@engramx/owner 0.1.0

package/LICENSE

@@ -0,0 +1,190 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to the Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by the Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding any notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2025 EngramX contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,68 @@
+# @engramx/owner
+
+Create an **EngramX engram** that _you_ own — the standalone owner-side creation CLI.
+
+This package is deliberately **separate from `@engramx/client`** (the operator SDK). Creating an engram
+makes the caller the **owner** (root); operating one is append-only. Keeping them in different packages
+means an operator host never gains owner powers, and vice-versa.
+
+- **Create** (owner) → this package.
+- **Operate** (append-only) → `@engramx/client` + the MCP server.
+
+## Reserve, then activate
+
+Creation is two-stage, on purpose:
+
+- **Reserve** (the default) — a **free** registry record (~$0). Nothing runs yet; idempotent (one per
+  principal).
+- **Activate** (`--activate`) — spawns the live canister (the platform funds the ~1.15T-cycle spawn).
+
+Reserving costs nothing, so a "create-and-walk-away" never wastes cycles — the spend happens only when
+you activate. Interactively, a bare `npx @engramx/owner` reserves and then asks whether to spin it up
+now; headless (`--yes`/non-TTY) stays reserve-only unless you pass `--activate`.
+
+## Quick start
+
+```bash
+# Reserve (free). Reuse an existing icp-cli identity so you keep custody; EngramX holds nothing:
+npx @engramx/owner --icp-identity <name> --registry <registry-canister-id> --yes
+
+# Or generate a local owner key at ~/.engramx/owner.key (BACK IT UP — loss = total loss):
+npx @engramx/owner --registry <registry-canister-id> --yes
+
+# Activate when you're ready to use it (spawns the canister) — same flags plus --activate:
+npx @engramx/owner --activate --registry <registry-canister-id> --yes
+
+# Local dev replica: add --local
+npx @engramx/owner --registry <id> --local --activate
+```
+
+Run `npx @engramx/owner --help` for all options.
+
+## Ownership & custody
+
+The registry makes the **caller** the owner — there is no owner parameter and no reassignment, so the
+signing identity _is_ the owner, by construction. Your options:
+
+| Mode | Who owns | Recovery |
+| --- | --- | --- |
+| `--icp-identity <name>` | your icp-cli identity | whatever that identity has (e.g. its 24-word seed) — single key |
+| _default_ (local key) | a fresh Ed25519 key at `~/.engramx/owner.key` | **none** — back up the seed, or loss is permanent |
+| web wizard (wallet) | your OISY / Internet Identity | real wallet recovery — the recommended path for humans |
+
+## What this does **not** do
+
+- It does not read or write memory — that's the operator flow (`@engramx/client`).
+- No hosted/managed creation (EngramX never signs on your behalf).
+- Reserving is free and activation is free to you (the platform funds the spawn); paying to create is
+  not a thing. Ongoing cycles can optionally be topped up with ckUSDC via the cashier.
+
+## Use as an agent skill
+
+`SKILL.md` in this package is a cross-agent capability (Agent Skills format) that lets a coding/agent
+host (Claude Code, Codex, OpenClaw, …) create an engram on the user's behalf by shelling to this CLI.
+
+## Honesty
+
+The record is tamper-**evident**, not immutable (the owner can overwrite; every change is a signed
+entry). A single owner key is a total-loss risk. Nothing is on a public fleet yet.

package/SKILL.md

@@ -0,0 +1,65 @@
+---
+name: create-engram
+description: Create an EngramX engram — a personal, user-OWNED memory store plus a tamper-evident action record on the Internet Computer. Use when the user wants to set up their own engram so an AI agent can remember them across sessions and across models. Creation is free and makes the user the owner; the agent connects separately, later, as an append-only operator.
+---
+
+# Create an EngramX engram
+
+An **engram** is a per-user canister on the Internet Computer that holds an agent's memory and a
+tamper-evident audit record, **owned by the user** — not the AI vendor, and not you (the agent).
+Creating one is **free** (the platform funds it). This skill CREATES an engram the user owns; it does
+**not** operate one — reading and appending memory is a separate *operator* step (`@engramx/client`),
+kept in a different package so operators never gain owner powers.
+
+## When to use
+The user says something like "create an engram", "set up my EngramX memory", "give me my own memory
+store", or "I want my own agent memory that I control." If they instead want an agent to *read/write*
+an engram that already exists, that's the operator flow (`@engramx/client pair`), not this skill.
+
+## Reserve, then activate (important)
+Creation is two-stage on purpose:
+- **Reserve** (the default) = a **free** registry record (~$0). Nothing runs yet.
+- **Activate** (`--activate`) = spawns the live canister (the platform funds the ~1.15T-cycle spawn).
+
+This is a deliberate cycle anti-drain: reserving costs nothing, so a speculative "create" never wastes
+money. **Only pass `--activate` once the user has confirmed they actually want to spin it up now** —
+i.e. they're going to use it. Reserving is idempotent (one per principal), so a reserve-now,
+activate-later flow is safe.
+
+## How to run
+Creation goes through the standalone CLI. You need the EngramX **registry canister id** (ask the user,
+or read `ENGRAMX_REGISTRY` from the environment). Always pass `--yes` when running as an agent so it
+doesn't wait on a prompt.
+
+1. **Reserve** (free — do this first):
+   - Reusing the user's icp-cli identity (they keep full custody; EngramX holds nothing):
+     ```
+     npx @engramx/owner --icp-identity <name> --registry <registry-canister-id> --yes
+     ```
+   - Otherwise a local Ed25519 owner key is generated at `~/.engramx/owner.key`:
+     ```
+     npx @engramx/owner --registry <registry-canister-id> --yes
+     ```
+     ⚠ That seed is the user's **only** key. Tell them to back up `~/.engramx/owner.key`; losing it
+     means permanently losing ownership of the engram.
+2. **Activate** once the user confirms they want it running — same flags plus `--activate`:
+   ```
+   npx @engramx/owner --activate --icp-identity <name> --registry <registry-canister-id> --yes
+   ```
+   The command prints the live engram's canister id and the owner principal.
+
+- **Local dev replica**: add `--local` (host defaults to `http://127.0.0.1:4943`).
+
+## After activating
+1. The user **owns** the engram. To let this agent (or any host) read and append its memory, connect as
+   an **operator** — a separate, append-only step: `npx @engramx/client pair <invite-code> --engram <id>`.
+   Owner ≠ operator, by design.
+2. Ongoing cycles can be funded with **ckUSDC** via the cashier (optional).
+
+## Honesty (state these plainly to the user)
+- The owner key is the **user's own** — EngramX never holds it. A single local key means loss = total,
+  unrecoverable loss; recommend backing it up (or using their icp-cli identity, or the web wizard with a
+  wallet for real recovery).
+- The record is tamper-**evident**, not immutable: the owner can overwrite their own memory, but every
+  change is a signed entry anyone can check.
+- Nothing is on a public fleet yet — until the registry is deployed, this creates against a dev replica.

