agent-relay 11.8.0 → 11.8.1

package/dist/cli/commands/observer.js

@@ -0,0 +1,182 @@
+/**
+ * `agent-relay observer` — mint a scoped, read-only observer link.
+ *
+ * The engine rejects a workspace key (`rk_live_`) on the realtime endpoint, and
+ * a workspace key is an administrative credential that has no business in a URL
+ * or a terminal transcript. This command mints a scoped `ot_live_` token instead
+ * and prints the observer URL built from it, so "let a human follow along" is a
+ * single command rather than a hand-rolled API call.
+ */
+import { InvalidArgumentError } from 'commander';
+import { createObserverToken, listObserverTokens, revokeObserverToken, } from '@agent-relay/sdk';
+import { DEFAULT_OBSERVER_EXPIRES, DEFAULT_OBSERVER_URL, observerUrl, resolveObserverBaseUrl, } from '../lib/observer-url.js';
+import { printJson, runSdk, withSdkDefaults } from '../lib/sdk-command.js';
+import { resolveBaseUrl, resolveWorkspaceKey } from '../lib/sdk-client.js';
+const MAX_CHANNEL_FILTERS = 50;
+function withObserverDefaults(overrides = {}) {
+    return {
+        ...withSdkDefaults(overrides),
+        createObserverToken,
+        listObserverTokens,
+        revokeObserverToken,
+        now: () => Date.now(),
+        randomSuffix: () => Math.random().toString(36).slice(2, 10),
+        ...overrides,
+    };
+}
+/**
+ * Parse a `30m` / `24h` / `7d` duration into milliseconds. Bare digits are
+ * rejected rather than guessed at — `--expires 24` is far more likely to mean
+ * hours than milliseconds, and silently picking either would be wrong.
+ */
+export function parseDuration(value) {
+    const match = /^(\d+)([mhd])$/.exec(value.trim());
+    if (!match) {
+        throw new InvalidArgumentError('Expected a duration like 30m, 24h, or 7d.');
+    }
+    const amount = Number(match[1]);
+    if (amount <= 0) {
+        throw new InvalidArgumentError('Expected a positive duration.');
+    }
+    const unitMs = { m: 60_000, h: 3_600_000, d: 86_400_000 }[match[2]];
+    const total = amount * unitMs;
+    // The engine caps nothing here, but a token outliving the workspace is a
+    // liability rather than a convenience.
+    if (total > 90 * 86_400_000) {
+        throw new InvalidArgumentError('Expected a duration of 90d or less.');
+    }
+    return total;
+}
+function parseChannels(value) {
+    const names = value
+        .split(',')
+        .map((name) => name.trim().replace(/^#/, ''))
+        .filter(Boolean);
+    if (names.length === 0) {
+        throw new InvalidArgumentError('Expected at least one channel name.');
+    }
+    // Collapse duplicates before enforcing the cap: `--channels a,a,a` is one
+    // filter, and rejecting it for exceeding a limit it never reaches would be
+    // surprising.
+    const unique = [...new Set(names)];
+    if (unique.length > MAX_CHANNEL_FILTERS) {
+        throw new InvalidArgumentError(`Expected at most ${MAX_CHANNEL_FILTERS} channel names.`);
+    }
+    return unique;
+}
+/**
+ * Credentials shared by every observer subcommand. `baseUrl` is spread rather
+ * than passed as `undefined` because the SDK options treat an explicit
+ * `undefined` and an absent key differently.
+ */
+function connection(options) {
+    const baseUrl = resolveBaseUrl({ baseUrl: options.baseUrl });
+    return {
+        workspaceKey: resolveWorkspaceKey({
+            workspaceKey: options.workspaceKey,
+        }),
+        ...(baseUrl ? { baseUrl } : {}),
+    };
+}
+function describeToken(token) {
+    return {
+        id: token.id,
+        name: token.name,
+        status: token.status,
+        expiresAt: token.expiresAt,
+        createdAt: token.createdAt,
+        ...(token.lastUsedAt === undefined ? {} : { lastUsedAt: token.lastUsedAt }),
+    };
+}
+export function registerObserverCommands(program, overrides = {}) {
+    const deps = withObserverDefaults(overrides);
+    const env = process.env;
+    const group = program
+        .command('observer')
+        .description('Mint a read-only observer link so a human can follow this workspace');
+    group
+        .option('--workspace-key <key>', 'Workspace key (defaults to RELAY_WORKSPACE_KEY or the active workspace)')
+        .option('--base-url <url>', 'Override the engine API base URL (defaults to RELAY_BASE_URL)')
+        .option('--observer-url <url>', `Observer dashboard URL (defaults to ${DEFAULT_OBSERVER_URL})`)
