sealbridge 0.0.1 → 0.2.0

package/dist/spec/task-manifest.schema.json

@@ -0,0 +1,422 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://acp-spec.local/schemas/v0.1/task-manifest.schema.json",
+  "title": "TaskManifest",
+  "description": "Cross-owner agent collaboration task manifest and contract specification.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "protocolVersion",
+    "taskId",
+    "createdAt",
+    "deadline",
+    "requester",
+    "task",
+    "io",
+    "verification",
+    "budget",
+    "permissions",
+    "sandboxPolicy",
+    "hitlPolicy"
+  ],
+  "properties": {
+    "protocolVersion": {
+      "type": "string",
+      "const": "0.1.0",
+      "description": "Protocol specification version."
+    },
+    "taskId": {
+      "type": "string",
+      "pattern": "^task_[a-zA-Z0-9_-]{8,64}$",
+      "description": "Globally unique task identifier."
+    },
+    "parentTaskId": {
+      "type": "string",
+      "pattern": "^task_[a-zA-Z0-9_-]{8,64}$",
+      "description": "Optional parent task identifier when sub-delegating."
+    },
+    "createdAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "deadline": {
+      "type": "string",
+      "format": "date-time",
+      "description": "Hard UTC timestamp deadline after which the task transitions to TIMED_OUT."
+    },
+    "requester": {
+      "$ref": "#/$defs/partyDescriptor"
+    },
+    "worker": {
+      "$ref": "#/$defs/partyDescriptor",
+      "description": "Target worker party if directed; omitted in open proposals before ACCEPT."
+    },
+    "task": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["title", "description", "acceptanceCriteria"],
+      "properties": {
+        "skillId": { "type": "string", "minLength": 1 },
+        "taskType": { "type": "string", "minLength": 1 },
+        "title": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 200
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 32768,
+          "description": "Task instructions. Must be treated as untrusted data by the worker runtime."
+        },
+        "acceptanceCriteria": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 50,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["id", "description", "required"],
+            "properties": {
+              "id": {
+                "type": "string",
+                "pattern": "^ac_[a-zA-Z0-9_-]{1,32}$"
+              },
+              "description": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 1000
+              },
+              "required": {
+                "type": "boolean"
+              }
+            }
+          }
+        }
+      }
+    },
+    "io": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["inputSchema", "outputSchema"],
+      "properties": {
+        "inputSchema": {
+          "type": "object",
+          "description": "JSON Schema describing the structured task input payload."
+        },
+        "outputSchema": {
+          "type": "object",
+          "description": "JSON Schema describing the required structured output artifact."
+        },
+        "inputArtifacts": {
+          "type": "array",
+          "maxItems": 100,
+          "items": {
+            "$ref": "#/$defs/artifactRef"
+          }
+        }
+      }
+    },
+    "verification": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "requireUsageReceipt", "requireExecutionAttestation", "maxRetries"],
+      "properties": {
+        "mode": {
+          "type": "string",
+          "enum": ["schema_only", "automated_checks", "human_in_the_loop", "hybrid"],
+          "description": "How the requester gateway verifies delivered artifacts."
+        },
+        "requireUsageReceipt": {
+          "type": "boolean"
+        },
+        "requireExecutionAttestation": {
+          "type": "boolean"
+        },
+        "maxRetries": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 10
+        },
+        "checks": {
+          "type": "array",
+          "maxItems": 20,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["checkId", "kind", "target"],
+            "properties": {
+              "checkId": {
+                "type": "string",
+                "pattern": "^chk_[a-zA-Z0-9_-]{1,32}$"
+              },
+              "kind": {
+                "type": "string",
+                "enum": ["json_schema", "sha256_match", "deterministic_command", "human_review"]
+              },
+              "target": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 512
+              },
+              "expectedExitCode": {
+                "type": "integer",
+                "default": 0
+              }
+            }
+          }
+        }
+      }
+    },
+    "budget": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "costBearer",
+        "maxInputTokens",
+        "maxOutputTokens",
+        "maxToolInvocations",
+        "maxWallClockSeconds",
+        "onOverrun"
+      ],
+      "properties": {
+        "costBearer": {
+          "type": "string",
+          "enum": ["worker_byok", "bilateral_quota", "external_settlement_plugin"],
+          "description": "Who bears the LLM/API inference cost. Never shares raw API keys across owners."
+        },
+        "maxInputTokens": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 100000000
+        },
+        "maxOutputTokens": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 100000000
+        },