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,249 @@
+#!/usr/bin/env node
+import { parseArgs } from 'node:util';
+import * as readline from 'node:readline';
+import { execFileSync } from 'node:child_process';
+import { Principal } from '@icp-sdk/core/principal';
+import { createEngram, provision, connectAgent } from './create.js';
+import { localOwnerKey, icpCliOwnerKey, DEFAULT_KEY_PATH } from './owner-key.js';
+import { CANONICAL_REGISTRY_CANISTER_ID, CANONICAL_WIZARD_URL } from './config.js';
+const green = (s) => `\x1b[32m${s}\x1b[0m`;
+const red = (s) => `\x1b[31m${s}\x1b[0m`;
+const yellow = (s) => `\x1b[33m${s}\x1b[0m`;
+const dim = (s) => `\x1b[2m${s}\x1b[0m`;
+const bold = (s) => `\x1b[1m${s}\x1b[0m`;
+const ok = (m) => console.log(`${green('✓')} ${m}`);
+const fail = (m) => console.error(`${red('✗')} ${m}`);
+const warn = (m) => console.error(`${yellow('⚠')} ${m}`);
+const info = (m) => console.log(`  ${dim(m)}`);
+const HELP = `${bold('engramx-owner')} — create an EngramX engram that YOU own.
+
+An engram is a per-user canister on the Internet Computer holding an agent's memory + a tamper-evident
+action record. You own it; an agent connects SEPARATELY as an append-only operator (@engramx/client)
+— this package never mixes the two.
+
+${bold('Reserve, then spawn on real use.')} By default this RESERVES your engram — a free registry
+record (~$0). The live canister spawns only when you actually use it: ${bold('--connect')} (spin it up
+AND mint an invite for your agent, the usual path) or ${bold('--activate')} (spawn without an agent).
+This keeps a "create-and-walk-away" from ever costing cycles. Reserve is idempotent (one per principal).
+
+${bold('Usage')}
+  npx @engramx/owner [ownership] [target]              ${dim('# reserve (free); prompts to spin up if interactive')}
+  npx @engramx/owner --connect [ownership] [target]    ${dim('# spawn + mint an operator invite for your agent')}
+  npx @engramx/owner --activate [ownership] [target]   ${dim('# spawn without connecting an agent')}
+
+${bold('Ownership / custody')} (pick one; local key is the default)
+  (default)                 Generate a local Ed25519 owner key at ${DEFAULT_KEY_PATH}.
+                            ${yellow('That seed is your ONLY key — back it up. Loss = permanent loss of ownership.')}
+  --icp-identity <name>     Reuse an existing icp-cli identity (you keep custody; EngramX holds nothing).
+  --key-file <path>         Use/create the local owner key at <path> instead of the default.
+  --wallet                  Own it with your browser wallet (OISY / Internet Identity) via the web
+                            wizard — the recoverable path. Opens the wizard and records the result.
+
+${bold('Target')}
+  --registry <id>           EngramX registry canister id. Defaults to the CANONICAL registry
+                            (or ENGRAMX_REGISTRY); a different id creates against a fork.
+  --wizard-url <url>        Web-wizard URL for --wallet (or ENGRAMX_WIZARD_URL; default: canonical).
+  --host <url>              Replica host. Default: https://icp-api.io, or http://127.0.0.1:4943 with --local.
+  --local                   Target a local replica (fetches the root key first). Never use for mainnet.
+  --connect                 Spawn the engram AND mint an append-only operator invite in one step (the
+                            usual way to wire an agent). Prints the invite + the pair command.
+  --agent-name <name>       Label for the operator minted by --connect (default: "agent").
+  --invite <code>           Invite code, for deployments that arm the reserve gate (raw-keypair
+                            identities like this CLI's need one there; wallet identities do not).
+  --activate                Spawn the live canister WITHOUT connecting an agent (use the web app / SDK
+                            to add memory). Headless (--yes/non-TTY) stays reserve-only unless you pass
+                            --activate or --connect — the cycle anti-drain default.
+  -y, --yes                 Don't prompt (headless/agent use). Reserves only unless --connect/--activate.
+  -h, --help                Show this help.
+
+${bold('After creating')}
+  • You own the engram. Give an agent append-only access as an OPERATOR (a separate step):
+      npx @engramx/client pair <invite-code> --engram <engram-canister-id>
+  • Fund ongoing cycles with ckUSDC via the cashier (optional).`;
+function question(q) {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    return new Promise((resolve) => rl.question(q, (a) => (rl.close(), resolve(a)))).then((a) => a.trim());
+}
+async function confirm(q, defaultYes = false) {
+    const a = await question(`${q} ${defaultYes ? '[Y/n]' : '[y/N]'} `);
+    if (a === '')
+        return defaultYes;
+    return defaultYes ? !/^n(o)?$/i.test(a) : /^y(es)?$/i.test(a);
+}
+function tryOpenBrowser(url) {
+    const cmd = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open';
+    try {
+        execFileSync(cmd, [url], { stdio: 'ignore' });
+    }
+    catch {
+        /* user opens it manually from the printed URL */
+    }
+}
+/**
+ * Wallet-ownership handoff. The signature + creation happen in the web wizard (with OISY / Internet
+ * Identity), so the engram is owned by the user's durable, recoverable wallet — EngramX never touches
+ * the key and this CLI never signs. The CLI opens the wizard and records the resulting engram id.
+ * (In-CLI ICRC-34 delegation is a later hardening; this handoff is the v1 wallet path.)
+ */
+async function walletHandoff(wizardUrl) {
+    console.log(`${bold('Wallet ownership')} — create your engram in the browser with your wallet, so it is ` +
+        `recoverable and EngramX never touches your key.\n`);
+    info(`Opening: ${wizardUrl}`);
+    tryOpenBrowser(wizardUrl);
+    console.log('');
+    console.log('  1. Sign in with your wallet (OISY / Internet Identity) and create your engram.');
+    console.log('  2. Copy its canister id (shown on the dashboard).');
+    console.log('');
+    const id = await question('Paste your engram canister id (blank to skip): ');
+    if (!id) {
+        info('Skipped. Once created, your wallet owns it; attach an operator with `npx @engramx/client pair`.');
