@7h3/protocol 0.5.0 → 0.5.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (294) hide show
  1. package/README.md +6 -1317
  2. package/agentAdapter.d.ts +26 -0
  3. package/auditLog.d.ts +54 -0
  4. package/capability.d.ts +67 -0
  5. package/cborCodec.d.ts +34 -0
  6. package/conformanceVectors.d.ts +20 -0
  7. package/encryption.d.ts +85 -0
  8. package/envelopeCbor.d.ts +33 -0
  9. package/frameworkAdapters.d.ts +72 -0
  10. package/gateway.d.ts +53 -0
  11. package/grpcBinding.d.ts +29 -0
  12. package/httpBinding.d.ts +50 -0
  13. package/index.d.ts +39 -0
  14. package/index.js +3670 -0
  15. package/keyInfra.d.ts +64 -0
  16. package/keyRegistry.d.ts +9 -0
  17. package/keyRotation.d.ts +20 -0
  18. package/mcpGateway.d.ts +37 -0
  19. package/mcpTransports.d.ts +62 -0
  20. package/mcpWrapper.d.ts +83 -0
  21. package/otel.d.ts +65 -0
  22. package/package.json +13 -121
  23. package/policyEnforcer.d.ts +50 -0
  24. package/policyTelemetryFeedback.d.ts +11 -0
  25. package/{src/protocol.d.ts → protocol.d.ts} +6 -2
  26. package/protocolAgent.d.ts +58 -0
  27. package/protocolBinary.d.ts +8 -0
  28. package/protocolCapabilities.d.ts +24 -0
  29. package/protocolReplay.d.ts +35 -0
  30. package/protocolTransport.d.ts +73 -0
  31. package/queueBinding.d.ts +43 -0
  32. package/rateLimiter.d.ts +18 -0
  33. package/{src/redisClient.ts → redisClient.d.ts} +25 -75
  34. package/replayStores.d.ts +98 -0
  35. package/revocation.d.ts +71 -0
  36. package/routePolicy.d.ts +30 -0
  37. package/runtimePolicy.d.ts +24 -0
  38. package/runtimePolicyManager.d.ts +15 -0
  39. package/runtimePolicyPresets.d.ts +11 -0
  40. package/signedResponse.d.ts +21 -0
  41. package/stream.d.ts +59 -0
  42. package/telemetry.d.ts +79 -0
  43. package/webhookBinding.d.ts +30 -0
  44. package/wsBinding.d.ts +52 -0
  45. package/.dockerignore +0 -19
  46. package/.github/dependabot.yml +0 -32
  47. package/.github/workflows/ci.yml +0 -31
  48. package/.github/workflows/publish.yml +0 -59
  49. package/.github/workflows/scorecard.yml +0 -37
  50. package/7h3.example.yaml +0 -125
  51. package/CHANGELOG.md +0 -152
  52. package/CONTRIBUTING.md +0 -82
  53. package/Dockerfile +0 -73
  54. package/GOVERNANCE.md +0 -62
  55. package/SECURITY.md +0 -70
  56. package/bench-results/replay-cache-full-1777891033256.json +0 -10
  57. package/bench-results/replay-cache-full-1777896317488.json +0 -10
  58. package/bench-results/replay-cache-full-1777900993184.json +0 -10
  59. package/bench-results/replay-cache-full-1777901019285.json +0 -10
  60. package/bench-results/replay-cache-quick-1777870170126.json +0 -10
  61. package/bench-results/signature-profiles-quick-1775875160079.json +0 -85
  62. package/bench-results/signature-profiles-quick-1775983539716.json +0 -85
  63. package/bench-results/signature-profiles-quick-1776237913190.json +0 -85
  64. package/bench-results/wire-codecs-full-1777891019803.json +0 -93
  65. package/bench-results/wire-codecs-full-1777896260964.json +0 -93
  66. package/bench-results/wire-codecs-full-1777901004247.json +0 -93
  67. package/bench-results/wire-codecs-quick-1775972879056.json +0 -93
  68. package/bench-results/wire-codecs-quick-1775983541111.json +0 -93
  69. package/bench-results/wire-codecs-quick-1776237914299.json +0 -93
  70. package/bench-results/wire-codecs-quick-1777841285236.json +0 -93
  71. package/bench-results/wire-codecs-quick-1777841321772.json +0 -93
  72. package/bench-results/wire-codecs-quick-1777841330408.json +0 -93
  73. package/bench-results/wire-codecs-quick-1777852886082.json +0 -93
  74. package/bench-results/wire-codecs-quick-1777852988773.json +0 -93
  75. package/bench-results/wire-codecs-quick-1777870188095.json +0 -93
  76. package/bench-results/wire-codecs-quick-1777870263918.json +0 -93
  77. package/bench-results/wire-codecs-quick-1777870455034.json +0 -93
  78. package/bench-results/wire-codecs-quick-1778816163081.json +0 -93
  79. package/bench-results/wire-codecs-quick-1778843936130.json +0 -93
