@agentvalet/register 0.4.7 → 0.4.9

package/dist/index.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command as Command4 } from "commander";
-import chalk11 from "chalk";
+import { Command as Command5 } from "commander";
+import chalk12 from "chalk";
 
 // src/wizard.ts
 import prompts from "prompts";
@@ -166,7 +166,7 @@ function parseEvent(data) {
   return null;
 }
 function sleep(ms) {
-  return new Promise((resolve4) => setTimeout(resolve4, ms));
+  return new Promise((resolve5) => setTimeout(resolve5, ms));
 }
 
 // src/save.ts
@@ -1454,12 +1454,12 @@ function revokeCommand() {
       process.exit(1);
     }
     const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-    const confirmed = await new Promise((resolve4) => {
+    const confirmed = await new Promise((resolve5) => {
       rl.question(
         chalk9.yellow(`Revoke ${opts.agentId}? This cascades to all child agents and cannot be undone. (y/N) `),
         (ans) => {
           rl.close();
-          resolve4(ans.trim().toLowerCase() === "y");
+          resolve5(ans.trim().toLowerCase() === "y");
         }
       );
     });
@@ -1567,12 +1567,235 @@ function injectCommand() {
   });
 }
 
+// src/commands/uninstall.ts
+import { Command as Command4 } from "commander";
+import chalk11 from "chalk";
+import { existsSync as existsSync7, readFileSync as readFileSync4, writeFileSync as writeFileSync3, rmSync } from "fs";
+import { resolve as resolve4, join as join3 } from "path";
+import { homedir as homedir2 } from "os";
+import { createSign as createSign2, createPrivateKey as createPrivateKey2 } from "crypto";
+var CLAUDE_START2 = "<!-- agentvalet:start -->";
+var CLAUDE_END2 = "<!-- agentvalet:end -->";
+var HOOK_MARKER2 = "agentvalet/register refresh";
+function signJwt2(agentId, ownerId, privateKeyPem) {
+  const now = Math.floor(Date.now() / 1e3);
+  const b64 = (s) => Buffer.from(s).toString("base64url");
+  const header = b64(JSON.stringify({ alg: "RS256", typ: "JWT" }));
+  const payload = b64(JSON.stringify({ agent_id: agentId, owner_id: ownerId, iat: now, exp: now + 300 }));
+  const signingInput = `${header}.${payload}`;
+  const sign = createSign2("RSA-SHA256");
+  sign.update(signingInput);
+  return `${signingInput}.${sign.sign(createPrivateKey2(privateKeyPem), "base64url")}`;
+}
+function stripClaudeMd() {
+  const path7 = resolve4("CLAUDE.md");
+  if (!existsSync7(path7)) return;
+  let content = readFileSync4(path7, "utf-8");
+  content = content.replace(new RegExp(`${CLAUDE_START2}[\\s\\S]*?${CLAUDE_END2}`, "m"), "");
+  content = content.replace(/^@\.claude\/agentvalet-permissions\.md\s*$/m, "");
+  content = content.replace(/(\r?\n){3,}/g, "\n\n").trim();
+  writeFileSync3(path7, content ? content + "\n" : "", "utf-8");
+}
+function stripSettingsJson() {
+  const path7 = resolve4(".claude/settings.local.json");
+  if (!existsSync7(path7)) return;
+  try {
+    const settings = JSON.parse(readFileSync4(path7, "utf-8"));
+    const hooks = settings.hooks ?? {};
+    const ups = hooks.UserPromptSubmit ?? [];
+    hooks.UserPromptSubmit = ups.filter(
+      (e) => !e.hooks?.some((h) => h.command?.includes(HOOK_MARKER2))
+    );
+    settings.hooks = hooks;
+    const perms = settings.permissions ?? {};
+    const allow = perms.allow ?? [];
+    perms.allow = allow.filter((e) => !e.startsWith("mcp__agentvalet__"));
+    settings.permissions = perms;
+    writeFileSync3(path7, JSON.stringify(settings, null, 2) + "\n", "utf-8");
+  } catch {
+  }
+}
+function stripMcpJson() {
+  const path7 = resolve4(".mcp.json");
+  if (!existsSync7(path7)) return;
+  try {
+    const config = JSON.parse(readFileSync4(path7, "utf-8"));
+    const servers = config.mcpServers ?? {};
+    delete servers["agentvalet"];
+    config.mcpServers = servers;
+    writeFileSync3(path7, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  } catch {
+  }
+}
+function deleteIfExists(p) {
+  const abs = resolve4(p);
+  if (existsSync7(abs)) {
+    rmSync(abs, { recursive: true, force: true });
+    return abs;
+  }
+  return null;
+}
+function cleanLocally() {
+  const removed = [];
+  const r = (p) => {
+    const f = deleteIfExists(p);
+    if (f) removed.push(f);
+  };
+  r(".env.agentvalet");
+  r(".agentvalet");
+  r("agentvalet.key");
+  r(".claude/agentvalet-permissions.md");
+  stripClaudeMd();
+  stripSettingsJson();
+  stripMcpJson();
+  try {
+    saveConfig({ lastAgentId: "", lastKeyPath: "" });
+  } catch {
+  }
+  const oldConfig = join3(homedir2(), ".agentvalet", "config.json");
+  if (existsSync7(oldConfig)) {
+    rmSync(oldConfig, { force: true });
+    removed.push(oldConfig);
+  }
+  if (removed.length > 0) {
