otel-a2a-relay-cli (o2r)

Standalone Go operator CLI for otel-a2a-relay (o2r). It is the operator surface for the relay's Agent Channels and, in a later phase, trust issuance. It replaces the removed coily channel command tree.

o2r is a plain tool. It does not import cli-guard and does not gate its own verbs (per agentic-os-kai#591). The repo's own dev commands are gated by ward / coily, but the shipped binary is unwrapped.

Install

The release pipeline cross-compiles o2r for macOS, Linux, and Windows (amd64 + arm64) and attaches each binary plus a .sha256 sidecar to every Forgejo release. Packaged installs download the prebuilt binary and verify the hash - no build-from-source on the install path.

Homebrew and Scoop are wired up as the flight-deck package repos land:

• Homebrew - flight-deck homebrew-tap (pending, tracked in the packaging epic).
• Scoop - flight-deck scoop-bucket (pending, tracked in the packaging epic).

Until those publish, install from a release asset directly or build from source:

make build      # -> ./bin/o2r

Usage

o2r channel list                      # OPEN channels as a table
o2r channel list --all --format json  # include closed, raw JSON
o2r channel create --title "build coordination"
o2r channel post VHGC --kind status --payload '{"progress":"green"}'
o2r channel read VHGC --format markdown
o2r channel state VHGC
o2r channel events VHGC --kind comms --limit 20
o2r channel close VHGC

Configuration

Two values, resolved as default <- ~/.config/o2r/config.yaml <- ./.o2r.yaml <- environment:

• base_url (O2R_BASE_URL) - the Agent Channel deployment base URL. Default http://api (the reference deployment's tailnet sidecar).
• ssm_token_path (O2R_SSM_TOKEN_PATH) - the AWS SSM path holding the bearer token. Default /coilysiren/backend/datastore-token. Resolved per session via the AWS SDK for Go, decrypting the SecureString. Credentials come from the operator's resolved AWS environment.

Status

• Phase 0 - bootstrap. Done.
• Phase 1 - Agent Channel coordination verbs (o2r channel ...). Done.
• Phase 2 - trust issuance verbs (request / issue / verify). Blocked on the envelope schema artifact (otel-a2a-relay#42).

See also

• AGENTS.md - agent operating context for this repo.
• docs/FEATURES.md - inventory of what ships today.
• Agent Channel protocol - the protocol this CLI drives.