@mnemom/mnemom 0.7.1 → 0.8.0

package/dist/index.js

@@ -1,42 +1,19 @@
 #!/usr/bin/env node
 import { program } from "commander";
-import { initCommand } from "./commands/init.js";
 import { statusCommand } from "./commands/status.js";
 import { integrityCommand } from "./commands/integrity.js";
 import { logsCommand } from "./commands/logs.js";
 import { licenseActivateCommand, licenseStatusCommand, licenseDeactivateCommand } from "./commands/license.js";
-import { cardShowCommand, cardPublishCommand, cardValidateCommand } from "./commands/card.js";
+import { cardShowCommand, cardPublishCommand, cardValidateCommand, cardEditCommand, cardEvaluateCommand } from "./commands/card.js";
 import { policyInitCommand, policyValidateCommand, policyPublishCommand, policyListCommand, policyTestCommand, policyEvaluateCommand, } from "./commands/policy.js";
-import { registerCommand } from "./commands/register.js";
-import { agentsListCommand, agentsRemoveCommand, agentsAddCommand, agentsDefaultCommand, agentsRekeyCommand, agentsCheckBindingCommand } from "./commands/agents.js";
+import { protectionShowCommand, protectionPublishCommand, protectionValidateCommand, protectionEditCommand } from "./commands/protection.js";
+import { agentsListCommand } from "./commands/agents.js";
 import { loginCommand, logoutCommand, whoamiCommand } from "./commands/auth.js";
-import { makeMigrateConfigCommand } from "./commands/migrate-config.js";
 program
     .name("mnemom")
-    .description("Transparent AI agent tracing - AAP compliant")
-    .version("0.6.0")
-    .option("--agent <name>", "Select agent by name");
-program
-    .command("init")
-    .description("Initialize smoltbot for traced mode (interactive, --openclaw, or --standalone)")
-    .option("-y, --yes", "Skip confirmation prompts (accept defaults)")
-    .option("-f, --force", "Force reconfiguration even if already configured")
-    .option("--openclaw", "Configure using OpenClaw (requires OpenClaw installed)")
-    .option("--standalone", "Configure standalone (prompt for API keys directly)")
-    .action(async (options) => {
-    try {
-        await initCommand({
-            yes: options.yes,
-            force: options.force,
-            openclaw: options.openclaw,
-            standalone: options.standalone,
-        });
-    }
-    catch (error) {
-        console.error("Error:", error instanceof Error ? error.message : error);
-        process.exit(1);
-    }
-});
+    .description("Transparent AI agent tracing")
+    .version("0.8.0")
+    .option("--agent <name>", "Select agent by name (or set MNEMOM_AGENT)");
 program
     .command("status")
     .description("Show agent status and connection info")
@@ -117,12 +94,15 @@ license
         process.exit(1);
     }
 });
+// ============================================================================
+// Card commands (alignment card)
+// ============================================================================
 const cardCmd = program
     .command("card")
     .description("Manage alignment card");
 cardCmd
     .command("show")
-    .description("Display active alignment card")
+    .description("Display alignment card (YAML)")
     .action(async () => {
     try {
         const opts = program.opts();
@@ -134,13 +114,12 @@ cardCmd
     }
 });
 cardCmd
-    .command("publish")
-    .argument("<file>", "Path to card JSON file")
-    .description("Publish alignment card from JSON file")
-    .action(async (file) => {
+    .command("edit")
+    .description("Edit alignment card in $EDITOR")
+    .action(async () => {
     try {
         const opts = program.opts();
-        await cardPublishCommand(file, opts.agent);
+        await cardEditCommand(opts.agent);
     }
     catch (error) {
         console.error("Error:", error instanceof Error ? error.message : error);
@@ -148,198 +127,174 @@ cardCmd
     }
 });
 cardCmd
-    .command("validate")
-    .argument("<file>", "Path to card JSON file")
-    .description("Validate card JSON locally")
-    .action(async (file) => {
-    try {
-        await cardValidateCommand(file);
-    }
-    catch (error) {
-        console.error("Error:", error instanceof Error ? error.message : error);
-        process.exit(1);
