@idevelopers/agentlock 0.1.4 → 0.1.6

package/.claude-plugin/marketplace.json

@@ -8,14 +8,14 @@
   "plugins": [
     {
       "name": "agentlock",
-      "description": "Local permission firewall for AI coding agents and MCP tools",
+      "description": "Local permission firewall and audit guardrails for AI coding agents",
       "author": {
         "name": "iDevelopers"
       },
       "category": "development",
       "source": "./",
-      "version": "0.1.4",
-      "homepage": "https://www.npmjs.com/package/@idevelopers/agentlock"
+      "version": "0.1.6",
+      "homepage": "https://github.com/manish-1988/agentlock-installer#readme"
     }
   ]
 }

package/.claude-plugin/plugin.json

@@ -1,11 +1,11 @@
 {
   "name": "agentlock",
-  "version": "0.1.4",
-  "description": "Local permission firewall for AI coding agents and MCP tools",
+  "version": "0.1.6",
+  "description": "Local permission firewall and audit guardrails for AI coding agents",
   "author": {
     "name": "iDevelopers",
     "url": "https://github.com/manish-1988"
   },
-  "repository": "https://www.npmjs.com/package/@idevelopers/agentlock",
+  "repository": "https://github.com/manish-1988/agentlock-installer",
   "license": "MIT"
 }

package/README.md

@@ -1,8 +1,11 @@
 # AgentLock
 
-Stop AI coding agents from touching secrets, running unsafe commands, or overusing MCP tools without explicit policy.
+Stop AI coding agents from touching secrets, running unsafe commands, or
+overusing MCP tools without explicit policy.
 
-AgentLock is a local MCP server plus Claude Code and Codex plugin packaging. It gives each agent task a permission capsule for files, shell commands, secret reads, network egress, MCP tools, and actions that require approval.
+AgentLock is a local MCP server plus Claude Code and Codex plugin packaging. It
+gives each agent task a permission capsule for files, shell commands, secret
+reads, network egress, MCP tools, and actions that require approval.
 
 ## Install
 
@@ -29,6 +32,34 @@ node dist/index.js
 
 Polar handles paid licenses; npm distributes the runtime package. The public installer repository contains only plugin metadata and points Claude/Codex at `npx -y @idevelopers/agentlock`.
 
+## First Useful Run
+
+Start with a free local scan before giving an agent a broad task:
+
+```text
+1. Run agentlock_scan_environment.
+2. Generate a starter policy with agentlock_generate_policy.
+3. Save it as agentlock.policy.json.
+4. Use Pro checks before secret reads, deploys, package publishes, git pushes,
+   network egress, or broad MCP tool calls.
+```
+
+The free path surfaces risky files and agent-accessible configuration without
+printing secret values.
+
+## When Free Becomes Pro
+
+Upgrade when a scan becomes active enforcement:
+
+- check file, command, network, and MCP actions before they run
+- execute shell commands through policy with `shell:false`
+- require approval for publish, deploy, secret, and destructive actions
+- keep a redacted local audit log for sensitive agent work
+- prepare shared signed policies for future team usage
+
+Free scanner and policy-generator responses include an `upgrade` block when they
+find a risk surface or produce a policy that is ready for enforcement.
+
 ## Free, Pro, Team
 
 Free is the local AgentLock scanner and starter policy generator. The source repository remains private; the public installer repository only contains plugin metadata that points to the public npm runtime.
@@ -82,6 +113,15 @@ export AGENTLOCK_POLICY=agentlock.policy.example.json
 - `agentlock_audit_log`: Pro redacted local audit log.
 - `agentlock_activate_license`: store and verify a Polar license key.
 
