@metamynd/agentsafe-signer 0.20.0 → 0.20.3

package/daemon.mjs

@@ -84,10 +84,10 @@ export function buildServiceCallMessage({ action, authorizationId, fields, nonce
 export const DEFAULT_CHECKPOINT_INTERVAL_MS = 15 * 60 * 1000;
 
 // Matches agentsafe-guard.mjs's own REPORTABLE_LOCAL_DECISIONS exactly (LOCAL_DECISIONS the
-// backend's /policy/decisions/local actually accepts) — this daemon must never sign a
-// 'quarantine'/'suspend' or other value here just because a caller asked; only a genuine
-// local-first verdict shape is a valid thing to have signed under this op.
-const REPORTABLE_LOCAL_DECISIONS = new Set(['allow', 'observe', 'block', 'escalate']);
+// backend's /policy/decisions/local accepts) — this daemon never signs another value here just because a caller asked;
+// only a genuine local-first verdict shape, or (since 0.20.3, N-4) a containment refusal the guard gave from the
+// server's own `contained` flag, is a valid thing to have signed under this op. Never 'decommission'.
+const REPORTABLE_LOCAL_DECISIONS = new Set(['allow', 'observe', 'block', 'escalate', 'suspend', 'quarantine']);
 
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 const HEX_RE = /^[0-9a-f]+$/i;
@@ -390,8 +390,7 @@ export class SignerDaemon {
 
   /**
    * An agent settling its OWN hold that nobody has claimed (MAGP §8.7.4): capture it, or void it. The issuer accepts an
-   * unclaimed settlement only from that hold's agent, a counterparty the owner registered, or — for an open testnet owner —
-   * anyone. Built from validated fields under the fixed MAGP-SETTLE-v1 prefix, which no other message this daemon signs
+   * unclaimed settlement only from that hold's agent or a counterparty the owner registered, on every owner. Built from validated fields under the fixed MAGP-SETTLE-v1 prefix, which no other message this daemon signs
    * starts with; it names the agent, so it is never a counterparty's signature (sign-service-call, MAGP-SERVICE-v1), and an
    * agent cannot use it to claim. Agent-role only.
    */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamynd/agentsafe-signer",
-  "version": "0.20.0",
+  "version": "0.20.3",
   "description": "Local signer daemon for AgentSafe agent/service keys \u2014 the key never enters the calling guard's own process. See docs/design/agent-key-custody-local-signer-daemon-plan.md.",
   "type": "module",
   "main": "./daemon.mjs",

package/policy-core.mjs

@@ -43,6 +43,57 @@ function riskFloorFor(mandate, target) {
   }
   return floor;
 }
+var DEFAULT_AMOUNT_SHARE_HIGH = 0.7;
+function grantsFor(mandate, target) {
+  return (mandate?.permission ?? []).filter((p) => !!p && typeof p === "object" && (p.target ?? mandate?.target) === target);
+}
+function perTxnCapFor(mandate, target) {
+  let cap = null;
+  for (const p of grantsFor(mandate, target)) {
+    for (const c of p.constraint ?? []) {
+      if (c?.leftOperand !== "mm:payAmount") continue;
+      const n = Number(c.rightOperand);
+      if (Number.isFinite(n) && n > 0 && (cap === null || n < cap)) cap = n;
+    }
+  }
+  return cap;
+}
+function hasMerchantAllowList(mandate, target) {
+  return grantsFor(mandate, target).some((p) => (p.constraint ?? []).some((c) => c?.leftOperand === "mm:merchant"));
+}
+function riskSignalSettings(mandate, target) {
+  const grants = grantsFor(mandate, target);
+  if (grants.length === 0) return { amountShare: DEFAULT_AMOUNT_SHARE_HIGH, newMerchant: true };
+  let amountShare = null;
+  let newMerchant = false;
+  for (const p of grants) {
+    const s = p.riskSignals;
+    if (s === false) continue;
+    const cfg = s && typeof s === "object" ? s : {};
+    const share = cfg.amountShare === false ? null : cfg.amountShare === void 0 ? DEFAULT_AMOUNT_SHARE_HIGH : Number(cfg.amountShare);
+    if (share !== null && Number.isFinite(share) && share > 0 && share <= 1 && (amountShare === null || share < amountShare)) amountShare = share;
+    if (cfg.newMerchant !== false) newMerchant = true;
+  }
+  return { amountShare, newMerchant };
+}
+function riskSignalsFor(mandate, target, amount, opts = {}) {
+  const out = [];
+  const tier = riskFloorFor(mandate, target);
+  if (tier) out.push({ signal: "owner-tier", level: tier, detail: `the owner's risk tier for ${target}` });
+  const settings = riskSignalSettings(mandate, target);
+  const n = typeof amount === "number" ? amount : Number(amount);
+  const cap = perTxnCapFor(mandate, target);
+  if (settings.amountShare !== null && cap !== null && Number.isFinite(n) && n > 0 && n >= settings.amountShare * cap) {
+    out.push({ signal: "amount-share", level: "high", detail: `${Math.round(n / cap * 100)}% of the ${cap} per-transaction cap (review from ${Math.round(settings.amountShare * 100)}%)` });
+  }
+  if (opts.newMerchant === true && settings.newMerchant && !hasMerchantAllowList(mandate, target)) {
+    out.push({ signal: "new-merchant", level: "high", detail: "the first payment to this merchant" });
+  }
+  return out;
+}
+function effectiveRiskFloor(mandate, target, amount, opts = {}) {
+  return maxRisk(...riskSignalsFor(mandate, target, amount, opts).map((s) => s.level));
+}
 function requiresPayloadBindingFor(mandate, target) {
   if (!mandate) return false;
   for (const p of mandate.permission ?? []) {
@@ -793,6 +844,7 @@ export {
   AUTH_MESSAGE_V2_TAG,
   CATALOGUED_ATOMS,
   CONTEXT_UNVERIFIABLE,
+  DEFAULT_AMOUNT_SHARE_HIGH,
   JURISDICTION_ATOM,
   MODES_BY_RANK,
   MODE_RANK,
@@ -815,10 +867,12 @@ export {
   canAuthorize,
   contextFieldProblem,
   documentEnforcesJurisdiction,
+  effectiveRiskFloor,
   evaluate,
   evaluateBoundStandards,
   evaluateMandate,
   evaluateStandardRules,
+  hasMerchantAllowList,
   isAuthorityFailure,
   isOperatingMode,
   isProvenance,
@@ -829,6 +883,7 @@ export {
   moreRestrictive,
   normalizeRiskLevel,
   operatingModeGate,
+  perTxnCapFor,
   provenanceOf,
   releaseHold,
   remainingBudget,
@@ -836,6 +891,8 @@ export {
   requiredContextOf,
   requiresPayloadBindingFor,
   riskFloorFor,
+  riskSignalSettings,
+  riskSignalsFor,
   sumEventField,
   validateMolecules
 };