codehere 0.1.1

package/dist/infrastructure/protocols/a2a-protocol.js

@@ -0,0 +1,314 @@
+/**
+ * Infrastructure: Agent-to-Agent (A2A) Communication Protocol
+ * Enables Codehere to communicate with other AI agents
+ * Standard protocol for agent collaboration and delegation
+ *
+ * Based on research: A2A Protocol (Linux Foundation/Google)
+ * - 3-layer architecture: Canonical Data Model, Abstract Operations, Protocol Bindings
+ * - Protocol Buffer messages for data integrity
+ * - Supports JSON-RPC, gRPC, HTTP/REST bindings
+ * - Agentic AI Metadata for capability discovery
+ * - Asynchronous tasks with webhooks
+ * - Server-Sent Events (SSE) for streaming
+ * - Agent Opacity (black box service economy)
+ *
+ * Vision: Codehere as "The Memory Agent" - other agents call Codehere for memory/context
+ * Research: See docs/NOTEBOOKLM_RESEARCH_PROMPTS.md - Prompt #5
+ */
+/**
+ * A2A Protocol Handler
+ * Handles agent-to-agent communication
+ */
+export class A2AProtocol {
+    agentId;
+    agentName;
+    agents = new Map();
+    messageHandlers = new Map();
+    pendingRequests = new Map();
+    constructor(agentId, agentName) {
+        this.agentId = agentId;
+        this.agentName = agentName;
+        // Register self
+        this.registerAgent({
+            id: this.agentId,
+            name: this.agentName,
+            capabilities: ['memory_query', 'memory_store', 'code_search', 'code_explain', 'code_edit'],
+            local: true,
+        });
+    }
+    /**
+     * Register an agent
+     */
+    registerAgent(agent) {
+        this.agents.set(agent.id, agent);
+    }
+    /**
+     * Unregister an agent
+     */
+    unregisterAgent(agentId) {
+        this.agents.delete(agentId);
+    }
+    /**
+     * Register a message handler
+     */
+    registerHandler(action, handler) {
+        this.messageHandlers.set(action, handler);
+    }
+    /**
+     * Send a request to another agent
+     */
+    async sendRequest(to, action, payload, timeout = 30000) {
+        const agent = this.agents.get(to);
+        if (!agent) {
+            throw new Error(`Agent not found: ${to}`);
+        }
+        const messageId = this.generateMessageId();
+        const request = {
+            id: messageId,
+            from: this.agentId,
+            to,
+            type: 'request',
+            action,
+            payload,
+            timestamp: Date.now(),
+        };
+        // Create promise for response
+        return new Promise((resolve, reject) => {
+            // Set timeout
+            const timeoutHandle = setTimeout(() => {
+                this.pendingRequests.delete(messageId);
+                reject(new Error(`Request timeout: ${action} to ${to}`));
+            }, timeout);
+            // Store pending request
+            this.pendingRequests.set(messageId, {
+                resolve,
+                reject,
+                timeout: timeoutHandle,
+            });
+            // Send request
+            if (agent.local) {
+                // Local agent - handle directly
+                this.handleLocalRequest(request).catch(reject);
+            }
+            else if (agent.endpoint) {
+                // Remote agent - send via HTTP
+                this.sendHTTPRequest(agent.endpoint, request).catch(reject);
+            }
+            else {
+                clearTimeout(timeoutHandle);
+                this.pendingRequests.delete(messageId);
+                reject(new Error(`Agent has no endpoint: ${to}`));
+            }
+        });
+    }
+    /**
+     * Handle incoming message
+     */
+    async handleMessage(message) {
+        if (message.type === 'request') {
+            return await this.handleRequest(message);
+        }
+        else if (message.type === 'response') {
+            return await this.handleResponse(message);
+        }
+        else if (message.type === 'notification') {
+            return await this.handleNotification(message);
+        }
+    }
+    /**
+     * Handle incoming request
+     */
+    async handleRequest(request) {
+        const handler = this.messageHandlers.get(request.action);
+        if (!handler) {
+            return {
+                id: this.generateMessageId(),
+                from: this.agentId,
+                to: request.from,
+                type: 'response',
+                action: request.action,
+                payload: {},
+                timestamp: Date.now(),
