create-metamynd-agent 0.5.0 → 0.6.2

package/README.md

@@ -41,9 +41,27 @@ rewrite**: the exact same `guardTool()` call your harness project already makes
 `bundleUrl`/`api` pointed at a real gate (provision normally, without `--harness`) instead of a rules
 file you authored yourself. Nothing about how you wrote your agent changes.
 
+It is also **not a separate enforcement boundary**, and this matters more than the list above.
+`guardToolLocal()` is a cooperative library your own process embeds — call the raw handler directly
+instead of the guarded one and nothing stops you, because there is no second party in the loop to
+disagree with you. Confirmed by direct testing: a bypass attempt (skip the guard, call the tool
+function underneath it) succeeds every time, structurally, not as a bug. In the hosted flow this is
+what the **counterparty** is for — the MCP/tool service independently re-verifies the agent's signed
+authority for itself rather than trusting that the agent's own guard ran, which is why a compromised
+or dishonest agent still can't get an honest service to act (see the three-party demo at
+[metamynd.ai/developers/quickstart](https://metamynd.ai/developers/quickstart)). `--harness` has no
+counterparty, so it can't have that property. Use it to govern your own agent's own honest behavior
+— not as a defense against an agent (or a person) that's actively trying to get around it.
+
 Works with `--config` too — its `rules` become the harness's starter rules file, same as the hosted
 flow. See [Policy config file](#policy-config-file---config) below.
 
+The dashboard's rules panel is a real editor, not just JSON with input boxes: edit an existing
+rule's values, **delete** a rule, or **add a new one** from a form (predicate + its typed config
+fields + decision) driven by the same atom catalog and validator
+([`policy-core`](../agentsafe-guard/policy-core.mjs)) the hosted gate itself uses — so nothing you
+add through it can be invalid. Hand-editing `metamynd-rules.json` still works too, if you prefer.
+
 ## Try it instantly — sandbox (no account, no KYB)
 
 ```bash

package/index.mjs

@@ -599,12 +599,16 @@ function harnessRulesFile(mandate, sopDocument) {
 
 function harnessServerFile() {
   return `// harness-server.mjs — the free local governance dashboard. Zero dependencies.
-// Runs in-process with your agent: shows the rules in force, holds an escalated action for
-// YOU to approve (there is no hosted owner queue here — you are the owner), and logs every
-// decision. Bound to 127.0.0.1 by default: this is a local trust boundary, not a service.
+// Runs in-process with your agent: shows the rules in force, lets you add/edit/remove SOP
+// rules without hand-editing JSON, holds an escalated action for YOU to approve (there is no
+// hosted owner queue here — you are the owner), and logs every decision. Bound to 127.0.0.1
+// by default: this is a local trust boundary, not a service.
 import http from 'node:http';
 import { readFileSync, writeFileSync, appendFileSync, existsSync, writeFileSync as wf } from 'node:fs';
 import { randomUUID } from 'node:crypto';
+// The SAME atom catalog + validator the hosted platform's rule builder uses — so the add-rule
+// form's predicate list, field types and validation never drift from what the gate accepts.
+import { ATOM_SPECS, validateMolecules } from '${GUARD_PKG}/policy-core';
 
 const OPERATORS = { lteq: '<=', gteq: '>=', lt: '<', gt: '>', eq: '==', neq: '!=', isAnyOf: 'is any of', isNoneOf: 'is none of' };
 function renderConstraint(c) {
@@ -625,6 +629,14 @@ function renderAtom(a) {
 }
 const esc = (s) => String(s ?? '').replace(/[&<>"]/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;' }[c]));
 
+// A field's declared type (from ATOM_SPECS) coerces a raw form string authoritatively —
+// no guessing, unlike the generic value-edit coerce() below.
