@sift-wiki/cli 0.1.1 → 0.1.3

package/README.md

@@ -1,30 +1,42 @@
 # Sift CLI
 
-The intended public install path is npm:
+This repository is the public release mirror for `@sift-wiki/cli`.
+
+The package installs the `sift` command:
 
 ```bash
 npm install -g @sift-wiki/cli
+sift login
+sift doctor
 ```
 
-Current release caveat: do not claim live `npm install -g @sift-wiki/cli` proof until
-npm trusted publishing is configured, a matching `cli-v<version>` tag has
-published the package, and a post-publish global install smoke has passed. Repo
-verification before that is:
+For one-off use without a global install:
 
 ```bash
-pnpm --filter @sift-wiki/cli pack:verify
+npx -y @sift-wiki/cli@latest auth status --json
+npm exec --yes --package @sift-wiki/cli@latest -- sift auth status --json
 ```
 
-Then authenticate and check the installed command:
+## Release Shape
 
-```bash
-sift login
-sift doctor
-sift ask "what changed this week?"
-```
+The private Sift monorepo builds the bundled CLI artifact. This public repo
+contains only the files needed to publish the public npm package:
+
+- `package.json`
+- `README.md`
+- `dist/bin/sift.js`
+- `scripts/verify-release.mjs`
+- `.github/workflows/publish-cli.yml`
+
+The bundled `dist/bin/sift.js` is the same artifact npm users receive.
+
+## Maintainer Release
 
-The CLI is a hosted thin client. `sift login` is the normal setup path and opens
-the existing browser login flow.
+1. Update `package.json` and `dist/bin/sift.js`.
+2. Run `npm run verify`.
+3. Commit and push to `main`.
+4. Tag `cli-v<package-version>`.
+5. Push the tag.
 
-For repo-local install details, troubleshooting, and advanced CI/headless
-env-token auth, see `docs/cli/install.md`.
+The tag workflow publishes through npm trusted publishing. It uses GitHub OIDC
+and does not require an npm token secret.

package/dist/bin/sift.js

@@ -9,6 +9,75 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// ../tools/dist/gating.js
+function isGatedTool(name) {
+  return !ungatedToolNames.has(name);
+}
+var UNGATED_TOOL_NAMES, ungatedToolNames;
+var init_gating = __esm({
+  "../tools/dist/gating.js"() {
+    "use strict";
+    UNGATED_TOOL_NAMES = [
+      "contract.get",
+      "whoami",
+      "tools.list",
+      "tools.schema",
+      "tools.help",
+      "tools.search",
+      "brain.list",
+      "brain.use",
+      "scope.current"
+    ];
+    ungatedToolNames = new Set(UNGATED_TOOL_NAMES);
+  }
+});
+
+// ../tools/dist/canvasTools.js
+function canvasToolDefinitions(writeTool2) {
+  return [
+    writeTool2("canvas.create", "Create a canvas (a spatial board of live views and notes). Returns the canvas id; compose it with canvas.add_node.", {
+      title: { type: "string" },
+      intent: { type: "string" }
+    }, "sift canvas create --title 'This week'", { required: ["title"] }),
+    writeTool2("canvas.add_node", [
+      "Add one node to a canvas. Pick the most structured nodeType that fits; prose is the",
+      "last resort. nodeType: plan (title + tracks of {name, owners?, goal?, items:[{text,",
+      "who?, when?, done?}]} \u2014 roadmaps, weekly plans, agendas), metric (label + value,",
+      "optional delta {direction,magnitude,sentiment} \u2014 one number), chart (rows of",
+      "{label, value:number}, optional title \u2014 comparing numbers), kanban or checklist",
+      "(queryRef binding to a live workspace query), prose (markdown, optional title),",
+      "note (text \u2014 a short plain annotation, never primary content).",
+      "Content must come from brain data you actually read, never invented."
+    ].join(" "), {
+      canvasId: { type: "string" },
+      nodeType: {
+        type: "string",
+        enum: ["plan", "metric", "chart", "kanban", "checklist", "prose", "note"]
+      },
+      text: { type: "string" },
+      markdown: { type: "string" },
+      title: { type: "string" },
+      timeframe: { type: "string" },
+      tracks: { type: "array", items: { type: "object" } },
+      label: { type: "string" },
+      value: { type: "string" },
+      delta: { type: "object" },
+      rows: { type: "array", items: { type: "object" } },
+      queryRef: { type: "string" },
+      position: { type: "object" }
+    }, "sift canvas add-node <canvas-id> --type metric", { required: ["canvasId", "nodeType"] }),
+    writeTool2("canvas.remove_node", "Remove a node or note from a canvas by id.", {
+      canvasId: { type: "string" },
+      nodeId: { type: "string" }
+    }, "sift canvas remove-node <canvas-id> <node-id>", { required: ["canvasId", "nodeId"] })
+  ];
+}
+var init_canvasTools = __esm({
+  "../tools/dist/canvasTools.js"() {
+    "use strict";
+  }
+});
+
 // ../tools/dist/inputParsers.js
 function parseCaptureFile(input) {
   return {
@@ -247,7 +316,38 @@ var init_inputParsers = __esm({
 
