agent-led-growth 0.8.0 → 0.8.2

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-led-growth",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "Score: evals for agents as customers. Runs a real agent through signup, key and first call on your product, before you ship. Track, the analytics half, measures which agents convert after.",
   "author": {
     "name": "Kat Laszlo",

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.8.2 (2026-10-24)
+
+- `alg connect`: Track's /connect page no longer fills in the code, so the CLI now asks you to type the code it prints on that page, check where the page says the request came from, then approve. The code is printed on its own line. The CLI opens the `verification_url` Track returns as it is and does not expect the code in it.
+- Dependency: `undici` (through `@vercel/sandbox`) moves to 7.30.1, closing three high advisories (GHSA-4qv8-2p9j-2685, GHSA-f72v-6w45-q472, GHSA-xjj6-f33q-929c). `npm audit` reports 0 vulnerabilities.
+
+## 0.8.1 (2026-10-23)
+
+- README only: the source link points at the public repository, agent-led-growth-cli, and the install prompt appears once, as "Add Track to this API".
+
 ## 0.8.0 (2026-10-23)
 
 - `alg connect`: sets up Track's key without copying a secret by hand. It prints a code and opens the browser; once approved it writes `AGENT_TRAFFIC_KEY` (and `AGENT_TRAFFIC_PROJECT_ID`, not a secret) to `.env` or `--env-file`, replacing existing lines for those names and keeping the rest, and creates a new file with mode 0600. It warns when the file is not gitignored in a git repo and offers to add it. In a folder linked to Vercel, or with `--vercel`, it offers to run `vercel env add AGENT_TRAFFIC_KEY production` with the key on stdin. The key is never printed, logged or put on a command line. `--endpoint` or `AGENT_TRAFFIC_ENDPOINT` points it at another Track server, which is then written as `AGENT_TRAFFIC_ENDPOINT`.

package/README.md

@@ -97,14 +97,10 @@ A passing test says an agent *can* become a customer. [Track](https://alg.katrin
 | Manage | not measured yet |
 
 ```
-Add agent traffic to this API: read https://alg.katrinalaszlo.com/SKILL.md and follow it.
+Add Track to this API: read https://alg.katrinalaszlo.com/SKILL.md and follow it.
 ```
 
-```
-Add agent traffic to this API: read https://alg.katrinalaszlo.com/SKILL.md and follow it.
-```
-
-To set up the key yourself, run this in your API's folder:
+If you already have a Track account, you can set up the key yourself instead. Run this in your API's folder:
 
 ```bash
 npx agent-led-growth connect
@@ -273,4 +269,4 @@ npx agent-led-growth test --json --yes     # creates a real account; ask the dev
 
 Each fix prompt is written for a coding agent: read `files.prompts[0]`, make the change, run its acceptance tests, deploy, run `check` again.
 
-Source: https://github.com/katrinalaszlo/score (development) and https://github.com/katrinalaszlo/agent-led-growth-cli (the published build, where issues go). MIT.
+Source and issues: https://github.com/katrinalaszlo/agent-led-growth-cli. MIT.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-led-growth",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "Score: evals for agents as customers. Runs a real agent through signup, key and first call on your product, before you ship. Track, the analytics half, measures which agents convert after.",
   "type": "module",
   "bin": {

package/src/connect/index.js

@@ -155,11 +155,15 @@ export async function connect({ endpoint, envFile, vercel, cwd, interactive, fet
   say(`  ${bold("alg connect")} · ${new URL(endpoint).host}`);
   const start = await startDeviceLogin({ endpoint, fetchImpl });
   say("");
-  say(`  Your code: ${bold(start.user_code)}`);
   const opened = openBrowser(start.verification_url, run);
   if (opened.error || opened.status) say(`  Open ${start.verification_url} in your browser.`);
   else say(`  Opened ${start.verification_url} in your browser.`);
-  say(`  Check the code there matches, then approve. ${dim("Waiting…")}`);
+  say("");
+  say("  Type this code on that page:");
+  say("");
+  say(`      ${bold(start.user_code)}`);
+  say("");
+  say(`  Check where the page says the request came from, then approve. ${dim("Waiting…")}`);
 
   const polled = await pollForKey({ endpoint, start, fetchImpl, sleep, now });
   if (!polled.ok) {