@agentvalet/register 0.4.3 → 0.4.5

package/dist/index.js

@@ -2,7 +2,7 @@
 
 // src/index.ts
 import { Command } from "commander";
-import chalk7 from "chalk";
+import chalk8 from "chalk";
 
 // src/wizard.ts
 import prompts from "prompts";
@@ -166,7 +166,7 @@ function parseEvent(data) {
   return null;
 }
 function sleep(ms) {
-  return new Promise((resolve3) => setTimeout(resolve3, ms));
+  return new Promise((resolve4) => setTimeout(resolve4, ms));
 }
 
 // src/save.ts
@@ -191,9 +191,9 @@ async function saveOutput(opts) {
 }
 
 // src/commands/refresh.ts
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, mkdirSync, statSync } from "fs";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, existsSync as existsSync3, mkdirSync, statSync } from "fs";
 import { createSign, createPrivateKey } from "crypto";
-import { dirname as dirname2, resolve as resolve2, join } from "path";
+import { dirname as dirname2, resolve as resolve3 } from "path";
 
 // src/lib/skill-writer.ts
 import { existsSync, writeFileSync } from "fs";
@@ -410,6 +410,10 @@ To refresh this file: \`npx @agentvalet/register refresh\`
 `;
 }
 
+// src/lib/require-agent.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { resolve as resolve2, join } from "path";
+
 // src/config/store.ts
 import Conf from "conf";
 var store = new Conf({
@@ -428,24 +432,11 @@ function isAuthenticated() {
   return !!store.get("apiKey");
 }
 
