@7h3/protocol 0.4.0 → 0.5.0

package/bin/7h3.ts

@@ -12,7 +12,7 @@ Usage:
   7h3 verify --public-key <key> --envelope <json>
   7h3 inspect --envelope <json>
   7h3 gateway --upstream <url> [--port <n>] [--public-key <key>] [--require ed25519|none]
-              [--sign-responses] [--private-key <key>] [--sender <id>]
+              [--sign-responses] [--private-key <key>] [--sender <id>] [--metrics-port <n>]
   7h3 keys serve [--public-key <key>] [--key-id <id>] [--port <n>]
   7h3 help
 
@@ -210,6 +210,7 @@ async function cmdGateway(argv: string[]): Promise<void> {
       'sign-responses': { type: 'boolean' },
       'private-key': { type: 'string' },
       sender: { type: 'string' },
+      'metrics-port': { type: 'string' },
     },
     strict: false,
   })
@@ -223,6 +224,8 @@ async function cmdGateway(argv: string[]): Promise<void> {
   const signResponses = !!(values['sign-responses'])
   const privateKey = values['private-key'] as string | undefined
   const sender = values['sender'] as string | undefined
+  const metricsPortRaw = values['metrics-port'] as string | undefined
+  const metricsPort = metricsPortRaw ? parseInt(metricsPortRaw, 10) : undefined
 
   const { createGateway } = await import('../src/gateway.js')
   const { createStaticKeyRegistry } = await import('../src/keyRegistry.js')
@@ -276,6 +279,24 @@ async function cmdGateway(argv: string[]): Promise<void> {
     process.stderr.write(`  sign-responses: ${signResponses && !!privateKey}\n`)
     if (sender) process.stderr.write(`  sender        : ${sender}\n`)
   })
+
+  // Optional: dedicated metrics server
+  if (metricsPort !== undefined) {
+    const { metrics: globalMetrics, renderPrometheusText } = await import('../src/telemetry.js')
+    const metricsServer = createServer((req, res) => {
+      if (req.url === '/metrics' && req.method === 'GET') {
+        const body = renderPrometheusText(globalMetrics)
+        res.writeHead(200, { 'content-type': 'text/plain; version=0.0.4; charset=utf-8' })
+        res.end(body)
+      } else {
+        res.writeHead(404, { 'content-type': 'text/plain' })
+        res.end('Not Found')
+      }
+    })
+    metricsServer.listen(metricsPort, () => {
+      process.stderr.write(`7h3 metrics listening on :${metricsPort}/metrics\n`)
+    })
+  }
 }
 
 async function cmdKeysServe(argv: string[]): Promise<void> {

package/docs/assets/banner.svg

@@ -0,0 +1,123 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1280" height="640" viewBox="0 0 1280 640">
+  <defs>
+    <linearGradient id="bg" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" style="stop-color:#06060f"/>
+      <stop offset="100%" style="stop-color:#0c0c22"/>
+    </linearGradient>
+    <linearGradient id="accentGrad" x1="0%" y1="0%" x2="100%" y2="0%">
+      <stop offset="0%" style="stop-color:#4f7cff"/>
+      <stop offset="100%" style="stop-color:#a855f7"/>
+    </linearGradient>
+    <pattern id="hex" x="0" y="0" width="70" height="60" patternUnits="userSpaceOnUse">
+      <polygon points="35,3 67,21 67,57 35,60 3,57 3,21" fill="none" stroke="#ffffff07" stroke-width="1"/>
+    </pattern>
+    <filter id="softglow" x="-10%" y="-10%" width="120%" height="120%">
+      <feGaussianBlur stdDeviation="2" result="blur"/>
+      <feMerge><feMergeNode in="blur"/><feMergeNode in="SourceGraphic"/></feMerge>
+    </filter>
+  </defs>
+
+  <!-- Background -->
+  <rect width="1280" height="640" fill="url(#bg)"/>
+  <rect width="1280" height="640" fill="url(#hex)"/>
