@agentvalet/client 0.1.0

package/README.md

@@ -0,0 +1,144 @@
+# @agentvalet/client
+
+Call approved SaaS platforms from any Node agent. Your agent never holds the
+downstream credential — AgentValet signs a short-lived identity assertion,
+checks the call against the owner's grants and policy, injects the credential
+at call time, and writes an audit record.
+
+**Not in an MCP host?** This is your package. If you *are* inside Claude Code,
+Claude Desktop, Cursor, or another MCP-aware host, install
+[`@agentvalet/mcp-server`](https://www.npmjs.com/package/@agentvalet/mcp-server)
+instead and call `use_platform` — you get the same guarantees with no code.
+
+Building your own MCP *server* and want to enforce policy inside it? That's
+[`@agentvalet/mcp-broker`](https://www.npmjs.com/package/@agentvalet/mcp-broker).
+
+## Install
+
+```bash
+npm install @agentvalet/client
+```
+
+Node 18+. One dependency (`jose`, for RS256 signing).
+
+## Get an agent identity
+
+```bash
+npx @agentvalet/register
+```
+
+This generates an RSA keypair **locally** — the private key never leaves your
+machine — registers the public half, and writes `~/.agentvalet/agent.key`.
+
+## Use it
+
+```typescript
+import { AgentValet } from "@agentvalet/client";
+
+const av = AgentValet.fromEnv();
+
+const result = await av.call({
+  platform: "slack",
+  endpoint: "/api/chat.postMessage",
+  method: "POST",
+  scope: "chat:write",
+  data: { channel: "#general", text: "Deploy finished." },
+});
+```
+
+`fromEnv()` reads `AGENTVALET_AGENT_ID` / `AGENTVALET_OWNER_ID` (or the bare
+`AGENT_ID` / `OWNER_ID` the CLI writes) and finds the key via
+`AGENT_PRIVATE_KEY_B64`, `AGENT_PRIVATE_KEY_PATH`, `AGENT_PRIVATE_KEY`, or
+`~/.agentvalet/agent.key`. To wire it up explicitly:
+
+```typescript
+const av = new AgentValet({
+  agentId: process.env.AGENT_ID!,
+  ownerId: process.env.OWNER_ID!,
+  privateKey: process.env.AGENT_PRIVATE_KEY!,
+  proxyUrl: "https://api.agentvalet.ai",   // default
+});
+```
+
+## Approvals are just a slower call
+
+When the owner has marked a scope as requiring approval, the proxy holds the
+action and `call()` waits. If the owner approves, the proxy re-runs the call and
+you get the result back — from your code's point of view it simply took longer.
+
+```typescript
+const av = AgentValet.fromEnv({
+  onApprovalPending: ({ elapsedMs }) =>
+    console.log(`waiting for owner… ${Math.round(elapsedMs / 1000)}s`),
+});
+```
+
+If nobody responds inside the budget (50s by default), you get an
+`ApprovalTimeoutError` — **not** a failure. The action stays queued. Keep the
+`approvalId` and resume whenever you like:
+
+```typescript
+import { ApprovalTimeoutError } from "@agentvalet/client";
+
+try {
+  await av.call({ platform: "stripe", endpoint: "/v1/refunds", method: "POST", scope: "charge" });
+} catch (err) {
+  if (err instanceof ApprovalTimeoutError) {
+    await saveForLater(err.approvalId);          // e.g. into your job queue
+  }
+}
+
+// …later, in another process:
+const result = await av.waitForApproval(approvalId);
+```
+
+Set `approvalTimeoutMs: 0` if you never want to block — `call()` then throws
+`ApprovalTimeoutError` the moment approval is required.
+
+## Errors you can branch on
+
+Every throw is typed, so you never string-match an error envelope:
+
+| Error | Means | What to do |
+|---|---|---|
+| `ConfigError` | Bad/missing identity or key | Fix config; thrown before any network call |
+| `NetworkError` | Transport failed | `.message` diagnoses DNS / TLS / firewall / timeout |
+| `AccessDeniedError` | No grant, or policy blocked it | `requestAccess()` — see below |
+| `ApprovalDeniedError` | Owner said no | Terminal. Don't retry |
+| `ApprovalExpiredError` | Aged out server-side | Re-issue the call |
+| `ApprovalTimeoutError` | You stopped waiting | Resume via `waitForApproval(approvalId)` |
+| `UpstreamError` | The SaaS itself returned non-2xx | `.status` / `.data` hold the upstream reply |
+| `ProxyError` | Anything else from the broker | `.status` / `.body` |
+
+## Asking for access you don't have
+
+Deny-by-default means a scope you were never granted returns
+`AccessDeniedError`. Your agent can ask for it:
+
+```typescript
+const { status } = await av.requestAccess({
+  platform: "slack",
+  scope: "chat:write",
+  reason: "Post deploy notifications to #general",
+});
+if (status === "approved") { /* retry the original call */ }
+```
+
+## Checking before you act
+
+```typescript
+await av.listPlatforms();                  // what this agent is actually granted
+await av.pendingActions();                 // queued behind an approval
+await av.evaluate("stripe", "charge");     // dry-run the decision, no side effect
+```
+
+`evaluate()` is worth a call before anything destructive — it tells you whether
+the action would be allowed without performing it.
+
+## Self-hosting
+
+Point `proxyUrl` at your own deployment. Everything else is identical.
+
+## License
+
+MIT

