@fidacy/mcp 0.1.4 → 0.1.6

package/dist/assess.js

@@ -1,139 +1,120 @@
-// Self-contained client for the LIVE Fidacy engine POST /v1/assess.
-//
-// This mirrors the request/response shape of the OSS @fidacy/sdk client EXACTLY
-// but does NOT depend on it: the MCP package stays self-contained so a single
-// install ships both the signed verdict layer (this) and the payment firewall.
-//
-// The returned signed proof is `riskPayloadJws` + `signingKeyId`, verifiable by
-// anyone via @fidacy/verify against {engineUrl}/.well-known/jwks.json.
-//
-// Secret safety: the API key, request body, and any secret are NEVER logged,
-// echoed, or attached to an error. Errors carry only stable type/status.
-/**
- * Typed error from the engine. `message` is STATIC and never contains the key or
- * request body. `type` is the stable engine error code (or a client code), and
- * `status` is the HTTP status (0 for network/timeout).
- */
-export class AssessError extends Error {
-    type;
-    status;
-    details;
-    rejection_reasons;
-    constructor(opts) {
-        super(`Fidacy assess error (${opts.type}, HTTP ${opts.status})`);
-        this.name = "AssessError";
-        this.type = opts.type;
-        this.status = opts.status;
-        this.details = opts.details;
-        this.rejection_reasons = opts.rejection_reasons;
-    }
-}
-const DEFAULT_TIMEOUT = 10_000;
-const DEFAULT_RETRIES = 2;
-const defaultBackoff = (n) => Math.min(200 * 2 ** n, 2_000);
+// src/assess.ts
+var AssessError = class extends Error {
+  type;
+  status;
+  details;
+  rejection_reasons;
+  constructor(opts) {
+    super(`Fidacy assess error (${opts.type}, HTTP ${opts.status})`);
+    this.name = "AssessError";
+    this.type = opts.type;
+    this.status = opts.status;
+    this.details = opts.details;
+    this.rejection_reasons = opts.rejection_reasons;
+  }
+};
+var DEFAULT_TIMEOUT = 1e4;
+var DEFAULT_RETRIES = 2;
+var defaultBackoff = (n) => Math.min(200 * 2 ** n, 2e3);
 function isRecord(v) {
-    return typeof v === "object" && v !== null;
+  return typeof v === "object" && v !== null;
 }
 function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
+  return new Promise((resolve) => setTimeout(resolve, ms));
 }
-/**
- * Call the live engine's POST /v1/assess and return the signed trust verdict.
- *
- * Retries ONLY when an idempotency key was supplied, on 5xx/429/network/timeout,
- * with small exponential backoff and a per-request AbortController timeout. This
- * mirrors the @fidacy/sdk request() behavior. Self-contained; no sdk import.
- */
-export async function assessAction(params, cfg) {
-    const fetchImpl = cfg.fetchImpl ?? globalThis.fetch;
-    if (typeof fetchImpl !== "function") {
-        throw new AssessError({ type: "config_error", status: 0 });
-    }
-    const baseUrl = cfg.engineUrl.replace(/\/+$/, "");
-    const url = `${baseUrl}/v1/assess`;
-    const timeoutMs = cfg.timeoutMs ?? DEFAULT_TIMEOUT;
-    const maxRetries = cfg.maxRetries ?? DEFAULT_RETRIES;
-    const backoffMs = cfg.backoffMs ?? defaultBackoff;
-    // Build the body with snake_case wire keys, omitting unset keys entirely.
-    const body = {
-        kind: params.kind ?? "ap2_payment",
-        mandate: params.mandate,
-    };
-    if (params.mandateType !== undefined)
-        body.mandateType = params.mandateType;
-    if (params.a2a !== undefined)
-        body.a2a = params.a2a;
-    if (params.spendingMandate !== undefined)
-        body.spending_mandate = params.spendingMandate;
-    if (params.idempotencyKey !== undefined)
-        body.idempotency_key = params.idempotencyKey;
-    const payload = JSON.stringify(body);
-    const headers = {
-        "content-type": "application/json",
-        authorization: `Bearer ${cfg.apiKey}`,
-    };
-    if (params.a2a !== undefined)
-        headers["A2A-Version"] = "0.1.0";
-    // Retry is only safe when the caller supplied an idempotency key.
