@mnemom/mnemom 0.7.2 → 0.8.0

package/dist/commands/agents.d.ts

@@ -1,15 +1 @@
 export declare function agentsListCommand(): Promise<void>;
-export declare function agentsDefaultCommand(name: string): Promise<void>;
-/**
- * smoltbot agents add <name-or-id> [--alias <alias>]
- * Register an existing API agent in the local config.
- */
-export declare function agentsAddCommand(nameOrId: string, alias?: string): Promise<void>;
-export declare function agentsRemoveCommand(name: string): Promise<void>;
-/**
- * smoltbot agents rekey [agent-name]
- * Re-bind a claimed agent to a new provider API key.
- * The raw key is hashed locally (SHA-256) and never transmitted.
- */
-export declare function agentsRekeyCommand(name?: string): Promise<void>;
-export declare function agentsCheckBindingCommand(name?: string): Promise<void>;

package/dist/commands/agents.js

@@ -1,303 +1,43 @@
-import { loadConfig, saveConfig, computeAgentHash } from "../lib/config.js";
-import { listAgents, getAgent, getAgentByName, postApi, verifyBinding } from "../lib/api.js";
+import { listAgents } from "../lib/api.js";
+import { requireAuth } from "../lib/auth.js";
 import { fmt } from "../lib/format.js";
-import { askInput } from "../lib/prompt.js";
 export async function agentsListCommand() {
-    const config = loadConfig();
-    if (!config) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        console.log("Run `smoltbot init` to get started.\n");
-        process.exit(1);
-    }
-    console.log(fmt.header("Registered Agents"));
-    console.log();
-    // Build reverse map: agentId → local alias name
-    const localAliases = new Map();
-    for (const [name, agent] of Object.entries(config.agents)) {
-        localAliases.set(agent.agentId, name);
-    }
-    // Fetch ALL agents from API for the authenticated user
-    let apiAgents = [];
-    try {
-        apiAgents = await listAgents();
-    }
-    catch {
-        console.log(fmt.warn("Could not reach API — showing local agents only") + "\n");
-    }
-    const shown = new Set();
-    if (apiAgents.length > 0) {
-        for (const agent of apiAgents) {
-            shown.add(agent.id);
-            const localName = localAliases.get(agent.id);
-            const isDefault = localName === config.defaultAgent;
-            const displayName = localName ?? agent.name ?? agent.email ?? agent.id;
-            const defaultMarker = isDefault ? " (default)" : "";
-            console.log(`  ${fmt.label(displayName + defaultMarker, "")}`);
-            console.log(`    ${fmt.label("Agent ID: ", agent.id)}`);
-            if (agent.key_prefix) {
-                console.log(`    ${fmt.label("Key:      ", ` ${agent.key_prefix}…`)}`);
-            }
-            if (localName && localName !== displayName) {
-                console.log(`    ${fmt.label("Local alias:", " " + localName)}`);
-            }
-            if (agent.last_seen) {
-                console.log(`    ${fmt.label("Last seen:", " " + new Date(agent.last_seen).toLocaleDateString())}`);
-            }
-            if (agent.created_at) {
-                console.log(`    ${fmt.label("Created:  ", new Date(agent.created_at).toLocaleDateString())}`);
-            }
-            console.log();
-        }
-    }
-    // Show locally-registered agents not in the API response
-    for (const [name, agent] of Object.entries(config.agents)) {
-        if (!shown.has(agent.agentId)) {
-            const isDefault = name === config.defaultAgent;
-            const defaultMarker = isDefault ? " (default)" : "";
-            const providerInfo = agent.providers?.join(", ") ?? (agent.openclawConfigured ? "openclaw" : "unknown");
-            console.log(`  ${fmt.label(name + defaultMarker, "")} ${fmt.warn("(local only — not found in account)")}`);
-            console.log(`    ${fmt.label("Agent ID: ", agent.agentId)}`);
-            console.log(`    ${fmt.label("Provider: ", providerInfo)}`);
-            console.log();
-        }
-    }
-    const total = apiAgents.length > 0 ? apiAgents.length : Object.keys(config.agents).length;
-    console.log(`  Total: ${total} agent(s)\n`);
-}
-export async function agentsDefaultCommand(name) {
-    const config = loadConfig();
-    if (!config) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        process.exit(1);
-    }
-    if (!config.agents[name]) {
-        console.log(fmt.error(`Agent "${name}" is not registered locally.`) + "\n");
-        console.log(`Run \`smoltbot agents add ${name}\` to register it first.\n`);
-        process.exit(1);
-    }
-    config.defaultAgent = name;
-    saveConfig(config);
-    console.log(fmt.success(`Default agent set to "${name}"`) + "\n");
-    console.log(fmt.label("Agent ID:", ` ${config.agents[name].agentId}`) + "\n");
-}
-/**
- * smoltbot agents add <name-or-id> [--alias <alias>]
- * Register an existing API agent in the local config.
- */
-export async function agentsAddCommand(nameOrId, alias) {
-    const config = loadConfig();
