@adcp/sdk 12.0.0 → 12.0.2

package/dist/lib/protocols/mcp-tasks.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/protocols/mcp-tasks.ts"],"sourcesContent":["/**\n * MCP Tasks protocol integration for async tool calls.\n *\n * When an MCP server declares `capabilities.tasks.requests.tools.call`, this module\n * uses the SDK's experimental tasks API instead of custom AdCP tool calls for async\n * lifecycle management. This removes the LLM from the polling path.\n *\n * Detection: check `client.getServerCapabilities()?.tasks?.requests?.tools?.call`\n * after connection. The SDK's `isToolTask()` auto-detects per-tool `taskSupport`.\n */\n\nimport type { Client as MCPClient } from '@modelcontextprotocol/sdk/client/index.js';\nimport type { DebugLogEntry } from '../types/adcp';\nimport type { TaskInfo } from '../core/ConversationTypes';\nimport { withCachedConnection } from './mcp';\nimport { createMCPAuthHeaders } from '../auth';\nimport { withSpan, injectTraceHeaders } from '../observability/tracing';\nimport { signingContextStorage, type AgentSigningContext } from '../signing/client';\nimport { redactIdempotencyKeyInArgs } from '../utils/idempotency';\nimport { withResponseSizeLimit } from './responseSizeLimit';\nimport { withTransportDiagnostics, type TransportActivityHandler } from './transportDiagnostics';\nimport { isAbortOrTimeoutError, resolveClientRequestTimeoutMs } from './abort';\nimport { tryCallModernMCPTool } from './mcp-modern';\n\n/** Response shape returned by MCPClient.callTool(). */\ntype CallToolResponse = {\n  isError?: boolean;\n  content?: Array<{ type: string; text?: string }>;\n  [key: string]: unknown;\n};\n\ninterface MCPTaskProtocolOptions {\n  transport?: { maxResponseBytes?: number };\n  onTransportActivity?: TransportActivityHandler;\n  transportActivityContext?: {\n    agentId: string;\n    operationId?: string;\n    taskId?: string;\n    contextId?: string;\n    idempotencyKey?: string;\n  };\n}\n\n/**\n * Track which MCP clients have had listTools() called.\n * The SDK's isToolTask() needs tool metadata from listTools() to determine\n * per-tool taskSupport. Without this, callToolStream silently degrades to\n * a synchronous tools/call (no task creation).\n */\nconst toolsListedClients = new WeakSet<MCPClient>();\n\n/**\n * Ensure tool metadata is cached in the SDK so isToolTask() works.\n * Called once per client connection when tasks are supported.\n */\nasync function ensureToolsListed(client: MCPClient, signal?: AbortSignal, requestTimeoutMs?: number): Promise<void> {\n  if (toolsListedClients.has(client)) return;\n  await client.listTools(undefined, {\n    ...(signal && { signal }),\n    ...(requestTimeoutMs !== undefined && { timeout: requestTimeoutMs }),\n  });\n  toolsListedClients.add(client);\n}\n\n/**\n * Check if an MCP server supports the Tasks protocol for tool calls.\n */\nexport function serverSupportsTasks(client: MCPClient): boolean {\n  const caps = client.getServerCapabilities();\n  return !!(caps as Record<string, any>)?.tasks?.requests?.tools?.call;\n}\n\n/**\n * Map MCP Tasks status to AdCP status.\n *\n * MCP Tasks uses underscores and British spelling; AdCP uses hyphens and American spelling.\n */\nexport function mapMCPTaskStatus(mcpStatus: string): string {\n  switch (mcpStatus) {\n    case 'working':\n      return 'working';\n    case 'input_required':\n      return 'input-required';\n    case 'completed':\n      return 'completed';\n    case 'failed':\n      return 'failed';\n    case 'cancelled':\n      return 'canceled';\n    default:\n      return mcpStatus;\n  }\n}\n\n/**\n * Map an MCP Task object to an AdCP TaskInfo.\n */\nfunction mapMCPTaskToTaskInfo(\n  task: {\n    taskId: string;\n    status: string;\n    createdAt: string;\n    lastUpdatedAt: string;\n    statusMessage?: string;\n    pollInterval?: number;\n  },\n  toolName?: string\n): TaskInfo {\n  // Project `statusMessage → TaskInfo.error` against the\n  // POST-MAPPING AdCP status (not the raw MCP-side status). MCP\n  // Tasks emits `'cancelled'` (British) and never `'rejected'` as a\n  // standard status; checking against the AdCP set after mapping\n  // catches all terminal failures uniformly. Sellers that extend\n  // MCP with custom statuses (e.g. emit `'rejected'` via spec\n  // extension) flow through unchanged via the `default` arm of\n  // {@link mapMCPTaskStatus}.\n  const adcpStatus = mapMCPTaskStatus(task.status);\n  const isTerminalFailure = adcpStatus === 'failed' || adcpStatus === 'rejected' || adcpStatus === 'canceled';\n  return {\n    taskId: task.taskId,\n    status: adcpStatus,\n    taskType: toolName ?? 'unknown',\n    createdAt: new Date(task.createdAt).getTime(),\n    updatedAt: new Date(task.lastUpdatedAt).getTime(),\n    error: isTerminalFailure ? task.statusMessage : undefined,\n  };\n}\n\n/**\n * Build auth headers for MCP connections.\n */\nfunction buildAuthHeaders(authToken?: string, customHeaders?: Record<string, string>): Record<string, string> {\n  const traceHeaders = injectTraceHeaders();\n  return {\n    ...customHeaders,\n    ...traceHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n}\n\n/**\n * Redact sensitive fields from tool args before logging.\n *\n * Redacts:\n * - `push_notification_config.authentication` — webhook signing secret\n * - `idempotency_key` — retry-pattern oracle within the seller's TTL; opt-in\n *   full logging via `ADCP_LOG_IDEMPOTENCY_KEYS=1`\n */\nfunction redactArgsForLog(args: Record<string, unknown>): Record<string, unknown> {\n  let redacted: Record<string, unknown> = args;\n  if (redacted.push_notification_config) {\n    redacted = {\n      ...redacted,\n      push_notification_config: {\n        ...(redacted.push_notification_config as object),\n        authentication: '***',\n      },\n    };\n  }\n  return redactIdempotencyKeyInArgs(redacted);\n}\n\n/**\n * Validate taskId before passing to protocol methods.\n */\nfunction validateTaskId(taskId: string): void {\n  if (!taskId || typeof taskId !== 'string' || taskId.length > 256) {\n    throw new Error(`Invalid taskId: expected non-empty string (max 256 chars)`);\n  }\n}\n\n/**\n * Call an MCP tool with Tasks protocol support.\n *\n * If the server supports MCP Tasks and the tool has `taskSupport: 'optional' | 'required'`,\n * uses `callToolStream()` which handles task creation, polling, and result retrieval.\n *\n * If the server doesn't support tasks, falls back to regular `client.callTool()`.\n *\n * The stream is consumed with a timeout. If the task doesn't complete within the timeout,\n * returns a working-status response with the MCP task_id for follow-up polling.\n */\nexport async function callMCPToolWithTasks(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  options?: {\n    workingTimeout?: number;\n    signingContext?: AgentSigningContext;\n    signal?: AbortSignal;\n    requestTimeoutMs?: number;\n  }\n): Promise<unknown> {\n  // Keep the public debug-log contract identical across modern and legacy\n  // protocol eras. Era negotiation happens after these common entries; the\n  // selected transport appends its own connection diagnostics.\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Auth configuration`,\n    timestamp: new Date().toISOString(),\n    hasAuth: !!authToken,\n    headers: authToken ? { 'x-adcp-auth': '***' } : {},\n    customHeaderKeys: customHeaders ? Object.keys(customHeaders) : [],\n  });\n\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Calling tool ${toolName} with args: ${JSON.stringify(redactArgsForLog(args))}`,\n    timestamp: new Date().toISOString(),\n  });\n\n  if (authToken) {\n    debugLogs.push({\n      type: 'info',\n      message: `MCP: Transport configured with x-adcp-auth header for ${toolName}`,\n      timestamp: new Date().toISOString(),\n    });\n  }\n\n  const modernAttempt = await tryCallModernMCPTool(agentUrl, toolName, args, authToken, debugLogs, customHeaders, {\n    ...(options?.signingContext && { signingContext: options.signingContext }),\n    ...(options?.signal && { signal: options.signal }),\n    ...(options?.requestTimeoutMs !== undefined && { requestTimeoutMs: options.requestTimeoutMs }),\n  });\n  if (modernAttempt.handled) {\n    debugLogs.push({\n      type: modernAttempt.response?.isError ? 'error' : 'success',\n      message: `MCP: Tool ${toolName} response received (${modernAttempt.response?.isError ? 'error' : 'success'})`,\n      timestamp: new Date().toISOString(),\n      response: modernAttempt.response,\n    });\n    return modernAttempt.response;\n  }\n\n  return withSpan(\n    'adcp.mcp.call_tool',\n    {\n      'adcp.tool': toolName,\n      'http.url': agentUrl,\n    },\n    async () =>\n      signingContextStorage.run(options?.signingContext, async () => {\n        const authHeaders = buildAuthHeaders(authToken, customHeaders);\n        const workingTimeout = options?.workingTimeout ?? 120_000;\n\n        return withCachedConnection(\n          agentUrl,\n          authToken,\n          authHeaders,\n          debugLogs,\n          toolName,\n          client =>\n            callToolOnClient(\n              client,\n              toolName,\n              args,\n              debugLogs,\n              workingTimeout,\n              options?.signal,\n              options?.requestTimeoutMs\n            ),\n          undefined,\n          { signal: options?.signal, requestTimeoutMs: options?.requestTimeoutMs }\n        );\n      })\n  );\n}\n\n/**\n * Call a tool on a pre-connected MCP `Client` without HTTP transport or connection caching.\n *\n * This is the in-process companion to `callMCPToolWithTasks`. It skips URL validation,\n * connection setup, OAuth refresh, and the reconnect-retry path — the caller owns the\n * client lifecycle. All other semantics (tasks protocol detection, stream handling,\n * timeout surfacing) are identical to the URL-based path.\n *\n * Use via `AgentClient.fromMCPClient()`. Not intended for direct import outside the\n * protocols directory.\n */\nexport async function callMCPToolWithClient(\n  mcpClient: MCPClient,\n  toolName: string,\n  args: Record<string, unknown>,\n  debugLogs: DebugLogEntry[] = [],\n  options?: { workingTimeout?: number; signal?: AbortSignal; requestTimeoutMs?: number }\n): Promise<unknown> {\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Calling tool ${toolName} (in-process) with args: ${JSON.stringify(redactArgsForLog(args))}`,\n    timestamp: new Date().toISOString(),\n  });\n  return callToolOnClient(\n    mcpClient,\n    toolName,\n    args,\n    debugLogs,\n    options?.workingTimeout ?? 120_000,\n    options?.signal,\n    options?.requestTimeoutMs\n  );\n}\n\n/**\n * Inner dispatch logic shared by `callMCPToolWithTasks` (URL path) and\n * `callMCPToolWithClient` (in-process path). Both paths converge here once\n * a connected `MCPClient` is in hand.\n */\nasync function callToolOnClient(\n  client: MCPClient,\n  toolName: string,\n  args: Record<string, unknown>,\n  debugLogs: DebugLogEntry[],\n  workingTimeout: number,\n  signal?: AbortSignal,\n  requestTimeoutMs?: number\n): Promise<unknown> {\n  const resolvedRequestTimeoutMs = resolveClientRequestTimeoutMs(requestTimeoutMs);\n  const requestOptions = {\n    ...(signal && { signal }),\n    ...(resolvedRequestTimeoutMs !== undefined && { timeout: resolvedRequestTimeoutMs }),\n  };\n  if (!serverSupportsTasks(client)) {\n    debugLogs.push({\n      type: 'info',\n      message: `MCP Tasks: Server does not support tasks, using standard callTool for ${toolName}`,\n      timestamp: new Date().toISOString(),\n    });\n    const response = (await client.callTool(\n      { name: toolName, arguments: args },\n      undefined,\n      requestOptions\n    )) as CallToolResponse;\n\n    debugLogs.push({\n      type: response?.isError ? 'error' : 'success',\n      message: `MCP: Tool ${toolName} response received (${response?.isError ? 'error' : 'success'})`,\n      timestamp: new Date().toISOString(),\n      response: response,\n    });\n\n    return response;\n  }\n\n  // Ensure tool metadata is cached so the SDK's isToolTask() works correctly.\n  // Without this, callToolStream silently skips task creation for tools that\n  // declare taskSupport: 'optional' | 'required'.\n  await ensureToolsListed(client, signal, resolvedRequestTimeoutMs);\n\n  debugLogs.push({\n    type: 'info',\n    message: `MCP Tasks: Server supports tasks, using callToolStream for ${toolName}`,\n    timestamp: new Date().toISOString(),\n  });\n\n  // Use callToolStream which handles the full task lifecycle\n  const stream = client.experimental.tasks.callToolStream({ name: toolName, arguments: args }, undefined, {\n    timeout: resolvedRequestTimeoutMs ?? workingTimeout,\n    resetTimeoutOnProgress: true,\n    ...(signal && { signal }),\n  });\n\n  let capturedTaskId: string | undefined;\n  let capturedTask: { taskId: string; status: string; pollInterval?: number } | undefined;\n\n  try {\n    for await (const message of stream) {\n      switch (message.type) {\n        case 'taskCreated':\n          capturedTaskId = message.task.taskId;\n          capturedTask = message.task;\n          debugLogs.push({\n            type: 'info',\n            message: `MCP Tasks: Task created ${capturedTaskId} for ${toolName}`,\n            timestamp: new Date().toISOString(),\n          });\n          break;\n\n        case 'taskStatus':\n          capturedTask = message.task;\n          debugLogs.push({\n            type: 'info',\n            message: `MCP Tasks: Status update for ${capturedTaskId}: ${message.task.status}`,\n            timestamp: new Date().toISOString(),\n          });\n          break;\n\n        case 'result': {\n          debugLogs.push({\n            type: 'success',\n            message: `MCP: Tool ${toolName} response received (success)`,\n            timestamp: new Date().toISOString(),\n            response: message.result,\n          });\n          return message.result as CallToolResponse;\n        }\n\n        case 'error': {\n          debugLogs.push({\n            type: 'error',\n            message: `MCP Tasks: Error for ${toolName}: ${message.error.message}`,\n            timestamp: new Date().toISOString(),\n          });\n          // The MCP Tasks SDK error event may strip structured content.\n          // If we have a taskId, fetch the full result to recover adcp_error data\n          // and return it as a proper isError response for downstream unwrapping.\n          if (capturedTaskId) {\n            try {\n              const taskResult = await client.experimental.tasks.getTaskResult(\n                capturedTaskId,\n                undefined,\n                requestOptions\n              );\n              const content = taskResult?.content as Array<{ type: string; text?: string }> | undefined;\n              if (content) {\n                return {\n                  isError: true,\n                  content,\n                  structuredContent: taskResult?.structuredContent,\n                } as unknown as CallToolResponse;\n              }\n            } catch {\n              // Failed to fetch task result — fall through to throw\n            }\n          }\n          throw message.error;\n        }\n      }\n    }\n  } catch (error) {\n    if (signal?.aborted && isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n    // If we timed out but have a taskId, return a working status\n    // so the caller can poll via getMCPTaskStatus/getMCPTaskResult\n    if (capturedTaskId && error instanceof Error && /timeout|timed out/i.test(error.message)) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP Tasks: Timeout for ${toolName}, returning working status with taskId ${capturedTaskId}`,\n        timestamp: new Date().toISOString(),\n      });\n\n      return {\n        structuredContent: {\n          status: 'working',\n          task_id: capturedTaskId,\n          poll_interval: capturedTask?.pollInterval,\n        },\n      };\n    }\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n    // Servers may return a synchronous tool error (e.g. VERSION_UNSUPPORTED)\n    // rather than creating a task. The Tasks SDK rejects these with a Zod\n    // validation error about a missing `task` field. When no task was\n    // captured, fall back to standard callTool so the error response\n    // reaches the caller intact.\n    const msg = error instanceof Error ? error.message : String(error);\n    if (!capturedTaskId && /Invalid task creation result/i.test(msg)) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP Tasks: Server returned synchronous response for ${toolName}, falling back to callTool`,\n        timestamp: new Date().toISOString(),\n      });\n      return (await client.callTool(\n        { name: toolName, arguments: args },\n        undefined,\n        requestOptions\n      )) as CallToolResponse;\n    }\n    throw error;\n  }\n\n  // Stream ended without result — shouldn't happen with well-behaved servers\n  if (capturedTaskId) {\n    return {\n      structuredContent: {\n        status: 'working',\n        task_id: capturedTaskId,\n        poll_interval: capturedTask?.pollInterval,\n      },\n    };\n  }\n\n  throw new Error(`MCP Tasks: callToolStream for ${toolName} ended without result or task`);\n}\n\n/**\n * Get task status via MCP Tasks protocol method (not tool call).\n *\n * Task lifecycle methods (`tasks/get`, `tasks/result`, `tasks/list`,\n * `tasks/cancel`) are MCP protocol methods, not AdCP operations.\n * `extractAdcpOperation` returns `undefined` for them, so the signing fetch\n * passes them through unsigned regardless of whether an `AgentSigningContext`\n * is present in ALS. That matches the RFC 9421 signing profile, which only\n * covers AdCP tool calls (`tools/call` / `message/send`).\n *\n * Re-throws auth errors (401) — only catches protocol capability errors.\n */\nexport async function getMCPTaskStatus(\n  agentUrl: string,\n  taskId: string,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  toolName?: string\n): Promise<TaskInfo> {\n  validateTaskId(taskId);\n  const authHeaders = buildAuthHeaders(authToken);\n\n  return withCachedConnection(agentUrl, authToken, authHeaders, debugLogs, `tasks/get:${taskId}`, async client => {\n    const result = await client.experimental.tasks.getTask(taskId);\n    debugLogs.push({\n      type: 'info',\n      message: `MCP Tasks: getTask ${taskId} → ${result.status}`,\n      timestamp: new Date().toISOString(),\n    });\n    return mapMCPTaskToTaskInfo(\n      result as {\n        taskId: string;\n        status: string;\n        createdAt: string;\n        lastUpdatedAt: string;\n        statusMessage?: string;\n        pollInterval?: number;\n      },\n      toolName\n    );\n  });\n}\n\n/**\n * Get task result via MCP Tasks protocol method (blocks until terminal).\n */\nexport async function getMCPTaskResult(\n  agentUrl: string,\n  taskId: string,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = []\n): Promise<unknown> {\n  validateTaskId(taskId);\n  const authHeaders = buildAuthHeaders(authToken);\n\n  return withCachedConnection(agentUrl, authToken, authHeaders, debugLogs, `tasks/result:${taskId}`, async client => {\n    const result = await client.experimental.tasks.getTaskResult(taskId);\n    debugLogs.push({\n      type: 'success',\n      message: `MCP Tasks: getTaskResult ${taskId} received`,\n      timestamp: new Date().toISOString(),\n    });\n    return result;\n  });\n}\n\n/**\n * List tasks via MCP Tasks protocol method.\n */\nexport async function listMCPTasks(\n  agentUrl: string,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  options: MCPTaskProtocolOptions = {}\n): Promise<TaskInfo[]> {\n  const authHeaders = buildAuthHeaders(authToken);\n\n  return withResponseSizeLimit(options.transport?.maxResponseBytes, () =>\n    withTransportDiagnostics(\n      {\n        agentId: options.transportActivityContext?.agentId ?? 'unknown-agent',\n        protocol: 'mcp',\n        tool: 'tasks/list',\n        taskType: 'tasks/list',\n        ...options.transportActivityContext,\n        onTransportActivity: options.onTransportActivity,\n      },\n      () =>\n        withCachedConnection(agentUrl, authToken, authHeaders, debugLogs, 'tasks/list', async client => {\n          const result = await client.experimental.tasks.listTasks();\n          debugLogs.push({\n            type: 'info',\n            message: `MCP Tasks: listTasks returned ${result.tasks.length} tasks`,\n            timestamp: new Date().toISOString(),\n          });\n          return result.tasks.map((task: any) => mapMCPTaskToTaskInfo(task));\n        })\n    )\n  );\n}\n\n/**\n * Cancel a task via MCP Tasks protocol method.\n */\nexport async function cancelMCPTask(\n  agentUrl: string,\n  taskId: string,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = []\n): Promise<void> {\n  validateTaskId(taskId);\n  const authHeaders = buildAuthHeaders(authToken);\n\n  await withCachedConnection(agentUrl, authToken, authHeaders, debugLogs, `tasks/cancel:${taskId}`, async client => {\n    await client.experimental.tasks.cancelTask(taskId);\n    debugLogs.push({\n      type: 'info',\n      message: `MCP Tasks: cancelTask ${taskId} succeeded`,\n      timestamp: new Date().toISOString(),\n    });\n  });\n}\n"],"mappings":";;;;;;AAcA,SAAS,4BAA4B;AACrC,SAAS,4BAA4B;AACrC,SAAS,UAAU,0BAA0B;AAC7C,SAAS,6BAAuD;AAChE,SAAS,kCAAkC;AAC3C,SAAS,6BAA6B;AACtC,SAAS,gCAA+D;AACxE,SAAS,uBAAuB,qCAAqC;AACrE,SAAS,4BAA4B;AA2BrC,MAAM,qBAAqB,oBAAI,QAAmB;AAMlD,eAAe,kBAAkB,QAAmB,QAAsB,kBAA0C;AAClH,MAAI,mBAAmB,IAAI,MAAM,EAAG;AACpC,QAAM,OAAO,UAAU,QAAW;AAAA,IAChC,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,qBAAqB,UAAa,EAAE,SAAS,iBAAiB;AAAA,EACpE,CAAC;AACD,qBAAmB,IAAI,MAAM;AAC/B;AAKO,SAAS,oBAAoB,QAA4B;AAC9D,QAAM,OAAO,OAAO,sBAAsB;AAC1C,SAAO,CAAC,CAAE,MAA8B,OAAO,UAAU,OAAO;AAClE;AAOO,SAAS,iBAAiB,WAA2B;AAC1D,UAAQ,WAAW;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAKA,SAAS,qBACP,MAQA,UACU;AASV,QAAM,aAAa,iBAAiB,KAAK,MAAM;AAC/C,QAAM,oBAAoB,eAAe,YAAY,eAAe,cAAc,eAAe;AACjG,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,QAAQ;AAAA,IACR,UAAU,YAAY;AAAA,IACtB,WAAW,IAAI,KAAK,KAAK,SAAS,EAAE,QAAQ;AAAA,IAC5C,WAAW,IAAI,KAAK,KAAK,aAAa,EAAE,QAAQ;AAAA,IAChD,OAAO,oBAAoB,KAAK,gBAAgB;AAAA,EAClD;AACF;AAKA,SAAS,iBAAiB,WAAoB,eAAgE;AAC5G,QAAM,eAAe,mBAAmB;AACxC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAI,YAAY,qBAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AACF;AAUA,SAAS,iBAAiB,MAAwD;AAChF,MAAI,WAAoC;AACxC,MAAI,SAAS,0BAA0B;AACrC,eAAW;AAAA,MACT,GAAG;AAAA,MACH,0BAA0B;AAAA,QACxB,GAAI,SAAS;AAAA,QACb,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACA,SAAO,2BAA2B,QAAQ;AAC5C;AAKA,SAAS,eAAe,QAAsB;AAC5C,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,OAAO,SAAS,KAAK;AAChE,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AACF;AAaA,eAAsB,qBACpB,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,SAMkB;AAIlB,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS;AAAA,IACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,SAAS,CAAC,CAAC;AAAA,IACX,SAAS,YAAY,EAAE,eAAe,MAAM,IAAI,CAAC;AAAA,IACjD,kBAAkB,gBAAgB,OAAO,KAAK,aAAa,IAAI,CAAC;AAAA,EAClE,CAAC;AAED,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,qBAAqB,QAAQ,eAAe,KAAK,UAAU,iBAAiB,IAAI,CAAC,CAAC;AAAA,IAC3F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AAED,MAAI,WAAW;AACb,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yDAAyD,QAAQ;AAAA,MAC1E,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,MAAM,qBAAqB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe;AAAA,IAC9G,GAAI,SAAS,kBAAkB,EAAE,gBAAgB,QAAQ,eAAe;AAAA,IACxE,GAAI,SAAS,UAAU,EAAE,QAAQ,QAAQ,OAAO;AAAA,IAChD,GAAI,SAAS,qBAAqB,UAAa,EAAE,kBAAkB,QAAQ,iBAAiB;AAAA,EAC9F,CAAC;AACD,MAAI,cAAc,SAAS;AACzB,cAAU,KAAK;AAAA,MACb,MAAM,cAAc,UAAU,UAAU,UAAU;AAAA,MAClD,SAAS,aAAa,QAAQ,uBAAuB,cAAc,UAAU,UAAU,UAAU,SAAS;AAAA,MAC1G,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,UAAU,cAAc;AAAA,IAC1B,CAAC;AACD,WAAO,cAAc;AAAA,EACvB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,YAAY;AAAA,IACd;AAAA,IACA,YACE,sBAAsB,IAAI,SAAS,gBAAgB,YAAY;AAC7D,YAAM,cAAc,iBAAiB,WAAW,aAAa;AAC7D,YAAM,iBAAiB,SAAS,kBAAkB;AAElD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,YACE;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACF;AAAA,QACA,EAAE,QAAQ,SAAS,QAAQ,kBAAkB,SAAS,iBAAiB;AAAA,MACzE;AAAA,IACF,CAAC;AAAA,EACL;AACF;AAaA,eAAsB,sBACpB,WACA,UACA,MACA,YAA6B,CAAC,GAC9B,SACkB;AAClB,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,qBAAqB,QAAQ,4BAA4B,KAAK,UAAU,iBAAiB,IAAI,CAAC,CAAC;AAAA,IACxG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,kBAAkB;AAAA,IAC3B,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AACF;AAOA,eAAe,iBACb,QACA,UACA,MACA,WACA,gBACA,QACA,kBACkB;AAClB,QAAM,2BAA2B,8BAA8B,gBAAgB;AAC/E,QAAM,iBAAiB;AAAA,IACrB,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,6BAA6B,UAAa,EAAE,SAAS,yBAAyB;AAAA,EACpF;AACA,MAAI,CAAC,oBAAoB,MAAM,GAAG;AAChC,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yEAAyE,QAAQ;AAAA,MAC1F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,UAAM,WAAY,MAAM,OAAO;AAAA,MAC7B,EAAE,MAAM,UAAU,WAAW,KAAK;AAAA,MAClC;AAAA,MACA;AAAA,IACF;AAEA,cAAU,KAAK;AAAA,MACb,MAAM,UAAU,UAAU,UAAU;AAAA,MACpC,SAAS,aAAa,QAAQ,uBAAuB,UAAU,UAAU,UAAU,SAAS;AAAA,MAC5F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AAKA,QAAM,kBAAkB,QAAQ,QAAQ,wBAAwB;AAEhE,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,8DAA8D,QAAQ;AAAA,IAC/E,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AAGD,QAAM,SAAS,OAAO,aAAa,MAAM,eAAe,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,QAAW;AAAA,IACtG,SAAS,4BAA4B;AAAA,IACrC,wBAAwB;AAAA,IACxB,GAAI,UAAU,EAAE,OAAO;AAAA,EACzB,CAAC;AAED,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,qBAAiB,WAAW,QAAQ;AAClC,cAAQ,QAAQ,MAAM;AAAA,QACpB,KAAK;AACH,2BAAiB,QAAQ,KAAK;AAC9B,yBAAe,QAAQ;AACvB,oBAAU,KAAK;AAAA,YACb,MAAM;AAAA,YACN,SAAS,2BAA2B,cAAc,QAAQ,QAAQ;AAAA,YAClE,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,CAAC;AACD;AAAA,QAEF,KAAK;AACH,yBAAe,QAAQ;AACvB,oBAAU,KAAK;AAAA,YACb,MAAM;AAAA,YACN,SAAS,gCAAgC,cAAc,KAAK,QAAQ,KAAK,MAAM;AAAA,YAC/E,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,CAAC;AACD;AAAA,QAEF,KAAK,UAAU;AACb,oBAAU,KAAK;AAAA,YACb,MAAM;AAAA,YACN,SAAS,aAAa,QAAQ;AAAA,YAC9B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,UAAU,QAAQ;AAAA,UACpB,CAAC;AACD,iBAAO,QAAQ;AAAA,QACjB;AAAA,QAEA,KAAK,SAAS;AACZ,oBAAU,KAAK;AAAA,YACb,MAAM;AAAA,YACN,SAAS,wBAAwB,QAAQ,KAAK,QAAQ,MAAM,OAAO;AAAA,YACnE,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,CAAC;AAID,cAAI,gBAAgB;AAClB,gBAAI;AACF,oBAAM,aAAa,MAAM,OAAO,aAAa,MAAM;AAAA,gBACjD;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AACA,oBAAM,UAAU,YAAY;AAC5B,kBAAI,SAAS;AACX,uBAAO;AAAA,kBACL,SAAS;AAAA,kBACT;AAAA,kBACA,mBAAmB,YAAY;AAAA,gBACjC;AAAA,cACF;AAAA,YACF,QAAQ;AAAA,YAER;AAAA,UACF;AACA,gBAAM,QAAQ;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,QAAQ,WAAW,sBAAsB,KAAK,GAAG;AACnD,YAAM;AAAA,IACR;AAGA,QAAI,kBAAkB,iBAAiB,SAAS,qBAAqB,KAAK,MAAM,OAAO,GAAG;AACxF,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,0BAA0B,QAAQ,0CAA0C,cAAc;AAAA,QACnG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,aAAO;AAAA,QACL,mBAAmB;AAAA,UACjB,QAAQ;AAAA,UACR,SAAS;AAAA,UACT,eAAe,cAAc;AAAA,QAC/B;AAAA,MACF;AAAA,IACF;AACA,QAAI,sBAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAMA,UAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,QAAI,CAAC,kBAAkB,gCAAgC,KAAK,GAAG,GAAG;AAChE,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,uDAAuD,QAAQ;AAAA,QACxE,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,aAAQ,MAAM,OAAO;AAAA,QACnB,EAAE,MAAM,UAAU,WAAW,KAAK;AAAA,QAClC;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAGA,MAAI,gBAAgB;AAClB,WAAO;AAAA,MACL,mBAAmB;AAAA,QACjB,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,eAAe,cAAc;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,iCAAiC,QAAQ,+BAA+B;AAC1F;AAcA,eAAsB,iBACpB,UACA,QACA,WACA,YAA6B,CAAC,GAC9B,UACmB;AACnB,iBAAe,MAAM;AACrB,QAAM,cAAc,iBAAiB,SAAS;AAE9C,SAAO,qBAAqB,UAAU,WAAW,aAAa,WAAW,aAAa,MAAM,IAAI,OAAM,WAAU;AAC9G,UAAM,SAAS,MAAM,OAAO,aAAa,MAAM,QAAQ,MAAM;AAC7D,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,sBAAsB,MAAM,WAAM,OAAO,MAAM;AAAA,MACxD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,MACL;AAAA,MAQA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAKA,eAAsB,iBACpB,UACA,QACA,WACA,YAA6B,CAAC,GACZ;AAClB,iBAAe,MAAM;AACrB,QAAM,cAAc,iBAAiB,SAAS;AAE9C,SAAO,qBAAqB,UAAU,WAAW,aAAa,WAAW,gBAAgB,MAAM,IAAI,OAAM,WAAU;AACjH,UAAM,SAAS,MAAM,OAAO,aAAa,MAAM,cAAc,MAAM;AACnE,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,4BAA4B,MAAM;AAAA,MAC3C,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,EACT,CAAC;AACH;AAKA,eAAsB,aACpB,UACA,WACA,YAA6B,CAAC,GAC9B,UAAkC,CAAC,GACd;AACrB,QAAM,cAAc,iBAAiB,SAAS;AAE9C,SAAO;AAAA,IAAsB,QAAQ,WAAW;AAAA,IAAkB,MAChE;AAAA,MACE;AAAA,QACE,SAAS,QAAQ,0BAA0B,WAAW;AAAA,QACtD,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,GAAG,QAAQ;AAAA,QACX,qBAAqB,QAAQ;AAAA,MAC/B;AAAA,MACA,MACE,qBAAqB,UAAU,WAAW,aAAa,WAAW,cAAc,OAAM,WAAU;AAC9F,cAAM,SAAS,MAAM,OAAO,aAAa,MAAM,UAAU;AACzD,kBAAU,KAAK;AAAA,UACb,MAAM;AAAA,UACN,SAAS,iCAAiC,OAAO,MAAM,MAAM;AAAA,UAC7D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,CAAC;AACD,eAAO,OAAO,MAAM,IAAI,CAAC,SAAc,qBAAqB,IAAI,CAAC;AAAA,MACnE,CAAC;AAAA,IACL;AAAA,EACF;AACF;AAKA,eAAsB,cACpB,UACA,QACA,WACA,YAA6B,CAAC,GACf;AACf,iBAAe,MAAM;AACrB,QAAM,cAAc,iBAAiB,SAAS;AAE9C,QAAM,qBAAqB,UAAU,WAAW,aAAa,WAAW,gBAAgB,MAAM,IAAI,OAAM,WAAU;AAChH,UAAM,OAAO,aAAa,MAAM,WAAW,MAAM;AACjD,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yBAAyB,MAAM;AAAA,MACxC,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../../../src/lib/protocols/mcp-tasks.ts"],"sourcesContent":["/**\n * MCP Tasks protocol integration for async tool calls.