vestauth 0.8.5 → 0.8.7

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/vestauth/vestauth/compare/v0.8.5...main)
+[Unreleased](https://github.com/vestauth/vestauth/compare/v0.8.7...main)
+
+## [0.8.7](https://github.com/vestauth/vestauth/compare/v0.8.6...v0.8.7) (2026-02-06)
+
+### Changed
+
+* Clean up some cruft
+
+## [0.8.6](https://github.com/vestauth/vestauth/compare/v0.8.5...v0.8.6) (2026-02-06)
+
+### Changed
+
+* Add `debug` logs to `agent curl`
 
 ## [0.8.5](https://github.com/vestauth/vestauth/compare/v0.8.4...v0.8.5) (2026-02-06)
 

package/README.md

@@ -4,7 +4,7 @@
 
 > [1 minute demo 📺](https://www.youtube.com/watch?v=cHARyULr_qk)
 >
-> Vestauth gives agents a cryptographic identity and a simple way to authenticate HTTP requests. Most agent systems rely on API keys, bearer tokens, or username/passwords. These approaches are difficult to rotate, easy to leak, and hard to attribute to a specific agent. Vestauth replaces shared secrets with public/private key cryptography. Agents sign requests using a private key, and providers verify those requests using the agent's public key. [[1](#compare)]
+> Vestauth gives agents a cryptographic identity and a simple way to authenticate HTTP requests. Most agent systems rely on API keys, bearer tokens, or username/passwords. These approaches are difficult to rotate, easy to leak, and hard to attribute to a specific agent. Vestauth replaces shared secrets with public/private key cryptography. Agents sign requests using a private key, and providers verify those requests using the agent's public key. It's elegant and the future. [[1](#compare)]
 > 
 > *Scott Motte–creator of `dotenv` and `dotenvx`*
 
@@ -20,7 +20,7 @@ npm i -g vestauth
 vestauth agent init
 
 vestauth agent curl https://api.vestauth.com/whoami
-vestauth agent curl -X POST https://ping.vestauth.com
+vestauth agent curl -X POST https://ping.vestauth.com/ping
 ```
 
 <details><summary>with curl 🌐 </summary><br>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vestauth",
-  "version": "0.8.5",
+  "version": "0.8.7",
   "description": "auth for agents–from the creator of dotenvx",
   "keywords": [
     "vestauth"

package/src/cli/actions/agent/curl.js

@@ -26,6 +26,9 @@ async function curl () {
 
     const { stdout, exitCode } = await execute.execa(injected[0], injected.slice(1), {})
 
+    logger.debug(`exitCode: ${exitCode}`)
+    logger.debug(`stdout: ${stdout}`)
+
     if (exitCode !== 0) {
       logger.debug(`received exitCode ${exitCode}`)
       throw new Errors({ exitCode }).commandFailed()

package/src/lib/api/postRegister.js

@@ -13,7 +13,7 @@ class PostRegister {
     const publicJwk = this.publicJwk
 
     const httpMethod = 'POST'
-    const headers = await agentHeaders(httpMethod, url, 'agent-123')
+    const headers = await agentHeaders(httpMethod, url, 'REQUESTING')
     headers['Content-Type'] = 'application/json'
 
     const resp = await http(url, {

package/src/lib/api/postVerify.js

@@ -1,45 +0,0 @@
-const { http } = require('../helpers/http')
-const buildApiError = require('../helpers/buildApiError')
-
-class PostVerify {
-  constructor (hostname, httpMethod, uri, signature, signatureInput) {
-    this.hostname = hostname || 'https://api.vestauth.com'
-    this.httpMethod = httpMethod
-    this.uri = uri
-    this.signature = signature
-    this.signatureInput = signatureInput
-  }
-
-  async run () {
-    const url = `${this.hostname}/verify`
-    const httpMethod = this.httpMethod
-    const uri = this.uri
-    const signature = this.signature
-    const signatureInput = this.signatureInput
-
-    const headers = {
-      'Content-Type': 'application/json'
-    }
-
-    const resp = await http(url, {
-      method: 'POST',
-      headers,
-      body: JSON.stringify({
-        http_method: httpMethod,
-        uri,
-        signature,
-        signature_input: signatureInput
-      })
-    })
-
-    if (resp.statusCode >= 400) {
-      const json = await resp.body.json()
-      throw buildApiError(resp.statusCode, json)
-    }
-
-    const json = await resp.body.json()
-    return json
-  }
-}
-
-module.exports = PostVerify