@agentvalet/register 1.1.1 → 1.3.0

package/dist/index.js

@@ -197,7 +197,7 @@ async function saveOutput(opts) {
 
 // src/commands/refresh.ts
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, existsSync as existsSync4, mkdirSync as mkdirSync2, statSync } from "fs";
-import { dirname, resolve as resolve2 } from "path";
+import { dirname, join, resolve as resolve2 } from "path";
 
 // src/lib/jwt.ts
 import { createSign, createPrivateKey } from "crypto";
@@ -232,15 +232,18 @@ Never call platform APIs (Slack, Stripe, Gmail, GitHub, etc.) directly.
 
 ## Making a platform call
 
-Use the \`use_platform\` MCP tool:
+Pick the tool that matches what you are doing:
+
+- \`read_platform\` to read (always GET)
+- \`write_platform\` to create or update (POST, PUT or PATCH)
+- \`delete_platform\` to remove (always DELETE)
 
 \`\`\`
-use_platform({
+write_platform({
   platform: "slack",
   endpoint: "/api/chat.postMessage",
-  method: "POST",
   scope: "slack:write",
-  data: { channel: "#general", text: "Hello" }
+  body: { channel: "#general", text: "Hello" }
 })
 \`\`\`
 
@@ -271,15 +274,16 @@ Routes all platform API calls through AgentValet's credential proxy.
 
 ## Making platform calls
 
-Use the \`use_platform\` tool instead of calling APIs directly:
+Use \`read_platform\`, \`write_platform\` or \`delete_platform\` instead of
+calling APIs directly. Reads use read_platform; creates and updates use
+write_platform; deletions use delete_platform.
 
 \`\`\`
-use_platform({
+write_platform({
   platform: "slack",
   endpoint: "/api/chat.postMessage",
-  method: "POST",
   scope: "slack:write",
-  data: { channel: "#general", text: "Hello" }
+  body: { channel: "#general", text: "Hello" }
 })
 \`\`\`
 
@@ -410,7 +414,8 @@ instructions: |
   ## Rules \u2014 read before every platform call
 
   1. NEVER call platform APIs (Slack, Stripe, Gmail, GitHub, etc.) directly.
-     Always use the \`use_platform\` MCP tool.
+     Always use \`read_platform\` (reads), \`write_platform\` (creates and
+     updates) or \`delete_platform\` (deletions).
 
   2. Call \`list_platforms\` at the start of any session that involves
      platform calls. Do not assume platforms are available.
@@ -418,7 +423,7 @@ instructions: |
   3. Call \`authzen_evaluate\` before any destructive operation
      (delete, send, charge, publish). Do not proceed if decision=false.
 
-  4. If \`use_platform\` returns \`{ status: "pending_approval" }\`,
+  4. If a platform call returns \`{ status: "pending_approval" }\`,
      wait for human approval. Do not retry the call.
 
   5. If AgentValet MCP tools are unavailable, stop and tell the user:
@@ -428,12 +433,11 @@ instructions: |
   ## Making a platform call
 
   \`\`\`
-  use_platform({
+  write_platform({
     platform: "slack",
     endpoint: "/api/chat.postMessage",
-    method: "POST",
     scope: "slack:write",
-    data: { channel: "#general", text: "Hello" }
+    body: { channel: "#general", text: "Hello" }
   })
   \`\`\`
 
@@ -540,7 +544,8 @@ instructions: |
      - If decision=false: block the call, explain why, suggest alternatives
      - If decision=true: allow, but log it
 
