@sakk-dev/sakk 0.0.0-stage → 0.4.0

package/package.json

@@ -1,6 +1,90 @@
 {
   "name": "@sakk-dev/sakk",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.4.0",
+  "description": "The original check, rebuilt for AI agents — a fail-closed spend ledger: reserve before you spawn, settle with real costs, refuse everything pathological.",
+  "type": "module",
+  "main": "src/ledger.mjs",
+  "exports": {
+    ".": "./src/ledger.mjs",
+    "./policy": "./src/policy.mjs"
+  },
+  "bin": {
+    "sakk": "bin/sakk.mjs"
+  },
+  "scripts": {
+    "test": "node --import ./test/clean-git-env.mjs --test --import ./test/bounded-spawn.mjs --test-timeout=300000 test/*.test.mjs",
+    "test:eval": "node eval/bin/gold-runner.mjs --validate && node --import ./test/clean-git-env.mjs --test --import ./test/bounded-spawn.mjs --test-timeout=300000 eval/__tests__/*.test.mjs",
+    "test:all": "npm test && npm run test:eval",
+    "drill": "sh scripts/mutation-drill.sh",
+    "format": "npx -y prettier@3.9.10 --write .",
+    "format:check": "npx -y prettier@3.9.10 --check .",
+    "lint": "npx -y eslint@10.13.0 --max-warnings=0 .",
+    "gate": "bash scripts/gate.sh",
+    "fuzz": "node scripts/invariant-fuzz.mjs",
+    "fuzz:policy": "node scripts/policy-fuzz.mjs",
+    "fuzz:l1": "node scripts/l1-fuzz.mjs",
+    "brief": "node scripts/findings-brief.mjs",
+    "hooks": "node scripts/hooks/install.mjs",
+    "findings:check": "node scripts/findings-check.mjs",
+    "inbox": "node scripts/findings-inbox.mjs",
+    "campaigns": "node scripts/campaign/fault-injection.mjs && node scripts/campaign/soak-ledger.mjs --minutes 0.2 --workers 4 && node scripts/campaign/mcp-torture.mjs --minutes 0.25 --servers 2",
+    "certificate": "node scripts/gate-certificate.mjs",
+    "evidence": "node scripts/evidence-bundle.mjs",
+    "audit": "node scripts/audit.mjs",
+    "golden-k": "node scripts/golden-k.mjs",
+    "attack-asr": "node scripts/attack-asr.mjs",
+    "findings-report": "node scripts/findings-report.mjs"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "os": [
+    "darwin",
+    "linux"
+  ],
+  "keywords": [
+    "ai-agents",
+    "budget",
+    "spend-gate",
+    "ledger",
+    "fail-closed",
+    "governance",
+    "llm",
+    "agent-ops",
+    "claude-code",
+    "claude-code-plugin",
+    "ai-agent-security",
+    "guardrails",
+    "spend-cap",
+    "kill-switch",
+    "secret-scanning",
+    "mcp",
+    "litellm",
+    "openai-compatible",
+    "llm-gateway"
+  ],
+  "author": "The Sakk authors",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/sakk-dev/sakk.git"
+  },
+  "bugs": {
+    "url": "https://github.com/sakk-dev/sakk/issues"
+  },
+  "homepage": "https://github.com/sakk-dev/sakk#readme",
+  "files": [
+    "src",
+    "bin",
+    "policies",
+    "prices",
+    ".claude-plugin",
+    "integrations/litellm/sakk_gateway.py",
+    "integrations/litellm/config.example.yaml",
+    "integrations/litellm/README.md",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "NOTICE"
+  ]
+}

