@agentguard-run/spend 0.15.5 → 0.15.7

package/src/cli/wizard.ts

@@ -1,10 +1,39 @@
 import * as fs from 'fs';
 import * as path from 'path';
 import * as readline from 'readline';
+import { randomBytes } from 'crypto';
+import * as ed from '@noble/ed25519';
 import { AGENTGUARD_SPEND_VERSION } from '../index';
 import { TASK_TEMPLATES, getTaskTemplate, listTaskTemplates, type TaskTemplate } from '../templates';
 import { agentguardHome, banner, cyanBold, green, statusBar } from './colors';
 
+const SIGNING_PRIVATE_KEY_FILE = 'signing-private.key';
+const SIGNING_PUBLIC_KEY_FILE = 'signing-public.key';
+
+/**
+ * Read the existing local signing keypair or generate one. The private seed is
+ * stored mode 0600 under ~/.agentguard/ and never leaves the machine. Returns
+ * both keys as lowercase hex.
+ */
+export async function ensureSigningKeys(home = agentguardHome()): Promise<{ privateKeyHex: string; publicKeyHex: string }> {
+  fs.mkdirSync(home, { recursive: true });
+  const privatePath = path.join(home, SIGNING_PRIVATE_KEY_FILE);
+  const publicPath = path.join(home, SIGNING_PUBLIC_KEY_FILE);
+  if (fs.existsSync(privatePath) && fs.existsSync(publicPath)) {
+    return {
+      privateKeyHex: fs.readFileSync(privatePath, 'utf-8').trim(),
+      publicKeyHex: fs.readFileSync(publicPath, 'utf-8').trim(),
+    };
+  }
+  const privateSeed = new Uint8Array(randomBytes(32));
+  const publicKey = await ed.getPublicKeyAsync(privateSeed);
+  const privateKeyHex = Buffer.from(privateSeed).toString('hex');
+  const publicKeyHex = Buffer.from(publicKey).toString('hex');
+  fs.writeFileSync(privatePath, privateKeyHex, { mode: 0o600 });
+  fs.writeFileSync(publicPath, publicKeyHex);
+  return { privateKeyHex, publicKeyHex };
+}
+
 const BUILD_TYPES = ['chatbot', 'agent', 'batch job', 'API endpoint'];
 const CAPABILITY_TIERS = [
   ['read_only', 'Read records and produce findings'],
@@ -58,7 +87,8 @@ export async function runWizard(argv: string[]): Promise<number> {
   const templateSlug = valueAfter(argv, '--template') ?? 'risk-review';
   const useDefaults = argv.includes('--defaults') || !process.stdin.isTTY;
   const answers = useDefaults ? defaultAnswers(templateSlug) : await promptAnswers(templateSlug);
-  const outputs = writeWizardOutputs(answers);
+  const signingKeys = await ensureSigningKeys();
+  const outputs = writeWizardOutputs(answers, agentguardHome(), signingKeys);
   console.log('');
   console.log('  ' + banner(AGENTGUARD_SPEND_VERSION));
   console.log('');
@@ -92,13 +122,17 @@ export function defaultAnswers(templateSlug = 'risk-review'): WizardAnswers {
   };
 }
 
-export function writeWizardOutputs(answers: WizardAnswers, home = agentguardHome()): { policyPath: string; quickstartTsPath: string; quickstartPyPath: string; snippet: string } {
+export function writeWizardOutputs(
+  answers: WizardAnswers,
+  home = agentguardHome(),
+  signingKeys?: { publicKeyHex: string },
+): { policyPath: string; quickstartTsPath: string; quickstartPyPath: string; snippet: string } {
   fs.mkdirSync(home, { recursive: true });
   const policyPath = path.join(home, 'policy.yaml');
   const quickstartTsPath = path.join(home, 'quickstart.ts');
   const quickstartPyPath = path.join(home, 'quickstart.py');
   const policy = policyYaml(answers);
-  const ts = quickstartTs(answers);
+  const ts = quickstartTs(answers, signingKeys?.publicKeyHex);
   const py = quickstartPy(answers);
   fs.writeFileSync(policyPath, policy);
   fs.writeFileSync(quickstartTsPath, ts);
@@ -137,8 +171,9 @@ function policyYaml(answers: WizardAnswers): string {
   return `# AgentGuard Spend policy generated by agentguard wizard\nid: ${id}\nname: ${answers.template} policy\nversion: 1\neffectiveFrom: "${new Date().toISOString()}"\nmode: enforce\nrequiredCapability: ${answers.capability}\nscope:\n  tenantId: my-tenant\nmodels:\n  allowed:\n${allowed}\n  fallback: ${answers.fallbackModel}\ncaps:\n  # WHY: Per-call cap bounds one agent action.\n  - amountCents: ${answers.perCallCents}\n    window: per_call\n    action: downgrade\n    downgradeTo: ${answers.fallbackModel}\n    reason: "Per-call budget reached, routing to fallback model"\n  # WHY: Daily cap catches runaway loops and unexpected volume.\n  - amountCents: ${answers.perDayCents}\n    window: per_day\n    action: block\n    reason: "Daily budget reached"\n  # WHY: Monthly cap keeps the finance view predictable.\n  - amountCents: ${answers.perMonthCents}\n    window: per_month\n    action: block\n    reason: "Monthly budget reached"\nsystemInstructions: |\n${indent(answers.systemInstructions, 2)}\n`;
 }
 
