@adcp/sdk 13.0.0-rc.7 → 13.0.0-rc.8

package/dist/lib/protocols/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/protocols/index.ts"],"sourcesContent":["import { fileURLToPath as __adcpFileURLToPath } from 'node:url';\nimport { dirname as __adcpDirname } from 'node:path';\nimport { createRequire as __adcpCreateRequire } from 'node:module';\nconst __dirname = __adcpDirname(__adcpFileURLToPath(import.meta.url));\nconst require = __adcpCreateRequire(import.meta.url);\n// Unified Protocol Interface for AdCP\nexport {\n  callMCPTool,\n  callMCPToolWithOAuth,\n  connectMCP,\n  closeMCPConnections,\n  closeOAuthConnections,\n  UnauthorizedError,\n} from './mcp';\n\nimport { closeMCPConnections } from './mcp';\nimport { closeA2AConnections } from './a2a';\n\n/**\n * Close protocol connections for the given protocol.\n * MCP closes persistent HTTP transports; A2A clears the agent-card client cache.\n */\nexport async function closeConnections(protocol: 'mcp' | 'a2a' = 'mcp'): Promise<void> {\n  if (protocol === 'mcp') {\n    await closeMCPConnections();\n  } else {\n    closeA2AConnections();\n  }\n}\nexport type { MCPCallOptions, MCPConnectionResult } from './mcp';\nexport { callA2ATool } from './a2a';\nexport { DEFAULT_REQUEST_TIMEOUT_MS } from './abort';\nexport {\n  callMCPToolWithTasks,\n  getMCPTaskStatus,\n  getMCPTaskResult,\n  listMCPTasks,\n  cancelMCPTask,\n  mapMCPTaskStatus,\n  serverSupportsTasks,\n} from './mcp-tasks';\n\nimport { callMCPToolWithTasks, callMCPToolWithClient } from './mcp-tasks';\nimport { callMCPToolWithOAuth } from './mcp';\nimport { callA2ATool } from './a2a';\nimport type { AgentConfig, DebugLogEntry } from '../types';\nimport type { PushNotificationConfig } from '../types/tools.generated';\nimport { getAuthToken } from '../auth';\nimport {\n  discoverAuthorizationRequirements,\n  NeedsAuthorizationError,\n  getAgentStorage,\n  ensureClientCredentialsTokens,\n} from '../auth/oauth';\nimport { getNonInteractiveOAuthProvider } from '../auth/oauth/provider-cache';\nimport { is401Error } from '../errors';\nimport { isLikelyPrivateUrl } from '../net';\nimport { validateAgentUrl } from '../validation';\nimport { withSpan } from '../observability/tracing';\nimport { ADCP_MAJOR_VERSION, ADCP_VERSION, parseAdcpMajorVersion } from '../version';\nimport { ConfigurationError } from '../errors';\nimport { resolveBundleKey, toReleasePrecisionWire, validateAdcpVersionWire } from '../validation/schema-loader';\nimport { buildAgentSigningContext, CAPABILITY_OP, ensureCapabilityLoaded } from '../signing/client';\nimport { withResponseSizeLimit } from './responseSizeLimit';\nimport {\n  withTransportDiagnostics,\n  type TransportActivityHandler as TransportActivityHandlerFn,\n} from './transportDiagnostics';\n\nexport {\n  sanitizeTransportHeaders,\n  sanitizeTransportUrl,\n  withTransportDiagnostics,\n  wrapFetchWithTransportDiagnostics,\n} from './transportDiagnostics';\nexport type { TransportActivity, TransportActivityContext, TransportActivityHandler } from './transportDiagnostics';\n\nexport type VersionEnvelopeMode = 'auto' | 'none' | 'major-only';\n\n/**\n * Derive the wire-level `adcp_major_version` integer from a caller-supplied\n * pin. Returns the SDK default when no pin is provided; throws on a pin\n * that doesn't parse so misuse surfaces at the factory boundary instead\n * of silently emitting the SDK's major.\n *\n * Throws `ConfigurationError` (not a plain `Error`) so a typo'd pin\n * surfaces with the same error class as the construction-time gate in\n * `resolveAdcpVersion` — one shape for all pin-misuse paths.\n */\nfunction resolveWireMajor(adcpVersion: string | undefined): number {\n  if (adcpVersion === undefined) return ADCP_MAJOR_VERSION;\n  const parsed = parseAdcpMajorVersion(adcpVersion);\n  if (!Number.isFinite(parsed)) {\n    throw new ConfigurationError(\n      `adcpVersion ${JSON.stringify(adcpVersion)} is not a valid AdCP version. ` +\n        `Expected a semver string (e.g. '3.0.1', '3.1.0-beta.1') or a legacy alias (e.g. 'v3').`,\n      'adcpVersion'\n    );\n  }\n  return parsed;\n}\n\n/**\n * Returns true when the AdCP release that `bundleKey` identifies declares the\n * top-level `adcp_version` envelope field. The field landed in AdCP 3.1 per\n * spec PR `adcontextprotocol/adcp#3493` — 3.0 (any patch / prerelease) does\n * not carry it; 3.1+ does. Used to gate dual-emit on the wire so a 3.0-pinned\n * client doesn't emit a field its target schema doesn't define.\n */\nexport function bundleSupportsAdcpVersionField(bundleKey: string): boolean {\n  const major = parseAdcpMajorVersion(bundleKey);\n  if (!Number.isFinite(major)) return false;\n  if (major < 3) return false;\n  if (major > 3) return true;\n  // Major 3 — only 3.1+ has the field. Bundle key shape is normalized by\n  // `resolveBundleKey`: `'3.0'` / `'3.1'` for stable; `'3.0.0-beta.1'` /\n  // `'3.1.0-beta.1'` for prereleases. Match the minor.\n  const minorMatch = bundleKey.match(/^\\d+\\.(\\d+)/);\n  if (!minorMatch) return false;\n  return parseInt(minorMatch[1]!, 10) >= 1;\n}\n\n/**\n * Build the wire-level version envelope to merge into outgoing request args.\n *\n * Per AdCP 3.1 (spec PR `adcontextprotocol/adcp#3493`), 3.1+ requests carry\n * BOTH the integer `adcp_major_version` (deprecated through 3.x, removed in\n * 4.0) AND the release-precision string `adcp_version`. 3.0 schemas don't\n * define the string field, so a 3.0-pinned client emits the integer only —\n * matches the 3.0 spec exactly.\n *\n * Wire string is release-precision (MAJOR.MINOR with optional prerelease tag),\n * per `core/version-envelope.json`'s pattern `^\\d+\\.\\d+(-[a-zA-Z0-9.-]+)?$`.\n * Full-semver bundle keys (`'3.1.0-beta.1'`) are collapsed via\n * `toReleasePrecisionWire` to `'3.1-beta.1'` before emit — meta-field shapes\n * are explicitly NOT valid wire values per the envelope schema's own\n * normalization rule.\n *\n * Returns `{}` for v2 callers (predates the major-version field entirely).\n */\nfunction buildVersionEnvelope(\n  adcpVersion: string | undefined,\n  serverVersion: 'v2' | 'v3' | undefined\n): Record<string, unknown> {\n  if (serverVersion === 'v2') return {};\n  const wireMajor = resolveWireMajor(adcpVersion);\n  const bundleKey = resolveBundleKey(adcpVersion ?? ADCP_VERSION);\n  if (!bundleSupportsAdcpVersionField(bundleKey)) {\n    return { adcp_major_version: wireMajor };\n  }\n  const wireValue = toReleasePrecisionWire(bundleKey);\n  // Defensive postcondition — should never throw in well-formed code, but\n  // if a future refactor breaks the normalization the error message tells\n  // the developer to call `toReleasePrecisionWire` instead of silently\n  // emitting a non-spec wire string.\n  validateAdcpVersionWire(wireValue);\n  return { adcp_major_version: wireMajor, adcp_version: wireValue };\n}\n\nlet hasWarnedAboutV2PushNotificationSecret = false;\n\n/**\n * Warn once when an async webhook registration is suppressed for a v2 seller.\n *\n * v2.5's `push-notification-config.json` requires `authentication`, and unlike\n * 3.x it has no RFC 9421 selector semantics — so omitting the block produces a\n * schema-invalid request rather than choosing a signing mode. Without a\n * configured secret there is no honest value to send, and the previous\n * behaviour (a hardcoded placeholder credential) told the seller the channel\n * was authenticated by a constant published in this package.\n */\nfunction warnV2PushNotificationNeedsSecret(): void {\n  if (hasWarnedAboutV2PushNotificationSecret) return;\n  hasWarnedAboutV2PushNotificationSecret = true;\n  console.warn(\n    '[adcp] Suppressing push_notification_config for a v2 seller: AdCP 2.5 requires an ' +\n      '`authentication` block and no `webhookSecret` is configured. Set `webhookSecret` to register ' +\n      'async task-status webhooks with this agent, or move the agent to an AdCP 3.x pin, where the ' +\n      'RFC 9421 webhook profile needs no shared secret.'\n  );\n}\n\nfunction buildVersionEnvelopeForMode(\n  mode: VersionEnvelopeMode,\n  adcpVersion: string | undefined,\n  serverVersion: 'v2' | 'v3' | undefined\n): Record<string, unknown> {\n  if (mode === 'none' || serverVersion === 'v2') return {};\n  if (mode === 'major-only') return { adcp_major_version: resolveWireMajor(adcpVersion) };\n  return buildVersionEnvelope(adcpVersion, serverVersion);\n}\n\n/**\n * Merge the wire-level version envelope into a caller-supplied args object.\n * Caller args win: an explicit `adcp_major_version` / `adcp_version` in\n * `args` (e.g. a conformance harness probing `VERSION_UNSUPPORTED`) passes\n * through unchanged. The envelope only fills fields the caller didn't set.\n *\n * Single chokepoint for all four wire-injection sites so a future refactor\n * can't silently flip the spread order on one branch and leave the others\n * intact. Stale dual-field drift is caught at the server boundary by\n * `createAdcpServer`'s field-disagreement check (spec PR\n * `adcontextprotocol/adcp#3493`).\n *\n * @internal\n */\nexport function applyVersionEnvelope(\n  args: Record<string, unknown>,\n  envelope: Record<string, unknown>\n): Record<string, unknown> {\n  return { ...envelope, ...args };\n}\n\n/**\n * Transport-level safeguards applied to a call.\n *\n * Wired into the SDK's internal fetch chain via AsyncLocalStorage, so the\n * cap takes effect even when the underlying transport's connection cache\n * reuses a fetch that was created on an earlier call with different limits.\n */\nexport interface TransportOptions {\n  /**\n   * Maximum response body size (in octets) the SDK will read before aborting\n   * with `ResponseTooLargeError`. When unset, the SDK does not impose a cap —\n   * matches the underlying MCP / A2A transport defaults.\n   *\n   * Set this when crawling **untrusted** agents (registries, federated\n   * discovery layers, monitoring tools) to prevent a hostile vendor from\n   * buffering a large reply before any application-layer schema validation\n   * runs. Counted across response chunks; pre-cancels when `Content-Length`\n   * exceeds the cap. Applies to A2A agent-card discovery\n   * (`/.well-known/agent.json`) on the same call as well.\n   *\n   * Per-call override (`TaskOptions.transport.maxResponseBytes`) beats the\n   * value set on the client constructor (`SingleAgentClientConfig.transport`).\n   *\n   * @remarks\n   * **Safe to set on all calls.** SSE responses (`text/event-stream`) are\n   * passed through unchanged — a single tool call legitimately emits N status\n   * frames + a final result, bounded by protocol-level framing rather than\n   * cumulative byte counts. The cap applies to one-shot JSON responses\n   * (`get_adcp_capabilities`, agent-card lookup, tool result payloads on\n   * non-streaming transports) where the body is bounded by definition.\n   *\n   * @remarks\n   * **Hostile-peer note:** A peer can opt itself out of this cap by responding\n   * with `Content-Type: text/event-stream`. SSE is bypassed because cumulative\n   * event-frame bytes are unbounded by spec — MCP and A2A both stream tool\n   * responses this way. The MCP/A2A SDKs consume SSE incrementally and frame\n   * termination bounds memory in practice, so this is not a memory-bomb risk\n   * for well-formed transports. Adopters relying on `maxResponseBytes` as a\n   * hostile-server defense should treat it as best-effort for non-SSE\n   * responses only.\n   *\n   * @remarks\n   * Future hardening knobs (DNS-rebind defense, scheme allow-list, request\n   * timeout overrides) will land here as additional fields. When `fetchFn`\n   * is supplied, the SDK composes it inside its signing, capture, size-limit,\n   * timeout, and diagnostics wrappers so callers do not have to reproduce\n   * that non-obvious ordering themselves.\n   */\n  maxResponseBytes?: number;\n  /**\n   * Scoped fetch implementation for all outbound HTTP performed on behalf of\n   * this client or call, including endpoint/card discovery, tool listing,\n   * OAuth discovery and token refresh, and MCP/A2A tool requests.\n   *\n   * The function is runtime-only configuration and is never serialized into\n   * agent records, storyboard artifacts, or compliance output. When unset,\n   * the SDK uses the global `fetch` implementation.\n   *\n   * For SSRF-sensitive metadata probes, supplying this function makes it the\n   * trusted network boundary: the SDK still validates schemes and resolved\n   * addresses, but a custom fetch API cannot accept the SDK's pinned undici\n   * dispatcher. The implementation must therefore prevent DNS rebinding (for\n   * example with an egress proxy or its own DNS pinning).\n   */\n  fetchFn?: typeof fetch;\n  /**\n   * Timeout in milliseconds for bounded one-shot transport requests such as\n   * A2A agent-card discovery and MCP read-path probes. Defaults to 60 seconds\n   * for A2A discovery so an unresponsive card endpoint cannot hang forever.\n   * Set to `0` to disable the SDK-imposed discovery timeout.\n   */\n  requestTimeoutMs?: number;\n}\n\n/**\n * Options for {@link ProtocolClient.callTool}. All fields are optional.\n *\n * `webhookUrl` / `webhookSecret` / `webhookToken` are for ASYNC TASK STATUS\n * notifications (push_notification_config). For reporting webhooks\n * (reporting_webhook), include them directly in `args` — they stay in skill\n * parameters and are sent verbatim to the agent.\n */\nexport interface CallToolOptions {\n  /** Debug log array. Mutated in place by the protocol layer. */\n  debugLogs?: DebugLogEntry[];\n  /** URL for async task status notifications. */\n  webhookUrl?: string;\n  /** HMAC-SHA256 secret for push_notification_config authentication. */\n  webhookSecret?: string;\n  /** Bearer token for push_notification_config validation. */\n  webhookToken?: string;\n  /** Pinned protocol generation when the agent advertises both v2 and v3. */\n  serverVersion?: 'v2' | 'v3';\n  /** A2A session continuity (contextId carries conversation, taskId resumes a task). */\n  session?: { contextId?: string; taskId?: string };\n  /**\n   * AdCP version pin from the calling client/server instance. Sets the\n   * wire-level `adcp_major_version` field per-call instead of from the\n   * SDK-pinned `ADCP_MAJOR_VERSION` constant. Default falls back to the\n   * constant so call sites that don't plumb a per-instance version keep\n   * their existing behavior. An explicit `adcp_major_version` /\n   * `adcp_version` in `args` overrides this — conformance harnesses use\n   * that path to probe seller version negotiation.\n   */\n  adcpVersion?: string;\n  /**\n   * Optional wire-only version override. Schema selection and client\n   * construction can remain pinned to `adcpVersion`; the request envelope is\n   * emitted for this release-precision line.\n   */\n  wireAdcpVersion?: string;\n  /**\n   * Controls whether the SDK injects AdCP version envelope fields into the\n   * outgoing request. Defaults to `auto`. 3.0 pins emit only the legacy\n   * `adcp_major_version`; 3.1+ pins emit both the legacy major and exact\n   * `adcp_version` marker. `major-only` forces the legacy integer marker\n   * without the 3.1 string marker for strict pre-3.1 peers discovered at\n   * runtime.\n   */\n  versionEnvelope?: VersionEnvelopeMode;\n  /**\n   * Transport-level safeguards (size caps, etc.). Per-call override of any\n   * matching field on the client constructor's `transport` option.\n   */\n  transport?: TransportOptions;\n  /** Caller-owned cancellation signal for the in-flight protocol call. */\n  signal?: AbortSignal;\n  /** Transport-level diagnostics callback for outbound HTTP requests. */\n  onTransportActivity?: TransportActivityHandlerFn;\n  /**\n   * Correlation metadata attached to transport diagnostics events emitted\n   * while this protocol call is active.\n   */\n  transportActivityContext?: {\n    operationId?: string;\n    taskId?: string;\n    contextId?: string;\n    idempotencyKey?: string;\n  };\n}\n\n/**\n * Universal protocol client - automatically routes to the correct protocol implementation\n */\nexport class ProtocolClient {\n  /**\n   * Call a tool on an agent using the appropriate protocol.\n   *\n   * @param agent - Agent configuration\n   * @param toolName - Name of the tool/skill to call\n   * @param args - Tool arguments (includes reporting_webhook if needed - NOT removed)\n   * @param options - Optional call-level configuration. See {@link CallToolOptions}.\n   */\n  static async callTool(\n    agent: AgentConfig,\n    toolName: string,\n    args: Record<string, unknown>,\n    options: CallToolOptions = {}\n  ): Promise<unknown> {\n    const {\n      debugLogs = [],\n      webhookUrl,\n      webhookSecret,\n      webhookToken,\n      serverVersion,\n      session,\n      adcpVersion,\n      wireAdcpVersion,\n      versionEnvelope: versionEnvelopeMode = 'auto',\n      transport,\n      signal,\n      onTransportActivity,\n      transportActivityContext,\n    } = options;\n    // Per-instance version envelope. Throws on unparseable pins via\n    // `resolveWireMajor`; construction-time `resolveAdcpVersion` is the\n    // primary gate but this is the failsafe for callers reaching\n    // `ProtocolClient.callTool` directly (test harnesses, the in-process\n    // MCP path). Returns `{ adcp_major_version }` for 3.0 pins and\n    // `{ adcp_major_version, adcp_version }` for 3.1+ pins.\n    const versionEnvelope = buildVersionEnvelopeForMode(\n      versionEnvelopeMode,\n      wireAdcpVersion ?? adcpVersion,\n      serverVersion\n    );\n    // Enter the response-size-limit ALS slot once for this call. The slot is\n    // read by `wrapFetchWithSizeLimit` in both protocol transports, so the\n    // cap applies regardless of which path (MCP / A2A / OAuth refresh) the\n    // call ends up taking. No-op when the cap is unset or non-positive.\n    return withResponseSizeLimit(transport?.maxResponseBytes, () =>\n      withTransportDiagnostics(\n        {\n          agentId: agent.id,\n          protocol: agent.protocol,\n          tool: toolName,\n          taskType: toolName,\n          ...transportActivityContext,\n          onTransportActivity,\n        },\n        () =>\n          withSpan(\n            `adcp.${agent.protocol}.call_tool`,\n            {\n              'adcp.agent_id': agent.id,\n              'adcp.protocol': agent.protocol,\n              'adcp.tool': toolName,\n              'http.url': agent.agent_uri,\n            },\n            async () => {\n              // In-process MCP path: pre-connected client, no HTTP transport.\n              // Idempotency injection, schema validation, and governance middleware all\n              // still apply (they run in SingleAgentClient above this call). We skip\n              // URL validation, OAuth refresh, and signing — none apply in-process.\n              if (agent.protocol === 'mcp' && agent._inProcessMcpClient) {\n                const inProcArgs = applyVersionEnvelope(args, versionEnvelope);\n                return callMCPToolWithClient(agent._inProcessMcpClient, toolName, inProcArgs, debugLogs, {\n                  ...(signal && { signal }),\n                  ...(transport?.requestTimeoutMs !== undefined && { requestTimeoutMs: transport.requestTimeoutMs }),\n                });\n              }\n\n              validateAgentUrl(agent.agent_uri);\n\n              // OAuth 2.0 client credentials (RFC 6749 §4.4): re-exchange the\n              // secret for a fresh access token whenever the cached one is within\n              // its expiration skew. Runs before every call so mid-session expiry\n              // can't leave the caller with a stale bearer. No-op if the agent\n              // doesn't declare client credentials. Cheap on warm cache (single\n              // `Date.now()` compare); a single POST to the token endpoint on miss.\n              //\n              // `allowPrivateIp` inherits the trust the caller already placed in\n              // `agent.agent_uri` — if they're making a call to a private-IP agent,\n              // they've authorized this process to talk to private-IP hosts, so\n              // the token endpoint on the same network is reachable too. Public\n              // agent URLs with private-IP token endpoints still require an\n              // explicit opt-in via the library API.\n              if (agent.oauth_client_credentials) {\n                const ccStorage = getAgentStorage(agent);\n                const allowPrivateIp = isLikelyPrivateUrl(agent.agent_uri);\n                await ensureClientCredentialsTokens(agent, {\n                  storage: ccStorage,\n                  allowPrivateIp,\n                  fetch: transport?.fetchFn,\n                });\n              }\n\n              const authToken = getAuthToken(agent);\n\n              // RFC 9421 signing context. Built once per call and passed through\n              // to each protocol-layer entry (`callMCPToolWithTasks`, `callA2ATool`,\n              // `callMCPToolWithOAuth`) — those entries seed `signingContextStorage`\n              // (AsyncLocalStorage) so the internal transport helpers read it\n              // without an explicit parameter. Keep the explicit arg here: it's the\n              // ALS seed, not incidental plumbing. `get_adcp_capabilities` is\n              // exempt from signing (it's the discovery call itself) and also\n              // triggers cache priming for any other op on agents with\n              // `request_signing` configured.\n              const signingContext = buildAgentSigningContext(agent);\n              if (signingContext && toolName !== CAPABILITY_OP) {\n                await ensureCapabilityLoaded(agent, signingContext, primeArgs =>\n                  ProtocolClient.callTool(agent, CAPABILITY_OP, primeArgs, {\n                    debugLogs,\n                    serverVersion,\n                    adcpVersion,\n                    ...(versionEnvelopeMode !== 'auto' && { versionEnvelope: versionEnvelopeMode }),\n                    transport,\n                    signal,\n                    ...(transport?.requestTimeoutMs !== undefined && { requestTimeoutMs: transport.requestTimeoutMs }),\n                    onTransportActivity,\n                    transportActivityContext,\n                  })\n                );\n              }\n\n              // Inject the version envelope on every request so sellers can validate\n              // compatibility. Skip for v2 servers — they don't recognise the\n              // version fields and strict-schema agents reject them. The envelope\n              // shape is per-pin: 3.0 pins get the integer `adcp_major_version`\n              // alone; 3.1+ pins get both that and the release-precision string\n              // `adcp_version` (`'3.1'` / `'3.1.0-beta.1'`) per spec PR\n              // `adcontextprotocol/adcp#3493`.\n              const argsWithVersion = applyVersionEnvelope(args, versionEnvelope);\n\n              // Build push_notification_config for ASYNC TASK STATUS notifications\n              // (NOT for reporting_webhook - that stays in args)\n              // Schema: https://adcontextprotocol.org/schemas/v1/core/push-notification-config.json\n              // `authentication` is a scheme SELECTOR, not a fallback: from AdCP\n              // 3.0 on, push-notification-config.json makes its presence opt the\n              // seller into legacy HMAC-SHA256 and its absence select the RFC\n              // 9421 webhook profile, with `required: [\"url\"]` only. Emitting it\n              // with a placeholder credential would therefore downgrade every\n              // webhook to legacy HMAC keyed by a constant that ships in this\n              // file, so the block is omitted unless a real secret backs it.\n              //\n              // v2.5 predates the selector: there `required` is\n              // `[\"url\", \"authentication\"]` and there is no 9421 path, so an\n              // omitted block is schema-invalid rather than a mode selection.\n              // With no secret there is nothing honest to send a v2 seller, so\n              // suppress the registration instead of fabricating a credential.\n              const pushNotificationConfig: PushNotificationConfig | undefined = (():\n                | PushNotificationConfig\n                | undefined => {\n                if (!webhookUrl) return undefined;\n                if (webhookSecret) {\n                  return {\n                    url: webhookUrl,\n                    ...(webhookToken && { token: webhookToken }),\n                    authentication: {\n                      schemes: ['HMAC-SHA256' as const],\n                      credentials: webhookSecret,\n                    },\n                  };\n                }\n                if (serverVersion === 'v2') {\n                  warnV2PushNotificationNeedsSecret();\n                  return undefined;\n                }\n                return {\n                  url: webhookUrl,\n                  ...(webhookToken && { token: webhookToken }),\n                };\n              })();\n\n              if (agent.protocol === 'mcp') {\n                // For MCP, include push_notification_config in tool arguments (MCP spec)\n                const argsWithWebhook = pushNotificationConfig\n                  ? { ...argsWithVersion, push_notification_config: pushNotificationConfig }\n                  : argsWithVersion;\n\n                // If the agent config carries authorization-code OAuth tokens,\n                // route through the OAuth provider path so the MCP SDK can refresh\n                // on 401 instead of hard-failing. Excludes client-credentials\n                // agents: they have a cached access token but no refresh_token,\n                // and their refresh path is a secret re-exchange (handled above),\n                // not the SDK's refresh_token grant.\n                if (agent.oauth_tokens && !agent.oauth_client_credentials) {\n                  const authProvider = getNonInteractiveOAuthProvider(agent, {\n                    agentHint: agent.id,\n                    storage: getAgentStorage(agent),\n                    allowHttp: isLikelyPrivateUrl(agent.agent_uri),\n                  });\n                  try {\n                    return await callMCPToolWithOAuth({\n                      agentUrl: agent.agent_uri,\n                      toolName,\n                      args: argsWithWebhook,\n                      authProvider,\n                      debugLogs,\n                      customHeaders: agent.headers,\n                      signingContext,\n                      signal,\n                      requestTimeoutMs: transport?.requestTimeoutMs,\n                      fetchFn: transport?.fetchFn,\n                    });\n                  } catch (err) {\n                    // Refresh failed or server rejected the refreshed token — walk the\n                    // discovery chain so the caller can distinguish \"re-auth needed\"\n                    // from other failure modes.