@agentvalet/register 1.6.0 → 1.7.1

package/dist/index.js

@@ -265,12 +265,13 @@ import { dirname as dirname2, join as join2, resolve as resolve2 } from "path";
 
 // src/lib/jwt.ts
 import { createSign, createPrivateKey } from "crypto";
+var AGENT_JWT_LIFETIME_SECONDS = 240;
 function signJwt(agentId, ownerId, privateKeyPem) {
   const now = Math.floor(Date.now() / 1e3);
   const b64 = (s) => Buffer.from(s).toString("base64url");
   const header = b64(JSON.stringify({ alg: "RS256", typ: "JWT" }));
   const payload = b64(
-    JSON.stringify({ agent_id: agentId, owner_id: ownerId, iat: now, exp: now + 300 })
+    JSON.stringify({ agent_id: agentId, owner_id: ownerId, iat: now, exp: now + AGENT_JWT_LIFETIME_SECONDS })
   );
   const signingInput = `${header}.${payload}`;
   const sign = createSign("RSA-SHA256");
@@ -1263,6 +1264,7 @@ async function browserLogin() {
 }
 
 // src/api/agentvalet.ts
+import { generateKeyPairSync } from "crypto";
 var API_URL2 = process.env.AGENTVALET_API_URL ?? "https://api.agentvalet.ai";
 var FUNCTIONS_URL2 = `${API_URL2}/functions/v1`;
 var baseHeaders = {
@@ -1295,6 +1297,20 @@ async function registerAgent2(params, apiKey) {
     clearTimeout(timeout);
   }
 }
+async function registerAgentWithLocalKey(params, apiKey) {
+  const { publicKey, privateKey } = generateKeyPairSync("rsa", {
+    modulusLength: 2048,
+    publicKeyEncoding: { type: "spki", format: "pem" },
+    privateKeyEncoding: { type: "pkcs8", format: "pem" }
+  });
+  const agent = await registerAgent2({ ...params, public_key_pem: publicKey }, apiKey);
+  if (agent.private_key_pem || agent.public_key_pem?.trim() !== publicKey.trim()) {
+    throw new Error(
+      `The server did not accept this machine's public key, so agent ${agent.agent_id} cannot use it. Delete that agent in the dashboard and try again later, or report this to AgentValet support.`
+    );
+  }
+  return { agent, privateKeyPem: privateKey };
+}
 
 // src/config/local.ts
 import { mkdir as mkdir2, writeFile as writeFile2, appendFile, readFile } from "fs/promises";
@@ -1696,13 +1712,14 @@ async function registerAgentFlow(apiKey, ownerId, scope = "user", presetName) {
   const agentType = resolveAgentType(detectedAtRegister);
   const spinner = ora("  Registering agent...").start();
   let agent;
+  let privateKeyPem;
   try {
-    agent = await registerAgent2({
+    ({ agent, privateKeyPem } = await registerAgentWithLocalKey({
       owner_id: ownerId,
       name: agentName.trim(),
       source: "cli",
       agent_type: agentType
-    }, apiKey);
+    }, apiKey));
     spinner.succeed(`  Agent registered: ${chalk7.bold(agent.agent_id)}`);
   } catch (err) {
     spinner.fail(`  Registration failed: ${err.message}`);
@@ -1715,7 +1732,7 @@ async function registerAgentFlow(apiKey, ownerId, scope = "user", presetName) {
       agentId: agent.agent_id,
       agentName: agent.agent_name,
       proxyUrl,
-      privateKeyPem: agent.private_key_pem
+      privateKeyPem
     });
     saveConfig({ lastAgentId: agent.agent_id, lastKeyPath: keyPath });
   } catch (err) {
@@ -1811,7 +1828,7 @@ async function registerAgentFlow(apiKey, ownerId, scope = "user", presetName) {
   console.log(
     `  Dashboard: ${chalk7.cyan.underline("https://app.agentvalet.ai")}`
   );
-  console.log(chalk7.dim("  Approve this agent in your dashboard to activate it."));
+  console.log(chalk7.dim("  The agent is active but has no access yet. Grant it platforms on its page in the dashboard."));
   console.log("");
   if (shouldSetup) {
     if (scope === "user") {
@@ -2447,13 +2464,13 @@ function injectCommand() {
 // src/commands/install.ts
 import { writeFile as writeFile9, mkdir as mkdir6 } from "fs/promises";
 import path7 from "path";
-import { generateKeyPairSync } from "crypto";
+import { generateKeyPairSync as generateKeyPairSync2 } from "crypto";
 import { Command as Command5 } from "commander";
 import chalk12 from "chalk";
 import prompts4 from "prompts";
 var API_URL3 = process.env.AGENTVALET_API_URL ?? "https://api.agentvalet.ai";
 async function bindInstallToken(proxyUrl, bootstrapToken) {
-  const { publicKey, privateKey } = generateKeyPairSync("rsa", {
+  const { publicKey, privateKey } = generateKeyPairSync2("rsa", {
     modulusLength: 2048,
     publicKeyEncoding: { type: "spki", format: "pem" },
     privateKeyEncoding: { type: "pkcs8", format: "pem" }
@@ -2648,7 +2665,7 @@ function installCommand() {
 
