@metamynd/agentsafe-guard 0.2.0 → 0.3.0

package/example-openclaw-agent.mjs

@@ -1,47 +1,47 @@
-// example-openclaw-agent.mjs — a runnable demo of the guard against a seeded bound agent.
-//
-// Simulates how an OpenClaw agent's TOOL is wrapped: the raw tool only runs if the
-// AgentSafe gate returns `allow`. Run it after seeding an agent with
-// backend/scripts/demo-seed-governance.ts:
-//
-//   $env:AGENTSAFE_API="http://localhost:9926/api/v1"
-//   $env:AGENT_DID="did:hedera:testnet:..."
-//   $env:AGENT_KEY="302e0201..."
-//   node example-openclaw-agent.mjs
-import { createGuard } from './agentsafe-guard.mjs';
-
-const guard = createGuard({
-  api: process.env.AGENTSAFE_API ?? 'http://localhost:9926/api/v1',
-  agentDid: process.env.AGENT_DID,
-  agentKey: process.env.AGENT_KEY,
-});
-
-// --- The agent's tool. In OpenClaw you register this handler for the tool; here we
-//     wrap it with guard.guardTool so every call is gated first. ---
-const bookFlight = guard.guardTool(
-  'flight-purchase', // the governed action (matches the mandate scope)
-  async (args, decision) => {
-    // Only reached when the gate ALLOWED. Real booking would go here.
-    return { booked: true, pnr: 'PNR-DEMO', remaining: decision.remaining, ...args };
-  },
-  // Map the tool args → gate inputs. `context` carries what the Standard/SOP rules need.
-  (a) => ({ amount: a.amount, currency: 'USD', merchant: a.merchant, context: { tool: a.tool ?? 'book-flight', riskLevel: a.riskLevel ?? 'low' } }),
-);
-
-async function ask(label, args) {
-  try {
-    const r = await bookFlight(args);
-    console.log(`  \x1b[32m✅ ALLOW\x1b[0m   ${label.padEnd(30)} → booked ${r.pnr} (remaining $${r.remaining})`);
-  } catch (e) {
-    const g = e.governance ?? {};
-    const tag = g.decision === 'escalate' ? '\x1b[33m⚠ ESCALATE\x1b[0m' : '\x1b[31m⛔ BLOCK\x1b[0m';
-    console.log(`  ${tag} ${label.padEnd(30)} → ${g.reasonCode ?? e.message}`);
-  }
-}
-
-console.log(`\n  OpenClaw agent — every booking passes through the AgentSafe gate\n  ${'─'.repeat(60)}`);
-await ask('$150 book-flight, low risk', { amount: 150, merchant: 'skyward-air', tool: 'book-flight', riskLevel: 'low' });
-await ask('$600 book-flight', { amount: 600, merchant: 'skyward-air', tool: 'book-flight', riskLevel: 'low' });
-await ask('$100 wire-transfer tool', { amount: 100, merchant: 'skyward-air', tool: 'wire-transfer', riskLevel: 'low' });
-await ask('$100 high-risk decision', { amount: 100, merchant: 'skyward-air', tool: 'book-flight', riskLevel: 'high' });
-console.log(`\n  The agent refuses blocked/escalated actions itself — governance decided, not the LLM.\n`);
+// example-openclaw-agent.mjs — a runnable demo of the guard against a seeded bound agent.
+//
+// Simulates how an OpenClaw agent's TOOL is wrapped: the raw tool only runs if the
+// AgentSafe gate returns `allow`. Run it after seeding an agent with
+// backend/scripts/demo-seed-governance.ts:
+//
+//   $env:AGENTSAFE_API="http://localhost:9926/api/v1"
+//   $env:AGENT_DID="did:hedera:testnet:..."
+//   $env:AGENT_KEY="302e0201..."
+//   node example-openclaw-agent.mjs
+import { createGuard } from './agentsafe-guard.mjs';
+
+const guard = createGuard({
+  api: process.env.AGENTSAFE_API ?? 'http://localhost:9926/api/v1',
+  agentDid: process.env.AGENT_DID,
+  agentKey: process.env.AGENT_KEY,
+});
+
+// --- The agent's tool. In OpenClaw you register this handler for the tool; here we
+//     wrap it with guard.guardTool so every call is gated first. ---
+const bookFlight = guard.guardTool(
+  'flight-purchase', // the governed action (matches the mandate scope)
+  async (args, decision) => {
+    // Only reached when the gate ALLOWED. Real booking would go here.
