@hazeljs/cli 2.0.0 → 2.0.2

package/dist/commands/gatekeeper.js

@@ -0,0 +1,170 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerGatekeeperCommand = registerGatekeeperCommand;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+/**
+ * `hazel gatekeeper validate --config agent-gatekeeper.yaml`
+ * `hazel gatekeeper simulate --agent refund-agent --tool stripe.refund --input input.json`
+ * `hazel gatekeeper explain --invocation invocation.json`
+ */
+function registerGatekeeperCommand(program) {
+    const gatekeeper = program
+        .command('gatekeeper')
+        .description('Agent Gatekeeper — validate, simulate, and explain tool authorization policies');
+    gatekeeper
+        .command('validate')
+        .description('Validate an agent-gatekeeper.yaml policy file')
+        .option('--config <file>', 'Policy config file', 'agent-gatekeeper.yaml')
+        .option('--json', 'Print raw JSON result')
+        .action(async (opts) => {
+        try {
+            const { loadPoliciesFromFileSync, validatePolicies } = await Promise.resolve().then(() => __importStar(require('@hazeljs/agent-gatekeeper')));
+            const abs = path.resolve(process.cwd(), opts.config ?? 'agent-gatekeeper.yaml');
+            const loaded = loadPoliciesFromFileSync(fs, abs);
+            validatePolicies(loaded.policies);
+            const result = {
+                valid: true,
+                config: abs,
+                policyCount: loaded.policies.length,
+                mode: loaded.mode,
+                defaultDecision: loaded.defaultDecision,
+                policies: loaded.policies.map((p) => ({
+                    id: p.id,
+                    version: p.version,
+                    priority: p.priority,
+                })),
+            };
+            // eslint-disable-next-line no-console
+            console.log(opts.json ? JSON.stringify(result, null, 2) : JSON.stringify(result, null, 2));
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.error(e);
+            process.exitCode = 1;
+        }
+    });
+    gatekeeper
+        .command('simulate')
+        .description('Simulate gatekeeper decision for an invocation (never executes tools)')
+        .requiredOption('--agent <id>', 'Agent id')
+        .requiredOption('--tool <name>', 'Tool name')
+        .option('--input <file>', 'JSON input file')
+        .option('--environment <env>', 'Environment', 'development')
+        .option('--tenant <id>', 'Tenant id')
+        .option('--config <file>', 'Optional policy YAML file')
+        .option('--json', 'Print raw JSON')
+        .action(async (opts) => {
+        try {
+            const { AgentGatekeeper, loadPoliciesFromFileSync, defaultClock, defaultIdGenerator } = await Promise.resolve().then(() => __importStar(require('@hazeljs/agent-gatekeeper')));
+            let policies = [];
+            let mode = 'enforce';
+            let defaultDecision = 'deny';
+            if (opts.config) {
+                const abs = path.resolve(process.cwd(), opts.config);
+                const loaded = loadPoliciesFromFileSync(fs, abs);
+                policies = loaded.policies;
+                mode = loaded.mode ?? mode;
+                defaultDecision = loaded.defaultDecision ?? defaultDecision;
+            }
+            let input = {};
+            if (opts.input) {
+                const raw = fs.readFileSync(path.resolve(process.cwd(), opts.input), 'utf8');
+                input = JSON.parse(raw);
+            }
+            const gk = new AgentGatekeeper({
+                mode,
+                defaultDecision,
+                policies,
+                auditSink: { emit: () => undefined },
+            });
+            const context = {
+                invocationId: defaultIdGenerator()(),
+                runId: 'simulate-run',
+                agentId: opts.agent,
+                tenantId: opts.tenant,
+                toolName: opts.tool,
+                input,
+                environment: opts.environment ?? 'development',
+                timestamp: defaultClock().now(),
+            };
+            const simulation = await gk.simulate(context);
+            // eslint-disable-next-line no-console
+            console.log(JSON.stringify(simulation, null, 2));
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.error(e);
+            process.exitCode = 1;
+        }
+    });
+    gatekeeper
+        .command('explain')
+        .description('Explain gatekeeper decision from a saved invocation JSON file')
+        .argument('<file>', 'Invocation context JSON file')
+        .option('--config <file>', 'Optional policy YAML file')
+        .option('--json', 'Print raw JSON')
+        .action(async (file, opts) => {
+        try {
+            const { AgentGatekeeper, loadPoliciesFromFileSync, defaultClock } = await Promise.resolve().then(() => __importStar(require('@hazeljs/agent-gatekeeper')));
+            let policies = [];
+            if (opts.config) {
+                const abs = path.resolve(process.cwd(), opts.config);
+                policies = loadPoliciesFromFileSync(fs, abs).policies;
+            }
+            const raw = fs.readFileSync(path.resolve(process.cwd(), file), 'utf8');
+            const parsed = JSON.parse(raw);
+            const context = {
+                ...parsed,
+                timestamp: parsed.timestamp ? new Date(String(parsed.timestamp)) : defaultClock().now(),
+            };
+            const gk = new AgentGatekeeper({
+                mode: 'enforce',
+                defaultDecision: 'deny',
+                policies,
+                auditSink: { emit: () => undefined },
+            });
+            const simulation = await gk.simulate(context);
+            // eslint-disable-next-line no-console
+            console.log(JSON.stringify(simulation, null, 2));
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.error(e);
+            process.exitCode = 1;
+        }
+    });
+}

