@paybond/kit 0.11.10 → 0.12.0

package/dist/cli/commands/discovery.js

@@ -1,15 +1,14 @@
 import { resolveJsonBody } from "../body.js";
-import { verifyAuditBundleLocal } from "../audit-export.js";
+import { verifyAuditBundleLocal } from "../../audit/verify.js";
+import { PaybondAuditExports } from "../../audit/exports.js";
 import { buildListQueryParams, extractNextCursor, partialResultsWarning, writeAtomicFileAsync, } from "../automation.js";
 import { commandPath, gatewayUrl, requireConfirmation, withGateway } from "../context.js";
 import { consumeBooleanFlag, consumeFlag } from "../globals.js";
 import { CliError } from "../types.js";
 export async function handleSignal(ctx, subcommand, argv) {
     return withGateway(ctx, async (gateway) => {
-        const principal = await gateway.getJson("/v1/auth/principal");
-        const tenantId = String(principal.tenant_id ?? "");
         if (subcommand === "portfolio") {
-            const body = await gateway.getJson(`/signal/v1/tenants/${encodeURIComponent(tenantId)}/portfolio/summary`);
+            const body = await gateway.getJson("/signal/v1/portfolio/summary");
             return { data: body };
         }
         const didFlag = consumeFlag(argv, "--did");
@@ -17,11 +16,11 @@ export async function handleSignal(ctx, subcommand, argv) {
             throw new CliError(`signal ${subcommand} requires --did`, { category: "usage", code: "cli.usage.missing_did" });
         }
         if (subcommand === "reputation") {
-            const body = await gateway.getJson(`/signal/v1/tenants/${encodeURIComponent(tenantId)}/reputation/${encodeURIComponent(didFlag.value)}`);
+            const body = await gateway.getJson(`/reputation/${encodeURIComponent(didFlag.value)}`);
             return { data: body };
         }
         if (subcommand === "fraud") {
-            const body = await gateway.getJson(`/fraud/v1/tenants/${encodeURIComponent(tenantId)}/assessments/${encodeURIComponent(didFlag.value)}`);
+            const body = await gateway.getJson(`/signal/v1/operators/${encodeURIComponent(didFlag.value)}/review-status`);
             return { data: body };
         }
         throw new CliError(`unknown signal subcommand: ${subcommand}`, { category: "usage", code: "cli.usage.unknown_command" });
@@ -29,10 +28,23 @@ export async function handleSignal(ctx, subcommand, argv) {
 }
 export async function handleReceipts(ctx, subcommand, argv) {
     return withGateway(ctx, async (gateway) => {
+        const kindFlag = consumeFlag(argv, "--kind");
+        const kind = (kindFlag.value ?? "protocol").trim().toLowerCase();
         const receiptId = argv[0];
         if (!receiptId) {
             throw new CliError(`receipts ${subcommand} requires <receipt_id>`, { category: "usage", code: "cli.usage.missing_receipt_id" });
         }
+        if (kind === "agent") {
+            if (subcommand === "get") {
+                const body = await gateway.getJson(`/protocol/v2/agent-receipts/${encodeURIComponent(receiptId)}`);
+                return { data: body };
+            }
+            if (subcommand === "verify") {
+                const fetched = await gateway.getJson(`/protocol/v2/agent-receipts/${encodeURIComponent(receiptId)}`);
+                const body = await gateway.postJson("/protocol/v2/agent-receipts/verify", fetched);
+                return { data: body };
+            }
+        }
         if (subcommand === "get") {
             const body = await gateway.getJson(`/protocol/v2/receipts/${encodeURIComponent(receiptId)}`);
             return { data: body };
@@ -54,7 +66,7 @@ export async function handleMandates(ctx, subcommand, argv) {
             return { data: body };
         }
         if (subcommand === "import") {
-            const body = await gateway.postJson("/protocol/v2/mandates/import", payload);
+            const body = await gateway.postJson("/protocol/v2/mandates", payload);
             return { data: body };
         }
         throw new CliError(`unknown mandates subcommand: ${subcommand}`, { category: "usage", code: "cli.usage.unknown_command" });
@@ -107,34 +119,27 @@ export async function handleAuditExports(ctx, subcommand, argv) {
         }
     }
     return withGateway(ctx, async (gateway) => {
+        const exportsClient = PaybondAuditExports.fromGateway(gateway);
         if (subcommand === "list") {
             const limitFlag = consumeFlag(argv, "--limit");
             const cursorFlag = consumeFlag(argv, "--cursor");
-            const params = buildListQueryParams(limitFlag.value, cursorFlag.value, { limit: "50" });
-            const body = await gateway.getJson(`/v1/compliance/audit-exports?${params.toString()}`);
-            const exports = Array.isArray(body.jobs)
-                ? body.jobs
-                : Array.isArray(body.items)
-                    ? body.items
-                    : Array.isArray(body.exports)
-                        ? body.exports
-                        : [];
-            const nextCursor = extractNextCursor(body);
-            const warnings = partialResultsWarning(nextCursor) ? [partialResultsWarning(nextCursor)] : undefined;
+            const page = await exportsClient.list({
+                limit: limitFlag.value ? Number.parseInt(limitFlag.value, 10) : undefined,
+                cursor: cursorFlag.value,
+            });
+            const warnings = partialResultsWarning(page.next_cursor)
+                ? [partialResultsWarning(page.next_cursor)]
+                : undefined;
             const data = {
-                exports: exports.map((item) => {
-                    const row = item;
-                    return {
-                        job_id: String(row.job_id ?? row.id ?? ""),
-                        status: String(row.status ?? ""),
-                        created_at: String(row.created_at ?? ""),
-                        expires_at: row.expires_at ? String(row.expires_at) : null,
-                        scope: row.scope ? String(row.scope) : undefined,
-                    };
-                }),
+                exports: page.jobs.map((item) => ({
+                    job_id: item.id,
+                    status: item.status,
+                    created_at: item.created_at,
+                    expires_at: item.expires_at,
+                })),
             };
-            if (nextCursor) {
-                data.next_cursor = nextCursor;
+            if (page.next_cursor) {
+                data.next_cursor = page.next_cursor;
             }
             return { data, warnings };
         }
@@ -145,11 +150,9 @@ export async function handleAuditExports(ctx, subcommand, argv) {
         if (subcommand === "get") {
             const issueDownload = consumeBooleanFlag(argv.slice(1), "--issue-download").present;
             const outputFlag = consumeFlag(argv.slice(1), "--output");
-            const query = issueDownload ? "?issue_download=1" : "";
-            const body = await gateway.getJson(`/v1/compliance/audit-exports/${encodeURIComponent(jobId)}${query}`);
+            const body = await exportsClient.get(jobId, { issueDownload });
             if (outputFlag.value) {
-                const job = (body.job ?? body);
-                const token = String(job.download_token ?? "");
+                const token = String(body.job.download_token ?? "");
                 if (!token) {
                     throw new CliError("audit exports get --output requires a ready export with --issue-download", {
                         category: "validation",
@@ -185,8 +188,8 @@ export async function handleAuditExports(ctx, subcommand, argv) {
         }
         if (subcommand === "delete") {
             requireConfirmation(ctx.globals, "delete audit export job");
-            await gateway.deleteJson(`/v1/compliance/audit-exports/${encodeURIComponent(jobId)}`);
-            return { data: { job_id: jobId, deleted: true } };
+            const data = await exportsClient.delete(jobId);
+            return { data };
         }
         throw new CliError(`unknown audit exports subcommand: ${subcommand}`, { category: "usage", code: "cli.usage.unknown_command" });
     });

