@twin3-ai/agent-id 0.3.21 → 0.3.23

package/bin/agent-id-b1-sync.js

@@ -15,8 +15,8 @@ Usage:
   agent-id-b1-sync --orders ./crm-orders.json --source-id crm-main --url https://example.com
 
 Shared environment:
-  SITE_AGENT_KEY       Agent ID Site Agent Key
-  AGENT_ID_ENDPOINT    Parent Agent ID origin
+  SITE_AGENT_KEY       xAgent ID Site Agent Key
+  AGENT_ID_ENDPOINT    Parent xAgent ID origin
   AGENT_ID_B1_STATE    Local cursor and retry state path
 
 GA4 environment:

package/bin/agent-id-cloudflare-a1.js

@@ -17,12 +17,12 @@ Usage:
   agent-id-cloudflare-a1 --url https://example.com --status
 
 Required environment:
-  SITE_AGENT_KEY          Agent ID Site Agent Key
+  SITE_AGENT_KEY          xAgent ID Site Agent Key
   CLOUDFLARE_API_TOKEN    Read-only Cloudflare Analytics token
   CLOUDFLARE_ZONE_ID      Website zone ID
 
 Optional environment:
-  AGENT_ID_ENDPOINT       Parent Agent ID origin
+  AGENT_ID_ENDPOINT       Parent xAgent ID origin
   AGENT_ID_A1_STATE       Local cursor and retry state path
   AGENT_ID_A1_INTERVAL_MS Minimum interval between successful syncs
 `);

package/bin/agent-id.js

@@ -57,6 +57,22 @@ function readJsonFlag(argv, flag) {
   return idx >= 0 ? JSON.parse(fs.readFileSync(argv[idx + 1], "utf8")) : undefined;
 }
 
