@hynaweb/kavlr 0.0.0-stage → 1.0.0

package/bin/cli.js

@@ -0,0 +1,106 @@
+#!/usr/bin/env node
+const axios = require('axios');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { execSync } = require('child_process');
+const readline = require('readline');
+
+const API_URL = 'https://yasllkvdrgnqtjesdyfz.supabase.co/functions/v1/intercept';
+const args = process.argv.slice(2);
+const command = args[0];
+
+if (command === 'init') {
+  console.log('\x1b[36m%s\x1b[0m', '🛡️ Initializing KAVLR...');
+  const shell = process.env.SHELL || '';
+  const rcFile = shell.includes('zsh') ? '.zshrc' : '.bashrc';
+  const rcPath = path.join(os.homedir(), rcFile);
+  
+  const rl = readline.createInterface({
+    input: process.stdin,
+    output: process.stdout
+  });
+
+  rl.question('\n\x1b[33mPlease enter your KAVLR API Key: \x1b[0m', (apiKey) => {
+    if (!apiKey) {
+      console.log('\x1b[31m%s\x1b[0m', '❌ API Key is required. Setup aborted.');
+      rl.close();
+      return;
+    }
+
+    const configStr = `\n# KAVLR Agent Leash\nexport KAVLR_API_KEY="${apiKey}"\nalias rm="kavlr hook rm"\nalias cat="kavlr hook cat"\nalias cp="kavlr hook cp"\nalias mv="kavlr hook mv"\n`;
+
+    if (fs.existsSync(rcPath)) {
+      const content = fs.readFileSync(rcPath, 'utf8');
+      if (content.includes('KAVLR Agent Leash') === false) {
+        fs.appendFileSync(rcPath, configStr);
+        console.log('\n\x1b[32m%s\x1b[0m', '✅ API Key and Hook installed in ~/' + rcFile);
+        console.log('\x1b[36m%s\x1b[0m', '👉 Run: source ~/' + rcFile + ' to activate.');
+      } else {
+        console.log('\n\x1b[32m%s\x1b[0m', '✅ KAVLR is already configured. (If you need to change your key, edit ~/' + rcFile + ')');
+      }
+    }
+    rl.close();
+  });
+  
+  return;
+}
+
+if (command === 'hook') {
+  const originalCmd = args[1];
+  const originalArgs = args.slice(2).join(' ');
+  const payload = originalCmd + ' ' + originalArgs;
+  
+  analyzeCommand(payload, true, originalCmd, originalArgs, true);
+  return;
+}
+
+if (command === 'run') {
+  const payload = args.slice(1).join(' ');
+  analyzeCommand(payload, false, null, null, false);
+  return;
+}
+
+async function analyzeCommand(payload, executeAfter, cmd, cmdArgs, isHook) {
+  const API_KEY = process.env.KAVLR_API_KEY;
+  
+  if (API_KEY === undefined) {
+    console.error('\x1b[31m%s\x1b[0m', '❌ KAVLR_API_KEY is missing. Run "kavlr init" or export it manually.');
+    process.exit(1);
+  }
+
+  if (isHook === false) {
+    console.log('\n\x1b[36m%s\x1b[0m', '🔍 KAVLR analyzing: "' + payload + '"...');
+  }
+
+  try {
+    const response = await axios.post(API_URL, {
+      agent_id: isHook ? 'shell-hook' : 'cli-user',
+      action_type: cmd || 'run',
+      payload: payload
+    }, {
+      headers: { 'Authorization': 'Bearer ' + API_KEY }
+    });
+
+    if (isHook === false) {
+      console.log('\x1b[32m%s\x1b[0m', '✅ [ALLOWED] Action permitted.');
+    }
+    
+    if (executeAfter) {
+      try {
+        execSync(cmd + ' ' + cmdArgs, { stdio: 'inherit' });
+      } catch (err) {
+        process.exit(err.status || 1);
+      }
+    }
+    
+  } catch (error) {
+    if (error.response && error.response.status === 403) {
+      console.error('\x1b[41m\x1b[37m%s\x1b[0m', ' 🛑 [BLOCKED] THREAT DETECTED ');
+      console.error('\x1b[31m%s\x1b[0m', 'Reason: ' + error.response.data.message);
+    } else {
+      console.error('\x1b[31m%s\x1b[0m', '❌ KAVLR API Error. Blocking command for safety.');
+    }
+    process.exit(1);
+  }
+}

package/package.json

@@ -1,6 +1,17 @@
 {
   "name": "@hynaweb/kavlr",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "The Agent Leash. Runtime security for AI coding agents.",
+  "main": "bin/cli.js",
+  "bin": {
+    "kavlr": "bin/cli.js"
+  },
+  "scripts": {
+    "start": "node bin/cli.js"
+  },
+  "dependencies": {
+    "axios": "^1.6.0"
+  },
+  "author": "Harun (HYNAWEB)",
+  "license": "MIT"
+}

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.