package/dist/client.d.ts

@@ -0,0 +1,111 @@
+import { type FetchLike } from "./http.js";
+export interface AgentValetOptions {
+    agentId: string;
+    ownerId: string;
+    /** RS256 private key, PEM (PKCS#8). */
+    privateKey: string;
+    /** Defaults to https://api.agentvalet.ai. */
+    proxyUrl?: string;
+    /** Per-request network timeout. Default 15s. */
+    timeoutMs?: number;
+    /**
+     * How long `call()` waits on an owner approval before throwing
+     * ApprovalTimeoutError. Default 50s. Set 0 to never wait — `call()` then
+     * throws immediately with the approval_id for you to resume later.
+     */
+    approvalTimeoutMs?: number;
+    /** Approval poll interval. Default 2s. */
+    approvalPollMs?: number;
+    /** Injectable for tests / custom agents. Defaults to global fetch. */
+    fetch?: FetchLike;
+    /** Called roughly every poll while an approval is outstanding. */
+    onApprovalPending?: (info: {
+        approvalId: string;
+        elapsedMs: number;
+        platform: string;
+        scope: string;
+        endpoint: string;
+    }) => void;
+}
+export interface CallRequest {
+    platform: string;
+    endpoint: string;
+    method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+    scope: string;
+    data?: unknown;
+    /** Pick a specific connection when the platform has several. */
+    connectionId?: string;
+    /** Justification shown to the approver. Normalized and capped server-side. */
+    reason?: string;
+    /** Overrides the client-level approval budget for this one call. */
+    approvalTimeoutMs?: number;
+}
+export declare class AgentValet {
+    readonly agentId: string;
+    readonly ownerId: string;
+    readonly proxyUrl: string;
+    private readonly privateKeyPem;
+    private readonly timeoutMs;
+    private readonly approvalTimeoutMs;
+    private readonly approvalPollMs;
+    private readonly doFetch;
+    private readonly onApprovalPending?;
+    private importedKey;
+    constructor(opts: AgentValetOptions);
+    /**
+     * Builds a client from the environment. Works out of the box on a machine
+     * that has run `npx @agentvalet/register`. See env.ts for the accepted names.
+     */
+    static fromEnv(overrides?: Partial<AgentValetOptions>): AgentValet;
+    /**
+     * Calls an approved platform through the broker. Returns the upstream SaaS
+     * response body, parsed.
+     *
+     * If the owner must approve, this blocks for up to `approvalTimeoutMs` and
+     * then returns the result transparently — from the caller's point of view an
+     * approved call just took longer. If nobody approves in time it throws
+     * ApprovalTimeoutError, whose `approvalId` you can resume with
+     * `waitForApproval()`; the action stays queued server-side either way.
+     */
+    call<T = unknown>(req: CallRequest): Promise<T>;
+    /**
+     * Resumes waiting on an outstanding approval. Use with the `approvalId` from
+     * a caught ApprovalTimeoutError — the action is queued server-side, so this
+     * picks up exactly where `call()` left off.
+     */
+    waitForApproval<T = unknown>(approvalId: string, ctx?: {
+        platform?: string;
+        scope?: string;
+        endpoint?: string;
+        timeoutMs?: number;
+    }): Promise<T>;
+    /** Platforms and scopes this agent is actually granted. Deny-by-default: if
+     *  it isn't here, `call()` will 403. */
+    listPlatforms<T = unknown>(): Promise<T>;
+    /** Actions queued behind an owner approval that haven't resolved yet. */
+    pendingActions<T = unknown>(): Promise<T>;
+    /**
+     * Dry-run an authorization decision without performing the action. Cheap way
+     * to check a destructive scope before committing to a side effect.
+     */
+    evaluate<T = unknown>(platform: string, scope: string): Promise<T>;
+    /**
+     * Asks an org admin to grant platform+scope, then polls for the decision.
+     * Resolves "approved" | "denied" | "pending" — on "approved", retry the
+     * original `call()`.
+     */
+    requestAccess(req: {
+        platform: string;
+        scope?: string;
+        reason?: string;
+        timeoutMs?: number;
+    }): Promise<{
+        status: "approved" | "denied" | "pending";
+        requestToken: string;
+    }>;
+    /** Signs a short-lived (60s) RS256 assertion of this agent's identity. */
+    signJWT(): Promise<string>;
+    private authedFetch;
+    private getJson;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAwBA,OAAO,EAA+D,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAcxG,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,KAAK,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAYD,qBAAa,UAAU;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAY;IACpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAyC;IAC5E,OAAO,CAAC,WAAW,CAAwB;gBAE/B,IAAI,EAAE,iBAAiB;IAgBnC;;;OAGG;IACH,MAAM,CAAC,OAAO,CAAC,SAAS,GAAE,OAAO,CAAC,iBAAiB,CAAM,GAAG,UAAU;IAoBtE;;;;;;;;;OASG;IACG,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAwCrD;;;;OAIG;IACG,eAAe,CAAC,CAAC,GAAG,OAAO,EAC/B,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACrF,OAAO,CAAC,CAAC,CAAC;IAiDb;4CACwC;IAClC,aAAa,CAAC,CAAC,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC;IAI9C,yEAAyE;IACnE,cAAc,CAAC,CAAC,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC;IAI/C;;;OAGG;IACG,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAcxE;;;;OAIG;IACG,aAAa,CACjB,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7E,OAAO,CAAC;QAAE,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IA8B/E,0EAA0E;IACpE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;YAiBlB,WAAW;YAyBX,OAAO;CAMtB"}