+    console.log(chalk11.green("  \u2713 Removed local files:"));
+    for (const f of removed) console.log(chalk11.dim(`      ${f}`));
+  }
+  console.log(chalk11.green("  \u2713 Cleaned CLAUDE.md, .mcp.json, .claude/settings.local.json"));
+}
+async function pollForApproval(apiUrl, revocationToken, timeoutMs) {
+  const streamUrl = `${apiUrl}/v1/revoke-request/stream/${revocationToken}`;
+  const deadline = Date.now() + timeoutMs;
+  return new Promise((resolve5) => {
+    let settled = false;
+    function done(result) {
+      if (!settled) {
+        settled = true;
+        resolve5(result);
+      }
+    }
+    function connect() {
+      if (Date.now() > deadline) {
+        done("timeout");
+        return;
+      }
+      fetch(streamUrl, { headers: { Accept: "text/event-stream" } }).then(async (res) => {
+        if (!res.ok || !res.body) {
+          done("timeout");
+          return;
+        }
+        const reader = res.body.getReader();
+        const decoder = new TextDecoder();
+        let buf = "";
+        while (true) {
+          const { done: streamDone, value } = await reader.read();
+          if (streamDone) break;
+          buf += decoder.decode(value, { stream: true });
+          const lines = buf.split("\n");
+          buf = lines.pop() ?? "";
+          for (const line of lines) {
+            if (!line.startsWith("data: ")) continue;
+            try {
+              const evt = JSON.parse(line.slice(6));
+              if (evt.status === "approved") {
+                done("approved");
+                return;
+              }
+              if (evt.status === "rejected") {
+                done("rejected");
+                return;
+              }
+              if (evt.status === "timeout") {
+                done("timeout");
+                return;
+              }
+            } catch {
+            }
+          }
+        }
+        if (!settled) setTimeout(connect, 1e3);
+      }).catch(() => {
+        if (!settled) setTimeout(connect, 2e3);
+      });
+    }
+    connect();
+    setTimeout(() => done("timeout"), timeoutMs);
+  });
+}
+function uninstallCommand() {
+  return new Command4("uninstall").description("Request agent revocation (requires owner approval) and remove all local files").option("--local-only", "Skip the server-side revoke request \u2014 just clean local files").option("--timeout <seconds>", "Seconds to wait for owner approval", "300").action(async (opts) => {
+    const timeoutMs = parseInt(opts.timeout, 10) * 1e3;
+    const creds = tryResolveAgent();
+    if (opts.localOnly || !creds) {
+      if (!creds) console.log(chalk11.dim("  No agent credentials found \u2014 cleaning local files only."));
+      cleanLocally();
+      console.log(chalk11.dim("\n  To register a new agent: npx @agentvalet/register"));
+      return;
+    }
+    let privateKeyPem;
+    try {
+      privateKeyPem = readFileSync4(creds.keyPath, "utf-8").trim();
+    } catch {
+    }
+    if (!privateKeyPem) {
+      console.log(chalk11.yellow("  \u26A0 Private key not found \u2014 cannot submit revocation request."));
+      console.log(chalk11.dim("  Use --local-only to clean local files without revoking."));
+      process.exit(1);
+    }
+    console.log(chalk11.dim(`
+  Submitting revocation request for ${creds.agentId}...`));
+    const jwt = signJwt2(creds.agentId, creds.ownerId, privateKeyPem);
+    let revocationToken;
+    try {
+      const res = await fetch(`${creds.apiUrl}/v1/revoke-request`, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" },
+        body: JSON.stringify({ reason: "CLI uninstall" })
+      });
+      const body = await res.json();
+      if (res.status === 404 || res.status === 409) {
+        console.log(chalk11.yellow(`  \u26A0 Agent not found on server (already revoked?) \u2014 cleaning local files.`));
+        cleanLocally();
+        console.log(chalk11.dim("\n  To register a new agent: npx @agentvalet/register"));
+        return;
+      }
+      if (!res.ok || !body.revocation_token) {
+        throw new Error(body.error ?? `HTTP ${res.status}`);
+      }
+      revocationToken = body.revocation_token;
+    } catch (err) {
+      console.error(chalk11.red(`  \u2717 Failed to submit revocation request: ${err instanceof Error ? err.message : err}`));
+      process.exit(1);
+    }
+    console.log(chalk11.green("  \u2713 Revocation request submitted"));
+    console.log("");
+    console.log(chalk11.yellow("  ACTION REQUIRED:"));
+    console.log(chalk11.yellow(`  Open ${creds.apiUrl.replace("api.", "app.")}/agents and approve the uninstall request.`));
+    console.log(chalk11.dim(`  Waiting up to ${opts.timeout}s for approval...
