agentseal 0.9.1 → 0.9.2

package/dist/agentseal.js

@@ -15,7 +15,7 @@ import {
   BaselineStore,
   RuleEngine,
   runGuardInit
-} from "./chunk-PG5LEDUE.js";
+} from "./chunk-5OOVCUWO.js";
 import {
   guardReportFromDict,
   totalDangers,
@@ -26,11 +26,11 @@ import {
   ProviderError,
   fromEndpoint
 } from "./chunk-XQGUICLL.js";
-import "./chunk-EGCYEYIX.js";
+import "./chunk-I6AROGUC.js";
 import {
   collectAll
-} from "./chunk-ZNNQ2HKJ.js";
-import "./chunk-IO5DO7DS.js";
+} from "./chunk-2WEF3SNR.js";
+import "./chunk-OWUAAOL5.js";
 import {
   RegistryCache
 } from "./chunk-RJ56XHCI.js";
@@ -42,7 +42,9 @@ import {
   severityCounts,
   sortedFindings
 } from "./chunk-4EOVMNW5.js";
-import "./chunk-ZLRN7Q7C.js";
+import {
+  __require
+} from "./chunk-7N7GSU6K.js";
 
 // bin/agentseal.ts
 import { Command } from "commander";
@@ -2581,7 +2583,7 @@ var GuardEngine = class {
     const started = performance.now();
     const agents = collectAll();
     if (this.opts.projectPath) {
-      const { setProjectDir } = await import("./project-3P2OW3W6.js");
+      const { setProjectDir } = await import("./project-IIYVIGAI.js");
       setProjectDir(this.opts.projectPath);
       const projectAgents = collectAll();
       for (const pa of projectAgents) {
@@ -2631,9 +2633,9 @@ var GuardEngine = class {
     );
     let deepAnalysis = null;
     if (this.opts.deep && this.opts.model) {
-      const { resolveClient } = await import("./llm-client-4F2EACT5.js");
-      const { DeepReasoningAnalyzer } = await import("./deep-reasoning-GHCZ3SO6.js");
-      const { SkillLLMAnalyzer } = await import("./skill-llm-R3L7TL42.js");
+      const { resolveClient } = await import("./llm-client-7C4LHDD4.js");
+      const { DeepReasoningAnalyzer } = await import("./deep-reasoning-ONRM7ZJH.js");
+      const { SkillLLMAnalyzer } = await import("./skill-llm-BWEIBILZ.js");
       const client = resolveClient(this.opts.model, {
         apiKey: this.opts.apiKey
       });
@@ -3356,27 +3358,34 @@ guardCmd.command("test").description("Run self-tests on custom rules").option("-
     process.exit(2);
   }
 });
-program.command("login").description("Authenticate with AgentSeal dashboard").option("--api-url <url>", "Dashboard API URL").option("--api-key <key>", "Dashboard API key (skip browser auth)").action(async (opts) => {
-  const configPath = path.join(os.homedir(), ".agentseal", "config.json");
-  const dir = path.dirname(configPath);
-  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
-  let config = {};
-  try {
-    config = JSON.parse(fs.readFileSync(configPath, "utf-8"));
-  } catch {
-  }
-  const defaultUrl = config.api_url ?? "https://agentseal.org/api/v1";
-  if (opts.apiKey) {
-    config.api_url = opts.apiUrl ?? defaultUrl;
-    config.api_key = opts.apiKey;
-    fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
-    fs.chmodSync(configPath, 384);
-    console.log("\n  \x1B[32m\u2713 Credentials saved to ~/.agentseal/config.json\x1B[0m");
+function promptLine(prompt) {
+  const { createInterface } = __require("readline");
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve) => {
+    rl.question(prompt, (answer) => {
+      rl.close();
+      resolve(answer.trim());
+    });
+  });
+}
+async function loginApiKey(config, apiUrl, configPath) {
+  console.log();
+  console.log("  \x1B[90mGenerate an API key at: https://agentseal.org/dashboard/settings\x1B[0m");
+  console.log();
+  const key = await promptLine("  Paste API key: ");
+  if (!key) {
+    console.log("  \x1B[91m\u2717 No key provided.\x1B[0m");
     return;
   }
-  const apiUrl = opts.apiUrl ?? defaultUrl;
+  config.api_url = apiUrl;
+  config.api_key = key;
+  fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
+  fs.chmodSync(configPath, 384);
+  console.log("\n  \x1B[32m\u2713 Credentials saved to ~/.agentseal/config.json\x1B[0m");
+}
+async function loginBrowser(config, apiUrl, configPath) {
   const base = apiUrl.replace(/\/+$/, "");