-  2. WHEN a droid calls \`use_platform\`, verify:
+  2. WHEN a droid calls \`read_platform\`, \`write_platform\` or
+     \`delete_platform\`, verify:
      - The platform is in the approved list from \`list_platforms\`
      - The scope matches what was approved
      - The call hasn't exceeded rate limits
@@ -589,7 +594,8 @@ function ensureMcpServer() {
 function generatePermissionsFile(agentId, ownerId, permissions) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const platformSections = permissions.length === 0 ? "_No platforms approved yet. Visit https://app.agentvalet.ai to connect platforms._" : permissions.map((p) => {
-    const scopeList = p.scopes.map((s) => `  - \`${s}\``).join("\n");
+    const gated = new Set(p.approvalScopes ?? []);
+    const scopeList = p.scopes.map((s) => `  - \`${s}\`${gated.has(s) ? " \u2014 requires human approval" : ""}`).join("\n");
     const approvalNote = p.requireApproval ? "\n  > Requires human approval before executing.\n" : "";
     return `### ${p.platformName} (\`${p.platformId}\`)
 
@@ -611,19 +617,58 @@ ${platformSections}
 
 ---
 
+## Before any platform call
+
+1. **Check AgentValet first.** For any action on an external platform (Slack,
+   GitHub, Stripe, Gmail, Outlook, Notion, Linear, Jira, HubSpot, Salesforce,
+   or any other SaaS), call \`mcp__agentvalet__list_platforms\` **before** you
+   assume the platform is unavailable or reach for another route.
+2. **If the platform is listed here, you must use it.** Do not call the
+   platform's API directly, and do not use another MCP server's tool for a
+   platform AgentValet covers \u2014 that bypasses the audit log, the approval
+   flow, and the scope limits the owner configured.
+3. **If it is not listed**, say so: "AgentValet doesn't cover <platform> yet."
+   Ask the user whether to request the integration from their AgentValet
+   owner. Do not silently fall back to direct API calls or raw keys found in
+   the environment.
+4. **Destructive scopes** (\`*.delete\`, \`stripe:charge\`, \`mail:send\`) need
+   human approval. Warn the user before invoking them.
+5. **On \`pending_approval\`** \u2014 the action is queued and runs when the owner
+   approves. Tell the user and **do not retry**; a retry queues a duplicate.
+6. **If the AgentValet MCP tools are unavailable**, stop. Tell the user
+   "AgentValet MCP is not connected. Run: npx @agentvalet/register". Do not
+   attempt the platform call without governance.
+
+Read scopes are auto-approved. Write scopes may require approval. Destructive
+scopes always require approval.
+
+---
+
 ## How to call a platform
 
-All platform calls **must** go through the \`mcp__agentvalet__use_platform\` MCP tool.
+All platform calls **must** go through the AgentValet MCP tools. Pick the one
+that matches the operation:
+
+| Operation | Tool | Method |
+|---|---|---|
+| Read | \`mcp__agentvalet__read_platform\` | always GET |
+| Create or update | \`mcp__agentvalet__write_platform\` | POST (default), PUT or PATCH |
+| Delete | \`mcp__agentvalet__delete_platform\` | always DELETE |
 
-**NEVER** write inline JWT signing code, \`node -e\` scripts, or manual HTTP calls. The MCP tool handles all authentication internally.
+**NEVER** write inline JWT signing code, \`node -e\` scripts, or manual HTTP calls. The MCP tools handle all authentication internally.
 
 \`\`\`
-mcp__agentvalet__use_platform({
+mcp__agentvalet__read_platform({
+  platform: "<platformId>",
+  endpoint: "<endpoint>",
+  scope: "<scope>"
+})
+
+mcp__agentvalet__write_platform({
   platform: "<platformId>",
   endpoint: "<endpoint>",
-  method: "POST",
   scope: "<scope>",
-  data: { ... }
+  body: { ... }
 })
 \`\`\`
 
