@7h3/protocol 0.5.0 → 0.5.1

package/CONTRIBUTING.md

@@ -1,82 +0,0 @@
-# Contributing to @7h3/protocol
-
-Thanks for your interest. This document covers how to run tests, submit changes,
-and understand what is and is not open for modification.
-
-## Prerequisites
-
-- Node.js 20+
-- Python 3.10+ (for Python conformance tests)
-- Rust stable toolchain (for Rust conformance tests)
-
-Install Node dependencies:
-
-```bash
-npm install
-```
-
-## Running Tests
-
-**TypeScript unit and integration tests:**
-
-```bash
-npm test
-```
-
-**Cross-runtime conformance tests:**
-
-```bash
-npm run conformance:python   # runs sdk/python/tests via unittest
-npm run conformance:rust     # runs cargo test in sdk/rust/
-```
-
-All three test suites must pass before a PR is mergeable.
-
-## The Wire Version is Frozen
-
-`aip/0.1` is the current wire version, and **it is frozen**. This means:
-
-- The envelope schema (field names, types, required fields) cannot change
-- The canonicalization algorithm cannot change
-- The intent vocabulary (`tool_call`, `tool_result`, `message`, `error`) cannot change
-
-Any change to these would silently break cross-runtime interoperability and
-require a new wire version designation. If you believe a wire-level change is
-necessary, open an issue first to discuss versioning strategy before writing code.
-
-The TypeScript API (types, builder functions, SDK surface) is pre-1.0 and may
-evolve on minor version bumps. Deprecation notices will be included in the
-changelog when possible.
-
-## Conformance Fixtures
-
-The canonical fixture set lives at `conformance/aip_v0_1.json`. If your PR adds
-or changes any signing behavior, canonicalization detail, or replay-safety logic,
-you must update this fixture file with vectors that cover the new behavior.
-
-Fixtures are the source of truth for cross-runtime verification. A PR that
-changes signing logic without updating fixtures will be rejected.
-
-## Submitting a Pull Request
-
-1. Fork the repo and create a branch with a descriptive name
-   (`fix/nonce-validation`, `feat/ed448-profile`, etc.)
-2. Make your changes and ensure all three test suites pass
-3. Update `conformance/aip_v0_1.json` if signing behavior changed
-4. Open a PR against `main` with a clear description of:
-   - What the change does
-   - Why it is needed
-   - Any trade-offs or alternatives you considered
-5. Reference any related issues in the PR description
-
-Keep PRs focused. A single PR that mixes unrelated changes is harder to review
-and slower to land.
-
-## Security Findings
-
-Do not open GitHub Issues for security vulnerabilities. Follow the process in
-[SECURITY.md](SECURITY.md) instead.
-
----
-
-Maintainer: [@IceMasterT](https://github.com/IceMasterT)

