@agentvalet/register 0.3.5 → 0.3.7

package/dist/index.js

@@ -642,6 +642,30 @@ async function registerAgent2(params, apiKey) {
     clearTimeout(timeout);
   }
 }
+async function getAccount(apiKey) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), 1e4);
+  try {
+    const response = await fetch(`${FUNCTIONS_URL}/cli-account`, {
+      headers: {
+        ...baseHeaders,
+        "Authorization": `Bearer ${apiKey}`
+      },
+      signal: controller.signal
+    });
+    if (!response.ok) {
+      const error = await response.json().catch(() => ({}));
+      throw new Error(`Failed to fetch account: ${response.status} ${error.error ?? ""}`);
+    }
+    return response.json();
+  } catch (err) {
+    clearTimeout(timeout);
+    if (err?.name === "AbortError") throw new Error("Request timed out \u2014 is the AgentValet API reachable?");
+    throw err;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
 
 // src/config/store.ts
 import Conf from "conf";
@@ -738,6 +762,48 @@ async function mergeJsonFile(filePath, key, value) {
   existing.mcpServers = mcpServers;
   await writeFile4(filePath, JSON.stringify(existing, null, 2) + "\n", "utf8");
 }
+function buildClaudeMd(agentId, ownerId, proxyUrl) {
+  return `# AgentValet \u2014 Credential Governance
+
+Agent ID: \`${agentId}\`
+Owner ID: \`${ownerId}\`
+
+All external platform API calls **must** go through the AgentValet proxy.
+Never call platform APIs (Slack, Stripe, Gmail, GitHub, etc.) directly.
+
+## Making a platform call
+
+Use the \`mcp__agent-authority__use_platform\` MCP tool:
+
+\`\`\`
+mcp__agent-authority__use_platform({
+  platform: "slack",
+  endpoint: "/api/chat.postMessage",
+  method: "POST",
+  scope: "slack:write",
+  data: { channel: "#general", text: "Hello" }
+})
+\`\`\`
+
+## Before any platform session
+
+1. Call \`mcp__agent-authority__list_platforms\` to see approved platforms and scopes
+2. Call \`mcp__agent-authority__authzen_evaluate\` before destructive operations
+3. If a call returns \`pending_approval\` \u2014 wait, do not retry
+
+## Rules
+
+- **NEVER** write inline JWT signing code, \`node -e\` scripts, or manual HTTP calls
+- The MCP tool handles authentication automatically
+- \`AGENT_PRIVATE_KEY_PATH\` points to your key \u2014 do not read or log it
+
+## If AgentValet MCP is not connected
+
+Tell the user: "AgentValet MCP is not connected. Run: npx @agentvalet/register"
+
+Dashboard: ${proxyUrl.replace("api.", "app.")}
+`;
+}
 async function writeGlobalFrameworkConfigs(params) {
   const written = [];
   const privateKeyEscaped = params.privateKeyPem.replace(/\n/g, "\\n");
@@ -764,57 +830,36 @@ AGENT_PRIVATE_KEY = "${privateKeyEscaped}"
       console.warn(`  Warning: could not write Codex CLI config: ${err.message}`);
     }
   }
-  const claudeConfigPath = path4.join(os.homedir(), ".claude", "claude_desktop_config.json");
-  if (existsSync4(claudeConfigPath)) {
-    try {
-      let config = {};
-      try {
-        const text = await readFile2(claudeConfigPath, "utf8");
-        config = JSON.parse(text);
-      } catch {
-        console.warn("  Warning: ~/.claude/claude_desktop_config.json is malformed \u2014 skipping");
-        config = null;
-      }
-      if (config !== null) {
-        if (config.mcpServers?.agentvalet) {
-        } else {
-          config.mcpServers = config.mcpServers ?? {};
-          config.mcpServers.agentvalet = {
-            command: "npx",
-            args: ["-y", "@agentvalet/mcp-server"],
-            env: {
-              AGENT_ID: params.agentId,
-              OWNER_ID: params.ownerId,
-              PROXY_URL: params.proxyUrl,
-              AGENT_PRIVATE_KEY: privateKeyEscaped
-            }
-          };
-          await writeFile4(claudeConfigPath, JSON.stringify(config, null, 2) + "\n", "utf8");
-          written.push("~/.claude/claude_desktop_config.json");
-        }
-      }
-    } catch (err) {
-      console.warn(`  Warning: could not write Claude Code global config: ${err.message}`);
-    }
-  }
   return written;
 }
 async function writeIdeConfigs(params) {
+  const { detected, ...mcpParams } = params;
   const cwd = process.cwd();
   const written = [];
-  const entry = buildMcpEntry(params);
-  const claudeMcpPath = path4.join(cwd, ".mcp.json");
