create-openagent 0.1.0

package/dist/index.js

@@ -0,0 +1,1412 @@
+#!/usr/bin/env node
+
+// src/index.ts
+import { intro, outro, isCancel as isCancel2 } from "@clack/prompts";
+import pc from "picocolors";
+
+// src/prompts.ts
+import * as p from "@clack/prompts";
+function parseFlagValue(args, flag) {
+  const idx = args.indexOf(flag);
+  if (idx >= 0 && idx + 1 < args.length) {
+    return args[idx + 1];
+  }
+  return void 0;
+}
+function hasFlag(args, flag) {
+  return args.includes(flag);
+}
+async function collectOptions(projectNameArg, args) {
+  const projectName = projectNameArg ?? await p.text({
+    message: "Project name:",
+    placeholder: "my-agent-app",
+    validate: (value) => {
+      if (!value.trim()) return "Project name is required.";
+      if (!/^[a-z0-9][a-z0-9._-]*$/i.test(value)) {
+        return "Invalid project name (use alphanumeric, dashes, dots, underscores).";
+      }
+      return void 0;
+    }
+  });
+  if (p.isCancel(projectName)) throw new Error("Cancelled");
+  const templateFlag = parseFlagValue(args, "--template");
+  const template = templateFlag ?? await p.select({
+    message: "What type of agent app?",
+    options: [
+      { value: "agent", label: "Agent", hint: "Standalone agent with identity and tools" },
+      { value: "mcp-server", label: "MCP Server", hint: "Model Context Protocol server with auth" },
+      { value: "web-dashboard", label: "Web Dashboard", hint: "Next.js dashboard for agent management" },
+      { value: "full-stack", label: "Full Stack", hint: "Agent + MCP + Dashboard combined" }
+    ]
+  });
+  if (p.isCancel(template)) throw new Error("Cancelled");
+  const adapterFlag = parseFlagValue(args, "--adapter");
+  const adapters = adapterFlag ? [adapterFlag] : await p.multiselect({
+    message: "Authentication adapters?",
+    options: [
+      { value: "http", label: "HTTP", hint: "Bearer token / challenge-response" },
+      { value: "websocket", label: "WebSocket", hint: "Persistent connection auth" },
+      { value: "grpc", label: "gRPC", hint: "Protobuf-based auth" }
+    ],
+    initialValues: ["http"],
+    required: true
+  });
+  if (p.isCancel(adapters)) throw new Error("Cancelled");
+  const bridgeFlag = parseFlagValue(args, "--bridge");
+  const bridge = bridgeFlag ?? await p.select({
+    message: "Enterprise bridge?",
+    options: [
+      { value: "none", label: "None", hint: "Skip enterprise integration" },
+      { value: "oidc", label: "OIDC", hint: "OpenID Connect bridge for human SSO" },
+      { value: "scim", label: "SCIM", hint: "User provisioning bridge" }
+    ]
+  });
+  if (p.isCancel(bridge)) throw new Error("Cancelled");
+  const deployFlag = parseFlagValue(args, "--deploy");
+  const deploy = deployFlag ?? await p.select({
+    message: "Deploy target?",
+    options: [
+      { value: "local", label: "Local", hint: "Run locally with Node.js" },
+      { value: "cloudflare", label: "Cloudflare Workers", hint: "Edge-first deployment" },
+      { value: "vercel", label: "Vercel Edge", hint: "Next.js-optimized deployment" },
+      { value: "aws", label: "AWS Lambda", hint: "Serverless with API Gateway" },
+      { value: "docker", label: "Docker", hint: "Container deployment" }
+    ]
+  });
+  if (p.isCancel(deploy)) throw new Error("Cancelled");
+  const bioagentic = hasFlag(args, "--bioagentic") ? true : await p.confirm({
+    message: "Include Bioagentic entity classification?",
+    initialValue: false
+  });
+  if (p.isCancel(bioagentic)) throw new Error("Cancelled");
+  const fabrics = hasFlag(args, "--fabrics") ? true : await p.confirm({
+    message: "Include Fabrics routing?",
+    initialValue: false
+  });
+  if (p.isCancel(fabrics)) throw new Error("Cancelled");
+  return {
+    projectName: typeof projectName === "string" ? projectName : "my-agent-app",
+    template,
+    adapters,
+    bridge,
+    deploy,
+    bioagentic,
+    fabrics
+  };
+}
+
+// src/scaffold.ts
+import { existsSync, mkdirSync, writeFileSync } from "fs";
+import { join, dirname } from "path";
+import { spinner } from "@clack/prompts";
+
+// src/templates/agent.ts
+function generateAgentTemplate(options) {
+  return [
+    { path: "package.json", content: packageJson(options) },
+    { path: "src/index.ts", content: indexTs() },
+    { path: "src/agent.ts", content: agentTs(options) },
+    { path: "src/tools.ts", content: toolsTs() },
+    { path: "README.md", content: readme(options) }
+  ];
+}
+function packageJson(options) {
+  const deps = {
+    "@openagentid/sdk": "^0.1.0"
+  };
+  if (options.bioagentic) {
+    deps["@openagentid/bioagentic"] = "^0.1.0";
+  }
+  if (options.fabrics) {
+    deps["@openagentid/fabrics"] = "^0.1.0";
+  }
+  return JSON.stringify(
+    {
+      name: options.projectName,
+      version: "0.1.0",
+      private: true,
+      type: "module",
+      scripts: {
+        build: "tsup src/index.ts --format esm --target node20",
+        start: "node dist/index.js",
+        dev: "tsx src/index.ts",
+        typecheck: "tsc --noEmit"
+      },
+      dependencies: deps,
+      devDependencies: {
+        "@types/node": "^20.11.30",
+        tsup: "^8.0.2",
+        tsx: "^4.7.0",
+        typescript: "^5.4.5"
+      }
+    },
+    null,
+    2
+  );
+}
+function indexTs() {
+  return `/**
+ * Entry point \u2014 creates the agent and runs it.
