@cef-ai/cli 1.3.1 → 1.5.0

package/dist/commands/init.d.ts

@@ -0,0 +1,41 @@
+export type PackageManager = "pnpm" | "npm" | "yarn" | "bun";
+export interface CefInitOptions {
+    /** Base directory the target is resolved against. Defaults to `process.cwd()`. */
+    cwd?: string;
+    /** Target directory name/path (the positional arg). Prompted when absent. */
+    dir?: string;
+    /** Agent id/alias. Defaults to a slug of the project name. */
+    name?: string;
+    /** Non-interactive: accept all defaults, never prompt. */
+    yes?: boolean;
+    /** Package manager. Defaults to detection via `npm_config_user_agent`. */
+    pm?: PackageManager;
+    /** Run `<pm> install` after scaffolding. Default `true`. */
+    install?: boolean;
+    /** `git init` + stage after scaffolding. Default `true`. */
+    git?: boolean;
+    /** Allow scaffolding into a non-empty directory. */
+    force?: boolean;
+    /** Write the AI-friendly files (AGENTS.md/CLAUDE.md/.claude). Default `true`. */
+    ai?: boolean;
+    /** Template name. Default `"hello-world"`. */
+    template?: string;
+    /** Override interactivity (tests). Defaults to `isTTY && !yes`. */
+    interactive?: boolean;
+}
+export interface CefInitResult {
+    dir: string;
+    agentId: string;
+    projectName: string;
+    /** Destination-relative paths written, sorted. */
+    files: string[];
+    pm: PackageManager;
+    installed: boolean;
+    gitInitialized: boolean;
+    aiFiles: boolean;
+    template: string;
+    nextSteps: string[];
+}
+export declare function detectPackageManager(): PackageManager;
+export declare function cefInit(opts?: CefInitOptions): Promise<CefInitResult>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC7B,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,0EAA0E;IAC1E,EAAE,CAAC,EAAE,cAAc,CAAC;IACpB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4DAA4D;IAC5D,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,oDAAoD;IACpD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,EAAE,EAAE,cAAc,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAyBD,wBAAgB,oBAAoB,IAAI,cAAc,CAOrD;AAuDD,wBAAsB,OAAO,CAAC,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAiH/E"}

