@arc402/daemon 1.2.0

package/dist/permission-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-gate.d.ts","sourceRoot":"","sources":["../src/permission-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAahC,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,KAAK,MAAM,EAAE,CAAC;IAC7B,mBAAmB,EAAE,KAAK,MAAM,EAAE,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,qBAAqB,CAAC;CAChC;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,MAAM,WAAW,0BAA0B;IACzC,kBAAkB,CAAC,EAAE,CACnB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,CAAC,QAAQ,KACtB;QACH,aAAa,EAAE;YACb,UAAU,EAAE,CACV,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;SACjC,CAAC;KACH,CAAC;CACH;AAgBD,wBAAsB,gBAAgB,CACpC,CAAC,EAAE,cAAc,EACjB,IAAI,GAAE,0BAA+B,GACpC,OAAO,CAAC,kBAAkB,CAAC,CAiF7B;AAED,wBAAgB,oBAAoB,IAAI,IAAI,CAG3C"}

package/dist/permission-gate.js

@@ -0,0 +1,180 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkPermissions = checkPermissions;
+exports.resetPermissionCache = resetPermissionCache;
+const ethers_1 = require("ethers");
+const POLICY_ENGINE_FAIL_MODE = process.env.ARC402_POLICY_FAIL_MODE ?? "closed";
+const POLICY_ENGINE_VALIDATE_ABI = [
+    "function validateSpend(address wallet, string category, uint256 amount, bytes32 contextId) external view returns (bool, string)",
+];
+const CACHE_TTL_MS = 5 * 60 * 1000;
+const decisionCache = new Map();
+const spendAccumulator = new Map();
+async function checkPermissions(p, deps = {}) {
+    const intent = deriveSpendIntent(p);
+    if (intent.amount === 0n) {
+        return { granted: true, estimatedSpend: 0n };
+    }
+    const jobKey = `${p.context.agreementId}:${intent.category}`;
+    const currentSpend = spendAccumulator.get(jobKey) ?? 0n;
+    const projectedSpend = currentSpend + intent.amount;
+    const cacheKey = [
+        p.context.policyEngineAddress.toLowerCase(),
+        p.context.walletAddress.toLowerCase(),
+        p.context.agreementId,
+        intent.category,
+        projectedSpend.toString(),
+    ].join(":");
+    const cached = decisionCache.get(cacheKey);
+    const now = Date.now();
+    if (cached && cached.expiresAt > now) {
+        if (cached.decision.granted) {
+            spendAccumulator.set(jobKey, projectedSpend);
+        }
+        return cached.decision;
+    }
+    const pe = deps.createPolicyEngine?.(p.context.policyEngineAddress, p.context.provider) ??
+        new ethers_1.ethers.Contract(p.context.policyEngineAddress, POLICY_ENGINE_VALIDATE_ABI, p.context.provider);
+    let decision;
+    try {
+        const [ok, reason] = await pe.validateSpend.staticCall(p.context.walletAddress, intent.category, projectedSpend, ethers_1.ethers.ZeroHash);
+        if (!ok) {
+            decision = {
+                granted: false,
+                reason: reason || intent.reason,
+                estimatedSpend: projectedSpend,
+            };
+        }
+        else {
+            decision = {
+                granted: true,
+                estimatedSpend: projectedSpend,
+            };
+            spendAccumulator.set(jobKey, projectedSpend);
+        }
+    }
+    catch (error) {
+        if (POLICY_ENGINE_FAIL_MODE === "closed") {
+            decision = {
+                granted: false,
+                reason: "PolicyEngine unreachable — writes blocked (fail-closed)",
+                estimatedSpend: projectedSpend,
+            };
+        }
+        else {
+            // fail-open: use last-known cache or deny
+            const lastCached = Array.from(decisionCache.values()).find((e) => e.decision.granted && e.expiresAt > 0);
+            if (lastCached) {
+                decision = { granted: true, estimatedSpend: projectedSpend };
+            }
+            else {
+                decision = {
+                    granted: false,
+                    reason: "PolicyEngine unreachable and no cached policy",
+                    estimatedSpend: projectedSpend,
+                };
+            }
+        }
+    }
