@vapi-network/core 0.5.0 → 0.8.0

package/dist/account-add.d.ts

@@ -0,0 +1,101 @@
+import { pollDeviceLink as completeDeviceLink, saveAgentLink as storeAgentLink, startDeviceLink as beginDeviceLink } from "./agent-link.js";
+import type { SecretStore } from "./secret-store.js";
+import { type WalletName, type WalletStore } from "./wallet-store.js";
+export type AccountCapsUsd = {
+    perCallUsd: string;
+    perDayUsd: string;
+};
+export type AccountCapsInput = {
+    perCallUsd?: number | string;
+    perDayUsd?: number | string;
+};
+type CreatedAccount = {
+    account: WalletName;
+    address: string;
+    caps: AccountCapsUsd;
+    created: boolean;
+};
+export type AccountLinkOutcome = {
+    linked: true;
+    owner: string;
+} | {
+    linked: false;
+    reason: "denied" | "expired" | "failed";
+    message: string;
+};
+export type AccountLinkResult = {
+    linked: boolean;
+    autoApproved: boolean;
+    link?: {
+        userCode: string;
+        verificationUri: string;
+        verificationUriComplete: string;
+        expiresInSeconds: number;
+    };
+    linkError?: string;
+    completion?: Promise<AccountLinkOutcome>;
+};
+export type AccountAddResult = CreatedAccount & AccountLinkResult;
+export declare class AccountCapsRaiseError extends Error {
+    constructor(message: string);
+}
+export declare function linkRouterAllowanceUsd(args: {
+    scopes: readonly string[];
+    explicitUsd?: number | undefined;
+    perDayCapUsd?: number | string | undefined;
+    trusted: boolean;
+}): number | undefined;
+export declare function createAccount(args: {
+    store: WalletStore;
+    name: string;
+    caps?: AccountCapsInput;
+    label?: string;
+    existing?: "refuse" | "return";
+}): Promise<CreatedAccount>;
+export declare function lowerAccountCaps(args: {
+    store: WalletStore;
+    name: string;
+    perCallUsd?: number | string;
+    perDayUsd?: number | string;
+}): Promise<{
+    account: WalletName;
+    address: string;
+    caps: AccountCapsUsd;
+    changed: boolean;
+}>;
+export type AddAccountArgs = {
+    store: WalletStore;
+    secrets: SecretStore;
+    name: string;
+    caps?: AccountCapsInput;
+    label?: string;
+    existing?: "refuse" | "return";
+    link?: boolean;
+    apiBase: string;
+    configPath?: string;
+    env?: NodeJS.ProcessEnv;
+    hostname?: string;
+    /**
+     * Explicit router allowance for `router.use`. Without one, a trusted link
+     * requests the account's exact per-day cap; an untrusted link leaves the
+     * allowance for the owner to choose on the consent page.
+     */
+    routerAllowanceUsd?: number;
+    scopes?: string[];
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+    sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
+    signal?: AbortSignal;
+    startDeviceLink?: typeof beginDeviceLink;
+    pollDeviceLink?: typeof completeDeviceLink;
+    saveAgentLink?: typeof storeAgentLink;
+};
+export type StartAccountLinkArgs = Omit<AddAccountArgs, "name" | "caps" | "existing" | "link"> & {
+    account: WalletName;
+    /** Start the owner flow without polling when false. Defaults to true. */
+    awaitApproval?: boolean;
+};
+export declare function addAccount(args: AddAccountArgs): Promise<AccountAddResult>;
+export declare function startAccountLink(args: StartAccountLinkArgs): Promise<AccountLinkResult>;
+export {};
+//# sourceMappingURL=account-add.d.ts.map