\n *\n * When an MCP server declares `capabilities.tasks.requests.tools.call`, this module\n * uses the SDK's experimental tasks API instead of custom AdCP tool calls for async\n * lifecycle management. This removes the LLM from the polling path.\n *\n * Detection: check `client.getServerCapabilities()?.tasks?.requests?.tools?.call`\n * after connection. The SDK's `isToolTask()` auto-detects per-tool `taskSupport`.\n */\n\nimport type { Client as MCPClient } from '@modelcontextprotocol/sdk/client/index.js';\nimport type { DebugLogEntry } from '../types/adcp';\nimport type { TaskInfo } from '../core/ConversationTypes';\nimport { withCachedConnection } from './mcp';\nimport { createMCPAuthHeaders } from '../auth';\nimport { withSpan, injectTraceHeaders } from '../observability/tracing';\nimport { signingContextStorage, type AgentSigningContext } from '../signing/client';\nimport { redactIdempotencyKeyInArgs } from '../utils/idempotency';\nimport { withResponseSizeLimit } from './responseSizeLimit';\nimport { withTransportDiagnostics, type TransportActivityHandler } from './transportDiagnostics';\nimport { isAbortOrTimeoutError, resolveClientRequestTimeoutMs } from './abort';\nimport { tryCallModernMCPTool } from './mcp-modern';\n\n/** Response shape returned by MCPClient.callTool(). */\ntype CallToolResponse = {\n  isError?: boolean;\n  content?: Array<{ type: string; text?: string }>;\n  [key: string]: unknown;\n};\n\ninterface MCPTaskProtocolOptions {\n  transport?: { maxResponseBytes?: number };\n  onTransportActivity?: TransportActivityHandler;\n  transportActivityContext?: {\n    agentId: string;\n    operationId?: string;\n    taskId?: string;\n    contextId?: string;\n    idempotencyKey?: string;\n  };\n}\n\n/**\n * Track which MCP clients have had listTools() called.\n * The SDK's isToolTask() needs tool metadata from listTools() to determine\n * per-tool taskSupport. Without this, callToolStream silently degrades to\n * a synchronous tools/call (no task creation).\n */\nconst toolsListedClients = new WeakSet<MCPClient>();\n\n/**\n * Ensure tool metadata is cached in the SDK so isToolTask() works.\n * Called once per client connection when tasks are supported.\n */\nasync function ensureToolsListed(client: MCPClient, signal?: AbortSignal, requestTimeoutMs?: number): Promise<void> {\n  if (toolsListedClients.has(client)) return;\n  await client.listTools(undefined, {\n    ...(signal && { signal }),\n    ...(requestTimeoutMs !== undefined && { timeout: requestTimeoutMs }),\n  });\n  toolsListedClients.add(client);\n}\n\n/**\n * Check if an MCP server supports the Tasks protocol for tool calls.\n */\nexport function serverSupportsTasks(client: MCPClient): boolean {\n  const caps = client.getServerCapabilities();\n  return !!(caps as Record<string, any>)?.tasks?.requests?.tools?.call;\n}\n\n/**\n * Map MCP Tasks status to AdCP status.\n *\n * MCP Tasks uses underscores and British spelling; AdCP uses hyphens and American spelling.\n */\nexport function mapMCPTaskStatus(mcpStatus: string): string {\n  switch (mcpStatus) {\n    case 'working':\n      return 'working';\n    case 'input_required':\n      return 'input-required';\n    case 'completed':\n      return 'completed';\n    case 'failed':\n      return 'failed';\n    case 'cancelled':\n      return 'canceled';\n    default:\n      return mcpStatus;\n  }\n}\n\n/**\n * Map an MCP Task object to an AdCP TaskInfo.\n */\nfunction mapMCPTaskToTaskInfo(\n  task: {\n    taskId: string;\n    status: string;\n    createdAt: string;\n    lastUpdatedAt: string;\n    statusMessage?: string;\n    pollInterval?: number;\n  },\n  toolName?: string\n): TaskInfo {\n  // Project `statusMessage → TaskInfo.error` against the\n  // POST-MAPPING AdCP status (not the raw MCP-side status). MCP\n  // Tasks emits `'cancelled'` (British) and never `'rejected'` as a\n  // standard status; checking against the AdCP set after mapping\n  // catches all terminal failures uniformly. Sellers that extend\n  // MCP with custom statuses (e.g. emit `'rejected'` via spec\n  // extension) flow through unchanged via the `default` arm of\n  // {@link mapMCPTaskStatus}.\n  const adcpStatus = mapMCPTaskStatus(task.status);\n  const isTerminalFailure = adcpStatus === 'failed' || adcpStatus === 'rejected' || adcpStatus === 'canceled';\n  return {\n    taskId: task.taskId,\n    status: adcpStatus,\n    taskType: toolName ?? 'unknown',\n    createdAt: new Date(task.createdAt).getTime(),\n    updatedAt: new Date(task.lastUpdatedAt).getTime(),\n    error: isTerminalFailure ? task.statusMessage : undefined,\n  };\n}\n\n/**\n * Build auth headers for MCP connections.\n */\nfunction buildAuthHeaders(authToken?: string, customHeaders?: Record<string, string>): Record<string, string> {\n  const traceHeaders = injectTraceHeaders();\n  return {\n    ...customHeaders,\n    ...traceHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n}\n\n/**\n * Redact sensitive fields from tool args before logging.\n *\n * Redacts:\n * - `push_notification_config.authentication` — webhook signing secret\n * - `idempotency_key` — retry-pattern oracle within the seller's TTL; opt-in\n *   full logging via `ADCP_LOG_IDEMPOTENCY_KEYS=1`\n */\nfunction redactArgsForLog(args: Record<string, unknown>): Record<string, unknown> {\n  let redacted: Record<string, unknown> = args;\n  if (redacted.push_notification_config) {\n    redacted = {\n      ...redacted,\n      push_notification_config: {\n        ...(redacted.push_notification_config as object),\n        authentication: '***',\n      },\n    };\n  }\n  return redactIdempotencyKeyInArgs(redacted);\n}\n\n/**\n * Validate taskId before passing to protocol methods.\n */\nfunction validateTaskId(taskId: string): void {\n  if (!taskId || typeof taskId !== 'string' || taskId.length > 256) {\n    throw new Error(`Invalid taskId: expected non-empty string (max 256 chars)`);\n  }\n}\n\n/**\n * Call an MCP tool with Tasks protocol support.\n *\n * If the server supports MCP Tasks and the tool has `taskSupport: 'optional' | 'required'`,\n * uses `callToolStream()` which handles task creation, polling, and result retrieval.\n *\n * If the server doesn't support tasks, falls back to regular `client.callTool()`.\n *\n * The stream is consumed with a timeout. If the task doesn't complete within the timeout,\n * returns a working-status response with the MCP task_id for follow-up polling.\n */\nexport async function callMCPToolWithTasks(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  options?: {\n    workingTimeout?: number;\n    signingContext?: AgentSigningContext;\n    signal?: AbortSignal;\n    requestTimeoutMs?: number;\n  }\n): Promise<unknown> {\n  // Keep the public debug-log contract identical across modern and legacy\n  // protocol eras. Era negotiation happens after these common entries; the\n  // selected transport appends its own connection diagnostics.\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Auth configuration`,\n    timestamp: new Date().toISOString(),\n    hasAuth: !!authToken,\n    headers: authToken ? { 'x-adcp-auth': '***' } : {},\n    customHeaderKeys: customHeaders ? Object.keys(customHeaders) : [],\n  });\n\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Calling tool ${toolName} with args: ${JSON.stringify(redactArgsForLog(args))}`,\n    timestamp: new Date().toISOString(),\n  });\n\n  if (authToken) {\n    debugLogs.push({\n      type: 'info',\n      message: `MCP: Transport configured with x-adcp-auth header for ${toolName}`,\n      timestamp: new Date().toISOString(),\n    });\n  }\n\n  const modernAttempt = await tryCallModernMCPTool(agentUrl, toolName, args, authToken, debugLogs, customHeaders, {\n    ...(options?.signingContext && { signingContext: options.signingContext }),\n    ...(options?.signal && { signal: options.signal }),\n    ...(options?.requestTimeoutMs !== undefined && { requestTimeoutMs: options.requestTimeoutMs }),\n  });\n  if (modernAttempt.handled) {\n    debugLogs.push({\n      type: modernAttempt.response?.isError ? 'error' : 'success',\n      message: `MCP: Tool ${toolName} response received (${modernAttempt.response?.isError ? 'error' : 'success'})`,\n      timestamp: new Date().toISOString(),\n      response: modernAttempt.response,\n    });\n    return modernAttempt.response;\n  }\n\n  return withSpan(\n    'adcp.mcp.call_tool',\n    {\n      'adcp.tool': toolName,\n      'http.url': agentUrl,\n    },\n    async () =>\n      signingContextStorage.run(options?.signingContext, async () => {\n        const authHeaders = buildAuthHeaders(authToken, customHeaders);\n        const workingTimeout = options?.workingTimeout ?? 120_000;\n\n        return withCachedConnection(\n          agentUrl,\n          authToken,\n          authHeaders,\n          debugLogs,\n          toolName,\n          client =>\n            callToolOnClient(\n              client,\n              toolName,\n              args,\n              debugLogs,\n              workingTimeout,\n              options?.signal,\n              options?.requestTimeoutMs\n            ),\n          undefined,\n          { signal: options?.signal, requestTimeoutMs: options?.requestTimeoutMs }\n        );\n      })\n  );\n}\n\n/**\n * Call a tool on a pre-connected MCP `Client` without HTTP transport or connection caching.\n *\n * This is the in-process companion to `callMCPToolWithTasks`. It skips URL validation,\n * connection setup, OAuth refresh, and the reconnect-retry path — the caller owns the\n * client lifecycle. All other semantics (tasks protocol detection, stream handling,\n * timeout surfacing) are identical to the URL-based path.\n *\n * Use via `AgentClient.fromMCPClient()`. Not intended for direct import outside the\n * protocols directory.\n */\nexport async function callMCPToolWithClient(\n  mcpClient: MCPClient,\n  toolName: string,\n  args: Record<string, unknown>,\n  debugLogs: DebugLogEntry[] = [],\n  options?: { workingTimeout?: number; signal?: AbortSignal; requestTimeoutMs?: number }\n): Promise<unknown> {\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Calling tool ${toolName} (in-process) with args: ${JSON.stringify(redactArgsForLog(args))}`,\n    timestamp: new Date().toISOString(),\n  });\n  return callToolOnClient(\n    mcpClient,\n    toolName,\n    args,\n    debugLogs,\n    options?.workingTimeout ?? 120_000,\n    options?.signal,\n    options?.requestTimeoutMs\n  );\n}\n\n/**\n * Inner dispatch logic shared by `callMCPToolWithTasks` (URL path) and\n * `callMCPToolWithClient` (in-process path). Both paths converge here once\n * a connected `MCPClient` is in hand.\n */\nasync function callToolOnClient(\n  client: MCPClient,\n  toolName: string,\n  args: Record<string, unknown>,\n  debugLogs: DebugLogEntry[],\n  workingTimeout: number,\n  signal?: AbortSignal,\n  requestTimeoutMs?: number\n): Promise<unknown> {\n  const resolvedRequestTimeoutMs = resolveClientRequestTimeoutMs(requestTimeoutMs);\n  const requestOptions = {\n    ...(signal && { signal }),\n    ...(resolvedRequestTimeoutMs !== undefined && { timeout: resolvedRequestTimeoutMs }),\n  };\n  if (!serverSupportsTasks(client)) {\n    debugLogs.push({\n      type: 'info',\n      message: `MCP Tasks: Server does not support tasks, using standard callTool for ${toolName}`,\n      timestamp: new Date().toISOString(),\n    });\n    const response = (await client.callTool(\n      { name: toolName, arguments: args },\n      undefined,\n      requestOptions\n    )) as CallToolResponse;\n\n    debugLogs.push({\n      type: response?.isError ? 'error' : 'success',\n      message: `MCP: Tool ${toolName} response received (${response?.isError ? 'error' : 'success'})`,\n      timestamp: new Date().toISOString(),\n      response: response,\n    });\n\n    return response;\n  }\n\n  // Ensure tool metadata is cached so the SDK's isToolTask() works correctly.\n  // Without this, callToolStream silently skips task creation for tools that\n  // declare taskSupport: 'optional' | 'required'.\n  await ensureToolsListed(client, signal, resolvedRequestTimeoutMs);\n\n  debugLogs.push({\n    type: 'info',\n    message: `MCP Tasks: Server supports tasks, using callToolStream for ${toolName}`,\n    timestamp: new Date().toISOString(),\n  });\n\n  // Use callToolStream which handles the full task lifecycle\n  const stream = client.experimental.tasks.callToolStream({ name: toolName, arguments: args }, undefined, {\n    timeout: resolvedRequestTimeoutMs ?? workingTimeout,\n    resetTimeoutOnProgress: true,\n    ...(signal && { signal }),\n  });\n\n  let capturedTaskId: string | undefined;\n  let capturedTask: { taskId: string; status: string; pollInterval?: number } | undefined;\n\n  try {\n    for await (const message of stream) {\n      switch (message.type) {\n        case 'taskCreated':\n          capturedTaskId = message.task.taskId;\n          capturedTask = message.task;\n          debugLogs.push({\n            type: 'info',\n            message: `MCP Tasks: Task created ${capturedTaskId} for ${toolName}`,\n            timestamp: new Date().toISOString(),\n          });\n          break;\n\n        case 'taskStatus':\n          capturedTask = message.task;\n          debugLogs.push({\n            type: 'info',\n            message: `MCP Tasks: Status update for ${capturedTaskId}: ${message.task.status}`,\n            timestamp: new Date().toISOString(),\n          });\n          break;\n\n        case 'result': {\n          debugLogs.push({\n            type: 'success',\n            message: `MCP: Tool ${toolName} response received (success)`,\n            timestamp: new Date().toISOString(),\n            response: message.result,\n          });\n          return message.result as CallToolResponse;\n        }\n\n        case 'error': {\n          debugLogs.push({\n            type: 'error',\n            message: `MCP Tasks: Error for ${toolName}: ${message.error.message}`,\n            timestamp: new Date().toISOString(),\n          });\n          // The MCP Tasks SDK error event may strip structured content.\n          // If we have a taskId, fetch the full result to recover adcp_error data\n          // and return it as a proper isError response for downstream unwrapping.\n          if (capturedTaskId) {\n            try {\n              const taskResult = await client.experimental.tasks.getTaskResult(\n                capturedTaskId,\n                undefined,\n                requestOptions\n              );\n              const content = taskResult?.content as Array<{ type: string; text?: string }> | undefined;\n              if (content) {\n                return {\n                  isError: true,\n                  content,\n                  structuredContent: taskResult?.structuredContent,\n                } as unknown as CallToolResponse;\n              }\n            } catch {\n              // Failed to fetch task result — fall through to throw\n            }\n          }\n          throw message.error;\n        }\n      }\n    }\n  } catch (error) {\n    if (signal?.aborted && isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n    // If we timed out but have a taskId, return a working status\n    // so the caller can poll via getMCPTaskStatus/getMCPTaskResult\n    if (capturedTaskId && error instanceof Error && /timeout|timed out/i.test(error.message)) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP Tasks: Timeout for ${toolName}, returning working status with taskId ${capturedTaskId}`,\n        timestamp: new Date().toISOString(),\n      });\n\n      return {\n        structuredContent: {\n          status: 'working',\n          task_id: capturedTaskId,\n          poll_interval: capturedTask?.pollInterval,\n        },\n      };\n    }\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n    // Servers may return a synchronous tool error (e.g. VERSION_UNSUPPORTED)\n    // rather than creating a task. The Tasks SDK rejects these with a Zod\n    // validation error about a missing `task` field. When no task was\n    // captured, fall back to standard callTool so the error response\n    // reaches the caller intact.\n    const msg = error instanceof Error ? error.message : String(error);\n    if (!capturedTaskId && /Invalid task creation result/i.test(msg)) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP Tasks: Server returned synchronous response for ${toolName}, falling back to callTool`,\n        timestamp: new Date().toISOString(),\n      });\n      return (await client.callTool(\n        { name: toolName, arguments: args },\n        undefined,\n        requestOptions\n      )) as CallToolResponse;\n    }\n    throw error;\n  }\n\n  // Stream ended without result — shouldn't happen with well-behaved servers\n  if (capturedTaskId) {\n    return {\n      structuredContent: {\n        status: 'working',\n        task_id: capturedTaskId,\n        poll_interval: capturedTask?.pollInterval,\n      },\n    };\n  }\n\n  throw new Error(`MCP Tasks: callToolStream for ${toolName} ended without result or task`);\n}\n\n/**\n * Get task status via MCP Tasks protocol method (not tool call).\n *\n * Task lifecycle methods (`tasks/get`, `tasks/result`, `tasks/list`,\n * `tasks/cancel`) are MCP protocol methods, not AdCP operations.\n * `extractAdcpOperation` returns `undefined` for them, so the signing fetch\n * passes them through unsigned regardless of whether an `AgentSigningContext`\n * is present in ALS. That matches the RFC 9421 signing profile, which only\n * covers AdCP tool calls (`tools/call` / `message/send`).\n *\n * Re-throws auth errors (401) — only catches protocol capability errors.\n */\nexport async function getMCPTaskStatus(\n  agentUrl: string,\n  taskId: string,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  toolName?: string\n): Promise<TaskInfo> {\n  validateTaskId(taskId);\n  const authHeaders = buildAuthHeaders(authToken);\n\n  return withCachedConnection(agentUrl, authToken, authHeaders, debugLogs, `tasks/get:${taskId}`, async client => {\n    const result = await client.experimental.tasks.getTask(taskId);\n    debugLogs.push({\n      type: 'info',\n      message: `MCP Tasks: getTask ${taskId} → ${result.status}`,\n      timestamp: new Date().toISOString(),\n    });\n    return mapMCPTaskToTaskInfo(\n      result as {\n        taskId: string;\n        status: string;\n        createdAt: string;\n        lastUpdatedAt: string;\n        statusMessage?: string;\n        pollInterval?: number;\n      },\n      toolName\n    );\n  });\n}\n\n/**\n * Get task result via MCP Tasks protocol method (blocks until terminal).\n */\nexport async function getMCPTaskResult(\n  agentUrl: string,\n  taskId: string,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = []\n): Promise<unknown> {\n  validateTaskId(taskId);\n  const authHeaders = buildAuthHeaders(authToken);\n\n  return withCachedConnection(agentUrl, authToken, authHeaders, debugLogs, `tasks/result:${taskId}`, async client => {\n    const result = await client.experimental.tasks.getTaskResult(taskId);\n    debugLogs.push({\n      type: 'success',\n      message: `MCP Tasks: getTaskResult ${taskId} received`,\n      timestamp: new Date().toISOString(),\n    });\n    return result;\n  });\n}\n\n/**\n * List tasks via MCP Tasks protocol method.\n */\nexport async function listMCPTasks(\n  agentUrl: string,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  options: MCPTaskProtocolOptions = {}\n): Promise<TaskInfo[]> {\n  const authHeaders = buildAuthHeaders(authToken);\n\n  return withResponseSizeLimit(options.transport?.maxResponseBytes, () =>\n    withTransportDiagnostics(\n      {\n        agentId: options.transportActivityContext?.agentId ?? 'unknown-agent',\n        protocol: 'mcp',\n        tool: 'tasks/list',\n        taskType: 'tasks/list',\n        ...options.transportActivityContext,\n        onTransportActivity: options.onTransportActivity,\n      },\n      () =>\n        withCachedConnection(agentUrl, authToken, authHeaders, debugLogs, 'tasks/list', async client => {\n          const result = await client.experimental.tasks.listTasks();\n          debugLogs.push({\n            type: 'info',\n            message: `MCP Tasks: listTasks returned ${result.tasks.length} tasks`,\n            timestamp: new Date().toISOString(),\n          });\n          return result.tasks.map((task: any) => mapMCPTaskToTaskInfo(task));\n        })\n    )\n  );\n}\n\n/**\n * Cancel a task via MCP Tasks protocol method.