@hai.ai/jacs 0.6.0

package/index.js

@@ -0,0 +1,343 @@
+/* tslint:disable */
+/* eslint-disable */
+/* prettier-ignore */
+
+/* auto-generated by NAPI-RS */
+
+const { existsSync, readFileSync } = require('fs')
+const { join } = require('path')
+
+const { platform, arch } = process
+
+let nativeBinding = null
+let localFileExisted = false
+let loadError = null
+
+function isMusl() {
+  // For Node 10
+  if (!process.report || typeof process.report.getReport !== 'function') {
+    try {
+      const lddPath = require('child_process').execSync('which ldd').toString().trim()
+      return readFileSync(lddPath, 'utf8').includes('musl')
+    } catch (e) {
+      return true
+    }
+  } else {
+    const { glibcVersionRuntime } = process.report.getReport().header
+    return !glibcVersionRuntime
+  }
+}
+
+switch (platform) {
+  case 'android':
+    switch (arch) {
+      case 'arm64':
+        localFileExisted = existsSync(join(__dirname, 'jacs.android-arm64.node'))
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./jacs.android-arm64.node')
+          } else {
+            nativeBinding = require('@hai.ai/jacs-android-arm64')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      case 'arm':
+        localFileExisted = existsSync(join(__dirname, 'jacs.android-arm-eabi.node'))
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./jacs.android-arm-eabi.node')
+          } else {
+            nativeBinding = require('@hai.ai/jacs-android-arm-eabi')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      default:
+        throw new Error(`Unsupported architecture on Android ${arch}`)
+    }
+    break
+  case 'win32':
+    switch (arch) {
+      case 'x64':
+        localFileExisted = existsSync(
+          join(__dirname, 'jacs.win32-x64-msvc.node')
+        )
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./jacs.win32-x64-msvc.node')
+          } else {
+            nativeBinding = require('@hai.ai/jacs-win32-x64-msvc')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      case 'ia32':
+        localFileExisted = existsSync(
+          join(__dirname, 'jacs.win32-ia32-msvc.node')
+        )
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./jacs.win32-ia32-msvc.node')
+          } else {
+            nativeBinding = require('@hai.ai/jacs-win32-ia32-msvc')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      case 'arm64':
+        localFileExisted = existsSync(
+          join(__dirname, 'jacs.win32-arm64-msvc.node')
+        )
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./jacs.win32-arm64-msvc.node')
+          } else {
+            nativeBinding = require('@hai.ai/jacs-win32-arm64-msvc')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      default:
+        throw new Error(`Unsupported architecture on Windows: ${arch}`)
+    }
+    break
+  case 'darwin':
+    localFileExisted = existsSync(join(__dirname, 'jacs.darwin-universal.node'))
+    try {
+      if (localFileExisted) {
+        nativeBinding = require('./jacs.darwin-universal.node')
+      } else {
+        nativeBinding = require('@hai.ai/jacs-darwin-universal')
+      }
+      break
+    } catch {}
+    switch (arch) {
+      case 'x64':
+        localFileExisted = existsSync(join(__dirname, 'jacs.darwin-x64.node'))
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./jacs.darwin-x64.node')
+          } else {
+            nativeBinding = require('@hai.ai/jacs-darwin-x64')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      case 'arm64':
+        localFileExisted = existsSync(
+          join(__dirname, 'jacs.darwin-arm64.node')
+        )
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./jacs.darwin-arm64.node')
+          } else {
+            nativeBinding = require('@hai.ai/jacs-darwin-arm64')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      default:
+        throw new Error(`Unsupported architecture on macOS: ${arch}`)
+    }
+    break
+  case 'freebsd':
+    if (arch !== 'x64') {
+      throw new Error(`Unsupported architecture on FreeBSD: ${arch}`)
+    }
+    localFileExisted = existsSync(join(__dirname, 'jacs.freebsd-x64.node'))
+    try {
+      if (localFileExisted) {
+        nativeBinding = require('./jacs.freebsd-x64.node')
+      } else {
+        nativeBinding = require('@hai.ai/jacs-freebsd-x64')
+      }
+    } catch (e) {