@@ -816,21 +861,54 @@ var CLAUDE_START = "<!-- agentvalet:start -->";
 var CLAUDE_END = "<!-- agentvalet:end -->";
 var HOOK_COMMAND = "npx @agentvalet/register refresh --if-stale --quiet 2>/dev/null || true";
 var HOOK_MARKER = "agentvalet/register refresh";
+function projectRootFor(outputPath) {
+  return dirname(dirname(resolve2(outputPath)));
+}
 function writePermissionsFromEvent(agentId, ownerId, platforms, outputPath = "./.claude/agentvalet-permissions.md") {
   const content = generatePermissionsFile(agentId, ownerId, platforms);
   const resolvedPath = resolve2(outputPath);
+  const projectRoot = projectRootFor(resolvedPath);
   mkdirSync2(dirname(resolvedPath), { recursive: true });
   writeFileSync2(resolvedPath, content, "utf-8");
-  embedInClaudeMd(content);
-  ensureHook();
+  embedInClaudeMd(content, projectRoot);
+  ensureHook(projectRoot);
+}
+async function writeGovernanceInstructions(agentId, ownerId) {
+  const writeRulesOnly = () => {
+    try {
+      writePermissionsFromEvent(agentId, ownerId, []);
+      console.log("  \u2713 CLAUDE.md \u2014 AgentValet governance rules");
+      return true;
+    } catch {
+      return false;
+    }
+  };
+  if (!tryResolveAgent()) {
+    writeRulesOnly();
+    return;
+  }
+  try {
+    await runRefresh({
+      envFile: ".env.agentvalet",
+      outputPath: ".claude/agentvalet-permissions.md",
+      ifStale: false,
+      quiet: true
+    });
+    console.log("  \u2713 CLAUDE.md \u2014 AgentValet governance rules and approved platforms");
+  } catch {
+    if (writeRulesOnly()) {
+      console.log("    Run `npx @agentvalet/register refresh` once approved to fill in platforms");
+    }
+  }
 }
 async function runRefresh(options) {
   const outputPath = resolve2(options.outputPath);
+  const projectRoot = projectRootFor(outputPath);
   if (options.ifStale) {
     try {
       const stat = statSync(outputPath);
       const fileIsFresh = Date.now() - stat.mtimeMs < 36e5;
-      const claudeMdPath = resolve2("CLAUDE.md");
+      const claudeMdPath = join(projectRoot, "CLAUDE.md");
       const claudeMd = existsSync4(claudeMdPath) ? readFileSync3(claudeMdPath, "utf-8") : "";
       const blockStart = claudeMd.indexOf(CLAUDE_START);
       const blockEnd = claudeMd.indexOf(CLAUDE_END);
@@ -868,15 +946,15 @@ async function runRefresh(options) {
   const content = generatePermissionsFile(agentId, ownerId, platforms);
   mkdirSync2(dirname(outputPath), { recursive: true });
   writeFileSync2(outputPath, content, "utf-8");
-  embedInClaudeMd(content);
-  ensureHook();
+  embedInClaudeMd(content, projectRoot);
+  ensureHook(projectRoot);
   const detected = detectFrameworks();
   const refreshed = [];
   if (detected.codex || detected.codexDesktop) {
-    if (embedPermissionsBlock(resolve2("AGENTS.md"), content)) refreshed.push("AGENTS.md");
+    if (embedPermissionsBlock(join(projectRoot, "AGENTS.md"), content)) refreshed.push("AGENTS.md");
   }
   if (detected.openclaw) {
-    if (embedPermissionsBlock(resolve2("SKILL.md"), content)) refreshed.push("SKILL.md");
+    if (embedPermissionsBlock(join(projectRoot, "SKILL.md"), content)) refreshed.push("SKILL.md");
   }
   if (!options.quiet) {
     const extras = refreshed.length > 0 ? ` (also: ${refreshed.join(", ")})` : "";
@@ -908,8 +986,8 @@ ${block}
     return false;
   }
 }
-function embedInClaudeMd(permissionsContent) {
