clawsig 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md ADDED
@@ -0,0 +1,43 @@
1
+ # clawsig
2
+
3
+ Verify what your AI agents actually did.
4
+
5
+ Cryptographic proof bundles for every agent action — tool calls, file changes, network connections, subprocess spawns.
6
+
7
+ ## Quick Start
8
+
9
+ ```bash
10
+ # Wrap any agent command
11
+ npx clawsig wrap -- python3 my_agent.py
12
+ npx clawsig wrap -- pi "Fix the bug in auth.ts"
13
+ npx clawsig wrap -- node scripts/deploy.mjs
14
+
15
+ # Initialize a project with a verification policy
16
+ npx clawsig init
17
+
18
+ # Verify a proof bundle offline
19
+ npx clawsig verify proof-bundle --input .clawsig/proof_bundle.json
20
+ ```
21
+
22
+ ## What It Does
23
+
24
+ `clawsig wrap` transparently observes your agent through 6 layers:
25
+
26
+ 1. **Ephemeral DID** — unique Ed25519 identity per run
27
+ 2. **Local Proxy** — intercepts LLM API calls, generates receipts
28
+ 3. **Causal Sieve** — parses tool calls from HTTP streams
29
+ 4. **Sentinel Shell** — captures shell commands via `BASH_ENV` + `trap DEBUG`
30
+ 5. **FS Sentinel** — watches file changes with content hashes
31
+ 6. **Interpose Sentinel** — hooks `connect()`, `open()`, `execve()` via LD_PRELOAD
32
+
33
+ On exit, everything is compiled into a signed proof bundle at `.clawsig/proof_bundle.json`.
34
+
35
+ ## Documentation
36
+
37
+ - [Protocol Spec](https://clawprotocol.org)
38
+ - [Troubleshooting](https://github.com/clawbureau/clawbureau/blob/main/TROUBLESHOOTING.md)
39
+ - [GitHub](https://github.com/clawbureau/clawbureau)
40
+
41
+ ## License
42
+
43
+ MIT
package/bin/clawsig.js ADDED
@@ -0,0 +1,3 @@
1
+ #!/usr/bin/env node
2
+ // Thin passthrough — loads @clawbureau/clawverify-cli/cli which runs main() on import
3
+ await import('@clawbureau/clawverify-cli/cli');
package/package.json ADDED
@@ -0,0 +1,38 @@
1
+ {
2
+ "name": "clawsig",
3
+ "version": "0.3.0",
4
+ "description": "Verify what your AI agents actually did. Cryptographic proof bundles for every agent action — tool calls, file changes, network connections, subprocess spawns.",
5
+ "bin": {
6
+ "clawsig": "./bin/clawsig.js"
7
+ },
8
+ "files": [
9
+ "bin/clawsig.js",
10
+ "README.md"
11
+ ],
12
+ "dependencies": {
13
+ "@clawbureau/clawverify-cli": "^0.3.0"
14
+ },
15
+ "keywords": [
16
+ "ai-agent",
17
+ "verification",
18
+ "proof-of-work",
19
+ "observability",
20
+ "security",
21
+ "devops",
22
+ "github-actions",
23
+ "Ed25519",
24
+ "DID",
25
+ "clawsig"
26
+ ],
27
+ "repository": {
28
+ "type": "git",
29
+ "url": "https://github.com/clawbureau/clawbureau",
30
+ "directory": "packages/clawsig"
31
+ },
32
+ "homepage": "https://clawprotocol.org",
33
+ "bugs": "https://github.com/clawbureau/clawbureau/issues",
34
+ "engines": {
35
+ "node": ">=20"
36
+ },
37
+ "license": "MIT"
38
+ }