@7h3/protocol 0.5.0 → 0.5.2

package/telemetry.d.ts

@@ -0,0 +1,79 @@
+/**
+ * telemetry.ts — Prometheus metrics for 7h3 Protocol
+ *
+ * Zero runtime dependencies. Plain in-memory counters and histograms rendered
+ * to standard Prometheus text exposition format.
+ */
+export interface TelemetryConfig {
+    enabled?: boolean;
+    prefix?: string;
+}
+export interface Counter {
+    increment(labels?: Record<string, string>): void;
+    value(labels?: Record<string, string>): number;
+}
+export interface HistogramSnapshot {
+    count: number;
+    sum: number;
+    buckets: Record<string, number>;
+}
+export interface Histogram {
+    observe(value: number, labels?: Record<string, string>): void;
+    snapshot(labels?: Record<string, string>): HistogramSnapshot;
+}
+export declare class SimpleCounter implements Counter {
+    private counts;
+    private labelSets;
+    increment(labels?: Record<string, string>): void;
+    value(labels?: Record<string, string>): number;
+    entries(): Array<{
+        labels?: Record<string, string>;
+        value: number;
+    }>;
+}
+export declare class SimpleHistogram implements Histogram {
+    private bucketBounds;
+    private states;
+    private labelSets;
+    constructor(buckets?: number[]);
+    observe(value: number, labels?: Record<string, string>): void;
+    snapshot(labels?: Record<string, string>): HistogramSnapshot;
+    entries(): Array<{
+        labels?: Record<string, string>;
+        snapshot: HistogramSnapshot;
+    }>;
+    getBounds(): number[];
+}
+export declare class Protocol7h3Metrics {
+    /** labels: result (ok|fail), alg (ED25519|HS256|none), transport (http|ws|grpc|queue|webhook) */
+    verifications_total: SimpleCounter;
+    /** buckets in ms */
+    verification_duration_ms: SimpleHistogram;
+    /** labels: sender, path */
+    rate_limit_hits_total: SimpleCounter;
+    /** labels: sender, path */
+    sender_denials_total: SimpleCounter;
+    /** labels: transport */
+    replay_detections_total: SimpleCounter;
+    /** labels: type */
+    audit_entries_total: SimpleCounter;
+    /** labels: transport — use for WS/gRPC connection tracking */
+    active_connections: SimpleCounter;
+}
+export declare const metrics: Protocol7h3Metrics;
+export declare function renderPrometheusText(m: Protocol7h3Metrics, prefix?: string): string;
+type NodeReq = {
+    url?: string;
+    method?: string;
+};
+type NodeRes = {
+    writeHead(status: number, headers: Record<string, string>): void;
+    end(body: string): void;
+};
+type NextFn = () => void;
+/**
+ * Returns a Node.js http-compatible middleware that serves Prometheus metrics
+ * at the given path (default: /metrics).
+ */
+export declare function createMetricsMiddleware(path?: string, m?: Protocol7h3Metrics, prefix?: string): (req: NodeReq, res: NodeRes, next: NextFn) => void;
+export {};

package/webhookBinding.d.ts

@@ -0,0 +1,30 @@
+import { generateEd25519KeypairBase64Url } from './protocol';
+export declare const WEBHOOK_SIG_HEADER = "x-7h3-sig";
+export declare const WEBHOOK_TS_HEADER = "x-7h3-ts";
+export declare const WEBHOOK_DEFAULT_TTL_MS = 300000;
+export interface WebhookSignOptions {
+    privateKey: string;
+    ttlMs?: number;
+}
+export interface WebhookSignHmacOptions {
+    secret: string;
+    ttlMs?: number;
+}
+export interface WebhookVerifyOptions {
+    publicKey: string;
+    maxAgeMs?: number;
+}
+export interface WebhookVerifyHmacOptions {
+    secret: string;
+    maxAgeMs?: number;
+}
+export interface WebhookHeaders {
+    [WEBHOOK_SIG_HEADER]: string;
+    [WEBHOOK_TS_HEADER]: string;
+}
+export declare function signWebhook(payload: string | Uint8Array, opts: WebhookSignOptions): Promise<WebhookHeaders>;
+export declare function signWebhookHmac(payload: string | Uint8Array, opts: WebhookSignHmacOptions): Promise<WebhookHeaders>;
+export declare function verifyWebhook(payload: string | Uint8Array, headers: WebhookHeaders | Record<string, string>, opts: WebhookVerifyOptions): Promise<boolean>;
+export declare function verifyWebhookHmac(payload: string | Uint8Array, headers: WebhookHeaders | Record<string, string>, opts: WebhookVerifyHmacOptions): Promise<boolean>;
+export declare function consumeWebhook<T = unknown>(payload: string, headers: Record<string, string>, opts: WebhookVerifyOptions): Promise<T>;
+export { generateEd25519KeypairBase64Url };

