systemprompt-api 0.6.0

Axum-based HTTP server and API gateway for systemprompt.io AI governance infrastructure. Exposes governed agents, MCP, A2A, and admin endpoints with rate limiting and RBAC.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56

use axum::http::HeaderMap;
use systemprompt_identifiers::{AgentName, ContextId, SessionId, TaskId, TraceId, UserId};
use systemprompt_models::execution::context::RequestContext;
use systemprompt_security::{HeaderExtractor, TokenExtractor};

use super::token::JwtUserContext;

pub(super) struct BuildContextParams {
    pub jwt_context: JwtUserContext,
    pub session_id: SessionId,
    pub user_id: UserId,
    pub trace_id: TraceId,
    pub context_id: ContextId,
    pub agent_name: AgentName,
    pub task_id: Option<TaskId>,
    pub auth_token: Option<String>,
}

pub(super) fn build_context(params: BuildContextParams) -> RequestContext {
    let BuildContextParams {
        jwt_context,
        session_id,
        user_id,
        trace_id,
        context_id,
        agent_name,
        task_id,
        auth_token,
    } = params;
    let mut ctx = RequestContext::new(session_id, trace_id, context_id, agent_name)
        .with_user_id(user_id)
        .with_user_type(jwt_context.user_type);

    if let Some(client_id) = jwt_context.client_id {
        ctx = ctx.with_client_id(client_id);
    }
    if let Some(t_id) = task_id {
        ctx = ctx.with_task_id(t_id);
    }
    if let Some(token) = auth_token {
        ctx = ctx.with_auth_token(token);
    }
    ctx
}

pub(super) fn extract_common_headers(
    token_extractor: &TokenExtractor,
    headers: &HeaderMap,
) -> (TraceId, Option<TaskId>, Option<String>, AgentName) {
    (
        HeaderExtractor::extract_trace_id(headers),
        HeaderExtractor::extract_task_id(headers),
        token_extractor.extract(headers).ok(),
        HeaderExtractor::extract_agent_name(headers),
    )
}