package/dist/cli/commands/workflows.js

@@ -1,6 +1,9 @@
 import { resolveJsonBody } from "../body.js";
 import { buildListQueryParams, extractNextCursor, partialResultsWarning, } from "../automation.js";
+import { signHarborCreateRecognitionProof, signHarborEvidenceSubmitRecognitionProof, signHarborFundRecognitionProof, signHarborSettlementConfirmRecognitionProof, } from "../../agent-recognition.js";
+import { DEPRECATED_INTENTS_FUND_BODY_WARNING, fundBodyShimUsed, parseHarborMutationFlags, resolveFundPaymentSignatureFromBody, resolveHarborRecognition, } from "../intents-harbor-mutation.js";
 import { commandPath, requireConfirmation, withGateway } from "../context.js";
+import { withPaybondCli } from "../paybond.js";
 import { consumeFlag, parseOptionalNonNegativeInt, parseRequiredNonNegativeInt } from "../globals.js";
 import { maskApiKey, redactSensitiveFields } from "../redact.js";
 import { CliError } from "../types.js";
@@ -85,6 +88,9 @@ export async function handleKeys(ctx, subcommand, argv) {
     });
 }
 export async function handleIntents(ctx, subcommand, argv) {
+    if (subcommand === "create") {
+        return handleIntentsCreate(ctx, argv);
+    }
     return withGateway(ctx, async (gateway) => {
         if (subcommand === "list") {
             const statusFlag = consumeFlag(argv, "--status");
@@ -111,36 +117,128 @@ export async function handleIntents(ctx, subcommand, argv) {
             const body = await gateway.getJson(`/harbor/operator/v1/intents/${encodeURIComponent(intentId)}`);
             return { data: redactSensitiveFields(body) };
         }
-        if (subcommand === "create") {
-            const { payload } = await resolveJsonBody(argv, {
-                missingMessage: "intents create requires --body <json-file> or --stdin",
-            });
-            const body = await gateway.postJson("/harbor/intents", payload);
-            return { data: redactSensitiveFields(body) };
-        }
         if (!intentId) {
             throw new CliError(`intents ${subcommand} requires <intent_id>`, { category: "usage", code: "cli.usage.missing_intent_id" });
         }
         if (subcommand === "fund") {
-            const { payload } = await resolveJsonBody(argv, { required: false });
-            const body = await gateway.postJson(`/harbor/intents/${encodeURIComponent(intentId)}/fund`, payload);
-            return { data: redactSensitiveFields(body) };
+            return handleIntentsFund(ctx, intentId, argv.slice(1));
         }
         if (subcommand === "evidence") {
-            const { payload } = await resolveJsonBody(argv, {
-                missingMessage: "intents evidence requires --body <json-file> or --stdin",
-            });
-            const body = await gateway.postJson(`/harbor/intents/${encodeURIComponent(intentId)}/evidence`, payload);
-            return { data: redactSensitiveFields(body) };
+            return handleIntentsEvidence(ctx, intentId, argv.slice(1));
         }
         if (subcommand === "settlement-confirm") {
-            const { payload } = await resolveJsonBody(argv, { required: false });
-            const body = await gateway.postJson(`/harbor/intents/${encodeURIComponent(intentId)}/settlement/confirm`, payload);
-            return { data: redactSensitiveFields(body) };
+            return handleIntentsSettlementConfirm(ctx, intentId, argv);
         }
         throw new CliError(`unknown intents subcommand: ${subcommand}`, { category: "usage", code: "cli.usage.unknown_command" });
     });
 }
+async function handleIntentsCreate(ctx, argv) {
+    const flags = parseHarborMutationFlags(argv);
+    const { payload } = await resolveJsonBody(flags.restArgv, {
+        missingMessage: "intents create requires --body <json-file> or --stdin",
+    });
+    const body = payload ?? {};
+    return withPaybondCli(ctx, async (session) => {
+        const recognition = await resolveHarborRecognition(ctx, flags);
+        const recognitionProof = signHarborCreateRecognitionProof({
+            tenantId: session.paybond.harbor.tenantId,
+            intentBody: body,
+            keyId: recognition.agentRecognitionKeyId,
+            signingSeed: recognition.agentRecognitionSigningSeed,
+        });
+        const result = await session.paybond.harbor.createIntent(body, {
+            recognitionProof,
+            idempotencyKey: flags.idempotencyKey?.trim(),
+        });
+        return {
+            data: redactSensitiveFields(result),
+            warnings: session.warnings.length ? session.warnings : undefined,
+        };
+    });
+}
+async function handleIntentsEvidence(ctx, intentId, argv) {
+    const flags = parseHarborMutationFlags(argv);
+    const { payload } = await resolveJsonBody(flags.restArgv, {
+        missingMessage: "intents evidence requires --body <json-file> or --stdin",
+    });
+    const body = payload ?? {};
+    return withPaybondCli(ctx, async (session) => {
+        const recognition = await resolveHarborRecognition(ctx, flags);
+        const recognitionProof = signHarborEvidenceSubmitRecognitionProof({
+            tenantId: session.paybond.harbor.tenantId,
+            intentId,
+            evidenceBody: body,
+            keyId: recognition.agentRecognitionKeyId,
+            signingSeed: recognition.agentRecognitionSigningSeed,
+        });
+        const result = await session.paybond.harbor.submitEvidence(intentId, body, {
+            recognitionProof,
+            idempotencyKey: flags.idempotencyKey?.trim(),
+        });
+        return {
+            data: redactSensitiveFields(result),
+            warnings: session.warnings.length ? session.warnings : undefined,
+        };
+    });
+}
+async function handleIntentsFund(ctx, intentId, argv) {
+    const flags = parseHarborMutationFlags(argv);
+    const paymentSignatureFlag = consumeFlag(flags.restArgv, "--payment-signature");
+    let paymentSignature = paymentSignatureFlag.value?.trim() || undefined;
+    const deprecationWarnings = [];
+    const bodyShimUsed = fundBodyShimUsed(paymentSignatureFlag.rest);
+    const { payload } = await resolveJsonBody(paymentSignatureFlag.rest, { required: false });
+    if (bodyShimUsed) {
+        deprecationWarnings.push(DEPRECATED_INTENTS_FUND_BODY_WARNING);
+        if (!paymentSignature) {
+            paymentSignature = resolveFundPaymentSignatureFromBody(payload);
+        }
+    }
+    return withPaybondCli(ctx, async (session) => {
+        const recognition = await resolveHarborRecognition(ctx, flags);
+        const recognitionProof = signHarborFundRecognitionProof({
+            tenantId: session.paybond.harbor.tenantId,
+            intentId,
+            keyId: recognition.agentRecognitionKeyId,
+            signingSeed: recognition.agentRecognitionSigningSeed,
+        });
+        const result = await session.paybond.harbor.fundIntent(intentId, {
+            recognitionProof,
+            paymentSignature,
+            idempotencyKey: flags.idempotencyKey?.trim(),
+        });
+        const warnings = [...session.warnings, ...deprecationWarnings];
+        return {
+            data: redactSensitiveFields(result),
+            warnings: warnings.length ? warnings : undefined,
+        };
+    });
+}
+async function handleIntentsSettlementConfirm(ctx, intentId, argv) {
+    const flags = parseHarborMutationFlags(argv);
+    const { payload } = await resolveJsonBody(flags.restArgv, { required: false });
+    return withPaybondCli(ctx, async (session) => {
+        const recognition = await resolveHarborRecognition(ctx, flags);
+        const body = payload ?? {};
+        const recognitionProof = signHarborSettlementConfirmRecognitionProof({
+            tenantId: session.paybond.harbor.tenantId,
+            intentId,
+            body,
+            keyId: recognition.agentRecognitionKeyId,
+            signingSeed: recognition.agentRecognitionSigningSeed,
+        });
+        const result = await session.paybond.intents.confirmSettlement({
+            intentId,
+            body,
+            recognitionProof,
+            idempotencyKey: flags.idempotencyKey?.trim(),
+        });
+        return {
+            data: redactSensitiveFields(result),
+            warnings: session.warnings.length ? session.warnings : undefined,
+        };
+    });
+}
 export async function handleGuardrails(ctx, subcommand, argv) {
     return withGateway(ctx, async (gateway) => {
         if (subcommand === "bootstrap") {