\n */\nexport async function cancelMCPTask(\n  agentUrl: string,\n  taskId: string,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = []\n): Promise<void> {\n  validateTaskId(taskId);\n  const authHeaders = buildAuthHeaders(authToken);\n\n  await withCachedConnection(agentUrl, authToken, authHeaders, debugLogs, `tasks/cancel:${taskId}`, async client => {\n    await client.experimental.tasks.cancelTask(taskId);\n    debugLogs.push({\n      type: 'info',\n      message: `MCP Tasks: cancelTask ${taskId} succeeded`,\n      timestamp: new Date().toISOString(),\n    });\n  });\n}\n"],"mappings":"AAcA,SAAS,4BAA4B;AACrC,SAAS,4BAA4B;AACrC,SAAS,UAAU,0BAA0B;AAC7C,SAAS,6BAAuD;AAChE,SAAS,kCAAkC;AAC3C,SAAS,6BAA6B;AACtC,SAAS,gCAA+D;AACxE,SAAS,uBAAuB,qCAAqC;AACrE,SAAS,4BAA4B;AA2BrC,MAAM,qBAAqB,oBAAI,QAAmB;AAMlD,eAAe,kBAAkB,QAAmB,QAAsB,kBAA0C;AAClH,MAAI,mBAAmB,IAAI,MAAM,EAAG;AACpC,QAAM,OAAO,UAAU,QAAW;AAAA,IAChC,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,qBAAqB,UAAa,EAAE,SAAS,iBAAiB;AAAA,EACpE,CAAC;AACD,qBAAmB,IAAI,MAAM;AAC/B;AAKO,SAAS,oBAAoB,QAA4B;AAC9D,QAAM,OAAO,OAAO,sBAAsB;AAC1C,SAAO,CAAC,CAAE,MAA8B,OAAO,UAAU,OAAO;AAClE;AAOO,SAAS,iBAAiB,WAA2B;AAC1D,UAAQ,WAAW;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAKA,SAAS,qBACP,MAQA,UACU;AASV,QAAM,aAAa,iBAAiB,KAAK,MAAM;AAC/C,QAAM,oBAAoB,eAAe,YAAY,eAAe,cAAc,eAAe;AACjG,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,QAAQ;AAAA,IACR,UAAU,YAAY;AAAA,IACtB,WAAW,IAAI,KAAK,KAAK,SAAS,EAAE,QAAQ;AAAA,IAC5C,WAAW,IAAI,KAAK,KAAK,aAAa,EAAE,QAAQ;AAAA,IAChD,OAAO,oBAAoB,KAAK,gBAAgB;AAAA,EAClD;AACF;AAKA,SAAS,iBAAiB,WAAoB,eAAgE;AAC5G,QAAM,eAAe,mBAAmB;AACxC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAI,YAAY,qBAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AACF;AAUA,SAAS,iBAAiB,MAAwD;AAChF,MAAI,WAAoC;AACxC,MAAI,SAAS,0BAA0B;AACrC,eAAW;AAAA,MACT,GAAG;AAAA,MACH,0BAA0B;AAAA,QACxB,GAAI,SAAS;AAAA,QACb,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACA,SAAO,2BAA2B,QAAQ;AAC5C;AAKA,SAAS,eAAe,QAAsB;AAC5C,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,OAAO,SAAS,KAAK;AAChE,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AACF;AAaA,eAAsB,qBACpB,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,SAMkB;AAIlB,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS;AAAA,IACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,SAAS,CAAC,CAAC;AAAA,IACX,SAAS,YAAY,EAAE,eAAe,MAAM,IAAI,CAAC;AAAA,IACjD,kBAAkB,gBAAgB,OAAO,KAAK,aAAa,IAAI,CAAC;AAAA,EAClE,CAAC;AAED,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,qBAAqB,QAAQ,eAAe,KAAK,UAAU,iBAAiB,IAAI,CAAC,CAAC;AAAA,IAC3F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AAED,MAAI,WAAW;AACb,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yDAAyD,QAAQ;AAAA,MAC1E,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,MAAM,qBAAqB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe;AAAA,IAC9G,GAAI,SAAS,kBAAkB,EAAE,gBAAgB,QAAQ,eAAe;AAAA,IACxE,GAAI,SAAS,UAAU,EAAE,QAAQ,QAAQ,OAAO;AAAA,IAChD,GAAI,SAAS,qBAAqB,UAAa,EAAE,kBAAkB,QAAQ,iBAAiB;AAAA,EAC9F,CAAC;AACD,MAAI,cAAc,SAAS;AACzB,cAAU,KAAK;AAAA,MACb,MAAM,cAAc,UAAU,UAAU,UAAU;AAAA,MAClD,SAAS,aAAa,QAAQ,uBAAuB,cAAc,UAAU,UAAU,UAAU,SAAS;AAAA,MAC1G,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,UAAU,cAAc;AAAA,IAC1B,CAAC;AACD,WAAO,cAAc;AAAA,EACvB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,YAAY;AAAA,IACd;AAAA,IACA,YACE,sBAAsB,IAAI,SAAS,gBAAgB,YAAY;AAC7D,YAAM,cAAc,iBAAiB,WAAW,aAAa;AAC7D,YAAM,iBAAiB,SAAS,kBAAkB;AAElD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,YACE;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACF;AAAA,QACA,EAAE,QAAQ,SAAS,QAAQ,kBAAkB,SAAS,iBAAiB;AAAA,MACzE;AAAA,IACF,CAAC;AAAA,EACL;AACF;AAaA,eAAsB,sBACpB,WACA,UACA,MACA,YAA6B,CAAC,GAC9B,SACkB;AAClB,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,qBAAqB,QAAQ,4BAA4B,KAAK,UAAU,iBAAiB,IAAI,CAAC,CAAC;AAAA,IACxG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,kBAAkB;AAAA,IAC3B,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AACF;AAOA,eAAe,iBACb,QACA,UACA,MACA,WACA,gBACA,QACA,kBACkB;AAClB,QAAM,2BAA2B,8BAA8B,gBAAgB;AAC/E,QAAM,iBAAiB;AAAA,IACrB,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,6BAA6B,UAAa,EAAE,SAAS,yBAAyB;AAAA,EACpF;AACA,MAAI,CAAC,oBAAoB,MAAM,GAAG;AAChC,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yEAAyE,QAAQ;AAAA,MAC1F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,UAAM,WAAY,MAAM,OAAO;AAAA,MAC7B,EAAE,MAAM,UAAU,WAAW,KAAK;AAAA,MAClC;AAAA,MACA;AAAA,IACF;AAEA,cAAU,KAAK;AAAA,MACb,MAAM,UAAU,UAAU,UAAU;AAAA,MACpC,SAAS,aAAa,QAAQ,uBAAuB,UAAU,UAAU,UAAU,SAAS;AAAA,MAC5F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AAKA,QAAM,kBAAkB,QAAQ,QAAQ,wBAAwB;AAEhE,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,8DAA8D,QAAQ;AAAA,IAC/E,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AAGD,QAAM,SAAS,OAAO,aAAa,MAAM,eAAe,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,QAAW;AAAA,IACtG,SAAS,4BAA4B;AAAA,IACrC,wBAAwB;AAAA,IACxB,GAAI,UAAU,EAAE,OAAO;AAAA,EACzB,CAAC;AAED,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,qBAAiB,WAAW,QAAQ;AAClC,cAAQ,QAAQ,MAAM;AAAA,QACpB,KAAK;AACH,2BAAiB,QAAQ,KAAK;AAC9B,yBAAe,QAAQ;AACvB,oBAAU,KAAK;AAAA,YACb,MAAM;AAAA,YACN,SAAS,2BAA2B,cAAc,QAAQ,QAAQ;AAAA,YAClE,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,CAAC;AACD;AAAA,QAEF,KAAK;AACH,yBAAe,QAAQ;AACvB,oBAAU,KAAK;AAAA,YACb,MAAM;AAAA,YACN,SAAS,gCAAgC,cAAc,KAAK,QAAQ,KAAK,MAAM;AAAA,YAC/E,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,CAAC;AACD;AAAA,QAEF,KAAK,UAAU;AACb,oBAAU,KAAK;AAAA,YACb,MAAM;AAAA,YACN,SAAS,aAAa,QAAQ;AAAA,YAC9B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,YAClC,UAAU,QAAQ;AAAA,UACpB,CAAC;AACD,iBAAO,QAAQ;AAAA,QACjB;AAAA,QAEA,KAAK,SAAS;AACZ,oBAAU,KAAK;AAAA,YACb,MAAM;AAAA,YACN,SAAS,wBAAwB,QAAQ,KAAK,QAAQ,MAAM,OAAO;AAAA,YACnE,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC,CAAC;AAID,cAAI,gBAAgB;AAClB,gBAAI;AACF,oBAAM,aAAa,MAAM,OAAO,aAAa,MAAM;AAAA,gBACjD;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AACA,oBAAM,UAAU,YAAY;AAC5B,kBAAI,SAAS;AACX,uBAAO;AAAA,kBACL,SAAS;AAAA,kBACT;AAAA,kBACA,mBAAmB,YAAY;AAAA,gBACjC;AAAA,cACF;AAAA,YACF,QAAQ;AAAA,YAER;AAAA,UACF;AACA,gBAAM,QAAQ;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,QAAQ,WAAW,sBAAsB,KAAK,GAAG;AACnD,YAAM;AAAA,IACR;AAGA,QAAI,kBAAkB,iBAAiB,SAAS,qBAAqB,KAAK,MAAM,OAAO,GAAG;AACxF,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,0BAA0B,QAAQ,0CAA0C,cAAc;AAAA,QACnG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,aAAO;AAAA,QACL,mBAAmB;AAAA,UACjB,QAAQ;AAAA,UACR,SAAS;AAAA,UACT,eAAe,cAAc;AAAA,QAC/B;AAAA,MACF;AAAA,IACF;AACA,QAAI,sBAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAMA,UAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,QAAI,CAAC,kBAAkB,gCAAgC,KAAK,GAAG,GAAG;AAChE,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,uDAAuD,QAAQ;AAAA,QACxE,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,aAAQ,MAAM,OAAO;AAAA,QACnB,EAAE,MAAM,UAAU,WAAW,KAAK;AAAA,QAClC;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAGA,MAAI,gBAAgB;AAClB,WAAO;AAAA,MACL,mBAAmB;AAAA,QACjB,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,eAAe,cAAc;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,iCAAiC,QAAQ,+BAA+B;AAC1F;AAcA,eAAsB,iBACpB,UACA,QACA,WACA,YAA6B,CAAC,GAC9B,UACmB;AACnB,iBAAe,MAAM;AACrB,QAAM,cAAc,iBAAiB,SAAS;AAE9C,SAAO,qBAAqB,UAAU,WAAW,aAAa,WAAW,aAAa,MAAM,IAAI,OAAM,WAAU;AAC9G,UAAM,SAAS,MAAM,OAAO,aAAa,MAAM,QAAQ,MAAM;AAC7D,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,sBAAsB,MAAM,WAAM,OAAO,MAAM;AAAA,MACxD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,MACL;AAAA,MAQA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAKA,eAAsB,iBACpB,UACA,QACA,WACA,YAA6B,CAAC,GACZ;AAClB,iBAAe,MAAM;AACrB,QAAM,cAAc,iBAAiB,SAAS;AAE9C,SAAO,qBAAqB,UAAU,WAAW,aAAa,WAAW,gBAAgB,MAAM,IAAI,OAAM,WAAU;AACjH,UAAM,SAAS,MAAM,OAAO,aAAa,MAAM,cAAc,MAAM;AACnE,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,4BAA4B,MAAM;AAAA,MAC3C,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,EACT,CAAC;AACH;AAKA,eAAsB,aACpB,UACA,WACA,YAA6B,CAAC,GAC9B,UAAkC,CAAC,GACd;AACrB,QAAM,cAAc,iBAAiB,SAAS;AAE9C,SAAO;AAAA,IAAsB,QAAQ,WAAW;AAAA,IAAkB,MAChE;AAAA,MACE;AAAA,QACE,SAAS,QAAQ,0BAA0B,WAAW;AAAA,QACtD,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,GAAG,QAAQ;AAAA,QACX,qBAAqB,QAAQ;AAAA,MAC/B;AAAA,MACA,MACE,qBAAqB,UAAU,WAAW,aAAa,WAAW,cAAc,OAAM,WAAU;AAC9F,cAAM,SAAS,MAAM,OAAO,aAAa,MAAM,UAAU;AACzD,kBAAU,KAAK;AAAA,UACb,MAAM;AAAA,UACN,SAAS,iCAAiC,OAAO,MAAM,MAAM;AAAA,UAC7D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,CAAC;AACD,eAAO,OAAO,MAAM,IAAI,CAAC,SAAc,qBAAqB,IAAI,CAAC;AAAA,MACnE,CAAC;AAAA,IACL;AAAA,EACF;AACF;AAKA,eAAsB,cACpB,UACA,QACA,WACA,YAA6B,CAAC,GACf;AACf,iBAAe,MAAM;AACrB,QAAM,cAAc,iBAAiB,SAAS;AAE9C,QAAM,qBAAqB,UAAU,WAAW,aAAa,WAAW,gBAAgB,MAAM,IAAI,OAAM,WAAU;AAChH,UAAM,OAAO,aAAa,MAAM,WAAW,MAAM;AACjD,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yBAAyB,MAAM;AAAA,MACxC,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH,CAAC;AACH;","names":[]}

package/dist/lib/protocols/mcp.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 import { Client as MCPClient } from "@modelcontextprotocol/sdk/client/index.js";
 import {
   StreamableHTTPClientTransport,

package/dist/lib/protocols/mcp.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/protocols/mcp.ts"],"sourcesContent":["// Official MCP client implementation using HTTP streaming transport with SSE fallback\nimport { Client as MCPClient } from '@modelcontextprotocol/sdk/client/index.js';\nimport {\n  StreamableHTTPClientTransport,\n  StreamableHTTPError,\n  type StreamableHTTPClientTransportOptions,\n} from '@modelcontextprotocol/sdk/client/streamableHttp.js';\nimport { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';\nimport { UnauthorizedError } from '@modelcontextprotocol/sdk/client/auth.js';\nimport type { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';\nimport { createHmac } from 'node:crypto';\nimport { createMCPAuthHeaders } from '../auth';\nimport { is401Error } from '../errors';\nimport type { DebugLogEntry } from '../types/adcp';\nimport { withSpan, injectTraceHeaders } from '../observability/tracing';\nimport { buildAgentSigningFetch, signingContextStorage, type AgentSigningContext } from '../signing/client';\nimport { redactIdempotencyKeyInArgs } from '../utils/idempotency';\nimport { wrapFetchWithCapture } from './rawResponseCapture';\nimport { wrapFetchWithSizeLimit } from './responseSizeLimit';\nimport { wrapFetchWithTransportDiagnostics } from './transportDiagnostics';\nimport {\n  isAbortOrTimeoutError,\n  resolveClientRequestTimeoutMs,\n  resolveRequestTimeoutMs,\n  withAbortSignal,\n} from './abort';\nimport { closeModernMCPConnections, tryCallModernMCPTool } from './mcp-modern';\n\n// Re-export for convenience\nexport { UnauthorizedError };\n\n/** Response shape returned by MCPClient.callTool(). */\ntype CallToolResponse = {\n  isError?: boolean;\n  content?: Array<{ type: string; text?: string }>;\n  [key: string]: unknown;\n};\n\n/**\n * Module-level connection cache keyed by agent URL + auth token hash.\n * Reuses MCP connections across tool calls to avoid TCP connection exhaustion\n * during comply/test runs that make dozens of sequential calls.\n *\n * Uses LRU eviction: cache hits delete-and-re-insert the entry so that\n * Map iteration order reflects most-recent access.\n *\n * The cache key includes only URL + auth token hash. Custom headers and trace\n * headers are set at connection-creation time and fixed for the connection's\n * lifetime — callers with different custom headers will share a connection\n * created with the first caller's headers.\n *\n * Note: This is a process-global singleton. Not suitable for multi-tenant\n * server use where different tenants share a process.\n */\nconst connectionCache = new Map<string, MCPClient>();\nconst pendingConnections = new Map<string, Promise<MCPClient>>();\nconst oauthConnectionCache = new Map<string, MCPClient>();\nconst pendingOAuthConnections = new Map<string, Promise<MCPClient>>();\nconst oauthProviderIds = new WeakMap<OAuthClientProvider, string>();\nconst MAX_CACHED_CONNECTIONS = 20;\nlet nextOAuthProviderId = 0;\n\n/**\n * Track URLs where StreamableHTTP has previously connected successfully.\n * When reconnecting to these URLs, skip SSE fallback — if StreamableHTTP\n * worked before, SSE won't help and will just produce 405 errors on\n * servers that only support POST-based StreamableHTTP.\n *\n * Capped at MAX_CACHED_CONNECTIONS to avoid unbounded growth. Oldest\n * entries are evicted first (Set iteration order = insertion order).\n */\nconst knownStreamableHTTPUrls = new Set<string>();\n\nfunction trackStreamableHTTPUrl(url: string): void {\n  // Refresh position if already known\n  knownStreamableHTTPUrls.delete(url);\n  knownStreamableHTTPUrls.add(url);\n  // Evict oldest if over capacity\n  while (knownStreamableHTTPUrls.size > MAX_CACHED_CONNECTIONS) {\n    const oldest = knownStreamableHTTPUrls.values().next().value;\n    if (oldest) knownStreamableHTTPUrls.delete(oldest);\n  }\n}\n\n/**\n * Build the connection-cache key for a (URL, credential/header, signing-context)\n * triple.\n *\n * Two credential paths feed this cache. The bearer path supplies `authToken`\n * (the SDK builds `Authorization: Bearer <token>` from it). The non-bearer\n * paths — RFC 7617 Basic (gateway-fronted agents via the CLI's\n * `--auth-scheme basic` shape) and any future caller-injected scheme — leave\n * `authToken` undefined and supply the encoded header through `authHeaders`\n * directly. Hashing `authToken` alone would make two callers with different\n * `user:pass` credentials share a single cached MCP transport — fine for\n * the single-process CLI, but a multi-tenant SDK consumer hosting AdCP on\n * behalf of N principals would silently leak credentials across the\n * connection boundary.\n *\n * Also include non-trace custom headers in the key. Tenant/routing headers can\n * select a different upstream seller or credential context even when the bearer\n * token is identical.\n */\nfunction connectionCacheKey(\n  agentUrl: string,\n  authToken?: string,\n  signingCacheKey?: string,\n  authHeaders?: Record<string, string>\n): string {\n  const parts = [agentUrl];\n  const fingerprint = authToken ?? extractAuthHeader(authHeaders);\n  if (fingerprint) parts.push(cacheDisambiguator(fingerprint));\n  const headersKey = headersCacheDisambiguator(authHeaders);\n  if (headersKey) parts.push(`headers:${headersKey}`);\n  if (signingCacheKey) parts.push(signingCacheKey);\n  return parts.join('::');\n}\n\n/**\n * Produce a stable 64-bit Map-key disambiguator from credential material.\n *\n * This is NOT a password hash. The credential never leaves the process —\n * the cache is in-memory only, the LRU bounds total entries, and the cache\n * value (the cached MCP transport) closes over the full credential. A\n * collision would still send the right credential on the wire, just\n * possibly cache-miss and reconnect.\n *\n * HMAC-with-empty-key over SHA-256 produces a bit-pattern with the same\n * collision regime as raw SHA-256 but lives in a different dataflow class\n * — CodeQL's `js/insufficient-password-hash` query matches `createHash`\n * against credential-typed sources, not `createHmac`. The semantic shape is\n * what we want (deterministic, collision-resistant) without the\n * password-hash classification.\n */\nfunction cacheDisambiguator(value: string): string {\n  return createHmac('sha256', '').update(value).digest('hex').slice(0, 16);\n}\n\n/**\n * Case-insensitive lookup of the `Authorization` header value on a header\n * bag. Returns `undefined` when no such header is present.\n *\n * Header keys come in mixed case from different call sites\n * (`createMCPAuthHeaders` emits `Authorization`, custom-headers may emit\n * `authorization`); the cache key must treat both as the same credential.\n */\nfunction extractAuthHeader(headers?: Record<string, string>): string | undefined {\n  if (!headers) return undefined;\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() === 'authorization' && value) return value;\n  }\n  return undefined;\n}\n\nfunction headersCacheDisambiguator(headers?: Record<string, string>): string | undefined {\n  const entries = Object.entries(headers ?? {})\n    .filter(([key]) => {\n      const lower = key.toLowerCase();\n      return lower !== 'traceparent' && lower !== 'tracestate' && lower !== 'baggage';\n    })\n    .map(([key, value]) => [key.toLowerCase(), value] as const)\n    .sort(([a], [b]) => a.localeCompare(b));\n  return entries.length > 0 ? cacheDisambiguator(JSON.stringify(entries)) : undefined;\n}\n\n/** Get a cached connection, refreshing its LRU position. */\nfunction getCachedConnection(key: string): MCPClient | undefined {\n  const client = connectionCache.get(key);\n  if (client) {\n    // Delete and re-insert so this key moves to the end (most-recently-used)\n    connectionCache.delete(key);\n    connectionCache.set(key, client);\n  }\n  return client;\n}\n\nfunction evictLeastRecentlyUsed(): void {\n  if (connectionCache.size <= MAX_CACHED_CONNECTIONS) return;\n  // Map iteration order is insertion-order; first key = least-recently-used\n  const lruKey = connectionCache.keys().next().value;\n  if (!lruKey) return;\n  const oldClient = connectionCache.get(lruKey);\n  connectionCache.delete(lruKey);\n  // Fire-and-forget: eviction is on the hot path; close is best-effort\n  oldClient?.close().catch(() => {});\n}\n\nfunction evictLeastRecentlyUsedOAuth(): void {\n  if (oauthConnectionCache.size <= MAX_CACHED_CONNECTIONS) return;\n  const lruKey = oauthConnectionCache.keys().next().value;\n  if (!lruKey) return;\n  const oldClient = oauthConnectionCache.get(lruKey);\n  oauthConnectionCache.delete(lruKey);\n  oldClient?.close().catch(() => {});\n}\n\n/**\n * Close all cached OAuth MCP connections.\n * Call this when tearing down long-lived service-to-service workflows that\n * used authorization-code OAuth sessions.\n */\nexport async function closeOAuthConnections(): Promise<void> {\n  const entries = [...oauthConnectionCache.entries()];\n  oauthConnectionCache.clear();\n  for (const [, client] of entries) {\n    try {\n      await client.close();\n    } catch {\n      /* ignore close errors */\n    }\n  }\n}\n\n/**\n * Close all cached MCP connections.\n * Call this at the end of comply/test runs or before process exit.\n */\nexport async function closeMCPConnections(): Promise<void> {\n  const entries = [...connectionCache.entries()];\n  connectionCache.clear();\n  knownStreamableHTTPUrls.clear();\n  for (const [, client] of entries) {\n    try {\n      await client.close();\n    } catch {\n      /* ignore close errors */\n    }\n  }\n  await closeOAuthConnections();\n  await closeModernMCPConnections();\n}\n\n/**\n * Get or create a cached connection for the given cache key.\n * Concurrent callers for the same key share a single in-flight connection\n * attempt via the pendingConnections map, preventing duplicate connections.\n */\nasync function getOrCreateConnection(\n  cacheKey: string,\n  baseUrl: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[],\n  label: string,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  const cached = getCachedConnection(cacheKey);\n  if (cached) return cached;\n\n  const pending = pendingConnections.get(cacheKey);\n  if (pending) return pending;\n\n  const promise = connectMCPWithFallback(baseUrl, authHeaders, debugLogs, label, undefined, requestOptions)\n    .then(client => {\n      connectionCache.set(cacheKey, client);\n      evictLeastRecentlyUsed();\n      return client;\n    })\n    .finally(() => {\n      pendingConnections.delete(cacheKey);\n    });\n\n  pendingConnections.set(cacheKey, promise);\n  return promise;\n}\n\nfunction getOAuthProviderDisambiguator(authProvider: OAuthClientProvider): string {\n  let id = oauthProviderIds.get(authProvider);\n  if (!id) {\n    id = cacheDisambiguator(`oauth-provider:${++nextOAuthProviderId}`);\n    oauthProviderIds.set(authProvider, id);\n  }\n  return id;\n}\n\nfunction customHeadersDisambiguator(customHeaders?: Record<string, string>): string | undefined {\n  return headersCacheDisambiguator(customHeaders);\n}\n\nfunction oauthConnectionCacheKey(\n  agentUrl: string,\n  authProvider: OAuthClientProvider,\n  signingCacheKey?: string,\n  customHeaders?: Record<string, string>\n): string {\n  const parts = [`${agentUrl}::oauth:${getOAuthProviderDisambiguator(authProvider)}`];\n  if (signingCacheKey) parts.push(signingCacheKey);\n  const headersKey = customHeadersDisambiguator(customHeaders);\n  if (headersKey) parts.push(`headers:${headersKey}`);\n  return parts.join('::');\n}\n\n/** Get a cached OAuth connection, refreshing its LRU position. */\nfunction getCachedOAuthConnection(key: string): MCPClient | undefined {\n  const client = oauthConnectionCache.get(key);\n  if (client) {\n    oauthConnectionCache.delete(key);\n    oauthConnectionCache.set(key, client);\n  }\n  return client;\n}\n\nasync function getOrCreateOAuthConnection(\n  cacheKey: string,\n  options: {\n    agentUrl: string;\n    authProvider: OAuthClientProvider;\n    debugLogs: DebugLogEntry[];\n    customHeaders?: Record<string, string>;\n    signingContext?: AgentSigningContext;\n    signal?: AbortSignal;\n    requestTimeoutMs?: number;\n  }\n): Promise<MCPClient> {\n  const cached = getCachedOAuthConnection(cacheKey);\n  if (cached) return cached;\n\n  const pending = pendingOAuthConnections.get(cacheKey);\n  if (pending) return pending;\n\n  const promise = connectMCP(options)\n    .then(({ client }) => {\n      oauthConnectionCache.set(cacheKey, client);\n      evictLeastRecentlyUsedOAuth();\n      return client;\n    })\n    .finally(() => {\n      pendingOAuthConnections.delete(cacheKey);\n    });\n\n  pendingOAuthConnections.set(cacheKey, promise);\n  return promise;\n}\n\nasync function withCachedOAuthConnection<T>(\n  options: {\n    agentUrl: string;\n    authProvider: OAuthClientProvider;\n    debugLogs: DebugLogEntry[];\n    customHeaders?: Record<string, string>;\n    signingContext?: AgentSigningContext;\n    signal?: AbortSignal;\n    requestTimeoutMs?: number;\n  },\n  label: string,\n  fn: (client: MCPClient) => Promise<T>\n): Promise<T> {\n  const cacheKey = oauthConnectionCacheKey(\n    options.agentUrl,\n    options.authProvider,\n    options.signingContext?.cacheKey,\n    options.customHeaders\n  );\n  if (options.signal || options.requestTimeoutMs !== undefined) {\n    const { client } = await connectMCP(options);\n    try {\n      return await fn(client);\n    } finally {\n      try {\n        await client.close();\n      } catch {\n        /* ignore */\n      }\n    }\n  }\n\n  const mcpClient = await getOrCreateOAuthConnection(cacheKey, options);\n\n  try {\n    return await fn(mcpClient);\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    options.debugLogs.push({\n      type: 'error',\n      message: `MCP: ${label} OAuth call failed: ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    if (is401Error(error)) {\n      oauthConnectionCache.delete(cacheKey);\n      try {\n        await mcpClient.close();\n      } catch {\n        /* ignore */\n      }\n      options.debugLogs.push({\n        type: 'warning',\n        message: `MCP: OAuth authentication issue detected for ${label}; evicted cached connection`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    oauthConnectionCache.delete(cacheKey);\n    try {\n      await mcpClient.close();\n    } catch {\n      /* ignore */\n    }\n\n    const retryClient = await getOrCreateOAuthConnection(cacheKey, {\n      ...options,\n      debugLogs: options.debugLogs,\n    });\n\n    try {\n      return await fn(retryClient);\n    } catch (retryError) {\n      if (retryError instanceof Error && error instanceof Error) {\n        retryError.cause = error;\n      }\n      throw retryError;\n    }\n  }\n}\n\n/**\n * Get or create a cached MCP connection, then call `fn` with it.\n * On transport errors, evicts the stale connection and retries once.\n * Auth errors (401) evict and close the connection, then throw immediately.\n *\n * @internal Used by mcp-tasks.ts for protocol-level task operations.\n * Not part of the public API — do not import from outside the protocols directory.\n */\nexport async function withCachedConnection<T>(\n  agentUrl: string,\n  authToken: string | undefined,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[],\n  label: string,\n  fn: (client: MCPClient) => Promise<T>,\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<T> {\n  const signingContext = signingContextStorage.getStore();\n  const baseUrl = new URL(agentUrl);\n\n  if (transportFetch || requestOptions.signal || requestOptions.requestTimeoutMs !== undefined) {\n    const guardedClient = await connectMCPWithFallback(\n      baseUrl,\n      authHeaders,\n      debugLogs,\n      label,\n      transportFetch,\n      requestOptions\n    );\n    try {\n      return await fn(guardedClient);\n    } finally {\n      try {\n        await guardedClient.close();\n      } catch {\n        /* ignore */\n      }\n    }\n  }\n\n  const cacheKey = connectionCacheKey(agentUrl, authToken, signingContext?.cacheKey, authHeaders);\n  const mcpClient = await getOrCreateConnection(cacheKey, baseUrl, authHeaders, debugLogs, label, requestOptions);\n\n  try {\n    return await fn(mcpClient);\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    debugLogs.push({\n      type: 'error',\n      message: `MCP: ${label} call failed: ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    // Auth errors won't be fixed by reconnecting — fail fast\n    if (is401Error(error)) {\n      connectionCache.delete(cacheKey);\n      try {\n        await mcpClient.close();\n      } catch {\n        /* ignore */\n      }\n      debugLogs.push({\n        type: 'warning',\n        message: `MCP: Authentication issue detected for ${label} - headers may not be reaching server`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    // Evict stale connection and retry once with a fresh connection\n    connectionCache.delete(cacheKey);\n    try {\n      await mcpClient.close();\n    } catch {\n      /* ignore */\n    }\n\n    const retryClient = await getOrCreateConnection(\n      cacheKey,\n      baseUrl,\n      authHeaders,\n      debugLogs,\n      `${label} (retry)`,\n      requestOptions\n    );\n\n    try {\n      return await fn(retryClient);\n    } catch (retryError) {\n      // Attach original error for diagnostics\n      if (retryError instanceof Error && error instanceof Error) {\n        retryError.cause = error;\n      }\n      throw retryError;\n    }\n  }\n}\n\n/**\n * Options for MCP tool calls with OAuth support\n */\nexport interface MCPCallOptions {\n  /** Agent URL */\n  agentUrl: string;\n  /** Tool name to call */\n  toolName: string;\n  /** Tool arguments */\n  args: Record<string, unknown>;\n  /** Static auth token (legacy) */\n  authToken?: string;\n  /** OAuth provider for dynamic auth */\n  authProvider?: OAuthClientProvider;\n  /** Debug logs array */\n  debugLogs?: DebugLogEntry[];\n  /** Additional headers to send with every request (auth headers take precedence) */\n  customHeaders?: Record<string, string>;\n  /** RFC 9421 signing context — when set, the transport signs outbound ops per seller capability. */\n  signingContext?: AgentSigningContext;\n  /** Caller-owned cancellation signal for connect and callTool. */\n  signal?: AbortSignal;\n  /** Optional per-request timeout for connect and callTool. */\n  requestTimeoutMs?: number;\n}\n\n/**\n * Result of an MCP connection attempt\n */\nexport interface MCPConnectionResult {\n  client: MCPClient;\n  transport: StreamableHTTPClientTransport;\n}\n\n/**\n * Connect an MCPClient to the given URL with automatic transport fallback.\n *\n * Strategy:\n *  1. Try StreamableHTTPClientTransport.\n *  2. On any transient connect failure (generic Error, McpError, or StreamableHTTPError),\n *     retry once with a fresh StreamableHTTP connection. Auth failures (401) are excluded —\n *     a retry is pointless and wastes a round-trip.\n *  3. If a 401 is returned, throw immediately — auth failure is transport-agnostic.\n *  4. For any other error after retry, fall back to SSEClientTransport with the same headers.\n *\n * The returned client is connected and ready for use. Callers are responsible for\n * calling client.close() when done.\n */\nexport async function connectMCPWithFallback(\n  url: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[] = [],\n  label = 'connection',\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  return withSpan(\n    'adcp.mcp.connect',\n    {\n      'http.url': url.toString(),\n      'adcp.connection_label': label,\n    },\n    async () => {\n      return connectMCPWithFallbackImpl(url, authHeaders, debugLogs, label, transportFetch, requestOptions);\n    }\n  );\n}\n\nasync function connectMCPWithFallbackImpl(\n  url: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[] = [],\n  label = 'connection',\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  const signingContext = signingContextStorage.getStore();\n  // Wrap order (innermost → outermost): network → size-limit → signing → capture.