package/dist/account-add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-add.d.ts","sourceRoot":"","sources":["../src/account-add.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,cAAc,IAAI,kBAAkB,EACpC,aAAa,IAAI,cAAc,EAC/B,eAAe,IAAI,eAAe,EAGnC,MAAM,iBAAiB,CAAC;AAKzB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAoB,KAAK,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGxF,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC7B,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;QACxB,uBAAuB,EAAE,MAAM,CAAC;QAChC,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,cAAc,GAAG,iBAAiB,CAAC;AAElE,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC3C,OAAO,EAAE,OAAO,CAAC;CAClB,GAAG,MAAM,GAAG,SAAS,CAKrB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAChC,GAAG,OAAO,CAAC,cAAc,CAAC,CAiC1B;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC,CAgDD;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,eAAe,CAAC;IACzC,cAAc,CAAC,EAAE,OAAO,kBAAkB,CAAC;IAC3C,aAAa,CAAC,EAAE,OAAO,cAAc,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC,GAAG;IAC/F,OAAO,EAAE,UAAU,CAAC;IACpB,yEAAyE;IACzE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAwBhF;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA6H7F"}

package/dist/account-movement-lock.d.ts

@@ -0,0 +1,10 @@
+import type { WalletName } from "./wallet-name.js";
+export declare class AccountMovementLockedError extends Error {
+    readonly account: WalletName;
+    readonly code = "account_movement_locked";
+    constructor(account: WalletName);
+}
+/** Serializes every signer that can create an EIP-3009 authorization for one account. */
+export declare function withAccountMovementLock<T>(home: string, account: WalletName, timeoutMs: number | undefined, operation: () => Promise<T>, signal?: AbortSignal): Promise<T>;
+export declare function withAccountMovementLocks<T>(home: string, accounts: readonly WalletName[], timeoutMs: number | undefined, operation: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=account-movement-lock.d.ts.map

package/dist/account-movement-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-movement-lock.d.ts","sourceRoot":"","sources":["../src/account-movement-lock.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,qBAAa,0BAA2B,SAAQ,KAAK;IAGvC,QAAQ,CAAC,OAAO,EAAE,UAAU;IAFxC,QAAQ,CAAC,IAAI,6BAA6B;gBAErB,OAAO,EAAE,UAAU;CAIzC;AAED,yFAAyF;AACzF,wBAAsB,uBAAuB,CAAC,CAAC,EAC7C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,CAAC,CAAC,CAiCZ;AAED,wBAAsB,wBAAwB,CAAC,CAAC,EAC9C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,SAAS,UAAU,EAAE,EAC/B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC1B,OAAO,CAAC,CAAC,CAAC,CAOZ"}

package/dist/agent-link.d.ts

@@ -2,6 +2,7 @@ import type { SecretStore } from "./secret-store.js";
 import type { AgentLink, WalletName, WalletStore } from "./wallet-store.js";
 export declare const AGENT_LINK_STATEMENT = "Link this wallet to a vAPI account as an agent.";
 export declare const AGENT_LINK_REVOKED_MESSAGE = "This agent's link was revoked or has expired. Run vapi login to link it again.";
+export declare const REMOTE_AGENT_TOKEN_EXPIRED_MESSAGE = "The Railway run's short-lived vAPI access token expired. Start a new Railway run from the owner machine.";
 export type DeviceLinkStart = {
     clientId: string;
     deviceCode: string;
@@ -10,6 +11,7 @@ export type DeviceLinkStart = {
     verificationUriComplete: string;
     expiresIn: number;
     interval: number;
+    autoApproved: boolean;
 };
 export type AgentTokens = {
     accessToken: string;
@@ -40,6 +42,9 @@ export declare function startDeviceLink(args: {
     label: string;
     scopes?: string[];
     routerAllowanceUsd?: number;
+    device?: string;
+    trustDevice?: boolean;
+    bearer?: string;
     fetchImpl?: typeof fetch;
     now?: () => Date;
 }): Promise<DeviceLinkStart>;
@@ -47,9 +52,19 @@ export declare function pollDeviceLink(args: {
     apiBase: string;
     start: DeviceLinkStart;
     fetchImpl?: typeof fetch;
-    sleep?: (ms: number) => Promise<void>;
+    sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
     now?: () => number;
+    immediate?: boolean;
+    signal?: AbortSignal;
 }): Promise<LinkResult>;
+export declare function trustedLinkBearer(args: {
+    store: WalletStore;
+    secrets: SecretStore;
+    apiBase: string;
+    exclude?: WalletName;
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+}): Promise<string | undefined>;
 export declare const agentSecretAccounts: (wallet: WalletName) => {
     tokens: string;
     routerStake: string;