+        "maxToolInvocations": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 100000
+        },
+        "maxWallClockSeconds": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 604800
+        },
+        "onOverrun": {
+          "type": "string",
+          "enum": ["hard_stop", "request_hitl_amendment"]
+        },
+        "settlementExtension": {
+          "type": "object",
+          "description": "Optional plugin metadata for off-protocol settlement or bilateral ledger accounting."
+        }
+      }
+    },
+    "permissions": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["maxDelegationDepth", "grantedCapabilities"],
+      "properties": {
+        "maxDelegationDepth": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 5,
+          "description": "0 forbids sub-delegation to any third-party agent."
+        },
+        "grantedCapabilities": {
+          "type": "array",
+          "maxItems": 50,
+          "items": {
+            "$ref": "#/$defs/capabilityGrantSpec"
+          }
+        }
+      }
+    },
+    "sandboxPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["isolationLevel", "networkAccess", "filesystemScope"],
+      "properties": {
+        "allowSubprocessFallback": {
+          "type": "boolean",
+          "description": "Explicitly permit a restricted subprocess when OCI isolation is requested."
+        },
+        "isolationLevel": {
+          "type": "string",
+          "enum": ["subprocess_restricted", "oci_container", "wasm", "microvm"]
+        },
+        "networkAccess": {
+          "type": "string",
+          "enum": ["none", "allowlist_only"]
+        },
+        "allowedHosts": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 253
+          }
+        },
+        "filesystemScope": {
+          "type": "string",
+          "enum": ["ephemeral_workspace_only", "read_only_inputs"]
+        }
+      }
+    },
+    "hitlPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["requiredGates"],
+      "properties": {
+        "requiredGates": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "enum": [
+              "GATE_CONTRACT_ACCEPT",
+              "GATE_EXTERNAL_SIDE_EFFECT",
+              "GATE_BUDGET_OVERRUN",
+              "GATE_SUB_DELEGATION",
+              "GATE_DELIVERY_ACCEPT"
+            ]
+          }
+        }
+      }
+    },
+    "signatures": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "requesterSignature": {
+          "$ref": "#/$defs/signatureBlock"
+        },
+        "workerSignature": {
+          "$ref": "#/$defs/signatureBlock"
+        }
+      }
+    }
+  },
+  "$defs": {
+    "didKey": {
+      "type": "string",
+      "pattern": "^did:key:z[1-9A-HJ-NP-Za-km-z]{32,128}$"
+    },
+    "sha256Digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "partyDescriptor": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["ownerDid", "agentDid"],
+      "properties": {
+        "ownerDid": {
+          "$ref": "#/$defs/didKey"
+        },
+        "agentDid": {
+          "$ref": "#/$defs/didKey"
+        },
+        "displayName": {
+          "type": "string",
+          "maxLength": 100
+        },
+        "relayEndpoint": {
+          "type": "string",
+          "format": "uri"
+        }
+      }
+    },
+    "artifactRef": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "digest", "mediaType", "sizeBytes"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "pattern": "^[a-zA-Z0-9._/-]{1,255}$"
+        },
+        "digest": {
+          "$ref": "#/$defs/sha256Digest"
+        },
+        "mediaType": {
+          "type": "string",
+          "maxLength": 128
+        },
+        "sizeBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 1073741824
+        }
+      }
+    },
+    "capabilityGrantSpec": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["capabilityId", "resource", "allowedTools", "maxInvocations", "expiresAt"],
+      "properties": {
+        "capabilityId": {
+          "type": "string",
+          "pattern": "^cap_[a-zA-Z0-9_-]{4,64}$"
+        },
+        "resource": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512,
+          "description": "Scoped URI or MCP resource prefix (e.g. mcp://owner-a/docs/public/*)."
+        },
+        "allowedTools": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 50,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128
+          }
+        },
+        "argConstraints": {
+          "type": "object",
+          "description": "Optional JSON Schema constraining tool arguments."
+        },
+        "maxInvocations": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 10000
+        },
+        "expiresAt": {
+          "type": "string",
+          "format": "date-time"
+        }
+      }
+    },
+    "signatureBlock": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["signerDid", "canonicalization", "payloadDigest", "signedAt", "signature"],
+      "properties": {
+        "signerDid": {
+          "$ref": "#/$defs/didKey"
+        },
+        "canonicalization": {
+          "type": "string",
+          "const": "RFC8785-JCS"
+        },
+        "payloadDigest": {
+          "$ref": "#/$defs/sha256Digest"
+        },
+        "signedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "signature": {
+          "type": "string",
+          "pattern": "^ed25519:[a-zA-Z0-9+/=_-]{64,180}$"
+        }
+      }
+    }
+  }
+}