+        .option('--name <name>', 'Token name (defaults to a generated unique name)')
+        .option('--channels <names>', 'Restrict to a comma-separated list of channels', parseChannels)
+        .option('--include-dms', 'Include agent DM traffic (excluded by default)')
+        .option('--expires <duration>', `Token lifetime, e.g. 30m, 24h, 7d (default ${DEFAULT_OBSERVER_EXPIRES})`, parseDuration)
+        .option('--json', 'Output the token metadata and URL as JSON')
+        .action(async (options) => {
+        await runSdk(deps, async () => {
+            const lifetimeMs = options.expires ?? parseDuration(DEFAULT_OBSERVER_EXPIRES);
+            const name = options.name?.trim() || `observer-cli-${deps.randomSuffix()}`;
+            // Resolve the dashboard URL BEFORE minting. A bad `--observer-url` or
+            // `RELAY_OBSERVER_URL` would otherwise mint a live 24-hour token and
+            // then throw before printing it, leaving an active credential the
+            // caller never saw.
+            const observerBase = resolveObserverBaseUrl(options.observerUrl, env);
+            const token = await deps.createObserverToken({
+                ...connection(options),
+                name,
+                description: 'Minted by `agent-relay observer` for read-only follow-along',
+                filters: {
+                    includeDms: options.includeDms === true,
+                    ...(options.channels ? { channelNames: options.channels } : {}),
+                },
+                expiresAt: new Date(deps.now() + lifetimeMs).toISOString(),
+            });
+            if (!token.token) {
+                throw new Error('Observer token created, but the response did not include token material.');
+            }
+            const url = observerUrl(observerBase, token.token);
+            if (options.json) {
+                printJson(deps, { ...describeToken(token), url });
+                return;
+            }
+            deps.log(url);
+            deps.log('');
+            deps.log(`Read-only. Expires ${token.expiresAt ?? 'never'}.`);
+            deps.log(options.includeDms === true ? 'Includes agent DMs.' : 'Channels only — agent DMs are excluded.');
+            deps.log(`Revoke with: agent-relay observer revoke ${token.id}`);
+        });
+    });
+    group
+        .command('list')
+        .description('List observer tokens for this workspace (token material is never shown)')
+        .option('--workspace-key <key>', 'Workspace key (defaults to RELAY_WORKSPACE_KEY or the active workspace)')
+        .option('--base-url <url>', 'Override the engine API base URL')
+        .option('--json', 'Output as JSON')
+        .action(async (_options, command) => {
+        // The parent `observer` group declares the same flag names, and Commander
+        // resolves a repeated option onto the ancestor that declared it first — so
+        // the local opts object here is empty and `--json` / `--workspace-key`
+        // would be silently dropped. Read the merged view instead.
+        const options = command.optsWithGlobals();
+        await runSdk(deps, async () => {
+            const tokens = await deps.listObserverTokens(connection(options));
+            if (options.json) {
+                printJson(deps, tokens.map(describeToken));
+                return;
+            }
+            if (tokens.length === 0) {
+                deps.log('No observer tokens.');
+                return;
+            }
+            for (const token of tokens) {
+                deps.log(`${token.id}  ${token.status}  expires ${token.expiresAt ?? 'never'}  ${token.name}`);
+            }
+        });
+    });
+    group
+        .command('revoke')
+        .description('Revoke an observer token by id')
+        .argument('<id>', 'Observer token id')
+        .option('--workspace-key <key>', 'Workspace key (defaults to RELAY_WORKSPACE_KEY or the active workspace)')
+        .option('--base-url <url>', 'Override the engine API base URL')
+        .action(async (id, _options, command) => {
+        // See the note on `observer list` — read merged options, not local ones.
+        const options = command.optsWithGlobals();
+        await runSdk(deps, async () => {
+            await deps.revokeObserverToken({ ...connection(options), id });
+            deps.log(`Revoked ${id}.`);
+        });
+    });
+}
+//# sourceMappingURL=observer.js.map