package/wsBinding.d.ts

@@ -0,0 +1,52 @@
+import { generateEd25519KeypairBase64Url, type ProtocolEnvelope } from './protocol';
+import type { KeyRegistry } from './keyRegistry';
+import { SignedStreamWriter, type StreamSignerOpts, type StreamVerifierOpts, type StreamVerifyResult, type StreamChunk } from './stream';
+export { type KeyRegistry, generateEd25519KeypairBase64Url };
+export type { StreamSignerOpts, StreamVerifierOpts, StreamVerifyResult, StreamChunk };
+export interface WebSocketLike {
+    send(data: string): void;
+    addEventListener(event: 'message', handler: (e: {
+        data: string | Buffer;
+    }) => void): void;
+    addEventListener(event: 'close', handler: () => void): void;
+    removeEventListener(event: string, handler: (...args: unknown[]) => void): void;
+    readyState?: number;
+}
+export interface WsBindingOptions {
+    privateKey: string;
+    sender: string;
+    recipient?: string;
+    keyRegistry: KeyRegistry;
+    ttlMs?: number;
+    onVerifyFail?: (err: Error, rawData: string) => void;
+}
+export interface ProtectedWebSocket {
+    send(payload: unknown): Promise<void>;
+    onMessage(handler: (payload: unknown, envelope: ProtocolEnvelope) => void): void;
+    onVerifyFail(handler: (err: Error, rawData: string) => void): void;
+    readonly seq: number;
+}
+export declare function wrapWebSocket(ws: WebSocketLike, opts: WsBindingOptions): ProtectedWebSocket;
+/**
+ * createSignedWebSocketStream
+ *
+ * Attaches a SignedStreamWriter to a WebSocket:
+ *   - Each incoming WebSocket message is signed as a stream chunk and sent back.
+ *   - On connection close, the final signed frame is sent.
+ *
+ * Returns the underlying SignedStreamWriter so callers can also call writeChunk
+ * directly (e.g. when driving the stream from application code rather than
+ * forwarding received messages).
+ */
+export declare function createSignedWebSocketStream(ws: WebSocketLike, opts: StreamSignerOpts): SignedStreamWriter;
+/**
+ * receiveSignedWebSocketStream
+ *
+ * Listens for StreamChunk JSON frames on a WebSocket, accumulates them, and
+ * when the final frame (f=true) arrives calls verifyStream over the complete
+ * set of collected chunks.
+ *
+ * Resolves with StreamVerifyResult when the final frame is received.
+ * Rejects if a frame cannot be decoded.
+ */
+export declare function receiveSignedWebSocketStream(ws: WebSocketLike, opts: StreamVerifierOpts): Promise<StreamVerifyResult>;

package/.dockerignore

@@ -1,19 +0,0 @@
-# Node modules — rebuilt inside the image by npm ci
-node_modules
-
-# Git history — not needed in image layers
-.git
-
-# Log files
-*.log
-
-# Compiled TypeScript output from local dev builds (the Dockerfile
-# builder stage produces its own clean dist/)
-dist
-
-# Rust build artefacts from the SDK sub-crate — large and irrelevant
-# to the Node.js runtime image
-sdk/rust/target
-
-# Benchmark result JSON snapshots — not needed at runtime
-bench-results

package/.github/dependabot.yml

@@ -1,32 +0,0 @@
-version: 2
-updates:
-  # Root package (npm)
-  - package-ecosystem: "npm"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-    target-branch: "main"
-    groups:
-      npm-non-security:
-        applies-to: version-updates
-        patterns:
-          - "*"
-
-  # mcp-server sub-package (npm)
-  - package-ecosystem: "npm"
-    directory: "/mcp-server"
-    schedule:
-      interval: "weekly"
-    target-branch: "main"
-    groups:
-      npm-mcp-non-security:
-        applies-to: version-updates
-        patterns:
-          - "*"
-
-  # GitHub Actions
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-    target-branch: "main"

