@agentvalet/register 1.5.0 → 1.7.0

package/dist/index.js

@@ -10,8 +10,8 @@ import {
 
 // src/index.ts
 import { createRequire as createRequire2 } from "module";
-import { Command as Command7 } from "commander";
-import chalk14 from "chalk";
+import { Command as Command8 } from "commander";
+import chalk15 from "chalk";
 
 // src/wizard.ts
 import prompts from "prompts";
@@ -765,6 +765,14 @@ function parseEnvFile(content) {
   }
   return result;
 }
+function resolveAgent(envFile = ".env.agentvalet") {
+  const creds = tryResolveAgent(envFile);
+  if (!creds) {
+    process.stderr.write(NO_AGENT_MSG + "\n");
+    process.exit(1);
+  }
+  return creds;
+}
 function tryResolveAgent(envFile = ".env.agentvalet") {
   let agentId;
   let ownerId;
@@ -1255,6 +1263,7 @@ async function browserLogin() {
 }
 
 // src/api/agentvalet.ts
+import { generateKeyPairSync } from "crypto";
 var API_URL2 = process.env.AGENTVALET_API_URL ?? "https://api.agentvalet.ai";
 var FUNCTIONS_URL2 = `${API_URL2}/functions/v1`;
 var baseHeaders = {
@@ -1287,6 +1296,20 @@ async function registerAgent2(params, apiKey) {
     clearTimeout(timeout);
   }
 }
+async function registerAgentWithLocalKey(params, apiKey) {
+  const { publicKey, privateKey } = generateKeyPairSync("rsa", {
+    modulusLength: 2048,
+    publicKeyEncoding: { type: "spki", format: "pem" },
+    privateKeyEncoding: { type: "pkcs8", format: "pem" }
+  });
+  const agent = await registerAgent2({ ...params, public_key_pem: publicKey }, apiKey);
+  if (agent.private_key_pem || agent.public_key_pem?.trim() !== publicKey.trim()) {
+    throw new Error(
+      `The server did not accept this machine's public key, so agent ${agent.agent_id} cannot use it. Delete that agent in the dashboard and try again later, or report this to AgentValet support.`
+    );
+  }
+  return { agent, privateKeyPem: privateKey };
+}
 
 // src/config/local.ts
 import { mkdir as mkdir2, writeFile as writeFile2, appendFile, readFile } from "fs/promises";
@@ -1688,13 +1711,14 @@ async function registerAgentFlow(apiKey, ownerId, scope = "user", presetName) {
   const agentType = resolveAgentType(detectedAtRegister);
   const spinner = ora("  Registering agent...").start();
   let agent;
+  let privateKeyPem;
   try {
-    agent = await registerAgent2({
+    ({ agent, privateKeyPem } = await registerAgentWithLocalKey({
       owner_id: ownerId,
       name: agentName.trim(),
       source: "cli",
       agent_type: agentType
-    }, apiKey);
+    }, apiKey));
     spinner.succeed(`  Agent registered: ${chalk7.bold(agent.agent_id)}`);
   } catch (err) {
     spinner.fail(`  Registration failed: ${err.message}`);
@@ -1707,7 +1731,7 @@ async function registerAgentFlow(apiKey, ownerId, scope = "user", presetName) {
       agentId: agent.agent_id,
       agentName: agent.agent_name,
       proxyUrl,
-      privateKeyPem: agent.private_key_pem
+      privateKeyPem
     });
     saveConfig({ lastAgentId: agent.agent_id, lastKeyPath: keyPath });
   } catch (err) {
@@ -1803,7 +1827,7 @@ async function registerAgentFlow(apiKey, ownerId, scope = "user", presetName) {
   console.log(
     `  Dashboard: ${chalk7.cyan.underline("https://app.agentvalet.ai")}`
   );
-  console.log(chalk7.dim("  Approve this agent in your dashboard to activate it."));
+  console.log(chalk7.dim("  The agent is active but has no access yet. Grant it platforms on its page in the dashboard."));
   console.log("");
   if (shouldSetup) {
     if (scope === "user") {
@@ -2439,13 +2463,13 @@ function injectCommand() {
 // src/commands/install.ts
 import { writeFile as writeFile9, mkdir as mkdir6 } from "fs/promises";
 import path7 from "path";
-import { generateKeyPairSync } from "crypto";
+import { generateKeyPairSync as generateKeyPairSync2 } from "crypto";
 import { Command as Command5 } from "commander";
 import chalk12 from "chalk";
 import prompts4 from "prompts";
 var API_URL3 = process.env.AGENTVALET_API_URL ?? "https://api.agentvalet.ai";
 async function bindInstallToken(proxyUrl, bootstrapToken) {
-  const { publicKey, privateKey } = generateKeyPairSync("rsa", {
+  const { publicKey, privateKey } = generateKeyPairSync2("rsa", {
     modulusLength: 2048,
     publicKeyEncoding: { type: "spki", format: "pem" },
     privateKeyEncoding: { type: "pkcs8", format: "pem" }
@@ -2640,7 +2664,7 @@ function installCommand() {
 
