@meffecta/agent 1.0.13 → 1.0.14

package/engine.json

@@ -1,4 +1,4 @@
 {
-  "engineTag": "1.0.13",
-  "builtFrom": "2c7075fd557116ad9692c5bb1780d60a1559aa01"
+  "engineTag": "1.0.14",
+  "builtFrom": "788fc7fd22968bd3e14bf4c19e850b2c13c7eb8c"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meffecta/agent",
-  "version": "1.0.13",
+  "version": "1.0.14",
   "description": "Set up and operate a Meffecta Agent deployment — a self-hosted Claude Code job runner.",
   "type": "module",
   "bin": {

package/scripts/verify-credentials.mjs

@@ -163,6 +163,24 @@ async function checkAhrefs() {
     : fail("AHREFS_API_KEY", `domain-rating-free → ${status}`);
 }
 
+async function checkMevisio() {
+  if (!env.MEVISIO_HOST || !env.MEVISIO_EMAIL || !env.MEVISIO_PASSWORD) {
+    return skip("MEVISIO", "unset");
+  }
+  // A real login, because that is the only thing that proves these three agree — the platform
+  // hands an ANONYMOUS session to anyone who asks, and /gateway/api/context answers 200 with
+  // the account filled in and no user at all. Checking the host alone would report a pass.
+  const { status, json } = await http(`https://${env.MEVISIO_HOST}/identity/api/login`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ email: env.MEVISIO_EMAIL, password: env.MEVISIO_PASSWORD }),
+  });
+  if (status !== 200 || !json?.ok) {
+    return fail("MEVISIO", `login → ${status}${json?.error ? ` ${json.error}` : ""}`);
+  }
+  ok("MEVISIO", `${env.MEVISIO_EMAIL} @ ${env.MEVISIO_HOST}`);
+}
+
 async function checkAgentmail() {
   if (!env.AGENTMAIL_API_KEY) {
     return skip("AGENTMAIL_API_KEY", "unset");
@@ -666,6 +684,7 @@ const CHECKS = [
   ["AHREFS_API_KEY", checkAhrefs],
   ["SERPER_API_KEY", checkSerper],
   ["AGENTMAIL_API_KEY", checkAgentmail],
+  ["MEVISIO", checkMevisio],
   ["HUBSPOT_TOKEN", checkHubspot],
   ["KLEER_API_TOKEN", checkKleer],
   ["CLOUDFLARE", checkCloudflare],