-  if (existsSync4(claudeMcpPath) || existsSync4(path4.join(cwd, "CLAUDE.md"))) {
+  const entry = buildMcpEntry(mcpParams);
+  if (detected.claudeCode) {
+    const claudeMcpPath = path4.join(cwd, ".mcp.json");
     try {
       await mergeJsonFile(claudeMcpPath, "agentvalet", entry);
       written.push(".mcp.json");
     } catch (err) {
       console.warn(`  Warning: could not write .mcp.json: ${err.message}`);
     }
+    const claudeMdPath = path4.join(cwd, "CLAUDE.md");
+    if (!existsSync4(claudeMdPath)) {
+      try {
+        await writeFile4(claudeMdPath, buildClaudeMd(params.agentId, params.ownerId, params.proxyUrl), "utf8");
+        written.push("CLAUDE.md");
+      } catch (err) {
+        console.warn(`  Warning: could not write CLAUDE.md: ${err.message}`);
+      }
+    } else {
+      written.push("CLAUDE.md (already exists \u2014 skipped)");
+    }
   }
-  const cursorDir = path4.join(cwd, ".cursor");
-  const cursorMcpPath = path4.join(cursorDir, "mcp.json");
-  if (existsSync4(cursorDir)) {
+  if (detected.cursor) {
+    const cursorDir = path4.join(cwd, ".cursor");
+    const cursorMcpPath = path4.join(cursorDir, "mcp.json");
     try {
       await mkdir3(cursorDir, { recursive: true });
       await mergeJsonFile(cursorMcpPath, "agentvalet", entry);
@@ -832,35 +877,49 @@ import os2 from "os";
 import path5 from "path";
 import prompts2 from "prompts";
 import chalk5 from "chalk";
+function cursorInstalled() {
+  const home = os2.homedir();
+  const platform = process.platform;
+  if (platform === "win32") {
+    const appData = process.env.APPDATA ?? path5.join(home, "AppData", "Roaming");
+    const localAppData = process.env.LOCALAPPDATA ?? path5.join(home, "AppData", "Local");
+    return existsSync5(path5.join(appData, "Cursor")) || existsSync5(path5.join(localAppData, "Programs", "cursor"));
+  }
+  if (platform === "darwin") {
+    return existsSync5(path5.join(home, "Library", "Application Support", "Cursor")) || existsSync5("/Applications/Cursor.app");
+  }
+  return existsSync5(path5.join(home, ".config", "Cursor")) || existsSync5("/usr/share/applications/cursor.desktop");
+}
 function detectFrameworks() {
   const home = os2.homedir();
   return {
     codex: existsSync5(path5.join(home, ".codex", "config.toml")),
     claudeCode: existsSync5(path5.join(home, ".claude")),
-    cursor: existsSync5(path5.join(process.cwd(), ".cursor")),
+    cursor: existsSync5(path5.join(process.cwd(), ".cursor")) || cursorInstalled(),
     openclaw: existsSync5(path5.join(home, ".openclaw"))
   };
 }
 async function frameworkSetupConsent(detected) {
   const items = [];
-  if (detected.codex) {
-    items.push("Codex CLI    \u2192 add MCP server to ~/.codex/config.toml");
-    items.push("             \u2192 copy AGENTS.md to current directory");
-  }
-  if (detected.openclaw) {
-    items.push("OpenClaw     \u2192 copy SKILL.md to current directory");
-  }
   if (detected.claudeCode) {
-    items.push("Claude Code  \u2192 ~/.claude/claude_desktop_config.json");
+    items.push("Claude Code  \u2192 .mcp.json (MCP server)");
+    items.push("             \u2192 CLAUDE.md (usage rules)");
   }
   if (detected.cursor) {
-    items.push("Cursor       \u2192 .cursor/mcp.json");
+    items.push("Cursor       \u2192 .cursor/mcp.json (MCP server)");
+  }
+  if (detected.codex) {
+    items.push("Codex CLI    \u2192 ~/.codex/config.toml (MCP server)");
+    items.push("             \u2192 AGENTS.md (usage rules)");
+  }
+  if (detected.openclaw) {
+    items.push("OpenClaw     \u2192 SKILL.md (usage rules)");
   }
   if (items.length === 0) return false;
   console.log("");
-  console.log(chalk5.bold("  Agent framework setup"));
+  console.log(chalk5.bold("  Detected agent frameworks"));
   for (const item of items) {
-    console.log(chalk5.dim(`  ${item}`));
+    console.log(chalk5.dim(`    ${item}`));
   }
   console.log("");
   const { confirm } = await prompts2({
@@ -910,6 +969,23 @@ async function runOnboard() {
     await registerAgentFlow(stored.apiKey, stored.ownerId);
     return;
   }
+  const { authMethod } = await prompts3({
+    type: "select",
+    name: "authMethod",
+    message: "How would you like to sign in?",
+    choices: [
+      { title: "Sign in with GitHub  (opens browser)", value: "github" },
