vibeiao 0.1.8 → 0.1.10

package/package.json

@@ -2,7 +2,7 @@
   "name": "vibeiao",
   "private": false,
   "type": "module",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "VIBEIAO CLI for agent onboarding and multisig revenue setup.",
   "bin": {
     "vibeiao": "src/index.js"
@@ -18,7 +18,7 @@
     "@coral-xyz/anchor": "^0.30.1",
     "@solana/web3.js": "^1.98.0",
     "@sqds/sdk": "^2.0.4",
-    "@vibeiao/sdk": "^0.1.37",
+    "@vibeiao/sdk": "workspace:*",
     "bn.js": "^5.2.1",
     "bs58": "^6.0.0",
     "tweetnacl": "^1.0.3"

package/src/index.js

@@ -12,7 +12,17 @@ import Squads from '@sqds/sdk';
 import bs58 from 'bs58';
 import nacl from 'tweetnacl';
 import BN from 'bn.js';
-import { createTreasuryPolicy, validateTreasuryPolicy, evaluateTopupRequest } from '@vibeiao/sdk';
+import {
+  createTreasuryPolicy,
+  validateTreasuryPolicy,
+  evaluateTopupRequest,
+} from '@vibeiao/sdk';
+import { formatOnboardedSurvivalTime } from '@vibeiao/sdk/social-profile';
+import {
+  createAgentBuilderProfile,
+  createPrivacyPolicy,
+  exchangeAgentInfo,
+} from '@vibeiao/sdk/social-protocol';
 
 const DEFAULT_API_BASE = 'https://api.vibeiao.com';
 const DEFAULT_RPC = 'https://api.mainnet-beta.solana.com';
@@ -34,6 +44,8 @@ const LISTING_NAME_MAX_LENGTH = 64;
 const LISTING_TAGLINE_MAX_LENGTH = 160;
 const LISTING_NAME_RECOMMENDED_MAX = 32;
 const LISTING_TAGLINE_RECOMMENDED_MAX = 90;
+const SOCIAL_INTENT_NOTE_MIN_LEN = 12;
+const SOCIAL_INTENT_NOTE_MAX_LEN = 1200;
 const HUMAN_LISTING_CATEGORIES = ['SaaS', 'Games'];
 const DEFAULT_HUMAN_PRODUCT_URL = 'https://vibeiao.com';
 const CONTROL_CHAR_PATTERN = /[\u0000-\u001f\u007f]/;
@@ -121,6 +133,7 @@ const compareVersions = (left, right) => {
   return comparePrerelease(l.prerelease, r.prerelease);
 };
 
+
 const normalizeBooleanEnv = (value) => {
   if (value === undefined || value === null) return false;
   const normalized = String(value).trim().toLowerCase();
@@ -534,13 +547,20 @@ const resolveContentType = (filePath) => {
   const ext = path.extname(filePath).toLowerCase();
   switch (ext) {
     case '.html':
-      return 'text/html';
+      return 'text/html; charset=utf-8';
     case '.js':
-      return 'text/javascript';
+    case '.mjs':
+    case '.cjs':
+      return 'application/javascript; charset=utf-8';
     case '.css':
-      return 'text/css';
+      return 'text/css; charset=utf-8';
     case '.json':
-      return 'application/json';
+    case '.map':
+      return 'application/json; charset=utf-8';
+    case '.txt':
+      return 'text/plain; charset=utf-8';
+    case '.wasm':
+      return 'application/wasm';
     case '.svg':
       return 'image/svg+xml';
     case '.png':
@@ -554,8 +574,6 @@ const resolveContentType = (filePath) => {
       return 'image/gif';
     case '.ico':
       return 'image/x-icon';
-    case '.map':
-      return 'application/json';
     default:
       return 'application/octet-stream';
   }
@@ -568,6 +586,7 @@ const uploadSignedFile = async (signedUrl, absPath, contentType) => {
     headers: {
       'content-type': contentType,
       'cache-control': 'max-age=3600',
+      'x-upsert': 'true',
     },
     body,
   });
@@ -748,6 +767,72 @@ const buildQuery = (params) => {
   return `?${query}`;
 };
 
+const stableStringify = (value) => {
+  if (value === null || typeof value !== 'object') return JSON.stringify(value);
+  if (Array.isArray(value)) return `[${value.map((entry) => stableStringify(entry)).join(',')}]`;
+  const entries = Object.entries(value).sort(([left], [right]) => left.localeCompare(right));
+  return `{${entries.map(([key, entry]) => `${JSON.stringify(key)}:${stableStringify(entry)}`).join(',')}}`;
+};
+
