@7h3/protocol 0.5.0 → 0.5.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -1317
- package/agentAdapter.d.ts +26 -0
- package/auditLog.d.ts +54 -0
- package/capability.d.ts +67 -0
- package/cborCodec.d.ts +34 -0
- package/conformanceVectors.d.ts +20 -0
- package/encryption.d.ts +85 -0
- package/envelopeCbor.d.ts +33 -0
- package/frameworkAdapters.d.ts +72 -0
- package/gateway.d.ts +53 -0
- package/grpcBinding.d.ts +29 -0
- package/httpBinding.d.ts +50 -0
- package/index.d.ts +39 -0
- package/index.js +3670 -0
- package/keyInfra.d.ts +64 -0
- package/keyRegistry.d.ts +9 -0
- package/keyRotation.d.ts +20 -0
- package/mcpGateway.d.ts +37 -0
- package/mcpTransports.d.ts +62 -0
- package/mcpWrapper.d.ts +83 -0
- package/otel.d.ts +65 -0
- package/package.json +13 -121
- package/policyEnforcer.d.ts +50 -0
- package/policyTelemetryFeedback.d.ts +11 -0
- package/{src/protocol.d.ts → protocol.d.ts} +6 -2
- package/protocolAgent.d.ts +58 -0
- package/protocolBinary.d.ts +8 -0
- package/protocolCapabilities.d.ts +24 -0
- package/protocolReplay.d.ts +35 -0
- package/protocolTransport.d.ts +73 -0
- package/queueBinding.d.ts +43 -0
- package/rateLimiter.d.ts +18 -0
- package/{src/redisClient.ts → redisClient.d.ts} +25 -75
- package/replayStores.d.ts +98 -0
- package/revocation.d.ts +71 -0
- package/routePolicy.d.ts +30 -0
- package/runtimePolicy.d.ts +24 -0
- package/runtimePolicyManager.d.ts +15 -0
- package/runtimePolicyPresets.d.ts +11 -0
- package/signedResponse.d.ts +21 -0
- package/stream.d.ts +59 -0
- package/telemetry.d.ts +79 -0
- package/webhookBinding.d.ts +30 -0
- package/wsBinding.d.ts +52 -0
- package/.dockerignore +0 -19
- package/.github/dependabot.yml +0 -32
- package/.github/workflows/ci.yml +0 -31
- package/.github/workflows/publish.yml +0 -59
- package/.github/workflows/scorecard.yml +0 -37
- package/7h3.example.yaml +0 -125
- package/CHANGELOG.md +0 -152
- package/CONTRIBUTING.md +0 -82
- package/Dockerfile +0 -73
- package/GOVERNANCE.md +0 -62
- package/SECURITY.md +0 -70
- package/bench-results/replay-cache-full-1777891033256.json +0 -10
- package/bench-results/replay-cache-full-1777896317488.json +0 -10
- package/bench-results/replay-cache-full-1777900993184.json +0 -10
- package/bench-results/replay-cache-full-1777901019285.json +0 -10
- package/bench-results/replay-cache-quick-1777870170126.json +0 -10
- package/bench-results/signature-profiles-quick-1775875160079.json +0 -85
- package/bench-results/signature-profiles-quick-1775983539716.json +0 -85
- package/bench-results/signature-profiles-quick-1776237913190.json +0 -85
- package/bench-results/wire-codecs-full-1777891019803.json +0 -93
- package/bench-results/wire-codecs-full-1777896260964.json +0 -93
- package/bench-results/wire-codecs-full-1777901004247.json +0 -93
- package/bench-results/wire-codecs-quick-1775972879056.json +0 -93
- package/bench-results/wire-codecs-quick-1775983541111.json +0 -93
- package/bench-results/wire-codecs-quick-1776237914299.json +0 -93
- package/bench-results/wire-codecs-quick-1777841285236.json +0 -93
- package/bench-results/wire-codecs-quick-1777841321772.json +0 -93
- package/bench-results/wire-codecs-quick-1777841330408.json +0 -93
- package/bench-results/wire-codecs-quick-1777852886082.json +0 -93
- package/bench-results/wire-codecs-quick-1777852988773.json +0 -93
- package/bench-results/wire-codecs-quick-1777870188095.json +0 -93
- package/bench-results/wire-codecs-quick-1777870263918.json +0 -93
- package/bench-results/wire-codecs-quick-1777870455034.json +0 -93
- package/bench-results/wire-codecs-quick-1778816163081.json +0 -93
- package/bench-results/wire-codecs-quick-1778843936130.json +0 -93
- package/bin/7h3.ts +0 -406
- package/conformance/7h3_v0_1.json +0 -77
- package/conformance/7h3_v0_1_binary.json +0 -20
- package/conformance/aip_v0_1_binary.json +0 -20
- package/docker-compose.yaml +0 -77
- package/docs/ADOPTION_PLAN.md +0 -120
- package/docs/AGENTS.md +0 -77
- package/docs/AIP_RFC_v0.1.md +0 -97
- package/docs/AI_DECISION_CARD.md +0 -122
- package/docs/AI_RUNTIME_POLICY.json +0 -126
- package/docs/AI_RUNTIME_POLICY.yaml +0 -110