+    return { booked: true, pnr: 'PNR-DEMO', remaining: decision.remaining, ...args };
+  },
+  // Map the tool args → gate inputs. `context` carries what the Standard/SOP rules need.
+  (a) => ({ amount: a.amount, currency: 'USD', merchant: a.merchant, context: { tool: a.tool ?? 'book-flight', riskLevel: a.riskLevel ?? 'low' } }),
+);
+
+async function ask(label, args) {
+  try {
+    const r = await bookFlight(args);
+    console.log(`  \x1b[32m✅ ALLOW\x1b[0m   ${label.padEnd(30)} → booked ${r.pnr} (remaining $${r.remaining})`);
+  } catch (e) {
+    const g = e.governance ?? {};
+    const tag = g.decision === 'escalate' ? '\x1b[33m⚠ ESCALATE\x1b[0m' : '\x1b[31m⛔ BLOCK\x1b[0m';
+    console.log(`  ${tag} ${label.padEnd(30)} → ${g.reasonCode ?? e.message}`);
+  }
+}
+
+console.log(`\n  OpenClaw agent — every booking passes through the AgentSafe gate\n  ${'─'.repeat(60)}`);
+await ask('$150 book-flight, low risk', { amount: 150, merchant: 'skyward-air', tool: 'book-flight', riskLevel: 'low' });
+await ask('$600 book-flight', { amount: 600, merchant: 'skyward-air', tool: 'book-flight', riskLevel: 'low' });
+await ask('$100 wire-transfer tool', { amount: 100, merchant: 'skyward-air', tool: 'wire-transfer', riskLevel: 'low' });
+await ask('$100 high-risk decision', { amount: 100, merchant: 'skyward-air', tool: 'book-flight', riskLevel: 'high' });
+console.log(`\n  The agent refuses blocked/escalated actions itself — governance decided, not the LLM.\n`);

package/magp-did.mjs

@@ -1,157 +1,157 @@
-// GENERATED from backend/src/features/magp/did.ts — do not edit. Regenerate: npm run build:guard-core
-
-// src/features/magp/did.ts
-import crypto from "node:crypto";
-
-// src/features/agent-identity/did.util.ts
-var BASE58_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
-function base58(bytes) {
-  let zeros = 0;
-  while (zeros < bytes.length && bytes[zeros] === 0) zeros++;
-  const digits = [];
-  for (let i = zeros; i < bytes.length; i++) {
-    let carry = bytes[i];
-    for (let j = 0; j < digits.length; j++) {
-      carry += digits[j] << 8;
-      digits[j] = carry % 58;
-      carry = carry / 58 | 0;
-    }
-    while (carry > 0) {
-      digits.push(carry % 58);
-      carry = carry / 58 | 0;
-    }
-  }
-  let out = "";
-  for (let k = 0; k < zeros; k++) out += BASE58_ALPHABET[0];
-  for (let q = digits.length - 1; q >= 0; q--) out += BASE58_ALPHABET[digits[q]];
-  return out;
-}
-function multibaseBase58btc(bytes) {
-  return "z" + base58(bytes);
-}
-function buildHederaDid(network, publicKeyBytes, topicId) {
-  return `did:hedera:${network}:${multibaseBase58btc(publicKeyBytes)}_${topicId}`;
-}
-function base58Decode(str) {
-  const bytes = [0];
-  for (const ch of str) {
-    const value = BASE58_ALPHABET.indexOf(ch);
-    if (value === -1) throw new Error(`invalid base58 character '${ch}'`);
-    let carry = value;
-    for (let j = 0; j < bytes.length; j++) {
-      carry += bytes[j] * 58;
-      bytes[j] = carry & 255;
-      carry >>= 8;
-    }
-    while (carry > 0) {
-      bytes.push(carry & 255);
-      carry >>= 8;
-    }
-  }
-  let zeros = 0;
-  for (let k = 0; k < str.length && str[k] === BASE58_ALPHABET[0]; k++) zeros++;
-  const out = new Uint8Array(zeros + bytes.length);
-  for (let i = 0; i < bytes.length; i++) out[zeros + i] = bytes[bytes.length - 1 - i];
-  return out;
-}
-function parseHederaDid(did) {
-  const m = /^did:hedera:(mainnet|testnet|previewnet|devnet):(z[1-9A-HJ-NP-Za-km-z]+)_(\d+\.\d+\.\d+)$/.exec(did ?? "");
-  if (!m) return null;
-  const [, network, publicKeyMultibase, topicId] = m;
-  let publicKeyBytes;
-  try {
-    publicKeyBytes = base58Decode(publicKeyMultibase.slice(1));
-  } catch {
-    return null;
