handoffprobe 0.1.0

package/dist/protocol-lab/handoff/translate.js

@@ -0,0 +1,14 @@
+export function translateSecurityContext(context, fixture) {
+    if (fixture === 'secure') {
+        return {
+            ...context,
+            capabilities: [...context.capabilities],
+        };
+    }
+    return {
+        ...context,
+        principal: context.downstream,
+        capabilities: [...context.capabilities],
+    };
+}
+//# sourceMappingURL=translate.js.map

package/dist/protocol-lab/handoff/translate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"translate.js","sourceRoot":"","sources":["../../../src/protocol-lab/handoff/translate.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,wBAAwB,CACtC,OAAwB,EACxB,OAAoB;IAEpB,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO;YACL,GAAG,OAAO;YACV,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;SACxC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,OAAO;QACV,SAAS,EAAE,OAAO,CAAC,UAAU;QAC7B,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;KACxC,CAAC;AACJ,CAAC"}

package/dist/protocol-lab/mcp/fake-tools.d.ts

@@ -0,0 +1,5 @@
+import { McpServer } from '@modelcontextprotocol/server';
+import type { EvidenceRecorder } from '../evidence.js';
+import type { SecurityContext } from '../models.js';
+export declare function createFakeToolServer(recorder: EvidenceRecorder, context: SecurityContext, era: string): McpServer;
+//# sourceMappingURL=fake-tools.d.ts.map

package/dist/protocol-lab/mcp/fake-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-tools.d.ts","sourceRoot":"","sources":["../../../src/protocol-lab/mcp/fake-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAGzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAqB,eAAe,EAAE,MAAM,cAAc,CAAC;AAWvE,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,MAAM,GACV,SAAS,CAuDX"}

package/dist/protocol-lab/mcp/fake-tools.js

@@ -0,0 +1,58 @@
+import { McpServer } from '@modelcontextprotocol/server';
+import * as z from 'zod/v4';
+const inputSchema = z.object({
+    principal: z.string(),
+    caller: z.string(),
+    downstream: z.string(),
+    tenant: z.string(),
+    resource: z.string(),
+    capability: z.string(),
+});
+export function createFakeToolServer(recorder, context, era) {
+    const server = new McpServer({
+        name: 'handoffprobe-fixture-mcp',
+        version: '0.0.0',
+    });
+    server.registerTool('read_invoice', {
+        title: 'Read fake invoice',
+        description: 'Returns deterministic in-memory invoice data with no external side effects.',
+        inputSchema,
+    }, ({ principal, caller, downstream, tenant, resource, capability }) => {
+        recorder.record({
+            protocol: 'TOOL',
+            protocolVersion: 'local-fixture-v1',
+            boundary: 'mcp-server -> fake-tool',
+            event: 'fake_tool.execute',
+            context,
+            details: {
+                tool: 'read_invoice',
+                resource,
+                tenant,
+                principal,
+                capability,
+                mcpEra: era,
+            },
+        });
+        const invoiceId = resource.replace('invoice:', '');
+        const result = {
+            invoiceId,
+            tenant,
+            principalObserved: principal,
+            callerObserved: caller,
+            downstreamObserved: downstream,
+            capabilityObserved: capability,
+            amountCents: 12900,
+            currency: 'EUR',
+        };
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(result),
+                },
+            ],
+        };
+    });
+    return server;
+}
+//# sourceMappingURL=fake-tools.js.map

