kavachos

import { createKavach } from "kavachos"; import { emailPassword } from "kavachos/auth"; async function runKavachExample() { const kavach = createKavach({ database: { provider: "sqlite", url: "kavach.db" }, plugins: [emailPassword()], }); // Ensure the database is initialized (implementation detail not in quickstart, but necessary for a runnable example) // In a real app, you'd likely have migrations or a setup script. // For this example, we'll assume the 'kavach.db' file exists or is created by the library. // Create an AI agent with scoped permissions const agent = await kavach.agent.create({ ownerId: "user-123", // This would typically be a human user's ID name: "github-reader", type: "autonomous", permissions: [ { resource: "mcp:github:*", actions: ["read"] }, { resource: "mcp:deploy:production", actions: ["execute"], constraints: { requireApproval: true } } ] }); console.log(`Created agent: ${agent.name} with ID ${agent.id}`); // Authorize and audit (< 1ms) const result = await kavach.authorize(agent.id, { action: "read", resource: "mcp:github:repos" }); console.log(`Authorization result for 'read mcp:github:repos':`, result); // Expected output: { allowed: true, auditId: "aud_..." } if permissions are correctly configured const unauthorizedResult = await kavach.authorize(agent.id, { action: "write", resource: "mcp:github:repos" }); console.log(`Authorization result for 'write mcp:github:repos':`, unauthorizedResult); // Expected output: { allowed: false, auditId: "aud_..." } } runKavachExample().catch(console.error);