@mandatez/sdk 0.1.0

package/README.md

@@ -0,0 +1,95 @@
+# MandateZ
+
+**Every agent needs a mandate.**
+
+MandateZ is the open, cross-vendor trust infrastructure for AI agents. Cryptographic identity, policy enforcement, human oversight, and tamper-proof audit logs — for any agent framework.
+
+## The Problem
+
+AI agents act autonomously. There is no standard way to prove what they did, enforce what they can do, or produce compliance audit trails. MandateZ solves all three.
+
+## Install
+
+```bash
+npm install @mandatez/sdk
+```
+
+## Usage
+
+```typescript
+import { generateAgentIdentity, MandateZClient } from '@mandatez/sdk';
+
+const identity = await generateAgentIdentity();
+const client = new MandateZClient({
+  agentId: identity.agent_id,
+  ownerId: 'your_org_id',
+  privateKey: identity.private_key,
+  supabaseUrl: process.env.SUPABASE_URL!,
+  supabaseAnonKey: process.env.SUPABASE_ANON_KEY!,
+});
+
+const event = await client.track({
+  action_type: 'read',
+  resource: 'emails',
+});
+// → signed, validated, emitted to your event stream
+```
+
+## What You Get
+
+- **Agent Identity** — Ed25519 keypair per agent, unique `ag_` prefixed IDs
+- **Signed Events** — every action produces a cryptographically signed, tamper-proof event
+- **Policy Engine** — allow/block/flag rules with wildcard resource matching
+- **Human Oversight** — pause execution, alert via Slack/webhook, auto-block on timeout
+- **Compliance Reports** — JSON + PDF audit trail export
+- **Framework Integrations** — LangChain, n8n, with more coming
+
+## Integrations
+
+### LangChain
+
+```typescript
+import { MandateZLangChainCallback } from '@mandatez/sdk';
+
+const callback = new MandateZLangChainCallback(client);
+const chain = new ChatOpenAI({ callbacks: [callback] });
+```
+
+### n8n
+
+```typescript
+import { MandateZN8nHook } from '@mandatez/sdk';
+
+const hook = new MandateZN8nHook(client);
+await hook.beforeExecution('wf_123', 'HTTP Request', inputData);
+await hook.afterExecution('wf_123', 'HTTP Request', outputData, true);
+```
+
+## Architecture
+
+Everything flows from one spine: the **Agent Event Stream**.
+
+```
+Agent Action → Policy Engine → Oversight Gate → Sign (Ed25519) → Emit to Stream
+```
+
+Every surface — SDK, dashboard, compliance engine, directory — reads the same stream. One data layer. No duplication.
+
+## Documentation
+
+- [Quickstart](https://docs.mandatez.com/quickstart)
+- [SDK Reference](https://docs.mandatez.com/sdk/track)
+- [Protocol Specification](./protocol/SPEC.md)
+
+## Project Structure
+
+```
+packages/sdk/          → @mandatez/sdk (open source, free forever)
+apps/dashboard/        → Next.js event monitoring dashboard
+protocol/              → Open protocol specification
+docs/                  → Documentation (Mintlify)
+```
+
+## License
+
+MIT

