handoffprobe 0.1.0

package/dist/p0-fixture/mcp/fake-tools.js

@@ -0,0 +1,322 @@
+import { McpServer } from '@modelcontextprotocol/server';
+import * as z from 'zod/v4';
+import { evaluateP0Authorization } from '../authorization.js';
+import { P0_CAPABILITY_READ, P0_CAPABILITY_REFUND, P0_CAPABILITY_UPDATE } from '../constants.js';
+import { hashApprovalPayload } from '../payload-hash.js';
+import { recordSyntheticEmail, recordSyntheticRefund, snapshotP0FixtureState, updateSyntheticInvoice, } from '../state.js';
+const SEND_EMAIL_CAPABILITY = 'message.send';
+const readInvoiceSchema = z.object({
+    resource: z.string(),
+});
+const updateInvoiceSchema = z.object({
+    resource: z.string(),
+    amountCents: z.number().int(),
+});
+const refundPaymentSchema = z.object({
+    resource: z.string(),
+    amount: z.number(),
+    recipient: z.string(),
+    approvalId: z.string(),
+});
+const sendEmailSchema = z.object({
+    resource: z.string(),
+    recipient: z.string(),
+    subject: z.string(),
+});
+function requiredCapability(tool) {
+    switch (tool) {
+        case 'read_invoice':
+            return P0_CAPABILITY_READ;
+        case 'update_invoice':
+            return P0_CAPABILITY_UPDATE;
+        case 'refund_payment':
+            return P0_CAPABILITY_REFUND;
+        case 'send_email':
+            return SEND_EMAIL_CAPABILITY;
+    }
+}
+function approvalMatches(context, tool, payload, approvalId) {
+    if (tool !== 'refund_payment') {
+        return null;
+    }
+    const approval = context.approval;
+    if (approval === undefined || approvalId === undefined) {
+        return false;
+    }
+    return (approval.approvalId === approvalId &&
+        approval.tool === tool &&
+        approval.payloadHash === hashApprovalPayload(payload));
+}
+function buildAuthorization(input) {
+    const capability = requiredCapability(input.tool);
+    const decision = evaluateP0Authorization(input.context, {
+        principal: input.context.principal,
+        downstream: input.context.downstream,
+        tenant: input.context.tenant,
+        resource: input.resource,
+        capability,
+        tool: input.tool,
+    });
+    const semanticBindingMatches = input.context.capabilities.includes(capability);
+    const approval = approvalMatches(input.context, input.tool, input.approvalPayload, input.approvalId);
+    const forwardedCredential = input.context.forwardedCredential;
+    const credentialAudienceMatches = forwardedCredential === undefined
+        ? null
+        : forwardedCredential.audience === input.downstreamAudience;
+    const credentialAccepted = forwardedCredential !== undefined &&
+        (credentialAudienceMatches === true || input.mode === 'bypass');
+    const reasons = [...decision.reasons];
+    if (!semanticBindingMatches) {
+        reasons.push('tool_capability_semantic_mismatch');
+    }
+    if (credentialAudienceMatches === false) {
+        reasons.push('credential_audience_mismatch');
+    }
+    if (approval === false) {
+        reasons.push('approval_binding_mismatch');
+    }
+    const invariantAllowed = decision.allowed &&
+        semanticBindingMatches &&
+        approval !== false &&
+        credentialAudienceMatches !== false;
+    const executed = invariantAllowed || input.mode === 'bypass';
+    return {
+        policyMode: input.mode,
+        invariantAllowed,
+        executed,
+        decision,
+        approvalMatches: approval,
+        semanticBindingMatches,
+        downstreamAudience: input.downstreamAudience,
+        credentialForwarded: forwardedCredential !== undefined,
+        credentialAudienceMatches,
+        credentialAccepted,
+        reasons,
+    };
+}
+function recordAuthorization(recorder, context, input) {
+    recorder.record({
+        protocol: 'TOOL',
+        protocolVersion: 'local-p0-fixture-v1',
+        boundary: 'mcp-server -> p0-authorization',
+        event: 'p0.authorization',
+        context,
+        details: {
+            selectedTool: input.tool,
+            requestedCapability: input.capability,
+            targetResource: input.resource,
+            upstreamAuthority: context.upstreamAuthority,
+            translatedAuthority: context.effectiveAuthority,
+            authorizationResult: input.authorization.invariantAllowed,
+            executed: input.authorization.executed,
+            policyMode: input.authorization.policyMode,
+            authorizationReasons: input.authorization.reasons,
+            approvalMatches: input.authorization.approvalMatches,
+            semanticBindingMatches: input.authorization.semanticBindingMatches,
+            downstreamAudience: input.authorization.downstreamAudience,
+            credentialFingerprint: context.forwardedCredential?.fingerprint,
+            credentialClass: context.forwardedCredential?.credentialClass,
+            credentialAudience: context.forwardedCredential?.audience,
+            credentialForwarded: input.authorization.credentialForwarded,
+            credentialAudienceMatches: input.authorization.credentialAudienceMatches,
+            credentialAccepted: input.authorization.credentialAccepted,
+            sideEffectStateBefore: input.before,
+        },
+    });
+}
+function recordResult(recorder, context, envelope) {
+    recorder.record({
+        protocol: 'TOOL',
+        protocolVersion: 'local-p0-fixture-v1',
+        boundary: 'p0-tool -> mcp-server',
+        event: 'p0.tool.result',
+        context,
+        details: {
+            selectedTool: envelope.tool,
+            authorizationResult: envelope.authorization.invariantAllowed,
+            executed: envelope.authorization.executed,
+            sideEffectStateBefore: envelope.before,
+            sideEffectStateAfter: envelope.after,
+            output: envelope.output,
+        },
