@decidio/sdk 0.1.8 → 0.1.10

package/dist/signing.js

@@ -56,3 +56,59 @@ export function signBoundProof(privateKeyBase64, fields) {
     const signature = Buffer.from(edSign(null, Buffer.from(`${protectedHdr}.${payload}`, "utf8"), key)).toString("base64url");
     return { agentId: fields.agentId, did: fields.did, action: fields.action, amount: fields.amount, scope: fields.scope, workspaceId: fields.workspaceId, nonce, exp, proof: { protected: protectedHdr, signature } };
 }
+export class DecidioUnsafeArgumentsError extends Error {
+    decisionId;
+    constructor(message, decisionId) {
+        super(message);
+        this.decisionId = decisionId;
+        this.name = "DecidioUnsafeArgumentsError";
+    }
+}
+export function assertJsonSafe(value, path = "args") {
+    const seen = new Set();
+    const walk = (v, p) => {
+        if (v === null || typeof v === "boolean" || typeof v === "string")
+            return;
+        if (typeof v === "number") {
+            if (!Number.isFinite(v))
+                throw new DecidioUnsafeArgumentsError(`[decidio] ${p} is ${String(v)} — a non-finite number does not survive JSON (it becomes null), so what a human approves would not be what executes. pass a finite number or a string.`);
+            return;
+        }
+        if (typeof v === "undefined")
+            throw new DecidioUnsafeArgumentsError(`[decidio] ${p} is undefined — JSON drops or nullifies it, so what a human approves would not be what executes. use null explicitly or omit the field.`);
+        if (typeof v === "bigint")
+            throw new DecidioUnsafeArgumentsError(`[decidio] ${p} is a BigInt — JSON cannot represent it. pass it as a string.`);
+        if (typeof v === "function" || typeof v === "symbol")
+            throw new DecidioUnsafeArgumentsError(`[decidio] ${p} is a ${typeof v} — it cannot be serialized for approval.`);
+        if (typeof v === "object") {
+            if (seen.has(v))
+                throw new DecidioUnsafeArgumentsError(`[decidio] ${p} is part of a circular structure — it cannot be serialized for approval.`);
+            seen.add(v);
+            if (Array.isArray(v)) {
+                v.forEach((x, i) => walk(x, `${p}[${i}]`));
+                seen.delete(v);
+                return;
+            }
+            const proto = Object.getPrototypeOf(v);
+            if (proto !== Object.prototype && proto !== null) {
+                const name = v?.constructor?.name ?? "a class instance";
+                throw new DecidioUnsafeArgumentsError(`[decidio] ${p} is ${name === "Object" ? "an exotic object" : `a ${name}`} — only plain JSON objects survive serialization with their meaning intact (a Map, for example, becomes {}); convert it to plain JSON first.`);
+            }
+            if (typeof v.toJSON === "function")
+                throw new DecidioUnsafeArgumentsError(`[decidio] ${p} defines toJSON() — its serialized form would differ from the value the signature covers. pass the plain serialized form instead.`);
+            for (const [k, x] of Object.entries(v))
+                walk(x, `${p}.${k}`);
+            seen.delete(v);
+            return;
+        }
+        throw new DecidioUnsafeArgumentsError(`[decidio] ${p} has unsupported type ${typeof v}.`);
+    };
+    walk(value, path);
+}
+export function assertSafeTransport(url, hasCredential) {
+    if (!hasCredential)
+        return;
+    if (/^http:\/\//i.test(url) && !/^http:\/\/(localhost|127\.0\.0\.1|\[::1\])([:/]|$)/i.test(url)) {
+        throw new Error(`[decidio] refusing to send credentials over plaintext http to ${url.replace(/^(https?:\/\/[^/]+).*$/i, "$1")} — use https, or localhost for local dev. Nothing was sent.`);
+    }
+}

package/openapi.yaml

@@ -5,7 +5,7 @@
 openapi: 3.1.0
 info:
   title: Decidio Agent Gate
-  version: 0.1.8
+  version: 0.1.10
   description: >
     Authorize an AI-agent action (proceed | route | block), confirm the captured outcome, and
     receive the signed resume webhook when a routed action is decided. Every outcome seals a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decidio/sdk",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "One-line approval gate for AI-agent actions. Wrap a risky tool call with guard.protect(); Decidio's policy engine decides proceed | route | block, a human approves routed actions, and every outcome is sealed as a verifiable Authority Receipt.",
   "license": "Apache-2.0",
   "type": "module",
@@ -77,11 +77,11 @@
   },
   "scripts": {
     "typecheck": "tsc --noEmit",
-    "build": "node -e \"fs.rmSync('dist',{recursive:true,force:true})\" && tsc -p tsconfig.build.json",
+    "build": "node -e \"fs.rmSync('dist',{recursive:true,force:true})\" && tsc -p tsconfig.build.json && tsc -p tsconfig.types.json",
     "prepublishOnly": "npm run typecheck && npm run build"
   },
   "dependencies": {
-    "@decidio/verify": "0.1.7"
+    "@decidio/verify": "0.1.9"
   },
   "author": "OmniTwin Technologies Inc.",
   "bugs": {