@agentvalet/register 0.5.6 → 0.6.1

package/dist/index.js

@@ -10,8 +10,8 @@ import {
 
 // src/index.ts
 import { createRequire as createRequire2 } from "module";
-import { Command as Command6 } from "commander";
-import chalk13 from "chalk";
+import { Command as Command7 } from "commander";
+import chalk14 from "chalk";
 
 // src/wizard.ts
 import prompts from "prompts";
@@ -2468,13 +2468,154 @@ function installCommand() {
   });
 }
 
+// src/commands/claim.ts
+import { Command as Command6 } from "commander";
+import { generateKeyPairSync } from "crypto";
+import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4, existsSync as existsSync8 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join3 } from "path";
+import chalk13 from "chalk";
+var DEFAULT_PROXY_URL = "https://api.agentvalet.ai";
+function resolveAgentDir(label) {
+  const root = join3(homedir3(), ".agentvalet");
+  return label ? join3(root, label) : root;
+}
+function sanitiseLabel(label) {
+  return label.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+}
+async function postBind(proxyUrl, bindSecret, publicKeyPem) {
+  const url = `${proxyUrl.replace(/\/$/, "")}/v1/invites/bind`;
+  const res = await fetch(url, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ bind_secret: bindSecret, public_key_pem: publicKeyPem })
+  });
+  if (!res.ok) {
+    let detail = `HTTP ${res.status}`;
+    try {
+      const body = await res.json();
+      if (body.error) detail = body.error;
+    } catch {
+    }
+    if (res.status === 410) {
+      throw new Error(
+        `Bind secret rejected (${detail}). It was either already used or expired \u2014 ask the inviting manager to re-issue.`
+      );
+    }
+    throw new Error(`Invite bind failed: ${detail}`);
+  }
+  return await res.json();
+}
+function claimCommand() {
+  return new Command6("claim").description("Bind an AgentValet agent from a one-shot invite secret").argument("<bind_secret>", "The bsec_\u2026 value shown on the AgentValet claim page").option("--label <name>", "Save under ~/.agentvalet/<label>/ for multi-agent machines").option("--api-url <url>", "AgentValet proxy URL", DEFAULT_PROXY_URL).option("--json", "Machine-readable JSON output").action(async (bindSecret, opts) => {
+    const isJson = !!opts.json;
+    const rawLabel = opts.label?.trim() ?? "";
+    const label = rawLabel ? sanitiseLabel(rawLabel) : null;
+    if (rawLabel && label !== rawLabel.toLowerCase()) {
+      if (!isJson) {
+        console.error(chalk13.yellow(`Note: label sanitised to "${label}"`));
+      }
+    }
+    if (!bindSecret.startsWith("bsec_")) {
+      const msg = "bind_secret should start with 'bsec_'";
+      console.error(isJson ? JSON.stringify({ error: msg }) : chalk13.red(msg));
+      process.exit(3);
+    }
+    const agentDir = resolveAgentDir(label);
+    const keyPath = join3(agentDir, "agent.key");
+    const identityPath = join3(agentDir, "agent.json");
+    if (existsSync8(keyPath)) {
+      const msg = label ? `An agent already exists at ${keyPath}. Pick a different --label or remove the directory first.` : `A default agent already exists at ${keyPath}. Pass --label <name> to claim alongside it without overwriting.`;
+      console.error(isJson ? JSON.stringify({ error: msg }) : chalk13.red(msg));
+      process.exit(3);
+    }
+    const proxyUrl = opts.apiUrl.replace(/\/$/, "");
+    const { publicKey, privateKey } = generateKeyPairSync("rsa", {
+      modulusLength: 2048,
+      publicKeyEncoding: { type: "spki", format: "pem" },
+      privateKeyEncoding: { type: "pkcs8", format: "pem" }
+    });
+    let payload;
+    try {
+      payload = await postBind(proxyUrl, bindSecret, publicKey);
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      console.error(isJson ? JSON.stringify({ error: msg }) : chalk13.red(msg));
+      process.exit(3);
+    }
+    if (!payload.agent_id || !payload.owner_id || !payload.proxy_url) {
+      const msg = "Bind succeeded but response was missing required fields";
+      console.error(isJson ? JSON.stringify({ error: msg }) : chalk13.red(msg));
+      process.exit(3);
+    }
+    const identity = {
+      agent_id: payload.agent_id,
+      owner_id: payload.owner_id,
+      proxy_url: payload.proxy_url,
+      label,
+      bound_at: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    mkdirSync3(agentDir, { recursive: true, mode: 448 });