+    });
+}
+function textResult(envelope) {
+    return {
+        content: [
+            {
+                type: 'text',
+                text: JSON.stringify(envelope),
+            },
+        ],
+    };
+}
+export function createP0FakeToolServer(recorder, context, state, era, mode, downstreamAudience) {
+    const server = new McpServer({
+        name: 'handoffprobe-p0-fixture-mcp',
+        version: '0.0.0',
+    });
+    server.registerTool('read_invoice', {
+        title: 'Read synthetic invoice',
+        description: 'Reads deterministic in-memory invoice data.',
+        inputSchema: readInvoiceSchema,
+    }, ({ resource }) => {
+        const before = snapshotP0FixtureState(state);
+        const authorization = buildAuthorization({
+            context,
+            tool: 'read_invoice',
+            resource,
+            mode,
+            downstreamAudience,
+        });
+        recordAuthorization(recorder, context, {
+            tool: 'read_invoice',
+            resource,
+            capability: P0_CAPABILITY_READ,
+            authorization,
+            before,
+        });
+        const invoice = authorization.executed ? (state.invoices[resource] ?? null) : null;
+        const after = snapshotP0FixtureState(state);
+        const envelope = {
+            tool: 'read_invoice',
+            authorization,
+            before,
+            after,
+            output: {
+                invoice,
+                mcpEra: era,
+            },
+        };
+        recordResult(recorder, context, envelope);
+        return textResult(envelope);
+    });
+    server.registerTool('update_invoice', {
+        title: 'Update synthetic invoice',
+        description: 'Updates only deterministic in-memory invoice data.',
+        inputSchema: updateInvoiceSchema,
+    }, ({ resource, amountCents }) => {
+        const before = snapshotP0FixtureState(state);
+        const authorization = buildAuthorization({
+            context,
+            tool: 'update_invoice',
+            resource,
+            mode,
+            downstreamAudience,
+        });
+        recordAuthorization(recorder, context, {
+            tool: 'update_invoice',
+            resource,
+            capability: P0_CAPABILITY_UPDATE,
+            authorization,
+            before,
+        });
+        const invoice = authorization.executed
+            ? updateSyntheticInvoice(state, resource, amountCents)
+            : null;
+        const after = snapshotP0FixtureState(state);
+        const envelope = {
+            tool: 'update_invoice',
+            authorization,
+            before,
+            after,
+            output: {
+                invoice,
+                mcpEra: era,
+            },
+        };
+        recordResult(recorder, context, envelope);
+        return textResult(envelope);
+    });
+    server.registerTool('refund_payment', {
+        title: 'Record synthetic refund',
+        description: 'Writes only to the deterministic in-memory refund ledger.',
+        inputSchema: refundPaymentSchema,
+    }, ({ resource, amount, recipient, approvalId }) => {
+        const before = snapshotP0FixtureState(state);
+        const payload = {
+            amount,
+            recipient,
+        };
+        const authorization = buildAuthorization({
+            context,
+            tool: 'refund_payment',
+            resource,
+            mode,
+            downstreamAudience,
+            approvalPayload: payload,
+            approvalId,
+        });
+        recordAuthorization(recorder, context, {
+            tool: 'refund_payment',
+            resource,
+            capability: P0_CAPABILITY_REFUND,
+            authorization,
+            before,
+        });
+        const refund = authorization.executed
+            ? recordSyntheticRefund(state, {
+                amount,
+                recipient,
+                approvalId,
+            })
+            : null;
+        const after = snapshotP0FixtureState(state);
+        const envelope = {
+            tool: 'refund_payment',
+            authorization,
+            before,
+            after,
+            output: {
+                refund,
+                approvedPayloadHash: context.approval?.payloadHash,
+                executedPayloadHash: hashApprovalPayload(payload),
+                mcpEra: era,
+            },
+        };
+        recordResult(recorder, context, envelope);
+        return textResult(envelope);
+    });
+    server.registerTool('send_email', {
+        title: 'Record synthetic email',
+        description: 'Writes only to the deterministic in-memory outbox.',
+        inputSchema: sendEmailSchema,
+    }, ({ resource, recipient, subject }) => {
+        const before = snapshotP0FixtureState(state);
+        const authorization = buildAuthorization({
+            context,
+            tool: 'send_email',
+            resource,
+            mode,
+            downstreamAudience,
+        });
+        recordAuthorization(recorder, context, {
+            tool: 'send_email',
+            resource,
+            capability: SEND_EMAIL_CAPABILITY,
+            authorization,
+            before,
+        });
+        const message = authorization.executed
+            ? recordSyntheticEmail(state, {
+                recipient,
+                subject,
+            })
+            : null;
+        const after = snapshotP0FixtureState(state);
+        const envelope = {
+            tool: 'send_email',
+            authorization,
+            before,
+            after,
+            output: {
+                message,
+                mcpEra: era,
+            },
+        };
+        recordResult(recorder, context, envelope);
+        return textResult(envelope);
+    });
+    return server;
+}
+//# sourceMappingURL=fake-tools.js.map