package/dist/cli/help.d.ts

@@ -1,3 +1,3 @@
-export declare const ROOT_HELP = "Usage: paybond [--global-flags] <command> [<subcommand> ...] [args]\n\nGlobal flags:\n  --gateway <url>         Gateway base URL (default: https://api.paybond.ai)\n  --env-file <path>       Local secrets file (default: .env.local)\n  --format table|json     Human table or JSON envelope output (default: table)\n  --json <fields>         Field-selectable JSON for list/read commands (plain JSON; use --format json for envelope)\n  --jq <expr>             jq-style filter for list/read command output\n  --profile <name>        Named credential profile from the Paybond CLI config file\n  --request-id <id>       Correlation ID for Gateway calls and JSON output\n  --yes                   Skip confirmation for destructive operations\n  --no-open               Do not open a browser for device login\n  --color auto|always|never Colorize human table output and help text (default: auto)\n  --no-color              Disable color output (also honors NO_COLOR)\n\nCommands:\n  onboarding              Guided, non-destructive first-run checks\n  help                    Detailed help for a command\n  examples                Copy-paste examples from the command spec\n  completion bash|zsh|fish Shell completion scripts\n  login                   Sandbox device login\n  init                    Interactive first-run scaffold (solution, spend cap, framework, owned policy files)\n  init guardrail|completion|agent-middleware\n                          Scaffold sandbox guardrail, completion evidence, or agent middleware integration files\n  mcp serve|install|verify-config|tools MCP server and host configuration\n  doctor                  Validate local runtime, credentials, and optional agent setup\n  dev smoke|trace|loop|up\n                          Local sandbox developer loop: travel smoke, trace dashboard, WireMock up, and guided setup\n  version                 Print package version (use --verbose for runtime details)\n  diagnose                Emit a redacted support bundle with --redacted\n  config get|set|unset|list\n                          Manage CLI configuration values\n  whoami                  Resolve the authenticated principal and tenant realm\n  keys list|create|rotate|revoke\n                          Manage tenant service-account API keys\n  intents list|get|create|fund|evidence|settlement-confirm\n                          Harbor intent workflows\n  guardrails bootstrap|evidence\n                          Sandbox guardrail helpers\n  spend authorize         Authorize delegated spend for a tool call\n  signal reputation|portfolio|fraud\n                          Signal summaries and fraud reads\n  receipts get|verify\n                          Protocol settlement receipts\n  mandates verify|import\n                          Agent mandate verification and import\n  a2a card|contracts\n                          Agent card discovery and task contracts\n  policy init|init-org|extend|presets list|presets show|validate-tools|templates|preview|import-mcp-receipt|import-x402-receipt|validate-evidence\n                          Scaffold and validate paybond.policy.yaml (including enterprise org inheritance), browse policy presets and solutions, list completion presets, preview Harbor templates, and import receipts\n  agent run bind|status|trace|reload-policy|tool execute|validate|registry validate|sandbox smoke\n                          Agent middleware: bind runs, reload policy, execute tools, validate registry, sandbox smoke\n  audit exports list|get|verify|delete\n                          Compliance audit export jobs and local bundle verification\n\nGetting started:\n  Sandbox setup\n    Authenticate, validate the runtime, and confirm tenant context.\n    $ paybond login\n    $ paybond doctor --format json\n    Next: paybond whoami\n  Agent + MCP host\n    Preview MCP host config and list tools exposed to agents.\n    $ paybond mcp install --host claude --scope local\n    $ paybond mcp verify-config --host claude\n    $ paybond mcp tools\n    Next: paybond doctor --agent\n  Paid-tool guardrail\n    Scaffold a sandbox guardrail integration file for your agent runtime.\n    $ paybond init guardrail\n    $ paybond guardrails bootstrap --operation paid-tool --requested-spend-cents 100\n    Next: paybond spend authorize --help\n  Policy-driven agent sandbox\n    Validate and smoke-test agent middleware from a versioned paybond.policy.yaml file.\n    $ paybond policy init --out paybond.policy.yaml\n    $ paybond policy validate-tools --file paybond.policy.yaml\n    $ paybond agent sandbox smoke --policy-file paybond.policy.yaml --result-body '{\"status\":\"completed\",\"cost_cents\":18700}' --format json\n    Next: paybond policy validate-tools --help\n  Agent middleware sandbox\n    Bind a sandbox run and execute a guarded tool with auto-evidence.\n    $ paybond agent sandbox smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --result-body '{\"status\":\"ok\",\"cost_cents\":100}' --format json\n    Next: paybond agent run bind --help\n  Completion preset\n    Scaffold catalog-aligned completion evidence for Harbor release predicates.\n    $ paybond init completion --preset api_response_ok\n    $ paybond policy templates\n    $ paybond policy preview --preset api_response_ok --evidence-file evidence.json\n    Next: paybond policy preview --help\n\nDocumentation: https://docs.paybond.ai/kit\n\nLearn more:\n  paybond help <command>     Detailed help for a command\n  paybond examples           Copy-paste command examples\n  paybond onboarding         Guided first-run checks\n  paybond completion <shell> Shell completions (bash|zsh|fish)\n\nLegacy aliases: paybond-kit-login, paybond-init, paybond-kit-init, paybond-mcp-server\n";
+export declare const ROOT_HELP = "Usage: paybond [--global-flags] <command> [<subcommand> ...] [args]\n\nGlobal flags:\n  --gateway <url>         Gateway base URL (default: https://api.paybond.ai)\n  --env-file <path>       Local secrets file (default: .env.local)\n  --format table|json     Human table or JSON envelope output (default: table)\n  --json <fields>         Field-selectable JSON for list/read commands (plain JSON; use --format json for envelope)\n  --jq <expr>             jq-style filter for list/read command output\n  --profile <name>        Named credential profile from the Paybond CLI config file\n  --request-id <id>       Correlation ID for Gateway calls and JSON output\n  --yes                   Skip confirmation for destructive operations\n  --no-open               Do not open a browser for device login\n  --color auto|always|never Colorize human table output and help text (default: auto)\n  --no-color              Disable color output (also honors NO_COLOR)\n\nCommands:\n  onboarding              Guided, non-destructive first-run checks\n  help                    Detailed help for a command\n  examples                Copy-paste examples from the command spec\n  completion bash|zsh|fish Shell completion scripts\n  login                   Sandbox device login\n  init                    Interactive first-run scaffold (solution, spend cap, framework, owned policy files)\n  init guardrail|completion|agent-middleware\n                          Scaffold sandbox guardrail, completion evidence, or agent middleware integration files\n  mcp serve|install|verify-config|tools MCP server and host configuration\n  doctor                  Validate local runtime, credentials, and optional agent setup\n  dev smoke|trace|loop|up\n                          Local sandbox developer loop: travel smoke, trace dashboard, WireMock up, and guided setup\n  version                 Print package version (use --verbose for runtime details)\n  diagnose                Emit a redacted support bundle with --redacted\n  config get|set|unset|list\n                          Manage CLI configuration values\n  whoami                  Resolve the authenticated principal and tenant realm\n  keys list|create|rotate|revoke\n                          Manage tenant service-account API keys\n  intents list|get|create|fund|evidence|settlement-confirm\n                          Harbor intent workflows\n  guardrails bootstrap|evidence\n                          Sandbox guardrail helpers\n  spend authorize         Authorize delegated spend for a tool call\n  signal reputation|portfolio|fraud\n                          Signal summaries and fraud reads\n  receipts get|verify\n                          Protocol settlement and agent action receipts (--kind agent)\n  mandates verify|import\n                          Agent mandate verification and import\n  a2a card|contracts\n                          Agent card discovery and task contracts\n  policy init|init-org|extend|presets list|presets show|validate-tools|templates|preview|import-mcp-receipt|import-x402-receipt|validate-evidence\n                          Scaffold and validate paybond.policy.yaml (including enterprise org inheritance), browse policy presets and solutions, list completion presets, preview Harbor templates, and import receipts\n  agent run bind|status|trace|reload-policy|tool execute|validate|registry validate|sandbox smoke\n                          Agent middleware: bind runs, reload policy, execute tools, validate registry, sandbox smoke\n  audit exports list|get|verify|delete\n                          Compliance audit export jobs and local bundle verification\n\nGetting started:\n  Sandbox setup\n    Authenticate, validate the runtime, and confirm tenant context.\n    $ paybond login\n    $ paybond doctor --format json\n    Next: paybond whoami\n  Agent + MCP host\n    Preview MCP host config and list tools exposed to agents.\n    $ paybond mcp install --host claude --scope local\n    $ paybond mcp verify-config --host claude\n    $ paybond mcp tools\n    Next: paybond doctor --agent\n  Paid-tool guardrail\n    Scaffold a sandbox guardrail integration file for your agent runtime.\n    $ paybond init guardrail\n    $ paybond guardrails bootstrap --operation paid-tool --requested-spend-cents 100\n    Next: paybond spend authorize --help\n  Policy-driven agent sandbox\n    Validate and smoke-test agent middleware from a versioned paybond.policy.yaml file.\n    $ paybond policy init --out paybond.policy.yaml\n    $ paybond policy validate-tools --file paybond.policy.yaml\n    $ paybond agent sandbox smoke --policy-file paybond.policy.yaml --result-body '{\"status\":\"completed\",\"cost_cents\":18700}' --format json\n    Next: paybond policy validate-tools --help\n  Agent middleware sandbox\n    Bind a sandbox run and execute a guarded tool with auto-evidence.\n    $ paybond agent sandbox smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --result-body '{\"status\":\"ok\",\"cost_cents\":100}' --format json\n    Next: paybond agent run bind --help\n  Completion preset\n    Scaffold catalog-aligned completion evidence for Harbor release predicates.\n    $ paybond init completion --preset api_response_ok\n    $ paybond policy templates\n    $ paybond policy preview --preset api_response_ok --evidence-file evidence.json\n    Next: paybond policy preview --help\n\nDocumentation: https://docs.paybond.ai/kit\n\nLearn more:\n  paybond help <command>     Detailed help for a command\n  paybond examples           Copy-paste command examples\n  paybond onboarding         Guided first-run checks\n  paybond completion <shell> Shell completions (bash|zsh|fish)\n\nLegacy aliases: paybond-kit-login, paybond-init, paybond-kit-init, paybond-mcp-server\n";
 export declare const COMMAND_HELP: Record<string, string>;
 export declare function helpForCommand(path: string): string;