+    writeFileSync4(keyPath, privateKey, { mode: 384 });
+    writeFileSync4(identityPath, JSON.stringify(identity, null, 2));
+    const mcpServerName = label ? `agentvalet-${label}` : "agentvalet";
+    const mcpEnv = label ? {
+      AGENT_ID: payload.agent_id,
+      OWNER_ID: payload.owner_id,
+      PROXY_URL: payload.proxy_url,
+      AGENT_PRIVATE_KEY_PATH: keyPath
+    } : {
+      // For the default install, mcp-server picks up agent.key from
+      // ~/.agentvalet/ automatically — only PROXY_URL is needed.
+      PROXY_URL: payload.proxy_url
+    };
+    if (isJson) {
+      console.log(JSON.stringify({
+        status: "bound",
+        agent_id: payload.agent_id,
+        owner_id: payload.owner_id,
+        proxy_url: payload.proxy_url,
+        key_path: keyPath,
+        identity_path: identityPath,
+        label,
+        mcp_server_name: mcpServerName
+      }));
+      return;
+    }
+    console.log(chalk13.green(`
+\u2713 Bound as ${payload.agent_id}`));
+    console.log(chalk13.gray(`  owner:    ${payload.owner_id}`));
+    console.log(chalk13.gray(`  proxy:    ${payload.proxy_url}`));
+    console.log(chalk13.gray(`  key:      ${keyPath}`));
+    console.log(chalk13.gray(`  identity: ${identityPath}`));
+    console.log(chalk13.cyan("\nAdd this to your Claude Desktop / Claude Code MCP config:"));
+    const snippet = {
+      mcpServers: {
+        [mcpServerName]: {
+          command: "npx",
+          args: ["-y", "@agentvalet/mcp-server"],
+          env: mcpEnv
+        }
+      }
+    };
+    console.log(JSON.stringify(snippet, null, 2));
+    if (label) {
+      console.log(chalk13.gray(`
+Keep the named entry (${mcpServerName}) so it lives alongside any existing AgentValet agents on this machine.`));
+    } else {
+      console.log(chalk13.gray(`
+Or run 'agentvalet-register inject' to write this into ~/.claude.json automatically.`));
+    }
+  });
+}
+
 // src/index.ts
 var require2 = createRequire2(import.meta.url);
 var { version } = require2("../package.json");
 function collectScope(value, previous) {
   return [...previous, value];
 }
-var program = new Command6();
+var program = new Command7();
 program.name("agentvalet-register").description("Self-register an AI agent with AgentValet").version(version).option("--owner <uuid>", "Owner ID (or set AGENTVALET_OWNER env var)").option("--name <name>", "Agent name").option("--description <desc>", "Agent description").option("--scope <platform:scope>", "Requested scope, repeatable", collectScope, []).option("--api-url <url>", "AgentValet API base URL", "https://api.agentvalet.ai").option("--json", "Machine-readable JSON output").option("--no-wait", "Register only, do not wait for approval").option("--timeout <seconds>", "Approval wait timeout in seconds", "300").option("--project", "Write project-scoped MCP configs (.mcp.json, .cursor/mcp.json) instead of user-scoped (~/.claude.json, ~/.cursor/mcp.json)").action(async (opts) => {
   const isJson = !!opts.json;
   let ownerId = opts.owner ?? process.env.AGENTVALET_OWNER ?? "";
@@ -2508,7 +2649,7 @@ program.name("agentvalet-register").description("Self-register an AI agent with
       console.error(JSON.stringify({ error: "--owner or AGENTVALET_OWNER is required" }));
       process.exit(3);
     }
-    console.error(chalk13.red("Error: --owner or AGENTVALET_OWNER environment variable is required"));
+    console.error(chalk14.red("Error: --owner or AGENTVALET_OWNER environment variable is required"));
     process.exit(3);
   }
   const scopeMap = /* @__PURE__ */ new Map();
@@ -2516,7 +2657,7 @@ program.name("agentvalet-register").description("Self-register an AI agent with
     const colon = s.indexOf(":");
     if (colon === -1) {
       console.error(
-        isJson ? JSON.stringify({ error: `Invalid scope format: ${s} (expected platform:scope)` }) : chalk13.red(`Invalid scope format: ${s} (expected platform:scope)`)
+        isJson ? JSON.stringify({ error: `Invalid scope format: ${s} (expected platform:scope)` }) : chalk14.red(`Invalid scope format: ${s} (expected platform:scope)`)
       );
       process.exit(3);
     }
@@ -2539,11 +2680,11 @@ program.name("agentvalet-register").description("Self-register an AI agent with
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk13.red(`Registration failed: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk14.red(`Registration failed: ${msg}`));