- package/docs/BACKPRESSURE_TUNING.md +0 -65
- package/docs/BENCHMARK_CLAIM_MATRIX.md +0 -42
- package/docs/BENCHMARK_REPORT_TEMPLATE.md +0 -169
- package/docs/BINARY_CODEC_BENCH.md +0 -23
- package/docs/CLEAN_CLONE_RUNBOOK.md +0 -36
- package/docs/CLOCK_SKEW_POLICY.md +0 -30
- package/docs/DISTRIBUTED_REPLAY.md +0 -142
- package/docs/FUZZ_CAMPAIGN.md +0 -121
- package/docs/GATEWAY.md +0 -195
- package/docs/KEY_MANAGEMENT_POLICY.md +0 -53
- package/docs/KEY_REVOCATION.md +0 -69
- package/docs/MCP_WRAPPER.md +0 -159
- package/docs/MIGRATION_GUIDE.md +0 -40
- package/docs/OPERATORS.md +0 -184
- package/docs/PERF_REGRESSION_POLICY.md +0 -34
- package/docs/PROJECT_EXAMINATION_2026-05-31.md +0 -219
- package/docs/RELEASE_BENCHMARK_REPORT_2026-05-15.md +0 -135
- package/docs/RELEASE_GATE.md +0 -25
- package/docs/RELEASE_NOTES_v0.1.0.md +0 -54
- package/docs/SECURITY_REVIEW_2026-06-05.md +0 -165
- package/docs/TELEMETRY.md +0 -41
- package/docs/THREAT_MODEL.md +0 -89
- package/docs/VERSIONING_POLICY.md +0 -30
- package/docs/assets/banner-github.png +0 -0
- package/docs/assets/banner.png +0 -0
- package/docs/assets/banner.svg +0 -123
- package/eslint.config.js +0 -15
- package/fuzz/ts/harness-decode.ts +0 -136
- package/fuzz/ts/harness-verify.ts +0 -121
- package/fuzz/ts/run.ts +0 -35
- package/mcp-server/README.md +0 -38
- package/mcp-server/package-lock.json +0 -1187
- package/mcp-server/package.json +0 -35
- package/mcp-server/src/index.ts +0 -236
- package/mcp-server/tsconfig.json +0 -14
- package/scripts/aip-framework-quickstart.ts +0 -110
- package/scripts/aip-mcp-gateway.ts +0 -38
- package/scripts/aip-mcp-wrap-demo.ts +0 -72
- package/scripts/aip-quickstart.ts +0 -60
- package/scripts/bench-diff.ts +0 -118
- package/scripts/bench-protocol-e2e.ts +0 -937
- package/scripts/bench-protocol-openloop.ts +0 -1397
- package/scripts/bench-replay-cache.ts +0 -76
- package/scripts/bench-signature-profiles.ts +0 -180
- package/scripts/bench-wire-codecs.ts +0 -161
- package/scripts/build-binary-conformance.ts +0 -36
- package/scripts/build-release-dashboard.ts +0 -175
- package/scripts/canary-rollout.ts +0 -38
- package/scripts/mcpGatewayCli.test.ts +0 -116
- package/scripts/prepare-aip-package.ts +0 -88
- package/scripts/regen-conformance-sigs.ts +0 -18
- package/scripts/release-gate.ts +0 -19
- package/scripts/validate-runtime-policy.ts +0 -18
- package/sdk/browser/index.test.ts +0 -162
- package/sdk/browser/index.ts +0 -257
- package/sdk/browser/package.json +0 -13
- package/sdk/go/cbor.go +0 -551
- package/sdk/go/cbor_test.go +0 -232
- package/sdk/go/encryption.go +0 -280
- package/sdk/go/encryption_test.go +0 -318
- package/sdk/go/go.mod +0 -7
- package/sdk/go/go.sum +0 -4
- package/sdk/go/http.go +0 -135
- package/sdk/go/protocol.go +0 -324
- package/sdk/go/protocol_test.go +0 -334
- package/sdk/go/replay.go +0 -121
- package/sdk/go/replay_test.go +0 -149
- package/sdk/go/webhook.go +0 -136
- package/sdk/pq/package-lock.json +0 -1358
- package/sdk/pq/package.json +0 -42
- package/sdk/pq/src/index.test.ts +0 -143
- package/sdk/pq/src/index.ts +0 -166
- package/sdk/pq/tsconfig.json +0 -14
- package/sdk/pq/vitest.config.ts +0 -7
- package/sdk/python/README.md +0 -18
- package/sdk/python/protocol_7h3/__init__.py +0 -46
- package/sdk/python/protocol_7h3/encryption.py +0 -252
- package/sdk/python/protocol_7h3/http.py +0 -212
- package/sdk/python/protocol_7h3/keys.py +0 -149
- package/sdk/python/protocol_7h3/pq.py +0 -244
- package/sdk/python/protocol_7h3/protocol.py +0 -525
- package/sdk/python/protocol_7h3/queue.py +0 -118
- package/sdk/python/protocol_7h3/replay.py +0 -98
- package/sdk/python/protocol_7h3/webhook.py +0 -116
- package/sdk/python/pyproject.toml +0 -40
- package/sdk/python/tests/test_conformance.py +0 -110
- package/sdk/python/tests/test_encryption.py +0 -206
- package/sdk/python/tests/test_http.py +0 -305
- package/sdk/python/tests/test_keys.py +0 -417
- package/sdk/python/tests/test_queue.py +0 -120
- package/sdk/python/tests/test_webhook.py +0 -345
- package/sdk/rust/Cargo.lock +0 -371
