mythos-sentinel 0.1.0

package/examples/github/verify.yml

@@ -0,0 +1,29 @@
+name: Mythos Sentinel
+
+on:
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  sentinel:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Install Mythos Sentinel
+        run: npm install -g mythos-sentinel --ignore-scripts --no-audit --no-fund
+      - name: Scan agent-facing code
+        run: mythos-sentinel scan . --policy mythos.policy.json --json --out mythos-sentinel-report.json --fail-on high
+      - name: Upload Sentinel report
+        uses: actions/upload-artifact@v4
+        with:
+          name: mythos-sentinel-report
+          path: mythos-sentinel-report.json

package/examples/routescore/services.yml

@@ -0,0 +1,19 @@
+services:
+  - name: Custom Search API
+    category: web_search
+    domain: api.example.com
+    endpoint: https://api.example.com/search
+    priceUSDC: 0.01
+    network: base
+    tags:
+      - search
+      - custom
+  - name: Custom Browser Session API
+    category: browser
+    domain: browser.example.com
+    endpoint: https://browser.example.com/session
+    priceUSDC: 0.05
+    network: base
+    tags:
+      - browser
+      - automation

package/examples/skill/mythos.skill.json

@@ -0,0 +1,20 @@
+{
+  "name": "github-pr-reviewer",
+  "version": "0.1.0",
+  "permissions": {
+    "filesystem": {
+      "read": ["src/**", "test/**", "package.json"],
+      "write": []
+    },
+    "network": {
+      "allow": ["api.github.com"]
+    },
+    "payments": {
+      "maxUSDCPerRequest": 0,
+      "maxUSDCDaily": 0
+    },
+    "secrets": {
+      "deny": ["*"]
+    }
+  }
+}

package/package.json

@@ -0,0 +1,79 @@
+{
+  "name": "mythos-sentinel",
+  "version": "0.1.0",
+  "description": "Runtime MCP proxy, x402 receipt ingestion, and adaptive spend firewall for wallet-enabled AI agents.",
+  "type": "module",
+  "license": "MIT",
+  "author": "thewaltero",
+  "homepage": "https://github.com/thewaltero/mythos-sentinel#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/thewaltero/mythos-sentinel.git"
+  },
+  "bugs": {
+    "url": "https://github.com/thewaltero/mythos-sentinel/issues"
+  },
+  "keywords": [
+    "agent-payments",
+    "spend-firewall",
+    "routescore",
+    "x402-payments",
+    "ai-agents",
+    "mcp",
+    "x402",
+    "base",
+    "agent-security",
+    "agentic-ai",
+    "guardrails",
+    "ai-safety",
+    "codex",
+    "cursor",
+    "claude"
+  ],
+  "bin": {
+    "mythos-sentinel": "./bin/mythos-sentinel.js",
+    "mythos-sentinel-mcp": "./bin/mythos-sentinel-mcp.js",
+    "mythos": "./bin/mythos-sentinel.js"
+  },
+  "exports": {
+    ".": "./src/index.js",
+    "./scanner": "./src/scanner/scan.js",
+    "./policy": "./src/core/policy.js",
+    "./mcp": "./src/mcp/server.js",
+    "./ui": "./src/ui/server.js",
+    "./routescore": "./src/core/routescore.js",
+    "./mcp-proxy": "./src/mcp/proxy.js",
+    "./telemetry": "./src/core/telemetry.js",
+    "./x402-receipts": "./src/core/x402-receipts.js",
+    "./receipt": "./src/core/receipt.js"
+  },
+  "files": [
+    "assets",
+    "bin",
+    "src",
+    "schemas",
+    "examples",
+    "docs",
+    "action.yml",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "scripts": {
+    "start": "node ./bin/mythos-sentinel.js",
+    "scan": "node ./bin/mythos-sentinel.js scan .",
+    "mcp": "node ./bin/mythos-sentinel-mcp.js",
+    "test": "node --test",
+    "test:coverage": "node --test --experimental-test-coverage",
+    "doctor": "node ./bin/mythos-sentinel.js doctor",
+    "ci:local": "npm test && node ./bin/mythos-sentinel.js doctor && node ./bin/mythos-sentinel.js scan . --json --out .mythos/reports/self-scan.json --fail-on none && node ./bin/mythos-sentinel.js check-payment --domain unknown.example --amount 0.01",
+    "release:check": "bash ./scripts/release-check.sh",
+    "prepublishOnly": "npm run release:check",
+    "ui": "node ./bin/mythos-sentinel.js ui",
+    "proxy": "node ./bin/mythos-sentinel.js proxy"
+  },
+  "packageManager": "npm@10.0.0"
+}