+ */
+
+import { createAgent } from './agent.js';
+import { tools } from './tools.js';
+
+async function main(): Promise<void> {
+  const agent = await createAgent();
+
+  process.stdout.write(\`Agent created: \${agent.did}\\n\`);
+  process.stdout.write(\`Available tools: \${tools.map((t) => t.name).join(', ')}\\n\`);
+
+  // Example: fetch credentials for a provider
+  // const creds = await agent.credentialsFor('openai');
+  // const res = await creds.fetch('https://api.openai.com/v1/chat/completions', { ... });
+}
+
+main().catch((err) => {
+  process.stderr.write(\`Fatal: \${err instanceof Error ? err.message : String(err)}\\n\`);
+  process.exit(1);
+});
+`;
+}
+function agentTs(options) {
+  return `/**
+ * Agent identity and authentication setup.
+ */
+
+import { OpenAgent, type OpenAgentInstance } from '@openagentid/sdk';
+
+/** Configure the OpenAgent runtime. */
+OpenAgent.configure({
+  endpoints: {
+    oasResolver: process.env.OAS_RESOLVER_URL,
+    arsenalBroker: process.env.ARSENAL_BROKER_URL,
+    aegisVerifier: process.env.AEGIS_VERIFIER_URL,
+  },
+});
+
+/**
+ * Create a new agent identity.
+ *
+ * In production, replace the parent DID and scopes with your own.
+ */
+export async function createAgent(): Promise<OpenAgentInstance> {
+  const parentDid = process.env.OPENAGENT_PARENT_DID ?? 'did:oas:l1fe:hmr:alice';
+  const agentName = process.env.OPENAGENT_AGENT_NAME ?? '${options.projectName}';
+
+  return OpenAgent.createAgent({
+    parent: parentDid,
+    name: agentName,
+    scopes: ['openai:chat:completions', 'github:repo:read'],
+  });
+}
+`;
+}
+function toolsTs() {
+  return `/**
+ * Example MCP tools \u2014 define your agent's capabilities here.
+ */
+
+export interface Tool {
+  readonly name: string;
+  readonly description: string;
+  execute(input: Record<string, unknown>): Promise<unknown>;
+}
+
+/** Echo tool \u2014 returns the input as-is. Useful for testing. */
+const echoTool: Tool = {
+  name: 'echo',
+  description: 'Returns the input unchanged.',
+  async execute(input) {
+    return { echoed: input };
+  },
+};
+
+/** Timestamp tool \u2014 returns the current ISO timestamp. */
+const timestampTool: Tool = {
+  name: 'timestamp',
+  description: 'Returns the current UTC timestamp.',
+  async execute() {
+    return { timestamp: new Date().toISOString() };
+  },
+};
+
+export const tools: readonly Tool[] = [echoTool, timestampTool];
+`;
+}
+function readme(options) {
+  return `# ${options.projectName}
+
+An OpenAgent-powered agent application.
+
+## Setup
+
+\`\`\`bash
+npm install
+cp .env.example .env
+# Edit .env with your agent identity
+\`\`\`
+
+## Development
+
+\`\`\`bash
+npm run dev
+\`\`\`
+
+## Build & Run
+
+\`\`\`bash
+npm run build
+npm start
+\`\`\`
+
+## Configuration
+
+Set environment variables in \`.env\`:
+
+- \`OPENAGENT_PARENT_DID\` \u2014 Your human root DID
+- \`OPENAGENT_AGENT_NAME\` \u2014 Agent name
+- \`OAS_RESOLVER_URL\` \u2014 OAS identity resolver (optional for dev)
+- \`ARSENAL_BROKER_URL\` \u2014 Arsenal credential broker (optional for dev)
+- \`AEGIS_VERIFIER_URL\` \u2014 AEGIS verifier (optional for dev)
+
+## Learn More
+
+- [OpenAgent Docs](https://openagent.id/docs)
+- [OAS Specification](https://openagent.id/spec)
+`;
+}
+
+// src/templates/mcp-server.ts
+function generateMcpServerTemplate(options) {
+  return [
+    { path: "package.json", content: packageJson2(options) },
+    { path: "src/index.ts", content: indexTs2() },
+    { path: "src/server.ts", content: serverTs(options) },
+    { path: "src/tools/echo.ts", content: echoToolTs() },
+    { path: "src/tools/index.ts", content: toolsIndexTs() },
+    { path: "README.md", content: readme2(options) }
+  ];
+}
+function packageJson2(options) {
+  const deps = {
+    "@openagentid/sdk": "^0.1.0",
+    "@modelcontextprotocol/sdk": "^1.0.0"
+  };
+  if (options.bioagentic) {
+    deps["@openagentid/bioagentic"] = "^0.1.0";
+  }
+  if (options.fabrics) {
+    deps["@openagentid/fabrics"] = "^0.1.0";
+  }
+  return JSON.stringify(
+    {
+      name: options.projectName,
+      version: "0.1.0",
+      private: true,
+      type: "module",
+      scripts: {
+        build: "tsup src/index.ts --format esm --target node20",
+        start: "node dist/index.js",
+        dev: "tsx src/index.ts",
+        typecheck: "tsc --noEmit"
+      },
+      dependencies: deps,
+      devDependencies: {
+        "@types/node": "^20.11.30",
+        tsup: "^8.0.2",
+        tsx: "^4.7.0",
+        typescript: "^5.4.5"
+      }
+    },
+    null,
+    2
+  );
+}
+function indexTs2() {
+  return `/**
+ * Entry point \u2014 starts the MCP server.
