@absolutejs/agent-control 0.3.0 → 0.4.0

package/README.md

@@ -6,7 +6,8 @@ before cleanup, reports partial source failures, restores deliberately, and uses
 leased idempotency records so operator retries cannot change the requested input.
 
 Scopes are `agents:read`, `agents:revoke`, and `agents:restore`. Mutations require
-an `operationId` and `reason`; PostgreSQL operations can be safely reclaimed
+an `operationId`, bounded `reason`, same-origin `Origin` header, and
+`X-Agent-Control-Intent: mutate`; PostgreSQL operations can be safely reclaimed
 after a crashed operator process's lease expires.
 
 `createAgentControlConsoleHandler()` adds a dependency-free authenticated

package/dist/index.js

@@ -339,11 +339,20 @@ var createAgentControlHandler = ({
     return Response.json(await control.inventory(agentId));
   if (request.method !== "POST" || action !== "revoke" && action !== "restore")
     return new Response(null, { status: 405 });
-  const body = await request.json().catch(() => {
-    return;
-  });
-  if (!body?.operationId || !body.reason)
-    return Response.json({ error: "operationId and reason are required" }, { status: 400 });
+  if (request.headers.get("origin") !== url.origin || request.headers.get("x-agent-control-intent") !== "mutate")
+    return new Response("Cross-site mutation denied", { status: 403 });
+  const raw = await request.text();
+  if (new TextEncoder().encode(raw).byteLength > 4096)
+    return Response.json({ error: "Request body is too large" }, { status: 413 });
+  const body = (() => {
+    try {
+      return JSON.parse(raw);
+    } catch {
+      return;
+    }
+  })();
+  if (!body?.operationId || body.operationId.length > 200 || !body.reason || body.reason.length > 1000)
+    return Response.json({ error: "A bounded operationId and reason are required" }, { status: 400 });
   const digest2 = await hash2({ action, agentId, reason: body.reason });
   let claim;
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@absolutejs/agent-control",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Authenticated AI agent operator API, console, and bound plan-then-execute playground.",
   "type": "module",
   "license": "MIT",
@@ -40,7 +40,7 @@
     "check:package": "bun run format && bun run typecheck && bun run test && bun run build"
   },
   "dependencies": {
-    "@absolutejs/agency": "^0.4.0",
+    "@absolutejs/agency": "^0.5.0",
     "@absolutejs/manifest": "^0.3.0",
     "@sinclair/typebox": "^0.34.0"
   },