package/dist/client.js

@@ -0,0 +1,269 @@
+// packages/client/src/client.ts
+//
+// The AgentValet client. This is the non-MCP path: a developer writing their
+// own agent (LangChain, a cron job, a plain Node service) gets the same
+// governance guarantees the MCP server provides — signed agent identity,
+// deny-by-default scope enforcement, the owner-approval long-poll, and the
+// audit record — without hand-rolling RS256 JWTs against /v1/actions.
+//
+// Deliberate parity with apps/mcp-server: same endpoints, same 50s approval
+// budget, same 2s poll interval, same one-shot 401 retry. If these drift, an
+// operator debugging the SDK can no longer reason from the MCP server's
+// behaviour (and vice versa).
+import { SignJWT, importPKCS8 } from "jose";
+import { AccessDeniedError, ApprovalDeniedError, ApprovalExpiredError, ApprovalTimeoutError, ConfigError, ProxyError, UpstreamError, } from "./errors.js";
+import { diagnoseNetworkError, fetchWithTimeout, sleep, tryParseJson } from "./http.js";
+import { DEFAULT_PROXY_URL, agentIdFromEnv, ownerIdFromEnv, privateKeyFromEnv, proxyUrlFromEnv, } from "./env.js";
+/** Matches the mcp-server's budget: under Claude Desktop's 60s tool timeout. */
+const DEFAULT_APPROVAL_TIMEOUT_MS = 50_000;
+const DEFAULT_APPROVAL_POLL_MS = 2_000;
+const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;
+export class AgentValet {
+    agentId;
+    ownerId;
+    proxyUrl;
+    privateKeyPem;
+    timeoutMs;
+    approvalTimeoutMs;
+    approvalPollMs;
+    doFetch;
+    onApprovalPending;
+    importedKey = null;
+    constructor(opts) {
+        if (!opts.agentId)
+            throw new ConfigError("agentId is required");
+        if (!opts.ownerId)
+            throw new ConfigError("ownerId is required");
+        if (!opts.privateKey)
+            throw new ConfigError("privateKey is required");
+        this.agentId = opts.agentId;
+        this.ownerId = opts.ownerId;
+        this.privateKeyPem = opts.privateKey;
+        this.proxyUrl = (opts.proxyUrl ?? DEFAULT_PROXY_URL).replace(/\/$/, "");
+        this.timeoutMs = opts.timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
+        this.approvalTimeoutMs = opts.approvalTimeoutMs ?? DEFAULT_APPROVAL_TIMEOUT_MS;
+        this.approvalPollMs = opts.approvalPollMs ?? DEFAULT_APPROVAL_POLL_MS;
+        this.doFetch = opts.fetch ?? ((url, init) => fetch(url, init));
+        this.onApprovalPending = opts.onApprovalPending;
+    }
+    /**
+     * Builds a client from the environment. Works out of the box on a machine
+     * that has run `npx @agentvalet/register`. See env.ts for the accepted names.
+     */
+    static fromEnv(overrides = {}) {
+        const agentId = overrides.agentId ?? agentIdFromEnv();
+        const ownerId = overrides.ownerId ?? ownerIdFromEnv();
+        if (!agentId || !ownerId) {
+            throw new ConfigError("AgentValet identity not found in the environment. Set AGENTVALET_AGENT_ID and " +
+                "AGENTVALET_OWNER_ID (or AGENT_ID / OWNER_ID), or run `npx @agentvalet/register`.");
+        }
+        return new AgentValet({
+            ...overrides,
+            agentId,
+            ownerId,
+            privateKey: overrides.privateKey ?? privateKeyFromEnv(),
+            proxyUrl: overrides.proxyUrl ?? proxyUrlFromEnv(),
+        });
+    }
+    // ---- core ---------------------------------------------------------------
+    /**
+     * Calls an approved platform through the broker. Returns the upstream SaaS
+     * response body, parsed.
+     *
+     * If the owner must approve, this blocks for up to `approvalTimeoutMs` and
+     * then returns the result transparently — from the caller's point of view an
+     * approved call just took longer. If nobody approves in time it throws
+     * ApprovalTimeoutError, whose `approvalId` you can resume with
+     * `waitForApproval()`; the action stays queued server-side either way.
+     */
+    async call(req) {
+        const body = {
+            platform: req.platform,
+            endpoint: req.endpoint,
+            method: req.method ?? "GET",
+            scope: req.scope,
+            ...(req.data !== undefined && { data: req.data }),
+            ...(req.connectionId ? { connection_id: req.connectionId } : {}),
+            ...(req.reason ? { reason: req.reason } : {}),
+        };
+        const res = await this.authedFetch("/v1/actions", { method: "POST", body: JSON.stringify(body) });
+        const text = await res.text();
+        // 202 + approval_id → the owner needs to approve. Enter the long-poll.
+        if (res.status === 202) {
+            const approvalId = tryParseJson(text)?.approval_id;
+            if (approvalId) {
+                return (await this.waitForApproval(approvalId, {
+                    platform: req.platform,
+                    scope: req.scope,
+                    endpoint: req.endpoint,
+                    timeoutMs: req.approvalTimeoutMs ?? this.approvalTimeoutMs,
+                }));
+            }
+        }
+        if (!res.ok) {
+            // 403 is the proxy's authorize-pipeline denial (no grant, or policy
+            // blocked). Surface it as its own type so callers can branch into
+            // requestAccess() instead of dead-ending on a generic failure.
+            if (res.status === 403) {
+                throw new AccessDeniedError(res.status, text, req.platform, req.scope);
+            }
+            throw new ProxyError(res.status, text);
+        }
+        return (tryParseJson(text) ?? text);
+    }
+    /**
+     * Resumes waiting on an outstanding approval. Use with the `approvalId` from
+     * a caught ApprovalTimeoutError — the action is queued server-side, so this
+     * picks up exactly where `call()` left off.
+     */
+    async waitForApproval(approvalId, ctx = {}) {
+        const budget = ctx.timeoutMs ?? this.approvalTimeoutMs;
+        const startedAt = Date.now();
+        while (Date.now() - startedAt < budget) {