package/dist/p0-fixture/mcp/fake-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-tools.js","sourceRoot":"","sources":["../../../src/p0-fixture/mcp/fake-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AASrB,MAAM,qBAAqB,GAAG,cAAc,CAAC;AAE7C,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC9B,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,IAAmB;IAC7C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,OAAO,kBAAkB,CAAC;QAE5B,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,CAAC;QAE9B,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,CAAC;QAE9B,KAAK,YAAY;YACf,OAAO,qBAAqB,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,OAAwB,EACxB,IAAmB,EACnB,OAAgB,EAChB,UAAmB;IAEnB,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAElC,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACvD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CACL,QAAQ,CAAC,UAAU,KAAK,UAAU;QAClC,QAAQ,CAAC,IAAI,KAAK,IAAI;QACtB,QAAQ,CAAC,WAAW,KAAK,mBAAmB,CAAC,OAAO,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAQ3B;IACC,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,EAAE;QACtD,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;QACpC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU;QACV,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAC;IAEH,MAAM,sBAAsB,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAE/E,MAAM,QAAQ,GAAG,eAAe,CAC9B,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,UAAU,CACjB,CAAC;IAEF,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAE9D,MAAM,yBAAyB,GAC7B,mBAAmB,KAAK,SAAS;QAC/B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,mBAAmB,CAAC,QAAQ,KAAK,KAAK,CAAC,kBAAkB,CAAC;IAEhE,MAAM,kBAAkB,GACtB,mBAAmB,KAAK,SAAS;QACjC,CAAC,yBAAyB,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAElE,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEtC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,yBAAyB,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,gBAAgB,GACpB,QAAQ,CAAC,OAAO;QAChB,sBAAsB;QACtB,QAAQ,KAAK,KAAK;QAClB,yBAAyB,KAAK,KAAK,CAAC;IAEtC,MAAM,QAAQ,GAAG,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;IAE7D,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,IAAI;QACtB,gBAAgB;QAChB,QAAQ;QACR,QAAQ;QACR,eAAe,EAAE,QAAQ;QAEzB,sBAAsB;QAEtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAE5C,mBAAmB,EAAE,mBAAmB,KAAK,SAAS;QAEtD,yBAAyB;QAEzB,kBAAkB;QAElB,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA0B,EAC1B,OAAwB,EACxB,KAMC;IAED,QAAQ,CAAC,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM;QAChB,eAAe,EAAE,qBAAqB;QACtC,QAAQ,EAAE,gCAAgC;QAC1C,KAAK,EAAE,kBAAkB;QACzB,OAAO;QACP,OAAO,EAAE;YACP,YAAY,EAAE,KAAK,CAAC,IAAI;YACxB,mBAAmB,EAAE,KAAK,CAAC,UAAU;YACrC,cAAc,EAAE,KAAK,CAAC,QAAQ;YAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;YAC/C,mBAAmB,EAAE,KAAK,CAAC,aAAa,CAAC,gBAAgB;YACzD,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ;YACtC,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,UAAU;YAC1C,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAAC,OAAO;YACjD,eAAe,EAAE,KAAK,CAAC,aAAa,CAAC,eAAe;YAEpD,sBAAsB,EAAE,KAAK,CAAC,aAAa,CAAC,sBAAsB;YAElE,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,kBAAkB;YAE1D,qBAAqB,EAAE,OAAO,CAAC,mBAAmB,EAAE,WAAW;YAE/D,eAAe,EAAE,OAAO,CAAC,mBAAmB,EAAE,eAAe;YAE7D,kBAAkB,EAAE,OAAO,CAAC,mBAAmB,EAAE,QAAQ;YAEzD,mBAAmB,EAAE,KAAK,CAAC,aAAa,CAAC,mBAAmB;YAE5D,yBAAyB,EAAE,KAAK,CAAC,aAAa,CAAC,yBAAyB;YAExE,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,kBAAkB;YAE1D,qBAAqB,EAAE,KAAK,CAAC,MAAM;SACpC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CACnB,QAA0B,EAC1B,OAAwB,EACxB,QAAwB;IAExB,QAAQ,CAAC,