  80. package/bin/7h3.ts +0 -406
  81. package/conformance/7h3_v0_1.json +0 -77
  82. package/conformance/7h3_v0_1_binary.json +0 -20
  83. package/conformance/aip_v0_1_binary.json +0 -20
  84. package/docker-compose.yaml +0 -77
  85. package/docs/ADOPTION_PLAN.md +0 -120
  86. package/docs/AGENTS.md +0 -77
  87. package/docs/AIP_RFC_v0.1.md +0 -97
  88. package/docs/AI_DECISION_CARD.md +0 -122
  89. package/docs/AI_RUNTIME_POLICY.json +0 -126
  90. package/docs/AI_RUNTIME_POLICY.yaml +0 -110
  91. package/docs/BACKPRESSURE_TUNING.md +0 -65
  92. package/docs/BENCHMARK_CLAIM_MATRIX.md +0 -42
  93. package/docs/BENCHMARK_REPORT_TEMPLATE.md +0 -169
  94. package/docs/BINARY_CODEC_BENCH.md +0 -23
  95. package/docs/CLEAN_CLONE_RUNBOOK.md +0 -36
  96. package/docs/CLOCK_SKEW_POLICY.md +0 -30
  97. package/docs/DISTRIBUTED_REPLAY.md +0 -142
  98. package/docs/FUZZ_CAMPAIGN.md +0 -121
  99. package/docs/GATEWAY.md +0 -195
  100. package/docs/KEY_MANAGEMENT_POLICY.md +0 -53
  101. package/docs/KEY_REVOCATION.md +0 -69
  102. package/docs/MCP_WRAPPER.md +0 -159
  103. package/docs/MIGRATION_GUIDE.md +0 -40
  104. package/docs/OPERATORS.md +0 -184
  105. package/docs/PERF_REGRESSION_POLICY.md +0 -34
  106. package/docs/PROJECT_EXAMINATION_2026-05-31.md +0 -219
  107. package/docs/RELEASE_BENCHMARK_REPORT_2026-05-15.md +0 -135
  108. package/docs/RELEASE_GATE.md +0 -25
  109. package/docs/RELEASE_NOTES_v0.1.0.md +0 -54
  110. package/docs/SECURITY_REVIEW_2026-06-05.md +0 -165
  111. package/docs/TELEMETRY.md +0 -41
  112. package/docs/THREAT_MODEL.md +0 -89
  113. package/docs/VERSIONING_POLICY.md +0 -30
  114. package/docs/assets/banner-github.png +0 -0
  115. package/docs/assets/banner.png +0 -0
  116. package/docs/assets/banner.svg +0 -123
  117. package/eslint.config.js +0 -15
  118. package/fuzz/ts/harness-decode.ts +0 -136
  119. package/fuzz/ts/harness-verify.ts +0 -121
  120. package/fuzz/ts/run.ts +0 -35
  121. package/mcp-server/README.md +0 -38
  122. package/mcp-server/package-lock.json +0 -1187
  123. package/mcp-server/package.json +0 -35
  124. package/mcp-server/src/index.ts +0 -236
  125. package/mcp-server/tsconfig.json +0 -14
  126. package/scripts/aip-framework-quickstart.ts +0 -110
  127. package/scripts/aip-mcp-gateway.ts +0 -38
  128. package/scripts/aip-mcp-wrap-demo.ts +0 -72
  129. package/scripts/aip-quickstart.ts +0 -60
  130. package/scripts/bench-diff.ts +0 -118
  131. package/scripts/bench-protocol-e2e.ts +0 -937
  132. package/scripts/bench-protocol-openloop.ts +0 -1397
  133. package/scripts/bench-replay-cache.ts +0 -76
  134. package/scripts/bench-signature-profiles.ts +0 -180
  135. package/scripts/bench-wire-codecs.ts +0 -161
  136. package/scripts/build-binary-conformance.ts +0 -36
  137. package/scripts/build-release-dashboard.ts +0 -175
  138. package/scripts/canary-rollout.ts +0 -38
  139. package/scripts/mcpGatewayCli.test.ts +0 -116
  140. package/scripts/prepare-aip-package.ts +0 -88
  141. package/scripts/regen-conformance-sigs.ts +0 -18
  142. package/scripts/release-gate.ts +0 -19
  143. package/scripts/validate-runtime-policy.ts +0 -18
  144. package/sdk/browser/index.test.ts +0 -162
  145. package/sdk/browser/index.ts +0 -257
  146. package/sdk/browser/package.json +0 -13
  147. package/sdk/go/cbor.go +0 -551
  148. package/sdk/go/cbor_test.go +0 -232
  149. package/sdk/go/encryption.go +0 -280
  150. package/sdk/go/encryption_test.go +0 -318
  151. package/sdk/go/go.mod +0 -7
  152. package/sdk/go/go.sum +0 -4
  153. package/sdk/go/http.go +0 -135
  154. package/sdk/go/protocol.go +0 -324
  155. package/sdk/go/protocol_test.go +0 -334
  156. package/sdk/go/replay.go +0 -121
  157. package/sdk/go/replay_test.go +0 -149
  158. package/sdk/go/webhook.go +0 -136
  159. package/sdk/pq/package-lock.json +0 -1358
  160. package/sdk/pq/package.json +0 -42
  161. package/sdk/pq/src/index.test.ts +0 -143
  162. package/sdk/pq/src/index.ts +0 -166