package/dist/cli/commands/observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer.js","sourceRoot":"","sources":["../../../src/cli/commands/observer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAuB,MAAM,uBAAuB,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3E,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAW/B,SAAS,oBAAoB,CAC3B,YAAkD,EAAE;IAEpD,OAAO;QACL,GAAG,eAAe,CAAC,SAAS,CAAC;QAC7B,mBAAmB;QACnB,kBAAkB;QAClB,mBAAmB;QACnB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QACrB,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3D,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,oBAAoB,CAAC,+BAA+B,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,CAAoB,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAC9B,yEAAyE;IACzE,uCAAuC;IACvC,IAAI,KAAK,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;SAC5C,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,CAAC;IACD,0EAA0E;IAC1E,2EAA2E;IAC3E,cAAc;IACd,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACxC,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,mBAAmB,iBAAiB,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,OAAgC;IAClD,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAA6B,EAAE,CAAC,CAAC;IACnF,OAAO;QACL,YAAY,EAAE,mBAAmB,CAAC;YAChC,YAAY,EAAE,OAAO,CAAC,YAAkC;SACzD,CAAC;QACF,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAgB,EAChB,YAAkD,EAAE;IAEpD,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAExB,MAAM,KAAK,GAAG,OAAO;SAClB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,qEAAqE,CAAC,CAAC;IAEtF,KAAK;SACF,MAAM,CACL,uBAAuB,EACvB,yEAAyE,CAC1E;SACA,MAAM,CAAC,kBAAkB,EAAE,+DAA+D,CAAC;SAC3F,MAAM,CAAC,sBAAsB,EAAE,uCAAuC,oBAAoB,GAAG,CAAC;SAC9F,MAAM,CAAC,eAAe,EAAE,kDAAkD,CAAC;SAC3E,MAAM,CAAC,oBAAoB,EAAE,gDAAgD,EAAE,aAAa,CAAC;SAC7F,MAAM,CAAC,eAAe,EAAE,gDAAgD,CAAC;SACzE,MAAM,CACL,sBAAsB,EACtB,8CAA8C,wBAAwB,GAAG,EACzE,aAAa,CACd;SACA,MAAM,CAAC,QAAQ,EAAE,2CAA2C,CAAC;SAC7D,MAAM,CAAC,KAAK,EAAE,OAAgC,EAAE,EAAE;QACjD,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,UAAU,GAAI,OAAO,CAAC,OAA8B,IAAI,aAAa,CAAC,wBAAwB,CAAC,CAAC;YACtG,MAAM,IAAI,GAAI,OAAO,CAAC,IAA2B,EAAE,IAAI,EAAE,IAAI,gBAAgB,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YAEnG,sEAAsE;YACtE,qEAAqE;YACrE,kEAAkE;YAClE,oBAAoB;YACpB,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,CAAC,WAAiC,EAAE,GAAG,CAAC,CAAC;YAE5F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC;gBAC3C,GAAG,UAAU,CAAC,OAAO,CAAC;gBACtB,IAAI;gBACJ,WAAW,EAAE,6DAA6D;gBAC1E,OAAO,EAAE;oBACP,UAAU,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;oBACvC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,QAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5E;gBACD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE;aAC3D,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;YAC9F,CAAC;YAED,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAEnD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,sBAAsB,KAAK,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,CAAC;YAC9D,IAAI,CAAC,GAAG,CACN,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,yCAAyC,CAChG,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,4CAA4C,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,yEAAyE,CAAC;SACtF,MAAM,CACL,uBAAuB,EACvB,yEAAyE,CAC1E;SACA,MAAM,CAAC,kBAAkB,EAAE,kCAAkC,CAAC;SAC9D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,QAAiC,EAAE,OAAgB,EAAE,EAAE;QACpE,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,2DAA2D;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,EAA6B,CAAC;QACrE,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YAElE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,SAAS,IAAI,OAAO,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACjG,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,gCAAgC,CAAC;SAC7C,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;SACrC,MAAM,CACL,uBAAuB,EACvB,yEAAyE,CAC1E;SACA,MAAM,CAAC,kBAAkB,EAAE,kCAAkC,CAAC;SAC9D,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,QAAiC,EAAE,OAAgB,EAAE,EAAE;QAChF,yEAAyE;QACzE,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,EAA6B,CAAC;QACrE,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/lib/observer-url.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Observer dashboard URL construction, shared by the `observer` command group
+ * and the `get_observer_url` MCP tool so both produce identical links.
+ *
+ * The credential rides in the `?key=` query string because that is what the
+ * observer dashboard reads. That is precisely why the value must always be a
+ * scoped, read-only `ot_live_` token and never a workspace key: query strings
+ * land in browser history, referrer headers, and proxy logs.
+ */
+/** Where the hosted observer dashboard lives. */
+export declare const DEFAULT_OBSERVER_URL = "https://agentrelay.com/observer";
+/** Default token lifetime for a link meant to be pasted into chat. */
+export declare const DEFAULT_OBSERVER_EXPIRES = "24h";
+/**
+ * Resolve the observer dashboard base URL: explicit flag, then
+ * `RELAY_OBSERVER_URL` (for self-hosted or staging dashboards), then the
+ * hosted default.
+ *
+ * @param explicit - Value passed on the command line, if any
+ * @param env - Environment to read `RELAY_OBSERVER_URL` from
+ * @returns A validated absolute URL
+ */
+export declare function resolveObserverBaseUrl(explicit: string | undefined, env?: NodeJS.ProcessEnv): string;
+/**
+ * Build the observer URL for a token.
+ *
+ * @param baseUrl - Observer dashboard base URL
+ * @param token - Scoped `ot_live_` observer token
+ * @returns The full observer URL
+ */
+export declare function observerUrl(baseUrl: string, token: string): string;
+//# sourceMappingURL=observer-url.d.ts.map