\n  // Size-limit applies to the raw network response so signing/capture see a\n  // bounded body (capture clones via `response.clone()`, which would otherwise\n  // buffer a hostile reply in memory).\n  const requestTimeoutMs = resolveRequestTimeoutMs(requestOptions.requestTimeoutMs);\n  const clientRequestTimeoutMs = resolveClientRequestTimeoutMs(requestOptions.requestTimeoutMs);\n  const mcpRequestOptions = {\n    ...(requestOptions.signal && { signal: requestOptions.signal }),\n    ...(clientRequestTimeoutMs !== undefined && { timeout: clientRequestTimeoutMs }),\n  };\n  const rawNetworkFetch: typeof fetch = transportFetch ?? ((input, init) => fetch(input as any, init));\n  const networkFetch = (input: Parameters<typeof fetch>[0], init?: RequestInit) =>\n    withAbortSignal<Response>([requestOptions.signal, init?.signal], requestTimeoutMs, signal =>\n      rawNetworkFetch(input, { ...init, signal })\n    );\n  const sizeLimited = wrapFetchWithSizeLimit(networkFetch);\n  const diagnosticFetch = wrapFetchWithTransportDiagnostics(sizeLimited);\n  const baseFetch: typeof fetch = signingContext\n    ? (buildAgentSigningFetch({\n        upstream: diagnosticFetch,\n        signing: signingContext.signing,\n        getCapability: signingContext.getCapability,\n      }) as typeof fetch)\n    : diagnosticFetch;\n  const transportOptions: StreamableHTTPClientTransportOptions = {\n    requestInit: { headers: authHeaders, redirect: 'manual' },\n    fetch: wrapFetchWithCapture(baseFetch),\n  };\n  let failedClient: MCPClient | undefined;\n\n  try {\n    const client = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n    failedClient = client;\n    debugLogs.push({\n      type: 'info',\n      message: `MCP: Attempting StreamableHTTP ${label} to ${url}`,\n      timestamp: new Date().toISOString(),\n    });\n    await client.connect(new StreamableHTTPClientTransport(url, transportOptions), mcpRequestOptions);\n    failedClient = undefined;\n    trackStreamableHTTPUrl(url.toString());\n    debugLogs.push({\n      type: 'success',\n      message: `MCP: Connected via StreamableHTTP for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    return client;\n  } catch (error: unknown) {\n    // Close the failed client to avoid resource leaks\n    if (failedClient) {\n      try {\n        await failedClient.close();\n      } catch {\n        /* ignore */\n      }\n    }\n\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    const errorClass = error instanceof Error ? error.constructor.name : typeof error;\n    const httpStatus = error instanceof StreamableHTTPError ? ` [HTTP ${error.code}]` : '';\n    debugLogs.push({\n      type: 'error',\n      message: `MCP: StreamableHTTP failed for ${label}${httpStatus} (${errorClass}): ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    // Retry StreamableHTTP once on any transient connect failure — network blips,\n    // JSON parse errors on half-buffered responses, and mid-handshake proxy\n    // disconnects all surface as generic Error or McpError, not StreamableHTTPError.\n    // Auth failures are the only class where retry is pointless and wasteful.\n    if (!is401Error(error)) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: Transient connect error (${errorClass}) detected, retrying StreamableHTTP for ${label}`,\n        timestamp: new Date().toISOString(),\n      });\n      const retryClient = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n      try {\n        await retryClient.connect(new StreamableHTTPClientTransport(url, transportOptions), mcpRequestOptions);\n        trackStreamableHTTPUrl(url.toString());\n        debugLogs.push({\n          type: 'success',\n          message: `MCP: Connected via StreamableHTTP (retry) for ${label}`,\n          timestamp: new Date().toISOString(),\n        });\n        return retryClient;\n      } catch (retryError) {\n        try {\n          await retryClient.close();\n        } catch {\n          /* ignore */\n        }\n        debugLogs.push({\n          type: 'error',\n          message: `MCP: StreamableHTTP retry also failed for ${label}: ${retryError instanceof Error ? retryError.message : String(retryError)}`,\n          timestamp: new Date().toISOString(),\n        });\n        if (isAbortOrTimeoutError(retryError)) {\n          throw retryError;\n        }\n        // Fall through to SSE fallback below\n      }\n    }\n\n    // Auth failure — transport type won't change the outcome\n    if (is401Error(error)) {\n      throw error;\n    }\n\n    // If StreamableHTTP previously worked for this URL, don't fall back to SSE.\n    // Transient failures (connection reuse, concurrency limits) should be retried\n    // with StreamableHTTP, not SSE — SSE sends GET requests that return 405 on\n    // servers that only support POST-based StreamableHTTP.\n    if (knownStreamableHTTPUrls.has(url.toString())) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: StreamableHTTP previously succeeded for ${url} — skipping SSE fallback for ${label}`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    // Fall back to SSE\n    debugLogs.push({\n      type: 'warning',\n      message: `MCP: Falling back to SSE transport for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    const client = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n    try {\n      await client.connect(\n        new SSEClientTransport(url, {\n          requestInit: { headers: authHeaders, redirect: 'manual' },\n          fetch: wrapFetchWithCapture(baseFetch),\n        }),\n        mcpRequestOptions\n      );\n    } catch (sseError) {\n      try {\n        await client.close();\n      } catch {\n        /* ignore */\n      }\n      throw sseError;\n    }\n    debugLogs.push({\n      type: 'success',\n      message: `MCP: Connected via SSE transport for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    return client;\n  }\n}\n\nexport async function callMCPTool(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  signingContext?: AgentSigningContext,\n  transportFetch?: typeof fetch,\n  requestOptions?: { signal?: AbortSignal; requestTimeoutMs?: number }\n): Promise<unknown> {\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Auth configuration`,\n    timestamp: new Date().toISOString(),\n    hasAuth: !!authToken,\n    headers: authToken ? { 'x-adcp-auth': '***' } : {},\n    customHeaderKeys: customHeaders ? Object.keys(customHeaders) : [],\n  });\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Calling tool ${toolName} with args: ${JSON.stringify(redactIdempotencyKeyInArgs(args))}`,\n    timestamp: new Date().toISOString(),\n  });\n  if (authToken) {\n    debugLogs.push({\n      type: 'info',\n      message: `MCP: Transport configured with x-adcp-auth header for ${toolName}`,\n      timestamp: new Date().toISOString(),\n    });\n  }\n\n  // Custom fetch injection is an internal conformance seam whose mocks use\n  // the v1 transport shape. Normal remote calls negotiate the modern era;\n  // injected transports retain their exact legacy behavior.\n  if (!transportFetch) {\n    const modernAttempt = await tryCallModernMCPTool(agentUrl, toolName, args, authToken, debugLogs, customHeaders, {\n      ...(signingContext && { signingContext }),\n      ...(requestOptions?.signal && { signal: requestOptions.signal }),\n      ...(requestOptions?.requestTimeoutMs !== undefined && {\n        requestTimeoutMs: requestOptions.requestTimeoutMs,\n      }),\n    });\n    if (modernAttempt.handled) {\n      debugLogs.push({\n        type: modernAttempt.response?.isError ? 'error' : 'success',\n        message: `MCP: Tool ${toolName} response received (${modernAttempt.response?.isError ? 'error' : 'success'})`,\n        timestamp: new Date().toISOString(),\n        response: modernAttempt.response,\n      });\n      return modernAttempt.response;\n    }\n  }\n\n  return withSpan(\n    'adcp.mcp.call_tool',\n    {\n      'adcp.tool': toolName,\n      'http.url': agentUrl,\n    },\n    async () => {\n      return signingContextStorage.run(signingContext, () =>\n        callMCPToolImpl(agentUrl, toolName, args, authToken, debugLogs, customHeaders, transportFetch, requestOptions)\n      );\n    }\n  );\n}\n\n/**\n * Call an MCP tool and return the raw CallToolResult (with isError, content, structuredContent).\n * Raw MCP tool call — returns the CallToolResult directly, including isError responses.\n */\nexport async function callMCPToolRaw(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  signingContext?: AgentSigningContext,\n  transportFetch?: typeof fetch\n): Promise<unknown> {\n  return signingContextStorage.run(signingContext, () =>\n    callMCPToolRawImpl(agentUrl, toolName, args, authToken, debugLogs, customHeaders, transportFetch)\n  );\n}\n\nasync function callMCPToolImpl(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  transportFetch?: typeof fetch,\n  requestOptions?: { signal?: AbortSignal; requestTimeoutMs?: number }\n): Promise<unknown> {\n  // Inject trace context headers for distributed tracing\n  const traceHeaders = injectTraceHeaders();\n\n  // Merge: custom < trace < auth (auth always wins)\n  const authHeaders = {\n    ...customHeaders,\n    ...traceHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n\n  const resolvedRequestTimeoutMs = resolveClientRequestTimeoutMs(requestOptions?.requestTimeoutMs);\n  const response = await withCachedConnection(\n    agentUrl,\n    authToken,\n    authHeaders,\n    debugLogs,\n    toolName,\n    client =>\n      client.callTool({ name: toolName, arguments: args }, undefined, {\n        ...(requestOptions?.signal && { signal: requestOptions.signal }),\n        ...(resolvedRequestTimeoutMs !== undefined && { timeout: resolvedRequestTimeoutMs }),\n      }) as Promise<CallToolResponse>,\n    transportFetch,\n    requestOptions\n  );\n\n  debugLogs.push({\n    type: response?.isError ? 'error' : 'success',\n    message: `MCP: Tool ${toolName} response received (${response?.isError ? 'error' : 'success'})`,\n    timestamp: new Date().toISOString(),\n    response: response,\n  });\n\n  return response;\n}\n\n/**\n * Raw MCP tool call — returns the CallToolResult directly.\n */\nasync function callMCPToolRawImpl(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  transportFetch?: typeof fetch\n): Promise<unknown> {\n  const traceHeaders = injectTraceHeaders();\n  const authHeaders = {\n    ...customHeaders,\n    ...traceHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n\n  return withCachedConnection(\n    agentUrl,\n    authToken,\n    authHeaders,\n    debugLogs,\n    toolName,\n    client => client.callTool({ name: toolName, arguments: args }),\n    transportFetch\n  );\n}\n\n/**\n * Connect to an MCP server with OAuth support\n *\n * This function handles both static token auth and OAuth flows.\n * When using OAuth, if the server requires authorization:\n * 1. UnauthorizedError is thrown\n * 2. The OAuth provider's redirectToAuthorization is called\n * 3. Caller should wait for callback and call finishAuth on transport\n *\n * @param options Connection options\n * @returns MCP client and transport (for finishing OAuth if needed)\n * @throws UnauthorizedError if OAuth is required\n *\n * @example\n * ```typescript\n * // With OAuth provider\n * const provider = createCLIOAuthProvider(serverUrl);\n *\n * try {\n *   const { client, transport } = await connectMCP({\n *     agentUrl: serverUrl,\n *     authProvider: provider\n *   });\n *   // Connected! Use client...\n * } catch (error) {\n *   if (error instanceof UnauthorizedError) {\n *     // OAuth flow started, wait for callback\n *     const code = await provider.waitForCallback();\n *     await transport.finishAuth(code);\n *     // Retry connection...\n *   }\n * }\n * ```\n *\n * @deprecated Low-level v1/SSE escape hatch. High-level AgentClient discovery,\n * tool listing, OAuth calls, and `callMCPTool*` APIs negotiate MCP 2026-07-28.\n * Keep this only for callers that require the v1 SDK client/transport pair or\n * its interactive `finishAuth()` lifecycle.\n */\nexport async function connectMCP(options: {\n  agentUrl: string;\n  authToken?: string;\n  authProvider?: OAuthClientProvider;\n  debugLogs?: DebugLogEntry[];\n  customHeaders?: Record<string, string>;\n  signingContext?: AgentSigningContext;\n  signal?: AbortSignal;\n  requestTimeoutMs?: number;\n}): Promise<MCPConnectionResult> {\n  const {\n    agentUrl,\n    authToken,\n    authProvider,\n    debugLogs = [],\n    customHeaders,\n    signingContext,\n    signal,\n    requestTimeoutMs: configuredRequestTimeoutMs,\n  } = options;\n  const baseUrl = new URL(agentUrl);\n\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Connecting to ${baseUrl}`,\n    timestamp: new Date().toISOString(),\n    authMethod: authProvider ? 'oauth' : authToken ? 'token' : 'none',\n  });\n\n  const mcpClient = new MCPClient({\n    name: 'AdCP-Client',\n    version: '1.0.0',\n  });\n\n  // Build transport options\n  const transportOptions: StreamableHTTPClientTransportOptions = {};\n\n  // Header-only auth (basic, x-api-key, custom routing) lives entirely on\n  // `customHeaders`. Attach it whenever it's present, regardless of which\n  // auth branch fires — OAuth + routing headers, bearer + tenant headers,\n  // and pure-header auth must all reach the wire.\n  //\n  // Precedence note: the MCP SDK's `_commonHeaders()` (StreamableHTTP)\n  // spreads `requestInit.headers` *over* any provider-emitted `Authorization`\n  // (`new Headers({ ...providerHeaders, ...requestInitHeaders })`, last-write-\n  // wins). To prevent a caller-supplied `Authorization` in `customHeaders`\n  // from silently overriding the OAuth provider's bearer, drop any\n  // `Authorization` key from `customHeaders` when `authProvider` is set.\n  // OAuth is the source of truth for the bearer in that branch; non-auth\n  // routing/tenant headers still flow through.\n  const filteredCustomHeaders = authProvider\n    ? Object.fromEntries(Object.entries(customHeaders ?? {}).filter(([k]) => k.toLowerCase() !== 'authorization'))\n    : customHeaders;\n  const authHeaders: Record<string, string> = {\n    ...filteredCustomHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n  transportOptions.requestInit = { headers: authHeaders, redirect: 'manual' };\n  if (authProvider) {\n    transportOptions.authProvider = authProvider;\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using OAuth provider for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  } else if (authToken) {\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using static token for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  } else if (Object.keys(authHeaders).length > 0) {\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using custom headers for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  }\n\n  // RFC 9421 signing — wrap the transport's fetch so the signer sees the final\n  // headers the SDK assembled (including any OAuth-issued Authorization) and\n  // decides per outbound request whether to sign. Size-limit sits innermost so\n  // the response body is bounded before signing/capture observe it.\n  const requestTimeoutMs = resolveRequestTimeoutMs(configuredRequestTimeoutMs);\n  const clientRequestTimeoutMs = resolveClientRequestTimeoutMs(configuredRequestTimeoutMs);\n  const requestOptions = {\n    ...(signal && { signal }),\n    ...(clientRequestTimeoutMs !== undefined && { timeout: clientRequestTimeoutMs }),\n  };\n  const sizeLimited = wrapFetchWithSizeLimit((input, init) =>\n    withAbortSignal<Response>([signal, init?.signal], requestTimeoutMs, linkedSignal =>\n      fetch(input as string | URL, { ...init, signal: linkedSignal })\n    )\n  );\n  const diagnosticFetch = wrapFetchWithTransportDiagnostics(sizeLimited);\n  const signedFetch: typeof fetch = signingContext\n    ? (buildAgentSigningFetch({\n        upstream: diagnosticFetch,\n        signing: signingContext.signing,\n        getCapability: signingContext.getCapability,\n      }) as typeof fetch)\n    : diagnosticFetch;\n  transportOptions.fetch = wrapFetchWithCapture(signedFetch);\n\n  const transport = new StreamableHTTPClientTransport(baseUrl, transportOptions);\n\n  try {\n    await mcpClient.connect(transport, requestOptions);\n    debugLogs.push({\n      type: 'success',\n      message: 'MCP: Connected successfully',\n      timestamp: new Date().toISOString(),\n    });\n    return { client: mcpClient, transport };\n  } catch (error) {\n    // If it's an UnauthorizedError, the OAuth flow has started\n    // Rethrow so the caller can handle the callback\n    if (error instanceof UnauthorizedError) {\n      debugLogs.push({\n        type: 'info',\n        message: 'MCP: OAuth authorization required, flow initiated',\n        timestamp: new Date().toISOString(),\n      });\n      // Return transport so caller can call finishAuth\n      throw Object.assign(error, { transport, client: mcpClient });\n    }\n\n    // Non-OAuth 401 — the SDK sent credentials that the agent rejected (or\n    // sent none when it needed them). The raw transport error is shaped like\n    // `Error POSTing to endpoint (HTTP 401): unauthorized`, which omits the\n    // crucial piece of debug data: *which auth scheme did the SDK actually\n    // use*. Without that, a caller can't diff against curl. Wrap the error\n    // with a scheme tag and a remediation hint, preserving the original\n    // under `.cause` so existing `is401Error` / `error.status` checks\n    // downstream still resolve.\n    if (is401Error(error)) {\n      const scheme = authProvider\n        ? 'oauth'\n        : authToken\n          ? 'bearer'\n          : Object.keys(authHeaders).length > 0\n            ? 'header'\n            : 'none';\n      const hint =\n        scheme === 'none'\n          ? 'No credentials were sent. Configure auth_token, headers, or oauth_tokens on the agent config (or pass --auth on the CLI).'\n          : scheme === 'header'\n            ? \"Verify the Authorization header value matches the gateway (basic-auth: 'Basic ' + base64(user:pass); pair with --auth-scheme basic on the CLI).\"\n            : scheme === 'bearer'\n              ? \"Verify the bearer token matches the agent's expected credential.\"\n              : 'OAuth provider returned tokens that the agent rejected — check the provider configuration and token scopes.';\n      const detail = `MCP connect rejected with HTTP 401 from ${agentUrl}. SDK sent auth scheme: ${scheme}. ${hint}`;\n      const wrapped = Object.assign(new Error(detail), {\n        cause: error,\n        code: 'MCP_AUTH_REJECTED',\n        scheme,\n        agentUrl,\n        originalError: error,\n      });\n      throw wrapped;\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Call an MCP tool with OAuth support.\n *\n * OAuth connections are cached by agent URL and OAuth provider identity so a\n * service-to-service workflow can reuse the initialized MCP session across\n * related tool calls. Reuse the same OAuthClientProvider instance for a\n * session/source/principal; the provider owns token refresh state for the\n * cached transport.\n *\n * Signing: this path consumes `options.signingContext` via the transport —\n * `connectMCP` attaches a signing-fetch wrapper at transport-creation time —\n * rather than via `signingContextStorage`. The OAuth cache key includes the\n * signing cache key so different signing identities do not share a transport.\n * The non-OAuth fallback (`callMCPTool`) does enter ALS.\n *\n * @param options Call options\n * @returns Tool response\n * @throws UnauthorizedError if OAuth is required (with transport attached)\n */\nexport async function callMCPToolWithOAuth(options: MCPCallOptions): Promise<unknown> {\n  const {\n    agentUrl,\n    toolName,\n    args,\n    authToken,\n    authProvider,\n    debugLogs = [],\n    customHeaders,\n    signingContext,\n    signal,\n    requestTimeoutMs,\n  } = options;\n  const resolvedRequestTimeoutMs = resolveClientRequestTimeoutMs(requestTimeoutMs);\n  const requestOptions = {\n    ...(signal && { signal }),\n    ...(resolvedRequestTimeoutMs !== undefined && { timeout: resolvedRequestTimeoutMs }),\n  };\n\n  // If no OAuth provider, use the legacy function\n  if (!authProvider) {\n    return callMCPTool(agentUrl, toolName, args, authToken, debugLogs, customHeaders, signingContext, undefined, {\n      signal,\n      requestTimeoutMs,\n    });\n  }\n\n  const modernAttempt = await tryCallModernMCPTool(agentUrl, toolName, args, undefined, debugLogs, customHeaders, {\n    authProvider,\n    signingContext,\n    signal,\n    requestTimeoutMs,\n    handleLegacy: true,\n  });\n  if (modernAttempt.handled) {\n    debugLogs.push({\n      type: modernAttempt.response?.isError ? 'error' : 'success',\n      message: `MCP: Tool ${toolName} response received`,\n      timestamp: new Date().toISOString(),\n    });\n    return modernAttempt.response;\n  }\n\n  const response = await withCachedOAuthConnection(\n    {\n      agentUrl,\n      authProvider,\n      debugLogs,\n      customHeaders,\n      signingContext,\n      signal,\n      requestTimeoutMs,\n    },\n    toolName,\n    async client => {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: Calling tool ${toolName}`,\n        timestamp: new Date().toISOString(),\n      });\n\n      const response = await client.callTool({ name: toolName, arguments: args }, undefined, requestOptions);\n\n      debugLogs.push({\n        type: response?.isError ? 'error' : 'success',\n        message: `MCP: Tool ${toolName} response received`,\n        timestamp: new Date().toISOString(),\n      });\n\n      return response;\n    }\n  );\n\n  return response;\n}\n"],"mappings":";;;;;;AACA,SAAS,UAAU,iBAAiB;AACpC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAElC,SAAS,kBAAkB;AAC3B,SAAS,4BAA4B;AACrC,SAAS,kBAAkB;AAE3B,SAAS,UAAU,0BAA0B;AAC7C,SAAS,wBAAwB,6BAAuD;AACxF,SAAS,kCAAkC;AAC3C,SAAS,4BAA4B;AACrC,SAAS,8BAA8B;AACvC,SAAS,yCAAyC;AAClD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,2BAA2B,4BAA4B;AA4BhE,MAAM,kBAAkB,oBAAI,IAAuB;AACnD,MAAM,qBAAqB,oBAAI,IAAgC;AAC/D,MAAM,uBAAuB,oBAAI,IAAuB;AACxD,MAAM,0BAA0B,oBAAI,IAAgC;AACpE,MAAM,mBAAmB,oBAAI,QAAqC;AAClE,MAAM,yBAAyB;AAC/B,IAAI,sBAAsB;AAW1B,MAAM,0BAA0B,oBAAI,IAAY;AAEhD,SAAS,uBAAuB,KAAmB;AAEjD,0BAAwB,OAAO,GAAG;AAClC,0BAAwB,IAAI,GAAG;AAE/B,SAAO,wBAAwB,OAAO,wBAAwB;AAC5D,UAAM,SAAS,wBAAwB,OAAO,EAAE,KAAK,EAAE;AACvD,QAAI,OAAQ,yBAAwB,OAAO,MAAM;AAAA,EACnD;AACF;AAqBA,SAAS,mBACP,UACA,WACA,iBACA,aACQ;AACR,QAAM,QAAQ,CAAC,QAAQ;AACvB,QAAM,cAAc,aAAa,kBAAkB,WAAW;AAC9D,MAAI,YAAa,OAAM,KAAK,mBAAmB,WAAW,CAAC;AAC3D,QAAM,aAAa,0BAA0B,WAAW;AACxD,MAAI,WAAY,OAAM,KAAK,WAAW,UAAU,EAAE;AAClD,MAAI,gBAAiB,OAAM,KAAK,eAAe;AAC/C,SAAO,MAAM,KAAK,IAAI;AACxB;AAkBA,SAAS,mBAAmB,OAAuB;AACjD,SAAO,WAAW,UAAU,EAAE,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACzE;AAUA,SAAS,kBAAkB,SAAsD;AAC/E,MAAI,CAAC,QAAS,QAAO;AACrB,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,IAAI,YAAY,MAAM,mBAAmB,MAAO,QAAO;AAAA,EAC7D;AACA,SAAO;AACT;AAEA,SAAS,0BAA0B,SAAsD;AACvF,QAAM,UAAU,OAAO,QAAQ,WAAW,CAAC,CAAC,EACzC,OAAO,CAAC,CAAC,GAAG,MAAM;AACjB,UAAM,QAAQ,IAAI,YAAY;AAC9B,WAAO,UAAU,iBAAiB,UAAU,gBAAgB,UAAU;AAAA,EACxE,CAAC,EACA,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,YAAY,GAAG,KAAK,CAAU,EACzD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AACxC,SAAO,QAAQ,SAAS,IAAI,mBAAmB,KAAK,UAAU,OAAO,CAAC,IAAI;AAC5E;AAGA,SAAS,oBAAoB,KAAoC;AAC/D,QAAM,SAAS,gBAAgB,IAAI,GAAG;AACtC,MAAI,QAAQ;AAEV,oBAAgB,OAAO,GAAG;AAC1B,oBAAgB,IAAI,KAAK,MAAM;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,yBAA+B;AACtC,MAAI,gBAAgB,QAAQ,uBAAwB;AAEpD,QAAM,SAAS,gBAAgB,KAAK,EAAE,KAAK,EAAE;AAC7C,MAAI,CAAC,OAAQ;AACb,QAAM,YAAY,gBAAgB,IAAI,MAAM;AAC5C,kBAAgB,OAAO,MAAM;AAE7B,aAAW,MAAM,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACnC;AAEA,SAAS,8BAAoC;AAC3C,MAAI,qBAAqB,QAAQ,uBAAwB;AACzD,QAAM,SAAS,qBAAqB,KAAK,EAAE,KAAK,EAAE;AAClD,MAAI,CAAC,OAAQ;AACb,QAAM,YAAY,qBAAqB,IAAI,MAAM;AACjD,uBAAqB,OAAO,MAAM;AAClC,aAAW,MAAM,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACnC;AAOA,eAAsB,wBAAuC;AAC3D,QAAM,UAAU,CAAC,GAAG,qBAAqB,QAAQ,CAAC;AAClD,uBAAqB,MAAM;AAC3B,aAAW,CAAC,EAAE,MAAM,KAAK,SAAS;AAChC,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAMA,eAAsB,sBAAqC;AACzD,QAAM,UAAU,CAAC,GAAG,gBAAgB,QAAQ,CAAC;AAC7C,kBAAgB,MAAM;AACtB,0BAAwB,MAAM;AAC9B,aAAW,CAAC,EAAE,MAAM,KAAK,SAAS;AAChC,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,sBAAsB;AAC5B,QAAM,0BAA0B;AAClC;AAOA,eAAe,sBACb,UACA,SACA,aACA,WACA,OACA,iBAAsE,CAAC,GACnD;AACpB,QAAM,SAAS,oBAAoB,QAAQ;AAC3C,MAAI,OAAQ,QAAO;AAEnB,QAAM,UAAU,mBAAmB,IAAI,QAAQ;AAC/C,MAAI,QAAS,QAAO;AAEpB,QAAM,UAAU,uBAAuB,SAAS,aAAa,WAAW,OAAO,QAAW,cAAc,EACrG,KAAK,YAAU;AACd,oBAAgB,IAAI,UAAU,MAAM;AACpC,2BAAuB;AACvB,WAAO;AAAA,EACT,CAAC,EACA,QAAQ,MAAM;AACb,uBAAmB,OAAO,QAAQ;AAAA,EACpC,CAAC;AAEH,qBAAmB,IAAI,UAAU,OAAO;AACxC,SAAO;AACT;AAEA,SAAS,8BAA8B,cAA2C;AAChF,MAAI,KAAK,iBAAiB,IAAI,YAAY;AAC1C,MAAI,CAAC,IAAI;AACP,SAAK,mBAAmB,kBAAkB,EAAE,mBAAmB,EAAE;AACjE,qBAAiB,IAAI,cAAc,EAAE;AAAA,EACvC;AACA,SAAO;AACT;AAEA,SAAS,2BAA2B,eAA4D;AAC9F,SAAO,0BAA0B,aAAa;AAChD;AAEA,SAAS,wBACP,UACA,cACA,iBACA,eACQ;AACR,QAAM,QAAQ,CAAC,GAAG,QAAQ,WAAW,8BAA8B,YAAY,CAAC,EAAE;AAClF,MAAI,gBAAiB,OAAM,KAAK,eAAe;AAC/C,QAAM,aAAa,2BAA2B,aAAa;AAC3D,MAAI,WAAY,OAAM,KAAK,WAAW,UAAU,EAAE;AAClD,SAAO,MAAM,KAAK,IAAI;AACxB;AAGA,SAAS,yBAAyB,KAAoC;AACpE,QAAM,SAAS,qBAAqB,IAAI,GAAG;AAC3C,MAAI,QAAQ;AACV,yBAAqB,OAAO,GAAG;AAC/B,yBAAqB,IAAI,KAAK,MAAM;AAAA,EACtC;AACA,SAAO;AACT;AAEA,eAAe,2BACb,UACA,SASoB;AACpB,QAAM,SAAS,yBAAyB,QAAQ;AAChD,MAAI,OAAQ,QAAO;AAEnB,QAAM,UAAU,wBAAwB,IAAI,QAAQ;AACpD,MAAI,QAAS,QAAO;AAEpB,QAAM,UAAU,WAAW,OAAO,EAC/B,KAAK,CAAC,EAAE,OAAO,MAAM;AACpB,yBAAqB,IAAI,UAAU,MAAM;AACzC,gCAA4B;AAC5B,WAAO;AAAA,EACT,CAAC,EACA,QAAQ,MAAM;AACb,4BAAwB,OAAO,QAAQ;AAAA,EACzC,CAAC;AAEH,0BAAwB,IAAI,UAAU,OAAO;AAC7C,SAAO;AACT;AAEA,eAAe,0BACb,SASA,OACA,IACY;AACZ,QAAM,WAAW;AAAA,IACf,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ,gBAAgB;AAAA,IACxB,QAAQ;AAAA,EACV;AACA,MAAI,QAAQ,UAAU,QAAQ,qBAAqB,QAAW;AAC5D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,OAAO;AAC3C,QAAI;AACF,aAAO,MAAM,GAAG,MAAM;AAAA,IACxB,UAAE;AACA,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,MACrB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,2BAA2B,UAAU,OAAO;AAEpE,MAAI;AACF,WAAO,MAAM,GAAG,SAAS;AAAA,EAC3B,SAAS,OAAO;AACd,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,YAAQ,UAAU,KAAK;AAAA,MACrB,MAAM;AAAA,MACN,SAAS,QAAQ,KAAK,uBAAuB,YAAY;AAAA,MACzD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAED,QAAI,WAAW,KAAK,GAAG;AACrB,2BAAqB,OAAO,QAAQ;AACpC,UAAI;AACF,cAAM,UAAU,MAAM;AAAA,MACxB,QAAQ;AAAA,MAER;AACA,cAAQ,UAAU,KAAK;AAAA,QACrB,MAAM;AAAA,QACN,SAAS,gDAAgD,KAAK;AAAA,QAC9D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAEA,QAAI,sBAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAEA,yBAAqB,OAAO,QAAQ;AACpC,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,IACxB,QAAQ;AAAA,IAER;AAEA,UAAM,cAAc,MAAM,2BAA2B,UAAU;AAAA,MAC7D,GAAG;AAAA,MACH,WAAW,QAAQ;AAAA,IACrB,CAAC;AAED,QAAI;AACF,aAAO,MAAM,GAAG,WAAW;AAAA,IAC7B,SAAS,YAAY;AACnB,UAAI,sBAAsB,SAAS,iBAAiB,OAAO;AACzD,mBAAW,QAAQ;AAAA,MACrB;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAUA,eAAsB,qBACpB,UACA,WACA,aACA,WACA,OACA,IACA,gBACA,iBAAsE,CAAC,GAC3D;AACZ,QAAM,iBAAiB,sBAAsB,SAAS;AACtD,QAAM,UAAU,IAAI,IAAI,QAAQ;AAEhC,MAAI,kBAAkB,eAAe,UAAU,eAAe,qBAAqB,QAAW;AAC5F,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI;AACF,aAAO,MAAM,GAAG,aAAa;AAAA,IAC/B,UAAE;AACA,UAAI;AACF,cAAM,cAAc,MAAM;AAAA,MAC5B,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,mBAAmB,UAAU,WAAW,gBAAgB,UAAU,WAAW;AAC9F,QAAM,YAAY,MAAM,sBAAsB,UAAU,SAAS,aAAa,WAAW,OAAO,cAAc;AAE9G,MAAI;AACF,WAAO,MAAM,GAAG,SAAS;AAAA,EAC3B,SAAS,OAAO;AACd,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,QAAQ,KAAK,iBAAiB,YAAY;AAAA,MACnD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAGD,QAAI,WAAW,KAAK,GAAG;AACrB,sBAAgB,OAAO,QAAQ;AAC/B,UAAI;AACF,cAAM,UAAU,MAAM;AAAA,MACxB,QAAQ;AAAA,MAER;AACA,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,0CAA0C,KAAK;AAAA,QACxD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAEA,QAAI,sBAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAGA,oBAAgB,OAAO,QAAQ;AAC/B,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,IACxB,QAAQ;AAAA,IAER;AAEA,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,KAAK;AAAA,MACR;AAAA,IACF;AAEA,QAAI;AACF,aAAO,MAAM,GAAG,WAAW;AAAA,IAC7B,SAAS,YAAY;AAEnB,UAAI,sBAAsB,SAAS,iBAAiB,OAAO;AACzD,mBAAW,QAAQ;AAAA,MACrB;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAkDA,eAAsB,uBACpB,KACA,aACA,YAA6B,CAAC,GAC9B,QAAQ,cACR,gBACA,iBAAsE,CAAC,GACnD;AACpB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,YAAY,IAAI,SAAS;AAAA,MACzB,yBAAyB;AAAA,IAC3B;AAAA,IACA,YAAY;AACV,aAAO,2BAA2B,KAAK,aAAa,WAAW,OAAO,gBAAgB,cAAc;AAAA,IACtG;AAAA,EACF;AACF;AAEA,eAAe,2BACb,KACA,aACA,YAA6B,CAAC,GAC9B,QAAQ,cACR,gBACA,iBAAsE,CAAC,GACnD;AACpB,QAAM,iBAAiB,sBAAsB,SAAS;AAKtD,QAAM,mBAAmB,wBAAwB,eAAe,gBAAgB;AAChF,QAAM,yBAAyB,8BAA8B,eAAe,gBAAgB;AAC5F,QAAM,oBAAoB;AAAA,IACxB,GAAI,eAAe,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,IAC7D,GAAI,2BAA2B,UAAa,EAAE,SAAS,uBAAuB;AAAA,EAChF;AACA,QAAM,kBAAgC,mBAAmB,CAAC,OAAO,SAAS,MAAM,OAAc,IAAI;AAClG,QAAM,eAAe,CAAC,OAAoC,SACxD;AAAA,IAA0B,CAAC,eAAe,QAAQ,MAAM,MAAM;AAAA,IAAG;AAAA,IAAkB,YACjF,gBAAgB,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC;AAAA,EAC5C;AACF,QAAM,cAAc,uBAAuB,YAAY;AACvD,QAAM,kBAAkB,kCAAkC,WAAW;AACrE,QAAM,YAA0B,iBAC3B,uBAAuB;AAAA,IACtB,UAAU;AAAA,IACV,SAAS,eAAe;AAAA,IACxB,eAAe,eAAe;AAAA,EAChC,CAAC,IACD;AACJ,QAAM,mBAAyD;AAAA,IAC7D,aAAa,EAAE,SAAS,aAAa,UAAU,SAAS;AAAA,IACxD,OAAO,qBAAqB,SAAS;AAAA,EACvC;AACA,MAAI;AAEJ,MAAI;AACF,UAAM,SAAS,IAAI,UAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AACtE,mBAAe;AACf,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,kCAAkC,KAAK,OAAO,GAAG;AAAA,MAC1D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,UAAM,OAAO,QAAQ,IAAI,8BAA8B,KAAK,gBAAgB,GAAG,iBAAiB;AAChG,mBAAe;AACf,2BAAuB,IAAI,SAAS,CAAC;AACrC,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yCAAyC,KAAK;AAAA,MACvD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAgB;AAEvB,QAAI,cAAc;AAChB,UAAI;AACF,cAAM,aAAa,MAAM;AAAA,MAC3B,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,UAAM,aAAa,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAC5E,UAAM,aAAa,iBAAiB,sBAAsB,UAAU,MAAM,IAAI,MAAM;AACpF,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,kCAAkC,KAAK,GAAG,UAAU,KAAK,UAAU,MAAM,YAAY;AAAA,MAC9F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAED,QAAI,sBAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAMA,QAAI,CAAC,WAAW,KAAK,GAAG;AACtB,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,iCAAiC,UAAU,2CAA2C,KAAK;AAAA,QACpG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM,cAAc,IAAI,UAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AAC3E,UAAI;AACF,cAAM,YAAY,QAAQ,IAAI,8BAA8B,KAAK,gBAAgB,GAAG,iBAAiB;AACrG,+BAAuB,IAAI,SAAS,CAAC;AACrC,kBAAU,KAAK;AAAA,UACb,MAAM;AAAA,UACN,SAAS,iDAAiD,KAAK;AAAA,UAC/D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,CAAC;AACD,eAAO;AAAA,MACT,SAAS,YAAY;AACnB,YAAI;AACF,gBAAM,YAAY,MAAM;AAAA,QAC1B,QAAQ;AAAA,QAER;AACA,kBAAU,KAAK;AAAA,UACb,MAAM;AAAA,UACN,SAAS,6CAA6C,KAAK,KAAK,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU,CAAC;AAAA,UACrI,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,CAAC;AACD,YAAI,sBAAsB,UAAU,GAAG;AACrC,gBAAM;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AAGA,QAAI,WAAW,KAAK,GAAG;AACrB,YAAM;AAAA,IACR;AAMA,QAAI,wBAAwB,IAAI,IAAI,SAAS,CAAC,GAAG;AAC/C,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,gDAAgD,GAAG,qCAAgC,KAAK;AAAA,QACjG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAGA,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,0CAA0C,KAAK;AAAA,MACxD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,UAAM,SAAS,IAAI,UAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AACtE,QAAI;AACF,YAAM,OAAO;AAAA,QACX,IAAI,mBAAmB,KAAK;AAAA,UAC1B,aAAa,EAAE,SAAS,aAAa,UAAU,SAAS;AAAA,UACxD,OAAO,qBAAqB,SAAS;AAAA,QACvC,CAAC;AAAA,QACD;AAAA,MACF;AAAA,IACF,SAAS,UAAU;AACjB,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,MACrB,QAAQ;AAAA,MAER;AACA,YAAM;AAAA,IACR;AACA,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,wCAAwC,KAAK;AAAA,MACtD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,YACpB,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACA,gBACkB;AAClB,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS;AAAA,IACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,SAAS,CAAC,CAAC;AAAA,IACX,SAAS,YAAY,EAAE,eAAe,MAAM,IAAI,CAAC;AAAA,IACjD,kBAAkB,gBAAgB,OAAO,KAAK,aAAa,IAAI,CAAC;AAAA,EAClE,CAAC;AACD,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,qBAAqB,QAAQ,eAAe,KAAK,UAAU,2BAA2B,IAAI,CAAC,CAAC;AAAA,IACrG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AACD,MAAI,WAAW;AACb,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yDAAyD,QAAQ;AAAA,MAC1E,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAKA,MAAI,CAAC,gBAAgB;AACnB,UAAM,gBAAgB,MAAM,qBAAqB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe;AAAA,MAC9G,GAAI,kBAAkB,EAAE,eAAe;AAAA,MACvC,GAAI,gBAAgB,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,MAC9D,GAAI,gBAAgB,qBAAqB,UAAa;AAAA,QACpD,kBAAkB,eAAe;AAAA,MACnC;AAAA,IACF,CAAC;AACD,QAAI,cAAc,SAAS;AACzB,gBAAU,KAAK;AAAA,QACb,MAAM,cAAc,UAAU,UAAU,UAAU;AAAA,QAClD,SAAS,aAAa,QAAQ,uBAAuB,cAAc,UAAU,UAAU,UAAU,SAAS;AAAA,QAC1G,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,UAAU,cAAc;AAAA,MAC1B,CAAC;AACD,aAAO,cAAc;AAAA,IACvB;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,YAAY;AAAA,IACd;AAAA,IACA,YAAY;AACV,aAAO,sBAAsB;AAAA,QAAI;AAAA,QAAgB,MAC/C,gBAAgB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,gBAAgB,cAAc;AAAA,MAC/G;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAsB,eACpB,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACkB;AAClB,SAAO,sBAAsB;AAAA,IAAI;AAAA,IAAgB,MAC/C,mBAAmB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,cAAc;AAAA,EAClG;AACF;AAEA,eAAe,gBACb,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACkB;AAElB,QAAM,eAAe,mBAAmB;AAGxC,QAAM,cAAc;AAAA,IAClB,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAI,YAAY,qBAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AAEA,QAAM,2BAA2B,8BAA8B,gBAAgB,gBAAgB;AAC/F,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YACE,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,QAAW;AAAA,MAC9D,GAAI,gBAAgB,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,MAC9D,GAAI,6BAA6B,UAAa,EAAE,SAAS,yBAAyB;AAAA,IACpF,CAAC;AAAA,IACH;AAAA,IACA;AAAA,EACF;AAEA,YAAU,KAAK;AAAA,IACb,MAAM,UAAU,UAAU,UAAU;AAAA,IACpC,SAAS,aAAa,QAAQ,uBAAuB,UAAU,UAAU,UAAU,SAAS;AAAA,IAC5F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAKA,eAAe,mBACb,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACkB;AAClB,QAAM,eAAe,mBAAmB;AACxC,QAAM,cAAc;AAAA,IAClB,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAI,YAAY,qBAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAU,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAyCA,eAAsB,WAAW,SASA;AAC/B,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,CAAC;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB;AAAA,EACpB,IAAI;AACJ,QAAM,UAAU,IAAI,IAAI,QAAQ;AAEhC,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,sBAAsB,OAAO;AAAA,IACtC,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,YAAY,eAAe,UAAU,YAAY,UAAU;AAAA,EAC7D,CAAC;AAED,QAAM,YAAY,IAAI,UAAU;AAAA,IAC9B,MAAM;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAGD,QAAM,mBAAyD,CAAC;AAehE,QAAM,wBAAwB,eAC1B,OAAO,YAAY,OAAO,QAAQ,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,MAAM,eAAe,CAAC,IAC3G;AACJ,QAAM,cAAsC;AAAA,IAC1C,GAAG;AAAA,IACH,GAAI,YAAY,qBAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AACA,mBAAiB,cAAc,EAAE,SAAS,aAAa,UAAU,SAAS;AAC1E,MAAI,cAAc;AAChB,qBAAiB,eAAe;AAChC,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH,WAAW,WAAW;AACpB,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH,WAAW,OAAO,KAAK,WAAW,EAAE,SAAS,GAAG;AAC9C,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAMA,QAAM,mBAAmB,wBAAwB,0BAA0B;AAC3E,QAAM,yBAAyB,8BAA8B,0BAA0B;AACvF,QAAM,iBAAiB;AAAA,IACrB,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,2BAA2B,UAAa,EAAE,SAAS,uBAAuB;AAAA,EAChF;AACA,QAAM,cAAc;AAAA,IAAuB,CAAC,OAAO,SACjD;AAAA,MAA0B,CAAC,QAAQ,MAAM,MAAM;AAAA,MAAG;AAAA,MAAkB,kBAClE,MAAM,OAAuB,EAAE,GAAG,MAAM,QAAQ,aAAa,CAAC;AAAA,IAChE;AAAA,EACF;AACA,QAAM,kBAAkB,kCAAkC,WAAW;AACrE,QAAM,cAA4B,iBAC7B,uBAAuB;AAAA,IACtB,UAAU;AAAA,IACV,SAAS,eAAe;AAAA,IACxB,eAAe,eAAe;AAAA,EAChC,CAAC,IACD;AACJ,mBAAiB,QAAQ,qBAAqB,WAAW;AAEzD,QAAM,YAAY,IAAI,8BAA8B,SAAS,gBAAgB;AAE7E,MAAI;AACF,UAAM,UAAU,QAAQ,WAAW,cAAc;AACjD,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO,EAAE,QAAQ,WAAW,UAAU;AAAA,EACxC,SAAS,OAAO;AAGd,QAAI,iBAAiB,mBAAmB;AACtC,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,YAAM,OAAO,OAAO,OAAO,EAAE,WAAW,QAAQ,UAAU,CAAC;AAAA,IAC7D;AAUA,QAAI,WAAW,KAAK,GAAG;AACrB,YAAM,SAAS,eACX,UACA,YACE,WACA,OAAO,KAAK,WAAW,EAAE,SAAS,IAChC,WACA;AACR,YAAM,OACJ,WAAW,SACP,8HACA,WAAW,WACT,oJACA,WAAW,WACT,qEACA;AACV,YAAM,SAAS,2CAA2C,QAAQ,2BAA2B,MAAM,KAAK,IAAI;AAC5G,YAAM,UAAU,OAAO,OAAO,IAAI,MAAM,MAAM,GAAG;AAAA,QAC/C,OAAO;AAAA,QACP,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB,CAAC;AACD,YAAM;AAAA,IACR;AAEA,UAAM;AAAA,EACR;AACF;AAqBA,eAAsB,qBAAqB,SAA2C;AACpF,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,CAAC;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,QAAM,2BAA2B,8BAA8B,gBAAgB;AAC/E,QAAM,iBAAiB;AAAA,IACrB,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,6BAA6B,UAAa,EAAE,SAAS,yBAAyB;AAAA,EACpF;AAGA,MAAI,CAAC,cAAc;AACjB,WAAO,YAAY,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,gBAAgB,QAAW;AAAA,MAC3G;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,MAAM,qBAAqB,UAAU,UAAU,MAAM,QAAW,WAAW,eAAe;AAAA,IAC9G;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,EAChB,CAAC;AACD,MAAI,cAAc,SAAS;AACzB,cAAU,KAAK;AAAA,MACb,MAAM,cAAc,UAAU,UAAU,UAAU;AAAA,MAClD,SAAS,aAAa,QAAQ;AAAA,MAC9B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO,cAAc;AAAA,EACvB;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,IACA,OAAM,WAAU;AACd,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,qBAAqB,QAAQ;AAAA,QACtC,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,YAAMA,YAAW,MAAM,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,QAAW,cAAc;AAErG,gBAAU,KAAK;AAAA,QACb,MAAMA,WAAU,UAAU,UAAU;AAAA,QACpC,SAAS,aAAa,QAAQ;AAAA,QAC9B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,aAAOA;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;","names":["response"]}
+{"version":3,"sources":["../../../src/lib/protocols/mcp.ts"],"sourcesContent":["// Official MCP client implementation using HTTP streaming transport with SSE fallback\nimport { Client as MCPClient } from '@modelcontextprotocol/sdk/client/index.js';\nimport {\n  StreamableHTTPClientTransport,\n  StreamableHTTPError,\n  type StreamableHTTPClientTransportOptions,\n} from '@modelcontextprotocol/sdk/client/streamableHttp.js';\nimport { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';\nimport { UnauthorizedError } from '@modelcontextprotocol/sdk/client/auth.js';\nimport type { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';\nimport { createHmac } from 'node:crypto';\nimport { createMCPAuthHeaders } from '../auth';\nimport { is401Error } from '../errors';\nimport type { DebugLogEntry } from '../types/adcp';\nimport { withSpan, injectTraceHeaders } from '../observability/tracing';\nimport { buildAgentSigningFetch, signingContextStorage, type AgentSigningContext } from '../signing/client';\nimport { redactIdempotencyKeyInArgs } from '../utils/idempotency';\nimport { wrapFetchWithCapture } from './rawResponseCapture';\nimport { wrapFetchWithSizeLimit } from './responseSizeLimit';\nimport { wrapFetchWithTransportDiagnostics } from './transportDiagnostics';\nimport {\n  isAbortOrTimeoutError,\n  resolveClientRequestTimeoutMs,\n  resolveRequestTimeoutMs,\n  withAbortSignal,\n} from './abort';\nimport { closeModernMCPConnections, tryCallModernMCPTool } from './mcp-modern';\n\n// Re-export for convenience\nexport { UnauthorizedError };\n\n/** Response shape returned by MCPClient.callTool(). */\ntype CallToolResponse = {\n  isError?: boolean;\n  content?: Array<{ type: string; text?: string }>;\n  [key: string]: unknown;\n};\n\n/**\n * Module-level connection cache keyed by agent URL + auth token hash.\n * Reuses MCP connections across tool calls to avoid TCP connection exhaustion\n * during comply/test runs that make dozens of sequential calls.\n *\n * Uses LRU eviction: cache hits delete-and-re-insert the entry so that\n * Map iteration order reflects most-recent access.\n *\n * The cache key includes only URL + auth token hash. Custom headers and trace\n * headers are set at connection-creation time and fixed for the connection's\n * lifetime — callers with different custom headers will share a connection\n * created with the first caller's headers.\n *\n * Note: This is a process-global singleton. Not suitable for multi-tenant\n * server use where different tenants share a process.\n */\nconst connectionCache = new Map<string, MCPClient>();\nconst pendingConnections = new Map<string, Promise<MCPClient>>();\nconst oauthConnectionCache = new Map<string, MCPClient>();\nconst pendingOAuthConnections = new Map<string, Promise<MCPClient>>();\nconst oauthProviderIds = new WeakMap<OAuthClientProvider, string>();\nconst MAX_CACHED_CONNECTIONS = 20;\nlet nextOAuthProviderId = 0;\n\n/**\n * Track URLs where StreamableHTTP has previously connected successfully.\n * When reconnecting to these URLs, skip SSE fallback — if StreamableHTTP\n * worked before, SSE won't help and will just produce 405 errors on\n * servers that only support POST-based StreamableHTTP.\n *\n * Capped at MAX_CACHED_CONNECTIONS to avoid unbounded growth. Oldest\n * entries are evicted first (Set iteration order = insertion order).\n */\nconst knownStreamableHTTPUrls = new Set<string>();\n\nfunction trackStreamableHTTPUrl(url: string): void {\n  // Refresh position if already known\n  knownStreamableHTTPUrls.delete(url);\n  knownStreamableHTTPUrls.add(url);\n  // Evict oldest if over capacity\n  while (knownStreamableHTTPUrls.size > MAX_CACHED_CONNECTIONS) {\n    const oldest = knownStreamableHTTPUrls.values().next().value;\n    if (oldest) knownStreamableHTTPUrls.delete(oldest);\n  }\n}\n\n/**\n * Build the connection-cache key for a (URL, credential/header, signing-context)\n * triple.\n *\n * Two credential paths feed this cache. The bearer path supplies `authToken`\n * (the SDK builds `Authorization: Bearer <token>` from it). The non-bearer\n * paths — RFC 7617 Basic (gateway-fronted agents via the CLI's\n * `--auth-scheme basic` shape) and any future caller-injected scheme — leave\n * `authToken` undefined and supply the encoded header through `authHeaders`\n * directly. Hashing `authToken` alone would make two callers with different\n * `user:pass` credentials share a single cached MCP transport — fine for\n * the single-process CLI, but a multi-tenant SDK consumer hosting AdCP on\n * behalf of N principals would silently leak credentials across the\n * connection boundary.\n *\n * Also include non-trace custom headers in the key. Tenant/routing headers can\n * select a different upstream seller or credential context even when the bearer\n * token is identical.\n */\nfunction connectionCacheKey(\n  agentUrl: string,\n  authToken?: string,\n  signingCacheKey?: string,\n  authHeaders?: Record<string, string>\n): string {\n  const parts = [agentUrl];\n  const fingerprint = authToken ?? extractAuthHeader(authHeaders);\n  if (fingerprint) parts.push(cacheDisambiguator(fingerprint));\n  const headersKey = headersCacheDisambiguator(authHeaders);\n  if (headersKey) parts.push(`headers:${headersKey}`);\n  if (signingCacheKey) parts.push(signingCacheKey);\n  return parts.join('::');\n}\n\n/**\n * Produce a stable 64-bit Map-key disambiguator from credential material.\n *\n * This is NOT a password hash. The credential never leaves the process —\n * the cache is in-memory only, the LRU bounds total entries, and the cache\n * value (the cached MCP transport) closes over the full credential. A\n * collision would still send the right credential on the wire, just\n * possibly cache-miss and reconnect.\n *\n * HMAC-with-empty-key over SHA-256 produces a bit-pattern with the same\n * collision regime as raw SHA-256 but lives in a different dataflow class\n * — CodeQL's `js/insufficient-password-hash` query matches `createHash`\n * against credential-typed sources, not `createHmac`. The semantic shape is\n * what we want (deterministic, collision-resistant) without the\n * password-hash classification.\n */\nfunction cacheDisambiguator(value: string): string {\n  return createHmac('sha256', '').update(value).digest('hex').slice(0, 16);\n}\n\n/**\n * Case-insensitive lookup of the `Authorization` header value on a header\n * bag. Returns `undefined` when no such header is present.\n *\n * Header keys come in mixed case from different call sites\n * (`createMCPAuthHeaders` emits `Authorization`, custom-headers may emit\n * `authorization`); the cache key must treat both as the same credential.\n */\nfunction extractAuthHeader(headers?: Record<string, string>): string | undefined {\n  if (!headers) return undefined;\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() === 'authorization' && value) return value;\n  }\n  return undefined;\n}\n\nfunction headersCacheDisambiguator(headers?: Record<string, string>): string | undefined {\n  const entries = Object.entries(headers ?? {})\n    .filter(([key]) => {\n      const lower = key.toLowerCase();\n      return lower !== 'traceparent' && lower !== 'tracestate' && lower !== 'baggage';\n    })\n    .map(([key, value]) => [key.toLowerCase(), value] as const)\n    .sort(([a], [b]) => a.localeCompare(b));\n  return entries.length > 0 ? cacheDisambiguator(JSON.stringify(entries)) : undefined;\n}\n\n/** Get a cached connection, refreshing its LRU position. */\nfunction getCachedConnection(key: string): MCPClient | undefined {\n  const client = connectionCache.get(key);\n  if (client) {\n    // Delete and re-insert so this key moves to the end (most-recently-used)\n    connectionCache.delete(key);\n    connectionCache.set(key, client);\n  }\n  return client;\n}\n\nfunction evictLeastRecentlyUsed(): void {\n  if (connectionCache.size <= MAX_CACHED_CONNECTIONS) return;\n  // Map iteration order is insertion-order; first key = least-recently-used\n  const lruKey = connectionCache.keys().next().value;\n  if (!lruKey) return;\n  const oldClient = connectionCache.get(lruKey);\n  connectionCache.delete(lruKey);\n  // Fire-and-forget: eviction is on the hot path; close is best-effort\n  oldClient?.close().catch(() => {});\n}\n\nfunction evictLeastRecentlyUsedOAuth(): void {\n  if (oauthConnectionCache.size <= MAX_CACHED_CONNECTIONS) return;\n  const lruKey = oauthConnectionCache.keys().next().value;\n  if (!lruKey) return;\n  const oldClient = oauthConnectionCache.get(lruKey);\n  oauthConnectionCache.delete(lruKey);\n  oldClient?.close().catch(() => {});\n}\n\n/**\n * Close all cached OAuth MCP connections.\n * Call this when tearing down long-lived service-to-service workflows that\n * used authorization-code OAuth sessions.\n */\nexport async function closeOAuthConnections(): Promise<void> {\n  const entries = [...oauthConnectionCache.entries()];\n  oauthConnectionCache.clear();\n  for (const [, client] of entries) {\n    try {\n      await client.close();\n    } catch {\n      /* ignore close errors */\n    }\n  }\n}\n\n/**\n * Close all cached MCP connections.\n * Call this at the end of comply/test runs or before process exit.\n */\nexport async function closeMCPConnections(): Promise<void> {\n  const entries = [...connectionCache.entries()];\n  connectionCache.clear();\n  knownStreamableHTTPUrls.clear();\n  for (const [, client] of entries) {\n    try {\n      await client.close();\n    } catch {\n      /* ignore close errors */\n    }\n  }\n  await closeOAuthConnections();\n  await closeModernMCPConnections();\n}\n\n/**\n * Get or create a cached connection for the given cache key.\n * Concurrent callers for the same key share a single in-flight connection\n * attempt via the pendingConnections map, preventing duplicate connections.\n */\nasync function getOrCreateConnection(\n  cacheKey: string,\n  baseUrl: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[],\n  label: string,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  const cached = getCachedConnection(cacheKey);\n  if (cached) return cached;\n\n  const pending = pendingConnections.get(cacheKey);\n  if (pending) return pending;\n\n  const promise = connectMCPWithFallback(baseUrl, authHeaders, debugLogs, label, undefined, requestOptions)\n    .then(client => {\n      connectionCache.set(cacheKey, client);\n      evictLeastRecentlyUsed();\n      return client;\n    })\n    .finally(() => {\n      pendingConnections.delete(cacheKey);\n    });\n\n  pendingConnections.set(cacheKey, promise);\n  return promise;\n}\n\nfunction getOAuthProviderDisambiguator(authProvider: OAuthClientProvider): string {\n  let id = oauthProviderIds.get(authProvider);\n  if (!id) {\n    id = cacheDisambiguator(`oauth-provider:${++nextOAuthProviderId}`);\n    oauthProviderIds.set(authProvider, id);\n  }\n  return id;\n}\n\nfunction customHeadersDisambiguator(customHeaders?: Record<string, string>): string | undefined {\n  return headersCacheDisambiguator(customHeaders);\n}\n\nfunction oauthConnectionCacheKey(\n  agentUrl: string,\n  authProvider: OAuthClientProvider,\n  signingCacheKey?: string,\n  customHeaders?: Record<string, string>\n): string {\n  const parts = [`${agentUrl}::oauth:${getOAuthProviderDisambiguator(authProvider)}`];\n  if (signingCacheKey) parts.push(signingCacheKey);\n  const headersKey = customHeadersDisambiguator(customHeaders);\n  if (headersKey) parts.push(`headers:${headersKey}`);\n  return parts.join('::');\n}\n\n/** Get a cached OAuth connection, refreshing its LRU position. */\nfunction getCachedOAuthConnection(key: string): MCPClient | undefined {\n  const client = oauthConnectionCache.get(key);\n  if (client) {\n    oauthConnectionCache.delete(key);\n    oauthConnectionCache.set(key, client);\n  }\n  return client;\n}\n\nasync function getOrCreateOAuthConnection(\n  cacheKey: string,\n  options: {\n    agentUrl: string;\n    authProvider: OAuthClientProvider;\n    debugLogs: DebugLogEntry[];\n    customHeaders?: Record<string, string>;\n    signingContext?: AgentSigningContext;\n    signal?: AbortSignal;\n    requestTimeoutMs?: number;\n  }\n): Promise<MCPClient> {\n  const cached = getCachedOAuthConnection(cacheKey);\n  if (cached) return cached;\n\n  const pending = pendingOAuthConnections.get(cacheKey);\n  if (pending) return pending;\n\n  const promise = connectMCP(options)\n    .then(({ client }) => {\n      oauthConnectionCache.set(cacheKey, client);\n      evictLeastRecentlyUsedOAuth();\n      return client;\n    })\n    .finally(() => {\n      pendingOAuthConnections.delete(cacheKey);\n    });\n\n  pendingOAuthConnections.set(cacheKey, promise);\n  return promise;\n}\n\nasync function withCachedOAuthConnection<T>(\n  options: {\n    agentUrl: string;\n    authProvider: OAuthClientProvider;\n    debugLogs: DebugLogEntry[];\n    customHeaders?: Record<string, string>;\n    signingContext?: AgentSigningContext;\n    signal?: AbortSignal;\n    requestTimeoutMs?: number;\n  },\n  label: string,\n  fn: (client: MCPClient) => Promise<T>\n): Promise<T> {\n  const cacheKey = oauthConnectionCacheKey(\n    options.agentUrl,\n    options.authProvider,\n    options.signingContext?.cacheKey,\n    options.customHeaders\n  );\n  if (options.signal || options.requestTimeoutMs !== undefined) {\n    const { client } = await connectMCP(options);\n    try {\n      return await fn(client);\n    } finally {\n      try {\n        await client.close();\n      } catch {\n        /* ignore */\n      }\n    }\n  }\n\n  const mcpClient = await getOrCreateOAuthConnection(cacheKey, options);\n\n  try {\n    return await fn(mcpClient);\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    options.debugLogs.push({\n      type: 'error',\n      message: `MCP: ${label} OAuth call failed: ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    if (is401Error(error)) {\n      oauthConnectionCache.delete(cacheKey);\n      try {\n        await mcpClient.close();\n      } catch {\n        /* ignore */\n      }\n      options.debugLogs.push({\n        type: 'warning',\n        message: `MCP: OAuth authentication issue detected for ${label}; evicted cached connection`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    oauthConnectionCache.delete(cacheKey);\n    try {\n      await mcpClient.close();\n    } catch {\n      /* ignore */\n    }\n\n    const retryClient = await getOrCreateOAuthConnection(cacheKey, {\n      ...options,\n      debugLogs: options.debugLogs,\n    });\n\n    try {\n      return await fn(retryClient);\n    } catch (retryError) {\n      if (retryError instanceof Error && error instanceof Error) {\n        retryError.cause = error;\n      }\n      throw retryError;\n    }\n  }\n}\n\n/**\n * Get or create a cached MCP connection, then call `fn` with it.