  163. package/sdk/pq/tsconfig.json +0 -14
  164. package/sdk/pq/vitest.config.ts +0 -7
  165. package/sdk/python/README.md +0 -18
  166. package/sdk/python/protocol_7h3/__init__.py +0 -46
  167. package/sdk/python/protocol_7h3/encryption.py +0 -252
  168. package/sdk/python/protocol_7h3/http.py +0 -212
  169. package/sdk/python/protocol_7h3/keys.py +0 -149
  170. package/sdk/python/protocol_7h3/pq.py +0 -244
  171. package/sdk/python/protocol_7h3/protocol.py +0 -525
  172. package/sdk/python/protocol_7h3/queue.py +0 -118
  173. package/sdk/python/protocol_7h3/replay.py +0 -98
  174. package/sdk/python/protocol_7h3/webhook.py +0 -116
  175. package/sdk/python/pyproject.toml +0 -40
  176. package/sdk/python/tests/test_conformance.py +0 -110
  177. package/sdk/python/tests/test_encryption.py +0 -206
  178. package/sdk/python/tests/test_http.py +0 -305
  179. package/sdk/python/tests/test_keys.py +0 -417
  180. package/sdk/python/tests/test_queue.py +0 -120
  181. package/sdk/python/tests/test_webhook.py +0 -345
  182. package/sdk/rust/Cargo.lock +0 -371
  183. package/sdk/rust/Cargo.toml +0 -25
  184. package/sdk/rust/README.md +0 -31
  185. package/sdk/rust/fuzz/Cargo.toml +0 -29
  186. package/sdk/rust/fuzz/fuzz_targets/fuzz_canonicalize.rs +0 -46
  187. package/sdk/rust/fuzz/fuzz_targets/fuzz_decode.rs +0 -11
  188. package/sdk/rust/src/bin/aip_mcp_gateway.rs +0 -59
  189. package/sdk/rust/src/http.rs +0 -145
  190. package/sdk/rust/src/keys.rs +0 -161
  191. package/sdk/rust/src/lib.rs +0 -688
  192. package/sdk/rust/src/queue.rs +0 -79
  193. package/sdk/rust/src/webhook.rs +0 -86
  194. package/sdk/rust/tests/conformance.rs +0 -148
  195. package/sdk/rust/tests/gateway.rs +0 -130
  196. package/sdk/rust/tests/http_webhook_queue.rs +0 -201
  197. package/sdk/rust/tests/keys.rs +0 -189
  198. package/sdk/threshold/index.d.ts +0 -68
  199. package/sdk/threshold/index.d.ts.map +0 -1
  200. package/sdk/threshold/index.js +0 -254
  201. package/sdk/threshold/package-lock.json +0 -1361
  202. package/sdk/threshold/package.json +0 -39
  203. package/sdk/threshold/src/index.d.ts +0 -68
  204. package/sdk/threshold/src/index.d.ts.map +0 -1
  205. package/sdk/threshold/src/index.js +0 -254
  206. package/sdk/threshold/src/index.test.ts +0 -238
  207. package/sdk/threshold/src/index.ts +0 -355
  208. package/sdk/threshold/tsconfig.json +0 -19
  209. package/sdk/threshold/vitest.config.ts +0 -12
  210. package/src/agentAdapter.test.ts +0 -48
  211. package/src/agentAdapter.ts +0 -56
  212. package/src/auditLog.test.ts +0 -145
  213. package/src/auditLog.ts +0 -147
  214. package/src/capability.test.ts +0 -504
  215. package/src/capability.ts +0 -380
  216. package/src/cborCodec.test.ts +0 -263
  217. package/src/cborCodec.ts +0 -339
  218. package/src/conformance.test.ts +0 -136
  219. package/src/conformanceVectors.ts +0 -99
  220. package/src/encryption.test.ts +0 -206
  221. package/src/encryption.ts +0 -245
  222. package/src/envelopeCbor.ts +0 -140
  223. package/src/frameworkAdapters.test.ts +0 -290
  224. package/src/frameworkAdapters.ts +0 -261
  225. package/src/gateway.test.ts +0 -343
  226. package/src/gateway.ts +0 -246
  227. package/src/grpcBinding.test.ts +0 -211
  228. package/src/grpcBinding.ts +0 -103
  229. package/src/httpBinding.test.ts +0 -376
  230. package/src/httpBinding.ts +0 -189
  231. package/src/index.ts +0 -39
  232. package/src/keyInfra.test.ts +0 -278
  233. package/src/keyInfra.ts +0 -228
  234. package/src/keyRegistry.ts +0 -59
  235. package/src/keyRotation.test.ts +0 -78
  236. package/src/keyRotation.ts +0 -72
  237. package/src/mcpGateway.test.ts +0 -129
  238. package/src/mcpGateway.ts +0 -250
  239. package/src/mcpTransports.test.ts +0 -92
  240. package/src/mcpTransports.ts +0 -169
  241. package/src/mcpWrapper.test.ts +0 -179
  242. package/src/mcpWrapper.ts +0 -206
  243. package/src/otel.ts +0 -136
  244. package/src/policyEnforcer.test.ts +0 -99
  245. package/src/policyEnforcer.ts +0 -169