package/schemas/agent-receipt.schema.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mythos.dev/schemas/agent-receipt.v0.json",
+  "title": "Mythos Agent Work Receipt",
+  "type": "object",
+  "required": ["schema", "createdAt", "agent", "diff", "verification", "snapshots"],
+  "properties": {
+    "schema": { "type": "string" },
+    "createdAt": { "type": "string" },
+    "agent": { "type": "object" },
+    "workspace": { "type": "string" },
+    "summary": { "type": "string" },
+    "diff": { "type": "object" },
+    "verification": { "type": "object" },
+    "snapshots": { "type": "object" }
+  }
+}

package/schemas/policy.schema.json

@@ -0,0 +1,322 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mythos.dev/schemas/policy.v0.json",
+  "title": "Mythos Sentinel Policy",
+  "type": "object",
+  "required": [
+    "version",
+    "mode"
+  ],
+  "properties": {
+    "version": {
+      "type": "string"
+    },
+    "mode": {
+      "enum": [
+        "monitor",
+        "enforce"
+      ]
+    },
+    "project": {
+      "type": "string"
+    },
+    "filesystem": {
+      "type": "object",
+      "properties": {
+        "deny": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "allowRead": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "allowWrite": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      },
+      "additionalProperties": true
+    },
+    "commands": {
+      "type": "object",
+      "properties": {
+        "blockedPatterns": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "approvalPatterns": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      },
+      "additionalProperties": true
+    },
+    "network": {
+      "type": "object",
+      "properties": {
+        "blockUnknown": {
+          "type": "boolean"
+        },
+        "allowedDomains": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "deniedDomains": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      },
+      "additionalProperties": true
+    },
+    "payments": {
+      "type": "object",
+      "properties": {
+        "x402": {
+          "type": "object",
+          "properties": {
+            "enabled": {
+              "type": "boolean"
+            },
+            "maxPerRequestUSDC": {
+              "type": "number"
+            },
+            "maxDailyUSDC": {
+              "type": "number"
+            },
+            "requireApprovalAboveUSDC": {
+              "type": "number"
+            },
+            "allowedDomains": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "deniedDomains": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "strategy": {
+              "enum": [
+                "strict",
+                "balanced",
+                "explorer"
+              ]
+            },
+            "enforceAllowlist": {
+              "type": "boolean"
+            },
+            "trustedDomains": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "unknown": {
+              "type": "object",
+              "properties": {
+                "allowTrial": {
+                  "type": "boolean"
+                },
+                "maxPerRequestUSDC": {
+                  "type": "number"
+                },
+                "maxDailyUSDC": {
+                  "type": "number"
+                },
+                "requireApprovalAboveUSDC": {
+                  "type": "number"
+                }
+              },
+              "additionalProperties": true
+            },
+            "routeScore": {
+              "type": "object",
+              "properties": {
+                "autoAllowMinScore": {
+                  "type": "number"
+                },
+                "requireApprovalBelowScore": {
+                  "type": "number"
+                },
+                "blockBelowScore": {
+                  "type": "number"
+                }
+              },
+              "additionalProperties": true
+            }
+          },
+          "additionalProperties": true
+        }
+      },
+      "additionalProperties": true
+    },
+    "findings": {
+      "type": "object",
+      "properties": {
+        "failOn": {
+          "type": "array",
+          "items": {
+            "enum": [
+              "info",
+              "low",
+              "medium",
+              "high",
+              "critical"
+            ]
+          }
+        },
+        "warnOn": {
+          "type": "array",
+          "items": {
+            "enum": [
+              "info",
+              "low",
+              "medium",
+              "high",
+              "critical"
+            ]
+          }
+        }
+      },
+      "additionalProperties": true
+    },
+    "scanner": {
+      "type": "object",
+      "properties": {
+        "ignore": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "useMythosIgnore": {
+          "type": "boolean"
+        }
+      },
+      "additionalProperties": true
+    },
+    "receipts": {
+      "type": "object",
+      "properties": {
+        "require": {
+          "type": "boolean"
+        },
+        "includeFileHashes": {
+          "type": "boolean"
+        }
+      },
+      "additionalProperties": true
+    },
+    "routeScore": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "catalogMode": {
+          "type": "string"
+        },
+        "seedCategories": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "telemetry": {
+          "type": "object",
+          "additionalProperties": true
+        }
+      },
+      "additionalProperties": true
+    },
+    "mcpProxy": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "mode": {
+          "enum": [
+            "monitor",
+            "enforce"
+          ]
+        },
+        "approvalMode": {
+          "enum": [
+            "return_error",
+            "allow_with_annotation"
+          ]
+        },
+        "toolNameStrategy": {
+          "enum": [
+            "preserve_unless_collision",
+            "prefix"
+          ]
+        },
+        "exposeSentinelTools": {
+          "type": "boolean"
+        },
+        "upstreams": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": [
+              "id",
+              "command"
+            ],
+            "properties": {
+              "id": {
+                "type": "string"
+              },
+              "name": {
+                "type": "string"
+              },
+              "command": {
+                "type": "string"
+              },
+              "args": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "cwd": {
+                "type": "string"
+              },
+              "env": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              },
+              "initTimeoutMs": {
+                "type": "number"
+              }
+            },
+            "additionalProperties": true
+          }
+        }
+      },
+      "additionalProperties": true
+    }
+  },
+  "additionalProperties": true
+}

