@idevelopers/agentlock 0.1.5 → 0.1.6

package/.claude-plugin/marketplace.json

@@ -8,14 +8,14 @@
   "plugins": [
     {
       "name": "agentlock",
-      "description": "Local permission firewall for AI coding agents and MCP tools",
+      "description": "Local permission firewall and audit guardrails for AI coding agents",
       "author": {
         "name": "iDevelopers"
       },
       "category": "development",
       "source": "./",
-      "version": "0.1.5",
-      "homepage": "https://www.npmjs.com/package/@idevelopers/agentlock"
+      "version": "0.1.6",
+      "homepage": "https://github.com/manish-1988/agentlock-installer#readme"
     }
   ]
 }

package/.claude-plugin/plugin.json

@@ -1,11 +1,11 @@
 {
   "name": "agentlock",
-  "version": "0.1.5",
-  "description": "Local permission firewall for AI coding agents and MCP tools",
+  "version": "0.1.6",
+  "description": "Local permission firewall and audit guardrails for AI coding agents",
   "author": {
     "name": "iDevelopers",
     "url": "https://github.com/manish-1988"
   },
-  "repository": "https://www.npmjs.com/package/@idevelopers/agentlock",
+  "repository": "https://github.com/manish-1988/agentlock-installer",
   "license": "MIT"
 }

package/README.md

@@ -1,8 +1,11 @@
 # AgentLock
 
-Stop AI coding agents from touching secrets, running unsafe commands, or overusing MCP tools without explicit policy.
+Stop AI coding agents from touching secrets, running unsafe commands, or
+overusing MCP tools without explicit policy.
 
-AgentLock is a local MCP server plus Claude Code and Codex plugin packaging. It gives each agent task a permission capsule for files, shell commands, secret reads, network egress, MCP tools, and actions that require approval.
+AgentLock is a local MCP server plus Claude Code and Codex plugin packaging. It
+gives each agent task a permission capsule for files, shell commands, secret
+reads, network egress, MCP tools, and actions that require approval.
 
 ## Install
 
@@ -29,6 +32,34 @@ node dist/index.js
 
 Polar handles paid licenses; npm distributes the runtime package. The public installer repository contains only plugin metadata and points Claude/Codex at `npx -y @idevelopers/agentlock`.
 
+## First Useful Run
+
+Start with a free local scan before giving an agent a broad task:
+
+```text
+1. Run agentlock_scan_environment.
+2. Generate a starter policy with agentlock_generate_policy.
+3. Save it as agentlock.policy.json.
+4. Use Pro checks before secret reads, deploys, package publishes, git pushes,
+   network egress, or broad MCP tool calls.
+```
+
+The free path surfaces risky files and agent-accessible configuration without
+printing secret values.
+
+## When Free Becomes Pro
+
+Upgrade when a scan becomes active enforcement:
+
+- check file, command, network, and MCP actions before they run
+- execute shell commands through policy with `shell:false`
+- require approval for publish, deploy, secret, and destructive actions
+- keep a redacted local audit log for sensitive agent work
+- prepare shared signed policies for future team usage
+
+Free scanner and policy-generator responses include an `upgrade` block when they
+find a risk surface or produce a policy that is ready for enforcement.
+
 ## Free, Pro, Team
 
 Free is the local AgentLock scanner and starter policy generator. The source repository remains private; the public installer repository only contains plugin metadata that points to the public npm runtime.
@@ -82,6 +113,15 @@ export AGENTLOCK_POLICY=agentlock.policy.example.json
 - `agentlock_audit_log`: Pro redacted local audit log.
 - `agentlock_activate_license`: store and verify a Polar license key.
 
