@5ss/ai-tools 2.11.1

package/dist/modules/web-fetch/index.js

@@ -0,0 +1,242 @@
+import { t as ToolError } from "../../errors-DoSpNHvs.js";
+import { n as defineModule, r as defineTool } from "../../define-CvpJ_pNP.js";
+import { n as requireAuth } from "../../provider-CgDAlg6K.js";
+import { i as mapTransportNetworkError, t as HttpService } from "../../http-service-DDNCO1s4.js";
+import { z } from "zod";
+const webFetchAuthSchema = z.object({
+	allowed_origins: z.array(z.string().min(1)).min(1).max(64).describe("Exact origins permitted, for example https://api.example.com"),
+	default_headers: z.record(z.string(), z.string()).optional().describe("Host-injected headers (for example Authorization). Not tool inputs"),
+	require_https: z.boolean().optional().describe("When true, only https URLs. Defaults to false"),
+	timeout_ms: z.int().min(1).max(12e4).optional().describe("Default timeout ms (default 30000)")
+});
+const sharedFields = {
+	url: z.url().describe("Absolute http(s) URL on an allowlisted origin"),
+	headers: z.record(z.string(), z.string()).optional().describe("Additional non-protected request headers"),
+	query: z.record(z.string(), z.union([
+		z.string(),
+		z.number(),
+		z.boolean()
+	])).optional().describe("Query parameters"),
+	timeout_ms: z.int().min(1).max(12e4).optional().describe("Per-request timeout override")
+};
+const webFetchGetInputSchema = z.object({
+	...sharedFields,
+	method: z.enum(["GET", "HEAD"]).optional().describe("Read method. Defaults to GET")
+});
+const webFetchRequestInputSchema = z.object({
+	...sharedFields,
+	method: z.enum([
+		"POST",
+		"PUT",
+		"PATCH",
+		"DELETE"
+	]).optional().describe("Mutating method. Defaults to POST"),
+	body: z.unknown().optional().describe("Request body. Objects and arrays are JSON-encoded; strings are sent as raw text. Omit when unused")
+});
+const webFetchRequestOutputSchema = z.object({
+	url: z.string(),
+	status: z.int(),
+	ok: z.boolean(),
+	headers: z.record(z.string(), z.string()),
+	content_type: z.string().optional(),
+	/** ofetch-parsed payload: object/array for JSON, string for text, etc. */
+	body: z.unknown()
+});
+//#endregion
+//#region src/modules/web-fetch/domain.ts
+/**
+* Web-fetch policy: allowlist origins, block credential headers, normalize bodies.
+*/
+/** Only credentials / identity headers the model must not set. */
+const BLOCKED_MODEL_HEADERS = /* @__PURE__ */ new Set([
+	"authorization",
+	"proxy-authorization",
+	"cookie",
+	"cookie2",
+	"x-api-key",
+	"x-auth-token",
+	"x-access-token",
+	"api-key"
+]);
+function requestBody(body) {
+	if (body === null) return null;
+	if (typeof body === "string" || typeof body === "object") return body;
+	throw new ToolError("Request body must be a string, object, array, or null", { code: "bad_input" });
+}
+function originOf(value, kind) {
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		throw new ToolError(kind === "bad_auth" ? `Invalid allowed origin: ${value}` : "Invalid URL", { code: kind });
+	}
+	if (url.protocol !== "http:" && url.protocol !== "https:") throw new ToolError("Only http and https are allowed", { code: kind === "bad_auth" ? "bad_auth" : "forbidden" });
+	if (url.username !== "" || url.password !== "") throw new ToolError(kind === "bad_auth" ? "Allowed origins must not include credentials" : "URL must not include credentials", { code: kind });
+	return url.origin;
+}
+function assertAllowed(url, allowed, requireHttps) {
+	const parsed = new URL(url);
+	if (requireHttps && parsed.protocol !== "https:") throw new ToolError("HTTPS is required for this binding", { code: "forbidden" });
+	if (parsed.username !== "" || parsed.password !== "") throw new ToolError("URL must not include credentials", { code: "bad_input" });
+	if (!allowed.has(parsed.origin)) throw new ToolError(`Origin not in allowlist: ${parsed.origin}`, {
+		code: "forbidden",
+		details: { origin: parsed.origin }
+	});
+	return parsed;
+}
+function modelHeaders(headers) {
+	if (!headers) return {};
+	const out = {};
+	for (const [key, value] of Object.entries(headers)) {
+		const name = key.trim();
+		if (name.length === 0) continue;
+		if (BLOCKED_MODEL_HEADERS.has(name.toLowerCase())) throw new ToolError(`Request header is not allowed from the model: ${name}`, {
+			code: "bad_input",
+			details: { header: name }
+		});
+		out[name] = value;
+	}
+	return out;
+}
+function headersForRequest(hostDefaults, model) {
+	return {
+		...model,
+		...hostDefaults
+	};
+}
+function allowedOriginSet(allowedOrigins) {
+	return new Set(allowedOrigins.map((o) => originOf(o, "bad_auth")));
+}
+function assertHttpsOrigins(allowed, requireHttps) {
+	if (!requireHttps) return;
+	for (const origin of allowed) if (!origin.startsWith("https:")) throw new ToolError(`require_https is set; origin must be https: ${origin}`, { code: "bad_auth" });
+}
+//#endregion
+//#region src/modules/web-fetch/client.ts
+/**
+* Web-fetch client — allowlisted HTTP via HttpService.
+* Host: withAuth + fromContext. Tools stay thin adapters.
+*/
+var WebFetchClient = class WebFetchClient {
+	#auth;
+	#options;
+	constructor(auth, options = {}) {
+		const parsed = webFetchAuthSchema.safeParse(auth);
+		if (!parsed.success) throw new ToolError("Web fetch host binding is missing or invalid", { code: "bad_auth" });
+		this.#auth = parsed.data;
+		this.#options = options;
+	}
+	static fromContext(ctx) {
+		const auth = requireAuth(ctx, webFetchAuthSchema);
+		return new WebFetchClient(auth, {
+			...ctx.fetch && { fetch: ctx.fetch },
+			...ctx.signal && { signal: ctx.signal }
+		});
+	}
+	static fromAuth(auth, ctx = {}) {
+		return new WebFetchClient(auth, {
+			...ctx.fetch && { fetch: ctx.fetch },
+			...ctx.signal && { signal: ctx.signal }
+		});
+	}
+	get(input) {
+		return this.#execute({
+			url: input.url,
+			method: input.method ?? "GET",
+			...input.headers && { headers: input.headers },
+			...input.query && { query: input.query },
+			...input.timeout_ms !== void 0 && { timeout_ms: input.timeout_ms }
+		});
+	}
+	request(input) {
+		return this.#execute({
+			url: input.url,
+			method: input.method ?? "POST",
+			...input.headers && { headers: input.headers },
+			...input.query && { query: input.query },
+			...input.body !== void 0 && { body: requestBody(input.body) },
+			...input.timeout_ms !== void 0 && { timeout_ms: input.timeout_ms }
+		});
+	}
+	async #execute(input) {
+		const auth = this.#auth;
+		const requireHttps = auth.require_https === true;
+		const allowed = allowedOriginSet(auth.allowed_origins);
+		assertHttpsOrigins(allowed, requireHttps);
+		const target = assertAllowed(input.url, allowed, requireHttps);
+		const method = input.method;
+		const timeout = input.timeout_ms ?? auth.timeout_ms ?? 3e4;
+		const http = new HttpService({
+			timeout,
+			label: "Web fetch",
+			...this.#options.fetch && { fetch: this.#options.fetch },
+			...this.#options.signal && { signal: this.#options.signal }
+		});
+		try {
+			const response = await http.query(method, target.href, {
+				headers: headersForRequest(auth.default_headers, modelHeaders(input.headers)),
+				...input.query && { query: input.query },
+				...input.body !== void 0 && { body: input.body },
+				timeout,
+				noThrow: true
+			});
+			const finalUrl = response.url.length > 0 ? response.url : target.href;
+			assertAllowed(finalUrl, allowed, requireHttps);
+			const contentType = response.headers.get("content-type") ?? void 0;
+			const headers = {};
+			response.headers.forEach((value, key) => {
+				headers[key.toLowerCase()] = value;
+			});
+			return webFetchRequestOutputSchema.parse({
+				url: finalUrl,
+				status: response.status,
+				ok: response.ok,
+				headers,
+				...contentType && { content_type: contentType },
+				body: method === "HEAD" ? null : response.data
+			});
+		} catch (error) {
+			mapTransportNetworkError(error, "Web fetch");
+		}
+	}
+};
+//#endregion
+//#region src/modules/web-fetch/module.ts
+const webFetchGetTool = defineTool({
+	id: "web-fetch-get",
+	name: "httpGet",
+	description: "Send HTTP GET or HEAD to an absolute allowlisted URL. Use to read an approved API when no purpose-built tool exists. Returns status, headers, and a parsed JSON or text body. No request body; protected headers cannot be supplied in arguments.",
+	inputSchema: webFetchGetInputSchema,
+	outputSchema: webFetchRequestOutputSchema,
+	sideEffect: "read",
+	runtime: "both",
+	execute: async (input, ctx) => WebFetchClient.fromContext(ctx).get(input)
+});
+const webFetchRequestTool = defineTool({
+	id: "web-fetch-request",
+	name: "httpRequest",
+	description: "Send HTTP POST, PUT, PATCH, or DELETE to an absolute allowlisted URL. Use for an approved API or webhook only when no purpose-built tool exists. Objects and arrays are JSON-encoded; returns status, headers, and a parsed body. Protected headers cannot be supplied in arguments.",
+	inputSchema: webFetchRequestInputSchema,
+	outputSchema: webFetchRequestOutputSchema,
+	sideEffect: "write",
+	runtime: "both",
+	execute: async (input, ctx) => WebFetchClient.fromContext(ctx).request(input)
+});
+const webFetchModule = defineModule({
+	id: "web-fetch",
+	title: "Web Fetch",
+	description: "Fallback HTTP access to allowlisted absolute URLs. Use GET or HEAD for reads and POST, PUT, PATCH, or DELETE for writes only when no purpose-built tool covers the API.",
+	runtime: "both",
+	auth: {
+		type: "custom",
+		schema: webFetchAuthSchema
+	},
+	categories: ["http", "web"],
+	classification: "standard",
+	tags: ["allowlist"],
+	tools: [webFetchGetTool, webFetchRequestTool]
+});
+//#endregion
+export { WebFetchClient, webFetchAuthSchema, webFetchGetTool, webFetchModule, webFetchRequestTool };
+
+//# sourceMappingURL=index.js.map

