@nekzus/liop-studio 1.0.0-alpha.8 → 1.0.0-beta.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +71 -28
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -1,53 +1,96 @@
|
|
|
1
|
-
|
|
1
|
+
<div align="center">
|
|
2
|
+
<picture>
|
|
3
|
+
<source media="(prefers-color-scheme: dark)" srcset="../../docs/logo/dark.svg">
|
|
4
|
+
<img alt="Logic-Injection-on-Origin Protocol Logo" src="../../docs/logo/light.svg" width="600">
|
|
5
|
+
</picture>
|
|
6
|
+
|
|
7
|
+
<h1>@nekzus/liop-studio</h1>
|
|
8
|
+
<p><strong>LIOP Sovereign Studio & Network Scanner</strong></p>
|
|
9
|
+
<p>Interactive developer studio, real-time telemetry console, and zero-trust capability scanner for the Logic-Injection-on-Origin Protocol (LIOP) and Model Context Protocol (MCP).</p>
|
|
10
|
+
|
|
11
|
+
<p align="center">
|
|
12
|
+
<a href="https://www.npmjs.com/package/@nekzus/liop-studio"><img src="https://img.shields.io/npm/v/@nekzus/liop-studio.svg" alt="npm version"></a>
|
|
13
|
+
<a href="https://github.com/Nekzus/LIOP/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-Apache_2.0-blue.svg" alt="License"></a>
|
|
14
|
+
<a href="https://nekzus-32.mintlify.app/typescript-sdk/playground"><img src="https://img.shields.io/badge/docs-mintlify-0D9373?style=flat" alt="Docs"></a>
|
|
15
|
+
<a href="https://deepwiki.com/Nekzus/LIOP"><img src="https://deepwiki.com/badge.svg" alt="Ask DeepWiki"></a>
|
|
16
|
+
</p>
|
|
17
|
+
</div>
|
|
2
18
|
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
19
|
+
---
|
|
20
|
+
|
|
21
|
+
## 📚 Official Documentation
|
|
22
|
+
|
|
23
|
+
Interactive guides and architectural deep dives for LIOP Studio and Playground are hosted on Mintlify:
|
|
24
|
+
|
|
25
|
+
| Documentation Section | Focus Area | Canonical Guide |
|
|
26
|
+
|---|---|---|
|
|
27
|
+
| **Studio & Playground** | Web console architecture, 5-tab output inspector, and execution flows | [Playground & Studio Guide](https://nekzus-32.mintlify.app/typescript-sdk/playground) |
|
|
28
|
+
| **Observability Runbook** | Prometheus metrics catalog and 26-panel Grafana master dashboard | [Observability Runbook](https://nekzus-32.mintlify.app/operations/observability-runbook) |
|
|
29
|
+
| **TypeScript SDK** | Core runtime integration, client negotiation, and server sandboxing | [SDK Overview](https://nekzus-32.mintlify.app/typescript-sdk/overview) |
|
|
30
|
+
|
|
31
|
+
---
|
|
32
|
+
|
|
33
|
+
## Overview
|
|
34
|
+
|
|
35
|
+
`@nekzus/liop-studio` provides both a full-featured web dashboard and a headless CLI scanner to interact with LIOP sovereign enclaves and standard MCP servers. It allows developers and security auditors to test Logic-Injection-on-Origin payloads, measure AST instruction fuel consumption, trace post-quantum cryptographic handshakes, and inspect ZK-Receipts in real time.
|
|
6
36
|
|
|
7
|
-
|
|
37
|
+
### Key Capabilities
|
|
38
|
+
|
|
39
|
+
- **Interactive Web Console (`:16000`)**: Full-featured React 19 UI with real-time SSE execution streaming, CodeMirror 6 code editor, and live cluster health monitoring.
|
|
40
|
+
- **5-Tab Results Inspector**:
|
|
41
|
+
- `Output`: Archetype-specific formatted data and sanitized JSON structures.
|
|
42
|
+
- `Debug`: Granular step-by-step traces across AST validation, sandbox execution, and egress filtering.
|
|
43
|
+
- `Telemetry`: In-situ AST fuel consumption (quantized to 100 units), BPE token counting (`o200k_base`), and wire egress savings.
|
|
44
|
+
- `Export`: Auto-generated client integration snippets (TypeScript SDK, Python, cURL, gRPC).
|
|
45
|
+
- `History`: In-memory inspection of the last 20 execution runs.
|
|
46
|
+
- **Headless Network Scanner**: CLI command (`scan`) to perform non-interactive health probes and capability discovery over HTTP, gRPC, and P2P multiaddrs.
|
|
47
|
+
- **Dual Dynamic Themes**: High-contrast OLED Obsidian (`#000000`) and Slate Navy (`#0f172a`) modes backed by semantic CSS custom properties.