 // ../tools/dist/registry.js
 function listToolDefinitions() {
-  return [...toolDefinitions];
+  return [...toolDefinitions, ...canvasToolDefinitions(writeTool)].map((tool) => isGatedTool(tool.name) ? withContractVersionProperty(tool) : tool);
+}
+function withContractVersionProperty(tool) {
+  return {
+    ...tool,
+    inputSchema: {
+      ...tool.inputSchema,
+      properties: {
+        ...tool.inputSchema.properties,
+        contractVersion: {
+          type: "string",
+          description: "Echo the current Sift contract version from contract.get."
+        }
+      }
+    }
+  };
+}
+function isToolAuthorized(capabilities, tool) {
+  return tool.capability === NO_CAPABILITY || capabilities.includes(tool.capability);
+}
+function identityTool(name, summary, properties, cliExample, options) {
+  return defineTool({
+    name,
+    summary,
+    properties,
+    required: options.required ?? [],
+    capability: NO_CAPABILITY,
+    mutability: options.mutability,
+    transports: writeTransports,
+    cliExample,
+    hostedAgent: { available: false, ...options.hostedAgent }
+  });
 }
 function readTool(name, summary, properties, cliExample, options) {
   return defineTool({
@@ -373,14 +473,18 @@ function tokenize(text) {
 function stringProps(names) {
   return Object.fromEntries(names.map((name) => [name, { type: "string" }]));
 }
-var readTransports, writeTransports, toolDefinitions;
+var readTransports, writeTransports, NO_CAPABILITY, toolDefinitions;
 var init_registry = __esm({
   "../tools/dist/registry.js"() {
     "use strict";
+    init_gating();
+    init_canvasTools();
     init_inputParsers();
     readTransports = ["cli", "hosted_mcp", "local_mcp"];
     writeTransports = ["cli", "hosted_mcp", "local_mcp"];
+    NO_CAPABILITY = "none";
     toolDefinitions = [
+      readTool("contract.get", "Fetch the Sift agent contract (kernel + workspace overlay) and the contractVersion to echo on every gated tool call. Call this before any other Sift work.", {}, "sift contract get"),
       readTool("whoami", "Return principal, actor, scope, and capabilities.", {}, "sift whoami"),
       readTool("brain.list", "List brains available to the current scope.", {}, "sift brain list"),
       readTool("brain.use", "Select the current brain scope for subsequent operations.", stringProps(["brainId"]), "sift brain use <brain-id>"),
@@ -465,8 +569,15 @@ var init_registry = __esm({
         evidenceIds: { type: "array", items: { type: "string" } },
         visibility: { type: "array", items: { type: "string" } }
       }, "sift task create", { required: ["title", "visibility"] }),
+      identityTool("agent.register", "Register the calling agent as a workspace agent worker acting for the token's owner; idempotent on (workspace, owner, normalized name) and never mutates token state.", {
+        name: { type: "string", maxLength: 80 },
+        description: { type: "string", maxLength: 280 },
+        kind: { type: "string" }
+      }, 'sift agent register --name "Claude Code" --description "Coding agent"', { required: ["name"], mutability: "write" }),
+      identityTool("agent.status", "Report the request's resolved agent identity (from the asserted agent name) or none.", {}, "sift agent status --json", { mutability: "read" }),
       readTool("skill.resolve", "Resolve at most three advisory skill candidates for a task description, each with the skill record id, pinned active version id, title, and applicability summary, or an empty list.", { query: { type: "string" } }, "sift skill resolve 'draft the monthly investor update'", { required: ["query"] }),
-      readTool("skill.get", "Read a skill's pinned active version markdown body and version id by skill record id.", { skillId: { type: "string" } }, "sift skill get <skill-id>", { required: ["skillId"] }),
+      readTool("skill.get", "Read a skill's pinned active version markdown body, version id, and bundle file paths by skill record id.", { skillId: { type: "string" } }, "sift skill get <skill-id>", { required: ["skillId"] }),
+      readTool("skill.file", "Read one of a skill's bundle files by path; fetch a file only when the skill body references it and the task needs that detail, using a path listed by skill.get.", { skillId: { type: "string" }, path: { type: "string" } }, "sift skill file <skill-id> examples/2026-05-29-good.md", { required: ["skillId", "path"] }),
       writeTool("skill.exercise", "Report that a skill version informed an output on a surface; the report is an attribution claim only.", {
         skillId: { type: "string" },
         versionId: { type: "string" },
@@ -515,6 +626,7 @@ function executeWhoami(auth) {
   return {
     principal: { id: auth.principalId, type: auth.principalType },
     actor: { id: auth.actorId, type: auth.actorType },
+    ...auth.agent === void 0 ? {} : { agent: auth.agent },
     scope: { workspaceId: auth.workspaceId, brainId: auth.brainId },
     requestId: auth.requestId,
     authPath: auth.authPath,
@@ -581,7 +693,7 @@ function executeToolsSearch(input, searchInput) {
 function availableTools(input) {
   const transport = input.transport ?? "local_mcp";
   const availableNames = new Set(input.availableToolNames ?? IMPLEMENTED_TOOL_NAMES);
-  return listToolDefinitions().filter((tool) => availableNames.has(tool.name) && tool.transports.includes(transport) && input.auth.capabilities.includes(tool.capability));
+  return listToolDefinitions().filter((tool) => availableNames.has(tool.name) && tool.transports.includes(transport) && isToolAuthorized(input.auth.capabilities, tool));
 }
 function scoreTool(tool, intentTokens) {
   const haystack = /* @__PURE__ */ new Set([
@@ -631,7 +743,9 @@ var init_discovery = __esm({
       "evidence.get",
       "graph.neighbors",
       "event.list",
-      "audit.events"
+      "audit.events",
+      "agent.register",
+      "agent.status"
     ];
   }
 });
@@ -704,6 +818,26 @@ var init_captureTools = __esm({
   }
 });
 