+        return;
+    }
+    let principal;
+    try {
+        principal = Principal.fromText(id).toText();
+    }
+    catch {
+        fail(`"${id}" is not a valid canister id.`);
+        process.exit(1);
+    }
+    ok(`Your wallet owns engram ${bold(principal)}.`);
+    console.log('');
+    console.log(bold('Next:'));
+    console.log(`  • Attach an agent as an operator:  ${dim(`npx @engramx/client pair <invite-code> --engram ${principal}`)}`);
+}
+async function main() {
+    const { values } = parseArgs({
+        options: {
+            registry: { type: 'string' },
+            'wizard-url': { type: 'string' },
+            host: { type: 'string' },
+            'icp-identity': { type: 'string' },
+            'key-file': { type: 'string' },
+            wallet: { type: 'boolean' },
+            local: { type: 'boolean' },
+            activate: { type: 'boolean' },
+            connect: { type: 'boolean' },
+            invite: { type: 'string' },
+            'agent-name': { type: 'string' },
+            yes: { type: 'boolean', short: 'y' },
+            help: { type: 'boolean', short: 'h' },
+        },
+        allowPositionals: true,
+    });
+    if (values.help) {
+        console.log(HELP);
+        return;
+    }
+    // ── Wallet handoff: owned by your wallet, created in the web wizard (no local signing here). ──
+    if (values.wallet) {
+        const wizardUrl = values['wizard-url'] ?? process.env['ENGRAMX_WIZARD_URL'] ?? CANONICAL_WIZARD_URL;
+        if (!wizardUrl) {
+            fail('No wizard URL. Pass --wizard-url <url> or set ENGRAMX_WIZARD_URL (the canonical default is unset until deploy).');
+            process.exit(1);
+        }
+        await walletHandoff(wizardUrl);
+        return;
+    }
+    // ── Self-signed create (local key or icp-cli identity). ──
+    const registryCanisterId = values.registry ?? process.env['ENGRAMX_REGISTRY'] ?? CANONICAL_REGISTRY_CANISTER_ID;
+    if (!registryCanisterId) {
+        fail('No registry canister id. Pass --registry <id> or set ENGRAMX_REGISTRY (the canonical default is unset until deploy).');
+        process.exit(1);
+    }
+    const local = Boolean(values.local);
+    const host = values.host ?? (local ? 'http://127.0.0.1:4943' : 'https://icp-api.io');
+    let identity;
+    const icpName = values['icp-identity'];
+    if (icpName) {
+        identity = icpCliOwnerKey(icpName);
+        info(`Owner = your icp-cli identity "${icpName}" (EngramX holds nothing).`);
+    }
+    else {
+        const key = localOwnerKey(values['key-file']);
+        identity = key.identity;
+        if (key.created) {
+            warn(`Generated a NEW local owner key at ${key.keyPath}. ` +
+                `${bold('This seed is your ONLY key — back it up now. Loss = permanent loss of ownership.')}`);
+        }
+        else {
+            info(`Owner = your local key at ${key.keyPath}.`);
+        }
+    }
+    const ownerPrincipal = identity.getPrincipal().toText();
+    info(`Owner principal: ${ownerPrincipal}`);
+    // The ownership/target flags to re-supply when activating later (so the SAME principal provisions).
+    const activateFlags = [
+        icpName ? `--icp-identity ${icpName}` : values['key-file'] ? `--key-file ${values['key-file']}` : '',
+        values.registry ? `--registry ${values.registry}` : '',
+        values.host ? `--host ${values.host}` : '',
+        local ? '--local' : '',
+    ]
+        .filter(Boolean)
+        .join(' ');
+    const activateCmd = `npx @engramx/owner --activate${activateFlags ? ' ' + activateFlags : ''}`;
+    const interactive = Boolean(process.stdout.isTTY && process.stdin.isTTY);
+    const backupNote = () => {
+        if (!icpName) {
+            console.log(`  • ${yellow('Back up')} your owner key (${values['key-file'] ?? DEFAULT_KEY_PATH}) — it is the only key to this engram.`);
+        }
+    };
+    // --connect: the owner's real-use spawn trigger — provision (if needed) AND mint an append-only
+    // operator invite in one step, so the engram spawns exactly when you're wiring an agent to it.
+    if (values.connect) {
+        try {
+            const r = await connectAgent({ identity, registryCanisterId, host, local, invite: values.invite }, { name: values['agent-name'] });
+            ok(`Engram live: ${bold(r.canisterId)} — operator invite minted for "${r.operatorName}".`);
+            info(`You own it (owner principal ${r.owner}).`);
+            console.log('');
+            console.log(bold('Give this to your agent (append-only operator access):'));
+            console.log(`  ${dim(`npx @engramx/client pair ${r.inviteCode} --engram ${r.canisterId}`)}`);
+            console.log('');
+            console.log(`${bold('The grant is append-only')} — the agent can read and add memory, never overwrite, delete, or move funds.`);
+            backupNote();
+        }
+        catch (e) {
+            fail(e instanceof Error ? e.message : String(e));
+            process.exit(1);
+        }
+        return;
+    }
+    // Reserve (free) — or reserve+provision now if --activate was explicitly passed.
+    let result = await createEngram({
+        identity,
+        registryCanisterId,
+        host,
+        local,
+        activate: Boolean(values.activate),
+        invite: values.invite,
+    });
+    // Interactive human who only reserved: offer to spin it up now (default yes — they ran this on purpose).
+    // Headless/agent (--yes or non-TTY) stays reserve-only unless --activate — that's the anti-drain gate.
+    if (result.state === 'reserved' && interactive && !values.yes) {
+        if (await confirm('Spin up your engram now? This provisions a live canister the platform funds.', true)) {
+            result = await provision({ identity, registryCanisterId, host, local, invite: values.invite });
+        }
+    }
+    if (result.state === 'provisioned') {
+        ok(result.alreadyExisted ? `You already own an engram: ${bold(result.canisterId)}` : `Engram live: ${bold(result.canisterId)}`);
+        info(`You own it (owner principal ${result.owner}). The platform funds the spawn (bounded by the registry reserve).`);
+        console.log('');