\n                    await rethrowAsNeedsAuthorization(err, agent.agent_uri, transport?.fetchFn);\n                    throw err;\n                  }\n                }\n\n                // Use callMCPToolWithTasks which auto-detects server tasks capability\n                // and falls back to standard callTool when tasks are not supported\n                try {\n                  return await callMCPToolWithTasks(\n                    agent.agent_uri,\n                    toolName,\n                    argsWithWebhook,\n                    authToken,\n                    debugLogs,\n                    agent.headers,\n                    {\n                      ...(signingContext && { signingContext }),\n                      ...(signal && { signal }),\n                      ...(transport?.requestTimeoutMs !== undefined && {\n                        requestTimeoutMs: transport.requestTimeoutMs,\n                      }),\n                      ...(transport?.fetchFn && { fetchFn: transport.fetchFn }),\n                    }\n                  );\n                } catch (err) {\n                  // Client-credentials agents: on 401, the AS may have rotated\n                  // something out-of-band. Force a fresh exchange and retry once\n                  // before surfacing the error. Bounded (single retry) so we don't\n                  // loop if the credentials are genuinely wrong.\n                  if (agent.oauth_client_credentials && is401Error(err)) {\n                    const ccStorage = getAgentStorage(agent);\n                    const allowPrivateIp = isLikelyPrivateUrl(agent.agent_uri);\n                    await ensureClientCredentialsTokens(agent, {\n                      storage: ccStorage,\n                      force: true,\n                      allowPrivateIp,\n                      fetch: transport?.fetchFn,\n                    });\n                    const retryAuthToken = agent.oauth_tokens?.access_token ?? authToken;\n                    try {\n                      return await callMCPToolWithTasks(\n                        agent.agent_uri,\n                        toolName,\n                        argsWithWebhook,\n                        retryAuthToken,\n                        debugLogs,\n                        agent.headers,\n                        {\n                          ...(signingContext && { signingContext }),\n                          ...(signal && { signal }),\n                          ...(transport?.requestTimeoutMs !== undefined && {\n                            requestTimeoutMs: transport.requestTimeoutMs,\n                          }),\n                          ...(transport?.fetchFn && { fetchFn: transport.fetchFn }),\n                        }\n                      );\n                    } catch (retryErr) {\n                      await rethrowAsNeedsAuthorization(retryErr, agent.agent_uri, transport?.fetchFn);\n                      throw retryErr;\n                    }\n                  }\n                  await rethrowAsNeedsAuthorization(err, agent.agent_uri, transport?.fetchFn);\n                  throw err;\n                }\n              } else if (agent.protocol === 'a2a') {\n                // For A2A, pass pushNotificationConfig separately (not in skill parameters)\n                try {\n                  return await callA2ATool(\n                    agent.agent_uri,\n                    toolName,\n                    argsWithVersion,\n                    authToken,\n                    debugLogs,\n                    pushNotificationConfig,\n                    agent.headers,\n                    signingContext,\n                    session,\n                    signal,\n                    transport?.requestTimeoutMs,\n                    transport?.fetchFn\n                  );\n                } catch (err) {\n                  // Same single-retry-on-401 for client-credentials agents as the\n                  // MCP path above. Kept symmetric so A2A CC agents aren't a\n                  // second-class experience — including the NeedsAuthorizationError\n                  // rewrap on a retry that still 401s.\n                  if (agent.oauth_client_credentials && is401Error(err)) {\n                    const ccStorage = getAgentStorage(agent);\n                    const allowPrivateIp = isLikelyPrivateUrl(agent.agent_uri);\n                    await ensureClientCredentialsTokens(agent, {\n                      storage: ccStorage,\n                      force: true,\n                      allowPrivateIp,\n                      fetch: transport?.fetchFn,\n                    });\n                    const retryAuthToken = agent.oauth_tokens?.access_token ?? authToken;\n                    try {\n                      return await callA2ATool(\n                        agent.agent_uri,\n                        toolName,\n                        argsWithVersion,\n                        retryAuthToken,\n                        debugLogs,\n                        pushNotificationConfig,\n                        agent.headers,\n                        signingContext,\n                        session,\n                        signal,\n                        transport?.requestTimeoutMs,\n                        transport?.fetchFn\n                      );\n                    } catch (retryErr) {\n                      await rethrowAsNeedsAuthorization(retryErr, agent.agent_uri, transport?.fetchFn);\n                      throw retryErr;\n                    }\n                  }\n                  await rethrowAsNeedsAuthorization(err, agent.agent_uri, transport?.fetchFn);\n                  throw err;\n                }\n              } else {\n                throw new Error(`Unsupported protocol: ${agent.protocol}`);\n              }\n            }\n          )\n      )\n    );\n  }\n}\n\n/**\n * If `err` looks like a 401 from the MCP transport, probe the agent for a\n * Bearer challenge and throw a {@link NeedsAuthorizationError} carrying\n * walked discovery metadata. If the error isn't a 401 or we can't build a\n * requirements record, return silently so the caller re-throws the original.\n *\n * Keeping this off the hot path: we only probe on error, and the probe is\n * a single unauthenticated `tools/list` POST — no retries, no DNS rebind.\n */\nasync function rethrowAsNeedsAuthorization(err: unknown, agentUrl: string, fetchFn?: typeof fetch): Promise<void> {\n  if (err instanceof NeedsAuthorizationError) throw err;\n  if (!is401Error(err)) return;\n\n  // If the caller has already connected to the agent URL, they've implicitly\n  // trusted it — inherit that trust for the discovery probe so loopback /\n  // private-IP development agents work the same way as public ones.\n  const allowPrivateIp = isLikelyPrivateUrl(agentUrl);\n\n  // discoverAuthorizationRequirements internally catches network failures and\n  // returns null rather than throwing — anything that escapes is a genuine\n  // bug we want to surface rather than mask the 401 with.\n  const requirements = await discoverAuthorizationRequirements(agentUrl, { allowPrivateIp, fetchFn });\n  if (requirements) {\n    throw new NeedsAuthorizationError(requirements);\n  }\n  // No requirements walked; let the caller re-throw the original error.\n}\n\n/**\n * Simple factory functions for protocol-specific clients.\n *\n * Both factories accept a `transport` argument that flows through to the\n * size-cap surface so callers reaching the factory exports honor the same\n * `maxResponseBytes` contract as `ProtocolClient.callTool`. Without it,\n * the factories would silently bypass the cap, which the public API\n * (`TransportOptions`) implies they honor.\n */\nexport const createMCPClient = (\n  agentUrl: string,\n  authToken?: string,\n  headers?: Record<string, string>,\n  serverVersion?: 'v2' | 'v3',\n  adcpVersion?: string,\n  transport?: TransportOptions,\n  versionEnvelopeMode: VersionEnvelopeMode = 'auto'\n) => {\n  // Validate the pin at factory time so a typo surfaces here rather than at\n  // first call. `buildVersionEnvelope` throws via `resolveWireMajor` on bad\n  // input — call it once to surface, then close over the envelope.\n  const versionEnvelope = buildVersionEnvelopeForMode(versionEnvelopeMode, adcpVersion, serverVersion);\n  return {\n    callTool: (toolName: string, args: Record<string, unknown>, debugLogs?: DebugLogEntry[]) =>\n      withResponseSizeLimit(transport?.maxResponseBytes, () =>\n        callMCPToolWithTasks(\n          agentUrl,\n          toolName,\n          applyVersionEnvelope(args, versionEnvelope),\n          authToken,\n          debugLogs,\n          headers,\n          {\n            ...(transport?.requestTimeoutMs !== undefined && { requestTimeoutMs: transport.requestTimeoutMs }),\n            ...(transport?.fetchFn && { fetchFn: transport.fetchFn }),\n          }\n        )\n      ),\n  };\n};\n\nexport const createA2AClient = (\n  agentUrl: string,\n  authToken?: string,\n  headers?: Record<string, string>,\n  serverVersion?: 'v2' | 'v3',\n  adcpVersion?: string,\n  transport?: TransportOptions,\n  versionEnvelopeMode: VersionEnvelopeMode = 'auto'\n) => {\n  const versionEnvelope = buildVersionEnvelopeForMode(versionEnvelopeMode, adcpVersion, serverVersion);\n  return {\n    callTool: (toolName: string, parameters: Record<string, unknown>, debugLogs?: DebugLogEntry[]) =>\n      withResponseSizeLimit(transport?.maxResponseBytes, () =>\n        callA2ATool(\n          agentUrl,\n          toolName,\n          applyVersionEnvelope(parameters, versionEnvelope),\n          authToken,\n          debugLogs,\n          undefined,\n          headers,\n          undefined,\n          undefined,\n          undefined,\n          transport?.requestTimeoutMs,\n          transport?.fetchFn\n        )\n      ),\n  };\n};\n"],"mappings":"AAAA,SAAS,iBAAiB,2BAA2B;AACrD,SAAS,WAAW,qBAAqB;AACzC,SAAS,iBAAiB,2BAA2B;AACrD,MAAM,YAAY,cAAc,oBAAoB,YAAY,GAAG,CAAC;AACpE,MAAMA,WAAU,oBAAoB,YAAY,GAAG;AAEnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,uBAAAC,4BAA2B;AACpC,SAAS,2BAA2B;AAMpC,eAAsB,iBAAiB,WAA0B,OAAsB;AACrF,MAAI,aAAa,OAAO;AACtB,UAAMA,qBAAoB;AAAA,EAC5B,OAAO;AACL,wBAAoB;AAAA,EACtB;AACF;AAEA,SAAS,mBAAmB;AAC5B,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,wBAAAC,uBAAsB,6BAA6B;AAC5D,SAAS,wBAAAC,6BAA4B;AACrC,SAAS,eAAAC,oBAAmB;AAG5B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sCAAsC;AAC/C,SAAS,kBAAkB;AAC3B,SAAS,0BAA0B;AACnC,SAAS,wBAAwB;AACjC,SAAS,gBAAgB;AACzB,SAAS,oBAAoB,cAAc,6BAA6B;AACxE,SAAS,0BAA0B;AACnC,SAAS,kBAAkB,wBAAwB,+BAA+B;AAClF,SAAS,0BAA0B,eAAe,8BAA8B;AAChF,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,OAEK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA,4BAAAC;AAAA,EACA;AAAA,OACK;AAeP,SAAS,iBAAiB,aAAyC;AACjE,MAAI,gBAAgB,OAAW,QAAO;AACtC,QAAM,SAAS,sBAAsB,WAAW;AAChD,MAAI,CAAC,OAAO,SAAS,MAAM,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR,eAAe,KAAK,UAAU,WAAW,CAAC;AAAA,MAE1C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AASO,SAAS,+BAA+B,WAA4B;AACzE,QAAM,QAAQ,sBAAsB,SAAS;AAC7C,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,MAAI,QAAQ,EAAG,QAAO;AACtB,MAAI,QAAQ,EAAG,QAAO;AAItB,QAAM,aAAa,UAAU,MAAM,aAAa;AAChD,MAAI,CAAC,WAAY,QAAO;AACxB,SAAO,SAAS,WAAW,CAAC,GAAI,EAAE,KAAK;AACzC;AAoBA,SAAS,qBACP,aACA,eACyB;AACzB,MAAI,kBAAkB,KAAM,QAAO,CAAC;AACpC,QAAM,YAAY,iBAAiB,WAAW;AAC9C,QAAM,YAAY,iBAAiB,eAAe,YAAY;AAC9D,MAAI,CAAC,+BAA+B,SAAS,GAAG;AAC9C,WAAO,EAAE,oBAAoB,UAAU;AAAA,EACzC;AACA,QAAM,YAAY,uBAAuB,SAAS;AAKlD,0BAAwB,SAAS;AACjC,SAAO,EAAE,oBAAoB,WAAW,cAAc,UAAU;AAClE;AAEA,IAAI,yCAAyC;AAY7C,SAAS,oCAA0C;AACjD,MAAI,uCAAwC;AAC5C,2CAAyC;AACzC,UAAQ;AAAA,IACN;AAAA,EAIF;AACF;AAEA,SAAS,4BACP,MACA,aACA,eACyB;AACzB,MAAI,SAAS,UAAU,kBAAkB,KAAM,QAAO,CAAC;AACvD,MAAI,SAAS,aAAc,QAAO,EAAE,oBAAoB,iBAAiB,WAAW,EAAE;AACtF,SAAO,qBAAqB,aAAa,aAAa;AACxD;AAgBO,SAAS,qBACd,MACA,UACyB;AACzB,SAAO,EAAE,GAAG,UAAU,GAAG,KAAK;AAChC;AAkJO,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAS1B,aAAa,SACX,OACA,UACA,MACA,UAA2B,CAAC,GACV;AAClB,UAAM;AAAA,MACJ,YAAY,CAAC;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB,sBAAsB;AAAA,MACvC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAOJ,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA,mBAAmB;AAAA,MACnB;AAAA,IACF;AAKA,WAAO;AAAA,MAAsB,WAAW;AAAA,MAAkB,MACxD;AAAA,QACE;AAAA,UACE,SAAS,MAAM;AAAA,UACf,UAAU,MAAM;AAAA,UAChB,MAAM;AAAA,UACN,UAAU;AAAA,UACV,GAAG;AAAA,UACH;AAAA,QACF;AAAA,QACA,MACE;AAAA,UACE,QAAQ,MAAM,QAAQ;AAAA,UACtB;AAAA,YACE,iBAAiB,MAAM;AAAA,YACvB,iBAAiB,MAAM;AAAA,YACvB,aAAa;AAAA,YACb,YAAY,MAAM;AAAA,UACpB;AAAA,UACA,YAAY;AAKV,gBAAI,MAAM,aAAa,SAAS,MAAM,qBAAqB;AACzD,oBAAM,aAAa,qBAAqB,MAAM,eAAe;AAC7D,qBAAO,sBAAsB,MAAM,qBAAqB,UAAU,YAAY,WAAW;AAAA,gBACvF,GAAI,UAAU,EAAE,OAAO;AAAA,gBACvB,GAAI,WAAW,qBAAqB,UAAa,EAAE,kBAAkB,UAAU,iBAAiB;AAAA,cAClG,CAAC;AAAA,YACH;AAEA,6BAAiB,MAAM,SAAS;AAehC,gBAAI,MAAM,0BAA0B;AAClC,oBAAM,YAAY,gBAAgB,KAAK;AACvC,oBAAM,iBAAiB,mBAAmB,MAAM,SAAS;AACzD,oBAAM,8BAA8B,OAAO;AAAA,gBACzC,SAAS;AAAA,gBACT;AAAA,gBACA,OAAO,WAAW;AAAA,cACpB,CAAC;AAAA,YACH;AAEA,kBAAM,YAAY,aAAa,KAAK;AAWpC,kBAAM,iBAAiB,yBAAyB,KAAK;AACrD,gBAAI,kBAAkB,aAAa,eAAe;AAChD,oBAAM;AAAA,gBAAuB;AAAA,gBAAO;AAAA,gBAAgB,eAClD,eAAe,SAAS,OAAO,eAAe,WAAW;AAAA,kBACvD;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA,GAAI,wBAAwB,UAAU,EAAE,iBAAiB,oBAAoB;AAAA,kBAC7E;AAAA,kBACA;AAAA,kBACA,GAAI,WAAW,qBAAqB,UAAa,EAAE,kBAAkB,UAAU,iBAAiB;AAAA,kBAChG;AAAA,kBACA;AAAA,gBACF,CAAC;AAAA,cACH;AAAA,YACF;AASA,kBAAM,kBAAkB,qBAAqB,MAAM,eAAe;AAkBlE,kBAAM,0BAA8D,MAEnD;AACf,kBAAI,CAAC,WAAY,QAAO;AACxB,kBAAI,eAAe;AACjB,uBAAO;AAAA,kBACL,KAAK;AAAA,kBACL,GAAI,gBAAgB,EAAE,OAAO,aAAa;AAAA,kBAC1C,gBAAgB;AAAA,oBACd,SAAS,CAAC,aAAsB;AAAA,oBAChC,aAAa;AAAA,kBACf;AAAA,gBACF;AAAA,cACF;AACA,kBAAI,kBAAkB,MAAM;AAC1B,kDAAkC;AAClC,uBAAO;AAAA,cACT;AACA,qBAAO;AAAA,gBACL,KAAK;AAAA,gBACL,GAAI,gBAAgB,EAAE,OAAO,aAAa;AAAA,cAC5C;AAAA,YACF,GAAG;AAEH,gBAAI,MAAM,aAAa,OAAO;AAE5B,oBAAM,kBAAkB,yBACpB,EAAE,GAAG,iBAAiB,0BAA0B,uBAAuB,IACvE;AAQJ,kBAAI,MAAM,gBAAgB,CAAC,MAAM,0BAA0B;AACzD,sBAAM,eAAe,+BAA+B,OAAO;AAAA,kBACzD,WAAW,MAAM;AAAA,kBACjB,SAAS,gBAAgB,KAAK;AAAA,kBAC9B,WAAW,mBAAmB,MAAM,SAAS;AAAA,gBAC/C,CAAC;AACD,oBAAI;AACF,yBAAO,MAAMF,sBAAqB;AAAA,oBAChC,UAAU,MAAM;AAAA,oBAChB;AAAA,oBACA,MAAM;AAAA,oBACN;AAAA,oBACA;AAAA,oBACA,eAAe,MAAM;AAAA,oBACrB;AAAA,oBACA;AAAA,oBACA,kBAAkB,WAAW;AAAA,oBAC7B,SAAS,WAAW;AAAA,kBACtB,CAAC;AAAA,gBACH,SAAS,KAAK;AAIZ,wBAAM,4BAA4B,KAAK,MAAM,WAAW,WAAW,OAAO;AAC1E,wBAAM;AAAA,gBACR;AAAA,cACF;AAIA,kBAAI;AACF,uBAAO,MAAMD;AAAA,kBACX,MAAM;AAAA,kBACN;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA,MAAM;AAAA,kBACN;AAAA,oBACE,GAAI,kBAAkB,EAAE,eAAe;AAAA,oBACvC,GAAI,UAAU,EAAE,OAAO;AAAA,oBACvB,GAAI,WAAW,qBAAqB,UAAa;AAAA,sBAC/C,kBAAkB,UAAU;AAAA,oBAC9B;AAAA,oBACA,GAAI,WAAW,WAAW,EAAE,SAAS,UAAU,QAAQ;AAAA,kBACzD;AAAA,gBACF;AAAA,cACF,SAAS,KAAK;AAKZ,oBAAI,MAAM,4BAA4B,WAAW,GAAG,GAAG;AACrD,wBAAM,YAAY,gBAAgB,KAAK;AACvC,wBAAM,iBAAiB,mBAAmB,MAAM,SAAS;AACzD,wBAAM,8BAA8B,OAAO;AAAA,oBACzC,SAAS;AAAA,oBACT,OAAO;AAAA,oBACP;AAAA,oBACA,OAAO,WAAW;AAAA,kBACpB,CAAC;AACD,wBAAM,iBAAiB,MAAM,cAAc,gBAAgB;AAC3D,sBAAI;AACF,2BAAO,MAAMA;AAAA,sBACX,MAAM;AAAA,sBACN;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA,MAAM;AAAA,sBACN;AAAA,wBACE,GAAI,kBAAkB,EAAE,eAAe;AAAA,wBACvC,GAAI,UAAU,EAAE,OAAO;AAAA,wBACvB,GAAI,WAAW,qBAAqB,UAAa;AAAA,0BAC/C,kBAAkB,UAAU;AAAA,wBAC9B;AAAA,wBACA,GAAI,WAAW,WAAW,EAAE,SAAS,UAAU,QAAQ;AAAA,sBACzD;AAAA,oBACF;AAAA,kBACF,SAAS,UAAU;AACjB,0BAAM,4BAA4B,UAAU,MAAM,WAAW,WAAW,OAAO;AAC/E,0BAAM;AAAA,kBACR;AAAA,gBACF;AACA,sBAAM,4BAA4B,KAAK,MAAM,WAAW,WAAW,OAAO;AAC1E,sBAAM;AAAA,cACR;AAAA,YACF,WAAW,MAAM,aAAa,OAAO;AAEnC,kBAAI;AACF,uBAAO,MAAME;AAAA,kBACX,MAAM;AAAA,kBACN;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA,MAAM;AAAA,kBACN;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA,WAAW;AAAA,kBACX,WAAW;AAAA,gBACb;AAAA,cACF,SAAS,KAAK;AAKZ,oBAAI,MAAM,4BAA4B,WAAW,GAAG,GAAG;AACrD,wBAAM,YAAY,gBAAgB,KAAK;AACvC,wBAAM,iBAAiB,mBAAmB,MAAM,SAAS;AACzD,wBAAM,8BAA8B,OAAO;AAAA,oBACzC,SAAS;AAAA,oBACT,OAAO;AAAA,oBACP;AAAA,oBACA,OAAO,WAAW;AAAA,kBACpB,CAAC;AACD,wBAAM,iBAAiB,MAAM,cAAc,gBAAgB;AAC3D,sBAAI;AACF,2BAAO,MAAMA;AAAA,sBACX,MAAM;AAAA,sBACN;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA,MAAM;AAAA,sBACN;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA,WAAW;AAAA,sBACX,WAAW;AAAA,oBACb;AAAA,kBACF,SAAS,UAAU;AACjB,0BAAM,4BAA4B,UAAU,MAAM,WAAW,WAAW,OAAO;AAC/E,0BAAM;AAAA,kBACR;AAAA,gBACF;AACA,sBAAM,4BAA4B,KAAK,MAAM,WAAW,WAAW,OAAO;AAC1E,sBAAM;AAAA,cACR;AAAA,YACF,OAAO;AACL,oBAAM,IAAI,MAAM,yBAAyB,MAAM,QAAQ,EAAE;AAAA,YAC3D;AAAA,UACF;AAAA,QACF;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACF;AAWA,eAAe,4BAA4B,KAAc,UAAkB,SAAuC;AAChH,MAAI,eAAe,wBAAyB,OAAM;AAClD,MAAI,CAAC,WAAW,GAAG,EAAG;AAKtB,QAAM,iBAAiB,mBAAmB,QAAQ;AAKlD,QAAM,eAAe,MAAM,kCAAkC,UAAU,EAAE,gBAAgB,QAAQ,CAAC;AAClG,MAAI,cAAc;AAChB,UAAM,IAAI,wBAAwB,YAAY;AAAA,EAChD;AAEF;AAWO,MAAM,kBAAkB,CAC7B,UACA,WACA,SACA,eACA,aACA,WACA,sBAA2C,WACxC;AAIH,QAAM,kBAAkB,4BAA4B,qBAAqB,aAAa,aAAa;AACnG,SAAO;AAAA,IACL,UAAU,CAAC,UAAkB,MAA+B,cAC1D;AAAA,MAAsB,WAAW;AAAA,MAAkB,MACjDF;AAAA,QACE;AAAA,QACA;AAAA,QACA,qBAAqB,MAAM,eAAe;AAAA,QAC1C;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,GAAI,WAAW,qBAAqB,UAAa,EAAE,kBAAkB,UAAU,iBAAiB;AAAA,UAChG,GAAI,WAAW,WAAW,EAAE,SAAS,UAAU,QAAQ;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AAAA,EACJ;AACF;AAEO,MAAM,kBAAkB,CAC7B,UACA,WACA,SACA,eACA,aACA,WACA,sBAA2C,WACxC;AACH,QAAM,kBAAkB,4BAA4B,qBAAqB,aAAa,aAAa;AACnG,SAAO;AAAA,IACL,UAAU,CAAC,UAAkB,YAAqC,cAChE;AAAA,MAAsB,WAAW;AAAA,MAAkB,MACjDE;AAAA,QACE;AAAA,QACA;AAAA,QACA,qBAAqB,YAAY,eAAe;AAAA,QAChD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,MACb;AAAA,IACF;AAAA,EACJ;AACF;","names":["require","closeMCPConnections","callMCPToolWithTasks","callMCPToolWithOAuth","callA2ATool","withTransportDiagnostics"]}
+{"version":3,"sources":["../../../src/lib/protocols/index.ts"],"sourcesContent":["import { fileURLToPath as __adcpFileURLToPath } from 'node:url';\nimport { dirname as __adcpDirname } from 'node:path';\nimport { createRequire as __adcpCreateRequire } from 'node:module';\nconst __dirname = __adcpDirname(__adcpFileURLToPath(import.meta.url));\nconst require = __adcpCreateRequire(import.meta.url);\n// Unified Protocol Interface for AdCP\nexport {\n  callMCPTool,\n  callMCPToolWithOAuth,\n  connectMCP,\n  closeMCPConnections,\n  closeOAuthConnections,\n  UnauthorizedError,\n} from './mcp';\n\nimport { closeMCPConnections } from './mcp';\nimport { closeA2AConnections } from './a2a';\n\n/**\n * Close protocol connections for the given protocol.\n * MCP closes persistent HTTP transports; A2A clears the agent-card client cache.\n */\nexport async function closeConnections(protocol: 'mcp' | 'a2a' = 'mcp'): Promise<void> {\n  if (protocol === 'mcp') {\n    await closeMCPConnections();\n  } else {\n    closeA2AConnections();\n  }\n}\nexport type { MCPCallOptions, MCPConnectionResult } from './mcp';\nexport { callA2ATool } from './a2a';\nexport { DEFAULT_REQUEST_TIMEOUT_MS } from './abort';\nexport {\n  callMCPToolWithTasks,\n  getMCPTaskStatus,\n  getMCPTaskResult,\n  listMCPTasks,\n  cancelMCPTask,\n  mapMCPTaskStatus,\n  serverSupportsTasks,\n} from './mcp-tasks';\n\nimport { callMCPToolWithTasks, callMCPToolWithClient } from './mcp-tasks';\nimport { callMCPToolWithOAuth } from './mcp';\nimport { callA2ATool } from './a2a';\nimport type { AgentConfig, DebugLogEntry } from '../types';\nimport type { PushNotificationConfig } from '../types/tools.generated';\nimport { getAuthToken } from '../auth';\nimport {\n  discoverAuthorizationRequirements,\n  NeedsAuthorizationError,\n  getAgentStorage,\n  ensureClientCredentialsTokens,\n} from '../auth/oauth';\nimport { getNonInteractiveOAuthProvider } from '../auth/oauth/provider-cache';\nimport { is401Error } from '../errors';\nimport { isLikelyPrivateUrl } from '../net';\nimport { validateAgentUrl } from '../validation';\nimport { withSpan } from '../observability/tracing';\nimport { ADCP_MAJOR_VERSION, ADCP_VERSION, parseAdcpMajorVersion } from '../version';\nimport { ConfigurationError } from '../errors';\nimport { resolveBundleKey, toReleasePrecisionWire, validateAdcpVersionWire } from '../validation/schema-loader';\nimport { buildAgentSigningContext, CAPABILITY_OP, ensureCapabilityLoaded } from '../signing/client';\nimport { withResponseSizeLimit } from './responseSizeLimit';\nimport {\n  withTransportDiagnostics,\n  type TransportActivityHandler as TransportActivityHandlerFn,\n} from './transportDiagnostics';\n\nexport {\n  sanitizeTransportHeaders,\n  sanitizeTransportUrl,\n  withTransportDiagnostics,\n  wrapFetchWithTransportDiagnostics,\n} from './transportDiagnostics';\nexport type { TransportActivity, TransportActivityContext, TransportActivityHandler } from './transportDiagnostics';\n\nexport type VersionEnvelopeMode = 'auto' | 'none' | 'major-only';\n\n/**\n * Derive the wire-level `adcp_major_version` integer from a caller-supplied\n * pin. Returns the SDK default when no pin is provided; throws on a pin\n * that doesn't parse so misuse surfaces at the factory boundary instead\n * of silently emitting the SDK's major.\n *\n * Throws `ConfigurationError` (not a plain `Error`) so a typo'd pin\n * surfaces with the same error class as the construction-time gate in\n * `resolveAdcpVersion` — one shape for all pin-misuse paths.\n */\nfunction resolveWireMajor(adcpVersion: string | undefined): number {\n  if (adcpVersion === undefined) return ADCP_MAJOR_VERSION;\n  const parsed = parseAdcpMajorVersion(adcpVersion);\n  if (!Number.isFinite(parsed)) {\n    throw new ConfigurationError(\n      `adcpVersion ${JSON.stringify(adcpVersion)} is not a valid AdCP version. ` +\n        `Expected a semver string (e.g. '3.0.1', '3.1.0-beta.1') or a legacy alias (e.g. 'v3').`,\n      'adcpVersion'\n    );\n  }\n  return parsed;\n}\n\n/**\n * Returns true when the AdCP release that `bundleKey` identifies declares the\n * top-level `adcp_version` envelope field. The field landed in AdCP 3.1 per\n * spec PR `adcontextprotocol/adcp#3493` — 3.0 (any patch / prerelease) does\n * not carry it; 3.1+ does. Used to gate dual-emit on the wire so a 3.0-pinned\n * client doesn't emit a field its target schema doesn't define.\n */\nexport function bundleSupportsAdcpVersionField(bundleKey: string): boolean {\n  const major = parseAdcpMajorVersion(bundleKey);\n  if (!Number.isFinite(major)) return false;\n  if (major < 3) return false;\n  if (major > 3) return true;\n  // Major 3 — only 3.1+ has the field. Bundle key shape is normalized by\n  // `resolveBundleKey`: `'3.0'` / `'3.1'` for stable; `'3.0.0-beta.1'` /\n  // `'3.1.0-beta.1'` for prereleases. Match the minor.\n  const minorMatch = bundleKey.match(/^\\d+\\.(\\d+)/);\n  if (!minorMatch) return false;\n  return parseInt(minorMatch[1]!, 10) >= 1;\n}\n\n/**\n * Build the wire-level version envelope to merge into outgoing request args.\n *\n * Per AdCP 3.1 (spec PR `adcontextprotocol/adcp#3493`), 3.1+ requests carry\n * BOTH the integer `adcp_major_version` (deprecated through 3.x, removed in\n * 4.0) AND the release-precision string `adcp_version`. 3.0 schemas don't\n * define the string field, so a 3.0-pinned client emits the integer only —\n * matches the 3.0 spec exactly.\n *\n * Wire string is release-precision (MAJOR.MINOR with optional prerelease tag),\n * per `core/version-envelope.json`'s pattern `^\\d+\\.\\d+(-[a-zA-Z0-9.-]+)?$`.\n * Full-semver bundle keys (`'3.1.0-beta.1'`) are collapsed via\n * `toReleasePrecisionWire` to `'3.1-beta.1'` before emit — meta-field shapes\n * are explicitly NOT valid wire values per the envelope schema's own\n * normalization rule.\n *\n * Returns `{}` for v2 callers (predates the major-version field entirely).\n */\nfunction buildVersionEnvelope(\n  adcpVersion: string | undefined,\n  serverVersion: 'v2' | 'v3' | undefined\n): Record<string, unknown> {\n  if (serverVersion === 'v2') return {};\n  const wireMajor = resolveWireMajor(adcpVersion);\n  const bundleKey = resolveBundleKey(adcpVersion ?? ADCP_VERSION);\n  if (!bundleSupportsAdcpVersionField(bundleKey)) {\n    return { adcp_major_version: wireMajor };\n  }\n  const wireValue = toReleasePrecisionWire(bundleKey);\n  // Defensive postcondition — should never throw in well-formed code, but\n  // if a future refactor breaks the normalization the error message tells\n  // the developer to call `toReleasePrecisionWire` instead of silently\n  // emitting a non-spec wire string.\n  validateAdcpVersionWire(wireValue);\n  return { adcp_major_version: wireMajor, adcp_version: wireValue };\n}\n\nlet hasWarnedAboutV2PushNotificationSecret = false;\n\n/**\n * Warn once when an async webhook registration is suppressed for a v2 seller.\n *\n * v2.5's `push-notification-config.json` requires `authentication`, and unlike\n * 3.x it has no RFC 9421 selector semantics — so omitting the block produces a\n * schema-invalid request rather than choosing a signing mode. Without a\n * configured secret there is no honest value to send, and the previous\n * behaviour (a hardcoded placeholder credential) told the seller the channel\n * was authenticated by a constant published in this package.\n */\nfunction warnV2PushNotificationNeedsSecret(): void {\n  if (hasWarnedAboutV2PushNotificationSecret) return;\n  hasWarnedAboutV2PushNotificationSecret = true;\n  console.warn(\n    '[adcp] Suppressing push_notification_config for a v2 seller: AdCP 2.5 requires an ' +\n      '`authentication` block and no `webhookSecret` is configured. Set `webhookSecret` to register ' +\n      'async task-status webhooks with this agent, or move the agent to an AdCP 3.x pin, where the ' +\n      'RFC 9421 webhook profile needs no shared secret.'\n  );\n}\n\nfunction buildVersionEnvelopeForMode(\n  mode: VersionEnvelopeMode,\n  adcpVersion: string | undefined,\n  serverVersion: 'v2' | 'v3' | undefined\n): Record<string, unknown> {\n  if (mode === 'none' || serverVersion === 'v2') return {};\n  if (mode === 'major-only') return { adcp_major_version: resolveWireMajor(adcpVersion) };\n  return buildVersionEnvelope(adcpVersion, serverVersion);\n}\n\n/**\n * Merge the wire-level version envelope into a caller-supplied args object.\n * Caller args win: an explicit `adcp_major_version` / `adcp_version` in\n * `args` (e.g. a conformance harness probing `VERSION_UNSUPPORTED`) passes\n * through unchanged. The envelope only fills fields the caller didn't set.\n *\n * Single chokepoint for all four wire-injection sites so a future refactor\n * can't silently flip the spread order on one branch and leave the others\n * intact. Stale dual-field drift is caught at the server boundary by\n * `createAdcpServer`'s field-disagreement check (spec PR\n * `adcontextprotocol/adcp#3493`).\n *\n * @internal\n */\nexport function applyVersionEnvelope(\n  args: Record<string, unknown>,\n  envelope: Record<string, unknown>\n): Record<string, unknown> {\n  return { ...envelope, ...args };\n}\n\n/**\n * Transport-level safeguards applied to a call.