+function coerceField(raw, type) {
+  if (type === 'number') return Number(raw);
+  if (type === 'string[]') return String(raw).split(',').map((s) => s.trim()).filter(Boolean);
+  return raw; // string, enum
+}
+
 export function startDashboard({ port = 4400, host = '127.0.0.1', agentDid, scope, rulesPath, logPath }) {
   const holds = new Map(); // id -> { id, action, args, decision, ts, status, resolve }
   if (!existsSync(logPath)) wf(logPath, '');
@@ -669,12 +681,38 @@ export function startDashboard({ port = 4400, host = '127.0.0.1', agentDid, scop
     const mandateRows = (m?.constraint || []).map((c, i) =>
       \`<div class="rule"><span class="rname">\${esc(c.leftOperand.replace(/^mm:/, ''))}</span><span class="rcond">\${esc(renderConstraint(c))}</span>
        <input data-kind="mandate" data-idx="\${i}" value="\${esc(Array.isArray(c.rightOperand) ? c.rightOperand.join(',') : c.rightOperand)}" /></div>\`).join('');
-    const sopRows = (rules.sops || []).flatMap((s) => (s.document?.molecules || []).flatMap((mo) =>
-      (mo.atoms || []).flatMap((a) => Object.entries(a.config || {}).map(([k, v]) =>
-        \`<div class="rule"><span class="rname">\${esc(mo.name || mo.id)} <span class="reff">\${esc(mo.decision)} · \${esc(mo.reasonCode)}</span></span>
-         <span class="rcond">\${esc(renderAtom(a))}</span>
-         <input data-kind="atom" data-mid="\${esc(mo.id)}" data-aid="\${esc(a.id)}" data-key="\${esc(k)}" value="\${esc(Array.isArray(v) ? v.join(',') : v)}" /></div>\`))));
-    return \`<div class="rules">\${mandateRows}\${sopRows.join('')}</div><button id="save">Save rules</button><span id="saveMsg"></span>\`;
+    // Grouped by molecule (one "rule" a person authored), not flattened — a molecule can have
+    // several atoms/config fields, and the delete button acts on the whole rule, not one field.
+    const sopGroups = (rules.sops || []).flatMap((s) => (s.document?.molecules || []).map((mo) => {
+      const fieldRows = (mo.atoms || []).flatMap((a) => Object.entries(a.config || {}).map(([k, v]) =>
+        \`<div class="rule"><span class="rcond">\${esc(renderAtom(a))}</span>
+         <input data-kind="atom" data-mid="\${esc(mo.id)}" data-aid="\${esc(a.id)}" data-key="\${esc(k)}" value="\${esc(Array.isArray(v) ? v.join(',') : v)}" /></div>\`)).join('');
+      return \`<div class="mgroup">
+        <div class="mhead"><span class="rname">\${esc(mo.name || mo.id)}</span>
+          <span class="reff">\${esc(mo.decision)} · \${esc(mo.reasonCode)}</span>
+          <button class="delmol" data-id="\${esc(mo.id)}" title="Remove this rule">Delete</button></div>
+        \${fieldRows}
+      </div>\`;
+    })).join('');
+    return \`<div class="rules">\${mandateRows}</div>\${sopGroups}<button id="save">Save changes</button><span id="saveMsg"></span>
+<div id="addRule">
+  <h3>Add a rule</h3>
+  <div class="addrow">
+    <label>When <select id="addPredicate"></select></label>
+    <label>Then <select id="addDecision">
+      <option value="block">block</option><option value="escalate">escalate</option>
+      <option value="observe">observe</option><option value="suspend">suspend</option>
+      <option value="quarantine">quarantine</option>
+    </select></label>
+  </div>
+  <p class="dim" id="addDesc"></p>
+  <div id="addFields"></div>
+  <div class="addrow">
+    <label>Name <input id="addName" placeholder="(optional)" /></label>
+    <label>Reason code <input id="addReasonCode" placeholder="(auto)" /></label>
+  </div>
+  <button id="addRuleBtn">Add rule</button><span id="addMsg"></span>
+</div>\`;
   }
 
   function renderHoldsHtml() {
@@ -705,12 +743,24 @@ export function startDashboard({ port = 4400, host = '127.0.0.1', agentDid, scop