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM;QAChB,eAAe,EAAE,qBAAqB;QACtC,QAAQ,EAAE,uBAAuB;QACjC,KAAK,EAAE,gBAAgB;QACvB,OAAO;QACP,OAAO,EAAE;YACP,YAAY,EAAE,QAAQ,CAAC,IAAI;YAC3B,mBAAmB,EAAE,QAAQ,CAAC,aAAa,CAAC,gBAAgB;YAC5D,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,QAAQ;YACzC,qBAAqB,EAAE,QAAQ,CAAC,MAAM;YACtC,oBAAoB,EAAE,QAAQ,CAAC,KAAK;YACpC,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,QAAwB;IAC1C,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC/B;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAA0B,EAC1B,OAAwB,EACxB,KAAqB,EACrB,GAAW,EACX,IAAuB,EACvB,kBAA0B;IAE1B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,6CAA6C;QAC1D,WAAW,EAAE,iBAAiB;KAC/B,EACD,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAE7C,MAAM,aAAa,GAAG,kBAAkB,CAAC;YACvC,OAAO;YACP,IAAI,EAAE,cAAc;YACpB,QAAQ;YACR,IAAI;YACJ,kBAAkB;SACnB,CAAC,CAAC;QAEH,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE;YACrC,IAAI,EAAE,cAAc;YACpB,QAAQ;YACR,UAAU,EAAE,kBAAkB;YAC9B,aAAa;YACb,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEnF,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAmB;YAC/B,IAAI,EAAE,cAAc;YACpB,aAAa;YACb,MAAM;YACN,KAAK;YACL,MAAM,EAAE;gBACN,OAAO;gBACP,MAAM,EAAE,GAAG;aACZ;SACF,CAAC;QAEF,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,oDAAoD;QACjE,WAAW,EAAE,mBAAmB;KACjC,EACD,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAE7C,MAAM,aAAa,GAAG,kBAAkB,CAAC;YACvC,OAAO;YACP,IAAI,EAAE,gBAAgB;YACtB,QAAQ;YACR,IAAI;YACJ,kBAAkB;SACnB,CAAC,CAAC;QAEH,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE;YACrC,IAAI,EAAE,gBAAgB;YACtB,QAAQ;YACR,UAAU,EAAE,oBAAoB;YAChC,aAAa;YACb,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ;YACpC,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC;YACtD,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAmB;YAC/B,IAAI,EAAE,gBAAgB;YACtB,aAAa;YACb,MAAM;YACN,KAAK;YACL,MAAM,EAAE;gBACN,OAAO;gBACP,MAAM,EAAE,GAAG;aACZ;SACF,CAAC;QAEF,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,2DAA2D;QACxE,WAAW,EAAE,mBAAmB;KACjC,EACD,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG;YACd,MAAM;YACN,SAAS;SACV,CAAC;QAEF,MAAM,aAAa,GAAG,kBAAkB,CAAC;YACvC,OAAO;YACP,IAAI,EAAE,gBAAgB;YACtB,QAAQ;YACR,IAAI;YACJ,kBAAkB;YAClB,eAAe,EAAE,OAAO;YACxB,UAAU;SACX,CAAC,CAAC;QAEH,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE;YACrC,IAAI,EAAE,gBAAgB;YACtB,QAAQ;YACR,UAAU,EAAE,oBAAoB;YAChC,aAAa;YACb,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ;YACnC,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE;gBAC3B,MAAM;gBACN,SAAS;gBACT,UAAU;aACX,CAAC;YACJ,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAmB;YAC/B,IAAI,EAAE,gBAAgB;YACtB,aAAa;YACb,MAAM;YACN,KAAK;YACL,MAAM,EAAE;gBACN,MAAM;gBACN,mBAAmB,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW;gBAClD,mBAAmB,EAAE,mBAAmB,CAAC,OAAO,CAAC;gBACjD,MAAM,EAAE,GAAG;aACZ;SACF,CAAC;QAEF,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,oDAAoD;QACjE,WAAW,EAAE,eAAe;KAC7B,EACD,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAE7C,MAAM,aAAa,GAAG,kBAAkB,CAAC;YACvC,OAAO;YACP,IAAI,EAAE,YAAY;YAClB,QAAQ;YACR,IAAI;YACJ,kBAAkB;SACnB,CAAC,CAAC;QAEH,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE;YACrC,IAAI,EAAE,YAAY;YAClB,QAAQ;YACR,UAAU,EAAE,qBAAqB;YACjC,aAAa;YACb,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ;YACpC,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE;gBAC1B,SAAS;gBACT,OAAO;aACR,CAAC;YACJ,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAmB;YAC/B,IAAI,EAAE,YAAY;YAClB,aAAa;YACb,MAAM;YACN,KAAK;YACL,MAAM,EAAE;gBACN,OAAO;gBACP,MAAM,EAAE,GAAG;aACZ;SACF,CAAC;QAEF,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/p0-fixture/mcp/harness.d.ts