  246. package/src/policyTelemetryFeedback.test.ts +0 -25
  247. package/src/policyTelemetryFeedback.ts +0 -38
  248. package/src/protocol.bench.ts +0 -37
  249. package/src/protocol.d.ts.map +0 -1
  250. package/src/protocol.js +0 -294
  251. package/src/protocol.test.ts +0 -155
  252. package/src/protocol.ts +0 -414
  253. package/src/protocolAgent.test.ts +0 -105
  254. package/src/protocolAgent.ts +0 -169
  255. package/src/protocolBinary.test.ts +0 -165
  256. package/src/protocolBinary.ts +0 -312
  257. package/src/protocolCapabilities.ts +0 -70
  258. package/src/protocolFuzz.advanced.test.ts +0 -235
  259. package/src/protocolFuzz.test.ts +0 -111
  260. package/src/protocolNegative.test.ts +0 -97
  261. package/src/protocolReplay.test.ts +0 -71
  262. package/src/protocolReplay.ts +0 -194
  263. package/src/protocolTransport.test.ts +0 -556
  264. package/src/protocolTransport.ts +0 -483
  265. package/src/queueBinding.test.ts +0 -130
  266. package/src/queueBinding.ts +0 -102
  267. package/src/rateLimiter.test.ts +0 -96
  268. package/src/rateLimiter.ts +0 -46
  269. package/src/redisIntegration.test.ts +0 -134
  270. package/src/replayStores.test.ts +0 -273
  271. package/src/replayStores.ts +0 -215
  272. package/src/revocation.test.ts +0 -98
  273. package/src/revocation.ts +0 -0
  274. package/src/routePolicy.test.ts +0 -87
  275. package/src/routePolicy.ts +0 -72
  276. package/src/runtimePolicy.test.ts +0 -49
  277. package/src/runtimePolicy.ts +0 -81
  278. package/src/runtimePolicyManager.test.ts +0 -29
  279. package/src/runtimePolicyManager.ts +0 -50
  280. package/src/runtimePolicyPresets.ts +0 -43
  281. package/src/signedResponse.test.ts +0 -111
  282. package/src/signedResponse.ts +0 -83
  283. package/src/stream.test.ts +0 -254
  284. package/src/stream.ts +0 -417
  285. package/src/telemetry.test.ts +0 -251
  286. package/src/telemetry.ts +0 -299
  287. package/src/webhookBinding.test.ts +0 -144
  288. package/src/webhookBinding.ts +0 -115
  289. package/src/wsBinding.test.ts +0 -221
  290. package/src/wsBinding.ts +0 -200
  291. package/tsconfig.json +0 -15
  292. package/tsconfig.lib.json +0 -23
  293. package/vite.lib.config.ts +0 -16
  294. package/vitest.config.ts +0 -11
@@ -1,290 +0,0 @@
1
- import { describe, expect, it } from 'vitest'
2
- import { createAipAgentAdapter } from './agentAdapter'
3
- import type { WireEnvelope } from './protocolTransport'
4
- import {
5
- createRawTaskFromJsonRpc,
6
- createRawTaskFromLangChain,
7
- createRawTaskFromLlamaIndex,
8
- toJsonRpcResponse,
9
- toLangChainMessage,
10
- toLlamaIndexMessage,
11
- type JsonRpcRequestLike,
12
- } from './frameworkAdapters'
13
-
14
- describe('framework adapters', () => {
15
- const secret = 'framework-adapter-secret'
16
-
17
- it('maps LangChain-style message into signed TASK flow', async () => {
18
- const orchestrator = createAipAgentAdapter({
19
- agentId: 'agent.orchestrator',
20
- outboundSecret: secret,
21
- sharedSecrets: { 'agent.worker': secret },
22
- wireFormat: 'compact',
23
- })
24
-
25
- const worker = createAipAgentAdapter({
26
- agentId: 'agent.worker',
27
- outboundSecret: secret,
28
- sharedSecrets: { 'agent.orchestrator': secret },
29
- wireFormat: 'compact',
30
- onTask: async (envelope) => ({
31
- intent: 'RESULT',
32
- content: `done:${envelope.body.content}`,
33
- capability: envelope.body.capability,
34
- }),
35
- })
36
-
37
- const raw = await createRawTaskFromLangChain(
38
- orchestrator,
39
- { content: 'plan travel graph', name: 'human' },
40
- { recipient: 'agent.worker', capability: 'task.plan' },
41
- )
42
-
43
- let rawResponse: WireEnvelope = ''
44
- await worker.handleRaw(raw, async (responseRaw) => {
45
- rawResponse = responseRaw
46
- })
47
-
48
- const verified = await orchestrator.receiveRaw(rawResponse)
49
- expect(verified.ok).toBe(true)
50
- expect(verified.received).not.toBeNull()
51
- const langchainMsg = toLangChainMessage(verified.received!)