   section { background:#fff; border:1px solid #e2e0eb; border-radius:10px; padding:14px 16px; margin-bottom:16px; }
   section h2 { font-size:13px; margin:0 0 10px; color:#6b6b80; text-transform:uppercase; letter-spacing:.04em; }
   .rule { display:flex; align-items:center; gap:10px; padding:6px 0; border-top:1px solid #eeecf3; flex-wrap:wrap; }
-  .rule:first-child { border-top:none; } .rname { font-weight:600; min-width:150px; } .reff { font-weight:400; color:#6b6b80; font-size:11px; }
+  .rule:first-child { border-top:none; } .rname { font-weight:600; } .reff { font-weight:400; color:#6b6b80; font-size:11px; }
   .rcond { font:12px ui-monospace,monospace; color:#6b6b80; flex:1; }
   .rule input { font:12px ui-monospace,monospace; border:1px solid #d8d5e6; border-radius:6px; padding:4px 8px; width:140px; }
+  .mgroup { border-top:1px solid #eeecf3; padding:8px 0; }
+  .mhead { display:flex; align-items:center; gap:10px; margin-bottom:2px; }
+  .mhead .rname { min-width:150px; }
   button { font:inherit; cursor:pointer; border:none; border-radius:8px; padding:8px 14px; background:#6c4ff2; color:#fff; font-weight:600; }
-  button.deny { background:#c02532; } button.approve { background:#0f7a43; }
-  #saveMsg { margin-left:10px; color:#0f7a43; font-size:12px; }
+  button.deny, button.delmol { background:#c02532; } button.approve { background:#0f7a43; }
+  button.delmol { padding:4px 10px; font-size:11px; margin-left:auto; }
+  #saveMsg, #addMsg { margin-left:10px; color:#0f7a43; font-size:12px; }
+  #addRule { margin-top:14px; padding-top:14px; border-top:1px solid #eeecf3; }
+  #addRule h3 { font-size:12px; margin:0 0 10px; color:#6b6b80; text-transform:uppercase; letter-spacing:.04em; }
+  .addrow { display:flex; gap:16px; flex-wrap:wrap; margin-bottom:8px; }
+  .addrow label { display:flex; flex-direction:column; gap:3px; font-size:12px; color:#6b6b80; }
+  .addrow input, .addrow select, #addFields input, #addFields select { font:13px inherit; border:1px solid #d8d5e6; border-radius:6px; padding:6px 8px; min-width:160px; }
+  #addFields { display:flex; gap:16px; flex-wrap:wrap; margin-bottom:8px; }
+  #addFields label { display:flex; flex-direction:column; gap:3px; font-size:12px; color:#6b6b80; }
+  #addDesc { font-size:12px; margin:2px 0 10px; }
   .hold { border:1px solid #f2c46a; background:#fff8ea; border-radius:8px; padding:10px 12px; margin-bottom:8px; }
   .hold pre { font-size:11px; background:#f5f4f8; padding:8px; border-radius:6px; overflow:auto; }
   .dim { color:#6b6b80; } pre { margin:6px 0; }
@@ -731,6 +781,31 @@ async function refresh() {
   document.getElementById('holds').innerHTML = r.holdsHtml;
   document.getElementById('log').innerHTML = r.logHtml;
 }
+
+// --- Add-a-rule form: predicates + field types come from the SAME catalog the gate itself
+// validates against (served at /catalog), so this form can never offer something invalid. ---
+let CATALOG = [];
+function fieldInputHtml(f) {
+  const id = 'af_' + f.key;
+  if (f.type === 'enum') {
+    return '<label>' + f.description + '<select id="' + id + '" data-key="' + f.key + '" data-type="' + f.type + '">' +
+      (f.options || []).map((o) => '<option value="' + o + '">' + o + '</option>').join('') + '</select></label>';
+  }
+  return '<label>' + f.description + (f.type === 'string[]' ? ' (comma-separated)' : '') +
+    '<input id="' + id + '" data-key="' + f.key + '" data-type="' + f.type + '" ' + (f.type === 'number' ? 'type="number"' : '') + ' /></label>';
+}
+function renderAddFields() {
+  const spec = CATALOG.find((s) => s.predicate === document.getElementById('addPredicate').value);
+  document.getElementById('addDesc').textContent = spec ? spec.description : '';
+  document.getElementById('addFields').innerHTML = spec ? spec.config.map(fieldInputHtml).join('') : '';