\n *\n * Wired into the SDK's internal fetch chain via AsyncLocalStorage, so the\n * cap takes effect even when the underlying transport's connection cache\n * reuses a fetch that was created on an earlier call with different limits.\n */\nexport interface TransportOptions {\n  /**\n   * Maximum response body size (in octets) the SDK will read before aborting\n   * with `ResponseTooLargeError`. When unset, the SDK does not impose a cap —\n   * matches the underlying MCP / A2A transport defaults.\n   *\n   * Set this when crawling **untrusted** agents (registries, federated\n   * discovery layers, monitoring tools) to prevent a hostile vendor from\n   * buffering a large reply before any application-layer schema validation\n   * runs. Counted across response chunks; pre-cancels when `Content-Length`\n   * exceeds the cap. Applies to A2A agent-card discovery\n   * (`/.well-known/agent.json`) on the same call as well.\n   *\n   * Per-call override (`TaskOptions.transport.maxResponseBytes`) beats the\n   * value set on the client constructor (`SingleAgentClientConfig.transport`).\n   *\n   * @remarks\n   * **Safe to set on all calls.** SSE responses (`text/event-stream`) are\n   * passed through unchanged — a single tool call legitimately emits N status\n   * frames + a final result, bounded by protocol-level framing rather than\n   * cumulative byte counts. The cap applies to one-shot JSON responses\n   * (`get_adcp_capabilities`, agent-card lookup, tool result payloads on\n   * non-streaming transports) where the body is bounded by definition.\n   *\n   * @remarks\n   * **Hostile-peer note:** A peer can opt itself out of this cap by responding\n   * with `Content-Type: text/event-stream`. SSE is bypassed because cumulative\n   * event-frame bytes are unbounded by spec — MCP and A2A both stream tool\n   * responses this way. The MCP/A2A SDKs consume SSE incrementally and frame\n   * termination bounds memory in practice, so this is not a memory-bomb risk\n   * for well-formed transports. Adopters relying on `maxResponseBytes` as a\n   * hostile-server defense should treat it as best-effort for non-SSE\n   * responses only.\n   *\n   * @remarks\n   * Future hardening knobs (DNS-rebind defense, scheme allow-list, request\n   * timeout overrides) will land here as additional fields. When `fetchFn`\n   * is supplied, the SDK composes it inside its signing, capture, size-limit,\n   * timeout, and diagnostics wrappers so callers do not have to reproduce\n   * that non-obvious ordering themselves.\n   */\n  maxResponseBytes?: number;\n  /**\n   * Scoped fetch implementation for all outbound HTTP performed on behalf of\n   * this client or call, including endpoint/card discovery, tool listing,\n   * OAuth discovery and token refresh, and MCP/A2A tool requests.\n   *\n   * The function is runtime-only configuration and is never serialized into\n   * agent records, storyboard artifacts, or compliance output. When unset,\n   * the SDK uses the global `fetch` implementation.\n   *\n   * For SSRF-sensitive metadata probes, supplying this function makes it the\n   * trusted network boundary: the SDK still validates schemes and resolved\n   * addresses, but a custom fetch API cannot accept the SDK's pinned undici\n   * dispatcher. The implementation must therefore prevent DNS rebinding (for\n   * example with an egress proxy or its own DNS pinning).\n   */\n  fetchFn?: typeof fetch;\n  /**\n   * Timeout in milliseconds for bounded one-shot transport requests such as\n   * A2A agent-card discovery and MCP read-path probes. Defaults to 60 seconds\n   * for A2A discovery so an unresponsive card endpoint cannot hang forever.\n   * Set to `0` to disable the SDK-imposed discovery timeout.\n   */\n  requestTimeoutMs?: number;\n}\n\n/**\n * Options for {@link ProtocolClient.callTool}. All fields are optional.\n *\n * `webhookUrl` / `webhookSecret` / `webhookToken` are for ASYNC TASK STATUS\n * notifications (push_notification_config). For reporting webhooks\n * (reporting_webhook), include them directly in `args` — they stay in skill\n * parameters and are sent verbatim to the agent.\n */\nexport interface CallToolOptions {\n  /** Debug log array. Mutated in place by the protocol layer. */\n  debugLogs?: DebugLogEntry[];\n  /** URL for async task status notifications. */\n  webhookUrl?: string;\n  /** HMAC-SHA256 secret for push_notification_config authentication. */\n  webhookSecret?: string;\n  /** Bearer token for push_notification_config validation. */\n  webhookToken?: string;\n  /** Pinned protocol generation when the agent advertises both v2 and v3. */\n  serverVersion?: 'v2' | 'v3';\n  /** A2A session continuity (contextId carries conversation, taskId resumes a task). */\n  session?: { contextId?: string; taskId?: string };\n  /**\n   * AdCP version pin from the calling client/server instance. Sets the\n   * wire-level `adcp_major_version` field per-call instead of from the\n   * SDK-pinned `ADCP_MAJOR_VERSION` constant. Default falls back to the\n   * constant so call sites that don't plumb a per-instance version keep\n   * their existing behavior. An explicit `adcp_major_version` /\n   * `adcp_version` in `args` overrides this — conformance harnesses use\n   * that path to probe seller version negotiation.\n   */\n  adcpVersion?: string;\n  /**\n   * Optional wire-only version override. Schema selection and client\n   * construction can remain pinned to `adcpVersion`; the request envelope is\n   * emitted for this release-precision line.\n   */\n  wireAdcpVersion?: string;\n  /**\n   * Controls whether the SDK injects AdCP version envelope fields into the\n   * outgoing request. Defaults to `auto`. 3.0 pins emit only the legacy\n   * `adcp_major_version`; 3.1+ pins emit both the legacy major and exact\n   * `adcp_version` marker. `major-only` forces the legacy integer marker\n   * without the 3.1 string marker for strict pre-3.1 peers discovered at\n   * runtime.\n   */\n  versionEnvelope?: VersionEnvelopeMode;\n  /**\n   * Transport-level safeguards (size caps, etc.). Per-call override of any\n   * matching field on the client constructor's `transport` option.\n   */\n  transport?: TransportOptions;\n  /** Caller-owned cancellation signal for the in-flight protocol call. */\n  signal?: AbortSignal;\n  /** Transport-level diagnostics callback for outbound HTTP requests. */\n  onTransportActivity?: TransportActivityHandlerFn;\n  /**\n   * Correlation metadata attached to transport diagnostics events emitted\n   * while this protocol call is active.\n   */\n  transportActivityContext?: {\n    operationId?: string;\n    taskId?: string;\n    contextId?: string;\n    idempotencyKey?: string;\n  };\n}\n\n/**\n * Universal protocol client - automatically routes to the correct protocol implementation\n */\nexport class ProtocolClient {\n  /**\n   * Call a tool on an agent using the appropriate protocol.\n   *\n   * @param agent - Agent configuration\n   * @param toolName - Name of the tool/skill to call\n   * @param args - Tool arguments (includes reporting_webhook if needed - NOT removed)\n   * @param options - Optional call-level configuration. See {@link CallToolOptions}.\n   */\n  static async callTool(\n    agent: AgentConfig,\n    toolName: string,\n    args: Record<string, unknown>,\n    options: CallToolOptions = {}\n  ): Promise<unknown> {\n    const {\n      debugLogs = [],\n      webhookUrl,\n      webhookSecret,\n      webhookToken,\n      serverVersion,\n      session,\n      adcpVersion,\n      wireAdcpVersion,\n      versionEnvelope: versionEnvelopeMode = 'auto',\n      transport,\n      signal,\n      onTransportActivity,\n      transportActivityContext,\n    } = options;\n    // Per-instance version envelope. Throws on unparseable pins via\n    // `resolveWireMajor`; construction-time `resolveAdcpVersion` is the\n    // primary gate but this is the failsafe for callers reaching\n    // `ProtocolClient.callTool` directly (test harnesses, the in-process\n    // MCP path). Returns `{ adcp_major_version }` for 3.0 pins and\n    // `{ adcp_major_version, adcp_version }` for 3.1+ pins.\n    const versionEnvelope = buildVersionEnvelopeForMode(\n      versionEnvelopeMode,\n      wireAdcpVersion ?? adcpVersion,\n      serverVersion\n    );\n    // Enter the response-size-limit ALS slot once for this call. The slot is\n    // read by `wrapFetchWithSizeLimit` in both protocol transports, so the\n    // cap applies regardless of which path (MCP / A2A / OAuth refresh) the\n    // call ends up taking. No-op when the cap is unset or non-positive.\n    return withResponseSizeLimit(transport?.maxResponseBytes, () =>\n      withTransportDiagnostics(\n        {\n          agentId: agent.id,\n          protocol: agent.protocol,\n          tool: toolName,\n          taskType: toolName,\n          ...transportActivityContext,\n          onTransportActivity,\n        },\n        () =>\n          withSpan(\n            `adcp.${agent.protocol}.call_tool`,\n            {\n              'adcp.agent_id': agent.id,\n              'adcp.protocol': agent.protocol,\n              'adcp.tool': toolName,\n              'http.url': agent.agent_uri,\n            },\n            async () => {\n              // In-process MCP path: pre-connected client, no HTTP transport.\n              // Idempotency injection, schema validation, and governance middleware all\n              // still apply (they run in SingleAgentClient above this call). We skip\n              // URL validation, OAuth refresh, and signing — none apply in-process.\n              if (agent.protocol === 'mcp' && agent._inProcessMcpClient) {\n                const inProcArgs = applyVersionEnvelope(args, versionEnvelope);\n                return callMCPToolWithClient(agent._inProcessMcpClient, toolName, inProcArgs, debugLogs, {\n                  ...(signal && { signal }),\n                  ...(transport?.requestTimeoutMs !== undefined && { requestTimeoutMs: transport.requestTimeoutMs }),\n                });\n              }\n\n              validateAgentUrl(agent.agent_uri);\n\n              // OAuth 2.0 client credentials (RFC 6749 §4.4): re-exchange the\n              // secret for a fresh access token whenever the cached one is within\n              // its expiration skew. Runs before every call so mid-session expiry\n              // can't leave the caller with a stale bearer. No-op if the agent\n              // doesn't declare client credentials. Cheap on warm cache (single\n              // `Date.now()` compare); a single POST to the token endpoint on miss.\n              //\n              // `allowPrivateIp` inherits the trust the caller already placed in\n              // `agent.agent_uri` — if they're making a call to a private-IP agent,\n              // they've authorized this process to talk to private-IP hosts, so\n              // the token endpoint on the same network is reachable too. Public\n              // agent URLs with private-IP token endpoints still require an\n              // explicit opt-in via the library API.\n              if (agent.oauth_client_credentials) {\n                const ccStorage = getAgentStorage(agent);\n                const allowPrivateIp = isLikelyPrivateUrl(agent.agent_uri);\n                await ensureClientCredentialsTokens(agent, {\n                  storage: ccStorage,\n                  allowPrivateIp,\n                  fetch: transport?.fetchFn,\n                  signal,\n                });\n              }\n\n              const authToken = getAuthToken(agent);\n\n              // RFC 9421 signing context. Built once per call and passed through\n              // to each protocol-layer entry (`callMCPToolWithTasks`, `callA2ATool`,\n              // `callMCPToolWithOAuth`) — those entries seed `signingContextStorage`\n              // (AsyncLocalStorage) so the internal transport helpers read it\n              // without an explicit parameter. Keep the explicit arg here: it's the\n              // ALS seed, not incidental plumbing. `get_adcp_capabilities` is\n              // exempt from signing (it's the discovery call itself) and also\n              // triggers cache priming for any other op on agents with\n              // `request_signing` configured.\n              const signingContext = buildAgentSigningContext(agent);\n              if (signingContext && toolName !== CAPABILITY_OP) {\n                await ensureCapabilityLoaded(agent, signingContext, primeArgs =>\n                  ProtocolClient.callTool(agent, CAPABILITY_OP, primeArgs, {\n                    debugLogs,\n                    serverVersion,\n                    adcpVersion,\n                    ...(versionEnvelopeMode !== 'auto' && { versionEnvelope: versionEnvelopeMode }),\n                    transport,\n                    signal,\n                    ...(transport?.requestTimeoutMs !== undefined && { requestTimeoutMs: transport.requestTimeoutMs }),\n                    onTransportActivity,\n                    transportActivityContext,\n                  })\n                );\n              }\n\n              // Inject the version envelope on every request so sellers can validate\n              // compatibility. Skip for v2 servers — they don't recognise the\n              // version fields and strict-schema agents reject them. The envelope\n              // shape is per-pin: 3.0 pins get the integer `adcp_major_version`\n              // alone; 3.1+ pins get both that and the release-precision string\n              // `adcp_version` (`'3.1'` / `'3.1.0-beta.1'`) per spec PR\n              // `adcontextprotocol/adcp#3493`.\n              const argsWithVersion = applyVersionEnvelope(args, versionEnvelope);\n\n              // Build push_notification_config for ASYNC TASK STATUS notifications\n              // (NOT for reporting_webhook - that stays in args)\n              // Schema: https://adcontextprotocol.org/schemas/v1/core/push-notification-config.json\n              // `authentication` is a scheme SELECTOR, not a fallback: from AdCP\n              // 3.0 on, push-notification-config.json makes its presence opt the\n              // seller into legacy HMAC-SHA256 and its absence select the RFC\n              // 9421 webhook profile, with `required: [\"url\"]` only. Emitting it\n              // with a placeholder credential would therefore downgrade every\n              // webhook to legacy HMAC keyed by a constant that ships in this\n              // file, so the block is omitted unless a real secret backs it.\n              //\n              // v2.5 predates the selector: there `required` is\n              // `[\"url\", \"authentication\"]` and there is no 9421 path, so an\n              // omitted block is schema-invalid rather than a mode selection.\n              // With no secret there is nothing honest to send a v2 seller, so\n              // suppress the registration instead of fabricating a credential.\n              const pushNotificationConfig: PushNotificationConfig | undefined = (():\n                | PushNotificationConfig\n                | undefined => {\n                if (!webhookUrl) return undefined;\n                if (webhookSecret) {\n                  return {\n                    url: webhookUrl,\n                    ...(webhookToken && { token: webhookToken }),\n                    authentication: {\n                      schemes: ['HMAC-SHA256' as const],\n                      credentials: webhookSecret,\n                    },\n                  };\n                }\n                if (serverVersion === 'v2') {\n                  warnV2PushNotificationNeedsSecret();\n                  return undefined;\n                }\n                return {\n                  url: webhookUrl,\n                  ...(webhookToken && { token: webhookToken }),\n                };\n              })();\n\n              if (agent.protocol === 'mcp') {\n                // For MCP, include push_notification_config in tool arguments (MCP spec)\n                const argsWithWebhook = pushNotificationConfig\n                  ? { ...argsWithVersion, push_notification_config: pushNotificationConfig }\n                  : argsWithVersion;\n\n                // If the agent config carries authorization-code OAuth tokens,\n                // route through the OAuth provider path so the MCP SDK can refresh\n                // on 401 instead of hard-failing. Excludes client-credentials\n                // agents: they have a cached access token but no refresh_token,\n                // and their refresh path is a secret re-exchange (handled above),\n                // not the SDK's refresh_token grant.\n                if (agent.oauth_tokens && !agent.oauth_client_credentials) {\n                  const authProvider = getNonInteractiveOAuthProvider(agent, {\n                    agentHint: agent.id,\n                    storage: getAgentStorage(agent),\n                    allowHttp: isLikelyPrivateUrl(agent.agent_uri),\n                  });\n                  try {\n                    return await callMCPToolWithOAuth({\n                      agentUrl: agent.agent_uri,\n                      toolName,\n                      args: argsWithWebhook,\n                      authProvider,\n                      debugLogs,\n                      customHeaders: agent.headers,\n                      signingContext,\n                      signal,\n                      requestTimeoutMs: transport?.requestTimeoutMs,\n                      fetchFn: transport?.fetchFn,\n                    });\n                  } catch (err) {\n                    // Refresh failed or server rejected the refreshed token — walk the\n                    // discovery chain so the caller can distinguish \"re-auth needed\"\n                    // from other failure modes.\n                    await rethrowAsNeedsAuthorization(err, agent.agent_uri, transport?.fetchFn, signal);\n                    throw err;\n                  }\n                }\n\n                // Use callMCPToolWithTasks which auto-detects server tasks capability\n                // and falls back to standard callTool when tasks are not supported\n                try {\n                  return await callMCPToolWithTasks(\n                    agent.agent_uri,\n                    toolName,\n                    argsWithWebhook,\n                    authToken,\n                    debugLogs,\n                    agent.headers,\n                    {\n                      ...(signingContext && { signingContext }),\n                      ...(signal && { signal }),\n                      ...(transport?.requestTimeoutMs !== undefined && {\n                        requestTimeoutMs: transport.requestTimeoutMs,\n                      }),\n                      ...(transport?.fetchFn && { fetchFn: transport.fetchFn }),\n                    }\n                  );\n                } catch (err) {\n                  // Client-credentials agents: on 401, the AS may have rotated\n                  // something out-of-band. Force a fresh exchange and retry once\n                  // before surfacing the error. Bounded (single retry) so we don't\n                  // loop if the credentials are genuinely wrong.\n                  if (agent.oauth_client_credentials && is401Error(err)) {\n                    const ccStorage = getAgentStorage(agent);\n                    const allowPrivateIp = isLikelyPrivateUrl(agent.agent_uri);\n                    await ensureClientCredentialsTokens(agent, {\n                      storage: ccStorage,\n                      force: true,\n                      allowPrivateIp,\n                      fetch: transport?.fetchFn,\n                      signal,\n                    });\n                    const retryAuthToken = agent.oauth_tokens?.access_token ?? authToken;\n                    try {\n                      return await callMCPToolWithTasks(\n                        agent.agent_uri,\n                        toolName,\n                        argsWithWebhook,\n                        retryAuthToken,\n                        debugLogs,\n                        agent.headers,\n                        {\n                          ...(signingContext && { signingContext }),\n                          ...(signal && { signal }),\n                          ...(transport?.requestTimeoutMs !== undefined && {\n                            requestTimeoutMs: transport.requestTimeoutMs,\n                          }),\n                          ...(transport?.fetchFn && { fetchFn: transport.fetchFn }),\n                        }\n                      );\n                    } catch (retryErr) {\n                      await rethrowAsNeedsAuthorization(retryErr, agent.agent_uri, transport?.fetchFn, signal);\n                      throw retryErr;\n                    }\n                  }\n                  await rethrowAsNeedsAuthorization(err, agent.agent_uri, transport?.fetchFn, signal);\n                  throw err;\n                }\n              } else if (agent.protocol === 'a2a') {\n                // For A2A, pass pushNotificationConfig separately (not in skill parameters)\n                try {\n                  return await callA2ATool(\n                    agent.agent_uri,\n                    toolName,\n                    argsWithVersion,\n                    authToken,\n                    debugLogs,\n                    pushNotificationConfig,\n                    agent.headers,\n                    signingContext,\n                    session,\n                    signal,\n                    transport?.requestTimeoutMs,\n                    transport?.fetchFn\n                  );\n                } catch (err) {\n                  // Same single-retry-on-401 for client-credentials agents as the\n                  // MCP path above. Kept symmetric so A2A CC agents aren't a\n                  // second-class experience — including the NeedsAuthorizationError\n                  // rewrap on a retry that still 401s.\n                  if (agent.oauth_client_credentials && is401Error(err)) {\n                    const ccStorage = getAgentStorage(agent);\n                    const allowPrivateIp = isLikelyPrivateUrl(agent.agent_uri);\n                    await ensureClientCredentialsTokens(agent, {\n                      storage: ccStorage,\n                      force: true,\n                      allowPrivateIp,\n                      fetch: transport?.fetchFn,\n                      signal,\n                    });\n                    const retryAuthToken = agent.oauth_tokens?.access_token ?? authToken;\n                    try {\n                      return await callA2ATool(\n                        agent.agent_uri,\n                        toolName,\n                        argsWithVersion,\n                        retryAuthToken,\n                        debugLogs,\n                        pushNotificationConfig,\n                        agent.headers,\n                        signingContext,\n                        session,\n                        signal,\n                        transport?.requestTimeoutMs,\n                        transport?.fetchFn\n                      );\n                    } catch (retryErr) {\n                      await rethrowAsNeedsAuthorization(retryErr, agent.agent_uri, transport?.fetchFn, signal);\n                      throw retryErr;\n                    }\n                  }\n                  await rethrowAsNeedsAuthorization(err, agent.agent_uri, transport?.fetchFn, signal);\n                  throw err;\n                }\n              } else {\n                throw new Error(`Unsupported protocol: ${agent.protocol}`);\n              }\n            }\n          )\n      )\n    );\n  }\n}\n\n/**\n * If `err` looks like a 401 from the MCP transport, probe the agent for a\n * Bearer challenge and throw a {@link NeedsAuthorizationError} carrying\n * walked discovery metadata. If the error isn't a 401 or we can't build a\n * requirements record, return silently so the caller re-throws the original.\n *\n * Keeping this off the hot path: we only probe on error, and the probe is\n * a single unauthenticated `tools/list` POST — no retries, no DNS rebind.\n */\nasync function rethrowAsNeedsAuthorization(\n  err: unknown,\n  agentUrl: string,\n  fetchFn?: typeof fetch,\n  signal?: AbortSignal\n): Promise<void> {\n  if (err instanceof NeedsAuthorizationError) throw err;\n  if (!is401Error(err)) return;\n\n  // If the caller has already connected to the agent URL, they've implicitly\n  // trusted it — inherit that trust for the discovery probe so loopback /\n  // private-IP development agents work the same way as public ones.\n  const allowPrivateIp = isLikelyPrivateUrl(agentUrl);\n\n  // discoverAuthorizationRequirements internally catches network failures and\n  // returns null rather than throwing — anything that escapes is a genuine\n  // bug we want to surface rather than mask the 401 with.\n  const requirements = await discoverAuthorizationRequirements(agentUrl, { allowPrivateIp, fetchFn, signal });\n  if (requirements) {\n    throw new NeedsAuthorizationError(requirements);\n  }\n  // No requirements walked; let the caller re-throw the original error.\n}\n\n/**\n * Simple factory functions for protocol-specific clients.\n *\n * Both factories accept a `transport` argument that flows through to the\n * size-cap surface so callers reaching the factory exports honor the same\n * `maxResponseBytes` contract as `ProtocolClient.callTool`. Without it,\n * the factories would silently bypass the cap, which the public API\n * (`TransportOptions`) implies they honor.\n */\nexport const createMCPClient = (\n  agentUrl: string,\n  authToken?: string,\n  headers?: Record<string, string>,\n  serverVersion?: 'v2' | 'v3',\n  adcpVersion?: string,\n  transport?: TransportOptions,\n  versionEnvelopeMode: VersionEnvelopeMode = 'auto'\n) => {\n  // Validate the pin at factory time so a typo surfaces here rather than at\n  // first call. `buildVersionEnvelope` throws via `resolveWireMajor` on bad\n  // input — call it once to surface, then close over the envelope.\n  const versionEnvelope = buildVersionEnvelopeForMode(versionEnvelopeMode, adcpVersion, serverVersion);\n  return {\n    callTool: (toolName: string, args: Record<string, unknown>, debugLogs?: DebugLogEntry[]) =>\n      withResponseSizeLimit(transport?.maxResponseBytes, () =>\n        callMCPToolWithTasks(\n          agentUrl,\n          toolName,\n          applyVersionEnvelope(args, versionEnvelope),\n          authToken,\n          debugLogs,\n          headers,\n          {\n            ...(transport?.requestTimeoutMs !== undefined && { requestTimeoutMs: transport.requestTimeoutMs }),\n            ...