+function detectPublicRootCandidates(projectRoot) {
+  // Conventional publish directories across the common static hosts and
+  // frameworks. Only ones that actually exist are offered, and we offer rather
+  // than choose: picking a directory to write into is the owner's decision.
+  const conventional = ["public", "dist", "build", "out", "_site", "www", "static", "docs"];
+  const found = [];
+  for (const name of conventional) {
+    try {
+      if (fs.statSync(path.join(projectRoot, name)).isDirectory()) found.push(`./${name}`);
+    } catch (_error) {
+      // Absent is the normal case; nothing to report.
+    }
+  }
+  return found;
+}
+
 function readFlagValue(argv, flag) {
   const idx = argv.indexOf(flag);
   return idx >= 0 ? argv[idx + 1] : undefined;
@@ -152,7 +168,7 @@ function printReleaseResult(value) {
   const manifest = value.manifest || {};
   const packageInfo = manifest.package || {};
   const lines = [
-    `Agent ID release: ${value.ok ? "READY" : "BLOCKED"}`,
+    `xAgent ID release: ${value.ok ? "READY" : "BLOCKED"}`,
     `API: ${manifest.api_origin || endpoint}`,
     `Package: ${packageInfo.name || "@twin3-ai/agent-id"}@${packageInfo.version || "unknown"}`,
     `Signature: ${value.signature_verified ? "verified" : "not verified"}`,
@@ -370,7 +386,7 @@ function printSignedInstallResult(value) {
   const enrollment = value.enrollment || {};
   const executableCommand = (enrollment.next_commands || [])[0];
   const lines = value.dry_run ? [
-    "Agent ID signed installation plan",
+    "xAgent ID signed installation plan",
     `Site: ${plan.site_url || "unknown"}`,
     `Framework: ${plan.framework || "unknown"}`,
     "Identity: Ed25519, domain-bound",
@@ -378,7 +394,7 @@ function printSignedInstallResult(value) {
     "Copy and run:",
     value.next_command,
   ] : [
-    "Agent ID signed installation started",
+    "xAgent ID signed installation started",
     `Site: ${plan.site_url || "unknown"}`,
     "Signed identity: created",
     `Domain proof: ${enrollment.proof_receipt?.relative_path || "pending"}`,
@@ -388,7 +404,7 @@ function printSignedInstallResult(value) {
       lines.push(`Deploy ${enrollment.proof_receipt?.relative_path || "the domain proof"}, then run:`);
       lines.push(executableCommand);
     } else {
-      lines.push("Next action: publish the domain proof, then verify the domain with Agent ID.");
+      lines.push("Next action: publish the domain proof, then verify the domain with xAgent ID.");
     }
   }
   lines.push("Use --json for the complete machine-readable result.");
@@ -1349,7 +1365,7 @@ async function runCli(argv) {
   const [cmd, url] = argv;
   if (!cmd || cmd === "help" || cmd === "--help") {
     print([
-      "Agent ID",
+      "xAgent ID",
       "",
       "Commands:",
       "",
@@ -2809,15 +2825,37 @@ async function runCli(argv) {
     const projectRoot = readFlagValue(argv, "--project-root") || process.cwd();
     const modules = readCsvFlag(argv, "--modules");
     const grantedPermissions = readCsvFlag(argv, "--grant");
+    // Existence is checked before the plan is built. buildInstallPlan reports a
+    // missing directory as PROJECT_ROOT_NOT_SITE -- "not a recognizable website
+    // project" -- which sends someone looking for the wrong problem when the
+    // path simply is not there.
+    let realProjectRoot;
+    try {
+      realProjectRoot = fs.realpathSync(path.resolve(projectRoot));
+    } catch (_error) {
+      throw new Error(
+        `INVALID_PROJECT_ROOT: ${path.resolve(projectRoot)} does not exist. ` +
+        "Run this from your website's project directory, or pass --project-root <path>."
+      );
+    }
     const detectedPlan = await buildInstallPlan({ url, projectRoot, endpoint, modules, grantedPermissions });
     const publicRoot = path.resolve(readFlagValue(argv, "--public-root") || projectRoot);
-    let realProjectRoot;
     let realPublicRoot;
     try {
-      realProjectRoot = fs.realpathSync(path.resolve(projectRoot));
       realPublicRoot = fs.realpathSync(publicRoot);
     } catch (_error) {
-      throw new Error("INVALID_PUBLIC_ROOT: Project root and public root must already exist.");
+      // The first command a new user pastes fails here whenever their publish
+      // directory is not named "public". Naming the candidates we can see beats
+      // making them guess, and beats guessing on their behalf.
+      const candidates = detectPublicRootCandidates(realProjectRoot);
+      const hint = candidates.length
+        ? `Directories here that look like a publish root: ${candidates.join(", ")}.`
+        : "No conventional publish directory was found here. If the site publishes " +
+          "from the project root itself, pass --public-root .";
+      throw new Error(
+        `INVALID_PUBLIC_ROOT: ${publicRoot} does not exist. ${hint} ` +
+        "Pass --public-root <path> pointing at the directory your site publishes."
+      );
     }
     const relativePublicRoot = path.relative(realProjectRoot, realPublicRoot);
     if (relativePublicRoot.startsWith("..") || path.isAbsolute(relativePublicRoot)) {

package/domain-proof.js

@@ -215,7 +215,7 @@ function buildSiteAgentVerificationDocument(registration) {
   const host = exactHostname(registration.host);
   const verificationToken = requiredString(registration.verification.token, "verification.token");
   if (!verificationToken.startsWith("av_")) {
-    throw proofError("invalid_site_registration", "verification.token must be an Agent ID verification token");
+    throw proofError("invalid_site_registration", "verification.token must be an xAgent ID verification token");
   }
   return {
     schema: SITE_VERIFICATION_SCHEMA,