+            await sleep(this.approvalPollMs);
+            const elapsed = Date.now() - startedAt;
+            let res;
+            try {
+                res = await this.authedFetch(`/v1/approvals/${encodeURIComponent(approvalId)}`, { method: "GET" });
+            }
+            catch {
+                continue; // transient — try again next tick
+            }
+            if (!res.ok)
+                throw new ProxyError(res.status, await res.text());
+            const status = (await res.json());
+            if (status.status === "denied") {
+                throw new ApprovalDeniedError(approvalId, status.execution_error);
+            }
+            if (status.status === "expired") {
+                throw new ApprovalExpiredError(approvalId);
+            }
+            if (status.execution_error) {
+                // Approved, but the re-execution failed (upstream down, agent revoked).
+                throw new ProxyError(502, `Approved but re-execution failed: ${status.execution_error}`);
+            }
+            if (status.status === "approved" && status.executed_at && status.result) {
+                const r = status.result;
+                if (r.status < 200 || r.status >= 300)
+                    throw new UpstreamError(r.status, r.data);
+                return r.data;
+            }
+            this.onApprovalPending?.({
+                approvalId,
+                elapsedMs: elapsed,
+                platform: ctx.platform ?? "",
+                scope: ctx.scope ?? "",
+                endpoint: ctx.endpoint ?? "",
+            });
+        }
+        throw new ApprovalTimeoutError(approvalId, budget);
+    }
+    // ---- discovery / governance --------------------------------------------
+    /** Platforms and scopes this agent is actually granted. Deny-by-default: if
+     *  it isn't here, `call()` will 403. */
+    async listPlatforms() {
+        return this.getJson("/v1/agent/permissions");
+    }
+    /** Actions queued behind an owner approval that haven't resolved yet. */
+    async pendingActions() {
+        return this.getJson("/v1/agents/me/pending-actions");
+    }
+    /**
+     * Dry-run an authorization decision without performing the action. Cheap way
+     * to check a destructive scope before committing to a side effect.
+     */
+    async evaluate(platform, scope) {
+        const res = await this.authedFetch("/v1/authzen/access", {
+            method: "POST",
+            body: JSON.stringify({
+                subject: { type: "agent", id: this.agentId },
+                action: { name: "tool_call" },
+                resource: { type: "platform_scope", id: `${platform}:${scope}` },
+            }),
+        });
+        const text = await res.text();
+        if (!res.ok)
+            throw new ProxyError(res.status, text);
+        return (tryParseJson(text) ?? text);
+    }
+    /**
+     * Asks an org admin to grant platform+scope, then polls for the decision.
+     * Resolves "approved" | "denied" | "pending" — on "approved", retry the
+     * original `call()`.
+     */
+    async requestAccess(req) {
+        const submit = await this.authedFetch("/v1/access-request", {
+            method: "POST",
+            body: JSON.stringify({ platform: req.platform, scope: req.scope, reason: req.reason }),
+        });
+        if (!submit.ok && submit.status !== 202) {
+            throw new ProxyError(submit.status, await submit.text());
+        }
+        const { request_token: token } = (await submit.json());
+        if (!token)
+            throw new ProxyError(submit.status, "Access request did not return a request_token.");
+        const deadline = Date.now() + (req.timeoutMs ?? this.approvalTimeoutMs);
+        while (Date.now() < deadline) {
+            await sleep(this.approvalPollMs);
+            let res;
+            try {
+                res = await this.authedFetch(`/v1/access-request/status/${encodeURIComponent(token)}`, { method: "GET" });
+            }
+            catch {
+                continue;
+            }
+            if (!res.ok)
+                continue;
+            const s = (await res.json());
+            if (s.status === "approved")
+                return { status: "approved", requestToken: token };
+            if (s.status === "denied")
+                return { status: "denied", requestToken: token };
+        }
+        return { status: "pending", requestToken: token };
+    }
+    // ---- transport ----------------------------------------------------------
+    /** Signs a short-lived (60s) RS256 assertion of this agent's identity. */
+    async signJWT() {
+        if (!this.importedKey) {
+            try {
+                this.importedKey = await importPKCS8(this.privateKeyPem, "RS256");
+            }
+            catch (err) {
+                throw new ConfigError(`Private key is not a valid PKCS#8 RS256 PEM: ${err instanceof Error ? err.message : err}`);
+            }
+        }
+        return new SignJWT({ agent_id: this.agentId, owner_id: this.ownerId })
+            .setProtectedHeader({ alg: "RS256" })
+            .setIssuedAt()
+            .setExpirationTime("60s")
+            .sign(this.importedKey);
+    }
+    async authedFetch(path, init) {
+        const url = `${this.proxyUrl}${path}`;
+        const once = async () => {
+            const token = await this.signJWT();
+            try {
+                return await fetchWithTimeout(this.doFetch, url, {
+                    ...init,
+                    headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json", ...init.headers },
+                }, this.timeoutMs);
+            }
+            catch (err) {
+                throw diagnoseNetworkError(err, this.proxyUrl);
+            }
+        };
+        const res = await once();
+        // Retry once on 401 — the JWT may have been minted either side of a clock
+        // skew boundary. Same one-shot retry the mcp-server does.
+        return res.status === 401 ? once() : res;
+    }