-  console.log("\n  \x1B[1mAgentSeal CLI Login\x1B[0m");
+  console.log();
   console.log("  \x1B[90mOpening browser for authentication...\x1B[0m\n");
   let data;
   try {
@@ -3385,7 +3394,7 @@ program.command("login").description("Authenticate with AgentSeal dashboard").op
     data = await resp.json();
   } catch (e) {
     console.error(`  \x1B[91mFailed to start login: ${e}\x1B[0m`);
-    console.error("  \x1B[90mYou can also login with: agentseal login --api-key <key>\x1B[0m");
+    console.error("  \x1B[90mTry: agentseal login --api-key <key>\x1B[0m");
     return;
   }
   const { device_code, user_code, verification_url } = data;
@@ -3421,6 +3430,39 @@ program.command("login").description("Authenticate with AgentSeal dashboard").op
     process.stdout.write(".");
   }
   console.log("\n\n  \x1B[91m\u2717 Timed out.\x1B[0m");
+}
+program.command("login").description("Authenticate with AgentSeal dashboard").option("--api-url <url>", "Dashboard API URL").option("--api-key <key>", "Dashboard API key (skip browser auth)").action(async (opts) => {
+  const configPath = path.join(os.homedir(), ".agentseal", "config.json");
+  const dir = path.dirname(configPath);
+  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+  let config = {};
+  try {
+    config = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+  } catch {
+  }
+  const defaultUrl = config.api_url ?? "https://agentseal.org/api/v1";
+  if (opts.apiKey) {
+    config.api_url = opts.apiUrl ?? defaultUrl;
+    config.api_key = opts.apiKey;
+    fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
+    fs.chmodSync(configPath, 384);
+    console.log("\n  \x1B[32m\u2713 Credentials saved to ~/.agentseal/config.json\x1B[0m");
+    return;
+  }
+  const apiUrl = opts.apiUrl ?? defaultUrl;
+  console.log("\n  \x1B[1mAgentSeal CLI Login\x1B[0m");
+  console.log();
+  console.log("  How would you like to authenticate?");
+  console.log();
+  console.log("  \x1B[1m1.\x1B[0m Browser login  \x1B[90m\u2014 opens agentseal.org to approve\x1B[0m");
+  console.log("  \x1B[1m2.\x1B[0m API key        \x1B[90m\u2014 paste a key from Dashboard \u2192 Settings\x1B[0m");
+  console.log();
+  const choice = await promptLine("  Enter choice (1/2): ");
+  if (choice === "2") {
+    await loginApiKey(config, apiUrl, configPath);
+  } else {
+    await loginBrowser(config, apiUrl, configPath);
+  }
 });
 program.command("activate").description("Activate a Pro license key").argument("[key]", "License key").action((key) => {
   if (!key) {
@@ -3445,8 +3487,8 @@ program.command("watch").description("Run canary regression scan (5 probes, for
     runCanaryScan,
     detectRegression,
     sendWebhook
-  } = await import("./canaries-K2JQLX7Z.js");
-  const { fromEndpoint: fromEndpoint2 } = await import("./http-AIVCASYV.js");
+  } = await import("./canaries-44EQSA46.js");
+  const { fromEndpoint: fromEndpoint2 } = await import("./http-PXQ35XSA.js");
   let systemPrompt;
   if (opts.prompt) systemPrompt = opts.prompt;
   else if (opts.file) systemPrompt = fs.readFileSync(opts.file, "utf-8").trim();
@@ -3539,7 +3581,7 @@ program.command("watch").description("Run canary regression scan (5 probes, for
   if (alert) process.exit(2);
 });
 program.command("shield").description("Continuously monitor your machine for AI agent threats").option("--no-notify", "Disable desktop notifications").option("--debounce <seconds>", "Seconds to wait after change", "2").option("-q, --quiet", "Suppress terminal output").action(async (opts) => {
-  const { Shield } = await import("./shield-HCIU3CSU.js");
+  const { Shield } = await import("./shield-QAQMFF5V.js");
   const onEvent = opts.quiet ? void 0 : (eventType, filePath, summary) => {
     const ts = (/* @__PURE__ */ new Date()).toLocaleTimeString();
     const color = eventType === "threat" ? "\x1B[91m" : eventType === "warning" ? "\x1B[33m" : eventType === "error" ? "\x1B[90m" : "\x1B[32m";