package/dist/agent-link.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-link.d.ts","sourceRoot":"","sources":["../src/agent-link.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE5E,eAAO,MAAM,oBAAoB,oDAAoD,CAAC;AACtF,eAAO,MAAM,0BAA0B,mFAC2C,CAAC;AAEnF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,IAAI,EACT,eAAe,GACf,eAAe,GACf,yBAAyB,GACzB,eAAe,GACf,YAAY,GACZ,MAAM;gBAND,IAAI,EACT,eAAe,GACf,eAAe,GACf,yBAAyB,GACzB,eAAe,GACf,YAAY,GACZ,MAAM,EACV,OAAO,EAAE,MAAM;CAKlB;AAED,eAAO,MAAM,oBAAoB,qCAAsC,CAAC;AAKxE,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QACP,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;QACvB,WAAW,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;KAC7D,CAAC;IACF,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,OAAO,CAAC,eAAe,CAAC,CAyD3B;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,UAAU,CAAC,CAsDtB;AAED,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,UAAU,KACjB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAI7D,CAAC;AAEH,0FAA0F;AAC1F,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ,uDASA;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,SAAS,CAAC,CAoDrB;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,MAAM,CAAC,CAElB;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE;IACJ,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,EACD,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC,CAYnB;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAmChB;AAkJD,oFAAoF;AACpF,wBAAsB,uBAAuB,CAAC,CAAC,EAC7C,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC1B,OAAO,CAAC,CAAC,CAAC,CA0BZ"}
+{"version":3,"file":"agent-link.d.ts","sourceRoot":"","sources":["../src/agent-link.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE5E,eAAO,MAAM,oBAAoB,oDAAoD,CAAC;AACtF,eAAO,MAAM,0BAA0B,mFAC2C,CAAC;AACnF,eAAO,MAAM,kCAAkC,6GAC6D,CAAC;AAE7G,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,IAAI,EACT,eAAe,GACf,eAAe,GACf,yBAAyB,GACzB,eAAe,GACf,YAAY,GACZ,MAAM;gBAND,IAAI,EACT,eAAe,GACf,eAAe,GACf,yBAAyB,GACzB,eAAe,GACf,YAAY,GACZ,MAAM,EACV,OAAO,EAAE,MAAM;CAKlB;AAED,eAAO,MAAM,oBAAoB,qCAAsC,CAAC;AAKxE,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QACP,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;QACvB,WAAW,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;KAC7D,CAAC;IACF,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmE3B;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,UAAU,CAAC,CAwEtB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAoC9B;AAED,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,UAAU,KACjB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAI7D,CAAC;AAEH,0FAA0F;AAC1F,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ,uDAUA;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,SAAS,CAAC,CAoDrB;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,MAAM,CAAC,CAElB;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE;IACJ,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,EACD,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC,CAYnB;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAmChB;AAsJD,oFAAoF;AACpF,wBAAsB,uBAAuB,CAAC,CAAC,EAC7C,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC1B,OAAO,CAAC,CAAC,CAAC,CA0BZ"}

package/dist/agent-link.js

@@ -1203,6 +1203,7 @@ async function appendAudit(home, record, options = {}) {
   const entry = {
     time: (options.now?.() ?? /* @__PURE__ */ new Date()).toISOString(),
     event: record.event,
+    ...record.run === void 0 ? {} : { run: record.run },
     ...record.wallet === void 0 ? {} : { wallet: record.wallet },
     ...record.owner === void 0 ? {} : { owner: record.owner },
     tty: record.tty,
@@ -1217,9 +1218,13 @@ async function appendAudit(home, record, options = {}) {
   return entry;
 }
 
