agentinel 1.0.0 → 1.0.2

package/README.md

@@ -77,10 +77,10 @@ The AI reads this, realizes the package is fake or malicious, and intelligently
 
 What about installs that never go through an agent? (e.g., You typing `npm install` manually). 
 
-Agentinel provides an opt-in **PATH shim**. 
+Agentinel provides an opt-in **PATH shim**. By default, running `npx asen init` installs this shim automatically.
 
 ```sh
-npx asen init --shim
+npx asen init
 ```
 
 This puts a tiny, fail-open wrapper script earlier in your `PATH`. When you type `npm install`, the shim checks the package first. If it's safe, the real `npm` command runs instantly. 
@@ -153,28 +153,28 @@ Agentinel hard-blocks the install and returns an error payload to the agent. The
 
 Here are all the commands you can run via `npx asen <command>`:
 
-### `npx asen init [--shim]`
-Wires up agent hooks and git hooks in the current repo.
+### `npx asen init [--no-shim]`
+Wires up agent hooks and git hooks in the current repo, and installs the global PATH shim for human terminal protection.
 ```bash
 $ npx asen init
 wrote .agentinel.json
 registered the Claude Code PreToolUse hook in .claude/settings.json
 installed the git pre-commit hook in .git/hooks
+wrote shims for npm, npx, pnpm, yarn, bun in /Users/user/.agentinel/bin
+added the shims to PATH in /Users/user/.zshrc
+Mode is warn, so a risky package typed at the terminal will be reported, not blocked.
+Open a new terminal, or run \`asen unshim\` to undo this.
 
 agentinel is set up. New npm packages will be checked before they land.
 Default mode is warn. Set "mode": "strict" in .agentinel.json to block instead.
 ```
 
-When used with `--shim`, it wires up hooks AND installs the global PATH shim for human terminal protection.
+When used with `--no-shim`, it wires up hooks but skips installing the global PATH shim.
 ```bash
-$ npx asen init --shim
+$ npx asen init --no-shim
 wrote .agentinel.json
 registered the Claude Code PreToolUse hook in .claude/settings.json
 installed the git pre-commit hook in .git/hooks
-wrote shims for npm, npx, pnpm, yarn, bun in /Users/user/.agentinel/bin
-added the shims to PATH in /Users/user/.zshrc
-Mode is warn, so a risky package typed at the terminal will be reported, not blocked.
-Open a new terminal, or run \`asen unshim\` to undo this.
 
 agentinel is set up. New npm packages will be checked before they land.
 Default mode is warn. Set "mode": "strict" in .agentinel.json to block instead.
@@ -208,6 +208,13 @@ $ npx asen mode strict
 set mode to strict in .agentinel.json
 ```
 