package/Dockerfile

@@ -1,73 +0,0 @@
-# ---------------------------------------------------------------------------
-# Stage 1 — builder
-# Install all dependencies (including devDeps for the build step) and
-# compile TypeScript sources.  The compiled output ends up in /app/dist.
-# ---------------------------------------------------------------------------
-FROM node:22-alpine AS builder
-
-WORKDIR /app
-
-# Copy manifests first so Docker can cache the install layer separately
-# from source changes.
-COPY package.json package-lock.json ./
-
-# Install all deps (dev + prod) needed to build
-RUN npm ci --prefer-offline
-
-# Copy the full source tree
-COPY src/ src/
-COPY bin/ bin/
-COPY tsconfig.json tsconfig.lib.json ./
-COPY vite.lib.config.ts ./
-
-# Run the build script if it exists; swallow the error gracefully so that
-# repositories that haven't wired up the build step yet still produce a
-# working image.  The runtime stage uses tsx to execute TypeScript directly,
-# so a missing dist/ is not fatal.
-RUN npm run build:protocol 2>/dev/null || true
-
-# ---------------------------------------------------------------------------
-# Stage 2 — runtime
-# Lean image with only production dependencies.
-# tsx executes TypeScript directly, so we don't strictly need dist/; the
-# builder stage is kept separate to avoid polluting the final image with
-# devDependencies and intermediate build artefacts.
-# ---------------------------------------------------------------------------
-FROM node:22-alpine
-
-# Install tsx globally so the ENTRYPOINT can invoke TypeScript files.
-# Pinning via the package.json range is intentional — renovate will keep
-# this in sync with the devDependency version.
-RUN npm install -g tsx
-
-WORKDIR /app
-
-# Copy manifests for production install
-COPY package.json package-lock.json ./
-
-# Production-only install; omits devDependencies such as vitest and vite
-RUN npm ci --omit=dev --prefer-offline
-
-# Copy the source files required at runtime
-COPY src/ src/
-COPY bin/ bin/
-
-# Copy compiled output from the builder stage (used when tsx is not
-# available or when --no-tsx mode is added in future).
-COPY --from=builder /app/dist/ dist/
-
-# The gateway listens on this port by default.
-EXPOSE 8080
-
-# Lightweight health check: wget is present on node:alpine; curl is not.
-# This probe hits the /health route which, per the example config, is
-# policy-exempt (require: none) and will pass through to the upstream.
-HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
-  CMD wget -qO- http://localhost:8080/health || exit 1
-
-# Run the gateway sub-command of the 7h3 CLI.
-ENTRYPOINT ["tsx", "bin/7h3.ts", "gateway"]
-
-# Default arguments — overridden at runtime via docker-compose environment
-# variables or explicit docker run arguments.
-CMD ["--port", "8080", "--upstream", "http://upstream:3000", "--require", "ed25519"]

package/GOVERNANCE.md

@@ -1,62 +0,0 @@
-# Governance
-
-## Current Stage
-
-This project is in single-maintainer, pre-community stage. There is one
-maintainer ([@IceMasterT](https://github.com/IceMasterT)), no formal governance
-board, and no steering committee. That is appropriate for the project's current
-size and maturity, and it is stated clearly here so contributors know what to
-expect.
-
-## Decision Making
-
-The maintainer makes all final decisions about direction, API shape, release
-timing, and whether to accept a contribution.
-
-For significant changes -- anything that touches the wire format, the
-conformance fixture set, or the project's positioning relative to MCP/A2A --
-the maintainer will open a GitHub Issue before deciding, to give the community
-a window to raise concerns or provide context. That window will be at least
-seven days for non-urgent changes.
-
-Day-to-day decisions (bug fixes, documentation, minor SDK improvements) do not
-require community input first.
-
-## Versioning Policy
-
-The wire version `aip/0.1` is frozen. Interoperating implementations can rely
-on it not changing. A new wire version designation (e.g. `aip/0.2`) would be
-introduced in a new package major version and coexist with `aip/0.1` for a
-migration period.
-
-The TypeScript API is pre-1.0. Minor version bumps may include breaking API
-changes. Breaking changes will be documented in the changelog with migration
-notes. The `1.0.0` release will signal API stability.
-
-The Python and Rust SDKs track the TypeScript wire behavior. Their own version
-numbers are independent of the npm package version.
-
-## Path to Co-Maintainership
-
-There is no automatic path to co-maintainership based on contribution count.
-The relevant factors are:
-
-- Sustained engagement over multiple months
-- Demonstrated familiarity with the threat model (replay attacks, malleability,
-  cross-runtime canonicalization edge cases)
-- Good judgment in the review of other contributors' PRs
-- Willingness to own the security disclosure process
-
-If you are interested, open a conversation in Discussions rather than raising
-it in a PR.
-
-## Standards Body Adoption
-
-If this project is accepted into a standards body or foundation, this governance
-document will be replaced by whatever governance model that body requires.
-Community input will be sought before any such transition.
-
----
-
-Last reviewed: 2026-06-05  
-Maintainer: [@IceMasterT](https://github.com/IceMasterT) / tech@mysms.promo