+    async getJson(path) {
+        const res = await this.authedFetch(path, { method: "GET" });
+        const text = await res.text();
+        if (!res.ok)
+            throw new ProxyError(res.status, text);
+        return (tryParseJson(text) ?? text);
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,yEAAyE;AACzE,2EAA2E;AAC3E,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,8BAA8B;AAE9B,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAE5C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,UAAU,EACV,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAkB,MAAM,WAAW,CAAC;AACxG,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,UAAU,CAAC;AAElB,gFAAgF;AAChF,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAC3C,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAuD1C,MAAM,OAAO,UAAU;IACZ,OAAO,CAAS;IAChB,OAAO,CAAS;IAChB,QAAQ,CAAS;IACT,aAAa,CAAS;IACtB,SAAS,CAAS;IAClB,iBAAiB,CAAS;IAC1B,cAAc,CAAS;IACvB,OAAO,CAAY;IACnB,iBAAiB,CAA0C;IACpE,WAAW,GAAmB,IAAI,CAAC;IAE3C,YAAY,IAAuB;QACjC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;QAEtE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,0BAA0B,CAAC;QAC9D,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,2BAA2B,CAAC;QAC/E,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACtE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAAO,CAAC,YAAwC,EAAE;QACvD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,WAAW,CACnB,gFAAgF;gBAC9E,kFAAkF,CACrF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,UAAU,CAAC;YACpB,GAAG,SAAS;YACZ,OAAO;YACP,OAAO;YACP,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,iBAAiB,EAAE;YACvD,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,eAAe,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAE5E;;;;;;;;;OASG;IACH,KAAK,CAAC,IAAI,CAAc,GAAgB;QACtC,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;YAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;YACjD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClG,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAE9B,uEAAuE;QACvE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,UAAU,GAAI,YAAY,CAAC,IAAI,CAA0C,EAAE,WAAW,CAAC;YAC7F,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,IAAI,CAAC,eAAe,CAAI,UAAU,EAAE;oBAChD,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,SAAS,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,iBAAiB;iBAC3D,CAAC,CAAM,CAAC;YACX,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,oEAAoE;YACpE,kEAAkE;YAClE,+DAA+D;YAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAM,CAAC;IAC3C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CACnB,UAAkB,EAClB,MAAoF,EAAE;QAEtF,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,iBAAiB,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAAC;YACvC,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAEvC,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACrG,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,kCAAkC;YAC9C,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAEhE,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAC;YAE5D,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC3B,wEAAwE;gBACxE,MAAM,IAAI,UAAU,CAAC,GAAG,EAAE,qCAAqC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;gBACxB,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;oBAAE,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjF,OAAO,CAAC,CAAC,IAAS,CAAC;YACrB,CAAC;YAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,UAAU;gBACV,SAAS,EAAE,OAAO;gBAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;gBAC5B,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;gBACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,2EAA2E;IAE3E;4CACwC;IACxC,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,OAAO,CAAI,uBAAuB,CAAC,CAAC;IAClD,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,OAAO,CAAI,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAc,QAAgB,EAAE,KAAa;QACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE;gBAC5C,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;gBAC7B,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,QAAQ,IAAI,KAAK,EAAE,EAAE;aACjE,CAAC;SACH,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpD,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAM,CAAC;IAC3C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CACjB,GAA8E;QAE9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;SACvF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAA+B,CAAC;QACrF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,gDAAgD,CAAC,CAAC;QAElG,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACjC,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,6BAA6B,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5G,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,SAAS;YACtB,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;YACpD,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YAChF,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC9E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACpD,CAAC;IAED,4EAA4E;IAE5E,0EAA0E;IAC1E,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,IAAI,CAAC,WAAW,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACpE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,WAAW,CACnB,gDAAgD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAC3F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;aACnE,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACpC,WAAW,EAAE;aACb,iBAAiB,CAAC,KAAK,CAAC;aACxB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAiB;QACvD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;YACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,MAAM,gBAAgB,CAC3B,IAAI,CAAC,OAAO,EACZ,GAAG,EACH;oBACE,GAAG,IAAI;oBACP,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;iBACnG,EACD,IAAI,CAAC,SAAS,CACf,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;QACzB,0EAA0E;QAC1E,0DAA0D;QAC1D,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,IAAY;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpD,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAM,CAAC;IAC3C,CAAC;CACF"}