package/.github/workflows/ci.yml

@@ -1,31 +0,0 @@
-name: ci
-on:
-  push:
-    branches: [main]
-  pull_request:
-jobs:
-  test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
-        with:
-          node-version: '22'
-      - run: npm install
-      - run: npm run lint
-      - run: npm run test
-      - run: npm run build:aip
-  conformance:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
-        with:
-          node-version: '22'
-      - uses: actions/setup-python@v6
-        with:
-          python-version: '3.12'
-      - run: pip install cryptography
-      - run: npm install
-      - run: npm run conformance:python
-      - run: npm run conformance:rust

package/.github/workflows/publish.yml

@@ -1,59 +0,0 @@
-name: publish
-
-on:
-  push:
-    tags:
-      - 'v*'
-
-permissions:
-  contents: read
-  id-token: write
-
-jobs:
-  publish-aip:
-    name: publish @7h3/protocol
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
-
-      - uses: actions/setup-node@v6
-        with:
-          node-version: '20'
-          registry-url: 'https://registry.npmjs.org'
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build dist/npm-aip
-        run: npm run package:aip
-
-      - name: Publish @7h3/protocol
-        run: npm publish --provenance --access public
-        working-directory: dist/npm-aip
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
-  publish-mcp:
-    name: publish @7h3/protocol-mcp
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
-
-      - uses: actions/setup-node@v6
-        with:
-          node-version: '20'
-          registry-url: 'https://registry.npmjs.org'
-
-      - name: Install dependencies
-        run: npm ci
-        working-directory: mcp-server
-
-      - name: Build mcp-server
-        run: npm run build
-        working-directory: mcp-server
-
-      - name: Publish @7h3/protocol-mcp
-        run: npm publish --provenance --access public
-        working-directory: mcp-server
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package/.github/workflows/scorecard.yml

@@ -1,37 +0,0 @@
-name: scorecard
-
-on:
-  push:
-    branches: [main]
-  schedule:
-    - cron: '30 1 * * 1'  # weekly, Monday 01:30 UTC
-  pull_request:
-    branches: [main]
-
-permissions: read-all
-
-jobs:
-  analysis:
-    name: scorecard-analysis
-    runs-on: ubuntu-latest
-    permissions:
-      security-events: write
-      id-token: write
-      contents: read
-
-    steps:
-      - uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-
-      - name: Run OpenSSF Scorecard
-        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a  # v2.4.3
-        with:
-          results_file: results.sarif
-          results_format: sarif
-          publish_results: true
-
-      - name: Upload SARIF to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v4
-        with:
-          sarif_file: results.sarif

