Build with AgentDOM

# No install needed — npx works immediately
npx agentdom@latest setup linear.app   # OAuth PKCE
npx agentdom@latest setup resend.com   # API key prompt
npx agentdom@latest run "Create a Linear ticket for the login crash"

# For permanent install — fix permissions first (macOS)
mkdir -p ~/.npm-global && npm config set prefix ~/.npm-global
echo 'export PATH="$HOME/.npm-global/bin:$PATH"' >> ~/.zshrc && source ~/.zshrc
npm install -g agentdom

// Dispatch a single intent directly
dispatch_intent("issues.create", {
  title:    "Login crash on iOS 17",
  priority: 1,
  teamId:   "ENG"
}, "linear.app")

// → wallet fetches Keychain token
// → POST https://api.linear.app/graphql
// → { success: true, issue: { id: "ENG-42" } }

# Claude Code — add in one command
claude mcp add agentdom-desktop -- node \
  $(npm root -g)/agentdom/desktop-mcp-server.js

# claude_desktop_config.json
{
  "mcpServers": {
    "agentdom": {
      "command": "node",
      "args": ["$(npm root -g)/agentdom/desktop-mcp-server.js"]
    }
  }
}

# One-time setup — run this once per provider, then agents run forever
agentdom setup linear.app         # opens browser → OAuth PKCE → refresh token stored
agentdom setup github.com         # device flow → enter code at github.com/login/device
agentdom setup resend.com         # prompts for API key → stored in Keychain
agentdom setup openrouter.ai --key=sk-or-v1-xxx  # non-interactive

# Check what's set up
agentdom setup --list

# After setup — package credentials for your agent
agentdom wallet export --base64 --providers=linear.app,resend.com
# → AGENTDOM_WALLET_B64=eyJ3YWxsZXQi...  (single env var)

# 3 ways to give an agent its wallet — no human at runtime

# Option 1: Base64 (Docker / serverless / CI)
export AGENTDOM_WALLET_B64=$(agentdom wallet export --base64 --providers=resend.com)
docker run -e AGENTDOM_WALLET_B64=$AGENTDOM_WALLET_B64 your-agent

# Option 2: File path (server / multi-agent)
agentdom wallet create --agent=email-bot --providers=resend.com
AGENTDOM_WALLET_PATH=~/.agentdom/email-bot.wallet.json agentdom goal "..."

# Option 3: Env vars (GitHub Actions / Doppler / Vercel)
agentdom wallet env  # prints these:
export AGENTDOM_RESEND_COM_KEY=re_xxx
export AGENTDOM_LINEAR_APP_KEY=lin_xxx

# Publisher declares in .well-known/agentdom.json:
{
  "auth": {
    "method": "api_key",
    "agent_tokens": {
      "issue":  "POST https://api.yourapp.com/agent-tokens",
      "revoke": "DELETE https://api.yourapp.com/agent-tokens/{id}",
      "rotate": "POST https://api.yourapp.com/agent-tokens/{id}/rotate",
      "scopes": ["emails:send", "domains:read"],
      "max_ttl_seconds": 86400
    }
  }
}

# Agent provisions its own scoped token — no human needed:
agentdom agent-token resend.com --scopes=emails:send --ttl=3600
# → POST /agent-tokens with master key → scoped token stored → auto-rotates

# dispatch_intent uses it automatically:
dispatch_intent("emails.send", { to, subject, html }, "resend.com")
# → secrets.resolve() tries agent_tokens protocol first
# → master key never exposed to agent runtime

// ~/.agentdom/policy.json
{
  "per_class": {
    "read":     "allow",
    "external": "prompt",   // API writes need approval
    "send":     "prompt",   // emails need approval
    "delete":   "deny",    // never auto-delete
    "payment":  "deny"     // never auto-charge
  }
}

// Approve / deny from CLI
agentdom policy show
agentdom approve abc123
agentdom deny   abc123

# Step 1: Generate manifest from your OpenAPI spec
npx agentdom-publisher init \
  --openapi=./openapi.json \
  --host=api.yourapp.com

# Step 2: Validate locally
npx agentdom-publisher validate

# Step 3: Deploy .well-known/agentdom.json to your server
# Step 4: Verify live
npx agentdom-publisher verify --host=api.yourapp.com

# Step 5: Test a real dispatch
npx agentdom-publisher test \
  --host=api.yourapp.com --token=sk-... --intent=contacts.list

# Step 6: Submit to public registry
npx agentdom-publisher submit --host=api.yourapp.com

{
  "version": "1.0",
  "host":    "api.yourapp.com",
  "auth": {
    "method":    "api_key",
    "key_header": "Authorization",
    "key_format": "Bearer {token}"
  },
  "capabilities": [{
    "intent":      "contacts.create",
    "transport":   "api",
    "method":      "POST",
    "endpoint":    "https://api.yourapp.com/contacts",
    "side_effects": ["external"]
  }]
}