agentinel 0.0.10 → 1.0.2

package/README.md

@@ -4,6 +4,7 @@
   [![npm version](https://img.shields.io/npm/v/agentinel.svg?style=flat-square)](https://www.npmjs.com/package/agentinel)
   [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg?style=flat-square)](LICENSE)
   [![Node.js CI](https://img.shields.io/github/actions/workflow/status/aman-janwani/agentinel/publish.yml?style=flat-square)](https://github.com/aman-janwani/agentinel/actions)
+  [![Tested On](https://img.shields.io/badge/Tested_On-macOS_%7C_Linux_%7C_Windows-success?style=flat-square)](#)
 </div>
 
 <br />
@@ -34,6 +35,7 @@ Every other tool in this space guards your terminal. **Agentinel guards your age
 - **Known Malware:** Bundles a local OSV database of 216,000+ confirmed malicious packages.
 - **Zero False Positives on Popular Packages:** Tested against the top 100 npm packages.
 - **Heuristic Scanning:** Flags npm takedowns, packages under 30 days old with < 1k downloads (slopsquatting), publisher drift, and non-existent hallucinated names.
+- **Cross-Platform Compatibility:** Fully tested and natively supported across macOS, Linux, and Windows.
 - **Fails Open:** Designed so that if it crashes or can't reach the registry, it fails open. It will never permanently wedge your terminal or block your work.
 
 ---
@@ -75,10 +77,10 @@ The AI reads this, realizes the package is fake or malicious, and intelligently
 
 What about installs that never go through an agent? (e.g., You typing `npm install` manually). 
 
-Agentinel provides an opt-in **PATH shim**. 
+Agentinel provides an opt-in **PATH shim**. By default, running `npx asen init` installs this shim automatically.
 
 ```sh
-npx asen init --shim
+npx asen init
 ```
 
 This puts a tiny, fail-open wrapper script earlier in your `PATH`. When you type `npm install`, the shim checks the package first. If it's safe, the real `npm` command runs instantly. 
@@ -119,17 +121,31 @@ How do we stack up against traditional commercial security scanners?
 
 ---
 
-## ⚙️ Configuration (Warn vs. Block)
+## ⚙️ Modes: warn vs strict
+
+Agentinel supports two operating modes, controlled by the `mode` field. You can switch between them using `npx asen mode <warn|strict>`.
+
+### warn (default)
+Agentinel surfaces a warning in the agent output but does not block the install. The agent decides whether to proceed.
+
+`.agentinel.json`
+```json
+{
+  "mode": "warn"
+}
+```
+*Best for teams migrating to Agentinel gradually or using agents in read-heavy workflows.*
 
-By default, Agentinel runs in **Warn Mode**. It alerts you (and the agent) but gets out of the way. 
-To strictly block bad packages, change your `.agentinel.json` file to strict mode:
+### strict
+Agentinel hard-blocks the install and returns an error payload to the agent. The install never reaches npm.
 
+`.agentinel.json`
 ```json
 {
-  "mode": "strict",
-  "allowlist": {}
+  "mode": "strict"
 }
 ```
+*Recommended for production repos, CI pipelines, and any project with autonomous agentic access.*
 
 ---
 
@@ -137,31 +153,40 @@ To strictly block bad packages, change your `.agentinel.json` file to strict mod
 
 Here are all the commands you can run via `npx asen <command>`:
 
-### `npx asen init`
-Wires up agent hooks and git hooks in the current repo.
+### `npx asen init [--no-shim]`
+Wires up agent hooks and git hooks in the current repo, and installs the global PATH shim for human terminal protection.
 ```bash
 $ npx asen init
-✅ Wired up pre-commit git hook.
-✅ Wired up Claude Code PreToolUse hook.
+wrote .agentinel.json
+registered the Claude Code PreToolUse hook in .claude/settings.json
+installed the git pre-commit hook in .git/hooks
+wrote shims for npm, npx, pnpm, yarn, bun in /Users/user/.agentinel/bin
+added the shims to PATH in /Users/user/.zshrc
+Mode is warn, so a risky package typed at the terminal will be reported, not blocked.
+Open a new terminal, or run \`asen unshim\` to undo this.
+
+agentinel is set up. New npm packages will be checked before they land.
+Default mode is warn. Set "mode": "strict" in .agentinel.json to block instead.
 ```
 