-// src/commands/refresh.ts
-var CLAUDE_START = "<!-- agentvalet:start -->";
-var CLAUDE_END = "<!-- agentvalet:end -->";
-var HOOK_COMMAND = "npx @agentvalet/register refresh --if-stale --quiet 2>/dev/null || true";
-var HOOK_MARKER = "agentvalet/register refresh";
-function base64url(input) {
-  return Buffer.from(input).toString("base64url");
-}
-function signJwt(agentId, ownerId, privateKeyPem) {
-  const now = Math.floor(Date.now() / 1e3);
-  const header = base64url(JSON.stringify({ alg: "RS256", typ: "JWT" }));
-  const payload = base64url(JSON.stringify({ agent_id: agentId, owner_id: ownerId, iat: now, exp: now + 300 }));
-  const signingInput = `${header}.${payload}`;
-  const sign = createSign("RSA-SHA256");
-  sign.update(signingInput);
-  const signature = sign.sign(createPrivateKey(privateKeyPem), "base64url");
-  return `${signingInput}.${signature}`;
-}
+// src/lib/require-agent.ts
+import chalk3 from "chalk";
+var NO_AGENT_MSG = chalk3.red("\n  \u2717 No agent registered.\n") + chalk3.dim(
+  "  Run the following command first to register an agent in this directory:\n\n    npx @agentvalet/register\n"
+);
 function parseEnvFile(content) {
   const result = {};
   for (const line of content.split("\n")) {
@@ -457,42 +448,68 @@ function parseEnvFile(content) {
   }
   return result;
 }
-function writePermissionsFromEvent(agentId, ownerId, platforms, outputPath = "./.claude/agentvalet-permissions.md") {
-  const content = generatePermissionsFile(agentId, ownerId, platforms);
-  const resolvedPath = resolve2(outputPath);
-  mkdirSync(dirname2(resolvedPath), { recursive: true });
-  writeFileSync2(resolvedPath, content, "utf-8");
-  embedInClaudeMd(content);
-  ensureHook();
-}
-async function runRefresh(options) {
-  const outputPath = resolve2(options.outputPath);
-  if (options.ifStale) {
+function resolveAgent(envFile = ".env.agentvalet") {
+  let agentId;
+  let ownerId;
+  let apiUrl = "https://api.agentvalet.ai";
+  let keyPath;
+  const envPath = resolve2(envFile);
+  if (existsSync2(envPath)) {
     try {
-      const stat = statSync(outputPath);
-      const fileIsFresh = Date.now() - stat.mtimeMs < 36e5;
-      const claudeMdPath = resolve2("CLAUDE.md");
-      const claudeMd = existsSync2(claudeMdPath) ? readFileSync2(claudeMdPath, "utf-8") : "";
-      const blockStart = claudeMd.indexOf(CLAUDE_START);
-      const blockEnd = claudeMd.indexOf(CLAUDE_END);
-      const blockContent = blockStart !== -1 && blockEnd !== -1 ? claudeMd.slice(blockStart, blockEnd) : "";
-      const blockHasPlatforms = blockContent.includes("### ");
-      if (fileIsFresh && blockHasPlatforms) return;
+      const vars = parseEnvFile(readFileSync2(envPath, "utf-8"));
+      agentId = vars["AGENTVALET_AGENT_ID"];
+      ownerId = vars["AGENTVALET_OWNER_ID"];
+      apiUrl = vars["AGENTVALET_API_URL"] ?? apiUrl;
+      keyPath = vars["AGENTVALET_PRIVATE_KEY_PATH"];
+    } catch {
+    }
+  }
+  if (!agentId || !ownerId || !keyPath) {
+    const localConfigPath = join(process.cwd(), ".agentvalet", "config.json");
+    if (existsSync2(localConfigPath)) {
+      try {
+        const local = JSON.parse(readFileSync2(localConfigPath, "utf-8"));
+        agentId = agentId ?? local["agent_id"];
+        apiUrl = local["proxy_url"] ?? apiUrl;
+        keyPath = keyPath ?? join(process.cwd(), ".agentvalet", "agent.key");
+      } catch {
+      }
+    }
+    try {
+      const global = getStoredConfig();
+      if (!ownerId) ownerId = global.ownerId ?? void 0;
+    } catch {
+    }
+  }
+  if (!agentId || !ownerId || !keyPath) {
+    try {
+      const global = getStoredConfig();
+      agentId = agentId ?? global.lastAgentId ?? void 0;
+      ownerId = ownerId ?? global.ownerId ?? void 0;
+      keyPath = keyPath ?? global.lastKeyPath ?? void 0;
+      apiUrl = global.proxyUrl ?? apiUrl;
     } catch {
     }
   }
+  if (!agentId || !ownerId || !keyPath) {
+    process.stderr.write(NO_AGENT_MSG + "\n");
+    process.exit(1);
+  }
+  return { agentId, ownerId, keyPath, apiUrl };
+}
+function tryResolveAgent(envFile = ".env.agentvalet") {
   let agentId;
   let ownerId;
   let apiUrl = "https://api.agentvalet.ai";
   let keyPath;
-  const envPath = resolve2(options.envFile);
+  const envPath = resolve2(envFile);