+    decisionCache.set(cacheKey, { decision, expiresAt: now + CACHE_TTL_MS });
+    return decision;
+}
+function resetPermissionCache() {
+    decisionCache.clear();
+    spendAccumulator.clear();
+}
+function deriveSpendIntent(permission) {
+    switch (permission.tool) {
+        case "arc402_hire":
+            return {
+                category: "hire",
+                amount: parseEthValue(permission.input.price),
+                reason: "hire amount would exceed PolicyEngine limits",
+            };
+        case "arc402_compute_hire": {
+            const input = permission.input;
+            const explicitMaxCost = parseEthValue(input.maxCost);
+            const computedMaxCost = parseEthValue(input.ratePerHour) * parseBigIntValue(input.maxHours);
+            const amount = explicitMaxCost > 0n ? explicitMaxCost : computedMaxCost;
+            return {
+                category: "compute",
+                amount,
+                reason: "max compute cost would exceed PolicyEngine limits",
+            };
+        }
+        case "arc402_subscribe": {
+            const input = permission.input;
+            const explicitTotal = parseEthValue(input.total);
+            const computedTotal = parseEthValue(input.ratePerMonth) * parseBigIntValue(input.months || 1);
+            const amount = explicitTotal > 0n ? explicitTotal : computedTotal;
+            return {
+                category: "general",
+                amount,
+                reason: "subscription cost would exceed PolicyEngine limits",
+            };
+        }
+        case "arc402_deliver":
+            return { category: "deliver", amount: 0n, reason: "" };
+        case "arc402_verify":
+            return { category: "verify", amount: 0n, reason: "" };
+        default: {
+            const input = permission.input;
+            const category = normalizeCategory(input.category);
+            const amount = parseEthValue(input.amount) || parseEthValue(input.estimatedSpend);
+            return {
+                category,
+                amount,
+                reason: `${permission.tool} would exceed PolicyEngine limits`,
+            };
+        }
+    }
+}
+function parseEthValue(value) {
+    if (typeof value === "bigint")
+        return value;
+    if (typeof value === "number" && Number.isFinite(value)) {
+        return ethers_1.ethers.parseEther(value.toString());
+    }
+    if (typeof value !== "string")
+        return 0n;
+    const trimmed = value.trim();
+    if (!trimmed)
+        return 0n;
+    if (/^\d+$/.test(trimmed)) {
+        return BigInt(trimmed);
+    }
+    try {
+        return ethers_1.ethers.parseEther(trimmed);
+    }
+    catch {
+        return 0n;
+    }
+}
+function parseBigIntValue(value) {
+    if (typeof value === "bigint")
+        return value;
+    if (typeof value === "number" && Number.isFinite(value))
+        return BigInt(Math.floor(value));
+    if (typeof value === "string" && value.trim()) {
+        try {
+            return BigInt(value.trim());
+        }
+        catch {
+            return 0n;
+        }
+    }
+    return 0n;
+}
+function normalizeCategory(category) {
+    if (category === "hire" || category === "compute" || category === "general") {
+        return category;
+    }
+    return "general";
+}
+function formatRpcError(error) {
+    if (error instanceof Error && error.message) {
+        return error.message;
+    }
+    return String(error);
+}
+//# sourceMappingURL=permission-gate.js.map