package/dist/protocol-lab/mcp/fake-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-tools.js","sourceRoot":"","sources":["../../../src/protocol-lab/mcp/fake-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAK5B,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAClC,QAA0B,EAC1B,OAAwB,EACxB,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,6EAA6E;QAC1F,WAAW;KACZ,EACD,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;QAClE,QAAQ,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,MAAM;YAChB,eAAe,EAAE,kBAAkB;YACnC,QAAQ,EAAE,yBAAyB;YACnC,KAAK,EAAE,mBAAmB;YAC1B,OAAO;YACP,OAAO,EAAE;gBACP,IAAI,EAAE,cAAc;gBACpB,QAAQ;gBACR,MAAM;gBACN,SAAS;gBACT,UAAU;gBACV,MAAM,EAAE,GAAG;aACZ;SACF,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAsB;YAChC,SAAS;YACT,MAAM;YACN,iBAAiB,EAAE,SAAS;YAC5B,cAAc,EAAE,MAAM;YACtB,kBAAkB,EAAE,UAAU;YAC9B,kBAAkB,EAAE,UAAU;YAC9B,WAAW,EAAE,KAAK;YAClB,QAAQ,EAAE,KAAK;SAChB,CAAC;QAEF,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;iBAC7B;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/protocol-lab/mcp/harness.d.ts

@@ -0,0 +1,7 @@
+import type { EvidenceRecorder } from '../evidence.js';
+import type { FakeInvoiceResult, SecurityContext } from '../models.js';
+export declare function callReadInvoiceThroughMcp(context: SecurityContext, recorder: EvidenceRecorder): Promise<{
+    era: 'modern';
+    result: FakeInvoiceResult;
+}>;
+//# sourceMappingURL=harness.d.ts.map

package/dist/protocol-lab/mcp/harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../../src/protocol-lab/mcp/harness.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAoBvE,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC;IACT,GAAG,EAAE,QAAQ,CAAC;IACd,MAAM,EAAE,iBAAiB,CAAC;CAC3B,CAAC,CAkGD"}

package/dist/protocol-lab/mcp/harness.js

@@ -0,0 +1,97 @@
+import { Client, StreamableHTTPClientTransport } from '@modelcontextprotocol/client';
+import { createMcpHandler } from '@modelcontextprotocol/server';
+import { createFakeToolServer } from './fake-tools.js';
+function readTextContent(content) {
+    for (const block of content) {
+        if (block.type === 'text' && typeof block.text === 'string') {
+            return block.text;
+        }
+    }
+    throw new Error('MCP fake tool returned no text content.');
+}
+export async function callReadInvoiceThroughMcp(context, recorder) {
+    const handler = createMcpHandler(({ era }) => createFakeToolServer(recorder, context, era), {
+        legacy: 'reject',
+    });
+    const transport = new StreamableHTTPClientTransport(new URL('http://handoffprobe.local/mcp'), {
+        fetch: (input, init) => handler.fetch(new Request(input, init)),
+    });
+    const client = new Client({
+        name: 'handoffprobe-protocol-lab',
+        version: '0.0.0',
+    }, {
+        versionNegotiation: {
+            mode: {
+                pin: '2026-07-28',
+            },
+        },
+    });
+    try {
+        await client.connect(transport);
+        const era = client.getProtocolEra();
+        if (era === 'modern') {
+            recorder.record({
+                protocol: 'MCP',
+                protocolVersion: '2026-07-28',
+                boundary: 'handoff-translation -> mcp-client',
+                event: 'mcp.client.connected',
+                context,
+                details: {
+                    era,
+                },
+            });
+        }
+        else {
+            throw new Error(`Expected MCP modern era but received ${String(era)}.`);
+        }
+        const capability = context.capabilities[0];
+        if (capability === undefined) {
+            throw new Error('Translated context has no capability.');
+        }
+        recorder.record({
+            protocol: 'MCP',
+            protocolVersion: '2026-07-28',
+            boundary: 'mcp-client -> mcp-server',
+            event: 'mcp.tool.call',
+            context,
+            details: {
+                tool: 'read_invoice',
+                capability,
+                resource: context.resource,
+            },
+        });
+        const result = await client.callTool({
+            name: 'read_invoice',
+            arguments: {
+                principal: context.principal,
+                caller: context.caller,
+                downstream: context.downstream,
+                tenant: context.tenant,
+                resource: context.resource,
+                capability,
+            },
+        });
+        const text = readTextContent(result.content);
+        const parsed = JSON.parse(text);
+        recorder.record({
+            protocol: 'MCP',
+            protocolVersion: '2026-07-28',
+            boundary: 'mcp-server -> handoff-translation',
+            event: 'mcp.tool.result',
+            context,
+            details: {
+                tool: 'read_invoice',
+                invoiceId: parsed.invoiceId,
+            },
+        });
+        return {
+            era,
+            result: parsed,
+        };
+    }
+    finally {
+        await client.close();
+        await handler.close();
+    }
+}
+//# sourceMappingURL=harness.js.map