-  }
-  if (publicKeyBytes.length !== 32) return null;
-  return { network, publicKeyMultibase, publicKeyBytes, topicId };
-}
-var ED25519_MULTICODEC = Uint8Array.of(237, 1);
-function buildDidKey(publicKeyBytes) {
-  const prefixed = new Uint8Array(ED25519_MULTICODEC.length + publicKeyBytes.length);
-  prefixed.set(ED25519_MULTICODEC, 0);
-  prefixed.set(publicKeyBytes, ED25519_MULTICODEC.length);
-  return `did:key:${multibaseBase58btc(prefixed)}`;
-}
-function parseDidKey(did) {
-  const m = /^did:key:(z[1-9A-HJ-NP-Za-km-z]+)$/.exec(did ?? "");
-  if (!m) return null;
-  const multibase = m[1];
-  let decoded;
-  try {
-    decoded = base58Decode(multibase.slice(1));
-  } catch {
-    return null;
-  }
-  if (decoded.length !== ED25519_MULTICODEC.length + 32) return null;
-  if (decoded[0] !== ED25519_MULTICODEC[0] || decoded[1] !== ED25519_MULTICODEC[1]) return null;
-  return { method: "key", publicKeyMultibase: multibase, publicKeyBytes: decoded.slice(ED25519_MULTICODEC.length) };
-}
-function didPublicKeyBytes(did) {
-  return parseHederaDid(did)?.publicKeyBytes ?? parseDidKey(did)?.publicKeyBytes ?? null;
-}
-
-// src/features/magp/did.ts
-var ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
-function ed25519KeyFromRaw(raw) {
-  const der = Buffer.concat([ED25519_SPKI_PREFIX, Buffer.from(raw)]);
-  return crypto.createPublicKey({ key: der, format: "der", type: "spki" });
-}
-function verifyDidSignature(did, message, signatureHex) {
-  const publicKeyBytes = didPublicKeyBytes(did);
-  if (!publicKeyBytes) return false;
-  try {
-    const key = ed25519KeyFromRaw(publicKeyBytes);
-    return crypto.verify(null, Buffer.from(message, "utf8"), key, Buffer.from(signatureHex, "hex"));
-  } catch {
-    return false;
-  }
-}
-function buildDidDocument(did, service) {
-  const hedera = parseHederaDid(did);
-  const key = hedera ? null : parseDidKey(did);
-  if (!hedera && !key) return null;
-  const publicKeyMultibase = hedera ? hedera.publicKeyMultibase : key.publicKeyMultibase;
-  const fragment = hedera ? "#did-root-key" : `#${key.publicKeyMultibase}`;
-  const vmId = `${did}${fragment}`;
-  const doc = {
-    "@context": ["https://www.w3.org/ns/did/v1"],
-    id: did,
-    controller: did,
-    verificationMethod: [
-      {
-        id: vmId,
-        type: "Ed25519VerificationKey2020",
-        controller: did,
-        publicKeyMultibase
-      }
-    ],
-    authentication: [vmId]
-  };
-  if (service) {
-    doc.service = [
-      {
-        id: `${did}#magp`,
-        type: "MAGPEndpoint",
-        serviceEndpoint: service.serviceEndpoint,
-        channels: service.channels,
-        protoVersions: service.protoVersions
-      }
-    ];
-  }
-  return doc;
-}
-export {
-  base58,
-  base58Decode,
-  buildDidDocument,
-  buildDidKey,
-  buildHederaDid,
-  didPublicKeyBytes,
-  ed25519KeyFromRaw,
-  multibaseBase58btc,
-  parseDidKey,
-  parseHederaDid,
-  verifyDidSignature
-};
+// GENERATED from backend/src/features/magp/did.ts — do not edit. Regenerate: npm run build:guard-core
+
+// src/features/magp/did.ts
+import crypto from "node:crypto";
+
+// src/features/agent-identity/did.util.ts
+var BASE58_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+function base58(bytes) {
+  let zeros = 0;
+  while (zeros < bytes.length && bytes[zeros] === 0) zeros++;
+  const digits = [];
+  for (let i = zeros; i < bytes.length; i++) {
+    let carry = bytes[i];
+    for (let j = 0; j < digits.length; j++) {
+      carry += digits[j] << 8;
+      digits[j] = carry % 58;
+      carry = carry / 58 | 0;
+    }
+    while (carry > 0) {
+      digits.push(carry % 58);
+      carry = carry / 58 | 0;
+    }
+  }
+  let out = "";
