macaw-ai 0.0.1 → 0.9.11

package/LICENSE.md

@@ -0,0 +1,339 @@
+MACAW CLIENT SOFTWARE LICENSE AGREEMENT
+
+Version 1.0
+Effective Date: January 2026
+
+This MACAW Client Software License Agreement ("Agreement") is a legal agreement
+between you (either an individual or a legal entity, "You" or "User") and MACAW
+Security, Inc., a Delaware corporation ("MACAW Security," "we," "us," or "our").
+
+BY DOWNLOADING, INSTALLING, COPYING, OR OTHERWISE USING THE SOFTWARE, YOU AGREE
+TO BE BOUND BY THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO THESE TERMS,
+DO NOT DOWNLOAD, INSTALL, OR USE THE SOFTWARE.
+
+================================================================================
+1. DEFINITIONS
+================================================================================
+
+1.1 "Software" means the MACAW Client library, including any compiled binaries,
+    source code (if provided), documentation, updates, patches, and any related
+    materials provided by MACAW Security.
+
+1.2 "Commercial Use" means any use of the Software in connection with a business,
+    commercial enterprise, or for-profit activity, including but not limited to:
+    (a) use in production environments serving paying customers; (b) use in
+    internal business operations; (c) use in products or services offered for
+    sale or license; or (d) use by or on behalf of a government entity.
+
+1.3 "Documentation" means any user guides, technical documentation, API
+    references, and other materials provided by MACAW Security relating to
+    the Software.
+
+1.4 "MACAW Services" means the backend services, APIs, LocalAgent, and
+    infrastructure operated by MACAW Security that the Software connects to.
+
+================================================================================
+2. LICENSE GRANT
+================================================================================
+
+2.1 Grant of License. Subject to the terms and conditions of this Agreement,
+    MACAW Security hereby grants You a limited, worldwide, royalty-free,
+    non-exclusive, non-transferable, non-sublicensable, revocable license to:
+
+    (a) download, install, and use the Software;
+    (b) integrate the Software into Your applications and systems;
+    (c) make reasonable copies of the Software for backup purposes; and
+    (d) use the Documentation in connection with Your permitted use of
+        the Software.
+
+2.2 Permitted Free Use. You may use the Software free of charge for:
+
+    (a) Development and Testing: Use in development, staging, and testing
+        environments for the purpose of evaluating, developing, or testing
+        applications that integrate with the Software;
+
+    (b) Personal Projects: Non-commercial personal projects that are not
+        used in connection with any business or commercial activity; and
+
+    (c) Open Source Projects: Integration into open source software projects
+        that are distributed under an OSI-approved open source license,
+        provided that the Software itself is not redistributed and end users
+        obtain the Software directly from MACAW Security.
+
+2.3 Commercial Use License. Commercial Use of the Software requires a separate
+    commercial license agreement with MACAW Security. Please contact
+    support@macawsecurity.com to obtain a commercial license.
+
+2.4 License to MACAW Services. Use of the Software in connection with MACAW
+    Services is subject to the MACAW Security Terms of Service available at
+    https://www.macawsecurity.ai/terms.
+
+================================================================================
+3. RESTRICTIONS
+================================================================================
+
+3.1 General Restrictions. Except as expressly permitted in this Agreement,
+    You shall not (and shall not permit any third party to):
+
+    (a) reverse engineer, decompile, disassemble, or otherwise attempt to
+        derive the source code, algorithms, data structures, or underlying
+        ideas of the Software, except to the extent such restriction is
+        expressly prohibited by applicable law;
+
+    (b) modify, adapt, translate, or create derivative works based on the
+        Software;
+
+    (c) rent, lease, lend, sell, sublicense, assign, distribute, publish,
+        transfer, or otherwise make the Software available to any third party;
+
+    (d) remove, alter, or obscure any proprietary notices, labels, or marks
+        on the Software or Documentation;
+
+    (e) use the Software to develop a product or service that competes with
+        the Software or MACAW Services;
+
+    (f) use the Software to circumvent, disable, or interfere with any
+        security, authentication, or access control mechanisms;
+
+    (g) use the Software in any manner that violates applicable laws,
+        regulations, or third-party rights;
+
+    (h) use the Software to transmit any malware, viruses, or other
+        malicious code;
+
+    (i) use the Software to conduct security testing, penetration testing,
+        or vulnerability scanning of MACAW Services without prior written
+        authorization; or
+
+    (j) benchmark, test, or publish performance comparisons of the Software
+        without MACAW Security's prior written consent.
+
+3.2 Export Restrictions. The Software may be subject to export control laws
+    and regulations. You agree to comply with all applicable export and
+    re-export control laws and regulations, including the Export Administration
+    Regulations maintained by the U.S. Department of Commerce.
+