package/dist/permission-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-gate.js","sourceRoot":"","sources":["../src/permission-gate.ts"],"names":[],"mappings":";;AA4DA,4CAoFC;AAED,oDAGC;AArJD,mCAAgC;AAEhC,MAAM,uBAAuB,GAC1B,OAAO,CAAC,GAAG,CAAC,uBAA6C,IAAI,QAAQ,CAAC;AAEzE,MAAM,0BAA0B,GAAG;IACjC,iIAAiI;CACzH,CAAC;AAEX,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAgDnC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsB,CAAC;AACpD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE5C,KAAK,UAAU,gBAAgB,CACpC,CAAiB,EACjB,OAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7D,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,cAAc,GAAG,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,MAAM,QAAQ,GAAG;QACf,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE;QAC3C,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE;QACrC,CAAC,CAAC,OAAO,CAAC,WAAW;QACrB,MAAM,CAAC,QAAQ;QACf,cAAc,CAAC,QAAQ,EAAE;KAC1B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEZ,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5B,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrF,IAAI,eAAM,CAAC,QAAQ,CACjB,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAC7B,0BAAiD,EACjD,CAAC,CAAC,OAAO,CAAC,QAAQ,CACnB,CAAC;IAEJ,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,UAAU,CACpD,CAAC,CAAC,OAAO,CAAC,aAAa,EACvB,MAAM,CAAC,QAAQ,EACf,cAAc,EACd,eAAM,CAAC,QAAQ,CACK,CAAC;QAEvB,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,QAAQ,GAAG;gBACT,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM;gBAC/B,cAAc,EAAE,cAAc;aAC/B,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG;gBACT,OAAO,EAAE,IAAI;gBACb,cAAc,EAAE,cAAc;aAC/B,CAAC;YACF,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,uBAAuB,KAAK,QAAQ,EAAE,CAAC;YACzC,QAAQ,GAAG;gBACT,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,yDAAyD;gBACjE,cAAc,EAAE,cAAc;aAC/B,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,0CAA0C;YAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAC7C,CAAC;YACF,IAAI,UAAU,EAAE,CAAC;gBACf,QAAQ,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG;oBACT,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,+CAA+C;oBACvD,cAAc,EAAE,cAAc;iBAC/B,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,YAAY,EAAE,CAAC,CAAC;IACzE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,oBAAoB;IAClC,aAAa,CAAC,KAAK,EAAE,CAAC;IACtB,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,iBAAiB,CAAC,UAA0B;IACnD,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,aAAa;YAChB,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,aAAa,CAAE,UAAU,CAAC,KAA6B,CAAC,KAAK,CAAC;gBACtE,MAAM,EAAE,8CAA8C;aACvD,CAAC;QACJ,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAyE,CAAC;YACnG,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrD,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5F,MAAM,MAAM,GAAG,eAAe,GAAG,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC;YACxE,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,MAAM;gBACN,MAAM,EAAE,mDAAmD;aAC5D,CAAC;QACJ,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAsE,CAAC;YAChG,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;YAC9F,MAAM,MAAM,GAAG,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;YAClE,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,MAAM;gBACN,MAAM,EAAE,oDAAoD;aAC7D,CAAC;QACJ,CAAC;QACD,KAAK,gBAAgB;YACnB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACzD,KAAK,eAAe;YAClB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACxD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,KAAK,GAAG,UAAU,CAAC,KAA2E,CAAC;YACrG,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAClF,OAAO;gBACL,QAAQ;gBACR,MAAM;gBACN,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,mCAAmC;aAC9D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,eAAM,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,eAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAiB;IAC1C,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/prompt-guard.d.ts

@@ -0,0 +1,18 @@
+export type GuardSeverity = "high" | "critical";
+export interface InjectionPattern {
+    pattern: RegExp;
+    category: string;
+    severity: GuardSeverity;
+}
+export type GuardResult = {
+    safe: true;
+} | {
+    safe: false;
+    category: string;
+    severity: GuardSeverity;
+    pattern: string;
+    excerpt: string;
+};
+export declare const INJECTION_PATTERNS: InjectionPattern[];
+export declare function guardTaskContent(content: string): GuardResult;
+//# sourceMappingURL=prompt-guard.d.ts.map