package/dist/commands/init.js

@@ -0,0 +1,191 @@
+import { execFile } from "node:child_process";
+import fs from "node:fs/promises";
+import path from "node:path";
+import * as readline from "node:readline/promises";
+import { fileURLToPath } from "node:url";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+/** Files allowed to pre-exist in an otherwise-"empty" target. */
+const SAFE_FILES = new Set([
+    ".git",
+    "LICENSE",
+    "LICENSE.md",
+    "README.md",
+    ".gitignore",
+]);
+/** Top-level template entries that are omitted with `--no-ai`. */
+const AI_TOP_LEVEL = new Set(["AGENTS.md", "CLAUDE.md", ".claude"]);
+/** Allowed template names — restricts the value joined into the templates path. */
+const TEMPLATE_RE = /^[a-z0-9][a-z0-9-]*$/;
+function slugify(s) {
+    const slug = s
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    return slug || "agent";
+}
+export function detectPackageManager() {
+    const ua = process.env.npm_config_user_agent ?? "";
+    if (ua.startsWith("pnpm"))
+        return "pnpm";
+    if (ua.startsWith("yarn"))
+        return "yarn";
+    if (ua.startsWith("bun"))
+        return "bun";
+    if (ua.startsWith("npm"))
+        return "npm";
+    return "pnpm";
+}
+function templatesRoot() {
+    // dist/commands/init.js → ../../templates ; src/commands/init.ts → ../../templates.
+    const dirname = path.dirname(fileURLToPath(import.meta.url));
+    return path.join(dirname, "..", "..", "templates");
+}
+/**
+ * Map a template-relative path to its destination. Dotfiles/dirs are stored
+ * WITHOUT a leading dot in the template (npm renames a literal `.gitignore` on
+ * publish), and re-dotted here.
+ */
+function mapDest(rel) {
+    return rel
+        .split(path.sep)
+        .map((seg) => seg === "gitignore" ? ".gitignore" : seg === "claude" ? ".claude" : seg)
+        .join(path.sep);
+}
+function substitute(content, vars) {
+    return content.replace(/\{\{(\w+)\}\}/g, (m, k) => (k in vars ? vars[k] : m));
+}
+async function walk(dir, base = dir) {
+    const out = [];
+    for (const entry of await fs.readdir(dir, { withFileTypes: true })) {
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory())
+            out.push(...(await walk(full, base)));
+        else
+            out.push(path.relative(base, full));
+    }
+    return out;
+}
+async function nonEmptyUnsafeEntries(dir) {
+    let entries;
+    try {
+        entries = await fs.readdir(dir);
+    }
+    catch {
+        return []; // does not exist yet → fine
+    }
+    return entries.filter((e) => !SAFE_FILES.has(e));
+}
+async function insideGitRepo(dir) {
+    try {
+        await execFileAsync("git", ["rev-parse", "--is-inside-work-tree"], { cwd: dir });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function cefInit(opts = {}) {
+    const cwd = opts.cwd ?? process.cwd();
+    const interactive = opts.interactive ?? (Boolean(process.stdin.isTTY) && !opts.yes);
+    let rl;
+    const ask = async (q, def) => {
+        if (!interactive)
+            return def;
+        rl ??= readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+        const answer = (await rl.question(`${q} (${def}) `)).trim();
+        return answer || def;
+    };
+    try {
+        const dirName = opts.dir ?? (await ask("Project directory", "my-agent"));
+        const targetDir = path.resolve(cwd, dirName);
+        const projectName = path.basename(targetDir);
+        const agentId = slugify(opts.name ?? (await ask("Agent id", slugify(projectName))));
+        const pm = opts.pm ?? detectPackageManager();
+        const template = opts.template ?? "hello-world";
+        const ai = opts.ai ?? true;
+        const doInstall = opts.install ?? true;
+        const doGit = opts.git ?? true;
+        const unsafe = await nonEmptyUnsafeEntries(targetDir);
+        if (unsafe.length > 0 && !opts.force) {
+            const shown = unsafe.slice(0, 5).join(", ");
+            throw new Error(`[cef init] target directory "${targetDir}" is not empty ` +
+                `(${shown}${unsafe.length > 5 ? ", …" : ""}). ` +
+                `Use --force to scaffold into it anyway.`);
+        }
+        // Guard the template name before joining it into a path — a value like
+        // "../../etc" would otherwise escape the templates dir (path traversal).
+        if (!TEMPLATE_RE.test(template)) {
+            throw new Error(`[cef init] invalid template name "${template}" (must match ${TEMPLATE_RE})`);
+        }
+        const srcRoot = path.join(templatesRoot(), template);
+        try {
+            await fs.access(srcRoot);
+        }
+        catch {
+            throw new Error(`[cef init] unknown template "${template}"`);
+        }
+        const vars = { projectName, agentId };
+        const written = [];
+        for (const rel of await walk(srcRoot)) {
+            const dest = mapDest(rel);
