@agentvalet/register 0.1.1 → 0.1.3

package/dist/index.js

@@ -56,9 +56,9 @@ async function runWizard(prefilled) {
 }
 
 // src/register.ts
-import { fetch } from "undici";
+import { fetch as fetch2 } from "undici";
 async function registerAgent(apiUrl, body) {
-  const res = await fetch(`${apiUrl}/v1/register`, {
+  const res = await fetch2(`${apiUrl}/v1/register`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(body)
@@ -76,7 +76,7 @@ async function registerAgent(apiUrl, body) {
 }
 
 // src/wait.ts
-import { fetch as fetch2 } from "undici";
+import { fetch as fetch3 } from "undici";
 async function waitForApproval(apiUrl, token, timeoutMs, onTick) {
   const deadline = Date.now() + timeoutMs;
   const sseResult = await trySSE(apiUrl, token, Math.min(3e4, timeoutMs), onTick);
@@ -87,7 +87,7 @@ async function waitForApproval(apiUrl, token, timeoutMs, onTick) {
 async function enrichWithKey(apiUrl, token, result) {
   if (result.status !== "approved") return result;
   try {
-    const res = await fetch2(`${apiUrl}/v1/register/claim-key/${token}`);
+    const res = await fetch3(`${apiUrl}/v1/register/claim-key/${token}`);
     if (!res.ok) return result;
     const json = await res.json();
     return { ...result, privateKey: json.private_key ?? "" };
@@ -99,7 +99,7 @@ async function trySSE(apiUrl, token, windowMs, onTick) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), windowMs);
   try {
-    const res = await fetch2(`${apiUrl}/v1/register/stream/${token}`, {
+    const res = await fetch3(`${apiUrl}/v1/register/stream/${token}`, {
       signal: controller.signal,
       headers: { Accept: "text/event-stream" }
     });
@@ -142,7 +142,7 @@ async function poll(apiUrl, token, deadline, onTick) {
     await sleep(5e3);
     onTick?.();
     try {
-      const res = await fetch2(`${apiUrl}/v1/register/status/${token}`);
+      const res = await fetch3(`${apiUrl}/v1/register/status/${token}`);
       if (!res.ok) continue;
       const json = await res.json();
       const data = json.data ?? json;
@@ -164,7 +164,7 @@ function parseEvent(data) {
   return null;
 }
 function sleep(ms) {
-  return new Promise((resolve2) => setTimeout(resolve2, ms));
+  return new Promise((resolve3) => setTimeout(resolve3, ms));
 }
 
 // src/save.ts
@@ -179,6 +179,7 @@ async function saveOutput(opts) {
   const envContent = [
     `# AgentValet \u2014 generated by agentvalet-register`,
     `AGENTVALET_AGENT_ID=${opts.agentId}`,
+    `AGENTVALET_OWNER_ID=${opts.ownerId}`,
     `AGENTVALET_API_URL=${opts.apiUrl}`,
     `AGENTVALET_PRIVATE_KEY_PATH=${keyPath}`,
     ""
@@ -187,6 +188,164 @@ async function saveOutput(opts) {
   return { keyPath, envPath };
 }
 
