@yoyo-bot/cli 0.1.0

package/dist/commands/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAEpC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,IAAwC;IACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAExD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,mBAAmB,KAAK,GAAG,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC;IAE/F,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpH,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/commands/unbind.d.ts

@@ -0,0 +1,7 @@
+interface UnbindOptions {
+    dir?: string;
+    force?: boolean;
+}
+export declare function unbindCommand(ref: string, opts: UnbindOptions): Promise<void>;
+export {};
+//# sourceMappingURL=unbind.d.ts.map

package/dist/commands/unbind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbind.d.ts","sourceRoot":"","sources":["../../src/commands/unbind.ts"],"names":[],"mappings":"AAMA,UAAU,aAAa;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAMD,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBnF"}

package/dist/commands/unbind.js

@@ -0,0 +1,26 @@
+import { rm } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { homedir } from "node:os";
+import { existsSync } from "node:fs";
+import pc from "picocolors";
+function defaultBindRoot() {
+    return join(homedir(), ".yoyo", "binders");
+}
+export async function unbindCommand(ref, opts) {
+    const parts = ref.split("/");
+    if (parts.length !== 2 || !parts[0] || !parts[1]) {
+        console.error(pc.red(`Invalid ref "${ref}". Expected <owner>/<slug>`));
+        process.exit(1);
+    }
+    const [owner, slug] = parts;
+    const bindRoot = opts.dir ? resolve(opts.dir) : defaultBindRoot();
+    const bindDir = join(bindRoot, owner, slug);
+    if (!existsSync(bindDir)) {
+        console.error(pc.red(`Not bound: ${ref} (${bindDir} not found)`));
+        process.exit(1);
+    }
+    console.log(pc.dim(`Removing ${bindDir}…`));
+    await rm(bindDir, { recursive: true, force: true });
+    console.log(pc.green(`Unbound ${ref}`));
+}
+//# sourceMappingURL=unbind.js.map

package/dist/commands/unbind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbind.js","sourceRoot":"","sources":["../../src/commands/unbind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,YAAY,CAAC;AAO5B,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,IAAmB;IAClE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,GAAG,4BAA4B,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAM,EAAE,IAAK,CAAC,CAAC;IAE9C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,GAAG,KAAK,OAAO,aAAa,CAAC,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,OAAO,GAAG,CAAC,CAAC,CAAC;IAC5C,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/commands/whoami.d.ts

@@ -0,0 +1,4 @@
+export declare function whoamiCommand(opts: {
+    json?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=whoami.d.ts.map

package/dist/commands/whoami.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAIA,wBAAsB,aAAa,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B3E"}

package/dist/commands/whoami.js

@@ -0,0 +1,34 @@
+import pc from "picocolors";
+import { api, ApiError } from "../lib/api.js";
+import { getApiKey } from "../lib/config.js";
+export async function whoamiCommand(opts) {
+    const key = await getApiKey();
+    if (!key) {
+        console.error(pc.red("Not authenticated. Run: yoyo auth"));
+        process.exit(1);
+    }
+    let user;
+    try {
+        user = await api.whoami();
+    }
+    catch (err) {
+        if (err instanceof ApiError && err.status === 401) {
+            console.error(pc.red("Invalid or expired API key. Run: yoyo auth"));
+        }
+        else {
+            console.error(pc.red(`Error: ${String(err)}`));
+        }
+        process.exit(1);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(user, null, 2));
+        return;
+    }
+    console.log();
+    console.log(`  ${pc.bold(user.displayName ?? user.slug)}`);
+    console.log(`  ${pc.dim("Slug")}   ${user.slug}`);
+    if (user.email)
+        console.log(`  ${pc.dim("Email")}  ${user.email}`);
+    console.log();
+}
+//# sourceMappingURL=whoami.js.map