+        console.log(bold('Next:'));
+        console.log(`  • Give an agent append-only access as an operator:  ${dim(`npx @engramx/client pair <invite-code> --engram ${result.canisterId}`)}`);
+        console.log(`  • Fund ongoing cycles with ckUSDC via the cashier (optional).`);
+        backupNote();
+    }
+    else {
+        ok(result.alreadyExisted ? 'Reservation already held — no cycles spent.' : 'Reserved — free, no cycles spent.');
+        info(`Owner principal ${result.owner}. Nothing is running yet; activate when you're ready to use it.`);
+        console.log('');
+        console.log(bold('Activate (spawns the canister):'));
+        console.log(`  ${dim(activateCmd)}`);
+        backupNote();
+    }
+}
+main().catch((e) => {
+    fail(e instanceof Error ? e.message : String(e));
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnF,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC;AACnD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC;AACjD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC;AACpD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;AAChD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;AAEjD,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEvD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC;;;;;;EAMnC,IAAI,CAAC,kCAAkC,CAAC;wEAC8B,IAAI,CAAC,WAAW,CAAC;wDACjC,IAAI,CAAC,YAAY,CAAC;;;EAGxE,IAAI,CAAC,OAAO,CAAC;yDAC0C,GAAG,CAAC,qDAAqD,CAAC;yDAC1D,GAAG,CAAC,kDAAkD,CAAC;yDACvD,GAAG,CAAC,qCAAqC,CAAC;;EAEjG,IAAI,CAAC,qBAAqB,CAAC;oEACuC,gBAAgB;8BACtD,MAAM,CAAC,8EAA8E,CAAC;;;;;;EAMlH,IAAI,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;EAiBd,IAAI,CAAC,gBAAgB,CAAC;;;gEAGwC,CAAC;AAEjE,SAAS,QAAQ,CAAC,CAAS;IACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAClG,CAAC,CAAC,IAAI,EAAE,CACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,CAAS,EAAE,UAAU,GAAG,KAAK;IAClD,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,UAAU,CAAC;IAChC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IAC/F,IAAI,CAAC;QACH,YAAY,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,kBAAkB,CAAC,kEAAkE;QAC3F,mDAAmD,CACtD,CAAC;IACF,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;IAC9B,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,iDAAiD,CAAC,CAAC;IAC7E,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,IAAI,CAAC,iGAAiG,CAAC,CAAC;QACxG,OAAO;IACT,CAAC;IACD,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,EAAE,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CACT,wCAAwC,GAAG,CAAC,mDAAmD,SAAS,EAAE,CAAC,EAAE,CAC9G,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,OAAO,EAAE;YACP,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;YACpC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;SACtC;QACD,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IAED,iGAAiG;IACjG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,CAAC;QACpG,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,iHAAiH,CAAC,CAAC;YACxH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,4DAA4D;IAC5D,MAAM,kBAAkB,GACtB,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,8BAA8B,CAAC;IACvF,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,IAAI,CAAC,sHAAsH,CAAC,CAAC;QAC7H,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAErF,IAAI,QAAkB,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,OAAO,EAAE,CAAC;QACZ,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,kCAAkC,OAAO,4BAA4B,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9C,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QACxB,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,IAAI,CACF,sCAAsC,GAAG,CAAC,OAAO,IAAI;gBACnD,GAAG,IAAI,CAAC,kFAAkF,CAAC,EAAE,CAChG,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,6BAA6B,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,CAAC;IACxD,IAAI,CAAC,oBAAoB,cAAc,EAAE,CAAC,CAAC;IAE3C,oGAAoG;IACpG,MAAM,aAAa,GAAG;QACpB,OAAO,CAAC,CAAC,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QACpG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;QAC1C,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;KACvB;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,WAAW,GAAG,gCAAgC,aAAa,CAAC,CAAC,CAAC,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAE/F,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACT,OAAO,MAAM,CAAC,SAAS,CAAC,oBAAoB,MAAM,CAAC,UAAU,CAAC,IAAI,gBAAgB,wCAAwC,CAC3H,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,gGAAgG;IAChG,+FAA+F;IAC/F,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,YAAY,CAC1B,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EACpE,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAC/B,CAAC;YACF,EAAE,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,UAAW,CAAC,kCAAkC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;YAC5F,IAAI,CAAC,+BAA+B,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,4BAA4B,CAAC,CAAC,UAAU,aAAa,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,0BAA0B,CAAC,+EAA+E,CACnH,CAAC;YACF,UAAU,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,iFAAiF;IACjF,IAAI,MAAM,GAAG,MAAM,YAAY,CAAC;QAC9B,QAAQ;QACR,kBAAkB;QAClB,IAAI;QACJ,KAAK;QACL,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,yGAAyG;IACzG,uGAAuG;IACvG,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,WAAW,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC9D,IAAI,MAAM,OAAO,CAAC,8EAA8E,EAAE,IAAI,CAAC,EAAE,CAAC;YACxG,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACnC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,8BAA8B,IAAI,CAAC,MAAM,CAAC,UAAW,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,MAAM,CAAC,UAAW,CAAC,EAAE,CAAC,CAAC;QAClI,IAAI,CAAC,+BAA+B,MAAM,CAAC,KAAK,oEAAoE,CAAC,CAAC;QACtH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CACT,yDAAyD,GAAG,CAAC,mDAAmD,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,CACvI,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;QAC/E,UAAU,EAAE,CAAC;IACf,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC;QAChH,IAAI,CAAC,mBAAmB,MAAM,CAAC,KAAK,iEAAiE,CAAC,CAAC;QACvG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrC,UAAU,EAAE,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;IAC1B,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,2 @@
+export declare const CANONICAL_REGISTRY_CANISTER_ID = "";
+export declare const CANONICAL_WIZARD_URL = "";