package/dist/spec/usage-receipt.schema.json

@@ -0,0 +1,91 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://acp-spec.local/schemas/v0.1/usage-receipt.schema.json",
+  "title": "usage-receipt",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "payload",
+    "signature"
+  ],
+  "properties": {
+    "payload": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "type",
+        "taskId",
+        "inputTokens",
+        "outputTokens",
+        "totalTokens",
+        "toolCalls",
+        "wallTimeMs",
+        "halted"
+      ],
+      "properties": {
+        "type": {
+          "const": "UsageReceipt"
+        },
+        "taskId": {
+          "type": "string",
+          "minLength": 1
+        },
+        "inputTokens": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "outputTokens": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "totalTokens": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "toolCalls": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "wallTimeMs": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "halted": {
+          "type": "boolean"
+        }
+      }
+    },
+    "signature": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "signerDid",
+        "canonicalization",
+        "payloadDigest",
+        "signedAt",
+        "signature"
+      ],
+      "properties": {
+        "signerDid": {
+          "type": "string",
+          "pattern": "^did:key:z[1-9A-HJ-NP-Za-km-z]{32,128}$"
+        },
+        "canonicalization": {
+          "const": "RFC8785-JCS"
+        },
+        "payloadDigest": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$"
+        },
+        "signedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "signature": {
+          "type": "string",
+          "pattern": "^ed25519:[A-Za-z0-9_-]{86}$"
+        }
+      }
+    }
+  }
+}

package/package.json

@@ -1,9 +1,65 @@
 {
   "name": "sealbridge",
-  "version": "0.0.1",
-  "description": "Sealbridge — secure task delegation between agents owned by different people. Formerly ACP / agent-collab-platform.",
+  "version": "0.2.0",
+  "private": false,
+  "type": "module",
   "license": "Apache-2.0",
-  "repository": { "type": "git", "url": "git+https://github.com/acidnyan/agent-collab-platform.git" },
-  "homepage": "https://github.com/acidnyan/agent-collab-platform",
-  "files": ["README.md", "LICENSE"]
+  "packageManager": "pnpm@10.34.6",
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "pnpm -r build",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "conformance": "vitest run",
+    "test:security-proof": "vitest run conformance/security-proofs.test.ts",
+    "security-proof": "vitest run conformance/security-proofs.test.ts",
+    "validate:schemas": "tsx scripts/validate-schemas.ts",
+    "acp": "tsx cli/src/acp.ts",
+    "sealbridge": "tsx cli/src/index.ts",
+    "package:cli": "pnpm build && node scripts/package-cli.mjs",
+    "prepack": "pnpm run package:cli",
+    "publish:dry-run": "npm publish --dry-run"
+  },
+  "devDependencies": {
+    "typescript": "~5.9.3",
+    "vitest": "^5.0.5",
+    "tsx": "^4.20.6",
+    "@types/node": "^22.18.0",
+    "@types/ws": "^8.18.1"
+  },
+  "dependencies": {
+    "ajv": "^8.17.1",
+    "ajv-formats": "^3.0.1",
+    "qrcode": "^1.5.4",
+    "@modelcontextprotocol/sdk": "^1.20.0",
+    "canonicalize": "^5.1.0",
+    "ws": "^8.18.3",
+    "@a2a-js/sdk": "^0.3.10"
+  },
+  "description": "Sealbridge: encrypted cross-owner agent collaboration",
+  "keywords": [
+    "sealbridge",
+    "agent-collaboration",
+    "mcp"
+  ],
+  "bin": {
+    "sealbridge": "./dist/cli/dist/index.js",
+    "acp": "./dist/cli/dist/acp.js"
+  },
+  "files": [
+    "dist/",
+    "LICENSE",
+    "NOTICE",
+    "README.md",
+    "README.ja.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/sealbridge/sealbridge.git"
+  }
 }