systemprompt-api 0.64.0

Axum-based HTTP server and API gateway for systemprompt.io AI governance infrastructure. Exposes governed agents, MCP, A2A, and admin endpoints with rate limiting and RBAC.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91

//! Webhook broadcast endpoints.
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

use axum::extract::State;
use axum::http::StatusCode;
use axum::response::{IntoResponse, Response};
use axum::{Extension, Json};
use serde_json::json;
use systemprompt_models::api::ApiError;
use systemprompt_runtime::AppContext;

use super::types::{A2ABroadcastRequest, AgUiBroadcastRequest};
use crate::error::ApiHttpError;

fn user_mismatch() -> ApiHttpError {
    ApiError::forbidden("Authenticated user does not match the request user_id")
        .with_error_key("user_id_mismatch")
        .into()
}

pub async fn broadcast_a2a_event(
    Extension(req_ctx): Extension<systemprompt_models::RequestContext>,
    State(app_context): State<AppContext>,
    Json(request): Json<A2ABroadcastRequest>,
) -> Result<Response, ApiHttpError> {
    let authenticated_user_id = &req_ctx.auth.actor.user_id;
    let request_user_id = request.user_id;
    let event_type = request.event.event_type();

    tracing::debug!(event_type = ?event_type, user_id = %request_user_id, auth_user_id = %authenticated_user_id, "Received event");

    if authenticated_user_id != &request_user_id {
        tracing::warn!(auth_user_id = %authenticated_user_id, request_user_id = %request_user_id, "User ID mismatch");
        return Err(user_mismatch());
    }

    let (a2a_count, context_count) = app_context
        .event_router()
        .route_a2a(&request_user_id, request.event)
        .await
        .into_local_logged();
    let count = a2a_count + context_count;

    tracing::debug!(event_type = ?event_type, count = %count, user_id = %request_user_id, "Event broadcasted to connections");

    Ok((
        StatusCode::OK,
        Json(json!({
            "status": "broadcasted",
            "connection_count": count
        })),
    )
        .into_response())
}

pub async fn broadcast_agui_event(
    Extension(req_ctx): Extension<systemprompt_models::RequestContext>,
    State(app_context): State<AppContext>,
    Json(request): Json<AgUiBroadcastRequest>,
) -> Result<Response, ApiHttpError> {
    let authenticated_user_id = &req_ctx.auth.actor.user_id;
    let request_user_id = request.user_id;
    let event_type = request.event.event_type();

    tracing::debug!(event_type = ?event_type, user_id = %request_user_id, auth_user_id = %authenticated_user_id, "Received event");

    if authenticated_user_id != &request_user_id {
        tracing::warn!(auth_user_id = %authenticated_user_id, request_user_id = %request_user_id, "User ID mismatch");
        return Err(user_mismatch());
    }

    let (agui_count, context_count) = app_context
        .event_router()
        .route_agui(&request_user_id, request.event)
        .await
        .into_local_logged();
    let count = agui_count + context_count;

    tracing::debug!(event_type = ?event_type, count = %count, user_id = %request_user_id, "Event broadcasted to connections");

    Ok((
        StatusCode::OK,
        Json(json!({
            "status": "broadcasted",
            "connection_count": count
        })),
    )
        .into_response())
}