feat(cli): single-command agent provisioning ergonomics and passphrase harmonization

.auths/roots

@@ -1,25 +1,3 @@
-did:keri:EB5cPHY0t-ejNC_rUzPS1dclTvd6kG-R9mQzjozCuGgd
-did:keri:EMCu26JE1Jm40kuNyWtCyTJu3CwC_2MBmiiFCIp6XN7t
-did:keri:ECorK2R66hdj9W3wzV0JYYPVm37iL_48lHnWF-_zXtfJ
-did:keri:EHZu-FvRR0yJF3tId3iJVN_XXlsNZdXg-ZSRchZHCcTS
-did:keri:EA-toxTnhpWcjgDGonNgzRRsHgyatvu4GXp8vQ9RZMD6
-did:keri:EJRwo0DQdzF6ggeznDh6113KlfMy-_KUF_9WfZ5Gh28e
-did:keri:EJR9zlO6FtsjRULj07wynEEUcN0AD1MmKI6A1U_uD10l
-did:keri:EN6HZUkHvWsaSgFKPKEDR8nMVV1Ef9zw1gbdtxOtLWDP
-did:keri:EGAeM5vBmzcFEzf3MVbOD_VKjMxC4GsoUarWUjz5J6li
-did:keri:ED-k2LMn90EN5DUQGCCGKGn-Bf9BXWLiao-nyLp9LAjH
-did:keri:ELiyxeCLBDgNKtYG_bfpnpCy2Lohqyv8M3TyMS8Zn9Tm
-did:keri:EL1CaAKTd-I7l6v8FO8FvWbFrgK_UMAUk5MQ-7YjPeHr
-did:keri:EJzyWbcg-u6v_4nc-R1XwfbblLqz1wBQpIHx_WNUTZgL
-did:keri:EJ35ubEJO6ZT4HDeFxKqcoAH1VE0MnA4Y_Mk_rniD_ku
-did:keri:ELS_t_TDI2vfNPkUjcatCqA8tSgQwYOv_h9OKvp5rvER
-did:keri:ENv6JMgfYFbr3J4nBOtcNNgpVZ5lmd6dUr_25wK4MJUM
-did:keri:EKHawavyEruvh0v3A2H5zLoLnOE2L3lAqzivN0kjZil3
-did:keri:EHMeiHXhVedvGhvFf5O71HoPskHArJXokxnx08PEr_CM
-did:keri:EF9goneG7pezrfCzYvEhEp_gSct_BZLmSZfrngNWxTqM
-did:keri:EC7fQlCP19mPRMx-lIpHhWCjKF12Z1aZ6VYYwUa8ZZ-M
-did:keri:EDa0hFOowB7PYAkUeiuRQiV1zaa1mpFbxQYf61r73Pii
-did:keri:EPsk0PCEQpa3ALIG1Oyiuxg8UfLbgma4QV16I-O6TnOc
-did:keri:EAZG0HqAzbydr1iAbnEPUhVC_IuB6vZXYBJagVXS2k9a
-did:keri:EKh1onK1bubyaWxHIWzr_yeOAtBm36ZGn0AXDYsBhrsq
-did:keri:EPmp6Nav8Z-_prJg0EShHnB396yJJtXmBr6hG647PxwJ
+did:keri:EGfg3puqwCzBD3rBSiMhO1HpDM26pmotVreI41Jl_1Eq
+did:keri:EMN-WRXNAkLfavKsaFHS0ehP7eB1s8a1alktBJoDhI7b
+did:keri:EAswoxxXY6-kXqYcc3mUngY8GOiwhDwXxFfjWXzCvuW6

crates/auths-cli/Cargo.toml

@@ -39,6 +39,7 @@ gethostname = "1.1.0"
 glob.workspace = true
 auths-policy.workspace = true
 auths-index.workspace = true
+auths-core.workspace = true
 auths-crypto.workspace = true
 auths-sdk = { workspace = true, features = ["backend-git", "witness-server", "witness-client", "indexed-storage", "keychain-secure-enclave"] }
 auths-transparency = { workspace = true, features = ["native"] }

crates/auths-cli/src/adapters/agent.rs

@@ -11,7 +11,7 @@ use auths_sdk::crypto::{construct_sshsig_pem, construct_sshsig_signed_data};
 use auths_sdk::ports::agent::{AgentSigningError, AgentSigningPort};
 