+      { title: "Paste Owner ID from app.agentvalet.ai/settings", value: "ownerid" }
+    ],
+    hint: "No GitHub account? Choose the second option after signing up at app.agentvalet.ai"
+  });
+  if (authMethod === void 0) {
+    process.exit(0);
+  }
+  if (authMethod === "ownerid") {
+    await ownerIdFlow();
+    return;
+  }
   let spinner = ora();
   let githubToken;
   try {
@@ -969,6 +1045,38 @@ async function runOnboard() {
   });
   await registerAgentFlow(account.owner_id, account.owner_id);
 }
+async function ownerIdFlow() {
+  console.log("");
+  console.log(chalk6.dim("  Find your Owner ID at: ") + chalk6.cyan.underline("https://app.agentvalet.ai/settings"));
+  console.log("");
+  const { ownerId } = await prompts3({
+    type: "text",
+    name: "ownerId",
+    message: "Paste your Owner ID:",
+    validate: (v) => v.trim().length > 10 || "Owner ID looks too short"
+  });
+  if (ownerId === void 0) {
+    process.exit(0);
+  }
+  const spinner = ora("  Verifying Owner ID...").start();
+  let account;
+  try {
+    account = await getAccount(ownerId.trim());
+    spinner.succeed(`  Account verified \u2014 plan: ${chalk6.bold(account.plan)}`);
+  } catch (err) {
+    spinner.fail(`  Could not verify Owner ID: ${err.message}`);
+    console.log(chalk6.dim("  Make sure you copied the full Owner ID from app.agentvalet.ai/settings"));
+    process.exit(1);
+  }
+  saveConfig({
+    apiKey: account.owner_id,
+    ownerId: account.owner_id,
+    orgId: account.org_id,
+    proxyUrl: "https://api.agentvalet.ai",
+    email: account.email ?? ""
+  });
+  await registerAgentFlow(account.owner_id, account.owner_id);
+}
 async function registerAgentFlow(apiKey, ownerId) {
   const hostname = os3.hostname().split(".")[0];
   const dirName = process.cwd().split("/").pop() ?? process.cwd().split("\\").pop() ?? "agent";
@@ -1017,7 +1125,8 @@ async function registerAgentFlow(apiKey, ownerId) {
       agentId: agent.agent_id,
       ownerId,
       proxyUrl: getStoredConfig().proxyUrl,
-      keyPath: path6.join(process.cwd(), ".agentvalet", "agent.key")
+      keyPath: path6.join(process.cwd(), ".agentvalet", "agent.key"),
+      detected
     });
     for (const r of ideResults) {
       console.log(chalk6.green(`  \u2713 ${r}`));
@@ -1079,7 +1188,7 @@ function collectScope(value, previous) {
   return [...previous, value];
 }
 var program = new Command();
-program.name("agentvalet-register").description("Self-register an AI agent with AgentValet").version("0.3.5").option("--owner <uuid>", "Owner ID (or set AGENTVALET_OWNER env var)").option("--name <name>", "Agent name").option("--description <desc>", "Agent description").option("--scope <platform:scope>", "Requested scope, repeatable", collectScope, []).option("--api-url <url>", "AgentValet API base URL", "https://api.agentvalet.ai").option("--output <path>", "Path to write .env file", "./.env.agentvalet").option("--key-path <path>", "Path to write private key", "./agentvalet.key").option("--json", "Machine-readable JSON output").option("--no-wait", "Register only, do not wait for approval").option("--timeout <seconds>", "Approval wait timeout in seconds", "300").action(async (opts) => {
+program.name("agentvalet-register").description("Self-register an AI agent with AgentValet").version("0.3.7").option("--owner <uuid>", "Owner ID (or set AGENTVALET_OWNER env var)").option("--name <name>", "Agent name").option("--description <desc>", "Agent description").option("--scope <platform:scope>", "Requested scope, repeatable", collectScope, []).option("--api-url <url>", "AgentValet API base URL", "https://api.agentvalet.ai").option("--output <path>", "Path to write .env file", "./.env.agentvalet").option("--key-path <path>", "Path to write private key", "./agentvalet.key").option("--json", "Machine-readable JSON output").option("--no-wait", "Register only, do not wait for approval").option("--timeout <seconds>", "Approval wait timeout in seconds", "300").action(async (opts) => {
   const isJson = !!opts.json;
   let ownerId = opts.owner ?? process.env.AGENTVALET_OWNER ?? "";
   let agentName = opts.name ?? "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/register",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "description": "Self-register AI agents with AgentValet",
   "type": "module",
   "bin": {