Docs

Workflow Shield CLI

Workflow Shield 用 package spec 描述公开层与隐藏层的边界，让 workflow 先能被调用、验证、签名，再决定哪些部分绝不应该被打进公开包。

Install

第一版直接从 GitHub 仓库运行，不依赖额外平台。

git clone https://github.com/jklop3841/agentarchitect-site.git
cd agentarchitect-site
npm install

Commands

三条命令分别对应打包、审视边界、解释保护逻辑。

pack

workflow-shield pack <spec> --format json|markdown

Build a protected package manifest that exposes only the workflow contract and visible assets.

inspect

workflow-shield inspect <spec> --format json|markdown

Show what is public, what stays hidden, and what the boundary rules are.

explain

workflow-shield explain <spec> --format json|markdown

Explain why this package raises extraction cost without claiming impossible security.

Pack

npm run workflow-shield -- pack ./examples/workflow-shield/basic.json --format markdown

Inspect

npm run workflow-shield -- inspect ./examples/workflow-shield/basic.json --format json

Explain

npm run workflow-shield -- explain ./examples/workflow-shield/basic.json --format markdown

Spec example

第一版只保留最小必需字段：可见资产、隐藏资产、边界规则和验证方式。

{
  "id": "shield-basic-bundle",
  "summary": "Protect a private workflow by exposing only the contract",
  "assets": [
    { "id": "workflow-contract", "kind": "manifest", "exposure": "public" },
    { "id": "operator-prompts", "kind": "prompt-pack", "exposure": "hidden" }
  ],
  "boundaries": [
    "Public consumers can inspect inputs, outputs, and validation checks.",
    "Hidden prompts are never bundled into the public package."
  ]
}