cerebrex 0.3.0 → 0.3.2

package/LICENSE

@@ -0,0 +1,130 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship made available under
+      the License, as indicated by a copyright notice that is included in
+      or attached to the work (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other transformations
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean, as submitted to the Licensor for inclusion
+      in the Work by You, including the original version of the Work and any
+      modifications or additions to that Work or Derivative Works of the Work.
+
+      "Contributor" shall mean Licensor and any Legal Entity on behalf of
+      whom a Contribution has been received by the Licensor.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by the combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a cross-claim
+      or counterclaim in a lawsuit) alleging that the Work or any
+      Contribution embodied within the Work constitutes direct or contributory
+      patent infringement, then any patent licenses granted to You under
+      this License for that Work shall terminate as of the date such
+      litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file, You must include a
+          readable copy of the attribution notices contained within such
+          NOTICE file, in the Derivative Works that You distribute.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      including "CerebreX", "A Real Cool Co.", and associated logos,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort, contract, or otherwise, shall any Contributor be
+      liable for damages, including any direct, indirect, special,
+      incidental, or exemplary damages arising out of this License or
+      out of the use or inability to use the Work.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may offer and charge a fee
+      for acceptance of support, warranty, indemnity, or other liability
+      obligations and rights consistent with this License.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2026 A Real Cool Co. — Josef Douglas Charles McClammey
+   Licensed under the Apache License, Version 2.0.
+   You may not use this file except in compliance with the License.
+   You may obtain a copy of the License at:
+       http://www.apache.org/licenses/LICENSE-2.0

package/README.md

@@ -0,0 +1,274 @@
+<div align="center">
+
+# CerebreX
+
+### The Open-Source Agent Infrastructure OS
+
+[![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](./LICENSE)
+[![CI](https://github.com/therealcoolnerd/CerebreX/actions/workflows/ci.yml/badge.svg)](https://github.com/therealcoolnerd/CerebreX/actions/workflows/ci.yml)
+[![npm version](https://img.shields.io/npm/v/cerebrex.svg)](https://www.npmjs.com/package/cerebrex)
+[![GitHub Stars](https://img.shields.io/github/stars/therealcoolnerd/CerebreX?style=social)](https://github.com/therealcoolnerd/CerebreX)
+[![Issues](https://img.shields.io/github/issues/therealcoolnerd/CerebreX)](https://github.com/therealcoolnerd/CerebreX/issues)
+
+**Build. Test. Remember. Coordinate. Publish.**
+The complete infrastructure layer for AI agents — in one CLI.
+
+[🚀 Quickstart](#-quickstart) · [🗂 Structure](#-monorepo-structure) · [🛣 Roadmap](#-roadmap) · [🐛 Issues](https://github.com/therealcoolnerd/CerebreX/issues)
+
+</div>
+
+---
+
+> **Status: v0.3.2 — All 6 modules complete and live on npm**
+> `npm install -g cerebrex` — FORGE, TRACE, MEMEX, AUTH, REGISTRY, and HIVE are all working.
+> Live registry: `https://cerebrex-registry.therealjosefdmcclammey.workers.dev`
+
+---
+
+## What is CerebreX?
+
+CerebreX is an open-source **Agent Infrastructure OS** — the tools developers need to build reliable, observable, and secure AI agents.
+
+Six modules. One CLI.
+
+| Module | Command | Status | What It Does |
+|--------|---------|--------|-------------|
+| 🔨 **FORGE** | `cerebrex build` | ✅ Working | Generate production MCP servers from any OpenAPI spec |
+| 🔍 **TRACE** | `cerebrex trace` | ✅ Working | Record agent execution + visual web dashboard |
+| 🧠 **MEMEX** | `cerebrex memex` | ✅ Working | Persistent memory with SHA-256 integrity + TTL |
+| 🔑 **AUTH** | `cerebrex auth` | ✅ Working | Secure token storage for registry authentication |
+| 📦 **REGISTRY** | `cerebrex publish` | ✅ Working | Publish and install MCP servers (live registry) |
+| 🐝 **HIVE** | `cerebrex hive` | ✅ Working | Multi-agent coordination with JWT auth |
+
+---
+
+## ⚡ Quickstart
+
+```bash
+npm install -g cerebrex
+cerebrex --help
+```
+
+Or build from source (requires [Bun](https://bun.sh)):
+
+```bash
+git clone https://github.com/therealcoolnerd/CerebreX.git
+cd CerebreX
+bun install
+cd packages/types && bun run build && cd ../..