+// ../tools/dist/contractTools.js
+function contractToolHandlers(input) {
+  return {
+    "contract.get": () => {
+      if (input.service.getContract === void 0) {
+        throw new Error("Tool 'contract.get' requires a runtime service contract.");
+      }
+      return input.service.getContract({ auth: input.auth });
+    }
+  };
+}
+function contractToolAvailability(service) {
+  return [[service.getContract !== void 0, ["contract.get"]]];
+}
+var init_contractTools = __esm({
+  "../tools/dist/contractTools.js"() {
+    "use strict";
+  }
+});
+
 // ../tools/dist/skillTools.js
 function skillToolHandlers(input, toolInput) {
   return {
@@ -723,6 +857,15 @@ function skillToolHandlers(input, toolInput) {
         skillId: requireString(toolInput, "skillId")
       });
     },
+    "skill.file": () => {
+      if (input.service.getSkillFile === void 0)
+        throw missingSkillService("skill.file");
+      return input.service.getSkillFile({
+        auth: input.auth,
+        skillId: requireString(toolInput, "skillId"),
+        path: requireString(toolInput, "path")
+      });
+    },
     "skill.exercise": () => {
       if (input.service.recordSkillExercise === void 0) {
         throw missingSkillService("skill.exercise");
@@ -743,6 +886,7 @@ function skillToolAvailability(service) {
   return [
     [service.resolveSkills !== void 0, ["skill.resolve"]],
     [service.getSkill !== void 0, ["skill.get"]],
+    [service.getSkillFile !== void 0, ["skill.file"]],
     [service.recordSkillExercise !== void 0, ["skill.exercise"]],
     [service.teachSkill !== void 0, ["skill.teach"]]
   ];
@@ -805,6 +949,104 @@ var init_skillTools = __esm({
   }
 });
 