+const buildSocialAuthMessage = (action, agentId, context, timestamp) => {
+  const contextHash = crypto
+    .createHash('sha256')
+    .update(stableStringify(context))
+    .digest('hex')
+    .slice(0, 32);
+  return `VIBEIAO-SOCIAL:${action}:${agentId}:${contextHash}:${timestamp}`;
+};
+
+const signSocialAuth = (flags, { agentId, action, context }) => {
+  if (!agentId) throw new Error('missing_agent_id');
+  const keypairInput = flags.keypair || process.env.VIBEIAO_KEYPAIR || DEFAULT_KEYPAIR_PATH;
+  const keypair = loadKeypair(keypairInput);
+  if (!keypair) throw new Error('missing_keypair');
+  const timestamp = Date.now();
+  const message = buildSocialAuthMessage(action, agentId, context, timestamp);
+  const signature = bs58.encode(
+    nacl.sign.detached(new TextEncoder().encode(message), keypair.secretKey)
+  );
+  return {
+    wallet: keypair.publicKey.toBase58(),
+    signature,
+    timestamp,
+  };
+};
+
+const normalizeSocialText = (value) => String(value || '').replace(/\s+/g, ' ').trim();
+
+const normalizePurpose = (value) => normalizeSocialText(value);
+
+const hashSocialValue = (value) => (
+  `h${crypto.createHash('sha256').update(String(value || '')).digest('hex').slice(0, 16)}`
+);
+
+const computePurposeHash = (purpose) => hashSocialValue(normalizePurpose(purpose));
+
+const computeIntentAlignmentHash = ({
+  proposalType,
+  channelId,
+  purposeVersion,
+  purposeHash,
+  targetAgentId,
+  intentAlignmentNote,
+  proposedPurpose,
+}) => hashSocialValue(stableStringify({
+  proposalType,
+  channelId,
+  purposeVersion,
+  purposeHash,
+  targetAgentId,
+  intentAlignmentNote: normalizeSocialText(intentAlignmentNote),
+  proposedPurpose: proposedPurpose ? normalizePurpose(proposedPurpose) : null,
+}));
+
+const fetchSocialGroupInfo = async (apiBase, channelId) => {
+  const payload = await fetchJson(`${apiBase}/v1/social/groups/${encodeURIComponent(channelId)}`);
+  return payload?.data || null;
+};
+
 const ask = async (rl, label, fallback) => {
   const suffix = fallback !== undefined && fallback !== null ? ` (${fallback})` : '';
   const answer = (await rl.question(`${label}${suffix}: `)).trim();
@@ -861,9 +946,13 @@ const buildListingInput = async (flags) => {
     );
     const endpointUrl =
       flags.endpoint || (await ask(rl, 'Endpoint URL', listingType === 'agent' ? '' : ''));
-    const manifestLabel =
-      listingType === 'agent' ? 'Manifest URL (required)' : 'Manifest URL (optional)';
-    const manifestUrl = flags.manifest || (await ask(rl, manifestLabel, ''));
+    if (listingType === 'human' && flags.manifest) {
+      console.warn('⚠️  Human listing ignores --manifest. Manifest is agent-only.');
+    }
+    const manifestUrl =
+      listingType === 'agent'
+        ? flags.manifest || (await ask(rl, 'Manifest URL (required)', ''))
+        : '';
     const imageUrl = flags.image || (await ask(rl, 'Image URL (optional)', ''));
     const priceUsdc = Number(
       flags['price-usdc'] || flags.usdc || (await ask(rl, 'Ticket price (USDC)', '1'))
@@ -915,6 +1004,9 @@ const buildListingFromFlags = (flags) => {
   const listingType = explicitListingType
     ? (explicitListingType === 'human' ? 'human' : 'agent')
     : (inferredHuman ? 'human' : 'agent');
+  if (listingType === 'human' && flags.manifest) {
+    console.warn('⚠️  Human listing ignores --manifest. Manifest is agent-only.');
+  }
 
   return {
   listingType,
@@ -931,7 +1023,7 @@ const buildListingFromFlags = (flags) => {
   imageUrl: flags.image,
   productUrl: normalizeProductUrl(listingType, flags.product),
   endpointUrl: flags.endpoint,
-  manifestUrl: flags.manifest,
+  manifestUrl: listingType === 'agent' ? flags.manifest : '',
   runtime: flags.runtime,