 // src/commands/claim.ts
 import { Command as Command6 } from "commander";
-import { generateKeyPairSync as generateKeyPairSync2 } from "crypto";
+import { generateKeyPairSync as generateKeyPairSync3 } from "crypto";
 import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4, existsSync as existsSync9 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join5 } from "path";
@@ -2708,7 +2725,7 @@ function claimCommand() {
       process.exit(3);
     }
     const proxyUrl = opts.apiUrl.replace(/\/$/, "");
-    const { publicKey, privateKey } = generateKeyPairSync2("rsa", {
+    const { publicKey, privateKey } = generateKeyPairSync3("rsa", {
       modulusLength: 2048,
       publicKeyEncoding: { type: "spki", format: "pem" },
       privateKeyEncoding: { type: "pkcs8", format: "pem" }
@@ -2818,9 +2835,10 @@ function respondToCredentialRequest(action, request2, creds, privateKeyPem) {
 password=${jwt}
 `;
 }
+var GIT_HELPER_COMMAND = "npx --yes @agentvalet/register git-credential";
 function gitConfigLine(apiUrl) {
   const origin = new URL(apiUrl).origin;
-  return [`credential.${origin}.helper`, "!agentvalet git-credential"];
+  return [`credential.${origin}.helper`, `!${GIT_HELPER_COMMAND}`];
 }
 async function readStdin() {
   const chunks = [];
@@ -2828,7 +2846,7 @@ async function readStdin() {
   return Buffer.concat(chunks).toString("utf8");
 }
 function gitCredentialCommand() {
-  return new Command7("git-credential").description("git credential helper: answers the AgentValet proxy with this agent's JWT (used via `agentvalet git-setup`)").argument("<action>", "get | store | erase (supplied by git)").action(async (action) => {
+  return new Command7("git-credential").description("git credential helper: answers the AgentValet proxy with this agent's JWT (used via `npx @agentvalet/register git-setup`)").argument("<action>", "get | store | erase (supplied by git)").action(async (action) => {
     const creds = resolveAgent();
     const request2 = parseCredentialInput(await readStdin());
     if (action !== "get") return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/register",
-  "version": "1.6.0",
+  "version": "1.7.1",
   "description": "Self-register AI agents with AgentValet",
   "type": "module",
   "bin": {
@@ -10,6 +10,13 @@
     "dist",
     "README.md"
   ],
+  "scripts": {
+    "build": "tsup src/index.ts --format esm --dts --clean --shims",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "node ../../scripts/no-secrets.mjs && pnpm build && node ../../scripts/no-workspace-protocol.mjs"
+  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@octokit/auth-oauth-device": "^7.0.0",
@@ -22,13 +29,13 @@
     "undici": "^6.0.0"
   },
   "devDependencies": {
+    "@agentvalet/mcp-server": "workspace:^",
     "@types/node": "^20.0.0",
     "@types/prompts": "^2.4.0",
     "tsup": "^8.0.0",
     "tsx": "^4.0.0",
     "typescript": "^5.0.0",
-    "vitest": "^1.5.0",
-    "@agentvalet/mcp-server": "^1.14.0"
+    "vitest": "^1.5.0"
   },
   "engines": {
     "node": ">=18"
@@ -54,11 +61,5 @@
     "valet",
     "agentvalet"
   ],
-  "license": "MIT",
-  "scripts": {
-    "build": "tsup src/index.ts --format esm --dts --clean --shims",
-    "dev": "tsx src/index.ts",
-    "test": "vitest run",
-    "typecheck": "tsc --noEmit"
-  }
-}
+  "license": "MIT"
+}