konareef

command module
v0.1.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jul 3, 2026 License: Apache-2.0 Imports: 26 Imported by: 0

README

Konareef

Konareef is the developer CLI/TUI for building, publishing, installing, and verifying reefpods.

A reefpod is a versioned agent package anchored by a pod.toml manifest. Konareef gives authors a local workflow for scaffolding a pod, validating its manifest, publishing it to a compatible reef-core deployment, installing published pods, and verifying proof bundles offline.

This public repository contains the developer-facing CLI, TUI, tools, schema, tests, and docs. Internal planning, strategy, pitch, and release-planning material is intentionally excluded from the public mirror.

Current capabilities

  • Scaffold a starter reefpod.
  • Validate pod.toml v0.1 manifests offline.
  • Create publisher identities.
  • Publish pods to a compatible reef-core server.
  • Install signed pod manifests as a buyer/user.
  • Run smoke and lifecycle checks against a reef-core deployment.
  • Verify exported proof bundles, including strict and disclosure-policy-aware checks.
  • Use the terminal UI components for inspection-oriented workflows.

Install from source

Requirements:

  • Go 1.25 or newer.
  • Git.

Build the CLI:

git clone https://github.com/digitsu/konareef.git
cd konareef
go build -o konareef .
./konareef --help

Run tests:

go test ./...

Quick start: build a hello-world reefpod

Create a pod:

./konareef pod init hello-world

Inspect the generated files:

hello-world/
  pod.toml
  prompts/system.md
  README.md

Validate the manifest:

./konareef pod validate ./hello-world/pod.toml

A minimal manifest looks like this:

pod_spec_version = "0.1"

[pod]
name = "hello-world"
version = "0.1.0"
lineage_id = "0123456789abcdef0123456789abcdef"

[runtime]
kind = "lobster"

[model]
provider = "anthropic"
name = "claude-sonnet-4-5"

[inputs]
name = { type = "string", required = true }

[directive]
template = "./prompts/system.md"

[output]
[[output.failure]]
kind = "timeout_seconds"
value = 600

[budget]
max_sats = 1000

Common commands

# Create a pod skeleton
./konareef pod init hello-world

# Validate a manifest
./konareef pod validate ./hello-world/pod.toml

# Create a publisher identity
./konareef pod identity create --handle alice

# Publish to a reef-core server
./konareef pod publish ./hello-world --server http://localhost:4000

# Publish and expose a public proof bundle endpoint
./konareef pod publish ./hello-world --server http://localhost:4000 --public-bundle

# Install a published pod
./konareef install alice/hello-world
./konareef install alice/hello-world@0.1.0

# Verify a proof bundle
./konareef verify bundle.json
./konareef verify --strict bundle.json
./konareef verify --disclosure-policy C bundle.cbor

# Run smoke checks against a compatible reef-core deployment
KONAREEF_TOKEN=... ./konareef smoke
KONAREEF_TOKEN=... ./konareef smoke --lifecycle

Documentation

Start here:

  • docs/reefpods/README.md — reefpod authoring docs index.
  • docs/reefpods/build-a-reefpod.md — scaffold, edit, validate, and understand a pod.
  • docs/reefpods/publish-run-verify.md — publish, install, smoke-test, and verify flows.
  • docs/reference/pod-toml-v0.1.md — current pod.toml language reference.
  • docs/reference/pod-definition-of-done.md — current [output] behavior and limitations.
  • docs/integration/paygate-client.md — PayGate/ZK runtime client reference.

Repository scope

Konareef owns the developer CLI/TUI, local authoring tools, manifest validation, publishing/install UX, and offline proof verification. reef-core is the compatible server/runtime side that parses and executes pods and serves proof material.

The public mirror is generated from a scrubbed allowlist export and intentionally has a single collapsed release commit. Private project history and non-developer materials are not published.

License

Apache-2.0. See LICENSE.

Documentation

Overview

konareef — a TUI harness for agentic pods.

Connects to a reef-core instance and provides terminal-native monitoring and management of orca-pods and lobster-pods.