package/dist/modules/web-fetch/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["#auth","#options","#execute"],"sources":["../../../src/modules/web-fetch/contracts.ts","../../../src/modules/web-fetch/domain.ts","../../../src/modules/web-fetch/client.ts","../../../src/modules/web-fetch/module.ts"],"sourcesContent":["import { z } from 'zod'\n\nexport const DEFAULT_TIMEOUT_MS = 30_000\n\nexport const webFetchAuthSchema = z.object({\n\tallowed_origins: z\n\t\t.array(z.string().min(1))\n\t\t.min(1)\n\t\t.max(64)\n\t\t.describe('Exact origins permitted, for example https://api.example.com'),\n\tdefault_headers: z\n\t\t.record(z.string(), z.string())\n\t\t.optional()\n\t\t.describe('Host-injected headers (for example Authorization). Not tool inputs'),\n\trequire_https: z.boolean().optional().describe('When true, only https URLs. Defaults to false'),\n\ttimeout_ms: z.int().min(1).max(120_000).optional().describe('Default timeout ms (default 30000)')\n})\n\nexport type WebFetchAuth = z.infer<typeof webFetchAuthSchema>\n\nconst sharedFields = {\n\turl: z.url().describe('Absolute http(s) URL on an allowlisted origin'),\n\theaders: z.record(z.string(), z.string()).optional().describe('Additional non-protected request headers'),\n\tquery: z\n\t\t.record(z.string(), z.union([z.string(), z.number(), z.boolean()]))\n\t\t.optional()\n\t\t.describe('Query parameters'),\n\ttimeout_ms: z.int().min(1).max(120_000).optional().describe('Per-request timeout override')\n}\n\nexport const webFetchGetInputSchema = z.object({\n\t...sharedFields,\n\tmethod: z.enum(['GET', 'HEAD']).optional().describe('Read method. Defaults to GET')\n})\n\nexport const webFetchRequestInputSchema = z.object({\n\t...sharedFields,\n\tmethod: z.enum(['POST', 'PUT', 'PATCH', 'DELETE']).optional().describe('Mutating method. Defaults to POST'),\n\tbody: z\n\t\t.unknown()\n\t\t.optional()\n\t\t.describe('Request body. Objects and arrays are JSON-encoded; strings are sent as raw text. Omit when unused')\n})\n\nexport const webFetchRequestOutputSchema = z.object({\n\turl: z.string(),\n\tstatus: z.int(),\n\tok: z.boolean(),\n\theaders: z.record(z.string(), z.string()),\n\tcontent_type: z.string().optional(),\n\t/** ofetch-parsed payload: object/array for JSON, string for text, etc. */\n\tbody: z.unknown()\n})\n\nexport type WebFetchGetInput = z.infer<typeof webFetchGetInputSchema>\nexport type WebFetchRequestInput = z.infer<typeof webFetchRequestInputSchema>\nexport type WebFetchRequestOutput = z.infer<typeof webFetchRequestOutputSchema>\n","/**\n * Web-fetch policy: allowlist origins, block credential headers, normalize bodies.\n */\n\nimport { ToolError } from '../../core/errors'\nimport type { HttpBody } from '../../transport/http-service'\n\n/** Only credentials / identity headers the model must not set. */\nexport const BLOCKED_MODEL_HEADERS = new Set([\n\t'authorization',\n\t'proxy-authorization',\n\t'cookie',\n\t'cookie2',\n\t'x-api-key',\n\t'x-auth-token',\n\t'x-access-token',\n\t'api-key'\n])\n\nexport function requestBody(body: unknown): HttpBody {\n\tif (body === null) return null\n\tif (typeof body === 'string' || typeof body === 'object') return body\n\tthrow new ToolError('Request body must be a string, object, array, or null', { code: 'bad_input' })\n}\n\nexport function originOf(value: string, kind: 'bad_auth' | 'bad_input'): string {\n\tlet url: URL\n\ttry {\n\t\turl = new URL(value)\n\t} catch {\n\t\tthrow new ToolError(kind === 'bad_auth' ? `Invalid allowed origin: ${value}` : 'Invalid URL', {\n\t\t\tcode: kind\n\t\t})\n\t}\n\tif (url.protocol !== 'http:' && url.protocol !== 'https:') {\n\t\tthrow new ToolError('Only http and https are allowed', { code: kind === 'bad_auth' ? 'bad_auth' : 'forbidden' })\n\t}\n\tif (url.username !== '' || url.password !== '') {\n\t\tthrow new ToolError(\n\t\t\tkind === 'bad_auth' ? 'Allowed origins must not include credentials' : 'URL must not include credentials',\n\t\t\t{ code: kind }\n\t\t)\n\t}\n\treturn url.origin\n}\n\nexport function assertAllowed(url: string, allowed: Set<string>, requireHttps: boolean): URL {\n\tconst parsed = new URL(url)\n\tif (requireHttps && parsed.protocol !== 'https:') {\n\t\tthrow new ToolError('HTTPS is required for this binding', { code: 'forbidden' })\n\t}\n\tif (parsed.username !== '' || parsed.password !== '') {\n\t\tthrow new ToolError('URL must not include credentials', { code: 'bad_input' })\n\t}\n\tif (!allowed.has(parsed.origin)) {\n\t\tthrow new ToolError(`Origin not in allowlist: ${parsed.origin}`, {\n\t\t\tcode: 'forbidden',\n\t\t\tdetails: { origin: parsed.origin }\n\t\t})\n\t}\n\treturn parsed\n}\n\nexport function modelHeaders(headers: Record<string, string> | undefined): Record<string, string> {\n\tif (!headers) return {}\n\tconst out: Record<string, string> = {}\n\tfor (const [key, value] of Object.entries(headers)) {\n\t\tconst name = key.trim()\n\t\tif (name.length === 0) continue\n\t\tif (BLOCKED_MODEL_HEADERS.has(name.toLowerCase())) {\n\t\t\tthrow new ToolError(`Request header is not allowed from the model: ${name}`, {\n\t\t\t\tcode: 'bad_input',\n\t\t\t\tdetails: { header: name }\n\t\t\t})\n\t\t}\n\t\tout[name] = value\n\t}\n\treturn out\n}\n\nexport function headersForRequest(\n\thostDefaults: Record<string, string> | undefined,\n\tmodel: Record<string, string>\n): Record<string, string> {\n\treturn { ...model, ...hostDefaults }\n}\n\nexport function allowedOriginSet(allowedOrigins: string[]): Set<string> {\n\treturn new Set(allowedOrigins.map((o) => originOf(o, 'bad_auth')))\n}\n\nexport function assertHttpsOrigins(allowed: Set<string>, requireHttps: boolean): void {\n\tif (!requireHttps) return\n\tfor (const origin of allowed) {\n\t\tif (!origin.startsWith('https:')) {\n\t\t\tthrow new ToolError(`require_https is set; origin must be https: ${origin}`, {\n\t\t\t\tcode: 'bad_auth'\n\t\t\t})\n\t\t}\n\t}\n}\n","/**\n * Web-fetch client — allowlisted HTTP via HttpService.\n * Host: withAuth + fromContext. Tools stay thin adapters.