+================================================================================
+4. INTELLECTUAL PROPERTY
+================================================================================
+
+4.1 Ownership. The Software is licensed, not sold. MACAW Security and its
+    licensors retain all right, title, and interest in and to the Software,
+    including all intellectual property rights therein. This Agreement does
+    not grant You any rights to trademarks, service marks, or trade names
+    of MACAW Security.
+
+4.2 Feedback. If You provide any feedback, suggestions, or recommendations
+    regarding the Software ("Feedback"), You hereby grant MACAW Security a
+    perpetual, irrevocable, worldwide, royalty-free license to use, modify,
+    and incorporate such Feedback into the Software and MACAW Services
+    without any obligation to You.
+
+4.3 Third-Party Components. The Software may include third-party open source
+    components subject to separate license terms. A list of such components
+    and their respective licenses is provided in the NOTICE file accompanying
+    the Software. To the extent there is a conflict between this Agreement
+    and any open source license, the open source license terms shall govern
+    solely with respect to the applicable open source component.
+
+================================================================================
+5. DATA AND PRIVACY
+================================================================================
+
+5.1 Data Collection. The Software may collect and transmit certain data to
+    MACAW Services, including but not limited to: usage metrics, error reports,
+    and diagnostic information. Such data collection is subject to the MACAW
+    Security Privacy Policy available at https://www.macawsecurity.ai/privacy.
+
+5.2 Your Data. As between You and MACAW Security, You retain all rights to
+    any data, content, or materials that You process using the Software
+    ("Your Data"). You grant MACAW Security only such rights to Your Data
+    as are necessary to provide the MACAW Services.
+
+================================================================================
+6. DISCLAIMER OF WARRANTIES
+================================================================================
+
+6.1 AS-IS BASIS. THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT
+    WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW,
+    MACAW SECURITY EXPRESSLY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS,
+    IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING BUT NOT LIMITED TO:
+
+    (a) IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+        PURPOSE, TITLE, AND NON-INFRINGEMENT;
+
+    (b) WARRANTIES ARISING FROM COURSE OF DEALING, USAGE, OR TRADE PRACTICE;
+
+    (c) WARRANTIES THAT THE SOFTWARE WILL BE UNINTERRUPTED, ERROR-FREE,
+        SECURE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS; AND
+
+    (d) WARRANTIES REGARDING THE ACCURACY, RELIABILITY, OR COMPLETENESS
+        OF ANY RESULTS OBTAINED FROM THE SOFTWARE.
+
+6.2 BETA FEATURES. Any features or functionality designated as "beta,"
+    "preview," "experimental," or similar are provided without any warranty
+    and may be modified or discontinued at any time without notice.
+
+================================================================================
+7. LIMITATION OF LIABILITY
+================================================================================
+
+7.1 EXCLUSION OF DAMAGES. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW,
+    IN NO EVENT SHALL MACAW SECURITY OR ITS AFFILIATES, LICENSORS, OR SERVICE
+    PROVIDERS BE LIABLE FOR ANY:
+
+    (a) INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY
+        DAMAGES;
+
+    (b) LOSS OF PROFITS, REVENUE, BUSINESS, SAVINGS, OR GOODWILL;
+
+    (c) LOSS OF DATA OR DATA BREACH;
+
+    (d) COST OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+
+    (e) BUSINESS INTERRUPTION OR LOSS OF USE;
+
+    ARISING OUT OF OR IN CONNECTION WITH THIS AGREEMENT OR THE USE OR
+    INABILITY TO USE THE SOFTWARE, REGARDLESS OF THE THEORY OF LIABILITY
+    (CONTRACT, TORT, STRICT LIABILITY, OR OTHERWISE), EVEN IF MACAW SECURITY
+    HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+7.2 CAP ON LIABILITY. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW,
+    MACAW SECURITY'S TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATED
+    TO THIS AGREEMENT SHALL NOT EXCEED THE GREATER OF: (A) THE AMOUNTS
+    PAID BY YOU TO MACAW SECURITY FOR THE SOFTWARE DURING THE TWELVE (12)
+    MONTHS PRECEDING THE CLAIM; OR (B) ONE HUNDRED U.S. DOLLARS ($100).
+
+7.3 ESSENTIAL PURPOSE. THE LIMITATIONS IN THIS SECTION 7 SHALL APPLY
+    NOTWITHSTANDING ANY FAILURE OF THE ESSENTIAL PURPOSE OF ANY LIMITED
+    REMEDY AND TO THE FULLEST EXTENT PERMITTED BY LAW.
+
+================================================================================
+8. INDEMNIFICATION
+================================================================================
+
+8.1 Your Indemnification. You agree to indemnify, defend, and hold harmless
+    MACAW Security and its officers, directors, employees, agents, affiliates,
+    and licensors from and against any and all claims, damages, losses,
+    liabilities, costs, and expenses (including reasonable attorneys' fees)
+    arising out of or relating to:
+
+    (a) Your use of the Software in violation of this Agreement;
+    (b) Your violation of any applicable law or regulation;
+    (c) Your violation of any third-party rights; or
+    (d) Any data or content You process using the Software.
+
