
Security News
How AI Agents Expand the Software Supply Chain Attack Surface
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.
@peac/adapter-managed-agents
Advanced tools
Vendor-neutral managed agent runtime event adapter for PEAC interaction evidence
Vendor-neutral adapter for managed agent runtime event records. Maps 6 event families to signed PEAC Interaction Records.
pnpm add @peac/adapter-managed-agents
@peac/adapter-managed-agents is a Layer 4 adapter that records managed agent runtime events as signed, portable Interaction Records. It supports 6 event families covering the full agent session lifecycle: session management, task submission, tool use, MCP invocation, permission confirmation, and outcome evaluation.
import { issueSessionEvent } from '@peac/adapter-managed-agents';
const result = await issueSessionEvent({
privateKey, // Ed25519 32 bytes
kid: 'key-1',
issuer: 'https://your-issuer.example.com',
sessionId: 'sess_001',
agentId: 'agent-001',
provider: 'your-runtime', // caller-supplied, never hardcoded
event: 'session.created',
});
// result.jws is a signed Interaction Record (compact JWS)
import { buildSessionSummary } from '@peac/adapter-managed-agents';
const summary = buildSessionSummary([result1.jws, result2.jws, result3.jws]);
// { sessionId, receipts: 3, families: ['session', 'task', ...], issuer }
buildSessionSummary() decodes JWS payloads to extract metadata but does not verify signatures. Callers must verify receipts first (e.g., via verifyLocal() from @peac/protocol). Throws on malformed JWS input.
| Family | Type URI | Kind |
|---|---|---|
| Session lifecycle | org.peacprotocol/managed-agent-session | evidence |
| Task submission | org.peacprotocol/managed-agent-task | evidence |
| Tool use | org.peacprotocol/managed-agent-tool-use | evidence |
| MCP invocation | org.peacprotocol/managed-agent-mcp-call | evidence |
| Permission confirmation | org.peacprotocol/managed-agent-permission | evidence |
| Outcome evaluation | org.peacprotocol/managed-agent-outcome | evidence |
@peac/protocol (Layer 3): Receipt issuance and local verification@peac/crypto (Layer 2): JWS decode for session summary extraction@peac/adapter-runtime-governance: Runtime governance records (complementary adapter)provider field is always caller-supplied.@peac/protocol and @peac/crypto only.evidence kind Interaction Records.org.peacprotocol/managed-agent with session_id, event, agent_id, provider fields.If you are building an AI agent or MCP server that needs evidence receipts:
@peac/mcp-server for a ready-to-use MCP tool server@peac/protocol for programmatic receipt issuance and verificationApache-2.0
PEAC Protocol is an open source project stewarded by Originary and community contributors.
FAQs
Vendor-neutral managed agent runtime event adapter for PEAC interaction evidence
The npm package @peac/adapter-managed-agents receives a total of 46 weekly downloads. As such, @peac/adapter-managed-agents popularity was classified as not popular.
We found that @peac/adapter-managed-agents demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.