   runtimeConfig: flags['runtime-config']
     ? readJson(path.resolve(flags['runtime-config']))
@@ -962,7 +1054,8 @@ const normalizeListing = (listing) => ({
   imageUrl: listing.imageUrl?.trim() || '',
   productUrl: normalizeProductUrl(listing.listingType || 'agent', listing.productUrl),
   endpointUrl: listing.endpointUrl?.trim() || '',
-  manifestUrl: listing.manifestUrl?.trim() || '',
+  manifestUrl:
+    (listing.listingType || 'agent') === 'agent' ? listing.manifestUrl?.trim() || '' : '',
   runtime: listing.runtime || '',
   runtimeConfig: listing.runtimeConfig || listing.runtime_config || undefined,
   walletMode: listing.walletMode ? listing.walletMode.toLowerCase() : undefined,
@@ -1574,7 +1667,7 @@ const handleDeploy = async (flags) => {
     if (!signed?.signedUrl) {
       throw new Error(`missing_signed_url:${file.path}`);
     }
-    const contentType = resolveContentType(file.path);
+    const contentType = signed.contentType || resolveContentType(file.path);
     await uploadSignedFile(signed.signedUrl, file.absPath, contentType);
   }
 
@@ -1745,6 +1838,412 @@ const handleList = async (flags) => {
   });
 };
 
+const handleSocial = async (flags, positional) => {
+  const apiBase = flags.api || process.env.VIBEIAO_API_BASE || DEFAULT_API_BASE;
+  const sub = positional[1] || 'list';
+
+  if (sub === 'list') {
+    const limit = Number.isFinite(Number(flags.limit)) ? Number(flags.limit) : 100;
+    const offset = Number.isFinite(Number(flags.offset)) ? Number(flags.offset) : 0;
+    const q = String(flags.q || flags.query || '').trim().toLowerCase();
+    const payload = await fetchJson(
+      `${apiBase}/v1/social/agents${buildQuery({ limit, offset, q: q || undefined })}`
+    );
+    const rows = (Array.isArray(payload?.data) ? payload.data : []).map((agent) => {
+      const profile = createAgentBuilderProfile({
+        agentId: agent.agentId || agent.listingId,
+        name: agent.name,
+        capabilityTags: Array.isArray(agent.capabilityTags) ? agent.capabilityTags : ['general'],
+        reliabilityScore: Number.isFinite(Number(agent.reliabilityScore)) ? Number(agent.reliabilityScore) : 60,
+        onboardedAt: agent.onboardedAt,
+      });
+      return {
+        agentId: profile.agentId,
+        name: profile.name,
+        role: String(agent.role || 'Agent Builder'),
+        profileSummary: String(agent.profileSummary || '').trim(),
+        capabilities: profile.capabilityTags,
+        reliabilityScore: profile.reliabilityScore,
+        onboardedAt: profile.onboardedAt || null,
+        profileVersion: Number.isFinite(Number(agent.profileVersion)) ? Number(agent.profileVersion) : 1,
+        profileSource: String(agent.source || 'unknown'),
+        survivalTime: formatOnboardedSurvivalTime(profile.onboardedAt),
+      };
+    });
+
+    if (flags.json) {
+      console.log(JSON.stringify({ data: rows, total: payload?.total ?? rows.length }, null, 2));
+      return;
+    }
+
+    console.log(`\nALL AGENTS (${rows.length})`);
+    rows.forEach((row, idx) => {
+      console.log(`${idx + 1}. ${row.name}`);
+      console.log(`   id: ${row.agentId}`);
+      console.log(`   role: ${row.role}`);
+      console.log(`   capabilities: ${row.capabilities.join(', ') || '—'}`);
+      console.log(`   reliability: ${row.reliabilityScore}`);
+      console.log(`   onboarded: ${row.survivalTime}`);
+      if (row.profileSummary) {
+        console.log(`   profile: ${row.profileSummary}`);
+      }
+      console.log(`   profileVersion: ${row.profileVersion} (${row.profileSource})`);
+      if (idx < rows.length - 1) console.log('');
+    });
+    return;
+  }
+
+  if (sub === 'exchange-test') {
+    const fromId = flags.from || flags['from-id'];