package/dist/config.js

@@ -0,0 +1,10 @@
+// Canonical fleet endpoints — SET AT FLEET DEPLOY (see the deployment runbook's distribution steps).
+//
+// The canonical registry is the one anchored by the constitutional REGISTRY_ROOT. Creating against it
+// puts your engram in the canonical fleet (registered + third-party-verifiable); a different --registry
+// creates against a fork. These defaults make the canonical fleet the zero-config target once deployed;
+// until then they are empty and --registry / ENGRAMX_REGISTRY (or --wizard-url) is required. Override
+// anytime for self-hosting or a dev replica.
+export const CANONICAL_REGISTRY_CANISTER_ID = '';
+export const CANONICAL_WIZARD_URL = '';
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,EAAE;AACF,sGAAsG;AACtG,wGAAwG;AACxG,wGAAwG;AACxG,sGAAsG;AACtG,6CAA6C;AAC7C,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AACjD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC"}

package/dist/create.d.ts

@@ -0,0 +1,74 @@
+import type { Identity } from '@icp-sdk/core/agent';
+import type { OperatorPermissions } from './engram-idl.js';
+export interface CreateOptions {
+    /** The owner identity — its principal becomes the engram's owner (root). Never EngramX's key. */
+    identity: Identity;
+    /** The EngramX registry canister id to create against (defaults to the canonical registry). */
+    registryCanisterId: string;
+    /** Replica host, e.g. https://icp-api.io (mainnet) or http://127.0.0.1:4943 (local). */
+    host: string;
+    /** Local replica → fetch the root key before calling. Never do this against mainnet. */
+    local: boolean;
+    /**
+     * Spawn the live canister in this same call. Default false → RESERVE only (a free registry
+     * record, ~$0). See the module docs for why reserve is the default.
+     */
+    activate?: boolean;
+    /**
+     * Invite code for deployments that arm the reserve gate (invite-or-wallet-proof admission).
+     * Raw-keypair identities (the kind this CLI mints) need one there; wallet-rooted identities
+     * do not. Ignored by deployments with the gate off (the default).
+     */
+    invite?: string;
+}
+export type EngramState = 'none' | 'reserved' | 'provisioned';
+export interface CreateResult {
+    /** What exists now: 'none' (nothing yet), a free 'reserved' record, or a live 'provisioned' canister. */
+    state: EngramState;
+    /** The engram canister id — present only once provisioned (null while merely reserved). */
+    canisterId: string | null;
+    /** The owner principal (the identity that signed — you). */
+    owner: string;
+    /** True if the record already existed (one-per-principal) and was returned as-is. */
+    alreadyExisted: boolean;
+}
+/**
+ * Create an engram owned by `opts.identity`.
+ *
+ * RESERVE IS THE DEFAULT, and provisioning (the real ~1.15T-cycle canister spawn) is a separate,
+ * opt-in step. This is the cycle anti-drain: a skill/agent that calls "create" speculatively and
+ * walks away leaves only a FREE registry record (`reserved`), never a funded canister. The spawn
+ * happens only when the owner actually commits — `activate: true` here, or a later `provision()`
+ * call — i.e. when there is a real signal the engram will be used.
+ *
+ * The registry makes the CALLER the owner — no owner parameter, no reassignment — so the signing
+ * identity IS the owner, by construction. Idempotent on both steps: an existing reservation or
+ * engram (one-per-principal) is returned as-is rather than provoking an Err.
+ */
+export declare function createEngram(opts: CreateOptions): Promise<CreateResult>;
+/**
+ * Provision (spawn) the canister for an already-reserved principal — the funded step, split out so
+ * a two-phase flow (reserve now, activate later) can call it directly. Idempotent.
+ */
+export declare function provision(opts: Omit<CreateOptions, 'activate'>): Promise<CreateResult>;
+/**
+ * Read-only: what does this principal have — nothing, a free reservation, or a live engram? No
+ * writes, no spend. Used by the owner-side status surfaces (CLI check, owner MCP).
+ */
+export declare function status(opts: Omit<CreateOptions, 'activate'>): Promise<CreateResult>;
+export interface ConnectAgentResult extends CreateResult {
+    /** The invite code the AGENT redeems with `@engramx/client pair` to become an append-only operator. */
+    inviteCode: string;
+    /** The label recorded for this operator. */
+    operatorName: string;
+}
+/**
+ * Connect an agent: provision the engram if needed (the owner's real-use spawn trigger — you only
+ * spin it up when you're actually wiring an agent), then mint an append-only OPERATOR invite for it.
+ * The agent redeems the returned code with `@engramx/client pair`. Owner ≠ operator, by construction:
+ * this mints a scoped, append-only grant, never owner powers.
+ */
+export declare function connectAgent(opts: Omit<CreateOptions, 'activate'>, params?: {
+    name?: string;
+    permissions?: OperatorPermissions;
+}): Promise<ConnectAgentResult>;

package/dist/create.js

@@ -0,0 +1,124 @@
+import { HttpAgent, Actor } from '@icp-sdk/core/agent';
+import { registryIdlFactory } from './registry-idl.js';
+import { engramIdlFactory, DEFAULT_OPERATOR_PERMISSIONS } from './engram-idl.js';
+const gateOpts = (invite) => invite ? [{ invite: [invite], walletProof: [] }] : [];
+const createOpts = (invite) => invite ? [{ genesis: [], invite: [invite], walletProof: [] }] : [];
+function connect(opts) {
+    const agent = HttpAgent.createSync({ identity: opts.identity, host: opts.host });
+    const ready = opts.local ? agent.fetchRootKey() : Promise.resolve();
+    return ready.then(() => Actor.createActor(registryIdlFactory, {
+        agent,
+        canisterId: opts.registryCanisterId,
+    }));
+}
+/**
+ * Create an engram owned by `opts.identity`.
+ *
+ * RESERVE IS THE DEFAULT, and provisioning (the real ~1.15T-cycle canister spawn) is a separate,
+ * opt-in step. This is the cycle anti-drain: a skill/agent that calls "create" speculatively and
+ * walks away leaves only a FREE registry record (`reserved`), never a funded canister. The spawn
+ * happens only when the owner actually commits — `activate: true` here, or a later `provision()`
+ * call — i.e. when there is a real signal the engram will be used.
+ *
+ * The registry makes the CALLER the owner — no owner parameter, no reassignment — so the signing
+ * identity IS the owner, by construction. Idempotent on both steps: an existing reservation or
+ * engram (one-per-principal) is returned as-is rather than provoking an Err.
+ */
+export async function createEngram(opts) {
+    const registry = await connect(opts);
+    const owner = opts.identity.getPrincipal().toText();
+    // Already provisioned? (one-per-principal) — return the live canister, regardless of `activate`.
+    const existingEngram = await registry.getMyEngram();
+    if (existingEngram.length > 0 && existingEngram[0]) {
+        return {
+            state: 'provisioned',
+            canisterId: existingEngram[0].canisterId.toText(),
+            owner,
+            alreadyExisted: true,
+        };
+    }
+    // Reserve (idempotent, free). A pre-existing reservation counts as "already existed".
+    const priorReservation = await registry.getMyReservation();
+    const hadReservation = priorReservation.length > 0;
+    if (!hadReservation) {
+        const r = await registry.reserveEngram(gateOpts(opts.invite));
+        if (r.Err)
+            throw new Error(r.Err);
+    }
+    if (!opts.activate) {
+        return { state: 'reserved', canisterId: null, owner, alreadyExisted: hadReservation };
+    }
+    // Activate: consume the reservation and spawn the canister (the funded step).
+    return provisionReserved(registry, owner, opts.invite);
+}
+/**
+ * Provision (spawn) the canister for an already-reserved principal — the funded step, split out so
+ * a two-phase flow (reserve now, activate later) can call it directly. Idempotent.
+ */
+export async function provision(opts) {
+    const registry = await connect(opts);
+    const owner = opts.identity.getPrincipal().toText();
+    const existingEngram = await registry.getMyEngram();
+    if (existingEngram.length > 0 && existingEngram[0]) {
+        return {
+            state: 'provisioned',
+            canisterId: existingEngram[0].canisterId.toText(),
+            owner,
+            alreadyExisted: true,
+        };
+    }
+    return provisionReserved(registry, owner, opts.invite);
+}
+/**
+ * Read-only: what does this principal have — nothing, a free reservation, or a live engram? No
+ * writes, no spend. Used by the owner-side status surfaces (CLI check, owner MCP).
+ */
+export async function status(opts) {
+    const registry = await connect(opts);
+    const owner = opts.identity.getPrincipal().toText();
+    const existingEngram = await registry.getMyEngram();
+    if (existingEngram.length > 0 && existingEngram[0]) {
+        return { state: 'provisioned', canisterId: existingEngram[0].canisterId.toText(), owner, alreadyExisted: true };
+    }
+    const reservation = await registry.getMyReservation();
+    if (reservation.length > 0) {
+        return { state: 'reserved', canisterId: null, owner, alreadyExisted: true };
+    }
+    return { state: 'none', canisterId: null, owner, alreadyExisted: false };
+}
+/**
+ * Connect an agent: provision the engram if needed (the owner's real-use spawn trigger — you only
+ * spin it up when you're actually wiring an agent), then mint an append-only OPERATOR invite for it.
+ * The agent redeems the returned code with `@engramx/client pair`. Owner ≠ operator, by construction:
+ * this mints a scoped, append-only grant, never owner powers.
+ */
+export async function connectAgent(opts, params) {
+    const provisioned = await provision(opts);
+    if (!provisioned.canisterId)
+        throw new Error('Engram was not provisioned — cannot mint an invite');
+    const agent = HttpAgent.createSync({ identity: opts.identity, host: opts.host });
+    if (opts.local)
+        await agent.fetchRootKey();
+    const engram = Actor.createActor(engramIdlFactory, {
+        agent,
+        canisterId: provisioned.canisterId,
+    });
+    const operatorName = params?.name ?? 'agent';
+    const res = await engram.createOperatorInvite(operatorName, params?.permissions ?? DEFAULT_OPERATOR_PERMISSIONS);
+    if (res.Err)
+        throw new Error(res.Err);
+    if (!res.Ok)
+        throw new Error('Engram returned no invite code');
+    return { ...provisioned, inviteCode: res.Ok, operatorName };
+}
+async function provisionReserved(registry, owner, invite) {
+    // The invite normally rides the reservation (consumed at reserve); passing it here too covers the
+    // DIRECT-provision case (no prior reservation) on gate-armed deployments, and is retry-idempotent.
+    const p = await registry.provisionEngram(createOpts(invite));
+    if (p.Err)
+        throw new Error(p.Err);
+    if (!p.Ok)
+        throw new Error('Registry returned no result for provisionEngram');
+    return { state: 'provisioned', canisterId: p.Ok.canisterId.toText(), owner, alreadyExisted: false };
+}
+//# sourceMappingURL=create.js.map

