agentcert 0.4.0 → 0.5.0

package/README.md

@@ -94,6 +94,23 @@ routes, with a 5-second timeout and 10-request-per-minute process-local cap.
 The Stripe key is environment-only and is never written to output or evidence.
 See the [Bounded Vendor Sandbox Egress guide](https://github.com/Kakarottoooo/agentcert/blob/main/docs/bounded-vendor-sandbox-egress.md).
 
+Release maintainers can run the protected, manual
+`Real Stripe sandbox acceptance` GitHub workflow. It performs the bounded read,
+independently scans the generated report before upload, validates it again at
+the CLI boundary, uploads the v0.4 evidence, and compares it with prior
+protected runs. See the [real vendor acceptance guide](https://github.com/Kakarottoooo/agentcert/blob/main/docs/real-vendor-acceptance.md).
+
+The workflow's upload step is also available as a narrow command for an
+already-generated report:
+
+```bash
+npx agentcert sandbox upload-report --report .agentcert/vendor-sandbox/current-report.json --external-id vendor-acceptance:stripe:<run>:<attempt>
+```
+
+This command accepts only AgentCert sandbox conformance and vendor-egress
+contracts and rejects reports containing credential-shaped values or forbidden
+sensitive fields.
+
 Review/export helpers:
 
 ```bash

package/dist/sandbox.js

@@ -1,4 +1,4 @@
-import { mkdir, writeFile } from "node:fs/promises";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { dirname, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import { resolveConnection } from "./credentials.js";
@@ -19,6 +19,8 @@ export async function runSandboxCommand(args) {
         return pushSandboxCertification(args.slice(1));
     if (action === "stripe-readonly")
         return runStripeSandboxReadOnly(args.slice(1));
+    if (action === "upload-report")
+        return uploadSandboxReport(args.slice(1));
     throw new Error(`Unknown sandbox command ${JSON.stringify(action)}. Run \`npx agentcert sandbox --help\`.`);
 }
 export async function initializeSandboxAdapter(args) {
@@ -103,6 +105,59 @@ export async function runStripeSandboxReadOnly(args, runtimeOverride) {
     }
     return { exitCode: report.verdict.passed ? 0 : 1, reportPath, report };
 }
+export async function uploadSandboxReport(args, runtimeOverride) {
+    const requestedPath = flag(args, "--report");
+    if (!requestedPath)
+        throw new Error("Sandbox report upload requires --report <report.json>.");
+    const reportPath = resolve(requestedPath);
+    const report = parseUploadableSandboxReport(await readFile(reportPath, "utf8"));
+    const runtime = runtimeOverride ?? await loadSandboxRuntime();
+    const connection = await resolveConnection({
+        name: flag(args, "--connection"),
+        server: flag(args, "--server"),
+        projectId: flag(args, "--project"),
+        apiKey: flag(args, "--api-key"),
+    });
+    const uploaded = await runtime.uploadSandboxCertificationReport(report, {
+        baseUrl: connection.server,
+        projectId: connection.projectId,
+        apiKey: connection.apiKey,
+        externalId: flag(args, "--external-id"),
+    });
+    process.stdout.write(`Uploaded validated sandbox report: ${reportPath}\n`);
+    process.stdout.write(`Hosted sandbox run: ${String(uploaded.run.id ?? "created")}\n`);
+    process.stdout.write(`Hosted evidence: ${String(uploaded.evidence.id ?? "created")}\n`);
+    return { exitCode: report.verdict.passed ? 0 : 1, reportPath, report };
+}
+export function parseUploadableSandboxReport(rawText) {
+    let value;
+    try {
+        value = JSON.parse(rawText);
+    }
+    catch {
+        throw new Error("Sandbox report is not valid JSON.");
+    }
+    if (!isRecord(value))
+        throw new Error("Sandbox report must be a JSON object.");
+    const supported = (value.kind === "agentcert.sandbox_adapter_conformance"
+        && value.schemaVersion === "agentcert.sandbox_adapter_conformance.v0.2")
+        || (value.kind === "agentcert.sandbox_vendor_egress"
+            && value.schemaVersion === "agentcert.sandbox_vendor_egress.v0.4");
+    if (!supported)
+        throw new Error("Sandbox report kind or schema version is not supported for upload.");
+    if (typeof value.implementation !== "string" || !value.implementation.trim()
+        || typeof value.generatedAt !== "string" || !Number.isFinite(Date.parse(value.generatedAt))
+        || !isRecord(value.verdict) || typeof value.verdict.passed !== "boolean"
+        || typeof value.verdict.score !== "number" || value.verdict.score < 0 || value.verdict.score > 100
+        || !Array.isArray(value.checks)) {
+        throw new Error("Sandbox report is missing required conformance fields.");
+    }
+    const findings = sensitiveReportFindings(value, rawText);
+    if (findings.length > 0) {
+        throw new Error(`Sandbox report contains forbidden credential material: ${findings.join(", ")}.`);
+    }
+    return value;
+}
 export async function loadSandboxAdapter(adapterPath) {
     let module;
     try {
@@ -146,18 +201,28 @@ Use \`agentcert connect\` first, or pass --server, --project, and --api-key.