package/dist/protocol-lab/mcp/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../../src/protocol-lab/mcp/harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAIhE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AASvD,SAAS,eAAe,CAAC,OAA0B;IACjD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAwB,EACxB,QAA0B;IAK1B,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE;QAC1F,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,+BAA+B,CAAC,EAAE;QAC5F,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;KAChE,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,OAAO;KACjB,EACD;QACE,kBAAkB,EAAE;YAClB,IAAI,EAAE;gBACJ,GAAG,EAAE,YAAY;aAClB;SACF;KACF,CACF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEhC,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAEpC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,MAAM,CAAC;gBACd,QAAQ,EAAE,KAAK;gBACf,eAAe,EAAE,YAAY;gBAC7B,QAAQ,EAAE,mCAAmC;gBAC7C,KAAK,EAAE,sBAAsB;gBAC7B,OAAO;gBACP,OAAO,EAAE;oBACP,GAAG;iBACJ;aACF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAE3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,QAAQ,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,YAAY;YAC7B,QAAQ,EAAE,0BAA0B;YACpC,KAAK,EAAE,eAAe;YACtB,OAAO;YACP,OAAO,EAAE;gBACP,IAAI,EAAE,cAAc;gBACpB,UAAU;gBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE;gBACT,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU;aACX;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC;QAErD,QAAQ,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,YAAY;YAC7B,QAAQ,EAAE,mCAAmC;YAC7C,KAAK,EAAE,iBAAiB;YACxB,OAAO;YACP,OAAO,EAAE;gBACP,IAAI,EAAE,cAAc;gBACpB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B;SACF,CAAC,CAAC;QAEH,OAAO;YACL,GAAG;YACH,MAAM,EAAE,MAAM;SACf,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/protocol-lab/models.d.ts

@@ -0,0 +1,31 @@
+import type { EvidenceEvent, SecurityContext } from '../core/index.js';
+export type { EvidenceEvent, SecurityContext } from '../core/index.js';
+export type FixtureMode = 'secure' | 'vulnerable';
+export interface FakeInvoiceResult {
+    invoiceId: string;
+    tenant: string;
+    principalObserved: string;
+    callerObserved: string;
+    downstreamObserved: string;
+    capabilityObserved: string;
+    amountCents: number;
+    currency: string;
+}
+export interface LabRunState {
+    translatedContext?: SecurityContext;
+    toolResult?: FakeInvoiceResult;
+    mcpEra?: string;
+}
+export interface ProtocolLabResult {
+    runId: string;
+    fixture: FixtureMode;
+    a2aProtocolVersion: '1.0';
+    mcpProtocolVersion: '2026-07-28';
+    mcpEra: 'modern';
+    originalContext: SecurityContext;
+    translatedContext: SecurityContext;
+    toolResult: FakeInvoiceResult;
+    responseText: string;
+    evidence: EvidenceEvent[];
+}
+//# sourceMappingURL=models.d.ts.map

package/dist/protocol-lab/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/protocol-lab/models.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEvE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEvE,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,iBAAiB,CAAC,EAAE,eAAe,CAAC;IACpC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,CAAC;IACrB,kBAAkB,EAAE,KAAK,CAAC;IAC1B,kBAAkB,EAAE,YAAY,CAAC;IACjC,MAAM,EAAE,QAAQ,CAAC;IACjB,eAAe,EAAE,eAAe,CAAC;IACjC,iBAAiB,EAAE,eAAe,CAAC;IACnC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B"}