 #[cfg(unix)]
-use crate::commands::agent::{ensure_agent_running, get_default_socket_path};
+use crate::commands::daemon::{ensure_agent_running, get_default_socket_path};
 
 /// CLI adapter that delegates signing to the Unix SSH agent.
 ///

crates/auths-cli/src/bin/sign.rs

@@ -111,19 +111,20 @@ fn validate_verify_option(opt: &str) -> Result<()> {
 }
 
 fn parse_key_identifier(key_file: &str) -> Result<String> {
-    if let Some(alias) = key_file.strip_prefix("auths:") {
-        if alias.is_empty() {
-            bail!("Invalid Auths key format: alias cannot be empty. Use 'auths:<alias>'");
-        }
-        Ok(alias.to_string())
-    } else {
+    let key_ref =
+        auths_sdk::keychain::SigningKeyRef::parse(key_file).map_err(|e| anyhow::anyhow!(e))?;
+
+    if !matches!(key_ref, auths_sdk::keychain::SigningKeyRef::Uri { ref scheme, .. } if scheme == "auths")
+    {
         bail!(
             "Unsupported key format: '{}'. \
              Auths keys should be specified as 'auths:<alias>' \
              (e.g., 'auths:default' or 'auths:my-signing-key')",
             key_file
         );
     }
+
+    Ok(key_ref.bare_alias().as_str().to_string())
 }
 
 fn build_signing_context(alias: &str) -> Result<CommitSigningContext> {

crates/auths-cli/src/cli.rs

@@ -10,6 +10,7 @@ use crate::commands::approval::ApprovalCommand;
 use crate::commands::artifact::ArtifactCommand;
 use crate::commands::audit::AuditCommand;
 use crate::commands::auth::AuthCommand;
+use crate::commands::daemon::DaemonCommand;
 
 use crate::commands::commit::CommitCmd;
 use crate::commands::completions::CompletionsCommand;
@@ -101,6 +102,7 @@ pub enum RootCommand {
     Verify(UnifiedVerifyCommand),
     Status(StatusCommand),
     Whoami(WhoamiCommand),
+    Agent(AgentCommand),
 
     // ── Setup & Troubleshooting ──
     Demo(DemoCommand),
@@ -162,7 +164,7 @@ pub enum RootCommand {
     #[command(hide = true)]
     Emergency(EmergencyCommand),
     #[command(hide = true)]
-    Agent(AgentCommand),
+    Daemon(DaemonCommand),
     /// Aggregate treasury cap across a manager's sub-delegated agents.
     Treasury(TreasuryCommand),
     /// Verify witness-network anchor evidence (duplicity proofs) offline.

crates/auths-cli/src/commands/agent/agent_prompt.md

@@ -0,0 +1,19 @@
+<auths_delegated_identity>
+You have been granted a delegated cryptographic identity ({{LABEL}}) to sign your git commits in this workspace.
+
+# Core Directive
+Whenever you execute a `git commit` on behalf of the user, you MUST sign it using this identity.
+
+# Activation Instructions
+Before running ANY git commands that require signing, you MUST activate your signing environment for the current shell session by sourcing your environment script:
+`source {{ENV_PATH}}`
+
+This script automatically handles:
+- Injecting your `AUTHS_PASSPHRASE` into the environment so you do not need to prompt the user.
+- Setting up temporary `GIT_CONFIG_COUNT` overrides to force git to use the `auths-sign` binary.
+
+# Constraints & Rules
+1. NEVER attempt to manually modify the repository's `.git/config` file to configure signing. The `env.sh` script handles this cleanly via environment variables.
+2. NEVER attempt to run `ssh-agent`, `ssh-add`, or interact with standard GPG tools. `auths-sign` is a custom headless signer that replaces them.
+3. If a commit fails with a signing error, verify that you sourced the `env.sh` file in the EXACT same bash session/subshell as the `git commit` command.
+</auths_delegated_identity>