+## Public Support
+
+The source repository is private. Public installation metadata, support, and
+issues live at:
+
+```text
+https://github.com/manish-1988/agentlock-installer
+```
+
 ## License Activation
 
 AgentLock uses Polar license keys and caches successful validation in `~/.agentlock/license.json` with a 72-hour offline grace window for Pro and Team licenses.

package/codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agentlock",
-  "version": "0.1.5",
-  "description": "Local permission firewall for AI coding agents and MCP tools",
+  "version": "0.1.6",
+  "description": "Local permission firewall and audit guardrails for AI coding agents",
   "author": "iDevelopers",
   "license": "MIT",
   "mcpServers": {

package/dist/license/gate.js

@@ -1,6 +1,6 @@
 import { AGENTLOCK_CHECKOUT_URL } from "./constants.js";
 export function requirePro(feature, tier) {
     if (tier === "free") {
-        throw new Error(`Pro license required: ${feature}. Buy a license at ${process.env.AGENTLOCK_CHECKOUT_URL ?? AGENTLOCK_CHECKOUT_URL}, then activate it with agentlock_activate_license.`);
+        throw new Error(`AgentLock Pro required for ${feature}. Pro unlocks policy decisions, guarded command execution, and redacted audit logs for AI-agent work. Buy a license at ${process.env.AGENTLOCK_CHECKOUT_URL ?? AGENTLOCK_CHECKOUT_URL}, then activate it with agentlock_activate_license.`);
     }
 }

package/dist/tools/activate_license.js

@@ -19,6 +19,9 @@ export function registerActivateLicenseTool(server) {
             checkoutUrl: verification.tier === "free"
                 ? process.env.AGENTLOCK_CHECKOUT_URL ?? AGENTLOCK_CHECKOUT_URL
                 : undefined,
+            nextStep: verification.tier === "free"
+                ? "This key did not unlock Pro or Team. Recheck the key, then buy or open the Polar checkout if needed."
+                : "License active. Run agentlock_check_action or agentlock_run_guarded_command before sensitive agent work.",
         });
     });
 }

package/dist/tools/generate_policy.js

@@ -1,6 +1,8 @@
 import { z } from "zod";
 import { generatePolicy } from "../enforcement/generate_policy.js";
+import { PolarLicenseValidator } from "../license/validator.js";
 import { jsonToolResult } from "./response.js";
+import { agentLockUpgradePrompt } from "./upgrade.js";
 const generatePolicyInputSchema = {
     mode: z.enum(["strict", "balanced", "relaxed"]).default("balanced"),
 };
@@ -10,10 +12,14 @@ export function registerGeneratePolicyTool(server) {
         description: "Generate a starter agentlock.policy.json permission capsule.",
         inputSchema: generatePolicyInputSchema,
     }, async ({ mode }) => {
+        const license = await new PolarLicenseValidator().verify();
         const policy = generatePolicy({ mode: mode });
         return jsonToolResult({
+            tier: license.tier,
             recommendedPath: "agentlock.policy.json",
             policy,
+            nextStep: "Save this policy, then use Pro checks when an agent wants to read secrets, publish packages, push code, deploy, or call broad MCP tools.",
+            upgrade: agentLockUpgradePrompt(`Generated a ${mode} policy capsule with ${policy.capsules[0]?.approvalRequired.length ?? 0} approval categories.`, license.tier),
         });
     });
 }

package/dist/tools/scan_environment.js

@@ -1,6 +1,8 @@
 import { z } from "zod";
+import { PolarLicenseValidator } from "../license/validator.js";
 import { scanEnvironment } from "../scan/environment.js";
 import { jsonToolResult } from "./response.js";
+import { agentLockUpgradePrompt } from "./upgrade.js";
 const scanEnvironmentInputSchema = {
     root: z.string().min(1).optional(),
     includeHome: z.boolean().default(true),
@@ -11,6 +13,17 @@ export function registerScanEnvironmentTool(server) {
         description: "Scan local AI-agent, MCP, and secret-adjacent surfaces without printing secret values.",
         inputSchema: scanEnvironmentInputSchema,
     }, async ({ root, includeHome }) => {
-        return jsonToolResult(await scanEnvironment(root ?? process.cwd(), includeHome));
+        const license = await new PolarLicenseValidator().verify();
+        const scan = await scanEnvironment(root ?? process.cwd(), includeHome);
+        return jsonToolResult({
+            ...scan,
+            tier: license.tier,
+            nextStep: scan.riskCount > 0
+                ? "Create agentlock.policy.json from agentlock_generate_policy, then enforce it before sensitive agent actions."
+                : "No immediate risk surfaces were found. Generate a policy now so the next agent task starts with a boundary.",
+            upgrade: agentLockUpgradePrompt(scan.riskCount > 0
+                ? `Scan found ${scan.riskCount} agent-accessible risk surfaces.`
+                : "The free scan is clean; Pro keeps future agent actions inside policy before they run.", license.tier),
+        });
     });
 }