- package/sdk/rust/Cargo.toml +0 -25
- package/sdk/rust/README.md +0 -31
- package/sdk/rust/fuzz/Cargo.toml +0 -29
- package/sdk/rust/fuzz/fuzz_targets/fuzz_canonicalize.rs +0 -46
- package/sdk/rust/fuzz/fuzz_targets/fuzz_decode.rs +0 -11
- package/sdk/rust/src/bin/aip_mcp_gateway.rs +0 -59
- package/sdk/rust/src/http.rs +0 -145
- package/sdk/rust/src/keys.rs +0 -161
- package/sdk/rust/src/lib.rs +0 -688
- package/sdk/rust/src/queue.rs +0 -79
- package/sdk/rust/src/webhook.rs +0 -86
- package/sdk/rust/tests/conformance.rs +0 -148
- package/sdk/rust/tests/gateway.rs +0 -130
- package/sdk/rust/tests/http_webhook_queue.rs +0 -201
- package/sdk/rust/tests/keys.rs +0 -189
- package/sdk/threshold/index.d.ts +0 -68
- package/sdk/threshold/index.d.ts.map +0 -1
- package/sdk/threshold/index.js +0 -254
- package/sdk/threshold/package-lock.json +0 -1361
- package/sdk/threshold/package.json +0 -39
- package/sdk/threshold/src/index.d.ts +0 -68
- package/sdk/threshold/src/index.d.ts.map +0 -1
- package/sdk/threshold/src/index.js +0 -254
- package/sdk/threshold/src/index.test.ts +0 -238
- package/sdk/threshold/src/index.ts +0 -355
- package/sdk/threshold/tsconfig.json +0 -19
- package/sdk/threshold/vitest.config.ts +0 -12
- package/src/agentAdapter.test.ts +0 -48
- package/src/agentAdapter.ts +0 -56
- package/src/auditLog.test.ts +0 -145
- package/src/auditLog.ts +0 -147
- package/src/capability.test.ts +0 -504
- package/src/capability.ts +0 -380
- package/src/cborCodec.test.ts +0 -263
- package/src/cborCodec.ts +0 -339
- package/src/conformance.test.ts +0 -136
- package/src/conformanceVectors.ts +0 -99
- package/src/encryption.test.ts +0 -206
- package/src/encryption.ts +0 -245
- package/src/envelopeCbor.ts +0 -140
- package/src/frameworkAdapters.test.ts +0 -290
- package/src/frameworkAdapters.ts +0 -261
- package/src/gateway.test.ts +0 -343
- package/src/gateway.ts +0 -246
- package/src/grpcBinding.test.ts +0 -211
- package/src/grpcBinding.ts +0 -103
- package/src/httpBinding.test.ts +0 -376
- package/src/httpBinding.ts +0 -189
- package/src/index.ts +0 -39
- package/src/keyInfra.test.ts +0 -278
- package/src/keyInfra.ts +0 -228
- package/src/keyRegistry.ts +0 -59
- package/src/keyRotation.test.ts +0 -78
- package/src/keyRotation.ts +0 -72
- package/src/mcpGateway.test.ts +0 -129
- package/src/mcpGateway.ts +0 -250
- package/src/mcpTransports.test.ts +0 -92
- package/src/mcpTransports.ts +0 -169
- package/src/mcpWrapper.test.ts +0 -179
- package/src/mcpWrapper.ts +0 -206
- package/src/otel.ts +0 -136
- package/src/policyEnforcer.test.ts +0 -99
- package/src/policyEnforcer.ts +0 -169
- package/src/policyTelemetryFeedback.test.ts +0 -25
- package/src/policyTelemetryFeedback.ts +0 -38
- package/src/protocol.bench.ts +0 -37
- package/src/protocol.d.ts.map +0 -1
- package/src/protocol.js +0 -294
- package/src/protocol.test.ts +0 -155
- package/src/protocol.ts +0 -414
- package/src/protocolAgent.test.ts +0 -105
- package/src/protocolAgent.ts +0 -169
- package/src/protocolBinary.test.ts +0 -165
- package/src/protocolBinary.ts +0 -312
- package/src/protocolCapabilities.ts +0 -70
- package/src/protocolFuzz.advanced.test.ts +0 -235
- package/src/protocolFuzz.test.ts +0 -111
- package/src/protocolNegative.test.ts +0 -97
- package/src/protocolReplay.test.ts +0 -71
- package/src/protocolReplay.ts +0 -194
- package/src/protocolTransport.test.ts +0 -556
- package/src/protocolTransport.ts +0 -483
- package/src/queueBinding.test.ts +0 -130
- package/src/queueBinding.ts +0 -102
- package/src/rateLimiter.test.ts +0 -96
- package/src/rateLimiter.ts +0 -46
- package/src/redisIntegration.test.ts +0 -134
- package/src/replayStores.test.ts +0 -273
- package/src/replayStores.ts +0 -215
- package/src/revocation.test.ts +0 -98
- package/src/revocation.ts +0 -0
- package/src/routePolicy.test.ts +0 -87
- package/src/routePolicy.ts +0 -72
- package/src/runtimePolicy.test.ts +0 -49
- package/src/runtimePolicy.ts +0 -81
- package/src/runtimePolicyManager.test.ts +0 -29
- package/src/runtimePolicyManager.ts +0 -50
- package/src/runtimePolicyPresets.ts +0 -43
- package/src/signedResponse.test.ts +0 -111