+================================================================================
+9. TERM AND TERMINATION
+================================================================================
+
+9.1 Term. This Agreement is effective until terminated.
+
+9.2 Termination by You. You may terminate this Agreement at any time by
+    ceasing all use of the Software and destroying all copies in Your
+    possession or control.
+
+9.3 Termination by MACAW Security. MACAW Security may terminate this
+    Agreement immediately upon written notice if:
+
+    (a) You breach any provision of this Agreement;
+    (b) You become subject to bankruptcy, insolvency, or similar proceedings;
+    (c) MACAW Security discontinues the Software; or
+    (d) Required by law or regulatory authority.
+
+9.4 Effect of Termination. Upon termination:
+
+    (a) All licenses granted hereunder shall immediately terminate;
+    (b) You shall cease all use of the Software;
+    (c) You shall destroy all copies of the Software in Your possession; and
+    (d) Sections 1, 3, 4, 5, 6, 7, 8, 10, and 11 shall survive termination.
+
+================================================================================
+10. GOVERNING LAW AND DISPUTE RESOLUTION
+================================================================================
+
+10.1 Governing Law. This Agreement shall be governed by and construed in
+     accordance with the laws of the State of California, United States,
+     without regard to its conflict of laws principles.
+
+10.2 Jurisdiction. Any legal action or proceeding arising out of or relating
+     to this Agreement shall be brought exclusively in the state or federal
+     courts located in San Francisco County, California, and You hereby
+     consent to the personal jurisdiction and venue of such courts.
+
+10.3 Arbitration. At MACAW Security's sole discretion, any dispute arising
+     out of or relating to this Agreement may be resolved by binding
+     arbitration administered by JAMS in San Francisco, California, in
+     accordance with its Comprehensive Arbitration Rules. The arbitrator's
+     decision shall be final and binding, and judgment may be entered in
+     any court of competent jurisdiction.
+
+10.4 Class Action Waiver. YOU AND MACAW SECURITY AGREE THAT EACH MAY BRING
+     CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY AND
+     NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR
+     REPRESENTATIVE PROCEEDING.
+
+10.5 Injunctive Relief. Notwithstanding the foregoing, MACAW Security may
+     seek injunctive or other equitable relief in any court of competent
+     jurisdiction to protect its intellectual property rights.
+
+================================================================================
+11. GENERAL PROVISIONS
+================================================================================
+
+11.1 Entire Agreement. This Agreement constitutes the entire agreement
+     between You and MACAW Security regarding the Software and supersedes
+     all prior agreements, understandings, and communications.
+
+11.2 Amendment. MACAW Security may modify this Agreement at any time by
+     posting a revised version on its website. Your continued use of the
+     Software after such modification constitutes acceptance of the
+     modified terms.
+
+11.3 Waiver. No failure or delay by MACAW Security in exercising any right
+     under this Agreement shall constitute a waiver of that right.
+
+11.4 Severability. If any provision of this Agreement is held invalid or
+     unenforceable, the remaining provisions shall continue in full force
+     and effect, and the invalid provision shall be modified to the minimum
+     extent necessary to make it valid and enforceable.
+
+11.5 Assignment. You may not assign or transfer this Agreement or any rights
+     hereunder without MACAW Security's prior written consent. MACAW Security
+     may assign this Agreement without restriction.
+
+11.6 Notices. All notices under this Agreement shall be in writing and
+     deemed given when delivered by email or certified mail. Notices to
+     MACAW Security should be sent to:
+
+     MACAW Security, Inc.
+     Email: support@macawsecurity.com
+
+11.7 Force Majeure. Neither party shall be liable for any failure or delay
+     in performance due to causes beyond its reasonable control, including
+     acts of God, natural disasters, war, terrorism, riots, embargoes,
+     acts of civil or military authorities, fire, floods, accidents,
+     strikes, or shortages of transportation, facilities, fuel, energy,
+     labor, or materials.
+
+11.8 U.S. Government Rights. If You are a U.S. Government end user, the
+     Software is a "commercial item" as defined in 48 C.F.R. 2.101,
+     consisting of "commercial computer software" and "commercial computer
+     software documentation," as such terms are used in 48 C.F.R. 12.212.
+     The Software is licensed to U.S. Government end users only as a
+     commercial item and with only those rights as are granted to all
+     other end users pursuant to this Agreement.
+
+================================================================================
+12. CONTACT INFORMATION
+================================================================================
+
+For questions, support, or to obtain a commercial license, please contact:
+
+MACAW Security, Inc.
+Email: support@macawsecurity.com
+Website: https://www.macawsecurity.ai
+
+================================================================================
+
+Copyright (c) 2026 MACAW Security, Inc. All rights reserved.