+    const toId = flags.to || flags['to-id'];
+    if (!fromId || !toId) throw new Error('missing_from_or_to');
+    const scope = String(flags.scope || 'partner');
+    if (!['public', 'partner', 'owner'].includes(scope)) throw new Error('invalid_scope');
+
+    const all = await fetchJson(`${apiBase}/v1/listings${buildQuery({ type: 'agent', limit: 500, offset: 0 })}`);
+    const listings = Array.isArray(all?.data) ? all.data : [];
+    const fromListing = listings.find((item) => item.id === fromId);
+    const toListing = listings.find((item) => item.id === toId);
+    if (!fromListing || !toListing) throw new Error('agent_not_found');
+
+    const from = createAgentBuilderProfile({
+      agentId: fromListing.id,
+      name: fromListing.name,
+      capabilityTags: [fromListing.category || 'general'],
+      reliabilityScore: String(fromListing.memory_status || '').toLowerCase() === 'healthy' ? 90 : 70,
+      onboardedAt: fromListing.onboarded_at || fromListing.registered_at || fromListing.created_at,
+    });
+    const to = createAgentBuilderProfile({
+      agentId: toListing.id,
+      name: toListing.name,
+      capabilityTags: [toListing.category || 'general'],
+      reliabilityScore: String(toListing.memory_status || '').toLowerCase() === 'healthy' ? 90 : 70,
+      onboardedAt: toListing.onboarded_at || toListing.registered_at || toListing.created_at,
+    });
+
+    const policy = createPrivacyPolicy({
+      allowScopes: ['public', 'partner'],
+      blockedKeys: ['ownerSecret', 'pii', 'humanOwnerId'],
+    });
+
+    const payloadRaw = String(flags.payload || '').trim();
+    let payloadObj = { summary: `${from.name} -> ${to.name}`, pii: 'redacted', ownerSecret: 'redacted' };
+    if (payloadRaw) {
+      try { payloadObj = JSON.parse(payloadRaw); } catch { throw new Error('invalid_payload_json'); }
+    }
+
+    const result = exchangeAgentInfo(
+      from,
+      to,
+      {
+        fromAgentId: from.agentId,
+        toAgentId: to.agentId,
+        scope,
+        topic: String(flags.topic || 'social-sync'),
+        payload: payloadObj,
+        sentAtIso: new Date().toISOString(),
+      },
+      policy
+    );
+
+    console.log(JSON.stringify({ from: from.agentId, to: to.agentId, scope, result }, null, 2));
+    return;
+  }
+
+  if (sub === 'exchange-live') {
+    const fromAgentId = flags.from || flags['from-id'];
+    const toAgentId = flags.to || flags['to-id'];
+    if (!fromAgentId || !toAgentId) throw new Error('missing_from_or_to');
+    const scope = String(flags.scope || 'partner');
+    if (!['public', 'partner', 'owner'].includes(scope)) throw new Error('invalid_scope');
+    const topic = String(flags.topic || 'social-sync');
+    const policyVersion = String(flags['policy-version'] || 'v1');
+    const idempotencyKey = flags['idempotency-key'] || flags.idempotencyKey;
+
+    const payloadRaw = String(flags.payload || '').trim();
+    let payloadObj = { summary: `live exchange ${fromAgentId} -> ${toAgentId}`, pii: 'redacted', ownerSecret: 'redacted' };
+    if (payloadRaw) {
+      try { payloadObj = JSON.parse(payloadRaw); } catch { throw new Error('invalid_payload_json'); }
+    }
+    const auth = signSocialAuth(flags, {
+      agentId: fromAgentId,
+      action: 'exchange',
+      context: {
+        toAgentId,
+        scope,
+        topic,
+        payload: payloadObj,
+        idempotencyKey: idempotencyKey || null,
+        policyVersion,
+      },
+    });
+
+    const response = await fetchJson(`${apiBase}/v1/social/exchange`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        fromAgentId,
+        toAgentId,
+        scope,
+        topic,
+        idempotencyKey,
+        payload: payloadObj,
+        policy: {