 // src/commands/claim.ts
 import { Command as Command6 } from "commander";
-import { generateKeyPairSync as generateKeyPairSync2 } from "crypto";
+import { generateKeyPairSync as generateKeyPairSync3 } from "crypto";
 import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4, existsSync as existsSync9 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join5 } from "path";
@@ -2700,7 +2724,7 @@ function claimCommand() {
       process.exit(3);
     }
     const proxyUrl = opts.apiUrl.replace(/\/$/, "");
-    const { publicKey, privateKey } = generateKeyPairSync2("rsa", {
+    const { publicKey, privateKey } = generateKeyPairSync3("rsa", {
       modulusLength: 2048,
       publicKeyEncoding: { type: "spki", format: "pem" },
       privateKeyEncoding: { type: "pkcs8", format: "pem" }
@@ -2779,13 +2803,85 @@ Or run 'agentvalet-register inject' to write this into ~/.claude.json automatica
   });
 }
 
+// src/commands/git-credential.ts
+import { Command as Command7 } from "commander";
+import { readFileSync as readFileSync6 } from "fs";
+import { execFileSync } from "child_process";
+import chalk14 from "chalk";
+var GIT_USERNAME = "agentvalet";
+function parseCredentialInput(input) {
+  const out = {};
+  for (const raw of input.split("\n")) {
+    const line = raw.replace(/\r$/, "");
+    if (line === "") break;
+    const eq = line.indexOf("=");
+    if (eq <= 0) continue;
+    out[line.slice(0, eq)] = line.slice(eq + 1);
+  }
+  return out;
+}
+function respondToCredentialRequest(action, request2, creds, privateKeyPem) {
+  if (action !== "get") return "";
+  let proxyHost;
+  try {
+    proxyHost = new URL(creds.apiUrl).host.toLowerCase();
+  } catch {
+    return "";
+  }
+  if ((request2.host ?? "").toLowerCase() !== proxyHost) return "";
+  const jwt = signJwt(creds.agentId, creds.ownerId, privateKeyPem);
+  return `username=${GIT_USERNAME}
+password=${jwt}
+`;
+}
+var GIT_HELPER_COMMAND = "npx --yes @agentvalet/register git-credential";
+function gitConfigLine(apiUrl) {
+  const origin = new URL(apiUrl).origin;
+  return [`credential.${origin}.helper`, `!${GIT_HELPER_COMMAND}`];
+}
+async function readStdin() {
+  const chunks = [];
+  for await (const c of process.stdin) chunks.push(Buffer.isBuffer(c) ? c : Buffer.from(c));
+  return Buffer.concat(chunks).toString("utf8");
+}
+function gitCredentialCommand() {
+  return new Command7("git-credential").description("git credential helper: answers the AgentValet proxy with this agent's JWT (used via `npx @agentvalet/register git-setup`)").argument("<action>", "get | store | erase (supplied by git)").action(async (action) => {
+    const creds = resolveAgent();
+    const request2 = parseCredentialInput(await readStdin());
+    if (action !== "get") return;
+    const pem = readFileSync6(creds.keyPath, "utf8");
+    const reply = respondToCredentialRequest(action, request2, creds, pem);
+    if (reply) process.stdout.write(reply);
+  });
+}
+function gitSetupCommand() {
+  return new Command7("git-setup").description("Configure git to authenticate to the AgentValet proxy with this agent's key").option("--local", "Write to the current repository's .git/config instead of the global config").option("--print", "Print the git config command instead of running it").action((opts) => {
+    const creds = resolveAgent();
+    const [key, value] = gitConfigLine(creds.apiUrl);
+    const args = ["config", opts.local ? "--local" : "--global", key, value];
+    if (opts.print) {
+      process.stdout.write(`git ${args.map((a) => /\s|!/.test(a) ? JSON.stringify(a) : a).join(" ")}
+`);
+      return;
+    }
+    execFileSync("git", args, { stdio: "inherit" });
+    const origin = new URL(creds.apiUrl).origin;
+    process.stderr.write(