-    const canRetryTransient = params.idempotencyKey !== undefined;
-    let attempt = 0;
-    for (;;) {
-        try {
-            return await postOnce(fetchImpl, url, headers, payload, timeoutMs);
-        }
-        catch (err) {
-            const isTransient = err instanceof AssessError &&
-                (err.status === 0 || err.status === 429 || err.status >= 500);
-            const canRetry = isTransient && canRetryTransient && attempt < maxRetries;
-            if (!canRetry)
-                throw err;
-            await sleep(backoffMs(attempt));
-            attempt += 1;
-        }
+function requireSafeBaseUrl(raw) {
+  const trimmed = String(raw ?? "").replace(/\/+$/, "");
+  let u;
+  try {
+    u = new URL(trimmed);
+  } catch {
+    throw new AssessError({ type: "config_error", status: 0 });
+  }
+  const isLocalHttp = u.protocol === "http:" && (u.hostname === "localhost" || u.hostname === "127.0.0.1" || u.hostname === "[::1]");
+  if (u.protocol !== "https:" && !isLocalHttp) {
+    throw new AssessError({ type: "config_error", status: 0 });
+  }
+  return trimmed;
+}
+async function assessAction(params, cfg) {
+  const fetchImpl = cfg.fetchImpl ?? globalThis.fetch;
+  if (typeof fetchImpl !== "function") {
+    throw new AssessError({ type: "config_error", status: 0 });
+  }
+  const baseUrl = requireSafeBaseUrl(cfg.engineUrl);
+  const url = `${baseUrl}/v1/assess`;
+  const timeoutMs = cfg.timeoutMs ?? DEFAULT_TIMEOUT;
+  const maxRetries = cfg.maxRetries ?? DEFAULT_RETRIES;
+  const backoffMs = cfg.backoffMs ?? defaultBackoff;
+  const body = {
+    kind: params.kind ?? "ap2_payment",
+    mandate: params.mandate
+  };
+  if (params.mandateType !== void 0) body.mandateType = params.mandateType;
+  if (params.a2a !== void 0) body.a2a = params.a2a;
+  if (params.spendingMandate !== void 0) body.spending_mandate = params.spendingMandate;
+  if (params.idempotencyKey !== void 0) body.idempotency_key = params.idempotencyKey;
+  const payload = JSON.stringify(body);
+  if (payload.length > 256 * 1024) {
+    throw new AssessError({ type: "config_error", status: 0 });
+  }
+  const headers = {
+    "content-type": "application/json",
+    authorization: `Bearer ${cfg.apiKey}`
+  };
+  if (params.a2a !== void 0) headers["A2A-Version"] = "0.1.0";
+  const canRetryTransient = params.idempotencyKey !== void 0;
+  let attempt = 0;
+  for (; ; ) {
+    try {
+      return await postOnce(fetchImpl, url, headers, payload, timeoutMs);
+    } catch (err) {
+      const isTransient = err instanceof AssessError && (err.status === 0 || err.status === 429 || err.status >= 500);
+      const canRetry = isTransient && canRetryTransient && attempt < maxRetries;
+      if (!canRetry) throw err;
+      await sleep(backoffMs(attempt));
+      attempt += 1;
     }
+  }
 }
 async function postOnce(fetchImpl, url, headers, payload, timeoutMs) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
-    let res;
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  let res;
+  try {
+    res = await fetchImpl(url, {
+      method: "POST",
+      headers,
+      body: payload,
+      signal: controller.signal
+    });
+  } catch (err) {
+    const aborted = controller.signal.aborted;
+    throw new AssessError({ type: aborted ? "timeout" : "network_error", status: 0 });
+  } finally {
+    clearTimeout(timer);
+  }
+  const text = await res.text();
+  let parsed = void 0;
+  if (text) {
     try {
-        res = await fetchImpl(url, {
-            method: "POST",
-            headers,
-            body: payload,
-            signal: controller.signal,
-        });
-    }
-    catch (err) {
-        const aborted = controller.signal.aborted;
-        // Never attach the key/body/err message that could leak a secret.
-        throw new AssessError({ type: aborted ? "timeout" : "network_error", status: 0 });
-    }
-    finally {
-        clearTimeout(timer);
-    }
-    const text = await res.text();
-    let parsed = undefined;
-    if (text) {
-        try {
-            parsed = JSON.parse(text);
-        }
-        catch {
-            // non-JSON response: handled below by status
-        }
-    }
-    if (!res.ok) {
-        const type = (isRecord(parsed) && typeof parsed.error === "string" && parsed.error) ||
-            `http_${res.status}`;
-        const details = isRecord(parsed) ? parsed.details : undefined;
-        const rejection_reasons = isRecord(parsed) && Array.isArray(parsed.rejection_reasons)
-            ? parsed.rejection_reasons
-            : undefined;
-        throw new AssessError({ type, status: res.status, details, rejection_reasons });
-    }
-    if (!isRecord(parsed)) {
-        throw new AssessError({ type: "invalid_response", status: res.status });
+      parsed = JSON.parse(text);
+    } catch {
     }
-    return parsed;
+  }
+  if (!res.ok) {
+    const type = isRecord(parsed) && typeof parsed.error === "string" && parsed.error || `http_${res.status}`;
+    const details = isRecord(parsed) ? parsed.details : void 0;
+    const rejection_reasons = isRecord(parsed) && Array.isArray(parsed.rejection_reasons) ? parsed.rejection_reasons : void 0;
+    throw new AssessError({ type, status: res.status, details, rejection_reasons });
+  }
+  if (!isRecord(parsed)) {
+    throw new AssessError({ type: "invalid_response", status: res.status });
+  }
+  return parsed;
 }
-//# sourceMappingURL=assess.js.map
+export {
+  AssessError,
+  assessAction,
+  requireSafeBaseUrl
+};