+            const topSeg = dest.split(path.sep)[0];
+            if (!ai && AI_TOP_LEVEL.has(topSeg))
+                continue;
+            const destFile = path.join(targetDir, dest);
+            await fs.mkdir(path.dirname(destFile), { recursive: true });
+            const raw = await fs.readFile(path.join(srcRoot, rel), "utf8");
+            await fs.writeFile(destFile, substitute(raw, vars));
+            written.push(dest);
+        }
+        let gitInitialized = false;
+        if (doGit && !(await insideGitRepo(targetDir))) {
+            try {
+                await execFileAsync("git", ["init", "-q"], { cwd: targetDir });
+                await execFileAsync("git", ["add", "-A"], { cwd: targetDir });
+                gitInitialized = true;
+            }
+            catch {
+                gitInitialized = false;
+            }
+        }
+        let installed = false;
+        if (doInstall) {
+            try {
+                await execFileAsync(pm, ["install"], { cwd: targetDir });
+                installed = true;
+            }
+            catch {
+                installed = false;
+            }
+        }
+        const relDir = path.relative(cwd, targetDir) || ".";
+        const nextSteps = [
+            `cd ${relDir}`,
+            ...(installed ? [] : [`${pm} install`]),
+            `${pm} test`,
+            `${pm} run build`,
+            `${pm} run push   # needs a DDC bucket + --as-pubkey (see: cef push --help)`,
+            `# then deploy in ROC (create/select your Agent Service → Deploy)`,
+        ];
+        return {
+            dir: targetDir,
+            agentId,
+            projectName,
+            files: written.sort(),
+            pm,
+            installed,
+            gitInitialized,
+            aiFiles: ai,
+            template,
+            nextSteps,
+        };
+    }
+    finally {
+        rl?.close();
+    }
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,QAAQ,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AA2C1C,iEAAiE;AACjE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,MAAM;IACN,SAAS;IACT,YAAY;IACZ,WAAW;IACX,YAAY;CACb,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpE,mFAAmF;AACnF,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAE3C,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,IAAI,GAAG,CAAC;SACX,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,IAAI,IAAI,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;IACnD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa;IACpB,oFAAoF;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;SACf,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACX,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CACxE;SACA,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAA4B;IAC/D,OAAO,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAAW,EAAE,IAAI,GAAG,GAAG;IACzC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;;YAC1D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,GAAW;IAC9C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,4BAA4B;IACzC,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAuB,EAAE;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,WAAW,GACf,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAElE,IAAI,EAAkC,CAAC;IACvC,MAAM,GAAG,GAAG,KAAK,EAAE,CAAS,EAAE,GAAW,EAAmB,EAAE;QAC5D,IAAI,CAAC,WAAW;YAAE,OAAO,GAAG,CAAC;QAC7B,EAAE,KAAK,QAAQ,CAAC,eAAe,CAAC;YAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5D,OAAO,MAAM,IAAI,GAAG,CAAC;IACvB,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,OAAO,CACrB,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAC3D,CAAC;QACF,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,gCAAgC,SAAS,iBAAiB;gBACxD,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK;gBAC/C,yCAAyC,CAC5C,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,qCAAqC,QAAQ,iBAAiB,WAAW,GAAG,CAC7E,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,GAAG,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QACtC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACxC,IAAI,CAAC,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC5C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC/D,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC9D,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,GAAG,KAAK,CAAC;YACzB,CAAC;QACH,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;gBACzD,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,GAAG,CAAC;QACpD,MAAM,SAAS,GAAG;YAChB,MAAM,MAAM,EAAE;YACd,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACvC,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,uEAAuE;YAC5E,kEAAkE;SACnE,CAAC;QAEF,OAAO;YACL,GAAG,EAAE,SAAS;YACd,OAAO;YACP,WAAW;YACX,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE;YACrB,EAAE;YACF,SAAS;YACT,cAAc;YACd,OAAO,EAAE,EAAE;YACX,QAAQ;YACR,SAAS;SACV,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,EAAE,EAAE,KAAK,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/commands/publish.d.ts