package/dist/client.d.ts

@@ -0,0 +1,53 @@
+import type { AgentEvent, AgentEventInput } from './events/schema.js';
+import type { Policy } from './policy/index.js';
+import type { OversightConfig } from './oversight/index.js';
+/** The action fields a developer passes to track() */
+export interface TrackInput {
+    action_type: AgentEventInput['action_type'];
+    resource: string;
+    outcome?: AgentEventInput['outcome'];
+    policy_id?: string | null;
+    metadata?: Record<string, unknown>;
+    /** Optional callback for human approval. If oversight requires approval
+     *  and this is not provided, timeout_action applies immediately. */
+    waitForApproval?: () => Promise<boolean>;
+}
+export interface MandateZClientConfig {
+    agentId: string;
+    ownerId: string;
+    privateKey: string;
+    supabaseUrl: string;
+    supabaseAnonKey: string;
+    /** Optional policies — if provided, track() evaluates them to determine outcome */
+    policies?: Policy[];
+    /** Optional oversight config — if provided, flagged actions pause for human approval */
+    oversight?: OversightConfig;
+}
+/**
+ * Main SDK surface for developers.
+ *
+ * Wires together identity, signing, policy, oversight, and transport
+ * so a developer can track agent actions with a single method call.
+ */
+export declare class MandateZClient {
+    private agentId;
+    private ownerId;
+    private privateKey;
+    private transport;
+    private policyEngine;
+    private oversightGate;
+    constructor(config: MandateZClientConfig);
+    /**
+     * Track an agent action.
+     *
+     * Flow:
+     * 1. Evaluate policy engine → determines outcome (allowed/blocked/flagged)
+     * 2. If blocked → sign event with 'blocked' outcome, emit, return (action does not proceed)
+     * 3. If oversight gate is configured and action requires approval:
+     *    - Fire alerts, wait for human decision or timeout
+     *    - Override outcome based on approval result
+     * 4. Sign event, emit to Supabase, return
+     */
+    track(input: TrackInput): Promise<AgentEvent>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,sDAAsD;AACtD,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;wEACoE;IACpE,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,wFAAwF;IACxF,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED;;;;;GAKG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,aAAa,CAAuB;gBAEhC,MAAM,EAAE,oBAAoB;IAqBxC;;;;;;;;;;OAUG;IACG,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;CA+CpD"}

package/dist/client.js

@@ -0,0 +1,85 @@
+import { createSignedEvent } from './events/signing.js';
+import { SupabaseTransport } from './transport/supabase.js';
+import { PolicyEngine } from './policy/index.js';
+import { OversightGate } from './oversight/index.js';
+/**
+ * Main SDK surface for developers.
+ *
+ * Wires together identity, signing, policy, oversight, and transport
+ * so a developer can track agent actions with a single method call.
+ */
+export class MandateZClient {
+    agentId;
+    ownerId;
+    privateKey;
+    transport;
+    policyEngine;
+    oversightGate;
+    constructor(config) {
+        this.agentId = config.agentId;
+        this.ownerId = config.ownerId;
+        this.privateKey = config.privateKey;
+        this.transport = new SupabaseTransport({
+            supabaseUrl: config.supabaseUrl,
+            supabaseAnonKey: config.supabaseAnonKey,
+        });
+        this.policyEngine = new PolicyEngine();
+        if (config.policies) {
+            for (const policy of config.policies) {
+                this.policyEngine.addPolicy(policy);
+            }
+        }
+        this.oversightGate = config.oversight
+            ? new OversightGate(config.oversight)
+            : null;
+    }
+    /**
+     * Track an agent action.
+     *
+     * Flow:
+     * 1. Evaluate policy engine → determines outcome (allowed/blocked/flagged)
+     * 2. If blocked → sign event with 'blocked' outcome, emit, return (action does not proceed)
+     * 3. If oversight gate is configured and action requires approval:
+     *    - Fire alerts, wait for human decision or timeout
+     *    - Override outcome based on approval result
+     * 4. Sign event, emit to Supabase, return
+     */
+    async track(input) {
+        // Step 1: Policy evaluation
+        const policyResult = this.policyEngine.evaluate(input.action_type, input.resource);
+        let outcome = input.outcome ?? policyResult.outcome;
+        let policyId = input.policy_id ?? policyResult.policy_id;
+        // Step 2: If policy says blocked, log it and stop
+        if (policyResult.outcome === 'blocked' && !input.outcome) {
+            outcome = 'blocked';
+            policyId = policyResult.policy_id;
+        }
+        // Step 3: Oversight gate — check if human approval is needed
+        if (outcome !== 'blocked' &&
+            this.oversightGate &&
+            this.oversightGate.requiresApproval(input.action_type)) {
+            const oversightResult = await this.oversightGate.requestApproval({
+                agent_id: this.agentId,
+                action_type: input.action_type,
+                resource: input.resource,
+                metadata: input.metadata ?? {},
+                timestamp: new Date().toISOString(),
+                requires_approval: true,
+            }, input.waitForApproval);
+            outcome = oversightResult.outcome;
+        }
+        // Step 4: Sign and emit
+        const eventInput = {
+            agent_id: this.agentId,
+            owner_id: this.ownerId,
+            action_type: input.action_type,
+            resource: input.resource,
+            outcome,
+            policy_id: policyId ?? null,
+            metadata: input.metadata ?? {},
+        };
+        const signed = await createSignedEvent(eventInput, this.privateKey);
+        return this.transport.emitEvent(signed);
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA6BrD;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IACjB,OAAO,CAAS;IAChB,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,SAAS,CAAoB;IAC7B,YAAY,CAAe;IAC3B,aAAa,CAAuB;IAE5C,YAAY,MAA4B;QACtC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC;YACrC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,SAAS;YACnC,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;YACrC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,4BAA4B;QAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnF,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC;QACpD,IAAI,QAAQ,GAAG,KAAK,CAAC,SAAS,IAAI,YAAY,CAAC,SAAS,CAAC;QAEzD,kDAAkD;QAClD,IAAI,YAAY,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACzD,OAAO,GAAG,SAAS,CAAC;YACpB,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC;QACpC,CAAC;QAED,6DAA6D;QAC7D,IACE,OAAO,KAAK,SAAS;YACrB,IAAI,CAAC,aAAa;YAClB,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,EACtD,CAAC;YACD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAC9D;gBACE,QAAQ,EAAE,IAAI,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;gBAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,iBAAiB,EAAE,IAAI;aACxB,EACD,KAAK,CAAC,eAAe,CACtB,CAAC;YAEF,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC;QACpC,CAAC;QAED,wBAAwB;QACxB,MAAM,UAAU,GAAoB;YAClC,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO;YACP,SAAS,EAAE,QAAQ,IAAI,IAAI;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;SAC/B,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/events/index.d.ts