(transport?.fetchFn && { fetchFn: transport.fetchFn }),\n          }\n        )\n      ),\n  };\n};\n\nexport const createA2AClient = (\n  agentUrl: string,\n  authToken?: string,\n  headers?: Record<string, string>,\n  serverVersion?: 'v2' | 'v3',\n  adcpVersion?: string,\n  transport?: TransportOptions,\n  versionEnvelopeMode: VersionEnvelopeMode = 'auto'\n) => {\n  const versionEnvelope = buildVersionEnvelopeForMode(versionEnvelopeMode, adcpVersion, serverVersion);\n  return {\n    callTool: (toolName: string, parameters: Record<string, unknown>, debugLogs?: DebugLogEntry[]) =>\n      withResponseSizeLimit(transport?.maxResponseBytes, () =>\n        callA2ATool(\n          agentUrl,\n          toolName,\n          applyVersionEnvelope(parameters, versionEnvelope),\n          authToken,\n          debugLogs,\n          undefined,\n          headers,\n          undefined,\n          undefined,\n          undefined,\n          transport?.requestTimeoutMs,\n          transport?.fetchFn\n        )\n      ),\n  };\n};\n"],"mappings":"AAAA,SAAS,iBAAiB,2BAA2B;AACrD,SAAS,WAAW,qBAAqB;AACzC,SAAS,iBAAiB,2BAA2B;AACrD,MAAM,YAAY,cAAc,oBAAoB,YAAY,GAAG,CAAC;AACpE,MAAMA,WAAU,oBAAoB,YAAY,GAAG;AAEnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,uBAAAC,4BAA2B;AACpC,SAAS,2BAA2B;AAMpC,eAAsB,iBAAiB,WAA0B,OAAsB;AACrF,MAAI,aAAa,OAAO;AACtB,UAAMA,qBAAoB;AAAA,EAC5B,OAAO;AACL,wBAAoB;AAAA,EACtB;AACF;AAEA,SAAS,mBAAmB;AAC5B,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,wBAAAC,uBAAsB,6BAA6B;AAC5D,SAAS,wBAAAC,6BAA4B;AACrC,SAAS,eAAAC,oBAAmB;AAG5B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sCAAsC;AAC/C,SAAS,kBAAkB;AAC3B,SAAS,0BAA0B;AACnC,SAAS,wBAAwB;AACjC,SAAS,gBAAgB;AACzB,SAAS,oBAAoB,cAAc,6BAA6B;AACxE,SAAS,0BAA0B;AACnC,SAAS,kBAAkB,wBAAwB,+BAA+B;AAClF,SAAS,0BAA0B,eAAe,8BAA8B;AAChF,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,OAEK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA,4BAAAC;AAAA,EACA;AAAA,OACK;AAeP,SAAS,iBAAiB,aAAyC;AACjE,MAAI,gBAAgB,OAAW,QAAO;AACtC,QAAM,SAAS,sBAAsB,WAAW;AAChD,MAAI,CAAC,OAAO,SAAS,MAAM,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR,eAAe,KAAK,UAAU,WAAW,CAAC;AAAA,MAE1C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AASO,SAAS,+BAA+B,WAA4B;AACzE,QAAM,QAAQ,sBAAsB,SAAS;AAC7C,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,MAAI,QAAQ,EAAG,QAAO;AACtB,MAAI,QAAQ,EAAG,QAAO;AAItB,QAAM,aAAa,UAAU,MAAM,aAAa;AAChD,MAAI,CAAC,WAAY,QAAO;AACxB,SAAO,SAAS,WAAW,CAAC,GAAI,EAAE,KAAK;AACzC;AAoBA,SAAS,qBACP,aACA,eACyB;AACzB,MAAI,kBAAkB,KAAM,QAAO,CAAC;AACpC,QAAM,YAAY,iBAAiB,WAAW;AAC9C,QAAM,YAAY,iBAAiB,eAAe,YAAY;AAC9D,MAAI,CAAC,+BAA+B,SAAS,GAAG;AAC9C,WAAO,EAAE,oBAAoB,UAAU;AAAA,EACzC;AACA,QAAM,YAAY,uBAAuB,SAAS;AAKlD,0BAAwB,SAAS;AACjC,SAAO,EAAE,oBAAoB,WAAW,cAAc,UAAU;AAClE;AAEA,IAAI,yCAAyC;AAY7C,SAAS,oCAA0C;AACjD,MAAI,uCAAwC;AAC5C,2CAAyC;AACzC,UAAQ;AAAA,IACN;AAAA,EAIF;AACF;AAEA,SAAS,4BACP,MACA,aACA,eACyB;AACzB,MAAI,SAAS,UAAU,kBAAkB,KAAM,QAAO,CAAC;AACvD,MAAI,SAAS,aAAc,QAAO,EAAE,oBAAoB,iBAAiB,WAAW,EAAE;AACtF,SAAO,qBAAqB,aAAa,aAAa;AACxD;AAgBO,SAAS,qBACd,MACA,UACyB;AACzB,SAAO,EAAE,GAAG,UAAU,GAAG,KAAK;AAChC;AAkJO,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAS1B,aAAa,SACX,OACA,UACA,MACA,UAA2B,CAAC,GACV;AAClB,UAAM;AAAA,MACJ,YAAY,CAAC;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB,sBAAsB;AAAA,MACvC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAOJ,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA,mBAAmB;AAAA,MACnB;AAAA,IACF;AAKA,WAAO;AAAA,MAAsB,WAAW;AAAA,MAAkB,MACxD;AAAA,QACE;AAAA,UACE,SAAS,MAAM;AAAA,UACf,UAAU,MAAM;AAAA,UAChB,MAAM;AAAA,UACN,UAAU;AAAA,UACV,GAAG;AAAA,UACH;AAAA,QACF;AAAA,QACA,MACE;AAAA,UACE,QAAQ,MAAM,QAAQ;AAAA,UACtB;AAAA,YACE,iBAAiB,MAAM;AAAA,YACvB,iBAAiB,MAAM;AAAA,YACvB,aAAa;AAAA,YACb,YAAY,MAAM;AAAA,UACpB;AAAA,UACA,YAAY;AAKV,gBAAI,MAAM,aAAa,SAAS,MAAM,qBAAqB;AACzD,oBAAM,aAAa,qBAAqB,MAAM,eAAe;AAC7D,qBAAO,sBAAsB,MAAM,qBAAqB,UAAU,YAAY,WAAW;AAAA,gBACvF,GAAI,UAAU,EAAE,OAAO;AAAA,gBACvB,GAAI,WAAW,qBAAqB,UAAa,EAAE,kBAAkB,UAAU,iBAAiB;AAAA,cAClG,CAAC;AAAA,YACH;AAEA,6BAAiB,MAAM,SAAS;AAehC,gBAAI,MAAM,0BAA0B;AAClC,oBAAM,YAAY,gBAAgB,KAAK;AACvC,oBAAM,iBAAiB,mBAAmB,MAAM,SAAS;AACzD,oBAAM,8BAA8B,OAAO;AAAA,gBACzC,SAAS;AAAA,gBACT;AAAA,gBACA,OAAO,WAAW;AAAA,gBAClB;AAAA,cACF,CAAC;AAAA,YACH;AAEA,kBAAM,YAAY,aAAa,KAAK;AAWpC,kBAAM,iBAAiB,yBAAyB,KAAK;AACrD,gBAAI,kBAAkB,aAAa,eAAe;AAChD,oBAAM;AAAA,gBAAuB;AAAA,gBAAO;AAAA,gBAAgB,eAClD,eAAe,SAAS,OAAO,eAAe,WAAW;AAAA,kBACvD;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA,GAAI,wBAAwB,UAAU,EAAE,iBAAiB,oBAAoB;AAAA,kBAC7E;AAAA,kBACA;AAAA,kBACA,GAAI,WAAW,qBAAqB,UAAa,EAAE,kBAAkB,UAAU,iBAAiB;AAAA,kBAChG;AAAA,kBACA;AAAA,gBACF,CAAC;AAAA,cACH;AAAA,YACF;AASA,kBAAM,kBAAkB,qBAAqB,MAAM,eAAe;AAkBlE,kBAAM,0BAA8D,MAEnD;AACf,kBAAI,CAAC,WAAY,QAAO;AACxB,kBAAI,eAAe;AACjB,uBAAO;AAAA,kBACL,KAAK;AAAA,kBACL,GAAI,gBAAgB,EAAE,OAAO,aAAa;AAAA,kBAC1C,gBAAgB;AAAA,oBACd,SAAS,CAAC,aAAsB;AAAA,oBAChC,aAAa;AAAA,kBACf;AAAA,gBACF;AAAA,cACF;AACA,kBAAI,kBAAkB,MAAM;AAC1B,kDAAkC;AAClC,uBAAO;AAAA,cACT;AACA,qBAAO;AAAA,gBACL,KAAK;AAAA,gBACL,GAAI,gBAAgB,EAAE,OAAO,aAAa;AAAA,cAC5C;AAAA,YACF,GAAG;AAEH,gBAAI,MAAM,aAAa,OAAO;AAE5B,oBAAM,kBAAkB,yBACpB,EAAE,GAAG,iBAAiB,0BAA0B,uBAAuB,IACvE;AAQJ,kBAAI,MAAM,gBAAgB,CAAC,MAAM,0BAA0B;AACzD,sBAAM,eAAe,+BAA+B,OAAO;AAAA,kBACzD,WAAW,MAAM;AAAA,kBACjB,SAAS,gBAAgB,KAAK;AAAA,kBAC9B,WAAW,mBAAmB,MAAM,SAAS;AAAA,gBAC/C,CAAC;AACD,oBAAI;AACF,yBAAO,MAAMF,sBAAqB;AAAA,oBAChC,UAAU,MAAM;AAAA,oBAChB;AAAA,oBACA,MAAM;AAAA,oBACN;AAAA,oBACA;AAAA,oBACA,eAAe,MAAM;AAAA,oBACrB;AAAA,oBACA;AAAA,oBACA,kBAAkB,WAAW;AAAA,oBAC7B,SAAS,WAAW;AAAA,kBACtB,CAAC;AAAA,gBACH,SAAS,KAAK;AAIZ,wBAAM,4BAA4B,KAAK,MAAM,WAAW,WAAW,SAAS,MAAM;AAClF,wBAAM;AAAA,gBACR;AAAA,cACF;AAIA,kBAAI;AACF,uBAAO,MAAMD;AAAA,kBACX,MAAM;AAAA,kBACN;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA,MAAM;AAAA,kBACN;AAAA,oBACE,GAAI,kBAAkB,EAAE,eAAe;AAAA,oBACvC,GAAI,UAAU,EAAE,OAAO;AAAA,oBACvB,GAAI,WAAW,qBAAqB,UAAa;AAAA,sBAC/C,kBAAkB,UAAU;AAAA,oBAC9B;AAAA,oBACA,GAAI,WAAW,WAAW,EAAE,SAAS,UAAU,QAAQ;AAAA,kBACzD;AAAA,gBACF;AAAA,cACF,SAAS,KAAK;AAKZ,oBAAI,MAAM,4BAA4B,WAAW,GAAG,GAAG;AACrD,wBAAM,YAAY,gBAAgB,KAAK;AACvC,wBAAM,iBAAiB,mBAAmB,MAAM,SAAS;AACzD,wBAAM,8BAA8B,OAAO;AAAA,oBACzC,SAAS;AAAA,oBACT,OAAO;AAAA,oBACP;AAAA,oBACA,OAAO,WAAW;AAAA,oBAClB;AAAA,kBACF,CAAC;AACD,wBAAM,iBAAiB,MAAM,cAAc,gBAAgB;AAC3D,sBAAI;AACF,2BAAO,MAAMA;AAAA,sBACX,MAAM;AAAA,sBACN;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA,MAAM;AAAA,sBACN;AAAA,wBACE,GAAI,kBAAkB,EAAE,eAAe;AAAA,wBACvC,GAAI,UAAU,EAAE,OAAO;AAAA,wBACvB,GAAI,WAAW,qBAAqB,UAAa;AAAA,0BAC/C,kBAAkB,UAAU;AAAA,wBAC9B;AAAA,wBACA,GAAI,WAAW,WAAW,EAAE,SAAS,UAAU,QAAQ;AAAA,sBACzD;AAAA,oBACF;AAAA,kBACF,SAAS,UAAU;AACjB,0BAAM,4BAA4B,UAAU,MAAM,WAAW,WAAW,SAAS,MAAM;AACvF,0BAAM;AAAA,kBACR;AAAA,gBACF;AACA,sBAAM,4BAA4B,KAAK,MAAM,WAAW,WAAW,SAAS,MAAM;AAClF,sBAAM;AAAA,cACR;AAAA,YACF,WAAW,MAAM,aAAa,OAAO;AAEnC,kBAAI;AACF,uBAAO,MAAME;AAAA,kBACX,MAAM;AAAA,kBACN;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA,MAAM;AAAA,kBACN;AAAA,kBACA;AAAA,kBACA;AAAA,kBACA,WAAW;AAAA,kBACX,WAAW;AAAA,gBACb;AAAA,cACF,SAAS,KAAK;AAKZ,oBAAI,MAAM,4BAA4B,WAAW,GAAG,GAAG;AACrD,wBAAM,YAAY,gBAAgB,KAAK;AACvC,wBAAM,iBAAiB,mBAAmB,MAAM,SAAS;AACzD,wBAAM,8BAA8B,OAAO;AAAA,oBACzC,SAAS;AAAA,oBACT,OAAO;AAAA,oBACP;AAAA,oBACA,OAAO,WAAW;AAAA,oBAClB;AAAA,kBACF,CAAC;AACD,wBAAM,iBAAiB,MAAM,cAAc,gBAAgB;AAC3D,sBAAI;AACF,2BAAO,MAAMA;AAAA,sBACX,MAAM;AAAA,sBACN;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA,MAAM;AAAA,sBACN;AAAA,sBACA;AAAA,sBACA;AAAA,sBACA,WAAW;AAAA,sBACX,WAAW;AAAA,oBACb;AAAA,kBACF,SAAS,UAAU;AACjB,0BAAM,4BAA4B,UAAU,MAAM,WAAW,WAAW,SAAS,MAAM;AACvF,0BAAM;AAAA,kBACR;AAAA,gBACF;AACA,sBAAM,4BAA4B,KAAK,MAAM,WAAW,WAAW,SAAS,MAAM;AAClF,sBAAM;AAAA,cACR;AAAA,YACF,OAAO;AACL,oBAAM,IAAI,MAAM,yBAAyB,MAAM,QAAQ,EAAE;AAAA,YAC3D;AAAA,UACF;AAAA,QACF;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACF;AAWA,eAAe,4BACb,KACA,UACA,SACA,QACe;AACf,MAAI,eAAe,wBAAyB,OAAM;AAClD,MAAI,CAAC,WAAW,GAAG,EAAG;AAKtB,QAAM,iBAAiB,mBAAmB,QAAQ;AAKlD,QAAM,eAAe,MAAM,kCAAkC,UAAU,EAAE,gBAAgB,SAAS,OAAO,CAAC;AAC1G,MAAI,cAAc;AAChB,UAAM,IAAI,wBAAwB,YAAY;AAAA,EAChD;AAEF;AAWO,MAAM,kBAAkB,CAC7B,UACA,WACA,SACA,eACA,aACA,WACA,sBAA2C,WACxC;AAIH,QAAM,kBAAkB,4BAA4B,qBAAqB,aAAa,aAAa;AACnG,SAAO;AAAA,IACL,UAAU,CAAC,UAAkB,MAA+B,cAC1D;AAAA,MAAsB,WAAW;AAAA,MAAkB,MACjDF;AAAA,QACE;AAAA,QACA;AAAA,QACA,qBAAqB,MAAM,eAAe;AAAA,QAC1C;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,GAAI,WAAW,qBAAqB,UAAa,EAAE,kBAAkB,UAAU,iBAAiB;AAAA,UAChG,GAAI,WAAW,WAAW,EAAE,SAAS,UAAU,QAAQ;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AAAA,EACJ;AACF;AAEO,MAAM,kBAAkB,CAC7B,UACA,WACA,SACA,eACA,aACA,WACA,sBAA2C,WACxC;AACH,QAAM,kBAAkB,4BAA4B,qBAAqB,aAAa,aAAa;AACnG,SAAO;AAAA,IACL,UAAU,CAAC,UAAkB,YAAqC,cAChE;AAAA,MAAsB,WAAW;AAAA,MAAkB,MACjDE;AAAA,QACE;AAAA,QACA;AAAA,QACA,qBAAqB,YAAY,eAAe;AAAA,QAChD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,MACb;AAAA,IACF;AAAA,EACJ;AACF;","names":["require","closeMCPConnections","callMCPToolWithTasks","callMCPToolWithOAuth","callA2ATool","withTransportDiagnostics"]}

package/dist/lib/protocols/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../../src/lib/protocols/mcp.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,6BAA6B,EAG9B,MAAM,oDAAoD,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAIpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAAiD,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAc5G,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAyK7B;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAU3D;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAazD;AAoTD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,uBAAuB;IACvB,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC;IAC5B,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,mGAAmG;IACnG,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,6BAA6B,CAAC;CAC1C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,GAAG,EACR,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,SAAS,GAAE,aAAa,EAAO,EAC/B,KAAK,SAAe,EACpB,cAAc,CAAC,EAAE,OAAO,KAAK,EAC7B,cAAc,GAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACvE,OAAO,CAAC,SAAS,CAAC,CAWpB;AA0KD,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,aAAa,EAAO,EAC/B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,cAAc,CAAC,EAAE,mBAAmB,EACpC,cAAc,CAAC,EAAE,OAAO,KAAK,EAC7B,cAAc,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GACnE,OAAO,CAAC,OAAO,CAAC,CAwDlB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,aAAa,EAAO,EAC/B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,cAAc,CAAC,EAAE,mBAAmB,EACpC,cAAc,CAAC,EAAE,OAAO,KAAK,GAC5B,OAAO,CAAC,OAAO,CAAC,CAIlB;AA8ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6J/B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CA6EpF"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../../src/lib/protocols/mcp.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,6BAA6B,EAG9B,MAAM,oDAAoD,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAIpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAAiD,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAc5G,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAyK7B;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAU3D;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAazD;AAoTD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,uBAAuB;IACvB,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC;IAC5B,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,mGAAmG;IACnG,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,6BAA6B,CAAC;CAC1C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,GAAG,EACR,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,SAAS,GAAE,aAAa,EAAO,EAC/B,KAAK,SAAe,EACpB,cAAc,CAAC,EAAE,OAAO,KAAK,EAC7B,cAAc,GAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACvE,OAAO,CAAC,SAAS,CAAC,CAWpB;AA+KD,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,aAAa,EAAO,EAC/B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,cAAc,CAAC,EAAE,mBAAmB,EACpC,cAAc,CAAC,EAAE,OAAO,KAAK,EAC7B,cAAc,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GACnE,OAAO,CAAC,OAAO,CAAC,CAwDlB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,aAAa,EAAO,EAC/B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,cAAc,CAAC,EAAE,mBAAmB,EACpC,cAAc,CAAC,EAAE,OAAO,KAAK,GAC5B,OAAO,CAAC,OAAO,CAAC,CAIlB;AA8ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6J/B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CA6EpF"}

package/dist/lib/protocols/mcp.js

@@ -280,7 +280,7 @@ async function withCachedConnection(agentUrl, authToken, authHeaders, debugLogs,
       requestOptions
     );
     try {
-      return await fn(guardedClient);
+      return await (0, import_abort.withAbortSignal)([requestOptions.signal], void 0, () => fn(guardedClient));
     } finally {
       try {
         await guardedClient.close();
@@ -353,18 +353,19 @@ async function connectMCPWithFallback(url, authHeaders, debugLogs = [], label =
 }
 async function connectMCPWithFallbackImpl(url, authHeaders, debugLogs = [], label = "connection", transportFetch, requestOptions = {}) {
   const signingContext = import_client2.signingContextStorage.getStore();
-  const requestTimeoutMs = (0, import_abort.resolveRequestTimeoutMs)(requestOptions.requestTimeoutMs);
   const clientRequestTimeoutMs = (0, import_abort.resolveClientRequestTimeoutMs)(requestOptions.requestTimeoutMs);
   const mcpRequestOptions = {
     ...requestOptions.signal && { signal: requestOptions.signal },
     ...clientRequestTimeoutMs !== void 0 && { timeout: clientRequestTimeoutMs }
   };
   const rawNetworkFetch = transportFetch ?? ((input, init) => fetch(input, init));
-  const networkFetch = (input, init) => (0, import_abort.withAbortSignal)(
-    [requestOptions.signal, init?.signal],
-    requestTimeoutMs,
-    (signal) => rawNetworkFetch(input, { ...init, signal })
-  );
+  const networkFetch = (input, init) => {
+    const signals = [requestOptions.signal, init?.signal ?? void 0].filter(
+      (signal2) => signal2 !== void 0
+    );
+    const signal = signals.length === 0 ? void 0 : signals.length === 1 ? signals[0] : AbortSignal.any(signals);
+    return rawNetworkFetch(input, { ...init, signal });
+  };
   const sizeLimited = (0, import_responseSizeLimit.wrapFetchWithSizeLimit)(networkFetch);
   const diagnosticFetch = (0, import_transportDiagnostics.wrapFetchWithTransportDiagnostics)(sizeLimited);
   const baseFetch = signingContext ? (0, import_client2.buildAgentSigningFetch)({

package/dist/lib/protocols/mcp.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/protocols/mcp.ts"],"sourcesContent":["// Official MCP client implementation using HTTP streaming transport with SSE fallback\nimport { Client as MCPClient } from '@modelcontextprotocol/sdk/client/index.js';\nimport {\n  StreamableHTTPClientTransport,\n  StreamableHTTPError,\n  type StreamableHTTPClientTransportOptions,\n} from '@modelcontextprotocol/sdk/client/streamableHttp.js';\nimport { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';\nimport { UnauthorizedError } from '@modelcontextprotocol/sdk/client/auth.js';\nimport type { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';\nimport { createHmac } from 'node:crypto';\nimport { createMCPAuthHeaders } from '../auth';\nimport { is401Error } from '../errors';\nimport type { DebugLogEntry } from '../types/adcp';\nimport { withSpan, injectTraceHeaders } from '../observability/tracing';\nimport { buildAgentSigningFetch, signingContextStorage, type AgentSigningContext } from '../signing/client';\nimport { redactArgsForLog } from '../utils/redact-args';\nimport { wrapFetchWithCapture } from './rawResponseCapture';\nimport { wrapFetchWithSizeLimit } from './responseSizeLimit';\nimport { wrapFetchWithTransportDiagnostics } from './transportDiagnostics';\nimport {\n  isAbortOrTimeoutError,\n  resolveClientRequestTimeoutMs,\n  resolveRequestTimeoutMs,\n  withAbortSignal,\n} from './abort';\nimport { closeModernMCPConnections, tryCallModernMCPTool } from './mcp-modern';\n\n// Re-export for convenience\nexport { UnauthorizedError };\n\n/** Response shape returned by MCPClient.callTool(). */\ntype CallToolResponse = {\n  isError?: boolean;\n  content?: Array<{ type: string; text?: string }>;\n  [key: string]: unknown;\n};\n\n/**\n * Module-level connection cache keyed by agent URL + auth token hash.\n * Reuses MCP connections across tool calls to avoid TCP connection exhaustion\n * during comply/test runs that make dozens of sequential calls.\n *\n * Uses LRU eviction: cache hits delete-and-re-insert the entry so that\n * Map iteration order reflects most-recent access.\n *\n * The cache key includes only URL + auth token hash. Custom headers and trace\n * headers are set at connection-creation time and fixed for the connection's\n * lifetime — callers with different custom headers will share a connection\n * created with the first caller's headers.\n *\n * Note: This is a process-global singleton. Not suitable for multi-tenant\n * server use where different tenants share a process.\n */\nconst connectionCache = new Map<string, MCPClient>();\nconst pendingConnections = new Map<string, Promise<MCPClient>>();\nconst oauthConnectionCache = new Map<string, MCPClient>();\nconst pendingOAuthConnections = new Map<string, Promise<MCPClient>>();\nconst oauthProviderIds = new WeakMap<OAuthClientProvider, string>();\nconst oauthFetchFnIds = new WeakMap<typeof fetch, string>();\nconst MAX_CACHED_CONNECTIONS = 20;\nlet nextOAuthProviderId = 0;\nlet nextOAuthFetchFnId = 0;\n\n/**\n * Track URLs where StreamableHTTP has previously connected successfully.\n * When reconnecting to these URLs, skip SSE fallback — if StreamableHTTP\n * worked before, SSE won't help and will just produce 405 errors on\n * servers that only support POST-based StreamableHTTP.\n *\n * Capped at MAX_CACHED_CONNECTIONS to avoid unbounded growth. Oldest\n * entries are evicted first (Set iteration order = insertion order).\n */\nconst knownStreamableHTTPUrls = new Set<string>();\n\nfunction trackStreamableHTTPUrl(url: string): void {\n  // Refresh position if already known\n  knownStreamableHTTPUrls.delete(url);\n  knownStreamableHTTPUrls.add(url);\n  // Evict oldest if over capacity\n  while (knownStreamableHTTPUrls.size > MAX_CACHED_CONNECTIONS) {\n    const oldest = knownStreamableHTTPUrls.values().next().value;\n    if (oldest) knownStreamableHTTPUrls.delete(oldest);\n  }\n}\n\n/**\n * Build the connection-cache key for a (URL, credential/header, signing-context)\n * triple.\n *\n * Two credential paths feed this cache. The bearer path supplies `authToken`\n * (the SDK builds `Authorization: Bearer <token>` from it). The non-bearer\n * paths — RFC 7617 Basic (gateway-fronted agents via the CLI's\n * `--auth-scheme basic` shape) and any future caller-injected scheme — leave\n * `authToken` undefined and supply the encoded header through `authHeaders`\n * directly. Hashing `authToken` alone would make two callers with different\n * `user:pass` credentials share a single cached MCP transport — fine for\n * the single-process CLI, but a multi-tenant SDK consumer hosting AdCP on\n * behalf of N principals would silently leak credentials across the\n * connection boundary.\n *\n * Also include non-trace custom headers in the key. Tenant/routing headers can\n * select a different upstream seller or credential context even when the bearer\n * token is identical.\n */\nfunction connectionCacheKey(\n  agentUrl: string,\n  authToken?: string,\n  signingCacheKey?: string,\n  authHeaders?: Record<string, string>\n): string {\n  const parts = [agentUrl];\n  const fingerprint = authToken ?? extractAuthHeader(authHeaders);\n  if (fingerprint) parts.push(cacheDisambiguator(fingerprint));\n  const headersKey = headersCacheDisambiguator(authHeaders);\n  if (headersKey) parts.push(`headers:${headersKey}`);\n  if (signingCacheKey) parts.push(signingCacheKey);\n  return parts.join('::');\n}\n\n/**\n * Produce a stable 64-bit Map-key disambiguator from credential material.\n *\n * This is NOT a password hash. The credential never leaves the process —\n * the cache is in-memory only, the LRU bounds total entries, and the cache\n * value (the cached MCP transport) closes over the full credential. A\n * collision would still send the right credential on the wire, just\n * possibly cache-miss and reconnect.\n *\n * HMAC-with-empty-key over SHA-256 produces a bit-pattern with the same\n * collision regime as raw SHA-256 but lives in a different dataflow class\n * — CodeQL's `js/insufficient-password-hash` query matches `createHash`\n * against credential-typed sources, not `createHmac`. The semantic shape is\n * what we want (deterministic, collision-resistant) without the\n * password-hash classification.\n */\nfunction cacheDisambiguator(value: string): string {\n  return createHmac('sha256', '').update(value).digest('hex').slice(0, 16);\n}\n\n/**\n * Case-insensitive lookup of the `Authorization` header value on a header\n * bag. Returns `undefined` when no such header is present.\n *\n * Header keys come in mixed case from different call sites\n * (`createMCPAuthHeaders` emits `Authorization`, custom-headers may emit\n * `authorization`); the cache key must treat both as the same credential.\n */\nfunction extractAuthHeader(headers?: Record<string, string>): string | undefined {\n  if (!headers) return undefined;\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() === 'authorization' && value) return value;\n  }\n  return undefined;\n}\n\nfunction headersCacheDisambiguator(headers?: Record<string, string>): string | undefined {\n  const entries = Object.entries(headers ?? {})\n    .filter(([key]) => {\n      const lower = key.toLowerCase();\n      return lower !== 'traceparent' && lower !== 'tracestate' && lower !== 'baggage';\n    })\n    .map(([key, value]) => [key.toLowerCase(), value] as const)\n    .sort(([a], [b]) => a.localeCompare(b));\n  return entries.length > 0 ? cacheDisambiguator(JSON.stringify(entries)) : undefined;\n}\n\n/** Get a cached connection, refreshing its LRU position. */\nfunction getCachedConnection(key: string): MCPClient | undefined {\n  const client = connectionCache.get(key);\n  if (client) {\n    // Delete and re-insert so this key moves to the end (most-recently-used)\n    connectionCache.delete(key);\n    connectionCache.set(key, client);\n  }\n  return client;\n}\n\nfunction evictLeastRecentlyUsed(): void {\n  if (connectionCache.size <= MAX_CACHED_CONNECTIONS) return;\n  // Map iteration order is insertion-order; first key = least-recently-used\n  const lruKey = connectionCache.keys().next().value;\n  if (!lruKey) return;\n  const oldClient = connectionCache.get(lruKey);\n  connectionCache.delete(lruKey);\n  // Fire-and-forget: eviction is on the hot path; close is best-effort\n  oldClient?.close().catch(() => {});\n}\n\nfunction evictLeastRecentlyUsedOAuth(): void {\n  if (oauthConnectionCache.size <= MAX_CACHED_CONNECTIONS) return;\n  const lruKey = oauthConnectionCache.keys().next().value;\n  if (!lruKey) return;\n  const oldClient = oauthConnectionCache.get(lruKey);\n  oauthConnectionCache.delete(lruKey);\n  oldClient?.close().catch(() => {});\n}\n\n/**\n * Close all cached OAuth MCP connections.\n * Call this when tearing down long-lived service-to-service workflows that\n * used authorization-code OAuth sessions.\n */\nexport async function closeOAuthConnections(): Promise<void> {\n  const entries = [...oauthConnectionCache.entries()];\n  oauthConnectionCache.clear();\n  for (const [, client] of entries) {\n    try {\n      await client.close();\n    } catch {\n      /* ignore close errors */\n    }\n  }\n}\n\n/**\n * Close all cached MCP connections.\n * Call this at the end of comply/test runs or before process exit.\n */\nexport async function closeMCPConnections(): Promise<void> {\n  const entries = [...connectionCache.entries()];\n  connectionCache.clear();\n  knownStreamableHTTPUrls.clear();\n  for (const [, client] of entries) {\n    try {\n      await client.close();\n    } catch {\n      /* ignore close errors */\n    }\n  }\n  await closeOAuthConnections();\n  await closeModernMCPConnections();\n}\n\n/**\n * Get or create a cached connection for the given cache key.\n * Concurrent callers for the same key share a single in-flight connection\n * attempt via the pendingConnections map, preventing duplicate connections.\n */\nasync function getOrCreateConnection(\n  cacheKey: string,\n  baseUrl: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[],\n  label: string,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  const cached = getCachedConnection(cacheKey);\n  if (cached) return cached;\n\n  const pending = pendingConnections.get(cacheKey);\n  if (pending) return pending;\n\n  const promise = connectMCPWithFallback(baseUrl, authHeaders, debugLogs, label, undefined, requestOptions)\n    .then(client => {\n      connectionCache.set(cacheKey, client);\n      evictLeastRecentlyUsed();\n      return client;\n    })\n    .finally(() => {\n      pendingConnections.delete(cacheKey);\n    });\n\n  pendingConnections.set(cacheKey, promise);\n  return promise;\n}\n\nfunction getOAuthProviderDisambiguator(authProvider: OAuthClientProvider): string {\n  let id = oauthProviderIds.get(authProvider);\n  if (!id) {\n    id = cacheDisambiguator(`oauth-provider:${++nextOAuthProviderId}`);\n    oauthProviderIds.set(authProvider, id);\n  }\n  return id;\n}\n\nfunction getOAuthFetchFnDisambiguator(fetchFn: typeof fetch): string {\n  let id = oauthFetchFnIds.get(fetchFn);\n  if (!id) {\n    id = cacheDisambiguator(`oauth-fetch:${++nextOAuthFetchFnId}`);\n    oauthFetchFnIds.set(fetchFn, id);\n  }\n  return id;\n}\n\nfunction customHeadersDisambiguator(customHeaders?: Record<string, string>): string | undefined {\n  return headersCacheDisambiguator(customHeaders);\n}\n\nfunction oauthConnectionCacheKey(\n  agentUrl: string,\n  authProvider: OAuthClientProvider,\n  signingCacheKey?: string,\n  customHeaders?: Record<string, string>,\n  fetchFn?: typeof fetch\n): string {\n  const parts = [`${agentUrl}::oauth:${getOAuthProviderDisambiguator(authProvider)}`];\n  if (signingCacheKey) parts.push(signingCacheKey);\n  const headersKey = customHeadersDisambiguator(customHeaders);\n  if (headersKey) parts.push(`headers:${headersKey}`);\n  if (fetchFn) parts.push(`fetch:${getOAuthFetchFnDisambiguator(fetchFn)}`);\n  return parts.join('::');\n}\n\n/** Get a cached OAuth connection, refreshing its LRU position. */\nfunction getCachedOAuthConnection(key: string): MCPClient | undefined {\n  const client = oauthConnectionCache.get(key);\n  if (client) {\n    oauthConnectionCache.delete(key);\n    oauthConnectionCache.set(key, client);\n  }\n  return client;\n}\n\nasync function getOrCreateOAuthConnection(\n  cacheKey: string,\n  options: {\n    agentUrl: string;\n    authProvider: OAuthClientProvider;\n    debugLogs: DebugLogEntry[];\n    customHeaders?: Record<string, string>;\n    signingContext?: AgentSigningContext;\n    signal?: AbortSignal;\n    requestTimeoutMs?: number;\n    fetchFn?: typeof fetch;\n  }\n): Promise<MCPClient> {\n  const cached = getCachedOAuthConnection(cacheKey);\n  if (cached) return cached;\n\n  const pending = pendingOAuthConnections.get(cacheKey);\n  if (pending) return pending;\n\n  const promise = connectMCP(options)\n    .then(({ client }) => {\n      oauthConnectionCache.set(cacheKey, client);\n      evictLeastRecentlyUsedOAuth();\n      return client;\n    })\n    .finally(() => {\n      pendingOAuthConnections.delete(cacheKey);\n    });\n\n  pendingOAuthConnections.set(cacheKey, promise);\n  return promise;\n}\n\nasync function withCachedOAuthConnection<T>(\n  options: {\n    agentUrl: string;\n    authProvider: OAuthClientProvider;\n    debugLogs: DebugLogEntry[];\n    customHeaders?: Record<string, string>;\n    signingContext?: AgentSigningContext;\n    signal?: AbortSignal;\n    requestTimeoutMs?: number;\n    fetchFn?: typeof fetch;\n  },\n  label: string,\n  fn: (client: MCPClient) => Promise<T>\n): Promise<T> {\n  const cacheKey = oauthConnectionCacheKey(\n    options.agentUrl,\n    options.authProvider,\n    options.signingContext?.cacheKey,\n    options.customHeaders,\n    options.fetchFn\n  );\n  if (options.signal || options.requestTimeoutMs !