package/dist/cli/help.js

@@ -1,5 +1,5 @@
 // Generated by kit/cli-parity/generate.mjs — do not edit by hand.
-export const ROOT_HELP = "Usage: paybond [--global-flags] <command> [<subcommand> ...] [args]\n\nGlobal flags:\n  --gateway <url>         Gateway base URL (default: https://api.paybond.ai)\n  --env-file <path>       Local secrets file (default: .env.local)\n  --format table|json     Human table or JSON envelope output (default: table)\n  --json <fields>         Field-selectable JSON for list/read commands (plain JSON; use --format json for envelope)\n  --jq <expr>             jq-style filter for list/read command output\n  --profile <name>        Named credential profile from the Paybond CLI config file\n  --request-id <id>       Correlation ID for Gateway calls and JSON output\n  --yes                   Skip confirmation for destructive operations\n  --no-open               Do not open a browser for device login\n  --color auto|always|never Colorize human table output and help text (default: auto)\n  --no-color              Disable color output (also honors NO_COLOR)\n\nCommands:\n  onboarding              Guided, non-destructive first-run checks\n  help                    Detailed help for a command\n  examples                Copy-paste examples from the command spec\n  completion bash|zsh|fish Shell completion scripts\n  login                   Sandbox device login\n  init                    Interactive first-run scaffold (solution, spend cap, framework, owned policy files)\n  init guardrail|completion|agent-middleware\n                          Scaffold sandbox guardrail, completion evidence, or agent middleware integration files\n  mcp serve|install|verify-config|tools MCP server and host configuration\n  doctor                  Validate local runtime, credentials, and optional agent setup\n  dev smoke|trace|loop|up\n                          Local sandbox developer loop: travel smoke, trace dashboard, WireMock up, and guided setup\n  version                 Print package version (use --verbose for runtime details)\n  diagnose                Emit a redacted support bundle with --redacted\n  config get|set|unset|list\n                          Manage CLI configuration values\n  whoami                  Resolve the authenticated principal and tenant realm\n  keys list|create|rotate|revoke\n                          Manage tenant service-account API keys\n  intents list|get|create|fund|evidence|settlement-confirm\n                          Harbor intent workflows\n  guardrails bootstrap|evidence\n                          Sandbox guardrail helpers\n  spend authorize         Authorize delegated spend for a tool call\n  signal reputation|portfolio|fraud\n                          Signal summaries and fraud reads\n  receipts get|verify\n                          Protocol settlement receipts\n  mandates verify|import\n                          Agent mandate verification and import\n  a2a card|contracts\n                          Agent card discovery and task contracts\n  policy init|init-org|extend|presets list|presets show|validate-tools|templates|preview|import-mcp-receipt|import-x402-receipt|validate-evidence\n                          Scaffold and validate paybond.policy.yaml (including enterprise org inheritance), browse policy presets and solutions, list completion presets, preview Harbor templates, and import receipts\n  agent run bind|status|trace|reload-policy|tool execute|validate|registry validate|sandbox smoke\n                          Agent middleware: bind runs, reload policy, execute tools, validate registry, sandbox smoke\n  audit exports list|get|verify|delete\n                          Compliance audit export jobs and local bundle verification\n\nGetting started:\n  Sandbox setup\n    Authenticate, validate the runtime, and confirm tenant context.\n    $ paybond login\n    $ paybond doctor --format json\n    Next: paybond whoami\n  Agent + MCP host\n    Preview MCP host config and list tools exposed to agents.\n    $ paybond mcp install --host claude --scope local\n    $ paybond mcp verify-config --host claude\n    $ paybond mcp tools\n    Next: paybond doctor --agent\n  Paid-tool guardrail\n    Scaffold a sandbox guardrail integration file for your agent runtime.\n    $ paybond init guardrail\n    $ paybond guardrails bootstrap --operation paid-tool --requested-spend-cents 100\n    Next: paybond spend authorize --help\n  Policy-driven agent sandbox\n    Validate and smoke-test agent middleware from a versioned paybond.policy.yaml file.\n    $ paybond policy init --out paybond.policy.yaml\n    $ paybond policy validate-tools --file paybond.policy.yaml\n    $ paybond agent sandbox smoke --policy-file paybond.policy.yaml --result-body '{\"status\":\"completed\",\"cost_cents\":18700}' --format json\n    Next: paybond policy validate-tools --help\n  Agent middleware sandbox\n    Bind a sandbox run and execute a guarded tool with auto-evidence.\n    $ paybond agent sandbox smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --result-body '{\"status\":\"ok\",\"cost_cents\":100}' --format json\n    Next: paybond agent run bind --help\n  Completion preset\n    Scaffold catalog-aligned completion evidence for Harbor release predicates.\n    $ paybond init completion --preset api_response_ok\n    $ paybond policy templates\n    $ paybond policy preview --preset api_response_ok --evidence-file evidence.json\n    Next: paybond policy preview --help\n\nDocumentation: https://docs.paybond.ai/kit\n\nLearn more:\n  paybond help <command>     Detailed help for a command\n  paybond examples           Copy-paste command examples\n  paybond onboarding         Guided first-run checks\n  paybond completion <shell> Shell completions (bash|zsh|fish)\n\nLegacy aliases: paybond-kit-login, paybond-init, paybond-kit-init, paybond-mcp-server\n";
+export const ROOT_HELP = "Usage: paybond [--global-flags] <command> [<subcommand> ...] [args]\n\nGlobal flags:\n  --gateway <url>         Gateway base URL (default: https://api.paybond.ai)\n  --env-file <path>       Local secrets file (default: .env.local)\n  --format table|json     Human table or JSON envelope output (default: table)\n  --json <fields>         Field-selectable JSON for list/read commands (plain JSON; use --format json for envelope)\n  --jq <expr>             jq-style filter for list/read command output\n  --profile <name>        Named credential profile from the Paybond CLI config file\n  --request-id <id>       Correlation ID for Gateway calls and JSON output\n  --yes                   Skip confirmation for destructive operations\n  --no-open               Do not open a browser for device login\n  --color auto|always|never Colorize human table output and help text (default: auto)\n  --no-color              Disable color output (also honors NO_COLOR)\n\nCommands:\n  onboarding              Guided, non-destructive first-run checks\n  help                    Detailed help for a command\n  examples                Copy-paste examples from the command spec\n  completion bash|zsh|fish Shell completion scripts\n  login                   Sandbox device login\n  init                    Interactive first-run scaffold (solution, spend cap, framework, owned policy files)\n  init guardrail|completion|agent-middleware\n                          Scaffold sandbox guardrail, completion evidence, or agent middleware integration files\n  mcp serve|install|verify-config|tools MCP server and host configuration\n  doctor                  Validate local runtime, credentials, and optional agent setup\n  dev smoke|trace|loop|up\n                          Local sandbox developer loop: travel smoke, trace dashboard, WireMock up, and guided setup\n  version                 Print package version (use --verbose for runtime details)\n  diagnose                Emit a redacted support bundle with --redacted\n  config get|set|unset|list\n                          Manage CLI configuration values\n  whoami                  Resolve the authenticated principal and tenant realm\n  keys list|create|rotate|revoke\n                          Manage tenant service-account API keys\n  intents list|get|create|fund|evidence|settlement-confirm\n                          Harbor