@mnemom/mnemom 0.7.1 → 0.8.0

package/README.md

@@ -1,28 +1,28 @@
-# smoltbot
+# Mnemom CLI
 
-[![CI](https://github.com/mnemom/smoltbot/actions/workflows/ci.yml/badge.svg)](https://github.com/mnemom/smoltbot/actions/workflows/ci.yml)
-[![CodeQL](https://github.com/mnemom/smoltbot/actions/workflows/codeql.yml/badge.svg)](https://github.com/mnemom/smoltbot/actions/workflows/codeql.yml)
-[![npm](https://img.shields.io/npm/v/smoltbot.svg)](https://www.npmjs.com/package/smoltbot)
+[![CI](https://github.com/mnemom/mnemom-platform/actions/workflows/ci.yml/badge.svg)](https://github.com/mnemom/mnemom-platform/actions/workflows/ci.yml)
+[![CodeQL](https://github.com/mnemom/mnemom-platform/actions/workflows/codeql.yml/badge.svg)](https://github.com/mnemom/mnemom-platform/actions/workflows/codeql.yml)
+[![npm](https://img.shields.io/npm/v/%40mnemom%2Fmnemom.svg)](https://www.npmjs.com/package/@mnemom/mnemom)
 [![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE)
 [![AAP](https://img.shields.io/badge/AAP-compliant-green.svg)](https://github.com/mnemom/aap)
 [![AIP](https://img.shields.io/badge/AIP-compliant-green.svg)](https://github.com/mnemom/aip)
 
 Transparent AI agent tracing. [AAP](https://github.com/mnemom/aap)-compliant.
 
-Smoltbot observes your AI agent's API calls and builds verifiable alignment traces — what decisions were made, what alternatives were considered, and whether behavior matches declared values. Your prompts and responses are never stored.
+Mnemom observes your AI agent's API calls and builds verifiable alignment traces — what decisions were made, what alternatives were considered, and whether behavior matches declared values. Your prompts and responses are never stored.
 
 ## Documentation
 
-Full documentation is at **[docs.mnemom.ai/smoltbot/overview](https://docs.mnemom.ai/smoltbot/overview)**.
+Full documentation is at **[docs.mnemom.ai](https://docs.mnemom.ai)**.
 
 ## Quick Start
 
 ```bash
-npm install -g smoltbot
-smoltbot init
+npm install -g @mnemom/mnemom
+mnemom init
 ```
 
-That's it. `smoltbot init` detects your configured AI provider API keys (Anthropic, OpenAI, Gemini) and configures your local environment to route API calls through the Mnemom gateway, where they're traced and verified. Your API keys never leave your machine — only SHA-256 hashes are used for agent identification.
+That's it. `mnemom init` detects your configured AI provider API keys (Anthropic, OpenAI, Gemini) and configures your local environment to route API calls through the Mnemom gateway, where they're traced and verified. Your API keys never leave your machine — only SHA-256 hashes are used for agent identification.
 
 ## Supported Providers
 
@@ -36,28 +36,28 @@ That's it. `smoltbot init` detects your configured AI provider API keys (Anthrop
 
 | Command | Description |
 |---------|-------------|
-| `smoltbot init` | Configure tracing for your AI agent (multi-provider) |
-| `smoltbot status` | Show agent status, providers, and connection info |
-| `smoltbot integrity` | Display integrity score and verification stats |
-| `smoltbot logs [-l N]` | Show recent traces and actions |
-| `smoltbot card show` | Display active alignment card |
-| `smoltbot card publish <file>` | Publish alignment card from JSON file |
-| `smoltbot card validate <file>` | Validate card JSON locally |
+| `mnemom init` | Configure tracing for your AI agent (multi-provider) |
+| `mnemom status` | Show agent status, providers, and connection info |
+| `mnemom integrity` | Display integrity score and verification stats |
+| `mnemom logs [-l N]` | Show recent traces and actions |
+| `mnemom card show` | Display active alignment card |
+| `mnemom card publish <file>` | Publish alignment card from JSON file |
+| `mnemom card validate <file>` | Validate card JSON locally |
 
