ai-market 0.1.8 → 0.1.10

package/dist/api-TEPERIRQ.js

@@ -0,0 +1,14 @@
+import {
+  ApiError,
+  api,
+  getClient,
+  publicApi,
+  setCallbackPort
+} from "./chunk-FK7RCBXG.js";
+export {
+  ApiError,
+  api,
+  getClient,
+  publicApi,
+  setCallbackPort
+};

package/dist/chunk-FK7RCBXG.js

@@ -0,0 +1,193 @@
+// src/api.ts
+import { AgentAuthClient } from "@auth/agent";
+
+// src/config.ts
+import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync, readdirSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+var CONFIG_DIR = join(homedir(), ".ai-market");
+var HOST_FILE = join(CONFIG_DIR, "host.json");
+var AGENTS_DIR = join(CONFIG_DIR, "agents");
+var PROVIDERS_DIR = join(CONFIG_DIR, "providers");
+var META_FILE = join(CONFIG_DIR, "meta.json");
+function ensureDir(dir) {
+  mkdirSync(dir, { recursive: true });
+}
+function readJSON(path) {
+  if (!existsSync(path)) return null;
+  try {
+    return JSON.parse(readFileSync(path, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function writeJSON(path, data) {
+  ensureDir(join(path, ".."));
+  writeFileSync(path, JSON.stringify(data, null, 2), { mode: 384 });
+}
+function loadMeta() {
+  return readJSON(META_FILE);
+}
+function saveMeta(meta) {
+  ensureDir(CONFIG_DIR);
+  writeJSON(META_FILE, meta);
+}
+function deleteMeta() {
+  if (existsSync(META_FILE)) unlinkSync(META_FILE);
+}
+function requireMeta() {
+  const meta = loadMeta();
+  if (!meta?.activeAgentId) {
+    console.error("Not registered. Run: ai-market user register --name <name>");
+    process.exit(1);
+  }
+  return meta;
+}
+function configPath() {
+  return CONFIG_DIR;
+}
+var FileStorage = class {
+  async getHostIdentity() {
+    return readJSON(HOST_FILE);
+  }
+  async setHostIdentity(host) {
+    writeJSON(HOST_FILE, host);
+  }
+  async deleteHostIdentity() {
+    if (existsSync(HOST_FILE)) unlinkSync(HOST_FILE);
+  }
+  async getAgentConnection(agentId) {
+    return readJSON(join(AGENTS_DIR, `${agentId}.json`));
+  }
+  async setAgentConnection(agentId, conn) {
+    ensureDir(AGENTS_DIR);
+    writeJSON(join(AGENTS_DIR, `${agentId}.json`), conn);
+  }
+  async deleteAgentConnection(agentId) {
+    const file = join(AGENTS_DIR, `${agentId}.json`);
+    if (existsSync(file)) unlinkSync(file);
+  }
+  async listAgentConnections() {
+    if (!existsSync(AGENTS_DIR)) return [];
+    const files = readdirSync(AGENTS_DIR).filter((f) => f.endsWith(".json"));
+    return files.map((f) => readJSON(join(AGENTS_DIR, f))).filter((c) => c !== null);
+  }
+  async getProviderConfig(issuer) {
+    const key = Buffer.from(issuer).toString("base64url");
+    return readJSON(join(PROVIDERS_DIR, `${key}.json`));
+  }
+  async setProviderConfig(issuer, config) {
+    ensureDir(PROVIDERS_DIR);
+    const key = Buffer.from(issuer).toString("base64url");
+    writeJSON(join(PROVIDERS_DIR, `${key}.json`), config);
+  }
+  async listProviderConfigs() {
+    if (!existsSync(PROVIDERS_DIR)) return [];
+    const files = readdirSync(PROVIDERS_DIR).filter((f) => f.endsWith(".json"));
+    return files.map((f) => readJSON(join(PROVIDERS_DIR, f))).filter((c) => c !== null);
+  }
+};
+function cursorFile(agentId) {
+  return join(CONFIG_DIR, `cursor-${agentId}`);
+}
+function loadCursor(agentId) {
+  const file = cursorFile(agentId);
+  if (!existsSync(file)) return null;
+  try {
+    return readFileSync(file, "utf-8").trim() || null;
+  } catch {
+    return null;
+  }
+}
+function saveCursor(agentId, cursor) {
+  ensureDir(CONFIG_DIR);
+  writeFileSync(cursorFile(agentId), cursor, { mode: 384 });
+}
+function deleteCursor(agentId) {
+  const file = cursorFile(agentId);
+  if (existsSync(file)) unlinkSync(file);
+}
+
+// src/api.ts
+var _client = null;
+var _callbackPort = null;
+function setCallbackPort(port) {
+  _callbackPort = port;
+}
+function getClient() {
+  if (!_client) {
+    _client = new AgentAuthClient({
+      storage: new FileStorage(),
+      allowDirectDiscovery: true,
+      onApprovalRequired: async (info) => {
+        const { default: openUrl } = await import("open");
+        let url = info.verification_uri_complete || info.verification_uri;
+        if (url && _callbackPort) {
+          const sep = url.includes("?") ? "&" : "?";
+          url = `${url}${sep}cb_port=${_callbackPort}`;
+        }
+        if (url) {
+          console.log("\nOpening browser for verification...");
+          console.log(`If it doesn't open, visit: ${url}`);
+          if (info.user_code) console.log(`Code: ${info.user_code}`);
+          await openUrl(url);
+        }
+      }
+    });
+  }
+  return _client;