   if (existsSync2(envPath)) {
     try {
-      const envVars = parseEnvFile(readFileSync2(envPath, "utf-8"));
-      agentId = envVars["AGENTVALET_AGENT_ID"];
-      ownerId = envVars["AGENTVALET_OWNER_ID"];
-      apiUrl = envVars["AGENTVALET_API_URL"] ?? apiUrl;
-      keyPath = envVars["AGENTVALET_PRIVATE_KEY_PATH"];
+      const vars = parseEnvFile(readFileSync2(envPath, "utf-8"));
+      agentId = vars["AGENTVALET_AGENT_ID"];
+      ownerId = vars["AGENTVALET_OWNER_ID"];
+      apiUrl = vars["AGENTVALET_API_URL"] ?? apiUrl;
+      keyPath = vars["AGENTVALET_PRIVATE_KEY_PATH"];
     } catch {
     }
   }
@@ -507,22 +524,72 @@ async function runRefresh(options) {
       } catch {
       }
     }
-    if (!ownerId) {
-      try {
-        ownerId = getStoredConfig().ownerId ?? void 0;
-      } catch {
-      }
+    try {
+      const global = getStoredConfig();
+      if (!ownerId) ownerId = global.ownerId ?? void 0;
+    } catch {
     }
   }
   if (!agentId || !ownerId || !keyPath) {
-    throw new Error(
-      `Cannot find agent credentials.
-Run 'npx @agentvalet/register' in this directory first.`
-    );
+    try {
+      const global = getStoredConfig();
+      agentId = agentId ?? global.lastAgentId ?? void 0;
+      ownerId = ownerId ?? global.ownerId ?? void 0;
+      keyPath = keyPath ?? global.lastKeyPath ?? void 0;
+      apiUrl = global.proxyUrl ?? apiUrl;
+    } catch {
+    }
   }
+  if (!agentId || !ownerId || !keyPath) return null;
+  return { agentId, ownerId, keyPath, apiUrl };
+}
+
+// src/commands/refresh.ts
+var CLAUDE_START = "<!-- agentvalet:start -->";
+var CLAUDE_END = "<!-- agentvalet:end -->";
+var HOOK_COMMAND = "npx @agentvalet/register refresh --if-stale --quiet 2>/dev/null || true";
+var HOOK_MARKER = "agentvalet/register refresh";
+function base64url(input) {
+  return Buffer.from(input).toString("base64url");
+}
+function signJwt(agentId, ownerId, privateKeyPem) {
+  const now = Math.floor(Date.now() / 1e3);
+  const header = base64url(JSON.stringify({ alg: "RS256", typ: "JWT" }));
+  const payload = base64url(JSON.stringify({ agent_id: agentId, owner_id: ownerId, iat: now, exp: now + 300 }));
+  const signingInput = `${header}.${payload}`;
+  const sign = createSign("RSA-SHA256");
+  sign.update(signingInput);
+  const signature = sign.sign(createPrivateKey(privateKeyPem), "base64url");
+  return `${signingInput}.${signature}`;
+}
+function writePermissionsFromEvent(agentId, ownerId, platforms, outputPath = "./.claude/agentvalet-permissions.md") {
+  const content = generatePermissionsFile(agentId, ownerId, platforms);
+  const resolvedPath = resolve3(outputPath);
+  mkdirSync(dirname2(resolvedPath), { recursive: true });
+  writeFileSync2(resolvedPath, content, "utf-8");
+  embedInClaudeMd(content);
+  ensureHook();
+}
+async function runRefresh(options) {
+  const outputPath = resolve3(options.outputPath);
+  if (options.ifStale) {
+    try {
+      const stat = statSync(outputPath);
+      const fileIsFresh = Date.now() - stat.mtimeMs < 36e5;
+      const claudeMdPath = resolve3("CLAUDE.md");
+      const claudeMd = existsSync3(claudeMdPath) ? readFileSync3(claudeMdPath, "utf-8") : "";
+      const blockStart = claudeMd.indexOf(CLAUDE_START);
+      const blockEnd = claudeMd.indexOf(CLAUDE_END);
+      const blockContent = blockStart !== -1 && blockEnd !== -1 ? claudeMd.slice(blockStart, blockEnd) : "";
+      const blockHasPlatforms = blockContent.includes("### ");
+      if (fileIsFresh && blockHasPlatforms) return;
+    } catch {
+    }
+  }
+  const { agentId, ownerId, keyPath, apiUrl } = resolveAgent(options.envFile);
   let privateKeyPem;
   try {
-    privateKeyPem = readFileSync2(keyPath, "utf-8");
+    privateKeyPem = readFileSync3(keyPath, "utf-8");
   } catch {
     throw new Error(`Cannot read private key: ${keyPath}`);
   }
@@ -549,18 +616,18 @@ Run 'npx @agentvalet/register' in this directory first.`
   }
 }
 function embedInClaudeMd(permissionsContent) {
-  const claudeMdPath = resolve2("CLAUDE.md");
+  const claudeMdPath = resolve3("CLAUDE.md");
   const block = `${CLAUDE_START}
 ${permissionsContent.trimEnd()}
 ${CLAUDE_END}`;
-  if (!existsSync2(claudeMdPath)) {
+  if (!existsSync3(claudeMdPath)) {
     writeFileSync2(claudeMdPath, `# Agent Instructions
 
