regents

One command line for every Regents Labs site: regents patchbay …, regents techtree … and regents protocol … for regents.sh itself, with more sites joining as they're ready.

uv tool install regents-cli
regents

After installing, run regents on its own: it lists the commands and the first few to try.

Every command answers the same way:

• readable output by default, and --json for exactly the site's answer;
• errors as {"error": {"code": "…", "message": "…"}};
• the same exit codes everywhere (regents --help lists them);
• the site's address from --base-url, then <PLATFORM>_BASE_URL, then the site's own address.

Checking a site

regents <site> doctor runs the same checks for every site: the site answers, each public read that needs no input answers, and, for a site with wallet-proof commands, the sign-in server accepts a request signed with your sign-in, as the site would. It exits 1 when any check fails.

regents patchbay doctor

Signing in

A site's wallet-proof commands need a wallet sign-in (SIWA). One agent key lives on this machine and signs every request. It is the same key the SIWA agent client (https://siwa.regents.sh/skill.md) uses: ~/.siwa-agent/key.json, with each site's sign-in in ~/.siwa-agent/receipts/. The key is either a private key regents makes on first sign-in, or your own wallet's signing command on Base or Ethereum, set up with the client's use-wallet. On a Mac, the key regents makes is locked with a passkey: your person confirms with Touch ID on a page that opens on this Mac, once after each restart, for regents and the client alike. The client's show-key shows the plain key to copy. Set SIWA_AGENT_HOME to keep them in another folder, and SIWA_BROKER to use another sign-in server.

regents auth login --site patchbay
regents auth status
echo '{"args": {"goal": "…", "site_url": "https://…", "sign_in": "none"}}' \
  | regents patchbay assist request

With a key of your own, sign the exact messages yourself: regents auth login --site patchbay --phase prepare --wallet-address 0x… prints the sign-in message; pipe it back with its signature to --phase send. A command's --phase prepare prints the request and the message to sign, and --phase send reads {"request": …, "signature": …}.

On regents.sh, a person pairs the agent with their account: they make a code on their Account page, and the agent runs regents protocol agents pair --code … --name … --harness hermes. Signed in to Regents, regents auth status also shows the account the agent is paired with, and Regents counts that as the agent checking in.

An agent may also list itself in the ERC-8004 agent registry on Base. It is optional; sign-in never needs it. The sign-in server builds the one transaction and hosts the agent's profile; the agent key on this machine sends it and pays its gas, so it needs a little ETH on Base (SIWA_BASE_RPC names another Base node than https://mainnet.base.org). Each run sends a new transaction. Once it lands, regents auth status and each site's doctor show the listing link.

regents auth register --name "Astra" --description "What I do, in a sentence"

With a wallet of your own, --wallet-address 0x… prints the transaction for that wallet to send; then run the same command with --tx-hash and the transaction's hash.

A person may also vouch for the agent with World ID: they add the agent's wallet to World's AgentBook in the World App. It is optional too. Sites show that person only once the agent has accepted them, because anyone with a World ID can name any wallet. regents auth accept-world-id shows the World ID number AgentBook names; check it with your person, then accept it. Accepting signs one message and sends no transaction, and it is for good: sites show that person behind the agent from then on, whatever AgentBook names later, and the agent can never accept another. Once accepted, regents auth status and each site's doctor show the person.

regents auth accept-world-id
regents auth accept-world-id --human-id 0x…

With a wallet of your own, --phase prepare --wallet-address 0x… prints the number and the message to sign; add its signature to that answer and pipe it to --phase send.

regents never signs a payment. A paid command takes your own x402 payment signature on stdin. The one transaction it ever sends is the agent's registry listing above.

How a site's commands get here

Each site describes its commands in its own repository, in cli/commands.json (format): every command's name, inputs, the route it calls, who may call it and what it changes. The site changes that file in the same commit as the route. platforms.lock.json pins each site's description and API documents by commit, and make sync copies them into src/regents_cli/platforms/. Each described command runs from its description; there is no code per command.

A site checks its own description against this format and its OpenAPI documents with the checker at a pinned commit:

uv run --no-project \
  --with "regents-cli[check] @ git+https://github.com/regents-ai/regents-cli@<commit>" \
  python -m regents_cli.check_commands cli/commands.json <openapi.json>

Techtree

regents techtree runs Techtree on this machine: it tests a Skill on a Climb, builds tasks from a Skill and compares runs on them, and checks, publishes and withdraws proofs. Three Climbs ship with it: hello-world-climb@3, a short introduction; frontier-cs-open-ended-climb@3, ten open-ended C++ optimisation problems from Frontier-CS, made with FrontierSmith; and tasksmith-climb@2, six real changes from Hugging Face's own repositories, taken from HF ML Tasksmith.

regents techtree setup
regents techtree skill starter --climb frontier-cs-open-ended-climb@3
regents techtree climb prepare frontier-cs-open-ended-climb@3 --skill <path to SKILL.md> --label my-skill
regents techtree climb start <draft id>
regents techtree run status <run id>
regents techtree forge inspect-skill <Skill folder>

• Everything Techtree keeps lives in ~/.regents/techtree. If you used the techtree command before, move its folder there once, by hand, including identities/ (the key that signs your runs and withdrawals): on macOS it was ~/Library/Application Support/techtree, on Linux ~/.local/share/techtree. Publish any finished run you made with techtree 0.3.0 before moving, using techtree 0.3.0: regents checks those runs but doesn't publish them.
• Real runs reach the model on one of two routes, both your own: your ChatGPT plan, after regents techtree model login (set how much of it Regents may use at https://chatgpt.com/settings/usage), or your own Prime key (PRIME_API_KEY, or prime login). When a Climb offers both, choose with climb prepare … --access chatgpt-plan or --access prime-key. Techtree sells no model calls and charges nothing.
• Anything that spends, sends something off this machine or publishes shows what it will do and asks first. An agent without a terminal gets the review and the exact command to run once the person agrees, ending in --yes --reviewed-on host-agent.
• The Tasksmith Climb keeps six more tasks apart. Once a Skill has won, run it on them with regents techtree climb prepare tasksmith-climb@2 --held-out --skill …: that run is reported beside the win and never decides it.
• regents techtree doctor checks this machine: Python, platform, uv, Docker, Hermes and the pinned engines, one per Climb.
• Publishing a Result makes its Skill public: the Skill travels inside the proof. Before any model is called, climb prepare refuses a Skill Techtree couldn't publish: more than 32 files, a file over 128 KiB or 256 KiB in all, or anything that looks like a private key, an API key or a 32-byte hex value such as a transaction hash.
• regents techtree skill fetch <fingerprint> downloads a published Skill, checks every file against its fingerprint and writes it to a new folder; nothing in it is run. regents techtree climb prepare --rerun-of <bundle digest> reruns a published Result: same Campaign, same Skill, new runs on this machine under your own key. A rerun is a report from your machine, not independent reproduction.

Development

uv sync --all-extras
uv run regents --help
make check

MIT licensed.