create-metamynd-agent 0.13.2 → 0.14.2

package/README.md

@@ -315,8 +315,15 @@ with the default hosted flow (login + provision):
 - **No spend constraint anywhere.** The mandate carries none and the default SOP has no amount rule
   (an `amount-unknown` block would refuse every action that carries no amount). Hosted: the
   provisioning call sends no `currency` / `maxAmount` / `perTxnMax` at all — the backend treats their
-  absence as a non-financial mandate. A `rulePack` is built from spend limits, so it is ignored (and
-  the CLI says so); list your rules under `rules` instead.
+  absence as a non-financial mandate.
+- **Rule packs (hosted, since 0.14.0).** The CLI checks a `rulePack` against the platform's catalog
+  before provisioning. A pack that needs no spend limits (`comms`, `compliance`, the oversight packs, …)
+  is applied to a non-financial agent as-is, and its rules are printed and sent back as
+  `reviewedMoleculeIds`, so the platform provisions exactly those rules or nothing. A pack built from
+  spend limits (`spend-basic`, …) cannot govern a non-financial agent, and an unknown pack name is
+  refused: either stops the CLI before anything is provisioned, naming what would work. Against a
+  platform version that predates per-pack spend information, a non-financial agent's pack is still
+  dropped (and the CLI says so). `--harness` does not apply packs; list your rules under `rules`.
 - **The demo is derived from your rules.** `npm start` runs one request that satisfies every rule,
   then one per rule that should trip it, then an action nobody delegated. Each step states what it
   expects and flags any surprise, so changing your rules visibly changes the outcome. Rules the demo

package/index.mjs

@@ -58,7 +58,8 @@ const GUARD_PKG = '@metamynd/agentsafe-guard';
 // passes a request's jurisdiction that way, since the gate no longer reads one from the unsigned context.
 // 0.17.0 signs the agent's context (envelopeSignature, MAGP 8.3.13) by default; the scaffolded agent gets it with no template
 // change (signContext: false opts out). A daemon-custody agent needs agentsafe-signer >= 0.19.0 for its no-amount requests.
-const GUARD_VERSION = '^0.17.0';
+// 0.18.0 exports keepAliveFetch. No template change.
+const GUARD_VERSION = '^0.18.0';
 /** The harness entry point's config load, shared by both harness templates: a fresh clone has no
  *  agent.metamynd.json (it is gitignored), so say what to do instead of a bare ENOENT (BR-004). */
 function harnessConfigLoad() {
@@ -117,7 +118,9 @@ const MCP_GUARD_PKG = '@metamynd/agentsafe-mcp-guard';
 // the scaffolded agent now signs jurisdiction, which an older gateway would refuse SIGNATURE_INVALID.
 // 0.17.0: verifies the agent's context signature (envelopeSignature) before judging its itinerary, and a
 // requireContextSignature option. No template change (the scaffolded agent does not sign its context by default).
-const MCP_GUARD_VERSION = '^0.17.0';
+// 0.18.0: an opt-in bundleCache (push-invalidated by the issuer's events stream) and keepAliveFetch exported. No
+// template change (the scaffolded gateways don't enable the cache).
+const MCP_GUARD_VERSION = '^0.18.0';
 const GATEWAY_PKG = '@metamynd/agentsafe-http-gateway';
 // 0.2.0 fixes a confused-deputy gap (payload not bound to the signed request) — the CLI must
 // never scaffold a range that could resolve below it.
@@ -137,7 +140,8 @@ const GATEWAY_PKG = '@metamynd/agentsafe-http-gateway';
 // No template change.
 // 0.16.0: the caller is answered first and the claimed hold is settled after (settleInBackground), retried on a
 // transient failure. Template change: each scaffolded gateway drains settlements on SIGTERM/SIGINT (DRAIN_ON_SHUTDOWN).
-const GATEWAY_VERSION = '^0.16.0';
+// 0.17.0: depends on agentsafe-mcp-guard ^0.18.0 and exports keepAliveFetch. No template change.
+const GATEWAY_VERSION = '^0.17.0';
 
 /** Appended to every scaffolded gateway server: give hold settlements still running a bounded moment on shutdown. */
 const DRAIN_ON_SHUTDOWN = `
@@ -307,8 +311,29 @@ function askHidden(query) {
   });
 }
 
