vestauth 0.21.1 → 0.22.0

package/CHANGELOG.md

@@ -2,7 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/vestauth/vestauth/compare/v0.21.1...main)
+[Unreleased](https://github.com/vestauth/vestauth/compare/v0.22.0...main)
+
+## [0.22.0](https://github.com/vestauth/vestauth/compare/v0.21.1...v0.22.0) (2026-03-02)
+
+### Changed
+
+* `agent curl` now by default prepends `-X POST` and `-H "Content-Type: application/json"` ([#45](https://github.com/vestauth/vestauth/pull/45))
 
 ## [0.21.1](https://github.com/vestauth/vestauth/compare/v0.21.0...v0.21.1) (2026-02-25)
 
@@ -94,7 +100,7 @@ All notable changes to this project will be documented in this file. See [standa
 
 ### Changed
 
-* Move from `*.agents.vestauth.com` FQDN to `*.api.vestaut.com` to prepare way for custom `--hostname` for internal enterprise use cases.
+* Move from `*.agents.vestauth.com` FQDN to `*.api.vestauth.com` to prepare way for custom `--hostname` for internal enterprise use cases.
 
 ## [0.12.1](https://github.com/vestauth/vestauth/compare/v0.12.0...v0.12.1) (2026-02-17)
 

package/README.md

@@ -145,16 +145,92 @@ $ vestauth primitives headers GET https://api.vestauth.com/whoami --pp
 > Call tools!
 
 ```sh
-$ vestauth agent curl -X POST https://as2.dotenvx.com/set -d '{"KEY":"value"}'
-$ vestauth agent curl https://as2.dotenvx.com/get
+$ vestauth agent curl https://sfs.vestauth.com/write -d '{"filepath":"/hello.md", "content":"hello"}'
+$ vestauth agent curl https://sfs.vestauth.com/list
 ```
 
-#### List of tools
+#### First Party Tools
+
+<details><summary>`SFS` Simple File System</summary><br/>
+
+> SFS is a simple file system for vestauth agents.
+> [sfs.vestauth.com](https://sfs.vestauth.com)
+
+```sh
+# write a file
+vestauth agent curl https://sfs.vestauth.com/write -d '{"filepath":"/hello.md", "content":"hello"}'
+
+# delete a file
+vestauth agent curl https://sfs.vestauth.com/delete -d '{"filepath":"/hello.md"}'
+
+# list files
+vestauth agent curl https://sfs.vestauth.com/list
+
+# read a file
+vestauth agent curl https://sfs.vestauth.com/read -d '{"filepath":"/hello.md"}'
+```
+
+&nbsp;
+
+</details>
+<details><summary>`Ping` ping.vestauth.com</summary><br/>
+
+> Ping is a demonstration of vestauth.
+> [ping.vestauth.com](https://ping.vestauth.com)
+
+```sh
+# make a ping
+vestauth agent curl https://ping.vestauth.com/ping
+```
+
+&nbsp;
+
+</details>
+
+#### Third Party Tools
+
+<details><summary>`AS2` Agentic Secret Storage</summary><br/>
+
+> AS2 is a simple, agent-friendly secret storage.
+> [as2.dotenvx.com](https://as2.dotenvx.com)
+
+```sh
+# set a secret
+vestauth agent curl https://as2.dotenvx.com/set -d '{"KEY":"value"}'
+
+# get all secrets
+vestauth agent curl "https://as2.dotenvx.com/get"
+
+# get single secret
+vestauth agent curl "https://as2.dotenvx.com/get?key=KEY"
+
+# get multiple secrets
+vestauth agent curl "https://as2.dotenvx.com/get?key=KEY,TWILIO"
+```
+
+&nbsp;
+
+</details>
+<details><summary>`Docle` Check if email address is real</summary><br>
+
+> Check if an email address is real before you hit send. Verifies syntax, DNS, MX records, SMTP mailbox existence, and cross-references multiple providers. All in real time, no signup required.
+> 
+> [learn more](https://github.com/treadiehq/docle) 
+
+```sh
+# verify an email
+vestauth agent curl https://docle.co/api/verify -d '{"emails":["test@example.com"]}'
+
+# check your usage
+vestauth agent curl https://docle.co/api/agent/usage -X GET
+```
+
+&nbsp;
+
+</details>
+<details><summary>more coming soon</summary><br/>
 
-* Ping - https://ping.vestauth.com
-* Agentic Secret Storage - https://as2.dotenvx.com
 * Geo IP - coming soon
-* Filesystem - coming soon
 * Send/Receive Email - coming
 * Send/Receive SMS - coming
 * Send/Receive Telegram - coming
@@ -164,6 +240,8 @@ $ vestauth agent curl https://as2.dotenvx.com/get
 * Rotate GitHub Tokens - coming
 * Working on a tool? Tell us and wel'll list it.
 
+</details>
+
 &nbsp;
 
 ## Self-hosting

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vestauth",
-  "version": "0.21.1",
+  "version": "0.22.0",
   "description": "web-bot-auth for agents–from the creator of dotenvx",
   "keywords": [
     "vestauth",

package/src/cli/actions/agent/curl.js

@@ -5,6 +5,53 @@ const Errors = require('./../../../lib/helpers/errors')
 const findUrl = require('./../../../lib/helpers/findUrl')
 const catchAndLog = require('./../../../lib/helpers/catchAndLog')
 
+function requestMethodFromArgs (args) {
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i]
+
+    if (arg === '-X' || arg === '--request') {
+      const method = args[i + 1]
+      if (method) return method.toUpperCase()
+      continue
+    }
+
+    if (arg.startsWith('--request=')) {
+      return arg.slice('--request='.length).toUpperCase()
+    }
+
+    if (arg.startsWith('-X') && arg.length > 2) {
+      return arg.slice(2).toUpperCase()
+    }
+  }
+
+  return null
+}
+
+function hasContentTypeHeader (args) {
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i]
+
+    if (arg === '-H' || arg === '--header') {
+      const header = args[i + 1] || ''
+      if (header.toLowerCase().startsWith('content-type:')) return true
+      continue
+    }
+
+    if (arg.startsWith('--header=')) {
+      const header = arg.slice('--header='.length)
+      if (header.toLowerCase().startsWith('content-type:')) return true
+      continue
+    }
+
+    if (arg.startsWith('-H') && arg.length > 2) {
+      const header = arg.slice(2)
+      if (header.toLowerCase().startsWith('content-type:')) return true
+    }
+  }
+
+  return false
+}
+
 async function curl () {
   try {
     const commandArgs = this.args
@@ -13,14 +60,18 @@ async function curl () {
     const options = this.opts()
     logger.debug(`options: ${JSON.stringify(options)}`)
 
-    const httpMethod = 'GET'
+    const httpMethod = requestMethodFromArgs(commandArgs) || 'POST'
     const url = findUrl(commandArgs)
     const headers = await agent.headers(httpMethod, url)
+    const includeRequestMethod = requestMethodFromArgs(commandArgs) === null
+    const includeContentType = !hasContentTypeHeader(commandArgs)
     const injected = [
       'curl',
       '-H', `Signature: ${headers.Signature}`,
       '-H', `Signature-Input: ${headers['Signature-Input']}`,
       '-H', `Signature-Agent: ${headers['Signature-Agent']}`,
+      ...(includeRequestMethod ? ['-X', 'POST'] : []),
+      ...(includeContentType ? ['-H', 'Content-Type: application/json'] : []),
       ...commandArgs
     ]