intent workflows\n  guardrails bootstrap|evidence\n                          Sandbox guardrail helpers\n  spend authorize         Authorize delegated spend for a tool call\n  signal reputation|portfolio|fraud\n                          Signal summaries and fraud reads\n  receipts get|verify\n                          Protocol settlement and agent action receipts (--kind agent)\n  mandates verify|import\n                          Agent mandate verification and import\n  a2a card|contracts\n                          Agent card discovery and task contracts\n  policy init|init-org|extend|presets list|presets show|validate-tools|templates|preview|import-mcp-receipt|import-x402-receipt|validate-evidence\n                          Scaffold and validate paybond.policy.yaml (including enterprise org inheritance), browse policy presets and solutions, list completion presets, preview Harbor templates, and import receipts\n  agent run bind|status|trace|reload-policy|tool execute|validate|registry validate|sandbox smoke\n                          Agent middleware: bind runs, reload policy, execute tools, validate registry, sandbox smoke\n  audit exports list|get|verify|delete\n                          Compliance audit export jobs and local bundle verification\n\nGetting started:\n  Sandbox setup\n    Authenticate, validate the runtime, and confirm tenant context.\n    $ paybond login\n    $ paybond doctor --format json\n    Next: paybond whoami\n  Agent + MCP host\n    Preview MCP host config and list tools exposed to agents.\n    $ paybond mcp install --host claude --scope local\n    $ paybond mcp verify-config --host claude\n    $ paybond mcp tools\n    Next: paybond doctor --agent\n  Paid-tool guardrail\n    Scaffold a sandbox guardrail integration file for your agent runtime.\n    $ paybond init guardrail\n    $ paybond guardrails bootstrap --operation paid-tool --requested-spend-cents 100\n    Next: paybond spend authorize --help\n  Policy-driven agent sandbox\n    Validate and smoke-test agent middleware from a versioned paybond.policy.yaml file.\n    $ paybond policy init --out paybond.policy.yaml\n    $ paybond policy validate-tools --file paybond.policy.yaml\n    $ paybond agent sandbox smoke --policy-file paybond.policy.yaml --result-body '{\"status\":\"completed\",\"cost_cents\":18700}' --format json\n    Next: paybond policy validate-tools --help\n  Agent middleware sandbox\n    Bind a sandbox run and execute a guarded tool with auto-evidence.\n    $ paybond agent sandbox smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --result-body '{\"status\":\"ok\",\"cost_cents\":100}' --format json\n    Next: paybond agent run bind --help\n  Completion preset\n    Scaffold catalog-aligned completion evidence for Harbor release predicates.\n    $ paybond init completion --preset api_response_ok\n    $ paybond policy templates\n    $ paybond policy preview --preset api_response_ok --evidence-file evidence.json\n    Next: paybond policy preview --help\n\nDocumentation: https://docs.paybond.ai/kit\n\nLearn more:\n  paybond help <command>     Detailed help for a command\n  paybond examples           Copy-paste command examples\n  paybond onboarding         Guided first-run checks\n  paybond completion <shell> Shell completions (bash|zsh|fish)\n\nLegacy aliases: paybond-kit-login, paybond-init, paybond-kit-init, paybond-mcp-server\n";
 export const COMMAND_HELP = {
     "onboarding": "Usage: paybond onboarding [--host claude|codex|openai|generic]\n\nRuns a guided, non-destructive first-run workflow: runtime check, login status, guardrail file status, MCP config preview, and doctor.\n\nExamples:\n  $ paybond onboarding\n  $ paybond onboarding --host claude --format json\n\nDocs: https://docs.paybond.ai/kit/coding-agent-setup\n\nNext: paybond login",
     "help": "Usage: paybond help [<command> [<subcommand> ...]]\n\nShows detailed help for a command path. Without arguments, prints root help.\n\nExamples:\n  $ paybond help\n  $ paybond help login\n  $ paybond help mcp install",
@@ -43,23 +43,23 @@ export const COMMAND_HELP = {
     "keys revoke": "Usage: paybond keys revoke <key_id> [--yes]\n\nExamples:\n  $ paybond keys revoke key-123 --yes",
     "intents list": "Usage: paybond intents list [--status <status>] [--limit <n>]\n\nExamples:\n  $ paybond intents list --limit 10",
     "intents get": "Usage: paybond intents get <intent_id>\n\nExamples:\n  $ paybond intents get intent-123",
-    "intents create": "Usage: paybond intents create --body <json-file>\n\nExamples:\n  $ paybond intents create --body intent.json",
-    "intents fund": "Usage: paybond intents fund <intent_id> [--body <json-file>]\n\nExamples:\n  $ paybond intents fund intent-123",
-    "intents evidence": "Usage: paybond intents evidence <intent_id> --body <json-file>\n\nExamples:\n  $ paybond intents evidence intent-123 --body evidence.json",
-    "intents settlement-confirm": "Usage: paybond intents settlement-confirm <intent_id> [--body <json-file>]\n\nExamples:\n  $ paybond intents settlement-confirm intent-123",
+    "intents create": "Usage: paybond intents create --body <json-file> [--agent-recognition-key-id <id> --agent-recognition-signing-seed-hex <hex>] [--idempotency-key <key>]\n\nCreate a Harbor intent through paybond.harbor.createIntent with a replay-safe recognition proof (flags or APP_AGENT_RECOGNITION_* env).\n\nExamples:\n  $ paybond intents create --body intent.json",
+    "intents fund": "Usage: paybond intents fund <intent_id> [--payment-signature <sig>] [--body <json-file>] [--agent-recognition-key-id <id> --agent-recognition-signing-seed-hex <hex>] [--idempotency-key <key>]\n\nFund a Harbor intent through paybond.harbor.fundIntent with a replay-safe recognition proof (flags or APP_AGENT_RECOGNITION_* env). Pass --payment-signature for x402 retries; --body is a deprecated shim that reads payment_signature from JSON.\n\nExamples:\n  $ paybond intents fund intent-123",
+    "intents evidence": "Usage: paybond intents evidence <intent_id> --body <json-file> [--agent-recognition-key-id <id> --agent-recognition-signing-seed-hex <hex>] [--idempotency-key <key>]\n\nSubmit pre-signed Harbor evidence through paybond.harbor.submitEvidence with a replay-safe recognition proof (flags or APP_AGENT_RECOGNITION_* env).\n\nExamples:\n  $ paybond intents evidence intent-123 --body evidence.json",
+    "intents settlement-confirm": "Usage: paybond intents settlement-confirm <intent_id> [--body <json-file>] [--agent-recognition-key-id <id> --agent-recognition-signing-seed-hex <hex>] [--idempotency-key <key>]\n\nConfirm Harbor settlement through paybond.intents.confirmSettlement with a replay-safe recognition proof (flags or APP_AGENT_RECOGNITION_* env).\n\nExamples:\n  $ paybond intents settlement-confirm intent-123",
     "guardrails bootstrap": "Usage: paybond guardrails bootstrap --operation <name> --requested-spend-cents <n>\n\nExamples:\n  $ paybond guardrails bootstrap --operation paid-tool --requested-spend-cents 100",
     "guardrails evidence": "Usage: paybond guardrails evidence --intent-id <id> --body <json-file>\n\nExamples:\n  $ paybond guardrails evidence --intent-id intent-123 --body evidence.json",
     "spend authorize": "Usage: paybond spend authorize --intent-id <id> --token <capability> --operation <name> [--requested-spend-cents <n>]\n\nExamples:\n  $ paybond spend authorize --intent-id intent-123 --token cap --operation paid-tool",
     "signal reputation": "Usage: paybond signal reputation --did <did>\n\nExamples:\n  $ paybond signal reputation --did did:example:alice",
     "signal portfolio": "Usage: paybond signal portfolio\n\nExamples:\n  $ paybond signal portfolio",
     "signal fraud": "Usage: paybond signal fraud --did <did>\n\nExamples:\n  $ paybond signal fraud --did did:example:alice",
-    "receipts get": "Usage: paybond receipts get <receipt_id>\n\nExamples:\n  $ paybond receipts get receipt-123",
-    "receipts verify": "Usage: paybond receipts verify <receipt_id>\n\nExamples:\n  $ paybond receipts verify receipt-123",
+    "receipts get": "Usage: paybond receipts get <receipt_id> [--kind protocol|agent]\n\nFetch a signed protocol settlement receipt (default) or agent action receipt (--kind agent).\n\nExamples:\n  $ paybond receipts get receipt-123\n  $ paybond receipts get sha256:abc... --kind agent --format json",