52
- expect(langchainMsg.content).toContain('done:plan travel graph')
53
- expect(langchainMsg.additionalKwargs?.capability).toBe('task.plan')
54
- })
55
-
56
- it('maps LlamaIndex-style message into signed TASK flow', async () => {
57
- const orchestrator = createAipAgentAdapter({
58
- agentId: 'agent.orchestrator',
59
- outboundSecret: secret,
60
- sharedSecrets: { 'agent.worker': secret },
61
- wireFormat: 'compact',
62
- })
63
-
64
- const worker = createAipAgentAdapter({
65
- agentId: 'agent.worker',
66
- outboundSecret: secret,
67
- sharedSecrets: { 'agent.orchestrator': secret },
68
- wireFormat: 'compact',
69
- onTask: async (envelope) => ({
70
- intent: 'RESULT',
71
- content: envelope.body.content.toUpperCase(),
72
- capability: envelope.body.capability,
73
- }),
74
- })
75
-
76
- const raw = await createRawTaskFromLlamaIndex(
77
- orchestrator,
78
- { role: 'user', content: 'summarize logs' },
79
- { recipient: 'agent.worker', capability: 'task.summarize' },
80
- )
81
-
82
- let rawResponse: WireEnvelope = ''
83
- await worker.handleRaw(raw, async (responseRaw) => {
84
- rawResponse = responseRaw
85
- })
86
-
87
- const verified = await orchestrator.receiveRaw(rawResponse)
88
- expect(verified.ok).toBe(true)
89
- expect(verified.received).not.toBeNull()
90
- const llamaMsg = toLlamaIndexMessage(verified.received!)
91
- expect(llamaMsg.role).toBe('assistant')
92
- expect(llamaMsg.content).toBe('SUMMARIZE LOGS')
93
- expect(llamaMsg.additionalKwargs?.capability).toBe('task.summarize')
94
- })
95
-
96
- it('maps JSON-RPC request/response through TASK and RESULT envelopes', async () => {
97
- const orchestrator = createAipAgentAdapter({
98
- agentId: 'agent.gateway',
99
- outboundSecret: secret,
100
- sharedSecrets: { 'agent.mcp-worker': secret },
101
- wireFormat: 'compact',
102
- })
103
-
104
- const worker = createAipAgentAdapter({
105
- agentId: 'agent.mcp-worker',
106
- outboundSecret: secret,
107
- sharedSecrets: { 'agent.gateway': secret },
108
- wireFormat: 'compact',
109
- onTask: async (envelope) => ({
110
- intent: 'RESULT',
111
- content: JSON.stringify({ ok: true, receivedCapability: envelope.body.capability }),
112
- capability: envelope.body.capability,
113
- }),
114
- })
115
-
116
- const req: JsonRpcRequestLike = {
117
- jsonrpc: '2.0',
118
- id: 7,
119
- method: 'tools/call',
120
- params: { name: 'planner', input: 'optimize route' },
121
- }
122
-
123
- const raw = await createRawTaskFromJsonRpc(orchestrator, req, { recipient: 'agent.mcp-worker' })
124
-
125
- let rawResponse: WireEnvelope = ''
126
- await worker.handleRaw(raw, async (responseRaw) => {
127
- rawResponse = responseRaw
128
- })
129
-
130
- const verified = await orchestrator.receiveRaw(rawResponse)
131
- expect(verified.ok).toBe(true)
132
- expect(verified.received).not.toBeNull()
133
-
134
- const mcpResponse = toJsonRpcResponse(verified.received!, req.id)
135
- expect(mcpResponse.jsonrpc).toBe('2.0')
136
- expect(mcpResponse.id).toBe(7)
137
- expect(mcpResponse.error).toBeUndefined()
138
- expect(mcpResponse.result).toEqual({ ok: true, receivedCapability: 'mcp.tools/call' })
139
- })
140
-
141
- it('rejects disallowed JSON-RPC methods before sending', async () => {
142
- const orchestrator = createAipAgentAdapter({
143
- agentId: 'agent.gateway',
144
- outboundSecret: secret,
145
- sharedSecrets: { 'agent.mcp-worker': secret },
146
- wireFormat: 'compact',
147
- })
148
-
149
- const req: JsonRpcRequestLike = {
150
- jsonrpc: '2.0',
151
- id: 'abc',
152
- method: 'tools/secret-call',
153
- params: {},
154
- }
155
-
156
- await expect(
157
- createRawTaskFromJsonRpc(orchestrator, req, {
158
- recipient: 'agent.mcp-worker',
159
- allowedMethods: ['tools/call', 'resources/read'],
160
- }),
161
- ).rejects.toThrow("JSON-RPC method 'tools/secret-call' is not allowed")
162
- })
163
-
164
- it('rejects unauthorized JSON-RPC methods before sending', async () => {