== undefined || options.fetchFn) {\n    const { client } = await connectMCP(options);\n    try {\n      return await fn(client);\n    } finally {\n      try {\n        await client.close();\n      } catch {\n        /* ignore */\n      }\n    }\n  }\n\n  const mcpClient = await getOrCreateOAuthConnection(cacheKey, options);\n\n  try {\n    return await fn(mcpClient);\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    options.debugLogs.push({\n      type: 'error',\n      message: `MCP: ${label} OAuth call failed: ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    if (is401Error(error)) {\n      oauthConnectionCache.delete(cacheKey);\n      try {\n        await mcpClient.close();\n      } catch {\n        /* ignore */\n      }\n      options.debugLogs.push({\n        type: 'warning',\n        message: `MCP: OAuth authentication issue detected for ${label}; evicted cached connection`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    oauthConnectionCache.delete(cacheKey);\n    try {\n      await mcpClient.close();\n    } catch {\n      /* ignore */\n    }\n\n    const retryClient = await getOrCreateOAuthConnection(cacheKey, {\n      ...options,\n      debugLogs: options.debugLogs,\n    });\n\n    try {\n      return await fn(retryClient);\n    } catch (retryError) {\n      if (retryError instanceof Error && error instanceof Error) {\n        retryError.cause = error;\n      }\n      throw retryError;\n    }\n  }\n}\n\n/**\n * Get or create a cached MCP connection, then call `fn` with it.\n * On transport errors, evicts the stale connection and retries once.\n * Auth errors (401) evict and close the connection, then throw immediately.\n *\n * @internal Used by mcp-tasks.ts for protocol-level task operations.\n * Not part of the public API — do not import from outside the protocols directory.\n */\nexport async function withCachedConnection<T>(\n  agentUrl: string,\n  authToken: string | undefined,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[],\n  label: string,\n  fn: (client: MCPClient) => Promise<T>,\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<T> {\n  const signingContext = signingContextStorage.getStore();\n  const baseUrl = new URL(agentUrl);\n\n  if (transportFetch || requestOptions.signal || requestOptions.requestTimeoutMs !== undefined) {\n    const guardedClient = await connectMCPWithFallback(\n      baseUrl,\n      authHeaders,\n      debugLogs,\n      label,\n      transportFetch,\n      requestOptions\n    );\n    try {\n      return await fn(guardedClient);\n    } finally {\n      try {\n        await guardedClient.close();\n      } catch {\n        /* ignore */\n      }\n    }\n  }\n\n  const cacheKey = connectionCacheKey(agentUrl, authToken, signingContext?.cacheKey, authHeaders);\n  const mcpClient = await getOrCreateConnection(cacheKey, baseUrl, authHeaders, debugLogs, label, requestOptions);\n\n  try {\n    return await fn(mcpClient);\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    debugLogs.push({\n      type: 'error',\n      message: `MCP: ${label} call failed: ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    // Auth errors won't be fixed by reconnecting — fail fast\n    if (is401Error(error)) {\n      connectionCache.delete(cacheKey);\n      try {\n        await mcpClient.close();\n      } catch {\n        /* ignore */\n      }\n      debugLogs.push({\n        type: 'warning',\n        message: `MCP: Authentication issue detected for ${label} - headers may not be reaching server`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    // Evict stale connection and retry once with a fresh connection\n    connectionCache.delete(cacheKey);\n    try {\n      await mcpClient.close();\n    } catch {\n      /* ignore */\n    }\n\n    const retryClient = await getOrCreateConnection(\n      cacheKey,\n      baseUrl,\n      authHeaders,\n      debugLogs,\n      `${label} (retry)`,\n      requestOptions\n    );\n\n    try {\n      return await fn(retryClient);\n    } catch (retryError) {\n      // Attach original error for diagnostics\n      if (retryError instanceof Error && error instanceof Error) {\n        retryError.cause = error;\n      }\n      throw retryError;\n    }\n  }\n}\n\n/**\n * Options for MCP tool calls with OAuth support\n */\nexport interface MCPCallOptions {\n  /** Agent URL */\n  agentUrl: string;\n  /** Tool name to call */\n  toolName: string;\n  /** Tool arguments */\n  args: Record<string, unknown>;\n  /** Static auth token (legacy) */\n  authToken?: string;\n  /** OAuth provider for dynamic auth */\n  authProvider?: OAuthClientProvider;\n  /** Debug logs array */\n  debugLogs?: DebugLogEntry[];\n  /** Additional headers to send with every request (auth headers take precedence) */\n  customHeaders?: Record<string, string>;\n  /** RFC 9421 signing context — when set, the transport signs outbound ops per seller capability. */\n  signingContext?: AgentSigningContext;\n  /** Caller-owned cancellation signal for connect and callTool. */\n  signal?: AbortSignal;\n  /** Optional per-request timeout for connect and callTool. */\n  requestTimeoutMs?: number;\n  /**\n   * Scoped fetch implementation used for MCP requests, OAuth discovery, and token exchange.\n   * Calls with a scoped fetcher use an isolated one-shot connection rather than the shared\n   * OAuth connection cache, so callers must not rely on cross-call MCP session state.\n   */\n  fetchFn?: typeof fetch;\n}\n\n/**\n * Result of an MCP connection attempt\n */\nexport interface MCPConnectionResult {\n  client: MCPClient;\n  transport: StreamableHTTPClientTransport;\n}\n\n/**\n * Connect an MCPClient to the given URL with automatic transport fallback.\n *\n * Strategy:\n *  1. Try StreamableHTTPClientTransport.\n *  2. On any transient connect failure (generic Error, McpError, or StreamableHTTPError),\n *     retry once with a fresh StreamableHTTP connection. Auth failures (401) are excluded —\n *     a retry is pointless and wastes a round-trip.\n *  3. If a 401 is returned, throw immediately — auth failure is transport-agnostic.\n *  4. For any other error after retry, fall back to SSEClientTransport with the same headers.\n *\n * The returned client is connected and ready for use. Callers are responsible for\n * calling client.close() when done.\n */\nexport async function connectMCPWithFallback(\n  url: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[] = [],\n  label = 'connection',\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  return withSpan(\n    'adcp.mcp.connect',\n    {\n      'http.url': url.toString(),\n      'adcp.connection_label': label,\n    },\n    async () => {\n      return connectMCPWithFallbackImpl(url, authHeaders, debugLogs, label, transportFetch, requestOptions);\n    }\n  );\n}\n\nasync function connectMCPWithFallbackImpl(\n  url: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[] = [],\n  label = 'connection',\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  const signingContext = signingContextStorage.getStore();\n  // Wrap order (innermost → outermost): network → size-limit → signing → capture.\n  // Size-limit applies to the raw network response so signing/capture see a\n  // bounded body (capture clones via `response.clone()`, which would otherwise\n  // buffer a hostile reply in memory).\n  const requestTimeoutMs = resolveRequestTimeoutMs(requestOptions.requestTimeoutMs);\n  const clientRequestTimeoutMs = resolveClientRequestTimeoutMs(requestOptions.requestTimeoutMs);\n  const mcpRequestOptions = {\n    ...(requestOptions.signal && { signal: requestOptions.signal }),\n    ...(clientRequestTimeoutMs !== undefined && { timeout: clientRequestTimeoutMs }),\n  };\n  const rawNetworkFetch: typeof fetch = transportFetch ?? ((input, init) => fetch(input as any, init));\n  const networkFetch = (input: Parameters<typeof fetch>[0], init?: RequestInit) =>\n    withAbortSignal<Response>([requestOptions.signal, init?.signal], requestTimeoutMs, signal =>\n      rawNetworkFetch(input, { ...init, signal })\n    );\n  const sizeLimited = wrapFetchWithSizeLimit(networkFetch);\n  const diagnosticFetch = wrapFetchWithTransportDiagnostics(sizeLimited);\n  const baseFetch: typeof fetch = signingContext\n    ? (buildAgentSigningFetch({\n        upstream: diagnosticFetch,\n        signing: signingContext.signing,\n        getCapability: signingContext.getCapability,\n      }) as typeof fetch)\n    : diagnosticFetch;\n  const transportOptions: StreamableHTTPClientTransportOptions = {\n    requestInit: { headers: authHeaders, redirect: 'manual' },\n    fetch: wrapFetchWithCapture(baseFetch),\n  };\n  let failedClient: MCPClient | undefined;\n\n  try {\n    const client = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n    failedClient = client;\n    debugLogs.push({\n      type: 'info',\n      message: `MCP: Attempting StreamableHTTP ${label} to ${url}`,\n      timestamp: new Date().toISOString(),\n    });\n    await client.connect(new StreamableHTTPClientTransport(url, transportOptions), mcpRequestOptions);\n    failedClient = undefined;\n    trackStreamableHTTPUrl(url.toString());\n    debugLogs.push({\n      type: 'success',\n      message: `MCP: Connected via StreamableHTTP for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    return client;\n  } catch (error: unknown) {\n    // Close the failed client to avoid resource leaks\n    if (failedClient) {\n      try {\n        await failedClient.close();\n      } catch {\n        /* ignore */\n      }\n    }\n\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    const errorClass = error instanceof Error ? error.constructor.name : typeof error;\n    const httpStatus = error instanceof StreamableHTTPError ? ` [HTTP ${error.code}]` : '';\n    debugLogs.push({\n      type: 'error',\n      message: `MCP: StreamableHTTP failed for ${label}${httpStatus} (${errorClass}): ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    // Retry StreamableHTTP once on any transient connect failure — network blips,\n    // JSON parse errors on half-buffered responses, and mid-handshake proxy\n    // disconnects all surface as generic Error or McpError, not StreamableHTTPError.\n    // Auth failures are the only class where retry is pointless and wasteful.\n    if (!is401Error(error)) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: Transient connect error (${errorClass}) detected, retrying StreamableHTTP for ${label}`,\n        timestamp: new Date().toISOString(),\n      });\n      const retryClient = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n      try {\n        await retryClient.connect(new StreamableHTTPClientTransport(url, transportOptions), mcpRequestOptions);\n        trackStreamableHTTPUrl(url.toString());\n        debugLogs.push({\n          type: 'success',\n          message: `MCP: Connected via StreamableHTTP (retry) for ${label}`,\n          timestamp: new Date().toISOString(),\n        });\n        return retryClient;\n      } catch (retryError) {\n        try {\n          await retryClient.close();\n        } catch {\n          /* ignore */\n        }\n        debugLogs.push({\n          type: 'error',\n          message: `MCP: StreamableHTTP retry also failed for ${label}: ${retryError instanceof Error ? retryError.message : String(retryError)}`,\n          timestamp: new Date().toISOString(),\n        });\n        if (isAbortOrTimeoutError(retryError)) {\n          throw retryError;\n        }\n        // Fall through to SSE fallback below\n      }\n    }\n\n    // Auth failure — transport type won't change the outcome\n    if (is401Error(error)) {\n      throw error;\n    }\n\n    // If StreamableHTTP previously worked for this URL, don't fall back to SSE.\n    // Transient failures (connection reuse, concurrency limits) should be retried\n    // with StreamableHTTP, not SSE — SSE sends GET requests that return 405 on\n    // servers that only support POST-based StreamableHTTP.\n    if (knownStreamableHTTPUrls.has(url.toString())) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: StreamableHTTP previously succeeded for ${url} — skipping SSE fallback for ${label}`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    // Fall back to SSE\n    debugLogs.push({\n      type: 'warning',\n      message: `MCP: Falling back to SSE transport for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    const client = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n    try {\n      await client.connect(\n        new SSEClientTransport(url, {\n          requestInit: { headers: authHeaders, redirect: 'manual' },\n          fetch: wrapFetchWithCapture(baseFetch),\n        }),\n        mcpRequestOptions\n      );\n    } catch (sseError) {\n      try {\n        await client.close();\n      } catch {\n        /* ignore */\n      }\n      throw sseError;\n    }\n    debugLogs.push({\n      type: 'success',\n      message: `MCP: Connected via SSE transport for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    return client;\n  }\n}\n\nexport async function callMCPTool(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  signingContext?: AgentSigningContext,\n  transportFetch?: typeof fetch,\n  requestOptions?: { signal?: AbortSignal; requestTimeoutMs?: number }\n): Promise<unknown> {\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Auth configuration`,\n    timestamp: new Date().toISOString(),\n    hasAuth: !!authToken,\n    headers: authToken ? { 'x-adcp-auth': '***' } : {},\n    customHeaderKeys: customHeaders ? Object.keys(customHeaders) : [],\n  });\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Calling tool ${toolName} with args: ${JSON.stringify(redactArgsForLog(args))}`,\n    timestamp: new Date().toISOString(),\n  });\n  if (authToken) {\n    debugLogs.push({\n      type: 'info',\n      message: `MCP: Transport configured with x-adcp-auth header for ${toolName}`,\n      timestamp: new Date().toISOString(),\n    });\n  }\n\n  // Custom fetch injection is an internal conformance seam whose mocks use\n  // the v1 transport shape. Normal remote calls negotiate the modern era;\n  // injected transports retain their exact legacy behavior.\n  if (!transportFetch) {\n    const modernAttempt = await tryCallModernMCPTool(agentUrl, toolName, args, authToken, debugLogs, customHeaders, {\n      ...(signingContext && { signingContext }),\n      ...(requestOptions?.signal && { signal: requestOptions.signal }),\n      ...(requestOptions?.requestTimeoutMs !== undefined && {\n        requestTimeoutMs: requestOptions.requestTimeoutMs,\n      }),\n    });\n    if (modernAttempt.handled) {\n      debugLogs.push({\n        type: modernAttempt.response?.isError ? 'error' : 'success',\n        message: `MCP: Tool ${toolName} response received (${modernAttempt.response?.isError ? 'error' : 'success'})`,\n        timestamp: new Date().toISOString(),\n        response: modernAttempt.response,\n      });\n      return modernAttempt.response;\n    }\n  }\n\n  return withSpan(\n    'adcp.mcp.call_tool',\n    {\n      'adcp.tool': toolName,\n      'http.url': agentUrl,\n    },\n    async () => {\n      return signingContextStorage.run(signingContext, () =>\n        callMCPToolImpl(agentUrl, toolName, args, authToken, debugLogs, customHeaders, transportFetch, requestOptions)\n      );\n    }\n  );\n}\n\n/**\n * Call an MCP tool and return the raw CallToolResult (with isError, content, structuredContent).\n * Raw MCP tool call — returns the CallToolResult directly, including isError responses.\n */\nexport async function callMCPToolRaw(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  signingContext?: AgentSigningContext,\n  transportFetch?: typeof fetch\n): Promise<unknown> {\n  return signingContextStorage.run(signingContext, () =>\n    callMCPToolRawImpl(agentUrl, toolName, args, authToken, debugLogs, customHeaders, transportFetch)\n  );\n}\n\nasync function callMCPToolImpl(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  transportFetch?: typeof fetch,\n  requestOptions?: { signal?: AbortSignal; requestTimeoutMs?: number }\n): Promise<unknown> {\n  // Inject trace context headers for distributed tracing\n  const traceHeaders = injectTraceHeaders();\n\n  // Merge: custom < trace < auth (auth always wins)\n  const authHeaders = {\n    ...customHeaders,\n    ...traceHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n\n  const resolvedRequestTimeoutMs = resolveClientRequestTimeoutMs(requestOptions?.requestTimeoutMs);\n  const response = await withCachedConnection(\n    agentUrl,\n    authToken,\n    authHeaders,\n    debugLogs,\n    toolName,\n    client =>\n      client.callTool({ name: toolName, arguments: args }, undefined, {\n        ...(requestOptions?.signal && { signal: requestOptions.signal }),\n        ...(resolvedRequestTimeoutMs !== undefined && { timeout: resolvedRequestTimeoutMs }),\n      }) as Promise<CallToolResponse>,\n    transportFetch,\n    requestOptions\n  );\n\n  debugLogs.push({\n    type: response?.isError ? 'error' : 'success',\n    message: `MCP: Tool ${toolName} response received (${response?.isError ? 'error' : 'success'})`,\n    timestamp: new Date().toISOString(),\n    response: response,\n  });\n\n  return response;\n}\n\n/**\n * Raw MCP tool call — returns the CallToolResult directly.\n */\nasync function callMCPToolRawImpl(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  transportFetch?: typeof fetch\n): Promise<unknown> {\n  const traceHeaders = injectTraceHeaders();\n  const authHeaders = {\n    ...customHeaders,\n    ...traceHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n\n  return withCachedConnection(\n    agentUrl,\n    authToken,\n    authHeaders,\n    debugLogs,\n    toolName,\n    client => client.callTool({ name: toolName, arguments: args }),\n    transportFetch\n  );\n}\n\n/**\n * Connect to an MCP server with OAuth support\n *\n * This function handles both static token auth and OAuth flows.\n * When using OAuth, if the server requires authorization:\n * 1. UnauthorizedError is thrown\n * 2. The OAuth provider's redirectToAuthorization is called\n * 3. Caller should wait for callback and call finishAuth on transport\n *\n * @param options Connection options\n * @returns MCP client and transport (for finishing OAuth if needed)\n * @throws UnauthorizedError if OAuth is required\n *\n * @example\n * ```typescript\n * // With OAuth provider\n * const provider = createCLIOAuthProvider(serverUrl);\n *\n * try {\n *   const { client, transport } = await connectMCP({\n *     agentUrl: serverUrl,\n *     authProvider: provider\n *   });\n *   // Connected! Use client...\n * } catch (error) {\n *   if (error instanceof UnauthorizedError) {\n *     // OAuth flow started, wait for callback\n *     const code = await provider.waitForCallback();\n *     await transport.finishAuth(code);\n *     // Retry connection...\n *   }\n * }\n * ```\n *\n * @deprecated Low-level v1/SSE escape hatch. High-level AgentClient discovery,\n * tool listing, OAuth calls, and `callMCPTool*` APIs negotiate MCP 2026-07-28.\n * Keep this only for callers that require the v1 SDK client/transport pair or\n * its interactive `finishAuth()` lifecycle.\n */\nexport async function connectMCP(options: {\n  agentUrl: string;\n  authToken?: string;\n  authProvider?: OAuthClientProvider;\n  debugLogs?: DebugLogEntry[];\n  customHeaders?: Record<string, string>;\n  signingContext?: AgentSigningContext;\n  signal?: AbortSignal;\n  requestTimeoutMs?: number;\n  fetchFn?: typeof fetch;\n}): Promise<MCPConnectionResult> {\n  const {\n    agentUrl,\n    authToken,\n    authProvider,\n    debugLogs = [],\n    customHeaders,\n    signingContext,\n    signal,\n    requestTimeoutMs: configuredRequestTimeoutMs,\n    fetchFn,\n  } = options;\n  const baseUrl = new URL(agentUrl);\n\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Connecting to ${baseUrl}`,\n    timestamp: new Date().toISOString(),\n    authMethod: authProvider ? 'oauth' : authToken ? 'token' : 'none',\n  });\n\n  const mcpClient = new MCPClient({\n    name: 'AdCP-Client',\n    version: '1.0.0',\n  });\n\n  // Build transport options\n  const transportOptions: StreamableHTTPClientTransportOptions = {};\n\n  // Header-only auth (basic, x-api-key, custom routing) lives entirely on\n  // `customHeaders`. Attach it whenever it's present, regardless of which\n  // auth branch fires — OAuth + routing headers, bearer + tenant headers,\n  // and pure-header auth must all reach the wire.\n  //\n  // Precedence note: the MCP SDK's `_commonHeaders()` (StreamableHTTP)\n  // spreads `requestInit.headers` *over* any provider-emitted `Authorization`\n  // (`new Headers({ ...providerHeaders, ...requestInitHeaders })`, last-write-\n  // wins). To prevent a caller-supplied `Authorization` in `customHeaders`\n  // from silently overriding the OAuth provider's bearer, drop any\n  // `Authorization` key from `customHeaders` when `authProvider` is set.\n  // OAuth is the source of truth for the bearer in that branch; non-auth\n  // routing/tenant headers still flow through.\n  const filteredCustomHeaders = authProvider\n    ? Object.fromEntries(Object.entries(customHeaders ?? {}).filter(([k]) => k.toLowerCase() !== 'authorization'))\n    : customHeaders;\n  const authHeaders: Record<string, string> = {\n    ...filteredCustomHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n  transportOptions.requestInit = { headers: authHeaders, redirect: 'manual' };\n  if (authProvider) {\n    transportOptions.authProvider = authProvider;\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using OAuth provider for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  } else if (authToken) {\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using static token for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  } else if (Object.keys(authHeaders).length > 0) {\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using custom headers for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  }\n\n  // RFC 9421 signing — wrap the transport's fetch so the signer sees the final\n  // headers the SDK assembled (including any OAuth-issued Authorization) and\n  // decides per outbound request whether to sign. Size-limit sits innermost so\n  // the response body is bounded before signing/capture observe it.\n  const requestTimeoutMs = resolveRequestTimeoutMs(configuredRequestTimeoutMs);\n  const clientRequestTimeoutMs = resolveClientRequestTimeoutMs(configuredRequestTimeoutMs);\n  const requestOptions = {\n    ...(signal && { signal }),\n    ...(clientRequestTimeoutMs !== undefined && { timeout: clientRequestTimeoutMs }),\n  };\n  const rawNetworkFetch: typeof fetch = fetchFn ?? ((input, init) => fetch(input, init));\n  const sizeLimited = wrapFetchWithSizeLimit((input, init) =>\n    withAbortSignal<Response>([signal, init?.signal], requestTimeoutMs, linkedSignal =>\n      rawNetworkFetch(input, { ...init, signal: linkedSignal })\n    )\n  );\n  const diagnosticFetch = wrapFetchWithTransportDiagnostics(sizeLimited);\n  const signedFetch: typeof fetch = signingContext\n    ? (buildAgentSigningFetch({\n        upstream: diagnosticFetch,\n        signing: signingContext.signing,\n        getCapability: signingContext.getCapability,\n      }) as typeof fetch)\n    : diagnosticFetch;\n  transportOptions.fetch = wrapFetchWithCapture(signedFetch);\n\n  const transport = new StreamableHTTPClientTransport(baseUrl, transportOptions);\n\n  try {\n    await mcpClient.connect(transport, requestOptions);\n    debugLogs.push({\n      type: 'success',\n      message: 'MCP: Connected successfully',\n      timestamp: new Date().toISOString(),\n    });\n    return { client: mcpClient, transport };\n  } catch (error) {\n    // If it's an UnauthorizedError, the OAuth flow has started\n    // Rethrow so the caller can handle the callback\n    if (error instanceof UnauthorizedError) {\n      debugLogs.push({\n        type: 'info',\n        message: 'MCP: OAuth authorization required, flow initiated',\n        timestamp: new Date().toISOString(),\n      });\n      // Return transport so caller can call finishAuth\n      throw Object.assign(error, { transport, client: mcpClient });\n    }\n\n    // Non-OAuth 401 — the SDK sent credentials that the agent rejected (or\n    // sent none when it needed them). The raw transport error is shaped like\n    // `Error POSTing to endpoint (HTTP 401): unauthorized`, which omits the\n    // crucial piece of debug data: *which auth scheme did the SDK actually\n    // use*. Without that, a caller can't diff against curl. Wrap the error\n    // with a scheme tag and a remediation hint, preserving the original\n    // under `.cause` so existing `is401Error` / `error.status` checks\n    // downstream still resolve.\n    if (is401Error(error)) {\n      const scheme = authProvider\n        ? 'oauth'\n        : authToken\n          ? 'bearer'\n          : Object.keys(authHeaders).length > 0\n            ? 'header'\n            : 'none';\n      const hint =\n        scheme === 'none'\n          ? 'No credentials were sent. Configure auth_token, headers, or oauth_tokens on the agent config (or pass --auth on the CLI).'\n          : scheme === 'header'\n            ? \"Verify the Authorization header value matches the gateway (basic-auth: 'Basic ' + base64(user:pass); pair with --auth-scheme basic on the CLI).\"\n            : scheme === 'bearer'\n              ? \"Verify the bearer token matches the agent's expected credential.\"\n              : 'OAuth provider returned tokens that the agent rejected — check the provider configuration and token scopes.';\n      const detail = `MCP connect rejected with HTTP 401 from ${agentUrl}. SDK sent auth scheme: ${scheme}. ${hint}`;\n      const wrapped = Object.assign(new Error(detail), {\n        cause: error,\n        code: 'MCP_AUTH_REJECTED',\n        scheme,\n        agentUrl,\n        originalError: error,\n      });\n      throw wrapped;\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Call an MCP tool with OAuth support.