package/SECURITY.md

@@ -1,70 +0,0 @@
-# Security Policy
-
-## Reporting a Vulnerability
-
-Please do not open a GitHub Issue for security findings. Use coordinated disclosure instead.
-
-**Send private reports to:** tech@mysms.promo  
-**Subject line:** `[AIP Security] <brief description>`
-
-### What to include
-
-A useful report contains:
-
-- A clear description of the vulnerability and which component it affects
-- Steps to reproduce, ideally as a minimal test case or fixture
-- Your assessment of the impact (confidentiality, integrity, availability, scope)
-- The affected versions (check `package.json` version and the wire version `aip/0.1`)
-- Any suggested fix or mitigation you have in mind (optional but appreciated)
-
-Reports that include a conformance vector demonstrating the issue are especially
-helpful and make the triage process faster.
-
-## Response Timeline
-
-| Event | Target |
-|---|---|
-| Acknowledgement | 48 hours |
-| Triage and severity assignment | 5 business days |
-| Patch for critical/high severity | 14 days from confirmation |
-| Patch for medium/low severity | 60 days from confirmation |
-| Public disclosure | After patch is released and verified |
-
-We ask that reporters hold off on public disclosure until a patch is available.
-If the 14-day critical window is going to slip, we will contact you to agree on
-an extended timeline or coordinated partial disclosure.
-
-## Scope
-
-The following are in scope:
-
-- Envelope signing and verification (`src/aip/`)
-- Canonicalization logic and determinism guarantees
-- Replay-safety (nonce and timestamp validation)
-- Wire format parsing in all three runtimes (TypeScript, Python, Rust)
-- Intent vocabulary validation
-
-Out of scope: third-party dependencies (report those upstream), benchmark
-scripts, and documentation typos.
-
-## Audit Status
-
-No independent third-party security audit has been performed on this codebase
-as of the current release. The protocol design has been reviewed by the
-maintainer against known attack classes for signed messaging systems, but that
-is not a substitute for a formal audit. Reproductions of conformance vectors
-that reveal edge-case signing or deserialization behavior are welcome and
-treated as high-value contributions.
-
-## Hall of Thanks
-
-Researchers who report valid, confirmed vulnerabilities will be acknowledged
-here (with their permission).
-
-_No entries yet._
-
----
-
-Maintainer: [@IceMasterT](https://github.com/IceMasterT)  
-Package: `@7h3/protocol`  
-License: MIT

package/bench-results/replay-cache-full-1777891033256.json

@@ -1,10 +0,0 @@
-{
-  "generatedAt": "2026-05-04T10:37:13.242Z",
-  "profile": "full",
-  "iterations": 500000,
-  "batchSize": 128,
-  "singleOpsPerSecond": 2046707.947,
-  "batchOpsPerSecond": 1936866.811,
-  "singleUsPerOp": 0.489,
-  "batchUsPerOp": 0.516
-}

package/bench-results/replay-cache-full-1777896317488.json

@@ -1,10 +0,0 @@
-{
-  "generatedAt": "2026-05-04T12:05:17.474Z",
-  "profile": "full",
-  "iterations": 500000,
-  "batchSize": 128,
-  "singleOpsPerSecond": 2196802.03,
-  "batchOpsPerSecond": 2513299.501,
-  "singleUsPerOp": 0.455,
-  "batchUsPerOp": 0.398
-}

package/bench-results/replay-cache-full-1777900993184.json

@@ -1,10 +0,0 @@
-{
-  "generatedAt": "2026-05-04T13:23:13.169Z",
-  "profile": "full",
-  "iterations": 500000,
-  "batchSize": 128,
-  "singleOpsPerSecond": 1943753.028,
-  "batchOpsPerSecond": 2330929.665,
-  "singleUsPerOp": 0.514,
-  "batchUsPerOp": 0.429
-}