+                correlationId: request.id,
+                success: false,
+                error: `Unknown action: ${request.action}`,
+            };
+        }
+        try {
+            const response = await handler(request);
+            response.correlationId = request.id;
+            return response;
+        }
+        catch (error) {
+            return {
+                id: this.generateMessageId(),
+                from: this.agentId,
+                to: request.from,
+                type: 'response',
+                action: request.action,
+                payload: {},
+                timestamp: Date.now(),
+                correlationId: request.id,
+                success: false,
+                error: error instanceof Error ? error.message : String(error),
+            };
+        }
+    }
+    /**
+     * Handle incoming response
+     */
+    async handleResponse(response) {
+        if (response.correlationId) {
+            const pending = this.pendingRequests.get(response.correlationId);
+            if (pending) {
+                clearTimeout(pending.timeout);
+                this.pendingRequests.delete(response.correlationId);
+                if (response.success) {
+                    pending.resolve(response);
+                }
+                else {
+                    pending.reject(new Error(response.error || 'Request failed'));
+                }
+            }
+        }
+    }
+    /**
+     * Handle incoming notification
+     */
+    async handleNotification(notification) {
+        // Handle notifications (e.g., agent discovery, status updates)
+        // Can be extended for specific notification types
+    }
+    /**
+     * Handle local request (same process)
+     */
+    async handleLocalRequest(request) {
+        const response = await this.handleRequest(request);
+        // Send response back
+        await this.handleMessage(response);
+    }
+    /**
+     * Send HTTP request to remote agent
+     */
+    async sendHTTPRequest(endpoint, request) {
+        // TODO: Implement HTTP transport for remote agents
+        // For now, local-only
+        throw new Error('HTTP transport not yet implemented');
+    }
+    /**
+     * Generate unique message ID
+     */
+    generateMessageId() {
+        return `${this.agentId}-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
+    }
+    /**
+     * Get registered agents
+     */
+    getAgents() {
+        return Array.from(this.agents.values());
+    }
+    /**
+     * Discover agents (local discovery for now)
+     */
+    discoverAgents() {
+        // For now, return registered agents
+        // In future, can implement mDNS, service registry, etc.
+        return this.getAgents();
+    }
+}
+/**
+ * Codehere A2A Agent Interface
+ * Exposes Codehere capabilities to other agents
+ */
+export class CodehereA2AAgent {
+    protocol;
+    container;
+    constructor(container) {
+        this.container = container;
+        this.protocol = new A2AProtocol('codehere', 'Codehere');
+        // Register handlers
+        this.registerHandlers();
+    }
+    /**
+     * Register A2A message handlers
+     */
+    registerHandlers() {
+        // Memory query handler
+        this.protocol.registerHandler('memory_query', async (request) => {
+            const memoryStream = this.container.memoryStreamService;
+            const memories = await memoryStream.retrieve(request.payload.query, request.payload.limit || 10);
+            return {
+                id: this.protocol['generateMessageId'](),
+                from: 'codehere',
+                to: request.from,
+                type: 'response',
+                action: 'memory_query',
+                payload: {
+                    memories: memories.map((m) => ({
+                        type: m.type,
+                        description: m.description,
+                        timestamp: m.timestamp,
+                        importance: m.importance,
+                    })),
+                },
+                timestamp: Date.now(),
+                correlationId: request.id,
+                success: true,
+            };
+        });
+        // Code search handler
+        this.protocol.registerHandler('code_search', async (request) => {
+            const useCase = this.container.askQuestionUseCase;
+            const result = await useCase.execute({
