@adcp/sdk 15.4.0 → 15.6.0

package/dist/lib/protocols/transportDiagnostics.js

@@ -30,6 +30,7 @@ __export(transportDiagnostics_exports, {
 module.exports = __toCommonJS(transportDiagnostics_exports);
 var import_global_async_local_storage = require('../utils/global-async-local-storage.js');
 var import_node_crypto = require("node:crypto");
+var import_mcp_call_context = require('./mcp-call-context.js');
 const BODY_SNIPPET_LIMIT = 64 * 1024;
 const BODY_SNIPPET_TIMEOUT_MS = 1e3;
 const OBSERVER_FLUSH_TIMEOUT_MS = 5e3;
@@ -110,7 +111,7 @@ function wrapFetchWithTransportDiagnostics(upstream) {
     const url = sanitizeTransportUrl(getUrl(input));
     const requestHeaders = sanitizeTransportHeaders(mergeRequestHeaders(input, init));
     const requestBody = bodySnippet(init?.body);
-    const baseEvent = {
+    const correlation = {
       agentId: slot.agentId,
       protocol: slot.protocol,
       transportRequestId,
@@ -122,11 +123,15 @@ function wrapFetchWithTransportDiagnostics(upstream) {
       method,
       url,
       requestHeaders,
+      startedAt
+    };
+    const signal = getSignal(input, init);
+    const baseEvent = {
+      ...correlation,
       ...requestBody && {
         requestBody: requestBody.body,
         requestBodyTruncated: requestBody.truncated
-      },
-      startedAt
+      }
     };
     emitTransportActivity(handler, {
       type: "request_started",
@@ -148,13 +153,18 @@ function wrapFetchWithTransportDiagnostics(upstream) {
       };
       const responseBody = responseBodySnippet(response);
       if (!responseBody) {
-        emitTransportActivity(
-          handler,
-          response.body ? {
-            ...responseEvent,
-            responseBodyTruncated: true
-          } : responseEvent
-        );
+        if (!response.body) {
+          emitTransportActivity(handler, responseEvent);
+          return response;
+        }
+        const observer = observeResponseBody(response, handler, correlation, startedAtMs, signal);
+        emitTransportActivity(handler, {
+          ...responseEvent,
+          responseBodyTruncated: true,
+          ...observer && { streaming: true }
+        });
+        observer?.start();
+        return observer?.response ?? response;
       } else {
         void responseBody.then(
           (captured) => {
@@ -188,8 +198,13 @@ function wrapFetchWithTransportDiagnostics(upstream) {
   return wrapped;
 }
 function emitTransportActivity(handler, event) {
+  return dispatchTransportActivity(handler, event, true);
+}
+function emitUntrackedTransportActivity(handler, event) {
+  void dispatchTransportActivity(handler, event, false);
+}
+function dispatchTransportActivity(handler, event, track) {
   try {
-    const slot = transportDiagnosticsStorage.getStore();
     const frozen = Object.freeze(structuredClone(event));
     const pending = Promise.resolve().then(() => handler(frozen)).then(
       () => {
@@ -197,12 +212,113 @@ function emitTransportActivity(handler, event) {
       () => {
       }
     );
-    slot?.pending.push(pending);
+    if (track) transportDiagnosticsStorage.getStore()?.pending.push(pending);
     return pending;
   } catch {
     return void 0;
   }
 }
+function observeResponseBody(response, handler, correlation, startedAtMs, signal) {
+  const source = response.body;
+  if (!source) return void 0;
+  let reader;
+  try {
+    reader = source.getReader();
+  } catch {
+    return void 0;
+  }
+  const { status: httpStatus, statusText } = response;
+  let bytes = 0;
+  let finished = false;
+  const release = () => {
+    try {
+      reader.releaseLock();
+    } catch {
+    }
+  };
+  const onAbort = () => finish((0, import_mcp_call_context.isMCPCallCompleted)(signal?.reason) ? "cancelled" : "aborted", signal?.reason);
+  const finish = (outcome, error) => {
+    if (finished) return;
+    finished = true;
+    signal?.removeEventListener("abort", onAbort);
+    try {
+      const resolved = outcome !== "ended" && signal?.aborted ? (0, import_mcp_call_context.isMCPCallCompleted)(signal.reason) ? "cancelled" : "aborted" : outcome;
+      const event = {
+        ...correlation,
+        type: "response_completed",
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        durationMs: Date.now() - startedAtMs,
+        httpStatus,
+        statusText,
+        outcome: resolved,
+        bytes
+      };
+      if (error !== void 0 && (resolved === "errored" || resolved === "aborted")) {
+        event.errorName = error instanceof Error ? error.name : typeof error;
+        event.errorMessage = sanitizeDiagnosticText(error instanceof Error ? error.message : String(error));
+      }
+      emitUntrackedTransportActivity(handler, event);
+    } catch {
+    }
+  };
+  const classify = (error) => error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError") ? "aborted" : "errored";
+  const stream = new ReadableStream(
+    {
+      async pull(controller) {
+        try {
+          const { done, value } = await reader.read();
+          if (done) {
+            finish("ended");
+            release();
+            controller.close();
+            return;
+          }
+          if (typeof value?.byteLength === "number") bytes += value.byteLength;
+          controller.enqueue(value);
+        } catch (error) {
+          finish(classify(error), error);
+          release();
+          throw error;
+        }
+      },
+      cancel(reason) {
+        finish("cancelled", reason);
+        return reader.cancel(reason).finally(release);
+      }
+    },
+    { highWaterMark: 0 }
+  );
+  let rebuilt;
+  try {
+    rebuilt = new Response(stream, {
+      status: response.status,
+      statusText: response.statusText,
+      headers: response.headers
+    });
+  } catch {
+    reader.releaseLock();
+    return void 0;
+  }
+  preserveResponseMetadata(response, rebuilt);
+  const start = () => {
+    reader.closed.catch((error) => finish(classify(error), error));
+    if (signal?.aborted) onAbort();
+    else signal?.addEventListener("abort", onAbort, { once: true });
+  };
+  return { response: rebuilt, start };
+}
+function preserveResponseMetadata(from, to) {
+  for (const key of ["url", "redirected", "type"]) {
+    try {
+      Object.defineProperty(to, key, { value: from[key], enumerable: true, configurable: true });
+    } catch {
+    }
+  }
+}
+function getSignal(input, init) {
+  if (init?.signal) return init.signal;
+  return input instanceof Request ? input.signal : void 0;
+}
 function getUrl(input) {
   return typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
 }