package/dist/protocol-lab/models.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=models.js.map

package/dist/protocol-lab/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/protocol-lab/models.ts"],"names":[],"mappings":""}

package/dist/protocol-lab/run.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=run.d.ts.map

package/dist/protocol-lab/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/protocol-lab/run.ts"],"names":[],"mappings":""}

package/dist/protocol-lab/run.js

@@ -0,0 +1,22 @@
+import { runProtocolFixture } from './fixture.js';
+for (const fixture of ['secure', 'vulnerable']) {
+    const result = await runProtocolFixture(fixture);
+    console.log();
+    console.log(`===== ${fixture.toUpperCase()} FIXTURE =====`);
+    console.log(JSON.stringify({
+        runId: result.runId,
+        a2aProtocolVersion: result.a2aProtocolVersion,
+        mcpProtocolVersion: result.mcpProtocolVersion,
+        mcpEra: result.mcpEra,
+        originalPrincipal: result.originalContext.principal,
+        translatedPrincipal: result.translatedContext.principal,
+        invoiceId: result.toolResult.invoiceId,
+        evidence: result.evidence.map((event) => ({
+            sequence: event.sequence,
+            protocol: event.protocol,
+            event: event.event,
+            principal: event.context.principal,
+        })),
+    }, null, 2));
+}
+//# sourceMappingURL=run.js.map

package/dist/protocol-lab/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/protocol-lab/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,KAAK,MAAM,OAAO,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAU,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAEjD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAE5D,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,iBAAiB,EAAE,MAAM,CAAC,eAAe,CAAC,SAAS;QACnD,mBAAmB,EAAE,MAAM,CAAC,iBAAiB,CAAC,SAAS;QACvD,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS;QACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;SACnC,CAAC,CAAC;KACJ,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/protocol-lab/target-adapter.d.ts

@@ -0,0 +1,10 @@
+import type { HandoffAdapter, TargetAdapter, TargetExecutionInput, TargetExecutionResult } from '../core/index.js';
+import type { FixtureMode } from './models.js';
+export declare class ProtocolLabTargetAdapter implements TargetAdapter {
+    readonly fixture: FixtureMode;
+    readonly handoffAdapter: HandoffAdapter;
+    readonly id: string;
+    constructor(fixture: FixtureMode, handoffAdapter?: HandoffAdapter);
+    execute(input: TargetExecutionInput): Promise<TargetExecutionResult>;
+}
+//# sourceMappingURL=target-adapter.d.ts.map

package/dist/protocol-lab/target-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"target-adapter.d.ts","sourceRoot":"","sources":["../../src/protocol-lab/target-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,qBAAa,wBAAyB,YAAW,aAAa;IAI1D,QAAQ,CAAC,OAAO,EAAE,WAAW;IAC7B,QAAQ,CAAC,cAAc,EAAE,cAAc;IAJzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAGT,OAAO,EAAE,WAAW,EACpB,cAAc,GAAE,cAAuD;IAK5E,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAuB3E"}

package/dist/protocol-lab/target-adapter.js

@@ -0,0 +1,33 @@
+import { runProtocolFixture } from './fixture.js';
+import { ProtocolLabHandoffAdapter } from './handoff/adapter.js';
+export class ProtocolLabTargetAdapter {
+    fixture;
+    handoffAdapter;
+    id;
+    constructor(fixture, handoffAdapter = new ProtocolLabHandoffAdapter(fixture)) {
+        this.fixture = fixture;
+        this.handoffAdapter = handoffAdapter;
+        this.id = `protocol-lab:${fixture}`;
+    }
+    async execute(input) {
+        if (input.signal.aborted) {
+            throw new Error('Protocol lab execution was aborted before start.');
+        }
+        const result = await runProtocolFixture(this.fixture, {
+            runId: input.runId,
+            correlationId: input.correlationId,
+            context: input.context,
+            handoffAdapter: this.handoffAdapter,
+        });
+        if (input.signal.aborted) {
+            throw new Error('Protocol lab execution was aborted.');
+        }
+        return {
+            originalContext: result.originalContext,
+            translatedContext: result.translatedContext,
+            evidence: result.evidence,
+            output: result,
+        };
+    }
+}
+//# sourceMappingURL=target-adapter.js.map