package/policies/guard-default.json

@@ -0,0 +1,161 @@
+{
+  "schema": "sakk-policy.v1",
+  "default_verdict": "deny",
+  "rules": [
+    {
+      "id": "protect-secret-files",
+      "match": {
+        "action": "secret.read"
+      },
+      "verdict": "deny"
+    },
+    {
+      "id": "shell-destructive",
+      "match": {
+        "action": "git.destructive"
+      },
+      "verdict": "deny"
+    },
+    {
+      "id": "deny-prod-delete",
+      "match": {
+        "action": "prod.delete"
+      },
+      "verdict": "deny"
+    },
+    {
+      "id": "deny-delete-protected",
+      "match": {
+        "action": "file.delete",
+        "scope": ["~protected/"]
+      },
+      "verdict": "deny"
+    },
+    {
+      "id": "allow-temp-cleanup",
+      "match": {
+        "action": "file.delete",
+        "scope": [
+          "~outside/tmp/",
+          "~outside/private/tmp/",
+          "~outside/var/folders/",
+          "~outside/private/var/folders/"
+        ]
+      },
+      "verdict": "allow"
+    },
+    {
+      "id": "deny-rm-outside-repo",
+      "match": {
+        "action": "file.delete",
+        "scope": ["~outside/", "~home/"]
+      },
+      "verdict": "deny"
+    },
+    {
+      "id": "protect-guard-state",
+      "match": {
+        "action": "file.write",
+        "scope": [".sakk/", "~sakk/"]
+      },
+      "verdict": "deny"
+    },
+    {
+      "id": "protect-guard-state-delete",
+      "match": {
+        "action": "file.delete",
+        "scope": [".sakk/", "~sakk/"]
+      },
+      "verdict": "deny"
+    },
+    {
+      "id": "protect-ci-files",
+      "match": {
+        "action": "file.write",
+        "scope": [".github/workflows/"]
+      },
+      "verdict": "deny"
+    },
+    {
+      "id": "protect-migrations",
+      "match": {
+        "action": "file.delete",
+        "scope": ["migrations/", "db/migrations/"]
+      },
+      "verdict": "deny"
+    },
+    {
+      "id": "deny-agent-config",
+      "match": {
+        "action": "file.write",
+        "scope": [
+          ".claude/",
+          ".cursor/",
+          ".codex/",
+          "~home/.claude/",
+          "~home/.cursor/",
+          "~home/.codex/"
+        ]
+      },
+      "verdict": "deny"
+    },
+    {
+      "id": "deny-agent-config-delete",
+      "match": {
+        "action": "file.delete",
+        "scope": [
+          ".claude/",
+          ".cursor/",
+          ".codex/",
+          "~home/.claude/",
+          "~home/.cursor/",
+          "~home/.codex/"
+        ]
+      },
+      "verdict": "deny"
+    },
+    {
+      "id": "high-risk-deploy",
+      "match": {
+        "action": "deploy"
+      },
+      "verdict": "require_approval",
+      "approvers_min": 1
+    },
+    {
+      "id": "ask-constructed-commands",
+      "match": {
+        "action": "shell.constructed"
+      },
+      "verdict": "require_approval",
+      "approvers_min": 1
+    },
+    {
+      "id": "allow-temp-write",
+      "match": {
+        "action": "file.write",
+        "scope": [
+          "~outside/tmp/",
+          "~outside/private/tmp/",
+          "~outside/var/folders/",
+          "~outside/private/var/folders/"
+        ]
+      },
+      "verdict": "allow"
+    },
+    {
+      "id": "ask-write-outside",
+      "match": {
+        "action": "file.write",
+        "scope": ["~outside/", "~home/"]
+      },
+      "verdict": "require_approval",
+      "approvers_min": 1
+    },
+    {
+      "id": "allow-in-repo",
+      "match": {},
+      "verdict": "allow"
+    }
+  ]
+}

package/policies/permissive-dev.json

@@ -0,0 +1,22 @@
+{
+  "schema": "sakk-policy.v1",
+  "default_verdict": "allow",
+  "rules": [
+    {
+      "id": "no-prod-deploys",
+      "match": { "action": "deploy", "scope": ["prod/"] },
+      "verdict": "deny"
+    },
+    {
+      "id": "small-spend-auto",
+      "match": { "max_estimated_usd": 2 },
+      "verdict": "allow"
+    },
+    {
+      "id": "expensive-call-needs-eyes",
+      "match": {},
+      "verdict": "require_approval",
+      "approvers_min": 1
+    }
+  ]
+}