+## Public Support
+
+The source repository is private. Public installation metadata, support, and
+issues live at:
+
+```text
+https://github.com/manish-1988/agentlock-installer
+```
+
 ## License Activation
 
 AgentLock uses Polar license keys and caches successful validation in `~/.agentlock/license.json` with a 72-hour offline grace window for Pro and Team licenses.

package/codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agentlock",
-  "version": "0.1.4",
-  "description": "Local permission firewall for AI coding agents and MCP tools",
+  "version": "0.1.6",
+  "description": "Local permission firewall and audit guardrails for AI coding agents",
   "author": "iDevelopers",
   "license": "MIT",
   "mcpServers": {

package/dist/index.js

@@ -5,7 +5,7 @@ import { registerTools } from "./server.js";
 async function main() {
     const server = new McpServer({
         name: "agentlock",
-        version: "0.1.4",
+        version: "0.1.5",
     });
     registerTools(server);
     const transport = new StdioServerTransport();

package/dist/license/gate.js

@@ -1,6 +1,6 @@
 import { AGENTLOCK_CHECKOUT_URL } from "./constants.js";
 export function requirePro(feature, tier) {
     if (tier === "free") {
-        throw new Error(`Pro license required: ${feature}. Buy a license at ${process.env.AGENTLOCK_CHECKOUT_URL ?? AGENTLOCK_CHECKOUT_URL}, then activate it with agentlock_activate_license.`);
+        throw new Error(`AgentLock Pro required for ${feature}. Pro unlocks policy decisions, guarded command execution, and redacted audit logs for AI-agent work. Buy a license at ${process.env.AGENTLOCK_CHECKOUT_URL ?? AGENTLOCK_CHECKOUT_URL}, then activate it with agentlock_activate_license.`);
     }
 }

package/dist/tools/activate_license.js

@@ -19,6 +19,9 @@ export function registerActivateLicenseTool(server) {
             checkoutUrl: verification.tier === "free"
                 ? process.env.AGENTLOCK_CHECKOUT_URL ?? AGENTLOCK_CHECKOUT_URL
                 : undefined,
+            nextStep: verification.tier === "free"
+                ? "This key did not unlock Pro or Team. Recheck the key, then buy or open the Polar checkout if needed."
+                : "License active. Run agentlock_check_action or agentlock_run_guarded_command before sensitive agent work.",
         });
     });
 }

package/dist/tools/generate_policy.js

@@ -1,6 +1,8 @@
 import { z } from "zod";
 import { generatePolicy } from "../enforcement/generate_policy.js";
+import { PolarLicenseValidator } from "../license/validator.js";
 import { jsonToolResult } from "./response.js";
+import { agentLockUpgradePrompt } from "./upgrade.js";
 const generatePolicyInputSchema = {
     mode: z.enum(["strict", "balanced", "relaxed"]).default("balanced"),
 };
@@ -10,10 +12,14 @@ export function registerGeneratePolicyTool(server) {
         description: "Generate a starter agentlock.policy.json permission capsule.",
         inputSchema: generatePolicyInputSchema,
     }, async ({ mode }) => {
+        const license = await new PolarLicenseValidator().verify();
         const policy = generatePolicy({ mode: mode });
         return jsonToolResult({
+            tier: license.tier,
             recommendedPath: "agentlock.policy.json",
             policy,
+            nextStep: "Save this policy, then use Pro checks when an agent wants to read secrets, publish packages, push code, deploy, or call broad MCP tools.",
+            upgrade: agentLockUpgradePrompt(`Generated a ${mode} policy capsule with ${policy.capsules[0]?.approvalRequired.length ?? 0} approval categories.`, license.tier),
         });
     });
 }

