@kurox_real/agentkit-canaryguard-402 0.0.0-stage → 1.0.0

package/README.md

@@ -1,3 +1,25 @@
-# Temporary Holding Version
+# @kurox_real/agentkit-canaryguard-402
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+> Coinbase AgentKit Action Provider for CanaryGuard 402 prompt-injection firewall and honeypot scrubber on Base (x402 protocol gated).
+
+## Installation
+
+```bash
+npm install @kurox_real/agentkit-canaryguard-402 zod
+```
+
+## Usage
+
+```typescript
+import { executeCanaryGuardSanitize } from "@kurox_real/agentkit-canaryguard-402";
+
+// Clean and sanitize untrusted text before ingesting into agent context
+const result = await executeCanaryGuardSanitize({
+  content: "Scraped web text or untrusted user input here...",
+  strictMode: true,
+});
+
+console.log("Status:", result.status); // "clean" | "neutralized" | "blocked"
+console.log("Risk Score:", result.riskScore); // 0.00 - 1.00
+console.log("Sanitized Content:", result.sanitizedContent);
+```

package/dist/action.d.ts

@@ -0,0 +1,38 @@
+import { z } from "zod";
+export declare const CanaryGuardSanitizeInputSchema: z.ZodObject<{
+    content: z.ZodString;
+    strictMode: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    content: string;
+    strictMode: boolean;
+}, {
+    content: string;
+    strictMode?: boolean | undefined;
+}>;
+export type CanaryGuardSanitizeInput = z.infer<typeof CanaryGuardSanitizeInputSchema>;
+export interface CanaryGuardSanitizeOutput {
+    status: "clean" | "neutralized" | "blocked";
+    riskScore: number;
+    injectionDetected: boolean;
+    threatsNeutralized: Array<{
+        type: string;
+        detail: string;
+        severity: number;
+    }>;
+    cryptoAddresses: Array<{
+        address: string;
+        chain: string;
+        risk_score: number;
+        reason: string;
+    }>;
+    sanitizedContent: string;
+    safetyReceipt: string;
+}
+/**
+ * Execute prompt-injection inspection and sanitization via CanaryGuard 402 microservice on Base.
+ */
+export declare function executeCanaryGuardSanitize(params: CanaryGuardSanitizeInput, options?: {
+    hostUrl?: string;
+    paymentHeader?: string;
+}): Promise<CanaryGuardSanitizeOutput>;
+//# sourceMappingURL=action.d.ts.map

package/dist/action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,8BAA8B;;;;;;;;;EAWzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9E,eAAe,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/F,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,wBAAwB,EAChC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACrD,OAAO,CAAC,yBAAyB,CAAC,CAwCpC"}

package/dist/action.js

@@ -0,0 +1,51 @@
+import { z } from "zod";
+export const CanaryGuardSanitizeInputSchema = z.object({
+    content: z
+        .string()
+        .min(1)
+        .max(200_000)
+        .describe("Untrusted text, scraped HTML, email, or third-party tool output to sanitize before placing into agent context"),
+    strictMode: z
+        .boolean()
+        .optional()
+        .default(true)
+        .describe("When true, redacts high-risk crypto addresses and base64 blobs, and blocks wallet-draining commands"),
+});
+/**
+ * Execute prompt-injection inspection and sanitization via CanaryGuard 402 microservice on Base.
+ */
+export async function executeCanaryGuardSanitize(params, options) {
+    const host = (options?.hostUrl ||
+        process.env.CANARYGUARD_URL ||
+        "https://canaryguard-402.onrender.com").replace(/\/$/, "");
+    const url = `${host}/v1/sanitize`;
+    const headers = {
+        "Content-Type": "application/json",
+    };
+    if (options?.paymentHeader) {
+        headers["X-PAYMENT"] = options.paymentHeader;
+    }
+    const res = await fetch(url, {
+        method: "POST",
+        headers,
+        body: JSON.stringify({
+            content: params.content,
+            strict_mode: params.strictMode !== false,
+        }),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`CanaryGuard 402 error (${res.status}): ${text}`);
+    }
+    const data = (await res.json());
+    return {
+        status: data.status,
+        riskScore: data.risk_score,
+        injectionDetected: data.injection_detected,
+        threatsNeutralized: data.threats_neutralized || [],
+        cryptoAddresses: data.crypto_addresses || [],
+        sanitizedContent: data.sanitized_content,
+        safetyReceipt: data.safety_receipt,
+    };
+}
+//# sourceMappingURL=action.js.map

package/dist/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,OAAO,CAAC;SACZ,QAAQ,CAAC,+GAA+G,CAAC;IAC5H,UAAU,EAAE,CAAC;SACV,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,qGAAqG,CAAC;CACnH,CAAC,CAAC;AAcH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAgC,EAChC,OAAsD;IAEtD,MAAM,IAAI,GAAG,CACX,OAAO,EAAE,OAAO;QAChB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,sCAAsC,CACvC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAErB,MAAM,GAAG,GAAG,GAAG,IAAI,cAAc,CAAC;IAClC,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAC/C,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,UAAU,KAAK,KAAK;SACzC,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;IACvC,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,iBAAiB,EAAE,IAAI,CAAC,kBAAkB;QAC1C,kBAAkB,EAAE,IAAI,CAAC,mBAAmB,IAAI,EAAE;QAClD,eAAe,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE;QAC5C,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;QACxC,aAAa,EAAE,IAAI,CAAC,cAAc;KACnC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./action.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export * from "./action.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}

package/package.json

@@ -1,6 +1,52 @@
 {
   "name": "@kurox_real/agentkit-canaryguard-402",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "Coinbase AgentKit Action Provider for CanaryGuard 402 prompt-injection firewall and honeypot scrubber on Base (x402 protocol gated).",
+  "type": "module",
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "agentkit",
+    "coinbase",
+    "coinbase-agentkit",
+    "canaryguard",
+    "x402",
+    "base",
+    "usdc",
+    "prompt-injection",
+    "firewall",
+    "security"
+  ],
+  "author": "kurox_real",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ak10082247-max/canaryguard-402.git",
+    "directory": "plugins/agentkit-canaryguard"
+  },
+  "dependencies": {
+    "zod": "^3.24.1"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.2"
+  }
+}