package/dist/lib/protocols/transportDiagnostics.mjs

@@ -5,6 +5,7 @@ const __dirname = __adcpDirname(__adcpFileURLToPath(import.meta.url));
 const require2 = __adcpCreateRequire(import.meta.url);
 import { globalAsyncLocalStorage } from "../utils/global-async-local-storage.mjs";
 import { createHmac, randomUUID } from "node:crypto";
+import { isMCPCallCompleted } from "./mcp-call-context.mjs";
 const BODY_SNIPPET_LIMIT = 64 * 1024;
 const BODY_SNIPPET_TIMEOUT_MS = 1e3;
 const OBSERVER_FLUSH_TIMEOUT_MS = 5e3;
@@ -85,7 +86,7 @@ function wrapFetchWithTransportDiagnostics(upstream) {
     const url = sanitizeTransportUrl(getUrl(input));
     const requestHeaders = sanitizeTransportHeaders(mergeRequestHeaders(input, init));
     const requestBody = bodySnippet(init?.body);
-    const baseEvent = {
+    const correlation = {
       agentId: slot.agentId,
       protocol: slot.protocol,
       transportRequestId,
@@ -97,11 +98,15 @@ function wrapFetchWithTransportDiagnostics(upstream) {
       method,
       url,
       requestHeaders,
+      startedAt
+    };
+    const signal = getSignal(input, init);
+    const baseEvent = {
+      ...correlation,
       ...requestBody && {
         requestBody: requestBody.body,
         requestBodyTruncated: requestBody.truncated
-      },
-      startedAt
+      }
     };
     emitTransportActivity(handler, {
       type: "request_started",
@@ -123,13 +128,18 @@ function wrapFetchWithTransportDiagnostics(upstream) {
       };
       const responseBody = responseBodySnippet(response);
       if (!responseBody) {
-        emitTransportActivity(
-          handler,
-          response.body ? {
-            ...responseEvent,
-            responseBodyTruncated: true
-          } : responseEvent
-        );
+        if (!response.body) {
+          emitTransportActivity(handler, responseEvent);
+          return response;
+        }
+        const observer = observeResponseBody(response, handler, correlation, startedAtMs, signal);
+        emitTransportActivity(handler, {
+          ...responseEvent,
+          responseBodyTruncated: true,
+          ...observer && { streaming: true }
+        });
+        observer?.start();
+        return observer?.response ?? response;
       } else {
         void responseBody.then(
           (captured) => {
@@ -163,8 +173,13 @@ function wrapFetchWithTransportDiagnostics(upstream) {
   return wrapped;
 }
 function emitTransportActivity(handler, event) {
+  return dispatchTransportActivity(handler, event, true);
+}
+function emitUntrackedTransportActivity(handler, event) {
+  void dispatchTransportActivity(handler, event, false);
+}
+function dispatchTransportActivity(handler, event, track) {
   try {
-    const slot = transportDiagnosticsStorage.getStore();
     const frozen = Object.freeze(structuredClone(event));
     const pending = Promise.resolve().then(() => handler(frozen)).then(
       () => {
@@ -172,12 +187,113 @@ function emitTransportActivity(handler, event) {
       () => {
       }
     );
-    slot?.pending.push(pending);
+    if (track) transportDiagnosticsStorage.getStore()?.pending.push(pending);
     return pending;
   } catch {
     return void 0;
   }
 }
+function observeResponseBody(response, handler, correlation, startedAtMs, signal) {
+  const source = response.body;
+  if (!source) return void 0;
+  let reader;
+  try {
+    reader = source.getReader();
+  } catch {
+    return void 0;
+  }
+  const { status: httpStatus, statusText } = response;
+  let bytes = 0;
+  let finished = false;
+  const release = () => {
+    try {
+      reader.releaseLock();
+    } catch {
+    }
+  };
+  const onAbort = () => finish(isMCPCallCompleted(signal?.reason) ? "cancelled" : "aborted", signal?.reason);
+  const finish = (outcome, error) => {
+    if (finished) return;
+    finished = true;
+    signal?.removeEventListener("abort", onAbort);
+    try {