 Reads one Stripe sandbox PaymentIntent through a fixed GET/resource allowlist,
 writes a redacted evidence report, and optionally uploads it to AgentCert Hosted.
 The Stripe key is read only from STRIPE_RESTRICTED_TEST_KEY.
+`;
+    if (action === "upload-report")
+        return `Usage:
+  agentcert sandbox upload-report --report .agentcert/vendor-sandbox/current-report.json --external-id <id>
+
+Validates a recognized AgentCert sandbox report, rejects credential material,
+and uploads it through the saved AgentCert connection. This command never
+executes a vendor request.
 `;
     return `Usage:
   agentcert sandbox init [--adapter agentcert.sandbox.mjs]
   agentcert sandbox certify --adapter ./my-sandbox-adapter.js
   agentcert sandbox push --adapter ./my-sandbox-adapter.js
   agentcert sandbox stripe-readonly --payment-intent pi_... [--push]
+  agentcert sandbox upload-report --report <report.json>
 
 Commands:
   init      Write one dependency-free adapter template
   certify   Run deterministic local conformance checks
   push      Certify and upload the report to AgentCert Hosted
   stripe-readonly  Run one bounded Stripe sandbox read and write evidence
+  upload-report    Validate and upload an existing sandbox report
 
 Common options:
   --adapter <path>        Adapter module (default: agentcert.sandbox.mjs)
@@ -199,6 +264,38 @@ function isSandboxSystem(value) {
         && ["createTenant", "deleteTenant", "resetTenant", "seedTenant", "hasTenant", "snapshotTenant", "adapterForTenant"]
             .every((method) => typeof system[method] === "function");
 }
+function sensitiveReportFindings(value, rawText) {
+    const findings = new Set();
+    const forbiddenFields = new Set(["authorization", "headers", "apikey", "restrictedapikey", "secretkey", "clientsecret", "metadata", "rawresponse", "responsebody"]);
+    const inspect = (entry) => {
+        if (Array.isArray(entry)) {
+            entry.forEach(inspect);
+            return;
+        }
+        if (!isRecord(entry))
+            return;
+        for (const [key, nested] of Object.entries(entry)) {
+            if (forbiddenFields.has(key.replace(/[^a-z]/gi, "").toLowerCase()))
+                findings.add(`field:${key}`);
+            inspect(nested);
+        }
+    };
+    inspect(value);
+    if (/\b(?:rk|sk)_(?:test|live)_[A-Za-z0-9_]{8,}\b/.test(rawText))
+        findings.add("stripe-key");
+    if (/\bac_live_[A-Za-z0-9_-]{8,}\b/.test(rawText))
+        findings.add("agentcert-key");
+    if (/\bBearer\s+\S+/i.test(rawText))
+        findings.add("authorization-value");
+    for (const secret of [process.env.STRIPE_RESTRICTED_TEST_KEY, process.env.AGENTCERT_API_KEY]) {
+        if (secret && secret.length >= 8 && rawText.includes(secret))
+            findings.add("exact-secret");
+    }
+    return [...findings].sort();
+}
+function isRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
 function flag(args, name) {
     const index = args.indexOf(name);
     return index >= 0 ? args[index + 1] : undefined;

package/dist/vendor/onegent-runtime/sandbox-hosted.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-hosted.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/sandbox-hosted.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAE7E,eAAO,MAAM,sCAAsC,EAAG,yBAAkC,CAAC;AAEzF,MAAM,MAAM,mBAAmB,GAAG,0BAA0B,GAAG,+BAA+B,GAAG,2BAA2B,CAAC;AAE7H,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,kCAAkC;IACjD,UAAU,EAAE,2BAA2B,CAAC;IACxC,aAAa,EAAE,OAAO,sCAAsC,CAAC;IAC7D,YAAY,EAAE,OAAO,CAAC;IACtB,IAAI,EAAE,2BAA2B,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,aAAa,CAAC;KACrB,CAAC;IACF,OAAO,EAAE;QACP,MAAM,EAAE,OAAO,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,OAAO,EAAE;QACP,QAAQ,EAAE,CAAC,iBAAiB,CAAC,CAAC;QAC9B,gBAAgB,EAAE,MAAM,CAAC;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,CAAC,CAAC;KAClB,CAAC;IACF,OAAO,EAAE,KAAK,CAAC;QACb,aAAa,EAAE,GAAG,CAAC;QACnB,OAAO,EAAE,iBAAiB,CAAC;QAC3B,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,aAAa,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,QAAQ,EAAE,KAAK,CAAC;YACd,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,6BAA6B,GAAG,uBAAuB,GAAG,uBAAuB,CAAC;YACxF,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;YAC1B,OAAO,EAAE,MAAM,CAAC;YAChB,MAAM,EAAE,iBAAiB,CAAC;YAC1B,QAAQ,EAAE;gBAAE,MAAM,EAAE,mBAAmB,CAAC;gBAAC,mBAAmB,EAAE,MAAM,CAAA;aAAE,CAAC;SACxE,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,QAAQ,EAAE,kCAAkC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAC5E,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,gBAAgB,EAAE;QAChB,aAAa,EAAE,kCAAkC,CAAC;QAClD,OAAO,EAAE,EAAE,CAAC;KACb,CAAC;IACF,SAAS,EAAE,KAAK,CAAC;QACf,EAAE,EAAE,4BAA4B,CAAC;QACjC,IAAI,EAAE,oCAAoC,CAAC;QAC3C,MAAM,EAAE,QAAQ,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACJ;AAED,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,mBAAmB,GAC1B,kCAAkC,CAwDpC;AAED,wBAAsB,gCAAgC,CACpD,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,yBAAyB,CAAC,CAyDpC"}
