@macaw-ai/client 0.0.0-stage → 0.9.10

package/LICENSE.md

@@ -0,0 +1,339 @@
+MACAW CLIENT SOFTWARE LICENSE AGREEMENT
+
+Version 1.0
+Effective Date: January 2025
+
+This MACAW Client Software License Agreement ("Agreement") is a legal agreement
+between you (either an individual or a legal entity, "You" or "User") and MACAW
+Security, Inc., a Delaware corporation ("MACAW Security," "we," "us," or "our").
+
+BY DOWNLOADING, INSTALLING, COPYING, OR OTHERWISE USING THE SOFTWARE, YOU AGREE
+TO BE BOUND BY THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO THESE TERMS,
+DO NOT DOWNLOAD, INSTALL, OR USE THE SOFTWARE.
+
+================================================================================
+1. DEFINITIONS
+================================================================================
+
+1.1 "Software" means the MACAW Client library, including any compiled binaries,
+    source code (if provided), documentation, updates, patches, and any related
+    materials provided by MACAW Security.
+
+1.2 "Commercial Use" means any use of the Software in connection with a business,
+    commercial enterprise, or for-profit activity, including but not limited to:
+    (a) use in production environments serving paying customers; (b) use in
+    internal business operations; (c) use in products or services offered for
+    sale or license; or (d) use by or on behalf of a government entity.
+
+1.3 "Documentation" means any user guides, technical documentation, API
+    references, and other materials provided by MACAW Security relating to
+    the Software.
+
+1.4 "MACAW Services" means the backend services, APIs, LocalAgent, and
+    infrastructure operated by MACAW Security that the Software connects to.
+
+================================================================================
+2. LICENSE GRANT
+================================================================================
+
+2.1 Grant of License. Subject to the terms and conditions of this Agreement,
+    MACAW Security hereby grants You a limited, worldwide, royalty-free,
+    non-exclusive, non-transferable, non-sublicensable, revocable license to:
+
+    (a) download, install, and use the Software;
+    (b) integrate the Software into Your applications and systems;
+    (c) make reasonable copies of the Software for backup purposes; and
+    (d) use the Documentation in connection with Your permitted use of
+        the Software.
+
+2.2 Permitted Free Use. You may use the Software free of charge for:
+
+    (a) Development and Testing: Use in development, staging, and testing
+        environments for the purpose of evaluating, developing, or testing
+        applications that integrate with the Software;
+
+    (b) Personal Projects: Non-commercial personal projects that are not
+        used in connection with any business or commercial activity; and
+
+    (c) Open Source Projects: Integration into open source software projects
+        that are distributed under an OSI-approved open source license,
+        provided that the Software itself is not redistributed and end users
+        obtain the Software directly from MACAW Security.
+
+2.3 Commercial Use License. Commercial Use of the Software requires a separate
+    commercial license agreement with MACAW Security. Please contact
+    support@macawsecurity.com to obtain a commercial license.
+
+2.4 License to MACAW Services. Use of the Software in connection with MACAW
+    Services is subject to the MACAW Security Terms of Service available at
+    https://www.macawsecurity.ai/terms.
+
+================================================================================
+3. RESTRICTIONS
+================================================================================
+
+3.1 General Restrictions. Except as expressly permitted in this Agreement,
+    You shall not (and shall not permit any third party to):
+
+    (a) reverse engineer, decompile, disassemble, or otherwise attempt to
+        derive the source code, algorithms, data structures, or underlying
+        ideas of the Software, except to the extent such restriction is
+        expressly prohibited by applicable law;
+
+    (b) modify, adapt, translate, or create derivative works based on the
+        Software;
+
+    (c) rent, lease, lend, sell, sublicense, assign, distribute, publish,
+        transfer, or otherwise make the Software available to any third party;
+
+    (d) remove, alter, or obscure any proprietary notices, labels, or marks
+        on the Software or Documentation;
+
+    (e) use the Software to develop a product or service that competes with
+        the Software or MACAW Services;
+
+    (f) use the Software to circumvent, disable, or interfere with any
+        security, authentication, or access control mechanisms;
+
+    (g) use the Software in any manner that violates applicable laws,
+        regulations, or third-party rights;
+
+    (h) use the Software to transmit any malware, viruses, or other
+        malicious code;
+
+    (i) use the Software to conduct security testing, penetration testing,
+        or vulnerability scanning of MACAW Services without prior written
+        authorization; or
+
+    (j) benchmark, test, or publish performance comparisons of the Software
+        without MACAW Security's prior written consent.