package/dist/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../src/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AA0CjF,MAAM,QAAQ,GAAG,CAAC,MAAe,EAAe,EAAE,CAChD,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,MAAM,UAAU,GAAG,CAAC,MAAe,EAAc,EAAE,CACjD,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AASrE,SAAS,OAAO,CAAC,IAAmB;IAClC,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACpE,OAAO,KAAK,CAAC,IAAI,CACf,GAAG,EAAE,CACH,KAAK,CAAC,WAAW,CAAC,kBAAkB,EAAE;QACpC,KAAK;QACL,UAAU,EAAE,IAAI,CAAC,kBAAkB;KACpC,CAA6B,CACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAmB;IACpD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,CAAC;IAEpD,iGAAiG;IACjG,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE;YACjD,KAAK;YACL,cAAc,EAAE,IAAI;SACrB,CAAC;IACJ,CAAC;IAED,sFAAsF;IACtF,MAAM,gBAAgB,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IAC3D,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;IACxF,CAAC;IAED,8EAA8E;IAC9E,OAAO,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAqC;IACnE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,CAAC;IAEpD,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE;YACjD,KAAK;YACL,cAAc,EAAE,IAAI;SACrB,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAqC;IAChE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,CAAC;IAEpD,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAClH,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IACtD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AAC3E,CAAC;AAaD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAqC,EACrC,MAA6D;IAE7D,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,WAAW,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAEnG,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,gBAAgB,EAAE;QACjD,KAAK;QACL,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAiC,CAAC;IAEnC,MAAM,YAAY,GAAG,MAAM,EAAE,IAAI,IAAI,OAAO,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,IAAI,4BAA4B,CAAC,CAAC;IACjH,IAAI,GAAG,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAE/D,OAAO,EAAE,GAAG,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAuB,EAAE,KAAa,EAAE,MAAe;IACtF,kGAAkG;IAClG,mGAAmG;IACnG,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC9E,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AACtG,CAAC"}

package/dist/engram-idl.d.ts

@@ -0,0 +1,13 @@
+export declare const engramIdlFactory: ({ IDL }: {
+    IDL: any;
+}) => any;
+/** The default connect-an-agent grant: read + append (the standard append-only operator), no wallet. */
+export interface OperatorPermissions {
+    canReadMemory: boolean;
+    scopes: [] | [string[]];
+    canReadBackup: [] | [boolean];
+    callsPerMinute: bigint;
+    canAppendMemory: boolean;
+    canReadWallet: boolean;
+}
+export declare const DEFAULT_OPERATOR_PERMISSIONS: OperatorPermissions;

package/dist/engram-idl.js

@@ -0,0 +1,28 @@
+// Minimal engram IDL — the OWNER's connect-an-agent subset only (createOperatorInvite).
+//
+// A deliberate SUBSET of engramx/src/generated/engram.idl.js, hand-vendored so @engramx/owner stays
+// self-contained AND carries no operator/memory surface. The owner mints an append-only operator
+// invite; the AGENT redeems it with @engramx/client. Types copied verbatim from the generated factory.
+export const engramIdlFactory = ({ IDL }) => {
+    const OperatorPermissions = IDL.Record({
+        canReadMemory: IDL.Bool,
+        scopes: IDL.Opt(IDL.Vec(IDL.Text)),
+        canReadBackup: IDL.Opt(IDL.Bool),
+        callsPerMinute: IDL.Nat,
+        canAppendMemory: IDL.Bool,
+        canReadWallet: IDL.Bool,
+    });
+    return IDL.Service({
+        // Owner-only. Returns the invite code the agent redeems via `@engramx/client pair`.
+        createOperatorInvite: IDL.Func([IDL.Text, OperatorPermissions], [IDL.Variant({ Ok: IDL.Text, Err: IDL.Text })], []),
+    });
+};
+export const DEFAULT_OPERATOR_PERMISSIONS = {
+    canReadMemory: true,
+    canAppendMemory: true,
+    canReadWallet: false,
+    canReadBackup: [],
+    scopes: [],
+    callsPerMinute: 120n,
+};
+//# sourceMappingURL=engram-idl.js.map