+cd packages/core && bun run build && cd ../..
+cd packages/registry-client && bun run build && cd ../..
+cd apps/cli && bun run build
+node dist/index.js --help
+```
+
+---
+
+## 🔨 FORGE — MCP Server Generation
+
+Generate a production-ready MCP server from any OpenAPI spec:
+
+```bash
+# From a URL
+cerebrex build --spec https://petstore3.swagger.io/api/v3/openapi.json --output ./my-server
+
+# From a local file
+cerebrex build --spec ./openapi.yaml --output ./my-server
+```
+
+Output is a Cloudflare Workers project with:
+- Zod input validation on every tool
+- MCP-compliant stdio/SSE/Streamable HTTP transports
+- Ready for `wrangler deploy`
+
+---
+
+## 🔍 TRACE — Agent Execution Recording
+
+```bash
+# Start recording (runs in foreground)
+cerebrex trace start --session my-agent --port 7432
+
+# From your agent, push steps:
+# POST http://localhost:7432/step
+# Body: { "type": "tool_call", "toolName": "listPets", "inputs": {}, "latencyMs": 42 }
+
+# Stop and save
+cerebrex trace stop --session my-agent
+
+# View in terminal
+cerebrex trace view --session my-agent
+
+# View in visual web dashboard (opens browser)
+cerebrex trace view --session my-agent --web
+
+# List all saved sessions
+cerebrex trace list
+```
+
+Traces are saved to `~/.cerebrex/traces/`.
+
+---
+
+## 🧠 MEMEX — Persistent Agent Memory
+
+```bash
+# Store a value
+cerebrex memex set "user-pref" "dark mode" --namespace ui
+
+# Retrieve it
+cerebrex memex get "user-pref" --namespace ui
+
+# List all memory
+cerebrex memex list
+
+# With TTL (auto-expires after 3600 seconds)
+cerebrex memex set "session-ctx" "..." --ttl 3600
+```
+
+All writes are SHA-256 checksummed. Reads verify integrity before returning.
+Storage: `~/.cerebrex/memex/<namespace>.json` — local, no cloud required.
+
+---
+
+## 🔑 AUTH — Secure Credentials
+
+```bash
+cerebrex auth login     # store token at ~/.cerebrex/.credentials (mode 0600)
+cerebrex auth status    # check current auth state
+cerebrex auth logout    # remove stored token
+```
+
+---
+
+## 📦 REGISTRY — Publish & Install MCP Servers
+
+Registry: `https://cerebrex-registry.therealjosefdmcclammey.workers.dev`
+
+```bash
+cerebrex auth login                              # authenticate first
+cerebrex publish --dir ./my-server              # publish to registry
+cerebrex install my-mcp-server                  # install from registry
+cerebrex validate ./my-server                   # validate before publishing
+cerebrex validate ./my-server --strict          # + OWASP checks
+```
+
+---
+
+## 🐝 HIVE — Multi-Agent Coordination
+
+```bash
+# Initialize a HIVE coordinator
+cerebrex hive init --name my-hive
+
+# Start the coordinator (runs on port 7433)
+cerebrex hive start
+
+# In another terminal — register an agent and get a JWT
+cerebrex hive register --id agent-1 --name "Summarizer" --capabilities summarize,classify
+
+# Check who's connected
+cerebrex hive status
+
+# Send a task to an agent (use the JWT printed by register)
+cerebrex hive send --agent agent-1 --type summarize --payload '{"text":"..."}' --token <JWT>
+```
+
+HIVE runs a local HTTP coordinator with JWT-signed agent authentication.
+Agents register, receive tasks, and report results back via the REST API.