+                query: request.payload.query,
+                maxResults: request.payload.maxResults || 10,
+            });
+            return {
+                id: this.protocol['generateMessageId'](),
+                from: 'codehere',
+                to: request.from,
+                type: 'response',
+                action: 'code_search',
+                payload: {
+                    chunks: result.chunks.map((chunk) => ({
+                        filepath: chunk.filepath,
+                        content: chunk.content.substring(0, 500),
+                        score: chunk.score,
+                    })),
+                },
+                timestamp: Date.now(),
+                correlationId: request.id,
+                success: true,
+            };
+        });
+        // Memory store handler
+        this.protocol.registerHandler('memory_store', async (request) => {
+            const memoryStream = this.container.memoryStreamService;
+            await memoryStream.recordObservation(request.payload.description, request.payload.metadata || {});
+            return {
+                id: this.protocol['generateMessageId'](),
+                from: 'codehere',
+                to: request.from,
+                type: 'response',
+                action: 'memory_store',
+                payload: {},
+                timestamp: Date.now(),
+                correlationId: request.id,
+                success: true,
+            };
+        });
+    }
+    /**
+     * Get A2A protocol instance
+     */
+    getProtocol() {
+        return this.protocol;
+    }
+    /**
+     * Send request to another agent
+     */
+    async sendRequest(to, action, payload) {
+        return await this.protocol.sendRequest(to, action, payload);
+    }
+}
+//# sourceMappingURL=a2a-protocol.js.map

package/dist/infrastructure/protocols/a2a-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a-protocol.js","sourceRoot":"","sources":["../../../src/infrastructure/protocols/a2a-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAoCH;;;GAGG;AACH,MAAM,OAAO,WAAW;IAKF;IAAyB;IAJrC,MAAM,GAA0B,IAAI,GAAG,EAAE,CAAC;IAC1C,eAAe,GAA+D,IAAI,GAAG,EAAE,CAAC;IACxF,eAAe,GAAuH,IAAI,GAAG,EAAE,CAAC;IAExJ,YAAoB,OAAe,EAAU,SAAiB;QAA1C,YAAO,GAAP,OAAO,CAAQ;QAAU,cAAS,GAAT,SAAS,CAAQ;QAC5D,gBAAgB;QAChB,IAAI,CAAC,aAAa,CAAC;YACjB,EAAE,EAAE,IAAI,CAAC,OAAO;YAChB,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,YAAY,EAAE,CAAC,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,CAAC;YAC1F,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAe;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAe;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,MAAc,EAAE,OAAsD;QACpF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,MAAc,EAAE,OAA4B,EAAE,UAAkB,KAAK;QACjG,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAe;YAC1B,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,EAAE;YACF,IAAI,EAAE,SAAS;YACf,MAAM;YACN,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,8BAA8B;QAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,cAAc;YACd,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBACpC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,wBAAwB;YACxB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE;gBAClC,OAAO;gBACP,MAAM;gBACN,OAAO,EAAE,aAAa;aACvB,CAAC,CAAC;YAEH,eAAe;YACf,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,gCAAgC;gBAChC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjD,CAAC;iBAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC1B,+BAA+B;gBAC/B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAAmB;QACrC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,OAAqB,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACvC,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,OAAsB,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC3C,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAA0B,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,OAAmB;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,iBAAiB,EAAE;gBAC5B,IAAI,EAAE,IAAI,CAAC,OAAO;gBAClB,EAAE,EAAE,OAAO,CAAC,IAAI;gBAChB,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,EAAE;gBACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,aAAa,EAAE,OAAO,CAAC,EAAE;gBACzB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,mBAAmB,OAAO,CAAC,MAAM,EAAE;aAC3C,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,QAAQ,CAAC,aAAa,GAAG,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,iBAAiB,EAAE;gBAC5B