+ */
+
+import { startServer } from './server.js';
+
+startServer().catch((err) => {
+  process.stderr.write(\`Fatal: \${err instanceof Error ? err.message : String(err)}\\n\`);
+  process.exit(1);
+});
+`;
+}
+function serverTs(options) {
+  return `/**
+ * MCP Server with OpenAgent authentication middleware.
+ *
+ * Authenticates incoming tool calls using the OpenAgent SDK before
+ * dispatching to tool handlers.
+ */
+
+import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
+import { OpenAgent, type AuthContext } from '@openagentid/sdk';
+import { tools } from './tools/index.js';
+
+const PORT = parseInt(process.env.PORT ?? '3200', 10);
+const HOST = process.env.HOST ?? '0.0.0.0';
+
+/** Configure OpenAgent runtime. */
+OpenAgent.configure({
+  endpoints: {
+    oasResolver: process.env.OAS_RESOLVER_URL,
+    arsenalBroker: process.env.ARSENAL_BROKER_URL,
+    aegisVerifier: process.env.AEGIS_VERIFIER_URL,
+  },
+});
+
+function sendJson(res: ServerResponse, body: unknown, status = 200): void {
+  const payload = JSON.stringify(body);
+  res.writeHead(status, {
+    'Content-Type': 'application/json',
+    'Content-Length': Buffer.byteLength(payload),
+  });
+  res.end(payload);
+}
+
+async function readBody(req: IncomingMessage): Promise<string> {
+  const chunks: Buffer[] = [];
+  for await (const chunk of req) {
+    chunks.push(typeof chunk === 'string' ? Buffer.from(chunk) : chunk);
+  }
+  return Buffer.concat(chunks).toString('utf-8');
+}
+
+/** Convert IncomingMessage to WHATWG Request. */
+function toRequest(req: IncomingMessage, body: string): Request {
+  const host = req.headers.host ?? \`\${HOST}:\${PORT}\`;
+  const url = \`http://\${host}\${req.url ?? '/'}\`;
+  const headers = new Headers();
+  for (const [key, value] of Object.entries(req.headers)) {
+    if (value !== undefined) {
+      headers.set(key, Array.isArray(value) ? value.join(', ') : value);
+    }
+  }
+  const method = req.method ?? 'GET';
+  const hasBody = method !== 'GET' && method !== 'HEAD' && body.length > 0;
+  return new Request(url, { method, headers, body: hasBody ? body : undefined });
+}
+
+/** Authenticate the request and return the auth context, or null. */
+async function authenticate(
+  req: IncomingMessage,
+  body: string,
+): Promise<AuthContext | null> {
+  const request = toRequest(req, body);
+  try {
+    return await OpenAgent.authenticate(request);
+  } catch {
+    return null;
+  }
+}
+
+interface McpRequest {
+  jsonrpc: '2.0';
+  id: string | number;
+  method: string;
+  params?: Record<string, unknown>;
+}
+
+async function handleMcpRequest(
+  mcpReq: McpRequest,
+  _authCtx: AuthContext,
+): Promise<unknown> {
+  if (mcpReq.method === 'tools/list') {
+    return {
+      jsonrpc: '2.0',
+      id: mcpReq.id,
+      result: {
+        tools: tools.map((t) => ({
+          name: t.name,
+          description: t.description,
+          inputSchema: t.inputSchema,
+        })),
+      },
+    };
+  }
+
+  if (mcpReq.method === 'tools/call') {
+    const toolName = (mcpReq.params?.name as string) ?? '';
+    const args = (mcpReq.params?.arguments as Record<string, unknown>) ?? {};
+    const tool = tools.find((t) => t.name === toolName);
+
+    if (!tool) {
+      return {
+        jsonrpc: '2.0',
+        id: mcpReq.id,
+        error: { code: -32601, message: \`Tool not found: \${toolName}\` },
+      };
+    }
+
+    const result = await tool.execute(args);
+    return {
+      jsonrpc: '2.0',
+      id: mcpReq.id,
+      result: { content: [{ type: 'text', text: JSON.stringify(result) }] },
+    };
+  }
+
+  return {
+    jsonrpc: '2.0',
+    id: mcpReq.id,
+    error: { code: -32601, message: \`Method not found: \${mcpReq.method}\` },
+  };
+}
+
+export async function startServer(): Promise<void> {
+  const server = createServer(async (req, res) => {
+    const url = new URL(req.url ?? '/', \`http://\${req.headers.host ?? 'localhost'}\`);
+
+    if (url.pathname === '/health') {
+      sendJson(res, { status: 'ok', service: '${options.projectName}' });
+      return;
+    }
+
+    if (url.pathname === '/.well-known/openagent/agent.json') {
+      sendJson(res, {
+        did: \`did:oas:l1fe:agent:\${process.env.OPENAGENT_AGENT_NAME ?? '${options.projectName}'}\`,
+        name: process.env.OPENAGENT_AGENT_NAME ?? '${options.projectName}',
+        parent: process.env.OPENAGENT_PARENT_DID ?? 'did:oas:l1fe:hmr:unconfigured',
+        capabilities: { tools: tools.map((t) => t.name) },
+      });
+      return;
+    }
+
+    if (req.method !== 'POST') {
+      sendJson(res, { error: 'Method not allowed' }, 405);
+      return;
+    }
+
+    const body = await readBody(req);
+    const authCtx = await authenticate(req, body);
+
+    if (!authCtx) {
+      sendJson(res, { error: 'Authentication required' }, 401);
+      return;
+    }
+
+    try {
+      const mcpReq = JSON.parse(body) as McpRequest;
+      const result = await handleMcpRequest(mcpReq, authCtx);
+      sendJson(res, result);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : 'Internal error';
+      sendJson(res, { jsonrpc: '2.0', id: null, error: { code: -32700, message } }, 400);
+    }
+  });
+
+  server.listen(PORT, HOST, () => {
+    process.stdout.write(\`MCP server listening on http://\${HOST}:\${PORT}\\n\`);
+    process.stdout.write(\`Tools: \${tools.map((t) => t.name).join(', ')}\\n\`);
+  });
+}
+`;
+}
+function echoToolTs() {
+  return `/**
+ * Echo tool \u2014 returns the input unchanged. Useful for testing.