+{"version":3,"file":"sandbox-hosted.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/sandbox-hosted.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAE7E,eAAO,MAAM,sCAAsC,EAAG,yBAAkC,CAAC;AAEzF,MAAM,MAAM,mBAAmB,GAAG,0BAA0B,GAAG,+BAA+B,GAAG,2BAA2B,CAAC;AAE7H,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,kCAAkC;IACjD,UAAU,EAAE,2BAA2B,CAAC;IACxC,aAAa,EAAE,OAAO,sCAAsC,CAAC;IAC7D,YAAY,EAAE,OAAO,CAAC;IACtB,IAAI,EAAE,2BAA2B,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,aAAa,CAAC;KACrB,CAAC;IACF,OAAO,EAAE;QACP,MAAM,EAAE,OAAO,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,OAAO,EAAE;QACP,QAAQ,EAAE,CAAC,iBAAiB,CAAC,CAAC;QAC9B,gBAAgB,EAAE,MAAM,CAAC;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,CAAC,CAAC;KAClB,CAAC;IACF,OAAO,EAAE,KAAK,CAAC;QACb,aAAa,EAAE,GAAG,CAAC;QACnB,OAAO,EAAE,iBAAiB,CAAC;QAC3B,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,aAAa,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,QAAQ,EAAE,KAAK,CAAC;YACd,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,6BAA6B,GAAG,uBAAuB,GAAG,uBAAuB,CAAC;YACxF,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;YAC1B,OAAO,EAAE,MAAM,CAAC;YAChB,MAAM,EAAE,iBAAiB,CAAC;YAC1B,QAAQ,EAAE;gBAAE,MAAM,EAAE,mBAAmB,CAAC;gBAAC,mBAAmB,EAAE,MAAM,CAAA;aAAE,CAAC;SACxE,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,QAAQ,EAAE,kCAAkC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAC5E,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,gBAAgB,EAAE;QAChB,aAAa,EAAE,kCAAkC,CAAC;QAClD,OAAO,EAAE,EAAE,CAAC;KACb,CAAC;IACF,SAAS,EAAE,KAAK,CAAC;QACf,EAAE,EAAE,4BAA4B,CAAC;QACjC,IAAI,EAAE,oCAAoC,CAAC;QAC3C,MAAM,EAAE,QAAQ,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACJ;AAED,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,mBAAmB,GAC1B,kCAAkC,CAwDpC;AAED,wBAAsB,gCAAgC,CACpD,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,yBAAyB,CAAC,CAmEpC"}

package/dist/vendor/onegent-runtime/sandbox-hosted.js

@@ -68,6 +68,15 @@ export async function uploadSandboxCertificationReport(report, options) {
     const digest = createHash("sha256").update(bytes).digest("hex");
     const operationId = `sandbox-upload-${digest.slice(0, 32)}`;
     const externalId = options.externalId?.trim() || `${report.kind}:${report.implementation}:${report.generatedAt}`;
+    const vendorMetadata = report.kind === "agentcert.sandbox_vendor_egress"
+        ? {
+            vendor: report.vendor,
+            environment: report.environment,
+            policySha256: createHash("sha256").update(canonicalJson(report.policy)).digest("hex"),
+            requestDurationMs: report.audit.find((entry) => entry.outcome === "allowed")?.durationMs,
+            acceptanceType: externalId.startsWith("vendor-acceptance:stripe:") ? "real_vendor_sandbox" : "vendor_sandbox",
+        }
+        : {};
     const run = await jsonRequest(requestFetch, `${projectUrl}/runs`, apiKey, {
         method: "POST",
         headers: { "idempotency-key": `${operationId}:run` },
@@ -81,6 +90,7 @@ export async function uploadSandboxCertificationReport(report, options) {
                 evidenceType: report.kind,
                 implementation: report.implementation,
                 sandboxOnly: true,
+                ...vendorMetadata,
             },
         }),
     });
@@ -131,3 +141,12 @@ function required(value, name) {
         throw new Error(`Sandbox hosted upload ${name} is required.`);
     return normalized;
 }
+function canonicalJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    if (value && typeof value === "object") {
+        const record = value;
+        return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson(record[key])}`).join(",")}}`;
+    }
+    return JSON.stringify(value);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentcert",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Assurance release gates, runtime evidence, and regression CI for AI agents.",
   "type": "module",
   "license": "Apache-2.0",