+// src/device.ts
+var DEVICE_NAME_PATTERN = /^[a-z0-9][a-z0-9-]{0,31}$/;
+
 // src/agent-link.ts
 var AGENT_LINK_STATEMENT = "Link this wallet to a vAPI account as an agent.";
 var AGENT_LINK_REVOKED_MESSAGE = "This agent's link was revoked or has expired. Run vapi login to link it again.";
+var REMOTE_AGENT_TOKEN_EXPIRED_MESSAGE = "The Railway run's short-lived vAPI access token expired. Start a new Railway run from the owner machine.";
 var AgentLinkError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -1232,6 +1237,9 @@ var DEFAULT_AGENT_SCOPES = ["mcp:call", "router.use"];
 var ALLOWED_AGENT_SCOPES = /* @__PURE__ */ new Set([...DEFAULT_AGENT_SCOPES, "call.publish"]);
 var publicFetch = createPublicFetch({ allowPrivateNetwork: false });
 async function startDeviceLink(args) {
+  if (args.device !== void 0 && !DEVICE_NAME_PATTERN.test(args.device)) {
+    throw new AgentLinkError("http", "The device name is invalid.");
+  }
   const scopes = args.scopes ?? [...DEFAULT_AGENT_SCOPES];
   if (scopes.some((scope) => !ALLOWED_AGENT_SCOPES.has(scope))) {
     throw new AgentLinkError("invalid_scope", "The requested agent scope is not allowed.");
@@ -1262,14 +1270,20 @@ async function startDeviceLink(args) {
     apiEndpoint(args.apiBase, "/oauth/device_authorization"),
     {
       method: "POST",
-      headers: { "content-type": "application/json" },
+      headers: {
+        "content-type": "application/json",
+        ...args.bearer === void 0 ? {} : { authorization: `Bearer ${args.bearer}` }
+      },
       body: JSON.stringify({
         agent_message: message,
         agent_signature: signature,
         label: args.label,
         scope: scopes.join(" "),
-        ...args.routerAllowanceUsd === void 0 ? {} : { router_allowance_usd: args.routerAllowanceUsd }
-      })
+        ...args.routerAllowanceUsd === void 0 ? {} : { router_allowance_usd: args.routerAllowanceUsd },
+        ...args.device === void 0 ? {} : { device: args.device },
+        ...args.trustDevice === void 0 ? {} : { trust_device: args.trustDevice }
+      }),
+      ...args.bearer === void 0 ? {} : { redirect: "manual" }
     }
   );
   const payload = await responseRecord(response);
@@ -1281,7 +1295,8 @@ async function startDeviceLink(args) {
     verificationUri: requiredString(payload, "verification_uri"),
     verificationUriComplete: requiredString(payload, "verification_uri_complete"),
     expiresIn: requiredNumber(payload, "expires_in"),
-    interval: requiredNumber(payload, "interval")
+    interval: requiredNumber(payload, "interval"),
+    autoApproved: payload.auto_approved === true
   };
 }
 async function pollDeviceLink(args) {
@@ -1289,65 +1304,116 @@ async function pollDeviceLink(args) {
   const sleep = args.sleep ?? sleepFor;
   const now = args.now ?? Date.now;
   const deadline = now() + args.start.expiresIn * 1e3;
+  const expiry = new AbortController();
+  const expiryTimer = setTimeout(() => expiry.abort(), Math.max(0, deadline - now()));
+  expiryTimer.unref();
+  const signal = args.signal === void 0 ? expiry.signal : AbortSignal.any([expiry.signal, args.signal]);
   let interval = args.start.interval;
-  while (now() < deadline) {
-    await sleep(interval * 1e3);
-    if (now() >= deadline) break;
-    const body = new URLSearchParams({
-      grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-      device_code: args.start.deviceCode,
-      client_id: args.start.clientId
-    });
-    const response = await safeFetch(fetchImpl, apiEndpoint(args.apiBase, "/oauth/token"), {
-      method: "POST",
-      headers: { "content-type": "application/x-www-form-urlencoded" },
-      body
-    });
-    const payload = await responseRecord(response);
-    if (response.ok) {
-      const scope = requiredString(payload, "scope");