+}
+fetch('/catalog').then((r) => r.json()).then((specs) => {
+  CATALOG = specs;
+  document.getElementById('addPredicate').innerHTML = specs.map((s) => '<option value="' + s.predicate + '">' + s.label + '</option>').join('');
+  renderAddFields();
+});
+document.getElementById('addPredicate').addEventListener('change', renderAddFields);
+
 document.addEventListener('click', async (e) => {
   if (e.target.matches('.approve,.deny')) {
     const id = e.target.dataset.id, verb = e.target.classList.contains('approve') ? 'approve' : 'deny';
@@ -747,6 +822,26 @@ document.addEventListener('click', async (e) => {
     const res = await fetch('/rules', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(edits) });
     document.getElementById('saveMsg').textContent = res.ok ? 'saved — takes effect on the next decision' : 'save failed';
   }
+  if (e.target.matches('.delmol')) {
+    if (!confirm('Remove this rule?')) return;
+    const res = await fetch('/rules/delete', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ id: e.target.dataset.id }) });
+    if (res.ok) location.reload(); else document.getElementById('saveMsg').textContent = 'delete failed';
+  }
+  if (e.target.id === 'addRuleBtn') {
+    const predicate = document.getElementById('addPredicate').value;
+    const config = {};
+    for (const el of document.querySelectorAll('#addFields [data-key]')) config[el.dataset.key] = el.value;
+    const body = {
+      predicate, config,
+      decision: document.getElementById('addDecision').value,
+      name: document.getElementById('addName').value || undefined,
+      reasonCode: document.getElementById('addReasonCode').value || undefined,
+    };
+    const res = await fetch('/rules/add', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body) });
+    const r = await res.json();
+    if (res.ok) location.reload();
+    else document.getElementById('addMsg').textContent = r.error || 'could not add rule';
+  }
 });
 setInterval(refresh, 3000);
 </script></body></html>\`;
@@ -775,11 +870,56 @@ setInterval(refresh, 3000);
     return rules;
   }
 
+  /** Builds one molecule from the add-rule form, validates it with the SAME validator the
+   *  hosted platform runs, and appends it to the first SOP document (there is exactly one in
+   *  a harness project). Single-atom, combinator "all" — the same "sugar" shape --config's
+   *  "rules" array compiles to, so a harness rules file and a --config file stay interchangeable. */
+  function addRule({ predicate, config, decision, name, reasonCode }) {
+    const spec = ATOM_SPECS.find((s) => s.predicate === predicate);
+    if (!spec) return { ok: false, error: \`unknown predicate "\${predicate}"\` };
+    const cfg = {};
+    for (const f of spec.config) {
+      const raw = config?.[f.key];
+      if (raw === undefined || raw === '') { if (f.required) return { ok: false, error: \`"\${f.description}" is required\` }; continue; }
+      cfg[f.key] = coerceField(raw, f.type);
+    }
+    const molecule = {
+      id: \`\${predicate}-\${Date.now().toString(36)}\`,
+      name: name || spec.label,
+      combinator: 'all',
+      atoms: [{ id: 'a1', predicate, config: cfg }],
+      decision,
+      reasonCode: reasonCode || \`\${predicate.toUpperCase().replace(/-/g, '_')}_\${String(decision).toUpperCase()}\`,
+    };
+    const check = validateMolecules([molecule]);
+    if (!check.ok) return { ok: false, error: check.issues.map((i) => i.message).join('; ') };
+    const rules = readRules();
+    if (rules.error) return { ok: false, error: rules.error };
+    if (!rules.sops?.[0]) rules.sops = [{ standardKey: 'sop', document: { molecules: [] } }];
+    rules.sops[0].document.molecules = [...(rules.sops[0].document.molecules || []), molecule];