package/dist/commands/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAwB;IAC1D,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAClD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+import { program } from "commander";
+import { searchCommand } from "./commands/search.js";
+import { bindCommand } from "./commands/bind.js";
+import { unbindCommand } from "./commands/unbind.js";
+import { publishCommand } from "./commands/publish.js";
+import { initCommand } from "./commands/init.js";
+import { authCommand } from "./commands/auth.js";
+import { whoamiCommand } from "./commands/whoami.js";
+import { listCommand } from "./commands/list.js";
+program
+    .name("yoyo")
+    .description("Yoyo — the AI agent binder registry CLI")
+    .version("0.0.1");
+program
+    .command("search <query>")
+    .description("Search for binders in the registry")
+    .option("-l, --limit <n>", "max results", "10")
+    .option("--json", "output JSON")
+    .action((query, opts) => searchCommand(query, opts));
+program
+    .command("bind <owner/slug>")
+    .description("Bind (install) a binder to ~/.yoyo/binders/")
+    .option("-v, --version <ver>", "specific version")
+    .option("-d, --dir <path>", "bind root directory")
+    .option("--dry-run", "preview without writing")
+    .option("--json", "output JSON")
+    .action((ref, opts) => bindCommand(ref, opts));
+program
+    .command("unbind <owner/slug>")
+    .description("Remove a bound binder")
+    .option("-d, --dir <path>", "bind root directory")
+    .option("-f, --force", "skip confirmation")
+    .action((ref, opts) => unbindCommand(ref, opts));
+program
+    .command("list")
+    .description("List binders in the registry")
+    .option("--owner <slug>", "filter by owner")
+    .option("--page <n>", "page number", "1")
+    .option("--json", "output JSON")
+    .action((opts) => listCommand(opts));
+program
+    .command("publish")
+    .description("Publish binder from current directory")
+    .option("-d, --dir <path>", "binder directory (default: cwd)")
+    .option("--dry-run", "preview without uploading")
+    .option("--json", "output JSON")
+    .action((opts) => publishCommand(opts));
+program
+    .command("init")
+    .description("Scaffold a new binder in the current directory")
+    .option("-d, --dir <path>", "target directory (default: cwd)")
+    .option("-y, --yes", "skip prompts, use defaults")
+    .action((opts) => initCommand(opts));
+program
+    .command("auth")
+    .description("Save your Yoyo API key to ~/.yoyo/config.json")
+    .option("-k, --key <apiKey>", "API key (omit to prompt)")
+    .option("--url <apiUrl>", "custom API URL")
+    .action((opts) => authCommand(opts));
+program
+    .command("whoami")
+    .description("Show the currently authenticated user")
+    .option("--json", "output JSON")
+    .action((opts) => whoamiCommand(opts));
+program.parseAsync(process.argv);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,yCAAyC,CAAC;KACtD,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,oCAAoC,CAAC;KACjD,MAAM,CAAC,iBAAiB,EAAE,aAAa,EAAE,IAAI,CAAC;KAC9C,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,CAAC,KAAa,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAE/D,OAAO;KACJ,OAAO,CAAC,mBAAmB,CAAC;KAC5B,WAAW,CAAC,6CAA6C,CAAC;KAC1D,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;KACjD,MAAM,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;KACjD,MAAM,CAAC,WAAW,EAAE,yBAAyB,CAAC;KAC9C,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,CAAC,GAAW,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAEzD,OAAO;KACJ,OAAO,CAAC,qBAAqB,CAAC;KAC9B,WAAW,CAAC,uBAAuB,CAAC;KACpC,MAAM,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;KACjD,MAAM,CAAC,aAAa,EAAE,mBAAmB,CAAC;KAC1C,MAAM,CAAC,CAAC,GAAW,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAE3D,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,8BAA8B,CAAC;KAC3C,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;KAC3C,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,GAAG,CAAC;KACxC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AAEvC,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,uCAAuC,CAAC;KACpD,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,CAAC;KAC7D,MAAM,CAAC,WAAW,EAAE,2BAA2B,CAAC;KAChD,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;AAE1C,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,gDAAgD,CAAC;KAC7D,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,CAAC;KAC7D,MAAM,CAAC,WAAW,EAAE,4BAA4B,CAAC;KACjD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AAEvC,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,+CAA+C,CAAC;KAC5D,MAAM,CAAC,oBAAoB,EAAE,0BAA0B,CAAC;KACxD,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;KAC1C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AAEvC,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,uCAAuC,CAAC;KACpD,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AAEzC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/lib/api.d.ts