@@ -42,8 +42,7 @@ export interface CefPublishResult {
     /** Whatever `agentId` the marketplace returned (plain alias today). */
     agentId: string;
     version: string;
-    manifestCid: string;
-    /** Pubkey the manifest was published as (hex). */
+    /** Pubkey the card was published as (hex). */
     pubkey: string;
 }
 export declare function cefPublish(opts: CefPublishOptions): Promise<CefPublishResult>;

package/dist/commands/publish.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AA8BA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAI/B,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;OAGG;IACH,sBAAsB,CAAC,EAAE,CACvB,IAAI,EAAE,yBAAyB,KAC5B,OAAO,CAAC,aAAa,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;CAChB;AA2BD,wBAAsB,UAAU,CAC9B,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,gBAAgB,CAAC,CA4I3B"}
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAsCA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAI/B,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;OAGG;IACH,sBAAsB,CAAC,EAAE,CACvB,IAAI,EAAE,yBAAyB,KAC5B,OAAO,CAAC,aAAa,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;CAChB;AAgCD,wBAAsB,UAAU,CAC9B,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,gBAAgB,CAAC,CAwI3B"}

package/dist/commands/publish.js

@@ -1,7 +1,11 @@
 /**
- * `cef publish` — POSTs a built agent's manifest to the CEF marketplace.
+ * `cef publish` — POSTs a built agent's CARD to the CEF marketplace.
  *
- * Wire contract (matches `marketplace/scripts/smoke-publish.ts`):
+ * The marketplace is card-only: it stores just the agent card for discovery.
+ * The full manifest already lives in the DDC bucket registry (written by
+ * `cef push`) and is never sent to, hashed by, or stored by the marketplace.
+ *
+ * Wire contract:
  *
  *   POST <marketplaceUrl>/api/v1/marketplace/agents
  *   Headers:
@@ -10,19 +14,23 @@
  *     X-AS-Signature: <hex Ed25519 signature over canonical body bytes>
  *   Body (JCS-canonicalized JSON):
  *     {
- *       agentId:  <composite "<asPubKey>:<alias>">,
- *       version:  <semver>,
- *       manifest: <full AgentManifest, with agentId + agentServicePubkey filled>,
- *       issuedAt: <ISO 8601>,
- *       nonce:    <base64url 16 random bytes>
+ *       agentId:           <composite "<asPubKey>:<alias>">,
+ *       version:           <semver>,
+ *       agentServicePubkey: <hex; on-platform AS pubkey>,
+ *       card:              <the AgentCard object ONLY — name, description,
+ *                           iconUrl?, capabilities?, category?, tags?, …>,
+ *       issuedAt:          <ISO 8601>,
+ *       nonce:             <base64url 16 random bytes>
  *     }
  *
+ *   Response 201 JSON: { agentId, version }  (nothing manifest-derived).
+ *
  * `cef build` emits the manifest with `agentId` / `agentServicePubkey` left
- * as empty strings; this command stamps them in (composite `<asPubKey>:<alias>`
- * for `agentId`, the loaded AS pubkey for `agentServicePubkey`) before signing
- * so the manifest the server hashes is byte-for-byte the manifest the publisher
- * signs. Vault enforces the `<asPubKey>:` prefix on connect, so the canonical
- * form is composite — the plain alias is recorded only in `manifest.alias`.
+ * as empty strings; this command resolves them (composite `<asPubKey>:<alias>`
+ * for `agentId`, the loaded AS pubkey for `agentServicePubkey`) and extracts
+ * `manifest.card` for the body before signing the envelope. Vault enforces
+ * the `<asPubKey>:` prefix on connect, so the canonical form is composite —
+ * the plain alias is recorded only in the manifest (in the DDC registry).
  */
 import crypto from "node:crypto";
 import fs from "node:fs/promises";
@@ -65,7 +73,10 @@ export async function cefPublish(opts) {
     // The plain alias is the wire identity. `cef build` writes it to
     // `manifest.alias` (per `prototype.md` §"AgentManifest.Alias") and
     // leaves `manifest.agentId` blank for `cef publish` to fill in.
-    const alias = (manifest.alias ?? manifest.agentId);
+    // Prefer the plain alias; if only the composite `agentId`
+    // (`<asPubkey>:<alias>`) is present, take the tail so re-composing the
+    // agentId below doesn't double the pubkey.
+    const alias = (manifest.alias ?? manifest.agentId?.split(":").pop());
     const resolver = opts.resolveCredentialsImpl ?? resolveCredentials;
     const credResolveOpts = {
         ...(opts.privkey !== undefined ? { privkeyFlag: opts.privkey } : {}),
@@ -99,15 +110,15 @@ export async function cefPublish(opts) {
         ? (explicitAsPubkey ?? cleanPubkey).slice(2)
         : (explicitAsPubkey ?? cleanPubkey);
     const compositeAgentId = `${asPubkey}:${alias}`;
-    const stampedManifest = {
-        ...manifest,
-        agentId: compositeAgentId,
-        agentServicePubkey: asPubkey,
-    };
+    // Card-only wire body. The full manifest stays in the DDC bucket registry
+    // (written by `cef push`); the marketplace only stores the card for
+    // discovery. Sign the SAME envelope (headers, issuedAt, nonce) — only the
+    // body shape changed from `manifest` to `card`.
     const body = {
         agentId: compositeAgentId,
-        version: stampedManifest.version,
-        manifest: stampedManifest,
+        version: manifest.version,
+        agentServicePubkey: asPubkey,
+        card: manifest.card,
         issuedAt: new Date().toISOString(),
         nonce: randomBase64UrlNonce(16),
     };
@@ -125,15 +136,12 @@ export async function cefPublish(opts) {
     });
     if (res.status === 201) {
         const json = (await res.json());
-        if (typeof json.agentId !== "string" ||
-            typeof json.version !== "string" ||
-            typeof json.manifestCid !== "string") {
+        if (typeof json.agentId !== "string" || typeof json.version !== "string") {
             throw new Error(`[cef publish] unexpected 201 body: ${JSON.stringify(json)}`);
         }
         return {
             agentId: json.agentId,
             version: json.version,
-            manifestCid: json.manifestCid,
             pubkey,
         };
     }

