manifestPath = path.join(agentDir, "manifest.json");
+    let manifestRaw;
+    try {
+        manifestRaw = await fs.readFile(manifestPath, "utf8");
+    }
+    catch (e) {
+        const code = e.code;
+        if (code === "ENOENT") {
+            throw new Error(`[cef publish] manifest not found at ${manifestPath} — run \`cef build\` first`);
+        }
+        throw e;
+    }
+    let manifest;
+    try {
+        manifest = JSON.parse(manifestRaw);
+    }
+    catch (e) {
+        throw new Error(`[cef publish] manifest at ${manifestPath} is not valid JSON: ${e.message}`);
+    }
+    validateManifestShape(manifest, manifestPath);
+    // The plain alias is the wire identity. `cef build` writes it to
+    // `manifest.alias` (per `prototype.md` §"AgentManifest.Alias") and
+    // leaves `manifest.agentId` blank for `cef publish` to fill in.
+    const alias = (manifest.alias ?? manifest.agentId);
+    const resolver = opts.resolveCredentialsImpl ?? resolveCredentials;
+    const credResolveOpts = {
+        ...(opts.privkey !== undefined ? { privkeyFlag: opts.privkey } : {}),
+        ...(opts.pubkey !== undefined ? { pubkeyFlag: opts.pubkey } : {}),
+        ...(opts.keystore !== undefined ? { keystoreFlag: opts.keystore } : {}),
+        ...(opts.profile !== undefined ? { profileFlag: opts.profile } : {}),
+    };
+    const { pubkey, privkeyBytes } = await resolver(credResolveOpts);
+    // Stamp the manifest's identity fields. The marketplace verifies
+    // `manifest.agentId === body.agentId` and we want the persisted manifest
+    // bytes to record the AS pubkey too — so the published artifact carries
+    // its own provenance even though the wire-level signature is detached.
+    const stampedManifest = {
+        ...manifest,
+        agentId: alias,
+        agentServicePubkey: pubkey,
+    };
+    const body = {
+        agentId: alias,
+        version: stampedManifest.version,
+        manifest: stampedManifest,
+        issuedAt: new Date().toISOString(),
+        nonce: randomBase64UrlNonce(16),
+    };
+    const canonical = canonicalize(body);
+    const signature = await signBody(canonical, privkeyBytes);
+    const url = `${opts.marketplaceUrl.replace(/\/+$/, "")}/api/v1/marketplace/agents`;
+    const res = await fetchImpl(url, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            "X-AS-Pubkey": pubkey,
+            "X-AS-Signature": signature,
+        },
+        body: canonical,
+    });
+    if (res.status === 201) {
+        const json = (await res.json());
+        if (typeof json.agentId !== "string" ||
+            typeof json.version !== "string" ||
+            typeof json.manifestCid !== "string") {
+            throw new Error(`[cef publish] unexpected 201 body: ${JSON.stringify(json)}`);
+        }
+        return {
+            agentId: json.agentId,
+            version: json.version,
+            manifestCid: json.manifestCid,
+            pubkey,
+        };
+    }
+    // Friendly error path for replays. The marketplace returns
+    // `{ error: "REPLAY", ... }` on 409 (see `recordNonce`).
+    const text = await res.text();
+    if (res.status === 409) {
+        throw new Error(`[cef publish] REPLAY: nonce already used (${text})`);
+    }
+    throw new Error(`[cef publish] marketplace returned HTTP ${res.status}: ${text}`);
+}
+async function autodetectAgentId(distDir) {
+    let entries;
+    try {
+        entries = await fs.readdir(distDir);
+    }
+    catch (e) {
+        const code = e.code;
+        if (code === "ENOENT") {
+            throw new Error(`[cef publish] dist directory ${distDir} not found — run \`cef build\` first`);
+        }
+        throw e;
+    }
+    const candidates = [];
+    for (const name of entries) {
+        const stat = await fs.stat(path.join(distDir, name)).catch(() => null);
+        if (!stat?.isDirectory())
+            continue;
+        // Only consider dirs that actually contain a manifest.json.
+        const has = await fs
+            .stat(path.join(distDir, name, "manifest.json"))
+            .then(() => true)
+            .catch(() => false);
+        if (has)
+            candidates.push(name);
+    }
+    if (candidates.length === 0) {
+        throw new Error(`[cef publish] no built agents found in ${distDir} — run \`cef build\` first`);
+    }
+    if (candidates.length > 1) {
+        throw new Error(`[cef publish] multiple built agents in ${distDir} (${candidates
+            .sort()
+            .join(", ")}) — pass \`--agent <id>\` to pick one`);
+    }
+    return candidates[0];
+}
+function validateManifestShape(m, source) {
+    const missing = [];
+    // Build emits both `alias` and (placeholder) `agentId`; treat presence of
+    // either as the alias. Spec calls this out as `id (alias)`.
+    if (!m.alias && !m.agentId)
+        missing.push("alias|agentId");
+    if (!m.version)
+        missing.push("version");
+    if (!m.card)
+        missing.push("card");
+    else {
+        if (!m.card.name)
+            missing.push("card.name");
+        if (!m.card.description)
+            missing.push("card.description");
+    }
+    if (!Array.isArray(m.handles))
+        missing.push("handles[]");
+    if (!Array.isArray(m.publishes))
+        missing.push("publishes[]");
+    if (missing.length > 0) {
+        throw new Error(`[cef publish] manifest at ${source} is missing required fields: ${missing.join(", ")}`);
+    }
+}
+function randomBase64UrlNonce(numBytes) {
+    return crypto.randomBytes(numBytes).toString("base64url");
+}
+//# sourceMappingURL=publish.js.map