+
+3.2 Export Restrictions. The Software may be subject to export control laws
+    and regulations. You agree to comply with all applicable export and
+    re-export control laws and regulations, including the Export Administration
+    Regulations maintained by the U.S. Department of Commerce.
+
+================================================================================
+4. INTELLECTUAL PROPERTY
+================================================================================
+
+4.1 Ownership. The Software is licensed, not sold. MACAW Security and its
+    licensors retain all right, title, and interest in and to the Software,
+    including all intellectual property rights therein. This Agreement does
+    not grant You any rights to trademarks, service marks, or trade names
+    of MACAW Security.
+
+4.2 Feedback. If You provide any feedback, suggestions, or recommendations
+    regarding the Software ("Feedback"), You hereby grant MACAW Security a
+    perpetual, irrevocable, worldwide, royalty-free license to use, modify,
+    and incorporate such Feedback into the Software and MACAW Services
+    without any obligation to You.
+
+4.3 Third-Party Components. The Software may include third-party open source
+    components subject to separate license terms. A list of such components
+    and their respective licenses is provided in the NOTICE file accompanying
+    the Software. To the extent there is a conflict between this Agreement
+    and any open source license, the open source license terms shall govern
+    solely with respect to the applicable open source component.
+
+================================================================================
+5. DATA AND PRIVACY
+================================================================================
+
+5.1 Data Collection. The Software may collect and transmit certain data to
+    MACAW Services, including but not limited to: usage metrics, error reports,
+    and diagnostic information. Such data collection is subject to the MACAW
+    Security Privacy Policy available at https://www.macawsecurity.ai/privacy.
+
+5.2 Your Data. As between You and MACAW Security, You retain all rights to
+    any data, content, or materials that You process using the Software
+    ("Your Data"). You grant MACAW Security only such rights to Your Data
+    as are necessary to provide the MACAW Services.
+
+================================================================================
+6. DISCLAIMER OF WARRANTIES
+================================================================================
+
+6.1 AS-IS BASIS. THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT
+    WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW,
+    MACAW SECURITY EXPRESSLY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS,
+    IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING BUT NOT LIMITED TO:
+
+    (a) IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+        PURPOSE, TITLE, AND NON-INFRINGEMENT;
+
+    (b) WARRANTIES ARISING FROM COURSE OF DEALING, USAGE, OR TRADE PRACTICE;
+
+    (c) WARRANTIES THAT THE SOFTWARE WILL BE UNINTERRUPTED, ERROR-FREE,
+        SECURE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS; AND
+
+    (d) WARRANTIES REGARDING THE ACCURACY, RELIABILITY, OR COMPLETENESS
+        OF ANY RESULTS OBTAINED FROM THE SOFTWARE.
+
+6.2 BETA FEATURES. Any features or functionality designated as "beta,"
+    "preview," "experimental," or similar are provided without any warranty
+    and may be modified or discontinued at any time without notice.