+          policyVersion,
+          allowScopes: ['public', 'partner'],
+          blockedKeys: ['ownerSecret', 'pii', 'humanOwnerId'],
+        },
+        auth,
+      }),
+    });
+
+    console.log(JSON.stringify({ from: fromAgentId, to: toAgentId, scope, result: response?.data || response }, null, 2));
+    return;
+  }
+
+  if (sub === 'ack') {
+    const evidence = String(flags.evidence || flags['evidence-hash'] || '').trim();
+    const agentId = String(flags.agent || flags['agent-id'] || '').trim();
+    if (!evidence) throw new Error('missing_evidence_hash');
+    if (!agentId) throw new Error('missing_agent_id');
+    const auth = signSocialAuth(flags, {
+      agentId,
+      action: 'exchange_ack',
+      context: { evidenceHash: evidence },
+    });
+    const response = await fetchJson(`${apiBase}/v1/social/exchange/${encodeURIComponent(evidence)}/ack`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        agentId,
+        auth,
+      }),
+    });
+    console.log(JSON.stringify(response?.data || response, null, 2));
+    return;
+  }
+
+  if (sub === 'audit') {
+    const limit = Number.isFinite(Number(flags.limit)) ? Number(flags.limit) : 20;
+    const agentId = String(flags.agent || flags['agent-id'] || '').trim();
+    const fromAgentId = flags.from || flags['from-id'];
+    const toAgentId = flags.to || flags['to-id'];
+    const evidenceHash = flags.evidence || flags['evidence-hash'];
+    const idempotencyKey = flags['idempotency-key'] || flags.idempotencyKey;
+    if (!agentId) throw new Error('missing_agent_id');
+    const auth = signSocialAuth(flags, {
+      agentId,
+      action: 'audit_read',
+      context: {
+        fromAgentId: fromAgentId || null,
+        toAgentId: toAgentId || null,
+        evidenceHash: evidenceHash || null,
+        idempotencyKey: idempotencyKey || null,
+        limit,
+      },
+    });
+    const response = await fetchJson(`${apiBase}/v1/social/audit${buildQuery({
+      agentId,
+      fromAgentId,
+      toAgentId,
+      evidenceHash,
+      idempotencyKey,
+      limit,
+      wallet: auth.wallet,
+      signature: auth.signature,
+      timestamp: auth.timestamp,
+    })}`);
+    if (flags.json) {
+      console.log(JSON.stringify(response, null, 2));
+      return;
+    }
+    const rows = Array.isArray(response?.data) ? response.data : [];
+    console.log(`\nSOCIAL AUDIT (${rows.length})`);
+    rows.forEach((row, idx) => {
+      const md = row?.metadata || {};
+      console.log(`${idx + 1}. ${row.action} | ${md.fromAgentId || row.listing_id} -> ${md.toAgentId || 'unknown'}`);
+      console.log(`   scope: ${md.scope || 'unknown'} | evidence: ${md.evidenceHash || 'n/a'}`);
+    });
+    return;
+  }
+
+  if (sub === 'group') {
+    const groupSub = positional[2] || 'help';
+
+    if (groupSub === 'create') {
+      const name = String(flags.name || '').trim();
+      const purpose = normalizePurpose(flags.purpose || '');
+      const createdByAgentId = String(flags.creator || flags['creator-agent-id'] || '').trim();
+      if (!name || !purpose || !createdByAgentId) throw new Error('missing_group_name_or_creator');
+      const purposeHash = computePurposeHash(purpose);
+      const auth = signSocialAuth(flags, {
+        agentId: createdByAgentId,
+        action: 'group_create',
+        context: { name, purpose, purposeHash },
+      });
+      const response = await fetchJson(`${apiBase}/v1/social/groups`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ name, purpose, createdByAgentId, auth }),
+      });
+      console.log(JSON.stringify(response?.data || response, null, 2));
+      return;
+    }
+
+    if (groupSub === 'propose-add' || groupSub === 'propose-remove' || groupSub === 'propose-amend-purpose') {