\n */\n\nimport { ToolError } from '../../core/errors'\nimport { requireAuth } from '../../core/provider'\nimport type { ToolContext } from '../../core/types'\nimport { mapTransportNetworkError } from '../../transport/errors'\nimport type { HttpBody } from '../../transport/http-service'\nimport { HttpService } from '../../transport/http-service'\nimport { DEFAULT_TIMEOUT_MS, webFetchAuthSchema, webFetchRequestOutputSchema } from './contracts'\nimport type { WebFetchAuth, WebFetchGetInput, WebFetchRequestInput, WebFetchRequestOutput } from './contracts'\nimport {\n\tassertAllowed,\n\tassertHttpsOrigins,\n\tallowedOriginSet,\n\theadersForRequest,\n\tmodelHeaders,\n\trequestBody\n} from './domain'\n\nexport type WebFetchClientOptions = {\n\tfetch?: ToolContext['fetch']\n\tsignal?: ToolContext['signal']\n}\n\ntype ExecuteArgs = {\n\turl: string\n\tmethod: string\n\theaders?: Record<string, string>\n\tquery?: Record<string, string | number | boolean>\n\tbody?: HttpBody\n\ttimeout_ms?: number\n}\n\nexport class WebFetchClient {\n\treadonly #auth: WebFetchAuth\n\treadonly #options: WebFetchClientOptions\n\n\tconstructor(auth: WebFetchAuth, options: WebFetchClientOptions = {}) {\n\t\tconst parsed = webFetchAuthSchema.safeParse(auth)\n\t\tif (!parsed.success) {\n\t\t\tthrow new ToolError('Web fetch host binding is missing or invalid', { code: 'bad_auth' })\n\t\t}\n\t\tthis.#auth = parsed.data\n\t\tthis.#options = options\n\t}\n\n\tstatic fromContext(ctx: ToolContext): WebFetchClient {\n\t\tconst auth = requireAuth(ctx, webFetchAuthSchema)\n\t\treturn new WebFetchClient(auth, {\n\t\t\t...(ctx.fetch && { fetch: ctx.fetch }),\n\t\t\t...(ctx.signal && { signal: ctx.signal })\n\t\t})\n\t}\n\n\tstatic fromAuth(auth: WebFetchAuth, ctx: ToolContext = {}): WebFetchClient {\n\t\treturn new WebFetchClient(auth, {\n\t\t\t...(ctx.fetch && { fetch: ctx.fetch }),\n\t\t\t...(ctx.signal && { signal: ctx.signal })\n\t\t})\n\t}\n\n\tget(input: WebFetchGetInput): Promise<WebFetchRequestOutput> {\n\t\treturn this.#execute({\n\t\t\turl: input.url,\n\t\t\tmethod: input.method ?? 'GET',\n\t\t\t...(input.headers && { headers: input.headers }),\n\t\t\t...(input.query && { query: input.query }),\n\t\t\t...(input.timeout_ms !== undefined && { timeout_ms: input.timeout_ms })\n\t\t})\n\t}\n\n\trequest(input: WebFetchRequestInput): Promise<WebFetchRequestOutput> {\n\t\treturn this.#execute({\n\t\t\turl: input.url,\n\t\t\tmethod: input.method ?? 'POST',\n\t\t\t...(input.headers && { headers: input.headers }),\n\t\t\t...(input.query && { query: input.query }),\n\t\t\t...(input.body !== undefined && { body: requestBody(input.body) }),\n\t\t\t...(input.timeout_ms !== undefined && { timeout_ms: input.timeout_ms })\n\t\t})\n\t}\n\n\tasync #execute(input: ExecuteArgs): Promise<WebFetchRequestOutput> {\n\t\tconst auth = this.#auth\n\t\tconst requireHttps = auth.require_https === true\n\t\tconst allowed = allowedOriginSet(auth.allowed_origins)\n\t\tassertHttpsOrigins(allowed, requireHttps)\n\n\t\tconst target = assertAllowed(input.url, allowed, requireHttps)\n\t\tconst method = input.method\n\t\tconst timeout = input.timeout_ms ?? auth.timeout_ms ?? DEFAULT_TIMEOUT_MS\n\t\tconst http = new HttpService({\n\t\t\ttimeout,\n\t\t\tlabel: 'Web fetch',\n\t\t\t...(this.#options.fetch && { fetch: this.#options.fetch }),\n\t\t\t...(this.#options.signal && { signal: this.#options.signal })\n\t\t})\n\n\t\ttry {\n\t\t\tconst response = await http.query(method, target.href, {\n\t\t\t\theaders: headersForRequest(auth.default_headers, modelHeaders(input.headers)),\n\t\t\t\t...(input.query && { query: input.query }),\n\t\t\t\t...(input.body !== undefined && { body: input.body }),\n\t\t\t\ttimeout,\n\t\t\t\tnoThrow: true\n\t\t\t})\n\n\t\t\tconst finalUrl = response.url.length > 0 ? response.url : target.href\n\t\t\tassertAllowed(finalUrl, allowed, requireHttps)\n\n\t\t\tconst contentType = response.headers.get('content-type') ?? undefined\n\t\t\tconst headers: Record<string, string> = {}\n\t\t\tresponse.headers.forEach((value, key) => {\n\t\t\t\theaders[key.toLowerCase()] = value\n\t\t\t})\n\n\t\t\treturn webFetchRequestOutputSchema.parse({\n\t\t\t\turl: finalUrl,\n\t\t\t\tstatus: response.status,\n\t\t\t\tok: response.ok,\n\t\t\t\theaders,\n\t\t\t\t...(contentType && { content_type: contentType }),\n\t\t\t\tbody: method === 'HEAD' ? null : response.data\n\t\t\t})\n\t\t} catch (error) {\n\t\t\tmapTransportNetworkError(error, 'Web fetch')\n\t\t}\n\t}\n}\n","import { defineModule, defineTool } from '../../core/define'\nimport { WebFetchClient } from './client'\nimport {\n\twebFetchAuthSchema,\n\twebFetchGetInputSchema,\n\twebFetchRequestInputSchema,\n\twebFetchRequestOutputSchema\n} from './contracts'\n\nexport type { WebFetchAuth } from './contracts'\nexport { webFetchAuthSchema }\n\nexport const webFetchGetTool = defineTool({\n\tid: 'web-fetch-get',\n\tname: 'httpGet',\n\tdescription:\n\t\t'Send HTTP GET or HEAD to an absolute allowlisted URL. Use to read an approved API when no purpose-built tool exists. Returns status, headers, and a parsed JSON or text body. No request body; protected headers cannot be supplied in arguments.',\n\tinputSchema: webFetchGetInputSchema,\n\toutputSchema: webFetchRequestOutputSchema,\n\tsideEffect: 'read',\n\truntime: 'both',\n\texecute: async (input, ctx) => WebFetchClient.fromContext(ctx).get(input)\n})\n\nexport const webFetchRequestTool = defineTool({\n\tid: 'web-fetch-request',\n\tname: 'httpRequest',\n\tdescription:\n\t\t'Send HTTP POST, PUT, PATCH, or DELETE to an absolute allowlisted URL. Use for an approved API or webhook only when no purpose-built tool exists. Objects and arrays are JSON-encoded; returns status, headers, and a parsed body. Protected headers cannot be supplied in arguments.',\n\tinputSchema: webFetchRequestInputSchema,\n\toutputSchema: webFetchRequestOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\texecute: async (input, ctx) => WebFetchClient.fromContext(ctx).request(input)\n})\n\nexport const webFetchModule = defineModule({\n\tid: 'web-fetch',\n\ttitle: 'Web Fetch',\n\tdescription:\n\t\t'Fallback