,IAAI,EAAE,IAAI,CAAC,OAAO;gBAClB,EAAE,EAAE,OAAO,CAAC,IAAI;gBAChB,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,EAAE;gBACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,aAAa,EAAE,OAAO,CAAC,EAAE;gBACzB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CAAC,QAAqB;QAChD,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YACjE,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;gBACpD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC5B,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,gBAAgB,CAAC,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,YAA6B;QAC5D,+DAA+D;QAC/D,kDAAkD;IACpD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,OAAmB;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACnD,qBAAqB;QACrB,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,OAAmB;QACjE,mDAAmD;QACnD,sBAAsB;QACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACpF,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,oCAAoC;QACpC,wDAAwD;QACxD,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACnB,QAAQ,CAAc;IACtB,SAAS,CAAM;IAEvB,YAAY,SAAc;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAExD,oBAAoB;QACpB,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,uBAAuB;QACvB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAEjG,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE;gBACxC,IAAI,EAAE,UAAU;gBAChB,EAAE,EAAE,OAAO,CAAC,IAAI;gBAChB,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE;oBACP,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;wBAClC,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,UAAU,EAAE,CAAC,CAAC,UAAU;qBACzB,CAAC,CAAC;iBACJ;gBACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,aAAa,EAAE,OAAO,CAAC,EAAE;gBACzB,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,sBAAsB;QACtB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;gBACnC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;gBAC5B,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE;aAC7C,CAAC,CAAC;YAEH,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE;gBACxC,IAAI,EAAE,UAAU;gBAChB,EAAE,EAAE,OAAO,CAAC,IAAI;gBAChB,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE;oBACP,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAU,EAAE,EAAE,CAAC,CAAC;wBACzC,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;wBACxC,KAAK,EAAE,KAAK,CAAC,KAAK;qBACnB,CAAC,CAAC;iBACJ;gBACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,aAAa,EAAE,OAAO,CAAC,EAAE;gBACzB,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,uBAAuB;QACvB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;YACxD,MAAM,YAAY,CAAC,iBAAiB,CAClC,OAAO,CAAC,OAAO,CAAC,WAAW,EAC3B,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAC/B,CAAC;YAEF,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE;gBACxC,IAAI,EAAE,UAAU;gBAChB,EAAE,EAAE,OAAO,CAAC,IAAI;gBAChB,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,EAAE;gBACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,aAAa,EAAE,OAAO,CAAC,EAAE;gBACzB,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,MAAc,EAAE,OAA4B;QACxE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;CACF"}

package/dist/infrastructure/protocols/mcp-oauth.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Infrastructure: MCP OAuth 2.1 Security Implementation
+ * Implements OAuth 2.1 security for MCP servers
+ *
+ * Based on research findings:
+ * - OAuth 2.1 with Dynamic Client Registration
+ * - /.well-known/oauth-protected-resource endpoint
+ * - M2M tokens for agent-to-agent communication
+ * - Scoped permissions (least privilege)
+ * - T-BAC (Task-Based Access Control) ready
+ */
+export interface OAuthProtectedResourceMetadata {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    registration_endpoint: string;
+    introspection_endpoint?: string;
+    revocation_endpoint?: string;
+    scopes_supported: string[];
+    response_types_supported: string[];
+    grant_types_supported: string[];
+}
+export interface OAuthToken {
+    access_token: string;
+    token_type: 'Bearer';
+    expires_in: number;
+    scope?: string;
+    refresh_token?: string;
+}
+export interface OAuthScope {
+    name: string;
+    description: string;
+    permissions: string[];
+}
+/**
+ * OAuth 2.1 Provider for MCP Server
+ * Implements security as Resource Server
+ */
+export declare class MCPOAuthProvider {
+    private scopes;
+    private authorizationServer?;
+    constructor(authorizationServer?: string);
+    /**
+     * Get OAuth-protected resource metadata