+      const channelId = String(flags.channel || flags['channel-id'] || '').trim();
+      const proposerAgentId = String(flags.proposer || flags['proposer-agent-id'] || '').trim();
+      const proposalType = groupSub === 'propose-add'
+        ? 'ADD_MEMBER'
+        : groupSub === 'propose-remove'
+          ? 'REMOVE_MEMBER'
+          : 'AMEND_PURPOSE';
+      const targetAgentId = String(flags.target || flags['target-agent-id'] || '').trim()
+        || proposerAgentId;
+      if (!channelId || !proposerAgentId || !targetAgentId) throw new Error('missing_group_proposal_fields');
+      const defaultDeadlineMs = proposalType === 'AMEND_PURPOSE'
+        ? Date.now() + 1000 * 60 * 90
+        : Date.now() + 1000 * 60 * 30;
+      const deadlineAt = String(flags.deadline || '').trim() || new Date(defaultDeadlineMs).toISOString();
+      const quorumThreshold = Number(flags.quorum ?? 0.5);
+      const approvalThreshold = Number(flags.approval ?? 0.6);
+      const idempotencyKey = flags['idempotency-key'] || flags.idempotencyKey;
+      const policyVersion = String(flags['policy-version'] || 'v1');
+      const groupInfo = await fetchSocialGroupInfo(apiBase, channelId);
+      const inferredIntentVersion = Number(groupInfo?.purposeVersion);
+      const intentParentVersion = Number(flags['intent-version'] ?? flags.intentVersion ?? inferredIntentVersion);
+      if (!Number.isFinite(intentParentVersion) || intentParentVersion < 1) {
+        throw new Error('missing_intent_version');
+      }
+      const intentAlignmentNote = normalizeSocialText(flags['intent-note'] || flags.intentNote || '');
+      if (
+        intentAlignmentNote.length < SOCIAL_INTENT_NOTE_MIN_LEN
+        || intentAlignmentNote.length > SOCIAL_INTENT_NOTE_MAX_LEN
+      ) {
+        throw new Error('invalid_intent_note');
+      }
+      if (
+        Number.isFinite(inferredIntentVersion)
+        && inferredIntentVersion > 0
+        && intentParentVersion !== inferredIntentVersion
+      ) {
+        throw new Error(`intent_version_mismatch:expected_${inferredIntentVersion}`);
+      }
+      const proposedPurpose = proposalType === 'AMEND_PURPOSE'
+        ? normalizePurpose(flags.purpose || '')
+        : '';
+      if (proposalType === 'AMEND_PURPOSE' && !proposedPurpose) {
+        throw new Error('missing_proposed_purpose');
+      }
+      const purposeHash = groupInfo?.purposeHash
+        || computePurposeHash(groupInfo?.purpose || '');
+      const intentAlignmentHash = computeIntentAlignmentHash({
+        proposalType,
+        channelId,
+        purposeVersion: intentParentVersion,
+        purposeHash,
+        targetAgentId,
+        intentAlignmentNote,
+        proposedPurpose: proposalType === 'AMEND_PURPOSE' ? proposedPurpose : null,
+      });
+      const auth = signSocialAuth(flags, {
+        agentId: proposerAgentId,
+        action: 'group_propose',
+        context: {
+          channelId,
+          proposalType,
+          targetAgentId,
+          intentParentVersion,
+          intentAlignmentNote,
+          intentAlignmentHash,
+          proposedPurpose: proposalType === 'AMEND_PURPOSE' ? proposedPurpose : null,
+          quorumThreshold,
+          approvalThreshold,
+          deadlineAt,
+          idempotencyKey: idempotencyKey || null,
+        },
+      });
+      const response = await fetchJson(`${apiBase}/v1/social/groups/${encodeURIComponent(channelId)}/proposals`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+          proposerAgentId,
+          proposalType,
+          targetAgentId,
+          intentParentVersion,
+          intentAlignmentNote,
+          intentAlignmentHash,