-### `npx asen init --shim`
-Wires up hooks AND installs the global PATH shim for human terminal protection.
+When used with `--no-shim`, it wires up hooks but skips installing the global PATH shim.
 ```bash
-$ npx asen init --shim
-✅ Shim installed. Native terminal npm commands are now guarded.
-✅ Wired up pre-commit git hook.
+$ npx asen init --no-shim
+wrote .agentinel.json
+registered the Claude Code PreToolUse hook in .claude/settings.json
+installed the git pre-commit hook in .git/hooks
+
+agentinel is set up. New npm packages will be checked before they land.
+Default mode is warn. Set "mode": "strict" in .agentinel.json to block instead.
 ```
 
-### `npx asen check`
+### `npx asen check [pkg...]`
 Scans the currently staged dependencies in your lockfile. Exits non-zero if flagged (great for CI/CD pipelines).
 ```bash
 $ npx asen check
-Scanning staged dependencies...
-✅ All 142 staged packages passed security checks.
+checked 142 package(s), nothing suspicious
 ```
 
-### `npx asen check <package-name>`
 Scans a specific package instantly without installing it.
 ```bash
 $ npx asen check react-router-v7-fake
@@ -169,18 +194,33 @@ $ npx asen check react-router-v7-fake
 This matches the profile of a slopsquatting or malicious package.
 ```
 
-### `npx asen allow <package-name> --reason "why"`
+### `npx asen allow <pkg> --reason "..."`
 Adds a package to the allowlist in `.agentinel.json` with a required reason. This provides an audited trail for your team.
 ```bash
 $ npx asen allow my-internal-pkg --reason "Internal company package not on public npm"
-✅ Added my-internal-pkg to .agentinel.json allowlist.
+allowlisted my-internal-pkg in .agentinel.json
+```
+
+### `npx asen mode <warn|strict>`
+Switches Agentinel's operating mode in the `.agentinel.json` file.
+```bash
+$ npx asen mode strict
+set mode to strict in .agentinel.json
+```
+
+### `npx asen uninstall`
+Completely removes all Agentinel hooks from your repository config files (`.claude`, `.gemini`, `.github`, etc.) and removes global shims.
+```bash
+$ npx asen uninstall
+agentinel has been completely uninstalled from this repository.
 ```
 
 ### `npx asen unshim`
 Removes the global PATH shim.
 ```bash
 $ npx asen unshim
-✅ Shim removed. Normal npm path restored.
+removed /Users/user/.agentinel/bin
+removed the PATH line from /Users/user/.zshrc
 ```
 
 ---

package/dist/asen.js

@@ -102,7 +102,21 @@ import { join } from "path";
 // src/config/schema.ts
 var CONFIG_FILENAME = ".agentinel.json";
 function defaultConfig() {
-  return { mode: "warn", allow: [] };
+  return {
+    mode: "warn",
+    allow: [
+      {
+        name: "asen",
+        reason: "Agentinel CLI tool",
+        date: (/* @__PURE__ */ new Date()).toISOString().substring(0, 10)
+      },
+      {
+        name: "agentinel",
+        reason: "Agentinel package",
+        date: (/* @__PURE__ */ new Date()).toISOString().substring(0, 10)
+      }
+    ]
+  };
 }
 function parseConfig(raw, warn2 = () => {
 }) {
@@ -1464,9 +1478,120 @@ function asRecord2(value) {
   return typeof value === "object" && value !== null ? value : null;
 }
 