+      loadError = e
+    }
+    break
+  case 'linux':
+    switch (arch) {
+      case 'x64':
+        if (isMusl()) {
+          localFileExisted = existsSync(
+            join(__dirname, 'jacs.linux-x64-musl.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./jacs.linux-x64-musl.node')
+            } else {
+              nativeBinding = require('@hai.ai/jacs-linux-x64-musl')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        } else {
+          localFileExisted = existsSync(
+            join(__dirname, 'jacs.linux-x64-gnu.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./jacs.linux-x64-gnu.node')
+            } else {
+              nativeBinding = require('@hai.ai/jacs-linux-x64-gnu')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        }
+        break
+      case 'arm64':
+        if (isMusl()) {
+          localFileExisted = existsSync(
+            join(__dirname, 'jacs.linux-arm64-musl.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./jacs.linux-arm64-musl.node')
+            } else {
+              nativeBinding = require('@hai.ai/jacs-linux-arm64-musl')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        } else {
+          localFileExisted = existsSync(
+            join(__dirname, 'jacs.linux-arm64-gnu.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./jacs.linux-arm64-gnu.node')
+            } else {
+              nativeBinding = require('@hai.ai/jacs-linux-arm64-gnu')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        }
+        break
+      case 'arm':
+        if (isMusl()) {
+          localFileExisted = existsSync(
+            join(__dirname, 'jacs.linux-arm-musleabihf.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./jacs.linux-arm-musleabihf.node')
+            } else {
+              nativeBinding = require('@hai.ai/jacs-linux-arm-musleabihf')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        } else {
+          localFileExisted = existsSync(
+            join(__dirname, 'jacs.linux-arm-gnueabihf.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./jacs.linux-arm-gnueabihf.node')
+            } else {
+              nativeBinding = require('@hai.ai/jacs-linux-arm-gnueabihf')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        }
+        break
+      case 'riscv64':
+        if (isMusl()) {
+          localFileExisted = existsSync(
+            join(__dirname, 'jacs.linux-riscv64-musl.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./jacs.linux-riscv64-musl.node')
+            } else {
+              nativeBinding = require('@hai.ai/jacs-linux-riscv64-musl')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        } else {
+          localFileExisted = existsSync(
+            join(__dirname, 'jacs.linux-riscv64-gnu.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./jacs.linux-riscv64-gnu.node')
+            } else {
+              nativeBinding = require('@hai.ai/jacs-linux-riscv64-gnu')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        }
+        break
+      case 's390x':
+        localFileExisted = existsSync(
+          join(__dirname, 'jacs.linux-s390x-gnu.node')
+        )
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./jacs.linux-s390x-gnu.node')
+          } else {
+            nativeBinding = require('@hai.ai/jacs-linux-s390x-gnu')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      default:
+        throw new Error(`Unsupported architecture on Linux: ${arch}`)
+    }
+    break
+  default:
+    throw new Error(`Unsupported OS: ${platform}, architecture: ${arch}`)
+}
+
+if (!nativeBinding) {
+  if (loadError) {
+    throw loadError
+  }
+  throw new Error(`Failed to load native binding`)
+}
+
+const { JacsAgent, hashString, createConfig, createAgent, trustAgent, listTrustedAgents, untrustAgent, isTrusted, getTrustedAgent, audit, load, signAgent, verifyString, signString, verifyAgent, updateAgent, verifyDocumentStandalone, verifyDocument, updateDocument, verifySignature, createAgreement, signAgreement, createDocument, checkAgreement, signRequest, verifyResponse, verifyResponseWithAgentId, fetchRemoteKey, generateVerifyLink } = nativeBinding
+
+module.exports.JacsAgent = JacsAgent
+module.exports.hashString = hashString
+module.exports.createConfig = createConfig
+module.exports.createAgent = createAgent
+module.exports.trustAgent = trustAgent