-    }
-});
-const policyCmd = program
-    .command("policy")
-    .description("Manage policy engine");
-policyCmd
-    .command("init")
-    .description("Scaffold a policy.json template")
-    .action(async () => {
-    try {
-        await policyInitCommand();
-    }
-    catch (error) {
-        console.error("Error:", error instanceof Error ? error.message : error);
-        process.exit(1);
-    }
-});
-policyCmd
-    .command("validate")
-    .argument("<file>", "Path to policy JSON file")
-    .description("Validate policy locally")
-    .action(async (file) => {
-    try {
-        await policyValidateCommand(file);
-    }
-    catch (error) {
-        console.error("Error:", error instanceof Error ? error.message : error);
-        process.exit(1);
-    }
-});
-policyCmd
     .command("publish")
-    .argument("<file>", "Path to policy JSON file")
-    .description("Validate and publish policy to API")
+    .argument("<file>", "Path to alignment card file (YAML or JSON)")
+    .description("Publish alignment card")
     .action(async (file) => {
     try {
         const opts = program.opts();
-        await policyPublishCommand(file, opts.agent);
-    }
-    catch (error) {
-        console.error("Error:", error instanceof Error ? error.message : error);
-        process.exit(1);
-    }
-});
-policyCmd
-    .command("list")
-    .description("List active policy for current agent")
-    .action(async () => {
-    try {
-        const opts = program.opts();
-        await policyListCommand(opts.agent);
+        await cardPublishCommand(file, opts.agent);
     }
     catch (error) {
         console.error("Error:", error instanceof Error ? error.message : error);
         process.exit(1);
     }
 });
-policyCmd
-    .command("test")
-    .argument("<file>", "Path to policy JSON file")
-    .option("--against-traces", "Test against historical traces")
-    .description("Dry-run policy against historical traces")
+cardCmd
+    .command("validate")
+    .argument("<file>", "Path to alignment card file (YAML or JSON)")
+    .description("Validate alignment card locally")
     .action(async (file) => {
     try {
-        const opts = program.opts();
-        await policyTestCommand(file, opts.agent);
+        await cardValidateCommand(file);
     }
     catch (error) {
         console.error("Error:", error instanceof Error ? error.message : error);
         process.exit(1);
     }
 });
-policyCmd
+cardCmd
     .command("evaluate")
-    .argument("<file>", "Path to policy JSON file")
-    .option("--card <file>", "Path to alignment card JSON file")
+    .argument("<file>", "Path to alignment card file (YAML or JSON)")
     .option("--tools <tools>", "Comma-separated list of tool names")
     .option("--tool-manifest <file>", "Path to tool manifest JSON file")
     .option("--strict", "Exit with code 1 on warnings (not just failures)")
-    .description("Evaluate policy against tools locally (for CI/CD)")
+    .description("Evaluate card policy against tools locally (for CI/CD)")
     .action(async (file, options) => {
     try {
-        await policyEvaluateCommand(file, options);
+        await cardEvaluateCommand(file, options);
     }
     catch (error) {
         console.error("Error:", error instanceof Error ? error.message : error);
         process.exit(1);
     }
 });
-program
-    .command("register <name>")
-    .description("Register a new named agent")
-    .option("--openclaw", "Configure using OpenClaw")
-    .option("--standalone", "Configure standalone mode")
-    .option("--set-default", "Set as default agent")
-    .action(async (name, options) => {
+// ============================================================================
+// Protection card commands
+// ============================================================================
+const protectionCmd = program
+    .command("protection")
+    .description("Manage protection card");
+protectionCmd
+    .command("show")
+    .description("Display protection card (YAML)")
+    .action(async () => {
     try {
-        await registerCommand(name, {
-            openclaw: options.openclaw,
-            standalone: options.standalone,
-            setDefault: options.setDefault,