@@ -0,0 +1,4 @@
+export { AgentEventSchema, AgentEventInputSchema } from './schema.js';
+export type { AgentEvent, AgentEventInput } from './schema.js';
+export { createSignedEvent, verifyEvent } from './signing.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/events/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/events/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACtE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/events/index.js

@@ -0,0 +1,3 @@
+export { AgentEventSchema, AgentEventInputSchema } from './schema.js';
+export { createSignedEvent, verifyEvent } from './signing.js';
+//# sourceMappingURL=index.js.map

package/dist/events/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/events/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGtE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/events/schema.d.ts

@@ -0,0 +1,58 @@
+import { z } from 'zod';
+/**
+ * Canonical AgentEvent schema — the spine of MandateZ.
+ *
+ * Every agent action produces one of these. Every surface reads from
+ * this same shape. Do not modify without explicit instruction.
+ */
+export declare const AgentEventSchema: z.ZodObject<{
+    event_id: z.ZodString;
+    agent_id: z.ZodString;
+    owner_id: z.ZodString;
+    timestamp: z.ZodString;
+    action_type: z.ZodEnum<{
+        read: "read";
+        write: "write";
+        export: "export";
+        delete: "delete";
+        call: "call";
+        payment: "payment";
+    }>;
+    resource: z.ZodString;
+    outcome: z.ZodEnum<{
+        allowed: "allowed";
+        blocked: "blocked";
+        flagged: "flagged";
+        pending_approval: "pending_approval";
+    }>;
+    policy_id: z.ZodNullable<z.ZodString>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    signature: z.ZodString;
+    public_key: z.ZodString;
+}, z.core.$strip>;
+/** Canonical AgentEvent type — do not rename */
+export type AgentEvent = z.infer<typeof AgentEventSchema>;
+/** Input type for creating events before signing (no signature/public_key yet) */
+export declare const AgentEventInputSchema: z.ZodObject<{
+    agent_id: z.ZodString;
+    owner_id: z.ZodString;
+    action_type: z.ZodEnum<{
+        read: "read";
+        write: "write";
+        export: "export";
+        delete: "delete";
+        call: "call";
+        payment: "payment";
+    }>;
+    resource: z.ZodString;
+    outcome: z.ZodEnum<{
+        allowed: "allowed";
+        blocked: "blocked";
+        flagged: "flagged";
+        pending_approval: "pending_approval";
+    }>;
+    policy_id: z.ZodNullable<z.ZodString>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type AgentEventInput = z.infer<typeof AgentEventInputSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/events/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/events/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;iBAY3B,CAAC;AAEH,gDAAgD;AAChD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,kFAAkF;AAClF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;iBAKhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/events/schema.js

