konareef

command module
v0.1.2 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jul 11, 2026 License: Apache-2.0 Imports: 31 Imported by: 0

README

Konareef

Konareef is the developer CLI/TUI for building, publishing, installing, and verifying reefpods.

A reefpod is a versioned agent package anchored by a pod.toml manifest. Konareef gives authors a local workflow for scaffolding a pod, validating its manifest, publishing it to a compatible reef-core deployment, installing published pods, and verifying proof bundles offline.

This public repository contains the developer-facing CLI, TUI, tools, schema, tests, and docs. Internal planning, strategy, pitch, and release-planning material is intentionally excluded from the public mirror.

Current capabilities

  • Scaffold a starter reefpod.
  • Validate pod.toml v0.1 manifests offline.
  • Create publisher identities.
  • Publish pods to a compatible reef-core server.
  • Install signed pod manifests as a buyer/user.
  • Run smoke and lifecycle checks against a reef-core deployment.
  • Verify exported proof bundles, including strict and disclosure-policy-aware checks.
  • Use the terminal UI components for inspection-oriented workflows.

What needs a server

Authoring is fully offline: pod init, pod validate, and verify run with no network and no server. The commands that publish, install, run, or smoke-test a pod talk to a reef-core deployment — hosted access is in private beta (see "Connecting to a reef-core server" below).

Install

Download the archive for your platform from the latest release, extract, and put konareef on your PATH:

tar -xzf konareef_*_$(uname -s | tr A-Z a-z)_*.tar.gz
install -m 0755 konareef ~/go/bin/konareef   # or: sudo mv konareef /usr/local/bin/
konareef --version

Each release ships darwin (amd64/arm64) and linux (amd64/arm64) archives plus a checksums.txt. Verify with sha256sum -c checksums.txt.

go install

With Go 1.25+ on your PATH:

go install github.com/digitsu/konareef@latest
konareef --version
From source

Requirements: Go 1.25 or newer, and Git.

git clone https://github.com/digitsu/konareef.git
cd konareef
go build -o konareef .
./konareef --version
./konareef --help

Run tests:

go test ./...

Connecting to a reef-core server

The publish/install/run/smoke commands target a reef-core instance. Point the CLI at one with --server <url> or the KONAREEF_SERVER environment variable (default http://localhost:4000); mutating actions also need a session token via --token or KONAREEF_TOKEN. A public hosted reef-core is not yet available — access is currently limited to a private beta.

Quick start: build a hello-world reefpod

Create a pod:

./konareef pod init hello-world

Inspect the generated files:

hello-world/
  pod.toml
  prompts/system.md
  README.md

Validate the manifest:

./konareef pod validate ./hello-world/pod.toml

A minimal manifest looks like this:

pod_spec_version = "0.1"

[pod]
name = "hello-world"
version = "0.1.0"
lineage_id = "0123456789abcdef0123456789abcdef"

[runtime]
kind = "lobster"

[model]
provider = "anthropic"
name = "claude-sonnet-4-5"

[inputs]
name = { type = "string", required = true }

[directive]
template = "./prompts/system.md"

[output]
[[output.failure]]
kind = "timeout_seconds"
value = 600

[budget]
max_sats = 1000

Common commands

# Create a pod skeleton
./konareef pod init hello-world

# Validate a manifest
./konareef pod validate ./hello-world/pod.toml

# Create a publisher identity
./konareef pod identity create --handle alice

# Publish to a reef-core server
./konareef pod publish ./hello-world --server http://localhost:4000

# Publish and expose a public proof bundle endpoint
./konareef pod publish ./hello-world --server http://localhost:4000 --public-bundle

# Install a published pod
./konareef install alice/hello-world
./konareef install alice/hello-world@0.1.0

# Verify a proof bundle
./konareef verify bundle.json
./konareef verify --strict bundle.json
./konareef verify --disclosure-policy C bundle.cbor

# Run smoke checks against a compatible reef-core deployment
KONAREEF_TOKEN=... ./konareef smoke
KONAREEF_TOKEN=... ./konareef smoke --lifecycle

Documentation

Start here:

  • docs/reefpods/README.md — reefpod authoring docs index.
  • docs/reefpods/build-a-reefpod.md — scaffold, edit, validate, and understand a pod.
  • docs/reefpods/publish-run-verify.md — publish, install, smoke-test, and verify flows.
  • docs/reference/pod-toml-v0.1.md — current pod.toml language reference.
  • docs/reference/pod-definition-of-done.md — current [output] behavior and limitations.
  • docs/integration/paygate-client.md — PayGate/ZK runtime client reference.

Repository scope

Konareef owns the developer CLI/TUI, local authoring tools, manifest validation, publishing/install UX, and offline proof verification. reef-core is the compatible server/runtime side that parses and executes pods and serves proof material.

The public mirror is generated from a scrubbed allowlist export and intentionally has a single collapsed release commit. Private project history and non-developer materials are not published.

License

Apache-2.0. See LICENSE.

Documentation

Overview

konareef — a TUI harness for agentic pods.

Connects to a reef-core instance and provides terminal-native monitoring and management of orca-pods and lobster-pods.