     process.exit(3);
   }
   if (!isJson) {
-    console.log(chalk13.cyan(`
+    console.log(chalk14.cyan(`
 Approve at: https://app.agentvalet.ai/agents
 `));
   }
@@ -2551,7 +2692,7 @@ Approve at: https://app.agentvalet.ai/agents
     if (isJson) {
       console.log(JSON.stringify({ status: "pending", token }));
     } else {
-      console.log(chalk13.yellow("Registration submitted (--no-wait). Token:"), token);
+      console.log(chalk14.yellow("Registration submitted (--no-wait). Token:"), token);
     }
     process.exit(0);
   }
@@ -2562,14 +2703,14 @@ Approve at: https://app.agentvalet.ai/agents
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk13.red(`Wait failed: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk14.red(`Wait failed: ${msg}`));
     process.exit(3);
   }
   if (result.status === "rejected") {
     if (isJson) {
       console.log(JSON.stringify({ status: "rejected" }));
     } else {
-      console.log(chalk13.red("\nRegistration denied by owner."));
+      console.log(chalk14.red("\nRegistration denied by owner."));
     }
     process.exit(1);
   }
@@ -2577,7 +2718,7 @@ Approve at: https://app.agentvalet.ai/agents
     if (isJson) {
       console.log(JSON.stringify({ status: "timeout" }));
     } else {
-      console.log(chalk13.yellow("\nTimed out waiting for approval."));
+      console.log(chalk14.yellow("\nTimed out waiting for approval."));
     }
     process.exit(2);
   }
@@ -2595,7 +2736,7 @@ Approve at: https://app.agentvalet.ai/agents
       }));
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.error(isJson ? JSON.stringify({ error: msg }) : chalk13.red(`Failed to save output: ${msg}`));
+      console.error(isJson ? JSON.stringify({ error: msg }) : chalk14.red(`Failed to save output: ${msg}`));
       process.exit(3);
     }
   } else {
@@ -2605,25 +2746,25 @@ Approve at: https://app.agentvalet.ai/agents
   if (isJson) {
     console.log(JSON.stringify({ status: "approved", agentId, keyPath: keyWritten ? keyPath : null }));
   } else {
-    console.log(chalk13.green(`
+    console.log(chalk14.green(`
 Approved! Agent ID: ${agentId}`));
     if (keyWritten) {
-      console.log(chalk13.gray(`Key:  ${keyPath}`));
+      console.log(chalk14.gray(`Key:  ${keyPath}`));
     } else {
-      console.log(chalk13.yellow(`Key:  not written \u2014 copy it from the dashboard and paste into ${keyPath}`));
+      console.log(chalk14.yellow(`Key:  not written \u2014 copy it from the dashboard and paste into ${keyPath}`));
     }
   }
   if (keyWritten) {
     try {
       if (grantedPlatforms && grantedPlatforms.length > 0) {
         writePermissionsFromEvent(agentId, resolvedOwnerId, grantedPlatforms);
-        if (!isJson) console.log(chalk13.gray(`Permissions: .claude/agentvalet-permissions.md`));
+        if (!isJson) console.log(chalk14.gray(`Permissions: .claude/agentvalet-permissions.md`));
       } else {
         await runRefresh({ envFile: ".env.agentvalet", outputPath: ".claude/agentvalet-permissions.md", ifStale: false, quiet: isJson });
-        if (!isJson) console.log(chalk13.gray(`Permissions: .claude/agentvalet-permissions.md`));
+        if (!isJson) console.log(chalk14.gray(`Permissions: .claude/agentvalet-permissions.md`));
       }
     } catch {
-      if (!isJson) console.log(chalk13.yellow(`Permissions: run 'agentvalet-register refresh' to generate`));
+      if (!isJson) console.log(chalk14.yellow(`Permissions: run 'agentvalet-register refresh' to generate`));
     }
   }
   process.exit(0);
@@ -2638,7 +2779,7 @@ program.command("refresh").description("Refresh approved permissions and update
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(chalk13.red(`Refresh failed: ${msg}`));
+    console.error(chalk14.red(`Refresh failed: ${msg}`));
     process.exit(3);
   }
 });
@@ -2651,6 +2792,7 @@ program.addCommand(revokeCommand());
 program.addCommand(injectCommand());
 program.addCommand(uninstallCommand());
 program.addCommand(installCommand());
+program.addCommand(claimCommand());
 program.parseAsync().catch((err) => {
   console.error(err);
   process.exit(3);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/register",
-  "version": "0.5.6",
+  "version": "0.6.1",
   "description": "Self-register AI agents with AgentValet",
   "type": "module",
   "bin": {