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+/**
+ * Canonical AgentEvent schema — the spine of MandateZ.
+ *
+ * Every agent action produces one of these. Every surface reads from
+ * this same shape. Do not modify without explicit instruction.
+ */
+export const AgentEventSchema = z.object({
+    event_id: z.string().uuid(),
+    agent_id: z.string().regex(/^ag_[A-Za-z0-9_-]+$/, 'agent_id must start with ag_ prefix'),
+    owner_id: z.string().min(1),
+    timestamp: z.string().datetime(),
+    action_type: z.enum(['read', 'write', 'export', 'delete', 'call', 'payment']),
+    resource: z.string().min(1),
+    outcome: z.enum(['allowed', 'blocked', 'flagged', 'pending_approval']),
+    policy_id: z.string().nullable(),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+    signature: z.string().min(1),
+    public_key: z.string().min(1),
+});
+/** Input type for creating events before signing (no signature/public_key yet) */
+export const AgentEventInputSchema = AgentEventSchema.omit({
+    event_id: true,
+    signature: true,
+    public_key: true,
+    timestamp: true,
+});
+//# sourceMappingURL=schema.js.map

package/dist/events/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/events/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,qCAAqC,CAAC;IACxF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACtE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAC;AAKH,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,IAAI,CAAC;IACzD,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;IAChB,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC"}

package/dist/events/signing.d.ts

@@ -0,0 +1,17 @@
+import type { AgentEvent, AgentEventInput } from './schema.js';
+/**
+ * Creates a complete, signed AgentEvent from input fields.
+ *
+ * Fills in event_id (UUIDv4), timestamp (ISO 8601 now), derives the
+ * public_key from the private_key, signs the canonical payload with
+ * Ed25519, and validates the result through the Zod schema.
+ */
+export declare function createSignedEvent(input: AgentEventInput, privateKey: string): Promise<AgentEvent>;
+/**
+ * Verifies an AgentEvent's signature against its public_key.
+ *
+ * Re-canonicalizes the payload (excluding signature), then checks the
+ * Ed25519 signature. Returns false on any error (bad key, tampered data).
+ */
+export declare function verifyEvent(event: AgentEvent): Promise<boolean>;
+//# sourceMappingURL=signing.d.ts.map

package/dist/events/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../../src/events/signing.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAY/D;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,eAAe,EACtB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,UAAU,CAAC,CAwBrB;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAcrE"}

package/dist/events/signing.js

@@ -0,0 +1,60 @@
+import sodium from 'libsodium-wrappers';
+import { randomUUID } from 'node:crypto';
+import { AgentEventSchema } from './schema.js';
+/**
+ * Builds the canonical payload string for signing/verification.
+ *
+ * Includes every field except `signature` itself, serialized with
+ * sorted keys for deterministic output across platforms.
+ */
+function canonicalize(event) {
+    return JSON.stringify(event, Object.keys(event).sort());
+}
+/**
+ * Creates a complete, signed AgentEvent from input fields.
+ *
+ * Fills in event_id (UUIDv4), timestamp (ISO 8601 now), derives the
+ * public_key from the private_key, signs the canonical payload with
+ * Ed25519, and validates the result through the Zod schema.
+ */
+export async function createSignedEvent(input, privateKey) {
+    await sodium.ready;
+    const secretKey = sodium.from_base64(privateKey, sodium.base64_variants.ORIGINAL);
+    const publicKey = secretKey.slice(32); // last 32 bytes of Ed25519 secret key
+    const unsigned = {
+        event_id: randomUUID(),
+        timestamp: new Date().toISOString(),
+        ...input,
+        public_key: sodium.to_base64(publicKey, sodium.base64_variants.ORIGINAL),
+    };
+    const payload = canonicalize(unsigned);
+    const message = new TextEncoder().encode(payload);
+    const sig = sodium.crypto_sign_detached(message, secretKey);
+    const event = {
+        ...unsigned,
+        signature: sodium.to_base64(sig, sodium.base64_variants.ORIGINAL),
+    };
+    // Never skip Zod validation on event schemas
+    return AgentEventSchema.parse(event);
+}
+/**
+ * Verifies an AgentEvent's signature against its public_key.
+ *
+ * Re-canonicalizes the payload (excluding signature), then checks the
+ * Ed25519 signature. Returns false on any error (bad key, tampered data).
+ */
+export async function verifyEvent(event) {
+    await sodium.ready;
+    try {
+        const { signature, ...rest } = event;
+        const payload = canonicalize(rest);
+        const message = new TextEncoder().encode(payload);
+        const sig = sodium.from_base64(signature, sodium.base64_variants.ORIGINAL);
+        const publicKey = sodium.from_base64(event.public_key, sodium.base64_variants.ORIGINAL);
+        return sodium.crypto_sign_verify_detached(sig, message, publicKey);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=signing.js.map