+     * Must implement /.well-known/oauth-protected-resource endpoint
+     */
+    getMetadata(): OAuthProtectedResourceMetadata;
+    /**
+     * Validate OAuth token and check permissions
+     * Resource Server validates tokens from Authorization Server
+     */
+    validateToken(token: string, requiredScope?: string): Promise<{
+        valid: boolean;
+        scopes?: string[];
+        error?: string;
+    }>;
+    /**
+     * Check if token has required permission
+     * Supports T-BAC (Task-Based Access Control)
+     */
+    hasPermission(token: string, task: string, tool?: string): Promise<boolean>;
+    /**
+     * Initialize default OAuth scopes for MCP tools
+     */
+    private initializeDefaultScopes;
+    /**
+     * Extract scopes from token (mock implementation)
+     * In production: Decode JWT or call introspection endpoint
+     */
+    private extractScopesFromToken;
+}
+import type { MCPServer, MCPToolResult } from './mcp-server.js';
+/**
+ * OAuth-protected MCP Server
+ * Wraps MCP server with OAuth 2.1 security
+ */
+export declare class OAuthProtectedMCPServer {
+    private mcpServer;
+    private oauthProvider;
+    constructor(mcpServer: MCPServer, oauthProvider: MCPOAuthProvider);
+    /**
+     * Get OAuth metadata endpoint
+     * Implements /.well-known/oauth-protected-resource
+     */
+    getOAuthMetadata(): OAuthProtectedResourceMetadata;
+    /**
+     * Call tool with OAuth validation
+     */
+    callToolWithAuth(token: string, name: string, args: Record<string, any>): Promise<MCPToolResult>;
+}
+//# sourceMappingURL=mcp-oauth.d.ts.map

package/dist/infrastructure/protocols/mcp-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-oauth.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/protocols/mcp-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,qBAAqB,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,QAAQ,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAsC;IACpD,OAAO,CAAC,mBAAmB,CAAC,CAAS;gBAEzB,mBAAmB,CAAC,EAAE,MAAM;IAKxC;;;OAGG;IACH,WAAW,IAAI,8BAA8B;IAkB7C;;;OAGG;IACG,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAwB1H;;;OAGG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB3E;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAqC/B;;;OAGG;IACH,OAAO,CAAC,sBAAsB;CAQ/B;AAED,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhE;;;GAGG;AACH,qBAAa,uBAAuB;IAEhC,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,aAAa;gBADb,SAAS,EAAE,SAAS,EACpB,aAAa,EAAE,gBAAgB;IAGzC;;;OAGG;IACH,gBAAgB,IAAI,8BAA8B;IAIlD;;OAEG;IACG,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACxB,OAAO,CAAC,aAAa,CAAC;CA6B1B"}

package/dist/infrastructure/protocols/mcp-oauth.js

@@ -0,0 +1,184 @@
+/**
+ * Infrastructure: MCP OAuth 2.1 Security Implementation
+ * Implements OAuth 2.1 security for MCP servers
+ *
+ * Based on research findings:
+ * - OAuth 2.1 with Dynamic Client Registration
+ * - /.well-known/oauth-protected-resource endpoint
+ * - M2M tokens for agent-to-agent communication
+ * - Scoped permissions (least privilege)
+ * - T-BAC (Task-Based Access Control) ready
+ */
+/**
+ * OAuth 2.1 Provider for MCP Server
+ * Implements security as Resource Server
+ */
+export class MCPOAuthProvider {
+    scopes = new Map();
+    authorizationServer;
+    constructor(authorizationServer) {
+        this.authorizationServer = authorizationServer;
+        this.initializeDefaultScopes();
+    }
+    /**
+     * Get OAuth-protected resource metadata
+     * Must implement /.well-known/oauth-protected-resource endpoint
+     */
+    getMetadata() {
+        return {
+            issuer: this.authorizationServer || 'codehere',
+            authorization_endpoint: `${this.authorizationServer || 'https://auth.codehere.io'}/oauth/authorize`,
+            token_endpoint: `${this.authorizationServer || 'https://auth.codehere.io'}/oauth/token`,
+            registration_endpoint: `${this.authorizationServer || 'https://auth.codehere.io'}/oauth/register`,
+            introspection_endpoint: `${this.authorizationServer || 'https://auth.codehere.io'}/oauth/introspect`,
+            revocation_endpoint: `${this.authorizationServer || 'https://auth.codehere.io'}/oauth/revoke`,
+            scopes_supported: Array.from(this.scopes.keys()),
+            response_types_supported: ['code'],
+            grant_types_supported: [
+                'authorization_code',
+                'client_credentials', // For M2M tokens