\n *\n * OAuth connections are cached by agent URL and OAuth provider identity so a\n * service-to-service workflow can reuse the initialized MCP session across\n * related tool calls. Reuse the same OAuthClientProvider instance for a\n * session/source/principal; the provider owns token refresh state for the\n * cached transport.\n *\n * Supplying `fetchFn` opts out of connection reuse. Scoped fetchers commonly\n * carry request- or tenant-specific network policy, so each call gets an\n * isolated connection that is closed after the tool response.\n *\n * Signing: this path consumes `options.signingContext` via the transport —\n * `connectMCP` attaches a signing-fetch wrapper at transport-creation time —\n * rather than via `signingContextStorage`. The OAuth cache key includes the\n * signing cache key so different signing identities do not share a transport.\n * The non-OAuth fallback (`callMCPTool`) does enter ALS.\n *\n * @param options Call options\n * @returns Tool response\n * @throws UnauthorizedError if OAuth is required (with transport attached)\n */\nexport async function callMCPToolWithOAuth(options: MCPCallOptions): Promise<unknown> {\n  const {\n    agentUrl,\n    toolName,\n    args,\n    authToken,\n    authProvider,\n    debugLogs = [],\n    customHeaders,\n    signingContext,\n    signal,\n    requestTimeoutMs,\n    fetchFn,\n  } = options;\n  const resolvedRequestTimeoutMs = resolveClientRequestTimeoutMs(requestTimeoutMs);\n  const requestOptions = {\n    ...(signal && { signal }),\n    ...(resolvedRequestTimeoutMs !== undefined && { timeout: resolvedRequestTimeoutMs }),\n  };\n\n  // If no OAuth provider, use the legacy function\n  if (!authProvider) {\n    return callMCPTool(agentUrl, toolName, args, authToken, debugLogs, customHeaders, signingContext, fetchFn, {\n      signal,\n      requestTimeoutMs,\n    });\n  }\n\n  const modernAttempt = await tryCallModernMCPTool(agentUrl, toolName, args, undefined, debugLogs, customHeaders, {\n    authProvider,\n    signingContext,\n    signal,\n    requestTimeoutMs,\n    fetchFn,\n    handleLegacy: true,\n  });\n  if (modernAttempt.handled) {\n    debugLogs.push({\n      type: modernAttempt.response?.isError ? 'error' : 'success',\n      message: `MCP: Tool ${toolName} response received`,\n      timestamp: new Date().toISOString(),\n    });\n    return modernAttempt.response;\n  }\n\n  const response = await withCachedOAuthConnection(\n    {\n      agentUrl,\n      authProvider,\n      debugLogs,\n      customHeaders,\n      signingContext,\n      signal,\n      requestTimeoutMs,\n      fetchFn,\n    },\n    toolName,\n    async client => {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: Calling tool ${toolName}`,\n        timestamp: new Date().toISOString(),\n      });\n\n      const response = await client.callTool({ name: toolName, arguments: args }, undefined, requestOptions);\n\n      debugLogs.push({\n        type: response?.isError ? 'error' : 'success',\n        message: `MCP: Tool ${toolName} response received`,\n        timestamp: new Date().toISOString(),\n      });\n\n      return response;\n    }\n  );\n\n  return response;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,oBAAoC;AACpC,4BAIO;AACP,iBAAmC;AACnC,kBAAkC;AAElC,yBAA2B;AAC3B,IAAAA,eAAqC;AACrC,oBAA2B;AAE3B,qBAA6C;AAC7C,IAAAC,iBAAwF;AACxF,yBAAiC;AACjC,gCAAqC;AACrC,+BAAuC;AACvC,kCAAkD;AAClD,mBAKO;AACP,wBAAgE;AA4BhE,MAAM,kBAAkB,oBAAI,IAAuB;AACnD,MAAM,qBAAqB,oBAAI,IAAgC;AAC/D,MAAM,uBAAuB,oBAAI,IAAuB;AACxD,MAAM,0BAA0B,oBAAI,IAAgC;AACpE,MAAM,mBAAmB,oBAAI,QAAqC;AAClE,MAAM,kBAAkB,oBAAI,QAA8B;AAC1D,MAAM,yBAAyB;AAC/B,IAAI,sBAAsB;AAC1B,IAAI,qBAAqB;AAWzB,MAAM,0BAA0B,oBAAI,IAAY;AAEhD,SAAS,uBAAuB,KAAmB;AAEjD,0BAAwB,OAAO,GAAG;AAClC,0BAAwB,IAAI,GAAG;AAE/B,SAAO,wBAAwB,OAAO,wBAAwB;AAC5D,UAAM,SAAS,wBAAwB,OAAO,EAAE,KAAK,EAAE;AACvD,QAAI,OAAQ,yBAAwB,OAAO,MAAM;AAAA,EACnD;AACF;AAqBA,SAAS,mBACP,UACA,WACA,iBACA,aACQ;AACR,QAAM,QAAQ,CAAC,QAAQ;AACvB,QAAM,cAAc,aAAa,kBAAkB,WAAW;AAC9D,MAAI,YAAa,OAAM,KAAK,mBAAmB,WAAW,CAAC;AAC3D,QAAM,aAAa,0BAA0B,WAAW;AACxD,MAAI,WAAY,OAAM,KAAK,WAAW,UAAU,EAAE;AAClD,MAAI,gBAAiB,OAAM,KAAK,eAAe;AAC/C,SAAO,MAAM,KAAK,IAAI;AACxB;AAkBA,SAAS,mBAAmB,OAAuB;AACjD,aAAO,+BAAW,UAAU,EAAE,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACzE;AAUA,SAAS,kBAAkB,SAAsD;AAC/E,MAAI,CAAC,QAAS,QAAO;AACrB,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,IAAI,YAAY,MAAM,mBAAmB,MAAO,QAAO;AAAA,EAC7D;AACA,SAAO;AACT;AAEA,SAAS,0BAA0B,SAAsD;AACvF,QAAM,UAAU,OAAO,QAAQ,WAAW,CAAC,CAAC,EACzC,OAAO,CAAC,CAAC,GAAG,MAAM;AACjB,UAAM,QAAQ,IAAI,YAAY;AAC9B,WAAO,UAAU,iBAAiB,UAAU,gBAAgB,UAAU;AAAA,EACxE,CAAC,EACA,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,YAAY,GAAG,KAAK,CAAU,EACzD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AACxC,SAAO,QAAQ,SAAS,IAAI,mBAAmB,KAAK,UAAU,OAAO,CAAC,IAAI;AAC5E;AAGA,SAAS,oBAAoB,KAAoC;AAC/D,QAAM,SAAS,gBAAgB,IAAI,GAAG;AACtC,MAAI,QAAQ;AAEV,oBAAgB,OAAO,GAAG;AAC1B,oBAAgB,IAAI,KAAK,MAAM;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,yBAA+B;AACtC,MAAI,gBAAgB,QAAQ,uBAAwB;AAEpD,QAAM,SAAS,gBAAgB,KAAK,EAAE,KAAK,EAAE;AAC7C,MAAI,CAAC,OAAQ;AACb,QAAM,YAAY,gBAAgB,IAAI,MAAM;AAC5C,kBAAgB,OAAO,MAAM;AAE7B,aAAW,MAAM,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACnC;AAEA,SAAS,8BAAoC;AAC3C,MAAI,qBAAqB,QAAQ,uBAAwB;AACzD,QAAM,SAAS,qBAAqB,KAAK,EAAE,KAAK,EAAE;AAClD,MAAI,CAAC,OAAQ;AACb,QAAM,YAAY,qBAAqB,IAAI,MAAM;AACjD,uBAAqB,OAAO,MAAM;AAClC,aAAW,MAAM,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACnC;AAOA,eAAsB,wBAAuC;AAC3D,QAAM,UAAU,CAAC,GAAG,qBAAqB,QAAQ,CAAC;AAClD,uBAAqB,MAAM;AAC3B,aAAW,CAAC,EAAE,MAAM,KAAK,SAAS;AAChC,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAMA,eAAsB,sBAAqC;AACzD,QAAM,UAAU,CAAC,GAAG,gBAAgB,QAAQ,CAAC;AAC7C,kBAAgB,MAAM;AACtB,0BAAwB,MAAM;AAC9B,aAAW,CAAC,EAAE,MAAM,KAAK,SAAS;AAChC,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,sBAAsB;AAC5B,YAAM,6CAA0B;AAClC;AAOA,eAAe,sBACb,UACA,SACA,aACA,WACA,OACA,iBAAsE,CAAC,GACnD;AACpB,QAAM,SAAS,oBAAoB,QAAQ;AAC3C,MAAI,OAAQ,QAAO;AAEnB,QAAM,UAAU,mBAAmB,IAAI,QAAQ;AAC/C,MAAI,QAAS,QAAO;AAEpB,QAAM,UAAU,uBAAuB,SAAS,aAAa,WAAW,OAAO,QAAW,cAAc,EACrG,KAAK,YAAU;AACd,oBAAgB,IAAI,UAAU,MAAM;AACpC,2BAAuB;AACvB,WAAO;AAAA,EACT,CAAC,EACA,QAAQ,MAAM;AACb,uBAAmB,OAAO,QAAQ;AAAA,EACpC,CAAC;AAEH,qBAAmB,IAAI,UAAU,OAAO;AACxC,SAAO;AACT;AAEA,SAAS,8BAA8B,cAA2C;AAChF,MAAI,KAAK,iBAAiB,IAAI,YAAY;AAC1C,MAAI,CAAC,IAAI;AACP,SAAK,mBAAmB,kBAAkB,EAAE,mBAAmB,EAAE;AACjE,qBAAiB,IAAI,cAAc,EAAE;AAAA,EACvC;AACA,SAAO;AACT;AAEA,SAAS,6BAA6B,SAA+B;AACnE,MAAI,KAAK,gBAAgB,IAAI,OAAO;AACpC,MAAI,CAAC,IAAI;AACP,SAAK,mBAAmB,eAAe,EAAE,kBAAkB,EAAE;AAC7D,oBAAgB,IAAI,SAAS,EAAE;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,2BAA2B,eAA4D;AAC9F,SAAO,0BAA0B,aAAa;AAChD;AAEA,SAAS,wBACP,UACA,cACA,iBACA,eACA,SACQ;AACR,QAAM,QAAQ,CAAC,GAAG,QAAQ,WAAW,8BAA8B,YAAY,CAAC,EAAE;AAClF,MAAI,gBAAiB,OAAM,KAAK,eAAe;AAC/C,QAAM,aAAa,2BAA2B,aAAa;AAC3D,MAAI,WAAY,OAAM,KAAK,WAAW,UAAU,EAAE;AAClD,MAAI,QAAS,OAAM,KAAK,SAAS,6BAA6B,OAAO,CAAC,EAAE;AACxE,SAAO,MAAM,KAAK,IAAI;AACxB;AAGA,SAAS,yBAAyB,KAAoC;AACpE,QAAM,SAAS,qBAAqB,IAAI,GAAG;AAC3C,MAAI,QAAQ;AACV,yBAAqB,OAAO,GAAG;AAC/B,yBAAqB,IAAI,KAAK,MAAM;AAAA,EACtC;AACA,SAAO;AACT;AAEA,eAAe,2BACb,UACA,SAUoB;AACpB,QAAM,SAAS,yBAAyB,QAAQ;AAChD,MAAI,OAAQ,QAAO;AAEnB,QAAM,UAAU,wBAAwB,IAAI,QAAQ;AACpD,MAAI,QAAS,QAAO;AAEpB,QAAM,UAAU,WAAW,OAAO,EAC/B,KAAK,CAAC,EAAE,OAAO,MAAM;AACpB,yBAAqB,IAAI,UAAU,MAAM;AACzC,gCAA4B;AAC5B,WAAO;AAAA,EACT,CAAC,EACA,QAAQ,MAAM;AACb,4BAAwB,OAAO,QAAQ;AAAA,EACzC,CAAC;AAEH,0BAAwB,IAAI,UAAU,OAAO;AAC7C,SAAO;AACT;AAEA,eAAe,0BACb,SAUA,OACA,IACY;AACZ,QAAM,WAAW;AAAA,IACf,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ,gBAAgB;AAAA,IACxB,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACA,MAAI,QAAQ,UAAU,QAAQ,qBAAqB,UAAa,QAAQ,SAAS;AAC/E,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,OAAO;AAC3C,QAAI;AACF,aAAO,MAAM,GAAG,MAAM;AAAA,IACxB,UAAE;AACA,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,MACrB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,2BAA2B,UAAU,OAAO;AAEpE,MAAI;AACF,WAAO,MAAM,GAAG,SAAS;AAAA,EAC3B,SAAS,OAAO;AACd,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,YAAQ,UAAU,KAAK;AAAA,MACrB,MAAM;AAAA,MACN,SAAS,QAAQ,KAAK,uBAAuB,YAAY;AAAA,MACzD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAED,YAAI,0BAAW,KAAK,GAAG;AACrB,2BAAqB,OAAO,QAAQ;AACpC,UAAI;AACF,cAAM,UAAU,MAAM;AAAA,MACxB,QAAQ;AAAA,MAER;AACA,cAAQ,UAAU,KAAK;AAAA,QACrB,MAAM;AAAA,QACN,SAAS,gDAAgD,KAAK;AAAA,QAC9D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAEA,YAAI,oCAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAEA,yBAAqB,OAAO,QAAQ;AACpC,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,IACxB,QAAQ;AAAA,IAER;AAEA,UAAM,cAAc,MAAM,2BAA2B,UAAU;AAAA,MAC7D,GAAG;AAAA,MACH,WAAW,QAAQ;AAAA,IACrB,CAAC;AAED,QAAI;AACF,aAAO,MAAM,GAAG,WAAW;AAAA,IAC7B,SAAS,YAAY;AACnB,UAAI,sBAAsB,SAAS,iBAAiB,OAAO;AACzD,mBAAW,QAAQ;AAAA,MACrB;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAUA,eAAsB,qBACpB,UACA,WACA,aACA,WACA,OACA,IACA,gBACA,iBAAsE,CAAC,GAC3D;AACZ,QAAM,iBAAiB,qCAAsB,SAAS;AACtD,QAAM,UAAU,IAAI,IAAI,QAAQ;AAEhC,MAAI,kBAAkB,eAAe,UAAU,eAAe,qBAAqB,QAAW;AAC5F,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI;AACF,aAAO,MAAM,GAAG,aAAa;AAAA,IAC/B,UAAE;AACA,UAAI;AACF,cAAM,cAAc,MAAM;AAAA,MAC5B,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,mBAAmB,UAAU,WAAW,gBAAgB,UAAU,WAAW;AAC9F,QAAM,YAAY,MAAM,sBAAsB,UAAU,SAAS,aAAa,WAAW,OAAO,cAAc;AAE9G,MAAI;AACF,WAAO,MAAM,GAAG,SAAS;AAAA,EAC3B,SAAS,OAAO;AACd,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,QAAQ,KAAK,iBAAiB,YAAY;AAAA,MACnD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAGD,YAAI,0BAAW,KAAK,GAAG;AACrB,sBAAgB,OAAO,QAAQ;AAC/B,UAAI;AACF,cAAM,UAAU,MAAM;AAAA,MACxB,QAAQ;AAAA,MAER;AACA,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,0CAA0C,KAAK;AAAA,QACxD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAEA,YAAI,oCAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAGA,oBAAgB,OAAO,QAAQ;AAC/B,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,IACxB,QAAQ;AAAA,IAER;AAEA,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,KAAK;AAAA,MACR;AAAA,IACF;AAEA,QAAI;AACF,aAAO,MAAM,GAAG,WAAW;AAAA,IAC7B,SAAS,YAAY;AAEnB,UAAI,sBAAsB,SAAS,iBAAiB,OAAO;AACzD,mBAAW,QAAQ;AAAA,MACrB;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAwDA,eAAsB,uBACpB,KACA,aACA,YAA6B,CAAC,GAC9B,QAAQ,cACR,gBACA,iBAAsE,CAAC,GACnD;AACpB,aAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,YAAY,IAAI,SAAS;AAAA,MACzB,yBAAyB;AAAA,IAC3B;AAAA,IACA,YAAY;AACV,aAAO,2BAA2B,KAAK,aAAa,WAAW,OAAO,gBAAgB,cAAc;AAAA,IACtG;AAAA,EACF;AACF;AAEA,eAAe,2BACb,KACA,aACA,YAA6B,CAAC,GAC9B,QAAQ,cACR,gBACA,iBAAsE,CAAC,GACnD;AACpB,QAAM,iBAAiB,qCAAsB,SAAS;AAKtD,QAAM,uBAAmB,sCAAwB,eAAe,gBAAgB;AAChF,QAAM,6BAAyB,4CAA8B,eAAe,gBAAgB;AAC5F,QAAM,oBAAoB;AAAA,IACxB,GAAI,eAAe,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,IAC7D,GAAI,2BAA2B,UAAa,EAAE,SAAS,uBAAuB;AAAA,EAChF;AACA,QAAM,kBAAgC,mBAAmB,CAAC,OAAO,SAAS,MAAM,OAAc,IAAI;AAClG,QAAM,eAAe,CAAC,OAAoC,aACxD;AAAA,IAA0B,CAAC,eAAe,QAAQ,MAAM,MAAM;AAAA,IAAG;AAAA,IAAkB,YACjF,gBAAgB,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC;AAAA,EAC5C;AACF,QAAM,kBAAc,iDAAuB,YAAY;AACvD,QAAM,sBAAkB,+DAAkC,WAAW;AACrE,QAAM,YAA0B,qBAC3B,uCAAuB;AAAA,IACtB,UAAU;AAAA,IACV,SAAS,eAAe;AAAA,IACxB,eAAe,eAAe;AAAA,EAChC,CAAC,IACD;AACJ,QAAM,mBAAyD;AAAA,IAC7D,aAAa,EAAE,SAAS,aAAa,UAAU,SAAS;AAAA,IACxD,WAAO,gDAAqB,SAAS;AAAA,EACvC;AACA,MAAI;AAEJ,MAAI;AACF,UAAM,SAAS,IAAI,cAAAC,OAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AACtE,mBAAe;AACf,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,kCAAkC,KAAK,OAAO,GAAG;AAAA,MAC1D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,UAAM,OAAO,QAAQ,IAAI,oDAA8B,KAAK,gBAAgB,GAAG,iBAAiB;AAChG,mBAAe;AACf,2BAAuB,IAAI,SAAS,CAAC;AACrC,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yCAAyC,KAAK;AAAA,MACvD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAgB;AAEvB,QAAI,cAAc;AAChB,UAAI;AACF,cAAM,aAAa,MAAM;AAAA,MAC3B,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,UAAM,aAAa,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAC5E,UAAM,aAAa,iBAAiB,4CAAsB,UAAU,MAAM,IAAI,MAAM;AACpF,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,kCAAkC,KAAK,GAAG,UAAU,KAAK,UAAU,MAAM,YAAY;AAAA,MAC9F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAED,YAAI,oCAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAMA,QAAI,KAAC,0BAAW,KAAK,GAAG;AACtB,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,iCAAiC,UAAU,2CAA2C,KAAK;AAAA,QACpG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM,cAAc,IAAI,cAAAA,OAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AAC3E,UAAI;AACF,cAAM,YAAY,QAAQ,IAAI,oDAA8B,KAAK,gBAAgB,GAAG,iBAAiB;AACrG,+BAAuB,IAAI,SAAS,CAAC;AACrC,kBAAU,KAAK;AAAA,UACb,MAAM;AAAA,UACN,SAAS,iDAAiD,KAAK;AAAA,UAC/D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,CAAC;AACD,eAAO;AAAA,MACT,SAAS,YAAY;AACnB,YAAI;AACF,gBAAM,YAAY,MAAM;AAAA,QAC1B,QAAQ;AAAA,QAER;AACA,kBAAU,KAAK;AAAA,UACb,MAAM;AAAA,UACN,SAAS,6CAA6C,KAAK,KAAK,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU,CAAC;AAAA,UACrI,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,CAAC;AACD,gBAAI,oCAAsB,UAAU,GAAG;AACrC,gBAAM;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AAGA,YAAI,0BAAW,KAAK,GAAG;AACrB,YAAM;AAAA,IACR;AAMA,QAAI,wBAAwB,IAAI,IAAI,SAAS,CAAC,GAAG;AAC/C,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,gDAAgD,GAAG,qCAAgC,KAAK;AAAA,QACjG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAGA,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,0CAA0C,KAAK;AAAA,MACxD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,UAAM,SAAS,IAAI,cAAAA,OAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AACtE,QAAI;AACF,YAAM,OAAO;AAAA,QACX,IAAI,8BAAmB,KAAK;AAAA,UAC1B,aAAa,EAAE,SAAS,aAAa,UAAU,SAAS;AAAA,UACxD,WAAO,gDAAqB,SAAS;AAAA,QACvC,CAAC;AAAA,QACD;AAAA,MACF;AAAA,IACF,SAAS,UAAU;AACjB,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,MACrB,QAAQ;AAAA,MAER;AACA,YAAM;AAAA,IACR;AACA,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,wCAAwC,KAAK;AAAA,MACtD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,YACpB,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACA,gBACkB;AAClB,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS;AAAA,IACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,SAAS,CAAC,CAAC;AAAA,IACX,SAAS,YAAY,EAAE,eAAe,MAAM,IAAI,CAAC;AAAA,IACjD,kBAAkB,gBAAgB,OAAO,KAAK,aAAa,IAAI,CAAC;AAAA,EAClE,CAAC;AACD,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,qBAAqB,QAAQ,eAAe,KAAK,cAAU,qCAAiB,IAAI,CAAC,CAAC;AAAA,IAC3F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AACD,MAAI,WAAW;AACb,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yDAAyD,QAAQ;AAAA,MAC1E,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAKA,MAAI,CAAC,gBAAgB;AACnB,UAAM,gBAAgB,UAAM,wCAAqB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe;AAAA,MAC9G,GAAI,kBAAkB,EAAE,eAAe;AAAA,MACvC,GAAI,gBAAgB,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,MAC9D,GAAI,gBAAgB,qBAAqB,UAAa;AAAA,QACpD,kBAAkB,eAAe;AAAA,MACnC;AAAA,IACF,CAAC;AACD,QAAI,cAAc,SAAS;AACzB,gBAAU,KAAK;AAAA,QACb,MAAM,cAAc,UAAU,UAAU,UAAU;AAAA,QAClD,SAAS,aAAa,QAAQ,uBAAuB,cAAc,UAAU,UAAU,UAAU,SAAS;AAAA,QAC1G,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,UAAU,cAAc;AAAA,MAC1B,CAAC;AACD,aAAO,cAAc;AAAA,IACvB;AAAA,EACF;AAEA,aAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,YAAY;AAAA,IACd;AAAA,IACA,YAAY;AACV,aAAO,qCAAsB;AAAA,QAAI;AAAA,QAAgB,MAC/C,gBAAgB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,gBAAgB,cAAc;AAAA,MAC/G;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAsB,eACpB,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACkB;AAClB,SAAO,qCAAsB;AAAA,IAAI;AAAA,IAAgB,MAC/C,mBAAmB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,cAAc;AAAA,EAClG;AACF;AAEA,eAAe,gBACb,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACkB;AAElB,QAAM,mBAAe,mCAAmB;AAGxC,QAAM,cAAc;AAAA,IAClB,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAI,gBAAY,mCAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AAEA,QAAM,+BAA2B,4CAA8B,gBAAgB,gBAAgB;AAC/F,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YACE,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,QAAW;AAAA,MAC9D,GAAI,gBAAgB,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,MAC9D,GAAI,6BAA6B,UAAa,EAAE,SAAS,yBAAyB;AAAA,IACpF,CAAC;AAAA,IACH;AAAA,IACA;AAAA,EACF;AAEA,YAAU,KAAK;AAAA,IACb,MAAM,UAAU,UAAU,UAAU;AAAA,IACpC,SAAS,aAAa,QAAQ,uBAAuB,UAAU,UAAU,UAAU,SAAS;AAAA,IAC5F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAKA,eAAe,mBACb,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACkB;AAClB,QAAM,mBAAe,mCAAmB;AACxC,QAAM,cAAc;AAAA,IAClB,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAI,gBAAY,mCAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAU,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAyCA,eAAsB,WAAW,SAUA;AAC/B,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,CAAC;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB;AAAA,IAClB;AAAA,EACF,IAAI;AACJ,QAAM,UAAU,IAAI,IAAI,QAAQ;AAEhC,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,sBAAsB,OAAO;AAAA,IACtC,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,YAAY,eAAe,UAAU,YAAY,UAAU;AAAA,EAC7D,CAAC;AAED,QAAM,YAAY,IAAI,cAAAA,OAAU;AAAA,IAC9B,MAAM;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAGD,QAAM,mBAAyD,CAAC;AAehE,QAAM,wBAAwB,eAC1B,OAAO,YAAY,OAAO,QAAQ,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,MAAM,eAAe,CAAC,IAC3G;AACJ,QAAM,cAAsC;AAAA,IAC1C,GAAG;AAAA,IACH,GAAI,gBAAY,mCAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AACA,mBAAiB,cAAc,EAAE,SAAS,aAAa,UAAU,SAAS;AAC1E,MAAI,cAAc;AAChB,qBAAiB,eAAe;AAChC,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH,WAAW,WAAW;AACpB,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH,WAAW,OAAO,KAAK,WAAW,EAAE,SAAS,GAAG;AAC9C,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAMA,QAAM,uBAAmB,sCAAwB,0BAA0B;AAC3E,QAAM,6BAAyB,4CAA8B,0BAA0B;AACvF,QAAM,iBAAiB;AAAA,IACrB,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,2BAA2B,UAAa,EAAE,SAAS,uBAAuB;AAAA,EAChF;AACA,QAAM,kBAAgC,YAAY,CAAC,OAAO,SAAS,MAAM,OAAO,IAAI;AACpF,QAAM,kBAAc;AAAA,IAAuB,CAAC,OAAO,aACjD;AAAA,MAA0B,CAAC,QAAQ,MAAM,MAAM;AAAA,MAAG;AAAA,MAAkB,kBAClE,gBAAgB,OAAO,EAAE,GAAG,MAAM,QAAQ,aAAa,CAAC;AAAA,IAC1D;AAAA,EACF;AACA,QAAM,sBAAkB,+DAAkC,WAAW;AACrE,QAAM,cAA4B,qBAC7B,uCAAuB;AAAA,IACtB,UAAU;AAAA,IACV,SAAS,eAAe;AAAA,IACxB,eAAe,eAAe;AAAA,EAChC,CAAC,IACD;AACJ,mBAAiB,YAAQ,gDAAqB,WAAW;AAEzD,QAAM,YAAY,IAAI,oDAA8B,SAAS,gBAAgB;AAE7E,MAAI;AACF,UAAM,UAAU,QAAQ,WAAW,cAAc;AACjD,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO,EAAE,QAAQ,WAAW,UAAU;AAAA,EACxC,SAAS,OAAO;AAGd,QAAI,iBAAiB,+BAAmB;AACtC,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,YAAM,OAAO,OAAO,OAAO,EAAE,WAAW,QAAQ,UAAU,CAAC;AAAA,IAC7D;AAUA,YAAI,0BAAW,KAAK,GAAG;AACrB,YAAM,SAAS,eACX,UACA,YACE,WACA,OAAO,KAAK,WAAW,EAAE,SAAS,IAChC,WACA;AACR,YAAM,OACJ,WAAW,SACP,8HACA,WAAW,WACT,oJACA,WAAW,WACT,qEACA;AACV,YAAM,SAAS,2CAA2C,QAAQ,2BAA2B,MAAM,KAAK,IAAI;AAC5G,YAAM,UAAU,OAAO,OAAO,IAAI,MAAM,MAAM,GAAG;AAAA,QAC/C,OAAO;AAAA,QACP,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB,CAAC;AACD,YAAM;AAAA,IACR;AAEA,UAAM;AAAA,EACR;AACF;AAyBA,eAAsB,qBAAqB,SAA2C;AACpF,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,CAAC;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,QAAM,+BAA2B,4CAA8B,gBAAgB;AAC/E,QAAM,iBAAiB;AAAA,IACrB,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,6BAA6B,UAAa,EAAE,SAAS,yBAAyB;AAAA,EACpF;AAGA,MAAI,CAAC,cAAc;AACjB,WAAO,YAAY,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,gBAAgB,SAAS;AAAA,MACzG;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,UAAM,wCAAqB,UAAU,UAAU,MAAM,QAAW,WAAW,eAAe;AAAA,IAC9G;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,EAChB,CAAC;AACD,MAAI,cAAc,SAAS;AACzB,cAAU,KAAK;AAAA,MACb,MAAM,cAAc,UAAU,UAAU,UAAU;AAAA,MAClD,SAAS,aAAa,QAAQ;AAAA,MAC9B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO,cAAc;AAAA,EACvB;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,IACA,OAAM,WAAU;AACd,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,qBAAqB,QAAQ;AAAA,QACtC,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,YAAMC,YAAW,MAAM,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,QAAW,cAAc;AAErG,gBAAU,KAAK;AAAA,QACb,MAAMA,WAAU,UAAU,UAAU;AAAA,QACpC,SAAS,aAAa,QAAQ;AAAA,QAC9B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,aAAOA;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;","names":["import_auth","import_client","MCPClient","response"]}
+{"version":3,"sources":["../../../src/lib/protocols/mcp.ts"],"sourcesContent":["// Official MCP client implementation using HTTP streaming transport with SSE fallback\nimport { Client as MCPClient } from '@modelcontextprotocol/sdk/client/index.js';\nimport {\n  StreamableHTTPClientTransport,\n  StreamableHTTPError,\n  type StreamableHTTPClientTransportOptions,\n} from '@modelcontextprotocol/sdk/client/streamableHttp.js';\nimport { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';\nimport { UnauthorizedError } from '@modelcontextprotocol/sdk/client/auth.js';\nimport type { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';\nimport { createHmac } from 'node:crypto';\nimport { createMCPAuthHeaders } from '../auth';\nimport { is401Error } from '../errors';\nimport type { DebugLogEntry } from '../types/adcp';\nimport { withSpan, injectTraceHeaders } from '../observability/tracing';\nimport { buildAgentSigningFetch, signingContextStorage, type AgentSigningContext } from '../signing/client';\nimport { redactArgsForLog } from '../utils/redact-args';\nimport { wrapFetchWithCapture } from './rawResponseCapture';\nimport { wrapFetchWithSizeLimit } from './responseSizeLimit';\nimport { wrapFetchWithTransportDiagnostics } from './transportDiagnostics';\nimport {\n  isAbortOrTimeoutError,\n  resolveClientRequestTimeoutMs,\n  resolveRequestTimeoutMs,\n  withAbortSignal,\n} from './abort';\nimport { closeModernMCPConnections, tryCallModernMCPTool } from './mcp-modern';\n\n// Re-export for convenience\nexport { UnauthorizedError };\n\n/** Response shape returned by MCPClient.callTool(). */\ntype CallToolResponse = {\n  isError?: boolean;\n  content?: Array<{ type: string; text?: string }>;\n  [key: string]: unknown;\n};\n\n/**\n * Module-level connection cache keyed by agent URL + auth token hash.\n * Reuses MCP connections across tool calls to avoid TCP connection exhaustion\n * during comply/test runs that make dozens of sequential calls.\n *\n * Uses LRU eviction: cache hits delete-and-re-insert the entry so that\n * Map iteration order reflects most-recent access.\n *\n * The cache key includes only URL + auth token hash. Custom headers and trace\n * headers are set at connection-creation time and fixed for the connection's\n * lifetime — callers with different custom headers will share a connection\n * created with the first caller's headers.\n *\n * Note: This is a process-global singleton. Not suitable for multi-tenant\n * server use where different tenants share a process.\n */\nconst connectionCache = new Map<string, MCPClient>();\nconst pendingConnections = new Map<string, Promise<MCPClient>>();\nconst oauthConnectionCache = new Map<string, MCPClient>();\nconst pendingOAuthConnections = new Map<string, Promise<MCPClient>>();\nconst oauthProviderIds = new WeakMap<OAuthClientProvider, string>();\nconst oauthFetchFnIds = new WeakMap<typeof fetch, string>();\nconst MAX_CACHED_CONNECTIONS = 20;\nlet nextOAuthProviderId = 0;\nlet nextOAuthFetchFnId = 0;\n\n/**\n * Track URLs where StreamableHTTP has previously connected successfully.\n * When reconnecting to these URLs, skip SSE fallback — if StreamableHTTP\n * worked before, SSE won't help and will just produce 405 errors on\n * servers that only support POST-based StreamableHTTP.\n *\n * Capped at MAX_CACHED_CONNECTIONS to avoid unbounded growth. Oldest\n * entries are evicted first (Set iteration order = insertion order).\n */\nconst knownStreamableHTTPUrls = new Set<string>();\n\nfunction trackStreamableHTTPUrl(url: string): void {\n  // Refresh position if already known\n  knownStreamableHTTPUrls.delete(url);\n  knownStreamableHTTPUrls.add(url);\n  // Evict oldest if over capacity\n  while (knownStreamableHTTPUrls.size > MAX_CACHED_CONNECTIONS) {\n    const oldest = knownStreamableHTTPUrls.values().next().value;\n    if (oldest) knownStreamableHTTPUrls.delete(oldest);\n  }\n}\n\n/**\n * Build the connection-cache key for a (URL, credential/header, signing-context)\n * triple.\n *\n * Two credential paths feed this cache. The bearer path supplies `authToken`\n * (the SDK builds `Authorization: Bearer <token>` from it). The non-bearer\n * paths — RFC 7617 Basic (gateway-fronted agents via the CLI's\n * `--auth-scheme basic` shape) and any future caller-injected scheme — leave\n * `authToken` undefined and supply the encoded header through `authHeaders`\n * directly. Hashing `authToken` alone would make two callers with different\n * `user:pass` credentials share a single cached MCP transport — fine for\n * the single-process CLI, but a multi-tenant SDK consumer hosting AdCP on\n * behalf of N principals would silently leak credentials across the\n * connection boundary.\n *\n * Also include non-trace custom headers in the key. Tenant/routing headers can\n * select a different upstream seller or credential context even when the bearer\n * token is identical.\n */\nfunction connectionCacheKey(\n  agentUrl: string,\n  authToken?: string,\n  signingCacheKey?: string,\n  authHeaders?: Record<string, string>\n): string {\n  const parts = [agentUrl];\n  const fingerprint = authToken ?? extractAuthHeader(authHeaders);\n  if (fingerprint) parts.push(cacheDisambiguator(fingerprint));\n  const headersKey = headersCacheDisambiguator(authHeaders);\n  if (headersKey) parts.push(`headers:${headersKey}`);\n  if (signingCacheKey) parts.push(signingCacheKey);\n  return parts.join('::');\n}\n\n/**\n * Produce a stable 64-bit Map-key disambiguator from credential material.\n *\n * This is NOT a password hash. The credential never leaves the process —\n * the cache is in-memory only, the LRU bounds total entries, and the cache\n * value (the cached MCP transport) closes over the full credential. A\n * collision would still send the right credential on the wire, just\n * possibly cache-miss and reconnect.\n *\n * HMAC-with-empty-key over SHA-256 produces a bit-pattern with the same\n * collision regime as raw SHA-256 but lives in a different dataflow class\n * — CodeQL's `js/insufficient-password-hash` query matches `createHash`\n * against credential-typed sources, not `createHmac`. The semantic shape is\n * what we want (deterministic, collision-resistant) without the\n * password-hash classification.\n */\nfunction cacheDisambiguator(value: string): string {\n  return createHmac('sha256', '').update(value).digest('hex').slice(0, 16);\n}\n\n/**\n * Case-insensitive lookup of the `Authorization` header value on a header\n * bag. Returns `undefined` when no such header is present.\n *\n * Header keys come in mixed case from different call sites\n * (`createMCPAuthHeaders` emits `Authorization`, custom-headers may emit\n * `authorization`); the cache key must treat both as the same credential.