@grindfree/guard 0.0.0-stage → 0.2.0

package/dist/wrap-mcp.js

@@ -0,0 +1,53 @@
+/**
+ * MCP client wrapper: evaluate ToolGuard before client.callTool, and
+ * CommandGuard when the tool looks like a shell/SQL execution.
+ *
+ * No MCP SDK dependency. Pass any client with callTool().
+ * export X402_PRIVATE_KEY=0xYOUR_BASE_USDC_PRIVATE_KEY
+ */
+import { createGuard } from "./guard.js";
+import { GuardDenied, GuardReviewRequired } from "./errors.js";
+const DEFAULT_COMMAND_TOOLS = ["shell", "bash", "sh", "terminal", "run_command", "execute_command", "command"];
+const DEFAULT_SQL_TOOLS = ["sql", "query", "execute_sql", "run_sql"];
+function nameOf(tool) {
+    return typeof tool === "string" ? tool : tool.name ?? "tool";
+}
+function looksLike(name, list) {
+    const n = name.toLowerCase();
+    return list.some((t) => n === t || n.endsWith(`.${t}`) || n.endsWith(`_${t}`) || n.includes(t));
+}
+/**
+ * Wrap an MCP client so every callTool is screened first. The original
+ * client is returned for chaining; callTool is replaced in place.
+ */
+export function wrapMcpClient(client, opts = {}) {
+    const guard = opts.guard ?? createGuard({ policy: opts.policy });
+    const commandTools = opts.commandTools ?? DEFAULT_COMMAND_TOOLS;
+    const sqlTools = opts.sqlTools ?? DEFAULT_SQL_TOOLS;
+    const original = client.callTool.bind(client);
+    client.callTool = async (params, ...rest) => {
+        const toolName = nameOf(params ?? {});
+        const args = (params?.arguments ?? {});
+        try {
+            if (looksLike(toolName, commandTools) && typeof (args.command ?? args.cmd ?? args.input) === "string") {
+                const command = String(args.command ?? args.cmd ?? args.input);
+                await guard.guardCommand({ command }, async () => undefined);
+            }
+            else if (looksLike(toolName, sqlTools) && typeof (args.sql ?? args.query ?? args.statement) === "string") {
+                const sql = String(args.sql ?? args.query ?? args.statement);
+                await guard.guardSql({ sql }, async () => undefined);
+            }
+            else {
+                await guard.guardToolCall({ tool: `mcp.${toolName}`, arg_classes: Object.keys(args) }, async () => undefined);
+            }
+        }
+        catch (err) {
+            if (err instanceof GuardDenied || err instanceof GuardReviewRequired)
+                throw err;
+            throw err;
+        }
+        return original(params, ...rest);
+    };
+    return client;
+}
+//# sourceMappingURL=wrap-mcp.js.map

package/dist/wrap-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-mcp.js","sourceRoot":"","sources":["../src/wrap-mcp.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAuB,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAW/D,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAC/G,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AAErE,SAAS,MAAM,CAAC,IAAgC;IAC9C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;AAC/D,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,IAAc;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAkD,MAAS,EAAE,OAAuB,EAAE;IACjH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,qBAAqB,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9C,MAAM,CAAC,QAAQ,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAE,MAA4B,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,CAAE,MAAkD,EAAE,SAAS,IAAI,EAAE,CAA4B,CAAC;QAC/G,IAAI,CAAC;YACH,IAAI,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACtG,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC/D,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/D,CAAC;iBAAM,IAAI,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC3G,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC7D,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,aAAa,CACvB,EAAE,IAAI,EAAE,OAAO,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC3D,KAAK,IAAI,EAAE,CAAC,SAAS,CACtB,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,YAAY,mBAAmB;gBAAE,MAAM,GAAG,CAAC;YAChF,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,60 @@
 {
   "name": "@grindfree/guard",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "Drop-in x402 guards that screen PromptShield, CrawlSafe, ToolGuard, CommandGuard, MemoryGuard, WireShield, DocShield and SafeRead before an agent acts. Caller wallet only; never embeds keys.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "tsx --test test/*.test.ts",
+    "prepublishOnly": "npm test && npm run build",
+    "prepare": "npm run build"
+  },
+  "keywords": [
+    "x402",
+    "agents",
+    "security",
+    "guardrail",
+    "toolguard",
+    "commandguard",
+    "promptshield",
+    "mcp",
+    "langchain",
+    "openai-agents"
+  ],
+  "license": "MIT",
+  "author": "GrindFree",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ronin93/grindfree-guard.git"
+  },
+  "homepage": "https://github.com/ronin93/grindfree-guard#readme",
+  "bugs": {
+    "url": "https://github.com/ronin93/grindfree-guard/issues"
+  },
+  "dependencies": {
+    "@x402/evm": "^2.29.0",
+    "@x402/fetch": "^2.29.0",
+    "viem": "^2.57.16"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2"
+  }
+}