package/bench-results/replay-cache-full-1777901019285.json

@@ -1,10 +0,0 @@
-{
-  "generatedAt": "2026-05-04T13:23:39.285Z",
-  "profile": "full",
-  "iterations": 500000,
-  "batchSize": 128,
-  "singleOpsPerSecond": 1650105.21,
-  "batchOpsPerSecond": 2241347.099,
-  "singleUsPerOp": 0.606,
-  "batchUsPerOp": 0.446
-}

package/bench-results/replay-cache-quick-1777870170126.json

@@ -1,10 +0,0 @@
-{
-  "generatedAt": "2026-05-04T04:49:30.121Z",
-  "profile": "quick",
-  "iterations": 50000,
-  "batchSize": 32,
-  "singleOpsPerSecond": 520177.319,
-  "batchOpsPerSecond": 140227.322,
-  "singleUsPerOp": 1.922,
-  "batchUsPerOp": 7.131
-}

package/bench-results/signature-profiles-quick-1775875160079.json

@@ -1,85 +0,0 @@
-{
-  "generatedAt": "2026-04-11T02:39:20.079Z",
-  "profile": "quick",
-  "iterations": 2000,
-  "payloadSizes": [
-    256,
-    1024,
-    4096,
-    16384
-  ],
-  "results": [
-    {
-      "profile": "quick",
-      "payloadBytes": 256,
-      "algorithm": "HS256",
-      "signUsPerOp": 16.5,
-      "verifyUsPerOp": 14.176,
-      "signOpsPerSecond": 60606.367,
-      "verifyOpsPerSecond": 70539.362
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 256,
-      "algorithm": "ED25519",
-      "signUsPerOp": 45.6,
-      "verifyUsPerOp": 119.231,
-      "signOpsPerSecond": 21929.753,
-      "verifyOpsPerSecond": 8387.068
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 1024,
-      "algorithm": "HS256",
-      "signUsPerOp": 23.745,
-      "verifyUsPerOp": 18.396,
-      "signOpsPerSecond": 42113.324,
-      "verifyOpsPerSecond": 54360.747
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 1024,
-      "algorithm": "ED25519",
-      "signUsPerOp": 51.284,
-      "verifyUsPerOp": 106.092,
-      "signOpsPerSecond": 19499.138,
-      "verifyOpsPerSecond": 9425.777
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 4096,
-      "algorithm": "HS256",
-      "signUsPerOp": 18.235,
-      "verifyUsPerOp": 20.365,
-      "signOpsPerSecond": 54839.636,
-      "verifyOpsPerSecond": 49103.017
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 4096,
-      "algorithm": "ED25519",
-      "signUsPerOp": 53.216,
-      "verifyUsPerOp": 101.756,
-      "signOpsPerSecond": 18791.24,
-      "verifyOpsPerSecond": 9827.469
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 16384,
-      "algorithm": "HS256",
-      "signUsPerOp": 33.59,
-      "verifyUsPerOp": 32.805,
-      "signOpsPerSecond": 29770.829,
-      "verifyOpsPerSecond": 30483.215
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 16384,
-      "algorithm": "ED25519",
-      "signUsPerOp": 96.924,
-      "verifyUsPerOp": 141.141,
-      "signOpsPerSecond": 10317.338,
-      "verifyOpsPerSecond": 7085.133
-    }
-  ]
-}