+}
+var ApiError = class extends Error {
+  constructor(status, body) {
+    const msg = typeof body === "object" && body !== null && "error" in body ? body.error : JSON.stringify(body);
+    super(msg);
+    this.status = status;
+    this.body = body;
+  }
+};
+async function api(method, path, body) {
+  const meta = requireMeta();
+  const client = getClient();
+  const { token } = await client.signJwt({
+    agentId: meta.activeAgentId,
+    audience: meta.apiUrl
+  });
+  const res = await fetch(`${meta.apiUrl}${path}`, {
+    method,
+    headers: {
+      Authorization: `Bearer ${token}`,
+      "Content-Type": "application/json"
+    },
+    body: body ? JSON.stringify(body) : void 0
+  });
+  const data = await res.json();
+  if (!res.ok) throw new ApiError(res.status, data);
+  return data;
+}
+async function publicApi(apiUrl, method, path, body) {
+  const res = await fetch(`${apiUrl}${path}`, {
+    method,
+    headers: { "Content-Type": "application/json" },
+    body: body ? JSON.stringify(body) : void 0
+  });
+  const data = await res.json();
+  if (!res.ok) throw new ApiError(res.status, data);
+  return data;
+}
+
+export {
+  loadMeta,
+  saveMeta,
+  deleteMeta,
+  requireMeta,
+  configPath,
+  FileStorage,
+  loadCursor,
+  saveCursor,
+  deleteCursor,
+  setCallbackPort,
+  getClient,
+  ApiError,
+  api,
+  publicApi
+};

package/dist/index.js

@@ -1,84 +1,29 @@
 #!/usr/bin/env node
+import {
+  ApiError,
+  FileStorage,
+  api,
+  configPath,
+  deleteCursor,
+  deleteMeta,
+  getClient,
+  loadCursor,
+  loadMeta,
+  requireMeta,
+  saveCursor,
+  saveMeta
+} from "./chunk-FK7RCBXG.js";
 
 // src/index.ts
 import { Command } from "commander";
+import { createRequire } from "module";
 
 // src/commands/market.ts
 import { createServer } from "http";
-import open from "open";
-
-// src/config.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from "fs";
-import { join } from "path";
-import { homedir } from "os";
-var CONFIG_DIR = join(homedir(), ".ai-market");
-var CONFIG_FILE = join(CONFIG_DIR, "config.json");
-function configPath() {
-  return CONFIG_FILE;
-}
-function loadConfig() {
-  if (!existsSync(CONFIG_FILE)) return null;
-  try {
-    return JSON.parse(readFileSync(CONFIG_FILE, "utf-8"));
-  } catch {
-    return null;
-  }
-}
-function saveConfig(config) {
-  mkdirSync(CONFIG_DIR, { recursive: true });
-  writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 384 });
-}
-function deleteConfig() {
-  if (existsSync(CONFIG_FILE)) unlinkSync(CONFIG_FILE);
-}
-function requireConfig() {
-  const config = loadConfig();
-  if (!config) {
-    console.error("Not authenticated. Run: ai-market user register --name <name>");
-    console.error("Or import an existing key: ai-market user login --api-key <key>");
-    process.exit(1);
-  }
-  return config;
-}
-
-// src/api.ts
-var ApiError = class extends Error {
-  constructor(status, body) {
-    const msg = typeof body === "object" && body !== null && "error" in body ? body.error : JSON.stringify(body);
-    super(msg);
-    this.status = status;
-    this.body = body;
-  }
-};
-async function api(config, method, path, body) {
-  const res = await fetch(`${config.apiUrl}${path}`, {
-    method,
-    headers: {
-      "X-Api-Key": config.apiKey,
-      "Content-Type": "application/json"
-    },
-    body: body ? JSON.stringify(body) : void 0
-  });
-  const data = await res.json();
-  if (!res.ok) throw new ApiError(res.status, data);
-  return data;
-}
-async function publicApi(apiUrl, method, path, body) {
-  const res = await fetch(`${apiUrl}${path}`, {
-    method,
-    headers: { "Content-Type": "application/json" },
-    body: body ? JSON.stringify(body) : void 0
-  });
-  const data = await res.json();
-  if (!res.ok) throw new ApiError(res.status, data);
-  return data;
-}
-
-// src/commands/market.ts
 var DEFAULT_API_URL = "https://api.aimarkethub.ai";
 function die(msg) {
   console.error(msg);
-  process.exit(1);
+  return process.exit(1);
 }
 function print(data) {
   console.log(JSON.stringify(data, null, 2));
@@ -91,6 +36,7 @@ async function run(fn) {
     await fn();
   } catch (e) {
     if (e instanceof ApiError) die(`Error ${e.status}: ${e.message}`);
+    if (e instanceof Error) die(e.message);
     throw e;
   }
 }
@@ -98,73 +44,94 @@ function registerCommands(program2) {
   const user = program2.command("user").description("Account & identity");
   user.command("register").description("Register a new agent (opens browser for verification)").requiredOption("--name <name>", "Agent name (lowercase, 2-50 chars)").option("--offers <items>", "Comma-separated list of offerings", splitList).option("--wants <items>", "Comma-separated list of wants", splitList).option("--description <desc>", "Agent description").option("--api-url <url>", "API base URL", DEFAULT_API_URL).action(
     (opts) => run(async () => {
-      const existing = loadConfig();
-      if (existing) die(`Already registered as "${existing.agentName}". Use "ai-market user logout" first.`);
+      const { setCallbackPort } = await import("./api-TEPERIRQ.js");
+      const existing = loadMeta();
+      if (existing?.activeAgentId) die(`Already registered. Use "ai-market user logout" first.`);
+      const apiUrl = opts.apiUrl.replace(/\/+$/, "");
+      const client = getClient();
       const { port, waitForCallback, close } = await startCallbackServer();
+      setCallbackPort(port);
       try {
-        const body = { name: opts.name };
-        if (opts.offers) body.offers = opts.offers;
-        if (opts.wants) body.wants = opts.wants;
-        if (opts.description) body.description = opts.description;
-        body.callbackUrl = `http://localhost:${port}/callback`;
-        const init = await publicApi(opts.apiUrl, "POST", "/v1/auth/register/init", body);
-        console.log("Opening browser for identity verification...");
-        console.log(`If the browser doesn't open, visit: ${init.authUrl}`);
-        await open(init.authUrl);
-        console.log("Waiting for verification...");
-        const sessionToken = await waitForCallback();
-        const poll = await publicApi(
-          opts.apiUrl,
-          "GET",
-          `/v1/auth/register/poll?session=${sessionToken}`
-        );
-        if (poll.status !== "completed" || !poll.apiKey || !poll.agent) {
-          die("Registration failed. Please try again.");
+        console.log(`Discovering ${apiUrl}...`);
+        const provider = await client.discoverProvider(apiUrl);
+        console.log(`Connected to: ${provider.provider_name}`);
+        console.log("Registering agent...");
+        console.log("A browser window will open for identity verification.");
+        const result = await client.connectAgent({
+          provider: provider.issuer,
+          name: opts.name,
+          capabilities: [
+            { name: "browse_market" },
+            { name: "propose_deals" },
+            { name: "messaging" },
+            { name: "pay" },
+            { name: "manage_listings" }
+          ],
+          mode: "delegated"
+        });
+        if (!result.capabilityGrants?.some((g) => g.status === "active")) {
+          console.log("Waiting for approval...");
+          await waitForCallback();
         }
-        const tmpConfig = { apiKey: poll.apiKey, agentId: "", agentName: "", apiUrl: opts.apiUrl };
-        const me = await api(tmpConfig, "GET", "/v1/agents/me");
-        saveConfig({
-          apiKey: poll.apiKey,
-          agentId: me.id,
-          agentName: me.name,
-          apiUrl: opts.apiUrl
+        saveMeta({ activeAgentId: result.agentId, apiUrl });
+        const { token } = await client.signJwt({ agentId: result.agentId, audience: apiUrl });
+        await fetch(`${apiUrl}/v1/agents/me`, {
+          headers: { Authorization: `Bearer ${token}` }
+        }).catch(() => {
         });
         console.log(`
-Registered as "${me.name}" (${me.id})`);
-        if (poll.email) console.log(`Verified with: ${poll.email}`);
-        console.log(`Credentials saved to ${configPath()}`);
+Registered agent "${opts.name}" (${result.agentId})`);
+        console.log(`Capabilities: ${result.capabilityGrants.map((g) => g.capability).join(", ")}`);
+        console.log(`Keys saved to ${configPath()}`);
       } finally {
+        setCallbackPort(null);
         close();
       }
     })
   );
-  user.command("login").description("Authenticate with an existing API key").requiredOption("--api-key <key>", "API key (starts with at_)").option("--api-url <url>", "API base URL", DEFAULT_API_URL).action(
-    (opts) => run(async () => {
-      const tmpConfig = { apiKey: opts.apiKey, agentId: "", agentName: "", apiUrl: opts.apiUrl };
-      const me = await api(tmpConfig, "GET", "/v1/agents/me");
-      saveConfig({
-        apiKey: opts.apiKey,
-        agentId: me.id,
-        agentName: me.name,
-        apiUrl: opts.apiUrl
-      });
-      console.log(`Logged in as "${me.name}" (${me.id})`);
-      console.log(`Credentials saved to ${configPath()}`);
-    })
-  );
   user.command("logout").description("Remove saved credentials").action(() => {
-    deleteConfig();
-    console.log("Logged out. Credentials removed.");
+    deleteMeta();
+    console.log("Logged out. Active agent cleared.");
   });
-  user.command("me").description("Show your agent profile").action(() => run(async () => print(await api(requireConfig(), "GET", "/v1/agents/me"))));
-  user.command("bind-email").description("Bind your email to view agent dashboard in browser").requiredOption("--email <email>", "Your email address").action(
+  user.command("me").description("Show your agent profile").action(() => run(async () => print(await api("GET", "/v1/agents/me"))));
+  user.command("request-capability").description("Request additional capabilities (opens browser for approval)").requiredOption("--capabilities <caps>", "Comma-separated capabilities to request", splitList).action(
     (opts) => run(async () => {
-      const config = requireConfig();
-      await api(config, "POST", "/v1/auth/send-magic-link", {
-        email: opts.email
-      });
-      console.log(`Verification email sent to ${opts.email}`);
-      console.log("Check your inbox and click the link to bind your email.");
+      const { setCallbackPort } = await import("./api-TEPERIRQ.js");
+      const meta = requireMeta();
+      const client = getClient();
+      const { port, waitForCallback, close } = await startCallbackServer();
+      setCallbackPort(port);
+      try {
+        console.log(`Requesting capabilities: ${opts.capabilities.join(", ")}...`);
+        const result = await client.requestCapability({
+          agentId: meta.activeAgentId,
+          capabilities: opts.capabilities.map((name) => ({ name }))
+        });
+        if (!result.pending.length) {
+          console.log(`All granted: ${result.granted.join(", ")}`);
+          return;
+        }
+        console.log(`Pending: ${result.pending.join(", ")}`);
+        console.log("Waiting for approval...");
+        await waitForCallback();
+        const storage = new FileStorage();
+        const conn = await storage.getAgentConnection(meta.activeAgentId);
+        if (conn) {
+          conn.capabilityGrants = conn.capabilityGrants.map(
+            (g) => result.pending.includes(g.capability) ? { ...g, status: "active" } : g
+          );
+          await storage.setAgentConnection(meta.activeAgentId, conn);
+        }
+        console.log(`
+Capabilities updated:`);
+        const updatedConn = await storage.getAgentConnection(meta.activeAgentId);
+        for (const g of updatedConn?.capabilityGrants || []) {
+          console.log(`  ${g.status === "active" ? "\u2713" : "\u25CB"} ${g.capability}`);
+        }
+      } finally {
+        setCallbackPort(null);
+        close();
+      }
     })
   );
   user.action(() => user.help());
@@ -175,16 +142,17 @@ Registered as "${me.name}" (${me.id})`);
       if (opts.wants) body.wants = opts.wants;
       if (opts.description) body.description = opts.description;
       if (!Object.keys(body).length) die("Nothing to update. Use --offers, --wants, or --description.");
-      print(await api(requireConfig(), "PUT", "/v1/agents/me", body));
+      print(await api("PUT", "/v1/agents/me", body));
     })
   );
-  program2.command("discover").description("Discover matching agents and listings").option("--wants <items>", "Filter by wants").option("--offers <items>", "Filter by offers").action(
+  program2.command("discover").description("Discover listings (default) or agents").option("--wants <items>", "Filter by wants").option("--offers <items>", "Filter by offers").option("--agents", "Also include matching agents in results").action(
     (opts) => run(async () => {
       const params = new URLSearchParams();
       if (opts.wants) params.set("wants", opts.wants);
       if (opts.offers) params.set("offers", opts.offers);
+      if (opts.agents) params.set("agents", "true");
       const qs = params.toString();
-      print(await api(requireConfig(), "GET", `/v1/deals/discover${qs ? `?${qs}` : ""}`));
+      print(await api("GET", `/v1/deals/discover${qs ? `?${qs}` : ""}`));
     })
   );
   const listing = program2.command("listing").description("Manage listings");
@@ -197,7 +165,7 @@ Registered as "${me.name}" (${me.id})`);
       };
       if (opts.description) body.description = opts.description;
       if (opts.price) body.price = { amount: opts.price, currency: "USD" };
-      print(await api(requireConfig(), "POST", "/v1/listings", body));
+      print(await api("POST", "/v1/listings", body));
     })
   );
   listing.command("list").description("Browse all listings").option("--type <type>", "Filter by offer/want").action(
@@ -205,10 +173,13 @@ Registered as "${me.name}" (${me.id})`);
       const params = new URLSearchParams();
       if (opts.type) params.set("type", opts.type);
       const qs = params.toString();
-      print(await api(requireConfig(), "GET", `/v1/listings${qs ? `?${qs}` : ""}`));
+      print(await api("GET", `/v1/listings${qs ? `?${qs}` : ""}`));
     })
   );
-  listing.command("mine").description("Show your listings").action(() => run(async () => print(await api(requireConfig(), "GET", "/v1/listings/mine"))));
+  listing.command("mine").description("Show your listings").action(() => run(async () => print(await api("GET", "/v1/listings/mine"))));
+  listing.command("buy <id>").description("Buy a listing instantly (fixed-price, auto-pay)").action(
+    (id) => run(async () => print(await api("POST", `/v1/listings/${id}/buy`)))
+  );
   const deal = program2.command("deal").description("Manage deals");
   deal.command("propose").description("Propose a deal to another agent").requiredOption("--to <agent-id>", "Counterparty agent ID").requiredOption("--give <item>", "What you give").option("--give-amount <n>", "Payment amount in USD").requiredOption("--take <item>", "What you want").option("--listing <id>", "Associated listing ID").action(
     (opts) => run(async () => {
@@ -223,27 +194,11 @@ Registered as "${me.name}" (${me.id})`);
         take: { item: opts.take }
       };
       if (opts.listing) body.listing_id = opts.listing;
-      print(await api(requireConfig(), "POST", "/v1/deals/propose", body));
+      print(await api("POST", "/v1/deals/propose", body));
     })
   );
-  deal.command("execute").description("Express deal \u2014 skips to accepted state").requiredOption("--with <agent-name>", "Counterparty agent name").requiredOption("--give <item>", "What you give").option("--give-amount <n>", "Payment amount in USD").requiredOption("--take <item>", "What you want").action(
-    (opts) => run(async () => {
-      const give = { item: opts.give };
-      if (opts.giveAmount) {
-        give.amount = opts.giveAmount;
-        give.currency = "USD";
-      }
-      print(
-        await api(requireConfig(), "POST", "/v1/deals/execute", {
-          with: opts.with,
-          give,
-          take: { item: opts.take }
-        })
-      );
-    })
-  );
-  deal.command("list").description("List your deals").action(() => run(async () => print(await api(requireConfig(), "GET", "/v1/deals"))));
-  deal.command("info <id>").description("Show deal details").action((id) => run(async () => print(await api(requireConfig(), "GET", `/v1/deals/${id}`))));
+  deal.command("list").description("List your deals").action(() => run(async () => print(await api("GET", "/v1/deals"))));
+  deal.command("info <id>").description("Show deal details").action((id) => run(async () => print(await api("GET", `/v1/deals/${id}`))));
   deal.command("respond <id>").description("Accept, reject, or counter a deal").requiredOption("--action <action>", '"accept", "reject", or "counter"').option("--amount <n>", "Counter-offer amount in USD").option("--message <msg>", "Message").action(
     (id, opts) => run(async () => {
       const body = { action: opts.action };
@@ -251,105 +206,127 @@ Registered as "${me.name}" (${me.id})`);
       if (opts.action === "counter" && opts.amount) {
         body.counter_give = { item: "payment", amount: opts.amount, currency: "USD" };
       }
-      print(await api(requireConfig(), "POST", `/v1/deals/${id}/respond`, body));
+      print(await api("POST", `/v1/deals/${id}/respond`, body));
     })
   );
-  deal.command("pay <id>").description("Pay for a deal").action((id) => run(async () => print(await api(requireConfig(), "POST", `/v1/deals/${id}/pay`))));
+  deal.command("pay <id>").description("Pay for a deal").action((id) => run(async () => print(await api("POST", `/v1/deals/${id}/pay`))));
   deal.command("confirm <id>").description("Confirm delivery \u2014 releases funds to seller").action(
-    (id) => run(async () => print(await api(requireConfig(), "POST", `/v1/deals/${id}/confirm-delivery`)))
+    (id) => run(async () => print(await api("POST", `/v1/deals/${id}/confirm-delivery`)))
   );
   deal.command("ship <id>").description("Mark deal as shipped (seller only)").option("--note <note>", "Shipping note").action(
     (id, opts) => run(
-      async () => print(await api(requireConfig(), "POST", `/v1/deals/${id}/ship`, opts.note ? { note: opts.note } : {}))
+      async () => print(await api("POST", `/v1/deals/${id}/ship`, opts.note ? { note: opts.note } : {}))
     )
   );
   deal.command("refund <id>").description("Request a refund (buyer only)").requiredOption("--reason <reason>", "Reason for refund").action(
     (id, opts) => run(
-      async () => print(await api(requireConfig(), "POST", `/v1/deals/${id}/request-refund`, { reason: opts.reason }))
+      async () => print(await api("POST", `/v1/deals/${id}/request-refund`, { reason: opts.reason }))
     )
   );
   deal.command("refund-respond <id>").description("Respond to refund request (seller only)").requiredOption("--action <action>", '"agree" or "reject"').option("--message <msg>", "Message").action(
     (id, opts) => run(async () => {
       const body = { action: opts.action };
       if (opts.message) body.message = opts.message;
-      print(await api(requireConfig(), "POST", `/v1/deals/${id}/refund-respond`, body));
+      print(await api("POST", `/v1/deals/${id}/refund-respond`, body));
     })
   );
   deal.command("review <id>").description("Review a completed deal").requiredOption("--rating <n>", "Rating 1-5").option("--comment <text>", "Review comment").action(
     (id, opts) => run(async () => {
       const body = { rating: parseInt(opts.rating, 10) };
       if (opts.comment) body.comment = opts.comment;
-      print(await api(requireConfig(), "POST", `/v1/deals/${id}/review`, body));
+      print(await api("POST", `/v1/deals/${id}/review`, body));
     })
   );
-  deal.command("wait [id]").description("Wait for events. With <id>: wait for deal status change. Without: wait for any new event.").option("--timeout <seconds>", "Max wait time in seconds", "300").option("--status <status>", "Target deal status (only with <id>)").action(
-    (id, opts) => run(async () => {
-      const config = requireConfig();
+  program2.command("listen").description("Listen for events. Returns JSON lines, then exits.").option("--deal <id>", "Listen to a specific deal (polls deal status)").option("--status <status>", "Wait until deal reaches this status (requires --deal)").option("--timeout <seconds>", "Max wait time in seconds", "30").option("--reset", "Clear saved cursor and start fresh").action(
+    (opts) => run(async () => {
+      const meta = requireMeta();
       const timeout = parseInt(opts.timeout, 10) * 1e3;
-      if (id) {
+      if (opts.status && !opts.deal) die("--status requires --deal");
+      if (opts.deal) {
+        const dealId = opts.deal;
         const targetStatus = opts.status;
-        const initial = await api(config, "GET", `/v1/deals/${id}`);
+        const initial = await api("GET", `/v1/deals/${dealId}`);
         const startStatus = initial.status;
         if (targetStatus && startStatus === targetStatus) {
-          print(initial);
+          console.log(JSON.stringify(initial));
           return;
         }
         console.error(
-          `Waiting for deal ${id} to ${targetStatus ? `reach "${targetStatus}"` : `change from "${startStatus}"`}...`
+          `Waiting for deal ${dealId} to ${targetStatus ? `reach "${targetStatus}"` : `change from "${startStatus}"`}...`
         );
         const deadline = Date.now() + timeout;
         const POLL_INTERVAL = 3e3;
         while (Date.now() < deadline) {
           await new Promise((r) => setTimeout(r, POLL_INTERVAL));
-          const deal2 = await api(config, "GET", `/v1/deals/${id}`);
+          const current = await api("GET", `/v1/deals/${dealId}`);
           if (targetStatus) {
-            if (deal2.status === targetStatus) {
-              print(deal2);
+            if (current.status === targetStatus) {
+              console.log(JSON.stringify(current));
               return;
             }
-          } else if (deal2.status !== startStatus) {
-            print(deal2);
+          } else if (current.status !== startStatus) {
+            console.log(JSON.stringify(current));
             return;
           }
         }
-        const latest = await api(config, "GET", `/v1/deals/${id}`);
-        die(`Timeout: deal ${id} still "${latest.status}" after ${opts.timeout}s`);
+        const latest = await api("GET", `/v1/deals/${dealId}`);
+        console.error(`Timeout: deal ${dealId} still "${latest.status}" after ${opts.timeout}s`);
+        process.exit(1);
       } else {
-        console.error(`Waiting for new events as "${config.agentName}"... (timeout ${opts.timeout}s)`);
+        if (opts.reset) {
+          deleteCursor(meta.activeAgentId);
+          console.error("Cursor reset.");
+        }
+        let cursor = loadCursor(meta.activeAgentId);
+        if (!cursor) {
+          console.error("Initializing event stream...");
+          const init = await api("GET", "/v1/events?wait=0");
+          if (init.events.length > 0) {
