cli: read --version from package.json; bump v0.1.4

Author: knhn1004

Formula/agentlock.rb

@@ -1,10 +1,10 @@
 class Agentlock < Formula
   desc "Locally-hosted, open-source firewall for AI coding agents"
   homepage "https://openagentlock.github.io/OpenAgentLock"
-  url "https://registry.npmjs.org/@openagentlock/cli/-/cli-0.1.3.tgz"
-  sha256 "ac6583fbc009617484517b75b85c6eb873ef9af0e2d2fcf5e38a404c6ff519e2"
+  url "https://registry.npmjs.org/@openagentlock/cli/-/cli-0.1.4.tgz"
+  sha256 "REPLACE_AFTER_NPM_PUBLISH"
   license "FSL-1.1-Apache-2.0"
-  version "0.1.3"
+  version "0.1.4"
 
   depends_on "bun"
 

cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openagentlock/cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",
   "description": "OpenAgentLock CLI — a firewall for AI coding agents. Detects local agent harnesses (Claude Code, Codex CLI, Cursor, OpenCode, Cline, Gemini CLI, Continue, Copilot), gates risky tool calls via a Go control plane, anchors decisions in a Rust Merkle ledger.",

cli/src/index.ts

@@ -8,6 +8,10 @@
 // See docs/api/openapi.yaml for the control-plane API that will execute
 // install once it's signed off.
 
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
 import { Command } from "commander";
 import { runDashboard } from "./commands/dashboard.ts";
 import { runDetect } from "./commands/detect.ts";
@@ -20,12 +24,17 @@ import { runHookCodex } from "./commands/hook-codex.ts";
 import { runLedgerRoot, runLedgerVerify } from "./commands/ledger.ts";
 import { runSignerEnroll } from "./commands/signer-enroll.ts";
 
+// Read version from the published package.json so `agentlock --version`
+// always matches the installed npm version, no hand-bumping required.
+const PKG_PATH = join(dirname(fileURLToPath(import.meta.url)), "..", "package.json");
+const PKG_VERSION = (JSON.parse(readFileSync(PKG_PATH, "utf8")) as { version: string }).version;
+
 const program = new Command();
 
 program
   .name("agentlock")
   .description("Local-first hardening for AI coding agents.")
-  .version("0.0.1");
+  .version(PKG_VERSION);
 
 program
   .command("detect")