-// src/hooks/claude-code.ts
-import { existsSync as existsSync6 } from "fs";
+// src/commands/mode.ts
+function runMode(targetMode) {
+  if (targetMode !== "warn" && targetMode !== "strict") {
+    console.error("usage: asen mode <warn|strict>");
+    return 1;
+  }
+  const repoRoot = repoRootOrCwd();
+  const config = loadConfig(repoRoot);
+  if (config.mode === targetMode) {
+    console.log(`mode is already ${targetMode}`);
+    return 0;
+  }
+  config.mode = targetMode;
+  saveConfig(repoRoot, config);
+  console.log(`set mode to ${targetMode} in .agentinel.json`);
+  return 0;
+}
+
+// src/commands/uninstall.ts
+import { existsSync as existsSync6, readFileSync as readFileSync6, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "fs";
 import { join as join6 } from "path";
+var HOOK_MARKER2 = "agentinel";
+var HOOK_SUBCOMMAND2 = "hook claude-code";
+function runUninstall() {
+  const repoRoot = repoRootOrCwd();
+  unwireClaudeCodeHook(repoRoot);
+  unwireCodexHook(repoRoot);
+  unwireCopilotHook(repoRoot);
+  unwireGeminiHook(repoRoot);
+  unwirePreCommitHook(repoRoot);
+  removeShim();
+  console.log("agentinel has been completely uninstalled from this repository.");
+  return 0;
+}
+function unwireClaudeCodeHook(repoRoot) {
+  const path = join6(repoRoot, ".claude", "settings.json");
+  if (!existsSync6(path)) return;
+  const file = readJson2(path);
+  if (file === null) return;
+  const hooks = asRecord3(file.hooks);
+  if (!hooks || !Array.isArray(hooks.PreToolUse)) return;
+  const preToolUse = hooks.PreToolUse;
+  hooks.PreToolUse = preToolUse.filter((hook) => !JSON.stringify(hook).includes(HOOK_SUBCOMMAND2));
+  if (hooks.PreToolUse.length === 0) {
+    delete hooks.PreToolUse;
+  }
+  if (Object.keys(hooks).length === 0) {
+    delete file.hooks;
+  }
+  writeJson2(path, file);
+  console.log("removed Claude Code hook");
+}
+function unwireCodexHook(repoRoot) {
+  const path = join6(repoRoot, ".codex", "hooks.json");
+  if (!existsSync6(path)) return;
+  const file = readJson2(path);
+  if (file === null) return;
+  const hooks = asRecord3(file.hooks);
+  if (!hooks || !Array.isArray(hooks.PreToolUse)) return;
+  const preToolUse = hooks.PreToolUse;
+  hooks.PreToolUse = preToolUse.filter((hook) => !JSON.stringify(hook).includes("hook codex"));
+  writeJson2(path, file);
+  console.log("removed Codex hook");
+}
+function unwireCopilotHook(repoRoot) {
+  const path = join6(repoRoot, ".github", "hooks", "agentinel.json");
+  if (!existsSync6(path)) return;
+  const file = readJson2(path);
+  if (file === null) return;
+  const hooks = asRecord3(file.hooks);
+  if (!hooks || !Array.isArray(hooks.preToolUse)) return;
+  const preToolUse = hooks.preToolUse;
+  hooks.preToolUse = preToolUse.filter((hook) => !JSON.stringify(hook).includes("hook copilot"));
+  writeJson2(path, file);
+  console.log("removed Copilot hook");
+}
+function unwireGeminiHook(repoRoot) {
+  const path = join6(repoRoot, ".gemini", "settings.json");
+  if (!existsSync6(path)) return;
+  const file = readJson2(path);
+  if (file === null) return;
+  const hooks = asRecord3(file.hooks);
+  if (!hooks || !Array.isArray(hooks.BeforeTool)) return;
+  const beforeTool = hooks.BeforeTool;
+  hooks.BeforeTool = beforeTool.filter((hook) => !JSON.stringify(hook).includes("hook gemini"));
+  writeJson2(path, file);
+  console.log("removed Gemini hook");
+}
+function unwirePreCommitHook(repoRoot) {
+  if (!existsSync6(join6(repoRoot, ".git"))) return;
+  const path = join6(hooksDirectory(repoRoot), "pre-commit");
+  if (!existsSync6(path)) return;
+  const existing = readFileSync6(path, "utf8");
+  if (!existing.includes(HOOK_MARKER2)) return;
+  rmSync2(path);
+  console.log("removed git pre-commit hook");
+}
+function readJson2(path) {
+  try {
+    return asRecord3(JSON.parse(readFileSync6(path, "utf8"))) ?? {};
+  } catch {
+    return null;
+  }
+}
+function writeJson2(path, value) {
+  writeFileSync4(path, JSON.stringify(value, null, 2) + "\n", "utf8");
+}
+function asRecord3(value) {
+  return typeof value === "object" && value !== null ? value : null;
+}
+
+// src/hooks/claude-code.ts
+import { existsSync as existsSync7 } from "fs";
+import { join as join7 } from "path";
 