+      chalk14.green("\n  \u2713 git will authenticate to ") + origin + chalk14.green(" as agent ") + creds.agentId + "\n" + chalk14.dim(`
+  Use remotes of the form ${origin}/git/<owner>/<repo>.git
+
+`)
+    );
+  });
+}
+
 // src/index.ts
 var require2 = createRequire2(import.meta.url);
 var { version } = require2("../package.json");
 function collectScope(value, previous) {
   return [...previous, value];
 }
-var program = new Command7();
+var program = new Command8();
 program.name("agentvalet-register").description("Self-register an AI agent with AgentValet").version(version).option("--owner <uuid>", "Owner ID (or set AGENTVALET_OWNER env var)").option("--name <name>", "Agent name").option("--description <desc>", "Agent description").option("--scope <platform:scope>", "Requested scope, repeatable", collectScope, []).option("--api-url <url>", "AgentValet API base URL", "https://api.agentvalet.ai").option("--json", "Machine-readable JSON output").option("--no-wait", "Register only, do not wait for approval").option("--timeout <seconds>", "Approval wait timeout in seconds", "300").option("--project", "Write project-scoped MCP configs (.mcp.json, .cursor/mcp.json) instead of user-scoped (~/.claude.json, ~/.cursor/mcp.json)").option("--force", "Replace an existing agent's key (a timestamped backup is written first)").action(async (opts) => {
   const isJson = !!opts.json;
   let ownerId = opts.owner ?? process.env.AGENTVALET_OWNER ?? "";
@@ -2819,7 +2915,7 @@ program.name("agentvalet-register").description("Self-register an AI agent with
       console.error(JSON.stringify({ error: "--owner or AGENTVALET_OWNER is required" }));
       process.exit(3);
     }
-    console.error(chalk14.red("Error: --owner or AGENTVALET_OWNER environment variable is required"));
+    console.error(chalk15.red("Error: --owner or AGENTVALET_OWNER environment variable is required"));
     process.exit(3);
   }
   const scopeMap = /* @__PURE__ */ new Map();
@@ -2827,7 +2923,7 @@ program.name("agentvalet-register").description("Self-register an AI agent with
     const colon = s.indexOf(":");
     if (colon === -1) {
       console.error(
-        isJson ? JSON.stringify({ error: `Invalid scope format: ${s} (expected platform:scope)` }) : chalk14.red(`Invalid scope format: ${s} (expected platform:scope)`)
+        isJson ? JSON.stringify({ error: `Invalid scope format: ${s} (expected platform:scope)` }) : chalk15.red(`Invalid scope format: ${s} (expected platform:scope)`)
       );
       process.exit(3);
     }
@@ -2850,11 +2946,11 @@ program.name("agentvalet-register").description("Self-register an AI agent with
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk14.red(`Registration failed: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk15.red(`Registration failed: ${msg}`));
     process.exit(3);
   }
   if (!isJson) {
-    console.log(chalk14.cyan(`
+    console.log(chalk15.cyan(`
 Approve at: https://app.agentvalet.ai/agents
 `));
   }
@@ -2862,7 +2958,7 @@ Approve at: https://app.agentvalet.ai/agents
     if (isJson) {
       console.log(JSON.stringify({ status: "pending", token }));
     } else {
-      console.log(chalk14.yellow("Registration submitted (--no-wait). Token:"), token);
+      console.log(chalk15.yellow("Registration submitted (--no-wait). Token:"), token);
     }
     process.exit(0);
   }
@@ -2873,14 +2969,14 @@ Approve at: https://app.agentvalet.ai/agents
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(isJson ? JSON.stringify({ error: msg }) : chalk14.red(`Wait failed: ${msg}`));
+    console.error(isJson ? JSON.stringify({ error: msg }) : chalk15.red(`Wait failed: ${msg}`));
     process.exit(3);
   }
   if (result.status === "rejected") {
     if (isJson) {
       console.log(JSON.stringify({ status: "rejected" }));
     } else {