Usage:

konareef                                     # start the TUI (default)
konareef --server http://host:4000           # override reef-core URL
konareef smoke --token <base64>              # non-TUI end-to-end smoke test
konareef smoke --lifecycle --token <base64>  # full lifecycle smoke test
konareef pod validate <pod.toml>             # local schema validation
KONAREEF_TOKEN=... konareef smoke            # same, via env var

Directories

Path Synopsis
internal
api
Package api provides an HTTP client for the reef-core REST API.
Package api provides an HTTP client for the reef-core REST API.
canon
ast.go — the internal canonicalization AST and its builder.
ast.go — the internal canonicalization AST and its builder.
canon/floatparity command
Command floatparity generates a deterministic sweep of IEEE-754 doubles in the konareef-toml/v1 R8 range [0.0, 1.0e6], formats each through the Go canonical float rule, and emits the set as JSON for cross-implementation comparison against Erlang.
Command floatparity generates a deterministic sweep of IEEE-754 doubles in the konareef-toml/v1 R8 range [0.0, 1.0e6], formats each through the Go canonical float rule, and emits the set as JSON for cross-implementation comparison against Erlang.
identity
der_gate.go — strict-DER + low-S parser for secp256k1 ECDSA signatures.
der_gate.go — strict-DER + low-S parser for secp256k1 ECDSA signatures.
install
Package install: idempotency.go — implements CheckInstalled, the pre-Verify gate that decides whether a fetched pod should be re-installed, treated as already installed (same hash), or refused as a conflict (different hash) against the local cache.
Package install: idempotency.go — implements CheckInstalled, the pre-Verify gate that decides whether a fetched pod should be re-installed, treated as already installed (same hash), or refused as a conflict (different hash) against the local cache.
membridge
internal/membridge/capacity.go — PRD 4 §3.4 capacity enforcement.
internal/membridge/capacity.go — PRD 4 §3.4 capacity enforcement.
paygate
internal/paygate/auth_brc31.go — BRC-31 mutual auth session.
internal/paygate/auth_brc31.go — BRC-31 mutual auth session.
paygate/stubserver
Package stubserver — handlers + writers for the in-process stub PayGate.
Package stubserver — handlers + writers for the in-process stub PayGate.
pod
init.go — scaffolding for new pod definitions.
init.go — scaffolding for new pod definitions.
poseidon
Package poseidon implements Poseidon-over-Pallas-Fq, byte-identical to the neptune 13.0.0 reference used by the konareef pod-step ZK circuit (paygate-zk crates/konareef-circuit).
Package poseidon implements Poseidon-over-Pallas-Fq, byte-identical to the neptune 13.0.0 reference used by the konareef pod-step ZK circuit (paygate-zk crates/konareef-circuit).
publish
errors.go — sentinel errors for the P1.3 ZK opt-in flags.
errors.go — sentinel errors for the P1.3 ZK opt-in flags.
saltstore
internal/saltstore/backend.go — Backend interface + path policy.
internal/saltstore/backend.go — Backend interface + path policy.
smoke
Package smoke runs end-to-end smoke tests against a reef-core instance.
Package smoke runs end-to-end smoke tests against a reef-core instance.
tlog
Package tlog implements PRD 1 § 5.4: deterministic reconstruction of `t_root`, the Merkle commitment over a pod invocation's tool-call log `T_log`, from an ordered sequence of `proof_tool_calls`-equivalent rows.
Package tlog implements PRD 1 § 5.4: deterministic reconstruction of `t_root`, the Merkle commitment over a pod invocation's tool-call log `T_log`, from an ordered sequence of `proof_tool_calls`-equivalent rows.
tui
Package tui implements the KonaReef terminal interface.
Package tui implements the KonaReef terminal interface.
verify
Package verify — RFC 8949 § 4.2 deterministic-CBOR canonicality validator (Round-1 B3 fix).
Package verify — RFC 8949 § 4.2 deterministic-CBOR canonicality validator (Round-1 B3 fix).
vkeystore
Package vkeystore resolves konareef circuit verification keys (vkeys) for the konareef Go verifier.
Package vkeystore resolves konareef circuit verification keys (vkeys) for the konareef Go verifier.
ws
Package ws provides a Phoenix Channel client over WebSocket for consuming real-time agent events from reef-core.
Package ws provides a Phoenix Channel client over WebSocket for consuming real-time agent events from reef-core.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL