gora8-signer 0.1.1 → 0.1.2

package/dist/cli.js

@@ -45,7 +45,22 @@ async function main() {
             break;
         }
         case "start": {
-            const policyEngine = new PolicyEngine({ fetchMandate: () => fetchMandate(agentId, apiBase) }, auditLog);
+            // The local storage key (agentId, this command's positional arg —
+            // e.g. a slugified name chosen before gora8 ever issued a real id;
+            // see cli/cmd/deploy.go's initSigner()) and the id gora8's Mandate
+            // endpoint actually looks up by (its own database cuid) are not the
+            // same value and never can be: `gora8-signer init` has to run
+            // *before* POST /v1/agents to put wallet_address in the request
+            // body, so at init time gora8's real id doesn't exist yet. Nothing
+            // in the wire protocol between gora8's API and this signer ever
+            // carries that real id either (requestAgentSignature's payload is
+            // just {operation, params}) — so without this, `start` would fetch
+            // /v1/agents/<local-slug>/mandate, always 404, and every signature
+            // would be refused forever. GORA8_AGENT_ID is the one place that
+            // real id is threaded through, set by whatever printed this
+            // command's invocation (deploy.go) once registration returns it.
+            const mandateAgentId = process.env.GORA8_AGENT_ID || agentId;
+            const policyEngine = new PolicyEngine({ fetchMandate: () => fetchMandate(mandateAgentId, apiBase) }, auditLog);
             const signer = new Signer({
                 keyStore,
                 policyEngine,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gora8-signer",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Local, self-custodied key signing for gora8 agents — the key is generated and used wherever your agent runs, never inside gora8's own infrastructure. See SELF_CUSTODY_ARCHITECTURE.md in the gora8 monorepo for the full design.",
   "license": "MIT",
   "type": "module",