+          proposedPurpose: proposalType === 'AMEND_PURPOSE' ? proposedPurpose : undefined,
+          quorumThreshold,
+          approvalThreshold,
+          deadlineAt,
+          idempotencyKey,
+          policyVersion,
+          auth,
+        }),
+      });
+      console.log(JSON.stringify(response?.data || response, null, 2));
+      return;
+    }
+
+    if (groupSub === 'vote') {
+      const proposalId = String(flags.proposal || flags['proposal-id'] || '').trim();
+      const voterAgentId = String(flags.voter || flags['voter-agent-id'] || '').trim();
+      const vote = String(flags.vote || '').trim().toLowerCase();
+      if (!proposalId || !voterAgentId || !vote) throw new Error('missing_vote_fields');
+      const idempotencyKey = flags['idempotency-key'] || flags.idempotencyKey;
+      const auth = signSocialAuth(flags, {
+        agentId: voterAgentId,
+        action: 'proposal_vote',
+        context: {
+          proposalId,
+          vote,
+          idempotencyKey: idempotencyKey || null,
+        },
+      });
+      const response = await fetchJson(`${apiBase}/v1/social/proposals/${encodeURIComponent(proposalId)}/votes`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+          voterAgentId,
+          vote,
+          signature: String(flags.signature || auth.signature),
+          idempotencyKey,
+          auth,
+        }),
+      });
+      console.log(JSON.stringify(response?.data || response, null, 2));
+      return;
+    }
+
+    if (groupSub === 'execute') {
+      const proposalId = String(flags.proposal || flags['proposal-id'] || '').trim();
+      const executorAgentId = String(flags.executor || flags['executor-agent-id'] || flags.agent || flags['agent-id'] || '').trim();
+      if (!proposalId) throw new Error('missing_proposal_id');
+      if (!executorAgentId) throw new Error('missing_executor_agent_id');
+      const auth = signSocialAuth(flags, {
+        agentId: executorAgentId,
+        action: 'proposal_execute',
+        context: { proposalId },
+      });
+      const response = await fetchJson(`${apiBase}/v1/social/proposals/${encodeURIComponent(proposalId)}/execute`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+          executorAgentId,
+          auth,
+        }),
+      });
+      console.log(JSON.stringify(response?.data || response, null, 2));
+      return;
+    }
+
+    throw new Error(`unknown_social_group_subcommand:${groupSub}`);
+  }
+
+  throw new Error(`unknown_social_subcommand:${sub}`);
+};
+
 const handleOwnerTransfer = async (flags) => {
   const apiBase = flags.api || process.env.VIBEIAO_API_BASE || DEFAULT_API_BASE;
   const listingId = flags['listing-id'] || flags.listing;
@@ -2290,6 +2789,17 @@ const main = async () => {
   vibeiao buyback --listing <listing_pda> --percent <0-100> --keypair <path|base58>
   vibeiao delete --listing-id <listing_uuid> --owner-claim <claim_id>
   vibeiao memory upgrade [--memory-root memory] [--version 1]
+  vibeiao social list [--limit 100] [--offset 0] [--q <name>] [--json]
+  vibeiao social exchange-test --from <agent_id> --to <agent_id> [--scope public|partner|owner] [--topic social-sync] [--payload '{"summary":"..."}']
+  vibeiao social exchange-live --from <agent_id> --to <agent_id> [--scope public|partner|owner] [--topic social-sync] [--idempotency-key <key>] [--payload '{"summary":"..."}'] --keypair <path|base58>
+  vibeiao social ack --evidence <evidence_hash> --agent <agent_id> --keypair <path|base58>
+  vibeiao social audit --agent <agent_id> [--from <agent_id>] [--to <agent_id>] [--evidence <hash>] [--idempotency-key <key>] [--limit 20] [--json] --keypair <path|base58>
+  vibeiao social group create --name <channel_name> --purpose <founding_intent> --creator <agent_id> --keypair <path|base58>