HTTP access to allowlisted absolute URLs. Use GET or HEAD for reads and POST, PUT, PATCH, or DELETE for writes only when no purpose-built tool covers the API.',\n\truntime: 'both',\n\tauth: { type: 'custom', schema: webFetchAuthSchema },\n\tcategories: ['http', 'web'],\n\tclassification: 'standard',\n\ttags: ['allowlist'],\n\ttools: [webFetchGetTool, webFetchRequestTool]\n})\n"],"mappings":";;;;;AAIA,MAAa,qBAAqB,EAAE,OAAO;CAC1C,iBAAiB,EACf,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CACxB,IAAI,CAAC,CAAC,CACN,IAAI,EAAE,CAAC,CACP,SAAS,8DAA8D;CACzE,iBAAiB,EACf,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAC9B,SAAS,CAAC,CACV,SAAS,oEAAoE;CAC/E,eAAe,EAAE,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,+CAA+C;CAC9F,YAAY,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,oCAAoC;AACjG,CAAC;AAID,MAAM,eAAe;CACpB,KAAK,EAAE,IAAI,CAAC,CAAC,SAAS,+CAA+C;CACrE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,0CAA0C;CACxG,OAAO,EACL,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM;EAAC,EAAE,OAAO;EAAG,EAAE,OAAO;EAAG,EAAE,QAAQ;CAAC,CAAC,CAAC,CAAC,CAClE,SAAS,CAAC,CACV,SAAS,kBAAkB;CAC7B,YAAY,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,8BAA8B;AAC3F;AAEA,MAAa,yBAAyB,EAAE,OAAO;CAC9C,GAAG;CACH,QAAQ,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,8BAA8B;AACnF,CAAC;AAED,MAAa,6BAA6B,EAAE,OAAO;CAClD,GAAG;CACH,QAAQ,EAAE,KAAK;EAAC;EAAQ;EAAO;EAAS;CAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,mCAAmC;CAC1G,MAAM,EACJ,QAAQ,CAAC,CACT,SAAS,CAAC,CACV,SAAS,mGAAmG;AAC/G,CAAC;AAED,MAAa,8BAA8B,EAAE,OAAO;CACnD,KAAK,EAAE,OAAO;CACd,QAAQ,EAAE,IAAI;CACd,IAAI,EAAE,QAAQ;CACd,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;CACxC,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;;CAElC,MAAM,EAAE,QAAQ;AACjB,CAAC;;;;;;;AC5CD,MAAa,wCAAwB,IAAI,IAAI;CAC5C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AAED,SAAgB,YAAY,MAAyB;CACpD,IAAI,SAAS,MAAM,OAAO;CAC1B,IAAI,OAAO,SAAS,YAAY,OAAO,SAAS,UAAU,OAAO;CACjE,MAAM,IAAI,UAAU,yDAAyD,EAAE,MAAM,YAAY,CAAC;AACnG;AAEA,SAAgB,SAAS,OAAe,MAAwC;CAC/E,IAAI;CACJ,IAAI;EACH,MAAM,IAAI,IAAI,KAAK;CACpB,QAAQ;EACP,MAAM,IAAI,UAAU,SAAS,aAAa,2BAA2B,UAAU,eAAe,EAC7F,MAAM,KACP,CAAC;CACF;CACA,IAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAChD,MAAM,IAAI,UAAU,mCAAmC,EAAE,MAAM,SAAS,aAAa,aAAa,YAAY,CAAC;CAEhH,IAAI,IAAI,aAAa,MAAM,IAAI,aAAa,IAC3C,MAAM,IAAI,UACT,SAAS,aAAa,iDAAiD,oCACvE,EAAE,MAAM,KAAK,CACd;CAED,OAAO,IAAI;AACZ;AAEA,SAAgB,cAAc,KAAa,SAAsB,cAA4B;CAC5F,MAAM,SAAS,IAAI,IAAI,GAAG;CAC1B,IAAI,gBAAgB,OAAO,aAAa,UACvC,MAAM,IAAI,UAAU,sCAAsC,EAAE,MAAM,YAAY,CAAC;CAEhF,IAAI,OAAO,aAAa,MAAM,OAAO,aAAa,IACjD,MAAM,IAAI,UAAU,oCAAoC,EAAE,MAAM,YAAY,CAAC;CAE9E,IAAI,CAAC,QAAQ,IAAI,OAAO,MAAM,GAC7B,MAAM,IAAI,UAAU,4BAA4B,OAAO,UAAU;EAChE,MAAM;EACN,SAAS,EAAE,QAAQ,OAAO,OAAO;CAClC,CAAC;CAEF,OAAO;AACR;AAEA,SAAgB,aAAa,SAAqE;CACjG,IAAI,CAAC,SAAS,OAAO,CAAC;CACtB,MAAM,MAA8B,CAAC;CACrC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;EACnD,MAAM,OAAO,IAAI,KAAK;EACtB,IAAI,KAAK,WAAW,GAAG;EACvB,IAAI,sBAAsB,IAAI,KAAK,YAAY,CAAC,GAC/C,MAAM,IAAI,UAAU,iDAAiD,QAAQ;GAC5E,MAAM;GACN,SAAS,EAAE,QAAQ,KAAK;EACzB,CAAC;EAEF,IAAI,QAAQ;CACb;CACA,OAAO;AACR;AAEA,SAAgB,kBACf,cACA,OACyB;CACzB,OAAO;EAAE,GAAG;EAAO,GAAG;CAAa;AACpC;AAEA,SAAgB,iBAAiB,gBAAuC;CACvE,OAAO,IAAI,IAAI,eAAe,KAAK,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC;AAClE;AAEA,SAAgB,mBAAmB,SAAsB,cAA6B;CACrF,IAAI,CAAC,cAAc;CACnB,KAAK,MAAM,UAAU,SACpB,IAAI,CAAC,OAAO,WAAW,QAAQ,GAC9B,MAAM,IAAI,UAAU,+CAA+C,UAAU,EAC5E,MAAM,WACP,CAAC;AAGJ;;;;;;;AChEA,IAAa,iBAAb,MAAa,eAAe;CAC3B;CACA;CAEA,YAAY,MAAoB,UAAiC,CAAC,GAAG;EACpE,MAAM,SAAS,mBAAmB,UAAU,IAAI;EAChD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,UAAU,gDAAgD,EAAE,MAAM,WAAW,CAAC;EAEzF,KAAKA,QAAQ,OAAO;EACpB,KAAKC,WAAW;CACjB;CAEA,OAAO,YAAY,KAAkC;EACpD,MAAM,OAAO,YAAY,KAAK,kBAAkB;EAChD,OAAO,IAAI,eAAe,MAAM;GAC/B,GAAI,IAAI,SAAS,EAAE,OAAO,IAAI,MAAM;GACpC,GAAI,IAAI,UAAU,EAAE,QAAQ,IAAI,OAAO;EACxC,CAAC;CACF;CAEA,OAAO,SAAS,MAAoB,MAAmB,CAAC,GAAmB;EAC1E,OAAO,IAAI,eAAe,MAAM;GAC/B,GAAI,IAAI,SAAS,EAAE,OAAO,IAAI,MAAM;GACpC,GAAI,IAAI,UAAU,EAAE,QAAQ,IAAI,OAAO;EACxC,CAAC;CACF;CAEA,IAAI,OAAyD;EAC5D,OAAO,KAAKC,SAAS;GACpB,KAAK,MAAM;GACX,QAAQ,MAAM,UAAU;GACxB,GAAI,MAAM,WAAW,EAAE,SAAS,MAAM,QAAQ;GAC9C,GAAI,MAAM,SAAS,EAAE,OAAO,MAAM,MAAM;GACxC,GAAI,MAAM,eAAe,KAAA,KAAa,EAAE,YAAY,MAAM,WAAW;EACtE,CAAC;CACF;CAEA,QAAQ,OAA6D;EACpE,OAAO,KAAKA,SAAS;GACpB,KAAK,MAAM;GACX,QAAQ,MAAM,UAAU;GACxB,GAAI,MAAM,WAAW,EAAE,SAAS,MAAM,QAAQ;GAC9C,GAAI,MAAM,SAAS,EAAE,OAAO,MAAM,MAAM;GACxC,GAAI,MAAM,SAAS,KAAA,KAAa,EAAE,MAAM,YAAY,MAAM,IAAI,EAAE;GAChE,GAAI,MAAM,eAAe,KAAA,KAAa,EAAE,YAAY,MAAM,WAAW;EACtE,CAAC;CACF;CAEA,MAAMA,SAAS,OAAoD;EAClE,MAAM,OAAO,KAAKF;EAClB,MAAM,eAAe,KAAK,kBAAkB;EAC5C,MAAM,UAAU,iBAAiB,KAAK,eAAe;EACrD,mBAAmB,SAAS,YAAY;EAExC,MAAM,SAAS,cAAc,MAAM,KAAK,SAAS,YAAY;EAC7D,MAAM,SAAS,MAAM;EACrB,MAAM,UAAU,MAAM,cAAc,KAAK,cAAA;EACzC,MAAM,OAAO,IAAI,YAAY;GAC5B;GACA,OAAO;GACP,GAAI,KAAKC,SAAS,SAAS,EAAE,OAAO,KAAKA,SAAS,MAAM;GACxD,GAAI,KAAKA,SAAS,UAAU,EAAE,QAAQ,KAAKA,SAAS,OAAO;EAC5D,CAAC;EAED,IAAI;GACH,MAAM,WAAW,MAAM,KAAK,MAAM,QAAQ,OAAO,MAAM;IACtD,SAAS,kBAAkB,KAAK,iBAAiB,aAAa,MAAM,OAAO,CAAC;IAC5E,GAAI,MAAM,SAAS,EAAE,OAAO,MAAM,MAAM;IACxC,GAAI,MAAM,SAAS,KAAA,KAAa,EAAE,MAAM,MAAM,KAAK;IACnD;IACA,SAAS;GACV,CAAC;GAED,MAAM,WAAW,SAAS,IAAI,SAAS,IAAI,SAAS,MAAM,OAAO;GACjE,cAAc,UAAU,SAAS,YAAY;GAE7C,MAAM,cAAc,SAAS,QAAQ,IAAI,cAAc,KAAK,KAAA;GAC5D,MAAM,UAAkC,CAAC;GACzC,SAAS,QAAQ,SAAS,OAAO,QAAQ;IACxC,QAAQ,IAAI,YAAY,KAAK;GAC9B,CAAC;GAED,OAAO,4BAA4B,MAAM;IACxC,KAAK;IACL,QAAQ,SAAS;IACjB,IAAI,SAAS;IACb;IACA,GAAI,eAAe,EAAE,cAAc,YAAY;IAC/C,MAAM,WAAW,SAAS,OAAO,SAAS;GAC3C,CAAC;EACF,SAAS,OAAO;GACf,yBAAyB,OAAO,WAAW;EAC5C;CACD;AACD;;;ACvHA,MAAa,kBAAkB,WAAW;CACzC,IAAI;CACJ,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,eAAe,YAAY,GAAG,CAAC,CAAC,IAAI,KAAK;AACzE,CAAC;AAED,MAAa,sBAAsB,WAAW;CAC7C,IAAI;CACJ,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,eAAe,YAAY,GAAG,CAAC,CAAC,QAAQ,KAAK;AAC7E,CAAC;AAED,MAAa,iBAAiB,aAAa;CAC1C,IAAI;CACJ,OAAO;CACP,aACC;CACD,SAAS;CACT,MAAM;EAAE,MAAM;EAAU,QAAQ;CAAmB;CACnD,YAAY,CAAC,QAAQ,KAAK;CAC1B,gBAAgB;CAChB,MAAM,CAAC,WAAW;CAClB,OAAO,CAAC,iBAAiB,mBAAmB;AAC7C,CAAC"}