165
- const orchestrator = createAipAgentAdapter({
166
- agentId: 'agent.gateway',
167
- outboundSecret: secret,
168
- sharedSecrets: { 'agent.mcp-worker': secret },
169
- wireFormat: 'compact',
170
- })
171
-
172
- const req: JsonRpcRequestLike = {
173
- jsonrpc: '2.0',
174
- id: 'auth-1',
175
- method: 'tools/call',
176
- params: { name: 'planner' },
177
- }
178
-
179
- await expect(
180
- createRawTaskFromJsonRpc(orchestrator, req, {
181
- recipient: 'agent.mcp-worker',
182
- authorizeMethod: async () => false,
183
- }),
184
- ).rejects.toThrow("JSON-RPC method 'tools/call' is not authorized")
185
- })
186
-
187
- it('rejects rate-limited JSON-RPC methods before sending', async () => {
188
- const orchestrator = createAipAgentAdapter({
189
- agentId: 'agent.gateway',
190
- outboundSecret: secret,
191
- sharedSecrets: { 'agent.mcp-worker': secret },
192
- wireFormat: 'compact',
193
- })
194
-
195
- const req: JsonRpcRequestLike = {
196
- jsonrpc: '2.0',
197
- id: 'rate-1',
198
- method: 'tools/call',
199
- params: { name: 'planner' },
200
- }
201
-
202
- await expect(
203
- createRawTaskFromJsonRpc(orchestrator, req, {
204
- recipient: 'agent.mcp-worker',
205
- rateLimiter: {
206
- consume: async () => false,
207
- },
208
- }),
209
- ).rejects.toThrow("JSON-RPC method 'tools/call' is rate-limited")
210
- })
211
-
212
- it('passes capability context into policy hooks', async () => {
213
- const orchestrator = createAipAgentAdapter({
214
- agentId: 'agent.gateway',
215
- outboundSecret: secret,
216
- sharedSecrets: { 'agent.mcp-worker': secret },
217
- wireFormat: 'compact',
218
- })
219
-
220
- const req: JsonRpcRequestLike = {
221
- jsonrpc: '2.0',
222
- id: 'ctx-1',
223
- method: 'tools/call',
224
- params: { name: 'planner' },
225
- }
226
-
227
- let authCapability = ''
228
- let rateKey = ''
229
- const raw = await createRawTaskFromJsonRpc(orchestrator, req, {
230
- recipient: 'agent.mcp-worker',
231
- methodToCapability: (method) => `custom.${method}`,
232
- authorizeMethod: async (_request, context) => {
233
- authCapability = context.capability
234
- return true
235
- },
236
- rateLimitKey: (_request, context) => `${context.capability}:${context.correlationId}`,
237
- rateLimiter: {
238
- consume: async (key) => {
239
- rateKey = key
240
- return true
241
- },
242
- },
243
- })
244
-
245
- expect(raw.length).toBeGreaterThan(0)
246
- expect(authCapability).toBe('custom.tools/call')
247
- expect(rateKey).toBe('custom.tools/call:ctx-1')
248
- })
249
-
250
- it('emits policy events for allow and deny decisions', async () => {
251
- const orchestrator = createAipAgentAdapter({
252
- agentId: 'agent.gateway',
253
- outboundSecret: secret,
254
- sharedSecrets: { 'agent.mcp-worker': secret },
255
- wireFormat: 'compact',
256
- })
257
-
258
- const req: JsonRpcRequestLike = {
259
- jsonrpc: '2.0',
260
- id: 'evt-1',
261
- method: 'tools/call',
262
- params: {},
263
- }
264
-
265
- const events: string[] = []
266
- await createRawTaskFromJsonRpc(orchestrator, req, {
267
- recipient: 'agent.mcp-worker',
268
- allowedMethods: ['tools/call'],
269
- authorizeMethod: async () => true,
270
- onPolicyEvent: async (event) => {
271
- events.push(`${event.stage}:${event.decision}`)
272
- },
273
- })
274
-
275
- expect(events).toContain('allowlist:allow')
276
- expect(events).toContain('authorize:allow')
277
-
278
- await expect(
279
- createRawTaskFromJsonRpc(orchestrator, { ...req, id: 'evt-2', method: 'resources/read' }, {
280
- recipient: 'agent.mcp-worker',
281
- allowedMethods: ['tools/call'],
282
- onPolicyEvent: async (event) => {
283
- events.push(`${event.stage}:${event.decision}`)
284
- },
285
- }),
286
- ).rejects.toThrow("JSON-RPC method 'resources/read' is not allowed")
287
-
288
- expect(events).toContain('allowlist:deny')
289
- })
290
- })
@@ -1,261 +0,0 @@
1
- import { type AipAgentAdapter } from './agentAdapter'