@@ -0,0 +1,60 @@
+export declare class ApiError extends Error {
+    status: number;
+    body?: unknown | undefined;
+    constructor(status: number, message: string, body?: unknown | undefined);
+}
+export interface BinderSummary {
+    owner: string;
+    slug: string;
+    displayName?: string;
+    description?: string;
+    version?: string;
+    downloads?: number;
+    tab?: string;
+    verification?: "official" | "verified" | "none";
+    tags?: string[];
+}
+export interface BinderDetail extends BinderSummary {
+    readme?: string;
+    latestVersion?: {
+        version: string;
+        tarballUrl?: string;
+        tarballSha256?: string;
+        platforms?: string[];
+    };
+}
+export interface SearchResult {
+    items: BinderSummary[];
+    total: number;
+    page: number;
+    pageSize: number;
+}
+export interface WhoamiResult {
+    id: string;
+    slug: string;
+    displayName?: string;
+    email?: string;
+}
+export declare const api: {
+    search: (q: string, page?: number, pageSize?: number) => Promise<SearchResult>;
+    getBinder: (owner: string, slug: string) => Promise<BinderDetail>;
+    listBinders: (owner?: string, page?: number, pageSize?: number) => Promise<SearchResult>;
+    whoami: () => Promise<WhoamiResult>;
+    publish: (data: {
+        slug: string;
+        displayName?: string;
+        description?: string;
+        version: string;
+        readme?: string;
+        tags?: string[];
+        tab?: string;
+        license?: string;
+        platforms?: string[];
+        dependencies?: Record<string, string>;
+    }) => Promise<{
+        id: string;
+        slug: string;
+        version: string;
+    }>;
+};
+//# sourceMappingURL=api.d.ts.map

package/dist/lib/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAEA,qBAAa,QAAS,SAAQ,KAAK;IAExB,MAAM,EAAE,MAAM;IAEd,IAAI,CAAC,EAAE,OAAO;gBAFd,MAAM,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACR,IAAI,CAAC,EAAE,OAAO,YAAA;CAKxB;AAoCD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;IAChD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,eAAO,MAAM,GAAG;gBACF,MAAM;uBAKC,MAAM,QAAQ,MAAM;0BAKjB,MAAM;;oBASZ;QACd,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACvC;YAAmB,MAAM;cAAQ,MAAM;iBAAW,MAAM;;CAC1D,CAAC"}

package/dist/lib/api.js

@@ -0,0 +1,54 @@
+import { getApiKey, getApiUrl } from "./config.js";
+export class ApiError extends Error {
+    status;
+    body;
+    constructor(status, message, body) {
+        super(message);
+        this.status = status;
+        this.body = body;
+        this.name = "ApiError";
+    }
+}
+async function request(method, path, opts = {}) {
+    const base = await getApiUrl();
+    const url = `${base}${path}`;
+    const headers = { "Content-Type": "application/json" };
+    if (opts.auth !== false) {
+        const key = await getApiKey();
+        if (key)
+            headers["Authorization"] = `Bearer ${key}`;
+    }
+    const res = await fetch(url, {
+        method,
+        headers,
+        body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
+    });
+    if (!res.ok) {
+        let detail = "";
+        try {
+            const j = (await res.json());
+            detail = j.message ?? j.error ?? "";
+        }
+        catch { }
+        throw new ApiError(res.status, detail || res.statusText);
+    }
+    return res.json();
+}
+// ── API calls ──────────────────────────────────────────────────────────────
+export const api = {
+    search: (q, page = 1, pageSize = 20) => request("GET", `/binders?q=${encodeURIComponent(q)}&page=${page}&pageSize=${pageSize}`, {
+        auth: false,
+    }),
+    getBinder: (owner, slug) => request("GET", `/binders/${encodeURIComponent(owner)}/${encodeURIComponent(slug)}`, {
+        auth: false,
+    }),
+    listBinders: (owner, page = 1, pageSize = 20) => {
+        const ownerQ = owner ? `&owner=${encodeURIComponent(owner)}` : "";
+        return request("GET", `/binders?page=${page}&pageSize=${pageSize}${ownerQ}`, {
+            auth: false,
+        });
+    },
+    whoami: () => request("GET", "/auth/me"),
+    publish: (data) => request("POST", "/binders", { body: data }),
+};
+//# sourceMappingURL=api.js.map