 ${block}
 `, "utf-8");
     return;
   }
-  const existing = readFileSync2(claudeMdPath, "utf-8");
+  const existing = readFileSync3(claudeMdPath, "utf-8");
   if (existing.includes(CLAUDE_START)) {
     const replaced = existing.replace(
       new RegExp(`${CLAUDE_START}[\\s\\S]*?${CLAUDE_END}`, "m"),
@@ -576,11 +643,11 @@ ${block}
   }
 }
 function ensureHook() {
-  const settingsPath = resolve2(".claude/settings.local.json");
+  const settingsPath = resolve3(".claude/settings.local.json");
   let settings = {};
-  if (existsSync2(settingsPath)) {
+  if (existsSync3(settingsPath)) {
     try {
-      settings = JSON.parse(readFileSync2(settingsPath, "utf-8"));
+      settings = JSON.parse(readFileSync3(settingsPath, "utf-8"));
     } catch {
       return;
     }
@@ -607,51 +674,20 @@ function ensureHook() {
   ensureMcpJson();
 }
 function ensureMcpJson() {
-  const mcpJsonPath = resolve2(".mcp.json");
+  const mcpJsonPath = resolve3(".mcp.json");
   let mcpConfig = {};
-  if (existsSync2(mcpJsonPath)) {
+  if (existsSync3(mcpJsonPath)) {
     try {
-      mcpConfig = JSON.parse(readFileSync2(mcpJsonPath, "utf-8"));
+      mcpConfig = JSON.parse(readFileSync3(mcpJsonPath, "utf-8"));
     } catch {
       return;
     }
   }
   const servers = mcpConfig.mcpServers ?? {};
   if (servers["agentvalet"]) return;
-  let agentId;
-  let ownerId;
-  let apiUrl = "https://api.agentvalet.ai";
-  let keyPath;
-  const envPath = resolve2(".env.agentvalet");
-  if (existsSync2(envPath)) {
-    try {
-      const envVars = parseEnvFile(readFileSync2(envPath, "utf-8"));
-      agentId = envVars["AGENTVALET_AGENT_ID"];
-      ownerId = envVars["AGENTVALET_OWNER_ID"];
-      apiUrl = envVars["AGENTVALET_API_URL"] ?? apiUrl;
-      keyPath = envVars["AGENTVALET_PRIVATE_KEY_PATH"];
-    } catch {
-    }
-  }
-  if (!agentId || !keyPath) {
-    const localConfigPath = join(process.cwd(), ".agentvalet", "config.json");
-    if (existsSync2(localConfigPath)) {
-      try {
-        const local = JSON.parse(readFileSync2(localConfigPath, "utf-8"));
-        agentId = agentId ?? local["agent_id"];
-        apiUrl = local["proxy_url"] ?? apiUrl;
-        keyPath = keyPath ?? join(process.cwd(), ".agentvalet", "agent.key");
-      } catch {
-      }
-    }
-    if (!ownerId) {
-      try {
-        ownerId = getStoredConfig().ownerId ?? void 0;
-      } catch {
-      }
-    }
-  }
-  if (!agentId || !ownerId || !keyPath) return;
+  const creds = tryResolveAgent();
+  if (!creds) return;
+  const { agentId, ownerId, apiUrl, keyPath } = creds;
   servers["agentvalet"] = {
     command: "npx",
     args: ["-y", "@agentvalet/register", "mcp-server"],
@@ -667,14 +703,14 @@ function ensureMcpJson() {
 }
 
