agent-permission 0.1.0 → 0.1.2

package/README.md

@@ -0,0 +1,66 @@
+# Agent Permission CLI
+
+Give AI agents a permission gate before they touch external URLs.
+
+## Quickstart
+
+```bash
+npx agent-permission install --adapter auto
+```
+
+This adds an Agent Permission block to the local agent instruction file, such as `AGENTS.md`, `CLAUDE.md`, or `agent-permission.chatgpt.md`, depending on the selected adapter.
+
+To install instructions and configure live checks in one step:
+
+```bash
+npx agent-permission install --adapter auto --api-key <YOUR_API_KEY>
+```
+
+Add an API key when you want live checks from the command line, CI, or agent runs:
+
+```bash
+npx agent-permission config set api-key <YOUR_API_KEY>
+npx agent-permission check https://example.com/blog-post --action summarize --exit-code
+```
+
+## What the Agent Runs
+
+After install, project instructions tell compatible agents to run:
+
+```bash
+agent-permission check <url> --action <crawl|summarize|extract|train|transact|post> --exit-code
+```
+
+If the binary is unavailable in the agent shell, the installed instructions tell the agent to use:
+
+```bash
+npx -y agent-permission@latest check <url> --action <crawl|summarize|extract|train|transact|post> --exit-code
+```
+
+## Commands
+
+```bash
+agent-permission check <url> --action <crawl|summarize|extract|train|transact|post>
+agent-permission batch --file checks.json
+agent-permission verify-receipt --file receipt.json
+agent-permission install --adapter auto|codex|claude|chatgpt|openclaw [--api-key <key>]
+agent-permission config set api-key <key>
+agent-permission config doctor
+```
+
+Use `--json` for machine-readable output and `--exit-code` to map decisions to process status:
+
+- `0`: allow
+- `2`: escalate
+- `3`: deny
+- `1`: CLI or API error
+
+## Environment
+
+```bash
+AGENT_PERMISSION_API_KEY=<key>
+AGENT_PERMISSION_API_URL=<url>
+AGENT_PERMISSION_DEFAULT_MODE=strict
+```
+
+Agent Permission evaluates URL access signals from `robots.txt`, `llms.txt`, and OpenTerms, then returns a signed receipt for auditability.

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAKA,OAAO,EAAyD,KAAK,EAAuD,OAAO,EAAE,MAAM,YAAY,CAAC;AAExJ,UAAU,WAAW;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;IACxC,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BzF;AA+GD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,WAAW,CA2BtD"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAKA,OAAO,EAAyD,KAAK,EAAuD,OAAO,EAAE,MAAM,YAAY,CAAC;AAExJ,UAAU,WAAW;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;IACxC,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BzF;AAgID,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,WAAW,CA2BtD"}

package/dist/cli.js

@@ -100,7 +100,20 @@ async function runInstall(args, runtime, io) {
     const adapter = parseAdapter(stringFlag(parsed, 'adapter') || parsed.positionals[0] || 'auto');
     const scope = parseScope(stringFlag(parsed, 'scope') || 'project');
     const result = await installAgentInstructions(adapter, scope, runtime);
-    io.stdout(`Installed Agent Permission instructions for ${result.adapter} at ${result.path}`);
+    const messages = [`Installed Agent Permission instructions for ${result.adapter} at ${result.path}`];
+    const apiKey = stringFlag(parsed, 'api-key');
+    if (apiKey) {
+        const current = await readConfig(runtime);
+        const path = await writeConfig(runtime, { ...current, apiKey });
+        messages.push(`Saved API key to ${path}`);
+    }
+    else {
+        const config = await resolveConfig(runtime);
+        if (!config.apiKey) {
+            messages.push('API key is not configured. Live checks will fail until you run `npx agent-permission config set api-key <YOUR_API_KEY>` or set AGENT_PERMISSION_API_KEY.', 'Verify setup with `npx agent-permission config doctor`.');
+        }
+    }
+    io.stdout(messages.join('\n'));
     return 0;
 }
 async function runConfig(args, runtime, io) {
@@ -192,7 +205,7 @@ Usage:
   agent-permission check <url> --action <action> [--json] [--exit-code]
   agent-permission batch --file checks.json [--json]
   agent-permission verify-receipt --file receipt.json
-  agent-permission install --adapter auto|codex|claude|chatgpt|openclaw [--scope project|user]
+  agent-permission install --adapter auto|codex|claude|chatgpt|openclaw [--scope project|user] [--api-key <key>]
   agent-permission config set api-key <key>
   agent-permission config doctor
 