+ */
+
+import type { McpTool } from './index.js';
+
+export const echoTool: McpTool = {
+  name: 'echo',
+  description: 'Returns the input unchanged.',
+  inputSchema: {
+    type: 'object',
+    properties: {
+      message: { type: 'string', description: 'Message to echo back.' },
+    },
+    required: ['message'],
+  },
+  async execute(input) {
+    return { echoed: input };
+  },
+};
+`;
+}
+function toolsIndexTs() {
+  return `/**
+ * Tool registry \u2014 add your tools here.
+ */
+
+import { echoTool } from './echo.js';
+
+export interface McpTool {
+  readonly name: string;
+  readonly description: string;
+  readonly inputSchema: Record<string, unknown>;
+  execute(input: Record<string, unknown>): Promise<unknown>;
+}
+
+export const tools: readonly McpTool[] = [echoTool];
+`;
+}
+function readme2(options) {
+  return `# ${options.projectName}
+
+An MCP server with OpenAgent authentication.
+
+## Setup
+
+\`\`\`bash
+npm install
+cp .env.example .env
+\`\`\`
+
+## Development
+
+\`\`\`bash
+npm run dev
+\`\`\`
+
+## Adding Tools
+
+1. Create a new file in \`src/tools/\`
+2. Export an \`McpTool\` object
+3. Add it to the \`tools\` array in \`src/tools/index.ts\`
+
+## Learn More
+
+- [OpenAgent Docs](https://openagent.id/docs)
+- [MCP Specification](https://modelcontextprotocol.io)
+`;
+}
+
+// src/templates/web-dashboard.ts
+function generateWebDashboardTemplate(options) {
+  return [
+    { path: "package.json", content: packageJson3(options) },
+    { path: "next.config.ts", content: nextConfig() },
+    { path: "src/app/layout.tsx", content: layoutTsx(options) },
+    { path: "src/app/page.tsx", content: pageTsx(options) },
+    { path: "src/app/api/auth/route.ts", content: authRoute() },
+    { path: "src/app/api/agents/route.ts", content: agentsRoute() },
+    { path: "src/lib/openagent.ts", content: openagentLib() },
+    { path: "src/lib/auth.ts", content: authLib(options) },
+    { path: "README.md", content: readme3(options) }
+  ];
+}
+function packageJson3(options) {
+  const deps = {
+    "@openagentid/sdk": "^0.1.0",
+    next: "^15.0.0",
+    react: "^19.0.0",
+    "react-dom": "^19.0.0"
+  };
+  if (options.bioagentic) {
+    deps["@openagentid/bioagentic"] = "^0.1.0";
+  }
+  return JSON.stringify(
+    {
+      name: options.projectName,
+      version: "0.1.0",
+      private: true,
+      scripts: {
+        dev: "next dev",
+        build: "next build",
+        start: "next start",
+        typecheck: "tsc --noEmit"
+      },
+      dependencies: deps,
+      devDependencies: {
+        "@types/node": "^20.11.30",
+        "@types/react": "^19.0.0",
+        "@types/react-dom": "^19.0.0",
+        typescript: "^5.4.5"
+      }
+    },
+    null,
+    2
+  );
+}
+function nextConfig() {
+  return `import type { NextConfig } from 'next';
+
+const config: NextConfig = {
+  reactStrictMode: true,
+  experimental: {
+    serverActions: {
+      bodySizeLimit: '2mb',
+    },
+  },
+};
+
+export default config;
+`;
+}
+function layoutTsx(options) {
+  return `import type { Metadata } from 'next';
+import type { ReactNode } from 'react';
+
+export const metadata: Metadata = {
+  title: '${options.projectName} \u2014 OpenAgent Dashboard',
+  description: 'Agent management dashboard powered by OpenAgent.',
+};
+
+export default function RootLayout({ children }: { children: ReactNode }) {
+  return (
+    <html lang="en">
+      <body style={{ fontFamily: 'system-ui, sans-serif', margin: 0, padding: '2rem' }}>
+        <header style={{ borderBottom: '1px solid #eee', paddingBottom: '1rem', marginBottom: '2rem' }}>
+          <h1 style={{ fontSize: '1.5rem', margin: 0 }}>
+            ${options.projectName}
+          </h1>
+          <p style={{ color: '#666', margin: '0.25rem 0 0' }}>OpenAgent Dashboard</p>
+        </header>
+        <main>{children}</main>
+      </body>
+    </html>
+  );
+}
+`;
+}
+function pageTsx(options) {
+  return `/**
+ * Dashboard home \u2014 shows agent status and recent activity.