package/dist/prompt-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-guard.d.ts","sourceRoot":"","sources":["../src/prompt-guard.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,CAAC;AAEhD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GACd;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,EA8ChD,CAAC;AASF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAiB7D"}

package/dist/prompt-guard.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INJECTION_PATTERNS = void 0;
+exports.guardTaskContent = guardTaskContent;
+exports.INJECTION_PATTERNS = [
+    { pattern: /ignore\s+(previous|prior|all|earlier)\s+instructions?/i, category: "instruction_override", severity: "critical" },
+    { pattern: /disregard\s+(all\s+)?(previous|prior|system|developer)\s+instructions?/i, category: "instruction_override", severity: "critical" },
+    { pattern: /forget\s+everything\s+(above|before|prior)/i, category: "instruction_override", severity: "critical" },
+    { pattern: /override\s+(the\s+)?(system|developer|safety)\s+instructions?/i, category: "instruction_override", severity: "critical" },
+    { pattern: /replace\s+(the\s+)?(system|developer)\s+prompt/i, category: "instruction_override", severity: "critical" },
+    { pattern: /your\s+(true|real|actual)\s+(goal|purpose|instructions?)\s+is/i, category: "instruction_override", severity: "critical" },
+    { pattern: /new\s+(system|developer|hidden)\s+instructions?/i, category: "instruction_override", severity: "critical" },
+    { pattern: /follow\s+these\s+instructions\s+instead/i, category: "instruction_override", severity: "high" },
+    { pattern: /you\s+are\s+now\s+(a\s+)?(different|new|unrestricted|jailbroken|unfiltered|unconstrained)/i, category: "role_override", severity: "critical" },
+    { pattern: /act\s+as\s+(if\s+you\s+are\s+)?an?\s+(unrestricted|jailbroken|different|unconstrained|root)/i, category: "role_override", severity: "critical" },
+    { pattern: /pretend\s+(you\s+)?(have\s+no|there\s+are\s+no)\s+(restrictions|limits|rules|guidelines)/i, category: "role_override", severity: "high" },
+    { pattern: /assume\s+the\s+role\s+of\s+(system|developer|administrator|root)/i, category: "role_override", severity: "critical" },
+    { pattern: /simulate\s+(being\s+)?(root|admin|an\s+operator)/i, category: "role_override", severity: "high" },
+    { pattern: /arc402\s+(hire|deliver|verify|subscribe|wallet\s+transfer|compute\s+hire|compute\s+propose)/i, category: "protocol_injection", severity: "critical" },
+    { pattern: /\/(hire|subscribe|compute\/propose|wallet\/transfer|verify)\b/i, category: "protocol_injection", severity: "critical" },
+    { pattern: /commitDeliverable|executeContractCall|executeSpend|validateSpend/i, category: "protocol_injection", severity: "critical" },
+    { pattern: /call\s+(the\s+)?(daemon|wallet|commerce)\s+api/i, category: "protocol_injection", severity: "critical" },
+    { pattern: /invoke\s+(an?\s+)?(on-?chain|wallet|payment)\s+(action|operation|transaction)/i, category: "protocol_injection", severity: "high" },
+    { pattern: /machineKey|machine_key|MACHINE_KEY/i, category: "key_exfiltration", severity: "critical" },
+    { pattern: /DEPLOYER_PRIVATE_KEY|PRIVATE_KEY\s*=|SECRET_KEY\s*=/i, category: "key_exfiltration", severity: "critical" },
+    { pattern: /seed\s+phrase|mnemonic|wallet\s+secret/i, category: "key_exfiltration", severity: "critical" },
+    { pattern: /print\s+(the\s+)?(env|environment)\b.*(secret|token|key)/i, category: "key_exfiltration", severity: "critical" },
+    { pattern: /cat\s+\S*(\.env|id_rsa|id_ed25519|credentials)/i, category: "key_exfiltration", severity: "critical" },
+    { pattern: /send\s+.{0,120}\s+to\s+0x[0-9a-f]{40}/i, category: "exfiltration", severity: "critical" },
+    { pattern: /transfer\s+\d+(\.\d+)?\s*(ETH|USDC|wei|USD)/i, category: "exfiltration", severity: "critical" },
+    { pattern: /POST\s+https?:\/\/.{0,160}\b(private|key|secret|wallet|token)\b/i, category: "exfiltration", severity: "high" },