-      const owner = requiredOwner(payload, "owner_wallet");
-      return {
-        tokens: {
-          accessToken: requiredString(payload, "access_token"),
-          refreshToken: requiredString(payload, "refresh_token"),
-          expiresAt: now() + requiredNumber(payload, "expires_in") * 1e3,
-          scopes: splitScopes(scope)
-        },
-        owner,
-        ...optionalStringProperty(payload, "router_key", "routerKey"),
-        ...optionalStringProperty(payload, "router_base_url", "routerBaseUrl"),
-        ...optionalStringProperty(payload, "router_key_error", "routerKeyError")
-      };
-    }
-    const error = stringField(payload, "error");
-    if (response.status === 400 && error === "authorization_pending") continue;
-    if (response.status === 400 && error === "slow_down") {
-      interval += 5;
-      continue;
-    }
-    if (response.status === 400 && error === "access_denied") {
-      throw new AgentLinkError("access_denied", "The owner denied the agent link.");
+  let firstPoll = true;
+  try {
+    while (now() < deadline && !signal.aborted) {
+      if (args.immediate !== true || !firstPoll) await sleep(interval * 1e3, signal);
+      firstPoll = false;
+      if (now() >= deadline || signal.aborted) break;
+      const body = new URLSearchParams({
+        grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+        device_code: args.start.deviceCode,
+        client_id: args.start.clientId
+      });
+      let response;
+      try {
+        response = await safeFetch(fetchImpl, apiEndpoint(args.apiBase, "/oauth/token"), {
+          method: "POST",
+          headers: { "content-type": "application/x-www-form-urlencoded" },
+          body,
+          signal
+        });
+      } catch (error2) {
+        if (expiry.signal.aborted) throw expiredLinkError();
+        throw error2;
+      }
+      const payload = await responseRecord(response);
+      if (response.ok) {
+        const scope = requiredString(payload, "scope");
+        const owner = requiredOwner(payload, "owner_wallet");
+        return {
+          tokens: {
+            accessToken: requiredString(payload, "access_token"),
+            refreshToken: requiredString(payload, "refresh_token"),
+            expiresAt: now() + requiredNumber(payload, "expires_in") * 1e3,
+            scopes: splitScopes(scope)
+          },
+          owner,
+          ...optionalStringProperty(payload, "router_key", "routerKey"),
+          ...optionalStringProperty(payload, "router_base_url", "routerBaseUrl"),
+          ...optionalStringProperty(payload, "router_key_error", "routerKeyError")
+        };
+      }
+      const error = stringField(payload, "error");
+      if (response.status === 400 && error === "authorization_pending") continue;
+      if (response.status === 400 && error === "slow_down") {
+        interval += 5;
+        continue;
+      }
+      if (response.status === 400 && error === "access_denied") {
+        throw new AgentLinkError("access_denied", "The owner denied the agent link.");
+      }
+      if (response.status === 400 && error === "expired_token") throw expiredLinkError();
+      throw httpError("The vAPI agent link request failed.");
     }
-    if (response.status === 400 && error === "expired_token") throw expiredLinkError();
-    throw httpError("The vAPI agent link request failed.");
+  } finally {
+    clearTimeout(expiryTimer);
   }
   throw expiredLinkError();
 }
+async function trustedLinkBearer(args) {
+  if (!args.secrets.available) return void 0;
+  let origin;
+  try {
+    origin = new URL(args.apiBase).origin;
+    await args.store.reload();
+  } catch {
+    return void 0;
+  }
+  const defaultName = args.store.defaultName;
+  const names = [