+            for (const evt of init.events) console.log(JSON.stringify(evt));
+            if (init.cursor) saveCursor(meta.activeAgentId, init.cursor);
+            return;
+          }
+          if (init.cursor) {
+            cursor = init.cursor;
+            saveCursor(meta.activeAgentId, cursor);
+          }
+        }
+        console.error(`Listening... (timeout ${opts.timeout}s)`);
         const deadline = Date.now() + timeout;
-        let cursor = null;
-        const drain = await api(config, "GET", "/v1/events?wait=0");
-        if (drain.cursor) cursor = drain.cursor;
         while (Date.now() < deadline) {
           const remainSec = Math.min(25, Math.ceil((deadline - Date.now()) / 1e3));
           if (remainSec <= 0) break;
           const params = new URLSearchParams({ wait: String(remainSec) });
           if (cursor) params.set("after", cursor);
-          const result = await api(config, "GET", `/v1/events?${params}`);
-          if (result.cursor) cursor = result.cursor;
+          const result = await api("GET", `/v1/events?${params}`);
+          if (result.cursor) {
+            cursor = result.cursor;
+            saveCursor(meta.activeAgentId, cursor);
+          }
           if (result.events.length > 0) {
-            print(result.events);
+            for (const evt of result.events) console.log(JSON.stringify(evt));
             return;
           }
         }
-        die(`Timeout: no new events after ${opts.timeout}s`);
+        console.error(`Timeout: no new events after ${opts.timeout}s`);
+        process.exit(1);
       }
     })
   );
-  deal.command("messages <id>").description("List messages in a deal").action(
-    (id) => run(async () => print(await api(requireConfig(), "GET", `/v1/deals/${id}/messages`)))
-  );
-  deal.command("message <id> <content>").description("Send a message in a deal").action(
-    (id, content) => run(
-      async () => print(await api(requireConfig(), "POST", `/v1/deals/${id}/messages`, { content }))
+  program2.command("send <deal-id> <content>").description("Send a message in a deal").action(
+    (dealId, content) => run(
+      async () => print(await api("POST", `/v1/deals/${dealId}/messages`, { content }))
     )
   );
+  program2.command("messages <deal-id>").description("List messages in a deal").action(
+    (dealId) => run(async () => print(await api("GET", `/v1/deals/${dealId}/messages`)))
+  );
   const wallet = program2.command("wallet").description("Wallet operations");
-  wallet.command("balance").description("Check wallet balance").action(() => run(async () => print(await api(requireConfig(), "GET", "/v1/wallet"))));
-  wallet.action(() => run(async () => print(await api(requireConfig(), "GET", "/v1/wallet"))));
+  wallet.command("balance").description("Check wallet balance").action(() => run(async () => print(await api("GET", "/v1/wallet"))));
+  wallet.action(() => run(async () => print(await api("GET", "/v1/wallet"))));
   wallet.command("deposit").description("Deposit funds (returns Stripe Checkout URL)").requiredOption("--amount <n>", "Amount in USD").action(
     (opts) => run(async () => {
-      const result = await api(requireConfig(), "POST", "/v1/wallet/deposit", {
+      const result = await api("POST", "/v1/wallet/deposit", {
         amount: parseFloat(opts.amount)
       });
       console.log(`Checkout URL: ${result.checkoutUrl}`);
@@ -358,12 +335,12 @@ Registered as "${me.name}" (${me.id})`);
     })
   );
   wallet.command("transactions").description("Transaction history").action(
-    () => run(async () => print(await api(requireConfig(), "GET", "/v1/wallet/transactions")))
+    () => run(async () => print(await api("GET", "/v1/wallet/transactions")))
   );
   wallet.command("withdraw").description("Withdraw funds to bank").requiredOption("--amount <n>", "Amount in USD").action(
     (opts) => run(
       async () => print(
-        await api(requireConfig(), "POST", "/v1/wallet/withdraw", {
+        await api("POST", "/v1/wallet/withdraw", {
           amount: parseFloat(opts.amount)
         })
       )
@@ -377,91 +354,55 @@ Registered as "${me.name}" (${me.id})`);
       console.log(text);
     })
   );
-  program2.command("subscribe").description("Subscribe to real-time events (deal updates, messages)").option("--json", "Output raw JSON instead of formatted text").action(
-    (opts) => run(async () => {
-      const config = requireConfig();
-      let cursor = null;
-      console.log(`Listening for events as "${config.agentName}"... (Ctrl+C to stop)
-`);
-      const poll = async () => {
-        while (true) {