package/dist/commands/publish.js.map

@@ -1 +1 @@
-{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AA4E7C,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO;QAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAE1D,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,uCAAuC,YAAY,4BAA4B,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,IAAI,QAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAiB,CAAC;IACrD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,6BAA6B,YAAY,uBAAwB,CAAW,CAAC,OAAO,EAAE,CACvF,CAAC;IACJ,CAAC;IACD,qBAAqB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE9C,iEAAiE;IACjE,mEAAmE;IACnE,gEAAgE;IAChE,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAE,CAAC;IAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,IAAI,kBAAkB,CAAC;IACnE,MAAM,eAAe,GAA8B;QACjD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAC;IAEjE,6DAA6D;IAC7D,2CAA2C;IAC3C,4DAA4D;IAC5D,oEAAoE;IACpE,oDAAoD;IACpD,sEAAsE;IACtE,qEAAqE;IACrE,EAAE;IACF,qEAAqE;IACrE,sEAAsE;IACtE,6DAA6D;IAC7D,iEAAiE;IACjE,0CAA0C;IAC1C,oEAAoE;IACpE,qCAAqC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,gBAAgB,GACpB,IAAI,CAAC,kBAAkB;QACvB,CAAC,OAAO,QAAQ,CAAC,kBAAkB,KAAK,QAAQ;YAChD,QAAQ,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;YACpC,CAAC,CAAC,QAAQ,CAAC,kBAAkB;YAC7B,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,MAAM,QAAQ,GAAG,CAAC,gBAAgB,IAAI,WAAW,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QACjE,CAAC,CAAC,CAAC,gBAAgB,IAAI,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC,gBAAgB,IAAI,WAAW,CAAC,CAAC;IACtC,MAAM,gBAAgB,GAAG,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC;IAEhD,MAAM,eAAe,GAAiB;QACpC,GAAG,QAAQ;QACX,OAAO,EAAE,gBAAgB;QACzB,kBAAkB,EAAE,QAAQ;KAC7B,CAAC;IAEF,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,eAAe,CAAC,OAAQ;QACjC,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC;KAChC,CAAC;IAEF,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAE1D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,CAAC;IACnF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QAC/B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,MAAM;YACrB,gBAAgB,EAAE,SAAS;SAC5B;QACD,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;QACF,IACE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAChC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAChC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EACpC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM;SACP,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,yDAAyD;IACzD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,KAAK,CACb,2CAA2C,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAe;IAC9C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,gCAAgC,OAAO,sCAAsC,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE;YAAE,SAAS;QACnC,4DAA4D;QAC5D,MAAM,GAAG,GAAG,MAAM,EAAE;aACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;aAC/C,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,GAAG;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,0CAA0C,OAAO,4BAA4B,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,0CAA0C,OAAO,KAAK,UAAU;aAC7D,IAAI,EAAE;aACN,IAAI,CAAC,IAAI,CAAC,uCAAuC,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC;AACxB,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAe,EAAE,MAAc;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SAC7B,CAAC;QACJ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,gEAAgE;IAChE,IACE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,CAAC,CAAC,MAAM,KAAK,IAAI;QACjB,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ;QAChC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2EAA2E,MAAM,GAAG,CACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAgF7C,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO;QAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAE1D,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,uCAAuC,YAAY,4BAA4B,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,IAAI,QAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAiB,CAAC;IACrD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,6BAA6B,YAAY,uBAAwB,CAAW,CAAC,OAAO,EAAE,CACvF,CAAC;IACJ,CAAC;IACD,qBAAqB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE9C,iEAAiE;IACjE,mEAAmE;IACnE,gEAAgE;IAChE,0DAA0D;IAC1D,uEAAuE;IACvE,2CAA2C;IAC3C,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;IAEtE,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,IAAI,kBAAkB,CAAC;IACnE,MAAM,eAAe,GAA8B;QACjD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAC;IAEjE,6DAA6D;IAC7D,2CAA2C;IAC3C,4DAA4D;IAC5D,oEAAoE;IACpE,oDAAoD;IACpD,sEAAsE;IACtE,qEAAqE;IACrE,EAAE;IACF,qEAAqE;IACrE,sEAAsE;IACtE,6DAA6D;IAC7D,iEAAiE;IACjE,0CAA0C;IAC1C,oEAAoE;IACpE,qCAAqC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,gBAAgB,GACpB,IAAI,CAAC,kBAAkB;QACvB,CAAC,OAAO,QAAQ,CAAC,kBAAkB,KAAK,QAAQ;YAChD,QAAQ,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;YACpC,CAAC,CAAC,QAAQ,CAAC,kBAAkB;YAC7B,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,MAAM,QAAQ,GAAG,CAAC,gBAAgB,IAAI,WAAW,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QACjE,CAAC,CAAC,CAAC,gBAAgB,IAAI,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC,gBAAgB,IAAI,WAAW,CAAC,CAAC;IACtC,MAAM,gBAAgB,GAAG,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC;IAEhD,0EAA0E;IAC1E,oEAAoE;IACpE,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAQ;QAC1B,kBAAkB,EAAE,QAAQ;QAC5B,IAAI,EAAE,QAAQ,CAAC,IAAK;QACpB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC;KAChC,CAAC;IAEF,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAE1D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,CAAC;IACnF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QAC/B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,MAAM;YACrB,gBAAgB,EAAE,SAAS;SAC5B;QACD,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;QACF,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM;SACP,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,yDAAyD;IACzD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,KAAK,CACb,2CAA2C,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAe;IAC9C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,gCAAgC,OAAO,sCAAsC,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE;YAAE,SAAS;QACnC,4DAA4D;QAC5D,MAAM,GAAG,GAAG,MAAM,EAAE;aACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;aAC/C,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,GAAG;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,0CAA0C,OAAO,4BAA4B,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,0CAA0C,OAAO,KAAK,UAAU;aAC7D,IAAI,EAAE;aACN,IAAI,CAAC,IAAI,CAAC,uCAAuC,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC;AACxB,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAe,EAAE,MAAc;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SAC7B,CAAC;QACJ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,gEAAgE;IAChE,IACE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,CAAC,CAAC,MAAM,KAAK,IAAI;QACjB,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ;QAChC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2EAA2E,MAAM,GAAG,CACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5D,CAAC"}