package/dist/commands/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AA4D7C,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO;QAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAE1D,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,uCAAuC,YAAY,4BAA4B,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,IAAI,QAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAiB,CAAC;IACrD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,6BAA6B,YAAY,uBAAwB,CAAW,CAAC,OAAO,EAAE,CACvF,CAAC;IACJ,CAAC;IACD,qBAAqB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE9C,iEAAiE;IACjE,mEAAmE;IACnE,gEAAgE;IAChE,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAE,CAAC;IAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,IAAI,kBAAkB,CAAC;IACnE,MAAM,eAAe,GAA8B;QACjD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAC;IAEjE,iEAAiE;IACjE,yEAAyE;IACzE,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,eAAe,GAAiB;QACpC,GAAG,QAAQ;QACX,OAAO,EAAE,KAAK;QACd,kBAAkB,EAAE,MAAM;KAC3B,CAAC;IAEF,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,eAAe,CAAC,OAAQ;QACjC,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC;KAChC,CAAC;IAEF,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAE1D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,CAAC;IACnF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QAC/B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,MAAM;YACrB,gBAAgB,EAAE,SAAS;SAC5B;QACD,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;QACF,IACE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAChC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAChC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EACpC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM;SACP,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,yDAAyD;IACzD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,KAAK,CACb,2CAA2C,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAe;IAC9C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,gCAAgC,OAAO,sCAAsC,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE;YAAE,SAAS;QACnC,4DAA4D;QAC5D,MAAM,GAAG,GAAG,MAAM,EAAE;aACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;aAC/C,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,GAAG;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,0CAA0C,OAAO,4BAA4B,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,0CAA0C,OAAO,KAAK,UAAU;aAC7D,IAAI,EAAE;aACN,IAAI,CAAC,IAAI,CAAC,uCAAuC,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC;AACxB,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAe,EAAE,MAAc;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SAC7B,CAAC;QACJ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5D,CAAC"}

package/dist/commands/typegen.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Public options for `cefTypegen`. CWD-relative defaults match `cefBuild`.
+ */
+export interface CefTypegenOptions {
+    /** Project root. Defaults to `process.cwd()`. */
+    cwd?: string;
+    /** Path to `cef.config.ts`. Defaults to `<cwd>/cef.config.ts`. */
+    configPath?: string;
+}
+export interface CefTypegenResult {
+    /** Absolute path to the emitted `.cef/generated.d.ts`. */
+    generatedPath: string;
+    /** Absolute path to the emitted `cef.lock.json`. */
+    lockfilePath: string;
+}
+/**
+ * Generate `.cef/generated.d.ts` and `cef.lock.json` from the agent's
+ * declared `models` and `uses` external references.
+ *
+ * Algorithm:
+ *  1. Load `cef.config.ts` (shared with `cefBuild` via load-config.ts).
+ *  2. Collect `models` + `uses` from all leaf agents.
+ *  3. Read the existing lockfile (if any).
+ *  4. For each entry: if the lockfile has a matching URL with a present
+ *     integrity, reuse the cached body; otherwise re-fetch.
+ *  5. Schema-to-TS each model's input/output and each peer's publishes[].
+ *  6. Build the `.cef/generated.d.ts` content (header, interfaces, module
+ *     augmentation block).
+ *  7. Write both artefacts.
+ *
+ * Cache reuse is keyed on the *declared* URL (lock entries also carry
+ * their declared URL). For semver-ranged URLs (`agent@^1`), we treat the
+ * declared URL as the cache key — v2's real semver resolution will revisit.
+ */
+export declare function cefTypegen(opts?: CefTypegenOptions): Promise<CefTypegenResult>;
+//# sourceMappingURL=typegen.d.ts.map

package/dist/commands/typegen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typegen.d.ts","sourceRoot":"","sources":["../../src/commands/typegen.ts"],"names":[],"mappings":"AAqBA;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;CACtB;AAiDD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,UAAU,CAC9B,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CAiJ3B"}