+ */
+
+export default async function HomePage() {
+  const agentName = process.env.OPENAGENT_AGENT_NAME ?? '${options.projectName}';
+  const parentDid = process.env.OPENAGENT_PARENT_DID ?? 'did:oas:l1fe:hmr:unconfigured';
+
+  return (
+    <div>
+      <section style={{ marginBottom: '2rem' }}>
+        <h2>Agent Status</h2>
+        <table style={{ borderCollapse: 'collapse', width: '100%', maxWidth: '600px' }}>
+          <tbody>
+            <tr>
+              <td style={{ padding: '0.5rem', fontWeight: 'bold' }}>Name</td>
+              <td style={{ padding: '0.5rem' }}>{agentName}</td>
+            </tr>
+            <tr>
+              <td style={{ padding: '0.5rem', fontWeight: 'bold' }}>Parent DID</td>
+              <td style={{ padding: '0.5rem', fontFamily: 'monospace', fontSize: '0.85rem' }}>
+                {parentDid}
+              </td>
+            </tr>
+            <tr>
+              <td style={{ padding: '0.5rem', fontWeight: 'bold' }}>Status</td>
+              <td style={{ padding: '0.5rem', color: '#22c55e' }}>Active</td>
+            </tr>
+          </tbody>
+        </table>
+      </section>
+
+      <section>
+        <h2>API Endpoints</h2>
+        <ul style={{ lineHeight: 2 }}>
+          <li>
+            <code>GET /api/agents</code> \u2014 List managed agents
+          </li>
+          <li>
+            <code>POST /api/auth</code> \u2014 Authenticate agent request
+          </li>
+          <li>
+            <code>GET /.well-known/openagent/agent.json</code> \u2014 Agent discovery
+          </li>
+        </ul>
+      </section>
+    </div>
+  );
+}
+`;
+}
+function authRoute() {
+  return `/**
+ * POST /api/auth \u2014 Authenticate an incoming agent request.
+ */
+
+import { NextResponse, type NextRequest } from 'next/server';
+import { getRuntime } from '@/lib/openagent';
+
+export async function POST(request: NextRequest): Promise<NextResponse> {
+  const runtime = getRuntime();
+
+  try {
+    const ctx = await runtime.authenticate(request as unknown as Request);
+    return NextResponse.json({
+      success: true,
+      data: {
+        did: ctx.did,
+        root: ctx.root,
+        scopes: ctx.scopes,
+        expiresAt: ctx.expiresAt,
+      },
+    });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Authentication failed';
+    return NextResponse.json({ success: false, error: message }, { status: 401 });
+  }
+}
+`;
+}
+function agentsRoute() {
+  return `/**
+ * GET /api/agents \u2014 List managed agents.
+ * POST /api/agents \u2014 Create a new agent.
+ */
+
+import { NextResponse, type NextRequest } from 'next/server';
+import { getRuntime } from '@/lib/openagent';
+
+/**
+ * In-memory agent registry for demonstration.
+ * Replace with a persistent store in production.
+ */
+const agents: Array<{ did: string; name: string; createdAt: string }> = [];
+
+export async function GET(): Promise<NextResponse> {
+  return NextResponse.json({ success: true, data: agents });
+}
+
+export async function POST(request: NextRequest): Promise<NextResponse> {
+  const runtime = getRuntime();
+
+  try {
+    const body = (await request.json()) as { name: string; scopes: string[] };
+
+    if (!body.name || !body.scopes?.length) {
+      return NextResponse.json(
+        { success: false, error: 'name and scopes are required' },
+        { status: 400 },
+      );
+    }
+
+    const parentDid = process.env.OPENAGENT_PARENT_DID ?? 'did:oas:l1fe:hmr:unconfigured';
+    const agent = await runtime.createAgent({
+      parent: parentDid,
+      name: body.name,
+      scopes: body.scopes,
+    });
+
+    const record = {
+      did: agent.did,
+      name: body.name,
+      createdAt: new Date().toISOString(),
+    };
+    agents.push(record);
+
+    return NextResponse.json({ success: true, data: record }, { status: 201 });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Agent creation failed';
+    return NextResponse.json({ success: false, error: message }, { status: 500 });
+  }
+}
+`;
+}
+function openagentLib() {
+  return `/**
+ * OpenAgent SDK setup \u2014 shared runtime instance.
+ */
+
+import { OpenAgent, type OpenAgentRuntime } from '@openagentid/sdk';
+
+let runtime: OpenAgentRuntime | undefined;
+
+export function getRuntime(): OpenAgentRuntime {
+  if (!runtime) {
+    runtime = OpenAgent.configure({
+      endpoints: {
+        oasResolver: process.env.OAS_RESOLVER_URL,
+        arsenalBroker: process.env.ARSENAL_BROKER_URL,
+        aegisVerifier: process.env.AEGIS_VERIFIER_URL,
+      },
+    });
+  }
+  return runtime;
+}
+`;
+}
+function authLib(options) {
+  const oidcSetup = options.bridge === "oidc" ? `
+/**
+ * OIDC configuration for human authentication.
+ * Set OIDC_* env vars to enable the bridge.
+ */
+export const oidcConfig = {
+  issuerUrl: process.env.OIDC_ISSUER_URL,
+  clientId: process.env.OIDC_CLIENT_ID,
+  clientSecret: process.env.OIDC_CLIENT_SECRET,
+  redirectUri: process.env.OIDC_REDIRECT_URI ?? 'http://localhost:3000/api/auth/callback',
+} as const;
+
+export function isOidcConfigured(): boolean {
+  return Boolean(oidcConfig.issuerUrl && oidcConfig.clientId);
+}
+` : "";
+  return `/**
+ * Authentication configuration \u2014 human + agent auth.
+ */
+
+import { getRuntime } from './openagent.js';
+
+/**
+ * Authenticate an incoming request. Returns the agent's auth context
+ * or null if authentication fails.
+ */
+export async function authenticateRequest(request: Request) {
+  const runtime = getRuntime();
+  try {
+    return await runtime.authenticate(request);
+  } catch {
+    return null;
+  }
+}
+${oidcSetup}`;
+}
+function readme3(options) {
+  return `# ${options.projectName}
+
+A Next.js dashboard for managing OpenAgent-powered agents.