+
+  <!-- Ambient glows -->
+  <ellipse cx="180" cy="220" rx="300" ry="240" fill="#4f7cff" opacity="0.05"/>
+  <ellipse cx="1100" cy="420" rx="260" ry="200" fill="#a855f7" opacity="0.06"/>
+
+  <!-- Top accent bar -->
+  <rect x="0" y="0" width="1280" height="3" fill="url(#accentGrad)"/>
+
+  <!-- LEFT COLUMN -->
+  <text x="64" y="70" font-family="SF Mono,Consolas,monospace" font-size="12" fill="#4f7cff" letter-spacing="5" opacity="0.85">CRYPTOGRAPHIC AGENT PROTOCOL  ·  v0.4.0</text>
+  <text x="58" y="162" font-family="Inter,Helvetica Neue,Arial,sans-serif" font-size="96" font-weight="800" fill="#ffffff" letter-spacing="-4">7h3 Protocol</text>
+  <text x="62" y="204" font-family="Inter,Helvetica Neue,Arial,sans-serif" font-size="22" font-weight="300" fill="#94a3b8" letter-spacing="0.3">Sign every message. Reject every replay.</text>
+  <rect x="62" y="220" width="320" height="2.5" rx="1.5" fill="url(#accentGrad)"/>
+
+  <!-- Transport pills -->
+  <text x="62" y="272" font-family="SF Mono,Consolas,monospace" font-size="10" fill="#475569" letter-spacing="4">SECURED TRANSPORTS</text>
+  <rect x="62"  y="284" width="128" height="36" rx="7" fill="#0f1f3d" stroke="#4f7cff" stroke-width="1.2"/>
+  <text x="126" y="307" font-family="Inter,sans-serif" font-size="13" font-weight="600" fill="#93c5fd" text-anchor="middle">HTTP / REST</text>
+  <rect x="200" y="284" width="122" height="36" rx="7" fill="#131040" stroke="#6366f1" stroke-width="1.2"/>
+  <text x="261" y="307" font-family="Inter,sans-serif" font-size="13" font-weight="600" fill="#a5b4fc" text-anchor="middle">WebSocket</text>
+  <rect x="332" y="284" width="90"  height="36" rx="7" fill="#160e3d" stroke="#8b5cf6" stroke-width="1.2"/>
+  <text x="377" y="307" font-family="Inter,sans-serif" font-size="13" font-weight="600" fill="#c4b5fd" text-anchor="middle">gRPC</text>
+  <rect x="432" y="284" width="120" height="36" rx="7" fill="#1a0f3d" stroke="#a855f7" stroke-width="1.2"/>
+  <text x="492" y="307" font-family="Inter,sans-serif" font-size="13" font-weight="600" fill="#d8b4fe" text-anchor="middle">Msg Queues</text>
+  <rect x="562" y="284" width="110" height="36" rx="7" fill="#2a0f2a" stroke="#ec4899" stroke-width="1.2"/>
+  <text x="617" y="307" font-family="Inter,sans-serif" font-size="13" font-weight="600" fill="#f9a8d4" text-anchor="middle">Webhooks</text>
+
+  <!-- SDK badges -->
+  <text x="62" y="356" font-family="SF Mono,Consolas,monospace" font-size="10" fill="#475569" letter-spacing="4">5 SDKs — ZERO RUNTIME DEPS</text>
+  <rect x="62"  y="368" width="98" height="32" rx="6" fill="#0f1d30"/>
+  <text x="111" y="389" font-family="Inter,sans-serif" font-size="13" font-weight="700" fill="#60a5fa" text-anchor="middle">TypeScript</text>
+  <rect x="170" y="368" width="84" height="32" rx="6" fill="#0a1f12"/>
+  <text x="212" y="389" font-family="Inter,sans-serif" font-size="13" font-weight="700" fill="#4ade80" text-anchor="middle">Python</text>
+  <rect x="264" y="368" width="72" height="32" rx="6" fill="#1f0f05"/>
+  <text x="300" y="389" font-family="Inter,sans-serif" font-size="13" font-weight="700" fill="#fb923c" text-anchor="middle">Rust</text>
+  <rect x="346" y="368" width="62" height="32" rx="6" fill="#051520"/>
+  <text x="377" y="389" font-family="Inter,sans-serif" font-size="13" font-weight="700" fill="#38bdf8" text-anchor="middle">Go</text>
+  <rect x="418" y="368" width="98" height="32" rx="6" fill="#180e28"/>