-    if (!config) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        console.log("Run `smoltbot init` to get started.\n");
-        process.exit(1);
-    }
-    // Fetch the agent from the API
-    let agentId;
-    let apiName = null;
-    let createdAt;
-    try {
-        if (/^smolt-[0-9a-f]{8}$/.test(nameOrId)) {
-            const a = await getAgent(nameOrId);
-            agentId = a.id;
-            createdAt = a.created_at;
-        }
-        else {
-            const a = await getAgentByName(nameOrId);
-            if (!a) {
-                console.log(fmt.error(`Agent not found: ${nameOrId}`) + "\n");
-                console.log("Run `smoltbot agents` to see agents in your account.\n");
-                process.exit(1);
-            }
-            agentId = a.id;
-            apiName = a.name;
-            createdAt = a.created_at;
-        }
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        console.log("\n" + fmt.error(msg) + "\n");
-        process.exit(1);
-    }
-    const localAlias = alias ?? apiName ?? nameOrId;
-    // Check for conflicts
-    const existing = config.agents[localAlias];
-    if (existing) {
-        if (existing.agentId === agentId) {
-            console.log(fmt.success(`Agent "${localAlias}" is already registered (${agentId})`) + "\n");
-            return;
-        }
-        console.log(fmt.error(`Alias "${localAlias}" is already in use by agent ${existing.agentId}.`) + "\n");
-        console.log(`Use --alias <name> to choose a different local name.\n`);
-        process.exit(1);
-    }
-    config.agents[localAlias] = { agentId, configuredAt: createdAt };
-    saveConfig(config);
-    console.log(fmt.success(`Agent registered as "${localAlias}"`) + "\n");
-    console.log(fmt.label("Agent ID:", ` ${agentId}`) + "\n");
-    console.log(`Use --agent ${localAlias} to target this agent.\n`);
-}
-export async function agentsRemoveCommand(name) {
-    const config = loadConfig();
-    if (!config) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        process.exit(1);
-    }
-    if (!config.agents[name]) {
-        console.log(fmt.error(`Agent "${name}" not found`) + "\n");
-        console.log("Available agents: " + Object.keys(config.agents).join(", ") + "\n");
-        process.exit(1);
-    }
-    if (name === "default" && Object.keys(config.agents).length === 1) {
-        console.log(fmt.error("Cannot remove the only agent") + "\n");
-        console.log("Register another agent first with `smoltbot register <name>`.\n");
-        process.exit(1);
-    }
-    const removedId = config.agents[name].agentId;
-    delete config.agents[name];
-    // If we removed the default, switch to first remaining agent
-    if (config.defaultAgent === name) {
-        const remaining = Object.keys(config.agents);
-        config.defaultAgent = remaining[0] || "default";
-        console.log(fmt.warn(`Default agent switched to "${config.defaultAgent}"`) + "\n");
-    }
-    saveConfig(config);
-    console.log(fmt.success(`Agent "${name}" removed (${removedId})`) + "\n");
-}
-/**
- * smoltbot agents rekey [agent-name]
- * Re-bind a claimed agent to a new provider API key.
- * The raw key is hashed locally (SHA-256) and never transmitted.
- */
-export async function agentsRekeyCommand(name) {
-    const config = loadConfig();
-    if (!config) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        console.log("Run `smoltbot init` to get started.\n");
-        process.exit(1);
-    }
-    // Resolve which agent to rekey
-    const agentName = name ?? config.defaultAgent;
-    const agentEntry = config.agents[agentName];
-    if (!agentEntry) {
-        console.log(fmt.error(`Agent "${agentName}" not found`) + "\n");
-        console.log("Available agents: " + Object.keys(config.agents).join(", ") + "\n");
-        process.exit(1);
-    }
-    const { agentId } = agentEntry;
-    // Fetch canonical name from API — required for named-agent hash computation
-    // (named agents: hash = SHA256(key + '|' + name), unnamed: SHA256(key))
-    let agentApiName = null;
-    try {
-        const agent = await getAgent(agentId);
-        agentApiName = agent.name ?? null;
-    }
-    catch {
-        console.log(fmt.warn("Could not fetch agent details from API — proceeding without name confirmation"));
-    }
-    console.log("\n" + fmt.header("Rekey Agent"));
-    console.log();
-    console.log(`  Agent:   ${agentName} (${agentId})`);
-    if (agentApiName) {
-        console.log(`  Name:    ${agentApiName}`);
-    }
-    console.log();
-    console.log(fmt.warn("Your new provider key will be hashed locally. The raw key never leaves your machine."));
+    await requireAuth();
+    console.log(fmt.header("Agents"));
     console.log();
-    // Read new key — prefer env var for CI, otherwise prompt interactively
-    let newKey = (process.env.SMOLTBOT_NEW_KEY ?? "").trim();
-    if (!newKey) {
-        newKey = (await askInput("Enter your new provider API key:", true)).trim();
-    }
-    if (!newKey) {