package/installer.js

@@ -32,7 +32,7 @@ function normalizeInstallSelection(modules, grantedPermissions) {
   const selected = [...new Set((Array.isArray(modules) && modules.length ? modules : DEFAULT_INSTALL_MODULES).map(String))];
   const unknown = selected.filter((name) => !INSTALL_MODULES[name]);
   if (unknown.length) throw installError("INVALID_INSTALL_MODULE", `Unknown install modules: ${unknown.join(", ")}`);
-  if (!selected.includes("identity")) throw installError("INSTALL_IDENTITY_REQUIRED", "The identity module is required for every Agent ID installation.");
+  if (!selected.includes("identity")) throw installError("INSTALL_IDENTITY_REQUIRED", "The identity module is required for every xAgent ID installation.");
   const granted = [...new Set((Array.isArray(grantedPermissions) ? grantedPermissions : selected.map((name) => INSTALL_MODULES[name].permission)).map(String))];
   const missing = selected.filter((name) => !granted.includes(INSTALL_MODULES[name].permission));
   if (missing.length) throw installError("INSTALL_PERMISSION_REQUIRED", `Missing permissions for modules: ${missing.join(", ")}`);
@@ -226,7 +226,7 @@ async function call(action, payload = {}) {
   let body;
   try { body = JSON.parse(text || "{}"); } catch (_error) { body = { text }; }
   if (!response.ok || body.ok === false) {
-    const error = new Error("Agent ID sync failed: " + response.status);
+    const error = new Error("xAgent ID sync failed: " + response.status);
     error.status = response.status;
     error.body = redact(body);
     throw error;
@@ -235,7 +235,7 @@ async function call(action, payload = {}) {
 }
 
 async function main() {
-  if (!AGENT_ID_ENDPOINT) throw new Error("AGENT_ID_ENDPOINT is required. Use the stable Agent ID API domain supplied by the service owner.");
+  if (!AGENT_ID_ENDPOINT) throw new Error("AGENT_ID_ENDPOINT is required. Use the stable xAgent ID API domain supplied by the service owner.");
   if (!SITE_AGENT_KEY) throw new Error("SITE_AGENT_KEY is required in the customer-owned runner environment.");
   if (!["heartbeat", "monthly", "full"].includes(SYNC_MODE)) throw new Error("AGENT_ID_SYNC_MODE must be heartbeat, monthly, or full.");
   const observedAt = new Date().toISOString();
@@ -279,7 +279,7 @@ main().catch((error) => {
 
 function staticWorkflowTemplate(siteUrl) {
   return [
-    "name: Agent ID website sync",
+    "name: xAgent ID website sync",
     "",
     "on:",
     "  workflow_dispatch:",
@@ -299,7 +299,7 @@ function staticWorkflowTemplate(siteUrl) {
     "      - uses: actions/setup-node@v4",
     "        with:",
     "          node-version: '20'",
-    "      - name: Pull verified insights from Agent ID",
+    "      - name: Pull verified insights from xAgent ID",
     "        run: node .agent-id/runner.cjs",
     "        env:",
     `          SITE_URL: ${siteUrl}`,
@@ -320,7 +320,7 @@ function staticWorkflowTemplate(siteUrl) {
 
 function readmeTemplate(siteUrl, framework, packageManager, endpoint) {
   if (framework === "static") {
-    return `# Agent ID Site Agent installation
+    return `# xAgent ID Site Agent installation
 
 - Site URL: ${siteUrl}
 - Parent service: ${endpoint}
@@ -328,17 +328,17 @@ function readmeTemplate(siteUrl, framework, packageManager, endpoint) {
 
 ## Required owner actions
 
-1. Publish the domain verification document returned by Agent ID.
+1. Publish the domain verification document returned by xAgent ID.
 2. Verify domain ownership and obtain the Site Agent Key.
 3. Save the stable API origin as the repository variable \`AGENT_ID_ENDPOINT\`; do not use a Cloud Run revision URL.
 4. Save the key as the repository secret \`SITE_AGENT_KEY\`.
-5. Run the \`Agent ID website sync\` workflow once. Keep the daily heartbeat and monthly insights schedules enabled.
+5. Run the \`xAgent ID website sync\` workflow once. Keep the daily heartbeat and monthly insights schedules enabled.
 6. Review the uploaded \`agent-id-sync-report\` artifact before approving website changes.
 