- package/src/signedResponse.ts +0 -83
- package/src/stream.test.ts +0 -254
- package/src/stream.ts +0 -417
- package/src/telemetry.test.ts +0 -251
- package/src/telemetry.ts +0 -299
- package/src/webhookBinding.test.ts +0 -144
- package/src/webhookBinding.ts +0 -115
- package/src/wsBinding.test.ts +0 -221
- package/src/wsBinding.ts +0 -200
- package/tsconfig.json +0 -15
- package/tsconfig.lib.json +0 -23
- package/vite.lib.config.ts +0 -16
- package/vitest.config.ts +0 -11
|
@@ -1,290 +0,0 @@
|
|
|
1
|
-
import { describe, expect, it } from 'vitest'
|
|
2
|
-
import { createAipAgentAdapter } from './agentAdapter'
|
|
3
|
-
import type { WireEnvelope } from './protocolTransport'
|
|
4
|
-
import {
|
|
5
|
-
createRawTaskFromJsonRpc,
|
|
6
|
-
createRawTaskFromLangChain,
|
|
7
|
-
createRawTaskFromLlamaIndex,
|
|
8
|
-
toJsonRpcResponse,
|
|
9
|
-
toLangChainMessage,
|
|
10
|
-
toLlamaIndexMessage,
|
|
11
|
-
type JsonRpcRequestLike,
|
|
12
|
-
} from './frameworkAdapters'
|
|
13
|
-
|
|
14
|
-
describe('framework adapters', () => {
|
|
15
|
-
const secret = 'framework-adapter-secret'
|
|
16
|
-
|
|
17
|
-
it('maps LangChain-style message into signed TASK flow', async () => {
|
|
18
|
-
const orchestrator = createAipAgentAdapter({
|
|
19
|
-
agentId: 'agent.orchestrator',
|
|
20
|
-
outboundSecret: secret,
|
|
21
|
-
sharedSecrets: { 'agent.worker': secret },
|
|
22
|
-
wireFormat: 'compact',
|
|
23
|
-
})
|
|
24
|
-
|
|
25
|
-
const worker = createAipAgentAdapter({
|
|
26
|
-
agentId: 'agent.worker',
|
|
27
|
-
outboundSecret: secret,
|
|
28
|
-
sharedSecrets: { 'agent.orchestrator': secret },
|
|
29
|
-
wireFormat: 'compact',
|
|
30
|
-
onTask: async (envelope) => ({
|
|
31
|
-
intent: 'RESULT',
|
|
32
|
-
content: `done:${envelope.body.content}`,
|
|
33
|
-
capability: envelope.body.capability,
|
|
34
|
-
}),
|
|
35
|
-
})
|
|
36
|
-
|
|
37
|
-
const raw = await createRawTaskFromLangChain(
|
|
38
|
-
orchestrator,
|
|
39
|
-
{ content: 'plan travel graph', name: 'human' },
|
|
40
|
-
{ recipient: 'agent.worker', capability: 'task.plan' },
|
|
41
|
-
)
|
|
42
|
-
|
|
43
|
-
let rawResponse: WireEnvelope = ''
|
|
44
|
-
await worker.handleRaw(raw, async (responseRaw) => {
|
|
45
|
-
rawResponse = responseRaw
|
|
46
|
-
})
|
|
47
|
-
|
|
48
|
-
const verified = await orchestrator.receiveRaw(rawResponse)
|
|
49
|
-
expect(verified.ok).toBe(true)
|
|
50
|
-
expect(verified.received).not.toBeNull()
|
|
51
|
-
const langchainMsg = toLangChainMessage(verified.received!)
|
|
52
|
-
expect(langchainMsg.content).toContain('done:plan travel graph')
|
|
53
|
-
expect(langchainMsg.additionalKwargs?.capability).toBe('task.plan')
|
|
54
|
-
})
|
|
55
|
-
|
|
56
|
-
it('maps LlamaIndex-style message into signed TASK flow', async () => {
|
|
57
|
-
const orchestrator = createAipAgentAdapter({
|
|
58
|
-
agentId: 'agent.orchestrator',
|
|
59
|
-
outboundSecret: secret,
|
|
60
|
-
sharedSecrets: { 'agent.worker': secret },
|
|
61
|
-
wireFormat: 'compact',
|
|
62
|
-
})
|
|
63
|
-
|
|
64
|
-
const worker = createAipAgentAdapter({
|
|
65
|
-
agentId: 'agent.worker',
|
|
66
|
-
outboundSecret: secret,
|
|
67
|
-
sharedSecrets: { 'agent.orchestrator': secret },
|
|
68
|
-
wireFormat: 'compact',
|
|
69
|
-
onTask: async (envelope) => ({
|
|
70
|
-
intent: 'RESULT',
|
|
71
|
-
content: envelope.body.content.toUpperCase(),
|
|
72
|
-
capability: envelope.body.capability,
|
|
73
|
-
}),
|
|
74
|
-
})
|
|
75
|
-
|
|
76
|
-
const raw = await createRawTaskFromLlamaIndex(
|
|
77
|
-
orchestrator,
|
|
78
|
-
{ role: 'user', content: 'summarize logs' },
|
|
79
|
-
{ recipient: 'agent.worker', capability: 'task.summarize' },
|
|
80
|
-
)
|
|
81
|
-
|
|
82
|
-
let rawResponse: WireEnvelope = ''
|
|
83
|
-
await worker.handleRaw(raw, async (responseRaw) => {
|
|
84
|
-
rawResponse = responseRaw
|
|
85
|
-
})
|
|
86
|
-
|
|
87
|
-
const verified = await orchestrator.receiveRaw(rawResponse)
|
|
88
|
-
expect(verified.ok).toBe(true)
|
|
89
|
-
expect(verified.received).not.toBeNull()
|
|
90
|
-
const llamaMsg = toLlamaIndexMessage(verified.received!)