-        });
+        const opts = program.opts();
+        await protectionShowCommand(opts.agent);
     }
     catch (error) {
         console.error("Error:", error instanceof Error ? error.message : error);
         process.exit(1);
     }
 });
-const agentsCmd = program
-    .command("agents")
-    .description("List and manage registered agents");
-agentsCmd
+protectionCmd
+    .command("edit")
+    .description("Edit protection card in $EDITOR")
     .action(async () => {
     try {
-        await agentsListCommand();
+        const opts = program.opts();
+        await protectionEditCommand(opts.agent);
     }
     catch (error) {
         console.error("Error:", error instanceof Error ? error.message : error);
         process.exit(1);
     }
 });
-agentsCmd
-    .command("remove <name>")
-    .description("Remove a registered agent")
-    .action(async (name) => {
+protectionCmd
+    .command("publish")
+    .argument("<file>", "Path to protection card file (YAML or JSON)")
+    .description("Publish protection card")
+    .action(async (file) => {
     try {
-        await agentsRemoveCommand(name);
+        const opts = program.opts();
+        await protectionPublishCommand(file, opts.agent);
     }
     catch (error) {
         console.error("Error:", error instanceof Error ? error.message : error);
         process.exit(1);
     }
 });
-agentsCmd
-    .command("add <name-or-id>")
-    .description("Register an existing API agent in local config")
-    .option("--alias <alias>", "Local alias name (default: agent's API name)")
-    .action(async (nameOrId, options) => {
+protectionCmd
+    .command("validate")
+    .argument("<file>", "Path to protection card file (YAML or JSON)")
+    .description("Validate protection card locally")
+    .action(async (file) => {
     try {
-        await agentsAddCommand(nameOrId, options.alias);
+        await protectionValidateCommand(file);
     }
     catch (error) {
         console.error("Error:", error instanceof Error ? error.message : error);
         process.exit(1);
     }
 });
-agentsCmd
-    .command("default <name>")
-    .description("Set the default agent")
-    .action(async (name) => {
-    try {
-        await agentsDefaultCommand(name);
-    }
-    catch (error) {
-        console.error("Error:", error instanceof Error ? error.message : error);
-        process.exit(1);
-    }
+// ============================================================================
+// Policy commands (removed — stubs with migration guidance)
+// ============================================================================
+const policyCmd = program
+    .command("policy")
+    .description("(removed) Policy is now part of the alignment card");
+policyCmd
+    .command("init")
+    .description("(removed) Use `mnemom card validate`")
+    .action(async () => { await policyInitCommand(); });
+policyCmd
+    .command("validate")
+    .argument("<file>", "Path to policy file")
+    .description("(removed) Use `mnemom card validate`")
+    .action(async (file) => { await policyValidateCommand(file); });
+policyCmd
+    .command("publish")
+    .argument("<file>", "Path to policy file")
+    .description("(removed) Use `mnemom card publish`")
+    .action(async (file) => {
+    const opts = program.opts();
+    await policyPublishCommand(file, opts.agent);
 });
-agentsCmd
-    .command("rekey [name]")
-    .description("Re-bind an agent to a new provider API key (key hashed locally, never transmitted)")
-    .action(async (name) => {
-    try {
-        await agentsRekeyCommand(name);
-    }
-    catch (error) {
-        console.error("Error:", error instanceof Error ? error.message : error);
-        process.exit(1);
-    }
+policyCmd
+    .command("list")
+    .description("(removed) Use `mnemom card show`")
+    .action(async () => {
+    const opts = program.opts();
+    await policyListCommand(opts.agent);
 });
-agentsCmd
-    .command("check-binding [name]")
-    .description("Verify that a provider API key is bound to an agent (key hashed locally, never transmitted)")
-    .action(async (name) => {
+policyCmd
+    .command("test")
+    .argument("<file>", "Path to policy file")