+
+================================================================================
+7. LIMITATION OF LIABILITY
+================================================================================
+
+7.1 EXCLUSION OF DAMAGES. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW,
+    IN NO EVENT SHALL MACAW SECURITY OR ITS AFFILIATES, LICENSORS, OR SERVICE
+    PROVIDERS BE LIABLE FOR ANY:
+
+    (a) INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY
+        DAMAGES;
+
+    (b) LOSS OF PROFITS, REVENUE, BUSINESS, SAVINGS, OR GOODWILL;
+
+    (c) LOSS OF DATA OR DATA BREACH;
+
+    (d) COST OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+
+    (e) BUSINESS INTERRUPTION OR LOSS OF USE;
+
+    ARISING OUT OF OR IN CONNECTION WITH THIS AGREEMENT OR THE USE OR
+    INABILITY TO USE THE SOFTWARE, REGARDLESS OF THE THEORY OF LIABILITY
+    (CONTRACT, TORT, STRICT LIABILITY, OR OTHERWISE), EVEN IF MACAW SECURITY
+    HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+7.2 CAP ON LIABILITY. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW,
+    MACAW SECURITY'S TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATED
+    TO THIS AGREEMENT SHALL NOT EXCEED THE GREATER OF: (A) THE AMOUNTS
+    PAID BY YOU TO MACAW SECURITY FOR THE SOFTWARE DURING THE TWELVE (12)
+    MONTHS PRECEDING THE CLAIM; OR (B) ONE HUNDRED U.S. DOLLARS ($100).
+
+7.3 ESSENTIAL PURPOSE. THE LIMITATIONS IN THIS SECTION 7 SHALL APPLY
+    NOTWITHSTANDING ANY FAILURE OF THE ESSENTIAL PURPOSE OF ANY LIMITED
+    REMEDY AND TO THE FULLEST EXTENT PERMITTED BY LAW.
+
+================================================================================
+8. INDEMNIFICATION
+================================================================================
+
+8.1 Your Indemnification. You agree to indemnify, defend, and hold harmless
+    MACAW Security and its officers, directors, employees, agents, affiliates,
+    and licensors from and against any and all claims, damages, losses,
+    liabilities, costs, and expenses (including reasonable attorneys' fees)
+    arising out of or relating to:
+
+    (a) Your use of the Software in violation of this Agreement;
+    (b) Your violation of any applicable law or regulation;
+    (c) Your violation of any third-party rights; or
+    (d) Any data or content You process using the Software.
+
+================================================================================
+9. TERM AND TERMINATION
+================================================================================
+
+9.1 Term. This Agreement is effective until terminated.
+
+9.2 Termination by You. You may terminate this Agreement at any time by
+    ceasing all use of the Software and destroying all copies in Your
+    possession or control.
+
+9.3 Termination by MACAW Security. MACAW Security may terminate this
+    Agreement immediately upon written notice if:
+
+    (a) You breach any provision of this Agreement;
+    (b) You become subject to bankruptcy, insolvency, or similar proceedings;
+    (c) MACAW Security discontinues the Software; or
+    (d) Required by law or regulatory authority.
+
+9.4 Effect of Termination. Upon termination:
+
+    (a) All licenses granted hereunder shall immediately terminate;
+    (b) You shall cease all use of the Software;
+    (c) You shall destroy all copies of the Software in Your possession; and
+    (d) Sections 1, 3, 4, 5, 6, 7, 8, 10, and 11 shall survive termination.
+
+================================================================================
+10. GOVERNING LAW AND DISPUTE RESOLUTION
+================================================================================
+
+10.1 Governing Law. This Agreement shall be governed by and construed in
+     accordance with the laws of the State of California, United States,
+     without regard to its conflict of laws principles.
+
+10.2 Jurisdiction. Any legal action or proceeding arising out of or relating
+     to this Agreement shall be brought exclusively in the state or federal
+     courts located in San Francisco County, California, and You hereby
+     consent to the personal jurisdiction and venue of such courts.
+
+10.3 Arbitration. At MACAW Security's sole discretion, any dispute arising
+     out of or relating to this Agreement may be resolved by binding
+     arbitration administered by JAMS in San Francisco, California, in
+     accordance with its Comprehensive Arbitration Rules. The arbitrator's
+     decision shall be final and binding, and judgment may be entered in
+     any court of competent jurisdiction.
+
+10.4 Class Action Waiver. YOU AND MACAW SECURITY AGREE THAT EACH MAY BRING
+     CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY AND
+     NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR
+     REPRESENTATIVE PROCEEDING.