+/** Thrown by fail() to end the run; carries no message of its own (fail() already printed it). */
+class CliExit extends Error {
+  constructor(code) {
+    super('create-metamynd-agent exit');
+    this.exitCode = code;
+  }
+}
+
 function fail(msg) {
   console.error(`\n${c.red('✖')} ${msg}\n`);
+  // Not process.exit(): after a fetch(), its keep-alive socket may still be closing, and exiting then
+  // aborts Node 24 on Windows (libuv "!(handle->flags & UV_HANDLE_CLOSING)", exit 0xC0000409) instead of
+  // exiting 1. Unwind instead and let the event loop drain; the unref'd timer only fires if something
+  // else would keep the process alive.
+  process.exitCode = 1;
+  setTimeout(() => process.exit(1), 5000).unref();
+  throw new CliExit(1);
+}
+
+/** The run's last-resort handler: a CliExit already said why; anything else is a real crash. */
+function onCliError(e) {
+  if (e instanceof CliExit) return;
+  console.error(`\n${c.red('✖')} ${e?.stack || e?.message || String(e)}\n`);
   process.exit(1);
 }
 
@@ -864,6 +889,65 @@ async function apiPost(base, path, body, token) {
   return json;
 }
 
+/** GET a public, read-only endpoint; null on ANY failure (unreachable, non-2xx, non-JSON) — never fatal. */
+async function softGet(base, path) {
+  try {
+    const res = await fetch(`${base}${path}`);
+    if (!res.ok) return { status: res.status, json: await res.json().catch(() => null) };
+    return { status: res.status, json: await res.json() };
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Decide what to do with a config file's `rulePack` BEFORE provisioning, from the platform's own catalog
+ * (GET /onboarding/rule-packs) and preview (GET /onboarding/rule-packs/:key/preview):
+ *  - an unknown pack fails here, naming the packs the platform offers — the platform refuses it too
+ *    (400 UNKNOWN_RULE_PACK; an older platform silently applied its default rules instead);
+ *  - a pack built from spend limits cannot govern a non-financial agent: fail and say what would work;
+ *  - any other pack is applied as-is, and its rules are sent back as `reviewedMoleculeIds`, so the
+ *    platform provisions exactly the rules shown here or nothing at all.
+ * A platform whose catalog does not say which packs need spend limits (it predates FA-001) only applies a
+ * pack when spend limits are supplied, so for a non-financial agent the pack is dropped and that is said.
+ * Returns { drop: true } or { molecules, reviewedMoleculeIds? }.
+ */
+async function resolveHostedRulePack(base, key, { financial, perTxnMax, maxAmount, currency }) {
+  const catalogRes = await softGet(base, '/onboarding/rule-packs');
+  const catalog = Array.isArray(catalogRes?.json?.data) ? catalogRes.json.data : null;
+  const legacyDrop = () => {
+    console.log(`  ${c.yellow('!')} the rule pack "${key}" cannot be applied to a non-financial agent on this platform version (it applies packs only when spend limits are supplied) — the default (an amount-free high-risk review) applies. List your rules under "rules" to set your own.`);
+    return { drop: true };
+  };
+  if (!catalog) {
+    // Catalog unavailable: send the pack for a financial agent (the platform validates it), keep the old drop otherwise.
+    return financial ? { molecules: null } : legacyDrop();
+  }
+  const entry = catalog.find((p) => p?.key === key);
+  if (!entry) {
+    fail(`Unknown rule pack "${key}". This platform offers: ${catalog.map((p) => p.key).join(', ')}. Fix "rulePack" in the config file, or list your rules under "rules".`);
+  }
+  const knowsSpend = catalog.some((p) => typeof p?.requiresSpend === 'boolean');
+  if (!financial) {
+    if (!knowsSpend) return legacyDrop();
+    if (entry.requiresSpend) {
+      const usable = catalog.filter((p) => p.requiresSpend === false).map((p) => p.key);
+      fail(`The rule pack "${key}" is built from spend limits, and this agent has none (non-financial). Choose a pack that needs no spend limits (${usable.join(', ')}), pass --financial with spend limits, or list your rules under "rules".`);
+    }
+  }
+  const query = financial
+    ? `perTxnMax=${encodeURIComponent(perTxnMax)}&maxAmount=${encodeURIComponent(maxAmount)}&currency=${encodeURIComponent(currency)}`
+    : 'financial=false';
+  const preview = await softGet(base, `/onboarding/rule-packs/${encodeURIComponent(key)}/preview?${query}`);
+  const molecules = Array.isArray(preview?.json?.data?.molecules) ? preview.json.data.molecules : null;