-        console.log(fmt.error("No key provided") + "\n");
-        process.exit(1);
-    }
-    // Compute hash client-side — raw key never sent to API
-    const newKeyHash = computeAgentHash(newKey, agentApiName);
-    console.log("  Computing hash and calling API...\n");
-    // Call API
-    let result;
+    let agents;
     try {
-        result = await postApi(`/v1/agents/${agentId}/rekey`, { new_key_hash: newKeyHash });
+        agents = await listAgents();
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
-        if (msg.startsWith("409") || msg.includes("conflict")) {
-            // Extract conflict agent ID if present
-            const match = msg.match(/conflict: ((?:smolt-[0-9a-f]{8}|mnm-[0-9a-f-]{36}))/);
-            const shadowId = match ? match[1] : "(unknown)";
-            console.log(fmt.error("Key conflict: a different agent was already auto-created for this key.\n"));
-            console.log(`  Shadow agent ID: ${shadowId}`);
-            console.log("  Steps to resolve:");
-            console.log("    1. Open the Mnemom dashboard and deactivate the shadow agent.");
-            console.log("    2. Run `smoltbot agents rekey` again.\n");
-            console.log("  Or visit: https://www.mnemom.ai/docs/guides/agent-key-rotation\n");
-        }
-        else {
-            console.log(fmt.error(msg) + "\n");
-        }
-        process.exit(1);
-    }
-    // Agent ID is stable — no config changes needed
-    console.log(fmt.success("Agent rekeyed successfully") + "\n");
-    console.log(fmt.label("Agent ID:  ", ` ${result.agent_id}`));
-    console.log(fmt.label("Rekeyed at:", ` ${new Date(result.rekeyed_at).toLocaleString()}`));
-    console.log();
-    console.log("Your agent history, alignment card, and integrity score are preserved.");
-    console.log("Update your ANTHROPIC_API_KEY (or equivalent) to the new key.\n");
-}
-export async function agentsCheckBindingCommand(name) {
-    const config = loadConfig();
-    if (!config) {
-        console.log('\n' + fmt.error('smoltbot is not initialized') + '\n');
-        console.log('Run `smoltbot init` to get started.\n');
-        process.exit(1);
-    }
-    const agentName = name ?? config.defaultAgent;
-    const agentEntry = config.agents[agentName];
-    if (!agentEntry) {
-        console.log(fmt.error(`Agent "${agentName}" not found`) + '\n');
-        console.log('Available agents: ' + Object.keys(config.agents).join(', ') + '\n');
-        process.exit(1);
-    }
-    const { agentId } = agentEntry;
-    // Fetch canonical name from API (needed for named-agent hash)
-    let agentApiName = null;
-    try {
-        const agent = await getAgent(agentId);
-        agentApiName = agent.name ?? null;
-    }
-    catch {
-        console.log(fmt.warn('Could not fetch agent details — proceeding without name confirmation'));
-    }
-    console.log('\n' + fmt.header('Check Key Binding'));
-    console.log(`  Agent: ${agentName} (${agentId})`);
-    console.log();
-    let key = (process.env.SMOLTBOT_CHECK_KEY ?? '').trim();
-    if (!key) {
-        key = (await askInput('Enter the API key to check:', true)).trim();
-    }
-    if (!key) {
-        console.log(fmt.error('No key provided') + '\n');
-        process.exit(1);
-    }
-    const keyHash = computeAgentHash(key, agentApiName);
-    let result;
-    try {
-        result = await verifyBinding(agentId, keyHash);
-    }
-    catch (err) {
-        console.log(fmt.error(err instanceof Error ? err.message : String(err)) + '\n');
-        process.exit(1);
-    }
-    if (result.bound) {
-        console.log(fmt.success('Key is bound to this agent') + '\n');
-    }
-    else {
-        console.log(fmt.error('Key is NOT bound to this agent') + '\n');
-    }
-    if (result.key_prefix) {
-        const label = result.bound ? 'Key prefix:    ' : 'Current prefix:';
-        console.log(fmt.label(label, ` ${result.key_prefix}…`) + '\n');
-    }
+        console.log(fmt.error(`Failed to list agents: ${msg}`) + "\n");
+        process.exit(1);
+    }
+    if (agents.length === 0) {
+        console.log("  No agents found.\n");
+        return;
+    }
+    // Table header
+    const nameW = 24;
+    const idW = 40;
+    const seenW = 14;
+    const statusW = 14;
+    const header = "Name".padEnd(nameW) +
+        "ID".padEnd(idW) +
+        "Last Seen".padEnd(seenW) +
+        "Containment";
+    console.log(`  ${header}`);
+    console.log(`  ${"─".repeat(nameW + idW + seenW + statusW)}`);
+    for (const agent of agents) {
+        const name = (agent.name ?? "-").slice(0, nameW - 2).padEnd(nameW);
+        const id = agent.id.padEnd(idW);
+        const lastSeen = agent.last_seen
+            ? new Date(agent.last_seen).toLocaleDateString()
+            : "-";
+        const seen = lastSeen.padEnd(seenW);
+        const containment = agent.containment_status ?? "-";
+        console.log(`  ${name}${id}${seen}${containment}`);
+    }
+    console.log(`\n  Total: ${agents.length} agent(s)\n`);
 }