package/dist/cli/lib/observer-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer-url.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/observer-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,iDAAiD;AACjD,eAAO,MAAM,oBAAoB,oCAAoC,CAAC;AAEtE,sEAAsE;AACtE,eAAO,MAAM,wBAAwB,QAAQ,CAAC;AAE9C;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAmBR;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CASlE"}

package/dist/cli/lib/observer-url.js

@@ -0,0 +1,61 @@
+/**
+ * Observer dashboard URL construction, shared by the `observer` command group
+ * and the `get_observer_url` MCP tool so both produce identical links.
+ *
+ * The credential rides in the `?key=` query string because that is what the
+ * observer dashboard reads. That is precisely why the value must always be a
+ * scoped, read-only `ot_live_` token and never a workspace key: query strings
+ * land in browser history, referrer headers, and proxy logs.
+ */
+/** Where the hosted observer dashboard lives. */
+export const DEFAULT_OBSERVER_URL = 'https://agentrelay.com/observer';
+/** Default token lifetime for a link meant to be pasted into chat. */
+export const DEFAULT_OBSERVER_EXPIRES = '24h';
+/**
+ * Resolve the observer dashboard base URL: explicit flag, then
+ * `RELAY_OBSERVER_URL` (for self-hosted or staging dashboards), then the
+ * hosted default.
+ *
+ * @param explicit - Value passed on the command line, if any
+ * @param env - Environment to read `RELAY_OBSERVER_URL` from
+ * @returns A validated absolute URL
+ */
+export function resolveObserverBaseUrl(explicit, env = process.env) {
+    const value = explicit?.trim() || env.RELAY_OBSERVER_URL?.trim() || DEFAULT_OBSERVER_URL;
+    let parsed;
+    try {
+        // Fail here rather than emitting a malformed link the caller only discovers
+        // after pasting it somewhere public.
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error(`Invalid observer URL: ${value}`);
+    }
+    // The token is appended to this URL's query string, so the scheme decides
+    // where a live credential ends up. `new URL` happily accepts `data:`,
+    // `javascript:`, and arbitrary custom schemes; restrict to the two that
+    // actually address an observer dashboard so a bad `RELAY_OBSERVER_URL`
+    // cannot turn the generated link into a token-exfiltration vector.
+    if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
+        throw new Error(`Observer URL must be http or https: ${value}`);
+    }
+    return value;
+}
+/**
+ * Build the observer URL for a token.
+ *
+ * @param baseUrl - Observer dashboard base URL
+ * @param token - Scoped `ot_live_` observer token
+ * @returns The full observer URL
+ */
+export function observerUrl(baseUrl, token) {
+    if (!token.startsWith('ot_live_')) {
+        // A workspace key in this position would be an administrative credential in
+        // a shareable URL — the exact failure this command exists to prevent.
+        throw new Error('Observer URLs require a scoped observer token (ot_live_...).');
+    }
+    const url = new URL(baseUrl);
+    url.searchParams.set('key', token);
+    return url.toString();
+}
+//# sourceMappingURL=observer-url.js.map