package/dist/env.d.ts

@@ -0,0 +1,16 @@
+export declare const DEFAULT_PROXY_URL = "https://api.agentvalet.ai";
+export declare function agentIdFromEnv(): string | null;
+export declare function ownerIdFromEnv(): string | null;
+export declare function proxyUrlFromEnv(): string;
+/**
+ * Resolves the RS256 private key PEM, in precedence order:
+ *   1. AGENT_PRIVATE_KEY_B64  — base64-encoded PEM (12-factor / container safe)
+ *   2. AGENT_PRIVATE_KEY_PATH — path to a PEM file
+ *   3. AGENT_PRIVATE_KEY      — raw multi-line PEM, or \n-escaped single line
+ *   4. ~/.agentvalet/agent.key — written by `npx @agentvalet/register`
+ *
+ * Same order and same formats as the mcp-server's pem.ts, so a dev who already
+ * has the MCP server working can construct the SDK with no new setup.
+ */
+export declare function privateKeyFromEnv(): string;
+//# sourceMappingURL=env.d.ts.map

package/dist/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,iBAAiB,8BAA8B,CAAC;AAmB7D,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAE9C;AAED,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAE9C;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAiC1C"}

package/dist/env.js

@@ -0,0 +1,90 @@
+// packages/client/src/env.ts
+//
+// Environment resolution for AgentValet.fromEnv().
+//
+// Accepts BOTH naming conventions already in the wild: the bare names the
+// mcp-server/MCPB write (AGENT_ID, OWNER_ID, PROXY_URL, AGENT_PRIVATE_KEY*)
+// and AGENTVALET_-prefixed aliases, which is what the docs and the
+// credentials-not-configured message tell people to set. A machine that has
+// been through `npx @agentvalet/register` already satisfies the bare set, so
+// fromEnv() works with zero extra config there.
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { ConfigError } from "./errors.js";
+export const DEFAULT_PROXY_URL = "https://api.agentvalet.ai";
+// Treat empty strings and unresolved MCPB placeholders ("${user_config.foo}")
+// as not-set. The MCPB writes literal placeholders when a user_config field is
+// left blank, and a literal "${...}" agent id fails far more confusingly later.
+function readEnv(name) {
+    const v = process.env[name];
+    if (v === undefined)
+        return null;
+    const t = v.trim();
+    if (t === "")
+        return null;
+    if (t.startsWith("${") && t.endsWith("}"))
+        return null;
+    return t;
+}
+/** AGENTVALET_-prefixed name wins over the bare name when both are set. */
+function readEither(suffix) {
+    return readEnv(`AGENTVALET_${suffix}`) ?? readEnv(suffix);
+}
+export function agentIdFromEnv() {
+    return readEither("AGENT_ID");
+}
+export function ownerIdFromEnv() {
+    return readEither("OWNER_ID");
+}
+export function proxyUrlFromEnv() {
+    return (readEither("PROXY_URL") ?? DEFAULT_PROXY_URL).replace(/\/$/, "");
+}
+/**
+ * Resolves the RS256 private key PEM, in precedence order:
+ *   1. AGENT_PRIVATE_KEY_B64  — base64-encoded PEM (12-factor / container safe)
+ *   2. AGENT_PRIVATE_KEY_PATH — path to a PEM file
+ *   3. AGENT_PRIVATE_KEY      — raw multi-line PEM, or \n-escaped single line
+ *   4. ~/.agentvalet/agent.key — written by `npx @agentvalet/register`
+ *
+ * Same order and same formats as the mcp-server's pem.ts, so a dev who already
+ * has the MCP server working can construct the SDK with no new setup.
+ */
+export function privateKeyFromEnv() {
+    const b64 = readEither("AGENT_PRIVATE_KEY_B64");
+    if (b64)
+        return Buffer.from(b64, "base64").toString("utf-8").trim();
+    const path = readEither("AGENT_PRIVATE_KEY_PATH");
+    if (path) {
+        try {
+            return readFileSync(path, "utf-8").trim();
+        }
+        catch (err) {
+            throw new ConfigError(`Cannot read AGENT_PRIVATE_KEY_PATH (${path}): ${err instanceof Error ? err.message : err}`);
+        }
+    }
+    const raw = readEither("AGENT_PRIVATE_KEY");
+    if (raw) {
+        const unescaped = raw.replace(/\\n/g, "\n");
+        // Tolerate a bare base64 blob with the PEM armour stripped — a common
+        // casualty of pasting a key through a secrets UI that trims delimiters.
+        if (!unescaped.startsWith("-----")) {
+            return `-----BEGIN PRIVATE KEY-----\n${unescaped}\n-----END PRIVATE KEY-----`;
+        }
+        return unescaped;
+    }
+    const diskKey = readDiskKey();
+    if (diskKey)
+        return diskKey;
+    throw new ConfigError("No private key found. Set AGENT_PRIVATE_KEY, AGENT_PRIVATE_KEY_PATH, or AGENT_PRIVATE_KEY_B64, " +
+        "or run `npx @agentvalet/register` to create an agent and write ~/.agentvalet/agent.key.");
+}
+function readDiskKey() {
+    try {
+        return readFileSync(join(homedir(), ".agentvalet", "agent.key"), "utf-8").trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,EAAE;AACF,mDAAmD;AACnD,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,mEAAmE;AACnE,4EAA4E;AAC5E,6EAA6E;AAC7E,gDAAgD;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AAE7D,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,2EAA2E;AAC3E,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,OAAO,CAAC,cAAc,MAAM,EAAE,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,uBAAuB,CAAC,CAAC;IAChD,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAEpE,MAAM,IAAI,GAAG,UAAU,CAAC,wBAAwB,CAAC,CAAC;IAClD,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CACnB,uCAAuC,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAC5C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5C,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,gCAAgC,SAAS,6BAA6B,CAAC;QAChF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,MAAM,IAAI,WAAW,CACnB,iGAAiG;QAC/F,yFAAyF,CAC5F,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,52 @@
+export declare class AgentValetError extends Error {
+    constructor(message: string);
+}
+/** Missing/!malformed identity or key — thrown before any network call. */
+export declare class ConfigError extends AgentValetError {
+}
+/** fetch() itself failed. `.hint` carries an actionable diagnosis. */
+export declare class NetworkError extends AgentValetError {
+    readonly cause: unknown;
+    constructor(message: string, cause: unknown);
+}
+/** Non-2xx from the AgentValet proxy that isn't a more specific case below. */
+export declare class ProxyError extends AgentValetError {
+    readonly status: number;
+    readonly body: string;
+    constructor(status: number, body: string);
+}
+/**
+ * 403 — the agent has no grant for this platform+scope, or policy blocked it.
+ * Recoverable: call `requestAccess({ platform, scope, reason })`.
+ */
+export declare class AccessDeniedError extends ProxyError {
+    readonly platform: string;
+    readonly scope: string;
+    constructor(status: number, body: string, platform: string, scope: string);
+}
+/** The owner explicitly denied the action. Terminal — do not retry. */
+export declare class ApprovalDeniedError extends AgentValetError {
+    readonly approvalId: string;
+    constructor(approvalId: string, detail?: string);
+}
+/** The approval request aged out server-side before anyone responded. */
+export declare class ApprovalExpiredError extends AgentValetError {
+    readonly approvalId: string;
+    constructor(approvalId: string);
+}
+/**
+ * We stopped waiting, but the action is still queued server-side and will run
+ * if the owner approves. NOT a failure — hold `approvalId` and resume later
+ * with `client.waitForApproval(approvalId)`.
+ */
+export declare class ApprovalTimeoutError extends AgentValetError {
+    readonly approvalId: string;
+    constructor(approvalId: string, waitedMs: number);
+}
+/** Approved and executed, but the upstream SaaS returned a non-2xx. */
+export declare class UpstreamError extends AgentValetError {
+    readonly status: number;
+    readonly data: unknown;
+    constructor(status: number, data: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAMA,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,2EAA2E;AAC3E,qBAAa,WAAY,SAAQ,eAAe;CAAG;AAEnD,sEAAsE;AACtE,qBAAa,YAAa,SAAQ,eAAe;IAClB,QAAQ,CAAC,KAAK,EAAE,OAAO;gBAAxC,OAAO,EAAE,MAAM,EAAW,KAAK,EAAE,OAAO;CAGrD;AAED,+EAA+E;AAC/E,qBAAa,UAAW,SAAQ,eAAe;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAArC,MAAM,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM;CAG3D;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;IACL,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAA/E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAW,QAAQ,EAAE,MAAM,EAAW,KAAK,EAAE,MAAM;CAM5F;AAED,uEAAuE;AACvE,qBAAa,mBAAoB,SAAQ,eAAe;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAGzD;AAED,yEAAyE;AACzE,qBAAa,oBAAqB,SAAQ,eAAe;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM;CAGxC;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,eAAe;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAM1D;AAED,uEAAuE;AACvE,qBAAa,aAAc,SAAQ,eAAe;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO;gBAAtC,MAAM,EAAE,MAAM,EAAW,IAAI,EAAE,OAAO;CAG5D"}