package/dist/tools/scan_environment.js

@@ -1,6 +1,8 @@
 import { z } from "zod";
+import { PolarLicenseValidator } from "../license/validator.js";
 import { scanEnvironment } from "../scan/environment.js";
 import { jsonToolResult } from "./response.js";
+import { agentLockUpgradePrompt } from "./upgrade.js";
 const scanEnvironmentInputSchema = {
     root: z.string().min(1).optional(),
     includeHome: z.boolean().default(true),
@@ -11,6 +13,17 @@ export function registerScanEnvironmentTool(server) {
         description: "Scan local AI-agent, MCP, and secret-adjacent surfaces without printing secret values.",
         inputSchema: scanEnvironmentInputSchema,
     }, async ({ root, includeHome }) => {
-        return jsonToolResult(await scanEnvironment(root ?? process.cwd(), includeHome));
+        const license = await new PolarLicenseValidator().verify();
+        const scan = await scanEnvironment(root ?? process.cwd(), includeHome);
+        return jsonToolResult({
+            ...scan,
+            tier: license.tier,
+            nextStep: scan.riskCount > 0
+                ? "Create agentlock.policy.json from agentlock_generate_policy, then enforce it before sensitive agent actions."
+                : "No immediate risk surfaces were found. Generate a policy now so the next agent task starts with a boundary.",
+            upgrade: agentLockUpgradePrompt(scan.riskCount > 0
+                ? `Scan found ${scan.riskCount} agent-accessible risk surfaces.`
+                : "The free scan is clean; Pro keeps future agent actions inside policy before they run.", license.tier),
+        });
     });
 }

package/dist/tools/upgrade.js

@@ -0,0 +1,19 @@
+import { AGENTLOCK_CHECKOUT_URL } from "../license/constants.js";
+export function agentLockUpgradePrompt(trigger, tier) {
+    if (tier !== "free") {
+        return undefined;
+    }
+    return {
+        product: "AgentLock Pro",
+        trigger,
+        checkoutUrl: process.env.AGENTLOCK_CHECKOUT_URL ?? AGENTLOCK_CHECKOUT_URL,
+        activationTool: "agentlock_activate_license",
+        value: "Turn a one-time risk scan into enforceable local policy: every risky command, file read, network call, and MCP action gets checked and logged before the agent proceeds.",
+        unlocks: [
+            "Evaluate actions against agentlock.policy.json with agentlock_check_action.",
+            "Run shell commands through policy enforcement with agentlock_run_guarded_command.",
+            "Keep a redacted local audit log for sensitive agent work.",
+            "Use Team later for shared signed policies and seat-based controls.",
+        ],
+    };
+}