package/dist/object-artifact-store-CMTzCm_G.d.ts

@@ -0,0 +1,7 @@
+import "./types-Ccb0DXY9.js";
+import { g as S3ClientOptions } from "./index-zK1ZwS4m.js";
+//#region src/shared/object-artifact-store.d.ts
+type ObjectArtifactStoreOptions = S3ClientOptions;
+//#endregion
+export { ObjectArtifactStoreOptions as t };
+//# sourceMappingURL=object-artifact-store-CMTzCm_G.d.ts.map

package/dist/object-artifact-store-CMTzCm_G.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-artifact-store-CMTzCm_G.d.ts","names":[],"sources":["../src/shared/object-artifact-store.ts"],"mappings":";;;KAMY,6BAA6B"}

package/dist/object-artifact-store-wZ2j9cto.js

@@ -0,0 +1,28 @@
+import { t as ToolError } from "./errors-DoSpNHvs.js";
+import { t as artifactRefSchema } from "./artifact-D064mHfK.js";
+import { p as S3Client } from "./s3-CsOaPWMP.js";
+//#region src/shared/object-artifact-store.ts
+var ObjectArtifactStore = class {
+	#storage;
+	constructor(auth, options = {}) {
+		this.#storage = new S3Client(auth, options);
+	}
+	async read(source, maxBytes) {
+		if (source.store !== "object") throw new ToolError("This operation requires an object-store artifact", { code: "bad_input" });
+		return this.#storage.getBytes(source.key, { maxBytes });
+	}
+	async write(key, bytes, mediaType, filename) {
+		await this.#storage.putBytes(key, bytes, mediaType);
+		return artifactRefSchema.parse({
+			store: "object",
+			key,
+			media_type: mediaType,
+			filename,
+			byte_length: bytes.byteLength
+		});
+	}
+};
+//#endregion
+export { ObjectArtifactStore as t };
+
+//# sourceMappingURL=object-artifact-store-wZ2j9cto.js.map

package/dist/object-artifact-store-wZ2j9cto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-artifact-store-wZ2j9cto.js","names":["#storage"],"sources":["../src/shared/object-artifact-store.ts"],"sourcesContent":["import { ToolError } from '../core/errors'\nimport type { ArtifactRef } from './artifact'\nimport { artifactRefSchema } from './artifact'\nimport { S3Client } from '../vendors/s3'\nimport type { S3Auth, S3ClientOptions } from '../vendors/s3'\n\nexport type ObjectArtifactStoreOptions = S3ClientOptions\n\nexport class ObjectArtifactStore {\n\treadonly #storage: S3Client\n\n\tconstructor(auth: S3Auth, options: ObjectArtifactStoreOptions = {}) {\n\t\tthis.#storage = new S3Client(auth, options)\n\t}\n\n\tasync read(source: ArtifactRef, maxBytes: number): Promise<Uint8Array> {\n\t\tif (source.store !== 'object') {\n\t\t\tthrow new ToolError('This operation requires an object-store artifact', { code: 'bad_input' })\n\t\t}\n\t\treturn this.#storage.getBytes(source.key, { maxBytes })\n\t}\n\n\tasync write(key: string, bytes: Uint8Array, mediaType: string, filename: string): Promise<ArtifactRef> {\n\t\tawait this.#storage.putBytes(key, bytes, mediaType)\n\t\treturn artifactRefSchema.parse({\n\t\t\tstore: 'object',\n\t\t\tkey,\n\t\t\tmedia_type: mediaType,\n\t\t\tfilename,\n\t\t\tbyte_length: bytes.byteLength\n\t\t})\n\t}\n}\n"],"mappings":";;;;AAQA,IAAa,sBAAb,MAAiC;CAChC;CAEA,YAAY,MAAc,UAAsC,CAAC,GAAG;EACnE,KAAKA,WAAW,IAAI,SAAS,MAAM,OAAO;CAC3C;CAEA,MAAM,KAAK,QAAqB,UAAuC;EACtE,IAAI,OAAO,UAAU,UACpB,MAAM,IAAI,UAAU,oDAAoD,EAAE,MAAM,YAAY,CAAC;EAE9F,OAAO,KAAKA,SAAS,SAAS,OAAO,KAAK,EAAE,SAAS,CAAC;CACvD;CAEA,MAAM,MAAM,KAAa,OAAmB,WAAmB,UAAwC;EACtG,MAAM,KAAKA,SAAS,SAAS,KAAK,OAAO,SAAS;EAClD,OAAO,kBAAkB,MAAM;GAC9B,OAAO;GACP;GACA,YAAY;GACZ;GACA,aAAa,MAAM;EACpB,CAAC;CACF;AACD"}

package/dist/pinecone-umY4t6OF.js

@@ -0,0 +1,190 @@
+import { t as ToolError } from "./errors-DoSpNHvs.js";
+import { n as defineModule, r as defineTool } from "./define-CvpJ_pNP.js";
+import { n as requireAuth } from "./provider-CgDAlg6K.js";
+import { t as HttpService } from "./http-service-DDNCO1s4.js";
+import { C as resolveVectorNamespace, _ as parseMetadata, a as deleteVectorsOutputSchema, c as upsertVectorsInputSchema, g as mergeVectorFilter, i as deleteVectorsInputSchema, l as upsertVectorsOutputSchema, m as mapVectorHttpStatus, o as queryVectorsInputSchema, s as queryVectorsOutputSchema, u as vectorDefaultFilterSchema, v as parseNumberArray, w as stampDefaultFilterMetadata, x as parseUpstreamMessage, y as parsePointId } from "./schemas-ChOAhdo9.js";
+import { isNumber, isPlainObject } from "es-toolkit";
+import { z } from "zod";
+//#region src/vendors/pinecone/contracts.ts
+const pineconeAuthSchema = z.object({
+	api_key: z.string().min(1).describe("Pinecone API key"),
+	base_url: z.string().url().describe("Pinecone index data-plane origin, for example https://xxxx.svc.….pinecone.io"),
+	default_namespace: z.string().min(1).optional().describe("Locked Pinecone namespace for all calls when set (tool cannot switch away)"),
+	default_filter: vectorDefaultFilterSchema.optional().describe("Host-bound metadata filter always applied on query; flat keys stamped on upsert")
+});
+//#endregion
+//#region src/vendors/pinecone/client.ts
+/**
+* Pinecone data-plane REST vendor client.
+* Host: `new PineconeClient(auth)`. Agent tools: `fromContext(ctx)`.
+* @see https://docs.pinecone.io/reference/api/data-plane
+*/
+var PineconeClient = class PineconeClient {
+	#http;
+	#defaultNamespace;
+	#defaultFilter;
+	constructor(auth, options = {}) {
+		const parsed = pineconeAuthSchema.safeParse(auth);
+		if (!parsed.success) throw new ToolError("Invalid Pinecone auth credentials", {
+			code: "bad_auth",
+			details: { issues: parsed.error.issues.map((issue) => issue.message) }
+		});
+		this.#defaultNamespace = parsed.data.default_namespace;
+		this.#defaultFilter = parsed.data.default_filter;
+		const httpOptions = {
+			baseURL: parsed.data.base_url,
+			headers: {
+				"Content-Type": "application/json",
+				"Api-Key": parsed.data.api_key
+			},
+			label: "Pinecone"
+		};
+		if (options.fetch) httpOptions.fetch = options.fetch;
+		if (options.signal) httpOptions.signal = options.signal;
+		this.#http = new HttpService(httpOptions);
+	}
+	static fromContext(ctx) {
+		const auth = requireAuth(ctx, pineconeAuthSchema);
+		const options = {};
+		if (ctx.fetch) options.fetch = ctx.fetch;
+		if (ctx.signal) options.signal = ctx.signal;
+		return new PineconeClient(auth, options);
+	}
+	#namespace(toolNamespace) {
+		return resolveVectorNamespace(this.#defaultNamespace, toolNamespace);
+	}
+	async upsert(input) {
+		const body = { vectors: input.vectors.map((point) => {
+			const metadata = stampDefaultFilterMetadata(point.metadata, this.#defaultFilter);
+			const row = {
+				id: point.id,
+				values: point.values
+			};
+			if (metadata) row["metadata"] = metadata;
+			return row;
+		}) };
+		const ns = this.#namespace(input.namespace);
+		if (ns) body["namespace"] = ns;
+		const res = await this.#http.post("/vectors/upsert", body, {
+			label: "Pinecone upsert",
+			noThrow: true
+		});
+		if (!res.ok) throw new ToolError(parseUpstreamMessage(res.data, `Pinecone upsert failed with HTTP ${res.status}`), {
+			code: mapVectorHttpStatus(res.status),
+			details: { status: res.status }
+		});
+		return { upserted: isPlainObject(res.data) && isNumber(res.data["upsertedCount"]) ? res.data["upsertedCount"] : input.vectors.length };
+	}
+	async query(input) {
+		const topK = input.top_k ?? 8;
+		const includeMetadata = input.include_metadata !== false;
+		const body = {
+			vector: input.vector,
+			topK,
+			includeMetadata,
+			includeValues: input.include_values === true
+		};
+		const ns = this.#namespace(input.namespace);
+		if (ns) body["namespace"] = ns;
+		const filter = mergeVectorFilter(this.#defaultFilter, input.filter);
+		if (filter) body["filter"] = filter;
+		const res = await this.#http.post("/query", body, {
+			label: "Pinecone query",
+			noThrow: true
+		});
+		if (!res.ok) throw new ToolError(parseUpstreamMessage(res.data, `Pinecone query failed with HTTP ${res.status}`), {
+			code: mapVectorHttpStatus(res.status),
+			details: { status: res.status }
+		});
+		const matchesRaw = isPlainObject(res.data) ? res.data["matches"] : void 0;
+		const rows = Array.isArray(matchesRaw) ? matchesRaw : [];
+		const matches = [];
+		for (const row of rows) {
+			if (!isPlainObject(row)) continue;
+			const id = parsePointId(row["id"]);
+			if (!id) continue;
+			const match = {
+				id,
+				score: isNumber(row["score"]) ? row["score"] : 0
+			};
+			if (includeMetadata) {
+				const meta = parseMetadata(row["metadata"]);
+				if (meta) match.metadata = meta;
+			}
+			if (input.include_values === true) {
+				const values = parseNumberArray(row["values"]);
+				if (values) match.values = values;
+			}
+			matches.push(match);
+		}
+		return { matches };
+	}
+	async delete(input) {
+		const body = { ids: input.ids };
+		const ns = this.#namespace(input.namespace);
+		if (ns) body["namespace"] = ns;
+		const res = await this.#http.post("/vectors/delete", body, {
+			label: "Pinecone delete",
+			noThrow: true
+		});
+		if (!res.ok) throw new ToolError(parseUpstreamMessage(res.data, `Pinecone delete failed with HTTP ${res.status}`), {
+			code: mapVectorHttpStatus(res.status),
+			details: { status: res.status }
+		});
+		return { deleted: input.ids.length };
+	}
+};
+//#endregion
+//#region src/vendors/pinecone/module.ts
+const pineconeUpsertTool = defineTool({
+	id: "pinecone-upsert",
+	name: "pineconeUpsert",
+	description: "Upsert vectors into the configured Pinecone index. Use the optional namespace only when data must be isolated within the index.",
+	inputSchema: upsertVectorsInputSchema,
+	outputSchema: upsertVectorsOutputSchema,
+	sideEffect: "write",
+	runtime: "both",
+	execute: async (input, ctx) => PineconeClient.fromContext(ctx).upsert(input)
+});
+const pineconeQueryTool = defineTool({
+	id: "pinecone-query",
+	name: "pineconeQuery",
+	description: "Nearest-neighbor query against the bound Pinecone index.",
+	inputSchema: queryVectorsInputSchema,
+	outputSchema: queryVectorsOutputSchema,
+	sideEffect: "read",
+	runtime: "both",
+	execute: async (input, ctx) => PineconeClient.fromContext(ctx).query(input)
+});
+const pineconeDeleteTool = defineTool({
+	id: "pinecone-delete",
+	name: "pineconeDelete",
+	description: "Delete vectors by id from the bound Pinecone index.",
+	inputSchema: deleteVectorsInputSchema,
+	outputSchema: deleteVectorsOutputSchema,
+	sideEffect: "delete",
+	runtime: "both",
+	execute: async (input, ctx) => PineconeClient.fromContext(ctx).delete(input)
+});
+const pineconeModule = defineModule({
+	id: "pinecone",
+	title: "Pinecone",
+	description: "Pinecone data-plane REST: upsert, query, and delete vectors in a bound index.",
+	runtime: "both",
+	auth: {
+		type: "custom",
+		schema: pineconeAuthSchema
+	},
+	categories: ["ai", "vector"],
+	classification: "pii",
+	tags: ["pinecone"],
+	tools: [
+		pineconeUpsertTool,
+		pineconeQueryTool,
+		pineconeDeleteTool
+	]
+});
+//#endregion
+export { PineconeClient as a, pineconeUpsertTool as i, pineconeModule as n, pineconeAuthSchema as o, pineconeQueryTool as r, pineconeDeleteTool as t };
+
+//# sourceMappingURL=pinecone-umY4t6OF.js.map

package/dist/pinecone-umY4t6OF.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinecone-umY4t6OF.js","names":["#http","#defaultNamespace","#defaultFilter","#namespace"],"sources":["../src/vendors/pinecone/contracts.ts","../src/vendors/pinecone/client.ts","../src/vendors/pinecone/module.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport { vectorDefaultFilterSchema } from '../_vector'\n\nexport {\n\tMAX_TOP_K,\n\tMAX_VECTOR_BATCH,\n\tMAX_VECTOR_DIMENSIONS,\n\tdeleteVectorsInputSchema,\n\tdeleteVectorsOutputSchema,\n\tqueryVectorsInputSchema,\n\tqueryVectorsOutputSchema,\n\tupsertVectorsInputSchema,\n\tupsertVectorsOutputSchema,\n\tvectorMatchSchema,\n\tvectorMetadataSchema,\n\tvectorPointSchema\n} from '../_vector'\nexport type {\n\tDeleteVectorsInput,\n\tDeleteVectorsOutput,\n\tQueryVectorsInput,\n\tQueryVectorsOutput,\n\tUpsertVectorsInput,\n\tUpsertVectorsOutput,\n\tVectorMatch,\n\tVectorMetadata,\n\tVectorPoint\n} from '../_vector'\n\nexport const pineconeAuthSchema = z.object({\n\tapi_key: z.string().min(1).describe('Pinecone API key'),\n\tbase_url: z.string().url().describe('Pinecone index data-plane origin, for example https://xxxx.svc.….pinecone.io'),\n\tdefault_namespace: z\n\t\t.string()\n\t\t.min(1)\n\t\t.optional()\n\t\t.describe('Locked Pinecone namespace for all calls when set (tool cannot switch away)'),\n\tdefault_filter: vectorDefaultFilterSchema\n\t\t.optional()\n\t\t.describe('Host-bound metadata filter always applied on query; flat keys stamped on upsert')\n})\n\nexport type PineconeAuth = z.infer<typeof pineconeAuthSchema>\n","/**\n * Pinecone data-plane REST vendor client.\n * Host: `new PineconeClient(auth)`. Agent tools: `fromContext(ctx)`.\n * @see https://docs.pinecone.io/reference/api/data-plane\n */\n\nimport { isNumber, isPlainObject } from 'es-toolkit'\n\nimport { ToolError } from '../../core/errors'\nimport { requireAuth } from '../../core/provider'\nimport type { ToolContext } from '../../core/types'\nimport { HttpService } from '../../transport/http-service'\nimport type { HttpServiceOptions } from '../../transport/http-service'\nimport {\n\tmapVectorHttpStatus,\n\tmergeVectorFilter,\n\tparseMetadata,\n\tparseNumberArray,\n\tparsePointId,\n\tparseUpstreamMessage,\n\tresolveVectorNamespace,\n\tstampDefaultFilterMetadata\n} from '../_vector/domain'\nimport type { VectorDefaultFilter } from '../_vector/domain'\nimport type {\n\tDeleteVectorsInput,\n\tDeleteVectorsOutput,\n\tPineconeAuth,\n\tQueryVectorsInput,\n\tQueryVectorsOutput,\n\tUpsertVectorsInput,\n\tUpsertVectorsOutput,\n\tVectorMatch\n} from './contracts'\nimport { pineconeAuthSchema } from './contracts'\n\nexport type PineconeClientOptions = {\n\tfetch?: HttpServiceOptions['fetch'] | undefined\n\tsignal?: HttpServiceOptions['signal'] | undefined\n}\n\nexport class PineconeClient {\n\treadonly #http: HttpService\n\treadonly #defaultNamespace: string | undefined\n\treadonly #defaultFilter: VectorDefaultFilter | undefined\n\n\tconstructor(auth: PineconeAuth, options: PineconeClientOptions = {}) {\n\t\tconst parsed = pineconeAuthSchema.safeParse(auth)\n\t\tif (!parsed.success) {\n\t\t\tthrow new ToolError('Invalid Pinecone auth credentials', {\n\t\t\t\tcode: 'bad_auth',\n\t\t\t\tdetails: { issues: parsed.error.issues.map((issue) => issue.message) }\n\t\t\t})\n\t\t}\n\t\tthis.#defaultNamespace = parsed.data.default_namespace\n\t\tthis.#defaultFilter = parsed.data.default_filter\n\t\tconst httpOptions: HttpServiceOptions = {\n\t\t\tbaseURL: parsed.data.base_url,\n\t\t\theaders: {\n\t\t\t\t'Content-Type': 'application/json',\n\t\t\t\t'Api-Key': parsed.data.api_key\n\t\t\t},\n\t\t\tlabel: 'Pinecone'\n\t\t}\n\t\tif (options.fetch) httpOptions.fetch = options.fetch\n\t\tif (options.signal) httpOptions.signal = options.signal\n\t\tthis.#http = new HttpService(httpOptions)\n\t}\n\n\tstatic fromContext(ctx: ToolContext): PineconeClient {\n\t\tconst auth = requireAuth(ctx, pineconeAuthSchema)\n\t\tconst options: PineconeClientOptions = {}\n\t\tif (ctx.fetch) options.fetch = ctx.fetch\n\t\tif (ctx.signal) options.signal = ctx.signal\n\t\treturn new PineconeClient(auth, options)\n\t}\n\n\t#namespace(toolNamespace: string | undefined): string | undefined {\n\t\treturn resolveVectorNamespace(this.#defaultNamespace, toolNamespace)\n\t}\n\n\tasync upsert(input: UpsertVectorsInput): Promise<UpsertVectorsOutput> {\n\t\tconst body: Record<string, unknown> = {\n\t\t\tvectors: input.vectors.map((point) => {\n\t\t\t\tconst metadata = stampDefaultFilterMetadata(point.metadata, this.#defaultFilter)\n\t\t\t\tconst row: Record<string, unknown> = { id: point.id, values: point.values }\n\t\t\t\tif (metadata) row['metadata'] = metadata\n\t\t\t\treturn row\n\t\t\t})\n\t\t}\n\t\tconst ns = this.#namespace(input.namespace)\n\t\tif (ns) body['namespace'] = ns\n\n\t\tconst res = await this.#http.post('/vectors/upsert', body, {\n\t\t\tlabel: 'Pinecone upsert',\n\t\t\tnoThrow: true\n\t\t})\n\t\tif (!res.ok) {\n\t\t\tthrow new ToolError(parseUpstreamMessage(res.data, `Pinecone upsert failed with HTTP ${res.status}`), {\n\t\t\t\tcode: mapVectorHttpStatus(res.status),\n\t\t\t\tdetails: { status: res.status }\n\t\t\t})\n\t\t}\n\t\tconst upserted =\n\t\t\tisPlainObject(res.data) && isNumber(res.data['upsertedCount']) ? res.data['upsertedCount'] : input.vectors.length\n\t\treturn { upserted }\n\t}\n\n\tasync query(input: QueryVectorsInput): Promise<QueryVectorsOutput> {\n\t\tconst topK = input.top_k ?? 8\n\t\tconst includeMetadata = input.include_metadata !== false\n\t\tconst body: Record<string, unknown> = {\n\t\t\tvector: input.vector,\n\t\t\ttopK,\n\t\t\tincludeMetadata,\n\t\t\tincludeValues: input.include_values === true\n\t\t}\n\t\tconst ns = this.#namespace(input.namespace)\n\t\tif (ns) body['namespace'] = ns\n\t\tconst filter = mergeVectorFilter(this.#defaultFilter, input.filter)\n\t\tif (filter) body['filter'] = filter\n\n\t\tconst res = await this.#http.post('/query', body, { label: 'Pinecone query', noThrow: true })\n\t\tif (!res.ok) {\n\t\t\tthrow new ToolError(parseUpstreamMessage(res.data, `Pinecone query failed with HTTP ${res.status}`), {\n\t\t\t\tcode: mapVectorHttpStatus(res.status),\n\t\t\t\tdetails: { status: res.status }\n\t\t\t})\n\t\t}\n\n\t\tconst matchesRaw = isPlainObject(res.data) ? res.data['matches'] : undefined\n\t\tconst rows = Array.isArray(matchesRaw) ? matchesRaw : []\n\t\tconst matches: VectorMatch[] = []\n\t\tfor (const row of rows) {\n\t\t\tif (!isPlainObject(row)) continue\n\t\t\tconst id = parsePointId(row['id'])\n\t\t\tif (!id) continue\n\t\t\tconst score = isNumber(row['score']) ? row['score'] : 0\n\t\t\tconst match: VectorMatch = { id, score }\n\t\t\tif (includeMetadata) {\n\t\t\t\tconst meta = parseMetadata(row['metadata'])\n\t\t\t\tif (meta) match.metadata = meta\n\t\t\t}\n\t\t\tif (input.include_values === true) {\n\t\t\t\tconst values = parseNumberArray(row['values'])\n\t\t\t\tif (values) match.values = values\n\t\t\t}\n\t\t\tmatches.push(match)\n\t\t}\n\t\treturn { matches }\n\t}\n\n\tasync delete(input: DeleteVectorsInput): Promise<DeleteVectorsOutput> {\n\t\tconst body: Record<string, unknown> = { ids: input.ids }\n\t\tconst ns = this.