create-metamynd-agent 0.14.43 → 0.14.46

package/index.mjs

@@ -105,7 +105,7 @@ function harnessConfigLoad() {
 // Say so, with the way forward, instead of letting readFileSync throw a bare ENOENT.
 let config;
 try {
-  config = JSON.parse(readFileSync('./agent.metamynd.json', 'utf8'));
+  config = JSON.parse(readFileSync('./agent.metamynd.json', 'utf8').replace(/^\\uFEFF/, '')); // a UTF-8 BOM is not JSON
 } catch (e) {
   console.error(e && e.code === 'ENOENT'
     ? ['No ./agent.metamynd.json. It holds the local key for this agent and is gitignored, so a fresh clone never has it.',
@@ -186,7 +186,8 @@ const MCP_GUARD_PKG = '@metamynd/agentsafe-mcp-guard';
 // (NF-RISK-SELF). Required: a gateway on an older guard would read an operation rule's atom as unknown and let it run.
 // 0.29.0: a claim the issuer refuses is logged in one line and its block carries the issuer's detail (FW6-1).
 // 0.30.0: same CURRENCY_NOT_ALLOWED code in a gateway's local judgement as at the gate (M2).
-const MCP_GUARD_VERSION = '^0.30.0';
+// 0.31.0: ships TypeScript declarations (agentsafe-mcp-guard.d.mts).
+const MCP_GUARD_VERSION = '^0.31.0';
 /** A DID as it may appear inside a generated string literal (the gateway's allowedAgents pin): no quote, backslash or space. */
 const SAFE_DID = /^did:[a-z0-9]+:[A-Za-z0-9._:%-]+$/;
 const GATEWAY_PKG = '@metamynd/agentsafe-http-gateway';
@@ -226,7 +227,10 @@ const GATEWAY_PKG = '@metamynd/agentsafe-http-gateway';
 // 0.29.0: a request signed for another action than the route's is refused GATEWAY_ACTION_MISMATCH, not SIGNATURE_INVALID (M2);
 // depends on agentsafe-mcp-guard ^0.30.0.
 // 0.30.0: `agentsafe-gateway service-id` / `accept-challenge` / `serve`, SERVICE_IDENTITY_FILE and AGENTSAFE_UPSTREAM_CREDENTIAL (M4).
-const GATEWAY_VERSION = '^0.30.0';
+// 0.31.0: ships TypeScript declarations (gateway, route-match, service-identity); depends on agentsafe-mcp-guard ^0.31.0.
+// 0.32.0: `reportOutcomes` defaults to true. The hosted templates already set it; the --harness gateway (no issuer, no
+// network) now sets `reportOutcomes: false`, so it does not log NO_ISSUER on its first refusal.
+const GATEWAY_VERSION = '^0.32.0';
 
 /** Appended to every scaffolded gateway server: give hold settlements still running a bounded moment on shutdown. */
 const DRAIN_ON_SHUTDOWN = `
@@ -449,7 +453,8 @@ function onCliError(e) {
 // directly instead — `rules` is ignored when `molecules` is present.
 function loadConfigFile(path) {
   let raw;
-  try { raw = readFileSync(resolve(path), 'utf8'); }
+  // A UTF-8 BOM (Notepad and other Windows tools add one on save) is not JSON whitespace — strip it before parsing.
+  try { raw = readFileSync(resolve(path), 'utf8').replace(/^\uFEFF/, ''); }
   catch (e) { fail(`Could not read config file ${path} (${e.message})`); }
   let json;
   try { json = JSON.parse(raw); }
@@ -3055,6 +3060,8 @@ const gateway = createHttpGateway({
   // body that is not exactly that one — the values of every allowed field, not only amount and merchant. A request that
   // bound no payload is refused (PAYLOAD_BINDING_REQUIRED) instead of run unbound.
   requirePayloadBinding: true,
+  // No issuer to report to: --harness never touches the network (the gateway reports by default since 0.32.0).
+  reportOutcomes: false,
   // Reached ONLY after the guard allowed the request AND the body was bound to what was signed.
   forward: async (req) => {
     const route = matchRoute(ROUTES, req.method, req.path);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-metamynd-agent",
-  "version": "0.14.43",
+  "version": "0.14.46",
   "description": "Scaffold a MetaMynd/AgentSafe-governed AI agent in one command — logs in, provisions the agent (identity + mandate + SOP + Standards) in a single call, writes agent.metamynd.json plus a runnable agent + separate tool-gateway process that closes direct-call, confused-deputy, replay, and cumulative-spend bypasses. --harness scaffolds a free, local, zero-network governance harness instead.",
   "type": "module",
   "bin": {