CLI

@vhyxseal/cli ships a vhyxseal binary. Every command is also exported as a function for scripts.

pnpm add -D @vhyxseal/cli

Command	What it does
vhyxseal init [--domain example.com]	Create vhyxseal.config.ts
vhyxseal simulate <url>	Fetch /__agent__/manifest.json the way an agent does, with version negotiation
vhyxseal verify [--strict]	Flag stale or broken contracts; --strict fails CI
vhyxseal audit [--json]	Contract coverage report
vhyxseal diff <before.json> <after.json> [--strict]	Detect changes that break agents: raised safety, new confirmation gates, removed components
vhyxseal keygen	Generate a 32-byte HMAC signing secret
vhyxseal sign <manifest.json> [--verify]	Sign in place (VHYXSEAL_SECRET) or verify an existing signature
vhyxseal visualize <manifest.json> [-o map.vhyx]	Animated VhyxChart map of your contracts and flows

In CI

# .github/workflows/contracts.yml
- run: npx vhyxseal verify --strict
- run: npx vhyxseal diff main-manifest.json vhyxseal.manifest.json --strict
- run: npx vhyxseal sign vhyxseal.manifest.json
  env:
    VHYXSEAL_SECRET: ${{ secrets.VHYXSEAL_SECRET }}