-  const claudeMdPath = resolve2("CLAUDE.md");
+function embedInClaudeMd(permissionsContent, projectRoot) {
+  const claudeMdPath = join(projectRoot, "CLAUDE.md");
   const block = `${CLAUDE_START}
 ${permissionsContent.trimEnd()}
 ${CLAUDE_END}`;
@@ -935,8 +1013,8 @@ ${block}
 `, "utf-8");
   }
 }
-function ensureHook() {
-  const settingsPath = resolve2(".claude/settings.local.json");
+function ensureHook(projectRoot) {
+  const settingsPath = join(projectRoot, ".claude", "settings.local.json");
   let settings = {};
   if (existsSync4(settingsPath)) {
     try {
@@ -956,7 +1034,13 @@ function ensureHook() {
   }
   const perms = settings.permissions ?? {};
   const allow = perms.allow ?? [];
-  const mcpAllows = ["mcp__agentvalet__list_platforms", "mcp__agentvalet__use_platform"];
+  const mcpAllows = [
+    "mcp__agentvalet__list_platforms",
+    "mcp__agentvalet__read_platform",
+    "mcp__agentvalet__write_platform",
+    "mcp__agentvalet__delete_platform",
+    "mcp__agentvalet__use_platform"
+  ];
   const missing = mcpAllows.filter((e) => !allow.includes(e));
   if (missing.length > 0) {
     perms.allow = [...allow, ...missing];
@@ -964,10 +1048,10 @@ function ensureHook() {
   }
   mkdirSync2(dirname(settingsPath), { recursive: true });
   writeFileSync2(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf-8");
-  ensureMcpJson();
+  ensureMcpJson(projectRoot);
 }
-function ensureMcpJson() {
-  const mcpJsonPath = resolve2(".mcp.json");
+function ensureMcpJson(projectRoot) {
+  const mcpJsonPath = join(projectRoot, ".mcp.json");
   let mcpConfig = {};
   if (existsSync4(mcpJsonPath)) {
     try {
@@ -1230,48 +1314,6 @@ async function mergeJsonFile(filePath, key, value) {
   existing.mcpServers = mcpServers;
   await writeFile4(filePath, JSON.stringify(existing, null, 2) + "\n", "utf8");
 }
-function buildClaudeMd(agentId, ownerId, proxyUrl) {
-  return `# AgentValet \u2014 Credential Governance
-
-Agent ID: \`${agentId}\`
-Owner ID: \`${ownerId}\`
-
-All external platform API calls **must** go through the AgentValet proxy.
-Never call platform APIs (Slack, Stripe, Gmail, GitHub, etc.) directly.
-
-## Making a platform call
-
-Use the \`mcp__agentvalet__use_platform\` MCP tool:
-
-\`\`\`
-mcp__agentvalet__use_platform({
-  platform: "slack",
-  endpoint: "/api/chat.postMessage",
-  method: "POST",
-  scope: "slack:write",
-  data: { channel: "#general", text: "Hello" }
-})
-\`\`\`
-
-## Before any platform session
-
-1. Call \`mcp__agentvalet__list_platforms\` to see approved platforms and scopes
-2. Call \`mcp__agentvalet__authzen_evaluate\` before destructive operations
-3. If a call returns \`pending_approval\` \u2014 wait, do not retry
-
-## Rules
-
-- **NEVER** write inline JWT signing code, \`node -e\` scripts, or manual HTTP calls
-- The MCP tool handles authentication automatically
-- \`AGENT_PRIVATE_KEY_PATH\` points to your key \u2014 do not read or log it
-
-## If AgentValet MCP is not connected
-
-Tell the user: "AgentValet MCP is not connected. Run: npx @agentvalet/register"
-
-Dashboard: ${proxyUrl.replace("api.", "app.")}
-`;
-}
 function buildCodexTomlBlock(params) {
   return `
 [mcp_servers.agentvalet]
@@ -1407,17 +1449,6 @@ async function writeIdeConfigs(params) {
       } catch (err) {
         console.warn(`  Warning: could not write .mcp.json: ${err.message}`);
       }