2
- import { type ProtocolEnvelope } from './protocol'
3
- import { type WireEnvelope } from './protocolTransport'
4
-
5
- export interface LangChainMessageLike {
6
- content: string
7
- name?: string
8
- additionalKwargs?: Record<string, unknown>
9
- }
10
-
11
- export interface LlamaIndexMessageLike {
12
- role: 'user' | 'assistant' | 'system'
13
- content: string
14
- additionalKwargs?: Record<string, unknown>
15
- }
16
-
17
- export interface JsonRpcError {
18
- code: number
19
- message: string
20
- data?: unknown
21
- }
22
-
23
- export interface JsonRpcRequestLike {
24
- jsonrpc: '2.0'
25
- id: string | number
26
- method: string
27
- params?: unknown
28
- }
29
-
30
- export interface JsonRpcResponseLike {
31
- jsonrpc: '2.0'
32
- id: string | number
33
- result?: unknown
34
- error?: JsonRpcError
35
- }
36
-
37
- export interface JsonRpcBridgeOptions {
38
- recipient?: string
39
- allowedMethods?: readonly string[]
40
- methodToCapability?: (method: string) => string
41
- authorizeMethod?: (request: JsonRpcRequestLike, context: JsonRpcPolicyContext) => boolean | Promise<boolean>
42
- rateLimitKey?: (request: JsonRpcRequestLike, context: JsonRpcPolicyContext) => string
43
- rateLimiter?: {
44
- consume: (key: string, request: JsonRpcRequestLike, context: JsonRpcPolicyContext) => boolean | Promise<boolean>
45
- }
46
- onPolicyEvent?: (event: JsonRpcPolicyEvent) => void | Promise<void>
47
- }
48
-
49
- export interface JsonRpcPolicyContext {
50
- intent: 'TASK'
51
- recipient?: string
52
- capability: string
53
- correlationId: string
54
- createdAtMs: number
55
- }
56
-
57
- export interface JsonRpcPolicyEvent {
58
- stage: 'allowlist' | 'authorize' | 'rateLimit'
59
- decision: 'allow' | 'deny'
60
- method: string
61
- context: JsonRpcPolicyContext
62
- reason?: string
63
- }
64
-
65
- export interface JsonRpcResponseOptions {
66
- defaultErrorCode?: number
67
- }
68
-
69
- export async function createRawTaskFromLangChain(
70
- adapter: AipAgentAdapter,
71
- message: LangChainMessageLike,
72
- options: { recipient?: string; capability?: string; correlationId?: string } = {},
73
- ): Promise<WireEnvelope> {
74
- return adapter.createRawIntent({
75
- recipient: options.recipient,
76
- intent: 'TASK',
77
- content: message.content,
78
- capability: options.capability,
79
- correlationId: options.correlationId,
80
- })
81
- }
82
-
83
- export function toLangChainMessage(envelope: ProtocolEnvelope): LangChainMessageLike {
84
- return {
85
- content: envelope.body.content,
86
- name: envelope.body.intent,
87
- additionalKwargs: {
88
- capability: envelope.body.capability,
89
- correlationId: envelope.body.correlationId,
90
- sender: envelope.header.sender,
91
- recipient: envelope.header.recipient,
92
- messageId: envelope.header.messageId,
93
- timestampMs: envelope.header.timestampMs,
94
- },
95
- }
96
- }
97
-
98
- export async function createRawTaskFromLlamaIndex(
99
- adapter: AipAgentAdapter,
100
- message: LlamaIndexMessageLike,
101
- options: { recipient?: string; capability?: string; correlationId?: string } = {},
102
- ): Promise<WireEnvelope> {
103
- return adapter.createRawIntent({
104
- recipient: options.recipient,
105
- intent: 'TASK',
106
- content: message.content,
107
- capability: options.capability,
108
- correlationId: options.correlationId,
109
- })
110
- }
111
-
112
- export function toLlamaIndexMessage(envelope: ProtocolEnvelope): LlamaIndexMessageLike {
113
- const role: LlamaIndexMessageLike['role'] = envelope.body.intent === 'TASK' ? 'user' : 'assistant'
114
- return {
115
- role,
116
- content: envelope.body.content,
117
- additionalKwargs: {
118
- intent: envelope.body.intent,
119
- capability: envelope.body.capability,
120
- correlationId: envelope.body.correlationId,
121
- sender: envelope.header.sender,
122
- recipient: envelope.header.recipient,
123
- },
124
- }
125
- }