+`));
+    const result = await pollForApproval(creds.apiUrl, revocationToken, timeoutMs);
+    if (result === "rejected") {
+      console.log(chalk11.red("\n  \u2717 Owner rejected the uninstall request. Agent remains active."));
+      process.exit(1);
+    }
+    if (result === "timeout") {
+      console.log(chalk11.yellow("\n  \u26A0 Timed out waiting for owner approval."));
+      console.log(chalk11.dim("  The request remains pending in your dashboard. Run again to resume."));
+      process.exit(1);
+    }
+    console.log(chalk11.green("\n  \u2713 Approved \u2014 cleaning local files...\n"));
+    cleanLocally();
+    console.log("");
+    console.log(chalk11.dim("  Agent revoked. To register a new agent: npx @agentvalet/register"));
+  });
+}
+
 // src/index.ts
 function collectScope(value, previous) {
   return [...previous, value];
 }
-var program = new Command4();
-program.name("agentvalet-register").description("Self-register an AI agent with AgentValet").version("0.4.7").option("--owner <uuid>", "Owner ID (or set AGENTVALET_OWNER env var)").option("--name <name>", "Agent name").option("--description <desc>", "Agent description").option("--scope <platform:scope>", "Requested scope, repeatable", collectScope, []).option("--api-url <url>", "AgentValet API base URL", "https://api.agentvalet.ai").option("--output <path>", "Path to write .env file", "./.env.agentvalet").option("--key-path <path>", "Path to write private key", "./agentvalet.key").option("--json", "Machine-readable JSON output").option("--no-wait", "Register only, do not wait for approval").option("--timeout <seconds>", "Approval wait timeout in seconds", "300").action(async (opts) => {
+var program = new Command5();
+program.name("agentvalet-register").description("Self-register an AI agent with AgentValet").version("0.4.8").option("--owner <uuid>", "Owner ID (or set AGENTVALET_OWNER env var)").option("--name <name>", "Agent name").option("--description <desc>", "Agent description").option("--scope <platform:scope>", "Requested scope, repeatable", collectScope, []).option("--api-url <url>", "AgentValet API base URL", "https://api.agentvalet.ai").option("--output <path>", "Path to write .env file", "./.env.agentvalet").option("--key-path <path>", "Path to write private key", "./agentvalet.key").option("--json", "Machine-readable JSON output").option("--no-wait", "Register only, do not wait for approval").option("--timeout <seconds>", "Approval wait timeout in seconds", "300").action(async (opts) => {
   const isJson = !!opts.json;
   let ownerId = opts.owner ?? process.env.AGENTVALET_OWNER ?? "";
   let agentName = opts.name ?? "";
@@ -1598,7 +1821,7 @@ program.name("agentvalet-register").description("Self-register an AI agent with
       console.error(JSON.stringify({ error: "--owner or AGENTVALET_OWNER is required" }));
       process.exit(3);
     }
-    console.error(chalk11.red("Error: --owner or AGENTVALET_OWNER environment variable is required"));
+    console.error(chalk12.red("Error: --owner or AGENTVALET_OWNER environment variable is required"));
     process.exit(3);
   }
   const scopeMap = /* @__PURE__ */ new Map();
@@ -1606,7 +1829,7 @@ program.name("agentvalet-register").description("Self-register an AI agent with
     const colon = s.indexOf(":");
     if (colon === -1) {
       console.error(
-        isJson ? JSON.stringify({ error: `Invalid scope format: ${s} (expected platform:scope)` }) : chalk11.red(`Invalid scope format: ${s} (expected platform:scope)`)
+        isJson ? JSON.stringify({ error: `Invalid scope format: ${s} (expected platform:scope)` }) : chalk12.red(`Invalid scope format: ${s} (expected platform:scope)`)
       );
       process.exit(3);
     }
@@ -1629,11 +1852,11 @@ program.name("agentvalet-register").description("Self-register an AI agent with
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk11.red(`Registration failed: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk12.red(`Registration failed: ${msg}`));
     process.exit(3);
   }
   if (!isJson) {
-    console.log(chalk11.cyan(`
+    console.log(chalk12.cyan(`
 Approve at: https://app.agentvalet.ai/agents
 `));
   }
@@ -1641,7 +1864,7 @@ Approve at: https://app.agentvalet.ai/agents
     if (isJson) {
       console.log(JSON.stringify({ status: "pending", token }));
     } else {