-function quickstartTs(answers: WizardAnswers): string {
-  return `import OpenAI from 'openai';\nimport { withSpendGuard, type SpendPolicy } from '@agentguard-run/spend';\n\nconst policy: SpendPolicy = {\n  id: 'agentguard-${answers.template}-v1',\n  name: '${answers.template} policy',\n  scope: { tenantId: 'my-tenant' },\n  caps: [\n    { amountCents: ${answers.perCallCents}, window: 'per_call', action: 'downgrade', downgradeTo: '${answers.fallbackModel}' },\n    { amountCents: ${answers.perDayCents}, window: 'per_day', action: 'block' },\n    { amountCents: ${answers.perMonthCents}, window: 'per_month', action: 'block' },\n  ],\n  mode: 'enforce',\n  requiredCapability: '${answers.capability}',\n  version: 1,\n  effectiveFrom: new Date().toISOString(),\n};\n\nconst openrouter = new OpenAI({\n  baseURL: 'https://openrouter.ai/api/v1',\n  apiKey: process.env.OPENROUTER_API_KEY,\n});\n\nexport const guardedClient = withSpendGuard(openrouter, {\n  policy,\n  scope: { tenantId: 'my-tenant', agentId: '${answers.template}' },\n  capabilityClaim: '${answers.capability}',\n});\n`;
+function quickstartTs(answers: WizardAnswers, publicKeyHex?: string): string {
+  const pubHex = publicKeyHex ?? '';
+  return `import OpenAI from 'openai';\nimport * as fs from 'fs';\nimport * as os from 'os';\nimport * as path from 'path';\nimport { withSpendGuard, NdjsonDecisionLogStore, type SpendPolicy } from '@agentguard-run/spend';\n\nconst policy: SpendPolicy = {\n  id: 'agentguard-${answers.template}-v1',\n  name: '${answers.template} policy',\n  scope: { tenantId: 'my-tenant' },\n  caps: [\n    { amountCents: ${answers.perCallCents}, window: 'per_call', action: 'downgrade', downgradeTo: '${answers.fallbackModel}' },\n    { amountCents: ${answers.perDayCents}, window: 'per_day', action: 'block' },\n    { amountCents: ${answers.perMonthCents}, window: 'per_month', action: 'block' },\n  ],\n  mode: 'enforce',\n  requiredCapability: '${answers.capability}',\n  version: 1,\n  effectiveFrom: new Date().toISOString(),\n};\n\nconst openrouter = new OpenAI({\n  baseURL: 'https://openrouter.ai/api/v1',\n  apiKey: process.env.OPENROUTER_API_KEY,\n});\n\n// Local Ed25519 signing key generated by \`agentguard wizard\` (never leaves this machine).\nconst home = path.join(os.homedir(), '.agentguard');\nconst signingKeys = {\n  privateKey: Uint8Array.from(Buffer.from(fs.readFileSync(path.join(home, 'signing-private.key'), 'utf-8').trim(), 'hex')),\n  publicKey: Uint8Array.from(Buffer.from(fs.readFileSync(path.join(home, 'signing-public.key'), 'utf-8').trim(), 'hex')),\n};\nconst publicKeyHex = '${pubHex}' || Buffer.from(signingKeys.publicKey).toString('hex');\n\nexport const guardedClient = withSpendGuard(openrouter, {\n  policy,\n  scope: { tenantId: 'my-tenant', agentId: '${answers.template}' },\n  capabilityClaim: '${answers.capability}',\n  config: {\n    // Persists signed receipts to ~/.agentguard/my-tenant/decisions.ndjson so\n    // \`agentguard serve\` shows governed spend, $ saved, and a verifiable trail.\n    logStore: new NdjsonDecisionLogStore('my-tenant', { publicKeyHex }),\n    signingKeys,\n  },\n});\n`;
 }
 
 function quickstartPy(answers: WizardAnswers): string {