 ## How It Works
 
 ```
-                    ┌─── /anthropic/* ──→ Anthropic (Claude)
-Your App → smoltbot ├─── /openai/*    ──→ OpenAI (GPT-5)
-           gateway  └─── /gemini/*    ──→ Google (Gemini)
-                ↓
-           CF AI Gateway
-                ↓
-           Observer Worker
-                ↓
-         AP-Trace + Verify → Supabase
-                ↓
-         Dashboard (mnemom.ai)
+                   ┌─── /anthropic/* ──→ Anthropic (Claude)
+Your App → mnemom  ├─── /openai/*    ──→ OpenAI (GPT-5)
+           gateway └─── /gemini/*    ──→ Google (Gemini)
+               ↓
+          CF AI Gateway
+               ↓
+          Observer Worker
+               ↓
+        AP-Trace + Verify → Supabase
+               ↓
+        Dashboard (mnemom.ai)
 ```
 
 1. **Gateway** — A Cloudflare Worker that intercepts API requests to Anthropic, OpenAI, and Gemini. It identifies your agent via API key hash (zero-config), attaches tracing metadata, injects thinking/reasoning per provider, performs real-time integrity checking, injects conscience nudges, and delivers webhooks. Your prompts and responses pass through unchanged.
@@ -66,13 +66,13 @@ Your App → smoltbot ├─── /openai/*    ──→ OpenAI (GPT-5)
 
 3. **API** — Serves agent data, traces, integrity scores, drift alerts, enforcement status, and a unified conscience timeline. Powers both the CLI and the web dashboard.
 
-4. **CLI** — The `smoltbot` command. Configures your local environment and queries your agent's transparency data.
+4. **CLI** — The `mnemom` command. Configures your local environment and queries your agent's transparency data.
 
 5. **Dashboard** — Web UI at [mnemom.ai](https://mnemom.ai) where you can view the conscience timeline, claim your agent, and monitor alignment.
 
 ## What Gets Traced
 
-Smoltbot builds [AP-Traces](https://github.com/mnemom/aap) that record:
+Mnemom builds [AP-Traces](https://github.com/mnemom/aap) that record:
 
 - **Action** — What the agent did (type, name, category)
 - **Decision** — What alternatives were considered and why one was selected
@@ -109,13 +109,17 @@ Enforcement works across all providers where AIP is supported.
 
 ## Dependencies
 
-- [Agent Alignment Protocol (AAP)](https://github.com/mnemom/aap) — `@mnemom/agent-alignment-protocol@0.1.8` on npm
-- [Agent Integrity Protocol (AIP)](https://github.com/mnemom/aip) — `@mnemom/agent-integrity-protocol@0.1.4` on npm
+- [Agent Alignment Protocol (AAP)](https://github.com/mnemom/aap) — `@mnemom/agent-alignment-protocol@1.0.0` on npm
+- [Agent Integrity Protocol (AIP)](https://github.com/mnemom/aip) — `@mnemom/agent-integrity-protocol@1.0.0` on npm
 - [Cloudflare Workers](https://workers.cloudflare.com/) — Gateway, observer, and API hosting
 - [Cloudflare AI Gateway](https://developers.cloudflare.com/ai-gateway/) — Request logging and analytics
 - [Supabase](https://supabase.com/) — Postgres database with row-level security
 - API keys: Anthropic (required for AIP analysis), OpenAI and Gemini (optional, for multi-provider tracing)
 
+## Supply Chain
+
+All `@mnemom/*` packages are published with [SLSA build provenance](https://docs.mnemom.ai/guides/supply-chain-trust). Verify with `npm audit signatures`.
+
 ## License
 
 [Apache-2.0](LICENSE)

package/dist/commands/agents.d.ts

@@ -1,15 +1 @@
 export declare function agentsListCommand(): Promise<void>;
-export declare function agentsDefaultCommand(name: string): Promise<void>;
-/**
- * smoltbot agents add <name-or-id> [--alias <alias>]
- * Register an existing API agent in the local config.
- */
-export declare function agentsAddCommand(nameOrId: string, alias?: string): Promise<void>;
-export declare function agentsRemoveCommand(name: string): Promise<void>;
-/**
- * smoltbot agents rekey [agent-name]
- * Re-bind a claimed agent to a new provider API key.
- * The raw key is hashed locally (SHA-256) and never transmitted.
- */
-export declare function agentsRekeyCommand(name?: string): Promise<void>;
-export declare function agentsCheckBindingCommand(name?: string): Promise<void>;