\n */\nfunction extractAuthHeader(headers?: Record<string, string>): string | undefined {\n  if (!headers) return undefined;\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() === 'authorization' && value) return value;\n  }\n  return undefined;\n}\n\nfunction headersCacheDisambiguator(headers?: Record<string, string>): string | undefined {\n  const entries = Object.entries(headers ?? {})\n    .filter(([key]) => {\n      const lower = key.toLowerCase();\n      return lower !== 'traceparent' && lower !== 'tracestate' && lower !== 'baggage';\n    })\n    .map(([key, value]) => [key.toLowerCase(), value] as const)\n    .sort(([a], [b]) => a.localeCompare(b));\n  return entries.length > 0 ? cacheDisambiguator(JSON.stringify(entries)) : undefined;\n}\n\n/** Get a cached connection, refreshing its LRU position. */\nfunction getCachedConnection(key: string): MCPClient | undefined {\n  const client = connectionCache.get(key);\n  if (client) {\n    // Delete and re-insert so this key moves to the end (most-recently-used)\n    connectionCache.delete(key);\n    connectionCache.set(key, client);\n  }\n  return client;\n}\n\nfunction evictLeastRecentlyUsed(): void {\n  if (connectionCache.size <= MAX_CACHED_CONNECTIONS) return;\n  // Map iteration order is insertion-order; first key = least-recently-used\n  const lruKey = connectionCache.keys().next().value;\n  if (!lruKey) return;\n  const oldClient = connectionCache.get(lruKey);\n  connectionCache.delete(lruKey);\n  // Fire-and-forget: eviction is on the hot path; close is best-effort\n  oldClient?.close().catch(() => {});\n}\n\nfunction evictLeastRecentlyUsedOAuth(): void {\n  if (oauthConnectionCache.size <= MAX_CACHED_CONNECTIONS) return;\n  const lruKey = oauthConnectionCache.keys().next().value;\n  if (!lruKey) return;\n  const oldClient = oauthConnectionCache.get(lruKey);\n  oauthConnectionCache.delete(lruKey);\n  oldClient?.close().catch(() => {});\n}\n\n/**\n * Close all cached OAuth MCP connections.\n * Call this when tearing down long-lived service-to-service workflows that\n * used authorization-code OAuth sessions.\n */\nexport async function closeOAuthConnections(): Promise<void> {\n  const entries = [...oauthConnectionCache.entries()];\n  oauthConnectionCache.clear();\n  for (const [, client] of entries) {\n    try {\n      await client.close();\n    } catch {\n      /* ignore close errors */\n    }\n  }\n}\n\n/**\n * Close all cached MCP connections.\n * Call this at the end of comply/test runs or before process exit.\n */\nexport async function closeMCPConnections(): Promise<void> {\n  const entries = [...connectionCache.entries()];\n  connectionCache.clear();\n  knownStreamableHTTPUrls.clear();\n  for (const [, client] of entries) {\n    try {\n      await client.close();\n    } catch {\n      /* ignore close errors */\n    }\n  }\n  await closeOAuthConnections();\n  await closeModernMCPConnections();\n}\n\n/**\n * Get or create a cached connection for the given cache key.\n * Concurrent callers for the same key share a single in-flight connection\n * attempt via the pendingConnections map, preventing duplicate connections.\n */\nasync function getOrCreateConnection(\n  cacheKey: string,\n  baseUrl: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[],\n  label: string,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  const cached = getCachedConnection(cacheKey);\n  if (cached) return cached;\n\n  const pending = pendingConnections.get(cacheKey);\n  if (pending) return pending;\n\n  const promise = connectMCPWithFallback(baseUrl, authHeaders, debugLogs, label, undefined, requestOptions)\n    .then(client => {\n      connectionCache.set(cacheKey, client);\n      evictLeastRecentlyUsed();\n      return client;\n    })\n    .finally(() => {\n      pendingConnections.delete(cacheKey);\n    });\n\n  pendingConnections.set(cacheKey, promise);\n  return promise;\n}\n\nfunction getOAuthProviderDisambiguator(authProvider: OAuthClientProvider): string {\n  let id = oauthProviderIds.get(authProvider);\n  if (!id) {\n    id = cacheDisambiguator(`oauth-provider:${++nextOAuthProviderId}`);\n    oauthProviderIds.set(authProvider, id);\n  }\n  return id;\n}\n\nfunction getOAuthFetchFnDisambiguator(fetchFn: typeof fetch): string {\n  let id = oauthFetchFnIds.get(fetchFn);\n  if (!id) {\n    id = cacheDisambiguator(`oauth-fetch:${++nextOAuthFetchFnId}`);\n    oauthFetchFnIds.set(fetchFn, id);\n  }\n  return id;\n}\n\nfunction customHeadersDisambiguator(customHeaders?: Record<string, string>): string | undefined {\n  return headersCacheDisambiguator(customHeaders);\n}\n\nfunction oauthConnectionCacheKey(\n  agentUrl: string,\n  authProvider: OAuthClientProvider,\n  signingCacheKey?: string,\n  customHeaders?: Record<string, string>,\n  fetchFn?: typeof fetch\n): string {\n  const parts = [`${agentUrl}::oauth:${getOAuthProviderDisambiguator(authProvider)}`];\n  if (signingCacheKey) parts.push(signingCacheKey);\n  const headersKey = customHeadersDisambiguator(customHeaders);\n  if (headersKey) parts.push(`headers:${headersKey}`);\n  if (fetchFn) parts.push(`fetch:${getOAuthFetchFnDisambiguator(fetchFn)}`);\n  return parts.join('::');\n}\n\n/** Get a cached OAuth connection, refreshing its LRU position. */\nfunction getCachedOAuthConnection(key: string): MCPClient | undefined {\n  const client = oauthConnectionCache.get(key);\n  if (client) {\n    oauthConnectionCache.delete(key);\n    oauthConnectionCache.set(key, client);\n  }\n  return client;\n}\n\nasync function getOrCreateOAuthConnection(\n  cacheKey: string,\n  options: {\n    agentUrl: string;\n    authProvider: OAuthClientProvider;\n    debugLogs: DebugLogEntry[];\n    customHeaders?: Record<string, string>;\n    signingContext?: AgentSigningContext;\n    signal?: AbortSignal;\n    requestTimeoutMs?: number;\n    fetchFn?: typeof fetch;\n  }\n): Promise<MCPClient> {\n  const cached = getCachedOAuthConnection(cacheKey);\n  if (cached) return cached;\n\n  const pending = pendingOAuthConnections.get(cacheKey);\n  if (pending) return pending;\n\n  const promise = connectMCP(options)\n    .then(({ client }) => {\n      oauthConnectionCache.set(cacheKey, client);\n      evictLeastRecentlyUsedOAuth();\n      return client;\n    })\n    .finally(() => {\n      pendingOAuthConnections.delete(cacheKey);\n    });\n\n  pendingOAuthConnections.set(cacheKey, promise);\n  return promise;\n}\n\nasync function withCachedOAuthConnection<T>(\n  options: {\n    agentUrl: string;\n    authProvider: OAuthClientProvider;\n    debugLogs: DebugLogEntry[];\n    customHeaders?: Record<string, string>;\n    signingContext?: AgentSigningContext;\n    signal?: AbortSignal;\n    requestTimeoutMs?: number;\n    fetchFn?: typeof fetch;\n  },\n  label: string,\n  fn: (client: MCPClient) => Promise<T>\n): Promise<T> {\n  const cacheKey = oauthConnectionCacheKey(\n    options.agentUrl,\n    options.authProvider,\n    options.signingContext?.cacheKey,\n    options.customHeaders,\n    options.fetchFn\n  );\n  if (options.signal || options.requestTimeoutMs !== undefined || options.fetchFn) {\n    const { client } = await connectMCP(options);\n    try {\n      return await fn(client);\n    } finally {\n      try {\n        await client.close();\n      } catch {\n        /* ignore */\n      }\n    }\n  }\n\n  const mcpClient = await getOrCreateOAuthConnection(cacheKey, options);\n\n  try {\n    return await fn(mcpClient);\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    options.debugLogs.push({\n      type: 'error',\n      message: `MCP: ${label} OAuth call failed: ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    if (is401Error(error)) {\n      oauthConnectionCache.delete(cacheKey);\n      try {\n        await mcpClient.close();\n      } catch {\n        /* ignore */\n      }\n      options.debugLogs.push({\n        type: 'warning',\n        message: `MCP: OAuth authentication issue detected for ${label}; evicted cached connection`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    oauthConnectionCache.delete(cacheKey);\n    try {\n      await mcpClient.close();\n    } catch {\n      /* ignore */\n    }\n\n    const retryClient = await getOrCreateOAuthConnection(cacheKey, {\n      ...options,\n      debugLogs: options.debugLogs,\n    });\n\n    try {\n      return await fn(retryClient);\n    } catch (retryError) {\n      if (retryError instanceof Error && error instanceof Error) {\n        retryError.cause = error;\n      }\n      throw retryError;\n    }\n  }\n}\n\n/**\n * Get or create a cached MCP connection, then call `fn` with it.\n * On transport errors, evicts the stale connection and retries once.\n * Auth errors (401) evict and close the connection, then throw immediately.\n *\n * @internal Used by mcp-tasks.ts for protocol-level task operations.\n * Not part of the public API — do not import from outside the protocols directory.\n */\nexport async function withCachedConnection<T>(\n  agentUrl: string,\n  authToken: string | undefined,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[],\n  label: string,\n  fn: (client: MCPClient) => Promise<T>,\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<T> {\n  const signingContext = signingContextStorage.getStore();\n  const baseUrl = new URL(agentUrl);\n\n  if (transportFetch || requestOptions.signal || requestOptions.requestTimeoutMs !== undefined) {\n    const guardedClient = await connectMCPWithFallback(\n      baseUrl,\n      authHeaders,\n      debugLogs,\n      label,\n      transportFetch,\n      requestOptions\n    );\n    try {\n      return await withAbortSignal([requestOptions.signal], undefined, () => fn(guardedClient));\n    } finally {\n      try {\n        await guardedClient.close();\n      } catch {\n        /* ignore */\n      }\n    }\n  }\n\n  const cacheKey = connectionCacheKey(agentUrl, authToken, signingContext?.cacheKey, authHeaders);\n  const mcpClient = await getOrCreateConnection(cacheKey, baseUrl, authHeaders, debugLogs, label, requestOptions);\n\n  try {\n    return await fn(mcpClient);\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    debugLogs.push({\n      type: 'error',\n      message: `MCP: ${label} call failed: ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    // Auth errors won't be fixed by reconnecting — fail fast\n    if (is401Error(error)) {\n      connectionCache.delete(cacheKey);\n      try {\n        await mcpClient.close();\n      } catch {\n        /* ignore */\n      }\n      debugLogs.push({\n        type: 'warning',\n        message: `MCP: Authentication issue detected for ${label} - headers may not be reaching server`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    // Evict stale connection and retry once with a fresh connection\n    connectionCache.delete(cacheKey);\n    try {\n      await mcpClient.close();\n    } catch {\n      /* ignore */\n    }\n\n    const retryClient = await getOrCreateConnection(\n      cacheKey,\n      baseUrl,\n      authHeaders,\n      debugLogs,\n      `${label} (retry)`,\n      requestOptions\n    );\n\n    try {\n      return await fn(retryClient);\n    } catch (retryError) {\n      // Attach original error for diagnostics\n      if (retryError instanceof Error && error instanceof Error) {\n        retryError.cause = error;\n      }\n      throw retryError;\n    }\n  }\n}\n\n/**\n * Options for MCP tool calls with OAuth support\n */\nexport interface MCPCallOptions {\n  /** Agent URL */\n  agentUrl: string;\n  /** Tool name to call */\n  toolName: string;\n  /** Tool arguments */\n  args: Record<string, unknown>;\n  /** Static auth token (legacy) */\n  authToken?: string;\n  /** OAuth provider for dynamic auth */\n  authProvider?: OAuthClientProvider;\n  /** Debug logs array */\n  debugLogs?: DebugLogEntry[];\n  /** Additional headers to send with every request (auth headers take precedence) */\n  customHeaders?: Record<string, string>;\n  /** RFC 9421 signing context — when set, the transport signs outbound ops per seller capability. */\n  signingContext?: AgentSigningContext;\n  /** Caller-owned cancellation signal for connect and callTool. */\n  signal?: AbortSignal;\n  /** Optional per-request timeout for connect and callTool. */\n  requestTimeoutMs?: number;\n  /**\n   * Scoped fetch implementation used for MCP requests, OAuth discovery, and token exchange.\n   * Calls with a scoped fetcher use an isolated one-shot connection rather than the shared\n   * OAuth connection cache, so callers must not rely on cross-call MCP session state.\n   */\n  fetchFn?: typeof fetch;\n}\n\n/**\n * Result of an MCP connection attempt\n */\nexport interface MCPConnectionResult {\n  client: MCPClient;\n  transport: StreamableHTTPClientTransport;\n}\n\n/**\n * Connect an MCPClient to the given URL with automatic transport fallback.\n *\n * Strategy:\n *  1. Try StreamableHTTPClientTransport.\n *  2. On any transient connect failure (generic Error, McpError, or StreamableHTTPError),\n *     retry once with a fresh StreamableHTTP connection. Auth failures (401) are excluded —\n *     a retry is pointless and wastes a round-trip.\n *  3. If a 401 is returned, throw immediately — auth failure is transport-agnostic.\n *  4. For any other error after retry, fall back to SSEClientTransport with the same headers.\n *\n * The returned client is connected and ready for use. Callers are responsible for\n * calling client.close() when done.\n */\nexport async function connectMCPWithFallback(\n  url: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[] = [],\n  label = 'connection',\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  return withSpan(\n    'adcp.mcp.connect',\n    {\n      'http.url': url.toString(),\n      'adcp.connection_label': label,\n    },\n    async () => {\n      return connectMCPWithFallbackImpl(url, authHeaders, debugLogs, label, transportFetch, requestOptions);\n    }\n  );\n}\n\nasync function connectMCPWithFallbackImpl(\n  url: URL,\n  authHeaders: Record<string, string>,\n  debugLogs: DebugLogEntry[] = [],\n  label = 'connection',\n  transportFetch?: typeof fetch,\n  requestOptions: { signal?: AbortSignal; requestTimeoutMs?: number } = {}\n): Promise<MCPClient> {\n  const signingContext = signingContextStorage.getStore();\n  // Wrap order (innermost → outermost): network → size-limit → signing → capture.\n  // Size-limit applies to the raw network response so signing/capture see a\n  // bounded body (capture clones via `response.clone()`, which would otherwise\n  // buffer a hostile reply in memory).\n  const clientRequestTimeoutMs = resolveClientRequestTimeoutMs(requestOptions.requestTimeoutMs);\n  const mcpRequestOptions = {\n    ...(requestOptions.signal && { signal: requestOptions.signal }),\n    ...(clientRequestTimeoutMs !== undefined && { timeout: clientRequestTimeoutMs }),\n  };\n  const rawNetworkFetch: typeof fetch = transportFetch ?? ((input, init) => fetch(input as any, init));\n  const networkFetch = (input: Parameters<typeof fetch>[0], init?: RequestInit) => {\n    // Keep cancellation linked for the entire response-body lifetime. A\n    // Promise race around fetch only covers receipt of response headers; MCP\n    // Streamable HTTP can then hold the body open while a tool runs.\n    const signals = [requestOptions.signal, init?.signal ?? undefined].filter(\n      (signal): signal is AbortSignal => signal !== undefined\n    );\n    const signal = signals.length === 0 ? undefined : signals.length === 1 ? signals[0] : AbortSignal.any(signals);\n    return rawNetworkFetch(input, { ...init, signal });\n  };\n  const sizeLimited = wrapFetchWithSizeLimit(networkFetch);\n  const diagnosticFetch = wrapFetchWithTransportDiagnostics(sizeLimited);\n  const baseFetch: typeof fetch = signingContext\n    ? (buildAgentSigningFetch({\n        upstream: diagnosticFetch,\n        signing: signingContext.signing,\n        getCapability: signingContext.getCapability,\n      }) as typeof fetch)\n    : diagnosticFetch;\n  const transportOptions: StreamableHTTPClientTransportOptions = {\n    requestInit: { headers: authHeaders, redirect: 'manual' },\n    fetch: wrapFetchWithCapture(baseFetch),\n  };\n  let failedClient: MCPClient | undefined;\n\n  try {\n    const client = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n    failedClient = client;\n    debugLogs.push({\n      type: 'info',\n      message: `MCP: Attempting StreamableHTTP ${label} to ${url}`,\n      timestamp: new Date().toISOString(),\n    });\n    await client.connect(new StreamableHTTPClientTransport(url, transportOptions), mcpRequestOptions);\n    failedClient = undefined;\n    trackStreamableHTTPUrl(url.toString());\n    debugLogs.push({\n      type: 'success',\n      message: `MCP: Connected via StreamableHTTP for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    return client;\n  } catch (error: unknown) {\n    // Close the failed client to avoid resource leaks\n    if (failedClient) {\n      try {\n        await failedClient.close();\n      } catch {\n        /* ignore */\n      }\n    }\n\n    const errorMessage = error instanceof Error ? error.message : String(error);\n    const errorClass = error instanceof Error ? error.constructor.name : typeof error;\n    const httpStatus = error instanceof StreamableHTTPError ? ` [HTTP ${error.code}]` : '';\n    debugLogs.push({\n      type: 'error',\n      message: `MCP: StreamableHTTP failed for ${label}${httpStatus} (${errorClass}): ${errorMessage}`,\n      timestamp: new Date().toISOString(),\n      error,\n    });\n\n    if (isAbortOrTimeoutError(error)) {\n      throw error;\n    }\n\n    // Retry StreamableHTTP once on any transient connect failure — network blips,\n    // JSON parse errors on half-buffered responses, and mid-handshake proxy\n    // disconnects all surface as generic Error or McpError, not StreamableHTTPError.\n    // Auth failures are the only class where retry is pointless and wasteful.\n    if (!is401Error(error)) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: Transient connect error (${errorClass}) detected, retrying StreamableHTTP for ${label}`,\n        timestamp: new Date().toISOString(),\n      });\n      const retryClient = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n      try {\n        await retryClient.connect(new StreamableHTTPClientTransport(url, transportOptions), mcpRequestOptions);\n        trackStreamableHTTPUrl(url.toString());\n        debugLogs.push({\n          type: 'success',\n          message: `MCP: Connected via StreamableHTTP (retry) for ${label}`,\n          timestamp: new Date().toISOString(),\n        });\n        return retryClient;\n      } catch (retryError) {\n        try {\n          await retryClient.close();\n        } catch {\n          /* ignore */\n        }\n        debugLogs.push({\n          type: 'error',\n          message: `MCP: StreamableHTTP retry also failed for ${label}: ${retryError instanceof Error ? retryError.message : String(retryError)}`,\n          timestamp: new Date().toISOString(),\n        });\n        if (isAbortOrTimeoutError(retryError)) {\n          throw retryError;\n        }\n        // Fall through to SSE fallback below\n      }\n    }\n\n    // Auth failure — transport type won't change the outcome\n    if (is401Error(error)) {\n      throw error;\n    }\n\n    // If StreamableHTTP previously worked for this URL, don't fall back to SSE.\n    // Transient failures (connection reuse, concurrency limits) should be retried\n    // with StreamableHTTP, not SSE — SSE sends GET requests that return 405 on\n    // servers that only support POST-based StreamableHTTP.\n    if (knownStreamableHTTPUrls.has(url.toString())) {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: StreamableHTTP previously succeeded for ${url} — skipping SSE fallback for ${label}`,\n        timestamp: new Date().toISOString(),\n      });\n      throw error;\n    }\n\n    // Fall back to SSE\n    debugLogs.push({\n      type: 'warning',\n      message: `MCP: Falling back to SSE transport for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    const client = new MCPClient({ name: 'AdCP-Client', version: '1.0.0' });\n    try {\n      await client.connect(\n        new SSEClientTransport(url, {\n          requestInit: { headers: authHeaders, redirect: 'manual' },\n          fetch: wrapFetchWithCapture(baseFetch),\n        }),\n        mcpRequestOptions\n      );\n    } catch (sseError) {\n      try {\n        await client.close();\n      } catch {\n        /* ignore */\n      }\n      throw sseError;\n    }\n    debugLogs.push({\n      type: 'success',\n      message: `MCP: Connected via SSE transport for ${label}`,\n      timestamp: new Date().toISOString(),\n    });\n    return client;\n  }\n}\n\nexport async function callMCPTool(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  signingContext?: AgentSigningContext,\n  transportFetch?: typeof fetch,\n  requestOptions?: { signal?: AbortSignal; requestTimeoutMs?: number }\n): Promise<unknown> {\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Auth configuration`,\n    timestamp: new Date().toISOString(),\n    hasAuth: !!authToken,\n    headers: authToken ? { 'x-adcp-auth': '***' } : {},\n    customHeaderKeys: customHeaders ? Object.keys(customHeaders) : [],\n  });\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Calling tool ${toolName} with args: ${JSON.stringify(redactArgsForLog(args))}`,\n    timestamp: new Date().toISOString(),\n  });\n  if (authToken) {\n    debugLogs.push({\n      type: 'info',\n      message: `MCP: Transport configured with x-adcp-auth header for ${toolName}`,\n      timestamp: new Date().toISOString(),\n    });\n  }\n\n  // Custom fetch injection is an internal conformance seam whose mocks use\n  // the v1 transport shape. Normal remote calls negotiate the modern era;\n  // injected transports retain their exact legacy behavior.\n  if (!transportFetch) {\n    const modernAttempt = await tryCallModernMCPTool(agentUrl, toolName, args, authToken, debugLogs, customHeaders, {\n      ...(signingContext && { signingContext }),\n      ...(requestOptions?.signal && { signal: requestOptions.signal }),\n      ...(requestOptions?.requestTimeoutMs !== undefined && {\n        requestTimeoutMs: requestOptions.requestTimeoutMs,\n      }),\n    });\n    if (modernAttempt.handled) {\n      debugLogs.push({\n        type: modernAttempt.response?.isError ? 'error' : 'success',\n        message: `MCP: Tool ${toolName} response received (${modernAttempt.response?.isError ? 'error' : 'success'})`,\n        timestamp: new Date().toISOString(),\n        response: modernAttempt.response,\n      });\n      return modernAttempt.response;\n    }\n  }\n\n  return withSpan(\n    'adcp.mcp.call_tool',\n    {\n      'adcp.tool': toolName,\n      'http.url': agentUrl,\n    },\n    async () => {\n      return signingContextStorage.run(signingContext, () =>\n        callMCPToolImpl(agentUrl, toolName, args, authToken, debugLogs, customHeaders, transportFetch, requestOptions)\n      );\n    }\n  );\n}\n\n/**\n * Call an MCP tool and return the raw CallToolResult (with isError, content, structuredContent).\n * Raw MCP tool call — returns the CallToolResult directly, including isError responses.\n */\nexport async function callMCPToolRaw(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  signingContext?: AgentSigningContext,\n  transportFetch?: typeof fetch\n): Promise<unknown> {\n  return signingContextStorage.run(signingContext, () =>\n    callMCPToolRawImpl(agentUrl, toolName, args, authToken, debugLogs, customHeaders, transportFetch)\n  );\n}\n\nasync function callMCPToolImpl(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  transportFetch?: typeof fetch,\n  requestOptions?: { signal?: AbortSignal; requestTimeoutMs?: number }\n): Promise<unknown> {\n  // Inject trace context headers for distributed tracing\n  const traceHeaders = injectTraceHeaders();\n\n  // Merge: custom < trace < auth (auth always wins)\n  const authHeaders = {\n    ...customHeaders,\n    ...traceHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n\n  const resolvedRequestTimeoutMs = resolveClientRequestTimeoutMs(requestOptions?.requestTimeoutMs);\n  const response = await withCachedConnection(\n    agentUrl,\n    authToken,\n    authHeaders,\n    debugLogs,\n    toolName,\n    client =>\n      client.callTool({ name: toolName, arguments: args }, undefined, {\n        ...(requestOptions?.signal && { signal: requestOptions.signal }),\n        ...(resolvedRequestTimeoutMs !== undefined && { timeout: resolvedRequestTimeoutMs }),\n      }) as Promise<CallToolResponse>,\n    transportFetch,\n    requestOptions\n  );\n\n  debugLogs.push({\n    type: response?.isError ? 'error' : 'success',\n    message: `MCP: Tool ${toolName} response received (${response?.isError ? 'error' : 'success'})`,\n    timestamp: new Date().toISOString(),\n    response: response,\n  });\n\n  return response;\n}\n\n/**\n * Raw MCP tool call — returns the CallToolResult directly.\n */\nasync function callMCPToolRawImpl(\n  agentUrl: string,\n  toolName: string,\n  args: Record<string, unknown>,\n  authToken?: string,\n  debugLogs: DebugLogEntry[] = [],\n  customHeaders?: Record<string, string>,\n  transportFetch?: typeof fetch\n): Promise<unknown> {\n  const traceHeaders = injectTraceHeaders();\n  const authHeaders = {\n    ...customHeaders,\n    ...traceHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n\n  return withCachedConnection(\n    agentUrl,\n    authToken,\n    authHeaders,\n    debugLogs,\n    toolName,\n    client => client.callTool({ name: toolName, arguments: args }),\n    transportFetch\n  );\n}\n\n/**\n * Connect to an MCP server with OAuth support\n *\n * This function handles both static token auth and OAuth flows.\n * When using OAuth, if the server requires authorization:\n * 1. UnauthorizedError is thrown\n * 2. The OAuth provider's redirectToAuthorization is called\n * 3. Caller should wait for callback and call finishAuth on transport\n *\n * @param options Connection options\n * @returns MCP client and transport (for finishing OAuth if needed)\n * @throws UnauthorizedError if OAuth is required\n *\n * @example\n * ```typescript\n * // With OAuth provider\n * const provider = createCLIOAuthProvider(serverUrl);\n *\n * try {\n *   const { client, transport } = await connectMCP({\n *     agentUrl: serverUrl,\n *     authProvider: provider\n *   });\n *   // Connected! Use client...\n * } catch (error) {\n *   if (error instanceof UnauthorizedError) {\n *     // OAuth flow started, wait for callback\n *     const code = await provider.waitForCallback();\n *     await transport.finishAuth(code);\n *     // Retry connection...\n *   }\n * }\n * ```\n *\n * @deprecated Low-level v1/SSE escape hatch. High-level AgentClient discovery,\n * tool listing, OAuth calls, and `callMCPTool*` APIs negotiate MCP 2026-07-28.\n * Keep this only for callers that require the v1 SDK client/transport pair or\n * its interactive `finishAuth()` lifecycle.