+
+## Setup
+
+\`\`\`bash
+npm install
+cp .env.example .env
+\`\`\`
+
+## Development
+
+\`\`\`bash
+npm run dev
+\`\`\`
+
+Open [http://localhost:3000](http://localhost:3000).
+
+## API Routes
+
+- \`GET /api/agents\` \u2014 List agents
+- \`POST /api/agents\` \u2014 Create agent
+- \`POST /api/auth\` \u2014 Authenticate request
+
+## Learn More
+
+- [OpenAgent Docs](https://openagent.id/docs)
+- [Next.js Docs](https://nextjs.org/docs)
+`;
+}
+
+// src/templates/full-stack.ts
+function generateFullStackTemplate(options) {
+  return [
+    { path: "package.json", content: packageJson4(options) },
+    { path: "next.config.ts", content: nextConfig2() },
+    { path: "src/app/layout.tsx", content: layoutTsx2(options) },
+    { path: "src/app/page.tsx", content: pageTsx2(options) },
+    { path: "src/app/api/auth/route.ts", content: authRoute2() },
+    { path: "src/app/api/agents/route.ts", content: agentsRoute2() },
+    { path: "src/lib/openagent.ts", content: openagentLib2() },
+    { path: "src/lib/auth.ts", content: authLib2(options) },
+    { path: "src/tools/echo.ts", content: echoToolTs2() },
+    { path: "src/tools/index.ts", content: toolsIndexTs2() },
+    { path: "README.md", content: readme4(options) }
+  ];
+}
+function packageJson4(options) {
+  const deps = {
+    "@openagentid/sdk": "^0.1.0",
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    next: "^15.0.0",
+    react: "^19.0.0",
+    "react-dom": "^19.0.0"
+  };
+  if (options.bioagentic) {
+    deps["@openagentid/bioagentic"] = "^0.1.0";
+  }
+  if (options.fabrics) {
+    deps["@openagentid/fabrics"] = "^0.1.0";
+  }
+  return JSON.stringify(
+    {
+      name: options.projectName,
+      version: "0.1.0",
+      private: true,
+      scripts: {
+        dev: "next dev",
+        build: "next build",
+        start: "next start",
+        typecheck: "tsc --noEmit"
+      },
+      dependencies: deps,
+      devDependencies: {
+        "@types/node": "^20.11.30",
+        "@types/react": "^19.0.0",
+        "@types/react-dom": "^19.0.0",
+        typescript: "^5.4.5"
+      }
+    },
+    null,
+    2
+  );
+}
+function nextConfig2() {
+  return `import type { NextConfig } from 'next';
+
+const config: NextConfig = {
+  reactStrictMode: true,
+  experimental: {
+    serverActions: {
+      bodySizeLimit: '2mb',
+    },
+  },
+};
+
+export default config;
+`;
+}
+function layoutTsx2(options) {
+  return `import type { Metadata } from 'next';
+import type { ReactNode } from 'react';
+
+export const metadata: Metadata = {
+  title: '${options.projectName} \u2014 OpenAgent Full Stack',
+  description: 'Full-stack agent platform powered by OpenAgent.',
+};
+
+export default function RootLayout({ children }: { children: ReactNode }) {
+  return (
+    <html lang="en">
+      <body style={{ fontFamily: 'system-ui, sans-serif', margin: 0, padding: '2rem' }}>
+        <header style={{ borderBottom: '1px solid #eee', paddingBottom: '1rem', marginBottom: '2rem' }}>
+          <h1 style={{ fontSize: '1.5rem', margin: 0 }}>
+            ${options.projectName}
+          </h1>
+          <p style={{ color: '#666', margin: '0.25rem 0 0' }}>OpenAgent Full Stack</p>
+        </header>
+        <main>{children}</main>
+      </body>
+    </html>
+  );
+}
+`;
+}
+function pageTsx2(options) {
+  return `/**
+ * Dashboard home \u2014 agent status, tools, and management.
+ */
+
+import { tools } from '@/tools';
+
+export default async function HomePage() {
+  const agentName = process.env.OPENAGENT_AGENT_NAME ?? '${options.projectName}';
+  const parentDid = process.env.OPENAGENT_PARENT_DID ?? 'did:oas:l1fe:hmr:unconfigured';
+
+  return (
+    <div>
+      <section style={{ marginBottom: '2rem' }}>
+        <h2>Agent Status</h2>
+        <table style={{ borderCollapse: 'collapse', width: '100%', maxWidth: '600px' }}>
+          <tbody>
+            <tr>
+              <td style={{ padding: '0.5rem', fontWeight: 'bold' }}>Name</td>
+              <td style={{ padding: '0.5rem' }}>{agentName}</td>
+            </tr>
+            <tr>
+              <td style={{ padding: '0.5rem', fontWeight: 'bold' }}>Parent DID</td>
+              <td style={{ padding: '0.5rem', fontFamily: 'monospace', fontSize: '0.85rem' }}>
+                {parentDid}
+              </td>
+            </tr>
+            <tr>
+              <td style={{ padding: '0.5rem', fontWeight: 'bold' }}>Status</td>
+              <td style={{ padding: '0.5rem', color: '#22c55e' }}>Active</td>
+            </tr>
+          </tbody>
+        </table>
+      </section>
+
+      <section style={{ marginBottom: '2rem' }}>
+        <h2>Available Tools</h2>
+        <ul style={{ lineHeight: 2 }}>
+          {tools.map((tool) => (
+            <li key={tool.name}>
+              <code>{tool.name}</code> \u2014 {tool.description}
+            </li>
+          ))}
+        </ul>
+      </section>
+
+      <section>
+        <h2>API Endpoints</h2>
+        <ul style={{ lineHeight: 2 }}>
+          <li><code>GET /api/agents</code> \u2014 List managed agents</li>
+          <li><code>POST /api/agents</code> \u2014 Create a new agent</li>
+          <li><code>POST /api/auth</code> \u2014 Authenticate request</li>
+        </ul>
+      </section>
+    </div>
+  );
+}
+`;
+}
+function authRoute2() {
+  return `/**
+ * POST /api/auth \u2014 Authenticate an incoming agent request.