+### `npx asen uninstall`
+Completely removes all Agentinel hooks from your repository config files (`.claude`, `.gemini`, `.github`, etc.) and removes global shims.
+```bash
+$ npx asen uninstall
+agentinel has been completely uninstalled from this repository.
+```
+
 ### `npx asen unshim`
 Removes the global PATH shim.
 ```bash

package/dist/asen.js

@@ -1496,9 +1496,102 @@ function runMode(targetMode) {
   return 0;
 }
 
-// src/hooks/claude-code.ts
-import { existsSync as existsSync6 } from "fs";
+// src/commands/uninstall.ts
+import { existsSync as existsSync6, readFileSync as readFileSync6, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "fs";
 import { join as join6 } from "path";
+var HOOK_MARKER2 = "agentinel";
+var HOOK_SUBCOMMAND2 = "hook claude-code";
+function runUninstall() {
+  const repoRoot = repoRootOrCwd();
+  unwireClaudeCodeHook(repoRoot);
+  unwireCodexHook(repoRoot);
+  unwireCopilotHook(repoRoot);
+  unwireGeminiHook(repoRoot);
+  unwirePreCommitHook(repoRoot);
+  removeShim();
+  console.log("agentinel has been completely uninstalled from this repository.");
+  return 0;
+}
+function unwireClaudeCodeHook(repoRoot) {
+  const path = join6(repoRoot, ".claude", "settings.json");
+  if (!existsSync6(path)) return;
+  const file = readJson2(path);
+  if (file === null) return;
+  const hooks = asRecord3(file.hooks);
+  if (!hooks || !Array.isArray(hooks.PreToolUse)) return;
+  const preToolUse = hooks.PreToolUse;
+  hooks.PreToolUse = preToolUse.filter((hook) => !JSON.stringify(hook).includes(HOOK_SUBCOMMAND2));
+  if (hooks.PreToolUse.length === 0) {
+    delete hooks.PreToolUse;
+  }
+  if (Object.keys(hooks).length === 0) {
+    delete file.hooks;
+  }
+  writeJson2(path, file);
+  console.log("removed Claude Code hook");
+}
+function unwireCodexHook(repoRoot) {
+  const path = join6(repoRoot, ".codex", "hooks.json");
+  if (!existsSync6(path)) return;
+  const file = readJson2(path);
+  if (file === null) return;
+  const hooks = asRecord3(file.hooks);
+  if (!hooks || !Array.isArray(hooks.PreToolUse)) return;
+  const preToolUse = hooks.PreToolUse;
+  hooks.PreToolUse = preToolUse.filter((hook) => !JSON.stringify(hook).includes("hook codex"));
+  writeJson2(path, file);
+  console.log("removed Codex hook");
+}
+function unwireCopilotHook(repoRoot) {
+  const path = join6(repoRoot, ".github", "hooks", "agentinel.json");
+  if (!existsSync6(path)) return;
+  const file = readJson2(path);
+  if (file === null) return;
+  const hooks = asRecord3(file.hooks);
+  if (!hooks || !Array.isArray(hooks.preToolUse)) return;
+  const preToolUse = hooks.preToolUse;
+  hooks.preToolUse = preToolUse.filter((hook) => !JSON.stringify(hook).includes("hook copilot"));
+  writeJson2(path, file);
+  console.log("removed Copilot hook");
+}
+function unwireGeminiHook(repoRoot) {
+  const path = join6(repoRoot, ".gemini", "settings.json");
+  if (!existsSync6(path)) return;
+  const file = readJson2(path);
+  if (file === null) return;
+  const hooks = asRecord3(file.hooks);
+  if (!hooks || !Array.isArray(hooks.BeforeTool)) return;
+  const beforeTool = hooks.BeforeTool;
+  hooks.BeforeTool = beforeTool.filter((hook) => !JSON.stringify(hook).includes("hook gemini"));
+  writeJson2(path, file);
+  console.log("removed Gemini hook");
+}
+function unwirePreCommitHook(repoRoot) {
+  if (!existsSync6(join6(repoRoot, ".git"))) return;
+  const path = join6(hooksDirectory(repoRoot), "pre-commit");
+  if (!existsSync6(path)) return;
+  const existing = readFileSync6(path, "utf8");
+  if (!existing.includes(HOOK_MARKER2)) return;
+  rmSync2(path);
+  console.log("removed git pre-commit hook");
+}
+function readJson2(path) {
+  try {
+    return asRecord3(JSON.parse(readFileSync6(path, "utf8"))) ?? {};
+  } catch {
+    return null;
+  }
+}
+function writeJson2(path, value) {
+  writeFileSync4(path, JSON.stringify(value, null, 2) + "\n", "utf8");
+}
+function asRecord3(value) {
+  return typeof value === "object" && value !== null ? value : null;
+}
+
+// src/hooks/claude-code.ts
+import { existsSync as existsSync7 } from "fs";
+import { join as join7 } from "path";
 
 // src/checks/package-guard/resolve.ts
 import { execFileSync as execFileSync4 } from "child_process";
@@ -1582,7 +1675,7 @@ function candidatesFor(command, repoRoot) {
 }
 function isLocalTool(repoRoot, name) {
   const binary = name.includes("/") ? name.split("/").pop() : name;
-  return existsSync6(join6(repoRoot, "node_modules", ".bin", binary));
+  return existsSync7(join7(repoRoot, "node_modules", ".bin", binary));
 }
 function warn(verdicts) {
   const summary = plainSummary(verdicts);
@@ -1796,25 +1889,41 @@ async function runPreCommitHook() {
 }
 
 // bin/asen.ts
+import { readFileSync as readFileSync7 } from "fs";
+import { dirname as dirname2, join as join8 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+function getVersion() {
+  try {
+    const file = fileURLToPath2(import.meta.url);
+    const pkgPath = join8(dirname2(file), "..", "package.json");
+    const pkg = JSON.parse(readFileSync7(pkgPath, "utf8"));
+    return typeof pkg.version === "string" ? pkg.version : "unknown";
+  } catch {
+    return "unknown";
+  }
+}
 var USAGE = `asen, a guard for AI coding agent workflows
 
-  asen init [--shim]                 set up the hooks and config in this repo
+  asen init [--no-shim]              set up the hooks and config in this repo
   asen check [pkg...]                check staged dependencies, or specific packages
   asen allow <pkg> --reason "..."    allowlist a flagged package, with a logged reason
   asen mode <warn|strict>            switch Agentinel's operating mode
+  asen uninstall                     remove all agent hooks from this repository
   asen unshim                        remove the PATH shims that --shim installed
 `;
 async function main(argv2) {
   const [command, ...rest] = argv2;
   switch (command) {
     case "init":
-      return runInit({ shim: rest.includes("--shim") });
+      return runInit({ shim: !rest.includes("--no-shim") });
     case "check":
       return runCheck(positionals(rest));
     case "allow":
       return runAllow(positionals(rest)[0], readFlag(rest, "--reason"));
     case "mode":
       return runMode(positionals(rest)[0]);
+    case "uninstall":
+      return runUninstall();
     case "unshim":
       return removeShim();
     // Not documented in the usage text on purpose. These are what the installed hooks call.
@@ -1823,6 +1932,10 @@ async function main(argv2) {
     // What the PATH shims call, with the whole command line as one argument.
     case "check-command":
       return runCheckCommand(rest[0]);
+    case "--version":
+    case "-v":
+      console.log(`agentinel v${getVersion()}`);
+      return 0;
     case "--help":
     case "-h":
     case void 0:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentinel",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Catches AI hallucinated npm packages before an agent installs them",
   "license": "MIT",
   "author": "Aman Janwani",