package/dist/commands/store.d.ts

@@ -0,0 +1,7 @@
+import { Command } from 'commander';
+/**
+ * `hazel store publish|install|list|remove|doctor` — local or hosted Agent OS package registry.
+ * Hosted (Cloud Team SKU): `--remote <url> --token <token>` or HAZEL_REGISTRY_URL / HAZEL_REGISTRY_TOKEN.
+ * `hazel install` aliases `hazel store install`.
+ */
+export declare function registerStoreCommand(program: Command): void;

package/dist/commands/store.js

@@ -0,0 +1,203 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerStoreCommand = registerStoreCommand;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+async function resolveRegistry(opts) {
+    const { createAgentPackageRegistry } = await Promise.resolve().then(() => __importStar(require('@hazeljs/agent')));
+    return createAgentPackageRegistry({
+        remote: opts.remote,
+        token: opts.token,
+        registryRoot: opts.registry,
+    });
+}
+function registryOptions(cmd) {
+    return cmd
+        .option('--registry <dir>', 'Local registry root (default: ~/.hazel/registry)')
+        .option('--remote <url>', 'Hosted registry base URL (Cloud Team SKU; env HAZEL_REGISTRY_URL)')
+        .option('--token <token>', 'Bearer token for hosted registry (env HAZEL_REGISTRY_TOKEN)');
+}
+async function publishAction(file, opts) {
+    const { loadMarketplacePackage } = await Promise.resolve().then(() => __importStar(require('@hazeljs/agent')));
+    const pkg = loadMarketplacePackage(path.resolve(process.cwd(), file));
+    const registry = await resolveRegistry(opts);
+    await registry.publish(pkg);
+    // eslint-disable-next-line no-console
+    console.log(JSON.stringify({
+        ok: true,
+        action: 'publish',
+        package: pkg.name,
+        version: pkg.version,
+        registry: registry.location,
+        kind: registry.kind,
+    }, null, 2));
+}
+async function installAction(spec, opts) {
+    const { loadMarketplacePackage, materializeAgentPackage, parsePackageSpec } = await Promise.resolve().then(() => __importStar(require('@hazeljs/agent')));
+    const projectRoot = path.resolve(process.cwd(), opts.cwd);
+    const resolvedPath = path.resolve(process.cwd(), spec);
+    const looksLikeFile = spec.includes(path.sep) ||
+        spec.includes('/') ||
+        spec.endsWith('.json') ||
+        fs.existsSync(resolvedPath);
+    let pkg;
+    if (looksLikeFile && fs.existsSync(resolvedPath) && fs.statSync(resolvedPath).isFile()) {
+        pkg = loadMarketplacePackage(resolvedPath);
+    }
+    else {
+        const { name, version } = parsePackageSpec(spec);
+        const registry = await resolveRegistry(opts);
+        pkg = await registry.get(name, version);
+    }
+    const result = materializeAgentPackage(pkg, projectRoot);
+    // eslint-disable-next-line no-console
+    console.log(JSON.stringify({
+        ok: true,
+        action: 'install',
+        package: result.packageName,
+        version: result.version,
+        path: result.packagePath,
+        lock: result.lockPath,
+        note: 'Use hazel agent run with the materialized package DNA, or runtime.installAgentPackage for hot-reload',
+    }, null, 2));
+}
+/**
+ * `hazel store publish|install|list|remove|doctor` — local or hosted Agent OS package registry.
+ * Hosted (Cloud Team SKU): `--remote <url> --token <token>` or HAZEL_REGISTRY_URL / HAZEL_REGISTRY_TOKEN.
+ * `hazel install` aliases `hazel store install`.
+ */
+function registerStoreCommand(program) {
+    const store = program
+        .command('store')
+        .description('Agent OS package registry — local filesystem or hosted (--remote) Cloud Team registry');
+    registryOptions(store
+        .command('publish')
+        .description('Publish a marketplace / DNA JSON package to the registry')