package/dist/lib/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,OAAO,QAAS,SAAQ,KAAK;IAExB;IAEA;IAHT,YACS,MAAc,EACrB,OAAe,EACR,IAAc;QAErB,KAAK,CAAC,OAAO,CAAC,CAAC;QAJR,WAAM,GAAN,MAAM,CAAQ;QAEd,SAAI,GAAJ,IAAI,CAAU;QAGrB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,KAAK,UAAU,OAAO,CACpB,MAAc,EACd,IAAY,EACZ,OAA2C,EAAE;IAE7C,MAAM,IAAI,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;IAC7B,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAE/E,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,GAAG,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM;QACN,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KACtE,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyC,CAAC;YACrE,MAAM,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AAClC,CAAC;AAwCD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,MAAM,EAAE,CAAC,CAAS,EAAE,IAAI,GAAG,CAAC,EAAE,QAAQ,GAAG,EAAE,EAAE,EAAE,CAC7C,OAAO,CAAe,KAAK,EAAE,cAAc,kBAAkB,CAAC,CAAC,CAAC,SAAS,IAAI,aAAa,QAAQ,EAAE,EAAE;QACpG,IAAI,EAAE,KAAK;KACZ,CAAC;IAEJ,SAAS,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CACzC,OAAO,CAAe,KAAK,EAAE,YAAY,kBAAkB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE;QAChG,IAAI,EAAE,KAAK;KACZ,CAAC;IAEJ,WAAW,EAAE,CAAC,KAAc,EAAE,IAAI,GAAG,CAAC,EAAE,QAAQ,GAAG,EAAE,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,OAAO,CAAe,KAAK,EAAE,iBAAiB,IAAI,aAAa,QAAQ,GAAG,MAAM,EAAE,EAAE;YACzF,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAe,KAAK,EAAE,UAAU,CAAC;IAEtD,OAAO,EAAE,CAAC,IAWT,EAAE,EAAE,CAAC,OAAO,CAAgD,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;CACjG,CAAC"}

package/dist/lib/config.d.ts

@@ -0,0 +1,11 @@
+export interface YoyoConfig {
+    apiKey?: string;
+    apiUrl?: string;
+}
+export declare function configPath(): string;
+export declare function defaultApiUrl(): string;
+export declare function loadConfig(): Promise<YoyoConfig>;
+export declare function saveConfig(cfg: YoyoConfig): Promise<void>;
+export declare function getApiKey(): Promise<string | undefined>;
+export declare function getApiUrl(): Promise<string>;
+//# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAStD;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAI/D;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAI7D;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAGjD"}

package/dist/lib/config.js

@@ -0,0 +1,38 @@
+import { readFile, writeFile, mkdir } from "node:fs/promises";
+import { join, dirname } from "node:path";
+import { homedir } from "node:os";
+import { existsSync } from "node:fs";
+export function configPath() {
+    return join(homedir(), ".yoyo", "config.json");
+}
+export function defaultApiUrl() {
+    return process.env.YOYO_API_URL ?? "https://api.yoyo.bot/v1";
+}
+export async function loadConfig() {
+    const p = configPath();
+    if (!existsSync(p))
+        return {};
+    try {
+        const raw = await readFile(p, "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+}
+export async function saveConfig(cfg) {
+    const p = configPath();
+    await mkdir(dirname(p), { recursive: true });
+    await writeFile(p, JSON.stringify(cfg, null, 2) + "\n", "utf8");
+}
+export async function getApiKey() {
+    if (process.env.YOYO_API_KEY)
+        return process.env.YOYO_API_KEY;
+    const cfg = await loadConfig();
+    return cfg.apiKey;
+}
+export async function getApiUrl() {
+    const cfg = await loadConfig();
+    return process.env.YOYO_API_URL ?? cfg.apiUrl ?? "https://api.yoyo.bot/v1";
+}
+//# sourceMappingURL=config.js.map

package/dist/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAOrC,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,yBAAyB,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IACvB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAe;IAC9C,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IACvB,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,MAAM,IAAI,yBAAyB,CAAC;AAC7E,CAAC"}

package/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "@yoyo-bot/cli",
+  "version": "0.1.0",
+  "description": "YoYo CLI — search, install, fork, and publish binders for AI agents. The universal binder registry.",
+  "type": "module",
+  "bin": {
+    "yoyo": "./dist/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "typecheck": "tsc --noEmit",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "commander": "^12.1.0",
+    "picocolors": "^1.1.1"
+  },
+  "devDependencies": {
+    "@types/node": "^20.10.0",
+    "typescript": "^5.3.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}

