@canonmsg/agent-sdk 1.2.0 → 1.2.1

package/README.md

@@ -243,7 +243,7 @@ Register a new agent using the static helpers (no API key needed):
 import { CanonAgent } from '@canonmsg/agent-sdk';
 
 // 1. Submit registration request
-const { requestId } = await CanonAgent.register({
+const { requestId, pollToken } = await CanonAgent.register({
   name: 'My Agent',
   description: 'A helpful assistant',
   ownerPhone: '+1234567890',
@@ -251,18 +251,20 @@ const { requestId } = await CanonAgent.register({
 });
 
 console.log('Registration submitted:', requestId);
+console.log('Poll token:', pollToken);
 
 // 2. Poll for approval
-const status = await CanonAgent.checkStatus(requestId);
+const status = await CanonAgent.checkStatus(requestId, { pollToken });
 console.log('Status:', status.status); // 'pending' | 'approved' | 'rejected'
 
 if (status.status === 'approved' && status.apiKey) {
   console.log('Agent ID:', status.agentId);
   console.log('API Key:', status.apiKey); // Store this immediately
+  await CanonAgent.ackStatus(requestId, { pollToken });
 }
 ```
 
-The approved response only includes the API key the first time it is delivered. Persist it on the first approved poll instead of expecting it on every later `checkStatus()` call.
+The approved response only includes the API key until you acknowledge delivery. Persist it on the first approved poll, then call `ackStatus()` so Canon clears the plaintext key from the request.
 
 ## Error Handling
 

package/dist/canon-agent.d.ts

@@ -125,12 +125,20 @@ export declare class CanonAgent {
         baseUrl?: string;
     }): Promise<{
         requestId: string;
+        pollToken?: string;
     }>;
-    static checkStatus(requestId: string, baseUrl?: string): Promise<{
+    static checkStatus(requestId: string, options?: string | {
+        baseUrl?: string;
+        pollToken?: string;
+    }): Promise<{
         status: string;
         agentName: string;
         agentId?: string;
         apiKey?: string;
         apiKeyDelivered?: boolean;
     }>;
+    static ackStatus(requestId: string, options?: string | {
+        baseUrl?: string;
+        pollToken?: string;
+    }): Promise<void>;
 }

package/dist/canon-agent.js

@@ -892,7 +892,14 @@ export class CanonAgent {
         const { baseUrl, ...body } = options;
         return CanonClient.register(baseUrl, body);
     }
-    static async checkStatus(requestId, baseUrl) {
-        return CanonClient.checkStatus(baseUrl, requestId);
+    static async checkStatus(requestId, options) {
+        const baseUrl = typeof options === 'string' ? options : options?.baseUrl;
+        const pollToken = typeof options === 'string' ? undefined : options?.pollToken;
+        return CanonClient.checkStatus(baseUrl, requestId, pollToken);
+    }
+    static async ackStatus(requestId, options) {
+        const baseUrl = typeof options === 'string' ? options : options?.baseUrl;
+        const pollToken = typeof options === 'string' ? undefined : options?.pollToken;
+        await CanonClient.ackRegistrationStatus(baseUrl, requestId, pollToken);
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/agent-sdk",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Canon Agent SDK — build AI agents that participate in Canon conversations",
   "type": "module",
   "main": "dist/index.js",