Usage:

konareef                                     # start the TUI (default)
konareef --server http://host:4000           # override reef-core URL
konareef smoke --token <base64>              # non-TUI end-to-end smoke test
konareef smoke --lifecycle --token <base64>  # full lifecycle smoke test
konareef pod validate <pod.toml>             # local schema validation
KONAREEF_TOKEN=... konareef smoke            # same, via env var

Directories

Path Synopsis
internal
api
Package api provides an HTTP client for the reef-core REST API.
Package api provides an HTTP client for the reef-core REST API.
canon
ast.go — the internal canonicalization AST and its builder.
ast.go — the internal canonicalization AST and its builder.
canon/floatparity command
Command floatparity generates a deterministic sweep of IEEE-754 doubles in the konareef-toml/v1 R8 range [0.0, 1.0e6], formats each through the Go canonical float rule, and emits the set as JSON for cross-implementation comparison against Erlang.
Command floatparity generates a deterministic sweep of IEEE-754 doubles in the konareef-toml/v1 R8 range [0.0, 1.0e6], formats each through the Go canonical float rule, and emits the set as JSON for cross-implementation comparison against Erlang.
feeder
Package feeder is the konareef Pod-Trust-Domain sidecar orchestrator.
Package feeder is the konareef Pod-Trust-Domain sidecar orchestrator.
identity
der_gate.go — strict-DER + low-S parser for secp256k1 ECDSA signatures.
der_gate.go — strict-DER + low-S parser for secp256k1 ECDSA signatures.
install
Package install: idempotency.go — implements CheckInstalled, the pre-Verify gate that decides whether a fetched pod should be re-installed, treated as already installed (same hash), or refused as a conflict (different hash) against the local cache.
Package install: idempotency.go — implements CheckInstalled, the pre-Verify gate that decides whether a fetched pod should be re-installed, treated as already installed (same hash), or refused as a conflict (different hash) against the local cache.
membridge
internal/membridge/capacity.go — PRD 4 §3.4 capacity enforcement.
internal/membridge/capacity.go — PRD 4 §3.4 capacity enforcement.
paygate
internal/paygate/auth_brc31.go — BRC-31 mutual auth session.
internal/paygate/auth_brc31.go — BRC-31 mutual auth session.
paygate/stubserver
Package stubserver — handlers + writers for the in-process stub PayGate.
Package stubserver — handlers + writers for the in-process stub PayGate.
pod
init.go — scaffolding for new pod definitions.
init.go — scaffolding for new pod definitions.
poseidon
Package poseidon implements Poseidon-over-Pallas-Fq, byte-identical to the neptune 13.0.0 reference used by the konareef pod-step ZK circuit (paygate-zk crates/konareef-circuit).
Package poseidon implements Poseidon-over-Pallas-Fq, byte-identical to the neptune 13.0.0 reference used by the konareef pod-step ZK circuit (paygate-zk crates/konareef-circuit).
publish
errors.go — sentinel errors for the P1.3 ZK opt-in flags.
errors.go — sentinel errors for the P1.3 ZK opt-in flags.
run
Package run implements the buyer-side "Execute" step of the konareef demo flow: `konareef pod run <handle>/<pod>@<version>`.
Package run implements the buyer-side "Execute" step of the konareef demo flow: `konareef pod run <handle>/<pod>@<version>`.
saltstore
internal/saltstore/backend.go — Backend interface + path policy.
internal/saltstore/backend.go — Backend interface + path policy.
smoke
Package smoke runs end-to-end smoke tests against a reef-core instance.
Package smoke runs end-to-end smoke tests against a reef-core instance.
tlog
Package tlog implements PRD 1 § 5.4: deterministic reconstruction of `t_root`, the Merkle commitment over a pod invocation's tool-call log `T_log`, from an ordered sequence of `proof_tool_calls`-equivalent rows.
Package tlog implements PRD 1 § 5.4: deterministic reconstruction of `t_root`, the Merkle commitment over a pod invocation's tool-call log `T_log`, from an ordered sequence of `proof_tool_calls`-equivalent rows.
tui
Package tui implements the KonaReef terminal interface.
Package tui implements the KonaReef terminal interface.
verdict
Package verdict serves a live, public-facing rendering of a KonaReef Type-C proof: it fetches a konareef-bundle/v2, runs the REAL verifier (verify.VerifyV2Production + the Rust `verify` subprocess), decodes the disclosed evidence, and serves a single self-contained page that shows the six verification checks resolving to a verdict.
Package verdict serves a live, public-facing rendering of a KonaReef Type-C proof: it fetches a konareef-bundle/v2, runs the REAL verifier (verify.VerifyV2Production + the Rust `verify` subprocess), decodes the disclosed evidence, and serves a single self-contained page that shows the six verification checks resolving to a verdict.
verify
Package verify — RFC 8949 § 4.2 deterministic-CBOR canonicality validator (Round-1 B3 fix).
Package verify — RFC 8949 § 4.2 deterministic-CBOR canonicality validator (Round-1 B3 fix).
version
Package version exposes the konareef build version.
Package version exposes the konareef build version.
vkeystore
Package vkeystore resolves konareef circuit verification keys (vkeys) for the konareef Go verifier.
Package vkeystore resolves konareef circuit verification keys (vkeys) for the konareef Go verifier.
ws
Package ws provides a Phoenix Channel client over WebSocket for consuming real-time agent events from reef-core.
Package ws provides a Phoenix Channel client over WebSocket for consuming real-time agent events from reef-core.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL