handoffprobe 0.1.0

package/dist/p1-fixture/target-adapter.js

@@ -0,0 +1,142 @@
+import { cloneSecurityContext } from '../core/index.js';
+import { P0TargetAdapter } from '../p0-fixture/index.js';
+import { EvidenceRecorder } from '../protocol-lab/evidence.js';
+import { createP1FixtureState, evaluateP1Delegation, registerP1Delegation } from './state.js';
+export class P1AuthorizationTargetAdapter {
+    fixture;
+    scenario;
+    id;
+    constructor(fixture, scenario) {
+        this.fixture = fixture;
+        this.scenario = scenario;
+        this.id = ['p1', fixture, scenario.id].join(':');
+    }
+    async execute(input) {
+        if (input.signal.aborted) {
+            throw new Error('P1 execution was aborted before start.');
+        }
+        const originalContext = cloneSecurityContext(input.context);
+        const translatedContext = cloneSecurityContext(input.context);
+        const recorder = new EvidenceRecorder(input.runId, this.fixture, input.correlationId);
+        const state = createP1FixtureState();
+        registerP1Delegation(state, this.scenario.delegation);
+        const decision = evaluateP1Delegation(state, this.scenario.delegation.id, this.scenario.logicalTime, this.scenario.request);
+        recorder.record({
+            protocol: 'HANDOFF',
+            protocolVersion: 'handoffprobe-p1-v1',
+            boundary: 'a2a-delegation -> handoff-authorization',
+            event: 'p1.authorization',
+            context: translatedContext,
+            details: {
+                scenarioId: this.scenario.id,
+                delegationId: this.scenario.delegation.id,
+                logicalTime: this.scenario.logicalTime,
+                issuedAt: this.scenario.delegation.issuedAt,
+                expiresAt: this.scenario.delegation.expiresAt,
+                delegationChain: this.scenario.delegation.chain,
+                requiredChain: this.scenario.request.requiredChain,
+                taskId: this.scenario.request.taskId,
+                runId: this.scenario.request.runId,
+                allowed: decision.allowed,
+                reasons: decision.reasons,
+                expired: decision.expired,
+                chainMatches: decision.chainMatches,
+            },
+        });
+        /*
+         * Secure fixture:
+         * invalid P1 authority is stopped before
+         * the protected MCP execution.
+         *
+         * Vulnerable fixture:
+         * the handoff ignores the failed P1
+         * authority decision and continues into
+         * the normal A2A -> MCP execution path.
+         */
+        if (!decision.allowed && this.fixture === 'secure') {
+            recorder.record({
+                protocol: 'HANDOFF',
+                protocolVersion: 'handoffprobe-p1-v1',
+                boundary: 'handoff-authorization -> mcp',
+                event: 'p1.authorization.blocked',
+                context: translatedContext,
+                details: {
+                    scenarioId: this.scenario.id,
+                    delegationId: this.scenario.delegation.id,
+                    reasons: decision.reasons,
+                    sideEffectCounterBefore: 0,
+                    sideEffectCounterAfter: 0,
+                },
+            });
+            return {
+                originalContext,
+                translatedContext,
+                evidence: recorder.events,
+                output: {
+                    scenarioId: this.scenario.id,
+                    fixture: this.fixture,
+                    delegationId: this.scenario.delegation.id,
+                    logicalTime: this.scenario.logicalTime,
+                    decision,
+                    executed: false,
+                    sideEffectCounterBefore: 0,
+                    sideEffectCounterAfter: 0,
+                },
+            };
+        }
+        if (!decision.allowed) {
+            recorder.record({
+                protocol: 'HANDOFF',
+                protocolVersion: 'handoffprobe-p1-v1',
+                boundary: 'handoff-authorization -> mcp',
+                event: 'p1.authorization.bypassed',
+                context: translatedContext,
+                details: {
+                    scenarioId: this.scenario.id,
+                    delegationId: this.scenario.delegation.id,
+                    reasons: decision.reasons,
+                },
+            });
+        }
+        /*
+         * The inner P0 target always uses its
+         * secure enforcement mode.
+         *
+         * This is important: P1 is testing the
+         * missing cross-boundary expiry/lineage
+         * protection, not disabling the already
+         * working P0 authorization checks.
+         */
+        const downstream = new P0TargetAdapter('secure', this.scenario.p0Scenario);
+        const inner = await downstream.execute(input);
+        const p0Output = inner.output;
+        const before = p0Output.mcpResult.envelope.before.sideEffectCounter;
+        const after = p0Output.mcpResult.envelope.after.sideEffectCounter;
+        const offset = recorder.events.length;
+        const innerEvidence = inner.evidence.map((event, index) => ({
+            ...event,
+            sequence: offset + index + 1,
+            fixture: this.fixture,
+        }));
+        if (input.signal.aborted) {
+            throw new Error('P1 execution was aborted.');
+        }
+        return {
+            originalContext,
+            translatedContext: cloneSecurityContext(inner.translatedContext),
+            evidence: [...recorder.events, ...innerEvidence],
+            output: {
+                scenarioId: this.scenario.id,
+                fixture: this.fixture,
+                delegationId: this.scenario.delegation.id,
+                logicalTime: this.scenario.logicalTime,
+                decision,
+                executed: p0Output.mcpResult.envelope.authorization.executed,
+                sideEffectCounterBefore: before,
+                sideEffectCounterAfter: after,
+                p0Output,
+            },
+        };
+    }
+}
+//# sourceMappingURL=target-adapter.js.map

package/dist/p1-fixture/target-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target-adapter.js","sourceRoot":"","sources":["../../src/p1-fixture/target-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAIxD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAIzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAsC9F,MAAM,OAAO,4BAA4B;IAI5B;IACA;IAJF,EAAE,CAAS;IAEpB,YACW,OAAsB,EACtB,QAAiC;QADjC,YAAO,GAAP,OAAO,CAAe;QACtB,aAAQ,GAAR,QAAQ,CAAyB;QAE1C,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA2B;QACvC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE5D,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAEtF,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QAErC,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEtD,MAAM,QAAQ,GAAG,oBAAoB,CACnC,KAAK,EACL,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAC3B,IAAI,CAAC,QAAQ,CAAC,WAAW,EACzB,IAAI,CAAC,QAAQ,CAAC,OAAO,CACtB,CAAC;QAEF,QAAQ,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,SAAS;YAEnB,eAAe,EAAE,oBAAoB;YAErC,QAAQ,EAAE,yCAAyC;YAEnD,KAAK,EAAE,kBAAkB;YAEzB,OAAO,EAAE,iBAAiB;YAE1B,OAAO,EAAE;gBACP,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAE5B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;gBAEzC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;gBAEtC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ;gBAE3C,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS;gBAE7C,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK;gBAE/C,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa;gBAElD,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAEpC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK;gBAElC,OAAO,EAAE,QAAQ,CAAC,OAAO;gBAEzB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBAEzB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBAEzB,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC;SACF,CAAC,CAAC;QAEH;;;;;;;;;WASG;QAEH,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnD,QAAQ,CAAC,MAAM,CAAC;gBACd,QAAQ,EAAE,SAAS;gBAEnB,eAAe,EAAE,oBAAoB;gBAErC,QAAQ,EAAE,8BAA8B;gBAExC,KAAK,EAAE,0BAA0B;gBAEjC,OAAO,EAAE,iBAAiB;gBAE1B,OAAO,EAAE;oBACP,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAE5B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;oBAEzC,OAAO,EAAE,QAAQ,CAAC,OAAO;oBAEzB,uBAAuB,EAAE,CAAC;oBAE1B,sBAAsB,EAAE,CAAC;iBAC1B;aACF,CAAC,CAAC;YAEH,OAAO;gBACL,eAAe;gBAEf,iBAAiB;gBAEjB,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBAEzB,MAAM,EAAE;oBACN,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAE5B,OAAO,EAAE,IAAI,CAAC,OAAO;oBAErB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;oBAEzC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;oBAEtC,QAAQ;oBAER,QAAQ,EAAE,KAAK;oBAEf,uBAAuB,EAAE,CAAC;oBAE1B,sBAAsB,EAAE,CAAC;iBACY;aACxC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,QAAQ,CAAC,MAAM,CAAC;gBACd,QAAQ,EAAE,SAAS;gBAEnB,eAAe,EAAE,oBAAoB;gBAErC,QAAQ,EAAE,8BAA8B;gBAExC,KAAK,EAAE,2BAA2B;gBAElC,OAAO,EAAE,iBAAiB;gBAE1B,OAAO,EAAE;oBACP,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAE5B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;oBAEzC,OAAO,EAAE,QAAQ,CAAC,OAAO;iBAC1B;aACF,CAAC,CAAC;QACL,CAAC;QAED;;;;;;;;WAQG;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE3E,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAwB,CAAC;QAEhD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAEpE,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAElE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QAEtC,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1D,GAAG,KAAK;YAER,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,CAAC;YAE5B,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC,CAAC;QAEJ,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO;YACL,eAAe;YAEf,iBAAiB,EAAE,oBAAoB,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAEhE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC;YAEhD,MAAM,EAAE;gBACN,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAE5B,OAAO,EAAE,IAAI,CAAC,OAAO;gBAErB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;gBAEzC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;gBAEtC,QAAQ;gBAER,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ;gBAE5D,uBAAuB,EAAE,MAAM;gBAE/B,sBAAsB,EAAE,KAAK;gBAE7B,QAAQ;aAC6B;SACxC,CAAC;IACJ,CAAC;CACF"}

package/dist/protocol-lab/a2a/executor.d.ts

@@ -0,0 +1,13 @@
+import { type AgentExecutor, type ExecutionEventBus, type RequestContext } from '@a2a-js/sdk/server';
+import type { HandoffAdapter } from '../../core/index.js';
+import type { EvidenceRecorder } from '../evidence.js';
+import type { LabRunState } from '../models.js';
+export declare class HandoffLabExecutor implements AgentExecutor {
+    private readonly handoffAdapter;
+    private readonly recorder;
+    private readonly state;
+    constructor(handoffAdapter: HandoffAdapter, recorder: EvidenceRecorder, state: LabRunState);
+    execute(requestContext: RequestContext, eventBus: ExecutionEventBus): Promise<void>;
+    cancelTask(): Promise<void>;
+}
+//# sourceMappingURL=executor.d.ts.map

package/dist/protocol-lab/a2a/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/protocol-lab/a2a/executor.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAmB,MAAM,cAAc,CAAC;AA8DjE,qBAAa,kBAAmB,YAAW,aAAa;IAEpD,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAFL,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW;IAG/B,OAAO,CAAC,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IA+DzF,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAG5B"}

package/dist/protocol-lab/a2a/executor.js

@@ -0,0 +1,112 @@
+import { Role } from '@a2a-js/sdk';
+import { AgentEvent, } from '@a2a-js/sdk/server';
+import { callReadInvoiceThroughMcp } from '../mcp/harness.js';
+function readContext(value) {
+    if (typeof value === 'object' &&
+        value !== null &&
+        'principal' in value &&
+        'caller' in value &&
+        'downstream' in value &&
+        'tenant' in value &&
+        'resource' in value &&
+        'capabilities' in value) {
+        const candidate = value;
+        if (typeof candidate.principal === 'string' &&
+            typeof candidate.caller === 'string' &&
+            typeof candidate.downstream === 'string' &&
+            typeof candidate.tenant === 'string' &&
+            typeof candidate.resource === 'string' &&
+            Array.isArray(candidate.capabilities) &&
+            candidate.capabilities.every((item) => typeof item === 'string')) {
+            return {
+                principal: candidate.principal,
+                caller: candidate.caller,
+                downstream: candidate.downstream,
+                tenant: candidate.tenant,
+                resource: candidate.resource,
+                capabilities: [...candidate.capabilities],
+            };
+        }
+    }
+    throw new Error('A2A request does not contain a valid HandoffProbe security context.');
+}
+function createTextMessage(messageId, contextId, text) {
+    return {
+        messageId,
+        contextId,
+        taskId: '',
+        role: Role.ROLE_AGENT,
+        metadata: undefined,
+        extensions: [],
+        referenceTaskIds: [],
+        parts: [
+            {
+                content: {
+                    $case: 'text',
+                    value: text,
+                },
+                mediaType: 'application/json',
+                filename: '',
+                metadata: undefined,
+            },
+        ],
+    };
+}
+export class HandoffLabExecutor {
+    handoffAdapter;
+    recorder;
+    state;
+    constructor(handoffAdapter, recorder, state) {
+        this.handoffAdapter = handoffAdapter;
+        this.recorder = recorder;
+        this.state = state;
+    }
+    async execute(requestContext, eventBus) {
+        const original = readContext(requestContext.request.metadata?.handoffprobeContext);
+        this.recorder.record({
+            protocol: 'A2A',
+            protocolVersion: '1.0',
+            boundary: 'a2a-rest -> agent-executor',
+            event: 'a2a.receiver.receive',
+            context: original,
+            details: {
+                messageId: requestContext.userMessage.messageId,
+            },
+        });
+        const translated = await this.handoffAdapter.translate(original);
+        this.state.translatedContext = translated;
+        this.recorder.record({
+            protocol: 'HANDOFF',
+            protocolVersion: 'handoffprobe-v1',
+            boundary: 'a2a-receiver -> mcp-client',
+            event: 'handoff.translate',
+            context: translated,
+            details: {
+                originalPrincipal: original.principal,
+                translatedPrincipal: translated.principal,
+                fixture: this.recorder.fixture,
+                handoffAdapter: this.handoffAdapter.id,
+            },
+        });
+        const mcp = await callReadInvoiceThroughMcp(translated, this.recorder);
+        this.state.mcpEra = mcp.era;
+        this.state.toolResult = mcp.result;
+        const responseText = JSON.stringify(mcp.result);
+        this.recorder.record({
+            protocol: 'A2A',
+            protocolVersion: '1.0',
+            boundary: 'agent-executor -> a2a-rest',
+            event: 'a2a.receiver.respond',
+            context: translated,
+            details: {
+                invoiceId: mcp.result.invoiceId,
+            },
+        });
+        eventBus.publish(AgentEvent.message(createTextMessage(`${this.recorder.runId}-response`, requestContext.contextId, responseText)));
+        eventBus.finished();
+    }
+    cancelTask() {
+        return Promise.resolve();
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/protocol-lab/a2a/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../src/protocol-lab/a2a/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,aAAa,CAAC;AACjD,OAAO,EACL,UAAU,GAIX,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,SAAS,WAAW,CAAC,KAAc;IACjC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,WAAW,IAAI,KAAK;QACpB,QAAQ,IAAI,KAAK;QACjB,YAAY,IAAI,KAAK;QACrB,QAAQ,IAAI,KAAK;QACjB,UAAU,IAAI,KAAK;QACnB,cAAc,IAAI,KAAK,EACvB,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC;QAExB,IACE,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;YACvC,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;YACpC,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ;YACxC,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;YACpC,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;YACtC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;YACrC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAChE,CAAC;YACD,OAAO;gBACL,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,YAAY,EAAE,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC;aAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,SAAiB,EAAE,IAAY;IAC3E,OAAO;QACL,SAAS;QACT,SAAS;QACT,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,IAAI,CAAC,UAAU;QACrB,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,EAAE;QACd,gBAAgB,EAAE,EAAE;QACpB,KAAK,EAAE;YACL;gBACE,OAAO,EAAE;oBACP,KAAK,EAAE,MAAM;oBACb,KAAK,EAAE,IAAI;iBACZ;gBACD,SAAS,EAAE,kBAAkB;gBAC7B,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,SAAS;aACpB;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,kBAAkB;IAEV;IACA;IACA;IAHnB,YACmB,cAA8B,EAC9B,QAA0B,EAC1B,KAAkB;QAFlB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,aAAQ,GAAR,QAAQ,CAAkB;QAC1B,UAAK,GAAL,KAAK,CAAa;IAClC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,cAA8B,EAAE,QAA2B;QACvE,MAAM,QAAQ,GAAG,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAEnF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,KAAK;YACtB,QAAQ,EAAE,4BAA4B;YACtC,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE;gBACP,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,SAAS;aAChD;SACF,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAEjE,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,UAAU,CAAC;QAE1C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,SAAS;YACnB,eAAe,EAAE,iBAAiB;YAClC,QAAQ,EAAE,4BAA4B;YACtC,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EAAE,UAAU;YACnB,OAAO,EAAE;gBACP,iBAAiB,EAAE,QAAQ,CAAC,SAAS;gBACrC,mBAAmB,EAAE,UAAU,CAAC,SAAS;gBACzC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAC9B,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEvE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;QAEnC,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEhD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,KAAK;YACtB,QAAQ,EAAE,4BAA4B;YACtC,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,UAAU;YACnB,OAAO,EAAE;gBACP,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;aAChC;SACF,CAAC,CAAC;QAEH,QAAQ,CAAC,OAAO,CACd,UAAU,CAAC,OAAO,CAChB,iBAAiB,CACf,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,WAAW,EACjC,cAAc,CAAC,SAAS,EACxB,YAAY,CACb,CACF,CACF,CAAC;QAEF,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IAED,UAAU;QACR,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/protocol-lab/a2a/harness.d.ts

@@ -0,0 +1,11 @@
+import type { HandoffAdapter } from '../../core/index.js';
+import type { EvidenceRecorder } from '../evidence.js';
+import type { FixtureMode, LabRunState, SecurityContext } from '../models.js';
+export declare function executeA2aFixture(input: {
+    fixture: FixtureMode;
+    recorder: EvidenceRecorder;
+    state: LabRunState;
+    context: SecurityContext;
+    handoffAdapter: HandoffAdapter;
+}): Promise<string>;
+//# sourceMappingURL=harness.d.ts.map

package/dist/protocol-lab/a2a/harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../../src/protocol-lab/a2a/harness.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAuG9E,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,eAAe,CAAC;IACzB,cAAc,EAAE,cAAc,CAAC;CAChC,GAAG,OAAO,CAAC,MAAM,CAAC,CAsFlB"}

package/dist/protocol-lab/a2a/harness.js

@@ -0,0 +1,160 @@
+import { once } from 'node:events';
+import { Role } from '@a2a-js/sdk';
+import { ClientFactory, RestTransportFactory } from '@a2a-js/sdk/client';
+import { DefaultRequestHandler, InMemoryTaskStore } from '@a2a-js/sdk/server';
+import { agentCardHandler, restHandler, UserBuilder } from '@a2a-js/sdk/server/express';
+import express from 'express';
+import { HandoffLabExecutor } from './executor.js';
+function createAgentCard(restUrl) {
+    return {
+        name: 'HandoffProbe Protocol Lab Receiver',
+        description: 'Local deterministic A2A receiver used by HandoffProbe protocol fixtures.',
+        provider: undefined,
+        version: '0.0.0',
+        capabilities: {
+            streaming: false,
+            pushNotifications: false,
+            extensions: [],
+        },
+        defaultInputModes: ['application/json'],
+        defaultOutputModes: ['application/json'],
+        skills: [
+            {
+                id: 'handoff-read-invoice',
+                name: 'Handoff fake invoice read',
+                description: 'Translates A2A security context into a local MCP fake-tool request.',
+                tags: ['handoff', 'security', 'fixture'],
+                examples: [],
+                inputModes: ['application/json'],
+                outputModes: ['application/json'],
+                securityRequirements: [],
+            },
+        ],
+        securitySchemes: {},
+        securityRequirements: [],
+        supportedInterfaces: [
+            {
+                url: restUrl,
+                protocolBinding: 'HTTP+JSON',
+                protocolVersion: '1.0',
+                tenant: '',
+            },
+        ],
+        signatures: [],
+    };
+}
+function createRequest(runId, context) {
+    return {
+        tenant: '',
+        message: {
+            messageId: `${runId}-request`,
+            contextId: `${runId}-context`,
+            taskId: '',
+            role: Role.ROLE_USER,
+            metadata: undefined,
+            extensions: [],
+            referenceTaskIds: [],
+            parts: [
+                {
+                    content: {
+                        $case: 'text',
+                        value: 'Read the authorized invoice.',
+                    },
+                    mediaType: 'text/plain',
+                    filename: '',
+                    metadata: undefined,
+                },
+            ],
+        },
+        configuration: undefined,
+        metadata: {
+            handoffprobeContext: {
+                ...context,
+                capabilities: [...context.capabilities],
+            },
+        },
+    };
+}
+function closeServer(server) {
+    return new Promise((resolve, reject) => {
+        server.close((error) => {
+            if (error === undefined) {
+                resolve();
+            }
+            else {
+                reject(error);
+            }
+        });
+    });
+}
+function extractMessageText(result) {
+    if ('messageId' in result) {
+        const part = result.parts[0];
+        if (part?.content?.$case === 'text') {
+            return part.content.value;
+        }
+    }
+    throw new Error('Expected A2A receiver to return a direct Message.');
+}
+export async function executeA2aFixture(input) {
+    const app = express();
+    const server = app.listen(0, '127.0.0.1');
+    await once(server, 'listening');
+    const address = server.address();
+    if (address === null || typeof address === 'string') {
+        await closeServer(server);
+        throw new Error('Unable to determine A2A loopback port.');
+    }
+    const baseUrl = `http://127.0.0.1:${address.port}`;
+    const agentCard = createAgentCard(`${baseUrl}/a2a`);
+    const executor = new HandoffLabExecutor(input.handoffAdapter, input.recorder, input.state);
+    const requestHandler = new DefaultRequestHandler(agentCard, new InMemoryTaskStore(), executor);
+    app.use(express.json());
+    app.use('/.well-known/agent-card.json', agentCardHandler({
+        agentCardProvider: requestHandler,
+    }));
+    app.use('/a2a', restHandler({
+        requestHandler,
+        userBuilder: UserBuilder.noAuthentication,
+    }));
+    try {
+        const factory = new ClientFactory({
+            transports: [new RestTransportFactory()],
+            preferredTransports: ['HTTP+JSON'],
+        });
+        const client = await factory.createFromAgentCard(agentCard);
+        input.recorder.record({
+            protocol: 'A2A',
+            protocolVersion: '1.0',
+            boundary: 'fixture-client -> a2a-rest',
+            event: 'a2a.client.send',
+            context: input.context,
+            details: {
+                binding: 'HTTP+JSON',
+                transport: 'loopback-http',
+                path: '/a2a',
+            },
+        });
+        const response = await client.sendMessage(createRequest(input.recorder.runId, input.context));
+        const responseText = extractMessageText(response);
+        const responseContext = input.state.translatedContext;
+        if (responseContext === undefined) {
+            throw new Error('A2A executor did not persist translated context.');
+        }
+        input.recorder.record({
+            protocol: 'A2A',
+            protocolVersion: '1.0',
+            boundary: 'a2a-rest -> fixture-client',
+            event: 'a2a.client.receive',
+            context: responseContext,
+            details: {
+                responseType: 'message',
+            },
+        });
+        return responseText;
+    }
+    finally {
+        await closeServer(server);
+    }
+}
+//# sourceMappingURL=harness.js.map

package/dist/protocol-lab/a2a/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../../src/protocol-lab/a2a/harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAInC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACxF,OAAO,OAAO,MAAM,SAAS,CAAC;AAK9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO;QACL,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EAAE,0EAA0E;QACvF,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE;YACZ,SAAS,EAAE,KAAK;YAChB,iBAAiB,EAAE,KAAK;YACxB,UAAU,EAAE,EAAE;SACf;QACD,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;QACvC,kBAAkB,EAAE,CAAC,kBAAkB,CAAC;QACxC,MAAM,EAAE;YACN;gBACE,EAAE,EAAE,sBAAsB;gBAC1B,IAAI,EAAE,2BAA2B;gBACjC,WAAW,EAAE,qEAAqE;gBAClF,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC;gBACxC,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,CAAC,kBAAkB,CAAC;gBAChC,WAAW,EAAE,CAAC,kBAAkB,CAAC;gBACjC,oBAAoB,EAAE,EAAE;aACzB;SACF;QACD,eAAe,EAAE,EAAE;QACnB,oBAAoB,EAAE,EAAE;QACxB,mBAAmB,EAAE;YACnB;gBACE,GAAG,EAAE,OAAO;gBACZ,eAAe,EAAE,WAAW;gBAC5B,eAAe,EAAE,KAAK;gBACtB,MAAM,EAAE,EAAE;aACX;SACF;QACD,UAAU,EAAE,EAAE;KACf,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,OAAwB;IAC5D,OAAO;QACL,MAAM,EAAE,EAAE;QACV,OAAO,EAAE;YACP,SAAS,EAAE,GAAG,KAAK,UAAU;YAC7B,SAAS,EAAE,GAAG,KAAK,UAAU;YAC7B,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,EAAE;YACd,gBAAgB,EAAE,EAAE;YACpB,KAAK,EAAE;gBACL;oBACE,OAAO,EAAE;wBACP,KAAK,EAAE,MAAM;wBACb,KAAK,EAAE,8BAA8B;qBACtC;oBACD,SAAS,EAAE,YAAY;oBACvB,QAAQ,EAAE,EAAE;oBACZ,QAAQ,EAAE,SAAS;iBACpB;aACF;SACF;QACD,aAAa,EAAE,SAAS;QACxB,QAAQ,EAAE;YACR,mBAAmB,EAAE;gBACnB,GAAG,OAAO;gBACV,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;aACxC;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CACzB,MAEC;IAED,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE7B,IAAI,IAAI,EAAE,OAAO,EAAE,KAAK,KAAK,MAAM,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAMvC;IACC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAE1C,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAEjC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAE1B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;IAEnD,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,OAAO,MAAM,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAE3F,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAAC,SAAS,EAAE,IAAI,iBAAiB,EAAE,EAAE,QAAQ,CAAC,CAAC;IAE/F,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAExB,GAAG,CAAC,GAAG,CACL,8BAA8B,EAC9B,gBAAgB,CAAC;QACf,iBAAiB,EAAE,cAAc;KAClC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,MAAM,EACN,WAAW,CAAC;QACV,cAAc;QACd,WAAW,EAAE,WAAW,CAAC,gBAAgB;KAC1C,CAAC,CACH,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;YAChC,UAAU,EAAE,CAAC,IAAI,oBAAoB,EAAE,CAAC;YACxC,mBAAmB,EAAE,CAAC,WAAW,CAAC;SACnC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAE5D,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,KAAK;YACtB,QAAQ,EAAE,4BAA4B;YACtC,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE;gBACP,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,eAAe;gBAC1B,IAAI,EAAE,MAAM;aACb;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAE9F,MAAM,YAAY,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAElD,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAEtD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,KAAK;YACtB,QAAQ,EAAE,4BAA4B;YACtC,KAAK,EAAE,oBAAoB;YAC3B,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE;gBACP,YAAY,EAAE,SAAS;aACxB;SACF,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/protocol-lab/evidence.d.ts

@@ -0,0 +1,17 @@
+import type { EvidenceEvent, FixtureMode, SecurityContext } from './models.js';
+export declare class EvidenceRecorder {
+    readonly runId: string;
+    readonly fixture: FixtureMode;
+    readonly events: EvidenceEvent[];
+    readonly correlationId: string;
+    constructor(runId: string, fixture: FixtureMode, correlationId?: string);
+    record(input: {
+        protocol: EvidenceEvent['protocol'];
+        protocolVersion: string;
+        boundary: string;
+        event: string;
+        context: SecurityContext;
+        details?: Record<string, unknown>;
+    }): void;
+}
+//# sourceMappingURL=evidence.d.ts.map

package/dist/protocol-lab/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/protocol-lab/evidence.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE/E,qBAAa,gBAAgB;IAMzB,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,QAAQ,CAAC,OAAO,EAAE,WAAW;IAN/B,QAAQ,CAAC,MAAM,EAAE,aAAa,EAAE,CAAM;IAEtC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBAGpB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,WAAW,EAC7B,aAAa,CAAC,EAAE,MAAM;IAKxB,MAAM,CAAC,KAAK,EAAE;QACZ,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;QACpC,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,eAAe,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,GAAG,IAAI;CAeT"}

package/dist/protocol-lab/evidence.js

@@ -0,0 +1,28 @@
+import { cloneSecurityContext, redactRecord } from '../core/index.js';
+export class EvidenceRecorder {
+    runId;
+    fixture;
+    events = [];
+    correlationId;
+    constructor(runId, fixture, correlationId) {
+        this.runId = runId;
+        this.fixture = fixture;
+        this.correlationId = correlationId ?? runId;
+    }
+    record(input) {
+        this.events.push({
+            runId: this.runId,
+            correlationId: this.correlationId,
+            sequence: this.events.length + 1,
+            fixture: this.fixture,
+            protocol: input.protocol,
+            protocolVersion: input.protocolVersion,
+            boundary: input.boundary,
+            event: input.event,
+            context: cloneSecurityContext(input.context),
+            details: redactRecord(input.details ?? {}),
+            provenance: [],
+        });
+    }
+}
+//# sourceMappingURL=evidence.js.map

package/dist/protocol-lab/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/protocol-lab/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGtE,MAAM,OAAO,gBAAgB;IAMhB;IACA;IANF,MAAM,GAAoB,EAAE,CAAC;IAE7B,aAAa,CAAS;IAE/B,YACW,KAAa,EACb,OAAoB,EAC7B,aAAsB;QAFb,UAAK,GAAL,KAAK,CAAQ;QACb,YAAO,GAAP,OAAO,CAAa;QAG7B,IAAI,CAAC,aAAa,GAAG,aAAa,IAAI,KAAK,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,KAON;QACC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAChC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5C,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;YAC1C,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/protocol-lab/fixture.d.ts

@@ -0,0 +1,11 @@
+import type { HandoffAdapter } from '../core/index.js';
+import type { FixtureMode, ProtocolLabResult, SecurityContext } from './models.js';
+export declare const REFERENCE_CONTEXT: SecurityContext;
+export interface ProtocolFixtureOptions {
+    runId?: string;
+    correlationId?: string;
+    context?: SecurityContext;
+    handoffAdapter?: HandoffAdapter;
+}
+export declare function runProtocolFixture(fixture: FixtureMode, options?: ProtocolFixtureOptions): Promise<ProtocolLabResult>;
+//# sourceMappingURL=fixture.d.ts.map

package/dist/protocol-lab/fixture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture.d.ts","sourceRoot":"","sources":["../../src/protocol-lab/fixture.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAIvD,OAAO,KAAK,EAAE,WAAW,EAAe,iBAAiB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEhG,eAAO,MAAM,iBAAiB,EAAE,eAO/B,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAMD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CAiD5B"}