+// ../tools/dist/agentIdentityTools.js
+function agentIdentityToolHandlers(input, toolInput) {
+  return {
+    "agent.register": () => {
+      if (input.service.registerAgent === void 0) {
+        throw missingAgentIdentityService("agent.register");
+      }
+      return input.service.registerAgent({
+        auth: input.auth,
+        name: requireString(toolInput, "name"),
+        description: optionalString(toolInput, "description"),
+        kind: parseAgentKind(toolInput)
+      });
+    },
+    "agent.status": () => {
+      if (input.service.getAgentStatus === void 0) {
+        throw missingAgentIdentityService("agent.status");
+      }
+      return input.service.getAgentStatus({ auth: input.auth });
+    }
+  };
+}
+function agentIdentityToolAvailability(service) {
+  return [
+    [service.registerAgent !== void 0, ["agent.register"]],
+    [service.getAgentStatus !== void 0, ["agent.status"]]
+  ];
+}
+function parseAgentKind(toolInput) {
+  const kind = optionalString(toolInput, "kind");
+  if (kind === void 0) {
+    return void 0;
+  }
+  if (kind !== "agent" && kind !== "service") {
+    throw new Error("kind must be 'agent' or 'service'.");
+  }
+  return kind;
+}
+function missingAgentIdentityService(toolName) {
+  return new Error(`Tool '${toolName}' requires a runtime service contract.`);
+}
+var init_agentIdentityTools = __esm({
+  "../tools/dist/agentIdentityTools.js"() {
+    "use strict";
+    init_inputParsers();
+  }
+});
+
+// ../tools/dist/toolAvailability.js
+function runtimeAvailableToolNames(service) {
+  const baseNames = [
+    "whoami",
+    "tools.list",
+    "tools.schema",
+    "tools.help",
+    "tools.search",
+    "brain.list",
+    "brain.use",
+    "scope.current",
+    "capture.text",
+    "capture.batch",
+    "search.query",
+    "context.assemble"
+  ];
+  const optionalNames = [
+    [service.ingestFile !== void 0, ["capture.file"]],
+    [service.createDecision !== void 0, ["decision.create"]],
+    [service.createTask !== void 0, ["task.create"]],
+    ...skillToolAvailability(service),
+    ...agentIdentityToolAvailability(service),
+    ...contractToolAvailability(service),
+    [service.listSources !== void 0, ["source.list"]],
+    [service.createSource !== void 0, ["source.create"]],
+    [service.getSource !== void 0, ["source.get", "source.status"]],
+    [service.getIngestionStatus !== void 0, ["ingestion.status"]],
+    [service.listRecords !== void 0, ["record.list"]],
+    [service.getRecord !== void 0, ["record.get"]],
+    [service.createMarkdownRecord !== void 0, ["record.create_markdown"]],
+    [service.patchRecordSection !== void 0, ["record.patch_section"]],
+    [service.listRecordVersions !== void 0, ["record.versions"]],
+    [service.listEvidence !== void 0, ["evidence.list"]],
+    [service.getEvidence !== void 0, ["evidence.get"]],
+    [service.listGraphNeighbors !== void 0, ["graph.neighbors"]],
+    [service.listEvents !== void 0, ["event.list"]],
+    [service.getContextProfile !== void 0, ["context.profile"]],
+    [service.listAuditEvents !== void 0, ["audit.events"]]
+  ];
+  return [...baseNames, ...optionalNames.flatMap(([enabled, names]) => enabled ? names : [])];
+}
+var init_toolAvailability = __esm({
+  "../tools/dist/toolAvailability.js"() {
+    "use strict";
+    init_agentIdentityTools();
+    init_contractTools();
+    init_skillTools();
+  }
+});
+
 // ../tools/dist/toolLog.js
 function logToolCall(input) {
   input.onToolLog?.({
@@ -938,6 +1180,8 @@ function createToolHandlers(input, toolInput) {
     "decision.create": () => executeDecisionCreate(input, toolInput),
     "task.create": () => executeTaskCreate(input, toolInput),
     ...skillToolHandlers(input, toolInput),
+    ...agentIdentityToolHandlers(input, toolInput),
+    ...contractToolHandlers(input),
     "source.list": () => executeSourceList(input),
     "source.create": () => executeSourceCreate(input, toolInput),
     "source.get": () => executeSourceRead(input, toolInput, "source.get"),
@@ -980,44 +1224,6 @@ function createToolHandlers(input, toolInput) {
     "audit.events": () => executeAuditEvents(input, toolInput)
   };
 }
-function runtimeAvailableToolNames(service) {
-  const baseNames = [
-    "whoami",
-    "tools.list",
-    "tools.schema",
-    "tools.help",
-    "tools.search",
-    "brain.list",
-    "brain.use",
-    "scope.current",
-    "capture.text",
-    "capture.batch",
-    "search.query",
-    "context.assemble"
-  ];