package/dist/errors.js

@@ -0,0 +1,88 @@
+// packages/client/src/errors.ts
+//
+// Typed error hierarchy. The whole point of the SDK over raw /v1/actions is
+// that a caller can branch on WHY a call failed without string-matching the
+// proxy's error envelope. Every throw from the client is one of these.
+export class AgentValetError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = new.target.name;
+    }
+}
+/** Missing/!malformed identity or key — thrown before any network call. */
+export class ConfigError extends AgentValetError {
+}
+/** fetch() itself failed. `.hint` carries an actionable diagnosis. */
+export class NetworkError extends AgentValetError {
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+    }
+}
+/** Non-2xx from the AgentValet proxy that isn't a more specific case below. */
+export class ProxyError extends AgentValetError {
+    status;
+    body;
+    constructor(status, body) {
+        super(`Proxy error ${status}: ${body}`);
+        this.status = status;
+        this.body = body;
+    }
+}
+/**
+ * 403 — the agent has no grant for this platform+scope, or policy blocked it.
+ * Recoverable: call `requestAccess({ platform, scope, reason })`.
+ */
+export class AccessDeniedError extends ProxyError {
+    platform;
+    scope;
+    constructor(status, body, platform, scope) {
+        super(status, body);
+        this.platform = platform;
+        this.scope = scope;
+        this.message =
+            `Access denied for ${platform}:${scope} — ${body}. ` +
+                `Call requestAccess({ platform, scope, reason }) to ask an org admin to grant it.`;
+    }
+}
+/** The owner explicitly denied the action. Terminal — do not retry. */
+export class ApprovalDeniedError extends AgentValetError {
+    approvalId;
+    constructor(approvalId, detail) {
+        super(`Owner denied this action${detail ? `: ${detail}` : "."}`);
+        this.approvalId = approvalId;
+    }
+}
+/** The approval request aged out server-side before anyone responded. */
+export class ApprovalExpiredError extends AgentValetError {
+    approvalId;
+    constructor(approvalId) {
+        super("Approval request expired before the owner responded.");
+        this.approvalId = approvalId;
+    }
+}
+/**
+ * We stopped waiting, but the action is still queued server-side and will run
+ * if the owner approves. NOT a failure — hold `approvalId` and resume later
+ * with `client.waitForApproval(approvalId)`.
+ */
+export class ApprovalTimeoutError extends AgentValetError {
+    approvalId;
+    constructor(approvalId, waitedMs) {
+        super(`Owner hasn't approved within ${Math.round(waitedMs / 1000)}s. The action is still queued — ` +
+            `keep approval_id ${approvalId} and call waitForApproval(approvalId) to resume.`);
+        this.approvalId = approvalId;
+    }
+}
+/** Approved and executed, but the upstream SaaS returned a non-2xx. */
+export class UpstreamError extends AgentValetError {
+    status;
+    data;
+    constructor(status, data) {
+        super(`Upstream returned ${status}: ${JSON.stringify(data)}`);
+        this.status = status;
+        this.data = data;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,uEAAuE;AAEvE,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,OAAO,WAAY,SAAQ,eAAe;CAAG;AAEnD,sEAAsE;AACtE,MAAM,OAAO,YAAa,SAAQ,eAAe;IACT;IAAtC,YAAY,OAAe,EAAW,KAAc;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,UAAK,GAAL,KAAK,CAAS;IAEpD,CAAC;CACF;AAED,+EAA+E;AAC/E,MAAM,OAAO,UAAW,SAAQ,eAAe;IACxB;IAAyB;IAA9C,YAAqB,MAAc,EAAW,IAAY;QACxD,KAAK,CAAC,eAAe,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;QADrB,WAAM,GAAN,MAAM,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAQ;IAE1D,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IACI;IAA2B;IAA9E,YAAY,MAAc,EAAE,IAAY,EAAW,QAAgB,EAAW,KAAa;QACzF,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAD6B,aAAQ,GAAR,QAAQ,CAAQ;QAAW,UAAK,GAAL,KAAK,CAAQ;QAEzF,IAAI,CAAC,OAAO;YACV,qBAAqB,QAAQ,IAAI,KAAK,MAAM,IAAI,IAAI;gBACpD,kFAAkF,CAAC;IACvF,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,OAAO,mBAAoB,SAAQ,eAAe;IACjC;IAArB,YAAqB,UAAkB,EAAE,MAAe;QACtD,KAAK,CAAC,2BAA2B,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAD9C,eAAU,GAAV,UAAU,CAAQ;IAEvC,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IAClC;IAArB,YAAqB,UAAkB;QACrC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAD3C,eAAU,GAAV,UAAU,CAAQ;IAEvC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IAClC;IAArB,YAAqB,UAAkB,EAAE,QAAgB;QACvD,KAAK,CACH,gCAAgC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,kCAAkC;YAC3F,oBAAoB,UAAU,kDAAkD,CACnF,CAAC;QAJiB,eAAU,GAAV,UAAU,CAAQ;IAKvC,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,OAAO,aAAc,SAAQ,eAAe;IAC3B;IAAyB;IAA9C,YAAqB,MAAc,EAAW,IAAa;QACzD,KAAK,CAAC,qBAAqB,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAD3C,WAAM,GAAN,MAAM,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAS;IAE3D,CAAC;CACF"}