package/docs/CONVERSION_LAUNCH_KIT.md

@@ -0,0 +1,133 @@
+# AgentLock Conversion Launch Kit
+
+Use this as the public launch and directory-submission source for AgentLock.
+
+## Landing Page Copy
+
+Headline:
+
+```text
+AgentLock
+```
+
+Subhead:
+
+```text
+A local permission firewall for AI coding agents before they read secrets, run
+dangerous commands, deploy, publish, push, or call broad MCP tools.
+```
+
+Hero CTA:
+
+```text
+Install free: claude mcp add agentlock -- npx -y @idevelopers/agentlock
+Upgrade: https://buy.polar.sh/polar_cl_exvU3F3ZTpiDvwBXIRqrMf30T1kBTsLxyx26B4SCkUz
+```
+
+Value proof:
+
+```text
+AgentLock scans a repo and home environment for agent-accessible risk surfaces,
+then generates a local permission policy. Free users can discover risk and create
+a starter policy. Pro enforces that policy before file reads, shell commands,
+network egress, package publishes, git pushes, deploys, and MCP tool calls.
+```
+
+## Demo Script
+
+```text
+1. Install AgentLock from npm.
+2. Run agentlock_scan_environment in a real repo.
+3. Show secret-adjacent file paths without printing secret values.
+4. Generate agentlock.policy.json with agentlock_generate_policy.
+5. Attempt a risky command through agentlock_check_action.
+6. Show the Pro-required upgrade message for enforcement.
+7. Activate a Pro key and rerun the check.
+8. Show allow, block, or needs_approval with a redacted audit trail.
+```
+
+Screenshot checklist:
+
+```text
+- npm package page showing install command and checkout link
+- free scan result with riskCount and redacted paths
+- generated policy snippet
+- Pro-required check_action output
+- Polar checkout page
+- activated Pro check returning a policy decision
+```
+
+## Directory Submission
+
+Title:
+
+```text
+AgentLock
+```
+
+Tagline:
+
+```text
+Local permission firewall for AI coding agents and MCP tools.
+```
+
+Short description:
+
+```text
+AgentLock scans agent-accessible risk surfaces, generates local permission
+capsules, and enforces policy before an AI coding agent reads secrets, runs
+commands, publishes packages, pushes code, deploys, or calls broad MCP tools.
+```
+
+Category:
+
+```text
+Developer tools, MCP, security, AI coding, agent permissions
+```
+
+Pricing:
+
+```text
+Free scanner and policy generator. Pro unlocks action checks, guarded command
+execution, and redacted local audit logs.
+```
+
+## Launch Posts
+
+Short post:
+
+```text
+Launched AgentLock for AI coding agents.
+
+Free: scan a repo for secret-adjacent agent risk and generate a starter policy.
+Pro: enforce the policy before file reads, commands, network calls, package
+publishes, git pushes, deploys, and broad MCP tool calls.
+
+npm: @idevelopers/agentlock
+```
+
+Founder/dev post:
+
+```text
+AI coding agents are powerful, but local permission boundaries are still too
+easy to blur.
+
+AgentLock adds a local policy layer: scan the environment, generate a permission
+capsule, then check or guard risky actions before they run.
+
+Free helps you see the risk. Pro helps you enforce the policy.
+```
+
+## Conversion Rule
+
+Show Pro when the user sees a concrete risk or policy:
+
+```text
+- after a scan finds secret-adjacent files or risky scripts
+- after a policy is generated
+- when the agent wants to read secrets
+- when the agent wants to publish, deploy, push, or run destructive commands
+- when an audit trail would help the user trust the agent session
+```
+
+The product should make users feel protected, not blocked for no reason.

package/docs/PRODUCTION_REPLICATION_PLAYBOOK.md

@@ -77,7 +77,7 @@ Validation results:
 
 ## Enterprise Readiness Hardening
 
-Completed on 2026-08-29 and published as public npm version `0.1.4`:
+Completed on 2026-08-29 and published as public npm version `0.1.5`:
 
 - added `SECURITY.md`
 - added `docs/THREAT_MODEL.md`
@@ -89,7 +89,7 @@ Completed on 2026-08-29 and published as public npm version `0.1.4`:
 - added `npm run smoke:public`
 - updated the public package tarball to include the security and readiness docs
 - refreshed dependencies and confirmed `npm audit` reports 0 vulnerabilities
-- confirmed `@idevelopers/agentlock@latest` resolves to `0.1.4`
+- confirmed `@idevelopers/agentlock@latest` resolves to `0.1.5`
 - confirmed public npm smoke against `@idevelopers/agentlock@latest`
 
 ## Validation Checklist
@@ -122,14 +122,29 @@ Sandbox payment:
 Live payment:
 
 1. Create AgentLock live product and checkout. Completed 2026-08-29.
-2. Publish `@idevelopers/agentlock`. Completed 2026-08-29 with version `0.1.2`; hardening docs and CI published as `0.1.4`.
-3. Install from a clean temp environment. Completed 2026-08-29 against public npm versions `0.1.2`, `0.1.3`, and `0.1.4`.
+2. Publish `@idevelopers/agentlock`. Completed 2026-08-29 with version `0.1.2`; hardening docs and CI published as `0.1.5`.
+3. Install from a clean temp environment. Completed 2026-08-29 against public npm versions `0.1.2`, `0.1.3`, `0.1.4`, and `0.1.5`.
 4. Buy the lowest paid recurring tier with a real test purchase. Completed 2026-08-29.
 5. Activate the issued key locally without pasting it into chat or docs. Completed 2026-08-29.
 6. Confirm Pro behavior works from public npm. Completed 2026-08-29.
 7. Confirm a fresh unlicensed temp HOME blocks Pro tools. Completed 2026-08-29.
 8. Cancel subscription, refund order, revoke benefit, and validate the refunded key no longer unlocks Pro. Completed 2026-08-29.
 