+  if (!molecules) {
+    if (!financial) fail(`Could not read the rules of the rule pack "${key}" from ${base} (HTTP ${preview?.status ?? 'unreachable'}${preview?.json?.message ? ': ' + preview.json.message : ''}) — nothing was provisioned.`);
+    return { molecules: null };
+  }
+  console.log(`  ${c.green('✓')} rule pack "${entry.label ?? key}": ${molecules.map((m) => m.name ?? m.id).join(', ')}`);
+  return { molecules, ...(knowsSpend ? { reviewedMoleculeIds: molecules.map((m) => m.id) } : {}) };
+}
+
 /**
  * POST /policy/counterparties for the gateway's own DID — best-effort, unlike apiPost above: a
  * hosted financial gateway works fine on testnet with no registration at all (open by default), so
@@ -3837,13 +3921,18 @@ async function main() {
   // (a per-transaction cap + high-risk review), same as before --config existed.
   const sopFields = configFileSopFields(fileConfig);
   if (sopFields.sop) console.log(`  ${c.green('✓')} compiled ${sopFields.sop.documentJson.molecules.length} rule(s) from the config file`);
-  console.log(c.dim(`\n  → provisioning "${name}" (identity + mandate + SOP + Standards) …`));
   // A non-financial agent sends NO spend fields at all (currency/maxAmount/perTxnMax omitted together
-  // is how the backend recognises one). A rule pack is built from spend limits, so it cannot apply.
-  if (!financial && sopFields.rulePack) {
-    console.log(`  ${c.yellow('!')} the rule pack "${sopFields.rulePack}" cannot be applied to a non-financial hosted agent (the platform applies a pack only when spend limits are supplied) — the default (an amount-free high-risk review) applies. List your rules under "rules" to set your own.`);
-    delete sopFields.rulePack;
+  // is how the backend recognises one). Whether a rule pack can govern it is the platform's answer.
+  let packMolecules = null;
+  if (sopFields.rulePack) {
+    const pack = await resolveHostedRulePack(base, sopFields.rulePack, { financial, perTxnMax, maxAmount, currency });
+    if (pack.drop) delete sopFields.rulePack;
+    else {
+      packMolecules = pack.molecules;
+      if (pack.reviewedMoleculeIds) sopFields.reviewedMoleculeIds = pack.reviewedMoleculeIds;
+    }
   }
+  console.log(c.dim(`\n  → provisioning "${name}" (identity + mandate + SOP + Standards) …`));
   const body = {
     name, scope,
     // Explicit, not left to the backend's own eligibility-based default (mainnet for a KYB-verified
@@ -3925,7 +4014,7 @@ async function main() {
   // 4. Scaffold + next steps
   // The demo comes from the rules actually provisioned: the caller's own, else the backend's default
   // for a non-financial agent (the same amount-free review harnessDefaultSopNeutral describes).
-  const demo = financial ? null : buildPolicyCases(sopFields.sop?.documentJson?.molecules ?? harnessDefaultSopNeutral().molecules);
+  const demo = financial ? null : buildPolicyCases(sopFields.sop?.documentJson?.molecules ?? packMolecules ?? harnessDefaultSopNeutral().molecules);
   if (demo) {
     console.log(`  ${c.green('✓')} derived ${demo.cases.length} demo case(s) from your rules`);
     for (const n of demo.notDemonstrated) console.log(`  ${c.yellow('!')} not staged in the demo: ${n.rule} ${c.dim('— ' + n.why + '; still enforced')}`);
@@ -3940,4 +4029,9 @@ export {
   generateAgentKeypair, harnessAgentDid, harnessMandate, harnessRulesFile, harnessDefaultSopNeutral,
   scaffoldProject, defaultNeutralDemo, exampleIndexNeutral, exampleReadmeNeutral, gatewayServerFileNeutral, gatewayReadmeNeutral,
 };
-if (!process.env.CREATE_METAMYND_AGENT_NO_MAIN) main().catch((e) => fail(e?.stack || e?.message || String(e)));
+if (!process.env.CREATE_METAMYND_AGENT_NO_MAIN) {
+  // fail() can also be reached from a callback outside main()'s promise chain (readline, child process).
+  process.on('uncaughtException', onCliError);
+  process.on('unhandledRejection', onCliError);
+  main().catch(onCliError);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-metamynd-agent",
-  "version": "0.13.2",
+  "version": "0.14.2",
   "description": "Scaffold a MetaMynd/AgentSafe-governed AI agent in one command — logs in, provisions the agent (identity + mandate + SOP + Standards) in a single call, writes agent.metamynd.json plus a runnable agent + separate tool-gateway process that closes direct-call, confused-deputy, replay, and cumulative-spend bypasses. --harness scaffolds a free, local, zero-network governance harness instead.",
   "type": "module",
   "bin": {