@verax-ai/body 0.1.0 → 0.1.2

package/dist/wiring.js

@@ -2,11 +2,11 @@ import { createProxy, FileLedger, loadPolicy, tenantKey, } from "@verax-ai/proxy
 import { readFileSync } from "node:fs";
 import { persistPolicySnapshot } from "./policy-store.js";
 import { inputsPrincipal } from "./inputs-read.js";
-import { memoryBelongsToOtherTenant, memoryGet, memoryPut, readMemoryMeta } from "./tools/memory.js";
+import { memoryBelongsToOtherTenant, memoryExistsForTenant, memoryGet, memoryPut, readMemoryMeta, } from "./tools/memory.js";
 import { auditExplain } from "./tools/audit.js";
 import { messageRead, messageSend } from "./tools/message.js";
 import { spendAuthorize } from "./tools/spend.js";
-import { requestWitnessSign } from "./witness.js";
+import { requestWitnessCheckpoint, requestWitnessSign } from "./witness.js";
 export const TOOL_NAMES = [
     "memory.get",
     "memory.put",
@@ -17,11 +17,32 @@ export const TOOL_NAMES = [
 ];
 /**
  * Tool functions live in a Map that is not exported. The only way to
- * reach them at runtime is `proxy.call` -> `inner`.
+ * reach them at runtime is `proxy.call` -> `inner`. Extra tools (a
+ * downstream prefix) enter that Map at construction; they still pass
+ * the gate.
  */
 export function createBodyServices(opts) {
+    const extraNames = [];
+    const reserved = new Set(TOOL_NAMES);
+    for (const tool of opts.extraTools ?? []) {
+        if (reserved.has(tool.name) || extraNames.includes(tool.name)) {
+            throw new Error(`downstream-name-collision:${tool.name}`);
+        }
+        // Same shape as extraToolNameOk in downstream.ts (prefix.childName).
+        if (!/^[A-Za-z][A-Za-z0-9_-]{0,31}\.[A-Za-z][A-Za-z0-9._-]{0,63}$/.test(tool.name)) {
+            throw new Error(`downstream-name-invalid:${tool.name}`);
+        }
+        extraNames.push(tool.name);
+    }
     const ledger = new FileLedger(opts.stateDir);
     ledger.remoteWitness = (row, resultHash) => requestWitnessSign(opts.stateDir, row, resultHash);
+    ledger.onPieceClose = async (window) => {
+        await requestWitnessCheckpoint(opts.stateDir, {
+            epoch: 0,
+            startMs: window.startMs,
+            endMs: window.endMs,
+        });
+    };
     const policyText = readFileSync(opts.policyFile, "utf8");
     const policyDocument = JSON.parse(policyText);
     const policy = loadPolicy(policyText);
@@ -49,6 +70,9 @@ export function createBodyServices(opts) {
     registry.set("message.read", (call, principal) => messageRead(call, opts.stateDir, principal));
     registry.set("message.send", (call, principal, ref) => messageSend(call, opts.stateDir, ref ?? "", principal));
     registry.set("spend", (call, _principal, ref) => spendAuthorize(call, ref ?? ""));
+    for (const tool of opts.extraTools ?? []) {
+        registry.set(tool.name, tool.fn);
+    }
     const inner = async (call, principal, ref) => {
         const fn = registry.get(call.name);
         if (!fn) {
@@ -73,6 +97,8 @@ export function createBodyServices(opts) {
                 const id = call.arguments.id;
                 if (typeof id !== "string")
                     return false;
+                if (memoryExistsForTenant(opts.stateDir, id, principal))
+                    return false;
                 return memoryBelongsToOtherTenant(opts.stateDir, id, tenantKey(principal));
             }
             if (call.name === "audit.explain") {
@@ -93,9 +119,10 @@ export function createBodyServices(opts) {
     return {
         proxy,
         ledger,
+        policy,
         policyHash: policy.hash,
         policyDocument,
-        listTools: () => TOOL_NAMES,
+        listTools: () => (extraNames.length === 0 ? TOOL_NAMES : [...TOOL_NAMES, ...extraNames]),
         explainOpts,
     };
 }

package/dist/witness.js

@@ -5,7 +5,7 @@ import { join } from "node:path";
 import { writeFileAtomic } from "./atomic-write.js";
 import { buildCheckpointClaims, checkpointHash, signCheckpoint, totalsFromDecisionRecords, } from "@cedulon/checkpoint";
 import { decisionRecordHash } from "@cedulon/core";
-import { checkpointsPath, signEffectAttestation } from "@verax-ai/proxy";
+import { checkpointsPath, listPieceFiles, signEffectAttestation } from "@verax-ai/proxy";
 import { pidAlive } from "./unlock.js";
 const WITNESS_CLASS = "same-org";
 function listenPath(stateDir) {
@@ -104,21 +104,23 @@ function send(res, status, body) {
     res.end(text);
 }
 function loadDecisions(stateDir) {
-    try {
-        const text = readFileSync(join(stateDir, "decisions.jsonl"), "utf8");
-        const out = [];
-        for (const line of text.split("\n")) {
-            if (line === "")
+    const out = [];
+    for (const piece of listPieceFiles(stateDir)) {
+        try {
+            const text = readFileSync(piece.decisions, "utf8");
+            for (const line of text.split("\n")) {
+                if (line === "")
+                    continue;
+                out.push(JSON.parse(line));
+            }
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
                 continue;
-            out.push(JSON.parse(line));
+            throw err;
         }
-        return out;
-    }
-    catch (err) {
-        if (err.code === "ENOENT")
-            return [];
-        throw err;
     }
+    return out;
 }
 function lastCheckpointHash(stateDir) {
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verax-ai/body",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "license": "Apache-2.0",
   "type": "module",
   "engines": {
@@ -27,6 +27,17 @@
     "jose": "^6.2.11"
   },
   "description": "VERAX body: an MCP server that decides, records and proves what an agent did.",
+  "homepage": "https://verax-ai.com",
+  "keywords": [
+    "verax",
+    "mcp",
+    "mcp-server",
+    "agent",
+    "policy",
+    "audit",
+    "ledger",
+    "approval"
+  ],
   "mcpName": "io.github.verax-ai/verax",
   "scripts": {
     "build": "tsc -p tsconfig.build.json",