@@ -0,0 +1,16 @@
+import type { SecurityContext } from '../../core/index.js';
+import type { EvidenceRecorder } from '../../protocol-lab/evidence.js';
+import type { P0FixtureState } from '../state.js';
+import type { P0EnforcementMode, P0McpExecutionResult, P0McpToolName } from './types.js';
+export interface P0McpCallInput {
+    context: SecurityContext;
+    recorder: EvidenceRecorder;
+    state: P0FixtureState;
+    mode?: P0EnforcementMode;
+    audience?: string;
+    cancelLifecycleBeforeTool?: boolean;
+    tool: P0McpToolName;
+    arguments: Record<string, unknown>;
+}
+export declare function callP0ToolThroughMcp(input: P0McpCallInput): Promise<P0McpExecutionResult>;
+//# sourceMappingURL=harness.d.ts.map

package/dist/p0-fixture/mcp/harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../../src/p0-fixture/mcp/harness.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,KAAK,EACV,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,EAEd,MAAM,YAAY,CAAC;AAmBpB,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,eAAe,CAAC;IACzB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,cAAc,CAAC;IACtB,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAEzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAEpC,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA6I/F"}

package/dist/p0-fixture/mcp/harness.js

@@ -0,0 +1,114 @@
+import { Client, StreamableHTTPClientTransport } from '@modelcontextprotocol/client';
+import { createMcpHandler } from '@modelcontextprotocol/server';
+import { P0_MCP_AUDIENCE } from '../constants.js';
+import { createP0FakeToolServer } from './fake-tools.js';
+function readTextContent(content) {
+    for (const block of content) {
+        if (block.type === 'text' && typeof block.text === 'string') {
+            return block.text;
+        }
+    }
+    throw new Error('P0 MCP fake tool returned no text content.');
+}
+export async function callP0ToolThroughMcp(input) {
+    const mode = input.mode ?? 'enforce';
+    const downstreamAudience = input.audience ?? P0_MCP_AUDIENCE;
+    const handler = createMcpHandler(({ era }) => createP0FakeToolServer(input.recorder, input.context, input.state, era, mode, downstreamAudience), {
+        legacy: 'reject',
+    });
+    const transport = new StreamableHTTPClientTransport(new URL('http://handoffprobe.local/p0-mcp'), {
+        fetch: (requestInput, init) => handler.fetch(new Request(requestInput, init)),
+    });
+    const client = new Client({
+        name: 'handoffprobe-p0-fixture',
+        version: '0.0.0',
+    }, {
+        versionNegotiation: {
+            mode: {
+                pin: '2026-07-28',
+            },
+        },
+    });
+    try {
+        await client.connect(transport);
+        const era = client.getProtocolEra();
+        if (era !== 'modern') {
+            throw new Error(`Expected modern MCP era but received ${String(era)}.`);
+        }
+        input.recorder.record({
+            protocol: 'MCP',
+            protocolVersion: '2026-07-28',
+            boundary: 'handoff-translation -> p0-mcp-client',
+            event: 'mcp.client.connected',
+            context: input.context,
+            details: {
+                era,
+                enforcementMode: mode,
+                downstreamAudience,
+            },
+        });
+        input.recorder.record({
+            protocol: 'MCP',
+            protocolVersion: '2026-07-28',
+            boundary: 'p0-mcp-client -> p0-mcp-server',
+            event: 'mcp.tool.call',
+            context: input.context,
+            details: {
+                selectedTool: input.tool,
+                targetResource: input.arguments.resource,
+                enforcementMode: mode,
+                downstreamAudience,
+            },
+        });
+        if (input.cancelLifecycleBeforeTool === true) {
+            const lifecycle = input.context.lifecycle;
+            if (lifecycle === undefined) {
+                throw new Error('Lifecycle cancellation requested without lifecycle context.');
+            }
+            const previousState = lifecycle.state;
+            lifecycle.state = 'cancelled';
+            input.recorder.record({
+                protocol: 'CORE',
+                protocolVersion: 'p0-lifecycle-v1',
+                boundary: 'governing-a2a-task -> p0-mcp-tool',
+                event: 'lifecycle.cancel',
+                context: input.context,
+                details: {
+                    taskId: lifecycle.taskId,
+                    previousState,
+                    state: lifecycle.state,
+                    delayPoint: 'after_mcp_request_before_tool_execution',
+                    sideEffectCounterBefore: input.state.sideEffectCounter,
+                },
+            });
+        }
+        const result = await client.callTool({
+            name: input.tool,
+            arguments: input.arguments,
+        });
+        const envelope = JSON.parse(readTextContent(result.content));
+        input.recorder.record({
+            protocol: 'MCP',
+            protocolVersion: '2026-07-28',
+            boundary: 'p0-mcp-server -> handoff-translation',
+            event: 'mcp.tool.result',
+            context: input.context,
+            details: {
+                selectedTool: input.tool,
+                authorizationResult: envelope.authorization.invariantAllowed,
+                executed: envelope.authorization.executed,
+                sideEffectCounterBefore: envelope.before.sideEffectCounter,
+                sideEffectCounterAfter: envelope.after.sideEffectCounter,
+            },
+        });
+        return {
+            era,
+            envelope,
+        };
+    }
+    finally {
+        await client.close();
+        await handler.close();
+    }
+}
+//# sourceMappingURL=harness.js.map