+  <text x="467" y="389" font-family="Inter,sans-serif" font-size="13" font-weight="700" fill="#c084fc" text-anchor="middle">Browser</text>
+
+  <!-- Install commands -->
+  <rect x="62" y="420" width="650" height="116" rx="10" fill="#080d18" stroke="#1e293b" stroke-width="1"/>
+  <rect x="62" y="420" width="3"   height="116" rx="1.5" fill="url(#accentGrad)"/>
+  <text x="82" y="450" font-family="SF Mono,Consolas,Courier New,monospace" font-size="12.5" fill="#4b5563">$</text>
+  <text x="98" y="450" font-family="SF Mono,Consolas,Courier New,monospace" font-size="12.5" fill="#cbd5e1">npm install <tspan fill="#60a5fa">@7h3/protocol</tspan></text>
+  <text x="82" y="476" font-family="SF Mono,Consolas,Courier New,monospace" font-size="12.5" fill="#4b5563">$</text>
+  <text x="98" y="476" font-family="SF Mono,Consolas,Courier New,monospace" font-size="12.5" fill="#cbd5e1">pip install <tspan fill="#4ade80">7h3-protocol</tspan></text>
+  <text x="82" y="502" font-family="SF Mono,Consolas,Courier New,monospace" font-size="12.5" fill="#4b5563">$</text>
+  <text x="98" y="502" font-family="SF Mono,Consolas,Courier New,monospace" font-size="12.5" fill="#cbd5e1">cargo add <tspan fill="#fb923c">protocol-7h3</tspan></text>
+  <text x="82" y="528" font-family="SF Mono,Consolas,Courier New,monospace" font-size="12.5" fill="#4b5563">$</text>
+  <text x="98" y="528" font-family="SF Mono,Consolas,Courier New,monospace" font-size="12.5" fill="#cbd5e1">go get <tspan fill="#38bdf8">github.com/IceMasterT/7h3-protocol/sdk/go</tspan></text>
+
+  <!-- RIGHT COLUMN — Stat cards -->
+  <rect x="776" y="52" width="210" height="112" rx="12" fill="#0a0f20" stroke="#4f7cff" stroke-width="1.2"/>
+  <text x="881" y="94"  font-family="Inter,sans-serif" font-size="30" font-weight="800" fill="#4f7cff"  text-anchor="middle" filter="url(#softglow)">Ed25519</text>
+  <text x="881" y="118" font-family="Inter,sans-serif" font-size="12" fill="#64748b" text-anchor="middle">Asymmetric signing</text>
+  <text x="881" y="138" font-family="Inter,sans-serif" font-size="11" fill="#334155" text-anchor="middle">PKCS8 · SPKI · base64url</text>
+
+  <rect x="1004" y="52" width="210" height="112" rx="12" fill="#0a1a12" stroke="#10b981" stroke-width="1.2"/>
+  <text x="1109" y="100" font-family="Inter,sans-serif" font-size="48" font-weight="800" fill="#10b981" text-anchor="middle" filter="url(#softglow)">278</text>
+  <text x="1109" y="124" font-family="Inter,sans-serif" font-size="12" fill="#64748b" text-anchor="middle">tests passing</text>
+  <text x="1109" y="142" font-family="Inter,sans-serif" font-size="11" fill="#334155" text-anchor="middle">TS · Python · Rust · Go</text>
+
+  <rect x="776" y="180" width="210" height="112" rx="12" fill="#130a20" stroke="#a855f7" stroke-width="1.2"/>
+  <text x="881" y="236" font-family="Inter,sans-serif" font-size="48" font-weight="800" fill="#a855f7" text-anchor="middle" filter="url(#softglow)">0</text>
+  <text x="881" y="260" font-family="Inter,sans-serif" font-size="12" fill="#64748b" text-anchor="middle">runtime deps</text>
+  <text x="881" y="278" font-family="Inter,sans-serif" font-size="11" fill="#334155" text-anchor="middle">Pure stdlib · all 5 SDKs</text>
+
+  <rect x="1004" y="180" width="210" height="112" rx="12" fill="#1a1400" stroke="#f59e0b" stroke-width="1.2"/>
+  <text x="1109" y="236" font-family="Inter,sans-serif" font-size="48" font-weight="800" fill="#f59e0b" text-anchor="middle" filter="url(#softglow)">5</text>