 // src/commands/onboard.ts
-import chalk6 from "chalk";
+import chalk7 from "chalk";
 import ora from "ora";
 import prompts3 from "prompts";
 
 // src/auth/github-device-flow.ts
 import { createOAuthDeviceAuth } from "@octokit/auth-oauth-device";
 import open from "open";
-import chalk3 from "chalk";
+import chalk4 from "chalk";
 var GITHUB_CLIENT_ID = process.env.AGENTVALET_GITHUB_CLIENT_ID ?? "Ov23liQcaW0HcqJxmLfF";
 async function authenticateWithGitHub() {
   const auth = createOAuthDeviceAuth({
@@ -683,15 +719,15 @@ async function authenticateWithGitHub() {
     scopes: ["user:email", "read:user"],
     onVerification(verification) {
       console.log("");
-      console.log(chalk3.bold("  Authenticate with GitHub"));
+      console.log(chalk4.bold("  Authenticate with GitHub"));
       console.log("");
-      console.log(`  1. Open: ${chalk3.cyan.underline(verification.verification_uri)}`);
-      console.log(`  2. Enter code: ${chalk3.bold.yellow(verification.user_code)}`);
+      console.log(`  1. Open: ${chalk4.cyan.underline(verification.verification_uri)}`);
+      console.log(`  2. Enter code: ${chalk4.bold.yellow(verification.user_code)}`);
       console.log("");
       open(verification.verification_uri).catch(() => {
-        console.log(chalk3.dim("  (Could not open browser \u2014 navigate to the URL above manually)"));
+        console.log(chalk4.dim("  (Could not open browser \u2014 navigate to the URL above manually)"));
       });
-      console.log(chalk3.dim("  Waiting for authorisation..."));
+      console.log(chalk4.dim("  Waiting for authorisation..."));
     }
   });
   const tokenAuth = await auth({ type: "oauth" });
@@ -843,20 +879,20 @@ async function writeLocalConfig(config) {
 }
 
 // src/output/env.ts
-import chalk4 from "chalk";
+import chalk5 from "chalk";
 import { appendFile as appendFile2, writeFile as writeFile3 } from "fs/promises";
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import path3 from "path";
 function formatEnvBlock(vars) {
   return Object.entries(vars).map(([key, value]) => {
     const truncated = value.length > 60 ? value.substring(0, 40) + "..." + value.substring(value.length - 10) : value;
-    return `  ${chalk4.dim(key + "=")}${chalk4.white(truncated)}`;
+    return `  ${chalk5.dim(key + "=")}${chalk5.white(truncated)}`;
   }).join("\n");
 }
 
 // src/config/ide.ts
 import { mkdir as mkdir3, writeFile as writeFile4, readFile as readFile2, appendFile as appendFile3 } from "fs/promises";
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync5 } from "fs";
 import path4 from "path";
 import os from "os";
 function buildMcpEntry(params) {
@@ -873,7 +909,7 @@ function buildMcpEntry(params) {
 }
 async function mergeJsonFile(filePath, key, value) {
   let existing = {};
-  if (existsSync4(filePath)) {
+  if (existsSync5(filePath)) {
     try {
       const text = await readFile2(filePath, "utf8");
       existing = JSON.parse(text);
@@ -931,9 +967,9 @@ async function writeGlobalFrameworkConfigs(params) {
   const written = [];
   const codexDir = path4.join(os.homedir(), ".codex");
   const codexConfigPath = path4.join(codexDir, "config.toml");
-  if (existsSync4(codexDir)) {
+  if (existsSync5(codexDir)) {
     try {
-      const existing = existsSync4(codexConfigPath) ? await readFile2(codexConfigPath, "utf8") : "";
+      const existing = existsSync5(codexConfigPath) ? await readFile2(codexConfigPath, "utf8") : "";
       if (!existing.includes("[mcp_servers.agentvalet]")) {
         const addition = `
 [mcp_servers.agentvalet]
@@ -964,7 +1000,7 @@ async function writeIdeConfigs(params) {
       console.warn(`  Warning: could not write .mcp.json: ${err.message}`);
     }
     const claudeMdPath = path4.join(cwd, "CLAUDE.md");
-    if (!existsSync4(claudeMdPath)) {
+    if (!existsSync5(claudeMdPath)) {
       try {
         await writeFile4(claudeMdPath, buildClaudeMd(params.agentId, params.ownerId, params.proxyUrl), "utf8");
         written.push("CLAUDE.md");
@@ -990,12 +1026,12 @@ async function writeIdeConfigs(params) {
 }
 