package/7h3.example.yaml

@@ -1,125 +0,0 @@
-# 7h3 Protocol — Gateway Configuration Example
-# Wire version: 7h3/0.1
-# Reference: docs/GATEWAY.md
-#
-# All fields shown below are optional unless marked (required).
-
-# ---------------------------------------------------------------------------
-# Core proxy settings
-# ---------------------------------------------------------------------------
-
-# (required) URL of the upstream service to proxy requests to.
-# The gateway strips AIP envelopes, verifies signatures, and forwards clean
-# HTTP requests to this address. The request path is appended verbatim.
-upstream: http://api:3000
-
-# Port the gateway HTTP server binds to (default: 8080).
-port: 8080
-
-# ---------------------------------------------------------------------------
-# Gateway identity — needed only when sign_responses: true
-# ---------------------------------------------------------------------------
-
-# The sender identifier this gateway uses when signing response envelopes.
-# Must match the key-id advertised in your /.well-known/7h3-keys document
-# if you are using key-discovery.
-sender: gateway@my-service.example.com
-
-# Ed25519 private key (PKCS8, base64url-encoded) used to sign responses.
-# Generate one with:  7h3 keygen --output my-keys.json
-# Keep this value secret — store it in a mounted secret or environment
-# variable and reference it as $GATEWAY_PRIVATE_KEY instead.
-#
-# private_key: <base64url-encoded PKCS8 private key>   # or use $GATEWAY_PRIVATE_KEY
-
-# Whether the gateway should sign every upstream response it proxies.
-# Requires private_key and sender to be set. (default: false)
-sign_responses: false
-
-# ---------------------------------------------------------------------------
-# Default policy
-# ---------------------------------------------------------------------------
-
-# What to do when an incoming request does not match any entry in the
-# `policies` list below.
-#
-#   allow — pass the request through without signature verification
-#           (use for development or fully-open APIs)
-#   deny  — reject with HTTP 403
-#           (use for production; whitelist routes explicitly via policies)
-#
-# default: allow
-default_policy: deny
-
-# ---------------------------------------------------------------------------
-# Key registry — maps sender identities to their public keys
-# ---------------------------------------------------------------------------
-
-keys:
-  # The gateway's own public key (used to verify self-signed test requests
-  # or to advertise via the /.well-known/7h3-keys endpoint).
-  private_key: <base64url-encoded PKCS8 private key>
-
-  # Registry maps senderID (any opaque string) → Ed25519 SPKI public key
-  # (base64url-encoded). Add one entry per trusted agent or service.
-  registry:
-    # Internal orchestrator service
-    orchestrator@my-service.example.com: <base64url-encoded SPKI public key>
-
-    # Admin automation agent with elevated privileges
-    admin-agent@my-service.example.com: <base64url-encoded SPKI public key>
-
-    # Third-party partner integration
-    partner-bot@partner.example.com: <base64url-encoded SPKI public key>
-
-# ---------------------------------------------------------------------------
-# Route policies
-# ---------------------------------------------------------------------------
-# Evaluated in order — the first matching policy wins.
-# Glob syntax:
-#   /exact/path      — exact match
-#   /api/*           — single segment wildcard (no slashes)
-#   /api/**          — multi-segment wildcard (crosses slashes)
-#   /users/?d        — single character wildcard
-#
-# Policy fields:
-#   path             — glob pattern (required)
-#   require          — signature algorithm: ed25519 | hmac | any | none
-#   allowed_senders  — list of senderIDs permitted on this route
-#                      (omit to allow any verified sender)
-#   rate_limit       — sliding-window limit applied per sender
-#     requests       — max requests in the window
-#     window_ms      — window duration in milliseconds
-#   sign_response    — override sign_responses for this route only
-
-policies:
-  # -- Admin endpoints -------------------------------------------------
-  # Require Ed25519 signatures and restrict to explicitly named agents.
-  # No rate limit — admin tooling is expected to be low-volume.
-  - path: /api/admin/**
-    require: ed25519
-    allowed_senders:
-      - admin-agent@my-service.example.com
-      - orchestrator@my-service.example.com
-    sign_response: true     # always sign admin responses so callers can verify
-
-  # -- General API endpoints -------------------------------------------
-  # Require Ed25519; any verified sender may call; rate-limit per sender
-  # to 1 000 requests per 60-second sliding window.
-  - path: /api/**
-    require: ed25519
-    rate_limit:
-      requests: 1000
-      window_ms: 60000    # 60 seconds
-
-  # -- Health check ----------------------------------------------------
-  # Completely open — no signature needed. Suitable for load-balancer
-  # probes, uptime monitors, and Kubernetes liveness/readiness checks.
-  - path: /health
-    require: none
-
-  # -- Public read-only endpoints --------------------------------------
-  # No signature required; these routes serve unauthenticated traffic
-  # (documentation, status pages, marketing content, etc.).
-  - path: /public/**
-    require: none