+ */
+
+import { NextResponse, type NextRequest } from 'next/server';
+import { getRuntime } from '@/lib/openagent';
+
+export async function POST(request: NextRequest): Promise<NextResponse> {
+  const runtime = getRuntime();
+
+  try {
+    const ctx = await runtime.authenticate(request as unknown as Request);
+    return NextResponse.json({
+      success: true,
+      data: {
+        did: ctx.did,
+        root: ctx.root,
+        scopes: ctx.scopes,
+        expiresAt: ctx.expiresAt,
+      },
+    });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Authentication failed';
+    return NextResponse.json({ success: false, error: message }, { status: 401 });
+  }
+}
+`;
+}
+function agentsRoute2() {
+  return `/**
+ * GET /api/agents \u2014 List managed agents.
+ * POST /api/agents \u2014 Create a new agent.
+ */
+
+import { NextResponse, type NextRequest } from 'next/server';
+import { getRuntime } from '@/lib/openagent';
+
+const agents: Array<{ did: string; name: string; createdAt: string }> = [];
+
+export async function GET(): Promise<NextResponse> {
+  return NextResponse.json({ success: true, data: agents });
+}
+
+export async function POST(request: NextRequest): Promise<NextResponse> {
+  const runtime = getRuntime();
+
+  try {
+    const body = (await request.json()) as { name: string; scopes: string[] };
+
+    if (!body.name || !body.scopes?.length) {
+      return NextResponse.json(
+        { success: false, error: 'name and scopes are required' },
+        { status: 400 },
+      );
+    }
+
+    const parentDid = process.env.OPENAGENT_PARENT_DID ?? 'did:oas:l1fe:hmr:unconfigured';
+    const agent = await runtime.createAgent({
+      parent: parentDid,
+      name: body.name,
+      scopes: body.scopes,
+    });
+
+    const record = {
+      did: agent.did,
+      name: body.name,
+      createdAt: new Date().toISOString(),
+    };
+    agents.push(record);
+
+    return NextResponse.json({ success: true, data: record }, { status: 201 });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Agent creation failed';
+    return NextResponse.json({ success: false, error: message }, { status: 500 });
+  }
+}
+`;
+}
+function openagentLib2() {
+  return `/**
+ * OpenAgent SDK setup \u2014 shared runtime instance.
+ */
+
+import { OpenAgent, type OpenAgentRuntime } from '@openagentid/sdk';
+
+let runtime: OpenAgentRuntime | undefined;
+
+export function getRuntime(): OpenAgentRuntime {
+  if (!runtime) {
+    runtime = OpenAgent.configure({
+      endpoints: {
+        oasResolver: process.env.OAS_RESOLVER_URL,
+        arsenalBroker: process.env.ARSENAL_BROKER_URL,
+        aegisVerifier: process.env.AEGIS_VERIFIER_URL,
+      },
+    });
+  }
+  return runtime;
+}
+`;
+}
+function authLib2(options) {
+  const oidcPart = options.bridge === "oidc" ? `
+
+export const oidcConfig = {
+  issuerUrl: process.env.OIDC_ISSUER_URL,
+  clientId: process.env.OIDC_CLIENT_ID,
+  clientSecret: process.env.OIDC_CLIENT_SECRET,
+  redirectUri: process.env.OIDC_REDIRECT_URI ?? 'http://localhost:3000/api/auth/callback',
+} as const;
+
+export function isOidcConfigured(): boolean {
+  return Boolean(oidcConfig.issuerUrl && oidcConfig.clientId);
+}
+` : "";
+  return `/**
+ * Authentication configuration \u2014 human + agent auth.
+ */
+
+import { getRuntime } from './openagent.js';
+
+export async function authenticateRequest(request: Request) {
+  const runtime = getRuntime();
+  try {
+    return await runtime.authenticate(request);
+  } catch {
+    return null;
+  }
+}
+${oidcPart}`;
+}
+function echoToolTs2() {
+  return `/**
+ * Echo tool \u2014 returns the input unchanged. Useful for testing.
+ */
+
+import type { McpTool } from './index.js';
+
+export const echoTool: McpTool = {
+  name: 'echo',
+  description: 'Returns the input unchanged.',
+  inputSchema: {
+    type: 'object',
+    properties: {
+      message: { type: 'string', description: 'Message to echo back.' },
+    },
+    required: ['message'],
+  },
+  async execute(input) {
+    return { echoed: input };
+  },
+};
+`;
+}
+function toolsIndexTs2() {
+  return `/**
+ * Tool registry \u2014 add your tools here.
+ */
+
+import { echoTool } from './echo.js';
+
+export interface McpTool {
+  readonly name: string;
+  readonly description: string;
+  readonly inputSchema: Record<string, unknown>;
+  execute(input: Record<string, unknown>): Promise<unknown>;
+}
+
+export const tools: readonly McpTool[] = [echoTool];
+`;
+}
+function readme4(options) {
+  return `# ${options.projectName}
+
+A full-stack OpenAgent application: agent identity, MCP tools, and web dashboard.
+
+## Setup
+
+\`\`\`bash
+npm install
+cp .env.example .env
+\`\`\`
+
+## Development
+
+\`\`\`bash
+npm run dev
+\`\`\`
+
+Open [http://localhost:3000](http://localhost:3000).