+      const resolved = outcome !== "ended" && signal?.aborted ? isMCPCallCompleted(signal.reason) ? "cancelled" : "aborted" : outcome;
+      const event = {
+        ...correlation,
+        type: "response_completed",
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        durationMs: Date.now() - startedAtMs,
+        httpStatus,
+        statusText,
+        outcome: resolved,
+        bytes
+      };
+      if (error !== void 0 && (resolved === "errored" || resolved === "aborted")) {
+        event.errorName = error instanceof Error ? error.name : typeof error;
+        event.errorMessage = sanitizeDiagnosticText(error instanceof Error ? error.message : String(error));
+      }
+      emitUntrackedTransportActivity(handler, event);
+    } catch {
+    }
+  };
+  const classify = (error) => error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError") ? "aborted" : "errored";
+  const stream = new ReadableStream(
+    {
+      async pull(controller) {
+        try {
+          const { done, value } = await reader.read();
+          if (done) {
+            finish("ended");
+            release();
+            controller.close();
+            return;
+          }
+          if (typeof value?.byteLength === "number") bytes += value.byteLength;
+          controller.enqueue(value);
+        } catch (error) {
+          finish(classify(error), error);
+          release();
+          throw error;
+        }
+      },
+      cancel(reason) {
+        finish("cancelled", reason);
+        return reader.cancel(reason).finally(release);
+      }
+    },
+    { highWaterMark: 0 }
+  );
+  let rebuilt;
+  try {
+    rebuilt = new Response(stream, {
+      status: response.status,
+      statusText: response.statusText,
+      headers: response.headers
+    });
+  } catch {
+    reader.releaseLock();
+    return void 0;
+  }
+  preserveResponseMetadata(response, rebuilt);
+  const start = () => {
+    reader.closed.catch((error) => finish(classify(error), error));
+    if (signal?.aborted) onAbort();
+    else signal?.addEventListener("abort", onAbort, { once: true });
+  };
+  return { response: rebuilt, start };
+}
+function preserveResponseMetadata(from, to) {
+  for (const key of ["url", "redirected", "type"]) {
+    try {
+      Object.defineProperty(to, key, { value: from[key], enumerable: true, configurable: true });
+    } catch {
+    }
+  }
+}
+function getSignal(input, init) {
+  if (init?.signal) return init.signal;
+  return input instanceof Request ? input.signal : void 0;
+}
 function getUrl(input) {
   return typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
 }

package/dist/lib/registry/types.generated.d.mts

@@ -1825,7 +1825,11 @@ export interface paths {
          */
         put: operations["connectAgent"];
         post?: never;
-        delete?: never;
+        /**
+         * Clear saved bearer or basic credentials
+         * @description Clear the selected organization's static credential while retaining OAuth configuration and compliance history. Requires authentication and ownership.
+         */
+        delete: operations["removeAgentAuthToken"];
         options?: never;
         head?: never;
         patch?: never;
@@ -10662,6 +10666,64 @@ export interface operations {
             };
         };
     };
+    removeAgentAuthToken: {
+        parameters: {
+            query?: {
+                org?: string;
+            };
+            header?: never;
+            path: {
+                encodedUrl: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Static credential cleared */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid parameters */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Authentication required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Not authorized */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     saveAgentOAuthClientCredentials: {
         parameters: {
             query?: never;