package/dist/tools/upgrade.js

@@ -0,0 +1,19 @@
+import { AGENTLOCK_CHECKOUT_URL } from "../license/constants.js";
+export function agentLockUpgradePrompt(trigger, tier) {
+    if (tier !== "free") {
+        return undefined;
+    }
+    return {
+        product: "AgentLock Pro",
+        trigger,
+        checkoutUrl: process.env.AGENTLOCK_CHECKOUT_URL ?? AGENTLOCK_CHECKOUT_URL,
+        activationTool: "agentlock_activate_license",
+        value: "Turn a one-time risk scan into enforceable local policy: every risky command, file read, network call, and MCP action gets checked and logged before the agent proceeds.",
+        unlocks: [
+            "Evaluate actions against agentlock.policy.json with agentlock_check_action.",
+            "Run shell commands through policy enforcement with agentlock_run_guarded_command.",
+            "Keep a redacted local audit log for sensitive agent work.",
+            "Use Team later for shared signed policies and seat-based controls.",
+        ],
+    };
+}

package/docs/CONVERSION_LAUNCH_KIT.md

@@ -0,0 +1,133 @@
+# AgentLock Conversion Launch Kit
+
+Use this as the public launch and directory-submission source for AgentLock.
+
+## Landing Page Copy
+
+Headline:
+
+```text
+AgentLock
+```
+
+Subhead:
+
+```text
+A local permission firewall for AI coding agents before they read secrets, run
+dangerous commands, deploy, publish, push, or call broad MCP tools.
+```
+
+Hero CTA:
+
+```text
+Install free: claude mcp add agentlock -- npx -y @idevelopers/agentlock
+Upgrade: https://buy.polar.sh/polar_cl_exvU3F3ZTpiDvwBXIRqrMf30T1kBTsLxyx26B4SCkUz
+```
+
+Value proof:
+
+```text
+AgentLock scans a repo and home environment for agent-accessible risk surfaces,
+then generates a local permission policy. Free users can discover risk and create
+a starter policy. Pro enforces that policy before file reads, shell commands,
+network egress, package publishes, git pushes, deploys, and MCP tool calls.
+```
+
+## Demo Script
+
+```text
+1. Install AgentLock from npm.
+2. Run agentlock_scan_environment in a real repo.
+3. Show secret-adjacent file paths without printing secret values.
+4. Generate agentlock.policy.json with agentlock_generate_policy.
+5. Attempt a risky command through agentlock_check_action.
+6. Show the Pro-required upgrade message for enforcement.
+7. Activate a Pro key and rerun the check.
+8. Show allow, block, or needs_approval with a redacted audit trail.
+```
+
+Screenshot checklist:
+
+```text
+- npm package page showing install command and checkout link
+- free scan result with riskCount and redacted paths
+- generated policy snippet
+- Pro-required check_action output
+- Polar checkout page
+- activated Pro check returning a policy decision
+```
+
+## Directory Submission
+
+Title:
+
+```text
+AgentLock
+```
+
+Tagline:
+
+```text
+Local permission firewall for AI coding agents and MCP tools.
+```
+
+Short description:
+
+```text
+AgentLock scans agent-accessible risk surfaces, generates local permission
+capsules, and enforces policy before an AI coding agent reads secrets, runs
+commands, publishes packages, pushes code, deploys, or calls broad MCP tools.
+```
+
+Category:
+
+```text
+Developer tools, MCP, security, AI coding, agent permissions
+```
+
+Pricing:
+
+```text
+Free scanner and policy generator. Pro unlocks action checks, guarded command
+execution, and redacted local audit logs.
+```
+
+## Launch Posts
+
+Short post:
+
+```text
+Launched AgentLock for AI coding agents.
+
+Free: scan a repo for secret-adjacent agent risk and generate a starter policy.
+Pro: enforce the policy before file reads, commands, network calls, package
+publishes, git pushes, deploys, and broad MCP tool calls.
+
+npm: @idevelopers/agentlock
+```
+
+Founder/dev post:
+
+```text
+AI coding agents are powerful, but local permission boundaries are still too
+easy to blur.
+
+AgentLock adds a local policy layer: scan the environment, generate a permission
+capsule, then check or guard risky actions before they run.
+
+Free helps you see the risk. Pro helps you enforce the policy.
+```
+
+## Conversion Rule
+
+Show Pro when the user sees a concrete risk or policy:
+
+```text
+- after a scan finds secret-adjacent files or risky scripts
+- after a policy is generated
+- when the agent wants to read secrets
+- when the agent wants to publish, deploy, push, or run destructive commands
+- when an audit trail would help the user trust the agent session
+```
+
+The product should make users feel protected, not blocked for no reason.