+        .argument('<file>', 'Path to .dna.json or marketplace package JSON')).action(async (file, opts) => {
+        try {
+            await publishAction(file, opts);
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.error(e instanceof Error ? e.message : e);
+            process.exitCode = 1;
+        }
+    });
+    registryOptions(store
+        .command('install')
+        .description('Install a package into the project (.hazel/agents). Spec: path, name, or name@version')
+        .argument('<spec>', 'File path or package name[@version]')
+        .option('--cwd <dir>', 'Project root', '.')).action(async (spec, opts) => {
+        try {
+            await installAction(spec, opts);
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.error(e instanceof Error ? e.message : e);
+            process.exitCode = 1;
+        }
+    });
+    registryOptions(store
+        .command('list')
+        .description('List packages in the registry')
+        .argument('[query]', 'Optional name/description filter')).action(async (query, opts) => {
+        try {
+            const registry = await resolveRegistry(opts);
+            const packages = await registry.list(query);
+            // eslint-disable-next-line no-console
+            console.log(JSON.stringify({ ok: true, kind: registry.kind, registry: registry.location, packages }, null, 2));
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.error(e instanceof Error ? e.message : e);
+            process.exitCode = 1;
+        }
+    });
+    registryOptions(store
+        .command('remove')
+        .description('Remove a package (or one version) from the registry')
+        .argument('<spec>', 'name or name@version')).action(async (spec, opts) => {
+        try {
+            const { parsePackageSpec } = await Promise.resolve().then(() => __importStar(require('@hazeljs/agent')));
+            const { name, version } = parsePackageSpec(spec);
+            const registry = await resolveRegistry(opts);
+            await registry.remove(name, version);
+            // eslint-disable-next-line no-console
+            console.log(JSON.stringify({
+                ok: true,
+                action: 'remove',
+                name,
+                version: version ?? '*',
+                kind: registry.kind,
+                registry: registry.location,
+            }, null, 2));
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.error(e instanceof Error ? e.message : e);
+            process.exitCode = 1;
+        }
+    });
+    registryOptions(store.command('doctor').description('Check registry health (local or remote)')).action(async (opts) => {
+        try {
+            const registry = await resolveRegistry(opts);
+            const report = await registry.doctor();
+            // eslint-disable-next-line no-console
+            console.log(JSON.stringify({ ...report, kind: registry.kind, registry: registry.location }, null, 2));
+            if (!report.ok)
+                process.exitCode = 1;
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.error(e instanceof Error ? e.message : e);
+            process.exitCode = 1;
+        }
+    });
+    registryOptions(program
+        .command('install')
+        .description('Alias for hazel store install')
+        .argument('<spec>', 'File path or package name[@version]')
+        .option('--cwd <dir>', 'Project root', '.')).action(async (spec, opts) => {
+        try {
+            await installAction(spec, opts);
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.error(e instanceof Error ? e.message : e);
+            process.exitCode = 1;
+        }
+    });
+}

package/dist/commands/store.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/store.test.js