+  for (let k = 0; k < zeros; k++) out += BASE58_ALPHABET[0];
+  for (let q = digits.length - 1; q >= 0; q--) out += BASE58_ALPHABET[digits[q]];
+  return out;
+}
+function multibaseBase58btc(bytes) {
+  return "z" + base58(bytes);
+}
+function buildHederaDid(network, publicKeyBytes, topicId) {
+  return `did:hedera:${network}:${multibaseBase58btc(publicKeyBytes)}_${topicId}`;
+}
+function base58Decode(str) {
+  const bytes = [0];
+  for (const ch of str) {
+    const value = BASE58_ALPHABET.indexOf(ch);
+    if (value === -1) throw new Error(`invalid base58 character '${ch}'`);
+    let carry = value;
+    for (let j = 0; j < bytes.length; j++) {
+      carry += bytes[j] * 58;
+      bytes[j] = carry & 255;
+      carry >>= 8;
+    }
+    while (carry > 0) {
+      bytes.push(carry & 255);
+      carry >>= 8;
+    }
+  }
+  let zeros = 0;
+  for (let k = 0; k < str.length && str[k] === BASE58_ALPHABET[0]; k++) zeros++;
+  const out = new Uint8Array(zeros + bytes.length);
+  for (let i = 0; i < bytes.length; i++) out[zeros + i] = bytes[bytes.length - 1 - i];
+  return out;
+}
+function parseHederaDid(did) {
+  const m = /^did:hedera:(mainnet|testnet|previewnet|devnet):(z[1-9A-HJ-NP-Za-km-z]+)_(\d+\.\d+\.\d+)$/.exec(did ?? "");
+  if (!m) return null;
+  const [, network, publicKeyMultibase, topicId] = m;
+  let publicKeyBytes;
+  try {
+    publicKeyBytes = base58Decode(publicKeyMultibase.slice(1));
+  } catch {
+    return null;
+  }
+  if (publicKeyBytes.length !== 32) return null;
+  return { network, publicKeyMultibase, publicKeyBytes, topicId };
+}
+var ED25519_MULTICODEC = Uint8Array.of(237, 1);
+function buildDidKey(publicKeyBytes) {
+  const prefixed = new Uint8Array(ED25519_MULTICODEC.length + publicKeyBytes.length);
+  prefixed.set(ED25519_MULTICODEC, 0);
+  prefixed.set(publicKeyBytes, ED25519_MULTICODEC.length);
+  return `did:key:${multibaseBase58btc(prefixed)}`;
+}
+function parseDidKey(did) {
+  const m = /^did:key:(z[1-9A-HJ-NP-Za-km-z]+)$/.exec(did ?? "");
+  if (!m) return null;
+  const multibase = m[1];
+  let decoded;
+  try {
+    decoded = base58Decode(multibase.slice(1));
+  } catch {
+    return null;
+  }
+  if (decoded.length !== ED25519_MULTICODEC.length + 32) return null;
+  if (decoded[0] !== ED25519_MULTICODEC[0] || decoded[1] !== ED25519_MULTICODEC[1]) return null;
+  return { method: "key", publicKeyMultibase: multibase, publicKeyBytes: decoded.slice(ED25519_MULTICODEC.length) };
+}
+function didPublicKeyBytes(did) {
+  return parseHederaDid(did)?.publicKeyBytes ?? parseDidKey(did)?.publicKeyBytes ?? null;
+}
+
+// src/features/magp/did.ts
+var ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
+function ed25519KeyFromRaw(raw) {
+  const der = Buffer.concat([ED25519_SPKI_PREFIX, Buffer.from(raw)]);
+  return crypto.createPublicKey({ key: der, format: "der", type: "spki" });
+}
+function verifyDidSignature(did, message, signatureHex) {
+  const publicKeyBytes = didPublicKeyBytes(did);
+  if (!publicKeyBytes) return false;
+  try {
+    const key = ed25519KeyFromRaw(publicKeyBytes);
+    return crypto.verify(null, Buffer.from(message, "utf8"), key, Buffer.from(signatureHex, "hex"));
+  } catch {
+    return false;
+  }
+}
+function buildDidDocument(did, service) {
+  const hedera = parseHederaDid(did);
+  const key = hedera ? null : parseDidKey(did);
+  if (!hedera && !key) return null;
+  const publicKeyMultibase = hedera ? hedera.publicKeyMultibase : key.publicKeyMultibase;
+  const fragment = hedera ? "#did-root-key" : `#${key.publicKeyMultibase}`;
+  const vmId = `${did}${fragment}`;
+  const doc = {
+    "@context": ["https://www.w3.org/ns/did/v1"],
+    id: did,
+    controller: did,
+    verificationMethod: [
+      {
+        id: vmId,
