openfused 0.2.0 → 0.2.1

package/README.md

@@ -1,10 +1,10 @@
-# OpenFuse
+# OpenFused
 
-Persistent, shareable, portable context for AI agents.
+Decentralized context mesh for AI agents. Persistent memory, signed messaging, FUSE filesystem. The protocol is files.
 
 ## What is this?
 
-AI agents lose their memory when conversations end. Context is trapped in chat windows, proprietary memory systems, and siloed cloud accounts. OpenFuse gives any AI agent a persistent context store that survives sessions and can be shared with other agents — through plain files.
+AI agents lose their memory when conversations end. Context is trapped in chat windows, proprietary memory systems, and siloed cloud accounts. OpenFused gives any AI agent persistent, shareable context — through plain files.
 
 No vendor lock-in. No proprietary protocol. Just a directory convention that any agent on any model on any cloud can read and write.
 
@@ -21,10 +21,12 @@ This creates a context store:
 CONTEXT.md     — working memory (what's happening now)
 SOUL.md        — agent identity, rules, capabilities
 inbox/         — messages from other agents
+outbox/        — sent message copies
 shared/        — files shared with the mesh
 knowledge/     — persistent knowledge base
 history/       — conversation & decision logs
-.mesh.json     — mesh config
+.keys/         — ed25519 signing keypair (auto-generated)
+.mesh.json     — mesh config, peers, trusted keys
 ```
 
 ## Usage
@@ -34,31 +36,76 @@ history/       — conversation & decision logs
 openfuse context
 openfuse context --append "## Update\nFinished the research phase."
 
-# Send a message to another agent
+# Send a signed message to another agent
 openfuse inbox send agent-bob "Check out shared/findings.md"
 
-# Watch for incoming messages
+# Read inbox (shows verified/unverified status)
+openfuse inbox list
+
+# Watch for incoming messages in real-time
 openfuse watch
 
 # Share a file with the mesh
 openfuse share ./report.pdf
 
+# Show your public key (share with peers)
+openfuse key
+
+# Trust a peer's public key
+openfuse peer trust ./bobs-key.pem
+
 # Manage peers
 openfuse peer add https://agent-bob.example.com
 openfuse peer list
 openfuse status
 ```
 
+## Security
+
+Every message is **Ed25519 signed**. When an agent receives a message:
+
+- **[VERIFIED]** — signature valid AND sender's key is in your trust list
+- **[UNVERIFIED]** — unsigned, invalid signature, or untrusted key
+
+All incoming messages are wrapped in `<external_message>` tags so the LLM knows what's trusted and what isn't:
+
+```xml
+<external_message from="agent-bob" verified="true" status="verified">
+Hey, the research is done. Check shared/findings.md
+</external_message>
+```
+
+Unsigned messages or prompt injection attempts are clearly marked `UNVERIFIED`.
+
+## FUSE Daemon (Rust)
+
+The `openfused` daemon lets agents mount each other's context stores as local directories:
+
+```bash
+# Agent A: serve your context store
+openfused serve --store ./my-context --port 9781
+
+# Agent B: mount Agent A's store locally (read-only)
+openfused mount http://agent-a:9781 ./peers/agent-a/
+```
+
+The daemon only exposes safe directories (`shared/`, `knowledge/`, `CONTEXT.md`, `SOUL.md`). Inbox, outbox, keys, and config are never served.
+
+Build from source:
+```bash
+cd daemon && cargo build --release
+```
+
 ## How agents communicate
 
 No APIs. No message bus. Just files.
 
-Agent A writes to Agent B's inbox. Agent B's watcher picks it up and injects it as a user message. Agent B responds by writing to Agent A's inbox. That's a conversation — through files.
+Agent A writes to Agent B's inbox. Agent B's watcher picks it up, verifies the signature, wraps it in security tags, and injects it as a user message. Agent B responds by writing to Agent A's inbox.
 
 ```
-Agent A writes:  /shared-bucket/inbox/agent-b.md
-Agent B reads:   /shared-bucket/inbox/agent-b.md  → processes → responds
-Agent B writes:  /shared-bucket/inbox/agent-a.md
+Agent A writes:  /shared-bucket/inbox/agent-b.json  (signed)
+Agent B reads:   verifies signature → [VERIFIED] → processes → responds
+Agent B writes:  /shared-bucket/inbox/agent-a.json  (signed)
 ```
 
 Works over local filesystem, GCS buckets (gcsfuse), S3, or any FUSE-mountable storage.
@@ -67,7 +114,7 @@ Works over local filesystem, GCS buckets (gcsfuse), S3, or any FUSE-mountable st
 
 - **OpenClaw** — drop the context store in your workspace
 - **Claude Code** — reference paths in CLAUDE.md
-- **Any CLI agent** — if it can read files, it can use OpenFuse
+- **Any CLI agent** — if it can read files, it can use OpenFused
 - **Any cloud** — GCP, AWS, Azure, bare metal, your laptop
 
 ## Philosophy

package/dist/cli.js

@@ -7,8 +7,8 @@ import { resolve } from "node:path";
 const program = new Command();
 program
     .name("openfuse")
-    .description("Persistent, shareable, portable context for AI agents")
-    .version("0.1.0");
+    .description("Decentralized context mesh for AI agents. The protocol is files.")
+    .version("0.2.1");
 // --- init ---
 program
     .command("init")

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "openfused",
-  "version": "0.2.0",
-  "description": "Persistent, shareable, portable context for AI agents. Decentralized mesh via files.",
+  "version": "0.2.1",
+  "description": "Decentralized context mesh for AI agents. Persistent memory, signed messaging, FUSE filesystem. The protocol is files.",
   "license": "MIT",
   "type": "module",
   "bin": {
@@ -53,6 +53,8 @@
     "mcp",
     "ai-agent",
     "shared-context",
-    "persistent-memory"
+    "persistent-memory",
+    "ed25519",
+    "signed-messages"
   ]
 }