+
+10.5 Injunctive Relief. Notwithstanding the foregoing, MACAW Security may
+     seek injunctive or other equitable relief in any court of competent
+     jurisdiction to protect its intellectual property rights.
+
+================================================================================
+11. GENERAL PROVISIONS
+================================================================================
+
+11.1 Entire Agreement. This Agreement constitutes the entire agreement
+     between You and MACAW Security regarding the Software and supersedes
+     all prior agreements, understandings, and communications.
+
+11.2 Amendment. MACAW Security may modify this Agreement at any time by
+     posting a revised version on its website. Your continued use of the
+     Software after such modification constitutes acceptance of the
+     modified terms.
+
+11.3 Waiver. No failure or delay by MACAW Security in exercising any right
+     under this Agreement shall constitute a waiver of that right.
+
+11.4 Severability. If any provision of this Agreement is held invalid or
+     unenforceable, the remaining provisions shall continue in full force
+     and effect, and the invalid provision shall be modified to the minimum
+     extent necessary to make it valid and enforceable.
+
+11.5 Assignment. You may not assign or transfer this Agreement or any rights
+     hereunder without MACAW Security's prior written consent. MACAW Security
+     may assign this Agreement without restriction.
+
+11.6 Notices. All notices under this Agreement shall be in writing and
+     deemed given when delivered by email or certified mail. Notices to
+     MACAW Security should be sent to:
+
+     MACAW Security, Inc.
+     Email: support@macawsecurity.com
+
+11.7 Force Majeure. Neither party shall be liable for any failure or delay
+     in performance due to causes beyond its reasonable control, including
+     acts of God, natural disasters, war, terrorism, riots, embargoes,
+     acts of civil or military authorities, fire, floods, accidents,
+     strikes, or shortages of transportation, facilities, fuel, energy,
+     labor, or materials.
+
+11.8 U.S. Government Rights. If You are a U.S. Government end user, the
+     Software is a "commercial item" as defined in 48 C.F.R. 2.101,
+     consisting of "commercial computer software" and "commercial computer
+     software documentation," as such terms are used in 48 C.F.R. 12.212.
+     The Software is licensed to U.S. Government end users only as a
+     commercial item and with only those rights as are granted to all
+     other end users pursuant to this Agreement.
+
+================================================================================
+12. CONTACT INFORMATION
+================================================================================
+
+For questions, support, or to obtain a commercial license, please contact:
+
+MACAW Security, Inc.
+Email: support@macawsecurity.com
+Website: https://www.macawsecurity.ai
+
+================================================================================
+
+Copyright (c) 2025 MACAW Security, Inc. All rights reserved.

package/bin/install.js

@@ -0,0 +1,278 @@
+#!/usr/bin/env node
+// Set up MACAW for a Python project: pick an interpreter we have a wheel for,
+// install the client and the adapters into it, get a key, and leave the
+// examples somewhere the user can run them.
+//
+// Everything lands in one directory the user chooses, config included, so a
+// second install elsewhere is a second workspace rather than a collision.
+// That is also why MACAW_HOME is mentioned at the end: the client searches
+// $MACAW_HOME, then the current directory, then home - so from inside the
+// install directory it already works, and the variable is only for running
+// from somewhere else.
+
+import { spawnSync } from "node:child_process";
+import { createInterface } from "node:readline/promises";
+import { fileURLToPath } from "node:url";
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+const PKG = path.join(HERE, "..");
+const API = process.env.MACAW_API_URL || "https://api.macawsecurity.ai";
+
+const C = process.stdout.isTTY
+  ? { dim: "\x1b[2m", b: "\x1b[1m", g: "\x1b[32m", y: "\x1b[33m", r: "\x1b[31m", c: "\x1b[36m", x: "\x1b[0m" }
+  : { dim: "", b: "", g: "", y: "", r: "", c: "", x: "" };
+
+const ok = (s) => console.log(`  ${C.g}✓${C.x} ${s}`);
+const no = (s) => console.log(`  ${C.r}✗${C.x} ${s}`);
+const info = (s) => console.log(`  ${C.c}→${C.x} ${s}`);
+
+// ---------------------------------------------------------------- wheels ---
+
+// The matrix is whatever shipped in this package, so the installer never
+// offers a Python we stopped building or misses one we added.