+    "receipts verify": "Usage: paybond receipts verify <receipt_id> [--kind protocol|agent]\n\nVerify a protocol settlement receipt (default) or agent action receipt (--kind agent) via Gateway offline verify.\n\nExamples:\n  $ paybond receipts verify receipt-123\n  $ paybond receipts verify sha256:abc... --kind agent --format json",
     "mandates verify": "Usage: paybond mandates verify --body <json-file>\n\nExamples:\n  $ paybond mandates verify --body mandate.json",
     "mandates import": "Usage: paybond mandates import --body <json-file>\n\nExamples:\n  $ paybond mandates import --body mandate.json",
     "a2a card": "Usage: paybond a2a card\n\nExamples:\n  $ paybond a2a card",
     "a2a contracts": "Usage: paybond a2a contracts [--contract-id <id>]\n\nExamples:\n  $ paybond a2a contracts",
-    "init agent-middleware": "Usage: paybond init agent-middleware [--framework <name>] [--out <path>] [--force]\n\nScaffolds an agent middleware integration file (PaybondAgentRun, tool registry, interceptor). Default framework is generic (agent-agnostic).\n\nExamples:\n  $ paybond init agent-middleware\n  $ paybond init agent-middleware --framework claude-agents --out paybond-claude-agents.ts\n  $ paybond init agent-middleware --framework openai --out paybond-agent-middleware.ts\n\nDocs: https://docs.paybond.ai/kit/agent-middleware\n\nNext: paybond agent sandbox smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --result-body '{\"status\":\"ok\",\"cost_cents\":100}'",
+    "init agent-middleware": "Usage: paybond init agent-middleware [--framework <name>] [--out <path>] [--force]\n\nScaffolds an agent middleware integration file (PaybondAgentRun, tool registry, interceptor). Default framework is generic (agent-agnostic).\n\nTypeScript frameworks: generic|claude-agents|openai|langgraph|vercel-ai|mastra|cloudflare-agents|mcp\nPython frameworks: generic|claude-agents|crewai|openai|langgraph|vercel-ai|mcp\n\nExamples:\n  $ paybond init agent-middleware\n  $ paybond init agent-middleware --framework claude-agents --out paybond-claude-agents.ts\n  $ paybond init agent-middleware --framework mastra --out paybond-mastra.ts\n  $ paybond init agent-middleware --framework cloudflare-agents --out paybond-cloudflare-agents.ts\n  $ paybond init agent-middleware --framework mcp --out paybond-mcp.ts\n  $ paybond init agent-middleware --framework crewai --out paybond_crewai.py\n\nDocs: https://docs.paybond.ai/kit/agent-middleware\n\nNext: paybond agent sandbox smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --result-body '{\"status\":\"ok\",\"cost_cents\":100}'",
     "agent run bind": "Usage: paybond agent run bind [--sandbox] [--production] [--policy-file <path>] [--watch] [--operation <name> --requested-spend-cents <n>] [--completion-preset <id>] [--registry-file <path>] [--run-id <id>] [--attach-intent-id <id> --capability-token <token> --payee-did <did> --payee-signing-seed-hex <hex> --agent-recognition-key-id <id> --agent-recognition-signing-seed-hex <hex>] [--write-env]\n\nBind a run-scoped middleware context via sandbox bootstrap or attach an existing funded intent. Production attach requires payee and agent-recognition signing credentials (flags or APP_PAYEE_DID, APP_PAYEE_SEED_HEX, APP_AGENT_RECOGNITION_KEY_ID, APP_AGENT_RECOGNITION_SEED_HEX). Persists context to .paybond/runs/<run_id>.json (mode 0600). Use --watch with --policy-file to record file-watcher reload config for long-lived processes.\n\nExamples:\n  $ paybond agent run bind --policy-file paybond.policy.yaml --format json\n  $ paybond agent run bind --sandbox --operation travel.book_hotel --requested-spend-cents 20000 --completion-preset cost_and_completion --registry-file ./paybond.agent.registry.yaml --format json\n\nDocs: https://docs.paybond.ai/kit/agent-policy\n\nNext: paybond agent tool execute --help",
     "agent run status": "Usage: paybond agent run status --run-id <id>\n\nInspect a bound run (tenant, intent, allowed tools, policy digest, reload metadata).\n\nExamples:\n  $ paybond agent run status --run-id run-123 --format json\n\nDocs: https://docs.paybond.ai/kit/agent-middleware",
     "agent run trace": "Usage: paybond agent run trace --run-id <id>\n\nShow middleware trace events for a bound run (tool selection, spend authorization, evidence, settlement). Reads .paybond/runs/<run_id>.trace.json written during tool execute.\n\nExamples:\n  $ paybond agent run trace --run-id run-123 --format json\n  $ paybond agent run trace --run-id run-123 --format table\n\nDocs: https://docs.paybond.ai/kit/agent-middleware#trace-events-and-observability",
@@ -74,7 +74,11 @@ export const COMMAND_HELP = {
     "agent demo langgraph smoke": "Usage: paybond agent demo langgraph smoke [--production] [--runtime typescript|python] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM LangGraph sandbox demo: ToolNode interceptor, authorize, execute, and auto-evidence.\n\nExamples:\n  $ paybond agent demo langgraph smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/langgraph",
     "agent demo generic smoke": "Usage: paybond agent demo generic smoke [--production] [--runtime typescript|python] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM agent-agnostic sandbox demo: createPaybondGenericAgentConfig, wrapped execute, and auto-evidence.\n\nExamples:\n  $ paybond agent demo generic smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/agent-agnostic",
     "agent demo claude-agents smoke": "Usage: paybond agent demo claude-agents smoke [--production] [--runtime typescript|python] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM Claude Agent SDK sandbox demo: in-process MCP tool handlers, authorize, execute, and auto-evidence.\n\nExamples:\n  $ paybond agent demo claude-agents smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/claude-agents",
+    "agent demo crewai smoke": "Usage: paybond agent demo crewai smoke [--production] [--runtime python] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM CrewAI sandbox demo: guarded @tool execution, authorize, and auto-evidence (Python-only).\n\nExamples:\n  $ paybond agent demo crewai smoke --operation procurement.submit_po --requested-spend-cents 12000 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/crewai",
     "agent demo openai-agents smoke": "Usage: paybond agent demo openai-agents smoke [--production] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM OpenAI Agents SDK sandbox demo: input guardrail pre-check, guarded invoke, and auto-evidence.\n\nExamples:\n  $ paybond agent demo openai-agents smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/openai-agents",
+    "agent demo mastra smoke": "Usage: paybond agent demo mastra smoke [--production] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM Mastra sandbox demo: guarded createTool execute, authorize, and auto-evidence (TypeScript-only).\n\nExamples:\n  $ paybond agent demo mastra smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/mastra",
+    "agent demo cloudflare-agents smoke": "Usage: paybond agent demo cloudflare-agents smoke [--production] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM Cloudflare Agents sandbox demo: guarded AI SDK tool execute, authorize, and auto-evidence (TypeScript-only).\n\nExamples:\n  $ paybond agent demo cloudflare-agents smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/cloudflare-agents",
+    "agent demo mcp smoke": "Usage: paybond agent demo mcp smoke [--production] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nNo-LLM MCP tool-surface sandbox demo: authorize + evidence via in-process MCP server (no stdio subprocess).\n\nExamples:\n  $ paybond agent demo mcp smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/mcp-server",
     "audit exports list": "Usage: paybond audit exports list\n\nExamples:\n  $ paybond audit exports list --format json",
     "audit exports get": "Usage: paybond audit exports get <job_id> [--issue-download]\n\nExamples:\n  $ paybond audit exports get job-123",
     "audit exports verify": "Usage: paybond audit exports verify <path>\n\nExamples:\n  $ paybond audit exports verify ./bundle",

