@roxy-agent/agents 0.1.0

package/dist/tools/policies.js

@@ -0,0 +1,107 @@
+// Policy management tools — let the agent persist user-stated guardrails
+// ("never push to main", "always allow npm install in this repo") as
+// natural-language allow/block rules that survive the session.
+import { z } from "zod";
+import { createPolicy, listPolicies, deletePolicy, updatePolicy, scoreAllPolicies, } from "../policies.js";
+// ---------------------------------------------------------------------------
+// add_policy
+// ---------------------------------------------------------------------------
+export const addPolicyToolDefinition = {
+    name: "add_policy",
+    description: "Persist a natural-language allow or block rule. Use when the user states a guardrail you should remember beyond this session — e.g. 'never run git push to main', 'always allow npm install in this project', 'block any aws cli command against production'. The description is embedded and matched semantically against future tool calls; you don't need to spell out exact commands. Returns the created policy with its id.",
+    schema: z.object({
+        kind: z
+            .enum(["allow", "block"])
+            .describe("'block' denies matching actions; 'allow' force-allows them (de-escalating from flagged or denied)."),
+        description: z
+            .string()
+            .min(3)
+            .describe("Natural-language rule. Be specific about the intent: 'block destructive aws s3 commands against production buckets' is better than 'block aws'."),
+        applies_to: z
+            .string()
+            .optional()
+            .describe("Comma-separated tools this rule applies to: 'bash', 'filesystem', 'network', or '*' (default)."),
+        scope: z
+            .string()
+            .optional()
+            .describe("Scope label, e.g. 'global', 'team:platform', 'user:alice'. Defaults to 'global'."),
+    }),
+};
+export async function addPolicy(args) {
+    const policy = await createPolicy({
+        kind: args.kind,
+        description: args.description,
+        applies_to: args.applies_to,
+        scope: args.scope,
+    });
+    return { success: true, policy };
+}
+// ---------------------------------------------------------------------------
+// list_policies
+// ---------------------------------------------------------------------------
+export const listPoliciesToolDefinition = {
+    name: "list_policies",
+    description: "List every persisted natural-language policy (allow/block rules). Use this to understand what guardrails are active before suggesting an action that might match an existing rule. The optional `against` parameter scores all policies against a hypothetical command/path/url so you can see which rule will fire and at what similarity.",
+    schema: z.object({
+        only_enabled: z
+            .boolean()
+            .optional()
+            .describe("If true, hide disabled policies (default false)."),
+        against: z
+            .string()
+            .optional()
+            .describe("If provided, score every policy against this text and include similarities, sorted descending."),
+        against_tool: z
+            .enum(["bash", "filesystem", "network"])
+            .optional()
+            .describe("Tool context for `against` (default 'bash')."),
+    }),
+};
+export async function listPoliciesTool(args) {
+    const all = listPolicies();
+    const filtered = args.only_enabled ? all.filter((p) => p.enabled) : all;
+    if (args.against) {
+        const scored = await scoreAllPolicies(args.against, args.against_tool ?? "bash");
+        const byId = new Map(scored.map((s) => [s.policy.id, s.similarity]));
+        const enriched = filtered
+            .map((p) => ({ ...p, similarity: byId.get(p.id) ?? 0 }))
+            .sort((a, b) => (b.similarity ?? 0) - (a.similarity ?? 0));
+        return { count: enriched.length, policies: enriched };
+    }
+    return { count: filtered.length, policies: filtered };
+}
+// ---------------------------------------------------------------------------
+// delete_policy
+// ---------------------------------------------------------------------------
+export const deletePolicyToolDefinition = {
+    name: "delete_policy",
+    description: "Delete a persisted policy by id. Use sparingly — prefer disabling a policy via `update_policy` so it can be re-enabled later. Returns whether anything was deleted.",
+    schema: z.object({
+        id: z.number().int().positive().describe("The policy id to delete."),
+    }),
+};
+export function deletePolicyTool(args) {
+    const ok = deletePolicy(args.id);
+    return { success: true, deleted: ok };
+}
+// ---------------------------------------------------------------------------
+// update_policy
+// ---------------------------------------------------------------------------
+export const updatePolicyToolDefinition = {
+    name: "update_policy",
+    description: "Modify an existing policy by id. Common uses: enable/disable a rule, tighten its description, or change which tools it applies to. Any field you omit is left unchanged. Re-embeds the description if you change it.",
+    schema: z.object({
+        id: z.number().int().positive(),
+        kind: z.enum(["allow", "block"]).optional(),
+        description: z.string().min(3).optional(),
+        applies_to: z.string().optional(),
+        scope: z.string().optional(),
+        enabled: z.boolean().optional(),
+    }),
+};
+export async function updatePolicyTool(args) {
+    const { id, ...rest } = args;
+    const policy = await updatePolicy(id, rest);
+    return policy ? { success: true, policy } : { success: false };
+}
+//# sourceMappingURL=policies.js.map

package/dist/tools/policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../src/tools/policies.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,qEAAqE;AACrE,+DAA+D;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,gBAAgB,GAEjB,MAAM,gBAAgB,CAAC;AAExB,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,maAAma;IACra,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;aACxB,QAAQ,CACP,oGAAoG,CACrG;QACH,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CACP,iJAAiJ,CAClJ;QACH,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,gGAAgG,CACjG;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,kFAAkF,CACnF;KACJ,CAAC;CACH,CAAC;AAIF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAmB;IAIjD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,6UAA6U;IAC/U,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,YAAY,EAAE,CAAC;aACZ,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,kDAAkD,CAAC;QAC/D,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,gGAAgG,CACjG;QACH,YAAY,EAAE,CAAC;aACZ,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;aACvC,QAAQ,EAAE;aACV,QAAQ,CAAC,8CAA8C,CAAC;KAC5D,CAAC;CACH,CAAC;AASF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAsB;IAEtB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAExE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,QAAQ;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACvD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,qKAAqK;IACvK,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;KACrE,CAAC;CACH,CAAC;AAIF,MAAM,UAAU,gBAAgB,CAAC,IAAsB;IAIrD,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,sNAAsN;IACxN,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC/B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;CACH,CAAC;AAIF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAsB;IAEtB,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACjE,CAAC"}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@roxy-agent/agents",
+  "version": "0.1.0",
+  "description": "MCP server that proxies all agent actions, classifies risk, enforces natural-language policies, and logs to a local SQLite audit DB with a live dashboard.",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "agent-proxy": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc && node scripts/postbuild.mjs",
+    "start": "node dist/index.js",
+    "dev": "tsx src/index.ts",
+    "dev:watch": "tsx watch src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build",
+    "prepack": "npm run build"
+  },
+  "dependencies": {
+    "@huggingface/transformers": "^4.2.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "better-sqlite3": "^12.9.0",
+    "echarts": "^6.0.0",
+    "express": "^4.21.2",
+    "geist": "^1.7.0",
+    "zod": "^3.25.76"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/express": "^4.17.21",
+    "@types/node": "^20.19.0",
+    "tsx": "^4.20.6",
+    "typescript": "^5.9.3"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "agent",
+    "proxy",
+    "audit",
+    "guardrail",
+    "policy",
+    "cursor",
+    "claude",
+    "codex",
+    "ai-safety",
+    "human-in-the-loop"
+  ],
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  }
+}