+  <text x="1109" y="260" font-family="Inter,sans-serif" font-size="12" fill="#64748b" text-anchor="middle">transports</text>
+  <text x="1109" y="278" font-family="Inter,sans-serif" font-size="11" fill="#334155" text-anchor="middle">One wire format: 7h3/0.1</text>
+
+  <!-- Security features panel -->
+  <rect x="776" y="308" width="438" height="242" rx="12" fill="#0a0d1a" stroke="#1e293b" stroke-width="1"/>
+  <rect x="776" y="308" width="438" height="3"   rx="1.5" fill="url(#accentGrad)"/>
+  <text x="796" y="338" font-family="SF Mono,Consolas,monospace" font-size="10" fill="#475569" letter-spacing="4">SECURITY GUARANTEES</text>
+
+  <rect x="796" y="350" width="3" height="38" rx="1.5" fill="#4f7cff"/>
+  <text x="810" y="368" font-family="Inter,sans-serif" font-size="14" font-weight="600" fill="#e2e8f0">Verified sender identity</text>
+  <text x="810" y="384" font-family="Inter,sans-serif" font-size="11.5" fill="#475569">Ed25519 — cryptographically impossible to forge</text>
+
+  <rect x="796" y="398" width="3" height="38" rx="1.5" fill="#10b981"/>
+  <text x="810" y="416" font-family="Inter,sans-serif" font-size="14" font-weight="600" fill="#e2e8f0">Replay attack prevention</text>
+  <text x="810" y="432" font-family="Inter,sans-serif" font-size="11.5" fill="#475569">TTL + nonce — captured messages expire, can't be reused</text>
+
+  <rect x="796" y="446" width="3" height="38" rx="1.5" fill="#a855f7"/>
+  <text x="810" y="464" font-family="Inter,sans-serif" font-size="14" font-weight="600" fill="#e2e8f0">Tamper-evident audit log</text>
+  <text x="810" y="480" font-family="Inter,sans-serif" font-size="11.5" fill="#475569">Ed25519-signed entries — alter one byte, break the chain</text>
+
+  <rect x="796" y="494" width="3" height="38" rx="1.5" fill="#f59e0b"/>
+  <text x="810" y="512" font-family="Inter,sans-serif" font-size="14" font-weight="600" fill="#e2e8f0">Bidirectional trust</text>
+  <text x="810" y="528" font-family="Inter,sans-serif" font-size="11.5" fill="#475569">Servers sign responses — clients verify replies too</text>
+
+  <!-- Footer -->
+  <rect x="0" y="608" width="1280" height="32" fill="#04040c"/>
+  <rect x="0" y="608" width="1280" height="1"  fill="#1e293b"/>
+  <text x="62"   y="630" font-family="SF Mono,Consolas,monospace" font-size="12" fill="#334155">github.com/IceMasterT/7h3-protocol</text>
+  <text x="640"  y="630" font-family="SF Mono,Consolas,monospace" font-size="12" fill="#334155" text-anchor="middle">MIT License  ·  wire: 7h3/0.1  ·  Zero runtime deps</text>
+  <text x="1218" y="630" font-family="SF Mono,Consolas,monospace" font-size="12" fill="#334155" text-anchor="end">v0.4.0</text>
+</svg>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@7h3/protocol",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "7h3 Protocol: deterministic, signed, replay-safe AI-to-AI messaging with TypeScript/Python/Rust parity. Wire version 7h3/0.1.",
   "type": "module",
   "license": "MIT",
@@ -15,18 +15,60 @@
       "types": "./dist/protocol/index.d.ts",
       "import": "./dist/protocol/index.js"
     },
-    "./http": { "types": "./dist/protocol/httpBinding.d.ts", "import": "./dist/protocol/httpBinding.js" },
-    "./webhook": { "types": "./dist/protocol/webhookBinding.d.ts", "import": "./dist/protocol/webhookBinding.js" },
-    "./queue": { "types": "./dist/protocol/queueBinding.d.ts", "import": "./dist/protocol/queueBinding.js" },