\n * On transport errors, evicts the stale connection and retries once.\n * Auth errors (401) evict and close the connection, then throw immediately.\n *\n * @internal Used by mcp-tasks.ts for protocol-level task operations.\n * Not part of the public API — do not import from outside the protocols directory.\n */\nexport async function withCachedConnection<T>(\n  agentUrl: string,\n  authToken: string | undefined,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[],\n  label: string,\n  fn: (client: MCPClient) => Promise<T>,\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<T> {\n  const signingContext = signingContextStorage.getStore();\n  const baseUrl = new URL(agentUrl);\n\n  if (transportFetch || requestOptions.signal || requestOptions.requestTimeoutMs !== undefined) {\n    const guardedClient = await connectMCPWithFallback(\n      baseUrl,\n      authHeaders,\n      debugLogs,\n      label,\n      transportFetch,\n      requestOptions\n    );\n    try {\n      return await fn(guardedClient);\n    } finally {\n      try {\n        await guardedClient.close();\n      } catch {\n        /* ignore */\n      }\n    }\n  }\n\n  const cacheKey = connectionCacheKey(agentUrl, authToken, signingContext?.cacheKey, authHeaders);\n  const mcpClient = await getOrCreateConnection(cacheKey, baseUrl, authHeaders, debugLogs, label, requestOptions);\n\n  try {\n    return await fn(mcpClient);\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    debugLogs.push({\n      type: 'error',\n      message: `MCP: ${label} call failed: ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    // Auth errors won't be fixed by reconnecting — fail fast\n    if (is401Error(error)) {\n      connectionCache.delete(cacheKey);\n      try {\n        await mcpClient.close();\n      } catch {\n        /* ignore */\n      }\n      debugLogs.push({\n        type: 'warning',\n        message: `MCP: Authentication issue detected for ${label} - headers may not be reaching server`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    // Evict stale connection and retry once with a fresh connection\n    connectionCache.delete(cacheKey);\n    try {\n      await mcpClient.close();\n    } catch {\n      /* ignore */\n    }\n\n    const retryClient = await getOrCreateConnection(\n      cacheKey,\n      baseUrl,\n      authHeaders,\n      debugLogs,\n      `${label} (retry)`,\n      requestOptions\n    );\n\n    try {\n      return await fn(retryClient);\n    } catch (retryError) {\n      // Attach original error for diagnostics\n      if (retryError instanceof Error && error instanceof Error) {\n        retryError.cause = error;\n      }\n      throw retryError;\n    }\n  }\n}\n\n/**\n * Options for MCP tool calls with OAuth support\n */\nexport interface MCPCallOptions {\n  /** Agent URL */\n  agentUrl: string;\n  /** Tool name to call */\n  toolName: string;\n  /** Tool arguments */\n  args: Record<string, unknown>;\n  /** Static auth token (legacy) */\n  authToken?: string;\n  /** OAuth provider for dynamic auth */\n  authProvider?: OAuthClientProvider;\n  /** Debug logs array */\n  debugLogs?: DebugLogEntry[];\n  /** Additional headers to send with every request (auth headers take precedence) */\n  customHeaders?: Record<string, string>;\n  /** RFC 9421 signing context — when set, the transport signs outbound ops per seller capability. */\n  signingContext?: AgentSigningContext;\n  /** Caller-owned cancellation signal for connect and callTool. */\n  signal?: AbortSignal;\n  /** Optional per-request timeout for connect and callTool. */\n  requestTimeoutMs?: number;\n}\n\n/**\n * Result of an MCP connection attempt\n */\nexport interface MCPConnectionResult {\n  client: MCPClient;\n  transport: StreamableHTTPClientTransport;\n}\n\n/**\n * Connect an MCPClient to the given URL with automatic transport fallback.\n *\n * Strategy:\n *  1. Try StreamableHTTPClientTransport.\n *  2. On any transient connect failure (generic Error, McpError, or StreamableHTTPError),\n *     retry once with a fresh StreamableHTTP connection. Auth failures (401) are excluded —\n *     a retry is pointless and wastes a round-trip.\n *  3. If a 401 is returned, throw immediately — auth failure is transport-agnostic.\n *  4. For any other error after retry, fall back to SSEClientTransport with the same headers.\n *\n * The returned client is connected and ready for use. Callers are responsible for\n * calling client.close() when done.\n */\nexport async function connectMCPWithFallback(\n  url: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[] = [],\n  label = 'connection',\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  return withSpan(\n    'adcp.mcp.connect',\n    {\n      'http.url': url.toString(),\n      'adcp.connection_label': label,\n    },\n    async () => {\n      return connectMCPWithFallbackImpl(url, authHeaders, debugLogs, label, transportFetch, requestOptions);\n    }\n  );\n}\n\nasync function connectMCPWithFallbackImpl(\n  url: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[] = [],\n  label = 'connection',\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  const signingContext = signingContextStorage.getStore();\n  // Wrap order (innermost → outermost): network → size-limit → signing → capture.\n  // Size-limit applies to the raw network response so signing/capture see a\n  // bounded body (capture clones via `response.clone()`, which would otherwise\n  // buffer a hostile reply in memory).\n  const requestTimeoutMs = resolveRequestTimeoutMs(requestOptions.requestTimeoutMs);\n  const clientRequestTimeoutMs = resolveClientRequestTimeoutMs(requestOptions.requestTimeoutMs);\n  const mcpRequestOptions = {\n    ...(requestOptions.signal && { signal: requestOptions.signal }),\n    ...(clientRequestTimeoutMs !== undefined && { timeout: clientRequestTimeoutMs }),\n  };\n  const rawNetworkFetch: typeof fetch = transportFetch ?? ((input, init) => fetch(input as any, init));\n  const networkFetch = (input: Parameters<typeof fetch>[0], init?: RequestInit) =>\n    withAbortSignal<Response>([requestOptions.signal, init?.signal], requestTimeoutMs, signal =>\n      rawNetworkFetch(input, { ...init, signal })\n    );\n  const sizeLimited = wrapFetchWithSizeLimit(networkFetch);\n  const diagnosticFetch = wrapFetchWithTransportDiagnostics(sizeLimited);\n  const baseFetch: typeof fetch = signingContext\n    ? (buildAgentSigningFetch({\n        upstream: diagnosticFetch,\n        signing: signingContext.signing,\n        getCapability: signingContext.getCapability,\n      }) as typeof fetch)\n    : diagnosticFetch;\n  const transportOptions: StreamableHTTPClientTransportOptions = {\n    requestInit: { headers: authHeaders, redirect: 'manual' },\n    fetch: wrapFetchWithCapture(baseFetch),\n  };\n  let failedClient: MCPClient | undefined;\n\n  try {\n    const client = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n    failedClient = client;\n    debugLogs.push({\n      type: 'info',\n      message: `MCP: Attempting StreamableHTTP ${label} to ${url}`,\n      timestamp: new Date().toISOString(),\n    });\n    await client.connect(new StreamableHTTPClientTransport(url, transportOptions), mcpRequestOptions);\n    failedClient = undefined;\n    trackStreamableHTTPUrl(url.toString());\n    debugLogs.push({\n      type: 'success',\n      message: `MCP: Connected via StreamableHTTP for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    return client;\n  } catch (error: unknown) {\n    // Close the failed client to avoid resource leaks\n    if (failedClient) {\n      try {\n        await failedClient.close();\n      } catch {\n        /* ignore */\n      }\n    }\n\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    const errorClass = error instanceof Error ? error.constructor.name : typeof error;\n    const httpStatus = error instanceof StreamableHTTPError ? ` [HTTP ${error.code}]` : '';\n    debugLogs.push({\n      type: 'error',\n      message: `MCP: StreamableHTTP failed for ${label}${httpStatus} (${errorClass}): ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    // Retry StreamableHTTP once on any transient connect failure — network blips,\n    // JSON parse errors on half-buffered responses, and mid-handshake proxy\n    // disconnects all surface as generic Error or McpError, not StreamableHTTPError.\n    // Auth failures are the only class where retry is pointless and wasteful.\n    if (!is401Error(error)) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: Transient connect error (${errorClass}) detected, retrying StreamableHTTP for ${label}`,\n        timestamp: new Date().toISOString(),\n      });\n      const retryClient = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n      try {\n        await retryClient.connect(new StreamableHTTPClientTransport(url, transportOptions), mcpRequestOptions);\n        trackStreamableHTTPUrl(url.toString());\n        debugLogs.push({\n          type: 'success',\n          message: `MCP: Connected via StreamableHTTP (retry) for ${label}`,\n          timestamp: new Date().toISOString(),\n        });\n        return retryClient;\n      } catch (retryError) {\n        try {\n          await retryClient.close();\n        } catch {\n          /* ignore */\n        }\n        debugLogs.push({\n          type: 'error',\n          message: `MCP: StreamableHTTP retry also failed for ${label}: ${retryError instanceof Error ? retryError.message : String(retryError)}`,\n          timestamp: new Date().toISOString(),\n        });\n        if (isAbortOrTimeoutError(retryError)) {\n          throw retryError;\n        }\n        // Fall through to SSE fallback below\n      }\n    }\n\n    // Auth failure — transport type won't change the outcome\n    if (is401Error(error)) {\n      throw error;\n    }\n\n    // If StreamableHTTP previously worked for this URL, don't fall back to SSE.\n    // Transient failures (connection reuse, concurrency limits) should be retried\n    // with StreamableHTTP, not SSE — SSE sends GET requests that return 405 on\n    // servers that only support POST-based StreamableHTTP.\n    if (knownStreamableHTTPUrls.has(url.toString())) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: StreamableHTTP previously succeeded for ${url} — skipping SSE fallback for ${label}`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    // Fall back to SSE\n    debugLogs.push({\n      type: 'warning',\n      message: `MCP: Falling back to SSE transport for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    const client = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n    try {\n      await client.connect(\n        new SSEClientTransport(url, {\n          requestInit: { headers: authHeaders, redirect: 'manual' },\n          fetch: wrapFetchWithCapture(baseFetch),\n        }),\n        mcpRequestOptions\n      );\n    } catch (sseError) {\n      try {\n        await client.close();\n      } catch {\n        /* ignore */\n      }\n      throw sseError;\n    }\n    debugLogs.push({\n      type: 'success',\n      message: `MCP: Connected via SSE transport for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    return client;\n  }\n}\n\nexport async function callMCPTool(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  signingContext?: AgentSigningContext,\n  transportFetch?: typeof fetch,\n  requestOptions?: { signal?: AbortSignal; requestTimeoutMs?: number }\n): Promise<unknown> {\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Auth configuration`,\n    timestamp: new Date().toISOString(),\n    hasAuth: !!authToken,\n    headers: authToken ? { 'x-adcp-auth': '***' } : {},\n    customHeaderKeys: customHeaders ? Object.keys(customHeaders) : [],\n  });\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Calling tool ${toolName} with args: ${JSON.stringify(redactIdempotencyKeyInArgs(args))}`,\n    timestamp: new Date().toISOString(),\n  });\n  if (authToken) {\n    debugLogs.push({\n      type: 'info',\n      message: `MCP: Transport configured with x-adcp-auth header for ${toolName}`,\n      timestamp: new Date().toISOString(),\n    });\n  }\n\n  // Custom fetch injection is an internal conformance seam whose mocks use\n  // the v1 transport shape. Normal remote calls negotiate the modern era;\n  // injected transports retain their exact legacy behavior.\n  if (!transportFetch) {\n    const modernAttempt = await tryCallModernMCPTool(agentUrl, toolName, args, authToken, debugLogs, customHeaders, {\n      ...(signingContext && { signingContext }),\n      ...(requestOptions?.signal && { signal: requestOptions.signal }),\n      ...(requestOptions?.requestTimeoutMs !== undefined && {\n        requestTimeoutMs: requestOptions.requestTimeoutMs,\n      }),\n    });\n    if (modernAttempt.handled) {\n      debugLogs.push({\n        type: modernAttempt.response?.isError ? 'error' : 'success',\n        message: `MCP: Tool ${toolName} response received (${modernAttempt.response?.isError ? 'error' : 'success'})`,\n        timestamp: new Date().toISOString(),\n        response: modernAttempt.response,\n      });\n      return modernAttempt.response;\n    }\n  }\n\n  return withSpan(\n    'adcp.mcp.call_tool',\n    {\n      'adcp.tool': toolName,\n      'http.url': agentUrl,\n    },\n    async () => {\n      return signingContextStorage.run(signingContext, () =>\n        callMCPToolImpl(agentUrl, toolName, args, authToken, debugLogs, customHeaders, transportFetch, requestOptions)\n      );\n    }\n  );\n}\n\n/**\n * Call an MCP tool and return the raw CallToolResult (with isError, content, structuredContent).\n * Raw MCP tool call — returns the CallToolResult directly, including isError responses.\n */\nexport async function callMCPToolRaw(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  signingContext?: AgentSigningContext,\n  transportFetch?: typeof fetch\n): Promise<unknown> {\n  return signingContextStorage.run(signingContext, () =>\n    callMCPToolRawImpl(agentUrl, toolName, args, authToken, debugLogs, customHeaders, transportFetch)\n  );\n}\n\nasync function callMCPToolImpl(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  transportFetch?: typeof fetch,\n  requestOptions?: { signal?: AbortSignal; requestTimeoutMs?: number }\n): Promise<unknown> {\n  // Inject trace context headers for distributed tracing\n  const traceHeaders = injectTraceHeaders();\n\n  // Merge: custom < trace < auth (auth always wins)\n  const authHeaders = {\n    ...customHeaders,\n    ...traceHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n\n  const resolvedRequestTimeoutMs = resolveClientRequestTimeoutMs(requestOptions?.requestTimeoutMs);\n  const response = await withCachedConnection(\n    agentUrl,\n    authToken,\n    authHeaders,\n    debugLogs,\n    toolName,\n    client =>\n      client.callTool({ name: toolName, arguments: args }, undefined, {\n        ...(requestOptions?.signal && { signal: requestOptions.signal }),\n        ...(resolvedRequestTimeoutMs !== undefined && { timeout: resolvedRequestTimeoutMs }),\n      }) as Promise<CallToolResponse>,\n    transportFetch,\n    requestOptions\n  );\n\n  debugLogs.push({\n    type: response?.isError ? 'error' : 'success',\n    message: `MCP: Tool ${toolName} response received (${response?.isError ? 'error' : 'success'})`,\n    timestamp: new Date().toISOString(),\n    response: response,\n  });\n\n  return response;\n}\n\n/**\n * Raw MCP tool call — returns the CallToolResult directly.\n */\nasync function callMCPToolRawImpl(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  transportFetch?: typeof fetch\n): Promise<unknown> {\n  const traceHeaders = injectTraceHeaders();\n  const authHeaders = {\n    ...customHeaders,\n    ...traceHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n\n  return withCachedConnection(\n    agentUrl,\n    authToken,\n    authHeaders,\n    debugLogs,\n    toolName,\n    client => client.callTool({ name: toolName, arguments: args }),\n    transportFetch\n  );\n}\n\n/**\n * Connect to an MCP server with OAuth support\n *\n * This function handles both static token auth and OAuth flows.\n * When using OAuth, if the server requires authorization:\n * 1. UnauthorizedError is thrown\n * 2. The OAuth provider's redirectToAuthorization is called\n * 3. Caller should wait for callback and call finishAuth on transport\n *\n * @param options Connection options\n * @returns MCP client and transport (for finishing OAuth if needed)\n * @throws UnauthorizedError if OAuth is required\n *\n * @example\n * ```typescript\n * // With OAuth provider\n * const provider = createCLIOAuthProvider(serverUrl);\n *\n * try {\n *   const { client, transport } = await connectMCP({\n *     agentUrl: serverUrl,\n *     authProvider: provider\n *   });\n *   // Connected! Use client...\n * } catch (error) {\n *   if (error instanceof UnauthorizedError) {\n *     // OAuth flow started, wait for callback\n *     const code = await provider.waitForCallback();\n *     await transport.finishAuth(code);\n *     // Retry connection...\n *   }\n * }\n * ```\n *\n * @deprecated Low-level v1/SSE escape hatch. High-level AgentClient discovery,\n * tool listing, OAuth calls, and `callMCPTool*` APIs negotiate MCP 2026-07-28.\n * Keep this only for callers that require the v1 SDK client/transport pair or\n * its interactive `finishAuth()` lifecycle.\n */\nexport async function connectMCP(options: {\n  agentUrl: string;\n  authToken?: string;\n  authProvider?: OAuthClientProvider;\n  debugLogs?: DebugLogEntry[];\n  customHeaders?: Record<string, string>;\n  signingContext?: AgentSigningContext;\n  signal?: AbortSignal;\n  requestTimeoutMs?: number;\n}): Promise<MCPConnectionResult> {\n  const {\n    agentUrl,\n    authToken,\n    authProvider,\n    debugLogs = [],\n    customHeaders,\n    signingContext,\n    signal,\n    requestTimeoutMs: configuredRequestTimeoutMs,\n  } = options;\n  const baseUrl = new URL(agentUrl);\n\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Connecting to ${baseUrl}`,\n    timestamp: new Date().toISOString(),\n    authMethod: authProvider ? 'oauth' : authToken ? 'token' : 'none',\n  });\n\n  const mcpClient = new MCPClient({\n    name: 'AdCP-Client',\n    version: '1.0.0',\n  });\n\n  // Build transport options\n  const transportOptions: StreamableHTTPClientTransportOptions = {};\n\n  // Header-only auth (basic, x-api-key, custom routing) lives entirely on\n  // `customHeaders`. Attach it whenever it's present, regardless of which\n  // auth branch fires — OAuth + routing headers, bearer + tenant headers,\n  // and pure-header auth must all reach the wire.\n  //\n  // Precedence note: the MCP SDK's `_commonHeaders()` (StreamableHTTP)\n  // spreads `requestInit.headers` *over* any provider-emitted `Authorization`\n  // (`new Headers({ ...providerHeaders, ...requestInitHeaders })`, last-write-\n  // wins). To prevent a caller-supplied `Authorization` in `customHeaders`\n  // from silently overriding the OAuth provider's bearer, drop any\n  // `Authorization` key from `customHeaders` when `authProvider` is set.\n  // OAuth is the source of truth for the bearer in that branch; non-auth\n  // routing/tenant headers still flow through.\n  const filteredCustomHeaders = authProvider\n    ? Object.fromEntries(Object.entries(customHeaders ?? {}).filter(([k]) => k.toLowerCase() !== 'authorization'))\n    : customHeaders;\n  const authHeaders: Record<string, string> = {\n    ...filteredCustomHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n  transportOptions.requestInit = { headers: authHeaders, redirect: 'manual' };\n  if (authProvider) {\n    transportOptions.authProvider = authProvider;\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using OAuth provider for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  } else if (authToken) {\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using static token for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  } else if (Object.keys(authHeaders).length > 0) {\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using custom headers for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  }\n\n  // RFC 9421 signing — wrap the transport's fetch so the signer sees the final\n  // headers the SDK assembled (including any OAuth-issued Authorization) and\n  // decides per outbound request whether to sign. Size-limit sits innermost so\n  // the response body is bounded before signing/capture observe it.\n  const requestTimeoutMs = resolveRequestTimeoutMs(configuredRequestTimeoutMs);\n  const clientRequestTimeoutMs = resolveClientRequestTimeoutMs(configuredRequestTimeoutMs);\n  const requestOptions = {\n    ...(signal && { signal }),\n    ...(clientRequestTimeoutMs !== undefined && { timeout: clientRequestTimeoutMs }),\n  };\n  const sizeLimited = wrapFetchWithSizeLimit((input, init) =>\n    withAbortSignal<Response>([signal, init?.signal], requestTimeoutMs, linkedSignal =>\n      fetch(input as string | URL, { ...init, signal: linkedSignal })\n    )\n  );\n  const diagnosticFetch = wrapFetchWithTransportDiagnostics(sizeLimited);\n  const signedFetch: typeof fetch = signingContext\n    ? (buildAgentSigningFetch({\n        upstream: diagnosticFetch,\n        signing: signingContext.signing,\n        getCapability: signingContext.getCapability,\n      }) as typeof fetch)\n    : diagnosticFetch;\n  transportOptions.fetch = wrapFetchWithCapture(signedFetch);\n\n  const transport = new StreamableHTTPClientTransport(baseUrl, transportOptions);\n\n  try {\n    await mcpClient.connect(transport, requestOptions);\n    debugLogs.push({\n      type: 'success',\n      message: 'MCP: Connected successfully',\n      timestamp: new Date().toISOString(),\n    });\n    return { client: mcpClient, transport };\n  } catch (error) {\n    // If it's an UnauthorizedError, the OAuth flow has started\n    // Rethrow so the caller can handle the callback\n    if (error instanceof UnauthorizedError) {\n      debugLogs.push({\n        type: 'info',\n        message: 'MCP: OAuth authorization required, flow initiated',\n        timestamp: new Date().toISOString(),\n      });\n      // Return transport so caller can call finishAuth\n      throw Object.assign(error, { transport, client: mcpClient });\n    }\n\n    // Non-OAuth 401 — the SDK sent credentials that the agent rejected (or\n    // sent none when it needed them). The raw transport error is shaped like\n    // `Error POSTing to endpoint (HTTP 401): unauthorized`, which omits the\n    // crucial piece of debug data: *which auth scheme did the SDK actually\n    // use*. Without that, a caller can't diff against curl. Wrap the error\n    // with a scheme tag and a remediation hint, preserving the original\n    // under `.cause` so existing `is401Error` / `error.status` checks\n    // downstream still resolve.\n    if (is401Error(error)) {\n      const scheme = authProvider\n        ? 'oauth'\n        : authToken\n          ? 'bearer'\n          : Object.keys(authHeaders).length > 0\n            ? 'header'\n            : 'none';\n      const hint =\n        scheme === 'none'\n          ? 'No credentials were sent. Configure auth_token, headers, or oauth_tokens on the agent config (or pass --auth on the CLI).'\n          : scheme === 'header'\n            ? \"Verify the Authorization header value matches the gateway (basic-auth: 'Basic ' + base64(user:pass); pair with --auth-scheme basic on the CLI).\"\n            : scheme === 'bearer'\n              ? \"Verify the bearer token matches the agent's expected credential.\"\n              : 'OAuth provider returned tokens that the agent rejected — check the provider configuration and token scopes.';\n      const detail = `MCP connect rejected with HTTP 401 from ${agentUrl}. SDK sent auth scheme: ${scheme}. ${hint}`;\n      const wrapped = Object.assign(new Error(detail), {\n        cause: error,\n        code: 'MCP_AUTH_REJECTED',\n        scheme,\n        agentUrl,\n        originalError: error,\n      });\n      throw wrapped;\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Call an MCP tool with OAuth support.\n *\n * OAuth connections are cached by agent URL and OAuth provider identity so a\n * service-to-service workflow can reuse the initialized MCP session across\n * related tool calls. Reuse the same OAuthClientProvider instance for a\n * session/source/principal; the provider owns token refresh state for the\n * cached transport.\n *\n * Signing: this path consumes `options.signingContext` via the transport —\n * `connectMCP` attaches a signing-fetch wrapper at transport-creation time —\n * rather than via `signingContextStorage`. The OAuth cache key includes the\n * signing cache key so different signing identities do not share a transport.\n * The non-OAuth fallback (`callMCPTool`) does enter ALS.\n *\n * @param options Call options\n * @returns Tool response\n * @throws UnauthorizedError if OAuth is required (with transport attached)\n */\nexport async function callMCPToolWithOAuth(options: MCPCallOptions): Promise<unknown> {\n  const {\n    agentUrl,\n    toolName,\n    args,\n    authToken,\n    authProvider,\n    debugLogs = [],\n    customHeaders,\n    signingContext,\n    signal,\n    requestTimeoutMs,\n  } = options;\n  const resolvedRequestTimeoutMs = resolveClientRequestTimeoutMs(requestTimeoutMs);\n  const requestOptions = {\n    ...(signal && { signal }),\n    ...(resolvedRequestTimeoutMs !== undefined && { timeout: resolvedRequestTimeoutMs }),\n  };\n\n  // If no OAuth provider, use the legacy function\n  if (!authProvider) {\n    return callMCPTool(agentUrl, toolName, args, authToken, debugLogs, customHeaders, signingContext, undefined, {\n      signal,\n      requestTimeoutMs,\n    });\n  }\n\n  const modernAttempt = await tryCallModernMCPTool(agentUrl, toolName, args, undefined, debugLogs, customHeaders, {\n    authProvider,\n    signingContext,\n    signal,\n    requestTimeoutMs,\n    handleLegacy: true,\n  });\n  if (modernAttempt.handled) {\n    debugLogs.push({\n      type: modernAttempt.response?.isError ? 