package/dist/p0-fixture/mcp/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../../src/p0-fixture/mcp/harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAIhE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAezD,SAAS,eAAe,CAAC,OAA0B;IACjD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;AAChE,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAqB;IAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC;IAErC,MAAM,kBAAkB,GAAG,KAAK,CAAC,QAAQ,IAAI,eAAe,CAAC;IAE7D,MAAM,OAAO,GAAG,gBAAgB,CAC9B,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CACV,sBAAsB,CACpB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,GAAG,EACH,IAAI,EACJ,kBAAkB,CACnB,EACH;QACE,MAAM,EAAE,QAAQ;KACjB,CACF,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,kCAAkC,CAAC,EAAE;QAC/F,KAAK,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;KAC9E,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,OAAO;KACjB,EACD;QACE,kBAAkB,EAAE;YAClB,IAAI,EAAE;gBACJ,GAAG,EAAE,YAAY;aAClB;SACF;KACF,CACF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEhC,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAEpC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,YAAY;YAC7B,QAAQ,EAAE,sCAAsC;YAChD,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE;gBACP,GAAG;gBACH,eAAe,EAAE,IAAI;gBACrB,kBAAkB;aACnB;SACF,CAAC,CAAC;QAEH,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,YAAY;YAC7B,QAAQ,EAAE,gCAAgC;YAC1C,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE;gBACP,YAAY,EAAE,KAAK,CAAC,IAAI;gBACxB,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ;gBACxC,eAAe,EAAE,IAAI;gBACrB,kBAAkB;aACnB;SACF,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,yBAAyB,KAAK,IAAI,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAE1C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACjF,CAAC;YAED,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC;YAEtC,SAAS,CAAC,KAAK,GAAG,WAAW,CAAC;YAE9B,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpB,QAAQ,EAAE,MAAM;gBAEhB,eAAe,EAAE,iBAAiB;gBAElC,QAAQ,EAAE,mCAAmC;gBAE7C,KAAK,EAAE,kBAAkB;gBAEzB,OAAO,EAAE,KAAK,CAAC,OAAO;gBAEtB,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS,CAAC,MAAM;oBAExB,aAAa;oBAEb,KAAK,EAAE,SAAS,CAAC,KAAK;oBAEtB,UAAU,EAAE,yCAAyC;oBAErD,uBAAuB,EAAE,KAAK,CAAC,KAAK,CAAC,iBAAiB;iBACvD;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,EAAE,KAAK,CAAC,IAAI;YAEhB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAmB,CAAC;QAE/E,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,YAAY;YAC7B,QAAQ,EAAE,sCAAsC;YAChD,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE;gBACP,YAAY,EAAE,KAAK,CAAC,IAAI;gBACxB,mBAAmB,EAAE,QAAQ,CAAC,aAAa,CAAC,gBAAgB;gBAC5D,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,QAAQ;gBACzC,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB;gBAC1D,sBAAsB,EAAE,QAAQ,CAAC,KAAK,CAAC,iBAAiB;aACzD;SACF,CAAC,CAAC;QAEH,OAAO;YACL,GAAG;YACH,QAAQ;SACT,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/p0-fixture/mcp/types.d.ts