package/CHANGELOG.md

@@ -1,152 +0,0 @@
-# Changelog
-
-All notable changes to `@7h3/protocol` are documented here.  
-Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).  
-This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
----
-
-## v0.5.0
-
-### New features
-
-**Feature 1 — Distributed Redis replay cache**
-- RedisReplayStore: atomic SET NX PX prevents cross-instance replay attacks
-- ClusterRedisReplayStore: queries all Redis Cluster nodes
-- InMemoryReplayStore improvements
-- Go SDK: InMemoryReplayStore + RedisReplayStore (inject-your-client)
-- Python SDK: RedisReplayStore using redis-py
-
-**Feature 2 — End-to-end encryption (X25519 + ChaCha20-Poly1305)**
-- sealEnvelope / openEnvelope: encrypt body before signing, verify before decrypting
-- generateX25519KeyPair: ephemeral key pairs for forward secrecy
-- Zero new dependencies: Node.js built-in crypto.ecdh + crypto.createCipheriv('chacha20-poly1305')
-- Python SDK: X25519 + ChaCha20-Poly1305 via cryptography package
-- Go SDK: crypto/ecdh + golang.org/x/crypto/chacha20poly1305
-
-**Feature 3 — Capability tokens and delegation chains**
-- issueCapabilityToken: scoped, time-bounded, cryptographically signed credentials
-- delegateCapabilityToken: sub-delegate with equal or narrower scope
-- verifyCapabilityChain: verify full A→B→C delegation chain
-- Gateway integration: x-7h3-capability header accepted alongside signatures
-- tokenMatchesScope: glob path matching
-
-**Feature 4 — Streaming message signing**
-- SignedStreamWriter / SignedStreamReader: per-chunk HMAC + final Ed25519
-- signStream / verifyStream: convenience wrappers for arrays
-- WebSocket integration: createSignedWebSocketStream / receiveSignedWebSocketStream
-- Tampering detected mid-stream on the failing chunk
-
-**Feature 5 — Prometheus metrics + OpenTelemetry**
-- Protocol7h3Metrics: counters and histograms for all verification events
-- renderPrometheusText: zero-dep Prometheus exposition format
-- createMetricsMiddleware: serve /metrics endpoint
-- CLI: 7h3 gateway --metrics-port N
-- setOtelProvider / withVerificationSpan: optional OTel tracing
-
-**Feature 6 — Post-quantum signatures (ML-DSA) — @7h3/protocol-pq**
-- generatePqKeyPair: ML-DSA-65 and ML-DSA-87 keypairs
-- signEnvelopePq / verifyEnvelopePq: same envelope format, alg: 'ML-DSA-65'
-- Python SDK: Dilithium2/3/5 via dilithium-py
-- Separate package to keep @7h3/protocol at zero runtime deps
-
-**Feature 7 — CBOR binary wire format**
-- encodeCbor / decodeCbor: zero-dep deterministic CBOR (RFC 8949)
-- encodeEnvelopeCbor / decodeEnvelopeCbor: compact numeric-key encoding (~40% smaller)
-- HTTP binding: Content-Type: application/7h3-cbor support
-- Go SDK: EncodeEnvelopeCBOR / DecodeEnvelopeCBOR
-
-**Feature 8 — M-of-N threshold signatures (BLS12-381) — @7h3/protocol-threshold**
-- generateBlsKeyPair: BLS12-381 keypairs
-- signEnvelopeBls: partial signature from one participant
-- aggregateSignatures: combine M-of-N partial sigs into one
-- verifyThresholdEnvelope: single verify call on aggregated sig
-- splitPrivateKey / reconstructPrivateKey: Shamir Secret Sharing over BLS scalar field
-- Separate package (@7h3/protocol-threshold) using @noble/curves
-
----
-
-## [0.1.2] — 2026-06-05
-
-### Added
-- `SECURITY.md` — coordinated vulnerability disclosure process, 48h acknowledgement / 14-day critical patch SLA, Hall of Thanks
-- `CONTRIBUTING.md` — test commands, wire-freeze policy, conformance fixture update requirement, PR workflow
-- `GOVERNANCE.md` — LF Minimum Viable Governance style: single-maintainer stage, decision process, co-maintainership path
-- `.github/dependabot.yml` — weekly npm and GitHub Actions dependency updates; non-security updates grouped to reduce noise
-- `.github/workflows/scorecard.yml` — OpenSSF Scorecard workflow (activates when Actions billing is restored)
-- `.github/workflows/publish.yml` — provenance-enabled npm publish workflow for both `@7h3/protocol` and `@7h3/protocol-mcp` (activates when Actions billing is restored)
-- `src/protocolFuzz.advanced.test.ts` — 8 property-based fuzz tests via fast-check: wire decoder resilience (never throws on arbitrary input), canonicalization determinism (field-order invariant), replay cache uniqueness properties
-
-### Changed
-- README: added Ed25519 production recommendation with code snippet; added Security section linking to SECURITY.md
-- `docs/MCP_WRAPPER.md`: added HMAC vs Ed25519 comparison table and Ed25519 `wrapMcpServer` example