\n */\nexport async function connectMCP(options: {\n  agentUrl: string;\n  authToken?: string;\n  authProvider?: OAuthClientProvider;\n  debugLogs?: DebugLogEntry[];\n  customHeaders?: Record<string, string>;\n  signingContext?: AgentSigningContext;\n  signal?: AbortSignal;\n  requestTimeoutMs?: number;\n  fetchFn?: typeof fetch;\n}): Promise<MCPConnectionResult> {\n  const {\n    agentUrl,\n    authToken,\n    authProvider,\n    debugLogs = [],\n    customHeaders,\n    signingContext,\n    signal,\n    requestTimeoutMs: configuredRequestTimeoutMs,\n    fetchFn,\n  } = options;\n  const baseUrl = new URL(agentUrl);\n\n  debugLogs.push({\n    type: 'info',\n    message: `MCP: Connecting to ${baseUrl}`,\n    timestamp: new Date().toISOString(),\n    authMethod: authProvider ? 'oauth' : authToken ? 'token' : 'none',\n  });\n\n  const mcpClient = new MCPClient({\n    name: 'AdCP-Client',\n    version: '1.0.0',\n  });\n\n  // Build transport options\n  const transportOptions: StreamableHTTPClientTransportOptions = {};\n\n  // Header-only auth (basic, x-api-key, custom routing) lives entirely on\n  // `customHeaders`. Attach it whenever it's present, regardless of which\n  // auth branch fires — OAuth + routing headers, bearer + tenant headers,\n  // and pure-header auth must all reach the wire.\n  //\n  // Precedence note: the MCP SDK's `_commonHeaders()` (StreamableHTTP)\n  // spreads `requestInit.headers` *over* any provider-emitted `Authorization`\n  // (`new Headers({ ...providerHeaders, ...requestInitHeaders })`, last-write-\n  // wins). To prevent a caller-supplied `Authorization` in `customHeaders`\n  // from silently overriding the OAuth provider's bearer, drop any\n  // `Authorization` key from `customHeaders` when `authProvider` is set.\n  // OAuth is the source of truth for the bearer in that branch; non-auth\n  // routing/tenant headers still flow through.\n  const filteredCustomHeaders = authProvider\n    ? Object.fromEntries(Object.entries(customHeaders ?? {}).filter(([k]) => k.toLowerCase() !== 'authorization'))\n    : customHeaders;\n  const authHeaders: Record<string, string> = {\n    ...filteredCustomHeaders,\n    ...(authToken ? createMCPAuthHeaders(authToken) : {}),\n  };\n  transportOptions.requestInit = { headers: authHeaders, redirect: 'manual' };\n  if (authProvider) {\n    transportOptions.authProvider = authProvider;\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using OAuth provider for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  } else if (authToken) {\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using static token for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  } else if (Object.keys(authHeaders).length > 0) {\n    debugLogs.push({\n      type: 'info',\n      message: 'MCP: Using custom headers for authentication',\n      timestamp: new Date().toISOString(),\n    });\n  }\n\n  // RFC 9421 signing — wrap the transport's fetch so the signer sees the final\n  // headers the SDK assembled (including any OAuth-issued Authorization) and\n  // decides per outbound request whether to sign. Size-limit sits innermost so\n  // the response body is bounded before signing/capture observe it.\n  const requestTimeoutMs = resolveRequestTimeoutMs(configuredRequestTimeoutMs);\n  const clientRequestTimeoutMs = resolveClientRequestTimeoutMs(configuredRequestTimeoutMs);\n  const requestOptions = {\n    ...(signal && { signal }),\n    ...(clientRequestTimeoutMs !== undefined && { timeout: clientRequestTimeoutMs }),\n  };\n  const rawNetworkFetch: typeof fetch = fetchFn ?? ((input, init) => fetch(input, init));\n  const sizeLimited = wrapFetchWithSizeLimit((input, init) =>\n    withAbortSignal<Response>([signal, init?.signal], requestTimeoutMs, linkedSignal =>\n      rawNetworkFetch(input, { ...init, signal: linkedSignal })\n    )\n  );\n  const diagnosticFetch = wrapFetchWithTransportDiagnostics(sizeLimited);\n  const signedFetch: typeof fetch = signingContext\n    ? (buildAgentSigningFetch({\n        upstream: diagnosticFetch,\n        signing: signingContext.signing,\n        getCapability: signingContext.getCapability,\n      }) as typeof fetch)\n    : diagnosticFetch;\n  transportOptions.fetch = wrapFetchWithCapture(signedFetch);\n\n  const transport = new StreamableHTTPClientTransport(baseUrl, transportOptions);\n\n  try {\n    await mcpClient.connect(transport, requestOptions);\n    debugLogs.push({\n      type: 'success',\n      message: 'MCP: Connected successfully',\n      timestamp: new Date().toISOString(),\n    });\n    return { client: mcpClient, transport };\n  } catch (error) {\n    // If it's an UnauthorizedError, the OAuth flow has started\n    // Rethrow so the caller can handle the callback\n    if (error instanceof UnauthorizedError) {\n      debugLogs.push({\n        type: 'info',\n        message: 'MCP: OAuth authorization required, flow initiated',\n        timestamp: new Date().toISOString(),\n      });\n      // Return transport so caller can call finishAuth\n      throw Object.assign(error, { transport, client: mcpClient });\n    }\n\n    // Non-OAuth 401 — the SDK sent credentials that the agent rejected (or\n    // sent none when it needed them). The raw transport error is shaped like\n    // `Error POSTing to endpoint (HTTP 401): unauthorized`, which omits the\n    // crucial piece of debug data: *which auth scheme did the SDK actually\n    // use*. Without that, a caller can't diff against curl. Wrap the error\n    // with a scheme tag and a remediation hint, preserving the original\n    // under `.cause` so existing `is401Error` / `error.status` checks\n    // downstream still resolve.\n    if (is401Error(error)) {\n      const scheme = authProvider\n        ? 'oauth'\n        : authToken\n          ? 'bearer'\n          : Object.keys(authHeaders).length > 0\n            ? 'header'\n            : 'none';\n      const hint =\n        scheme === 'none'\n          ? 'No credentials were sent. Configure auth_token, headers, or oauth_tokens on the agent config (or pass --auth on the CLI).'\n          : scheme === 'header'\n            ? \"Verify the Authorization header value matches the gateway (basic-auth: 'Basic ' + base64(user:pass); pair with --auth-scheme basic on the CLI).\"\n            : scheme === 'bearer'\n              ? \"Verify the bearer token matches the agent's expected credential.\"\n              : 'OAuth provider returned tokens that the agent rejected — check the provider configuration and token scopes.';\n      const detail = `MCP connect rejected with HTTP 401 from ${agentUrl}. SDK sent auth scheme: ${scheme}. ${hint}`;\n      const wrapped = Object.assign(new Error(detail), {\n        cause: error,\n        code: 'MCP_AUTH_REJECTED',\n        scheme,\n        agentUrl,\n        originalError: error,\n      });\n      throw wrapped;\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Call an MCP tool with OAuth support.\n *\n * OAuth connections are cached by agent URL and OAuth provider identity so a\n * service-to-service workflow can reuse the initialized MCP session across\n * related tool calls. Reuse the same OAuthClientProvider instance for a\n * session/source/principal; the provider owns token refresh state for the\n * cached transport.\n *\n * Supplying `fetchFn` opts out of connection reuse. Scoped fetchers commonly\n * carry request- or tenant-specific network policy, so each call gets an\n * isolated connection that is closed after the tool response.\n *\n * Signing: this path consumes `options.signingContext` via the transport —\n * `connectMCP` attaches a signing-fetch wrapper at transport-creation time —\n * rather than via `signingContextStorage`. The OAuth cache key includes the\n * signing cache key so different signing identities do not share a transport.\n * The non-OAuth fallback (`callMCPTool`) does enter ALS.\n *\n * @param options Call options\n * @returns Tool response\n * @throws UnauthorizedError if OAuth is required (with transport attached)\n */\nexport async function callMCPToolWithOAuth(options: MCPCallOptions): Promise<unknown> {\n  const {\n    agentUrl,\n    toolName,\n    args,\n    authToken,\n    authProvider,\n    debugLogs = [],\n    customHeaders,\n    signingContext,\n    signal,\n    requestTimeoutMs,\n    fetchFn,\n  } = options;\n  const resolvedRequestTimeoutMs = resolveClientRequestTimeoutMs(requestTimeoutMs);\n  const requestOptions = {\n    ...(signal && { signal }),\n    ...(resolvedRequestTimeoutMs !== undefined && { timeout: resolvedRequestTimeoutMs }),\n  };\n\n  // If no OAuth provider, use the legacy function\n  if (!authProvider) {\n    return callMCPTool(agentUrl, toolName, args, authToken, debugLogs, customHeaders, signingContext, fetchFn, {\n      signal,\n      requestTimeoutMs,\n    });\n  }\n\n  const modernAttempt = await tryCallModernMCPTool(agentUrl, toolName, args, undefined, debugLogs, customHeaders, {\n    authProvider,\n    signingContext,\n    signal,\n    requestTimeoutMs,\n    fetchFn,\n    handleLegacy: true,\n  });\n  if (modernAttempt.handled) {\n    debugLogs.push({\n      type: modernAttempt.response?.isError ? 'error' : 'success',\n      message: `MCP: Tool ${toolName} response received`,\n      timestamp: new Date().toISOString(),\n    });\n    return modernAttempt.response;\n  }\n\n  const response = await withCachedOAuthConnection(\n    {\n      agentUrl,\n      authProvider,\n      debugLogs,\n      customHeaders,\n      signingContext,\n      signal,\n      requestTimeoutMs,\n      fetchFn,\n    },\n    toolName,\n    async client => {\n      debugLogs.push({\n        type: 'info',\n        message: `MCP: Calling tool ${toolName}`,\n        timestamp: new Date().toISOString(),\n      });\n\n      const response = await client.callTool({ name: toolName, arguments: args }, undefined, requestOptions);\n\n      debugLogs.push({\n        type: response?.isError ? 'error' : 'success',\n        message: `MCP: Tool ${toolName} response received`,\n        timestamp: new Date().toISOString(),\n      });\n\n      return response;\n    }\n  );\n\n  return response;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,oBAAoC;AACpC,4BAIO;AACP,iBAAmC;AACnC,kBAAkC;AAElC,yBAA2B;AAC3B,IAAAA,eAAqC;AACrC,oBAA2B;AAE3B,qBAA6C;AAC7C,IAAAC,iBAAwF;AACxF,yBAAiC;AACjC,gCAAqC;AACrC,+BAAuC;AACvC,kCAAkD;AAClD,mBAKO;AACP,wBAAgE;AA4BhE,MAAM,kBAAkB,oBAAI,IAAuB;AACnD,MAAM,qBAAqB,oBAAI,IAAgC;AAC/D,MAAM,uBAAuB,oBAAI,IAAuB;AACxD,MAAM,0BAA0B,oBAAI,IAAgC;AACpE,MAAM,mBAAmB,oBAAI,QAAqC;AAClE,MAAM,kBAAkB,oBAAI,QAA8B;AAC1D,MAAM,yBAAyB;AAC/B,IAAI,sBAAsB;AAC1B,IAAI,qBAAqB;AAWzB,MAAM,0BAA0B,oBAAI,IAAY;AAEhD,SAAS,uBAAuB,KAAmB;AAEjD,0BAAwB,OAAO,GAAG;AAClC,0BAAwB,IAAI,GAAG;AAE/B,SAAO,wBAAwB,OAAO,wBAAwB;AAC5D,UAAM,SAAS,wBAAwB,OAAO,EAAE,KAAK,EAAE;AACvD,QAAI,OAAQ,yBAAwB,OAAO,MAAM;AAAA,EACnD;AACF;AAqBA,SAAS,mBACP,UACA,WACA,iBACA,aACQ;AACR,QAAM,QAAQ,CAAC,QAAQ;AACvB,QAAM,cAAc,aAAa,kBAAkB,WAAW;AAC9D,MAAI,YAAa,OAAM,KAAK,mBAAmB,WAAW,CAAC;AAC3D,QAAM,aAAa,0BAA0B,WAAW;AACxD,MAAI,WAAY,OAAM,KAAK,WAAW,UAAU,EAAE;AAClD,MAAI,gBAAiB,OAAM,KAAK,eAAe;AAC/C,SAAO,MAAM,KAAK,IAAI;AACxB;AAkBA,SAAS,mBAAmB,OAAuB;AACjD,aAAO,+BAAW,UAAU,EAAE,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACzE;AAUA,SAAS,kBAAkB,SAAsD;AAC/E,MAAI,CAAC,QAAS,QAAO;AACrB,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,IAAI,YAAY,MAAM,mBAAmB,MAAO,QAAO;AAAA,EAC7D;AACA,SAAO;AACT;AAEA,SAAS,0BAA0B,SAAsD;AACvF,QAAM,UAAU,OAAO,QAAQ,WAAW,CAAC,CAAC,EACzC,OAAO,CAAC,CAAC,GAAG,MAAM;AACjB,UAAM,QAAQ,IAAI,YAAY;AAC9B,WAAO,UAAU,iBAAiB,UAAU,gBAAgB,UAAU;AAAA,EACxE,CAAC,EACA,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,YAAY,GAAG,KAAK,CAAU,EACzD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AACxC,SAAO,QAAQ,SAAS,IAAI,mBAAmB,KAAK,UAAU,OAAO,CAAC,IAAI;AAC5E;AAGA,SAAS,oBAAoB,KAAoC;AAC/D,QAAM,SAAS,gBAAgB,IAAI,GAAG;AACtC,MAAI,QAAQ;AAEV,oBAAgB,OAAO,GAAG;AAC1B,oBAAgB,IAAI,KAAK,MAAM;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,yBAA+B;AACtC,MAAI,gBAAgB,QAAQ,uBAAwB;AAEpD,QAAM,SAAS,gBAAgB,KAAK,EAAE,KAAK,EAAE;AAC7C,MAAI,CAAC,OAAQ;AACb,QAAM,YAAY,gBAAgB,IAAI,MAAM;AAC5C,kBAAgB,OAAO,MAAM;AAE7B,aAAW,MAAM,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACnC;AAEA,SAAS,8BAAoC;AAC3C,MAAI,qBAAqB,QAAQ,uBAAwB;AACzD,QAAM,SAAS,qBAAqB,KAAK,EAAE,KAAK,EAAE;AAClD,MAAI,CAAC,OAAQ;AACb,QAAM,YAAY,qBAAqB,IAAI,MAAM;AACjD,uBAAqB,OAAO,MAAM;AAClC,aAAW,MAAM,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACnC;AAOA,eAAsB,wBAAuC;AAC3D,QAAM,UAAU,CAAC,GAAG,qBAAqB,QAAQ,CAAC;AAClD,uBAAqB,MAAM;AAC3B,aAAW,CAAC,EAAE,MAAM,KAAK,SAAS;AAChC,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAMA,eAAsB,sBAAqC;AACzD,QAAM,UAAU,CAAC,GAAG,gBAAgB,QAAQ,CAAC;AAC7C,kBAAgB,MAAM;AACtB,0BAAwB,MAAM;AAC9B,aAAW,CAAC,EAAE,MAAM,KAAK,SAAS;AAChC,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,sBAAsB;AAC5B,YAAM,6CAA0B;AAClC;AAOA,eAAe,sBACb,UACA,SACA,aACA,WACA,OACA,iBAAsE,CAAC,GACnD;AACpB,QAAM,SAAS,oBAAoB,QAAQ;AAC3C,MAAI,OAAQ,QAAO;AAEnB,QAAM,UAAU,mBAAmB,IAAI,QAAQ;AAC/C,MAAI,QAAS,QAAO;AAEpB,QAAM,UAAU,uBAAuB,SAAS,aAAa,WAAW,OAAO,QAAW,cAAc,EACrG,KAAK,YAAU;AACd,oBAAgB,IAAI,UAAU,MAAM;AACpC,2BAAuB;AACvB,WAAO;AAAA,EACT,CAAC,EACA,QAAQ,MAAM;AACb,uBAAmB,OAAO,QAAQ;AAAA,EACpC,CAAC;AAEH,qBAAmB,IAAI,UAAU,OAAO;AACxC,SAAO;AACT;AAEA,SAAS,8BAA8B,cAA2C;AAChF,MAAI,KAAK,iBAAiB,IAAI,YAAY;AAC1C,MAAI,CAAC,IAAI;AACP,SAAK,mBAAmB,kBAAkB,EAAE,mBAAmB,EAAE;AACjE,qBAAiB,IAAI,cAAc,EAAE;AAAA,EACvC;AACA,SAAO;AACT;AAEA,SAAS,6BAA6B,SAA+B;AACnE,MAAI,KAAK,gBAAgB,IAAI,OAAO;AACpC,MAAI,CAAC,IAAI;AACP,SAAK,mBAAmB,eAAe,EAAE,kBAAkB,EAAE;AAC7D,oBAAgB,IAAI,SAAS,EAAE;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,2BAA2B,eAA4D;AAC9F,SAAO,0BAA0B,aAAa;AAChD;AAEA,SAAS,wBACP,UACA,cACA,iBACA,eACA,SACQ;AACR,QAAM,QAAQ,CAAC,GAAG,QAAQ,WAAW,8BAA8B,YAAY,CAAC,EAAE;AAClF,MAAI,gBAAiB,OAAM,KAAK,eAAe;AAC/C,QAAM,aAAa,2BAA2B,aAAa;AAC3D,MAAI,WAAY,OAAM,KAAK,WAAW,UAAU,EAAE;AAClD,MAAI,QAAS,OAAM,KAAK,SAAS,6BAA6B,OAAO,CAAC,EAAE;AACxE,SAAO,MAAM,KAAK,IAAI;AACxB;AAGA,SAAS,yBAAyB,KAAoC;AACpE,QAAM,SAAS,qBAAqB,IAAI,GAAG;AAC3C,MAAI,QAAQ;AACV,yBAAqB,OAAO,GAAG;AAC/B,yBAAqB,IAAI,KAAK,MAAM;AAAA,EACtC;AACA,SAAO;AACT;AAEA,eAAe,2BACb,UACA,SAUoB;AACpB,QAAM,SAAS,yBAAyB,QAAQ;AAChD,MAAI,OAAQ,QAAO;AAEnB,QAAM,UAAU,wBAAwB,IAAI,QAAQ;AACpD,MAAI,QAAS,QAAO;AAEpB,QAAM,UAAU,WAAW,OAAO,EAC/B,KAAK,CAAC,EAAE,OAAO,MAAM;AACpB,yBAAqB,IAAI,UAAU,MAAM;AACzC,gCAA4B;AAC5B,WAAO;AAAA,EACT,CAAC,EACA,QAAQ,MAAM;AACb,4BAAwB,OAAO,QAAQ;AAAA,EACzC,CAAC;AAEH,0BAAwB,IAAI,UAAU,OAAO;AAC7C,SAAO;AACT;AAEA,eAAe,0BACb,SAUA,OACA,IACY;AACZ,QAAM,WAAW;AAAA,IACf,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ,gBAAgB;AAAA,IACxB,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACA,MAAI,QAAQ,UAAU,QAAQ,qBAAqB,UAAa,QAAQ,SAAS;AAC/E,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW,OAAO;AAC3C,QAAI;AACF,aAAO,MAAM,GAAG,MAAM;AAAA,IACxB,UAAE;AACA,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,MACrB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,2BAA2B,UAAU,OAAO;AAEpE,MAAI;AACF,WAAO,MAAM,GAAG,SAAS;AAAA,EAC3B,SAAS,OAAO;AACd,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,YAAQ,UAAU,KAAK;AAAA,MACrB,MAAM;AAAA,MACN,SAAS,QAAQ,KAAK,uBAAuB,YAAY;AAAA,MACzD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAED,YAAI,0BAAW,KAAK,GAAG;AACrB,2BAAqB,OAAO,QAAQ;AACpC,UAAI;AACF,cAAM,UAAU,MAAM;AAAA,MACxB,QAAQ;AAAA,MAER;AACA,cAAQ,UAAU,KAAK;AAAA,QACrB,MAAM;AAAA,QACN,SAAS,gDAAgD,KAAK;AAAA,QAC9D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAEA,YAAI,oCAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAEA,yBAAqB,OAAO,QAAQ;AACpC,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,IACxB,QAAQ;AAAA,IAER;AAEA,UAAM,cAAc,MAAM,2BAA2B,UAAU;AAAA,MAC7D,GAAG;AAAA,MACH,WAAW,QAAQ;AAAA,IACrB,CAAC;AAED,QAAI;AACF,aAAO,MAAM,GAAG,WAAW;AAAA,IAC7B,SAAS,YAAY;AACnB,UAAI,sBAAsB,SAAS,iBAAiB,OAAO;AACzD,mBAAW,QAAQ;AAAA,MACrB;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAUA,eAAsB,qBACpB,UACA,WACA,aACA,WACA,OACA,IACA,gBACA,iBAAsE,CAAC,GAC3D;AACZ,QAAM,iBAAiB,qCAAsB,SAAS;AACtD,QAAM,UAAU,IAAI,IAAI,QAAQ;AAEhC,MAAI,kBAAkB,eAAe,UAAU,eAAe,qBAAqB,QAAW;AAC5F,UAAM,gBAAgB,MAAM;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI;AACF,aAAO,UAAM,8BAAgB,CAAC,eAAe,MAAM,GAAG,QAAW,MAAM,GAAG,aAAa,CAAC;AAAA,IAC1F,UAAE;AACA,UAAI;AACF,cAAM,cAAc,MAAM;AAAA,MAC5B,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,mBAAmB,UAAU,WAAW,gBAAgB,UAAU,WAAW;AAC9F,QAAM,YAAY,MAAM,sBAAsB,UAAU,SAAS,aAAa,WAAW,OAAO,cAAc;AAE9G,MAAI;AACF,WAAO,MAAM,GAAG,SAAS;AAAA,EAC3B,SAAS,OAAO;AACd,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,QAAQ,KAAK,iBAAiB,YAAY;AAAA,MACnD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAGD,YAAI,0BAAW,KAAK,GAAG;AACrB,sBAAgB,OAAO,QAAQ;AAC/B,UAAI;AACF,cAAM,UAAU,MAAM;AAAA,MACxB,QAAQ;AAAA,MAER;AACA,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,0CAA0C,KAAK;AAAA,QACxD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAEA,YAAI,oCAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAGA,oBAAgB,OAAO,QAAQ;AAC/B,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,IACxB,QAAQ;AAAA,IAER;AAEA,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,KAAK;AAAA,MACR;AAAA,IACF;AAEA,QAAI;AACF,aAAO,MAAM,GAAG,WAAW;AAAA,IAC7B,SAAS,YAAY;AAEnB,UAAI,sBAAsB,SAAS,iBAAiB,OAAO;AACzD,mBAAW,QAAQ;AAAA,MACrB;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAwDA,eAAsB,uBACpB,KACA,aACA,YAA6B,CAAC,GAC9B,QAAQ,cACR,gBACA,iBAAsE,CAAC,GACnD;AACpB,aAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,YAAY,IAAI,SAAS;AAAA,MACzB,yBAAyB;AAAA,IAC3B;AAAA,IACA,YAAY;AACV,aAAO,2BAA2B,KAAK,aAAa,WAAW,OAAO,gBAAgB,cAAc;AAAA,IACtG;AAAA,EACF;AACF;AAEA,eAAe,2BACb,KACA,aACA,YAA6B,CAAC,GAC9B,QAAQ,cACR,gBACA,iBAAsE,CAAC,GACnD;AACpB,QAAM,iBAAiB,qCAAsB,SAAS;AAKtD,QAAM,6BAAyB,4CAA8B,eAAe,gBAAgB;AAC5F,QAAM,oBAAoB;AAAA,IACxB,GAAI,eAAe,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,IAC7D,GAAI,2BAA2B,UAAa,EAAE,SAAS,uBAAuB;AAAA,EAChF;AACA,QAAM,kBAAgC,mBAAmB,CAAC,OAAO,SAAS,MAAM,OAAc,IAAI;AAClG,QAAM,eAAe,CAAC,OAAoC,SAAuB;AAI/E,UAAM,UAAU,CAAC,eAAe,QAAQ,MAAM,UAAU,MAAS,EAAE;AAAA,MACjE,CAACC,YAAkCA,YAAW;AAAA,IAChD;AACA,UAAM,SAAS,QAAQ,WAAW,IAAI,SAAY,QAAQ,WAAW,IAAI,QAAQ,CAAC,IAAI,YAAY,IAAI,OAAO;AAC7G,WAAO,gBAAgB,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC;AAAA,EACnD;AACA,QAAM,kBAAc,iDAAuB,YAAY;AACvD,QAAM,sBAAkB,+DAAkC,WAAW;AACrE,QAAM,YAA0B,qBAC3B,uCAAuB;AAAA,IACtB,UAAU;AAAA,IACV,SAAS,eAAe;AAAA,IACxB,eAAe,eAAe;AAAA,EAChC,CAAC,IACD;AACJ,QAAM,mBAAyD;AAAA,IAC7D,aAAa,EAAE,SAAS,aAAa,UAAU,SAAS;AAAA,IACxD,WAAO,gDAAqB,SAAS;AAAA,EACvC;AACA,MAAI;AAEJ,MAAI;AACF,UAAM,SAAS,IAAI,cAAAC,OAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AACtE,mBAAe;AACf,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,kCAAkC,KAAK,OAAO,GAAG;AAAA,MAC1D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,UAAM,OAAO,QAAQ,IAAI,oDAA8B,KAAK,gBAAgB,GAAG,iBAAiB;AAChG,mBAAe;AACf,2BAAuB,IAAI,SAAS,CAAC;AACrC,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yCAAyC,KAAK;AAAA,MACvD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAgB;AAEvB,QAAI,cAAc;AAChB,UAAI;AACF,cAAM,aAAa,MAAM;AAAA,MAC3B,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,UAAM,aAAa,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAC5E,UAAM,aAAa,iBAAiB,4CAAsB,UAAU,MAAM,IAAI,MAAM;AACpF,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,kCAAkC,KAAK,GAAG,UAAU,KAAK,UAAU,MAAM,YAAY;AAAA,MAC9F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAED,YAAI,oCAAsB,KAAK,GAAG;AAChC,YAAM;AAAA,IACR;AAMA,QAAI,KAAC,0BAAW,KAAK,GAAG;AACtB,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,iCAAiC,UAAU,2CAA2C,KAAK;AAAA,QACpG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM,cAAc,IAAI,cAAAA,OAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AAC3E,UAAI;AACF,cAAM,YAAY,QAAQ,IAAI,oDAA8B,KAAK,gBAAgB,GAAG,iBAAiB;AACrG,+BAAuB,IAAI,SAAS,CAAC;AACrC,kBAAU,KAAK;AAAA,UACb,MAAM;AAAA,UACN,SAAS,iDAAiD,KAAK;AAAA,UAC/D,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,CAAC;AACD,eAAO;AAAA,MACT,SAAS,YAAY;AACnB,YAAI;AACF,gBAAM,YAAY,MAAM;AAAA,QAC1B,QAAQ;AAAA,QAER;AACA,kBAAU,KAAK;AAAA,UACb,MAAM;AAAA,UACN,SAAS,6CAA6C,KAAK,KAAK,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU,CAAC;AAAA,UACrI,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC,CAAC;AACD,gBAAI,oCAAsB,UAAU,GAAG;AACrC,gBAAM;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AAGA,YAAI,0BAAW,KAAK,GAAG;AACrB,YAAM;AAAA,IACR;AAMA,QAAI,wBAAwB,IAAI,IAAI,SAAS,CAAC,GAAG;AAC/C,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,gDAAgD,GAAG,qCAAgC,KAAK;AAAA,QACjG,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AACD,YAAM;AAAA,IACR;AAGA,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,0CAA0C,KAAK;AAAA,MACxD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,UAAM,SAAS,IAAI,cAAAA,OAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,CAAC;AACtE,QAAI;AACF,YAAM,OAAO;AAAA,QACX,IAAI,8BAAmB,KAAK;AAAA,UAC1B,aAAa,EAAE,SAAS,aAAa,UAAU,SAAS;AAAA,UACxD,WAAO,gDAAqB,SAAS;AAAA,QACvC,CAAC;AAAA,QACD;AAAA,MACF;AAAA,IACF,SAAS,UAAU;AACjB,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,MACrB,QAAQ;AAAA,MAER;AACA,YAAM;AAAA,IACR;AACA,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,wCAAwC,KAAK;AAAA,MACtD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,YACpB,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACA,gBACkB;AAClB,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS;AAAA,IACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,SAAS,CAAC,CAAC;AAAA,IACX,SAAS,YAAY,EAAE,eAAe,MAAM,IAAI,CAAC;AAAA,IACjD,kBAAkB,gBAAgB,OAAO,KAAK,aAAa,IAAI,CAAC;AAAA,EAClE,CAAC;AACD,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,qBAAqB,QAAQ,eAAe,KAAK,cAAU,qCAAiB,IAAI,CAAC,CAAC;AAAA,IAC3F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AACD,MAAI,WAAW;AACb,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,yDAAyD,QAAQ;AAAA,MAC1E,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAKA,MAAI,CAAC,gBAAgB;AACnB,UAAM,gBAAgB,UAAM,wCAAqB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe;AAAA,MAC9G,GAAI,kBAAkB,EAAE,eAAe;AAAA,MACvC,GAAI,gBAAgB,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,MAC9D,GAAI,gBAAgB,qBAAqB,UAAa;AAAA,QACpD,kBAAkB,eAAe;AAAA,MACnC;AAAA,IACF,CAAC;AACD,QAAI,cAAc,SAAS;AACzB,gBAAU,KAAK;AAAA,QACb,MAAM,cAAc,UAAU,UAAU,UAAU;AAAA,QAClD,SAAS,aAAa,QAAQ,uBAAuB,cAAc,UAAU,UAAU,UAAU,SAAS;AAAA,QAC1G,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,UAAU,cAAc;AAAA,MAC1B,CAAC;AACD,aAAO,cAAc;AAAA,IACvB;AAAA,EACF;AAEA,aAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,YAAY;AAAA,IACd;AAAA,IACA,YAAY;AACV,aAAO,qCAAsB;AAAA,QAAI;AAAA,QAAgB,MAC/C,gBAAgB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,gBAAgB,cAAc;AAAA,MAC/G;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAsB,eACpB,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACkB;AAClB,SAAO,qCAAsB;AAAA,IAAI;AAAA,IAAgB,MAC/C,mBAAmB,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,cAAc;AAAA,EAClG;AACF;AAEA,eAAe,gBACb,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACA,gBACkB;AAElB,QAAM,mBAAe,mCAAmB;AAGxC,QAAM,cAAc;AAAA,IAClB,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAI,gBAAY,mCAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AAEA,QAAM,+BAA2B,4CAA8B,gBAAgB,gBAAgB;AAC/F,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YACE,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,QAAW;AAAA,MAC9D,GAAI,gBAAgB,UAAU,EAAE,QAAQ,eAAe,OAAO;AAAA,MAC9D,GAAI,6BAA6B,UAAa,EAAE,SAAS,yBAAyB;AAAA,IACpF,CAAC;AAAA,IACH;AAAA,IACA;AAAA,EACF;AAEA,YAAU,KAAK;AAAA,IACb,MAAM,UAAU,UAAU,UAAU;AAAA,IACpC,SAAS,aAAa,QAAQ,uBAAuB,UAAU,UAAU,UAAU,SAAS;AAAA,IAC5F,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAKA,eAAe,mBACb,UACA,UACA,MACA,WACA,YAA6B,CAAC,GAC9B,eACA,gBACkB;AAClB,QAAM,mBAAe,mCAAmB;AACxC,QAAM,cAAc;AAAA,IAClB,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAI,gBAAY,mCAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAU,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAyCA,eAAsB,WAAW,SAUA;AAC/B,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,CAAC;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB;AAAA,IAClB;AAAA,EACF,IAAI;AACJ,QAAM,UAAU,IAAI,IAAI,QAAQ;AAEhC,YAAU,KAAK;AAAA,IACb,MAAM;AAAA,IACN,SAAS,sBAAsB,OAAO;AAAA,IACtC,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,YAAY,eAAe,UAAU,YAAY,UAAU;AAAA,EAC7D,CAAC;AAED,QAAM,YAAY,IAAI,cAAAA,OAAU;AAAA,IAC9B,MAAM;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAGD,QAAM,mBAAyD,CAAC;AAehE,QAAM,wBAAwB,eAC1B,OAAO,YAAY,OAAO,QAAQ,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,MAAM,eAAe,CAAC,IAC3G;AACJ,QAAM,cAAsC;AAAA,IAC1C,GAAG;AAAA,IACH,GAAI,gBAAY,mCAAqB,SAAS,IAAI,CAAC;AAAA,EACrD;AACA,mBAAiB,cAAc,EAAE,SAAS,aAAa,UAAU,SAAS;AAC1E,MAAI,cAAc;AAChB,qBAAiB,eAAe;AAChC,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH,WAAW,WAAW;AACpB,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH,WAAW,OAAO,KAAK,WAAW,EAAE,SAAS,GAAG;AAC9C,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAMA,QAAM,uBAAmB,sCAAwB,0BAA0B;AAC3E,QAAM,6BAAyB,4CAA8B,0BAA0B;AACvF,QAAM,iBAAiB;AAAA,IACrB,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,2BAA2B,UAAa,EAAE,SAAS,uBAAuB;AAAA,EAChF;AACA,QAAM,kBAAgC,YAAY,CAAC,OAAO,SAAS,MAAM,OAAO,IAAI;AACpF,QAAM,kBAAc;AAAA,IAAuB,CAAC,OAAO,aACjD;AAAA,MAA0B,CAAC,QAAQ,MAAM,MAAM;AAAA,MAAG;AAAA,MAAkB,kBAClE,gBAAgB,OAAO,EAAE,GAAG,MAAM,QAAQ,aAAa,CAAC;AAAA,IAC1D;AAAA,EACF;AACA,QAAM,sBAAkB,+DAAkC,WAAW;AACrE,QAAM,cAA4B,qBAC7B,uCAAuB;AAAA,IACtB,UAAU;AAAA,IACV,SAAS,eAAe;AAAA,IACxB,eAAe,eAAe;AAAA,EAChC,CAAC,IACD;AACJ,mBAAiB,YAAQ,gDAAqB,WAAW;AAEzD,QAAM,YAAY,IAAI,oDAA8B,SAAS,gBAAgB;AAE7E,MAAI;AACF,UAAM,UAAU,QAAQ,WAAW,cAAc;AACjD,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO,EAAE,QAAQ,WAAW,UAAU;AAAA,EACxC,SAAS,OAAO;AAGd,QAAI,iBAAiB,+BAAmB;AACtC,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,YAAM,OAAO,OAAO,OAAO,EAAE,WAAW,QAAQ,UAAU,CAAC;AAAA,IAC7D;AAUA,YAAI,0BAAW,KAAK,GAAG;AACrB,YAAM,SAAS,eACX,UACA,YACE,WACA,OAAO,KAAK,WAAW,EAAE,SAAS,IAChC,WACA;AACR,YAAM,OACJ,WAAW,SACP,8HACA,WAAW,WACT,oJACA,WAAW,WACT,qEACA;AACV,YAAM,SAAS,2CAA2C,QAAQ,2BAA2B,MAAM,KAAK,IAAI;AAC5G,YAAM,UAAU,OAAO,OAAO,IAAI,MAAM,MAAM,GAAG;AAAA,QAC/C,OAAO;AAAA,QACP,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB,CAAC;AACD,YAAM;AAAA,IACR;AAEA,UAAM;AAAA,EACR;AACF;AAyBA,eAAsB,qBAAqB,SAA2C;AACpF,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,CAAC;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,QAAM,+BAA2B,4CAA8B,gBAAgB;AAC/E,QAAM,iBAAiB;AAAA,IACrB,GAAI,UAAU,EAAE,OAAO;AAAA,IACvB,GAAI,6BAA6B,UAAa,EAAE,SAAS,yBAAyB;AAAA,EACpF;AAGA,MAAI,CAAC,cAAc;AACjB,WAAO,YAAY,UAAU,UAAU,MAAM,WAAW,WAAW,eAAe,gBAAgB,SAAS;AAAA,MACzG;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,UAAM,wCAAqB,UAAU,UAAU,MAAM,QAAW,WAAW,eAAe;AAAA,IAC9G;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,EAChB,CAAC;AACD,MAAI,cAAc,SAAS;AACzB,cAAU,KAAK;AAAA,MACb,MAAM,cAAc,UAAU,UAAU,UAAU;AAAA,MAClD,SAAS,aAAa,QAAQ;AAAA,MAC9B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AACD,WAAO,cAAc;AAAA,EACvB;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,IACA,OAAM,WAAU;AACd,gBAAU,KAAK;AAAA,QACb,MAAM;AAAA,QACN,SAAS,qBAAqB,QAAQ;AAAA,QACtC,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,YAAMC,YAAW,MAAM,OAAO,SAAS,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,QAAW,cAAc;AAErG,gBAAU,KAAK;AAAA,QACb,MAAMA,WAAU,UAAU,UAAU;AAAA,QACpC,SAAS,aAAa,QAAQ;AAAA,QAC9B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAED,aAAOA;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;","names":["import_auth","import_client","signal","MCPClient","response"]}