package/README.md

@@ -1,6 +1,52 @@
 # macaw-ai
 
-Placeholder for the MACAW command-line interface, published by
-MACAW Security, Inc. to hold the name ahead of the first release.
+Deterministic controls for agents. One command, and it asks what you want
+governed.
 
-Version `0.0.1` ships no CLI. See https://macawsecurity.ai
+```bash
+npx macaw-ai install
+```
+
+```
+  1) Claude Code and Codex on this machine
+     every tool call stops at a hook and waits for a decision
+  2) a Python project
+     the SDK and adapters, for agents you write yourself
+  3) both
+```
+
+It installs nothing itself — it hands off to the package that does that one
+thing. Name the surface and it asks nothing:
+
+```bash
+npx macaw-ai install --coding-agents
+npx macaw-ai install --client
+```
+
+Or go straight there:
+
+```bash
+npx @macaw-ai/coding-agents install
+npx @macaw-ai/client install
+```
+
+## What each one does
+
+**Coding agents** puts a local policy endpoint between Claude Code or Codex and
+everything it reaches — tools, files, the network, the model itself. Risky
+calls stop and wait for you to approve them in the MACAW console, not in the
+terminal the agent is running in. An agent cannot approve its own request,
+because it has no path to the place approvals are given.
+
+**A Python project** installs the client SDK and the adapters for OpenAI,
+Anthropic, LangChain, MCP, LiteLLM and Pydantic AI, with the examples ready to
+run.
+
+Both are free. The first install creates a workspace: a link appears in your
+terminal, you approve it in a browser, and that is the account. Later installs
+find that key and join the same workspace, so choosing both surfaces above
+asks you once, not twice.
+
+## Licence
+
+Commercial. See LICENSE.md, or https://macawsecurity.ai