+    .description("(removed) Use `mnemom card evaluate`")
+    .action(async (file) => {
+    const opts = program.opts();
+    await policyTestCommand(file, opts.agent);
+});
+policyCmd
+    .command("evaluate")
+    .argument("<file>", "Path to policy file")
+    .option("--card <file>", "Path to card file")
+    .option("--tools <tools>", "Comma-separated list of tool names")
+    .option("--tool-manifest <file>", "Path to tool manifest JSON file")
+    .option("--strict", "Exit with code 1 on warnings")
+    .description("(removed) Use `mnemom card evaluate`")
+    .action(async (file, options) => {
+    await policyEvaluateCommand(file, options);
+});
+// ============================================================================
+// Agent management
+// ============================================================================
+program
+    .command("agents")
+    .description("List agents in your account")
+    .action(async () => {
     try {
-        await agentsCheckBindingCommand(name);
+        await agentsListCommand();
     }
     catch (error) {
         console.error("Error:", error instanceof Error ? error.message : error);
         process.exit(1);
     }
 });
+// ============================================================================
+// Auth
+// ============================================================================
 program
     .command("login")
     .description("Authenticate with your Mnemom account")
@@ -377,5 +332,4 @@ program
         process.exit(1);
     }
 });
-program.addCommand(makeMigrateConfigCommand());
 program.parse();

package/dist/lib/api.d.ts

@@ -131,3 +131,44 @@ export declare function testPolicyHistorical(agentId: string, policyJson: Record
         skipped: number;
     };
 }>;
+/**
+ * Fetch the canonical alignment card as YAML (or JSON fallback).
+ * Returns the raw response body as a string.
+ */
+export declare function getAlignmentCard(agentId: string, format?: "yaml" | "json"): Promise<{
+    body: string;
+    contentType: string;
+}>;
+/**
+ * Publish (create or update) an alignment card.
+ * Accepts YAML or JSON body; set contentType accordingly.
+ */
+export declare function putAlignmentCard(agentId: string, body: string, contentType?: "text/yaml" | "application/json"): Promise<{
+    card_id: string;
+    composed: boolean;
+}>;
+/**
+ * Fetch the canonical protection card as YAML (or JSON fallback).
+ */
+export declare function getProtectionCard(agentId: string, format?: "yaml" | "json"): Promise<{
+    body: string;
+    contentType: string;
+}>;
+/**
+ * Publish (create or update) a protection card.
+ */
+export declare function putProtectionCard(agentId: string, body: string, contentType?: "text/yaml" | "application/json"): Promise<{
+    card_id: string;
+    composed: boolean;
+}>;
+/**
+ * Resolve an agent name or ID to a server agent ID.
+ *
+ * Resolution order:
+ *  1. Explicit agentName parameter (--agent flag)
+ *  2. MNEMOM_AGENT environment variable
+ *
+ * If the value looks like an agent ID (smolt-* or mnm-*), uses it directly.
+ * Otherwise resolves the name from the authenticated user's agent list.
+ */
+export declare function resolveAgentId(agentName?: string): Promise<string>;

package/dist/lib/api.js

@@ -82,7 +82,7 @@ export async function listAgents() {
     const response = await fetch(url, { headers: await authHeaders() });
     if (!response.ok) {
         if (response.status === 401) {
-            throw new Error("Not authenticated. Run `smoltbot login` or set MNEMOM_API_KEY.");
+            throw new Error("Not authenticated. Run `mnemom login` or set MNEMOM_API_KEY.");
         }
         const err = await response.json().catch(() => ({ error: "unknown" }));
         throw new Error(err.message || `Failed to list agents: ${response.status}`);
@@ -205,3 +205,133 @@ export async function testPolicyHistorical(agentId, policyJson, limit = 50) {
     }
     return response.json();
 }
+// ============================================================================
+// Unified Card API (UC-4+)
+// ============================================================================
+/**
+ * Fetch the canonical alignment card as YAML (or JSON fallback).
+ * Returns the raw response body as a string.
+ */
+export async function getAlignmentCard(agentId, format = "yaml") {
+    const accept = format === "yaml" ? "text/yaml" : "application/json";
+    const url = validateUrl(`${API_BASE}/v1/agents/${agentId}/alignment-card`);
+    const response = await fetch(url, {
+        headers: { Accept: accept, ...(await authHeaders()) },
+    });
+    if (!response.ok) {
+        if (response.status === 404) {
+            return { body: "", contentType: "" };
+        }
+        const error = (await response.json().catch(() => ({
+            error: "unknown",
+            message: response.statusText,
+        })));
+        throw new Error(error.message || `Failed to fetch alignment card: ${response.status}`);
+    }
+    const ct = response.headers.get("content-type") ?? "";
+    const body = await response.text();
+    return { body, contentType: ct };
+}
+/**
+ * Publish (create or update) an alignment card.
+ * Accepts YAML or JSON body; set contentType accordingly.
+ */
+export async function putAlignmentCard(agentId, body, contentType = "text/yaml") {
+    const url = validateUrl(`${API_BASE}/v1/agents/${agentId}/alignment-card`);
+    const response = await fetch(url, {
+        method: "PUT",
+        headers: { "Content-Type": contentType, ...(await authHeaders()) },
+        body: sanitizeForHttp(body),
+    });
+    if (!response.ok) {
+        const error = (await response.json().catch(() => ({
+            error: "unknown",
+            message: response.statusText,
+        })));
+        throw new Error(error.message || `Failed to publish alignment card: ${response.status}`);
+    }
+    return response.json();
+}
+/**
+ * Fetch the canonical protection card as YAML (or JSON fallback).
+ */
+export async function getProtectionCard(agentId, format = "yaml") {
+    const accept = format === "yaml" ? "text/yaml" : "application/json";
+    const url = validateUrl(`${API_BASE}/v1/agents/${agentId}/protection-card`);
+    const response = await fetch(url, {
+        headers: { Accept: accept, ...(await authHeaders()) },
+    });
+    if (!response.ok) {
+        if (response.status === 404) {
+            return { body: "", contentType: "" };
+        }
+        const error = (await response.json().catch(() => ({
+            error: "unknown",
+            message: response.statusText,
+        })));
+        throw new Error(error.message || `Failed to fetch protection card: ${response.status}`);
+    }
+    const ct = response.headers.get("content-type") ?? "";
+    const body = await response.text();
+    return { body, contentType: ct };
+}
+/**
+ * Publish (create or update) a protection card.
+ */
+export async function putProtectionCard(agentId, body, contentType = "text/yaml") {
+    const url = validateUrl(`${API_BASE}/v1/agents/${agentId}/protection-card`);
+    const response = await fetch(url, {
+        method: "PUT",
+        headers: { "Content-Type": contentType, ...(await authHeaders()) },
+        body: sanitizeForHttp(body),
+    });
+    if (!response.ok) {
+        const error = (await response.json().catch(() => ({
+            error: "unknown",
+            message: response.statusText,
+        })));
+        throw new Error(error.message || `Failed to publish protection card: ${response.status}`);
+    }
+    return response.json();
+}
+// ============================================================================
+// Agent Resolution (server-side, no local config)
+// ============================================================================
+/**
+ * Resolve an agent name or ID to a server agent ID.
+ *
+ * Resolution order:
+ *  1. Explicit agentName parameter (--agent flag)
+ *  2. MNEMOM_AGENT environment variable
+ *
+ * If the value looks like an agent ID (smolt-* or mnm-*), uses it directly.
+ * Otherwise resolves the name from the authenticated user's agent list.
+ */
+export async function resolveAgentId(agentName) {
+    const name = agentName ?? process.env.MNEMOM_AGENT;
+    if (!name) {
+        console.error("\nAgent required. Use --agent <name> or set MNEMOM_AGENT.\n");
+        console.error("List your agents with: mnemom agents\n");
+        process.exit(1);
+    }
+    // If it looks like an agent ID, use directly (no server call needed)
+    if (/^(smolt-[0-9a-f]{8}|mnm-[0-9a-f-]{36})$/.test(name)) {
+        return name;
+    }
+    // Resolve name from server (requires auth)
+    try {
+        const agent = await getAgentByName(name);
+        if (agent)
+            return agent.id;
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (msg.includes("Not authenticated")) {
+            console.error(`\nNot authenticated. Run \`mnemom login\` first.\n`);
+            process.exit(1);
+        }
+    }
+    console.error(`\nAgent not found: ${name}`);
+    console.error("List your agents with: mnemom agents\n");
+    process.exit(1);
+}

package/dist/lib/auth.d.ts

@@ -1,4 +1,26 @@
-import { type AuthTokens } from "./config.js";
+/**
+ * Auth credential management.
+ *
+ * Stores auth tokens in ~/.mnemom/auth.json (UC-9: no more config.json).
+ * License JWTs are stored alongside auth tokens.
+ */
+export interface AuthTokens {
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: number;
+    userId: string;
+    email: string;
+}
+export interface AuthStore {
+    auth?: AuthTokens;
+    licenseJwt?: string;
+}
+export declare function saveAuthTokens(tokens: AuthTokens): void;
+export declare function clearAuthTokens(): void;
+export declare function getAuthInfo(): AuthTokens | null;
+export declare function saveLicenseJwt(jwt: string): void;
+export declare function clearLicenseJwt(): void;
+export declare function getLicenseJwt(): string | null;
 export type AuthCredential = {
     type: "jwt";
     token: string;
@@ -12,8 +34,8 @@ export type AuthCredential = {
  * Get a valid access token, or null if not authenticated.
  *
  * Resolution order:
- *  1. SMOLTBOT_TOKEN environment variable (CI / non-interactive)
- *  2. Stored token from config (auto-refreshes if expired)
+ *  1. MNEMOM_TOKEN environment variable (CI / non-interactive)
+ *  2. Stored token from auth store (auto-refreshes if expired)
  */
 export declare function getAccessToken(): Promise<string | null>;
 /**
@@ -21,19 +43,15 @@ export declare function getAccessToken(): Promise<string | null>;
  */
 export declare function requireAccessToken(): Promise<string>;
 /**
- * Get the Mnemom API key from env var or config.
- *
- * Resolution order:
- *  1. MNEMOM_API_KEY environment variable
- *  2. Stored mnemomApiKey from config
+ * Get the Mnemom API key from env var.
  */
 export declare function getMnemomApiKey(): string | null;
 /**
  * Resolve the best available auth credential.
  *
  * Resolution order:
- *  1. JWT (SMOLTBOT_TOKEN env or stored token with auto-refresh)
- *  2. API key (MNEMOM_API_KEY env or config mnemomApiKey)
+ *  1. JWT (MNEMOM_TOKEN env or stored token with auto-refresh)
+ *  2. API key (MNEMOM_API_KEY env)
  *  3. None
  */
 export declare function resolveAuth(): Promise<AuthCredential>;
@@ -44,17 +62,8 @@ export declare function requireAuth(): Promise<AuthCredential & {
     type: "jwt" | "api-key";
 }>;
 /**
- * Authenticate via browser-based login flow.
- *
- * 1. Start a local HTTP server on a random port
- * 2. Generate a random `state` nonce for CSRF protection
- * 3. Open the browser to the API's CLI login page
- * 4. Wait for the login page to POST tokens back to localhost
- * 5. Verify state, store tokens, and close the server
+ * Check if the user is logged in (has any credential).
  */
+export declare function isLoggedIn(): Promise<boolean>;
 export declare function loginWithBrowser(): Promise<AuthTokens>;
-/**
- * Authenticate with email + password via the API auth proxy.
- * Used by --no-browser fallback.
- */
 export declare function loginWithPassword(email: string, password: string): Promise<AuthTokens>;