 // src/config/frameworks.ts
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync6 } from "fs";
 import { execSync as execSync2 } from "child_process";
 import os2 from "os";
 import path5 from "path";
 import prompts2 from "prompts";
-import chalk5 from "chalk";
+import chalk6 from "chalk";
 function tryBinary(cmd) {
   try {
     execSync2(`${cmd} --version`, { stdio: "ignore", timeout: 3e3 });
@@ -1010,20 +1046,20 @@ function cursorInstalled() {
   if (platform === "win32") {
     const appData = process.env.APPDATA ?? path5.join(home, "AppData", "Roaming");
     const localAppData = process.env.LOCALAPPDATA ?? path5.join(home, "AppData", "Local");
-    return existsSync5(path5.join(appData, "Cursor")) || existsSync5(path5.join(localAppData, "Programs", "cursor"));
+    return existsSync6(path5.join(appData, "Cursor")) || existsSync6(path5.join(localAppData, "Programs", "cursor"));
   }
   if (platform === "darwin") {
-    return existsSync5(path5.join(home, "Library", "Application Support", "Cursor")) || existsSync5("/Applications/Cursor.app");
+    return existsSync6(path5.join(home, "Library", "Application Support", "Cursor")) || existsSync6("/Applications/Cursor.app");
   }
-  return existsSync5(path5.join(home, ".config", "Cursor")) || existsSync5("/usr/share/applications/cursor.desktop");
+  return existsSync6(path5.join(home, ".config", "Cursor")) || existsSync6("/usr/share/applications/cursor.desktop");
 }
 function detectFrameworks() {
   const home = os2.homedir();
   return {
-    codex: existsSync5(path5.join(home, ".codex")) || tryBinary("codex"),
-    claudeCode: existsSync5(path5.join(home, ".claude")) || tryBinary("claude"),
-    cursor: existsSync5(path5.join(process.cwd(), ".cursor")) || cursorInstalled(),
-    openclaw: existsSync5(path5.join(home, ".openclaw"))
+    codex: existsSync6(path5.join(home, ".codex")) || tryBinary("codex"),
+    claudeCode: existsSync6(path5.join(home, ".claude")) || tryBinary("claude"),
+    cursor: existsSync6(path5.join(process.cwd(), ".cursor")) || cursorInstalled(),
+    openclaw: existsSync6(path5.join(home, ".openclaw"))
   };
 }
 async function frameworkSetupConsent(detected) {
@@ -1044,9 +1080,9 @@ async function frameworkSetupConsent(detected) {
   }
   if (items.length === 0) return false;
   console.log("");
-  console.log(chalk5.bold("  Detected agent frameworks"));
+  console.log(chalk6.bold("  Detected agent frameworks"));
   for (const item of items) {
-    console.log(chalk5.dim(`    ${item}`));
+    console.log(chalk6.dim(`    ${item}`));
   }
   console.log("");
   const { confirm } = await prompts2({
@@ -1064,13 +1100,13 @@ import path6 from "path";
 import { writeFile as writeFile5 } from "fs/promises";
 async function runOnboard() {
   console.log("");
-  console.log(chalk6.bold("  AgentValet \u2014 Agent Registration"));
-  console.log(chalk6.dim("  app.agentvalet.ai"));
+  console.log(chalk7.bold("  AgentValet \u2014 Agent Registration"));
+  console.log(chalk7.dim("  app.agentvalet.ai"));
   console.log("");
   if (isAuthenticated()) {
     const stored = getStoredConfig();
     console.log(
-      chalk6.green("  \u2713 Already authenticated as") + chalk6.bold(` ${stored.email}`)
+      chalk7.green("  \u2713 Already authenticated as") + chalk7.bold(` ${stored.email}`)
     );
     const { action } = await prompts3({
       type: "select",
@@ -1091,10 +1127,10 @@ async function runOnboard() {
     }
     if (action === "signout") {
       clearConfig();
-      console.log(chalk6.dim("  Signed out. Run again to re-authenticate."));
+      console.log(chalk7.dim("  Signed out. Run again to re-authenticate."));
       return;
     }
-    await registerAgentFlow(stored.apiKey, stored.ownerId);
+    await registerAgentFlow(stored.cliToken, stored.ownerId);
     return;
   }
   const { authMethod } = await prompts3({
@@ -1120,14 +1156,14 @@ async function runOnboard() {
     const result = await authenticateWithGitHub();
     githubToken = result.token;
   } catch (err) {
-    console.error(chalk6.red(`  \u2717 Authentication failed: ${err.message}`));
+    console.error(chalk7.red(`  \u2717 Authentication failed: ${err.message}`));
     process.exit(1);
   }
   spinner = ora("  Fetching your GitHub profile...").start();
   let githubUser;
   try {
     githubUser = await getGitHubUser(githubToken);
-    spinner.succeed(`  GitHub: ${chalk6.bold("@" + githubUser.login)}`);
+    spinner.succeed(`  GitHub: ${chalk7.bold("@" + githubUser.login)}`);
   } catch (err) {
     spinner.fail(`  Failed to fetch GitHub profile: ${err.message}`);
     process.exit(1);
@@ -1169,13 +1205,14 @@ async function runOnboard() {
     orgId: account.org_id,
     proxyUrl: account.proxy_url,
     githubUsername: githubUser.login,
-    email: githubUser.email
+    email: githubUser.email,
+    cliToken: account.cli_token
   });
-  await registerAgentFlow(account.owner_id, account.owner_id);
+  await registerAgentFlow(account.cli_token, account.owner_id);
 }
 async function ownerIdFlow() {
   console.log("");
-  console.log(chalk6.dim("  Find your Owner ID at: ") + chalk6.cyan.underline("https://app.agentvalet.ai/settings"));
+  console.log(chalk7.dim("  Find your Owner ID at: ") + chalk7.cyan.underline("https://app.agentvalet.ai/settings"));
   console.log("");
   const { ownerId } = await prompts3({
     type: "text",
@@ -1190,10 +1227,10 @@ async function ownerIdFlow() {
   let account;
   try {
     account = await getAccount(ownerId.trim());
-    spinner.succeed(`  Account verified \u2014 plan: ${chalk6.bold(account.plan)}`);