package/bench-results/signature-profiles-quick-1775983539716.json

@@ -1,85 +0,0 @@
-{
-  "generatedAt": "2026-04-12T08:45:39.716Z",
-  "profile": "quick",
-  "iterations": 2000,
-  "payloadSizes": [
-    256,
-    1024,
-    4096,
-    16384
-  ],
-  "results": [
-    {
-      "profile": "quick",
-      "payloadBytes": 256,
-      "algorithm": "HS256",
-      "signUsPerOp": 17.09,
-      "verifyUsPerOp": 16.676,
-      "signOpsPerSecond": 58514.475,
-      "verifyOpsPerSecond": 59965.552
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 256,
-      "algorithm": "ED25519",
-      "signUsPerOp": 48.942,
-      "verifyUsPerOp": 129.521,
-      "signOpsPerSecond": 20432.528,
-      "verifyOpsPerSecond": 7720.783
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 1024,
-      "algorithm": "HS256",
-      "signUsPerOp": 16.402,
-      "verifyUsPerOp": 13.4,
-      "signOpsPerSecond": 60968.249,
-      "verifyOpsPerSecond": 74629.015
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 1024,
-      "algorithm": "ED25519",
-      "signUsPerOp": 41.484,
-      "verifyUsPerOp": 106.096,
-      "signOpsPerSecond": 24105.829,
-      "verifyOpsPerSecond": 9425.432
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 4096,
-      "algorithm": "HS256",
-      "signUsPerOp": 41.471,
-      "verifyUsPerOp": 21.896,
-      "signOpsPerSecond": 24113.328,
-      "verifyOpsPerSecond": 45669.707
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 4096,
-      "algorithm": "ED25519",
-      "signUsPerOp": 53.73,
-      "verifyUsPerOp": 118.702,
-      "signOpsPerSecond": 18611.446,
-      "verifyOpsPerSecond": 8424.459
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 16384,
-      "algorithm": "HS256",
-      "signUsPerOp": 37.261,
-      "verifyUsPerOp": 39.437,
-      "signOpsPerSecond": 26837.366,
-      "verifyOpsPerSecond": 25356.841
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 16384,
-      "algorithm": "ED25519",
-      "signUsPerOp": 120.929,
-      "verifyUsPerOp": 163.363,
-      "signOpsPerSecond": 8269.337,
-      "verifyOpsPerSecond": 6121.336
-    }
-  ]
-}

package/bench-results/signature-profiles-quick-1776237913190.json

@@ -1,85 +0,0 @@
-{
-  "generatedAt": "2026-04-15T07:25:13.190Z",
-  "profile": "quick",
-  "iterations": 2000,
-  "payloadSizes": [
-    256,
-    1024,
-    4096,
-    16384
-  ],
-  "results": [
-    {
-      "profile": "quick",
-      "payloadBytes": 256,
-      "algorithm": "HS256",
-      "signUsPerOp": 22.028,
-      "verifyUsPerOp": 16.82,
-      "signOpsPerSecond": 45396.554,
-      "verifyOpsPerSecond": 59452.295
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 256,
-      "algorithm": "ED25519",
-      "signUsPerOp": 46.164,
-      "verifyUsPerOp": 103.618,
-      "signOpsPerSecond": 21662.042,
-      "verifyOpsPerSecond": 9650.834
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 1024,
-      "algorithm": "HS256",
-      "signUsPerOp": 12.433,
-      "verifyUsPerOp": 12.785,
-      "signOpsPerSecond": 80430.499,
-      "verifyOpsPerSecond": 78216.853
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 1024,
-      "algorithm": "ED25519",
-      "signUsPerOp": 37.853,
-      "verifyUsPerOp": 98.984,
-      "signOpsPerSecond": 26417.71,
-      "verifyOpsPerSecond": 10102.674
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 4096,
-      "algorithm": "HS256",
-      "signUsPerOp": 31.288,
-      "verifyUsPerOp": 21.144,
-      "signOpsPerSecond": 31961.127,
-      "verifyOpsPerSecond": 47295.763
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 4096,
-      "algorithm": "ED25519",
-      "signUsPerOp": 52.753,
-      "verifyUsPerOp": 108.71,
-      "signOpsPerSecond": 18956.391,
-      "verifyOpsPerSecond": 9198.782
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 16384,
-      "algorithm": "HS256",
-      "signUsPerOp": 36.642,
-      "verifyUsPerOp": 32.576,
-      "signOpsPerSecond": 27290.862,
-      "verifyOpsPerSecond": 30697.597
-    },
-    {
-      "profile": "quick",
-      "payloadBytes": 16384,
-      "algorithm": "ED25519",
-      "signUsPerOp": 93.648,
-      "verifyUsPerOp": 140.267,
-      "signOpsPerSecond": 10678.28,
-      "verifyOpsPerSecond": 7129.262
-    }
-  ]
-}