@@ -0,0 +1,120 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const store_1 = require("./store");
+describe('registerStoreCommand (G2 Package+Store)', () => {
+    it('registers store subcommands and install alias', () => {
+        const program = new commander_1.Command();
+        (0, store_1.registerStoreCommand)(program);
+        const store = program.commands.find((c) => c.name() === 'store');
+        expect(store).toBeDefined();
+        const names = store.commands.map((c) => c.name());
+        expect(names).toEqual(expect.arrayContaining(['publish', 'install', 'list', 'remove', 'doctor']));
+        expect(program.commands.some((c) => c.name() === 'install')).toBe(true);
+    });
+    it('publish then install materializes support-desk style package', async () => {
+        const { exportAgentDna, toMarketplacePackage, saveMarketplacePackage } = await Promise.resolve().then(() => __importStar(require('@hazeljs/agent')));
+        const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'hazel-store-cli-'));
+        const registryDir = path.join(tmp, 'registry');
+        const projectDir = path.join(tmp, 'project');
+        fs.mkdirSync(projectDir);
+        const dna = exportAgentDna({
+            name: 'support-desk',
+            version: '1.0.0',
+            tools: [{ name: 'lookupOrder' }],
+        });
+        const pkg = toMarketplacePackage(dna);
+        pkg.name = '@hazeljs/support-desk-agent';
+        const pkgFile = path.join(tmp, 'support-desk.marketplace.json');
+        saveMarketplacePackage(pkg, pkgFile);
+        const program = new commander_1.Command();
+        (0, store_1.registerStoreCommand)(program);
+        await program.parseAsync(['store', 'publish', pkgFile, '--registry', registryDir], {
+            from: 'user',
+        });
+        expect(process.exitCode ?? 0).toBe(0);
+        await program.parseAsync([
+            'store',
+            'install',
+            '@hazeljs/support-desk-agent@1.0.0',
+            '--cwd',
+            projectDir,
+            '--registry',
+            registryDir,
+        ], { from: 'user' });
+        expect(process.exitCode ?? 0).toBe(0);
+        const lockPath = path.join(projectDir, '.hazel', 'agents', 'lock.json');
+        expect(fs.existsSync(lockPath)).toBe(true);
+        const lock = JSON.parse(fs.readFileSync(lockPath, 'utf8'));
+        expect(lock['@hazeljs/support-desk-agent']?.version).toBe('1.0.0');
+        fs.rmSync(tmp, { recursive: true, force: true });
+    });
+    it('publishes and installs real starter support-desk.marketplace.json', async () => {
+        // Fixture is vendored in-package so CI (hazeljs repo only) does not need sibling starters.
+        const pkgFile = path.resolve(__dirname, '../../fixtures/support-desk.marketplace.json');
+        expect(fs.existsSync(pkgFile)).toBe(true);
+        const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'hazel-store-starter-'));
+        const registryDir = path.join(tmp, 'registry');
+        const projectDir = path.join(tmp, 'project');
+        fs.mkdirSync(projectDir);
+        const program = new commander_1.Command();
+        (0, store_1.registerStoreCommand)(program);
+        process.exitCode = 0;
+        await program.parseAsync(['store', 'publish', pkgFile, '--registry', registryDir], {
+            from: 'user',
+        });
+        expect(process.exitCode ?? 0).toBe(0);
+        await program.parseAsync([
+            'store',
+            'install',
+            '@hazeljs/support-desk-agent',
+            '--cwd',
+            projectDir,
+            '--registry',
+            registryDir,
+        ], { from: 'user' });
+        expect(process.exitCode ?? 0).toBe(0);
+        const packageJson = path.join(projectDir, '.hazel', 'agents', 'hazeljs__support-desk-agent', 'package.json');
+        expect(fs.existsSync(packageJson)).toBe(true);
+        const loaded = JSON.parse(fs.readFileSync(packageJson, 'utf8'));
+        expect(loaded.name).toBe('@hazeljs/support-desk-agent');
+        expect(loaded.dna.name).toBe('support-desk');
+        fs.rmSync(tmp, { recursive: true, force: true });
+    });
+});