-    "./ws": { "types": "./dist/protocol/wsBinding.d.ts", "import": "./dist/protocol/wsBinding.js" },
-    "./grpc": { "types": "./dist/protocol/grpcBinding.d.ts", "import": "./dist/protocol/grpcBinding.js" },
-    "./keys": { "types": "./dist/protocol/keyInfra.d.ts", "import": "./dist/protocol/keyInfra.js" },
-    "./key-registry": { "types": "./dist/protocol/keyRegistry.d.ts", "import": "./dist/protocol/keyRegistry.js" },
-    "./gateway": { "types": "./dist/protocol/gateway.d.ts", "import": "./dist/protocol/gateway.js" },
-    "./audit-log": { "types": "./dist/protocol/auditLog.d.ts", "import": "./dist/protocol/auditLog.js" },
-    "./signed-response": { "types": "./dist/protocol/signedResponse.d.ts", "import": "./dist/protocol/signedResponse.js" },
-    "./rate-limiter": { "types": "./dist/protocol/rateLimiter.d.ts", "import": "./dist/protocol/rateLimiter.js" },
-    "./route-policy": { "types": "./dist/protocol/routePolicy.d.ts", "import": "./dist/protocol/routePolicy.js" }
+    "./http": {
+      "types": "./dist/protocol/httpBinding.d.ts",
+      "import": "./dist/protocol/httpBinding.js"
+    },
+    "./webhook": {
+      "types": "./dist/protocol/webhookBinding.d.ts",
+      "import": "./dist/protocol/webhookBinding.js"
+    },
+    "./queue": {
+      "types": "./dist/protocol/queueBinding.d.ts",
+      "import": "./dist/protocol/queueBinding.js"
+    },
+    "./ws": {
+      "types": "./dist/protocol/wsBinding.d.ts",
+      "import": "./dist/protocol/wsBinding.js"
+    },
+    "./grpc": {
+      "types": "./dist/protocol/grpcBinding.d.ts",
+      "import": "./dist/protocol/grpcBinding.js"
+    },
+    "./keys": {
+      "types": "./dist/protocol/keyInfra.d.ts",
+      "import": "./dist/protocol/keyInfra.js"
+    },
+    "./key-registry": {
+      "types": "./dist/protocol/keyRegistry.d.ts",
+      "import": "./dist/protocol/keyRegistry.js"
+    },
+    "./gateway": {
+      "types": "./dist/protocol/gateway.d.ts",
+      "import": "./dist/protocol/gateway.js"
+    },
+    "./audit-log": {
+      "types": "./dist/protocol/auditLog.d.ts",
+      "import": "./dist/protocol/auditLog.js"
+    },
+    "./signed-response": {
+      "types": "./dist/protocol/signedResponse.d.ts",
+      "import": "./dist/protocol/signedResponse.js"
+    },
+    "./rate-limiter": {
+      "types": "./dist/protocol/rateLimiter.d.ts",
+      "import": "./dist/protocol/rateLimiter.js"
+    },
+    "./route-policy": {
+      "types": "./dist/protocol/routePolicy.d.ts",
+      "import": "./dist/protocol/routePolicy.js"
+    },
+    "./encryption": { "types": "./dist/protocol/encryption.d.ts", "import": "./dist/protocol/encryption.js" },
+    "./capability": { "types": "./dist/protocol/capability.d.ts", "import": "./dist/protocol/capability.js" },
+    "./stream": { "types": "./dist/protocol/stream.d.ts", "import": "./dist/protocol/stream.js" },
+    "./telemetry": { "types": "./dist/protocol/telemetry.d.ts", "import": "./dist/protocol/telemetry.js" },
+    "./cbor": { "types": "./dist/protocol/envelopeCbor.d.ts", "import": "./dist/protocol/envelopeCbor.js" },
+    "./replay": { "types": "./dist/protocol/replayStores.d.ts", "import": "./dist/protocol/replayStores.js" }
   },
   "repository": {
     "type": "git",

package/sdk/browser/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@7h3/protocol-browser",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "7h3 Protocol - Browser/Edge SDK. Pure Web Crypto API. Zero dependencies.",
   "type": "module",
   "main": "./index.js",