package/dist/commands/push.d.ts

@@ -9,13 +9,33 @@ export interface CefPushOptions {
     bucket: number | bigint | string;
     /**
      * Substrate secret phrase (Sr25519) for the DDC bucket owner. Falls back to
-     * `$CEF_DDC_SECRET_PHRASE` when omitted.
+     * `$CEF_DDC_SECRET_PHRASE` when omitted. Mutually exclusive with
+     * `accessToken` — provide exactly one.
      */
     secretPhrase?: string;
+    /**
+     * DDC access token (base58) authorizing writes to the bucket, granted by the
+     * bucket owner. Falls back to `$CEF_DDC_ACCESS_TOKEN`. Use this when you don't
+     * hold the bucket's secret phrase — e.g. a token generated in ROC by the
+     * wallet that owns the Agent Service's bucket. Mutually exclusive with
+     * `secretPhrase`.
+     */
+    accessToken?: string;
     /** Network preset (MAINNET/TESTNET/DEVNET). Defaults to MAINNET. */
     preset?: DdcPreset;
     /** Explicit blockchain endpoint (overrides `preset`). */
     endpoint?: string;
+    /**
+     * Agent Service pubkey (hex, exactly as shown in ROC) to stamp into the
+     * pushed manifest's identity. `cef push` signs DDC writes with an unrelated
+     * bucket-owner key — the signing keypair can be anything with write access —
+     * so the AS identity cannot be derived and must be passed in. When set, the
+     * manifest's `agentServicePubkey` and `agentId` (`<asPubkey>:<alias>`) are
+     * stamped before upload, so bucket consumers (the dashboard registry read,
+     * the vault-api connect check) see a fully-identified manifest immediately,
+     * without waiting for `cef publish`.
+     */
+    agentServicePubkey?: string;
     /** Optional CDN endpoint override. */
     cdn?: string;
     /** Output directory the build wrote to. Defaults to `<cwd>/dist`. */
@@ -32,12 +52,20 @@ export interface CefPushResult {
     bucketId: string;
     /** LEAF `bundle.js` piece CID stamped into `manifest.bundle.cid`. */
     cid: string;
-    /** Per-version DAG CID. */
+    /** LEAF `manifest.json` piece CID stored inside the version node. */
+    manifestCid: string;
+    /** Per-version DAG CID (links bundle.js + manifest.json + widgets/). */
     versionCid: string;
     /** Per-agent record DAG CID. */
     recordCid: string;
-    /** `agents` directory DAG CID (the new CNS target). */
+    /** `agents` directory DAG CID (the CNS target). */
     directoryCid: string;
+    /** One entry per widget linked under the version node's `widgets/` (empty when none). */
+    widgets: Array<{
+        id: string;
+        dirCid: string;
+        fileCount: number;
+    }>;
 }
 export declare function cefPush(opts: CefPushOptions): Promise<CefPushResult>;
 //# sourceMappingURL=push.d.ts.map