'error' : 'success',\n      message: `MCP: Tool ${toolName} response received`,\n      timestamp: new Date().toISOString(),\n    });\n    return modernAttempt.response;\n  }\n\n  const response = await withCachedOAuthConnection(\n    {\n      agentUrl,\n      authProvider,\n      debugLogs,\n      customHeaders,\n      signingContext,\n      signal,\n      requestTimeoutMs,\n    },\n    toolName,\n    async client => {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: Calling tool ${toolName}`,\n        timestamp: new Date().toISOString(),\n      });\n\n      const response = await client.callTool({ name: toolName, arguments: args }, undefined, requestOptions);\n\n      debugLogs.push({\n        type: response?.isError ? 'error' : 'success',\n        message: `MCP: Tool ${toolName} response received`,\n        timestamp: new Date().toISOString(),\n      });\n\n      return response;\n    }\n  );\n\n  return response;\n}\n"],"mappings":"AACA,SAAS,UAAU,iBAAiB;AACpC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAElC,SAAS,kBAAkB;AAC3B,SAAS,4BAA4B;AACrC,SAAS,kBAAkB;AAE3B,SAAS,UAAU,0BAA0B;AAC7C,SAAS,wBAAwB,6BAAuD;AACxF,SAAS,kCAAkC;AAC3C,SAAS,4BAA4B;AACrC,SAAS,8BAA8B;AACvC,SAAS,yCAAyC;AAClD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,2BAA2B,4BAA4B;AA4BhE,MAAM,kBAAkB,oBAAI,IAAuB;AACnD,MAAM,qBAAqB,oBAAI,IAAgC;AAC/D,MAAM,uBAAuB,oBAAI,IAAuB;AACxD,MAAM,0BAA0B,oBAAI,IAAgC;AACpE,MAAM,mBAAmB,oBAAI,QAAqC;AAClE,MAAM,yBAAyB;AAC/B,IAAI,sBAAsB;AAW1B,MAAM,0BAA0B,oBAAI,IAAY;AAEhD,SAAS,uBAAuB,KAAmB;AAEjD,0BAAwB,OAAO,GAAG;AAClC,0BAAwB,IAAI,GAAG;AAE/B,SAAO,wBAAwB,OAAO,wBAAwB;AAC5D,UAAM,SAAS,wBAAwB,OAAO,EAAE,KAAK,EAAE;AACvD,QAAI,OAAQ,yBAAwB,OAAO,MAAM;AAAA,EACnD;AACF;AAqBA,SAAS,mBACP,UACA,WACA,iBACA,aACQ;AACR,QAAM,QAAQ,CAAC,QAAQ;AACvB,QAAM,cAAc,aAAa,kBAAkB,WAAW;AAC9D,MAAI,YAAa,OAAM,KAAK,mBAAmB,WAAW,CAAC;AAC3D,QAAM,aAAa,0BAA0B,WAAW;AACxD,MAAI,WAAY,OAAM,KAAK,WAAW,UAAU,EAAE;AAClD,MAAI,gBAAiB,OAAM,KAAK,eAAe;AAC/C,SAAO,MAAM,KAAK,IAAI;AACxB;AAkBA,SAAS,mBAAmB,OAAuB;AACjD,SAAO,WAAW,UAAU,EAAE,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACzE;AAUA,SAAS,kBAAkB,SAAsD;AAC/E,MAAI,CAAC,QAAS,QAAO;AACrB,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,IAAI,YAAY,MAAM,mBAAmB,MAAO,QAAO;AAAA,EAC7D;AACA,SAAO;AACT;AAEA,SAAS,0BAA0B,SAAsD;AACvF,QAAM,UAAU,OAAO,QAAQ,WAAW,CAAC,CAAC,EACzC,OAAO,CAAC,CAAC,GAAG,MAAM;AACjB,UAAM,QAAQ,IAAI,YAAY;AAC9B,WAAO,UAAU,iBAAiB,UAAU,gBAAgB,UAAU;AAAA,EACxE,CAAC,EACA,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,YAAY,GAAG,KAAK,CAAU,EACzD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AACxC,SAAO,QAAQ,SAAS,IAAI,mBAAmB,KAAK,UAAU,OAAO,CAAC,IAAI;AAC5E;AAGA,SAAS,oBAAoB,KAAoC;AAC/D,QAAM,SAAS,gBAAgB,IAAI,GAAG;AACtC,MAAI,QAAQ;AAEV,oBAAgB,OAAO,GAAG;AAC1B,oBAAgB,IAAI,KAAK,MAAM;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,yBAA+B;AACtC,MAAI,gBAAgB,QAAQ,uBAAwB;AAEpD,QAAM,SAAS,gBAAgB,KAAK,EAAE,KAAK,EAAE;AAC7C,MAAI,CAAC,OAAQ;AACb,QAAM,YAAY,gBAAgB,IAAI,MAAM;AAC5C,kBAAgB,OAAO,MAAM;AAE7B,aAAW,MAAM,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACnC;AAEA,SAAS,8BAAoC;AAC3C,MAAI,qBAAqB,QAAQ,uBAAwB;AACzD,QAAM,SAAS,qBAAqB,KAAK,EAAE,KAAK,EAAE;AAClD,MAAI,CAAC,OAAQ;AACb,QAAM,YAAY,qBAAqB,IAAI,MAAM;AACjD,uBAAqB,OAAO,MAAM;AAClC,aAAW,MAAM,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACnC;AAOA,eAAsB,wBAAuC;AAC3D,QAAM,UAAU,CAAC,GAAG,qBAAqB,QAAQ,CAAC;AAClD,uBAAqB,MAAM;AAC3B,aAAW,CAAC,EAAE,MAAM,KAAK,SAAS;AAChC,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAMA,eAAsB,sBAAqC;AACzD,QAAM,UAAU,CAAC,GAAG,gBAAgB,QAAQ,CAAC;AAC7C,kBAAgB,MAAM;AACtB,0BAAwB,MAAM;AAC9B,aAAW,CAAC,EAAE,MAAM,KAAK,SAAS;AAChC,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,sBAAsB;AAC5B,QAAM,0BAA0B;AAClC;AAOA,eAAe,sBACb,UACA,SACA,aACA,WACA,OACA,iBAAsE,CAAC,GACnD;AACpB,QAAM,SAAS,oBAAoB,QAAQ;AAC3C,MAAI,OAAQ,QAAO;AAEnB,QAAM,UAAU,mBAAmB,IAAI,QAAQ;AAC/C,MAAI,QAAS,QAAO;AAEpB,QAAM,UAAU,uBAAuB,SAAS,aAAa,WAAW,OAAO,QAAW,cAAc,EACrG,KAAK,YAAU;AACd,oBAAgB,IAAI,UAAU,MAAM;AACpC,2BAAuB;AACvB,WAAO;AAAA,EACT,CAAC,EACA,QAAQ,MAAM;AACb,uBAAmB,OAAO,QAAQ;AAAA,EACpC,CAAC;AAEH,qBAAmB,IAAI,UAAU,OAAO;AACxC,SAAO;AACT;AAEA,SAAS,8BAA8B,cAA2C;AAChF,MAAI,KAAK,iBAAiB,IAAI,YAAY;AAC1C,MAAI,CAAC,IAAI;AACP,SAAK,mBAAmB,kBAAkB,EAAE,mBAAmB,EAAE;AACjE,qBAAiB,IAAI,cAAc,EAAE;AAAA,EACvC;AACA,SAAO;AACT;AAEA,SAAS,2BAA2B,eAA4D;AAC9F,SAAO,0BAA0B,aAAa;AAChD;AAEA,SAAS,wBACP,UACA,cACA,iBACA,eACQ;AACR,QAAM,QAAQ,CAAC,GAAG,QAAQ,WAAW,8BAA8B,YAAY,CAAC,EAAE;AAClF,MAAI,gBAAiB,OAAM,KAAK,eAAe;AAC/C,QAAM,aAAa,2BAA2B,aAAa;AAC3D,MAAI,WAAY,OAAM,KAAK,WAAW,UAAU,EAAE;AAClD,SAAO,MAAM,KAAK,IAAI;AACxB;AAGA,SAAS,yBAAyB,KAAoC;AACpE,QAAM,SAAS,qBAAqB,IAAI,GAAG;AAC3C,MAAI,QAAQ;AACV,yBAAqB,OAAO,GAAG;AAC/B,yBAAqB,IAAI,KAAK,MAAM;AAAA,EACtC;AACA,SAAO;AACT;AAEA,eAAe,2BACb,UACA,SASoB;AACpB,QAAM,SAAS,yBAAyB,QAAQ;AAChD,MAAI,OAAQ,QAAO;AAEnB,QAAM,UAAU,wBAAwB,IAAI,QAAQ;AACpD,MAAI,QAAS,QAAO;AAEpB,QAAM,UAAU,WAAW,OAAO,EAC/B,KAAK,CAAC,EAAE,OAAO,MAAM;AACpB,yBAAqB,IAAI,UAAU,MAAM;AACzC,gCAA4B;AAC5B,WAAO;AAAA,EACT,CAAC,EACA,QAAQ,MAAM;AACb,4BAAwB,OAAO,QAAQ;AAAA,EACzC,CAAC;AAEH,0BAAwB,IAAI,UAAU,OAAO;AAC7C,SAAO;AACT;AAEA,eAAe,0BACb,SASA,OACA,IACY;AACZ,QAAM,WAAW;AAAA,IACf,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ,gBAAgB;AAAA,IACxB,QAAQ;AAAA,EACV;AACA,MAAI,QAAQ,UAAU,QAAQ,qBAAqB,QAAW;AAC5D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,OAAO;AAC3C,QAAI;AACF,aAAO,MAAM,GAAG,MAAM;AAAA,IACxB,UAAE;AACA,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,MACrB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,2BAA2B,UAAU,OAAO;AAEpE,MAAI;AACF,WAAO,MAAM,GAAG,SAAS;AAAA,EAC3B,SAAS,OAAO;AACd,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,YAAQ,UAAU,KAAK;AAAA,MACrB,MAAM;AAAA,MACN,SAAS,QAAQ,KAAK,uBAAuB,YAAY;AAAA,MACzD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAED,QAAI,WAAW,KAAK,GAAG;AACrB,2BAAqB,OAAO,QAAQ;AACpC,UAAI;AACF,cAAM,UAAU,MAAM;AAAA,MACxB,QAAQ;AAAA,MAER;AACA,cAAQ,UAAU,KAAK;AAAA,QACrB,MAAM;AAAA,QACN,SAAS,gDAAgD,KAAK;AAAA,QAC9D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAEA,QAAI,sBAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAEA,yBAAqB,OAAO,QAAQ;AACpC,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,IACxB,QAAQ;AAAA,IAER;AAEA,UAAM,cAAc,MAAM,2BAA2B,UAAU;AAAA,MAC7D,GAAG;AAAA,MACH,WAAW,QAAQ;AAAA,IACrB,CAAC;AAED,QAAI;AACF,aAAO,MAAM,GAAG,WAAW;AAAA,IAC7B,SAAS,YAAY;AACnB,UAAI,sBAAsB,SAAS,iBAAiB,OAAO;AACzD,mBAAW,QAAQ;AAAA,MACrB;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAUA,eAAsB,qBACpB,UACA,WACA,aACA,WACA,OACA,IACA,gBACA,iBAAsE,CAAC,GAC3D;AACZ,QAAM,iBAAiB,sBAAsB,SAAS;AACtD,QAAM,UAAU,IAAI,IAAI,QAAQ;AAEhC,MAAI,kBAAkB,eAAe,UAAU,eAAe,qBAAqB,QAAW;AAC5F,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI;AACF,aAAO,MAAM,GAAG,aAAa;AAAA,IAC/B,UAAE;AACA,UAAI;AACF,cAAM,cAAc,MAAM;AAAA,MAC5B,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,mBAAmB,UAAU,WAAW,gBAAgB,UAAU,WAAW;AAC9F,QAAM,YAAY,MAAM,sBAAsB,UAAU,SAAS,aAAa,WAAW,OAAO,cAAc;AAE9G,MAAI;AACF,WAAO,MAAM,GAAG,SAAS;AAAA,EAC3B,SAAS,OAAO;AACd,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,QAAQ,KAAK,iBAAiB,YAAY;AAAA,MACnD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAGD,QAAI,WAAW,KAAK,GAAG;AACrB,sBAAgB,OAAO,QAAQ;AAC/B,UAAI;AACF,cAAM,UAAU,MAAM;AAAA,MACxB,QAAQ;AAAA,MAER;AACA,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,0CAA0C,KAAK;AAAA,QACxD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAEA,QAAI,sBAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAGA,oBAAgB,OAAO,QAAQ;AAC/B,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,IACxB,QAAQ;AAAA,IAER;AAEA,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,KAAK;AAAA,MACR;AAAA,IACF;AAEA,QAAI;AACF,aAAO,MAAM,GAAG,WAAW;AAAA,IAC7B,SAAS,YAAY;AAEnB,UAAI,sBAAsB,SAAS,iBAAiB,OAAO;AACzD,mBAAW,QAAQ;AAAA,MACrB;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAkDA,eAAsB,uBACpB,KACA,aACA,YAA6B,CAAC,GAC9B,QAAQ,cACR,gBACA,iBAAsE,CAAC,GACnD;AACpB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,YAAY,IAAI,SAAS;AAAA,MACzB,yBAAyB;AAAA,IAC3B;AAAA,IACA,YAAY;AACV,aAAO,2BAA2B,KAAK,aAAa,WAAW,OAAO,gBAAgB,cAAc;AAAA,IACtG;AAAA,EACF;AACF;AAEA,eAAe,2BACb,KACA,aACA,YAA6B,CAAC,GAC9B,QAAQ,cACR,gBACA,iBAAsE,CAAC,GACnD;AACpB,QAAM,iBAAiB,sBAAsB,SAAS;AAKtD,QAAM,mBAAmB,wBAAwB,eAAe,gBAAgB;AAChF,QAAM,yBAAyB,8BAA8B,eAAe,gBAAgB;AAC5F,QAAM,oBAAoB;AAAA,IACxB,GAAI,eAAe,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,IAC7D,GAAI,2BAA2B,UAAa,EAAE,SAAS,uBAAuB;AAAA,EAChF;AACA,QAAM,kBAAgC,mBAAmB,CAAC,OAAO,SAAS,MAAM,OAAc,IAAI;AAClG,QAAM,eAAe,CAAC,OAAoC,SACxD;AAAA,IAA0B,CAAC,eAAe,QAAQ,MAAM,MAAM;AAAA,IAAG;AAAA,IAAkB,YACjF,gBAAgB,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC;AAAA,EAC5C;AACF,QAAM,cAAc,uBAAuB,YAAY;AACvD,QAAM,kBAAkB,kCAAkC,WAAW;AACrE,QAAM,YAA0B,iBAC3B,uBAAuB;AAAA,IACtB,UAAU;AAAA,IACV,SAAS,eAAe;AAAA,IACxB,eAAe,eAAe;AAAA,EAChC,CAAC,IACD;AACJ,QAAM,mBAAyD;AAAA,IAC7D,aAAa,EAAE,SAAS,aAAa,UAAU,SAAS;AAAA,IACxD,OAAO,qBAAqB,SAAS;AAAA,EACvC;AACA,MAAI;AAEJ,MAAI;AACF,UAAM,SAAS,IAAI,UAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AACtE,mBAAe;AACf,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,kCAAkC,KAAK,OAAO,GAAG;AAAA,MAC1D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,UAAM,OAAO,QAAQ,IAAI,8BAA8B,KAAK,gBAAgB,GAAG,iBAAiB;AAChG,mBAAe;AACf,2BAAuB,IAAI,SAAS,CAAC;AACrC,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yCAAyC,KAAK;AAAA,MACvD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAgB;AAEvB,QAAI,cAAc;AAChB,UAAI;AACF,cAAM,aAAa,MAAM;AAAA,MAC3B,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,UAAM,aAAa,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAC5E,UAAM,aAAa,iBAAiB,sBAAsB,UAAU,MAAM,IAAI,MAAM;AACpF,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,kCAAkC,KAAK,GAAG,UAAU,KAAK,UAAU,MAAM,YAAY;AAAA,MAC9F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAED,QAAI,sBAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAMA,QAAI,CAAC,WAAW,KAAK,GAAG;AACtB,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,iCAAiC,UAAU,2CAA2C,KAAK;AAAA,QACpG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM,cAAc,IAAI,UAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AAC3E,UAAI;AACF,cAAM,YAAY,QAAQ,IAAI,8BAA8B,KAAK,gBAAgB,GAAG,iBAAiB;AACrG,+BAAuB,IAAI,SAAS,CAAC;AACrC,kBAAU,KAAK;AAAA,UACb,MAAM;AAAA,UACN,SAAS,iDAAiD,KAAK;AAAA,UAC/D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,CAAC;AACD,eAAO;AAAA,MACT,SAAS,YAAY;AACnB,YAAI;AACF,gBAAM,YAAY,MAAM;AAAA,QAC1B,QAAQ;AAAA,QAER;AACA,kBAAU,KAAK;AAAA,UACb,MAAM;AAAA,UACN,SAAS,6CAA6C,KAAK,KAAK,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU,CAAC;AAAA,UACrI,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,CAAC;AACD,YAAI,sBAAsB,UAAU,GAAG;AACrC,gBAAM;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AAGA,QAAI,WAAW,KAAK,GAAG;AACrB,YAAM;AAAA,IACR;AAMA,QAAI,wBAAwB,IAAI,IAAI,SAAS,CAAC,GAAG;AAC/C,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,gDAAgD,GAAG,qCAAgC,KAAK;AAAA,QACjG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAGA,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,0CAA0C,KAAK;AAAA,MACxD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,UAAM,SAAS,IAAI,UAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AACtE,QAAI;AACF,YAAM,OAAO;AAAA,QACX,IAAI,mBAAmB,KAAK;AAAA,UAC1B,aAAa,EAAE,SAAS,aAAa,UAAU,SAAS;AAAA,UACxD,OAAO,qBAAqB,SAAS;AAAA,QACvC,CAAC;AAAA,QACD;AAAA,MACF;AAAA,IACF,SAAS,UAAU;AACjB,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,MACrB,QAAQ;AAAA,MAER;AACA,YAAM;AAAA,IACR;AACA,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,wCAAwC,KAAK;AAAA,MACtD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,YACpB,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACA,gBACkB;AAClB,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS;AAAA,IACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,SAAS,CAAC,CAAC;AAAA,IACX,SAAS,YAAY,EAAE,eAAe,MAAM,IAAI,CAAC;AAAA,IACjD,kBAAkB,gBAAgB,OAAO,KAAK,aAAa,IAAI,CAAC;AAAA,EAClE,CAAC;AACD,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,qBAAqB,QAAQ,eAAe,KAAK,UAAU,2BAA2B,IAAI,CAAC,CAAC;AAAA,IACrG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AACD,MAAI,WAAW;AACb,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yDAAyD,QAAQ;AAAA,MAC1E,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAKA,MAAI,CAAC,gBAAgB;AACnB,UAAM,gBAAgB,MAAM,qBAAqB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe;AAAA,MAC9G,GAAI,kBAAkB,EAAE,eAAe;AAAA,MACvC,GAAI,gBAAgB,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,MAC9D,GAAI,gBAAgB,qBAAqB,UAAa;AAAA,QACpD,kBAAkB,eAAe;AAAA,MACnC;AAAA,IACF,CAAC;AACD,QAAI,cAAc,SAAS;AACzB,gBAAU,KAAK;AAAA,QACb,MAAM,cAAc,UAAU,UAAU,UAAU;AAAA,QAClD,SAAS,aAAa,QAAQ,uBAAuB,cAAc,UAAU,UAAU,UAAU,SAAS;AAAA,QAC1G,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,UAAU,cAAc;AAAA,MAC1B,CAAC;AACD,aAAO,cAAc;AAAA,IACvB;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,YAAY;AAAA,IACd;AAAA,IACA,YAAY;AACV,aAAO,sBAAsB;AAAA,QAAI;AAAA,QAAgB,MAC/C,gBAAgB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,gBAAgB,cAAc;AAAA,MAC/G;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAsB,eACpB,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACkB;AAClB,SAAO,sBAAsB;AAAA,IAAI;AAAA,IAAgB,MAC/C,mBAAmB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,cAAc;AAAA,EAClG;AACF;AAEA,eAAe,gBACb,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACkB;AAElB,QAAM,eAAe,mBAAmB;AAGxC,QAAM,cAAc;AAAA,IAClB,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAI,YAAY,qBAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AAEA,QAAM,2BAA2B,8BAA8B,gBAAgB,gBAAgB;AAC/F,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YACE,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,QAAW;AAAA,MAC9D,GAAI,gBAAgB,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,MAC9D,GAAI,6BAA6B,UAAa,EAAE,SAAS,yBAAyB;AAAA,IACpF,CAAC;AAAA,IACH;AAAA,IACA;AAAA,EACF;AAEA,YAAU,KAAK;AAAA,IACb,MAAM,UAAU,UAAU,UAAU;AAAA,IACpC,SAAS,aAAa,QAAQ,uBAAuB,UAAU,UAAU,UAAU,SAAS;AAAA,IAC5F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAKA,eAAe,mBACb,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACkB;AAClB,QAAM,eAAe,mBAAmB;AACxC,QAAM,cAAc;AAAA,IAClB,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAI,YAAY,qBAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAU,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAyCA,eAAsB,WAAW,SASA;AAC/B,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,CAAC;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB;AAAA,EACpB,IAAI;AACJ,QAAM,UAAU,IAAI,IAAI,QAAQ;AAEhC,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,sBAAsB,OAAO;AAAA,IACtC,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,YAAY,eAAe,UAAU,YAAY,UAAU;AAAA,EAC7D,CAAC;AAED,QAAM,YAAY,IAAI,UAAU;AAAA,IAC9B,MAAM;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAGD,QAAM,mBAAyD,CAAC;AAehE,QAAM,wBAAwB,eAC1B,OAAO,YAAY,OAAO,QAAQ,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,MAAM,eAAe,CAAC,IAC3G;AACJ,QAAM,cAAsC;AAAA,IAC1C,GAAG;AAAA,IACH,GAAI,YAAY,qBAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AACA,mBAAiB,cAAc,EAAE,SAAS,aAAa,UAAU,SAAS;AAC1E,MAAI,cAAc;AAChB,qBAAiB,eAAe;AAChC,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH,WAAW,WAAW;AACpB,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH,WAAW,OAAO,KAAK,WAAW,EAAE,SAAS,GAAG;AAC9C,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAMA,QAAM,mBAAmB,wBAAwB,0BAA0B;AAC3E,QAAM,yBAAyB,8BAA8B,0BAA0B;AACvF,QAAM,iBAAiB;AAAA,IACrB,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,2BAA2B,UAAa,EAAE,SAAS,uBAAuB;AAAA,EAChF;AACA,QAAM,cAAc;AAAA,IAAuB,CAAC,OAAO,SACjD;AAAA,MAA0B,CAAC,QAAQ,MAAM,MAAM;AAAA,MAAG;AAAA,MAAkB,kBAClE,MAAM,OAAuB,EAAE,GAAG,MAAM,QAAQ,aAAa,CAAC;AAAA,IAChE;AAAA,EACF;AACA,QAAM,kBAAkB,kCAAkC,WAAW;AACrE,QAAM,cAA4B,iBAC7B,uBAAuB;AAAA,IACtB,UAAU;AAAA,IACV,SAAS,eAAe;AAAA,IACxB,eAAe,eAAe;AAAA,EAChC,CAAC,IACD;AACJ,mBAAiB,QAAQ,qBAAqB,WAAW;AAEzD,QAAM,YAAY,IAAI,8BAA8B,SAAS,gBAAgB;AAE7E,MAAI;AACF,UAAM,UAAU,QAAQ,WAAW,cAAc;AACjD,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO,EAAE,QAAQ,WAAW,UAAU;AAAA,EACxC,SAAS,OAAO;AAGd,QAAI,iBAAiB,mBAAmB;AACtC,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,YAAM,OAAO,OAAO,OAAO,EAAE,WAAW,QAAQ,UAAU,CAAC;AAAA,IAC7D;AAUA,QAAI,WAAW,KAAK,GAAG;AACrB,YAAM,SAAS,eACX,UACA,YACE,WACA,OAAO,KAAK,WAAW,EAAE,SAAS,IAChC,WACA;AACR,YAAM,OACJ,WAAW,SACP,8HACA,WAAW,WACT,oJACA,WAAW,WACT,qEACA;AACV,YAAM,SAAS,2CAA2C,QAAQ,2BAA2B,MAAM,KAAK,IAAI;AAC5G,YAAM,UAAU,OAAO,OAAO,IAAI,MAAM,MAAM,GAAG;AAAA,QAC/C,OAAO;AAAA,QACP,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB,CAAC;AACD,YAAM;AAAA,IACR;AAEA,UAAM;AAAA,EACR;AACF;AAqBA,eAAsB,qBAAqB,SAA2C;AACpF,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,CAAC;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,QAAM,2BAA2B,8BAA8B,gBAAgB;AAC/E,QAAM,iBAAiB;AAAA,IACrB,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,6BAA6B,UAAa,EAAE,SAAS,yBAAyB;AAAA,EACpF;AAGA,MAAI,CAAC,cAAc;AACjB,WAAO,YAAY,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,gBAAgB,QAAW;AAAA,MAC3G;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,MAAM,qBAAqB,UAAU,UAAU,MAAM,QAAW,WAAW,eAAe;AAAA,IAC9G;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,EAChB,CAAC;AACD,MAAI,cAAc,SAAS;AACzB,cAAU,KAAK;AAAA,MACb,MAAM,cAAc,UAAU,UAAU,UAAU;AAAA,MAClD,SAAS,aAAa,QAAQ;AAAA,MAC9B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO,cAAc;AAAA,EACvB;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,IACA,OAAM,WAAU;AACd,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,qBAAqB,QAAQ;AAAA,QACtC,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,YAAMA,YAAW,MAAM,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,QAAW,cAAc;AAErG,gBAAU,KAAK;AAAA,QACb,MAAMA,WAAU,UAAU,UAAU;AAAA,QACpC,SAAS,aAAa,QAAQ;AAAA,QAC9B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,aAAOA;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;","names":["response"]}

package/dist/lib/protocols/rawResponseCapture.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 import { globalAsyncLocalStorage } from "../utils/global-async-local-storage.mjs";
 const DEFAULT_MAX_BODY_BYTES = 1048576;
 const rawResponseCaptureStorage = globalAsyncLocalStorage("rawResponseCapture");

package/dist/lib/protocols/rawResponseCapture.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/protocols/rawResponseCapture.ts"],"sourcesContent":["// Raw HTTP response capture for conformance probing.\n//\n// Scoped via AsyncLocalStorage so MCP + A2A protocol adapters can record\n// status, headers, body, and latency without threading options through\n// every call site. When the capture slot is absent, the fetch wrapper is a\n// pass-through — production clients pay only one ALS lookup per request.\n//\n// Consumers call `withRawResponseCapture(fn)` and receive captures for\n// every HTTP request that happened inside `fn`. The uniform-error invariant\n// uses the captures to compare two probes byte-for-byte.\n\nimport { globalAsyncLocalStorage } from '../utils/global-async-local-storage';\n\nexport interface RawHttpCapture {\n  url: string;\n  method: string;\n  status: number;\n  headers: Record<string, string>;\n  body: string;\n  latencyMs: number;\n  timestamp: string;\n  /** True when body capture hit `maxBodyBytes` and was truncated. */\n  bodyTruncated: boolean;\n}\n\ninterface CaptureSlot {\n  captures: RawHttpCapture[];\n  maxBodyBytes: number;\n}\n\n// Counted as UTF-16 code units (string.length), not UTF-8 bytes. Close\n// enough for ASCII-dominant response payloads and fine as a safety cap\n// against accidentally retaining huge responses.\nconst DEFAULT_MAX_BODY_BYTES = 1_048_576;\n\nexport const rawResponseCaptureStorage = globalAsyncLocalStorage<CaptureSlot>('rawResponseCapture');\n\n/**\n * Run `fn` with a raw-response capture slot active. Every HTTP request made\n * through the wrapped fetch inside `fn` is recorded.\n *\n * When `fn` rejects, the rejection propagates and the partial captures\n * are attached to the thrown error as `error.captures`. Callers that\n * need to inspect partial captures on failure can read that property;\n * callers that don't can ignore it. This lets storyboard validators\n * surface \"the SDK threw before the wire shape parsed\" diagnostics\n * with the actual bytes that arrived before the throw.\n */\nexport async function withRawResponseCapture<T>(\n  fn: () => Promise<T>,\n  options: { maxBodyBytes?: number } = {}\n): Promise<{ result: T; captures: RawHttpCapture[] }> {\n  const slot: CaptureSlot = {\n    captures: [],\n    maxBodyBytes: options.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES,\n  };\n  try {\n    const result = await rawResponseCaptureStorage.run(slot, fn);\n    return { result, captures: slot.captures };\n  } catch (err) {\n    if (err && typeof err === 'object') {\n      try {\n        Object.defineProperty(err, 'captures', {\n          value: slot.captures,\n          enumerable: false,\n          configurable: true,\n          writable: true,\n        });\n      } catch {\n        // Frozen / sealed errors won't accept the property — drop the\n        // captures rather than crash on a defineProperty TypeError.\n      }\n    }\n    throw err;\n  }\n}\n\n/** Type guard for errors carrying partial captures from `withRawResponseCapture`. */\nexport function getCapturesFromError(err: unknown): RawHttpCapture[] | undefined {\n  if (err && typeof err === 'object' && Array.isArray((err as { captures?: unknown }).captures)) {\n    return (err as { captures: RawHttpCapture[] }).captures;\n  }\n  return undefined;\n}\n\n/**\n * Credential-bearing response header names. A misbehaving proxy that\n * echoes caller-supplied auth headers back on the response would\n * otherwise land bearer tokens in the capture — and downstream, in\n * `UniformErrorReport.probes.*.headers` which is written to disk /\n * pasted into tickets. Redact verbatim at capture time.\n */\nconst REDACTED_HEADER_NAMES: ReadonlySet<string> = new Set([\n  'authorization',\n  'proxy-authorization',\n  'cookie',\n  'set-cookie',\n  'x-adcp-auth',\n  'x-api-key',\n]);\n\nconst REDACTED_PLACEHOLDER = '[redacted]';\n\n/**\n * Wrap a fetch implementation so it records raw responses when a capture\n * slot is active. Safe to install unconditionally — pass-through when no\n * slot is set.\n */\nexport function wrapFetchWithCapture(upstream: typeof fetch): typeof fetch {\n  const wrapped: typeof fetch = async (input, init) => {\n    const slot = rawResponseCaptureStorage.getStore();\n    if (!slot) return upstream(input, init);\n\n    const url = typeof input === 'string' ? input : input instanceof URL ? input.toString() : input.url;\n    const method = (init?.method ?? (input instanceof Request ? input.method : 'GET')).toUpperCase();\n    const startedAt = Date.now();\n    const response = await upstream(input, init);\n    const latencyMs = Date.now() - startedAt;\n\n    // Clone before reading so the SDK still gets a consumable body.\n    const cloneForRead = response.clone();\n    const { body, bodyTruncated } = await readBodyBounded(cloneForRead, slot.maxBodyBytes);\n\n    const headers: Record<string, string> = {};\n    response.headers.forEach((value, key) => {\n      const lower = key.toLowerCase();\n      headers[key] = REDACTED_HEADER_NAMES.has(lower) ? REDACTED_PLACEHOLDER : value;\n    });\n\n    slot.captures.push({\n      url,\n      method,\n      status: response.status,\n      headers,\n      body: redactBearerInBody(body),\n      latencyMs,\n      timestamp: new Date(startedAt).toISOString(),\n      bodyTruncated,\n    });\n\n    return response;\n  };\n  return wrapped;\n}\n\n/**\n * Response bodies sometimes echo request headers — e.g., a misbehaving\n * \"debug\" handler that logs the Authorization header into its error\n * payload, or a 500 HTML page that templates the request dump. Strip\n * bearer-shaped tokens so they don't persist into captured output.\n *\n * Conservative: only masks the TOKEN portion of a `Bearer <token>` span\n * (case-insensitive). Doesn't try to detect arbitrary high-entropy\n * strings — false positives on those would damage the comparator's\n * byte-equivalence check.\n */\nfunction redactBearerInBody(body: string): string {\n  return body.replace(/Bearer\\s+[A-Za-z0-9._~+/=-]+/gi, 'Bearer [redacted]');\n}\n\nasync function readBodyBounded(\n  response: Response,\n  maxBodyBytes: number\n): Promise<{ body: string; bodyTruncated: boolean }> {\n  let text: string;\n  try {\n    text = await response.text();\n  } catch {\n    return { body: '', bodyTruncated: false };\n  }\n  if (text.length <= maxBodyBytes) return { body: text, bodyTruncated: false };\n  return { body: text.slice(0, maxBodyBytes), bodyTruncated: true };\n}\n"],"mappings":";;;;;;AAWA,SAAS,+BAA+B;AAsBxC,MAAM,yBAAyB;AAExB,MAAM,4BAA4B,wBAAqC,oBAAoB;AAalG,eAAsB,uBACpB,IACA,UAAqC,CAAC,GACc;AACpD,QAAM,OAAoB;AAAA,IACxB,UAAU,CAAC;AAAA,IACX,cAAc,QAAQ,gBAAgB;AAAA,EACxC;AACA,MAAI;AACF,UAAM,SAAS,MAAM,0BAA0B,IAAI,MAAM,EAAE;AAC3D,WAAO,EAAE,QAAQ,UAAU,KAAK,SAAS;AAAA,EAC3C,SAAS,KAAK;AACZ,QAAI,OAAO,OAAO,QAAQ,UAAU;AAClC,UAAI;AACF,eAAO,eAAe,KAAK,YAAY;AAAA,UACrC,OAAO,KAAK;AAAA,UACZ,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,UAAU;AAAA,QACZ,CAAC;AAAA,MACH,QAAQ;AAAA,MAGR;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAGO,SAAS,qBAAqB,KAA4C;AAC/E,MAAI,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAS,IAA+B,QAAQ,GAAG;AAC7F,WAAQ,IAAuC;AAAA,EACjD;AACA,SAAO;AACT;AASA,MAAM,wBAA6C,oBAAI,IAAI;AAAA,EACzD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,uBAAuB;AAOtB,SAAS,qBAAqB,UAAsC;AACzE,QAAM,UAAwB,OAAO,OAAO,SAAS;AACnD,UAAM,OAAO,0BAA0B,SAAS;AAChD,QAAI,CAAC,KAAM,QAAO,SAAS,OAAO,IAAI;AAEtC,UAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,iBAAiB,MAAM,MAAM,SAAS,IAAI,MAAM;AAChG,UAAM,UAAU,MAAM,WAAW,iBAAiB,UAAU,MAAM,SAAS,QAAQ,YAAY;AAC/F,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,WAAW,MAAM,SAAS,OAAO,IAAI;AAC3C,UAAM,YAAY,KAAK,IAAI,IAAI;AAG/B,UAAM,eAAe,SAAS,MAAM;AACpC,UAAM,EAAE,MAAM,cAAc,IAAI,MAAM,gBAAgB,cAAc,KAAK,YAAY;AAErF,UAAM,UAAkC,CAAC;AACzC,aAAS,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACvC,YAAM,QAAQ,IAAI,YAAY;AAC9B,cAAQ,GAAG,IAAI,sBAAsB,IAAI,KAAK,IAAI,uBAAuB;AAAA,IAC3E,CAAC;AAED,SAAK,SAAS,KAAK;AAAA,MACjB;AAAA,MACA;AAAA,MACA,QAAQ,SAAS;AAAA,MACjB;AAAA,MACA,MAAM,mBAAmB,IAAI;AAAA,MAC7B;AAAA,MACA,WAAW,IAAI,KAAK,SAAS,EAAE,YAAY;AAAA,MAC3C;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAaA,SAAS,mBAAmB,MAAsB;AAChD,SAAO,KAAK,QAAQ,kCAAkC,mBAAmB;AAC3E;AAEA,eAAe,gBACb,UACA,cACmD;AACnD,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,SAAS,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,EAAE,MAAM,IAAI,eAAe,MAAM;AAAA,EAC1C;AACA,MAAI,KAAK,UAAU,aAAc,QAAO,EAAE,MAAM,MAAM,eAAe,MAAM;AAC3E,SAAO,EAAE,MAAM,KAAK,MAAM,GAAG,YAAY,GAAG,eAAe,KAAK;AAClE;","names":[]}