+// src/commands/refresh.ts
+import { readFileSync, writeFileSync, existsSync, mkdirSync, statSync } from "fs";
+import { createSign, createPrivateKey } from "crypto";
+import { dirname as dirname2, resolve as resolve2 } from "path";
+
+// src/lib/skill-writer.ts
+function generatePermissionsFile(agentId, ownerId, permissions) {
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const platformSections = permissions.length === 0 ? "_No platforms approved yet. Visit https://agentvalet.ai to connect platforms._" : permissions.map((p) => {
+    const scopeList = p.scopes.map((s) => `  - \`${s}\``).join("\n");
+    const approvalNote = p.requireApproval ? "\n  > Requires human approval before executing.\n" : "";
+    return `### ${p.platformName} (\`${p.platformId}\`)
+
+Approved scopes:
+${scopeList}
+${approvalNote}`;
+  }).join("\n\n");
+  return `# AgentValet Permissions
+
+Agent ID: \`${agentId}\`
+Owner ID: \`${ownerId}\`
+Last refreshed: ${now}
+
+---
+
+## Approved Platforms
+
+${platformSections}
+
+---
+
+## How to call a platform
+
+All platform calls **must** go through AgentValet \u2014 never call Slack, Gmail, Stripe etc. directly.
+
+Copy the pattern from \`test-agent.mjs\` (already in this repo):
+
+1. Read the private key from \`agentvalet.key\`
+2. Sign a short-lived RS256 JWT: \`{ agent_id, owner_id, iat, exp: iat + 300 }\`
+3. POST to \`https://api.agentvalet.ai/v1/actions\`:
+
+\`\`\`json
+{
+  "platform": "<platformId>",
+  "endpoint": "<endpoint>",
+  "method": "POST",
+  "scope": "<scope>",
+  "data": { ... }
+}
+\`\`\`
+
+Run \`node test-agent.mjs\` for a live smoke-test.
+To refresh this file: \`agentvalet-register refresh\`
+`;
+}
+
+// src/commands/refresh.ts
+function base64url(input) {
+  return Buffer.from(input).toString("base64url");
+}
+function signJwt(agentId, ownerId, privateKeyPem) {
+  const now = Math.floor(Date.now() / 1e3);
+  const header = base64url(JSON.stringify({ alg: "RS256", typ: "JWT" }));
+  const payload = base64url(JSON.stringify({ agent_id: agentId, owner_id: ownerId, iat: now, exp: now + 300 }));
+  const signingInput = `${header}.${payload}`;
+  const sign = createSign("RSA-SHA256");
+  sign.update(signingInput);
+  const signature = sign.sign(createPrivateKey(privateKeyPem), "base64url");
+  return `${signingInput}.${signature}`;
+}
+function parseEnvFile(content) {
+  const result = {};
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const eq = trimmed.indexOf("=");
+    if (eq === -1) continue;
+    result[trimmed.slice(0, eq)] = trimmed.slice(eq + 1);
+  }
+  return result;
+}
+async function runRefresh(options) {
+  const outputPath = resolve2(options.outputPath);
+  if (options.ifStale) {
+    try {
+      const stat = statSync(outputPath);
+      if (Date.now() - stat.mtimeMs < 36e5) {
+        return;
+      }
+    } catch {
+    }
+  }
+  const envPath = resolve2(options.envFile);
+  let envVars;
+  try {
+    envVars = parseEnvFile(readFileSync(envPath, "utf-8"));
+  } catch {
+    throw new Error(`Cannot read env file: ${envPath}
+Run 'agentvalet-register' first to create it.`);
+  }
+  const agentId = envVars["AGENTVALET_AGENT_ID"];
+  const ownerId = envVars["AGENTVALET_OWNER_ID"];
+  const apiUrl = envVars["AGENTVALET_API_URL"] ?? "https://api.agentvalet.ai";
+  const keyPath = envVars["AGENTVALET_PRIVATE_KEY_PATH"];
+  if (!agentId || !ownerId || !keyPath) {
+    throw new Error(`Env file is missing required keys (AGENTVALET_AGENT_ID, AGENTVALET_OWNER_ID, AGENTVALET_PRIVATE_KEY_PATH)`);
+  }
+  let privateKeyPem;
+  try {
+    privateKeyPem = readFileSync(keyPath, "utf-8");
+  } catch {
+    throw new Error(`Cannot read private key: ${keyPath}`);
+  }
+  if (!privateKeyPem.trim()) {
+    throw new Error(`Private key file is empty: ${keyPath}`);
+  }
+  const jwt = signJwt(agentId, ownerId, privateKeyPem);
+  const res = await fetch(`${apiUrl}/v1/agent/permissions`, {
+    headers: { Authorization: `Bearer ${jwt}` }
+  });
+  if (!res.ok) {
+    const body = await res.text().catch(() => "");
+    throw new Error(`Permissions API returned ${res.status}: ${body}`);
+  }
+  const json = await res.json();
+  const platforms = json.data?.platforms ?? [];
+  const content = generatePermissionsFile(agentId, ownerId, platforms);
+  mkdirSync(dirname2(outputPath), { recursive: true });
+  writeFileSync(outputPath, content, "utf-8");
+  ensureClaudeMd(options.outputPath);
+  if (!options.quiet) {
+    console.log(`Permissions refreshed \u2192 ${outputPath} (${platforms.length} platform${platforms.length !== 1 ? "s" : ""})`);
+  }
+}
+function ensureClaudeMd(permissionsRelativePath) {
+  const importLine = `@${permissionsRelativePath.replace(/\\/g, "/").replace(/^\.\//, "")}`;
+  const claudeMdPath = resolve2("CLAUDE.md");
+  if (!existsSync(claudeMdPath)) {
+    writeFileSync(
+      claudeMdPath,
+      `# Agent Instructions
+
+@.claude/agentvalet-permissions.md
+`,
+      "utf-8"
+    );
+    return;
+  }
+  const existing = readFileSync(claudeMdPath, "utf-8");
+  if (existing.includes(importLine) || existing.includes("@.claude/agentvalet-permissions.md")) {
+    return;
+  }
+  writeFileSync(claudeMdPath, `${existing.trimEnd()}
+
+${importLine}
+`, "utf-8");
+}
+
 // src/index.ts
 function collectScope(value, previous) {
   return [...previous, value];
@@ -293,6 +452,7 @@ Approve at: https://agentvalet.ai/registrations
   try {
     ({ keyPath, envPath } = await saveOutput({
       agentId,
+      ownerId,
       privateKey: privateKey ?? "",
       apiUrl: opts.apiUrl,
       keyFilePath: opts.keyPath,
@@ -319,8 +479,39 @@ Approved! Agent ID: ${agentId}`));
 Source the env file before calling any tool:`);
     console.log(chalk2.cyan(`  source ${envPath}`));
   }
+  if (keyWritten) {
+    try {
+      await runRefresh({
+        envFile: opts.output,
+        outputPath: ".claude/agentvalet-permissions.md",
+        ifStale: false,
+        quiet: isJson
+      });
+      if (!isJson) {
+        console.log(chalk2.gray(`Permissions: .claude/agentvalet-permissions.md`));
+      }
+    } catch {
+      if (!isJson) {
+        console.log(chalk2.yellow(`Permissions: run 'agentvalet-register refresh' to generate`));
+      }
+    }
+  }
   process.exit(0);
 });
+program.command("refresh").description("Refresh approved permissions and update .claude/agentvalet-permissions.md").option("--env-file <path>", "Path to .env.agentvalet file", "./.env.agentvalet").option("--output <path>", "Path to write permissions file", "./.claude/agentvalet-permissions.md").option("--if-stale", "Skip if file is less than 1 hour old").option("--quiet", "Suppress output").action(async (opts) => {
+  try {
+    await runRefresh({
+      envFile: opts.envFile,
+      outputPath: opts.output,
+      ifStale: !!opts.ifStale,
+      quiet: !!opts.quiet
+    });
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(chalk2.red(`Refresh failed: ${msg}`));
+    process.exit(3);
+  }
+});
 program.parseAsync().catch((err) => {
   console.error(err);
   process.exit(3);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/register",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Self-register AI agents with AgentValet",
   "type": "module",
   "bin": {