package/docs/PRODUCTION_REPLICATION_PLAYBOOK.md

@@ -130,6 +130,21 @@ Live payment:
 7. Confirm a fresh unlicensed temp HOME blocks Pro tools. Completed 2026-08-29.
 8. Cancel subscription, refund order, revoke benefit, and validate the refunded key no longer unlocks Pro. Completed 2026-08-29.
 
+## Conversion Polish
+
+Completed on 2026-08-29 for version `0.1.5`:
+
+- npm package metadata includes homepage, public installer repository,
+  support/issues URL, funding URL, richer keywords, and packaged docs.
+- Free scanner and policy-generator responses include contextual upgrade blocks
+  after a risk scan or generated policy.
+- Pro-required errors explain the concrete paid value before showing the Polar
+  checkout URL.
+- Public installer copy now clearly distinguishes free scanner/policy generation
+  from Pro enforcement and audit logging.
+- `docs/CONVERSION_LAUNCH_KIT.md` contains landing copy, demo script, screenshot
+  checklist, directory-submission fields, and launch posts.
+
 ## Security Notes
 
 - Never commit license keys, npm tokens, Polar server tokens, card details, OTPs, or private API keys.

package/package.json

@@ -1,8 +1,21 @@
 {
   "name": "@idevelopers/agentlock",
-  "version": "0.1.5",
-  "description": "Local permission firewall for AI coding agents and MCP tools.",
+  "version": "0.1.6",
+  "description": "Local permission firewall, policy checks, and audit guardrails for AI coding agents.",
   "type": "module",
+  "author": "iDevelopers <tech@idevelopers.in>",
+  "homepage": "https://github.com/manish-1988/agentlock-installer#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/manish-1988/agentlock-installer.git"
+  },
+  "bugs": {
+    "url": "https://github.com/manish-1988/agentlock-installer/issues"
+  },
+  "funding": {
+    "type": "polar",
+    "url": "https://buy.polar.sh/polar_cl_exvU3F3ZTpiDvwBXIRqrMf30T1kBTsLxyx26B4SCkUz"
+  },
   "bin": {
     "agentlock": "dist/index.js"
   },
@@ -29,11 +42,17 @@
   ],
   "keywords": [
     "mcp",
+    "mcp-server",
     "codex",
     "claude-code",
     "agents",
+    "ai-agents",
+    "agentic-coding",
     "security",
-    "firewall"
+    "firewall",
+    "permissions",
+    "policy",
+    "audit-log"
   ],
   "license": "MIT",
   "publishConfig": {
@@ -47,7 +66,7 @@
   "devDependencies": {
     "@types/node": "^20.19.1",
     "typescript": "^5.8.3",
-    "vitest": "^3.2.4"
+    "vitest": "^4.1.11"
   },
   "engines": {
     "node": ">=20"