package/dist/commands/push.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../src/commands/push.ts"],"names":[],"mappings":"AAmBA,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,SAAS,EAEf,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,aAAa,CAAC,EAAE,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;IACZ,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;CACtB;AAID,wBAAsB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CA2E1E"}
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../src/commands/push.ts"],"names":[],"mappings":"AAmBA,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,SAAS,EAEf,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,aAAa,CAAC,EAAE,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnE;AAID,wBAAsB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CA4I1E"}

package/dist/commands/push.js

@@ -15,7 +15,7 @@
  */
 import fs from "node:fs/promises";
 import path from "node:path";
-import { pushBundle, } from "../lib/ddc.js";
+import { pushAgentVersion, } from "../lib/ddc.js";
 const DEFAULT_DIST = "dist";
 export async function cefPush(opts) {
     const cwd = opts.cwd ? path.resolve(opts.cwd) : process.cwd();
@@ -23,10 +23,20 @@ export async function cefPush(opts) {
         ? path.resolve(cwd, opts.distDir)
         : path.join(cwd, DEFAULT_DIST);
     const bucketId = parseBucketId(opts.bucket);
+    // Auth: either the bucket owner's secret phrase or an access token minted by
+    // that owner. Exactly one — a token lets you push to a bucket whose seed you
+    // don't hold (e.g. one generated in ROC by the AS bucket's owner wallet).
     const secretPhrase = opts.secretPhrase ?? process.env.CEF_DDC_SECRET_PHRASE;
-    if (!secretPhrase || secretPhrase.trim().length === 0) {
-        throw new Error("[cef push] no DDC signer — pass --secret-phrase or set $CEF_DDC_SECRET_PHRASE "
-            + "(the Sr25519 substrate phrase that owns the bucket).");
+    const accessToken = opts.accessToken ?? process.env.CEF_DDC_ACCESS_TOKEN;
+    const hasPhrase = !!secretPhrase && secretPhrase.trim().length > 0;
+    const hasToken = !!accessToken && accessToken.trim().length > 0;
+    if (!hasPhrase && !hasToken) {
+        throw new Error("[cef push] no DDC authorization — provide one of:\n"
+            + "  --secret-phrase / $CEF_DDC_SECRET_PHRASE  (the Sr25519 phrase that owns the bucket)\n"
+            + "  --access-token / $CEF_DDC_ACCESS_TOKEN     (a token granted by the bucket owner)");
+    }
+    if (hasPhrase && hasToken) {
+        throw new Error("[cef push] both --secret-phrase and --access-token were provided — pass exactly one.");
     }
     const agentId = opts.agentId ?? (await autodetectAgentId(distDir));
     const agentDir = path.join(distDir, agentId);
@@ -49,12 +59,58 @@ export async function cefPush(opts) {
     if (!version) {
         throw new Error(`[cef push] manifest at ${manifestPath} has no version — run \`cef build\` first`);
     }
-    const result = await pushBundle({
+    // Gather each declared widget's staged directory (dist/<id>/widgets/<id>/)
+    // BEFORE upload — missing/empty dirs warn and are dropped so their manifest
+    // entry keeps its placeholder dag (and is not linked under the version node).
+    const widgetUploads = [];
+    for (const widget of manifest.widgets ?? []) {
+        const widgetDir = path.join(agentDir, "widgets", widget.id);
+        const files = await readWidgetFiles(widgetDir);
+        if (files === null) {
+            console.warn(`[cef push] WARNING: widget "${widget.id}": no staged directory at ${widgetDir} — `
+                + `skipping (run \`cef build\` after the agent's build:widgets step).`);
+            continue;
+        }
+        if (files.length === 0) {
+            console.warn(`[cef push] WARNING: widget "${widget.id}": staged directory ${widgetDir} is empty — skipping.`);
+            continue;
+        }
+        widgetUploads.push({ id: widget.id, files });
+    }