@@ -0,0 +1,29 @@
+import type { P0AuthorizationDecision } from '../authorization.js';
+import type { P0FixtureSnapshot } from '../state.js';
+export type P0McpToolName = 'read_invoice' | 'update_invoice' | 'refund_payment' | 'send_email';
+export type P0EnforcementMode = 'enforce' | 'bypass';
+export interface P0ToolAuthorization {
+    policyMode: P0EnforcementMode;
+    invariantAllowed: boolean;
+    executed: boolean;
+    decision: P0AuthorizationDecision | null;
+    approvalMatches: boolean | null;
+    semanticBindingMatches: boolean;
+    downstreamAudience: string;
+    credentialForwarded: boolean;
+    credentialAudienceMatches: boolean | null;
+    credentialAccepted: boolean;
+    reasons: string[];
+}
+export interface P0ToolEnvelope {
+    tool: P0McpToolName;
+    authorization: P0ToolAuthorization;
+    before: P0FixtureSnapshot;
+    after: P0FixtureSnapshot;
+    output: unknown;
+}
+export interface P0McpExecutionResult {
+    era: 'modern';
+    envelope: P0ToolEnvelope;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/p0-fixture/mcp/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/p0-fixture/mcp/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,YAAY,CAAC;AAEhG,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACzC,eAAe,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,sBAAsB,EAAE,OAAO,CAAC;IAEhC,kBAAkB,EAAE,MAAM,CAAC;IAE3B,mBAAmB,EAAE,OAAO,CAAC;IAE7B,yBAAyB,EAAE,OAAO,GAAG,IAAI,CAAC;IAE1C,kBAAkB,EAAE,OAAO,CAAC;IAE5B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,iBAAiB,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,QAAQ,CAAC;IACd,QAAQ,EAAE,cAAc,CAAC;CAC1B"}

package/dist/p0-fixture/mcp/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/p0-fixture/mcp/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/p0-fixture/mcp/types.ts"],"names":[],"mappings":""}

package/dist/p0-fixture/payload-hash.d.ts

@@ -0,0 +1,2 @@
+export declare function hashApprovalPayload(payload: unknown): string;
+//# sourceMappingURL=payload-hash.d.ts.map

package/dist/p0-fixture/payload-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-hash.d.ts","sourceRoot":"","sources":["../../src/p0-fixture/payload-hash.ts"],"names":[],"mappings":"AAoBA,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAM5D"}

package/dist/p0-fixture/payload-hash.js

@@ -0,0 +1,20 @@
+import { createHash } from 'node:crypto';
+function canonicalize(value) {
+    if (Array.isArray(value)) {
+        return value.map((item) => canonicalize(item));
+    }
+    if (value !== null && typeof value === 'object') {
+        const result = {};
+        for (const key of Object.keys(value).sort()) {
+            result[key] = canonicalize(value[key]);
+        }
+        return result;
+    }
+    return value;
+}
+export function hashApprovalPayload(payload) {
+    const serialized = JSON.stringify(canonicalize(payload));
+    const digest = createHash('sha256').update(serialized).digest('hex');
+    return `sha256:${digest}`;
+}
+//# sourceMappingURL=payload-hash.js.map

package/dist/p0-fixture/payload-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-hash.js","sourceRoot":"","sources":["../../src/p0-fixture/payload-hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAE3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAErE,OAAO,UAAU,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/p0-fixture/reference.d.ts

@@ -0,0 +1,8 @@
+import type { AuthorityGrant, SecurityContext } from '../core/index.js';
+export declare const P0_APPROVED_REFUND_PAYLOAD: {
+    readonly amount: 20;
+    readonly recipient: "acct:A";
+};
+export declare function createReferenceAuthority(): AuthorityGrant;
+export declare function createP0ReferenceContext(): SecurityContext;
+//# sourceMappingURL=reference.d.ts.map

package/dist/p0-fixture/reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference.d.ts","sourceRoot":"","sources":["../../src/p0-fixture/reference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAexE,eAAO,MAAM,0BAA0B;;;CAG7B,CAAC;AAEX,wBAAgB,wBAAwB,IAAI,cAAc,CAQzD;AAED,wBAAgB,wBAAwB,IAAI,eAAe,CA8B1D"}