+function bundledWheels() {
+  const dir = path.join(PKG, "wheels");
+  if (!fs.existsSync(dir)) return [];
+  return fs.readdirSync(dir)
+    .filter((f) => f.startsWith("macaw_client-") && f.endsWith(".whl"))
+    .map((f) => {
+      const m = f.match(/-(cp\d+)-\1-(.+)\.whl$/);
+      return m ? { file: path.join(dir, f), tag: m[1], platform: m[2] } : null;
+    })
+    .filter(Boolean);
+}
+
+function platformTag() {
+  if (process.platform === "darwin") return process.arch === "arm64" ? "macosx_11_0_arm64" : "macosx_10_9_x86_64";
+  if (process.platform === "linux") return "manylinux_2_17_x86_64";
+  if (process.platform === "win32") return "win_amd64";
+  return null;
+}
+
+// cp314 -> "3.14", for both display and the interpreter name we look for.
+const version = (tag) => `${tag.slice(2, 3)}.${tag.slice(3)}`;
+
+// Newest first. Not parseFloat: that reads 3.9 as larger than 3.14 and would
+// hand a machine with both the older interpreter.
+const byVersionDesc = (a, b) => {
+  const [am, an] = a.split(".").map(Number);
+  const [bm, bn] = b.split(".").map(Number);
+  return bm - am || bn - an;
+};
+
+// ---------------------------------------------------------------- python ---
+
+function pythonVersionOf(exe) {
+  const r = spawnSync(exe, ["-c", "import sys;print('%d.%d' % sys.version_info[:2])"],
+                      { encoding: "utf8" });
+  return r.status === 0 ? r.stdout.trim() : null;
+}
+
+// Newest first, so a machine with several gets the one we would rather it use.
+function findPython(wheels) {
+  const wanted = [...new Set(wheels.map((w) => version(w.tag)))].sort(byVersionDesc);
+
+  for (const v of wanted) {
+    for (const exe of [`python${v}`, `python3.${v.split(".")[1]}`]) {
+      if (pythonVersionOf(exe) === v) return { exe, version: v };
+    }
+  }
+  // Whatever `python3` is may still be one we ship for.
+  const v = pythonVersionOf("python3");
+  if (v && wanted.includes(v)) return { exe: "python3", version: v };
+  return null;
+}
+
+// --------------------------------------------------------------- the pip ---
+
+// This is a client to a service the whole machine talks to, so it should be
+// importable from anywhere, not pinned inside one project. No venv is created:
+// one the user did not ask for is worse than none, and it would put the library
+// where their own code cannot see it.
+//
+// Homebrew and Debian mark their interpreters externally managed and refuse a
+// plain install. Their own message says what to do - --break-system-packages,
+// and "STRONGLY recommend that you additionally pass --user". The pair is the
+// point: --user writes to ~/.local and never into the managed prefix, which is
+// the thing the error exists to protect.
+function pipInstall(python, files) {
+  const base = ["-m", "pip", "install", "--disable-pip-version-check", "-q"];
+  const run = (args) =>
+    spawnSync(python, [...base, ...args, ...files], { stdio: ["ignore", "pipe", "pipe"], encoding: "utf8" });
+
+  const inVenv = spawnSync(python, ["-c", "import sys;print(sys.prefix!=sys.base_prefix)"],
+                           { encoding: "utf8" }).stdout?.trim() === "True";
+
+  let r = run(inVenv ? [] : ["--user"]);
+  if (r.status === 0) return { ok: true, where: inVenv ? "the active virtualenv" : "~/.local" };
+
+  if (/externally-managed-environment/i.test(r.stderr || "")) {
+    info("this Python is externally managed - installing to ~/.local, which leaves it untouched");
+    r = run(["--user", "--break-system-packages"]);
+    if (r.status === 0) return { ok: true, where: "~/.local" };
+  }
+  return { ok: false, err: (r.stderr || r.stdout || "").trim() };
+}
+
+// ------------------------------------------------------------ activation ---
+
+async function activate() {
+  const start = await fetch(`${API}/api/device/code`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    // 'default' is the regular console. secCC sends 'seccc' and gets its own
+    // view; a Python SDK install has no business landing there.