-  const optionalNames = [
-    [service.ingestFile !== void 0, ["capture.file"]],
-    [service.createDecision !== void 0, ["decision.create"]],
-    [service.createTask !== void 0, ["task.create"]],
-    ...skillToolAvailability(service),
-    [service.listSources !== void 0, ["source.list"]],
-    [service.createSource !== void 0, ["source.create"]],
-    [service.getSource !== void 0, ["source.get", "source.status"]],
-    [service.getIngestionStatus !== void 0, ["ingestion.status"]],
-    [service.listRecords !== void 0, ["record.list"]],
-    [service.getRecord !== void 0, ["record.get"]],
-    [service.createMarkdownRecord !== void 0, ["record.create_markdown"]],
-    [service.patchRecordSection !== void 0, ["record.patch_section"]],
-    [service.listRecordVersions !== void 0, ["record.versions"]],
-    [service.listEvidence !== void 0, ["evidence.list"]],
-    [service.getEvidence !== void 0, ["evidence.get"]],
-    [service.listGraphNeighbors !== void 0, ["graph.neighbors"]],
-    [service.listEvents !== void 0, ["event.list"]],
-    [service.getContextProfile !== void 0, ["context.profile"]],
-    [service.listAuditEvents !== void 0, ["audit.events"]]
-  ];
-  return [...baseNames, ...optionalNames.flatMap(([enabled, names]) => enabled ? names : [])];
-}
 function missingService(toolName) {
   return new Error(`Tool '${toolName}' requires a runtime service contract.`);
 }
@@ -1144,7 +1350,10 @@ var init_executor = __esm({
     init_discovery();
     init_captureTools();
     init_inputParsers();
+    init_contractTools();
     init_skillTools();
+    init_agentIdentityTools();
+    init_toolAvailability();
     init_results();
     init_toolLog();
   }
@@ -1169,7 +1378,7 @@ function createCliCommandMetadata(filter) {
 }
 function availableTools2(filter) {
   const availableNames = new Set(filter.toolNames ?? IMPLEMENTED_TOOL_NAMES);
-  return listToolDefinitions().filter((tool) => availableNames.has(tool.name) && tool.transports.includes(filter.transport) && filter.capabilities.includes(tool.capability));
+  return listToolDefinitions().filter((tool) => availableNames.has(tool.name) && tool.transports.includes(filter.transport) && isToolAuthorized(filter.capabilities, tool));
 }
 var init_generated = __esm({
   "../tools/dist/generated.js"() {
@@ -1222,6 +1431,9 @@ function renderToolResult(result2) {
 }
 function classifyToolError(error) {
   if (error instanceof Error) {
+    if (error.message.startsWith("Sift contract required.")) {
+      return "contract_required";
+    }
     if (isPermissionError2(error)) {
       return "permission_denied";
     }
@@ -1416,7 +1628,7 @@ async function dispatchRequest(method, params, adapter) {
       protocolVersion: requested ?? MCP_PROTOCOL_VERSION,
       capabilities: { tools: { listChanged: false } },
       serverInfo: { name: "sift-local-mcp", version: "0.1.0" },
-      instructions: "Use Sift tools to read and write the hosted canonical brain."
+      instructions: "Call contract.get first and echo its contractVersion on every other Sift tool call. Use Sift tools to read and write the hosted canonical brain."
     };
   }
   if (method === "ping")
@@ -1468,12 +1680,16 @@ var init_localMcpStdioServer = __esm({
 var dist_exports = {};
 __export(dist_exports, {
   MCP_PROTOCOL_VERSION: () => MCP_PROTOCOL_VERSION,
+  NO_CAPABILITY: () => NO_CAPABILITY,
+  UNGATED_TOOL_NAMES: () => UNGATED_TOOL_NAMES,
   createCliCommandMetadata: () => createCliCommandMetadata,
   createHostedMcpEntrypoint: () => createHostedMcpEntrypoint,
   createLocalMcpStdioServer: () => createLocalMcpStdioServer,
   createMcpAdapter: () => createMcpAdapter,
   createMcpToolSchemas: () => createMcpToolSchemas,
   createRuntimeToolExecutor: () => createRuntimeToolExecutor,
+  isGatedTool: () => isGatedTool,
+  isToolAuthorized: () => isToolAuthorized,
   listToolDefinitions: () => listToolDefinitions
 });
 var init_dist = __esm({
@@ -1484,6 +1700,7 @@ var init_dist = __esm({
     init_hostedMcpEntrypoint();
     init_localMcpStdioServer();
     init_mcpAdapter();
+    init_gating();
     init_registry();
   }
 });
@@ -1720,6 +1937,9 @@ function fail(message) {
 }
 function classifyError(error) {
   if (error instanceof Error) {
+    if (error.message.startsWith("Sift contract required.")) {
+      return "contract_required";
+    }
     if (isPermissionError(error)) {
       return "permission_denied";
     }
@@ -1768,6 +1988,41 @@ function addReceiptLine(lines, label, value) {
   }
 }
 