+
+---
+
+## 🗂 Monorepo Structure
+
+```
+CerebreX/
+├── apps/
+│   ├── cli/              # cerebrex CLI — the main published package
+│   │   ├── src/
+│   │   │   ├── commands/ # build, trace, memex, auth, hive, other-commands
+│   │   │   └── core/     # forge/, trace/, memex/ engines + dashboard
+│   │   └── dist/         # built output (git-ignored, built by CI)
+│   └── dashboard/        # Web trace explorer (embedded in CLI bundle)
+│       └── src/index.html
+├── workers/
+│   └── registry/         # Cloudflare Worker — live registry backend
+│       ├── src/index.ts  # REST API (D1 + KV)
+│       ├── schema.sql    # D1 database schema
+│       └── wrangler.toml
+├── packages/
+│   ├── core/             # @cerebrex/core — shared utilities
+│   ├── types/            # @cerebrex/types — shared TypeScript types
+│   └── registry-client/  # @cerebrex/registry — registry API client
+├── .github/
+│   └── workflows/
+│       ├── ci.yml              # build + typecheck on push/PR
+│       ├── publish.yml         # npm publish on GitHub release
+│       └── deploy-registry.yml # auto-deploy registry Worker
+└── turbo.json
+```
+
+---
+
+## 🔒 Security
+
+Built security-first, aligned with the [OWASP Top 10 for Agentic Applications (2025)](https://genai.owasp.org).
+
+- **Memory Integrity** — All MEMEX writes are SHA-256 checksummed. Reads verify before returning.
+- **Zero Hardcoded Secrets** — `cerebrex validate` scans for hardcoded credentials and blocks deploy.
+- **Input Validation** — Zod schemas validate every tool input in generated MCP servers.
+- **Secure Credentials** — Auth tokens stored at `~/.cerebrex/.credentials` (mode 0600).
+- **JWT Agent Auth** — HIVE uses HMAC-SHA256 signed JWTs for all agent communications.
+
+Found a vulnerability? Please read our [Security Policy](./SECURITY.md) and report it privately.
+
+---
+
+## 🤝 Contributing
+
+Contributions are welcome. CerebreX is a solo-built open-source project — PRs, issues, and feedback all help.
+
+```bash
+git clone https://github.com/therealcoolnerd/CerebreX.git
+cd CerebreX
+bun install
+cd packages/types && bun run build && cd ../..
+cd packages/core && bun run build && cd ../..
+cd packages/registry-client && bun run build && cd ../..
+cd apps/cli && bun run build
+# Open a PR against main
+```
+
+---
+
+## 🛣 Roadmap
+
+- [x] FORGE — MCP server generation from OpenAPI *(v0.1)*
+- [x] TRACE — Real HTTP event server, step recording + replay *(v0.2)*
+- [x] MEMEX — Persistent agent memory, SHA-256 integrity, TTL *(v0.2)*
+- [x] AUTH — Secure token storage, `cerebrex auth login/logout/status` *(v0.2)*
+- [x] VALIDATE — Real MCP + OWASP compliance checks *(v0.2)*
+- [x] CI/CD — GitHub Actions build + npm publish pipeline *(v0.2)*
+- [x] npm package live — `npm install -g cerebrex` *(v0.2.1)*
+- [x] Web dashboard — Visual trace explorer (`cerebrex trace view --web`) *(v0.3)*
+- [x] Registry backend — Cloudflare Worker + D1 + KV *(v0.3)*
+- [x] HIVE — Multi-agent JWT coordination (init/start/register/status/send) *(v0.3)*
+- [ ] Custom domain — `registry.cerebrex.dev` *(next)*
+- [ ] Web UI — Browser-based registry and trace browser *(v0.4)*
+- [ ] Enterprise tier + on-prem *(v1.0)*
+
+---
+
+## 📄 License
+
+CerebreX is open source under the [Apache 2.0 License](./LICENSE).
+
+---
+
+<div align="center">
+
+Built by [therealcoolnerd](https://github.com/therealcoolnerd) · Gulf Coast, Mississippi
+
+*"The developer who builds the standard wins the ecosystem."*
+
+</div>