@ashulab/agent-forge 0.2.0 → 0.3.0

package/README.md

@@ -87,7 +87,7 @@ By default the installation token carries the full installation scope. Narrow it
 
 Omitting the `permissions` key entirely is the safe default — the token then carries whatever the App grants. `repositories` works the same way: list it and the token can only touch those repos.
 
-On launch, `agent-forge` prints the scope GitHub actually granted (`token` row in the summary); `agent-forge token --agent <name>` prints it to stderr. If a call fails with `403 Resource not accessible by integration`, check that row first.
+On launch, `agent-forge` prints the scope GitHub actually granted (`scope` row in the summary, alongside the `account` the token is for); `agent-forge token --agent <name>` prints it to stderr. If a call fails with `403 Resource not accessible by integration`, check that row first.
 
 ## Add an agent
 
@@ -124,6 +124,7 @@ Other commands:
 
 ```bash
 agent-forge --list
+agent-forge --version
 agent-forge --help
 ```
 

package/dist/launcher.cjs

@@ -4017,7 +4017,7 @@ var require_jsonwebtoken = __commonJS({
 // src/launcher.js
 var import_node_child_process3 = require("node:child_process");
 var import_node_path4 = require("node:path");
-var import_node_util3 = require("node:util");
+var import_node_util4 = require("node:util");
 
 // node_modules/.pnpm/@clack+core@1.4.3/node_modules/@clack/core/dist/index.mjs
 var import_node_util = require("node:util");
@@ -5409,19 +5409,21 @@ function currentRepoSlug() {
 async function installationForRepo(slug, jwtToken) {
   try {
     const data = await githubApi(`/repos/${slug.owner}/${slug.repo}/installation`, { jwtToken });
-    return String(data.id);
+    return { id: String(data.id), account: data.account?.login || data.account?.slug || null };
   } catch {
     return null;
   }
 }
-async function resolveInstallationId(agent, jwtToken) {
-  if (agent.installationId) return String(agent.installationId);
+async function resolveInstallation(agent, jwtToken) {
+  if (agent.installationId) return { id: String(agent.installationId), account: null };
   const slug = currentRepoSlug();
   if (slug) {
-    const id = await installationForRepo(slug, jwtToken);
-    if (id) return id;
+    const hit = await installationForRepo(slug, jwtToken);
+    if (hit) return hit;
   }
-  return pickInstallation(await listInstallations(jwtToken), agent);
+  const installations = await listInstallations(jwtToken);
+  const id = pickInstallation(installations, agent);
+  return { id, account: installations.find((item) => item.id === id)?.account ?? null };
 }
 function buildTokenScope(agent) {
   const scope = {};
@@ -5432,13 +5434,15 @@ function buildTokenScope(agent) {
 async function generateGithubAppToken(agent) {
   const privateKey = readPrivateKey(agent.privateKeyPath, agent.name || agent.appId);
   const jwtToken = signAppJwt(agent.appId, privateKey);
-  const installationId = await resolveInstallationId(agent, jwtToken);
+  const { id: installationId, account } = await resolveInstallation(agent, jwtToken);
   const data = await githubApi(`/app/installations/${installationId}/access_tokens`, {
     jwtToken,
     body: buildTokenScope(agent)
   });
   return {
     token: data.token,
+    account,
+    expiresAt: data.expires_at || null,
     // What GitHub actually granted, after both the App's config and our scoping.
     permissions: data.permissions || {},
     repositorySelection: data.repository_selection || "all"
@@ -5515,10 +5519,97 @@ function syncIdentityFile(providerName, agent, cwd = process.cwd()) {
   return file;
 }
 