package/dist/index.js

@@ -57,6 +57,8 @@ const eval_1 = require("./commands/eval");
 const benchmark_1 = require("./commands/benchmark");
 const agent_1 = require("./commands/agent");
 const skillgate_1 = require("./commands/skillgate");
+const gatekeeper_1 = require("./commands/gatekeeper");
+const store_1 = require("./commands/store");
 // Read version from package.json to ensure consistency
 const packageJson = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(__dirname, '../package.json'), 'utf8'));
 const program = new commander_1.Command();
@@ -73,6 +75,8 @@ program
 (0, benchmark_1.registerBenchmarkCommand)(program);
 (0, agent_1.registerAgentCommand)(program);
 (0, skillgate_1.registerSkillgateCommand)(program);
+(0, gatekeeper_1.registerGatekeeperCommand)(program);
+(0, store_1.registerStoreCommand)(program);
 // Generate command group (unified: hazel g <type> <name> [--path] [--dry-run] [--json], or hazel g --list)
 const generateCommand = program
     .command('generate')

package/dist/utils/packages-registry.js

@@ -252,7 +252,23 @@ const gate = Skillgate.fromOpenApi(openApiSpec, {
   invoke: { baseUrl: process.env.API_BASE_URL || 'http://127.0.0.1:3000' },
 });
 const registry = new ToolRegistry();
-gate.register(registry, 'api-concierge');
+    gate.register(registry, 'api-concierge');
+`,
+    },
+    {
+        shortName: 'agent-gatekeeper',
+        npm: '@hazeljs/agent-gatekeeper',
+        label: 'Agent Gatekeeper - tool authorization (@hazeljs/agent-gatekeeper)',
+        hint: 'import { AgentGatekeeper } from "@hazeljs/agent-gatekeeper";\n  // new AgentGatekeeper({ mode: "enforce", defaultDecision: "deny", policies })',
+        moduleImport: null,
+        moduleExpression: null,
+        setupTemplate: `import { AgentGatekeeper } from '@hazeljs/agent-gatekeeper';
+
+export const gatekeeper = new AgentGatekeeper({
+  mode: 'enforce',
+  defaultDecision: 'deny',
+  policies: [],
+});
 `,
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hazeljs/cli",
-  "version": "2.0.0",
+  "version": "2.0.2",
   "description": "Command-line interface for scaffolding and generating HazelJS applications and components",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -31,10 +31,11 @@
     "mustache": "^4.2.0"
   },
   "peerDependencies": {
-    "@hazeljs/eval": "^2.0.0",
-    "@hazeljs/benchmark": "^2.0.0",
-    "@hazeljs/agent": "^2.0.0",
-    "@hazeljs/skillgate": "^2.0.0"
+    "@hazeljs/eval": "^2.0.2",
+    "@hazeljs/benchmark": "^2.0.2",
+    "@hazeljs/agent": "^2.0.2",
+    "@hazeljs/skillgate": "^2.0.2",
+    "@hazeljs/agent-gatekeeper": "^2.0.2"
   },
   "peerDependenciesMeta": {
     "@hazeljs/eval": {
@@ -48,23 +49,19 @@
     },
     "@hazeljs/skillgate": {
       "optional": true
+    },
+    "@hazeljs/agent-gatekeeper": {
+      "optional": true
     }
   },
   "devDependencies": {
-    "@hazeljs/eval": "^2.0.0",
-    "@hazeljs/benchmark": "^2.0.0",
-    "@hazeljs/agent": "^2.0.0",
-    "@hazeljs/skillgate": "^2.0.0",
-    "@types/inquirer": "^8.2.12",
-    "@types/jest": "^29.5.14",
-    "@types/mustache": "^4.2.6",
-    "@types/node": "^20.19.39",
-    "@typescript-eslint/eslint-plugin": "^8.58.0",
-    "@typescript-eslint/parser": "^8.58.0",
-    "eslint": "^8.57.1",
-    "jest": "^29.7.0",
-    "prettier": "^3.8.1",
-    "ts-jest": "^29.4.9",
+    "@hazeljs/eval": "^2.0.2",
+    "@hazeljs/benchmark": "^2.0.2",
+    "@hazeljs/agent": "^2.0.2",
+    "@hazeljs/skillgate": "^2.0.2",
+    "@hazeljs/agent-gatekeeper": "^2.0.2",
+    "@types/inquirer": "^8.2.10",
+    "@types/mustache": "^4.2.5",
     "typescript": "^5.9.3"
   },
   "engines": {