+    body: JSON.stringify({ device_name: `${os.hostname()} (client)`, platform: "default" }),
+  }).then((r) => r.json()).catch(() => null);
+
+  if (!start?.device_code) {
+    no(`Could not reach ${API}`);
+    return null;
+  }
+
+  // One clickable link, whatever the plane returned. A control plane older
+  // than verification_uri_complete still gives us both halves, so compose it
+  // rather than falling back to "here is a URL, now type this code".
+  const url = start.verification_uri_complete
+    || (start.verification_uri && start.user_code
+        && `${start.verification_uri}?user_code=${encodeURIComponent(start.user_code)}`)
+    || start.verification_uri;
+  console.log("");
+  console.log(`   Approve here:  ${C.c}${url}${C.x}`);
+  // The code is in the link. Worth printing separately only when it is not -
+  // an older control plane, or someone reading it off another machine.
+  if (!url.includes("user_code=")) console.log(`   Code  ${C.b}${start.user_code}${C.x}`);
+  console.log("");
+  console.log("   Waiting for approval...");
+
+  const deadline = Date.now() + (start.expires_in ?? 600) * 1000;
+  const every = (start.interval ?? 5) * 1000;
+  while (Date.now() < deadline) {
+    await new Promise((r) => setTimeout(r, every));
+    const poll = await fetch(`${API}/api/device/poll?device_code=${encodeURIComponent(start.device_code)}`)
+      .then((r) => r.json()).catch(() => null);
+    if (poll?.status === "complete") return { key: poll.api_key, workspace: poll.workspace };
+    if (poll?.status === "expired") { no("That code expired. Run this again."); return null; }
+  }
+  no("Timed out waiting for approval");
+  return null;
+}
+
+// ------------------------------------------------------------------ main ---
+
+async function main() {
+  console.log("");
+  console.log(`${C.b}  MACAW${C.x}`);
+  console.log("");
+
+  const wheels = bundledWheels();
+  const plat = platformTag();
+  const usable = wheels.filter((w) => w.platform === plat);
+
+  if (!usable.length) {
+    no(`No build for ${process.platform}/${process.arch}.`);
+    info("Builds we ship:");
+    for (const w of wheels) console.log(`      Python ${version(w.tag)}  ${w.platform}`);
+    process.exit(1);
+  }
+
+  // --check answers "would this work here, and with what" and changes nothing.
+  // Useful before installing, and the first thing to ask when it did not work.
+  if (process.argv.includes("--check")) {
+    const py = findPython(usable);
+    console.log(`  platform   ${process.platform}/${process.arch} → ${plat}`);
+    const shipped = [...new Set(usable.map((w) => version(w.tag)))].sort(byVersionDesc);
+    console.log(`  we ship    ${shipped.map((v) => "Python " + v).join(", ")}`);
+    console.log(py ? `  found      ${py.exe} (${py.version})` : `  found      nothing we have a build for`);
+    console.log(`  endpoint   ${API}`);
+    process.exit(py ? 0 : 1);
+  }
+
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  const ask = async (q, dflt) => {
+    if (!process.stdin.isTTY) return dflt;           // nobody to answer
+    const a = (await rl.question(q)).trim();
+    return a === "" ? dflt : a;
+  };
+
+  // 1 — where
+  const chosen = await ask(`  Where should MACAW go? ${C.dim}[./macaw]${C.x} `, "./macaw");
+  const dir = path.resolve(chosen.replace(/^~(?=$|\/)/, os.homedir()));
+  fs.mkdirSync(dir, { recursive: true });
+  ok(dir);
+
+  // 2 — python
+  const py = findPython(usable);
+  if (!py) {
+    no("No Python here that we have a build for.");