package/src/commands/auth.ts

@@ -0,0 +1,30 @@
+import { createInterface } from "node:readline";
+import pc from "picocolors";
+import { loadConfig, saveConfig, getApiUrl } from "../lib/config.js";
+import { api } from "../lib/api.js";
+
+export async function authCommand(opts: { key?: string; url?: string }): Promise<void> {
+  let apiKey = opts.key;
+
+  if (!apiKey) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    apiKey = await new Promise<string>((resolve) => {
+      rl.question(pc.dim("Enter your Yoyo API key: "), (ans) => {
+        rl.close();
+        resolve(ans.trim());
+      });
+    });
+  }
+
+  if (!apiKey) {
+    console.error(pc.red("No API key provided."));
+    process.exit(1);
+  }
+
+  const cfg = await loadConfig();
+  cfg.apiKey = apiKey;
+  if (opts.url) cfg.apiUrl = opts.url;
+  await saveConfig(cfg);
+
+  console.log(pc.green("API key saved to ~/.yoyo/config.json"));
+}

package/src/commands/bind.ts

@@ -0,0 +1,147 @@
+import { writeFile, mkdir } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { homedir } from "node:os";
+import { createHash } from "node:crypto";
+import { unlink } from "node:fs/promises";
+import pc from "picocolors";
+import { api, ApiError } from "../lib/api.js";
+
+interface BindOptions {
+  version?: string;
+  dir?: string;
+  json?: boolean;
+  dryRun?: boolean;
+}
+
+function defaultBindRoot(): string {
+  return join(homedir(), ".yoyo", "binders");
+}
+
+function parseRef(ref: string): { owner: string; slug: string } {
+  const parts = ref.split("/");
+  if (parts.length !== 2 || !parts[0] || !parts[1]) {
+    throw new Error(`Invalid binder ref "${ref}". Expected <owner>/<slug>`);
+  }
+  return { owner: parts[0], slug: parts[1] };
+}
+
+function formatBytes(n: number): string {
+  if (n < 1024) return `${n} B`;
+  if (n < 1024 * 1024) return `${(n / 1024).toFixed(1)} KB`;
+  return `${(n / (1024 * 1024)).toFixed(1)} MB`;
+}
+
+export async function bindCommand(ref: string, opts: BindOptions): Promise<void> {
+  let owner: string, slug: string;
+  try {
+    ({ owner, slug } = parseRef(ref));
+  } catch (err) {
+    console.error(pc.red(String(err)));
+    process.exit(1);
+  }
+
+  if (!opts.json) process.stdout.write(pc.dim(`Fetching ${ref}…\n`));
+
+  let binder;
+  try {
+    binder = await api.getBinder(owner, slug);
+  } catch (err) {
+    if (err instanceof ApiError && err.status === 404) {
+      console.error(pc.red(`Binder not found: ${ref}`));
+    } else {
+      console.error(pc.red(`API error: ${String(err)}`));
+    }
+    process.exit(1);
+  }
+
+  const spine = binder.latestVersion;
+  if (!spine) {
+    console.error(pc.red(`Binder ${ref} has no published versions.`));
+    process.exit(1);
+  }
+
+  const bindDir = join(opts.dir ? resolve(opts.dir) : defaultBindRoot(), owner, slug);
+
+  if (opts.json) {
+    console.log(JSON.stringify({ ref, bindDir, dryRun: opts.dryRun ?? false, binder }, null, 2));
+    return;
+  }
+
+  const badge =
+    binder.verification === "official"
+      ? pc.yellow(" ✦ Official")
+      : binder.verification === "verified"
+        ? pc.green(" ✓ Verified")
+        : "";
+
+  console.log(`\n${pc.bold(binder.displayName ?? ref)}${badge}  ${pc.dim(`v${spine.version}`)}`);
+  if (binder.description) console.log(pc.dim(binder.description.slice(0, 80)));
+  console.log(pc.dim("─".repeat(50)));
+  console.log(`  ${pc.dim("Bind to")}  ${pc.dim(bindDir)}`);
+  console.log();
+
+  if (opts.dryRun) {
+    console.log(pc.yellow("Dry run — nothing written."));
+    return;
+  }
+
+  await mkdir(bindDir, { recursive: true });
+
+  // Write manifest
+  const manifest = {
+    name: slug,
+    owner,
+    fullName: `${owner}/${slug}`,
+    version: spine.version,
+    description: binder.description,
+    tab: binder.tab,
+    tags: binder.tags ?? [],
+    boundAt: new Date().toISOString(),
+    tarballUrl: spine.tarballUrl,
+    tarballSha256: spine.tarballSha256,
+  };
+  await writeFile(join(bindDir, "binder.json"), JSON.stringify(manifest, null, 2) + "\n", "utf8");
+  console.log(`  ${pc.green("✓")} binder.json`);
+
+  // Download tarball with SHA256 verification
+  if (spine.tarballUrl) {
+    const tarPath = join(bindDir, `${slug}-${spine.version}.tar.gz`);
+    process.stdout.write(`  ${pc.dim("↓ tarball…")}`);
+    try {
+      const res = await fetch(spine.tarballUrl);
+      if (res.ok && res.body) {
+        const reader = res.body.getReader();
+        const chunks: Uint8Array[] = [];
+        let total = 0;
+        for (;;) {
+          const { done, value } = await reader.read();
+          if (done) break;
+          chunks.push(value);
+          total += value.byteLength;
+        }
+        const buf = Buffer.concat(chunks, total);
+
+        if (spine.tarballSha256) {
+          const actual = createHash("sha256").update(buf).digest("hex");
+          if (actual !== spine.tarballSha256) {
+            process.stdout.write(`\r  ${pc.red("✗")} tarball SHA256 mismatch — aborting\n`);
+            console.error(pc.dim(`  expected: ${spine.tarballSha256}\n  got:      ${actual}`));
+            await unlink(tarPath).catch(() => {});
+            process.exit(1);
+          }
+        }
+
+        await writeFile(tarPath, buf);
+        process.stdout.write(`\r  ${pc.green("✓")} tarball (${pc.dim(formatBytes(total))})\n`);
+      } else {
+        process.stdout.write(`\r  ${pc.dim("~ tarball skipped")}\n`);
+      }
+    } catch {
+      process.stdout.write(`\r  ${pc.dim("~ tarball unavailable")}\n`);
+    }
+  }
+
+  console.log();
+  console.log(pc.green(`Bound ${ref}@${spine.version}`));
+  console.log(pc.dim(`Location: ${bindDir}`));
+}

