systemprompt-api 0.20.0

Axum-based HTTP server and API gateway for systemprompt.io AI governance infrastructure. Exposes governed agents, MCP, A2A, and admin endpoints with rate limiting and RBAC.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91

//! Test-only seams over the proxy session cache and external MCP helpers.

use std::collections::HashMap;

use axum::http::{HeaderMap, HeaderName, HeaderValue};
use systemprompt_identifiers::{JwtToken, SessionId};
use systemprompt_mcp::McpDomainError;
use systemprompt_models::RequestContext;
use systemprompt_models::auth::{AuthenticatedUser, Permission, UserType};
use uuid::Uuid;

use super::mcp_session::{McpResponseCtx, ProxySessionIdentity, SessionCache};

#[derive(Clone, Debug, Default)]
pub struct TestSessionCache(SessionCache);

impl TestSessionCache {
    pub async fn seed(
        &self,
        session_id: &SessionId,
        user: Uuid,
        permissions: Vec<Permission>,
        token: &str,
    ) {
        self.0.write().await.insert(
            session_id.as_str().to_owned(),
            ProxySessionIdentity {
                user,
                user_type: UserType::User,
                permissions,
                auth_token: JwtToken::new(token),
            },
        );
    }

    pub async fn cached_user(&self, session_id: &SessionId) -> Option<Uuid> {
        self.0.read().await.get(session_id.as_str()).map(|i| i.user)
    }
}

pub async fn enrich_with_cached_identity(
    cache: &TestSessionCache,
    request_headers: &HeaderMap,
    req_context: RequestContext,
    service_name: &str,
) -> RequestContext {
    super::mcp_session::enrich_with_cached_identity(
        &cache.0,
        request_headers,
        req_context,
        service_name,
    )
    .await
}

#[derive(Debug)]
pub struct ResponseArgs<'a> {
    pub cache: &'a TestSessionCache,
    pub response: &'a reqwest::Response,
    pub request_headers: &'a HeaderMap,
    pub req_context: &'a RequestContext,
    pub authenticated_user: Option<&'a AuthenticatedUser>,
    pub service_name: &'a str,
    pub method_str: &'a str,
}

pub async fn handle_mcp_response(args: ResponseArgs<'_>) {
    super::mcp_session::handle_mcp_response(McpResponseCtx {
        cache: &args.cache.0,
        response: args.response,
        request_headers: args.request_headers,
        req_context: args.req_context,
        authenticated_user: args.authenticated_user,
        service_name: args.service_name,
        method_str: args.method_str,
    })
    .await;
}

#[must_use]
pub fn outbound_headers(
    incoming: &HeaderMap,
    provider: Vec<(HeaderName, HeaderValue)>,
) -> HeaderMap {
    super::external::outbound_headers(incoming, provider.into_iter().collect::<HashMap<_, _>>())
}

#[must_use]
pub fn map_resolve_error(service_name: &str, error: McpDomainError) -> String {
    super::external::map_resolve_error(service_name, error).to_string()
}