package/dist/events/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../../src/events/signing.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG/C;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAoC;IACxD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAsB,EACtB,UAAkB;IAElB,MAAM,MAAM,CAAC,KAAK,CAAC;IAEnB,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,sCAAsC;IAE7E,MAAM,QAAQ,GAAkC;QAC9C,QAAQ,EAAE,UAAU,EAAE;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,GAAG,KAAK;QACR,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC;KACzE,CAAC;IAEF,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAE5D,MAAM,KAAK,GAAe;QACxB,GAAG,QAAQ;QACX,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC;KAClE,CAAC;IAEF,6CAA6C;IAC7C,OAAO,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAiB;IACjD,MAAM,MAAM,CAAC,KAAK,CAAC;IAEnB,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QACrC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAExF,OAAO,MAAM,CAAC,2BAA2B,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/identity/index.d.ts

@@ -0,0 +1,16 @@
+export interface AgentIdentity {
+    /** Unique agent identifier: ag_ prefix + 21-char nanoid */
+    agent_id: string;
+    /** Ed25519 public key, base64-encoded */
+    public_key: string;
+    /** Ed25519 private key (seed), base64-encoded — never transmit or log */
+    private_key: string;
+}
+/**
+ * Generates a new agent identity with a unique ID and Ed25519 keypair.
+ *
+ * The keypair is used to sign every AgentEvent, creating a tamper-proof
+ * chain of custody for all agent actions.
+ */
+export declare function generateAgentIdentity(): Promise<AgentIdentity>;
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,aAAa,CAAC,CAUpE"}