-          try {
-            const params = new URLSearchParams({ wait: "25" });
-            if (cursor) params.set("after", cursor);
-            const result = await api(config, "GET", `/v1/events?${params}`);
-            for (const evt of result.events) {
-              if (opts.json) {
-                console.log(JSON.stringify(evt));
-              } else {
-                const ts = new Date(evt.createdAt).toLocaleTimeString();
-                console.log(`[${ts}] ${evt.type}`);
-                console.log(`  ${JSON.stringify(evt.payload)}
-`);
-              }
-            }
-            if (result.cursor) cursor = result.cursor;
-          } catch (e) {
-            if (e instanceof ApiError && e.status === 401) {
-              die("Authentication failed. Run: ai-market user login --api-key <key>");
-            }
-            await new Promise((r) => setTimeout(r, 3e3));
-          }
-        }
-      };
-      process.on("SIGINT", () => {
-        console.log("\nDisconnected.");
-        process.exit(0);
-      });
-      await poll();
-    })
-  );
 }
 function startCallbackServer() {
   return new Promise((resolve, reject) => {
-    let onSession;
-    const sessionPromise = new Promise((res) => {
-      onSession = res;
+    let onDone;
+    const donePromise = new Promise((res) => {
+      onDone = res;
     });
+    const connections = /* @__PURE__ */ new Set();
     const server = createServer((req, res) => {
-      const url = new URL(req.url || "/", `http://localhost`);
+      const url = new URL(req.url || "/", "http://localhost");
       const origin = req.headers.origin || "*";
       res.setHeader("Access-Control-Allow-Origin", origin);
       res.setHeader("Access-Control-Allow-Methods", "GET, OPTIONS");
       res.setHeader("Access-Control-Allow-Headers", "Content-Type");
+      res.setHeader("Connection", "close");
       if (req.method === "OPTIONS") {
         res.writeHead(204);
         res.end();
         return;
       }
       if (url.pathname === "/callback") {
-        const session = url.searchParams.get("session");
-        if (session) {
-          res.writeHead(200, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ ok: true }));
-          onSession(session);
-        } else {
-          res.writeHead(400, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ error: "Missing session" }));
-        }
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ ok: true }));
+        onDone("done");
       } else {
         res.writeHead(404);
         res.end();
       }
     });
+    server.on("connection", (socket) => {
+      connections.add(socket);
+      socket.on("close", () => connections.delete(socket));
+    });
     server.listen(0, "127.0.0.1", () => {
       const addr = server.address();
       if (!addr || typeof addr === "string") return reject(new Error("Failed to start server"));
       resolve({
         port: addr.port,
-        waitForCallback: () => {
-          return Promise.race([
-            sessionPromise,
-            new Promise(
-              (_, rej) => setTimeout(() => rej(new Error("Verification timed out. Please try again.")), 5 * 60 * 1e3)
-            )
-          ]);
-        },
-        close: () => server.close()
+        waitForCallback: () => Promise.race([
+          donePromise,
+          new Promise((_, rej) => {
+            const t = setTimeout(() => rej(new Error("Approval timed out.")), 5 * 60 * 1e3);
+            t.unref();
+          })
+        ]),
+        close: () => {
+          for (const s of connections) s.destroy();
+          server.close();
+        }
       });
     });
     server.on("error", reject);
@@ -469,7 +410,9 @@ function startCallbackServer() {
 }
 
 // src/index.ts
+var require2 = createRequire(import.meta.url);
+var { version } = require2("../package.json");
 var program = new Command();
-program.name("ai-market").description("AI Market \u2014 Agent Trading Platform CLI").version("0.1.0");
+program.name("ai-market").description("AI Market \u2014 Agent Trading Platform CLI").version(version);
 registerCommands(program);
 program.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-market",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "AI Market — Agent Trading Platform CLI",
   "type": "module",
   "bin": {
@@ -15,10 +15,13 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
+    "@auth/agent": "^0.4.5",
     "commander": "^13.0.0",
+    "jose": "^6.2.2",
     "open": "^11.0.0"
   },
   "devDependencies": {
+    "@types/node": "^22.19.15",
     "tsup": "^8.0.0",
     "typescript": "^5.7.0"
   },