+    ...defaultName === void 0 ? [] : [defaultName],
+    ...args.store.names().filter((name) => name !== defaultName)
+  ];
+  for (const name of names) {
+    if (name === args.exclude) continue;
+    try {
+      const bearer = await withAgentCredentialLock(args.store, `wallet:${name}`, async () => {
+        await args.store.reload();
+        const link = args.store.entry(name)?.link;
+        if (link === void 0 || new URL(link.apiBase).origin !== origin) return void 0;
+        return await agentAccessToken({
+          secrets: args.secrets,
+          wallets: args.store,
+          wallet: name,
+          ...args.fetchImpl === void 0 ? {} : { fetchImpl: args.fetchImpl },
+          ...args.now === void 0 ? {} : { now: args.now }
+        });
+      });
+      if (bearer !== void 0) return bearer;
+    } catch {
+    }
+  }
+  return void 0;
+}
 var agentSecretAccounts = (wallet) => ({
   tokens: `vapi.agent.${wallet}.tokens`,
   routerStake: `vapi.agent.${wallet}.router.stake`,
   routerBalance: `vapi.agent.${wallet}.router.balance`
 });
 async function renameAgentLinkWallet(args) {
-  await args.wallets.reload();
-  const current = args.wallets.resolve({ name: args.from });
-  if (current.entry.link === void 0) return await args.wallets.rename(args.from, args.to);
-  return await withAgentCredentialLock(
-    args.wallets,
-    current.entry.link.clientId,
-    async () => await args.wallets.rename(args.from, args.to, { secrets: args.secrets })
-  );
+  return await args.wallets.rename(args.from, args.to, {
+    secrets: args.secrets,
+    serialize: async (operation) => {
+      const clientId = args.wallets.entry(args.from)?.link?.clientId;
+      return clientId === void 0 ? await operation() : await withAgentCredentialLock(args.wallets, clientId, operation);
+    }
+  });
 }
 async function saveAgentLink(args) {
   if (!args.secrets.available) {
@@ -1463,6 +1529,9 @@ async function resolveAgentAccessToken(args, options) {
     if (options.rejectedAccessToken === void 0 && current.expiresAt - 6e4 > now()) {
       return current.accessToken;
     }
+    if (current.refreshToken === void 0) {
+      throw new AgentLinkError("not_linked", REMOTE_AGENT_TOKEN_EXPIRED_MESSAGE);
+    }
     const response = await safeFetch(
       args.fetchImpl ?? publicFetch,
       apiEndpoint(currentLink.apiBase, "/oauth/token"),
@@ -1597,12 +1666,18 @@ function parseTokens(value) {
   if (!isRecord(parsed)) return void 0;
   const accessToken = stringField(parsed, "accessToken");
   const refreshToken = stringField(parsed, "refreshToken");
+  const refreshable = parsed.refreshable;
   const expiresAt = numberField(parsed, "expiresAt");
   const scopes = parsed.scopes;
-  if (accessToken === void 0 || refreshToken === void 0 || expiresAt === void 0 || !Array.isArray(scopes) || scopes.some((scope) => typeof scope !== "string")) {
+  if (accessToken === void 0 || expiresAt === void 0 || !Array.isArray(scopes) || scopes.some((scope) => typeof scope !== "string") || (refreshToken === void 0 ? refreshable !== false : refreshable === false)) {
     return void 0;
   }
-  return { accessToken, refreshToken, expiresAt, scopes };
+  return {
+    accessToken,
+    ...refreshToken === void 0 ? {} : { refreshToken },
+    expiresAt,
+    scopes
+  };
 }
 function withBearer(init, accessToken) {
   const headers = new Headers(init?.headers);
@@ -1702,6 +1777,7 @@ export {
   AGENT_LINK_STATEMENT,
   AgentLinkError,
   DEFAULT_AGENT_SCOPES,
+  REMOTE_AGENT_TOKEN_EXPIRED_MESSAGE,
   agentAccessToken,
   agentFetch,
   agentSecretAccounts,
@@ -1710,6 +1786,7 @@ export {
   renameAgentLinkWallet,
   saveAgentLink,
   startDeviceLink,
+  trustedLinkBearer,
   withAgentCredentialLock
 };
 //# sourceMappingURL=agent-link.js.map