package/dist/protocol-lab/fixture.js

@@ -0,0 +1,54 @@
+import { cloneSecurityContext } from '../core/index.js';
+import { executeA2aFixture } from './a2a/harness.js';
+import { EvidenceRecorder } from './evidence.js';
+import { ProtocolLabHandoffAdapter } from './handoff/adapter.js';
+export const REFERENCE_CONTEXT = {
+    principal: 'user:alice',
+    caller: 'agent:sales',
+    downstream: 'agent:billing',
+    tenant: 'tenant:acme',
+    resource: 'invoice:INV-1001',
+    capabilities: ['invoice.read'],
+};
+function defaultRunId(fixture) {
+    return fixture === 'secure' ? 'hp-lab-secure-001' : 'hp-lab-vulnerable-001';
+}
+export async function runProtocolFixture(fixture, options = {}) {
+    const runId = options.runId ?? defaultRunId(fixture);
+    const correlationId = options.correlationId ?? runId;
+    const context = cloneSecurityContext(options.context ?? REFERENCE_CONTEXT);
+    const recorder = new EvidenceRecorder(runId, fixture, correlationId);
+    const state = {};
+    const handoffAdapter = options.handoffAdapter ?? new ProtocolLabHandoffAdapter(fixture);
+    const responseText = await executeA2aFixture({
+        fixture,
+        recorder,
+        state,
+        context,
+        handoffAdapter,
+    });
+    const translatedContext = state.translatedContext;
+    const toolResult = state.toolResult;
+    if (translatedContext === undefined) {
+        throw new Error('Fixture produced no translated context.');
+    }
+    if (toolResult === undefined) {
+        throw new Error('Fixture produced no fake-tool result.');
+    }
+    if (state.mcpEra === 'modern') {
+        return {
+            runId,
+            fixture,
+            a2aProtocolVersion: '1.0',
+            mcpProtocolVersion: '2026-07-28',
+            mcpEra: state.mcpEra,
+            originalContext: context,
+            translatedContext,
+            toolResult,
+            responseText,
+            evidence: recorder.events,
+        };
+    }
+    throw new Error(`Fixture did not negotiate modern MCP era: ${String(state.mcpEra)}`);
+}
+//# sourceMappingURL=fixture.js.map

package/dist/protocol-lab/fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture.js","sourceRoot":"","sources":["../../src/protocol-lab/fixture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAGjE,MAAM,CAAC,MAAM,iBAAiB,GAAoB;IAChD,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,aAAa;IACrB,UAAU,EAAE,eAAe;IAC3B,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,kBAAkB;IAC5B,YAAY,EAAE,CAAC,cAAc,CAAC;CAC/B,CAAC;AASF,SAAS,YAAY,CAAC,OAAoB;IACxC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,uBAAuB,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAoB,EACpB,UAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;IAErD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;IAErD,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAC;IAE3E,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAErE,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAExF,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC;QAC3C,OAAO;QACP,QAAQ;QACR,KAAK;QACL,OAAO;QACP,cAAc;KACf,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAElD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAEpC,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK;YACL,OAAO;YACP,kBAAkB,EAAE,KAAK;YACzB,kBAAkB,EAAE,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,eAAe,EAAE,OAAO;YACxB,iBAAiB;YACjB,UAAU;YACV,YAAY;YACZ,QAAQ,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACvF,CAAC"}

package/dist/protocol-lab/handoff/adapter.d.ts

@@ -0,0 +1,9 @@
+import type { HandoffAdapter, SecurityContext } from '../../core/index.js';
+import type { FixtureMode } from '../models.js';
+export declare class ProtocolLabHandoffAdapter implements HandoffAdapter {
+    readonly fixture: FixtureMode;
+    readonly id: string;
+    constructor(fixture: FixtureMode);
+    translate(context: SecurityContext): SecurityContext;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/protocol-lab/handoff/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/protocol-lab/handoff/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,qBAAa,yBAA0B,YAAW,cAAc;IAGlD,QAAQ,CAAC,OAAO,EAAE,WAAW;IAFzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAEC,OAAO,EAAE,WAAW;IAIzC,SAAS,CAAC,OAAO,EAAE,eAAe,GAAG,eAAe;CAGrD"}

package/dist/protocol-lab/handoff/adapter.js

@@ -0,0 +1,13 @@
+import { translateSecurityContext } from './translate.js';
+export class ProtocolLabHandoffAdapter {
+    fixture;
+    id;
+    constructor(fixture) {
+        this.fixture = fixture;
+        this.id = `protocol-lab-handoff:${fixture}`;
+    }
+    translate(context) {
+        return translateSecurityContext(context, this.fixture);
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/protocol-lab/handoff/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/protocol-lab/handoff/adapter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,OAAO,yBAAyB;IAGf;IAFZ,EAAE,CAAS;IAEpB,YAAqB,OAAoB;QAApB,YAAO,GAAP,OAAO,CAAa;QACvC,IAAI,CAAC,EAAE,GAAG,wBAAwB,OAAO,EAAE,CAAC;IAC9C,CAAC;IAED,SAAS,CAAC,OAAwB;QAChC,OAAO,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/protocol-lab/handoff/translate.d.ts

@@ -0,0 +1,3 @@
+import type { FixtureMode, SecurityContext } from '../models.js';
+export declare function translateSecurityContext(context: SecurityContext, fixture: FixtureMode): SecurityContext;
+//# sourceMappingURL=translate.d.ts.map

package/dist/protocol-lab/handoff/translate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"translate.d.ts","sourceRoot":"","sources":["../../../src/protocol-lab/handoff/translate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEjE,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,WAAW,GACnB,eAAe,CAajB"}