+    spinner.succeed(`  Account verified \u2014 plan: ${chalk7.bold(account.plan)}`);
   } catch (err) {
     spinner.fail(`  Could not verify Owner ID: ${err.message}`);
-    console.log(chalk6.dim("  Make sure you copied the full Owner ID from app.agentvalet.ai/settings"));
+    console.log(chalk7.dim("  Make sure you copied the full Owner ID from app.agentvalet.ai/settings"));
     process.exit(1);
   }
   saveConfig({
@@ -1201,9 +1238,10 @@ async function ownerIdFlow() {
     ownerId: account.owner_id,
     orgId: account.org_id,
     proxyUrl: "https://api.agentvalet.ai",
-    email: account.email ?? ""
+    email: account.email ?? "",
+    cliToken: account.cli_token
   });
-  await registerAgentFlow(account.owner_id, account.owner_id);
+  await registerAgentFlow(account.cli_token, account.owner_id);
 }
 async function registerAgentFlow(apiKey, ownerId) {
   const hostname = os3.hostname().split(".")[0];
@@ -1226,7 +1264,7 @@ async function registerAgentFlow(apiKey, ownerId) {
       name: agentName.trim(),
       source: "cli"
     }, apiKey);
-    spinner.succeed(`  Agent registered: ${chalk6.bold(agent.agent_id)}`);
+    spinner.succeed(`  Agent registered: ${chalk7.bold(agent.agent_id)}`);
   } catch (err) {
     spinner.fail(`  Registration failed: ${err.message}`);
     process.exit(1);
@@ -1240,9 +1278,10 @@ async function registerAgentFlow(apiKey, ownerId) {
       proxyUrl,
       privateKeyPem: agent.private_key_pem
     });
+    saveConfig({ lastAgentId: agent.agent_id, lastKeyPath: keyPath });
   } catch (err) {
-    console.error(chalk6.red(`  \u2717 Failed to write local config: ${err.message}`));
-    console.log(chalk6.dim("  Agent was registered \u2014 run again to save config locally."));
+    console.error(chalk7.red(`  \u2717 Failed to write local config: ${err.message}`));
+    console.log(chalk7.dim("  Agent was registered \u2014 run again to save config locally."));
     process.exit(1);
   }
   try {
@@ -1260,7 +1299,7 @@ async function registerAgentFlow(apiKey, ownerId) {
   const shouldSetup = await frameworkSetupConsent(detected);
   if (shouldSetup) {
     console.log("");
-    console.log(chalk6.bold("  Configuring agent frameworks..."));
+    console.log(chalk7.bold("  Configuring agent frameworks..."));
     console.log("");
     const ideResults = await writeIdeConfigs({
       agentId: agent.agent_id,
@@ -1270,7 +1309,7 @@ async function registerAgentFlow(apiKey, ownerId) {
       detected
     });
     for (const r of ideResults) {
-      console.log(chalk6.green(`  \u2713 ${r}`));
+      console.log(chalk7.green(`  \u2713 ${r}`));
     }
     const globalResults = await writeGlobalFrameworkConfigs({
       agentId: agent.agent_id,
@@ -1279,7 +1318,7 @@ async function registerAgentFlow(apiKey, ownerId) {
       keyPath
     });
     for (const r of globalResults) {
-      console.log(chalk6.green(`  \u2713 ${r}`));
+      console.log(chalk7.green(`  \u2713 ${r}`));
     }
     if (detected.codex) {
       writeAgentsMd();
@@ -1297,11 +1336,11 @@ async function registerAgentFlow(apiKey, ownerId) {
     ensureMcpServer();
   } else if (shouldSetup === false) {
     console.log("");
-    console.log(chalk6.dim("  To configure agent frameworks manually:"));
-    console.log(chalk6.dim("  https://docs.agentvalet.ai/setup"));
+    console.log(chalk7.dim("  To configure agent frameworks manually:"));
+    console.log(chalk7.dim("  https://docs.agentvalet.ai/setup"));
   }
   console.log("");
-  console.log(chalk6.bold.green("  \u2713 All done!"));
+  console.log(chalk7.bold.green("  \u2713 All done!"));
   console.log("");
   console.log("  Set these in your environment:");
   console.log("");
@@ -1312,26 +1351,26 @@ async function registerAgentFlow(apiKey, ownerId) {
     AGENT_PRIVATE_KEY_PATH: path6.join(process.cwd(), ".agentvalet", "agent.key")
   }));
   console.log("");
-  console.log(chalk6.dim("  Private key also saved to: .agentvalet/agent.key"));
-  console.log(chalk6.dim("  Add .agentvalet/ to your .gitignore"));
+  console.log(chalk7.dim("  Private key also saved to: .agentvalet/agent.key"));
+  console.log(chalk7.dim("  Add .agentvalet/ to your .gitignore"));
   console.log("");
   console.log(
-    `  Dashboard: ${chalk6.cyan.underline("https://app.agentvalet.ai")}`
+    `  Dashboard: ${chalk7.cyan.underline("https://app.agentvalet.ai")}`
   );
-  console.log(chalk6.dim("  Approve this agent in your dashboard to activate it."));
+  console.log(chalk7.dim("  Approve this agent in your dashboard to activate it."));
   console.log("");
   console.log("  Useful commands:");
-  console.log(chalk6.dim("    npx @agentvalet/register          \u2014 register another agent"));
-  console.log(chalk6.dim("    npx @agentvalet/register refresh  \u2014 refresh approved permissions"));
+  console.log(chalk7.dim("    npx @agentvalet/register          \u2014 register another agent"));
+  console.log(chalk7.dim("    npx @agentvalet/register refresh  \u2014 refresh approved permissions"));
   console.log("");
 }
 function showCredentials(config) {
   console.log("");
   console.log("  Your AgentValet credentials:");
   console.log("");
-  console.log(`  Owner ID:  ${chalk6.bold(config.ownerId)}`);
-  console.log(`  Proxy URL: ${chalk6.bold(config.proxyUrl)}`);
-  console.log(`  Email:     ${chalk6.bold(config.email)}`);
+  console.log(`  Owner ID:  ${chalk7.bold(config.ownerId)}`);
+  console.log(`  Proxy URL: ${chalk7.bold(config.proxyUrl)}`);
+  console.log(`  Email:     ${chalk7.bold(config.email)}`);
   console.log("");
 }
 