+        type: "Ed25519VerificationKey2020",
+        controller: did,
+        publicKeyMultibase
+      }
+    ],
+    authentication: [vmId]
+  };
+  if (service) {
+    doc.service = [
+      {
+        id: `${did}#magp`,
+        type: "MAGPEndpoint",
+        serviceEndpoint: service.serviceEndpoint,
+        channels: service.channels,
+        protoVersions: service.protoVersions
+      }
+    ];
+  }
+  return doc;
+}
+export {
+  base58,
+  base58Decode,
+  buildDidDocument,
+  buildDidKey,
+  buildHederaDid,
+  didPublicKeyBytes,
+  ed25519KeyFromRaw,
+  multibaseBase58btc,
+  parseDidKey,
+  parseHederaDid,
+  verifyDidSignature
+};

package/package.json

@@ -1,59 +1,59 @@
-{
-  "name": "@metamynd/agentsafe-guard",
-  "version": "0.2.0",
-  "description": "Zero-dependency runtime governance for any Node AI agent — gate tool calls through MetaMynd/AgentSafe (allow / block / escalate) against the agent's mandate, enforced Standards, and SOPs. Ed25519-signed, deterministic, fail-closed.",
-  "type": "module",
-  "main": "./agentsafe-guard.mjs",
-  "module": "./agentsafe-guard.mjs",
-  "exports": {
-    ".": "./agentsafe-guard.mjs",
-    "./policy-core": "./policy-core.mjs",
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "agentsafe-guard.mjs",
-    "policy-core.mjs",
-    "magp-did.mjs",
-    "x402.mjs",
-    "example-openclaw-agent.mjs",
-    "README.md",
-    "LICENSE"
-  ],
-  "scripts": {
-    "test": "node local-eval.smoke.mjs"
-  },
-  "engines": {
-    "node": ">=18"
-  },
-  "sideEffects": false,
-  "keywords": [
-    "ai",
-    "agent",
-    "agents",
-    "governance",
-    "ai-safety",
-    "guardrails",
-    "policy",
-    "mandate",
-    "authorization",
-    "ed25519",
-    "magp",
-    "metamynd",
-    "agentsafe",
-    "compliance"
-  ],
-  "author": "MetaMynd",
-  "license": "MIT",
-  "homepage": "https://github.com/jasimp18/AgentSafe/tree/main/integrations/agentsafe-guard#readme",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/jasimp18/AgentSafe.git",
-    "directory": "integrations/agentsafe-guard"
-  },
-  "bugs": {
-    "url": "https://github.com/jasimp18/AgentSafe/issues"
-  },
-  "publishConfig": {
-    "access": "public"
-  }
-}
+{
+  "name": "@metamynd/agentsafe-guard",
+  "version": "0.3.0",
+  "description": "Zero-dependency runtime governance for any Node AI agent — gate tool calls through MetaMynd/AgentSafe (allow / block / escalate) against the agent's mandate, enforced Standards, and SOPs. Ed25519-signed, deterministic, fail-closed.",
+  "type": "module",
+  "main": "./agentsafe-guard.mjs",
+  "module": "./agentsafe-guard.mjs",
+  "exports": {
+    ".": "./agentsafe-guard.mjs",
+    "./policy-core": "./policy-core.mjs",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "agentsafe-guard.mjs",
+    "policy-core.mjs",
+    "magp-did.mjs",
+    "x402.mjs",
+    "example-openclaw-agent.mjs",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "test": "node local-eval.smoke.mjs && node execution-adapter.smoke.mjs"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "sideEffects": false,
+  "keywords": [
+    "ai",
+    "agent",
+    "agents",
+    "governance",
+    "ai-safety",
+    "guardrails",
+    "policy",
+    "mandate",
+    "authorization",
+    "ed25519",
+    "magp",
+    "metamynd",
+    "agentsafe",
+    "compliance"
+  ],
+  "author": "MetaMynd",
+  "license": "MIT",
+  "homepage": "https://github.com/jasimp18/AgentSafe/tree/main/integrations/agentsafe-guard#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jasimp18/AgentSafe.git",
+    "directory": "integrations/agentsafe-guard"
+  },
+  "bugs": {
+    "url": "https://github.com/jasimp18/AgentSafe/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}