package/dist/engram-idl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engram-idl.js","sourceRoot":"","sources":["../src/engram-idl.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,EAAE;AACF,oGAAoG;AACpG,iGAAiG;AACjG,uGAAuG;AAEvG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE;IACxD,MAAM,mBAAmB,GAAG,GAAG,CAAC,MAAM,CAAC;QACrC,aAAa,EAAE,GAAG,CAAC,IAAI;QACvB,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QAChC,cAAc,EAAE,GAAG,CAAC,GAAG;QACvB,eAAe,EAAE,GAAG,CAAC,IAAI;QACzB,aAAa,EAAE,GAAG,CAAC,IAAI;KACxB,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,OAAO,CAAC;QACjB,oFAAoF;QACpF,oBAAoB,EAAE,GAAG,CAAC,IAAI,CAC5B,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAC/B,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,EAC9C,EAAE,CACH;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAYF,MAAM,CAAC,MAAM,4BAA4B,GAAwB;IAC/D,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;IACpB,aAAa,EAAE,EAAE;IACjB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,IAAI;CACrB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { createEngram, provision, status, connectAgent } from './create.js';
+export type { CreateOptions, CreateResult, EngramState, ConnectAgentResult } from './create.js';
+export { DEFAULT_OPERATOR_PERMISSIONS } from './engram-idl.js';
+export type { OperatorPermissions } from './engram-idl.js';
+export { localOwnerKey, icpCliOwnerKey, DEFAULT_KEY_PATH } from './owner-key.js';
+export type { LocalKey } from './owner-key.js';

package/dist/index.js

@@ -0,0 +1,6 @@
+// @engramx/owner — the owner-side engram-creation surface. Kept separate from @engramx/client (the
+// operator SDK) so operators never gain owner powers. See SKILL.md for the agent-invocable capability.
+export { createEngram, provision, status, connectAgent } from './create.js';
+export { DEFAULT_OPERATOR_PERMISSIONS } from './engram-idl.js';
+export { localOwnerKey, icpCliOwnerKey, DEFAULT_KEY_PATH } from './owner-key.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,uGAAuG;AACvG,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/owner-key.d.ts

@@ -0,0 +1,21 @@
+import { Ed25519KeyIdentity } from '@icp-sdk/core/identity';
+import type { Identity } from '@icp-sdk/core/agent';
+/** Default self-custody owner-key location. A 32-byte Ed25519 seed. */
+export declare const DEFAULT_KEY_PATH: string;
+export interface LocalKey {
+    identity: Ed25519KeyIdentity;
+    created: boolean;
+    keyPath: string;
+}
+/**
+ * Load or generate a LOCAL, self-custody Ed25519 owner key (a 32-byte seed at ~/.engramx/owner.key by
+ * default). EngramX holds nothing. A bare local key means loss = permanent loss of ownership — the
+ * caller is responsible for backing up the seed. Refuses symlinks and world/group-readable files.
+ */
+export declare function localOwnerKey(keyPath?: string): LocalKey;
+/**
+ * Reuse an existing icp-cli identity (secp256k1) by name, via `icp identity export`. Custody stays in
+ * the user's icp-cli store; EngramX holds nothing, and the user keeps whatever backup/recovery the
+ * icp-cli identity already has (e.g. its 24-word seed). Still a single key.
+ */
+export declare function icpCliOwnerKey(name: string): Identity;

package/dist/owner-key.js

@@ -0,0 +1,63 @@
+import { Ed25519KeyIdentity } from '@icp-sdk/core/identity';
+import { Secp256k1KeyIdentity } from '@icp-sdk/core/identity/secp256k1';
+import { execFileSync } from 'node:child_process';
+import { createPrivateKey, randomBytes } from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+/** Default self-custody owner-key location. A 32-byte Ed25519 seed. */
+export const DEFAULT_KEY_PATH = path.join(os.homedir(), '.engramx', 'owner.key');
+/**
+ * Load or generate a LOCAL, self-custody Ed25519 owner key (a 32-byte seed at ~/.engramx/owner.key by
+ * default). EngramX holds nothing. A bare local key means loss = permanent loss of ownership — the
+ * caller is responsible for backing up the seed. Refuses symlinks and world/group-readable files.
+ */
+export function localOwnerKey(keyPath = DEFAULT_KEY_PATH) {
+    if (fs.existsSync(keyPath)) {
+        if (fs.lstatSync(keyPath).isSymbolicLink()) {
+            throw new Error(`Owner key cannot be a symlink: ${keyPath}`);
+        }
+        const mode = fs.statSync(keyPath).mode & 0o777;
+        if (mode & 0o077) {
+            throw new Error(`Owner key ${keyPath} has insecure permissions (${mode.toString(8)}); expected 0600. ` +
+                `Fix with: chmod 600 ${keyPath}`);
+        }
+        const seed = fs.readFileSync(keyPath);
+        if (seed.length !== 32) {
+            throw new Error(`Invalid owner key: expected 32 bytes, got ${seed.length}`);
+        }
+        return { identity: Ed25519KeyIdentity.generate(seed), created: false, keyPath };
+    }
+    const seed = randomBytes(32);
+    const dir = path.dirname(keyPath);
+    if (!fs.existsSync(dir))
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    fs.writeFileSync(keyPath, seed, { mode: 0o600 });
+    return { identity: Ed25519KeyIdentity.generate(seed), created: true, keyPath };
+}
+/**
+ * Reuse an existing icp-cli identity (secp256k1) by name, via `icp identity export`. Custody stays in
+ * the user's icp-cli store; EngramX holds nothing, and the user keeps whatever backup/recovery the
+ * icp-cli identity already has (e.g. its 24-word seed). Still a single key.
+ */
+export function icpCliOwnerKey(name) {
+    let pem;
+    try {
+        pem = execFileSync('icp', ['identity', 'export', name], { encoding: 'utf-8' }).trim();
+    }
+    catch {
+        throw new Error(`Could not export icp-cli identity "${name}". Is icp-cli installed and the identity present? ` +
+            `List them with: icp identity list`);
+    }
+    const jwk = createPrivateKey(pem).export({ format: 'jwk' });
+    if (!jwk.d) {
+        throw new Error(`icp-cli identity "${name}" is not an exportable private key.`);
+    }
+    if (jwk.crv && jwk.crv !== 'secp256k1') {
+        throw new Error(`icp-cli identity "${name}" is ${jwk.crv}; only secp256k1 identities are supported here. ` +
+            `Create one with: icp identity new <name>`);
+    }
+    const secret = Uint8Array.from(Buffer.from(jwk.d, 'base64url'));
+    return Secp256k1KeyIdentity.fromSecretKey(secret);
+}
+//# sourceMappingURL=owner-key.js.map