+// src/agentCommands.ts
+async function agentRegister(executor, assertedAgentName, rest, json) {
+  if (executor === void 0) {
+    return fail("No Sift API executor is configured for agent.register.");
+  }
+  const parsed = parseOptions(rest);
+  const name = optionalOption(parsed, "name") ?? assertedAgentName;
+  if (name === void 0 || name.trim().length === 0) {
+    return fail("Missing agent name: pass --name or set SIFT_AGENT.");
+  }
+  const input = { name };
+  const description = optionalOption(parsed, "description");
+  if (description !== void 0) {
+    input.description = description;
+  }
+  const kind = optionalOption(parsed, "kind");
+  if (kind !== void 0) {
+    input.kind = kind;
+  }
+  const result2 = await executor.execute("agent.register", input);
+  return ok(json ? `${JSON.stringify(result2)}
+` : renderAgentRegisterResult(result2));
+}
+function renderAgentRegisterResult(result2) {
+  if (typeof result2 !== "object" || result2 === null || !("agent" in result2)) {
+    return `${JSON.stringify(result2)}
+`;
+  }
+  const { agent, created, reactivated } = result2;
+  const verb = created === true ? "Registered" : reactivated === true ? "Reactivated" : "Already registered";
+  const actsFor = agent.actsForDisplayName === void 0 ? "" : ` (acting for ${agent.actsForDisplayName})`;
+  return `${verb} agent worker '${agent.name ?? "unknown"}'${actsFor}.
+`;
+}
+
 // src/auth/commandAdapter.ts
 function isAuthCommand(commandKey) {
   return commandKey === "login:" || commandKey === "auth:status" || commandKey === "logout:";
@@ -1791,6 +2046,7 @@ function authCommand(authCommands2, command, input) {
 