+    { pattern: /curl\s+-X\s+POST.{0,240}\b(private|secret|key|wallet|token)\b/i, category: "exfiltration", severity: "high" },
+    { pattern: /upload\s+.{0,120}\b(secrets?|wallet|keys?)\b/i, category: "exfiltration", severity: "high" },
+    { pattern: /exfiltrat(e|ion)|leak\s+(data|secrets?)/i, category: "exfiltration", severity: "critical" },
+    { pattern: /---+\s*(SYSTEM|OVERRIDE|ADMIN|ROOT|SUDO|NEW\s+INSTRUCTIONS)/i, category: "delimiter_injection", severity: "critical" },
+    { pattern: /<\/?(system|assistant|developer|tool)>/i, category: "delimiter_injection", severity: "critical" },
+    { pattern: /\[INST\]|\[\/INST\]/i, category: "delimiter_injection", severity: "high" },
+    { pattern: /<\|im_start\|>|<\|im_end\|>|<\|system\|>|<\|assistant\|>/i, category: "delimiter_injection", severity: "critical" },
+    { pattern: /###\s*(System|Human|Assistant|Developer)\s*:/i, category: "delimiter_injection", severity: "high" },
+    { pattern: /BEGIN\s+(SYSTEM|PROMPT|OVERRIDE)\b|END\s+(SYSTEM|PROMPT|OVERRIDE)\b/i, category: "delimiter_injection", severity: "high" },
+    { pattern: /\\u[0-9a-f]{4}.*(?:ignore|system|override|developer)/i, category: "encoded_injection", severity: "high" },
+    { pattern: /base64.*(?:aWdub3Jl|c3lzdGVt|ZGV2ZWxvcGVy|b3ZlcnJpZGU)/i, category: "encoded_injection", severity: "high" },
+    { pattern: /&#(?:\d+|x[0-9a-f]+);.*(?:instructions?|system|override)/i, category: "encoded_injection", severity: "high" },
+    { pattern: /vtaber\s+cerivbhf|flfgrz\s+cebzcg|bireevqr/i, category: "encoded_injection", severity: "high" },
+];
+function sanitizeExcerpt(raw) {
+    return raw
+        .replace(/0x[0-9a-f]{40}/gi, "0x[redacted]")
+        .replace(/\b[0-9a-f]{64}\b/gi, "[key-redacted]")
+        .replace(/\b(sk|pk|rk)_[a-z0-9_-]+\b/gi, "[token-redacted]");
+}
+function guardTaskContent(content) {
+    for (const { pattern, category, severity } of exports.INJECTION_PATTERNS) {
+        const match = pattern.exec(content);
+        if (!match) {
+            continue;
+        }
+        const idx = match.index;
+        const raw = content.slice(Math.max(0, idx - 40), Math.min(content.length, idx + 140));
+        return {
+            safe: false,
+            category,
+            severity,
+            pattern: pattern.toString(),
+            excerpt: sanitizeExcerpt(raw),
+        };
+    }
+    return { safe: true };
+}
+//# sourceMappingURL=prompt-guard.js.map

package/dist/prompt-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-guard.js","sourceRoot":"","sources":["../src/prompt-guard.ts"],"names":[],"mappings":";;;AAyEA,4CAiBC;AAxEY,QAAA,kBAAkB,GAAuB;IACpD,EAAE,OAAO,EAAE,wDAAwD,EAAE,QAAQ,EAAE,sBAAsB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC7H,EAAE,OAAO,EAAE,yEAAyE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC9I,EAAE,OAAO,EAAE,6CAA6C,EAAE,QAAQ,EAAE,sBAAsB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAClH,EAAE,OAAO,EAAE,gEAAgE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACrI,EAAE,OAAO,EAAE,iDAAiD,EAAE,QAAQ,EAAE,sBAAsB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACtH,EAAE,OAAO,EAAE,gEAAgE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACrI,EAAE,OAAO,EAAE,kDAAkD,EAAE,QAAQ,EAAE,sBAAsB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACvH,EAAE,OAAO,EAAE,0CAA0C,EAAE,QAAQ,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAE3G,EAAE,OAAO,EAAE,4FAA4F,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC1J,EAAE,OAAO,EAAE,8FAA8F,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC5J,EAAE,OAAO,EAAE,2FAA2F,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE;IACrJ,EAAE,OAAO,EAAE,mEAAmE,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE;IACjI,EAAE,OAAO,EAAE,mDAAmD,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE;IAE7G,EAAE,OAAO,EAAE,8FAA8F,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACjK,EAAE,OAAO,EAAE,gEAAgE,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACnI,EAAE,OAAO,EAAE,mEAAmE,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACtI,EAAE,OAAO,EAAE,iDAAiD,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACpH,EAAE,OAAO,EAAE,gFAAgF,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAE/I,EAAE,OAAO,EAAE,qCAAqC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACtG,EAAE,OAAO,EAAE,sDAAsD,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACvH,EAAE,OAAO,EAAE,yCAAyC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC1G,EAAE,OAAO,EAAE,2DAA2D,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC5H,EAAE,OAAO,EAAE,iDAAiD,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAElH,EAAE,OAAO,EAAE,wCAAwC,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE;IACrG,EAAE,OAAO,EAAE,8CAA8C,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC3G,EAAE,OAAO,EAAE,kEAAkE,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC3H,EAAE,OAAO,EAAE,gEAAgE,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE;IACzH,EAAE,OAAO,EAAE,+CAA+C,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE;IACxG,EAAE,OAAO,EAAE,0CAA0C,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE;IAEvG,EAAE,OAAO,EAAE,8DAA8D,EAAE,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAClI,EAAE,OAAO,EAAE,yCAAyC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC7G,EAAE,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACtF,EAAE,OAAO,EAAE,2DAA2D,EAAE,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC/H,EAAE,OAAO,EAAE,+CAA+C,EAAE,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC/G,EAAE,OAAO,EAAE,sEAAsE,EAAE,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEtI,EAAE,OAAO,EAAE,uDAAuD,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACrH,EAAE,OAAO,EAAE,yDAAyD,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACvH,EAAE,OAAO,EAAE,2DAA2D,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACzH,EAAE,OAAO,EAAE,6CAA6C,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE;CAC5G,CAAC;AAEF,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG;SACP,OAAO,CAAC,kBAAkB,EAAE,cAAc,CAAC;SAC3C,OAAO,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;SAC/C,OAAO,CAAC,8BAA8B,EAAE,kBAAkB,CAAC,CAAC;AACjE,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,0BAAkB,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;QACtF,OAAO;YACL,IAAI,EAAE,KAAK;YACX,QAAQ;YACR,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;YAC3B,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC;SAC9B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,27 @@
+export interface HireRequestRow {
+    id: string;
+    agreement_id: string | null;
+    hirer_address: string;
+    capability: string;
+    price_eth: string;
+    deadline_unix: number;
+    spec_hash: string;
+    task_description: string | null;
+    status: string;
+    created_at: number;
+    updated_at: number;
+    reject_reason: string | null;
+}
+export interface DaemonDB {
+    insertHireRequest(row: Omit<HireRequestRow, "created_at" | "updated_at">): void;
+    getHireRequest(id: string): HireRequestRow | undefined;
+    getHireRequestByAgreementId(agreementId: string): HireRequestRow | undefined;
+    updateHireRequestStatus(id: string, status: string, rejectReason?: string): void;
+    listPendingHireRequests(): HireRequestRow[];
+    listActiveHireRequests(): HireRequestRow[];
+    countActiveHireRequests(): number;
+    close(): void;
+}
+export declare function emitDaemonEvent(type: string, data: Record<string, unknown>): void;
+export declare function runDaemon(foreground?: boolean): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAgDA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC;IAChF,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IACvD,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC7E,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjF,uBAAuB,IAAI,cAAc,EAAE,CAAC;IAC5C,sBAAsB,IAAI,cAAc,EAAE,CAAC;IAC3C,uBAAuB,IAAI,MAAM,CAAC;IAClC,KAAK,IAAI,IAAI,CAAC;CACf;AA8HD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAKjF;AAmTD,wBAAsB,SAAS,CAAC,UAAU,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAkgDjE"}