@reclaimprotocol/agent 0.1.1 → 0.1.2

package/lib/cdp/launcher.js

@@ -2,6 +2,7 @@ import { spawn } from 'node:child_process';
 import { existsSync, mkdirSync } from 'node:fs';
 import { homedir, platform } from 'node:os';
 import { join } from 'node:path';
+import { chromePath, localAppData } from "../consts.js";
 import { reclaimHomeDirPath } from "../paths.js";
 /**
  * Build the platform-specific list of Chromium-family binaries to probe.
@@ -24,13 +25,13 @@ function browserCandidates() {
                 '/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge',
             ];
         case 'win32': {
-            const localAppData = process.env['LOCALAPPDATA'] ?? join(homedir(), 'AppData', 'Local');
+            const appData = localAppData() ?? join(homedir(), 'AppData', 'Local');
             return [
                 // System-wide Chrome
                 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
                 'C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe',
                 // Per-user Chrome ("Install for me only")
-                join(localAppData, 'Google', 'Chrome', 'Application', 'chrome.exe'),
+                join(appData, 'Google', 'Chrome', 'Application', 'chrome.exe'),
                 // Edge — Chromium-based, preinstalled on Win 10/11
                 'C:\\Program Files\\Microsoft\\Edge\\Application\\msedge.exe',
                 'C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe',
@@ -65,7 +66,7 @@ export function findChromeBinary() {
         'your chrome.exe / msedge.exe / chromium binary.');
 }
 export function launchChrome(opts) {
-    const binary = process.env.RECLAIM_AGENT_CHROME_PATH ?? findChromeBinary();
+    const binary = chromePath() ?? findChromeBinary();
     if (!existsSync(opts.profileDir)) {
         mkdirSync(opts.profileDir, { recursive: true });
     }

package/lib/consts.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Centralized environment access for `@reclaimprotocol/agent`.
+ *
+ * This is the ONLY non-test source file under `src/` that reads
+ * `process.env`. Every other module imports a getter from here instead of
+ * touching `process.env` directly.
+ *
+ * Almost everything is exposed as a LAZY GETTER FUNCTION rather than an eager
+ * `const`, on purpose: several tests mutate env at runtime (mcp-credentials
+ * sets/deletes RECLAIM_PRIVATE_KEY / RECLAIM_PRIVATE_KEY_FILE / RECLAIM_HOME;
+ * old-devtools sets/deletes USE_OLD_DEVTOOLS), and most of these vars are read
+ * at call time anyway. An eager const captured at import time would freeze the
+ * value and break those tests. The one eager const that's safe is `LOG_LEVEL`,
+ * which is read once at logger construction.
+ *
+ * Each var's default/fallback literal is co-located with its getter.
+ */
+import { DEFAULT_BASE_URL } from '@reclaimprotocol/client';
+import { DEFAULT_OLD_API_URL } from './old/client.ts';
+/** Public attestor websocket URL — fallback for `RECLAIM_ATTESTOR_URL`. */
+export declare const FALLBACK_ATTESTOR_URL = "wss://attestor.reclaimprotocol.org:444/ws";
+/** The devtools dashboard login page — fallback for `RECLAIM_OLD_LOGIN_URL`. */
+export declare const DEFAULT_LOGIN_URL = "https://dev.reclaimprotocol.org";
+export { DEFAULT_BASE_URL, DEFAULT_OLD_API_URL };
+/** Pino log level. Read once at logger construction, so an eager const is
+ *  safe (no test mutates LOG_LEVEL at runtime). */
+export declare const LOG_LEVEL: string;
+/** Reclaim cache directory (`~/.reclaim`). `RECLAIM_HOME` overrides it so
+ *  tests can sandbox writes. */
+export declare function reclaimHome(): string;
+/**
+ * `USE_OLD_DEVTOOLS` — single source of truth for which backend the MCP
+ * server targets. Defaults to OLD devtools while the builder backend is under
+ * development. Builder mode must be opted into EXPLICITLY with
+ * `USE_OLD_DEVTOOLS=false`; anything else keeps old mode on.
+ */
+export declare function useOldDevtools(): boolean;
+/** `%LOCALAPPDATA%` on Windows, used to probe a per-user Chrome install. */
+export declare function localAppData(): string | undefined;
+/** Explicit Chrome/Edge/Chromium binary path override. */
+export declare function chromePath(): string | undefined;
+/** Agent tools (Chrome CDP capture, synthesis, proof) are disabled in hosted
+ *  deployments by setting `RECLAIM_AGENT_DISABLED=1`. Shared by mcp/start and
+ *  the old-mode authenticate tool. */
+export declare function agentDisabled(): boolean;
+/** Old-devtools backend base URL. */
+export declare function oldApiUrl(): string;
+/** Builder backend base URL. Shared by mcp/start and the verification tool. */
+export declare function apiUrl(): string;
+/** Explicit builder API token (overrides the cached session token). */
+export declare function apiToken(): string | undefined;
+/** Diagnostic trace capture (`RECLAIM_AGENT_TRACE=1`). Shared by the attestor
+ *  logger capture and the proof-run dump. */
+export declare function agentTraceEnabled(): boolean;
+/** Attestor websocket URL override (`RECLAIM_ATTESTOR_URL`). */
+export declare function attestorUrlOverride(): string | undefined;
+/** Raw 0x-hex Ethereum private key (`RECLAIM_PRIVATE_KEY`). */
+export declare function privateKey(): string | undefined;
+/** Path to a raw-hex key file (`RECLAIM_PRIVATE_KEY_FILE`). */
+export declare function privateKeyFile(): string | undefined;
+/** Per-org bearer secret (`rorg_…`) used to authenticate verification reads. */
+export declare function orgSecret(): string | undefined;
+/** Dashboard Firebase bearer token for the old backend. */
+export declare function oldApiToken(): string | undefined;
+/** An `eth:<addr>` (or bare `0x…`) uid for the old backend. */
+export declare function oldEthUid(): string | undefined;
+/** Override for the old-devtools dashboard login URL. */
+export declare function oldLoginUrl(): string | undefined;