package/dist/commands/agents.js

@@ -1,303 +1,43 @@
-import { loadConfig, saveConfig, computeAgentHash } from "../lib/config.js";
-import { listAgents, getAgent, getAgentByName, postApi, verifyBinding } from "../lib/api.js";
+import { listAgents } from "../lib/api.js";
+import { requireAuth } from "../lib/auth.js";
 import { fmt } from "../lib/format.js";
-import { askInput } from "../lib/prompt.js";
 export async function agentsListCommand() {
-    const config = loadConfig();
-    if (!config) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        console.log("Run `smoltbot init` to get started.\n");
-        process.exit(1);
-    }
-    console.log(fmt.header("Registered Agents"));
-    console.log();
-    // Build reverse map: agentId → local alias name
-    const localAliases = new Map();
-    for (const [name, agent] of Object.entries(config.agents)) {
-        localAliases.set(agent.agentId, name);
-    }
-    // Fetch ALL agents from API for the authenticated user
-    let apiAgents = [];
-    try {
-        apiAgents = await listAgents();
-    }
-    catch {
-        console.log(fmt.warn("Could not reach API — showing local agents only") + "\n");
-    }
-    const shown = new Set();
-    if (apiAgents.length > 0) {
-        for (const agent of apiAgents) {
-            shown.add(agent.id);
-            const localName = localAliases.get(agent.id);
-            const isDefault = localName === config.defaultAgent;
-            const displayName = localName ?? agent.name ?? agent.email ?? agent.id;
-            const defaultMarker = isDefault ? " (default)" : "";
-            console.log(`  ${fmt.label(displayName + defaultMarker, "")}`);
-            console.log(`    ${fmt.label("Agent ID: ", agent.id)}`);
-            if (agent.key_prefix) {
-                console.log(`    ${fmt.label("Key:      ", ` ${agent.key_prefix}…`)}`);
-            }
-            if (localName && localName !== displayName) {
-                console.log(`    ${fmt.label("Local alias:", " " + localName)}`);
-            }
-            if (agent.last_seen) {
-                console.log(`    ${fmt.label("Last seen:", " " + new Date(agent.last_seen).toLocaleDateString())}`);
-            }
-            if (agent.created_at) {
-                console.log(`    ${fmt.label("Created:  ", new Date(agent.created_at).toLocaleDateString())}`);
-            }
-            console.log();
-        }
-    }
-    // Show locally-registered agents not in the API response
-    for (const [name, agent] of Object.entries(config.agents)) {
-        if (!shown.has(agent.agentId)) {
-            const isDefault = name === config.defaultAgent;
-            const defaultMarker = isDefault ? " (default)" : "";
-            const providerInfo = agent.providers?.join(", ") ?? (agent.openclawConfigured ? "openclaw" : "unknown");
-            console.log(`  ${fmt.label(name + defaultMarker, "")} ${fmt.warn("(local only — not found in account)")}`);
-            console.log(`    ${fmt.label("Agent ID: ", agent.agentId)}`);
-            console.log(`    ${fmt.label("Provider: ", providerInfo)}`);
-            console.log();
-        }
-    }
-    const total = apiAgents.length > 0 ? apiAgents.length : Object.keys(config.agents).length;
-    console.log(`  Total: ${total} agent(s)\n`);
-}
-export async function agentsDefaultCommand(name) {
-    const config = loadConfig();
-    if (!config) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        process.exit(1);
-    }
-    if (!config.agents[name]) {
-        console.log(fmt.error(`Agent "${name}" is not registered locally.`) + "\n");
-        console.log(`Run \`smoltbot agents add ${name}\` to register it first.\n`);
-        process.exit(1);
-    }
-    config.defaultAgent = name;
-    saveConfig(config);
-    console.log(fmt.success(`Default agent set to "${name}"`) + "\n");
-    console.log(fmt.label("Agent ID:", ` ${config.agents[name].agentId}`) + "\n");
-}
-/**
- * smoltbot agents add <name-or-id> [--alias <alias>]
- * Register an existing API agent in the local config.
- */
-export async function agentsAddCommand(nameOrId, alias) {
-    const config = loadConfig();
-    if (!config) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        console.log("Run `smoltbot init` to get started.\n");
-        process.exit(1);
-    }
-    // Fetch the agent from the API
-    let agentId;
-    let apiName = null;
-    let createdAt;
-    try {
-        if (/^smolt-[0-9a-f]{8}$/.test(nameOrId)) {
-            const a = await getAgent(nameOrId);
-            agentId = a.id;
-            createdAt = a.created_at;
-        }
-        else {
-            const a = await getAgentByName(nameOrId);
-            if (!a) {