|
|
91
|
-
expect(llamaMsg.role).toBe('assistant')
|
|
92
|
-
expect(llamaMsg.content).toBe('SUMMARIZE LOGS')
|
|
93
|
-
expect(llamaMsg.additionalKwargs?.capability).toBe('task.summarize')
|
|
94
|
-
})
|
|
95
|
-
|
|
96
|
-
it('maps JSON-RPC request/response through TASK and RESULT envelopes', async () => {
|
|
97
|
-
const orchestrator = createAipAgentAdapter({
|
|
98
|
-
agentId: 'agent.gateway',
|
|
99
|
-
outboundSecret: secret,
|
|
100
|
-
sharedSecrets: { 'agent.mcp-worker': secret },
|
|
101
|
-
wireFormat: 'compact',
|
|
102
|
-
})
|
|
103
|
-
|
|
104
|
-
const worker = createAipAgentAdapter({
|
|
105
|
-
agentId: 'agent.mcp-worker',
|
|
106
|
-
outboundSecret: secret,
|
|
107
|
-
sharedSecrets: { 'agent.gateway': secret },
|
|
108
|
-
wireFormat: 'compact',
|
|
109
|
-
onTask: async (envelope) => ({
|
|
110
|
-
intent: 'RESULT',
|
|
111
|
-
content: JSON.stringify({ ok: true, receivedCapability: envelope.body.capability }),
|
|
112
|
-
capability: envelope.body.capability,
|
|
113
|
-
}),
|
|
114
|
-
})
|
|
115
|
-
|
|
116
|
-
const req: JsonRpcRequestLike = {
|
|
117
|
-
jsonrpc: '2.0',
|
|
118
|
-
id: 7,
|
|
119
|
-
method: 'tools/call',
|
|
120
|
-
params: { name: 'planner', input: 'optimize route' },
|
|
121
|
-
}
|
|
122
|
-
|
|
123
|
-
const raw = await createRawTaskFromJsonRpc(orchestrator, req, { recipient: 'agent.mcp-worker' })
|
|
124
|
-
|
|
125
|
-
let rawResponse: WireEnvelope = ''
|
|
126
|
-
await worker.handleRaw(raw, async (responseRaw) => {
|
|
127
|
-
rawResponse = responseRaw
|
|
128
|
-
})
|
|
129
|
-
|
|
130
|
-
const verified = await orchestrator.receiveRaw(rawResponse)
|
|
131
|
-
expect(verified.ok).toBe(true)
|
|
132
|
-
expect(verified.received).not.toBeNull()
|
|
133
|
-
|
|
134
|
-
const mcpResponse = toJsonRpcResponse(verified.received!, req.id)
|
|
135
|
-
expect(mcpResponse.jsonrpc).toBe('2.0')
|
|
136
|
-
expect(mcpResponse.id).toBe(7)
|
|
137
|
-
expect(mcpResponse.error).toBeUndefined()
|
|
138
|
-
expect(mcpResponse.result).toEqual({ ok: true, receivedCapability: 'mcp.tools/call' })
|
|
139
|
-
})
|
|
140
|
-
|
|
141
|
-
it('rejects disallowed JSON-RPC methods before sending', async () => {
|
|
142
|
-
const orchestrator = createAipAgentAdapter({
|
|
143
|
-
agentId: 'agent.gateway',
|
|
144
|
-
outboundSecret: secret,
|
|
145
|
-
sharedSecrets: { 'agent.mcp-worker': secret },
|
|
146
|
-
wireFormat: 'compact',
|
|
147
|
-
})
|
|
148
|
-
|
|
149
|
-
const req: JsonRpcRequestLike = {
|
|
150
|
-
jsonrpc: '2.0',
|
|
151
|
-
id: 'abc',
|
|
152
|
-
method: 'tools/secret-call',
|
|
153
|
-
params: {},
|
|
154
|
-
}
|
|
155
|
-
|
|
156
|
-
await expect(
|
|
157
|
-
createRawTaskFromJsonRpc(orchestrator, req, {
|
|
158
|
-
recipient: 'agent.mcp-worker',
|
|
159
|
-
allowedMethods: ['tools/call', 'resources/read'],
|
|
160
|
-
}),
|
|
161
|
-
).rejects.toThrow("JSON-RPC method 'tools/secret-call' is not allowed")
|
|
162
|
-
})
|
|
163
|
-
|
|
164
|
-
it('rejects unauthorized JSON-RPC methods before sending', async () => {
|
|
165
|
-
const orchestrator = createAipAgentAdapter({
|
|
166
|
-
agentId: 'agent.gateway',
|
|
167
|
-
outboundSecret: secret,
|
|
168
|
-
sharedSecrets: { 'agent.mcp-worker': secret },
|
|
169
|
-
wireFormat: 'compact',
|
|
170
|
-
})
|
|
171
|
-
|
|
172
|
-
const req: JsonRpcRequestLike = {
|
|
173
|
-
jsonrpc: '2.0',
|
|
174
|
-
id: 'auth-1',
|
|
175
|
-
method: 'tools/call',
|
|
176
|
-
params: { name: 'planner' },
|
|
177
|
-
}
|
|
178
|
-
|
|
179
|
-
await expect(
|
|
180
|
-
createRawTaskFromJsonRpc(orchestrator, req, {
|
|
181
|
-
recipient: 'agent.mcp-worker',
|
|
182
|
-
authorizeMethod: async () => false,
|
|
183
|
-
}),
|
|
184
|
-
).rejects.toThrow("JSON-RPC method 'tools/call' is not authorized")
|
|
185
|
-
})
|
|
186
|
-
|
|
187
|
-
it('rejects rate-limited JSON-RPC methods before sending', async () => {
|
|
188
|
-
const orchestrator = createAipAgentAdapter({
|
|
189
|
-
agentId: 'agent.gateway',
|
|
190
|
-
outboundSecret: secret,
|
|
191
|
-
sharedSecrets: { 'agent.mcp-worker': secret },
|
|
192
|
-
wireFormat: 'compact',
|
|
193
|
-
})
|
|
194
|
-
|
|
195
|
-
const req: JsonRpcRequestLike = {
|
|
196
|
-
jsonrpc: '2.0',
|
|
197
|
-
id: 'rate-1',
|
|
198
|
-
method: 'tools/call',
|
|
199
|
-
params: { name: 'planner' },