package/src/commands/init.ts

@@ -0,0 +1,69 @@
+import { writeFile, mkdir } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { existsSync } from "node:fs";
+import { createInterface } from "node:readline";
+import pc from "picocolors";
+
+async function prompt(rl: ReturnType<typeof createInterface>, question: string): Promise<string> {
+  return new Promise((res) => rl.question(question, (a) => res(a.trim())));
+}
+
+export async function initCommand(opts: { dir?: string; yes?: boolean }): Promise<void> {
+  const cwd = opts.dir ? resolve(opts.dir) : process.cwd();
+  const manifestPath = join(cwd, "binder.json");
+
+  if (existsSync(manifestPath) && !opts.yes) {
+    console.error(pc.yellow("binder.json already exists. Use --yes to overwrite."));
+    process.exit(1);
+  }
+
+  let slug = "", displayName = "", description = "";
+
+  if (opts.yes) {
+    const dirName = cwd.split("/").pop() ?? "my-binder";
+    slug = dirName.toLowerCase().replace(/[^a-z0-9-]/g, "-");
+    displayName = dirName;
+  } else {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    slug = await prompt(rl, pc.dim("Binder slug (e.g. my-tools): "));
+    displayName = await prompt(rl, pc.dim("Display name: "));
+    description = await prompt(rl, pc.dim("Description: "));
+    rl.close();
+  }
+
+  if (!slug) {
+    console.error(pc.red("Slug is required."));
+    process.exit(1);
+  }
+
+  const manifest = {
+    slug,
+    displayName: displayName || slug,
+    description: description || "",
+    version: "0.1.0",
+    tab: "tools",
+    tags: [],
+    platforms: [],
+    license: "MIT",
+    dependencies: {},
+  };
+
+  await mkdir(cwd, { recursive: true });
+  await writeFile(manifestPath, JSON.stringify(manifest, null, 2) + "\n", "utf8");
+
+  // Scaffold a basic page.md if it doesn't exist
+  const pagePath = join(cwd, "page.md");
+  if (!existsSync(pagePath)) {
+    await writeFile(
+      pagePath,
+      `# ${manifest.displayName}\n\n${manifest.description || "Describe what this binder provides to AI agents."}\n`,
+      "utf8"
+    );
+  }
+
+  console.log(pc.green(`\nInitialised binder in ${cwd}`));
+  console.log(`  ${pc.dim("✓")} binder.json`);
+  console.log(`  ${pc.dim("✓")} page.md`);
+  console.log();
+  console.log(pc.dim("Next: yoyo publish"));
+}