package/dist/cli/intents-harbor-mutation.d.ts

@@ -0,0 +1,18 @@
+import { type AgentRecognitionCredentials } from "./agent/production-evidence.js";
+import type { CliContext } from "./context.js";
+/** Parsed recognition and idempotency flags for Harbor intent mutation CLI commands. */
+export type HarborMutationFlags = {
+    recognitionKeyId?: string;
+    recognitionSeedHex?: string;
+    idempotencyKey?: string;
+    restArgv: string[];
+};
+/** Extract shared Harbor mutation flags from argv, leaving body and positional args in restArgv. */
+export declare function parseHarborMutationFlags(argv: string[]): HarborMutationFlags;
+/** Resolve agent recognition credentials for Harbor intent mutations from flags and APP_* env fallbacks. */
+export declare function resolveHarborRecognition(ctx: CliContext, flags: Pick<HarborMutationFlags, "recognitionKeyId" | "recognitionSeedHex">): Promise<AgentRecognitionCredentials>;
+export declare const DEPRECATED_INTENTS_FUND_BODY_WARNING = "deprecated: intents fund --body; use --payment-signature";
+/** Whether deprecated ``--body`` / ``--stdin`` shims were passed to ``intents fund``. */
+export declare function fundBodyShimUsed(argv: string[]): boolean;
+/** Read ``payment_signature`` from deprecated ``intents fund --body`` JSON when present. */
+export declare function resolveFundPaymentSignatureFromBody(payload: Record<string, unknown>): string | undefined;