package/dist/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAK5D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAa9H;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,UAU9D;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,UAqBtE"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAK5D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAa9H;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,UAU9D;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,UA2BtE"}

package/dist/install.js

@@ -41,17 +41,27 @@ Before crawling, summarizing, extracting, training on, transacting with, or post
 agent-permission check <url> --action <crawl|summarize|extract|train|transact|post> --exit-code
 \`\`\`
 
+If the \`agent-permission\` binary is not available in the agent shell, run the same check through npm:
+
+\`\`\`bash
+npx -y agent-permission@latest check <url> --action <crawl|summarize|extract|train|transact|post> --exit-code
+\`\`\`
+
 Use \`crawl\` for fetching or indexing pages, \`summarize\` for compacting page content, \`extract\` for structured data pulls, \`train\` for model training or dataset creation, \`transact\` for purchase/account-changing actions, and \`post\` for creating or modifying remote content.
 
 Treat \`allow\` as permitted, \`deny\` as blocked, and \`escalate\` as requiring human approval before continuing. Preserve the returned receipt ID in task notes when a permission decision affects user-visible work.`;
 }
 async function detectAdapter(runtime) {
     const claudePath = join(runtime.cwd, 'CLAUDE.md');
+    const chatgptPath = join(runtime.cwd, 'agent-permission.chatgpt.md');
     const agentsPath = join(runtime.cwd, 'AGENTS.md');
     if (await fileExists(claudePath))
         return 'claude';
-    if (await fileExists(agentsPath))
-        return 'codex';
+    if (await fileExists(chatgptPath))
+        return 'chatgpt';
+    const agents = await readFileIfExists(agentsPath);
+    if (agents !== undefined)
+        return isOpenClawInstructions(agents) ? 'openclaw' : 'codex';
     return 'codex';
 }
 function getInstructionPath(adapter, scope, runtime) {
@@ -69,14 +79,21 @@ function getInstructionPath(adapter, scope, runtime) {
     return join(runtime.cwd, 'AGENTS.md');
 }
 async function fileExists(path) {
+    return (await readFileIfExists(path)) !== undefined;
+}
+async function readFileIfExists(path) {
     try {
-        await readFile(path, 'utf8');
-        return true;
+        return await readFile(path, 'utf8');
     }
-    catch {
-        return false;
+    catch (err) {
+        if (err && typeof err === 'object' && 'code' in err && err.code === 'ENOENT')
+            return undefined;
+        throw err;
     }
 }
+function isOpenClawInstructions(content) {
+    return /\bOpenClaw\b/i.test(content);
+}
 function escapeRegExp(value) {
     return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 }

package/package.json

@@ -1,17 +1,24 @@
 {
   "name": "agent-permission",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Public CLI for Agent Permission checks and agent workspace installation.",
   "type": "module",
-  "bin": {
-    "agent-permission": "dist/index.js",
-    "skills": "dist/index.js"
-  },
+  "bin": "./dist/index.js",
   "files": [
     "dist"
   ],
+  "keywords": [
+    "ai",
+    "agents",
+    "permissions",
+    "robots.txt",
+    "llms.txt",
+    "openterms",
+    "cli"
+  ],
+  "license": "MIT",
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.json && node -e \"require('fs').chmodSync('dist/index.js', 0o755)\"",
     "prepack": "npm run build"
   },
   "engines": {