-                console.log(fmt.error(`Agent not found: ${nameOrId}`) + "\n");
-                console.log("Run `smoltbot agents` to see agents in your account.\n");
-                process.exit(1);
-            }
-            agentId = a.id;
-            apiName = a.name;
-            createdAt = a.created_at;
-        }
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        console.log("\n" + fmt.error(msg) + "\n");
-        process.exit(1);
-    }
-    const localAlias = alias ?? apiName ?? nameOrId;
-    // Check for conflicts
-    const existing = config.agents[localAlias];
-    if (existing) {
-        if (existing.agentId === agentId) {
-            console.log(fmt.success(`Agent "${localAlias}" is already registered (${agentId})`) + "\n");
-            return;
-        }
-        console.log(fmt.error(`Alias "${localAlias}" is already in use by agent ${existing.agentId}.`) + "\n");
-        console.log(`Use --alias <name> to choose a different local name.\n`);
-        process.exit(1);
-    }
-    config.agents[localAlias] = { agentId, configuredAt: createdAt };
-    saveConfig(config);
-    console.log(fmt.success(`Agent registered as "${localAlias}"`) + "\n");
-    console.log(fmt.label("Agent ID:", ` ${agentId}`) + "\n");
-    console.log(`Use --agent ${localAlias} to target this agent.\n`);
-}
-export async function agentsRemoveCommand(name) {
-    const config = loadConfig();
-    if (!config) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        process.exit(1);
-    }
-    if (!config.agents[name]) {
-        console.log(fmt.error(`Agent "${name}" not found`) + "\n");
-        console.log("Available agents: " + Object.keys(config.agents).join(", ") + "\n");
-        process.exit(1);
-    }
-    if (name === "default" && Object.keys(config.agents).length === 1) {
-        console.log(fmt.error("Cannot remove the only agent") + "\n");
-        console.log("Register another agent first with `smoltbot register <name>`.\n");
-        process.exit(1);
-    }
-    const removedId = config.agents[name].agentId;
-    delete config.agents[name];
-    // If we removed the default, switch to first remaining agent
-    if (config.defaultAgent === name) {
-        const remaining = Object.keys(config.agents);
-        config.defaultAgent = remaining[0] || "default";
-        console.log(fmt.warn(`Default agent switched to "${config.defaultAgent}"`) + "\n");
-    }
-    saveConfig(config);
-    console.log(fmt.success(`Agent "${name}" removed (${removedId})`) + "\n");
-}
-/**
- * smoltbot agents rekey [agent-name]
- * Re-bind a claimed agent to a new provider API key.
- * The raw key is hashed locally (SHA-256) and never transmitted.
- */
-export async function agentsRekeyCommand(name) {
-    const config = loadConfig();
-    if (!config) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        console.log("Run `smoltbot init` to get started.\n");
-        process.exit(1);
-    }
-    // Resolve which agent to rekey
-    const agentName = name ?? config.defaultAgent;
-    const agentEntry = config.agents[agentName];
-    if (!agentEntry) {
-        console.log(fmt.error(`Agent "${agentName}" not found`) + "\n");
-        console.log("Available agents: " + Object.keys(config.agents).join(", ") + "\n");
-        process.exit(1);
-    }
-    const { agentId } = agentEntry;
-    // Fetch canonical name from API — required for named-agent hash computation
-    // (named agents: hash = SHA256(key + '|' + name), unnamed: SHA256(key))
-    let agentApiName = null;
-    try {
-        const agent = await getAgent(agentId);
-        agentApiName = agent.name ?? null;
-    }
-    catch {
-        console.log(fmt.warn("Could not fetch agent details from API — proceeding without name confirmation"));
-    }
-    console.log("\n" + fmt.header("Rekey Agent"));
-    console.log();
-    console.log(`  Agent:   ${agentName} (${agentId})`);
-    if (agentApiName) {
-        console.log(`  Name:    ${agentApiName}`);
-    }
-    console.log();
-    console.log(fmt.warn("Your new provider key will be hashed locally. The raw key never leaves your machine."));
+    await requireAuth();
+    console.log(fmt.header("Agents"));
     console.log();
-    // Read new key — prefer env var for CI, otherwise prompt interactively
-    let newKey = (process.env.SMOLTBOT_NEW_KEY ?? "").trim();
-    if (!newKey) {
-        newKey = (await askInput("Enter your new provider API key:", true)).trim();
-    }
-    if (!newKey) {
-        console.log(fmt.error("No key provided") + "\n");
-        process.exit(1);
-    }
-    // Compute hash client-side — raw key never sent to API
-    const newKeyHash = computeAgentHash(newKey, agentApiName);
-    console.log("  Computing hash and calling API...\n");