+    info(`On ${plat} we ship: ${[...new Set(usable.map((w) => version(w.tag)))].sort(byVersionDesc).join(", ")}`);
+    rl.close();
+    process.exit(1);
+  }
+  ok(`Python ${py.version}`);
+  const newest = usable.map((w) => version(w.tag)).sort(byVersionDesc)[0];
+  if (py.version !== newest) {
+    console.log(`  ${C.y}⚠${C.x} We are moving to Python ${newest}.`);
+  }
+
+  // 3 — a key, or a workspace
+  console.log("");
+  let key = await ask(`  API Key ${C.dim}[Enter creates a new workspace]${C.x} `, "");
+  let workspace = "";
+  if (key === "") {
+    const got = await activate();
+    if (!got) { rl.close(); process.exit(1); }
+    key = got.key;
+    workspace = got.workspace || "";
+    ok(`Activated in workspace ${workspace}`);
+  } else if (!key.startsWith("mw_")) {
+    no("An API key starts with 'mw_'");
+    rl.close();
+    process.exit(1);
+  }
+  rl.close();
+
+  // 4 — install
+  console.log("");
+  const wheel = usable.find((w) => version(w.tag) === py.version);
+  const adapters = fs.existsSync(path.join(PKG, "wheels"))
+    ? fs.readdirSync(path.join(PKG, "wheels")).filter((f) => f.startsWith("macaw_adapters-"))
+        .map((f) => path.join(PKG, "wheels", f))
+    : [];
+  const r = pipInstall(py.exe, [wheel.file, ...adapters]);
+  if (!r.ok) { no("pip install failed"); console.log(r.err); process.exit(1); }
+  ok(`macaw-client and macaw-adapters installed into ${r.where}`);
+
+  // 5 — the tree, and the config beside it
+  // Whatever build.sh assembled, verbatim. A list here would be a second
+  // place to keep in step, and it already fell out of step once.
+  const payload = path.join(PKG, "payload");
+  if (fs.existsSync(payload)) fs.cpSync(payload, dir, { recursive: true });
+  const cfgDir = path.join(dir, ".macaw");
+  fs.mkdirSync(cfgDir, { recursive: true, mode: 0o700 });
+  fs.writeFileSync(path.join(cfgDir, "config.json"), JSON.stringify({
+    transport: "http",
+    http_enabled: true,
+    macaw_endpoint: `${API}/rpc`,
+    api_key: key,
+    workspace,
+    multi_tenancy_enabled: true,
+  }, null, 2) + "\n", { mode: 0o600 });
+  ok("examples, demos and config written");
+
+  // 6 — what to do with it
+  console.log("");
+  console.log(`${C.b}  Check it${C.x}`);
+  console.log(`      cd ${dir}`);
+  console.log(`      ${py.exe} secureAI/test_harness_quick.py`);
+  console.log("");
+  console.log(`  ${C.dim}To use MACAW from other directories, point MACAW_HOME at${C.x}`);
+  console.log(`  ${C.dim}this directory in your shell:${C.x}`);
+  console.log(`      MACAW_HOME=${dir}`);
+  console.log("");
+}
+
+main().catch((e) => { no(e.message); process.exit(1); });

package/package.json

@@ -1,6 +1,39 @@
 {
   "name": "@macaw-ai/client",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.9.10",
+  "description": "Set up the MACAW client for a Python project: installs the SDK and adapters, creates a workspace, leaves the examples ready to run.",
+  "type": "module",
+  "bin": {
+    "macaw-client-install": "bin/install.js"
+  },
+  "files": [
+    "bin/install.js",
+    "wheels",
+    "payload",
+    "README.md",
+    "LICENSE.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "license": "SEE LICENSE IN LICENSE.md",
+  "homepage": "https://macawsecurity.ai",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mohanua/macaw-client-distro.git"
+  },
+  "keywords": [
+    "macaw",
+    "agent",
+    "policy",
+    "security",
+    "governance",
+    "openai",
+    "anthropic",
+    "langchain",
+    "mcp"
+  ],
+  "publishConfig": {
+    "access": "public"
+  }
+}