-      console.log(chalk14.red("\nRegistration denied by owner."));
+      console.log(chalk15.red("\nRegistration denied by owner."));
     }
     process.exit(1);
   }
@@ -2888,7 +2984,7 @@ Approve at: https://app.agentvalet.ai/agents
     if (isJson) {
       console.log(JSON.stringify({ status: "timeout" }));
     } else {
-      console.log(chalk14.yellow("\nTimed out waiting for approval."));
+      console.log(chalk15.yellow("\nTimed out waiting for approval."));
     }
     process.exit(2);
   }
@@ -2908,10 +3004,10 @@ Approve at: https://app.agentvalet.ai/agents
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       if (err instanceof KeyClobberError) {
-        console.error(isJson ? JSON.stringify({ error: msg, existing_agent_id: err.existingAgentId }) : chalk14.red(msg));
+        console.error(isJson ? JSON.stringify({ error: msg, existing_agent_id: err.existingAgentId }) : chalk15.red(msg));
         process.exit(3);
       }
-      console.error(isJson ? JSON.stringify({ error: msg }) : chalk14.red(`Failed to save output: ${msg}`));
+      console.error(isJson ? JSON.stringify({ error: msg }) : chalk15.red(`Failed to save output: ${msg}`));
       process.exit(3);
     }
   } else {
@@ -2921,25 +3017,25 @@ Approve at: https://app.agentvalet.ai/agents
   if (isJson) {
     console.log(JSON.stringify({ status: "approved", agentId, keyPath: keyWritten ? keyPath : null }));
   } else {
-    console.log(chalk14.green(`
+    console.log(chalk15.green(`
 Approved! Agent ID: ${agentId}`));
     if (keyWritten) {
-      console.log(chalk14.gray(`Key:  ${keyPath}`));
+      console.log(chalk15.gray(`Key:  ${keyPath}`));
     } else {
-      console.log(chalk14.yellow(`Key:  not written \u2014 copy it from the dashboard and paste into ${keyPath}`));
+      console.log(chalk15.yellow(`Key:  not written \u2014 copy it from the dashboard and paste into ${keyPath}`));
     }
   }
   if (keyWritten) {
     try {
       if (grantedPlatforms && grantedPlatforms.length > 0) {
         writePermissionsFromEvent(agentId, resolvedOwnerId, grantedPlatforms);
-        if (!isJson) console.log(chalk14.gray(`Permissions: .claude/agentvalet-permissions.md`));
+        if (!isJson) console.log(chalk15.gray(`Permissions: .claude/agentvalet-permissions.md`));
       } else {
         await runRefresh({ envFile: ".env.agentvalet", outputPath: ".claude/agentvalet-permissions.md", ifStale: false, quiet: isJson });
-        if (!isJson) console.log(chalk14.gray(`Permissions: .claude/agentvalet-permissions.md`));
+        if (!isJson) console.log(chalk15.gray(`Permissions: .claude/agentvalet-permissions.md`));
       }
     } catch {
-      if (!isJson) console.log(chalk14.yellow(`Permissions: run 'agentvalet-register refresh' to generate`));
+      if (!isJson) console.log(chalk15.yellow(`Permissions: run 'agentvalet-register refresh' to generate`));
     }
   }
   process.exit(0);
@@ -2954,7 +3050,7 @@ program.command("refresh").description("Refresh approved permissions and update
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(chalk14.red(`Refresh failed: ${msg}`));
+    console.error(chalk15.red(`Refresh failed: ${msg}`));
     process.exit(3);
   }
 });
@@ -2964,6 +3060,8 @@ program.command("mcp-server").description("Start the AgentValet MCP server (stdi
 });
 program.addCommand(listCommand());
 program.addCommand(revokeCommand());
+program.addCommand(gitCredentialCommand());
+program.addCommand(gitSetupCommand());
 program.addCommand(injectCommand());
 program.addCommand(uninstallCommand());
 program.addCommand(installCommand());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/register",
-  "version": "1.5.0",
+  "version": "1.7.0",
   "description": "Self-register AI agents with AgentValet",
   "type": "module",
   "bin": {