+    writeRules(rules);
+    log({ type: 'rule-added', id: molecule.id, predicate, decision });
+    return { ok: true, molecule };
+  }
+
+  function deleteRule(id) {
+    const rules = readRules();
+    if (rules.error) return { ok: false, error: rules.error };
+    for (const s of rules.sops || []) {
+      if (!s.document?.molecules) continue;
+      s.document.molecules = s.document.molecules.filter((mo) => mo.id !== id);
+    }
+    writeRules(rules);
+    log({ type: 'rule-deleted', id });
+    return { ok: true };
+  }
+
   const server = http.createServer(async (req, res) => {
     const path = req.url.split('?')[0];
     const send = (status, body, type = 'application/json') => { res.writeHead(status, { 'Content-Type': type }); res.end(type === 'application/json' ? JSON.stringify(body) : body); };
     if (req.method === 'GET' && path === '/') return send(200, page(), 'text/html; charset=utf-8');
     if (req.method === 'GET' && path === '/state') return send(200, { holdsHtml: renderHoldsHtml(), logHtml: renderLogHtml() });
+    if (req.method === 'GET' && path === '/catalog') return send(200, ATOM_SPECS);
     if (req.method === 'POST' && path === '/rules') {
       let body = ''; req.on('data', (c) => (body += c));
       req.on('end', () => {
@@ -788,6 +928,26 @@ setInterval(refresh, 3000);
       });
       return;
     }
+    if (req.method === 'POST' && path === '/rules/add') {
+      let body = ''; req.on('data', (c) => (body += c));
+      req.on('end', () => {
+        try {
+          const r = addRule(JSON.parse(body || '{}'));
+          return send(r.ok ? 200 : 400, r);
+        } catch (e) { return send(500, { ok: false, error: String(e?.message ?? e) }); }
+      });
+      return;
+    }
+    if (req.method === 'POST' && path === '/rules/delete') {
+      let body = ''; req.on('data', (c) => (body += c));
+      req.on('end', () => {
+        try {
+          const { id } = JSON.parse(body || '{}');
+          return send(200, deleteRule(id));
+        } catch (e) { return send(500, { ok: false, error: String(e?.message ?? e) }); }
+      });
+      return;
+    }
     const m = /^\\/holds\\/([^/]+)\\/(approve|deny)$/.exec(path);
     if (req.method === 'POST' && m) {
       const h = holds.get(m[1]);
@@ -997,6 +1157,14 @@ No anchored/verifiable identity, no cross-party trust, no evidence anyone but yo
 no dashboard reachable when this machine is off, no owner queue someone else can approve from.
 That's the hosted platform (\`npx create-metamynd-agent\`, without \`--harness\`) — same
 \`guardTool()\` call, same rules shape, so upgrading later is a config change, not a rewrite.
+
+It is also **not a separate enforcement boundary**. \`guardToolLocal()\` (in \`index.mjs\`) is a
+cooperative library this process embeds — call the tool handler directly instead of the guarded
+one and nothing stops you, because there is no second party in the loop to disagree with you.
+That's structural, not a bug: use this harness to govern your own agent's own honest behavior,
+not as a defense against an agent (or a person) actively trying to get around it. The hosted
+platform's \`guardTool()\` doesn't have this gap, because the MCP/tool service re-verifies the
+agent's signed authority for itself instead of trusting that the agent's own guard ran.
 `;
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-metamynd-agent",
-  "version": "0.5.0",
+  "version": "0.6.2",
   "description": "Scaffold a MetaMynd/AgentSafe-governed AI agent in one command — logs in, provisions the agent (identity + mandate + SOP + Standards) in a single call, writes agent.metamynd.json, and drops a runnable example. --harness scaffolds a free, local, zero-network governance harness instead.",
   "type": "module",
   "bin": {