+    // The bytes we upload AND write to disk — captured from the stamping callback
+    // so the on-disk manifest.json matches the one stored in the version node.
+    let finalManifestBytes = "";
+    const result = await pushAgentVersion({
         bucketId,
         agentName,
         version,
         bundleBytes,
-        secretPhrase,
+        widgets: widgetUploads,
+        // Stamp the content-addressed refs into the manifest BEFORE it is stored,
+        // so the version node's manifest.json carries them. bucketId is recorded as
+        // a DECIMAL STRING per the locked contract.
+        buildManifestBytes: ({ bundleCid, widgets }) => {
+            manifest.bundle = { bucketId: bucketId.toString(), cid: bundleCid };
+            for (const w of widgets) {
+                const decl = (manifest.widgets ?? []).find((x) => x.id === w.id);
+                if (decl)
+                    decl.dag = { bucketId: bucketId.toString(), cid: w.dirCid };
+            }
+            // Stamp the AS identity when provided. `cef build` leaves agentId /
+            // agentServicePubkey empty (they're filled at publish), but push targets
+            // a known agent service, so stamp them here from the supplied AS pubkey
+            // — the manifest's `agentId` is `<asPubkey>:<alias>`, matching what ROC,
+            // the dashboard registry, and the vault-api connect check expect.
+            const asPub = opts.agentServicePubkey?.trim();
+            if (asPub) {
+                manifest.agentServicePubkey = asPub;
+                manifest.agentId = `${asPub}:${manifest.alias || agentName}`;
+            }
+            finalManifestBytes = JSON.stringify(manifest, null, 2) + "\n";
+            return new TextEncoder().encode(finalManifestBytes);
+        },
+        ...(hasPhrase ? { secretPhrase } : {}),
+        ...(hasToken ? { accessToken } : {}),
         ...(opts.preset !== undefined ? { preset: opts.preset } : {}),
         ...(opts.endpoint !== undefined ? { endpoint: opts.endpoint } : {}),
         ...(opts.cdn !== undefined ? { cdn: opts.cdn } : {}),
@@ -62,19 +118,47 @@ export async function cefPush(opts) {
             ? { ddcModuleImpl: opts.ddcModuleImpl }
             : {}),
     });
-    // Rewrite manifest.json: stamp the content-addressed bundle ref. bucketId
-    // is recorded as a DECIMAL STRING per the locked contract.
-    manifest.bundle = { bucketId: bucketId.toString(), cid: result.leafCid };
-    await fs.writeFile(manifestPath, JSON.stringify(manifest, null, 2) + "\n", "utf8");
+    for (const w of result.widgets) {
+        console.log(`  widget ${w.id}: dir DAG ${w.dirCid} (${w.fileCount} file${w.fileCount === 1 ? "" : "s"})`);
+    }
+    // Write the stamped manifest back once (identical bytes to the version node).
+    await fs.writeFile(manifestPath, finalManifestBytes, "utf8");
     return {
         agentId,
         bucketId: bucketId.toString(),
         cid: result.leafCid,
+        manifestCid: result.manifestCid,
         versionCid: result.versionCid,
         recordCid: result.recordCid,
         directoryCid: result.directoryCid,
+        widgets: result.widgets,
     };
 }
+/**
+ * Read every file directly under a staged widget directory as
+ * `{ name: basename, bytes }`. Flat listing (entry + siblings). Returns
+ * `null` when the directory does not exist (widget not staged), or `[]` when
+ * it exists but contains no files.
+ */
+async function readWidgetFiles(widgetDir) {
+    let entries;
+    try {
+        entries = await fs.readdir(widgetDir, { withFileTypes: true });
+    }
+    catch (e) {
+        if (e.code === "ENOENT")
+            return null;
+        throw e;
+    }
+    const files = [];
+    for (const entry of entries) {
+        if (!entry.isFile())
+            continue;
+        const bytes = await fs.readFile(path.join(widgetDir, entry.name));
+        files.push({ name: entry.name, bytes });
+    }
+    return files;
+}
 function parseBucketId(bucket) {
     if (typeof bucket === "bigint")
         return bucket;