-      const claudeMdPath = path5.join(cwd, "CLAUDE.md");
-      if (!existsSync6(claudeMdPath)) {
-        try {
-          await writeFile4(claudeMdPath, buildClaudeMd(params.agentId, params.ownerId, params.proxyUrl), "utf8");
-          written.push("CLAUDE.md");
-        } catch (err) {
-          console.warn(`  Warning: could not write CLAUDE.md: ${err.message}`);
-        }
-      } else {
-        written.push("CLAUDE.md (already exists \u2014 skipped)");
-      }
     }
     if (detected.cursor || detected.cursorCli) {
       const cursorDir = path5.join(cwd, ".cursor");
@@ -1676,6 +1707,7 @@ async function registerAgentFlow(apiKey, ownerId, scope = "user", presetName) {
         detected
       });
     }
+    await writeGovernanceInstructions(agent.agent_id, ownerId);
     ensureMcpServer();
   } else if (shouldSetup === false) {
     console.log("");
@@ -1839,7 +1871,7 @@ import chalk10 from "chalk";
 import { Command as Command2 } from "commander";
 import chalk9 from "chalk";
 import { existsSync as existsSync7, readFileSync as readFileSync4, writeFileSync as writeFileSync3, rmSync } from "fs";
-import { resolve as resolve3, join } from "path";
+import { resolve as resolve3, join as join2 } from "path";
 import { homedir } from "os";
 var CLAUDE_START2 = "<!-- agentvalet:start -->";
 var CLAUDE_END2 = "<!-- agentvalet:end -->";
@@ -1971,12 +2003,12 @@ function cleanLocally() {
   if (stripMcpJson(resolve3(".cursor/mcp.json"))) stripped.push(".cursor/mcp.json");
   if (stripMcpJson(resolve3(".factory/mcp.json"), { wrapped: false })) stripped.push(".factory/mcp.json");
   const home = homedir();
-  if (stripMcpJson(join(home, ".claude.json"))) stripped.push("~/.claude.json");
-  const claudeDesktopConfig = process.platform === "darwin" ? join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json") : process.platform === "win32" ? join(process.env.APPDATA ?? join(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json") : join(home, ".config", "Claude", "claude_desktop_config.json");
+  if (stripMcpJson(join2(home, ".claude.json"))) stripped.push("~/.claude.json");
+  const claudeDesktopConfig = process.platform === "darwin" ? join2(home, "Library", "Application Support", "Claude", "claude_desktop_config.json") : process.platform === "win32" ? join2(process.env.APPDATA ?? join2(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json") : join2(home, ".config", "Claude", "claude_desktop_config.json");
   if (stripMcpJson(claudeDesktopConfig)) stripped.push("claude_desktop_config.json");
-  if (stripMcpJson(join(home, ".cursor", "mcp.json"))) stripped.push("~/.cursor/mcp.json");
-  if (stripMcpJson(join(home, ".factory", "mcp.json"), { wrapped: false })) stripped.push("~/.factory/mcp.json");
-  if (stripCodexTomlAt(join(home, ".codex", "config.toml"))) stripped.push("~/.codex/config.toml");
+  if (stripMcpJson(join2(home, ".cursor", "mcp.json"))) stripped.push("~/.cursor/mcp.json");
+  if (stripMcpJson(join2(home, ".factory", "mcp.json"), { wrapped: false })) stripped.push("~/.factory/mcp.json");
+  if (stripCodexTomlAt(join2(home, ".codex", "config.toml"))) stripped.push("~/.codex/config.toml");
   if (stripCodexTomlAt(resolve3(".codex/config.toml"))) stripped.push(".codex/config.toml");
   stripClaudeMd();
   stripSettingsJson();
@@ -2202,9 +2234,9 @@ import { dirname as dirname2 } from "path";
 