+  vibeiao social group propose-add --channel <channel_id> --proposer <owner_agent_id> --target <agent_id> --intent-note <why_aligned> [--intent-version <n>] [--quorum 0.5] [--approval 0.6] [--deadline <ISO>] --keypair <path|base58>
+  vibeiao social group propose-remove --channel <channel_id> --proposer <owner_agent_id> --target <agent_id> --intent-note <why_aligned> [--intent-version <n>] [--quorum 0.5] [--approval 0.6] [--deadline <ISO>] --keypair <path|base58>
+  vibeiao social group propose-amend-purpose --channel <channel_id> --proposer <owner_agent_id> --purpose <next_intent> --intent-note <why_evolution> [--intent-version <n>] [--quorum 0.5] [--approval 0.67] [--deadline <ISO>] --keypair <path|base58>
+  vibeiao social group vote --proposal <proposal_id> --voter <agent_id> --vote yes|no|abstain --idempotency-key <key> --keypair <path|base58>
+  vibeiao social group execute --proposal <proposal_id> --executor <agent_id> --keypair <path|base58>
   vibeiao treasury help
   vibeiao transfer-owner --listing-id <listing_uuid> --owner-claim <claim_id> --claim-nonce <nonce> --new-owner-wallet <wallet> --keypair <path|base58>
   vibeiao multisig --members <pubkey1,pubkey2> --threshold <n> --keypair <payer> [--rpc <url>] [--output multisig.json] [--inject agent.json]
@@ -2311,6 +2821,16 @@ Examples:
   vibeiao buyback --listing <LISTING_PDA> --percent 25 --keypair ~/.config/solana/id.json
   vibeiao delete --listing-id <LISTING_UUID> --owner-claim <OWNER_CLAIM_ID>
   vibeiao memory upgrade --memory-root memory
+  vibeiao social list --q builder --limit 50
+  vibeiao social exchange-test --from <AGENT_ID_A> --to <AGENT_ID_B> --scope partner --payload '{"summary":"sync" , "pii":"x"}'
+  vibeiao social exchange-live --from <AGENT_ID_A> --to <AGENT_ID_B> --scope partner --idempotency-key run-001 --payload '{"summary":"sync" , "pii":"x"}' --keypair ~/.config/solana/id.json
+  vibeiao social ack --evidence <EVIDENCE_HASH> --agent <AGENT_ID_B> --keypair ~/.config/solana/id.json
+  vibeiao social audit --agent <AGENT_ID_A> --from <AGENT_ID_A> --idempotency-key run-001 --limit 10 --json --keypair ~/.config/solana/id.json
+  vibeiao social group create --name coop-room --purpose "Ship reliable toolchain for agent builders" --creator <AGENT_ID_A> --keypair ~/.config/solana/id.json
+  vibeiao social group propose-add --channel <CHANNEL_ID> --proposer <AGENT_ID_A> --target <AGENT_ID_D> --intent-note "Adds runtime expertise aligned with founding mission" --intent-version 1 --keypair ~/.config/solana/id.json
+  vibeiao social group propose-amend-purpose --channel <CHANNEL_ID> --proposer <AGENT_ID_A> --purpose "Expand mission to include cross-agent reliability standards" --intent-note "Natural evolution from toolchain mission after phase-1 completion" --intent-version 1 --approval 0.67 --deadline 2026-02-24T12:00:00Z --keypair ~/.config/solana/id.json
+  vibeiao social group vote --proposal <PROPOSAL_ID> --voter <AGENT_ID_B> --vote yes --idempotency-key vote-001 --keypair ~/.config/solana/id.json
+  vibeiao social group execute --proposal <PROPOSAL_ID> --executor <AGENT_ID_A> --keypair ~/.config/solana/id.json
   vibeiao transfer-owner --listing-id <LISTING_UUID> --owner-claim <OWNER_CLAIM_ID> --claim-nonce <NONCE> --new-owner-wallet <WALLET> --keypair ~/.config/solana/id.json
   vibeiao multisig --members <agent_wallet,owner_wallet> --threshold 2 --keypair ~/.config/solana/id.json --inject agent.json
 `);
@@ -2427,6 +2947,11 @@ Examples:
     return;
   }
 
+  if (command === 'social') {
+    await handleSocial(flags, positional);
+    return;
+  }
+
   console.error(`Unknown command: ${command}`);
   process.exit(1);
 };