|
|
200
|
-
}
|
|
201
|
-
|
|
202
|
-
await expect(
|
|
203
|
-
createRawTaskFromJsonRpc(orchestrator, req, {
|
|
204
|
-
recipient: 'agent.mcp-worker',
|
|
205
|
-
rateLimiter: {
|
|
206
|
-
consume: async () => false,
|
|
207
|
-
},
|
|
208
|
-
}),
|
|
209
|
-
).rejects.toThrow("JSON-RPC method 'tools/call' is rate-limited")
|
|
210
|
-
})
|
|
211
|
-
|
|
212
|
-
it('passes capability context into policy hooks', async () => {
|
|
213
|
-
const orchestrator = createAipAgentAdapter({
|
|
214
|
-
agentId: 'agent.gateway',
|
|
215
|
-
outboundSecret: secret,
|
|
216
|
-
sharedSecrets: { 'agent.mcp-worker': secret },
|
|
217
|
-
wireFormat: 'compact',
|
|
218
|
-
})
|
|
219
|
-
|
|
220
|
-
const req: JsonRpcRequestLike = {
|
|
221
|
-
jsonrpc: '2.0',
|
|
222
|
-
id: 'ctx-1',
|
|
223
|
-
method: 'tools/call',
|
|
224
|
-
params: { name: 'planner' },
|
|
225
|
-
}
|
|
226
|
-
|
|
227
|
-
let authCapability = ''
|
|
228
|
-
let rateKey = ''
|
|
229
|
-
const raw = await createRawTaskFromJsonRpc(orchestrator, req, {
|
|
230
|
-
recipient: 'agent.mcp-worker',
|
|
231
|
-
methodToCapability: (method) => `custom.${method}`,
|
|
232
|
-
authorizeMethod: async (_request, context) => {
|
|
233
|
-
authCapability = context.capability
|
|
234
|
-
return true
|
|
235
|
-
},
|
|
236
|
-
rateLimitKey: (_request, context) => `${context.capability}:${context.correlationId}`,
|
|
237
|
-
rateLimiter: {
|
|
238
|
-
consume: async (key) => {
|
|
239
|
-
rateKey = key
|
|
240
|
-
return true
|
|
241
|
-
},
|
|
242
|
-
},
|
|
243
|
-
})
|
|
244
|
-
|
|
245
|
-
expect(raw.length).toBeGreaterThan(0)
|
|
246
|
-
expect(authCapability).toBe('custom.tools/call')
|
|
247
|
-
expect(rateKey).toBe('custom.tools/call:ctx-1')
|
|
248
|
-
})
|
|
249
|
-
|
|
250
|
-
it('emits policy events for allow and deny decisions', async () => {
|
|
251
|
-
const orchestrator = createAipAgentAdapter({
|
|
252
|
-
agentId: 'agent.gateway',
|
|
253
|
-
outboundSecret: secret,
|
|
254
|
-
sharedSecrets: { 'agent.mcp-worker': secret },
|
|
255
|
-
wireFormat: 'compact',
|
|
256
|
-
})
|
|
257
|
-
|
|
258
|
-
const req: JsonRpcRequestLike = {
|
|
259
|
-
jsonrpc: '2.0',
|
|
260
|
-
id: 'evt-1',
|
|
261
|
-
method: 'tools/call',
|
|
262
|
-
params: {},
|
|
263
|
-
}
|
|
264
|
-
|
|
265
|
-
const events: string[] = []
|
|
266
|
-
await createRawTaskFromJsonRpc(orchestrator, req, {
|
|
267
|
-
recipient: 'agent.mcp-worker',
|
|
268
|
-
allowedMethods: ['tools/call'],
|
|
269
|
-
authorizeMethod: async () => true,
|
|
270
|
-
onPolicyEvent: async (event) => {
|
|
271
|
-
events.push(`${event.stage}:${event.decision}`)
|
|
272
|
-
},
|
|
273
|
-
})
|
|
274
|
-
|
|
275
|
-
expect(events).toContain('allowlist:allow')
|
|
276
|
-
expect(events).toContain('authorize:allow')
|
|
277
|
-
|
|
278
|
-
await expect(
|
|
279
|
-
createRawTaskFromJsonRpc(orchestrator, { ...req, id: 'evt-2', method: 'resources/read' }, {
|
|
280
|
-
recipient: 'agent.mcp-worker',
|
|
281
|
-
allowedMethods: ['tools/call'],
|
|
282
|
-
onPolicyEvent: async (event) => {
|
|
283
|
-
events.push(`${event.stage}:${event.decision}`)
|
|
284
|
-
},
|
|
285
|
-
}),
|
|
286
|
-
).rejects.toThrow("JSON-RPC method 'resources/read' is not allowed")
|
|
287
|
-
|
|
288
|
-
expect(events).toContain('allowlist:deny')
|
|
289
|
-
})
|
|
290
|
-
})
|
package/src/frameworkAdapters.ts
DELETED
|
@@ -1,261 +0,0 @@
|
|
|
1
|
-
import { type AipAgentAdapter } from './agentAdapter'
|
|
2
|
-
import { type ProtocolEnvelope } from './protocol'
|
|
3
|
-
import { type WireEnvelope } from './protocolTransport'
|
|
4
|
-
|
|
5
|
-
export interface LangChainMessageLike {
|
|
6
|
-
content: string
|
|
7
|
-
name?: string
|
|
8
|
-
additionalKwargs?: Record<string, unknown>
|
|
9
|
-
}
|
|
10
|
-
|
|
11
|
-
export interface LlamaIndexMessageLike {
|
|
12
|
-
role: 'user' | 'assistant' | 'system'
|
|
13
|
-
content: string
|
|
14
|
-
additionalKwargs?: Record<string, unknown>
|
|
15
|
-
}
|
|
16
|
-
|
|
17
|
-
export interface JsonRpcError {
|
|
18
|
-
code: number
|
|
19
|
-
message: string
|
|
20
|
-
data?: unknown
|
|
21
|
-
}
|
|
22
|
-
|
|
23
|
-
export interface JsonRpcRequestLike {
|
|
24
|
-
jsonrpc: '2.0'
|
|
25
|
-
id: string | number
|
|
26
|
-
method: string
|
|
27
|
-
params?: unknown