 // src/checks/package-guard/resolve.ts
 import { execFileSync as execFileSync4 } from "child_process";
@@ -1550,7 +1675,7 @@ function candidatesFor(command, repoRoot) {
 }
 function isLocalTool(repoRoot, name) {
   const binary = name.includes("/") ? name.split("/").pop() : name;
-  return existsSync6(join6(repoRoot, "node_modules", ".bin", binary));
+  return existsSync7(join7(repoRoot, "node_modules", ".bin", binary));
 }
 function warn(verdicts) {
   const summary = plainSummary(verdicts);
@@ -1764,22 +1889,41 @@ async function runPreCommitHook() {
 }
 
 // bin/asen.ts
+import { readFileSync as readFileSync7 } from "fs";
+import { dirname as dirname2, join as join8 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+function getVersion() {
+  try {
+    const file = fileURLToPath2(import.meta.url);
+    const pkgPath = join8(dirname2(file), "..", "package.json");
+    const pkg = JSON.parse(readFileSync7(pkgPath, "utf8"));
+    return typeof pkg.version === "string" ? pkg.version : "unknown";
+  } catch {
+    return "unknown";
+  }
+}
 var USAGE = `asen, a guard for AI coding agent workflows
 
-  asen init [--shim]                 set up the hooks and config in this repo
+  asen init [--no-shim]              set up the hooks and config in this repo
   asen check [pkg...]                check staged dependencies, or specific packages
   asen allow <pkg> --reason "..."    allowlist a flagged package, with a logged reason
+  asen mode <warn|strict>            switch Agentinel's operating mode
+  asen uninstall                     remove all agent hooks from this repository
   asen unshim                        remove the PATH shims that --shim installed
 `;
 async function main(argv2) {
   const [command, ...rest] = argv2;
   switch (command) {
     case "init":
-      return runInit({ shim: rest.includes("--shim") });
+      return runInit({ shim: !rest.includes("--no-shim") });
     case "check":
       return runCheck(positionals(rest));
     case "allow":
       return runAllow(positionals(rest)[0], readFlag(rest, "--reason"));
+    case "mode":
+      return runMode(positionals(rest)[0]);
+    case "uninstall":
+      return runUninstall();
     case "unshim":
       return removeShim();
     // Not documented in the usage text on purpose. These are what the installed hooks call.
@@ -1788,6 +1932,10 @@ async function main(argv2) {
     // What the PATH shims call, with the whole command line as one argument.
     case "check-command":
       return runCheckCommand(rest[0]);
+    case "--version":
+    case "-v":
+      console.log(`agentinel v${getVersion()}`);
+      return 0;
     case "--help":
     case "-h":
     case void 0:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentinel",
-  "version": "0.0.10",
+  "version": "1.0.2",
   "description": "Catches AI hallucinated npm packages before an agent installs them",
   "license": "MIT",
   "author": "Aman Janwani",