package/dist/http.d.ts

@@ -0,0 +1,7 @@
+import { NetworkError } from "./errors.js";
+export type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+export declare function fetchWithTimeout(doFetch: FetchLike, url: string, init: RequestInit, timeoutMs: number): Promise<Response>;
+export declare function sleep(ms: number): Promise<void>;
+export declare function tryParseJson(text: string): unknown;
+export declare function diagnoseNetworkError(err: unknown, proxyUrl: string): NetworkError;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,SAAS,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,CAAC,CAInB;AAED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQlD;AAKD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,CAiBjF"}

package/dist/http.js

@@ -0,0 +1,50 @@
+// packages/client/src/http.ts
+//
+// Stateless transport helpers. Kept behaviourally identical to the mcp-server's
+// net.ts so the SDK and the MCP server fail the same way on the same network
+// conditions — an operator debugging one is debugging both.
+import { NetworkError } from "./errors.js";
+export function fetchWithTimeout(doFetch, url, init, timeoutMs) {
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), timeoutMs);
+    return doFetch(url, { ...init, signal: ac.signal }).finally(() => clearTimeout(timer));
+}
+export function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+export function tryParseJson(text) {
+    const trimmed = text.trim();
+    if (!trimmed.startsWith("{") && !trimmed.startsWith("["))
+        return undefined;
+    try {
+        return JSON.parse(trimmed);
+    }
+    catch {
+        return undefined;
+    }
+}
+// Translates a fetch() failure into something a developer can act on. The
+// default "fetch failed" tells you nothing about whether it's DNS, a corporate
+// MITM proxy, or the proxy being down.
+export function diagnoseNetworkError(err, proxyUrl) {
+    const raw = err instanceof Error ? err.message : String(err);
+    const lower = raw.toLowerCase();
+    let message;
+    if (lower.includes("enotfound") || lower.includes("getaddrinfo")) {
+        message = `Cannot resolve ${proxyUrl}. Check DNS / corporate proxy / VPN, or confirm proxyUrl is correct. Raw: ${raw}`;
+    }
+    else if (lower.includes("econnrefused") || lower.includes("econnreset")) {
+        message = `Connection to ${proxyUrl} was refused or reset. The proxy may be down — check https://status.agentvalet.ai — or a firewall is blocking it. Raw: ${raw}`;
+    }
+    else if (lower.includes("etimedout") || lower.includes("timeout") || lower.includes("aborterror")) {
+        message = `Request to ${proxyUrl} timed out. Likely VPN routing, corporate proxy buffering, or a slow network. Raw: ${raw}`;
+    }
+    else if (lower.includes("self signed") || lower.includes("cert") || lower.includes("ssl") || lower.includes("tls")) {
+        message = `TLS / certificate problem talking to ${proxyUrl}. A corporate MITM proxy may be intercepting traffic. Raw: ${raw}`;
+    }
+    else {
+        message = `Network error reaching ${proxyUrl}: ${raw}. Check VPN, corporate proxy, and firewall rules for api.agentvalet.ai.`;
+    }
+    return new NetworkError(message, err);
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,4DAA4D;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,MAAM,UAAU,gBAAgB,CAC9B,OAAkB,EAClB,GAAW,EACX,IAAiB,EACjB,SAAiB;IAEjB,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IACtD,OAAO,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,+EAA+E;AAC/E,uCAAuC;AACvC,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,QAAgB;IACjE,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAEhC,IAAI,OAAe,CAAC;IACpB,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjE,OAAO,GAAG,kBAAkB,QAAQ,6EAA6E,GAAG,EAAE,CAAC;IACzH,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1E,OAAO,GAAG,iBAAiB,QAAQ,0HAA0H,GAAG,EAAE,CAAC;IACrK,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACpG,OAAO,GAAG,cAAc,QAAQ,sFAAsF,GAAG,EAAE,CAAC;IAC9H,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrH,OAAO,GAAG,wCAAwC,QAAQ,8DAA8D,GAAG,EAAE,CAAC;IAChI,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,0BAA0B,QAAQ,KAAK,GAAG,yEAAyE,CAAC;IAChI,CAAC;IACD,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { AgentValet } from "./client.js";
+export type { AgentValetOptions, CallRequest } from "./client.js";
+export { AgentValetError, AccessDeniedError, ApprovalDeniedError, ApprovalExpiredError, ApprovalTimeoutError, ConfigError, NetworkError, ProxyError, UpstreamError, } from "./errors.js";
+export { DEFAULT_PROXY_URL } from "./env.js";
+export type { FetchLike } from "./http.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,YAAY,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+// packages/client/src/index.ts
+//
+// @agentvalet/client — the non-MCP path onto the AgentValet broker.
+//
+// If you're inside an MCP host (Claude Code, Claude Desktop, Cursor), install
+// @agentvalet/mcp-server instead and call use_platform. This package is for
+// agents that aren't MCP: LangChain tools, cron jobs, plain Node services.
+export { AgentValet } from "./client.js";
+export { AgentValetError, AccessDeniedError, ApprovalDeniedError, ApprovalExpiredError, ApprovalTimeoutError, ConfigError, NetworkError, ProxyError, UpstreamError, } from "./errors.js";
+export { DEFAULT_PROXY_URL } from "./env.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,oEAAoE;AACpE,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAE3E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@agentvalet/client",
+  "version": "0.1.0",
+  "description": "AgentValet client SDK — call approved SaaS platforms from any Node agent. Signs the agent JWT, brokers through the AgentValet proxy, and waits out owner approvals.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "jose": "^5.10.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.4.0",
+    "vitest": "^1.5.0"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/MCSEdwin/agentvalet.git",
+    "directory": "packages/client"
+  },
+  "keywords": [
+    "ai",
+    "agents",
+    "agentvalet",
+    "credentials",
+    "authorization",
+    "sdk"
+  ],
+  "license": "MIT",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}