package/lib/consts.js

@@ -0,0 +1,134 @@
+/**
+ * Centralized environment access for `@reclaimprotocol/agent`.
+ *
+ * This is the ONLY non-test source file under `src/` that reads
+ * `process.env`. Every other module imports a getter from here instead of
+ * touching `process.env` directly.
+ *
+ * Almost everything is exposed as a LAZY GETTER FUNCTION rather than an eager
+ * `const`, on purpose: several tests mutate env at runtime (mcp-credentials
+ * sets/deletes RECLAIM_PRIVATE_KEY / RECLAIM_PRIVATE_KEY_FILE / RECLAIM_HOME;
+ * old-devtools sets/deletes USE_OLD_DEVTOOLS), and most of these vars are read
+ * at call time anyway. An eager const captured at import time would freeze the
+ * value and break those tests. The one eager const that's safe is `LOG_LEVEL`,
+ * which is read once at logger construction.
+ *
+ * Each var's default/fallback literal is co-located with its getter.
+ */
+import { DEFAULT_BASE_URL } from '@reclaimprotocol/client';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { DEFAULT_OLD_API_URL } from "./old/client.js";
+// ---------------------------------------------------------------------------
+// Default / fallback literals (used only as env fallbacks).
+// ---------------------------------------------------------------------------
+/** Public attestor websocket URL — fallback for `RECLAIM_ATTESTOR_URL`. */
+export const FALLBACK_ATTESTOR_URL = 'wss://attestor.reclaimprotocol.org:444/ws';
+/** The devtools dashboard login page — fallback for `RECLAIM_OLD_LOGIN_URL`. */
+export const DEFAULT_LOGIN_URL = 'https://dev.reclaimprotocol.org';
+// Re-export the two non-env-fallback defaults so callers can keep importing
+// their URL defaults from a single place if they wish.
+export { DEFAULT_BASE_URL, DEFAULT_OLD_API_URL };
+// ---------------------------------------------------------------------------
+// Logging.
+// ---------------------------------------------------------------------------
+/** Pino log level. Read once at logger construction, so an eager const is
+ *  safe (no test mutates LOG_LEVEL at runtime). */
+export const LOG_LEVEL = process.env.LOG_LEVEL || 'info';
+// ---------------------------------------------------------------------------
+// Paths.
+// ---------------------------------------------------------------------------
+/** Reclaim cache directory (`~/.reclaim`). `RECLAIM_HOME` overrides it so
+ *  tests can sandbox writes. */
+export function reclaimHome() {
+    return process.env.RECLAIM_HOME || join(homedir(), '.reclaim');
+}
+// ---------------------------------------------------------------------------
+// Mode flag.
+// ---------------------------------------------------------------------------
+/**
+ * `USE_OLD_DEVTOOLS` — single source of truth for which backend the MCP
+ * server targets. Defaults to OLD devtools while the builder backend is under
+ * development. Builder mode must be opted into EXPLICITLY with
+ * `USE_OLD_DEVTOOLS=false`; anything else keeps old mode on.
+ */
+export function useOldDevtools() {
+    return (process.env.USE_OLD_DEVTOOLS ?? '').trim().toLowerCase() !== 'false';
+}
+// ---------------------------------------------------------------------------
+// Chrome / CDP launcher.
+// ---------------------------------------------------------------------------
+/** `%LOCALAPPDATA%` on Windows, used to probe a per-user Chrome install. */
+export function localAppData() {
+    return process.env['LOCALAPPDATA'];
+}
+/** Explicit Chrome/Edge/Chromium binary path override. */
+export function chromePath() {
+    return process.env.RECLAIM_AGENT_CHROME_PATH;
+}
+// ---------------------------------------------------------------------------
+// MCP server / API clients.
+// ---------------------------------------------------------------------------
+/** Agent tools (Chrome CDP capture, synthesis, proof) are disabled in hosted
+ *  deployments by setting `RECLAIM_AGENT_DISABLED=1`. Shared by mcp/start and
+ *  the old-mode authenticate tool. */