package/dist/p0-fixture/reference.js

@@ -0,0 +1,42 @@
+import { P0_APPROVAL_ID, P0_AUTHORIZED_DOWNSTREAM, P0_AUTHORIZED_RESOURCE, P0_AUTHORIZED_TENANT, P0_CALLER, P0_CAPABILITY_READ, P0_CREDENTIAL_FINGERPRINT, P0_MCP_AUDIENCE, P0_PRINCIPAL, P0_TASK_ID, } from './constants.js';
+import { hashApprovalPayload } from './payload-hash.js';
+export const P0_APPROVED_REFUND_PAYLOAD = {
+    amount: 20,
+    recipient: 'acct:A',
+};
+export function createReferenceAuthority() {
+    return {
+        principal: P0_PRINCIPAL,
+        delegate: P0_AUTHORIZED_DOWNSTREAM,
+        tenant: P0_AUTHORIZED_TENANT,
+        resources: [P0_AUTHORIZED_RESOURCE],
+        capabilities: [P0_CAPABILITY_READ],
+    };
+}
+export function createP0ReferenceContext() {
+    return {
+        principal: P0_PRINCIPAL,
+        caller: P0_CALLER,
+        downstream: P0_AUTHORIZED_DOWNSTREAM,
+        tenant: P0_AUTHORIZED_TENANT,
+        resource: P0_AUTHORIZED_RESOURCE,
+        capabilities: [P0_CAPABILITY_READ],
+        upstreamAuthority: createReferenceAuthority(),
+        effectiveAuthority: createReferenceAuthority(),
+        approval: {
+            approvalId: P0_APPROVAL_ID,
+            tool: 'refund_payment',
+            payloadHash: hashApprovalPayload(P0_APPROVED_REFUND_PAYLOAD),
+        },
+        upstreamCredential: {
+            fingerprint: P0_CREDENTIAL_FINGERPRINT,
+            credentialClass: 'bearer',
+            audience: P0_MCP_AUDIENCE,
+        },
+        lifecycle: {
+            taskId: P0_TASK_ID,
+            state: 'active',
+        },
+    };
+}
+//# sourceMappingURL=reference.js.map

package/dist/p0-fixture/reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference.js","sourceRoot":"","sources":["../../src/p0-fixture/reference.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,SAAS,EACT,kBAAkB,EAClB,yBAAyB,EACzB,eAAe,EACf,YAAY,EACZ,UAAU,GACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,MAAM,EAAE,EAAE;IACV,SAAS,EAAE,QAAQ;CACX,CAAC;AAEX,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE,wBAAwB;QAClC,MAAM,EAAE,oBAAoB;QAC5B,SAAS,EAAE,CAAC,sBAAsB,CAAC;QACnC,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,SAAS,EAAE,YAAY;QACvB,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,wBAAwB;QACpC,MAAM,EAAE,oBAAoB;QAC5B,QAAQ,EAAE,sBAAsB;QAChC,YAAY,EAAE,CAAC,kBAAkB,CAAC;QAElC,iBAAiB,EAAE,wBAAwB,EAAE;QAE7C,kBAAkB,EAAE,wBAAwB,EAAE;QAE9C,QAAQ,EAAE;YACR,UAAU,EAAE,cAAc;YAC1B,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,mBAAmB,CAAC,0BAA0B,CAAC;SAC7D;QAED,kBAAkB,EAAE;YAClB,WAAW,EAAE,yBAAyB;YACtC,eAAe,EAAE,QAAQ;YACzB,QAAQ,EAAE,eAAe;SAC1B;QAED,SAAS,EAAE;YACT,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,QAAQ;SAChB;KACF,CAAC;AACJ,CAAC"}

package/dist/p0-fixture/scenario.d.ts

@@ -0,0 +1,14 @@
+import type { SecurityContext } from '../core/index.js';
+import type { P0McpToolName } from './mcp/types.js';
+export type P0FixtureMode = 'secure' | 'vulnerable';
+export interface P0Scenario {
+    id: string;
+    tool: P0McpToolName;
+    mcpAudience?: string;
+    lifecycleTracking?: boolean;
+    cancelLifecycleBeforeTool?: boolean;
+    buildArguments(context: SecurityContext): Record<string, unknown>;
+}
+export declare const P0_READ_INVOICE_SCENARIO: P0Scenario;
+export declare function createP0UpdateInvoiceScenario(amountCents: number): P0Scenario;
+//# sourceMappingURL=scenario.d.ts.map

package/dist/p0-fixture/scenario.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenario.d.ts","sourceRoot":"","sources":["../../src/p0-fixture/scenario.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,YAAY,CAAC;AAEpD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IAEpB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAEpC,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnE;AAED,eAAO,MAAM,wBAAwB,EAAE,UAStC,CAAC;AAEF,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,CAY7E"}

package/dist/p0-fixture/scenario.js

@@ -0,0 +1,22 @@
+export const P0_READ_INVOICE_SCENARIO = {
+    id: 'read-authorized-invoice',
+    tool: 'read_invoice',
+    buildArguments(context) {
+        return {
+            resource: context.resource,
+        };
+    },
+};
+export function createP0UpdateInvoiceScenario(amountCents) {
+    return {
+        id: `update-invoice-${amountCents}`,
+        tool: 'update_invoice',
+        buildArguments(context) {
+            return {
+                resource: context.resource,
+                amountCents,
+            };
+        },
+    };
+}
+//# sourceMappingURL=scenario.js.map