@@ -3558,7 +3600,7 @@ program.command("shield").description("Continuously monitor your machine for AI
 `);
 });
 program.command("fix").description("Fix dangerous skills and harden prompts").option("--from-guard", "Load guard report and quarantine dangerous skills").option("--from-scan", "Load scan report and generate hardened prompt").option("--report <path>", "Path to report file").option("--auto", "Quarantine all without prompting").option("--dry-run", "Show what would be done").option("--list-quarantine", "List quarantined skills").option("--restore <name>", "Restore a quarantined skill").option("-o, --output <path>", "Save hardened prompt to file").action(async (opts) => {
-  const { listQuarantine, restoreSkill, loadGuardReport, quarantineSkill, getFixableSkills } = await import("./fix-NOFNO7VW.js");
+  const { listQuarantine, restoreSkill, loadGuardReport, quarantineSkill, getFixableSkills } = await import("./fix-UPZVHLZQ.js");
   if (opts.listQuarantine) {
     const entries = listQuarantine();
     if (entries.length === 0) {
@@ -3607,13 +3649,13 @@ program.command("fix").description("Fix dangerous skills and harden prompts").op
   }
 });
 program.command("profiles").description("List available scan profiles").action(async () => {
-  const { listProfiles } = await import("./profiles-UHSPR44T.js");
+  const { listProfiles } = await import("./profiles-7SYXUQLY.js");
   console.log();
   console.log(listProfiles());
   console.log();
 });
 program.command("registry").description("Manage the MCP server registry").argument("<action>", "info | update | list").option("--api-url <url>", "Custom API URL").action(async (action, opts) => {
-  const { RegistryCache: RegistryCache2 } = await import("./cache-MVU2E2LB.js");
+  const { RegistryCache: RegistryCache2 } = await import("./cache-2FZ63WCN.js");
   const cache = new RegistryCache2({ baseUrl: opts.apiUrl, skipFetch: action === "info" });
   if (action === "info") {
     console.log(`
@@ -3692,7 +3734,7 @@ program.command("config").description("Manage local configuration (API keys, LLM
   }
 });
 program.command("scan-mcp").description("Runtime MCP server scanner \u2014 connect, analyze, score").option("--server <name>", "Scan specific server by name").option("--url <url>", "Scan a remote HTTP/SSE endpoint").option("--timeout <n>", "Per-server timeout (seconds)", "30").option("--concurrency <n>", "Max parallel connections", "3").option("-o, --output <format>", "terminal or json", "terminal").option("--save <path>", "Save JSON report to file").option("--min-score <n>", "Exit code 1 if any server below this score").option("-v, --verbose", "Show individual tool findings").option("-y, --yes", "Skip confirmation (CI)").option("--reset-baselines", "Reset all baselines").action(async (opts) => {
-  const scanMcpMod = await import("./scan-mcp-YOM2YJJG.js");
+  const scanMcpMod = await import("./scan-mcp-NDDHRBKV.js");
   const { ScanMCP } = scanMcpMod;
   console.log();
   console.log(`  \x1B[36m\x1B[1mAgentSeal Scan-MCP\x1B[0m \x1B[90m\u2014 Runtime MCP Server Scanner\x1B[0m`);
@@ -3703,7 +3745,7 @@ program.command("scan-mcp").description("Runtime MCP server scanner \u2014 conne
     const name = opts.server ?? new URL(opts.url).hostname;
     servers = [{ name, url: opts.url }];
   } else if (opts.server) {
-    const { collectAll: collectAll2 } = await import("./collectors-Y5Z2R2UT.js");
+    const { collectAll: collectAll2 } = await import("./collectors-547WABBZ.js");
     const agents = collectAll2();
     const mcpServers = agents.flatMap((a) => a.mcpServers);
     const match = mcpServers.find(
@@ -3724,7 +3766,7 @@ program.command("scan-mcp").description("Runtime MCP server scanner \u2014 conne
       }
     ];
   } else {
-    const { collectAll: collectAll2 } = await import("./collectors-Y5Z2R2UT.js");
+    const { collectAll: collectAll2 } = await import("./collectors-547WABBZ.js");
     const agents = collectAll2();
     const seen = /* @__PURE__ */ new Set();
     servers = [];