package/bin/macaw.js

@@ -1,7 +1,130 @@
 #!/usr/bin/env node
-// 0.0.1 holds the name; it ships no CLI. Without this the only signal is an
-// npm resolution error, which reads as a broken install rather than an
-// unreleased one.
-console.error("macaw-ai 0.0.1 is a placeholder and ships no CLI.");
-console.error("The release is not out yet. See https://macawsecurity.ai");
-process.exit(1);
+// `npx macaw-ai install` - the one name to remember. It installs nothing
+// itself; it asks which surface you want governed and hands off to the
+// package that does that one thing.
+//
+// Kept separate from those packages so this name never has to narrow. It
+// means "MACAW" today and will still mean it when there are six surfaces.
+
+import { spawnSync } from "node:child_process";
+import { createInterface } from "node:readline/promises";
+import fs from "node:fs";
+import path from "node:path";
+
+const SURFACES = [
+  {
+    key: "1",
+    pkg: "@macaw-ai/coding-agents",
+    label: "Claude Code and Codex on this machine",
+    detail: "every tool call stops at a hook and waits for a decision",
+  },
+  {
+    key: "2",
+    pkg: "@macaw-ai/client",
+    label: "a Python project",
+    detail: "the SDK and adapters, for agents you write yourself",
+  },
+];
+
+const C = process.stdout.isTTY
+  ? { b: "\x1b[1m", dim: "\x1b[2m", c: "\x1b[36m", x: "\x1b[0m" }
+  : { b: "", dim: "", c: "", x: "" };
+
+function run(pkg, args, env) {
+  console.log(`\n${C.dim}  → npx ${pkg} ${args.join(" ")}${C.x}\n`);
+  const r = spawnSync("npx", ["-y", pkg, ...args], {
+    stdio: "inherit",
+    env: { ...process.env, ...env },
+  });
+  return r.status ?? 1;
+}
+
+// The coding-agents installer writes its key here. Reading it back lets the
+// second surface join that workspace without asking for a key the user
+// approved thirty seconds earlier.
+function keyFromThisDirectory() {
+  try {
+    const cfg = JSON.parse(fs.readFileSync(path.join(process.cwd(), ".macaw", "config.json"), "utf8"));
+    if (typeof cfg?.api_key === "string" && cfg.api_key.startsWith("mw_")) {
+      return { MACAW_API_KEY: cfg.api_key, MACAW_WORKSPACE: cfg.workspace || "" };
+    }
+  } catch {
+    // No install here, or not readable. The next installer asks, as it would.
+  }
+  return undefined;
+}
+
+// Both surfaces, in this order. Coding agents first because that install is
+// the one that creates the workspace, and the key it writes is then handed to
+// the client rather than asked for again.
+//
+// The order is load-bearing the other way too: coding-agents writes
+// $PWD/.macaw/config.json, which the client's lookup reads. The client writes
+// into a subdirectory it chooses, which nothing else can be expected to find.
+function both(args) {
+  const steps = args.length ? args : ["install"];
+  for (const [i, s] of SURFACES.entries()) {
+    // Two installers each printing their own banner reads as the thing having
+    // restarted. Say which step this is.
+    console.log("");
+    console.log(`${C.b}  ── ${i + 1} of ${SURFACES.length} · ${s.label} ──${C.x}`);
+    const code = run(s.pkg, steps, i === 0 ? undefined : keyFromThisDirectory());
+    if (code !== 0) return code;
+  }
+  return 0;
+}
+
+async function main() {
+  const args = process.argv.slice(2);
+
+  // Named outright, so a script never has to answer a question.
+  //   macaw-ai install --coding-agents
+  const named = SURFACES.find((s) => args.includes(`--${s.pkg.split("/")[1]}`));
+  if (named) {
+    process.exit(run(named.pkg, args.filter((a) => !a.startsWith("--macaw") && a !== `--${named.pkg.split("/")[1]}`)));
+  }
+
+  //   macaw-ai install --both
+  // The menu's third choice, as a flag. The other two already have one, and
+  // without this there is no way to ask for both without a terminal.
+  if (args.includes("--both")) {
+    process.exit(both(args.filter((a) => a !== "--both")));
+  }
+
+  console.log("");
+  console.log(`${C.b}  MACAW${C.x}`);
+  console.log("");
+  console.log("  What should MACAW govern?");
+  console.log("");
+  for (const s of SURFACES) {
+    console.log(`    ${s.key}) ${s.label}`);
+    console.log(`       ${C.dim}${s.detail}${C.x}`);
+  }
+  console.log(`    3) both`);
+  console.log("");
+
+  // No terminal means no answer, and guessing here would install 47MB of
+  // something nobody asked for. Say what to type instead.
+  if (!process.stdin.isTTY) {
+    console.log("  Nothing is attached to answer, so pick one directly:");
+    for (const s of SURFACES) console.log(`      npx ${s.pkg} install`);
+    console.log("");
+    process.exit(1);
+  }
+
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  const choice = (await rl.question("  Choose [1]: ")).trim() || "1";
+  rl.close();
+
+  const rest = args.length ? args : ["install"];
+  if (choice === "3") process.exit(both(rest));
+
+  const picked = SURFACES.find((s) => s.key === choice);
+  if (!picked) {
+    console.log("  Not a choice.");
+    process.exit(1);
+  }
+  process.exit(run(picked.pkg, rest));
+}
+
+main().catch((e) => { console.error(e.message); process.exit(1); });

package/package.json

@@ -1,9 +1,35 @@
 {
   "name": "macaw-ai",
-  "version": "0.0.1",
-  "description": "Placeholder. The MACAW CLI is not yet published under this name.",
-  "bin": { "macaw": "bin/macaw.js" },
-  "license": "UNLICENSED",
+  "version": "0.9.11",
+  "description": "Deterministic controls for agents. Ask MACAW to govern your coding agent or your Python project, and it installs the right thing.",
+  "type": "module",
+  "bin": {
+    "macaw-ai": "bin/macaw.js"
+  },
+  "files": [
+    "bin/macaw.js",
+    "README.md",
+    "LICENSE.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "license": "SEE LICENSE IN LICENSE.md",
   "homepage": "https://macawsecurity.ai",
-  "files": ["bin", "README.md"]
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/macawsecurity/secCC-binary-distro.git"
+  },
+  "keywords": [
+    "macaw",
+    "claude-code",
+    "codex",
+    "coding-agent",
+    "policy",
+    "security",
+    "governance"
+  ],
+  "publishConfig": {
+    "access": "public"
+  }
 }