+## Conversion Polish
+
+Completed on 2026-08-29 for version `0.1.5`:
+
+- npm package metadata includes homepage, public installer repository,
+  support/issues URL, funding URL, richer keywords, and packaged docs.
+- Free scanner and policy-generator responses include contextual upgrade blocks
+  after a risk scan or generated policy.
+- Pro-required errors explain the concrete paid value before showing the Polar
+  checkout URL.
+- Public installer copy now clearly distinguishes free scanner/policy generation
+  from Pro enforcement and audit logging.
+- `docs/CONVERSION_LAUNCH_KIT.md` contains landing copy, demo script, screenshot
+  checklist, directory-submission fields, and launch posts.
+
 ## Security Notes
 
 - Never commit license keys, npm tokens, Polar server tokens, card details, OTPs, or private API keys.

package/docs/THREAT_MODEL.md

@@ -45,4 +45,4 @@ AgentLock protects local developer workflows where AI coding agents can request
 
 ## Validation Evidence
 
-The production runbook records the live purchase, Pro activation, public npm smoke, refund, subscription cancellation, and revoked-license validation for AgentLock `0.1.2`. The enterprise-readiness docs, CI matrix, audit gate, and public smoke script are published in AgentLock `0.1.4`.
+The production runbook records the live purchase, Pro activation, public npm smoke, refund, subscription cancellation, and revoked-license validation for AgentLock `0.1.2`. The enterprise-readiness docs, CI matrix, audit gate, and public smoke script are published in AgentLock `0.1.5`.

package/package.json

@@ -1,8 +1,21 @@
 {
   "name": "@idevelopers/agentlock",
-  "version": "0.1.4",
-  "description": "Local permission firewall for AI coding agents and MCP tools.",
+  "version": "0.1.6",
+  "description": "Local permission firewall, policy checks, and audit guardrails for AI coding agents.",
   "type": "module",
+  "author": "iDevelopers <tech@idevelopers.in>",
+  "homepage": "https://github.com/manish-1988/agentlock-installer#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/manish-1988/agentlock-installer.git"
+  },
+  "bugs": {
+    "url": "https://github.com/manish-1988/agentlock-installer/issues"
+  },
+  "funding": {
+    "type": "polar",
+    "url": "https://buy.polar.sh/polar_cl_exvU3F3ZTpiDvwBXIRqrMf30T1kBTsLxyx26B4SCkUz"
+  },
   "bin": {
     "agentlock": "dist/index.js"
   },
@@ -19,6 +32,7 @@
     "README.md",
     "SECURITY.md",
     "docs",
+    "scripts/public-package-smoke.mjs",
     "agentlock.policy.example.json",
     ".mcp.json",
     ".claude-plugin",
@@ -28,11 +42,17 @@
   ],
   "keywords": [
     "mcp",
+    "mcp-server",
     "codex",
     "claude-code",
     "agents",
+    "ai-agents",
+    "agentic-coding",
     "security",
-    "firewall"
+    "firewall",
+    "permissions",
+    "policy",
+    "audit-log"
   ],
   "license": "MIT",
   "publishConfig": {
@@ -46,7 +66,7 @@
   "devDependencies": {
     "@types/node": "^20.19.1",
     "typescript": "^5.8.3",
-    "vitest": "^3.2.4"
+    "vitest": "^4.1.11"
   },
   "engines": {
     "node": ">=20"