+                'refresh_token',
+            ],
+        };
+    }
+    /**
+     * Validate OAuth token and check permissions
+     * Resource Server validates tokens from Authorization Server
+     */
+    async validateToken(token, requiredScope) {
+        // TODO: Implement actual token validation with Authorization Server
+        // For now, return mock validation
+        // In production, call introspection endpoint or validate JWT
+        // Mock: Check if token exists and has required scope
+        if (!token || token === 'invalid') {
+            return { valid: false, error: 'Invalid token' };
+        }
+        // Extract scopes from token (in production, decode JWT or introspect)
+        const scopes = this.extractScopesFromToken(token);
+        if (requiredScope && !scopes.includes(requiredScope)) {
+            return {
+                valid: false,
+                error: `Missing required scope: ${requiredScope}`,
+                scopes,
+            };
+        }
+        return { valid: true, scopes };
+    }
+    /**
+     * Check if token has required permission
+     * Supports T-BAC (Task-Based Access Control)
+     */
+    hasPermission(token, task, tool) {
+        // T-BAC: Check permission for specific task/tool combination
+        // More granular than role-based access
+        return this.validateToken(token).then(result => {
+            if (!result.valid || !result.scopes) {
+                return false;
+            }
+            // Check if scope allows this task/tool combination
+            for (const scopeName of result.scopes) {
+                const scope = this.scopes.get(scopeName);
+                if (scope && scope.permissions.includes(`${task}:${tool || '*'}`)) {
+                    return true;
+                }
+            }
+            return false;
+        });
+    }
+    /**
+     * Initialize default OAuth scopes for MCP tools
+     */
+    initializeDefaultScopes() {
+        // Scope: codehere:ask - Query codebase
+        this.scopes.set('codehere:ask', {
+            name: 'codehere:ask',
+            description: 'Ask questions about codebase using semantic search',
+            permissions: ['query:codebase'],
+        });
+        // Scope: codehere:explain - Explain code files
+        this.scopes.set('codehere:explain', {
+            name: 'codehere:explain',
+            description: 'Get detailed explanations of code files',
+            permissions: ['read:code', 'explain:code'],
+        });
+        // Scope: codehere:edit - Edit files
+        this.scopes.set('codehere:edit', {
+            name: 'codehere:edit',
+            description: 'Edit files with AI-generated changes',
+            permissions: ['write:code', 'edit:code'],
+        });
+        // Scope: codehere:memory:read - Read memory
+        this.scopes.set('codehere:memory:read', {
+            name: 'codehere:memory:read',
+            description: 'Query persistent episodic memory',
+            permissions: ['read:memory'],
+        });
+        // Scope: codehere:memory:write - Write memory
+        this.scopes.set('codehere:memory:write', {
+            name: 'codehere:memory:write',
+            description: 'Store information in persistent memory',
+            permissions: ['write:memory'],
+        });
+    }
+    /**
+     * Extract scopes from token (mock implementation)
+     * In production: Decode JWT or call introspection endpoint
+     */
+    extractScopesFromToken(token) {
+        // Mock: For now, return all scopes if token is valid
+        // In production, decode JWT claims or introspect token
+        if (token.startsWith('codehere_')) {
+            return Array.from(this.scopes.keys());
+        }
+        return [];
+    }
+}
+/**
+ * OAuth-protected MCP Server
+ * Wraps MCP server with OAuth 2.1 security
+ */
+export class OAuthProtectedMCPServer {
+    mcpServer;
+    oauthProvider;
+    constructor(mcpServer, oauthProvider) {
+        this.mcpServer = mcpServer;
+        this.oauthProvider = oauthProvider;
+    }
+    /**
+     * Get OAuth metadata endpoint
+     * Implements /.well-known/oauth-protected-resource
+     */
+    getOAuthMetadata() {
+        return this.oauthProvider.getMetadata();
+    }
+    /**
+     * Call tool with OAuth validation
+     */
+    async callToolWithAuth(token, name, args) {
+        // Determine required scope based on tool