package/dist/owner-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-key.js","sourceRoot":"","sources":["../src/owner-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,uEAAuE;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAQjF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,gBAAgB;IAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,IAAI,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QAC/C,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,aAAa,OAAO,8BAA8B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB;gBACpF,uBAAuB,OAAO,EAAE,CACnC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,oDAAoD;YAC5F,mCAAmC,CACtC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAiC,CAAC;IAC5F,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,qCAAqC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,QAAQ,GAAG,CAAC,GAAG,kDAAkD;YACxF,0CAA0C,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAChE,OAAO,oBAAoB,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;AACpD,CAAC"}

package/dist/registry-idl.d.ts

@@ -0,0 +1,3 @@
+export declare const registryIdlFactory: ({ IDL }: {
+    IDL: any;
+}) => any;

package/dist/registry-idl.js

@@ -0,0 +1,55 @@
+// Minimal registry IDL — the CREATE subset only (create / reserve / provision + read-back).
+//
+// A deliberate SUBSET of engramx/src/generated/registry.idl.js, hand-vendored here so @engramx/owner
+// stays self-contained and publishable (a package can't reach into ../../src/generated) AND so this
+// owner-side package carries no operator/engram surface at all. If the registry's create surface
+// changes, mirror the matching entries here. All types are copied verbatim from the generated factory.
+export const registryIdlFactory = ({ IDL }) => {
+    const CreateEngramResult = IDL.Variant({
+        Ok: IDL.Record({ canisterId: IDL.Principal }),
+        Err: IDL.Text,
+    });
+    const ReserveResult = IDL.Variant({
+        Ok: IDL.Record({ reserved: IDL.Bool }),
+        Err: IDL.Text,
+    });
+    const EngramStatus = IDL.Variant({
+        Active: IDL.Null,
+        Deleted: IDL.Null,
+        Frozen: IDL.Null,
+    });
+    const EngramRecord = IDL.Record({
+        status: EngramStatus,
+        owner: IDL.Principal,
+        createdAt: IDL.Int,
+        canisterId: IDL.Principal,
+    });
+    const Reservation = IDL.Record({ reservedAt: IDL.Int });
+    const ActivationFunnel = IDL.Record({
+        reserved: IDL.Nat,
+        provisioned: IDL.Nat,
+        reservedStale: IDL.Nat,
+        spawnsToday: IDL.Nat,
+        dailyCap: IDL.Nat,
+        spawnCeiling: IDL.Nat,
+    });
+    // Opts records gain opt fields forever, so passing null stays valid. genesis = the owner's first
+    // real content, written atomically as the canister spawns. invite / walletProof = the OPTIONAL
+    // admission gate (when the deployment arms it): a one-shot invite code, or the caller's DER public
+    // key proving a wallet-rooted (canister-signature) identity.
+    const CreateOpts = IDL.Opt(IDL.Record({
+        genesis: IDL.Opt(IDL.Record({ path: IDL.Text, content: IDL.Vec(IDL.Nat8) })),
+        invite: IDL.Opt(IDL.Text),
+        walletProof: IDL.Opt(IDL.Vec(IDL.Nat8)),
+    }));
+    const ReserveOpts = IDL.Opt(IDL.Record({ invite: IDL.Opt(IDL.Text), walletProof: IDL.Opt(IDL.Vec(IDL.Nat8)) }));
+    return IDL.Service({
+        createEngram: IDL.Func([CreateOpts], [CreateEngramResult], []),
+        reserveEngram: IDL.Func([ReserveOpts], [ReserveResult], []),
+        provisionEngram: IDL.Func([CreateOpts], [CreateEngramResult], []),
+        getMyEngram: IDL.Func([], [IDL.Opt(EngramRecord)], ['query']),
+        getMyReservation: IDL.Func([], [IDL.Opt(Reservation)], ['query']),
+        getActivationFunnel: IDL.Func([], [ActivationFunnel], ['query']),
+    });
+};
+//# sourceMappingURL=registry-idl.js.map

package/dist/registry-idl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-idl.js","sourceRoot":"","sources":["../src/registry-idl.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,EAAE;AACF,qGAAqG;AACrG,oGAAoG;AACpG,iGAAiG;AACjG,uGAAuG;AAEvG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE;IAC1D,MAAM,kBAAkB,GAAG,GAAG,CAAC,OAAO,CAAC;QACrC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAC7C,GAAG,EAAE,GAAG,CAAC,IAAI;KACd,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC;QAChC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QACtC,GAAG,EAAE,GAAG,CAAC,IAAI;KACd,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC;QAC/B,MAAM,EAAE,GAAG,CAAC,IAAI;QAChB,OAAO,EAAE,GAAG,CAAC,IAAI;QACjB,MAAM,EAAE,GAAG,CAAC,IAAI;KACjB,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC;QAC9B,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,GAAG,CAAC,SAAS;QACpB,SAAS,EAAE,GAAG,CAAC,GAAG;QAClB,UAAU,EAAE,GAAG,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,MAAM,gBAAgB,GAAG,GAAG,CAAC,MAAM,CAAC;QAClC,QAAQ,EAAE,GAAG,CAAC,GAAG;QACjB,WAAW,EAAE,GAAG,CAAC,GAAG;QACpB,aAAa,EAAE,GAAG,CAAC,GAAG;QACtB,WAAW,EAAE,GAAG,CAAC,GAAG;QACpB,QAAQ,EAAE,GAAG,CAAC,GAAG;QACjB,YAAY,EAAE,GAAG,CAAC,GAAG;KACtB,CAAC,CAAC;IACH,iGAAiG;IACjG,+FAA+F;IAC/F,mGAAmG;IACnG,6DAA6D;IAC7D,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CACxB,GAAG,CAAC,MAAM,CAAC;QACT,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QACzB,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;KACxC,CAAC,CACH,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CACzB,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CACnF,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,CAAC;QACjB,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC;QAC9D,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QAC3D,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC;QACjE,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAC7D,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACjE,mBAAmB,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;KACjE,CAAC,CAAC;AACL,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,62 @@
+{
+  "name": "@engramx/owner",
+  "version": "0.1.0",
+  "description": "Own an EngramX engram — the standalone owner-side CLI/SDK (create, reserve, activate). Deliberately separate from the operator SDK (@engramx/client) so operators never gain owner powers.",
+  "license": "MIT",
+  "author": "EngramX <developer@engramx.ai>",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/vhew/engramx",
+    "directory": "packages/owner"
+  },
+  "homepage": "https://github.com/vhew/engramx#readme",
+  "bugs": {
+    "url": "https://github.com/vhew/engramx/issues"
+  },
+  "keywords": [
+    "icp",
+    "internet-computer",
+    "ai-agent",
+    "engram",
+    "memory",
+    "decentralized",
+    "skill"
+  ],
+  "type": "module",
+  "engines": {
+    "node": ">=22.12.0"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "engramx-owner": "./dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist/",
+    "SKILL.md",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@icp-sdk/core": "^5.4.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.2",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.8"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}