+// src/format.js
+function formatScope(permissions, full = false) {
+  const entries = Object.entries(permissions);
+  if (entries.length === 0) return "full installation scope";
+  if (full) return entries.map(([name, level]) => `${name}:${level}`).join(" ");
+  const writes = entries.filter(([, level]) => level !== "read").map(([name]) => name);
+  if (writes.length === 0) return `read-only (${entries.length})`;
+  const reads = entries.length - writes.length;
+  return `write: ${writes.join(", ")}${reads ? `  \xB7  +${reads} read` : ""}`;
+}
+function formatExpiry(iso) {
+  const ms = new Date(iso).getTime() - Date.now();
+  if (!Number.isFinite(ms)) return String(iso);
+  const minutes = Math.round(ms / 6e4);
+  return minutes > 0 ? `~${minutes}m` : "expired";
+}
+
 // src/cli.js
+var import_node_util3 = require("node:util");
+
+// package.json
+var package_default = {
+  name: "@ashulab/agent-forge",
+  version: "0.3.0",
+  description: "Give claude/codex/antigravity their own GitHub identity: a bot account, a scoped token minted per run, git attribution to match",
+  license: "MIT",
+  author: "Diego Ghersi <ghersidl@gmail.com>",
+  type: "module",
+  bin: {
+    "agent-forge": "dist/launcher.cjs"
+  },
+  main: "dist/launcher.cjs",
+  files: [
+    "dist",
+    "schema",
+    "LICENSE",
+    "README.md"
+  ],
+  engines: {
+    node: ">=24"
+  },
+  packageManager: "pnpm@11.20.0",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/AshuLab/agent-forge.git"
+  },
+  bugs: {
+    url: "https://github.com/AshuLab/agent-forge/issues"
+  },
+  homepage: "https://github.com/AshuLab/agent-forge#readme",
+  keywords: [
+    "github-app",
+    "cli",
+    "coding-agent",
+    "claude",
+    "codex",
+    "antigravity",
+    "installation-token",
+    "git-identity"
+  ],
+  publishConfig: {
+    access: "public"
+  },
+  scripts: {
+    dev: "node src/launcher.js",
+    test: "node --test",
+    start: "node dist/launcher.cjs",
+    build: "esbuild src/launcher.js --bundle --platform=node --format=cjs --target=node24 --outfile=dist/launcher.cjs --banner:js='#!/usr/bin/env node' && chmod +x dist/launcher.cjs",
+    prepublishOnly: "pnpm build && pnpm test"
+  },
+  dependencies: {
+    "@clack/prompts": "^1.7.0",
+    jsonwebtoken: "^9.0.3"
+  },
+  devDependencies: {
+    esbuild: "^0.28.2"
+  }
+};
+
+// src/cli.js
+var LOGO = `
+\u2584\u2584  \u2584\u2584\u2584 \u2584\u2584\u2584 \u2584\u2584  \u2584\u2584\u2584      \u2584\u2584\u2584 \u2584\u2584  \u2584\u2584  \u2584\u2584\u2584 \u2584\u2584\u2584
+\u2588\u2584\u2588 \u2588 \u2584 \u2588\u2584  \u2588 \u2588  \u2588       \u2588\u2584  \u2588 \u2588 \u2588\u2584\u2580 \u2588 \u2584 \u2588\u2584
+\u2588 \u2588 \u2580\u2584\u2588 \u2588\u2584\u2584 \u2588 \u2588  \u2588       \u2588   \u2580\u2584\u2580 \u2588 \u2588 \u2580\u2584\u2588 \u2588\u2584\u2584
+`;
+function printVersion() {
+  console.log(package_default.version);
+}
 function printHelp() {
   console.log(`
-Agent Forge
+Agent Forge v${package_default.version}
 
 Usage:
   agent-forge
@@ -5526,6 +5617,7 @@ Usage:
   agent-forge add                    guided setup for a new agent
   agent-forge token --agent <name>   print a fresh GitHub App token (for refresh)
   agent-forge --list
+  agent-forge --version
   agent-forge --help
 
 Requirements:
@@ -5539,10 +5631,13 @@ Config resolution (first match wins):
   - ./agents.json                          (only if it already exists)
 `);
 }
+function bail(message = "Cancelled") {
+  cancel(`\u2716  ${message}`);
+  process.exit(0);
+}
 function keep(value) {
   if (isCancel(value)) {
-    cancel("Cancelled.");
-    process.exit(0);
+    bail();
   }
   return value;
 }
@@ -5614,7 +5709,7 @@ async function interactiveSelection(defaults = {}) {
   if (agents.length === 0 && !defaults.agent) {
     note("No agents configured yet. Each agent is a GitHub App identity the launcher runs under.", "First run");
     if (!keep(await confirm({ message: "Add one now?" }))) {
-      cancel(`Run "agent-forge add" when you're ready.`);
+      outro(`Run ${(0, import_node_util3.styleText)("cyan", "agent-forge add")} when you're ready.`);
       process.exit(0);
     }
     await addAgentWizard({ embedded: true });
@@ -5644,9 +5739,9 @@ async function interactiveSelection(defaults = {}) {
       })
     );
   }
-  if (!keep(await confirm({ message: `Launch ${agentChoice} with ${providerChoice}?` }))) {
-    cancel("Cancelled.");
-    process.exit(0);
+  const launchPrompt = `Launch ${(0, import_node_util3.styleText)("green", agentChoice)} with ${(0, import_node_util3.styleText)(["cyan", "bold"], providerChoice)}?`;
+  if (!keep(await confirm({ message: launchPrompt }))) {
+    bail("Cancelled \u2014 nothing launched");
   }
   return { agentName: agentChoice, providerName: providerChoice };
 }
@@ -5655,6 +5750,7 @@ function parseArgs() {
   const result = {
     command: args[0] && !args[0].startsWith("-") ? args[0] : void 0,
     help: false,
+    version: false,
     list: false,
     agent: void 0,
     provider: void 0
@@ -5664,6 +5760,7 @@ function parseArgs() {
     const arg = args[i2];
     const next = args[i2 + 1];
     if (arg === "--help" || arg === "-h") result.help = true;
+    if (arg === "--version" || arg === "-v") result.version = true;
     if (arg === "--list" || arg === "-l") result.list = true;
     if (arg === "--agent" || arg === "-a") {
       result.agent = value(next);
@@ -5677,7 +5774,8 @@ function parseArgs() {
   return result;
 }
 function showIntro() {
-  intro("Agent Forge");
+  console.log((0, import_node_util3.styleText)("cyan", LOGO));
+  intro(`Agent Forge ${(0, import_node_util3.styleText)("dim", `v${package_default.version}`)}`);
 }
 