|
|
8
48
|
|
|
9
49
|
---
|
|
10
50
|
|
|
11
|
-
##
|
|
51
|
+
## Quickstart
|
|
12
52
|
|
|
13
53
|
### 1. Launch Interactive Studio (Web UI)
|
|
54
|
+
|
|
55
|
+
Run the studio directly using `npx` (serves the web interface on `http://localhost:16000`):
|
|
56
|
+
|
|
14
57
|
```bash
|
|
15
|
-
# Launch on
|
|
58
|
+
# Launch default web console on port 16000
|
|
16
59
|
npx @nekzus/liop-studio
|
|
17
60
|
|
|
18
|
-
# Launch targeting a specific MCP endpoint
|
|
19
|
-
npx @nekzus/liop-studio --http "http://localhost:
|
|
61
|
+
# Launch targeting a specific MCP HTTP endpoint
|
|
62
|
+
npx @nekzus/liop-studio --http "http://localhost:15000/mcp"
|
|
20
63
|
|
|
21
|
-
# Launch targeting a native LIOP gRPC
|
|
22
|
-
npx @nekzus/liop-studio --grpc "127.0.0.1:
|
|
64
|
+
# Launch targeting a native LIOP gRPC enclave
|
|
65
|
+
npx @nekzus/liop-studio --grpc "127.0.0.1:15011"
|
|
23
66
|
```
|
|
24
67
|
|
|
25
|
-
### 2. Run Headless
|
|
68
|
+
### 2. Run Headless Capability Scan (CLI)
|
|
69
|
+
|
|
70
|
+
Perform instant health, discovery, and security scans from terminal scripts or CI pipelines:
|
|
71
|
+
|
|
26
72
|
```bash
|
|
27
|
-
# Quick health and capabilities scan of an MCP
|
|
28
|
-
npx @nekzus/liop-studio scan http://localhost:
|
|
73
|
+
# Quick health and capabilities scan of an HTTP MCP / LIOP gateway
|
|
74
|
+
npx @nekzus/liop-studio scan http://localhost:15000/mcp
|
|
29
75
|
|
|
30
|
-
# Scan a native gRPC
|
|
31
|
-
npx @nekzus/liop-studio scan 127.0.0.1:
|
|
76
|
+
# Scan a native gRPC sovereign enclave
|
|
77
|
+
npx @nekzus/liop-studio scan 127.0.0.1:15011
|
|
32
78
|
|
|
33
79
|
# Scan a P2P DHT multiaddr
|
|
34
|
-
npx @nekzus/liop-studio scan /ip4/127.0.0.1/tcp/
|
|
80
|
+
npx @nekzus/liop-studio scan /ip4/127.0.0.1/tcp/15001/p2p/12D3KooW...
|
|
35
81
|
```
|
|
36
82
|
|
|
37
83
|
---
|
|
38
84
|
|
|
39
|
-
##
|
|
40
|
-
- **CWE-78 Command Injection Defense**: Stdio subprocess execution strictly enforces `{ shell: false }` with executable and argument sanitization.
|
|
41
|
-
- **CWE-918 SSRF Protection**: All outbound HTTP probes validate URLs and block cloud metadata IP addresses (`169.254.169.254`).
|
|
42
|
-
- **NIST SP 800-53 Timing Side-Channel Protection**: Deterministic instruction fuel quantized to 100 units.
|
|
43
|
-
- **Zero-Trust Origin Execution**: V8 Isolate sandboxing with poisoned globals and frozen prototypes.
|
|
44
|
-
|
|
45
|
-
---
|
|
85
|
+
## Security & Sandboxing Guardrails
|
|
46
86
|
|
|
47
|
-
|
|
48
|
-
|
|
87
|
+
- **CWE-78 Command Injection Defense**: Stdio subprocess spawning strictly enforces `{ shell: false }` with rigorous argument and binary sanitization.
|
|
88
|
+
- **CWE-918 SSRF Protection**: All outbound HTTP probes validate destination addresses and explicitly block cloud metadata IPs (`169.254.169.254`).
|
|
89
|
+
- **NIST SP 800-53 Timing Side-Channel Elimination**: Deterministic AST instruction fuel scoring quantized into 100-unit buckets (`stddev = 0`).
|
|
90
|
+
- **Zero-Trust V8 Sandbox**: PAYLOAD execution occurs within isolated V8 contexts with 25 poisoned globals and 11 frozen prototypes.
|
|
49
91
|
|
|
50
92
|
---
|
|
51
93
|
|
|
52
|
-
##
|
|
53
|
-
|
|
94
|
+
## License
|
|
95
|
+
|
|
96
|
+
Licensed under the [Apache License, Version 2.0](../../LICENSE). Copyright 2026 [Nekzus Solutions](https://github.com/Nekzus) and contributors.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@nekzus/liop-studio",
|
|
3
|
-
"version": "1.0.0-
|
|
3
|
+
"version": "1.0.0-beta.1",
|
|
4
4
|
"description": "LIOP Sovereign Studio — Developer studio, mesh scanner, and logic-on-origin inspector for LIOP & MCP.",
|
|
5
5
|
"author": "Nekzus Solutions and contributors",
|
|
6
6
|
"license": "Apache-2.0",
|
|
@@ -58,7 +58,7 @@
|
|
|
58
58
|
},
|
|
59
59
|
"dependencies": {
|
|
60
60
|
"@hono/node-server": "2.1.1",
|
|
61
|
-
"@nekzus/liop": "2.
|
|
61
|
+
"@nekzus/liop": "2.5.0-beta.1",
|
|
62
62
|
"commander": "^13.1.0",
|
|
63
63
|
"hono": "4.13.8",
|
|
64
64
|
"picocolors": "^1.1.1",
|