-    // Call API
-    let result;
+    let agents;
     try {
-        result = await postApi(`/v1/agents/${agentId}/rekey`, { new_key_hash: newKeyHash });
+        agents = await listAgents();
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
-        if (msg.startsWith("409") || msg.includes("conflict")) {
-            // Extract conflict agent ID if present
-            const match = msg.match(/conflict: ((?:smolt-[0-9a-f]{8}|mnm-[0-9a-f-]{36}))/);
-            const shadowId = match ? match[1] : "(unknown)";
-            console.log(fmt.error("Key conflict: a different agent was already auto-created for this key.\n"));
-            console.log(`  Shadow agent ID: ${shadowId}`);
-            console.log("  Steps to resolve:");
-            console.log("    1. Open the Mnemom dashboard and deactivate the shadow agent.");
-            console.log("    2. Run `smoltbot agents rekey` again.\n");
-            console.log("  Or visit: https://www.mnemom.ai/docs/guides/agent-key-rotation\n");
-        }
-        else {
-            console.log(fmt.error(msg) + "\n");
-        }
-        process.exit(1);
-    }
-    // Agent ID is stable — no config changes needed
-    console.log(fmt.success("Agent rekeyed successfully") + "\n");
-    console.log(fmt.label("Agent ID:  ", ` ${result.agent_id}`));
-    console.log(fmt.label("Rekeyed at:", ` ${new Date(result.rekeyed_at).toLocaleString()}`));
-    console.log();
-    console.log("Your agent history, alignment card, and integrity score are preserved.");
-    console.log("Update your ANTHROPIC_API_KEY (or equivalent) to the new key.\n");
-}
-export async function agentsCheckBindingCommand(name) {
-    const config = loadConfig();
-    if (!config) {
-        console.log('\n' + fmt.error('smoltbot is not initialized') + '\n');
-        console.log('Run `smoltbot init` to get started.\n');
-        process.exit(1);
-    }
-    const agentName = name ?? config.defaultAgent;
-    const agentEntry = config.agents[agentName];
-    if (!agentEntry) {
-        console.log(fmt.error(`Agent "${agentName}" not found`) + '\n');
-        console.log('Available agents: ' + Object.keys(config.agents).join(', ') + '\n');
-        process.exit(1);
-    }
-    const { agentId } = agentEntry;
-    // Fetch canonical name from API (needed for named-agent hash)
-    let agentApiName = null;
-    try {
-        const agent = await getAgent(agentId);
-        agentApiName = agent.name ?? null;
-    }
-    catch {
-        console.log(fmt.warn('Could not fetch agent details — proceeding without name confirmation'));
-    }
-    console.log('\n' + fmt.header('Check Key Binding'));
-    console.log(`  Agent: ${agentName} (${agentId})`);
-    console.log();
-    let key = (process.env.SMOLTBOT_CHECK_KEY ?? '').trim();
-    if (!key) {
-        key = (await askInput('Enter the API key to check:', true)).trim();
-    }
-    if (!key) {
-        console.log(fmt.error('No key provided') + '\n');
-        process.exit(1);
-    }
-    const keyHash = computeAgentHash(key, agentApiName);
-    let result;
-    try {
-        result = await verifyBinding(agentId, keyHash);
-    }
-    catch (err) {
-        console.log(fmt.error(err instanceof Error ? err.message : String(err)) + '\n');
-        process.exit(1);
-    }
-    if (result.bound) {
-        console.log(fmt.success('Key is bound to this agent') + '\n');
-    }
-    else {
-        console.log(fmt.error('Key is NOT bound to this agent') + '\n');
-    }
-    if (result.key_prefix) {
-        const label = result.bound ? 'Key prefix:    ' : 'Current prefix:';
-        console.log(fmt.label(label, ` ${result.key_prefix}…`) + '\n');
-    }
+        console.log(fmt.error(`Failed to list agents: ${msg}`) + "\n");
+        process.exit(1);
+    }
+    if (agents.length === 0) {
+        console.log("  No agents found.\n");
+        return;
+    }
+    // Table header
+    const nameW = 24;
+    const idW = 40;
+    const seenW = 14;
+    const statusW = 14;
+    const header = "Name".padEnd(nameW) +
+        "ID".padEnd(idW) +
+        "Last Seen".padEnd(seenW) +
+        "Containment";
+    console.log(`  ${header}`);
+    console.log(`  ${"─".repeat(nameW + idW + seenW + statusW)}`);
+    for (const agent of agents) {
+        const name = (agent.name ?? "-").slice(0, nameW - 2).padEnd(nameW);
+        const id = agent.id.padEnd(idW);
+        const lastSeen = agent.last_seen
+            ? new Date(agent.last_seen).toLocaleDateString()
+            : "-";
+        const seen = lastSeen.padEnd(seenW);
+        const containment = agent.containment_status ?? "-";
+        console.log(`  ${name}${id}${seen}${containment}`);
+    }
+    console.log(`\n  Total: ${agents.length} agent(s)\n`);
 }