package/dist/cli/lib/observer-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer-url.js","sourceRoot":"","sources":["../../../src/cli/lib/observer-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,iDAAiD;AACjD,MAAM,CAAC,MAAM,oBAAoB,GAAG,iCAAiC,CAAC;AAEtE,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAA4B,EAC5B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC;IACzF,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,4EAA4E;QAC5E,qCAAqC;QACrC,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,0EAA0E;IAC1E,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,mEAAmE;IACnE,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,KAAa;IACxD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC"}

package/dist/index.cjs

@@ -182,6 +182,7 @@ __export(index_exports, {
   MessageReadPredicate: () => MessageReadPredicate,
   OBSERVABILITY_UNAVAILABLE: () => OBSERVABILITY_UNAVAILABLE,
   RELAYCAST_SDK_VERSION: () => RELAYCAST_SDK_VERSION,
+  RELAY_OBSERVER_SCOPES: () => RELAY_OBSERVER_SCOPES,
   RELAY_SERVICE_FAILURE_MESSAGE: () => RELAY_SERVICE_FAILURE_MESSAGE,
   RelayCapabilityError: () => RelayCapabilityError,
   RelayError: () => RelayError,
@@ -214,6 +215,7 @@ __export(index_exports, {
   createLogger: () => createLogger,
   createNotifyHandler: () => createNotifyHandler,
   createObserverEventSource: () => createObserverEventSource,
+  createObserverToken: () => createObserverToken,
   createRealtimeClient: () => createRealtimeClient,
   createRequestEnvelope: () => createRequestEnvelope,
   createRequestHandler: () => createRequestHandler,
@@ -246,6 +248,7 @@ __export(index_exports, {
   isPlaceholderTargetFast: () => isPlaceholderTargetFast,
   isSpawnOrReleaseCommandFast: () => isSpawnOrReleaseCommandFast,
   isValidAgentName: () => isValidAgentName,
+  listObserverTokens: () => listObserverTokens,
   logAndTraceError: () => logAndTraceError,
   logRelayHandlerError: () => logRelayHandlerError,
   mapModelToCli: () => mapModelToCli,
@@ -280,6 +283,7 @@ __export(index_exports, {
   resolveAgentName: () => resolveAgentName,
   resolveAgentToken: () => resolveAgentToken,
   resolveCommand: () => resolveCommand,
+  revokeObserverToken: () => revokeObserverToken,
   routerLog: () => routerLog,
   safeRelayErrorMessage: () => safeRelayErrorMessage,
   stripAnsiFast: () => stripAnsiFast,
@@ -295,7 +299,7 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // ../../node_modules/@relaycast/sdk/dist/version.js
-var SDK_VERSION = "8.1.0";
+var SDK_VERSION = "8.1.3";
 
 // ../../node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -21453,6 +21457,45 @@ var RelaycastMessagingClient = class {
 