package/scripts/public-package-smoke.mjs

@@ -0,0 +1,128 @@
+#!/usr/bin/env node
+import { mkdtemp, rm } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { spawn } from "node:child_process";
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+
+const packageSpec = process.argv[2] ?? "@idevelopers/agentlock@latest";
+const npmCli = process.env.npm_execpath;
+const installDir = await mkdtemp(path.join(os.tmpdir(), "agentlock-smoke-install-"));
+const homeDir = await mkdtemp(path.join(os.tmpdir(), "agentlock-smoke-home-"));
+
+try {
+  await runNpm(["install", "--prefix", installDir, packageSpec, "--prefer-online"]);
+
+  const client = new Client({ name: "agentlock-public-smoke", version: "0.0.0" });
+  const agentlockEntrypoint = path.join(
+    installDir,
+    "node_modules",
+    "@idevelopers",
+    "agentlock",
+    "dist",
+    "index.js",
+  );
+  const transport = new StdioClientTransport({
+    command: process.execPath,
+    args: [agentlockEntrypoint],
+    env: {
+      ...process.env,
+      HOME: homeDir,
+      USERPROFILE: homeDir,
+    },
+  });
+
+  await client.connect(transport);
+  try {
+    const tools = await client.listTools();
+    const toolNames = tools.tools.map((tool) => tool.name).sort();
+    assertIncludes(toolNames, "agentlock_scan_environment");
+    assertIncludes(toolNames, "agentlock_generate_policy");
+    assertIncludes(toolNames, "agentlock_check_action");
+    assertIncludes(toolNames, "agentlock_run_guarded_command");
+    assertIncludes(toolNames, "agentlock_audit_log");
+    assertIncludes(toolNames, "agentlock_activate_license");
+
+    const scan = await client.callTool({
+      name: "agentlock_scan_environment",
+      arguments: {},
+    });
+    if (scan.isError) {
+      throw new Error("agentlock_scan_environment returned an error");
+    }
+
+    const policy = await client.callTool({
+      name: "agentlock_generate_policy",
+      arguments: {},
+    });
+    if (policy.isError) {
+      throw new Error("agentlock_generate_policy returned an error");
+    }
+
+    const proGate = await client.callTool({
+      name: "agentlock_check_action",
+      arguments: {
+        type: "command",
+        command: "node",
+        args: [],
+      },
+    });
+    const proGateText = proGate.content?.[0]?.text ?? "";
+    if (!proGate.isError || !/Pro license required/.test(proGateText) || !/buy\.polar\.sh/.test(proGateText)) {
+      throw new Error("unlicensed Pro gate did not block with checkout guidance");
+    }
+
+    console.log(
+      JSON.stringify(
+        {
+          packageSpec,
+          platform: process.platform,
+          node: process.version,
+          toolCount: toolNames.length,
+          freeToolsOk: true,
+          unlicensedProGateOk: true,
+        },
+        null,
+        2,
+      ),
+    );
+  } finally {
+    await client.close();
+  }
+} finally {
+  await rm(installDir, { force: true, recursive: true });
+  await rm(homeDir, { force: true, recursive: true });
+}
+
+function assertIncludes(values, expected) {
+  if (!values.includes(expected)) {
+    throw new Error(`Missing expected tool: ${expected}`);
+  }
+}
+
+function runNpm(args) {
+  if (npmCli) {
+    return run(process.execPath, [npmCli, ...args]);
+  }
+
+  const command = process.platform === "win32" ? "npm.cmd" : "npm";
+  return run(command, args, { shell: process.platform === "win32" });
+}
+
+function run(command, args, options = {}) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(command, args, {
+      stdio: "inherit",
+      shell: options.shell ?? false,
+    });
+    child.on("error", reject);
+    child.on("close", (code) => {
+      if (code === 0) {
+        resolve();
+        return;
+      }
+      reject(new Error(`${command} ${args.join(" ")} exited with ${code}`));
+    });
+  });
+}

package/skills/agentlock-workflow/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agentlock-workflow
 description: Use when running AI coding work under AgentLock permission capsules, secret-safe scans, command checks, or guarded command execution.
-version: 0.1.4
+version: 0.1.5
 ---
 
 # AgentLock Workflow