-The Runner sends a daily connection heartbeat. It pulls evidence-bound optimization insights on the first day of each month; a manual run performs both. It does not expose the key, commit code, deploy the site, or give Agent ID direct write access to this repository.
+The Runner sends a daily connection heartbeat. It pulls evidence-bound optimization insights on the first day of each month; a manual run performs both. It does not expose the key, commit code, deploy the site, or give xAgent ID direct write access to this repository.
 `;
   }
-  return `# Agent ID Site Agent installation
+  return `# xAgent ID Site Agent installation
 
 - Site URL: ${siteUrl}
 - Detected framework: ${framework}
@@ -346,13 +346,13 @@ The Runner sends a daily connection heartbeat. It pulls evidence-bound optimizat
 
 ## Next steps
 
-1. Publish the domain verification file or DNS record returned by Agent ID.
+1. Publish the domain verification file or DNS record returned by xAgent ID.
 2. Run domain verification from the website owner environment.
 3. Install \`@twin3-ai/agent-id\` in the website server, Worker, CMS connector, or Agent runtime.
 4. Store the issued Site Agent Key as \`SITE_AGENT_KEY\` in the server secret store.
 5. Start \`agent-id-sync --url ${siteUrl} --once\` for a first evidence exchange.
 
-This directory contains only the local install state and a server-side helper template. It never contains a Site Agent Key, browser token, customer content, or deployment credentials. The Agent ID service does not receive direct write access to this website by installing this package.
+This directory contains only the local install state and a server-side helper template. It never contains a Site Agent Key, browser token, customer content, or deployment credentials. The xAgent ID service does not receive direct write access to this website by installing this package.
 `;
 }
 
@@ -578,7 +578,7 @@ function validatePlan(plan) {
   for (const file of plan.files) {
     const allowedWorkflow = plan.framework === "static" && file && file.path === ".github/workflows/agent-id-sync.yml";
     if (!file || typeof file.path !== "string" || path.isAbsolute(file.path) || file.path.split(/[\\/]+/).includes("..") || (!file.path.startsWith(`${MANAGED_DIR}/`) && !allowedWorkflow)) {
-      throw installError("UNSAFE_INSTALL_PATH", "Installation can only write managed Agent ID files and its dedicated GitHub Actions workflow.");
+      throw installError("UNSAFE_INSTALL_PATH", "Installation can only write managed xAgent ID files and its dedicated GitHub Actions workflow.");
     }
   }
   return root;

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@twin3-ai/agent-id",
-  "version": "0.3.21",
+  "version": "0.3.23",
   "description": "Domain-bound AgentX portable alias, AEO evidence, and website-Agent integration SDK.",
   "license": "UNLICENSED",
   "private": false,
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/cis2042/agent-id.git"
+    "url": "git+https://github.com/twin3-ai/agent-id.git"
   },
   "files": [
     "bin",
@@ -52,5 +52,9 @@
     "agent-id-sync": "bin/agent-id-sync.js",
     "agent-id-cloudflare-a1": "bin/agent-id-cloudflare-a1.js",
     "agent-id-b1-sync": "bin/agent-id-b1-sync.js"
+  },
+  "homepage": "https://xagent.id",
+  "bugs": {
+    "url": "https://github.com/twin3-ai/agent-id/issues"
   }
 }

package/repository-connector.js

@@ -201,7 +201,7 @@ async function buildVerifiedArtifactPatch({ repositoryRoot = process.cwd(), arti
     changes: artifactBundle.artifacts.map((artifact) => ({
       path: artifact.path,
       content: artifact.content,
-      reason: `Signed Agent ID artifact bundle ${verification.bundle_hash}`
+      reason: `Signed xAgent ID artifact bundle ${verification.bundle_hash}`
     }))
   });
   return {

package/site-agent.js

@@ -322,7 +322,7 @@ function createSiteAgentClient(options = {}) {
     if (!res.ok || data.ok === false) {
       const error = siteAgentError(
         data.code || "AGENT_ID_PUBLIC_CALL_FAILED",
-        data.error || data.message || `Agent ID public call failed with HTTP ${res.status}`
+        data.error || data.message || `xAgent ID public call failed with HTTP ${res.status}`
       );
       error.status = res.status;
       const retryAfter = res.headers && typeof res.headers.get === "function" ? res.headers.get("retry-after") : "";