 // src/lib/claude-config.ts
 import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 import { readFile as readFile3, writeFile as writeFile6, mkdir as mkdir4, access } from "fs/promises";
-var CLAUDE_CONFIG_PATH = join2(homedir2(), ".claude", "config");
+var CLAUDE_CONFIG_PATH = join3(homedir2(), ".claude", "config");
 async function writeKeyToClaudeConfig(agentId, privateKeyPem) {
   let config = {};
   try {
@@ -2215,7 +2247,7 @@ async function writeKeyToClaudeConfig(agentId, privateKeyPem) {
   }
   config.agent_keys = config.agent_keys ?? {};
   config.agent_keys[agentId] = Buffer.from(privateKeyPem).toString("base64");
-  await mkdir4(join2(homedir2(), ".claude"), { recursive: true });
+  await mkdir4(join3(homedir2(), ".claude"), { recursive: true });
   await writeFile6(CLAUDE_CONFIG_PATH, JSON.stringify(config, null, 2), "utf-8");
 }
 
@@ -2460,6 +2492,7 @@ function installCommand() {
             detected
           });
         }
+        await writeGovernanceInstructions(agent_id, owner_id);
         ensureMcpServer();
       }
     }
@@ -2532,12 +2565,12 @@ import { Command as Command6 } from "commander";
 import { generateKeyPairSync as generateKeyPairSync2 } from "crypto";
 import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4, existsSync as existsSync8 } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 import chalk13 from "chalk";
 var DEFAULT_PROXY_URL = "https://api.agentvalet.ai";
 function resolveAgentDir(label) {
-  const root = join3(homedir3(), ".agentvalet");
-  return label ? join3(root, label) : root;
+  const root = join4(homedir3(), ".agentvalet");
+  return label ? join4(root, label) : root;
 }
 function sanitiseLabel(label) {
   return label.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
@@ -2581,8 +2614,8 @@ function claimCommand() {
       process.exit(3);
     }
     const agentDir = resolveAgentDir(label);
-    const keyPath = join3(agentDir, "agent.key");
-    const identityPath = join3(agentDir, "agent.json");
+    const keyPath = join4(agentDir, "agent.key");
+    const identityPath = join4(agentDir, "agent.json");
     if (existsSync8(keyPath)) {
       const msg = label ? `An agent already exists at ${keyPath}. Pick a different --label or remove the directory first.` : `A default agent already exists at ${keyPath}. Pass --label <name> to claim alongside it without overwriting.`;
       console.error(isJson ? JSON.stringify({ error: msg }) : chalk13.red(msg));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/register",
-  "version": "1.1.1",
+  "version": "1.3.0",
   "description": "Self-register AI agents with AgentValet",
   "type": "module",
   "bin": {
@@ -10,6 +10,13 @@
     "dist",
     "README.md"
   ],
+  "scripts": {
+    "build": "tsup src/index.ts --format esm --dts --clean --shims",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "node ../../scripts/no-secrets.mjs && pnpm build && node ../../scripts/no-workspace-protocol.mjs"
+  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@octokit/auth-oauth-device": "^7.0.0",
@@ -22,22 +29,23 @@
     "undici": "^6.0.0"
   },
   "devDependencies": {
+    "@agentvalet/mcp-server": "workspace:^",
     "@types/node": "^20.0.0",
     "@types/prompts": "^2.4.0",
     "tsup": "^8.0.0",
     "tsx": "^4.0.0",
     "typescript": "^5.0.0",
-    "vitest": "^1.5.0",
-    "@agentvalet/mcp-server": "^1.4.1"
+    "vitest": "^1.5.0"
   },
   "engines": {
     "node": ">=18"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/agentvalet/agentvalet.git"
+    "url": "git+https://github.com/AgentValet/AgentValet.git",
+    "directory": "packages/cli"
   },
-  "homepage": "https://agentvalet.ai",
+  "homepage": "https://github.com/AgentValet/AgentValet#readme",
   "bugs": {
     "url": "https://github.com/agentvalet/agentvalet/issues"
   },
@@ -53,11 +61,5 @@
     "valet",
     "agentvalet"
   ],
-  "license": "MIT",
-  "scripts": {
-    "build": "tsup src/index.ts --format esm --dts --clean --shims",
-    "dev": "tsx src/index.ts",
-    "test": "vitest run",
-    "typecheck": "tsc --noEmit"
-  }
-}
+  "license": "MIT"
+}