-- `mcp-server`: updated `aip_wrap_mcp_server` tool description to guide toward Ed25519 for production; HMAC boilerplate now includes a production upgrade comment
-
-### Fixed
-- README: corrected overstated fuzz status (now accurately notes property-based tests exist; formal fuzzing campaign still not done)
-
----
-
-## [0.1.1] — 2026-06-05
-
-### Fixed
-- Published package was missing 21 individual `.d.ts` module files — only `index.d.ts` was included, causing TS2305 errors in any consumer using NodeNext or bundler moduleResolution. All 22 declaration files now ship with the package.
-- `scripts/prepare-aip-package.ts`: copy all `.d.ts` files from `dist/aip/` instead of only `index.d.ts`
-
-### Added
-- `@7h3/protocol-mcp@0.1.0` — MCP server installable into Claude Code (`claude mcp add aip -- npx @7h3/protocol-mcp`). Five tools: `aip_generate_secret`, `aip_generate_keypair`, `aip_wrap_mcp_server`, `aip_sign`, `aip_verify`
-
----
-
-## [0.1.0] — 2026-06-01
-
-### Added
-
-**Core protocol (`aip/0.1`)**
-- `createEnvelope` / `signEnvelopeHmac` / `signEnvelopeEd25519` — envelope construction and signing over a deterministic canonical form (fixed key order).
-- `verifyEnvelopeHmac` / `verifyEnvelopeEd25519` — tamper-evident verification via real WebCrypto (no hand-rolled crypto).
-- `validateEnvelope` — structural + TTL + clock-skew validation with typed diagnostics.
-- `receiveEnvelope` — full receive pipeline: validate → verify → replay-check, composable via `ReceiveEnvelopeOptions`.
-- Wire formats: `json`, `compact` (minified), `binary` (MessagePack); encode/decode via `encodeEnvelope` / `decodeEnvelope`.
-- Polyglot parity: shared conformance fixture set (`conformance/aip_v0_1.json`) proves byte-identical signatures across TypeScript, Python (`aip7h3`), and Rust (`aip7h3`).
-
-**Replay protection**
-- `InMemoryReplayCache` — single-process `(sender, messageId, nonce)` uniqueness window with TTL.
-- `DistributedReplayCache` — wraps any `DistributedReplayStore`; routes batch ops through `reserveMany` when available.
-- `createRedisReplayStore` — atomic `SET NX PX` reserve over a client-agnostic `RedisLikeClient` interface; batch pipeline via `reserveMany`; `errorBehavior: 'fallback' | 'reject' | 'allow'` with graceful degradation to local store and `onDegraded` hook.
-- `InMemoryRedisLikeClient` — reference implementation for tests (no Redis dep required).
-
-**Fleet-wide key revocation**
-- `InMemoryRevocationStore` — single-process; supports time-bounded `untilMs`.
-- `createRedisRevocationStore` — cached reads (`cacheTtlMs` default 5 s), **fail-closed default** (`errorBehavior: 'reject'`), serves stale cache during Redis outage.
-- `withRevocationCheck` — wraps any `SignatureResolver`; revoked key returns `undefined` → verification fails.
-
-**MCP hardening wrapper**
-- `wrapMcpServer` — sign + replay-protect an existing MCP handler with zero handler changes; enforces recipient binding (cross-server relay defense).
-- `wrapMcpClient` / `createMcpClientCodec` — sign outbound requests; enforce sender binding (response-spoof defense) and correlation binding (response-substitution defense); replay protection on by default.
-- Demo: `npm run aip:mcp:wrap` — proves tampered and replayed requests rejected.
-
-**Transport adapters**
-- `serveMcpOverStdio` / `createStdioMcpClient` — newline-delimited; in-order sequential chain prevents response interleaving.
-- `createHttpMcpHandler` / `createHttpMcpClient` — `node:http` handler + `fetch` client; supports `binary` wire format.
-- No new runtime dependencies (uses `node:readline`, `node:http`, `node:stream`, global `fetch`).
-
-**Key management & policy**
-- Key rotation support (`keyRotation`), runtime policy (`runtimePolicy`, `policyEnforcer`), telemetry feedback hooks.
-- Framework adapters (`frameworkAdapters`), agent adapter (`agentAdapter`), MCP gateway (`mcpGateway`).
-
-### Documentation
-- `docs/THREAT_MODEL.md` — full threat coverage matrix.
-- `docs/DISTRIBUTED_REPLAY.md` — Redis store setup, `errorBehavior` table, operational guidance.
-- `docs/KEY_REVOCATION.md` — revocation store setup, cache TTL tuning.
-- `docs/MCP_WRAPPER.md` — threat coverage table, server + client usage, transport examples.
-
-### Test coverage
-- 123 tests / 22 test files — all green.
-- Live-Redis integration test (`redisIntegration.test.ts`) — auto-skips if no server present.
-- Python conformance: `conformance:python`.
-- Rust: `conformance:rust` (7 tests).
-
----
-
-[0.1.0]: https://github.com/IceMasterT/7h3-protocol-aip/releases/tag/v0.1.0