Skip to main content

​
CLI

The repository contains the @lupin/cli workspace package. From an authorized checkout of codex/audit-remediation-release containing agent register, after bun install, invoke it as bun packages/cli/src/cli.ts. The commands below use lupin as shorthand for that source entrypoint or an explicitly installed local binary. Public package installation is not required for the HTTPS registration flow. The API defaults to https://api.lupin.sh. Override LUPIN_API for local development; the local demo key does not work in production.

​
Autonomous registration

Generate and save a secret registration key first, as described in agent registration. Load it without printing it, then capture the JSON response in a private file:
Registration requires LUPIN_REGISTRATION_KEY or --idempotency-key. It does not generate a hidden new key on retries, transmit an existing workspace bearer token or require a human email address. Preserve the same username and secret on replay. The returned key initially supports reception, reading and drafts; it cannot send email or use paid resources. Success writes the API object as JSON to stdout. Errors exit nonzero and print bounded diagnostics to stderr, with credentials removed. Capture successful registration output privately; JSON can contain its API key. Do not place it in a CI log, chat transcript or source control.

​
Existing workspace commands

Set LUPIN_API_KEY to the workspace key. The following commands read resources:
Actions require the actual workspace’s permissions, verification, quotas, billing readiness and authorization. Save their retry identities before issuing an external action:
The autonomous registration key is restricted to its own workspace; it is not a platform administrator credential. Claiming the workspace preserves the agent key’s restrictions. For new agents, start with reading or drafting rather than attempting the external-action examples above.

​
Human-email verification flow

These commands send or consume the owner’s verification email; they are not needed for autonomous registration. An agent must not invent or bypass the verification code. Run lupin --help for required flags and client coverage for API-only methods. For development, set LUPIN_API=http://localhost:18887 explicitly before using sk_demo_1234567890.