package/dist/commands/auth.js

@@ -1,13 +1,8 @@
-import { configExists, getAuthInfo, clearAuthTokens } from "../lib/config.js";
+import { getAuthInfo, clearAuthTokens } from "../lib/auth.js";
 import { loginWithBrowser, loginWithPassword } from "../lib/auth.js";
 import { fmt } from "../lib/format.js";
 import { askInput } from "../lib/prompt.js";
 export async function loginCommand(options = {}) {
-    if (!configExists()) {
-        console.log("\n" + fmt.error("smoltbot is not initialized") + "\n");
-        console.log("Run `smoltbot init` to get started.\n");
-        process.exit(1);
-    }
     try {
         let tokens;
         if (options.noBrowser) {
@@ -45,7 +40,7 @@ export async function logoutCommand() {
 export async function whoamiCommand() {
     const auth = getAuthInfo();
     if (!auth) {
-        console.log("\nNot logged in. Run `smoltbot login` to authenticate.\n");
+        console.log("\nNot logged in. Run `mnemom login` to authenticate.\n");
         return;
     }
     const now = Math.floor(Date.now() / 1000);

package/dist/commands/card.d.ts

@@ -1,8 +1,8 @@
-import { type AlignmentCard } from "../lib/api.js";
 export type CardFormat = "json" | "yaml";
 export interface ParsedCard {
     format: CardFormat;
-    parsed: AlignmentCard;
+    parsed: Record<string, unknown>;
+    raw: string;
 }
 export declare function parseCardFile(filePath: string): ParsedCard;
 export interface ValidationCheck {
@@ -10,14 +10,27 @@ export interface ValidationCheck {
     passed: boolean;
     message: string;
 }
-/** @deprecated Use validateCard instead */
-export declare const validateCardJson: typeof validateCard;
-export declare function validateCard(raw: string): ValidationCheck[];
 /**
- * Validate a pre-parsed card object (used for YAML cards).
- * Re-serializes to JSON so the same checks run identically.
+ * Validate a unified alignment card object against ADR-008 schema.
+ * Sections: principal, values, conscience, integrity, autonomy,
+ *           capabilities, enforcement, audit, extensions
  */
-export declare function validateCardObject(card: AlignmentCard): ValidationCheck[];
+export declare function validateUnifiedCard(card: Record<string, unknown>): ValidationCheck[];
+/** @deprecated Use validateUnifiedCard instead */
+export declare const validateCardJson: (raw: string) => ValidationCheck[];
 export declare function cardShowCommand(agentName?: string): Promise<void>;
 export declare function cardPublishCommand(file: string, agentName?: string): Promise<void>;
 export declare function cardValidateCommand(file: string): Promise<void>;
+export declare function cardEditCommand(agentName?: string): Promise<void>;
+/**
+ * mnemom card evaluate <card-file> --tools <tools> -- local CI/CD evaluation
+ *
+ * Runs entirely locally using the embedded policy engine. No API key needed.
+ * The card IS the policy source -- capabilities and enforcement sections
+ * are extracted by @mnemom/policy-engine 0.3.0's evaluatePolicy().
+ */
+export declare function cardEvaluateCommand(file: string, options: {
+    tools?: string;
+    toolManifest?: string;
+    strict?: boolean;
+}): Promise<void>;