+{"version":3,"sources":["../../../src/lib/protocols/rawResponseCapture.ts"],"sourcesContent":["// Raw HTTP response capture for conformance probing.\n//\n// Scoped via AsyncLocalStorage so MCP + A2A protocol adapters can record\n// status, headers, body, and latency without threading options through\n// every call site. When the capture slot is absent, the fetch wrapper is a\n// pass-through — production clients pay only one ALS lookup per request.\n//\n// Consumers call `withRawResponseCapture(fn)` and receive captures for\n// every HTTP request that happened inside `fn`. The uniform-error invariant\n// uses the captures to compare two probes byte-for-byte.\n\nimport { globalAsyncLocalStorage } from '../utils/global-async-local-storage';\n\nexport interface RawHttpCapture {\n  url: string;\n  method: string;\n  status: number;\n  headers: Record<string, string>;\n  body: string;\n  latencyMs: number;\n  timestamp: string;\n  /** True when body capture hit `maxBodyBytes` and was truncated. */\n  bodyTruncated: boolean;\n}\n\ninterface CaptureSlot {\n  captures: RawHttpCapture[];\n  maxBodyBytes: number;\n}\n\n// Counted as UTF-16 code units (string.length), not UTF-8 bytes. Close\n// enough for ASCII-dominant response payloads and fine as a safety cap\n// against accidentally retaining huge responses.\nconst DEFAULT_MAX_BODY_BYTES = 1_048_576;\n\nexport const rawResponseCaptureStorage = globalAsyncLocalStorage<CaptureSlot>('rawResponseCapture');\n\n/**\n * Run `fn` with a raw-response capture slot active. Every HTTP request made\n * through the wrapped fetch inside `fn` is recorded.\n *\n * When `fn` rejects, the rejection propagates and the partial captures\n * are attached to the thrown error as `error.captures`. Callers that\n * need to inspect partial captures on failure can read that property;\n * callers that don't can ignore it. This lets storyboard validators\n * surface \"the SDK threw before the wire shape parsed\" diagnostics\n * with the actual bytes that arrived before the throw.\n */\nexport async function withRawResponseCapture<T>(\n  fn: () => Promise<T>,\n  options: { maxBodyBytes?: number } = {}\n): Promise<{ result: T; captures: RawHttpCapture[] }> {\n  const slot: CaptureSlot = {\n    captures: [],\n    maxBodyBytes: options.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES,\n  };\n  try {\n    const result = await rawResponseCaptureStorage.run(slot, fn);\n    return { result, captures: slot.captures };\n  } catch (err) {\n    if (err && typeof err === 'object') {\n      try {\n        Object.defineProperty(err, 'captures', {\n          value: slot.captures,\n          enumerable: false,\n          configurable: true,\n          writable: true,\n        });\n      } catch {\n        // Frozen / sealed errors won't accept the property — drop the\n        // captures rather than crash on a defineProperty TypeError.\n      }\n    }\n    throw err;\n  }\n}\n\n/** Type guard for errors carrying partial captures from `withRawResponseCapture`. */\nexport function getCapturesFromError(err: unknown): RawHttpCapture[] | undefined {\n  if (err && typeof err === 'object' && Array.isArray((err as { captures?: unknown }).captures)) {\n    return (err as { captures: RawHttpCapture[] }).captures;\n  }\n  return undefined;\n}\n\n/**\n * Credential-bearing response header names. A misbehaving proxy that\n * echoes caller-supplied auth headers back on the response would\n * otherwise land bearer tokens in the capture — and downstream, in\n * `UniformErrorReport.probes.*.headers` which is written to disk /\n * pasted into tickets. Redact verbatim at capture time.\n */\nconst REDACTED_HEADER_NAMES: ReadonlySet<string> = new Set([\n  'authorization',\n  'proxy-authorization',\n  'cookie',\n  'set-cookie',\n  'x-adcp-auth',\n  'x-api-key',\n]);\n\nconst REDACTED_PLACEHOLDER = '[redacted]';\n\n/**\n * Wrap a fetch implementation so it records raw responses when a capture\n * slot is active. Safe to install unconditionally — pass-through when no\n * slot is set.\n */\nexport function wrapFetchWithCapture(upstream: typeof fetch): typeof fetch {\n  const wrapped: typeof fetch = async (input, init) => {\n    const slot = rawResponseCaptureStorage.getStore();\n    if (!slot) return upstream(input, init);\n\n    const url = typeof input === 'string' ? input : input instanceof URL ? input.toString() : input.url;\n    const method = (init?.method ?? (input instanceof Request ? input.method : 'GET')).toUpperCase();\n    const startedAt = Date.now();\n    const response = await upstream(input, init);\n    const latencyMs = Date.now() - startedAt;\n\n    // Clone before reading so the SDK still gets a consumable body.\n    const cloneForRead = response.clone();\n    const { body, bodyTruncated } = await readBodyBounded(cloneForRead, slot.maxBodyBytes);\n\n    const headers: Record<string, string> = {};\n    response.headers.forEach((value, key) => {\n      const lower = key.toLowerCase();\n      headers[key] = REDACTED_HEADER_NAMES.has(lower) ? REDACTED_PLACEHOLDER : value;\n    });\n\n    slot.captures.push({\n      url,\n      method,\n      status: response.status,\n      headers,\n      body: redactBearerInBody(body),\n      latencyMs,\n      timestamp: new Date(startedAt).toISOString(),\n      bodyTruncated,\n    });\n\n    return response;\n  };\n  return wrapped;\n}\n\n/**\n * Response bodies sometimes echo request headers — e.g., a misbehaving\n * \"debug\" handler that logs the Authorization header into its error\n * payload, or a 500 HTML page that templates the request dump. Strip\n * bearer-shaped tokens so they don't persist into captured output.\n *\n * Conservative: only masks the TOKEN portion of a `Bearer <token>` span\n * (case-insensitive). Doesn't try to detect arbitrary high-entropy\n * strings — false positives on those would damage the comparator's\n * byte-equivalence check.\n */\nfunction redactBearerInBody(body: string): string {\n  return body.replace(/Bearer\\s+[A-Za-z0-9._~+/=-]+/gi, 'Bearer [redacted]');\n}\n\nasync function readBodyBounded(\n  response: Response,\n  maxBodyBytes: number\n): Promise<{ body: string; bodyTruncated: boolean }> {\n  let text: string;\n  try {\n    text = await response.text();\n  } catch {\n    return { body: '', bodyTruncated: false };\n  }\n  if (text.length <= maxBodyBytes) return { body: text, bodyTruncated: false };\n  return { body: text.slice(0, maxBodyBytes), bodyTruncated: true };\n}\n"],"mappings":"AAWA,SAAS,+BAA+B;AAsBxC,MAAM,yBAAyB;AAExB,MAAM,4BAA4B,wBAAqC,oBAAoB;AAalG,eAAsB,uBACpB,IACA,UAAqC,CAAC,GACc;AACpD,QAAM,OAAoB;AAAA,IACxB,UAAU,CAAC;AAAA,IACX,cAAc,QAAQ,gBAAgB;AAAA,EACxC;AACA,MAAI;AACF,UAAM,SAAS,MAAM,0BAA0B,IAAI,MAAM,EAAE;AAC3D,WAAO,EAAE,QAAQ,UAAU,KAAK,SAAS;AAAA,EAC3C,SAAS,KAAK;AACZ,QAAI,OAAO,OAAO,QAAQ,UAAU;AAClC,UAAI;AACF,eAAO,eAAe,KAAK,YAAY;AAAA,UACrC,OAAO,KAAK;AAAA,UACZ,YAAY;AAAA,UACZ,cAAc;AAAA,UACd,UAAU;AAAA,QACZ,CAAC;AAAA,MACH,QAAQ;AAAA,MAGR;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAGO,SAAS,qBAAqB,KAA4C;AAC/E,MAAI,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAS,IAA+B,QAAQ,GAAG;AAC7F,WAAQ,IAAuC;AAAA,EACjD;AACA,SAAO;AACT;AASA,MAAM,wBAA6C,oBAAI,IAAI;AAAA,EACzD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,uBAAuB;AAOtB,SAAS,qBAAqB,UAAsC;AACzE,QAAM,UAAwB,OAAO,OAAO,SAAS;AACnD,UAAM,OAAO,0BAA0B,SAAS;AAChD,QAAI,CAAC,KAAM,QAAO,SAAS,OAAO,IAAI;AAEtC,UAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,iBAAiB,MAAM,MAAM,SAAS,IAAI,MAAM;AAChG,UAAM,UAAU,MAAM,WAAW,iBAAiB,UAAU,MAAM,SAAS,QAAQ,YAAY;AAC/F,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,WAAW,MAAM,SAAS,OAAO,IAAI;AAC3C,UAAM,YAAY,KAAK,IAAI,IAAI;AAG/B,UAAM,eAAe,SAAS,MAAM;AACpC,UAAM,EAAE,MAAM,cAAc,IAAI,MAAM,gBAAgB,cAAc,KAAK,YAAY;AAErF,UAAM,UAAkC,CAAC;AACzC,aAAS,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACvC,YAAM,QAAQ,IAAI,YAAY;AAC9B,cAAQ,GAAG,IAAI,sBAAsB,IAAI,KAAK,IAAI,uBAAuB;AAAA,IAC3E,CAAC;AAED,SAAK,SAAS,KAAK;AAAA,MACjB;AAAA,MACA;AAAA,MACA,QAAQ,SAAS;AAAA,MACjB;AAAA,MACA,MAAM,mBAAmB,IAAI;AAAA,MAC7B;AAAA,MACA,WAAW,IAAI,KAAK,SAAS,EAAE,YAAY;AAAA,MAC3C;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAaA,SAAS,mBAAmB,MAAsB;AAChD,SAAO,KAAK,QAAQ,kCAAkC,mBAAmB;AAC3E;AAEA,eAAe,gBACb,UACA,cACmD;AACnD,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,SAAS,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,EAAE,MAAM,IAAI,eAAe,MAAM;AAAA,EAC1C;AACA,MAAI,KAAK,UAAU,aAAc,QAAO,EAAE,MAAM,MAAM,eAAe,MAAM;AAC3E,SAAO,EAAE,MAAM,KAAK,MAAM,GAAG,YAAY,GAAG,eAAe,KAAK;AAClE;","names":[]}

package/dist/lib/protocols/responseSizeLimit.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 import { globalAsyncLocalStorage } from "../utils/global-async-local-storage.mjs";
 import { ResponseTooLargeError } from "../errors/index.mjs";
 const responseSizeLimitStorage = globalAsyncLocalStorage("responseSizeLimit");

package/dist/lib/protocols/responseSizeLimit.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/protocols/responseSizeLimit.ts"],"sourcesContent":["// Response-body byte cap enforcement for hostile-vendor protection.\n//\n// Wraps a base fetch with a streaming size counter so the SDK aborts large\n// responses before any application-layer parsing buffers them. Active when\n// `responseSizeLimitStorage` carries a slot — installed unconditionally as\n// the innermost transport wrapper so production callers without the slot\n// pay only one ALS lookup per request.\n//\n// The wrapper composes inside `wrapFetchWithCapture`: the diagnostic capture\n// reads the size-limited body via `response.clone()`, so a hostile reply\n// can't blow memory through the capture path either.\n\nimport { globalAsyncLocalStorage } from '../utils/global-async-local-storage';\nimport { ResponseTooLargeError } from '../errors';\n\ninterface SizeLimitSlot {\n  maxResponseBytes: number;\n}\n\nexport const responseSizeLimitStorage = globalAsyncLocalStorage<SizeLimitSlot>('responseSizeLimit');\n\n/**\n * Run `fn` with a response body byte cap active. Every fetch made through\n * a wrapped transport inside `fn` aborts with `ResponseTooLargeError` when\n * the response body exceeds `maxResponseBytes`. Non-positive caps disable\n * enforcement (ALS slot is not entered).\n */\nexport function withResponseSizeLimit<T>(maxResponseBytes: number | undefined, fn: () => Promise<T>): Promise<T> {\n  if (!maxResponseBytes || !Number.isFinite(maxResponseBytes) || maxResponseBytes <= 0) {\n    return fn();\n  }\n  return responseSizeLimitStorage.run({ maxResponseBytes }, fn);\n}\n\nfunction urlOfInput(input: RequestInfo | URL): string {\n  if (typeof input === 'string') return input;\n  if (input instanceof URL) return input.toString();\n  return input.url;\n}\n\n/**\n * Strip the search component from a URL before storing it on\n * `ResponseTooLargeError`. Some agents publish manifests with auth tokens\n * in the query string (`?api_key=…`); without redaction those land in\n * `err.message`, `err.details.url`, and downstream log sinks.\n *\n * Returns the input unchanged when it can't be parsed (relative paths,\n * non-URL inputs from custom test stubs) — the alternative is throwing,\n * which would mask the original `ResponseTooLargeError`.\n */\nfunction redactUrlForError(url: string): string {\n  try {\n    const parsed = new URL(url);\n    parsed.search = '';\n    return parsed.toString();\n  } catch {\n    return url;\n  }\n}\n\n/**\n * Force `Accept-Encoding: identity` on outgoing requests when the size cap\n * is active. Without this, undici sets `Accept-Encoding: gzip, deflate, br`\n * by default and decompresses the body before our counter sees it — a\n * hostile vendor can ship a 5 KB gzip blob that decompresses to GBs and\n * costs the attacker nothing for asymmetric CPU burn before the cap fires.\n * Forcing identity removes the asymmetry: the bomb has to be sent on the\n * wire at full size, where `Content-Length` pre-check catches it.\n *\n * No-op when the caller already set their own `Accept-Encoding` (signing\n * fetch may need a specific value to keep the signed bytes stable).\n */\nfunction withIdentityEncoding(init: RequestInit | undefined): RequestInit {\n  const headers = new Headers(init?.headers);\n  if (!headers.has('accept-encoding')) {\n    headers.set('accept-encoding', 'identity');\n  }\n  return { ...(init ?? {}), headers };\n}\n\n/**\n * Wrap a fetch implementation so its responses honor the size cap from the\n * active `responseSizeLimitStorage` slot. Pass-through when no slot is set.\n *\n * Pre-checks `Content-Length` and refuses to read the body when the declared\n * size already exceeds the cap. Otherwise wraps `Response.body` in a\n * `TransformStream` that counts bytes and errors with `ResponseTooLargeError`\n * at the cap boundary, propagating to anyone reading the response (including\n * `Response.clone()` branches used by the diagnostic capture wrapper).\n */\nexport function wrapFetchWithSizeLimit(upstream: typeof fetch): typeof fetch {\n  const wrapped: typeof fetch = async (input, init) => {\n    const slot = responseSizeLimitStorage.getStore();\n    if (!slot) return upstream(input, init);\n\n    const response = await upstream(input, withIdentityEncoding(init));\n    return enforceSizeLimit(response, slot.maxResponseBytes, redactUrlForError(urlOfInput(input)));\n  };\n  return wrapped;\n}\n\nfunction enforceSizeLimit(response: Response, maxBytes: number, url: string): Response {\n  // SSE responses are legitimately unbounded — a single tool call emits N\n  // status frames + a final result. Pass through; the protocol-level framing\n  // terminates the stream, not byte counts. Case-insensitive prefix match\n  // covers `text/event-stream; charset=utf-8` and `Text/Event-Stream` variants.\n  if (response.headers.get('content-type')?.toLowerCase().startsWith('text/event-stream')) {\n    return response;\n  }\n\n  // Cheap pre-check: if the server declares a Content-Length over the cap,\n  // tear the connection down before reading any of the body. Servers can\n  // omit or lie about Content-Length, which is why the streaming counter\n  // below is the authoritative enforcement.\n  const declared = parseContentLength(response.headers.get('content-length'));\n  if (declared !== undefined && declared > maxBytes) {\n    // Best-effort cancel so the runtime can release the socket. We swallow\n    // any rejection because the typed `ResponseTooLargeError` below is the\n    // signal the caller acts on — a `cancel()` rejection here would only\n    // happen if the body stream is already errored / locked, in which case\n    // the socket is already on its way down and there's nothing to recover.\n    response.body?.cancel().catch(() => {});\n    throw new ResponseTooLargeError(maxBytes, 0, url, declared);\n  }\n\n  if (!response.body) return response;\n\n  let bytesRead = 0;\n  const counter = new TransformStream<Uint8Array, Uint8Array>({\n    transform(chunk, controller) {\n      bytesRead += chunk.byteLength;\n      if (bytesRead > maxBytes) {\n        controller.error(new ResponseTooLargeError(maxBytes, bytesRead, url));\n        return;\n      }\n      controller.enqueue(chunk);\n    },\n  });\n\n  return new Response(response.body.pipeThrough(counter), {\n    status: response.status,\n    statusText: response.statusText,\n    headers: response.headers,\n  });\n}\n\nfunction parseContentLength(value: string | null): number | undefined {\n  if (value === null) return undefined;\n  const trimmed = value.trim();\n  if (!/^\\d+$/.test(trimmed)) return undefined;\n  const parsed = Number(trimmed);\n  return Number.isFinite(parsed) ? parsed : undefined;\n}\n"],"mappings":";;;;;;AAYA,SAAS,+BAA+B;AACxC,SAAS,6BAA6B;AAM/B,MAAM,2BAA2B,wBAAuC,mBAAmB;AAQ3F,SAAS,sBAAyB,kBAAsC,IAAkC;AAC/G,MAAI,CAAC,oBAAoB,CAAC,OAAO,SAAS,gBAAgB,KAAK,oBAAoB,GAAG;AACpF,WAAO,GAAG;AAAA,EACZ;AACA,SAAO,yBAAyB,IAAI,EAAE,iBAAiB,GAAG,EAAE;AAC9D;AAEA,SAAS,WAAW,OAAkC;AACpD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,iBAAiB,IAAK,QAAO,MAAM,SAAS;AAChD,SAAO,MAAM;AACf;AAYA,SAAS,kBAAkB,KAAqB;AAC9C,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,WAAO,SAAS;AAChB,WAAO,OAAO,SAAS;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAcA,SAAS,qBAAqB,MAA4C;AACxE,QAAM,UAAU,IAAI,QAAQ,MAAM,OAAO;AACzC,MAAI,CAAC,QAAQ,IAAI,iBAAiB,GAAG;AACnC,YAAQ,IAAI,mBAAmB,UAAU;AAAA,EAC3C;AACA,SAAO,EAAE,GAAI,QAAQ,CAAC,GAAI,QAAQ;AACpC;AAYO,SAAS,uBAAuB,UAAsC;AAC3E,QAAM,UAAwB,OAAO,OAAO,SAAS;AACnD,UAAM,OAAO,yBAAyB,SAAS;AAC/C,QAAI,CAAC,KAAM,QAAO,SAAS,OAAO,IAAI;AAEtC,UAAM,WAAW,MAAM,SAAS,OAAO,qBAAqB,IAAI,CAAC;AACjE,WAAO,iBAAiB,UAAU,KAAK,kBAAkB,kBAAkB,WAAW,KAAK,CAAC,CAAC;AAAA,EAC/F;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,UAAoB,UAAkB,KAAuB;AAKrF,MAAI,SAAS,QAAQ,IAAI,cAAc,GAAG,YAAY,EAAE,WAAW,mBAAmB,GAAG;AACvF,WAAO;AAAA,EACT;AAMA,QAAM,WAAW,mBAAmB,SAAS,QAAQ,IAAI,gBAAgB,CAAC;AAC1E,MAAI,aAAa,UAAa,WAAW,UAAU;AAMjD,aAAS,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AACtC,UAAM,IAAI,sBAAsB,UAAU,GAAG,KAAK,QAAQ;AAAA,EAC5D;AAEA,MAAI,CAAC,SAAS,KAAM,QAAO;AAE3B,MAAI,YAAY;AAChB,QAAM,UAAU,IAAI,gBAAwC;AAAA,IAC1D,UAAU,OAAO,YAAY;AAC3B,mBAAa,MAAM;AACnB,UAAI,YAAY,UAAU;AACxB,mBAAW,MAAM,IAAI,sBAAsB,UAAU,WAAW,GAAG,CAAC;AACpE;AAAA,MACF;AACA,iBAAW,QAAQ,KAAK;AAAA,IAC1B;AAAA,EACF,CAAC;AAED,SAAO,IAAI,SAAS,SAAS,KAAK,YAAY,OAAO,GAAG;AAAA,IACtD,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB,SAAS,SAAS;AAAA,EACpB,CAAC;AACH;AAEA,SAAS,mBAAmB,OAA0C;AACpE,MAAI,UAAU,KAAM,QAAO;AAC3B,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAQ,KAAK,OAAO,EAAG,QAAO;AACnC,QAAM,SAAS,OAAO,OAAO;AAC7B,SAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;","names":[]}
+{"version":3,"sources":["../../../src/lib/protocols/responseSizeLimit.ts"],"sourcesContent":["// Response-body byte cap enforcement for hostile-vendor protection.\n//\n// Wraps a base fetch with a streaming size counter so the SDK aborts large\n// responses before any application-layer parsing buffers them. Active when\n// `responseSizeLimitStorage` carries a slot — installed unconditionally as\n// the innermost transport wrapper so production callers without the slot\n// pay only one ALS lookup per request.\n//\n// The wrapper composes inside `wrapFetchWithCapture`: the diagnostic capture\n// reads the size-limited body via `response.clone()`, so a hostile reply\n// can't blow memory through the capture path either.\n\nimport { globalAsyncLocalStorage } from '../utils/global-async-local-storage';\nimport { ResponseTooLargeError } from '../errors';\n\ninterface SizeLimitSlot {\n  maxResponseBytes: number;\n}\n\nexport const responseSizeLimitStorage = globalAsyncLocalStorage<SizeLimitSlot>('responseSizeLimit');\n\n/**\n * Run `fn` with a response body byte cap active. Every fetch made through\n * a wrapped transport inside `fn` aborts with `ResponseTooLargeError` when\n * the response body exceeds `maxResponseBytes`. Non-positive caps disable\n * enforcement (ALS slot is not entered).\n */\nexport function withResponseSizeLimit<T>(maxResponseBytes: number | undefined, fn: () => Promise<T>): Promise<T> {\n  if (!maxResponseBytes || !Number.isFinite(maxResponseBytes) || maxResponseBytes <= 0) {\n    return fn();\n  }\n  return responseSizeLimitStorage.run({ maxResponseBytes }, fn);\n}\n\nfunction urlOfInput(input: RequestInfo | URL): string {\n  if (typeof input === 'string') return input;\n  if (input instanceof URL) return input.toString();\n  return input.url;\n}\n\n/**\n * Strip the search component from a URL before storing it on\n * `ResponseTooLargeError`. Some agents publish manifests with auth tokens\n * in the query string (`?api_key=…`); without redaction those land in\n * `err.message`, `err.details.url`, and downstream log sinks.\n *\n * Returns the input unchanged when it can't be parsed (relative paths,\n * non-URL inputs from custom test stubs) — the alternative is throwing,\n * which would mask the original `ResponseTooLargeError`.\n */\nfunction redactUrlForError(url: string): string {\n  try {\n    const parsed = new URL(url);\n    parsed.search = '';\n    return parsed.toString();\n  } catch {\n    return url;\n  }\n}\n\n/**\n * Force `Accept-Encoding: identity` on outgoing requests when the size cap\n * is active. Without this, undici sets `Accept-Encoding: gzip, deflate, br`\n * by default and decompresses the body before our counter sees it — a\n * hostile vendor can ship a 5 KB gzip blob that decompresses to GBs and\n * costs the attacker nothing for asymmetric CPU burn before the cap fires.\n * Forcing identity removes the asymmetry: the bomb has to be sent on the\n * wire at full size, where `Content-Length` pre-check catches it.\n *\n * No-op when the caller already set their own `Accept-Encoding` (signing\n * fetch may need a specific value to keep the signed bytes stable).\n */\nfunction withIdentityEncoding(init: RequestInit | undefined): RequestInit {\n  const headers = new Headers(init?.headers);\n  if (!headers.has('accept-encoding')) {\n    headers.set('accept-encoding', 'identity');\n  }\n  return { ...(init ?? {}), headers };\n}\n\n/**\n * Wrap a fetch implementation so its responses honor the size cap from the\n * active `responseSizeLimitStorage` slot. Pass-through when no slot is set.\n *\n * Pre-checks `Content-Length` and refuses to read the body when the declared\n * size already exceeds the cap. Otherwise wraps `Response.body` in a\n * `TransformStream` that counts bytes and errors with `ResponseTooLargeError`\n * at the cap boundary, propagating to anyone reading the response (including\n * `Response.clone()` branches used by the diagnostic capture wrapper).\n */\nexport function wrapFetchWithSizeLimit(upstream: typeof fetch): typeof fetch {\n  const wrapped: typeof fetch = async (input, init) => {\n    const slot = responseSizeLimitStorage.getStore();\n    if (!slot) return upstream(input, init);\n\n    const response = await upstream(input, withIdentityEncoding(init));\n    return enforceSizeLimit(response, slot.maxResponseBytes, redactUrlForError(urlOfInput(input)));\n  };\n  return wrapped;\n}\n\nfunction enforceSizeLimit(response: Response, maxBytes: number, url: string): Response {\n  // SSE responses are legitimately unbounded — a single tool call emits N\n  // status frames + a final result. Pass through; the protocol-level framing\n  // terminates the stream, not byte counts. Case-insensitive prefix match\n  // covers `text/event-stream; charset=utf-8` and `Text/Event-Stream` variants.\n  if (response.headers.get('content-type')?.toLowerCase().startsWith('text/event-stream')) {\n    return response;\n  }\n\n  // Cheap pre-check: if the server declares a Content-Length over the cap,\n  // tear the connection down before reading any of the body. Servers can\n  // omit or lie about Content-Length, which is why the streaming counter\n  // below is the authoritative enforcement.\n  const declared = parseContentLength(response.headers.get('content-length'));\n  if (declared !== undefined && declared > maxBytes) {\n    // Best-effort cancel so the runtime can release the socket. We swallow\n    // any rejection because the typed `ResponseTooLargeError` below is the\n    // signal the caller acts on — a `cancel()` rejection here would only\n    // happen if the body stream is already errored / locked, in which case\n    // the socket is already on its way down and there's nothing to recover.\n    response.body?.cancel().catch(() => {});\n    throw new ResponseTooLargeError(maxBytes, 0, url, declared);\n  }\n\n  if (!response.body) return response;\n\n  let bytesRead = 0;\n  const counter = new TransformStream<Uint8Array, Uint8Array>({\n    transform(chunk, controller) {\n      bytesRead += chunk.byteLength;\n      if (bytesRead > maxBytes) {\n        controller.error(new ResponseTooLargeError(maxBytes, bytesRead, url));\n        return;\n      }\n      controller.enqueue(chunk);\n    },\n  });\n\n  return new Response(response.body.pipeThrough(counter), {\n    status: response.status,\n    statusText: response.statusText,\n    headers: response.headers,\n  });\n}\n\nfunction parseContentLength(value: string | null): number | undefined {\n  if (value === null) return undefined;\n  const trimmed = value.trim();\n  if (!/^\\d+$/.test(trimmed)) return undefined;\n  const parsed = Number(trimmed);\n  return Number.isFinite(parsed) ? parsed : undefined;\n}\n"],"mappings":"AAYA,SAAS,+BAA+B;AACxC,SAAS,6BAA6B;AAM/B,MAAM,2BAA2B,wBAAuC,mBAAmB;AAQ3F,SAAS,sBAAyB,kBAAsC,IAAkC;AAC/G,MAAI,CAAC,oBAAoB,CAAC,OAAO,SAAS,gBAAgB,KAAK,oBAAoB,GAAG;AACpF,WAAO,GAAG;AAAA,EACZ;AACA,SAAO,yBAAyB,IAAI,EAAE,iBAAiB,GAAG,EAAE;AAC9D;AAEA,SAAS,WAAW,OAAkC;AACpD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,iBAAiB,IAAK,QAAO,MAAM,SAAS;AAChD,SAAO,MAAM;AACf;AAYA,SAAS,kBAAkB,KAAqB;AAC9C,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,WAAO,SAAS;AAChB,WAAO,OAAO,SAAS;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAcA,SAAS,qBAAqB,MAA4C;AACxE,QAAM,UAAU,IAAI,QAAQ,MAAM,OAAO;AACzC,MAAI,CAAC,QAAQ,IAAI,iBAAiB,GAAG;AACnC,YAAQ,IAAI,mBAAmB,UAAU;AAAA,EAC3C;AACA,SAAO,EAAE,GAAI,QAAQ,CAAC,GAAI,QAAQ;AACpC;AAYO,SAAS,uBAAuB,UAAsC;AAC3E,QAAM,UAAwB,OAAO,OAAO,SAAS;AACnD,UAAM,OAAO,yBAAyB,SAAS;AAC/C,QAAI,CAAC,KAAM,QAAO,SAAS,OAAO,IAAI;AAEtC,UAAM,WAAW,MAAM,SAAS,OAAO,qBAAqB,IAAI,CAAC;AACjE,WAAO,iBAAiB,UAAU,KAAK,kBAAkB,kBAAkB,WAAW,KAAK,CAAC,CAAC;AAAA,EAC/F;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,UAAoB,UAAkB,KAAuB;AAKrF,MAAI,SAAS,QAAQ,IAAI,cAAc,GAAG,YAAY,EAAE,WAAW,mBAAmB,GAAG;AACvF,WAAO;AAAA,EACT;AAMA,QAAM,WAAW,mBAAmB,SAAS,QAAQ,IAAI,gBAAgB,CAAC;AAC1E,MAAI,aAAa,UAAa,WAAW,UAAU;AAMjD,aAAS,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AACtC,UAAM,IAAI,sBAAsB,UAAU,GAAG,KAAK,QAAQ;AAAA,EAC5D;AAEA,MAAI,CAAC,SAAS,KAAM,QAAO;AAE3B,MAAI,YAAY;AAChB,QAAM,UAAU,IAAI,gBAAwC;AAAA,IAC1D,UAAU,OAAO,YAAY;AAC3B,mBAAa,MAAM;AACnB,UAAI,YAAY,UAAU;AACxB,mBAAW,MAAM,IAAI,sBAAsB,UAAU,WAAW,GAAG,CAAC;AACpE;AAAA,MACF;AACA,iBAAW,QAAQ,KAAK;AAAA,IAC1B;AAAA,EACF,CAAC;AAED,SAAO,IAAI,SAAS,SAAS,KAAK,YAAY,OAAO,GAAG;AAAA,IACtD,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB,SAAS,SAAS;AAAA,EACpB,CAAC;AACH;AAEA,SAAS,mBAAmB,OAA0C;AACpE,MAAI,UAAU,KAAM,QAAO;AAC3B,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAQ,KAAK,OAAO,EAAG,QAAO;AACnC,QAAM,SAAS,OAAO,OAAO;AAC7B,SAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;","names":[]}

package/dist/lib/protocols/transportDiagnostics.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 import { globalAsyncLocalStorage } from "../utils/global-async-local-storage.mjs";
 import { createHmac } from "node:crypto";
 const BODY_SNIPPET_LIMIT = 64 * 1024;