+module.exports.listTrustedAgents = listTrustedAgents
+module.exports.untrustAgent = untrustAgent
+module.exports.isTrusted = isTrusted
+module.exports.getTrustedAgent = getTrustedAgent
+module.exports.audit = audit
+module.exports.load = load
+module.exports.signAgent = signAgent
+module.exports.verifyString = verifyString
+module.exports.signString = signString
+module.exports.verifyAgent = verifyAgent
+module.exports.updateAgent = updateAgent
+module.exports.verifyDocumentStandalone = verifyDocumentStandalone
+module.exports.verifyDocument = verifyDocument
+module.exports.updateDocument = updateDocument
+module.exports.verifySignature = verifySignature
+module.exports.createAgreement = createAgreement
+module.exports.signAgreement = signAgreement
+module.exports.createDocument = createDocument
+module.exports.checkAgreement = checkAgreement
+module.exports.signRequest = signRequest
+module.exports.verifyResponse = verifyResponse
+module.exports.verifyResponseWithAgentId = verifyResponseWithAgentId
+module.exports.fetchRemoteKey = fetchRemoteKey
+module.exports.generateVerifyLink = generateVerifyLink

package/mcp.d.ts

@@ -0,0 +1,61 @@
+import { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
+import { JSONRPCMessage } from "@modelcontextprotocol/sdk/types.js";
+import { IncomingMessage, ServerResponse } from "node:http";
+/**
+ * JACS Transport Proxy - Wraps any transport with JACS encryption
+ *
+ * This proxy sits between the MCP SDK and the actual transport,
+ * intercepting serialized JSON strings (not JSON-RPC objects)
+ */
+export declare class JACSTransportProxy implements Transport {
+    private transport;
+    private jacsConfigPath?;
+    private jacsOperational;
+    private proxyId;
+    constructor(transport: Transport, role: "client" | "server", jacsConfigPath?: string | undefined);
+    onclose?: () => void;
+    onerror?: (error: Error) => void;
+    onmessage?: (message: JSONRPCMessage) => void;
+    start(): Promise<void>;
+    close(): Promise<void>;
+    send(message: JSONRPCMessage): Promise<void>;
+    get sessionId(): string | undefined;
+    /**
+     * REQUIRED for SSE (Server-Sent Events) transport pattern in MCP.
+     *
+     * WHY THIS EXISTS:
+     * SSE is inherently unidirectional (server→client), but MCP requires bidirectional communication.
+     * The MCP SSE implementation solves this with a hybrid approach:
+     * - Server→Client: Uses SSE stream for real-time messages
+     * - Client→Server: Uses HTTP POST to a specific endpoint
+     *
+     * This function intercepts those client POST requests, decrypts JACS payloads,
+     * and forwards the decrypted messages to the underlying SSE transport handler.
+     *
+     * Without this, JACS-encrypted client messages would never reach the MCP server.
+     */
+    handlePostMessage?(req: IncomingMessage & {
+        auth?: any;
+    }, res: ServerResponse, rawBodyString?: string): Promise<void>;
+    private handleIncomingMessage;
+    /**
+     * Removes null and undefined values from JSON objects to prevent MCP schema validation failures.
+     *
+     * WORKAROUND for MCP JSON Schema validation issues:
+     * - Addresses strict validators (like Anthropic's API) that reject schemas with null values
+     * - Handles edge cases where tools have null inputSchema causing client validation errors
+     * - Prevents "invalid_type: expected object, received undefined" errors in TypeScript SDK v1.9.0
+     * - Cleans up malformed schemas before transmission to avoid -32602 JSON-RPC errors
+     *
+     * Related issues:
+     * - https://github.com/modelcontextprotocol/typescript-sdk/issues/400 (null schema tools)
+     * - https://github.com/anthropics/claude-code/issues/586 (Anthropic strict Draft 2020-12)
+     * - https://github.com/agno-agi/agno/issues/2791 (missing type field)
+     *
+     * @param obj - The object to clean (typically MCP tool/resource schemas)
+     * @returns A new object with all null/undefined values recursively removed
+     */
+    private removeNullValues;
+}
+export declare function createJACSTransportProxy(transport: Transport, configPath: string, role: "client" | "server"): JACSTransportProxy;
+export declare function createJACSTransportProxyAsync(transport: Transport, configPath: string, role: "client" | "server"): Promise<JACSTransportProxy>;