package/dist/lib/registry/types.generated.d.ts

@@ -1825,7 +1825,11 @@ export interface paths {
          */
         put: operations["connectAgent"];
         post?: never;
-        delete?: never;
+        /**
+         * Clear saved bearer or basic credentials
+         * @description Clear the selected organization's static credential while retaining OAuth configuration and compliance history. Requires authentication and ownership.
+         */
+        delete: operations["removeAgentAuthToken"];
         options?: never;
         head?: never;
         patch?: never;
@@ -10662,6 +10666,64 @@ export interface operations {
             };
         };
     };
+    removeAgentAuthToken: {
+        parameters: {
+            query?: {
+                org?: string;
+            };
+            header?: never;
+            path: {
+                encodedUrl: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Static credential cleared */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid parameters */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Authentication required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Not authorized */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     saveAgentOAuthClientCredentials: {
         parameters: {
             query?: never;

package/dist/lib/reporting/azure/index.d.mts

@@ -0,0 +1,26 @@
+import type { BlobServiceClient } from '@azure/storage-blob';
+import type { ReportingRowObjectProviderV1 } from '../ledger/row-storage-object.mjs';
+export interface CreateAzureBlobReportingRowObjectProviderOptionsV1 {
+    /** Official client used by bindings without a `credentialRef`. */
+    client?: BlobServiceClient;
+    /**
+     * Official clients keyed by `credentialRef`. This map is the closed set of
+     * references a binding may name; an unknown reference fails `UNSAFE_BINDING`.
+     * Endpoint and credentials come only from these clients.
+     */
+    clients?: Readonly<Record<string, BlobServiceClient>>;
+}
+/**
+ * Azure Blob Storage row-object provider (`@adcp/sdk/reporting/azure`).
+ *
+ * Inject official `BlobServiceClient`s with host-owned credentials (managed
+ * identity, workload identity). Bindings use `location: { account, container }`;
+ * the selected client must belong to `account`. Writes are block-blob uploads
+ * with `If-None-Match: *`. Blob versioning must be enabled on the storage account:
+ * the recorded native version is the write-unique `versionId` and pins every read
+ * and delete, so a delayed delete can never remove a later write that re-created
+ * identical bytes at the same key (ETags are content-derived and cannot fence that).
+ * The probe refuses accounts without versioning and proves create-only behaviour
+ * empirically.
+ */
+export declare function createAzureBlobReportingRowObjectProviderV1(options: CreateAzureBlobReportingRowObjectProviderOptionsV1): ReportingRowObjectProviderV1;

package/dist/lib/reporting/azure/index.d.ts

@@ -0,0 +1,26 @@
+import type { BlobServiceClient } from '@azure/storage-blob';
+import type { ReportingRowObjectProviderV1 } from '../ledger/row-storage-object';
+export interface CreateAzureBlobReportingRowObjectProviderOptionsV1 {
+    /** Official client used by bindings without a `credentialRef`. */
+    client?: BlobServiceClient;
+    /**
+     * Official clients keyed by `credentialRef`. This map is the closed set of
+     * references a binding may name; an unknown reference fails `UNSAFE_BINDING`.
+     * Endpoint and credentials come only from these clients.
+     */
+    clients?: Readonly<Record<string, BlobServiceClient>>;
+}
+/**
+ * Azure Blob Storage row-object provider (`@adcp/sdk/reporting/azure`).
+ *
+ * Inject official `BlobServiceClient`s with host-owned credentials (managed
+ * identity, workload identity). Bindings use `location: { account, container }`;
+ * the selected client must belong to `account`. Writes are block-blob uploads
+ * with `If-None-Match: *`. Blob versioning must be enabled on the storage account:
+ * the recorded native version is the write-unique `versionId` and pins every read
+ * and delete, so a delayed delete can never remove a later write that re-created
+ * identical bytes at the same key (ETags are content-derived and cannot fence that).
+ * The probe refuses accounts without versioning and proves create-only behaviour
+ * empirically.
+ */
+export declare function createAzureBlobReportingRowObjectProviderV1(options: CreateAzureBlobReportingRowObjectProviderOptionsV1): ReportingRowObjectProviderV1;