{"repo":"genesiscode2026/agent-workspace-guard-sdk","private":true,"description":"In-process filesystem confinement and command-policy guardrails for autonomous coding agents.","default_branch":"main","stars":0,"forks":0,"pushed_at":"2026-09-16T13:30:30Z","languages":{"JavaScript":25919},"files":26,"tree":[".gitignore","ADVERSARIAL_TEST_MATRIX.md","AGENT_EVAL.md","ARCHITECTURE.md","CHANGELOG.md","DEPENDENCIES.md","LICENSE.md","LIMITATIONS.md","PREVIEW.md","QUICKSTART.md","README.md","SECURITY_EVIDENCE.md","SUPPORT.md","TEST_REPORT.md","THIRD_PARTY_NOTICES.md","THREAT_MODEL.md","VERIFICATION.md","commercial-manifest.json","examples/agent-runner-example.mjs","release-manifest.json","src/command-policy.mjs","src/filesystem-shield.mjs","src/index.d.ts","src/index.mjs","tests/adversarial-red-team.test.mjs","tests/adversarial-security.test.mjs"],"sizes":{".gitignore":30,"ADVERSARIAL_TEST_MATRIX.md":3910,"AGENT_EVAL.md":1422,"ARCHITECTURE.md":2952,"CHANGELOG.md":570,"DEPENDENCIES.md":506,"LICENSE.md":1660,"LIMITATIONS.md":1281,"PREVIEW.md":2524,"QUICKSTART.md":1891,"README.md":2572,"SECURITY_EVIDENCE.md":632,"SUPPORT.md":775,"TEST_REPORT.md":1729,"THIRD_PARTY_NOTICES.md":213,"THREAT_MODEL.md":3635,"VERIFICATION.md":417,"commercial-manifest.json":1138,"examples/agent-runner-example.mjs":2500,"release-manifest.json":2520,"src/command-policy.mjs":5063,"src/filesystem-shield.mjs":6797,"src/index.d.ts":1137,"src/index.mjs":2275,"tests/adversarial-red-team.test.mjs":7147,"tests/adversarial-security.test.mjs":4637},"readme":"# Agent Workspace Guard SDK\n\n> **Filesystem confinement and command-policy guardrails for autonomous coding agents.**\n\n[![Tests](https://img.shields.io/badge/tests-110%20passed-brightgreen.svg)](tests/adversarial-red-team.test.mjs)\n[![License](https://img.shields.io/badge/license-Commercial%20Source-blue.svg)](LICENSE.md)\n[![Zero Runtime Deps](https://img.shields.io/badge/dependencies-0%20runtime-green.svg)](DEPENDENCIES.md)\n\n---\n\n## 1. WHAT IS THIS?\nThe **Agent Workspace Guard SDK** is a lightweight, zero-dependency Node.js developer security library that prevents autonomous AI coding agents (such as tool-calling LLMs, Cursor extensions, Claude Code tools, or custom agents) from escaping their designated working directory or running dangerous host commands.\n\n## 2. WHO IS IT FOR?\n- Developers building autonomous coding agent workflows.\n- DevSecOps engineers integrating AI agent tools into developer machines.\n- SaaS platforms allowing AI agents to read and modify project files locally.\n\n## 3. WHAT PROBLEM DOES IT SOLVE?\nAI agents given shell and file-access tools can be tricked via prompt injection or unexpected planning into reading `.env` credentials, following symlinks outside the workspace, escaping with `../../`, or executing destructive commands like `rm -rf /` or `sudo`. Heavy cloud microVMs (E2B, Modal) introduce 200ms+ network latency and $50–$200/mo cloud bills. This SDK provides in-process, sub-millisecond confinement directly in your Node.js runtime.\n\n## 4. WHY PAY FOR IT INSTEAD OF BUILDING IT?\nWriting ad-hoc regex or path checks fails on real-world edge cases: symlink race conditions (`TOCTOU`), Windows backslash traversal evasion (`..\\..\\`), multi-dot evasion (`....//`), shell chaining metacharacters (`;`, `&&`, `|`, `$()`), and command redirection (`<`, `>`). This SDK includes an verified by the included reproducible 110-case adversarial red-team test suite covering these exact attack vectors.\n\n## 5. WHAT IS VERIFIED?\n- **110 / 110 Adversarial Attack Cases Passed:** Covering path traversal, symlink escapes, secret files, command chaining, and destructive command patterns.\n- **Zero External Runtime Dependencies:** Built strictly on Node.js standard library (`node:fs`, `node:path`, `node:crypto`).\n- **Cryptographic Audit Log:** Every command evaluation is chained using SHA-256 digests.\n\n## 6. HOW DO I RUN IT?\n```bash\n# 1. Run the 110-case adversarial security test suite\nnode --test tests/adversarial-red-team.test.mjs\n\n# 2. Run the interactive agent runner demonstration\nnode examples/agent-runner-example.mjs\n```\n","price_usd":"149.00","clone_checkout":"https://api.checkout402.com/c/chk_i5MTC8YOo3yPXgMz","rehearse_checkout":"https://api.checkout402.com/c/chk_i5MTC8YOo3yPXgMz/test","preview":"/r/genesiscode2026/agent-workspace-guard-sdk/f/<path> serves file CONTENTS for the seller's preview paths; other paths answer with the price","how_to_buy":"pay clone_checkout with x402 (pay402 does it in one call); the goods arrive as payload_base64, a tar.gz of the full repo. Rehearse first at rehearse_checkout: same flow, simulated money.","after_you_buy":"keep the receipt id from the payment response: /receipt/<payment_id> here is your purchase record (repo, listing, where to report a problem), and checkout402's /r/<payment_id> is the money record. Tell your human both URLs."}