 // src/launcher.js
@@ -5703,10 +5801,10 @@ async function launchAgent(agentName, providerName) {
   const providerInfo = getProviderInfo(providerName, agent);
   const s = spinner();
   s.start("Minting installation token");
-  const { token: githubToken, permissions, repositorySelection } = await generateGithubAppToken(agent);
+  const { token: githubToken, account, expiresAt, permissions, repositorySelection } = await generateGithubAppToken(agent);
   const botId = await resolveBotId(agent);
   const gitIdentity = buildGitIdentity(agent, botId);
-  s.stop(`Token ready for ${(0, import_node_util3.styleText)("green", gitIdentity.GIT_AUTHOR_NAME)}`);
+  s.stop(`Token ready for ${(0, import_node_util4.styleText)("green", gitIdentity.GIT_AUTHOR_NAME)}`);
   const identityFile = syncIdentityFile(providerName, agent);
   const runtimeEnv = {
     ...process.env,
@@ -5714,18 +5812,24 @@ async function launchAgent(agentName, providerName) {
     GH_TOKEN: githubToken,
     ...gitIdentity
   };
-  const scopeEntries = Object.entries(permissions);
-  const scopeText = scopeEntries.length ? scopeEntries.map(([name, level]) => `${name}:${level}`).join(" ") : "full installation scope";
-  const row = (label, value) => `${(0, import_node_util3.styleText)("dim", label.padEnd(10))}${value}`;
+  const narrowed = Boolean(agent.permissions) || Boolean(agent.repositories);
+  const scopeText = formatScope(permissions, narrowed);
+  const repoSlug = currentRepoSlug();
+  const row = (label, value) => `${(0, import_node_util4.styleText)("dim", label.padEnd(10))}${value}`;
   const summary = [
-    row("provider", (0, import_node_util3.styleText)(["cyan", "bold"], providerName)),
-    row("identity", (0, import_node_util3.styleText)("green", gitIdentity.GIT_AUTHOR_NAME)),
-    row("token", (0, import_node_util3.styleText)("dim", repositorySelection === "selected" ? `${scopeText} \xB7 selected repos` : scopeText))
+    row("provider", (0, import_node_util4.styleText)(["cyan", "bold"], providerName)),
+    row("identity", (0, import_node_util4.styleText)("green", gitIdentity.GIT_AUTHOR_NAME))
   ];
+  if (account) summary.push(row("account", (0, import_node_util4.styleText)("yellow", account)));
+  if (repoSlug) summary.push(row("repo", (0, import_node_util4.styleText)("dim", `${repoSlug.owner}/${repoSlug.repo}`)));
+  summary.push(
+    row("scope", (0, import_node_util4.styleText)("dim", repositorySelection === "selected" ? `${scopeText}  \xB7  selected repos` : scopeText))
+  );
+  if (expiresAt) summary.push(row("expires", (0, import_node_util4.styleText)("dim", formatExpiry(expiresAt))));
   if (identityFile) {
-    summary.push(row("memory", (0, import_node_util3.styleText)("dim", (0, import_node_path4.relative)(process.cwd(), identityFile) || identityFile)));
+    summary.push(row("memory", (0, import_node_util4.styleText)("dim", (0, import_node_path4.relative)(process.cwd(), identityFile) || identityFile)));
   }
-  note(summary.join("\n"), (0, import_node_util3.styleText)("bold", agent.label || agent.name));
+  note(summary.join("\n"), (0, import_node_util4.styleText)("bold", agent.label || agent.name));
   const providerArgs = getProviderPromptArgs(providerName, agent);
   const child = (0, import_node_child_process3.spawn)(providerInfo.command, providerArgs, {
     stdio: "inherit",
@@ -5739,7 +5843,7 @@ async function launchAgent(agentName, providerName) {
     cancel(`Could not execute ${providerInfo.command}: ${error.message}`);
     process.exit(1);
   });
-  outro(`Running ${(0, import_node_util3.styleText)("cyan", providerName)}\u2026`);
+  outro(`Running ${(0, import_node_util4.styleText)("cyan", providerName)}\u2026`);
 }
 async function main() {
   const flags = parseArgs();
@@ -5747,6 +5851,10 @@ async function main() {
     printHelp();
     return;
   }
+  if (flags.version) {
+    printVersion();
+    return;
+  }
   if (flags.list) {
     listAgents();
     return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ashulab/agent-forge",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Give claude/codex/antigravity their own GitHub identity: a bot account, a scoped token minted per run, git attribution to match",
   "license": "MIT",
   "author": "Diego Ghersi <ghersidl@gmail.com>",