#namespace(input.namespace)\n\t\tif (ns) body['namespace'] = ns\n\n\t\tconst res = await this.#http.post('/vectors/delete', body, {\n\t\t\tlabel: 'Pinecone delete',\n\t\t\tnoThrow: true\n\t\t})\n\t\tif (!res.ok) {\n\t\t\tthrow new ToolError(parseUpstreamMessage(res.data, `Pinecone delete failed with HTTP ${res.status}`), {\n\t\t\t\tcode: mapVectorHttpStatus(res.status),\n\t\t\t\tdetails: { status: res.status }\n\t\t\t})\n\t\t}\n\t\treturn { deleted: input.ids.length }\n\t}\n}\n","import { defineModule, defineTool } from '../../core/define'\nimport { PineconeClient } from './client'\nimport {\n\tdeleteVectorsInputSchema,\n\tdeleteVectorsOutputSchema,\n\tpineconeAuthSchema,\n\tqueryVectorsInputSchema,\n\tqueryVectorsOutputSchema,\n\tupsertVectorsInputSchema,\n\tupsertVectorsOutputSchema\n} from './contracts'\n\nexport const pineconeUpsertTool = defineTool({\n\tid: 'pinecone-upsert',\n\tname: 'pineconeUpsert',\n\tdescription:\n\t\t'Upsert vectors into the configured Pinecone index. Use the optional namespace only when data must be isolated within the index.',\n\tinputSchema: upsertVectorsInputSchema,\n\toutputSchema: upsertVectorsOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\texecute: async (input, ctx) => PineconeClient.fromContext(ctx).upsert(input)\n})\n\nexport const pineconeQueryTool = defineTool({\n\tid: 'pinecone-query',\n\tname: 'pineconeQuery',\n\tdescription: 'Nearest-neighbor query against the bound Pinecone index.',\n\tinputSchema: queryVectorsInputSchema,\n\toutputSchema: queryVectorsOutputSchema,\n\tsideEffect: 'read',\n\truntime: 'both',\n\texecute: async (input, ctx) => PineconeClient.fromContext(ctx).query(input)\n})\n\nexport const pineconeDeleteTool = defineTool({\n\tid: 'pinecone-delete',\n\tname: 'pineconeDelete',\n\tdescription: 'Delete vectors by id from the bound Pinecone index.',\n\tinputSchema: deleteVectorsInputSchema,\n\toutputSchema: deleteVectorsOutputSchema,\n\tsideEffect: 'delete',\n\truntime: 'both',\n\texecute: async (input, ctx) => PineconeClient.fromContext(ctx).delete(input)\n})\n\nexport const pineconeModule = defineModule({\n\tid: 'pinecone',\n\ttitle: 'Pinecone',\n\tdescription: 'Pinecone data-plane REST: upsert, query, and delete vectors in a bound index.',\n\truntime: 'both',\n\tauth: { type: 'custom', schema: pineconeAuthSchema },\n\tcategories: ['ai', 'vector'],\n\tclassification: 'pii',\n\ttags: ['pinecone'],\n\ttools: [pineconeUpsertTool, pineconeQueryTool, pineconeDeleteTool]\n})\n"],"mappings":";;;;;;;;AA8BA,MAAa,qBAAqB,EAAE,OAAO;CAC1C,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,kBAAkB;CACtD,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,8EAA8E;CAClH,mBAAmB,EACjB,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,CAAC,CACV,SAAS,4EAA4E;CACvF,gBAAgB,0BACd,SAAS,CAAC,CACV,SAAS,iFAAiF;AAC7F,CAAC;;;;;;;;ACAD,IAAa,iBAAb,MAAa,eAAe;CAC3B;CACA;CACA;CAEA,YAAY,MAAoB,UAAiC,CAAC,GAAG;EACpE,MAAM,SAAS,mBAAmB,UAAU,IAAI;EAChD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,UAAU,qCAAqC;GACxD,MAAM;GACN,SAAS,EAAE,QAAQ,OAAO,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,EAAE;EACtE,CAAC;EAEF,KAAKC,oBAAoB,OAAO,KAAK;EACrC,KAAKC,iBAAiB,OAAO,KAAK;EAClC,MAAM,cAAkC;GACvC,SAAS,OAAO,KAAK;GACrB,SAAS;IACR,gBAAgB;IAChB,WAAW,OAAO,KAAK;GACxB;GACA,OAAO;EACR;EACA,IAAI,QAAQ,OAAO,YAAY,QAAQ,QAAQ;EAC/C,IAAI,QAAQ,QAAQ,YAAY,SAAS,QAAQ;EACjD,KAAKF,QAAQ,IAAI,YAAY,WAAW;CACzC;CAEA,OAAO,YAAY,KAAkC;EACpD,MAAM,OAAO,YAAY,KAAK,kBAAkB;EAChD,MAAM,UAAiC,CAAC;EACxC,IAAI,IAAI,OAAO,QAAQ,QAAQ,IAAI;EACnC,IAAI,IAAI,QAAQ,QAAQ,SAAS,IAAI;EACrC,OAAO,IAAI,eAAe,MAAM,OAAO;CACxC;CAEA,WAAW,eAAuD;EACjE,OAAO,uBAAuB,KAAKC,mBAAmB,aAAa;CACpE;CAEA,MAAM,OAAO,OAAyD;EACrE,MAAM,OAAgC,EACrC,SAAS,MAAM,QAAQ,KAAK,UAAU;GACrC,MAAM,WAAW,2BAA2B,MAAM,UAAU,KAAKC,cAAc;GAC/E,MAAM,MAA+B;IAAE,IAAI,MAAM;IAAI,QAAQ,MAAM;GAAO;GAC1E,IAAI,UAAU,IAAI,cAAc;GAChC,OAAO;EACR,CAAC,EACF;EACA,MAAM,KAAK,KAAKC,WAAW,MAAM,SAAS;EAC1C,IAAI,IAAI,KAAK,eAAe;EAE5B,MAAM,MAAM,MAAM,KAAKH,MAAM,KAAK,mBAAmB,MAAM;GAC1D,OAAO;GACP,SAAS;EACV,CAAC;EACD,IAAI,CAAC,IAAI,IACR,MAAM,IAAI,UAAU,qBAAqB,IAAI,MAAM,oCAAoC,IAAI,QAAQ,GAAG;GACrG,MAAM,oBAAoB,IAAI,MAAM;GACpC,SAAS,EAAE,QAAQ,IAAI,OAAO;EAC/B,CAAC;EAIF,OAAO,EAAE,UADR,cAAc,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,mBAAmB,MAAM,QAAQ,OAC1F;CACnB;CAEA,MAAM,MAAM,OAAuD;EAClE,MAAM,OAAO,MAAM,SAAS;EAC5B,MAAM,kBAAkB,MAAM,qBAAqB;EACnD,MAAM,OAAgC;GACrC,QAAQ,MAAM;GACd;GACA;GACA,eAAe,MAAM,mBAAmB;EACzC;EACA,MAAM,KAAK,KAAKG,WAAW,MAAM,SAAS;EAC1C,IAAI,IAAI,KAAK,eAAe;EAC5B,MAAM,SAAS,kBAAkB,KAAKD,gBAAgB,MAAM,MAAM;EAClE,IAAI,QAAQ,KAAK,YAAY;EAE7B,MAAM,MAAM,MAAM,KAAKF,MAAM,KAAK,UAAU,MAAM;GAAE,OAAO;GAAkB,SAAS;EAAK,CAAC;EAC5F,IAAI,CAAC,IAAI,IACR,MAAM,IAAI,UAAU,qBAAqB,IAAI,MAAM,mCAAmC,IAAI,QAAQ,GAAG;GACpG,MAAM,oBAAoB,IAAI,MAAM;GACpC,SAAS,EAAE,QAAQ,IAAI,OAAO;EAC/B,CAAC;EAGF,MAAM,aAAa,cAAc,IAAI,IAAI,IAAI,IAAI,KAAK,aAAa,KAAA;EACnE,MAAM,OAAO,MAAM,QAAQ,UAAU,IAAI,aAAa,CAAC;EACvD,MAAM,UAAyB,CAAC;EAChC,KAAK,MAAM,OAAO,MAAM;GACvB,IAAI,CAAC,cAAc,GAAG,GAAG;GACzB,MAAM,KAAK,aAAa,IAAI,KAAK;GACjC,IAAI,CAAC,IAAI;GAET,MAAM,QAAqB;IAAE;IAAI,OADnB,SAAS,IAAI,QAAQ,IAAI,IAAI,WAAW;GACf;GACvC,IAAI,iBAAiB;IACpB,MAAM,OAAO,cAAc,IAAI,WAAW;IAC1C,IAAI,MAAM,MAAM,WAAW;GAC5B;GACA,IAAI,MAAM,mBAAmB,MAAM;IAClC,MAAM,SAAS,iBAAiB,IAAI,SAAS;IAC7C,IAAI,QAAQ,MAAM,SAAS;GAC5B;GACA,QAAQ,KAAK,KAAK;EACnB;EACA,OAAO,EAAE,QAAQ;CAClB;CAEA,MAAM,OAAO,OAAyD;EACrE,MAAM,OAAgC,EAAE,KAAK,MAAM,IAAI;EACvD,MAAM,KAAK,KAAKG,WAAW,MAAM,SAAS;EAC1C,IAAI,IAAI,KAAK,eAAe;EAE5B,MAAM,MAAM,MAAM,KAAKH,MAAM,KAAK,mBAAmB,MAAM;GAC1D,OAAO;GACP,SAAS;EACV,CAAC;EACD,IAAI,CAAC,IAAI,IACR,MAAM,IAAI,UAAU,qBAAqB,IAAI,MAAM,oCAAoC,IAAI,QAAQ,GAAG;GACrG,MAAM,oBAAoB,IAAI,MAAM;GACpC,SAAS,EAAE,QAAQ,IAAI,OAAO;EAC/B,CAAC;EAEF,OAAO,EAAE,SAAS,MAAM,IAAI,OAAO;CACpC;AACD;;;AC7JA,MAAa,qBAAqB,WAAW;CAC5C,IAAI;CACJ,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,eAAe,YAAY,GAAG,CAAC,CAAC,OAAO,KAAK;AAC5E,CAAC;AAED,MAAa,oBAAoB,WAAW;CAC3C,IAAI;CACJ,MAAM;CACN,aAAa;CACb,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,eAAe,YAAY,GAAG,CAAC,CAAC,MAAM,KAAK;AAC3E,CAAC;AAED,MAAa,qBAAqB,WAAW;CAC5C,IAAI;CACJ,MAAM;CACN,aAAa;CACb,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,eAAe,YAAY,GAAG,CAAC,CAAC,OAAO,KAAK;AAC5E,CAAC;AAED,MAAa,iBAAiB,aAAa;CAC1C,IAAI;CACJ,OAAO;CACP,aAAa;CACb,SAAS;CACT,MAAM;EAAE,MAAM;EAAU,QAAQ;CAAmB;CACnD,YAAY,CAAC,MAAM,QAAQ;CAC3B,gBAAgB;CAChB,MAAM,CAAC,UAAU;CACjB,OAAO;EAAC;EAAoB;EAAmB;CAAkB;AAClE,CAAC"}

package/dist/provider-CgDAlg6K.js

@@ -0,0 +1,34 @@
+import { t as ToolError } from "./errors-DoSpNHvs.js";
+//#region src/core/provider.ts
+function defineProvider(options) {
+	if (!options.id.trim()) throw new Error("Provider id is required");
+	if (!options.title.trim()) throw new Error(`Provider ${options.id} is missing a title`);
+	return {
+		id: options.id,
+		title: options.title,
+		authSchema: options.authSchema,
+		ops: options.ops
+	};
+}
+/** Resolve a registered provider by `auth.provider`. */
+function resolveProvider(providers, auth) {
+	const found = providers.find((provider) => provider.id === auth.provider);
+	if (!found) throw new ToolError(`Unknown provider: ${auth.provider}`, {
+		code: "bad_auth",
+		details: { provider: auth.provider }
+	});
+	return found;
+}
+/** Parse host-bound credentials for a module auth schema. */
+function requireAuth(ctx, schema) {
+	const parsed = schema.safeParse(ctx.auth);
+	if (!parsed.success) throw new ToolError("Invalid auth credentials", {
+		code: "bad_auth",
+		details: { issues: parsed.error.issues.map((issue) => issue.message) }
+	});
+	return parsed.data;
+}
+//#endregion
+export { requireAuth as n, resolveProvider as r, defineProvider as t };
+
+//# sourceMappingURL=provider-CgDAlg6K.js.map

package/dist/provider-CgDAlg6K.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-CgDAlg6K.js","names":[],"sources":["../src/core/provider.ts"],"sourcesContent":["import type { z } from 'zod'\n\nimport { ToolError } from './errors'\nimport type { ToolContext } from './types'\n\n/**\n * Provider type-class entry for a capability module.\n * Auth schemas always include a `provider` literal discriminator.\n * Ops receive auth only via `ctx.auth` (never tool inputs).\n */\nexport type ProviderDefinition<TId extends string = string, TAuth = unknown, TOps = unknown> = {\n\tid: TId\n\ttitle: string\n\tauthSchema: z.ZodType<TAuth>\n\tops: TOps\n}\n\nexport type ProviderAuthBase = {\n\tprovider: string\n}\n\nexport function defineProvider<const TId extends string, TAuth extends { provider: TId }, TOps>(options: {\n\tid: TId\n\ttitle: string\n\tauthSchema: z.ZodType<TAuth>\n\tops: TOps\n}): ProviderDefinition<TId, TAuth, TOps> {\n\tif (!options.id.trim()) {\n\t\tthrow new Error('Provider id is required')\n\t}\n\tif (!options.title.trim()) {\n\t\tthrow new Error(`Provider ${options.id} is missing a title`)\n\t}\n\treturn {\n\t\tid: options.id,\n\t\ttitle: options.title,\n\t\tauthSchema: options.authSchema,\n\t\tops: options.ops\n\t}\n}\n\n/** Resolve a registered provider by `auth.provider`. */\nexport function resolveProvider<T extends ProviderDefinition>(providers: readonly T[], auth: ProviderAuthBase): T {\n\tconst found = providers.find((provider) => provider.id === auth.provider)\n\tif (!found) {\n\t\tthrow new ToolError(`Unknown provider: ${auth.provider}`, {\n\t\t\tcode: 'bad_auth',\n\t\t\tdetails: { provider: auth.provider }\n\t\t})\n\t}\n\treturn found\n}\n\n/** Parse host-bound credentials for a module auth schema. */\nexport function requireAuth<TAuth>(ctx: ToolContext, schema: z.ZodType<TAuth>): TAuth {\n\tconst parsed = schema.safeParse(ctx.auth)\n\tif (!parsed.success) {\n\t\tthrow new ToolError('Invalid auth credentials', {\n\t\t\tcode: 'bad_auth',\n\t\t\tdetails: { issues: parsed.error.issues.map((issue) => issue.message) }\n\t\t})\n\t}\n\treturn parsed.data\n}\n"],"mappings":";;AAqBA,SAAgB,eAAgF,SAKvD;CACxC,IAAI,CAAC,QAAQ,GAAG,KAAK,GACpB,MAAM,IAAI,MAAM,yBAAyB;CAE1C,IAAI,CAAC,QAAQ,MAAM,KAAK,GACvB,MAAM,IAAI,MAAM,YAAY,QAAQ,GAAG,oBAAoB;CAE5D,OAAO;EACN,IAAI,QAAQ;EACZ,OAAO,QAAQ;EACf,YAAY,QAAQ;EACpB,KAAK,QAAQ;CACd;AACD;;AAGA,SAAgB,gBAA8C,WAAyB,MAA2B;CACjH,MAAM,QAAQ,UAAU,MAAM,aAAa,SAAS,OAAO,KAAK,QAAQ;CACxE,IAAI,CAAC,OACJ,MAAM,IAAI,UAAU,qBAAqB,KAAK,YAAY;EACzD,MAAM;EACN,SAAS,EAAE,UAAU,KAAK,SAAS;CACpC,CAAC;CAEF,OAAO;AACR;;AAGA,SAAgB,YAAmB,KAAkB,QAAiC;CACrF,MAAM,SAAS,OAAO,UAAU,IAAI,IAAI;CACxC,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,UAAU,4BAA4B;EAC/C,MAAM;EACN,SAAS,EAAE,QAAQ,OAAO,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,EAAE;CACtE,CAAC;CAEF,OAAO,OAAO;AACf"}