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
export interface JsonRpcResponseLike {
|
|
31
|
-
jsonrpc: '2.0'
|
|
32
|
-
id: string | number
|
|
33
|
-
result?: unknown
|
|
34
|
-
error?: JsonRpcError
|
|
35
|
-
}
|
|
36
|
-
|
|
37
|
-
export interface JsonRpcBridgeOptions {
|
|
38
|
-
recipient?: string
|
|
39
|
-
allowedMethods?: readonly string[]
|
|
40
|
-
methodToCapability?: (method: string) => string
|
|
41
|
-
authorizeMethod?: (request: JsonRpcRequestLike, context: JsonRpcPolicyContext) => boolean | Promise<boolean>
|
|
42
|
-
rateLimitKey?: (request: JsonRpcRequestLike, context: JsonRpcPolicyContext) => string
|
|
43
|
-
rateLimiter?: {
|
|
44
|
-
consume: (key: string, request: JsonRpcRequestLike, context: JsonRpcPolicyContext) => boolean | Promise<boolean>
|
|
45
|
-
}
|
|
46
|
-
onPolicyEvent?: (event: JsonRpcPolicyEvent) => void | Promise<void>
|
|
47
|
-
}
|
|
48
|
-
|
|
49
|
-
export interface JsonRpcPolicyContext {
|
|
50
|
-
intent: 'TASK'
|
|
51
|
-
recipient?: string
|
|
52
|
-
capability: string
|
|
53
|
-
correlationId: string
|
|
54
|
-
createdAtMs: number
|
|
55
|
-
}
|
|
56
|
-
|
|
57
|
-
export interface JsonRpcPolicyEvent {
|
|
58
|
-
stage: 'allowlist' | 'authorize' | 'rateLimit'
|
|
59
|
-
decision: 'allow' | 'deny'
|
|
60
|
-
method: string
|
|
61
|
-
context: JsonRpcPolicyContext
|
|
62
|
-
reason?: string
|
|
63
|
-
}
|
|
64
|
-
|
|
65
|
-
export interface JsonRpcResponseOptions {
|
|
66
|
-
defaultErrorCode?: number
|
|
67
|
-
}
|
|
68
|
-
|
|
69
|
-
export async function createRawTaskFromLangChain(
|
|
70
|
-
adapter: AipAgentAdapter,
|
|
71
|
-
message: LangChainMessageLike,
|
|
72
|
-
options: { recipient?: string; capability?: string; correlationId?: string } = {},
|
|
73
|
-
): Promise<WireEnvelope> {
|
|
74
|
-
return adapter.createRawIntent({
|
|
75
|
-
recipient: options.recipient,
|
|
76
|
-
intent: 'TASK',
|
|
77
|
-
content: message.content,
|
|
78
|
-
capability: options.capability,
|
|
79
|
-
correlationId: options.correlationId,
|
|
80
|
-
})
|
|
81
|
-
}
|
|
82
|
-
|
|
83
|
-
export function toLangChainMessage(envelope: ProtocolEnvelope): LangChainMessageLike {
|
|
84
|
-
return {
|
|
85
|
-
content: envelope.body.content,
|
|
86
|
-
name: envelope.body.intent,
|
|
87
|
-
additionalKwargs: {
|
|
88
|
-
capability: envelope.body.capability,
|
|
89
|
-
correlationId: envelope.body.correlationId,
|
|
90
|
-
sender: envelope.header.sender,
|
|
91
|
-
recipient: envelope.header.recipient,
|
|
92
|
-
messageId: envelope.header.messageId,
|
|
93
|
-
timestampMs: envelope.header.timestampMs,
|
|
94
|
-
},
|
|
95
|
-
}
|
|
96
|
-
}
|
|
97
|
-
|
|
98
|
-
export async function createRawTaskFromLlamaIndex(
|
|
99
|
-
adapter: AipAgentAdapter,
|
|
100
|
-
message: LlamaIndexMessageLike,
|
|
101
|
-
options: { recipient?: string; capability?: string; correlationId?: string } = {},
|
|
102
|
-
): Promise<WireEnvelope> {
|
|
103
|
-
return adapter.createRawIntent({
|
|
104
|
-
recipient: options.recipient,
|
|
105
|
-
intent: 'TASK',
|
|
106
|
-
content: message.content,
|
|
107
|
-
capability: options.capability,
|
|
108
|
-
correlationId: options.correlationId,
|
|
109
|
-
})
|
|
110
|
-
}
|
|
111
|
-
|
|
112
|
-
export function toLlamaIndexMessage(envelope: ProtocolEnvelope): LlamaIndexMessageLike {
|
|
113
|
-
const role: LlamaIndexMessageLike['role'] = envelope.body.intent === 'TASK' ? 'user' : 'assistant'
|
|
114
|
-
return {
|
|
115
|
-
role,
|
|
116
|
-
content: envelope.body.content,
|
|
117
|
-
additionalKwargs: {
|
|
118
|
-
intent: envelope.body.intent,
|
|
119
|
-
capability: envelope.body.capability,
|
|
120
|
-
correlationId: envelope.body.correlationId,
|
|
121
|
-
sender: envelope.header.sender,
|
|
122
|
-
recipient: envelope.header.recipient,
|
|
123
|
-
},
|
|
124
|
-
}
|
|
125
|
-
}
|
|
126
|
-
|
|
127
|
-
function createMcpCapability(method: string): string {
|
|
128
|
-
return `mcp.${method}`
|
|
129
|
-
}
|
|
130
|
-
|
|
131
|
-
export async function createRawTaskFromJsonRpc(
|
|
132
|
-
adapter: AipAgentAdapter,
|
|
133
|
-
request: JsonRpcRequestLike,
|
|
134
|
-
options: JsonRpcBridgeOptions = {},
|
|
135
|
-
): Promise<WireEnvelope> {
|
|
136
|
-
async function emitPolicyEvent(event: JsonRpcPolicyEvent): Promise<void> {