package/dist/commands/auth.js

@@ -1,13 +1,8 @@
-import { configExists, getAuthInfo, clearAuthTokens } from "../lib/config.js";
+import { getAuthInfo, clearAuthTokens } from "../lib/auth.js";
 import { loginWithBrowser, loginWithPassword } from "../lib/auth.js";
 import { fmt } from "../lib/format.js";
 import { askInput } from "../lib/prompt.js";
 export async function loginCommand(options = {}) {
-    if (!configExists()) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        console.log("Run `smoltbot init` to get started.\n");
-        process.exit(1);
-    }
     try {
         let tokens;
         if (options.noBrowser) {
@@ -45,7 +40,7 @@ export async function logoutCommand() {
 export async function whoamiCommand() {
     const auth = getAuthInfo();
     if (!auth) {
-        console.log("\nNot logged in. Run `smoltbot login` to authenticate.\n");
+        console.log("\nNot logged in. Run `mnemom login` to authenticate.\n");
         return;
     }
     const now = Math.floor(Date.now() / 1000);

package/dist/commands/card.d.ts

@@ -1,8 +1,8 @@
-import { type AlignmentCard } from "../lib/api.js";
 export type CardFormat = "json" | "yaml";
 export interface ParsedCard {
     format: CardFormat;
-    parsed: AlignmentCard;
+    parsed: Record<string, unknown>;
+    raw: string;
 }
 export declare function parseCardFile(filePath: string): ParsedCard;
 export interface ValidationCheck {
@@ -10,14 +10,27 @@ export interface ValidationCheck {
     passed: boolean;
     message: string;
 }
-/** @deprecated Use validateCard instead */
-export declare const validateCardJson: typeof validateCard;
-export declare function validateCard(raw: string): ValidationCheck[];
 /**
- * Validate a pre-parsed card object (used for YAML cards).
- * Re-serializes to JSON so the same checks run identically.
+ * Validate a unified alignment card object against ADR-008 schema.
+ * Sections: principal, values, conscience, integrity, autonomy,
+ *           capabilities, enforcement, audit, extensions
  */
-export declare function validateCardObject(card: AlignmentCard): ValidationCheck[];
+export declare function validateUnifiedCard(card: Record<string, unknown>): ValidationCheck[];
+/** @deprecated Use validateUnifiedCard instead */
+export declare const validateCardJson: (raw: string) => ValidationCheck[];
 export declare function cardShowCommand(agentName?: string): Promise<void>;
 export declare function cardPublishCommand(file: string, agentName?: string): Promise<void>;
 export declare function cardValidateCommand(file: string): Promise<void>;
+export declare function cardEditCommand(agentName?: string): Promise<void>;
+/**
+ * mnemom card evaluate <card-file> --tools <tools> -- local CI/CD evaluation
+ *
+ * Runs entirely locally using the embedded policy engine. No API key needed.
+ * The card IS the policy source -- capabilities and enforcement sections
+ * are extracted by @mnemom/policy-engine 0.3.0's evaluatePolicy().
+ */
+export declare function cardEvaluateCommand(file: string, options: {
+    tools?: string;
+    toolManifest?: string;
+    strict?: boolean;
+}): Promise<void>;