package/dist/cli/intents-harbor-mutation.js

@@ -0,0 +1,33 @@
+import { resolveAgentRecognitionFromCli } from "./agent/production-evidence.js";
+import { consumeFlag } from "./globals.js";
+/** Extract shared Harbor mutation flags from argv, leaving body and positional args in restArgv. */
+export function parseHarborMutationFlags(argv) {
+    const recognitionKeyFlag = consumeFlag(argv, "--agent-recognition-key-id");
+    const recognitionSeedFlag = consumeFlag(recognitionKeyFlag.rest, "--agent-recognition-signing-seed-hex");
+    const idempotencyFlag = consumeFlag(recognitionSeedFlag.rest, "--idempotency-key");
+    return {
+        recognitionKeyId: recognitionKeyFlag.value,
+        recognitionSeedHex: recognitionSeedFlag.value,
+        idempotencyKey: idempotencyFlag.value,
+        restArgv: idempotencyFlag.rest,
+    };
+}
+/** Resolve agent recognition credentials for Harbor intent mutations from flags and APP_* env fallbacks. */
+export async function resolveHarborRecognition(ctx, flags) {
+    return resolveAgentRecognitionFromCli({
+        cwd: ctx.cwd,
+        envFile: ctx.globals.envFile,
+        agentRecognitionKeyId: flags.recognitionKeyId,
+        agentRecognitionSigningSeedHex: flags.recognitionSeedHex,
+    });
+}
+export const DEPRECATED_INTENTS_FUND_BODY_WARNING = "deprecated: intents fund --body; use --payment-signature";
+/** Whether deprecated ``--body`` / ``--stdin`` shims were passed to ``intents fund``. */
+export function fundBodyShimUsed(argv) {
+    return argv.includes("--body") || argv.includes("--stdin");
+}
+/** Read ``payment_signature`` from deprecated ``intents fund --body`` JSON when present. */
+export function resolveFundPaymentSignatureFromBody(payload) {
+    const value = payload.payment_signature;
+    return typeof value === "string" && value.trim() ? value.trim() : undefined;
+}

package/dist/cli/paybond.d.ts

@@ -0,0 +1,9 @@
+import { Paybond } from "../index.js";
+import type { CliContext } from "./context.js";
+export type PaybondCliSession = {
+    paybond: Paybond;
+    apiKey: string;
+    warnings: string[];
+};
+/** Open a Paybond SDK session for general CLI commands (uses ctx.fetch for gateway I/O). */
+export declare function withPaybondCli<T>(ctx: CliContext, handler: (session: PaybondCliSession) => Promise<T>): Promise<T>;

package/dist/cli/paybond.js

@@ -0,0 +1,23 @@
+import { Paybond } from "../index.js";
+import { resolveApiKeyWithMeta } from "./credentials.js";
+/** Open a Paybond SDK session for general CLI commands (uses ctx.fetch for gateway I/O). */
+export async function withPaybondCli(ctx, handler) {
+    const resolved = await resolveApiKeyWithMeta(ctx.globals, ctx.cwd);
+    const originalFetch = globalThis.fetch;
+    globalThis.fetch = ctx.fetch;
+    const paybond = await Paybond.open({
+        apiKey: resolved.apiKey,
+        gatewayBaseUrl: ctx.globals.gateway,
+    });
+    try {
+        return await handler({
+            paybond,
+            apiKey: resolved.apiKey,
+            warnings: resolved.warnings,
+        });
+    }
+    finally {
+        await paybond.aclose();
+        globalThis.fetch = originalFetch;
+    }
+}

package/dist/cli/redact.js

@@ -35,8 +35,11 @@ export function redactSensitiveFields(value) {
         for (const [key, child] of Object.entries(value)) {
             const lowered = key.toLowerCase();
             if (lowered === "capability_token" ||
+                lowered === "capabilitytoken" ||
                 lowered === "access_token" ||
+                lowered === "accesstoken" ||
                 lowered === "refresh_token" ||
+                lowered === "refreshtoken" ||
                 (lowered.endsWith("_token") && lowered !== "token_type")) {
                 out[key] = hasRedactableScalarContent(child) ? "[redacted]" : child;
                 continue;

package/dist/cloudflare-agents/config.d.ts

@@ -0,0 +1,24 @@
+import type { ToolSet } from "ai";
+import type { PaybondAgentRun } from "../agent/run.js";
+import { type PaybondVercelAgentConfigOptions } from "../vercel-ai/config.js";
+import { paybondVercelToolApproval } from "../vercel-ai/tool-approval.js";
+/** Cloudflare Agents `getTools()` return shape — AI SDK `ToolSet`. */
+export type CloudflareAgentsToolSet = ToolSet;
+/** Cloudflare Agents runner config: guarded tools plus `toolApproval` for AI SDK turns. */
+export type PaybondCloudflareAgentsConfig<TOOLS extends ToolSet = ToolSet> = {
+    tools: TOOLS;
+    toolApproval: ReturnType<typeof paybondVercelToolApproval<TOOLS>>;
+};
+/**
+ * Wrap side-effecting Cloudflare Agent tools with Paybond `wrapExecute`.
+ *
+ * Cloudflare Agents register tools via `getTools()` using the AI SDK `tool()`
+ * helper — the same execute boundary as the Vercel AI adapter.
+ */
+export declare function paybondCloudflareAgentsWrapTools<TOOLS extends ToolSet>(run: PaybondAgentRun, tools: TOOLS): TOOLS;
+/**
+ * Framework runner helper for Cloudflare Agents `getTools()` / `streamText` wiring.
+ *
+ * Returns guarded `tools` and a `toolApproval` bridge for Harbor pre-checks.
+ */
+export declare function createPaybondCloudflareAgentsConfig<TOOLS extends ToolSet>(run: PaybondAgentRun, tools: TOOLS, options?: PaybondVercelAgentConfigOptions): PaybondCloudflareAgentsConfig<TOOLS>;

package/dist/cloudflare-agents/config.js

@@ -0,0 +1,23 @@
+import { createPaybondVercelAgentConfig, } from "../vercel-ai/config.js";
+import { paybondVercelWrapTools } from "../vercel-ai/wrap-tools.js";
+/**
+ * Wrap side-effecting Cloudflare Agent tools with Paybond `wrapExecute`.
+ *
+ * Cloudflare Agents register tools via `getTools()` using the AI SDK `tool()`
+ * helper — the same execute boundary as the Vercel AI adapter.
+ */
+export function paybondCloudflareAgentsWrapTools(run, tools) {
+    return paybondVercelWrapTools(run, tools);
+}
+/**
+ * Framework runner helper for Cloudflare Agents `getTools()` / `streamText` wiring.
+ *
+ * Returns guarded `tools` and a `toolApproval` bridge for Harbor pre-checks.
+ */
+export function createPaybondCloudflareAgentsConfig(run, tools, options) {
+    const config = createPaybondVercelAgentConfig(run, tools, options);
+    return {
+        tools: config.tools,
+        toolApproval: config.toolApproval,
+    };
+}

package/dist/cloudflare-agents/index.d.ts

@@ -0,0 +1,3 @@
+export { createPaybondCloudflareAgentsConfig, paybondCloudflareAgentsWrapTools, type CloudflareAgentsToolSet, type PaybondCloudflareAgentsConfig, } from "./config.js";
+export { loadCloudflareAgentsSdk } from "./peer.js";
+export { runCloudflareAgentsSandboxDemo, type RunCloudflareAgentsSandboxDemoInput, type RunCloudflareAgentsSandboxDemoResult, } from "./sandbox-demo.js";

package/dist/cloudflare-agents/index.js

@@ -0,0 +1,3 @@
+export { createPaybondCloudflareAgentsConfig, paybondCloudflareAgentsWrapTools, } from "./config.js";
+export { loadCloudflareAgentsSdk } from "./peer.js";
+export { runCloudflareAgentsSandboxDemo, } from "./sandbox-demo.js";

package/dist/cloudflare-agents/peer.d.ts

@@ -0,0 +1,9 @@
+type CloudflareAgentsModule = typeof import("agents");
+/**
+ * Lazily resolve the optional `agents` peer dependency (Cloudflare Agents SDK).
+ *
+ * Importing `@paybond/kit/cloudflare-agents` must not require the SDK installed —
+ * the peer is only needed when adapter functions or the sandbox demo actually run.
+ */
+export declare function loadCloudflareAgentsSdk(): CloudflareAgentsModule;
+export {};