@vatio-ai/cli 0.52.0 → 0.53.0

package/README.md

@@ -71,7 +71,7 @@ kb write|cat|rm-entry        Entries, from a file or stdin
 kb follow|unfollow|refresh   Read a site into a base, nightly
 
 secrets list|set|rm          Credentials your tools read
-tokens list|create|revoke    Publishable tokens for the widget and the SDK
+tokens list|create|origins|revoke  Publishable tokens and the origins each accepts
 widget [--env NAME]          What the platform enforces, and the tokens there are
 auth --new-key               Keypair that signs the visitor's JWT
 

package/lib/api-client.mjs

@@ -151,12 +151,17 @@ export class ApiClient extends HttpClient {
     return this.get("/publishable_tokens");
   }
 
-  createPublishableToken({ environment, label = null }) {
+  createPublishableToken({ environment, label = null, allowedOrigins = [] }) {
     const body = { environment };
     if (String(label ?? "").trim() !== "") body.label = String(label).trim();
+    if (allowedOrigins.length > 0) body.allowed_origins = allowedOrigins;
     return this.post("/publishable_tokens", body);
   }
 
+  setPublishableTokenOrigins({ prefix, allowedOrigins }) {
+    return this.patch(`/publishable_tokens/${encode(prefix)}`, { allowed_origins: allowedOrigins });
+  }
+
   revokePublishableToken({ prefix }) {
     return this.delete(`/publishable_tokens/${encode(prefix)}`);
   }

package/lib/commands/deploy.mjs

@@ -106,8 +106,8 @@ export async function push(config, args) {
   await ensureAuthorized(config);
 
   // The remote has to exist before the workspace can be checked: the slug is in
-  // the URL of the call that checks it. It is created unnamed -- the push a few
-  // lines down applies `business.name` from the manifest anyway.
+  // the URL of the call that checks it. It is created unnamed; the display name
+  // is a workspace setting edited in the console, not part of a push.
   const clients = workspacesClient(config);
   const created = !(await clients.workspaceExists(workspace));
   if (created) {

package/lib/commands/mcp.mjs

@@ -106,17 +106,18 @@ const COMMANDS = {
     annotations: { readOnlyHint: false, openWorldHint: true }
   },
   tokens: {
-    usage: "list | create [--env NAME] [--label NAME] | revoke PREFIX",
+    usage: "list | create [--env NAME] [--label NAME] [--origin URL]... | origins PREFIX URL... | revoke PREFIX",
     summary:
       "Publishable tokens for the widget and anything built on the SDK. A created token is shown in " +
-      "full exactly once.",
+      "full exactly once. Each token works only from its own allowed origins (--origin, repeatable, or " +
+      "`origins PREFIX URL...` to replace the list); the install snippet's token is edited in the console.",
     annotations: { readOnlyHint: false }
   },
   widget: {
     usage: "[--env NAME]",
     summary:
-      "What the platform will actually enforce for the widget, the origin allowlist, and the tokens " +
-      "that exist. Read-only: vatio.yml owns every field, so push is what changes it.",
+      "What the platform will actually enforce for the widget, the origins its tokens accept, and the " +
+      "tokens that exist. Read-only: the look is edited on the console's Brand page, whose URL it prints.",
     annotations: { readOnlyHint: true }
   },
   whatsapp: {

package/lib/commands/misc.mjs

@@ -2,7 +2,6 @@
 
 import { existsSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
-import { stringify as stringifyYaml } from "yaml";
 
 import { KEYS, SLUG_FORMAT } from "../config.mjs";
 import { MANIFEST_FILE, manifestPath } from "../workspace.mjs";
@@ -110,10 +109,13 @@ export async function init(config, args) {
   }
 
   const manifest = join(target, MANIFEST_FILE);
-  writeFileSync(manifest, starterManifest(slug, name));
+  writeFileSync(manifest, starterManifest(slug));
 
   console.log(`Wrote ${manifest}`);
   if (!authorized) console.log(`Local only for now — \`vatio push\` is what creates ${slug} on the platform.`);
+  if (!authorized && String(name ?? "").trim() !== "") {
+    console.log("The display name is set in the console (the workspace's Brand page) once it exists.");
+  }
   console.log("");
   console.log("Next:");
   console.log(`  edit ${MANIFEST_FILE}, then \`vatio push\` and \`vatio publish\``);
@@ -121,14 +123,10 @@ export async function init(config, args) {
 }
 
 // The smallest file that deploys: which workspace, and what the agent does.
-// The slug is already validated as a slug, so it needs no quoting; a display
-// name is whatever the developer typed, so it goes through the YAML emitter.
-function starterManifest(slug, name) {
+// The slug is already validated as a slug, so it needs no quoting. The display
+// name is not here: it is a workspace setting, edited in the console.
+function starterManifest(slug) {
   const lines = ["# Which Vatio workspace this directory deploys to.", `workspace: ${slug}`, ""];
-  if (String(name ?? "").trim() !== "") {
-    lines.push(stringifyYaml({ business: { name: String(name).trim() } }).trimEnd());
-    lines.push("");
-  }
   lines.push("agent:");
   lines.push("  instructions: |");
   lines.push("    Describe what this agent does and how it should answer.");

package/lib/commands/workspace-admin.mjs

@@ -1,10 +1,9 @@
 // secrets / tokens / widget — the three things a workspace has that its
 // manifest deliberately does not carry.
 //
-// A secret is a credential, a publishable token is a credential, and the widget
-// screen is a read of what the platform will actually enforce. None of them
-// belong in a file that gets committed, which is why none of them are in
-// vatio.yml and all of them are here.
+// A secret is a credential, a publishable token is a credential (with the
+// origins it accepts), and the widget screen is a read of what the platform
+// will actually enforce, edited in the console. None of them are in vatio.yml.
 