@@ -1340,7 +1379,7 @@ function collectScope(value, previous) {
   return [...previous, value];
 }
 var program = new Command();
-program.name("agentvalet-register").description("Self-register an AI agent with AgentValet").version("0.4.1").option("--owner <uuid>", "Owner ID (or set AGENTVALET_OWNER env var)").option("--name <name>", "Agent name").option("--description <desc>", "Agent description").option("--scope <platform:scope>", "Requested scope, repeatable", collectScope, []).option("--api-url <url>", "AgentValet API base URL", "https://api.agentvalet.ai").option("--output <path>", "Path to write .env file", "./.env.agentvalet").option("--key-path <path>", "Path to write private key", "./agentvalet.key").option("--json", "Machine-readable JSON output").option("--no-wait", "Register only, do not wait for approval").option("--timeout <seconds>", "Approval wait timeout in seconds", "300").action(async (opts) => {
+program.name("agentvalet-register").description("Self-register an AI agent with AgentValet").version("0.4.5").option("--owner <uuid>", "Owner ID (or set AGENTVALET_OWNER env var)").option("--name <name>", "Agent name").option("--description <desc>", "Agent description").option("--scope <platform:scope>", "Requested scope, repeatable", collectScope, []).option("--api-url <url>", "AgentValet API base URL", "https://api.agentvalet.ai").option("--output <path>", "Path to write .env file", "./.env.agentvalet").option("--key-path <path>", "Path to write private key", "./agentvalet.key").option("--json", "Machine-readable JSON output").option("--no-wait", "Register only, do not wait for approval").option("--timeout <seconds>", "Approval wait timeout in seconds", "300").action(async (opts) => {
   const isJson = !!opts.json;
   let ownerId = opts.owner ?? process.env.AGENTVALET_OWNER ?? "";
   let agentName = opts.name ?? "";
@@ -1366,7 +1405,7 @@ program.name("agentvalet-register").description("Self-register an AI agent with
       console.error(JSON.stringify({ error: "--owner or AGENTVALET_OWNER is required" }));
       process.exit(3);
     }
-    console.error(chalk7.red("Error: --owner or AGENTVALET_OWNER environment variable is required"));
+    console.error(chalk8.red("Error: --owner or AGENTVALET_OWNER environment variable is required"));
     process.exit(3);
   }
   const scopeMap = /* @__PURE__ */ new Map();
@@ -1374,7 +1413,7 @@ program.name("agentvalet-register").description("Self-register an AI agent with
     const colon = s.indexOf(":");
     if (colon === -1) {
       console.error(
-        isJson ? JSON.stringify({ error: `Invalid scope format: ${s} (expected platform:scope)` }) : chalk7.red(`Invalid scope format: ${s} (expected platform:scope)`)
+        isJson ? JSON.stringify({ error: `Invalid scope format: ${s} (expected platform:scope)` }) : chalk8.red(`Invalid scope format: ${s} (expected platform:scope)`)
       );
       process.exit(3);
     }
@@ -1397,11 +1436,11 @@ program.name("agentvalet-register").description("Self-register an AI agent with
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk7.red(`Registration failed: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk8.red(`Registration failed: ${msg}`));
     process.exit(3);
   }
   if (!isJson) {
-    console.log(chalk7.cyan(`
+    console.log(chalk8.cyan(`
 Approve at: https://app.agentvalet.ai/agents
 `));
   }
@@ -1409,7 +1448,7 @@ Approve at: https://app.agentvalet.ai/agents
     if (isJson) {
       console.log(JSON.stringify({ status: "pending", token }));
     } else {
-      console.log(chalk7.yellow("Registration submitted (--no-wait). Token:"), token);
+      console.log(chalk8.yellow("Registration submitted (--no-wait). Token:"), token);
     }
     process.exit(0);
   }
@@ -1420,14 +1459,14 @@ Approve at: https://app.agentvalet.ai/agents
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk7.red(`Wait failed: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk8.red(`Wait failed: ${msg}`));
     process.exit(3);
   }
   if (result.status === "rejected") {
     if (isJson) {
       console.log(JSON.stringify({ status: "rejected" }));
     } else {
-      console.log(chalk7.red("\nRegistration denied by owner."));
+      console.log(chalk8.red("\nRegistration denied by owner."));
     }
     process.exit(1);
   }
@@ -1435,7 +1474,7 @@ Approve at: https://app.agentvalet.ai/agents
     if (isJson) {
       console.log(JSON.stringify({ status: "timeout" }));
     } else {
-      console.log(chalk7.yellow("\nTimed out waiting for approval."));
+      console.log(chalk8.yellow("\nTimed out waiting for approval."));
     }
     process.exit(2);
   }
@@ -1454,30 +1493,33 @@ Approve at: https://app.agentvalet.ai/agents
     }));
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk7.red(`Failed to save output: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk8.red(`Failed to save output: ${msg}`));
     process.exit(3);
   }
   const keyWritten = !!privateKey;
+  if (keyWritten) {
+    saveConfig({ lastAgentId: agentId, lastKeyPath: keyPath, ownerId: resolvedOwnerId });
+  }
   if (isJson) {
     console.log(JSON.stringify({ status: "approved", agentId, keyPath: keyWritten ? keyPath : null, envPath }));
   } else {
-    console.log(chalk7.green(`
+    console.log(chalk8.green(`
 Approved! Agent ID: ${agentId}`));
     if (keyWritten) {
-      console.log(chalk7.gray(`Key:        ${keyPath}`));
+      console.log(chalk8.gray(`Key:        ${keyPath}`));
     } else {
-      console.log(chalk7.yellow(`Key:        not written \u2014 copy it from the dashboard and paste into ${keyPath}`));
+      console.log(chalk8.yellow(`Key:        not written \u2014 copy it from the dashboard and paste into ${keyPath}`));
     }
-    console.log(chalk7.gray(`Env file:   ${envPath}`));
+    console.log(chalk8.gray(`Env file:   ${envPath}`));
     console.log(`
 Source the env file before calling any tool:`);
-    console.log(chalk7.cyan(`  source ${envPath}`));
+    console.log(chalk8.cyan(`  source ${envPath}`));
   }
   if (keyWritten) {
     try {
       if (grantedPlatforms && grantedPlatforms.length > 0) {
         writePermissionsFromEvent(agentId, resolvedOwnerId, grantedPlatforms);
-        if (!isJson) console.log(chalk7.gray(`Permissions: .claude/agentvalet-permissions.md`));
+        if (!isJson) console.log(chalk8.gray(`Permissions: .claude/agentvalet-permissions.md`));
       } else {
         await runRefresh({
           envFile: opts.output,
@@ -1485,10 +1527,10 @@ Source the env file before calling any tool:`);
           ifStale: false,
           quiet: isJson
         });
-        if (!isJson) console.log(chalk7.gray(`Permissions: .claude/agentvalet-permissions.md`));
+        if (!isJson) console.log(chalk8.gray(`Permissions: .claude/agentvalet-permissions.md`));
       }
     } catch {
-      if (!isJson) console.log(chalk7.yellow(`Permissions: run 'agentvalet-register refresh' to generate`));
+      if (!isJson) console.log(chalk8.yellow(`Permissions: run 'agentvalet-register refresh' to generate`));
     }
   }
   process.exit(0);
@@ -1503,7 +1545,7 @@ program.command("refresh").description("Refresh approved permissions and update
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(chalk7.red(`Refresh failed: ${msg}`));
+    console.error(chalk8.red(`Refresh failed: ${msg}`));
     process.exit(3);
   }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/register",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "Self-register AI agents with AgentValet",
   "type": "module",
   "bin": {