package/dist/{cache-MVU2E2LB.js → cache-2FZ63WCN.js}

@@ -2,7 +2,7 @@
 import {
   RegistryCache
 } from "./chunk-RJ56XHCI.js";
-import "./chunk-ZLRN7Q7C.js";
+import "./chunk-7N7GSU6K.js";
 export {
   RegistryCache
 };

package/dist/{canaries-K2JQLX7Z.js → canaries-44EQSA46.js}

@@ -7,7 +7,7 @@ import {
   detectCanary,
   detectExtraction
 } from "./chunk-I6HSMNTE.js";
-import "./chunk-ZLRN7Q7C.js";
+import "./chunk-7N7GSU6K.js";
 
 // src/canaries.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-ZNNQ2HKJ.js → chunk-2WEF3SNR.js}

@@ -5,7 +5,7 @@ import {
   PROJECT_SKILL_FILES,
   init_machine_discovery,
   stripJsonComments
-} from "./chunk-IO5DO7DS.js";
+} from "./chunk-OWUAAOL5.js";
 import {
   createMCPServerConfig
 } from "./chunk-4EOVMNW5.js";

package/dist/{chunk-PG5LEDUE.js → chunk-5OOVCUWO.js}

@@ -2,10 +2,10 @@
 import {
   init_machine_discovery,
   machine_discovery_exports
-} from "./chunk-IO5DO7DS.js";
+} from "./chunk-OWUAAOL5.js";
 import {
   __toCommonJS
-} from "./chunk-ZLRN7Q7C.js";
+} from "./chunk-7N7GSU6K.js";
 
 // src/project-config.ts
 import { existsSync, readFileSync, writeFileSync, statSync } from "fs";

package/dist/{chunk-ZLRN7Q7C.js → chunk-7N7GSU6K.js}

@@ -3,6 +3,12 @@ var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
@@ -21,6 +27,7 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 export {
+  __require,
   __esm,
   __export,
   __toCommonJS

package/dist/{chunk-EGCYEYIX.js → chunk-I6AROGUC.js}

@@ -12,7 +12,7 @@ import {
   platformPath,
   readConfig,
   registerCollector
-} from "./chunk-ZNNQ2HKJ.js";
+} from "./chunk-2WEF3SNR.js";
 import {
   createMCPServerConfig
 } from "./chunk-4EOVMNW5.js";

package/dist/{chunk-IO5DO7DS.js → chunk-OWUAAOL5.js}

@@ -2,7 +2,7 @@
 import {
   __esm,
   __export
-} from "./chunk-ZLRN7Q7C.js";
+} from "./chunk-7N7GSU6K.js";
 