package/dist/identity/index.js

@@ -0,0 +1,18 @@
+import sodium from 'libsodium-wrappers';
+import { nanoid } from 'nanoid';
+/**
+ * Generates a new agent identity with a unique ID and Ed25519 keypair.
+ *
+ * The keypair is used to sign every AgentEvent, creating a tamper-proof
+ * chain of custody for all agent actions.
+ */
+export async function generateAgentIdentity() {
+    await sodium.ready;
+    const keypair = sodium.crypto_sign_keypair();
+    return {
+        agent_id: `ag_${nanoid()}`,
+        public_key: sodium.to_base64(keypair.publicKey, sodium.base64_variants.ORIGINAL),
+        private_key: sodium.to_base64(keypair.privateKey, sodium.base64_variants.ORIGINAL),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAWhC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,MAAM,CAAC,KAAK,CAAC;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAE7C,OAAO;QACL,QAAQ,EAAE,MAAM,MAAM,EAAE,EAAE;QAC1B,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC;QAChF,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC;KACnF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export { generateAgentIdentity } from './identity/index.js';
+export type { AgentIdentity } from './identity/index.js';
+export { AgentEventSchema, AgentEventInputSchema } from './events/index.js';
+export type { AgentEvent, AgentEventInput } from './events/index.js';
+export { createSignedEvent, verifyEvent } from './events/index.js';
+export { SupabaseTransport } from './transport/index.js';
+export type { SupabaseTransportConfig } from './transport/index.js';
+export { PolicyEngine } from './policy/index.js';
+export { PolicyRuleSchema, PolicySchema } from './policy/index.js';
+export type { PolicyRule, Policy, PolicyOutcome, PolicyEvaluation } from './policy/index.js';
+export { OversightGate, SlackAlertChannel, WebhookAlertChannel } from './oversight/index.js';
+export type { OversightConfig, OversightResult, AlertChannel, OversightAlert, TimeoutAction, ApprovalDecision } from './oversight/index.js';
+export { MandateZClient } from './client.js';
+export type { MandateZClientConfig, TrackInput } from './client.js';
+export { MandateZN8nHook } from './integrations/n8n/index.js';
+export { MandateZLangChainCallback } from './integrations/langchain/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACnE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE7F,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE5I,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+// @mandatez/sdk — MandateZ SDK entry point
+// Every agent needs a mandate.
+export { generateAgentIdentity } from './identity/index.js';
+export { AgentEventSchema, AgentEventInputSchema } from './events/index.js';
+export { createSignedEvent, verifyEvent } from './events/index.js';
+export { SupabaseTransport } from './transport/index.js';
+export { PolicyEngine } from './policy/index.js';
+export { PolicyRuleSchema, PolicySchema } from './policy/index.js';
+export { OversightGate, SlackAlertChannel, WebhookAlertChannel } from './oversight/index.js';
+export { MandateZClient } from './client.js';
+export { MandateZN8nHook } from './integrations/n8n/index.js';
+export { MandateZLangChainCallback } from './integrations/langchain/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,+BAA+B;AAE/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAG5D,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGnE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG7F,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/integrations/langchain/index.d.ts

@@ -0,0 +1,46 @@
+import { MandateZClient } from '../../client.js';
+import type { AgentEvent } from '../../events/schema.js';
+/**
+ * MandateZ callback handler for LangChain.
+ *
+ * Implements the LangChain BaseCallbackHandler interface structurally —
+ * no @langchain/core dependency required. Pass this to any LangChain
+ * chain, agent, or LLM via the `callbacks` option.
+ *
+ * Tracked events:
+ *   - handleLLMStart      → action_type: 'call',   resource: 'langchain/llm:{model}'
+ *   - handleToolStart     → action_type: 'call',   resource: 'langchain/tool:{name}'
+ *   - handleToolEnd       → action_type: 'call',   resource: 'langchain/tool:{name}'
+ *   - handleChainError    → action_type: 'call',   resource: 'langchain/chain'
+ */
+export declare class MandateZLangChainCallback {
+    name: string;
+    private client;
+    private events;
+    constructor(client: MandateZClient);
+    /** Returns all events tracked during this callback's lifetime. */
+    getEvents(): AgentEvent[];
+    /**
+     * Called when an LLM starts processing.
+     */
+    handleLLMStart(llm: {
+        name?: string;
+        id?: string[];
+    }, prompts: string[]): Promise<void>;
+    /**
+     * Called when a tool starts executing.
+     */
+    handleToolStart(tool: {
+        name?: string;
+        id?: string;
+    }, input: string): Promise<void>;
+    /**
+     * Called when a tool finishes executing.
+     */
+    handleToolEnd(output: string): Promise<void>;
+    /**
+     * Called when a chain encounters an error.
+     */
+    handleChainError(error: unknown): Promise<void>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/integrations/langchain/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/integrations/langchain/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD;;;;;;;;;;;;GAYG;AACH,qBAAa,yBAAyB;IACpC,IAAI,SAA+B;IAEnC,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,MAAM,CAAoB;gBAEtB,MAAM,EAAE,cAAc;IAIlC,kEAAkE;IAClE,SAAS,IAAI,UAAU,EAAE;IAIzB;;OAEG;IACG,cAAc,CAClB,GAAG,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,EACrC,OAAO,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,IAAI,CAAC;IAehB;;OAEG;IACG,eAAe,CACnB,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,EACpC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC;IAehB;;OAEG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAalD;;OAEG;IACG,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAatD"}