+        const scopeMap = {
+            'codehere_ask': 'codehere:ask',
+            'codehere_explain': 'codehere:explain',
+            'codehere_edit': 'codehere:edit',
+            'codehere_search': 'codehere:ask',
+            'codehere_memory_query': 'codehere:memory:read',
+        };
+        const requiredScope = scopeMap[name];
+        // Validate token and scope
+        const validation = await this.oauthProvider.validateToken(token, requiredScope);
+        if (!validation.valid) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Authorization failed: ${validation.error}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        // Call tool if authorized
+        return await this.mcpServer.callTool(name, args);
+    }
+}
+//# sourceMappingURL=mcp-oauth.js.map

package/dist/infrastructure/protocols/mcp-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-oauth.js","sourceRoot":"","sources":["../../../src/infrastructure/protocols/mcp-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA4BH;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,GAA4B,IAAI,GAAG,EAAE,CAAC;IAC5C,mBAAmB,CAAU;IAErC,YAAY,mBAA4B;QACtC,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,WAAW;QACT,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,mBAAmB,IAAI,UAAU;YAC9C,sBAAsB,EAAE,GAAG,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,kBAAkB;YACnG,cAAc,EAAE,GAAG,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,cAAc;YACvF,qBAAqB,EAAE,GAAG,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,iBAAiB;YACjG,sBAAsB,EAAE,GAAG,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,mBAAmB;YACpG,mBAAmB,EAAE,GAAG,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,eAAe;YAC7F,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAChD,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE;gBACrB,oBAAoB;gBACpB,oBAAoB,EAAE,iBAAiB;gBACvC,eAAe;aAChB;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,aAAsB;QACvD,oEAAoE;QACpE,kCAAkC;QAClC,6DAA6D;QAE7D,qDAAqD;QACrD,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QAClD,CAAC;QAED,sEAAsE;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAElD,IAAI,aAAa,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACrD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,2BAA2B,aAAa,EAAE;gBACjD,MAAM;aACP,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,KAAa,EAAE,IAAY,EAAE,IAAa;QACtD,6DAA6D;QAC7D,uCAAuC;QACvC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,mDAAmD;YACnD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACzC,IAAI,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC;oBAClE,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,uBAAuB;QAC7B,uCAAuC;QACvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE;YAC9B,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,oDAAoD;YACjE,WAAW,EAAE,CAAC,gBAAgB,CAAC;SAChC,CAAC,CAAC;QAEH,+CAA+C;QAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE;YAClC,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,yCAAyC;YACtD,WAAW,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC;SAC3C,CAAC,CAAC;QAEH,oCAAoC;QACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE;YAC/B,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,sCAAsC;YACnD,WAAW,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;SACzC,CAAC,CAAC;QAEH,4CAA4C;QAC5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE;YACtC,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EAAE,kCAAkC;YAC/C,WAAW,EAAE,CAAC,aAAa,CAAC;SAC7B,CAAC,CAAC;QAEH,8CAA8C;QAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE;YACvC,IAAI,EAAE,uBAAuB;YAC7B,WAAW,EAAE,wCAAwC;YACrD,WAAW,EAAE,CAAC,cAAc,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,sBAAsB,CAAC,KAAa;QAC1C,qDAAqD;QACrD,uDAAuD;QACvD,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAID;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAExB;IACA;IAFV,YACU,SAAoB,EACpB,aAA+B;QAD/B,cAAS,GAAT,SAAS,CAAW;QACpB,kBAAa,GAAb,aAAa,CAAkB;IACtC,CAAC;IAEJ;;;OAGG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAAa,EACb,IAAY,EACZ,IAAyB;QAEzB,yCAAyC;QACzC,MAAM,QAAQ,GAA2B;YACvC,cAAc,EAAE,cAAc;YAC9B,kBAAkB,EAAE,kBAAkB;YACtC,eAAe,EAAE,eAAe;YAChC,iBAAiB,EAAE,cAAc;YACjC,uBAAuB,EAAE,sBAAsB;SAChD,CAAC;QAEF,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAErC,2BAA2B;QAC3B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAChF,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,yBAAyB,UAAU,CAAC,KAAK,EAAE;qBAClD;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;CACF"}