-      console.log(chalk11.yellow("Registration submitted (--no-wait). Token:"), token);
+      console.log(chalk12.yellow("Registration submitted (--no-wait). Token:"), token);
     }
     process.exit(0);
   }
@@ -1652,14 +1875,14 @@ Approve at: https://app.agentvalet.ai/agents
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk11.red(`Wait failed: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk12.red(`Wait failed: ${msg}`));
     process.exit(3);
   }
   if (result.status === "rejected") {
     if (isJson) {
       console.log(JSON.stringify({ status: "rejected" }));
     } else {
-      console.log(chalk11.red("\nRegistration denied by owner."));
+      console.log(chalk12.red("\nRegistration denied by owner."));
     }
     process.exit(1);
   }
@@ -1667,7 +1890,7 @@ Approve at: https://app.agentvalet.ai/agents
     if (isJson) {
       console.log(JSON.stringify({ status: "timeout" }));
     } else {
-      console.log(chalk11.yellow("\nTimed out waiting for approval."));
+      console.log(chalk12.yellow("\nTimed out waiting for approval."));
     }
     process.exit(2);
   }
@@ -1686,7 +1909,7 @@ Approve at: https://app.agentvalet.ai/agents
     }));
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk11.red(`Failed to save output: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk12.red(`Failed to save output: ${msg}`));
     process.exit(3);
   }
   const keyWritten = !!privateKey;
@@ -1696,23 +1919,23 @@ Approve at: https://app.agentvalet.ai/agents
   if (isJson) {
     console.log(JSON.stringify({ status: "approved", agentId, keyPath: keyWritten ? keyPath : null, envPath }));
   } else {
-    console.log(chalk11.green(`
+    console.log(chalk12.green(`
 Approved! Agent ID: ${agentId}`));
     if (keyWritten) {
-      console.log(chalk11.gray(`Key:        ${keyPath}`));
+      console.log(chalk12.gray(`Key:        ${keyPath}`));
     } else {
-      console.log(chalk11.yellow(`Key:        not written \u2014 copy it from the dashboard and paste into ${keyPath}`));
+      console.log(chalk12.yellow(`Key:        not written \u2014 copy it from the dashboard and paste into ${keyPath}`));
     }
-    console.log(chalk11.gray(`Env file:   ${envPath}`));
+    console.log(chalk12.gray(`Env file:   ${envPath}`));
     console.log(`
 Source the env file before calling any tool:`);
-    console.log(chalk11.cyan(`  source ${envPath}`));
+    console.log(chalk12.cyan(`  source ${envPath}`));
   }
   if (keyWritten) {
     try {
       if (grantedPlatforms && grantedPlatforms.length > 0) {
         writePermissionsFromEvent(agentId, resolvedOwnerId, grantedPlatforms);
-        if (!isJson) console.log(chalk11.gray(`Permissions: .claude/agentvalet-permissions.md`));
+        if (!isJson) console.log(chalk12.gray(`Permissions: .claude/agentvalet-permissions.md`));
       } else {
         await runRefresh({
           envFile: opts.output,
@@ -1720,10 +1943,10 @@ Source the env file before calling any tool:`);
           ifStale: false,
           quiet: isJson
         });
-        if (!isJson) console.log(chalk11.gray(`Permissions: .claude/agentvalet-permissions.md`));
+        if (!isJson) console.log(chalk12.gray(`Permissions: .claude/agentvalet-permissions.md`));
       }
     } catch {
-      if (!isJson) console.log(chalk11.yellow(`Permissions: run 'agentvalet-register refresh' to generate`));
+      if (!isJson) console.log(chalk12.yellow(`Permissions: run 'agentvalet-register refresh' to generate`));
     }
   }
   process.exit(0);
@@ -1738,7 +1961,7 @@ program.command("refresh").description("Refresh approved permissions and update
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(chalk11.red(`Refresh failed: ${msg}`));
+    console.error(chalk12.red(`Refresh failed: ${msg}`));
     process.exit(3);
   }
 });
@@ -1748,6 +1971,7 @@ program.command("mcp-server").description("Start the AgentValet MCP server (stdi
 program.addCommand(listCommand());
 program.addCommand(revokeCommand());
 program.addCommand(injectCommand());
+program.addCommand(uninstallCommand());
 program.parseAsync().catch((err) => {
   console.error(err);
   process.exit(3);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/register",
-  "version": "0.4.7",
+  "version": "0.4.9",
   "description": "Self-register AI agents with AgentValet",
   "type": "module",
   "bin": {