@absolutejs/agent-control 0.3.0 → 0.4.1

package/README.md

@@ -6,7 +6,8 @@ before cleanup, reports partial source failures, restores deliberately, and uses
 leased idempotency records so operator retries cannot change the requested input.
 
 Scopes are `agents:read`, `agents:revoke`, and `agents:restore`. Mutations require
-an `operationId` and `reason`; PostgreSQL operations can be safely reclaimed
+an `operationId`, bounded `reason`, same-origin `Origin` header, and
+`X-Agent-Control-Intent: mutate`; PostgreSQL operations can be safely reclaimed
 after a crashed operator process's lease expires.
 
 `createAgentControlConsoleHandler()` adds a dependency-free authenticated

package/dist/index.js

@@ -339,11 +339,20 @@ var createAgentControlHandler = ({
     return Response.json(await control.inventory(agentId));
   if (request.method !== "POST" || action !== "revoke" && action !== "restore")
     return new Response(null, { status: 405 });
-  const body = await request.json().catch(() => {
-    return;
-  });
-  if (!body?.operationId || !body.reason)
-    return Response.json({ error: "operationId and reason are required" }, { status: 400 });
+  if (request.headers.get("origin") !== url.origin || request.headers.get("x-agent-control-intent") !== "mutate")
+    return new Response("Cross-site mutation denied", { status: 403 });
+  const raw = await request.text();
+  if (new TextEncoder().encode(raw).byteLength > 4096)
+    return Response.json({ error: "Request body is too large" }, { status: 413 });
+  const body = (() => {
+    try {
+      return JSON.parse(raw);
+    } catch {
+      return;
+    }
+  })();
+  if (!body?.operationId || body.operationId.length > 200 || !body.reason || body.reason.length > 1000)
+    return Response.json({ error: "A bounded operationId and reason are required" }, { status: 400 });
   const digest2 = await hash2({ action, agentId, reason: body.reason });
   let claim;
   try {

package/dist/manifest.js

@@ -5940,6 +5940,23 @@ var manifestSchema = Type.Object({
 import { Type as Type2 } from "@sinclair/typebox";
 var manifest = defineManifest()({
   contract: 2,
+  discovery: {
+    audiences: ["platform-operators", "security-teams"],
+    intents: [
+      "inspect agent activity",
+      "revoke agent access",
+      "operate an agent kill switch"
+    ],
+    keywords: [
+      "agents",
+      "operations",
+      "approvals",
+      "revocation",
+      "kill-switch",
+      "console"
+    ],
+    protocols: ["AbsoluteJS Agent Control"]
+  },
   identity: {
     accent: "#dc2626",
     category: "security",

package/dist/manifest.json

@@ -1,5 +1,27 @@
 {
 	"contract": 2,
+	"discovery": {
+		"audiences": [
+			"platform-operators",
+			"security-teams"
+		],
+		"intents": [
+			"inspect agent activity",
+			"revoke agent access",
+			"operate an agent kill switch"
+		],
+		"keywords": [
+			"agents",
+			"operations",
+			"approvals",
+			"revocation",
+			"kill-switch",
+			"console"
+		],
+		"protocols": [
+			"AbsoluteJS Agent Control"
+		]
+	},
 	"identity": {
 		"accent": "#dc2626",
 		"category": "security",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@absolutejs/agent-control",
-  "version": "0.3.0",
+  "version": "0.4.1",
   "description": "Authenticated AI agent operator API, console, and bound plan-then-execute playground.",
   "type": "module",
   "license": "MIT",
@@ -40,7 +40,7 @@
     "check:package": "bun run format && bun run typecheck && bun run test && bun run build"
   },
   "dependencies": {
-    "@absolutejs/agency": "^0.4.0",
+    "@absolutejs/agency": "^0.5.0",
     "@absolutejs/manifest": "^0.3.0",
     "@sinclair/typebox": "^0.34.0"
   },