|
|
137
|
-
if (options.onPolicyEvent) await options.onPolicyEvent(event)
|
|
138
|
-
}
|
|
139
|
-
|
|
140
|
-
if (options.allowedMethods && !options.allowedMethods.includes(request.method)) {
|
|
141
|
-
const capability = options.methodToCapability
|
|
142
|
-
? options.methodToCapability(request.method)
|
|
143
|
-
: createMcpCapability(request.method)
|
|
144
|
-
const blockedContext: JsonRpcPolicyContext = {
|
|
145
|
-
intent: 'TASK',
|
|
146
|
-
recipient: options.recipient,
|
|
147
|
-
capability,
|
|
148
|
-
correlationId: String(request.id),
|
|
149
|
-
createdAtMs: Date.now(),
|
|
150
|
-
}
|
|
151
|
-
await emitPolicyEvent({
|
|
152
|
-
stage: 'allowlist',
|
|
153
|
-
decision: 'deny',
|
|
154
|
-
method: request.method,
|
|
155
|
-
context: blockedContext,
|
|
156
|
-
reason: 'method_not_allowed',
|
|
157
|
-
})
|
|
158
|
-
throw new Error(`JSON-RPC method '${request.method}' is not allowed`)
|
|
159
|
-
}
|
|
160
|
-
|
|
161
|
-
const capability = options.methodToCapability
|
|
162
|
-
? options.methodToCapability(request.method)
|
|
163
|
-
: createMcpCapability(request.method)
|
|
164
|
-
const context: JsonRpcPolicyContext = {
|
|
165
|
-
intent: 'TASK',
|
|
166
|
-
recipient: options.recipient,
|
|
167
|
-
capability,
|
|
168
|
-
correlationId: String(request.id),
|
|
169
|
-
createdAtMs: Date.now(),
|
|
170
|
-
}
|
|
171
|
-
|
|
172
|
-
await emitPolicyEvent({
|
|
173
|
-
stage: 'allowlist',
|
|
174
|
-
decision: 'allow',
|
|
175
|
-
method: request.method,
|
|
176
|
-
context,
|
|
177
|
-
})
|
|
178
|
-
|
|
179
|
-
if (options.authorizeMethod) {
|
|
180
|
-
const authorized = await options.authorizeMethod(request, context)
|
|
181
|
-
if (!authorized) {
|
|
182
|
-
await emitPolicyEvent({
|
|
183
|
-
stage: 'authorize',
|
|
184
|
-
decision: 'deny',
|
|
185
|
-
method: request.method,
|
|
186
|
-
context,
|
|
187
|
-
reason: 'not_authorized',
|
|
188
|
-
})
|
|
189
|
-
throw new Error(`JSON-RPC method '${request.method}' is not authorized`)
|
|
190
|
-
}
|
|
191
|
-
await emitPolicyEvent({
|
|
192
|
-
stage: 'authorize',
|
|
193
|
-
decision: 'allow',
|
|
194
|
-
method: request.method,
|
|
195
|
-
context,
|
|
196
|
-
})
|
|
197
|
-
}
|
|
198
|
-
|
|
199
|
-
if (options.rateLimiter) {
|
|
200
|
-
const key = options.rateLimitKey ? options.rateLimitKey(request, context) : request.method
|
|
201
|
-
const allowed = await options.rateLimiter.consume(key, request, context)
|
|
202
|
-
if (!allowed) {
|
|
203
|
-
await emitPolicyEvent({
|
|
204
|
-
stage: 'rateLimit',
|
|
205
|
-
decision: 'deny',
|
|
206
|
-
method: request.method,
|
|
207
|
-
context,
|
|
208
|
-
reason: 'rate_limited',
|
|
209
|
-
})
|
|
210
|
-
throw new Error(`JSON-RPC method '${request.method}' is rate-limited`)
|
|
211
|
-
}
|
|
212
|
-
await emitPolicyEvent({
|
|
213
|
-
stage: 'rateLimit',
|
|
214
|
-
decision: 'allow',
|
|
215
|
-
method: request.method,
|
|
216
|
-
context,
|
|
217
|
-
})
|
|
218
|
-
}
|
|
219
|
-
|
|
220
|
-
return adapter.createRawIntent({
|
|
221
|
-
recipient: options.recipient,
|
|
222
|
-
intent: 'TASK',
|
|
223
|
-
capability,
|
|
224
|
-
correlationId: String(request.id),
|
|
225
|
-
content: JSON.stringify({ method: request.method, params: request.params ?? null }),
|
|
226
|
-
})
|
|
227
|
-
}
|
|
228
|
-
|
|
229
|
-
export function toJsonRpcResponse(
|
|
230
|
-
envelope: ProtocolEnvelope,
|
|
231
|
-
id: string | number,
|
|
232
|
-
options: JsonRpcResponseOptions = {},
|
|
233
|
-
): JsonRpcResponseLike {
|
|
234
|
-
if (envelope.body.intent === 'ERROR') {
|
|
235
|
-
return {
|
|
236
|
-
jsonrpc: '2.0',
|
|
237
|
-
id,
|
|
238
|
-
error: {
|
|
239
|
-
code: options.defaultErrorCode ?? -32000,
|
|
240
|
-
message: envelope.body.content,
|
|
241
|
-
data: {
|
|
242
|
-
capability: envelope.body.capability,
|
|
243
|
-
correlationId: envelope.body.correlationId,
|
|
244
|
-
},
|
|
245
|
-
},
|
|
246
|
-
}
|
|
247
|
-
}
|
|
248
|
-
|
|
249
|
-
let result: unknown = envelope.body.content
|
|
250
|
-
try {
|
|
251
|
-
result = JSON.parse(envelope.body.content)
|
|
252
|
-
} catch {
|
|
253
|
-
result = envelope.body.content
|
|
254
|
-
}
|
|
255
|
-
|
|
256
|
-
return {
|
|
257
|
-
jsonrpc: '2.0',
|
|
258
|
-
id,
|
|
259
|
-
result,
|
|
260
|
-
}
|
|
261
|
-
}
|