 import { deployClient } from "./deploy.mjs";
 import { askSecret, fail, paint, takeValue } from "../support.mjs";
@@ -66,9 +65,19 @@ export async function secrets(config, args) {
   fail("Usage: vatio secrets list|set KEY [VALUE]|rm KEY");
 }
 
+// Repeatable: `--origin https://a.com --origin https://b.com`.
+function takeOrigins(args) {
+  const origins = [];
+  for (let value = takeValue(args, "--origin"); value !== null; value = takeValue(args, "--origin")) {
+    origins.push(value);
+  }
+  return origins;
+}
+
 export async function tokens(config, args) {
   const environment = environmentOption(args, "live");
   const label = takeValue(args, "--label") ?? takeValue(args, "-l");
+  const origins = takeOrigins(args);
   const workspace = config.resolveWorkspaceRequired();
   const client = deployClient(config, workspace);
   const sub = args.shift() ?? "list";
@@ -78,7 +87,7 @@ export async function tokens(config, args) {
     const list = asArray(payload.publishable_tokens);
     if (list.length === 0) {
       console.log(`No publishable tokens on workspace ${workspace}`);
-      console.log("  Create one: vatio tokens create --env live");
+      console.log("  Create one: vatio tokens create --env live --origin https://your-site.com");
       return;
     }
     console.log(`Publishable tokens on workspace ${workspace} (${list.length}):`);
@@ -86,12 +95,14 @@ export async function tokens(config, args) {
       const parts = [token.key_prefix ?? token.prefix, token.environment];
       if (token.label) parts.push(token.label);
       console.log(`  ${parts.filter(Boolean).join("  ")}`);
+      console.log(`    origins: ${originsLine(token.allowed_origins)}`);
     }
     return;
   }
   if (sub === "create") {
-    const payload = await client.createPublishableToken({ environment, label });
+    const payload = await client.createPublishableToken({ environment, label, allowedOrigins: origins });
     console.log(`Created a publishable token for ${environment} on workspace ${workspace}`);
+    console.log(`  origins: ${originsLine(payload.allowed_origins)}`);
     console.log("");
     // Shown in full exactly once: the platform stores a digest, so this is the
     // only moment the value exists anywhere the developer can copy it.
@@ -100,6 +111,13 @@ export async function tokens(config, args) {
     console.log("Copy it now — it is not shown again.");
     return;
   }
+  if (sub === "origins") {
+    const prefix = args.shift();
+    if (!prefix) fail("Usage: vatio tokens origins PREFIX [URL...]   (no URL clears the list)");
+    const payload = await client.setPublishableTokenOrigins({ prefix, allowedOrigins: args.splice(0) });
+    console.log(`Origins for ${prefix}: ${originsLine(payload.allowed_origins)}`);
+    return;
+  }
   if (sub === "revoke") {
     const prefix = args.shift();
     if (!prefix) fail("Usage: vatio tokens revoke PREFIX");
@@ -108,7 +126,16 @@ export async function tokens(config, args) {
     return;
   }
 
-  fail("Usage: vatio tokens list|create [--env live|preview|NAME] [--label NAME]|revoke PREFIX");
+  fail(
+    "Usage: vatio tokens list|create [--env live|preview|NAME] [--label NAME] [--origin URL]...|" +
+      "origins PREFIX URL...|revoke PREFIX"
+  );
+}
+
+// An empty list is not "anywhere": only Vatio's own pages can use the token.
+function originsLine(origins) {
+  const list = asArray(origins);
+  return list.length > 0 ? list.join(", ") : "none (add one with `vatio tokens origins PREFIX URL`)";
 }
 
 export async function widget(config, args) {
@@ -118,8 +145,9 @@ export async function widget(config, args) {
 
   console.log(JSON.stringify(payload, null, 2));
   console.log("");
-  console.log("The widget's look comes from vatio.yml's `widget:` block — edit it and push.");
-  console.log(`A token for this environment: vatio tokens create --env ${environment}`);
+  console.log(`The widget's look is edited in the console: ${payload.brand_url ?? "the workspace's Brand page"}`);
+  console.log(`Each token's allowed origins: ${payload.tokens_url ?? "the workspace's Tokens page"}`);
+  console.log(`A token for this environment: vatio tokens create --env ${environment} --origin https://your-site.com`);
 }
 
 function asArray(value) {

package/lib/help.mjs

@@ -57,8 +57,11 @@ flag, the directory decides.
   Credentials and the widget:
     secrets list|set KEY [VALUE]|rm KEY
                                Without VALUE, set asks for it with the input hidden
-    tokens list|create [--env NAME] [--label NAME]|revoke PREFIX
-    widget [--env NAME]        What the platform enforces, and the tokens there are
+    tokens list|create [--env NAME] [--label NAME] [--origin URL]...|revoke PREFIX
+    tokens origins PREFIX URL...
+                               The origins a token is accepted from (replaces the list)
+    widget [--env NAME]        What the platform enforces, and the tokens there are;
+                               the look is edited in the console
     auth --new-key             Keypair that signs the JWT saying who a visitor is
 
   Channels (your own account serves live; the shared preview always serves preview):

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vatio-ai/cli",
-  "version": "0.52.0",
+  "version": "0.53.0",
   "description": "Vatio CLI — deploy and manage Vatio agent workspaces",
   "keywords": [
     "vatio",