+
+## Structure
+
+- \`src/app/\` \u2014 Next.js app directory (dashboard + API routes)
+- \`src/lib/\` \u2014 OpenAgent SDK setup and auth configuration
+- \`src/tools/\` \u2014 MCP tool implementations
+
+## Adding Tools
+
+1. Create a new file in \`src/tools/\`
+2. Export an \`McpTool\` object
+3. Add it to the \`tools\` array in \`src/tools/index.ts\`
+
+## Learn More
+
+- [OpenAgent Docs](https://openagent.id/docs)
+- [MCP Specification](https://modelcontextprotocol.io)
+- [Next.js Docs](https://nextjs.org/docs)
+`;
+}
+
+// src/templates/shared.ts
+function generateSharedFiles(options) {
+  return [
+    { path: "tsconfig.json", content: tsconfig(options) },
+    { path: ".gitignore", content: gitignore() },
+    { path: ".env.example", content: envExample(options) }
+  ];
+}
+function tsconfig(options) {
+  const jsx = options.template === "web-dashboard" || options.template === "full-stack";
+  return JSON.stringify(
+    {
+      compilerOptions: {
+        target: "ES2022",
+        module: "ESNext",
+        moduleResolution: "bundler",
+        lib: jsx ? ["ES2022", "DOM", "DOM.Iterable"] : ["ES2022"],
+        strict: true,
+        noEmit: true,
+        skipLibCheck: true,
+        forceConsistentCasingInFileNames: true,
+        isolatedModules: true,
+        resolveJsonModule: true,
+        esModuleInterop: true,
+        ...jsx ? { jsx: "preserve" } : {},
+        ...jsx ? { plugins: [{ name: "next" }] } : {},
+        ...jsx ? { paths: { "@/*": ["./src/*"] } } : {}
+      },
+      include: jsx ? ["src/**/*.ts", "src/**/*.tsx", ".next/types/**/*.ts"] : ["src/**/*.ts"],
+      exclude: ["node_modules", "dist"]
+    },
+    null,
+    2
+  );
+}
+function gitignore() {
+  return `node_modules/
+dist/
+.next/
+.env
+.env.local
+*.tsbuildinfo
+coverage/
+`;
+}
+function envExample(options) {
+  const lines = [
+    "# OpenAgent Configuration",
+    "OPENAGENT_PARENT_DID=did:oas:l1fe:hmr:your-human-root",
+    "OPENAGENT_AGENT_NAME=my-agent",
+    "",
+    "# Endpoints (optional \u2014 SDK uses stubs when omitted)",
+    "# OAS_RESOLVER_URL=https://resolver.openagent.id",
+    "# ARSENAL_BROKER_URL=https://broker.arsenal.id",
+    "# AEGIS_VERIFIER_URL=https://verify.aegis.id"
+  ];
+  if (options.bridge === "oidc") {
+    lines.push(
+      "",
+      "# OIDC Bridge",
+      "# OIDC_ISSUER_URL=https://your-idp.example.com",
+      "# OIDC_CLIENT_ID=your-client-id",
+      "# OIDC_CLIENT_SECRET=your-client-secret"
+    );
+  }
+  if (options.bioagentic) {
+    lines.push("", "# Bioagentic", "# BIOAGENTIC_THRESHOLD=0.8");
+  }
+  lines.push("");
+  return lines.join("\n");
+}
+
+// src/scaffold.ts
+async function scaffold(options) {
+  const s = spinner();
+  s.start("Scaffolding project...");
+  const root = join(process.cwd(), options.projectName);
+  if (existsSync(root)) {
+    s.stop("Directory already exists.");
+    throw new Error(`Directory "${options.projectName}" already exists.`);
+  }
+  const files = [];
+  switch (options.template) {
+    case "agent":
+      files.push(...generateAgentTemplate(options));
+      break;
+    case "mcp-server":
+      files.push(...generateMcpServerTemplate(options));
+      break;
+    case "web-dashboard":
+      files.push(...generateWebDashboardTemplate(options));
+      break;
+    case "full-stack":
+      files.push(...generateFullStackTemplate(options));
+      break;
+  }
+  files.push(...generateSharedFiles(options));
+  for (const file of files) {
+    const fullPath = join(root, file.path);
+    const dir = dirname(fullPath);
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(fullPath, file.content, "utf-8");
+  }
+  s.stop(`Created ${files.length} files in ${options.projectName}/`);
+}
+
+// src/index.ts
+async function main() {
+  const args = process.argv.slice(2);
+  const projectName = args.find((arg) => !arg.startsWith("-"));
+  intro(pc.bgCyan(pc.black(" create-openagent ")));
+  let options;
+  try {
+    options = await collectOptions(projectName, args);
+  } catch {
+    outro(pc.red("Cancelled."));
+    process.exit(1);
+  }
+  if (isCancel2(options)) {
+    outro(pc.red("Cancelled."));
+    process.exit(1);
+  }
+  try {
+    await scaffold(options);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Unknown error";
+    outro(pc.red(`Failed to scaffold project: ${message}`));
+    process.exit(1);
+  }
+  outro(pc.green("Project created successfully!"));
+  const relativePath = options.projectName;
+  process.stdout.write("\n");
+  process.stdout.write(pc.bold("Next steps:\n"));
+  process.stdout.write(`  cd ${relativePath}
+`);
+  process.stdout.write("  npm install\n");
+  if (options.template === "web-dashboard" || options.template === "full-stack") {
+    process.stdout.write("  npm run dev\n");
+  } else {
+    process.stdout.write("  npm run build\n");
+    process.stdout.write("  npm start\n");
+  }
+  process.stdout.write("\n");
+  process.stdout.write(pc.dim(`Docs: https://openagent.id/docs
+`));
+}
+main().catch((err) => {
+  process.stderr.write(`Fatal: ${err instanceof Error ? err.message : String(err)}
+`);
+  process.exit(1);
+});