@scopeblind/core 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +51 -0
- package/index.js +34 -0
- package/package.json +30 -0
package/README.md
ADDED
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
# @scopeblind/core
|
|
2
|
+
|
|
3
|
+
**ScopeBlind in one install.** Bundles the three core packages for AI agent governance:
|
|
4
|
+
|
|
5
|
+
| Package | What it does |
|
|
6
|
+
|---------|-------------|
|
|
7
|
+
| `protect-mcp` | MCP security gateway — shadow mode, enforce mode, signed receipts |
|
|
8
|
+
| `@scopeblind/passport` | Agent identity — Ed25519 keypairs, signed manifests |
|
|
9
|
+
| `@veritasacta/verify` | Offline receipt verifier — MIT, no ScopeBlind dependency |
|
|
10
|
+
|
|
11
|
+
## Install
|
|
12
|
+
|
|
13
|
+
```bash
|
|
14
|
+
npm install @scopeblind/core
|
|
15
|
+
```
|
|
16
|
+
|
|
17
|
+
## Quick start
|
|
18
|
+
|
|
19
|
+
```bash
|
|
20
|
+
# Wrap any MCP server (shadow mode by default)
|
|
21
|
+
npx protect-mcp -- node your-server.js
|
|
22
|
+
|
|
23
|
+
# Verify receipts offline
|
|
24
|
+
npx @veritasacta/verify --self-test
|
|
25
|
+
|
|
26
|
+
# Check your setup
|
|
27
|
+
npx protect-mcp doctor
|
|
28
|
+
```
|
|
29
|
+
|
|
30
|
+
## Why this package?
|
|
31
|
+
|
|
32
|
+
ScopeBlind has 12+ specialized packages. If you just want to get started, install `@scopeblind/core` and you get everything you need.
|
|
33
|
+
|
|
34
|
+
For specific use cases, install individual packages:
|
|
35
|
+
- `@scopeblind/otel-exporter` — receipts in Datadog/Grafana
|
|
36
|
+
- `@scopeblind/red-team` — policy benchmarking
|
|
37
|
+
- `create-scopeblind-agent` — scaffold a governed agent
|
|
38
|
+
- `acta-sql` — query receipts with SQL (Python/DuckDB)
|
|
39
|
+
|
|
40
|
+
## Links
|
|
41
|
+
|
|
42
|
+
- [Docs](https://scopeblind.com/docs)
|
|
43
|
+
- [Trace Visualizer](https://scopeblind.com/trace)
|
|
44
|
+
- [Playground](https://scopeblind.com/playground)
|
|
45
|
+
- [Trust Center](https://scopeblind.com/trust)
|
|
46
|
+
- [IETF Draft](https://datatracker.ietf.org/doc/draft-farley-acta-signed-receipts/)
|
|
47
|
+
- [npm: protect-mcp](https://npmjs.com/package/protect-mcp)
|
|
48
|
+
|
|
49
|
+
## License
|
|
50
|
+
|
|
51
|
+
MIT
|
package/index.js
ADDED
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @scopeblind/core — ScopeBlind in one install
|
|
3
|
+
*
|
|
4
|
+
* This is a convenience meta-package that bundles the three core
|
|
5
|
+
* ScopeBlind packages:
|
|
6
|
+
*
|
|
7
|
+
* - protect-mcp: MCP security gateway (shadow mode, enforce mode, signed receipts)
|
|
8
|
+
* - @scopeblind/passport: Agent identity (Ed25519 keypairs, signed manifests)
|
|
9
|
+
* - @veritasacta/verify: Offline receipt verifier (MIT, no ScopeBlind dependency)
|
|
10
|
+
*
|
|
11
|
+
* Install:
|
|
12
|
+
* npm install @scopeblind/core
|
|
13
|
+
*
|
|
14
|
+
* Usage:
|
|
15
|
+
* // Gateway
|
|
16
|
+
* const { ProtectGateway } = require('protect-mcp');
|
|
17
|
+
*
|
|
18
|
+
* // Identity
|
|
19
|
+
* const { createPassport } = require('@scopeblind/passport');
|
|
20
|
+
*
|
|
21
|
+
* // Verification
|
|
22
|
+
* const { verify } = require('@veritasacta/verify');
|
|
23
|
+
*
|
|
24
|
+
* Or use the CLI directly:
|
|
25
|
+
* npx protect-mcp -- node your-server.js
|
|
26
|
+
* npx @veritasacta/verify --self-test
|
|
27
|
+
*
|
|
28
|
+
* Docs: https://scopeblind.com/docs
|
|
29
|
+
* Trust: https://scopeblind.com/trust
|
|
30
|
+
* Trace: https://scopeblind.com/trace
|
|
31
|
+
*/
|
|
32
|
+
|
|
33
|
+
// Re-export from protect-mcp (the primary package)
|
|
34
|
+
module.exports = require('protect-mcp');
|
package/package.json
ADDED
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "@scopeblind/core",
|
|
3
|
+
"version": "0.1.0",
|
|
4
|
+
"description": "ScopeBlind in one install. Bundles protect-mcp + passport + verify for AI agent governance.",
|
|
5
|
+
"license": "MIT",
|
|
6
|
+
"repository": {
|
|
7
|
+
"type": "git",
|
|
8
|
+
"url": "git+https://github.com/tomjwxf/ScopeBlindD2.git",
|
|
9
|
+
"directory": "packages/core"
|
|
10
|
+
},
|
|
11
|
+
"homepage": "https://scopeblind.com",
|
|
12
|
+
"keywords": [
|
|
13
|
+
"mcp",
|
|
14
|
+
"security",
|
|
15
|
+
"ai-agents",
|
|
16
|
+
"receipts",
|
|
17
|
+
"ed25519",
|
|
18
|
+
"scopeblind",
|
|
19
|
+
"veritas-acta",
|
|
20
|
+
"cedar",
|
|
21
|
+
"policy"
|
|
22
|
+
],
|
|
23
|
+
"dependencies": {
|
|
24
|
+
"protect-mcp": "^0.3.0",
|
|
25
|
+
"@scopeblind/passport": "^0.3.0",
|
|
26
|
+
"@veritasacta/verify": "^0.2.0"
|
|
27
|
+
},
|
|
28
|
+
"main": "index.js",
|
|
29
|
+
"types": "index.d.ts"
|
|
30
|
+
}
|