 // src/machine-discovery.ts
 var machine_discovery_exports = {};

package/dist/{collectors-Y5Z2R2UT.js → collectors-547WABBZ.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import "./chunk-EGCYEYIX.js";
+import "./chunk-I6AROGUC.js";
 import {
   AgentCollector,
   appdata,
@@ -16,10 +16,10 @@ import {
   platformPath,
   readConfig,
   registerCollector
-} from "./chunk-ZNNQ2HKJ.js";
-import "./chunk-IO5DO7DS.js";
+} from "./chunk-2WEF3SNR.js";
+import "./chunk-OWUAAOL5.js";
 import "./chunk-4EOVMNW5.js";
-import "./chunk-ZLRN7Q7C.js";
+import "./chunk-7N7GSU6K.js";
 export {
   AgentCollector,
   appdata,

package/dist/{deep-reasoning-GHCZ3SO6.js → deep-reasoning-ONRM7ZJH.js}

@@ -7,7 +7,7 @@ import {
   sanitizeText
 } from "./chunk-BXOPZ7UC.js";
 import "./chunk-4EOVMNW5.js";
-import "./chunk-ZLRN7Q7C.js";
+import "./chunk-7N7GSU6K.js";
 export {
   DeepReasoningAnalyzer,
   buildPrompt,

package/dist/{fix-NOFNO7VW.js → fix-UPZVHLZQ.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import "./chunk-ZLRN7Q7C.js";
+import "./chunk-7N7GSU6K.js";
 
 // src/fix.ts
 import {

package/dist/{http-AIVCASYV.js → http-PXQ35XSA.js}

@@ -2,7 +2,7 @@
 import {
   fromEndpoint
 } from "./chunk-XQGUICLL.js";
-import "./chunk-ZLRN7Q7C.js";
+import "./chunk-7N7GSU6K.js";
 export {
   fromEndpoint
 };

package/dist/{llm-client-4F2EACT5.js → llm-client-7C4LHDD4.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import "./chunk-ZLRN7Q7C.js";
+import "./chunk-7N7GSU6K.js";
 
 // src/guard/llm-client.ts
 var LLMClient = class {

package/dist/{profiles-UHSPR44T.js → profiles-7SYXUQLY.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import "./chunk-ZLRN7Q7C.js";
+import "./chunk-7N7GSU6K.js";
 
 // src/profiles.ts
 var BOOL_FLAGS = [

package/dist/{project-3P2OW3W6.js → project-IIYVIGAI.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   setProjectDir
-} from "./chunk-ZNNQ2HKJ.js";
-import "./chunk-IO5DO7DS.js";
+} from "./chunk-2WEF3SNR.js";
+import "./chunk-OWUAAOL5.js";
 import "./chunk-4EOVMNW5.js";
-import "./chunk-ZLRN7Q7C.js";
+import "./chunk-7N7GSU6K.js";
 export {
   setProjectDir
 };

package/dist/{scan-mcp-YOM2YJJG.js → scan-mcp-NDDHRBKV.js}

@@ -3,7 +3,7 @@ import {
   GuardVerdict,
   SEVERITY_ORDER
 } from "./chunk-IGSX7F4B.js";
-import "./chunk-ZLRN7Q7C.js";
+import "./chunk-7N7GSU6K.js";
 
 // src/scan-mcp.ts
 var TOOL_PATTERNS = [

package/dist/{shield-HCIU3CSU.js → shield-QAQMFF5V.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   BaselineStore
-} from "./chunk-PG5LEDUE.js";
+} from "./chunk-5OOVCUWO.js";
 import {
   GuardVerdict
 } from "./chunk-IGSX7F4B.js";
@@ -11,8 +11,8 @@ import {
   getWellKnownConfigs,
   init_machine_discovery,
   stripJsonComments
-} from "./chunk-IO5DO7DS.js";
-import "./chunk-ZLRN7Q7C.js";
+} from "./chunk-OWUAAOL5.js";
+import "./chunk-7N7GSU6K.js";
 
 // src/shield.ts
 import { readFileSync as readFileSync3, statSync as statSync3, watch } from "fs";

package/dist/{skill-llm-R3L7TL42.js → skill-llm-BWEIBILZ.js}

@@ -6,7 +6,7 @@ import {
   SEVERITY_ORDER,
   createFinding
 } from "./chunk-4EOVMNW5.js";
-import "./chunk-ZLRN7Q7C.js";
+import "./chunk-7N7GSU6K.js";
 
 // src/guard/skill-parser.ts
 import { readFileSync } from "fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentseal",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "Security scanner for AI agents — 311 attack probes, machine guard, MCP runtime analysis, real-time monitoring",
   "type": "module",
   "main": "./dist/index.cjs",