 // src/capabilityGuard.ts
 var commandCapabilities = {
+  "contract:get": "record:read",
   "whoami:": "record:read",
   "brain:list": "record:read",
   "brain:use": "record:read",
@@ -1838,6 +2094,35 @@ function validateCommandCapability(input) {
   }
 }
 
+// src/contractOption.ts
+function extractContractVersion(argv2) {
+  const index = argv2.indexOf("--contract");
+  if (index === -1) {
+    return { argv: argv2 };
+  }
+  const value = argv2[index + 1];
+  if (value === void 0 || value.trim().length === 0 || value.startsWith("--")) {
+    return { argv: [...argv2.slice(0, index), ...argv2.slice(index + 1)] };
+  }
+  return {
+    argv: [...argv2.slice(0, index), ...argv2.slice(index + 2)],
+    contractVersion: value
+  };
+}
+function applyContractOption(input) {
+  const { argv: argv2, contractVersion } = extractContractVersion(input.argv);
+  if (contractVersion === void 0 || input.executor === void 0) {
+    return { ...input, argv: argv2 };
+  }
+  return { ...input, argv: argv2, executor: withContractVersion(input.executor, contractVersion) };
+}
+function withContractVersion(executor, contractVersion) {
+  return {
+    ...executor,
+    execute: (name, toolInput) => executor.execute(name, { ...toolInput, contractVersion })
+  };
+}
+
 // src/doctor.ts
 async function doctor(input) {
   const checks = [
@@ -2008,6 +2293,7 @@ var knownTopLevelCommands = /* @__PURE__ */ new Set([
   "brain",
   "capture",
   "context",
+  "contract",
   "decision",
   "decide",
   "doctor",
@@ -2360,7 +2646,8 @@ function createHostedApiExecutor(input) {
           authorization: `Bearer ${input.token}`,
           "content-type": "application/json",
           "x-sift-brain-id": input.brainId,
-          "x-sift-workspace-id": input.workspaceId
+          "x-sift-workspace-id": input.workspaceId,
+          ...input.agentName === void 0 || input.agentName.trim().length === 0 ? {} : { "x-sift-agent-name": input.agentName.trim() }
         },
         body: JSON.stringify({ input: toolInput }, serializeJsonValue)
       });
@@ -2403,7 +2690,8 @@ function errorMessage(parsed, status2) {
 }
 