126
-
127
- function createMcpCapability(method: string): string {
128
- return `mcp.${method}`
129
- }
130
-
131
- export async function createRawTaskFromJsonRpc(
132
- adapter: AipAgentAdapter,
133
- request: JsonRpcRequestLike,
134
- options: JsonRpcBridgeOptions = {},
135
- ): Promise<WireEnvelope> {
136
- async function emitPolicyEvent(event: JsonRpcPolicyEvent): Promise<void> {
137
- if (options.onPolicyEvent) await options.onPolicyEvent(event)
138
- }
139
-
140
- if (options.allowedMethods && !options.allowedMethods.includes(request.method)) {
141
- const capability = options.methodToCapability
142
- ? options.methodToCapability(request.method)
143
- : createMcpCapability(request.method)
144
- const blockedContext: JsonRpcPolicyContext = {
145
- intent: 'TASK',
146
- recipient: options.recipient,
147
- capability,
148
- correlationId: String(request.id),
149
- createdAtMs: Date.now(),
150
- }
151
- await emitPolicyEvent({
152
- stage: 'allowlist',
153
- decision: 'deny',
154
- method: request.method,
155
- context: blockedContext,
156
- reason: 'method_not_allowed',
157
- })
158
- throw new Error(`JSON-RPC method '${request.method}' is not allowed`)
159
- }
160
-
161
- const capability = options.methodToCapability
162
- ? options.methodToCapability(request.method)
163
- : createMcpCapability(request.method)
164
- const context: JsonRpcPolicyContext = {
165
- intent: 'TASK',
166
- recipient: options.recipient,
167
- capability,
168
- correlationId: String(request.id),
169
- createdAtMs: Date.now(),
170
- }
171
-
172
- await emitPolicyEvent({
173
- stage: 'allowlist',
174
- decision: 'allow',
175
- method: request.method,
176
- context,
177
- })
178
-
179
- if (options.authorizeMethod) {
180
- const authorized = await options.authorizeMethod(request, context)
181
- if (!authorized) {
182
- await emitPolicyEvent({
183
- stage: 'authorize',
184
- decision: 'deny',
185
- method: request.method,
186
- context,
187
- reason: 'not_authorized',
188
- })
189
- throw new Error(`JSON-RPC method '${request.method}' is not authorized`)
190
- }
191
- await emitPolicyEvent({
192
- stage: 'authorize',
193
- decision: 'allow',
194
- method: request.method,
195
- context,
196
- })
197
- }
198
-
199
- if (options.rateLimiter) {
200
- const key = options.rateLimitKey ? options.rateLimitKey(request, context) : request.method
201
- const allowed = await options.rateLimiter.consume(key, request, context)
202
- if (!allowed) {
203
- await emitPolicyEvent({
204
- stage: 'rateLimit',
205
- decision: 'deny',
206
- method: request.method,
207
- context,
208
- reason: 'rate_limited',
209
- })
210
- throw new Error(`JSON-RPC method '${request.method}' is rate-limited`)
211
- }
212
- await emitPolicyEvent({
213
- stage: 'rateLimit',
214
- decision: 'allow',
215
- method: request.method,
216
- context,
217
- })
218
- }
219
-
220
- return adapter.createRawIntent({
221
- recipient: options.recipient,
222
- intent: 'TASK',
223
- capability,
224
- correlationId: String(request.id),
225
- content: JSON.stringify({ method: request.method, params: request.params ?? null }),
226
- })
227
- }
228
-
229
- export function toJsonRpcResponse(
230
- envelope: ProtocolEnvelope,
231
- id: string | number,
232
- options: JsonRpcResponseOptions = {},
233
- ): JsonRpcResponseLike {
234
- if (envelope.body.intent === 'ERROR') {
235
- return {
236
- jsonrpc: '2.0',
237
- id,
238
- error: {
239
- code: options.defaultErrorCode ?? -32000,
240
- message: envelope.body.content,
241
- data: {
242
- capability: envelope.body.capability,
243
- correlationId: envelope.body.correlationId,
244
- },
245
- },
246
- }
247
- }
248
-
249
- let result: unknown = envelope.body.content
250
- try {
251
- result = JSON.parse(envelope.body.content)
252
- } catch {
253
- result = envelope.body.content
254
- }
255
-
256
- return {
257
- jsonrpc: '2.0',
258
- id,
259
- result,
260
- }
261
- }