+export function agentDisabled() {
+    return process.env.RECLAIM_AGENT_DISABLED === '1';
+}
+/** Old-devtools backend base URL. */
+export function oldApiUrl() {
+    return process.env.RECLAIM_OLD_API_URL || DEFAULT_OLD_API_URL;
+}
+/** Builder backend base URL. Shared by mcp/start and the verification tool. */
+export function apiUrl() {
+    return process.env.RECLAIM_API_URL || DEFAULT_BASE_URL;
+}
+/** Explicit builder API token (overrides the cached session token). */
+export function apiToken() {
+    return process.env.RECLAIM_API_TOKEN;
+}
+// ---------------------------------------------------------------------------
+// Proof tracing.
+// ---------------------------------------------------------------------------
+/** Diagnostic trace capture (`RECLAIM_AGENT_TRACE=1`). Shared by the attestor
+ *  logger capture and the proof-run dump. */
+export function agentTraceEnabled() {
+    return process.env['RECLAIM_AGENT_TRACE'] === '1';
+}
+/** Attestor websocket URL override (`RECLAIM_ATTESTOR_URL`). */
+export function attestorUrlOverride() {
+    return process.env['RECLAIM_ATTESTOR_URL'];
+}
+// ---------------------------------------------------------------------------
+// Eth proof-owner key resolution.
+// ---------------------------------------------------------------------------
+/** Raw 0x-hex Ethereum private key (`RECLAIM_PRIVATE_KEY`). */
+export function privateKey() {
+    return process.env.RECLAIM_PRIVATE_KEY;
+}
+/** Path to a raw-hex key file (`RECLAIM_PRIVATE_KEY_FILE`). */
+export function privateKeyFile() {
+    return process.env.RECLAIM_PRIVATE_KEY_FILE;
+}
+// ---------------------------------------------------------------------------
+// Verification reads.
+// ---------------------------------------------------------------------------
+/** Per-org bearer secret (`rorg_…`) used to authenticate verification reads. */
+export function orgSecret() {
+    return process.env.RECLAIM_ORG_SECRET;
+}
+// ---------------------------------------------------------------------------
+// Old-devtools identity / login.
+// ---------------------------------------------------------------------------
+/** Dashboard Firebase bearer token for the old backend. */
+export function oldApiToken() {
+    return process.env.RECLAIM_OLD_API_TOKEN;
+}
+/** An `eth:<addr>` (or bare `0x…`) uid for the old backend. */
+export function oldEthUid() {
+    return process.env.RECLAIM_OLD_ETH_UID;
+}
+/** Override for the old-devtools dashboard login URL. */
+export function oldLoginUrl() {
+    return process.env.RECLAIM_OLD_LOGIN_URL;
+}

package/lib/logger.js

@@ -1,7 +1,8 @@
 import pino, { stdTimeFunctions } from 'pino';
+import { LOG_LEVEL } from "./consts.js";
 export const LOGGER = pino({
     name: '@reclaimprotocol/agent',
     timestamp: stdTimeFunctions.isoTime,
     base: { hostname: undefined, pid: undefined },
 });
-LOGGER.level = process.env.LOG_LEVEL || 'info';
+LOGGER.level = LOG_LEVEL;

package/lib/mcp/api/operations.gen.d.ts

@@ -63,7 +63,7 @@ export declare const MCP_TOOLS: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     };
-    DeleteOrgCredential: {
+    DeleteOrgKeypair: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     };
@@ -91,7 +91,7 @@ export declare const MCP_TOOLS: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     };
-    GetOrgCredential: {
+    GetOrgKeypair: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     };
@@ -171,7 +171,7 @@ export declare const MCP_TOOLS: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     };
-    SetOrgCredential: {
+    SetOrgKeypair: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     };
@@ -183,10 +183,6 @@ export declare const MCP_TOOLS: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     };
-    UpdateMe: {
-        description: string;
-        inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
-    };
     UpdateOrg: {
         description: string;
         inputSchema: import("zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;