 // src/index.ts
-async function runSiftCli(input) {
+async function runSiftCli(rawInput) {
+  const input = applyContractOption(rawInput);
   const json = input.argv.includes("--json");
   const args = input.argv.filter((arg) => arg !== "--json");
   const [group, command, ...rest] = args;
@@ -2412,6 +2700,7 @@ async function runSiftCli(input) {
   const commandKey = group === "login" ? "login:" : `${group ?? ""}:${command ?? ""}`;
   const commandRest = group === "login" ? args.slice(1) : rest;
   const handlers = {
+    "contract:get": () => executeSimple2(rawInput.executor, "contract.get", {}, json),
     "whoami:": () => executeSimple2(input.executor, "whoami", {}, json),
     "brain:list": () => executeSimple2(input.executor, "brain.list", {}, json),
     "brain:use": () => idTool({
@@ -2460,7 +2749,9 @@ async function runSiftCli(input) {
     "audit:events": () => auditEvents(input.executor, rest, json),
     "decision:create": () => createDecision(input.executor, rest, json),
     "task:create": () => createTask(input.executor, rest, json),
-    "mcp:serve": () => mcpServe(input.mcpServer, input.config, input.executor, json),
+    "agent:register": () => agentRegister(input.executor, input.agentName, rest, json),
+    "agent:status": () => executeSimple2(input.executor, "agent.status", {}, json),
+    "mcp:serve": () => mcpServe(input.mcpServer, input.config, rawInput.executor, json),
     "login:": () => authCommand(input.authCommands, "login", { rest: commandRest, json }),
     "auth:status": () => authCommand(input.authCommands, "status", { json }),
     "logout:": () => authCommand(input.authCommands, "logout", { json })
@@ -2515,8 +2806,7 @@ async function mcpServe(mcpServer, config2, executor, json) {
   }
   const result2 = await mcpServer.serve({ config: config2, executor, transport: "local_mcp" });
   if (result2 === void 0) return ok("");
-  return ok(json ? `${JSON.stringify(result2)}
-` : `${JSON.stringify(result2)}
+  return ok(`${JSON.stringify(result2)}
 `);
 }
 function scopeCurrent(config2, json) {
@@ -3457,15 +3747,18 @@ var config = loadedAuth?.config ?? {
   principalId: "",
   capabilities: []
 };
+var { argv, agentName } = extractAgentName(process.argv.slice(2), process.env.SIFT_AGENT);
 var result = await runSiftCli({
-  argv: process.argv.slice(2),
+  argv,
   config,
   readStdin,
+  agentName,
   executor: loadedAuth === void 0 ? void 0 : createHostedApiExecutor({
     apiBaseUrl: loadedAuth.config.apiBaseUrl,
     token: loadedAuth.token,
     workspaceId: loadedAuth.config.workspaceId,
-    brainId: loadedAuth.config.brainId
+    brainId: loadedAuth.config.brainId,
+    agentName
   }),
   authCommands,
   mcpServer: {
@@ -3488,6 +3781,18 @@ var result = await runSiftCli({
 process.stdout.write(result.stdout);
 process.stderr.write(result.stderr);
 process.exitCode = result.exitCode;
+function extractAgentName(args, envAgentName) {
+  const flagIndex = args.indexOf("--as-agent");
+  if (flagIndex !== -1 && args[flagIndex + 1] !== void 0) {
+    const name = args[flagIndex + 1];
+    return {
+      argv: [...args.slice(0, flagIndex), ...args.slice(flagIndex + 2)],
+      agentName: name
+    };
+  }
+  const env = envAgentName?.trim();
+  return { argv: args, agentName: env === void 0 || env.length === 0 ? void 0 : env };
+}
 async function readStdin() {
   const chunks = [];
   for await (const chunk of process.stdin) {

package/package.json

@@ -1,8 +1,17 @@
 {
   "name": "@sift-wiki/cli",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "type": "module",
   "license": "UNLICENSED",
+  "description": "Sift CLI release artifact.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/goodnight000/sift-cli.git"
+  },
+  "homepage": "https://github.com/goodnight000/sift-cli#readme",
+  "bugs": {
+    "url": "https://github.com/goodnight000/sift-cli/issues"
+  },
   "bin": {
     "sift": "dist/bin/sift.js"
   },
@@ -17,13 +26,6 @@
     "access": "public"
   },
   "scripts": {
-    "build": "tsup",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "pack:verify": "node ../../scripts/verify_cli_package.mjs"
-  },
-  "devDependencies": {
-    "@sift/api": "workspace:*",
-    "@sift/tools": "workspace:*",
-    "tsup": "8.5.1"
+    "verify": "node scripts/verify-release.mjs"
   }
 }