package/dist/protocol-lab/target-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target-adapter.js","sourceRoot":"","sources":["../../src/protocol-lab/target-adapter.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAGjE,MAAM,OAAO,wBAAwB;IAIxB;IACA;IAJF,EAAE,CAAS;IAEpB,YACW,OAAoB,EACpB,iBAAiC,IAAI,yBAAyB,CAAC,OAAO,CAAC;QADvE,YAAO,GAAP,OAAO,CAAa;QACpB,mBAAc,GAAd,cAAc,CAAyD;QAEhF,IAAI,CAAC,EAAE,GAAG,gBAAgB,OAAO,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA2B;QACvC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE;YACpD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAED,OAAO;YACL,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM;SACf,CAAC;IACJ,CAAC;CACF"}

package/package.json

@@ -0,0 +1,77 @@
+{
+  "name": "handoffprobe",
+  "version": "0.1.0",
+  "description": "Adversarial security testing for AI agent handoffs",
+  "type": "module",
+  "engines": {
+    "node": ">=24 <25"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "handoffprobe": "./dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "check": "npm run format:check && npm run lint && npm run typecheck && npm run secret:check && npm test && npm run build",
+    "dev": "tsx src/cli.ts",
+    "format": "prettier --write \"src/**/*.ts\" \"tests/**/*.ts\" \"scripts/**/*.ts\" \".github/workflows/*.yml\" action.yml package.json tsconfig.json tsconfig.build.json eslint.config.mjs .prettierrc.json",
+    "format:check": "prettier --check \"src/**/*.ts\" \"tests/**/*.ts\" \"scripts/**/*.ts\" \".github/workflows/*.yml\" action.yml package.json tsconfig.json tsconfig.build.json eslint.config.mjs .prettierrc.json",
+    "lint": "eslint \"src/**/*.ts\" \"tests/**/*.ts\" \"scripts/**/*.ts\"",
+    "package:check": "npm pack --dry-run",
+    "start": "node dist/cli.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lab:protocol": "tsx src/protocol-lab/run.ts",
+    "secret:check": "tsx scripts/secret-safety.ts",
+    "prepack": "npm run build"
+  },
+  "license": "Apache-2.0",
+  "devDependencies": {
+    "@types/express": "5.0.6",
+    "@types/node": "24.13.3",
+    "eslint": "10.9.0",
+    "prettier": "3.9.6",
+    "tsx": "4.23.12",
+    "typescript": "6.0.3",
+    "typescript-eslint": "8.67.0",
+    "vitest": "4.1.11"
+  },
+  "dependencies": {
+    "@a2a-js/sdk": "1.1.0",
+    "@modelcontextprotocol/client": "2.0.0",
+    "@modelcontextprotocol/server": "2.0.0",
+    "express": "5.2.1",
+    "zod": "4.4.3"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Heaviside479/handoffprobe.git"
+  },
+  "bugs": {
+    "url": "https://github.com/Heaviside479/handoffprobe/issues"
+  },
+  "homepage": "https://github.com/Heaviside479/handoffprobe#readme",
+  "keywords": [
+    "a2a",
+    "mcp",
+    "ai-agents",
+    "agent-security",
+    "security-testing",
+    "protocol-security",
+    "handoff-security"
+  ],
+  "publishConfig": {
+    "access": "public"
+  }
+}