 // ../sdk/dist/messaging/thin-client.js
 var RELAYCAST_SDK_VERSION = SDK_VERSION;
+var RELAY_OBSERVER_SCOPES = [
+  "stream:read",
+  "messages:read",
+  "threads:read",
+  "dms:read",
+  "channels:read",
+  "search:read",
+  "agents:read",
+  "nodes:read",
+  "deliveries:read",
+  "activity:read",
+  "files:read",
+  "reactions:read"
+];
+function observerTokenClient(workspaceKey, options) {
+  return new RelayCast(clientConfig(workspaceKey, options));
+}
+async function createObserverToken(options) {
+  const client = observerTokenClient(options.workspaceKey, options);
+  return client.observerTokens.create({
+    name: options.name,
+    ...options.description === void 0 ? {} : { description: options.description },
+    scopes: [...options.scopes ?? RELAY_OBSERVER_SCOPES],
+    // `include_dms` defaults to false server-side, but send it explicitly so the
+    // token's stored filters record the decision rather than an absence.
+    filters: {
+      includeDms: options.filters?.includeDms === true,
+      ...options.filters?.channelNames?.length ? { channelNames: options.filters.channelNames } : {},
+      ...options.filters?.agentIds?.length ? { agentIds: options.filters.agentIds } : {}
+    },
+    ...options.expiresAt === void 0 ? {} : { expiresAt: options.expiresAt }
+  });
+}
+async function listObserverTokens(options) {
+  return observerTokenClient(options.workspaceKey, options).observerTokens.list();
+}
+async function revokeObserverToken(options) {
+  await observerTokenClient(options.workspaceKey, options).observerTokens.revoke(options.id);
+}
 function pickTelemetryOverrides(options) {
   return {
     ...options.originActor === void 0 ? {} : { originActor: options.originActor },
@@ -24140,6 +24183,7 @@ function generateRequestId(prefix = "") {
   MessageReadPredicate,
   OBSERVABILITY_UNAVAILABLE,
   RELAYCAST_SDK_VERSION,
+  RELAY_OBSERVER_SCOPES,
   RELAY_SERVICE_FAILURE_MESSAGE,
   RelayCapabilityError,
   RelayError,
@@ -24172,6 +24216,7 @@ function generateRequestId(prefix = "") {
   createLogger,
   createNotifyHandler,
   createObserverEventSource,
+  createObserverToken,
   createRealtimeClient,
   createRequestEnvelope,
   createRequestHandler,
@@ -24204,6 +24249,7 @@ function generateRequestId(prefix = "") {
   isPlaceholderTargetFast,
   isSpawnOrReleaseCommandFast,
   isValidAgentName,
+  listObserverTokens,
   logAndTraceError,
   logRelayHandlerError,
   mapModelToCli,
@@ -24238,6 +24284,7 @@ function generateRequestId(prefix = "") {
   resolveAgentName,
   resolveAgentToken,
   resolveCommand,
+  revokeObserverToken,
   routerLog,
   safeRelayErrorMessage,
   stripAnsiFast,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-relay",
-  "version": "11.8.0",
+  "version": "11.8.1",
   "description": "Real-time agent-to-agent communication system",
   "type": "module",
   "main": "dist/index.cjs",
@@ -43,14 +43,14 @@
     "pack:validate": "npm pack --dry-run"
   },
   "dependencies": {
-    "@agent-relay/cloud": "11.8.0",
-    "@agent-relay/config": "11.8.0",
-    "@agent-relay/fleet": "11.8.0",
-    "@agent-relay/harness-driver": "11.8.0",
-    "@agent-relay/harnesses": "11.8.0",
-    "@agent-relay/sdk": "11.8.0",
-    "@agent-relay/session": "11.8.0",
-    "@agent-relay/utils": "11.8.0",
+    "@agent-relay/cloud": "11.8.1",
+    "@agent-relay/config": "11.8.1",
+    "@agent-relay/fleet": "11.8.1",
+    "@agent-relay/harness-driver": "11.8.1",
+    "@agent-relay/harnesses": "11.8.1",
+    "@agent-relay/sdk": "11.8.1",
+    "@agent-relay/session": "11.8.1",
+    "@agent-relay/utils": "11.8.1",
     "@modelcontextprotocol/sdk": "^1.23.0",
     "@relayfile/client": "^0.10.27",
     "@relayflows/cli": "1.0.1",