package/schemas/sentinel-report.schema.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mythos.dev/schemas/sentinel-report.v0.json",
+  "title": "Mythos Sentinel Report",
+  "type": "object",
+  "required": ["schema", "tool", "target", "summary", "findings"],
+  "properties": {
+    "schema": { "type": "string" },
+    "tool": { "type": "object" },
+    "target": { "type": "string" },
+    "summary": { "type": "object" },
+    "findings": { "type": "array" }
+  }
+}

package/schemas/skill.manifest.schema.json

@@ -0,0 +1,42 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mythos.dev/schemas/skill-manifest.v0.json",
+  "title": "Mythos Skill Permission Manifest",
+  "type": "object",
+  "required": ["name", "permissions"],
+  "properties": {
+    "name": { "type": "string" },
+    "version": { "type": "string" },
+    "permissions": {
+      "type": "object",
+      "properties": {
+        "filesystem": {
+          "type": "object",
+          "properties": {
+            "read": { "type": "array", "items": { "type": "string" } },
+            "write": { "type": "array", "items": { "type": "string" } }
+          }
+        },
+        "network": {
+          "type": "object",
+          "properties": {
+            "allow": { "type": "array", "items": { "type": "string" } }
+          }
+        },
+        "payments": {
+          "type": "object",
+          "properties": {
+            "maxUSDCPerRequest": { "type": "number" },
+            "maxUSDCDaily": { "type": "number" }
+          }
+        },
+        "secrets": {
+          "type": "object",
+          "properties": {
+            "deny": { "type": "array", "items": { "type": "string" } }
+          }
+        }
+      }
+    }
+  }
+}