@agenthippo-ai/agenthippo 1.110.11 → 1.110.20

package/out/cli/data-plane/gateway.js

@@ -1,218 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TURN_NONCE_HEADER = exports.TURN_NONCE_ENV = exports.DATA_MCP_URL_ENV = void 0;
-exports.startDataGateway = startDataGateway;
-/**
- * Data-plane MCP gateway — a streamable-HTTP MCP server inside the serve (broker) process,
- * bound to 127.0.0.1 (secure-obo-design §3.1/§3.2).
- *
- * Every request must present `Authorization: Bearer <turn nonce>`; the nonce resolves in
- * the TurnRegistry to a verified {userId, sessionKey}. The credential is then selected
- * SERVER-SIDE from the broker at call time (§5 step 7) — no parameter in the MCP request
- * can name a user or a credential. Unknown/expired nonce ⇒ 401, fail closed.
- *
- * What nonce theft buys is documented in §3.3: loopback-only, turn-scoped, tool-surface-
- * only access as the user the model was already acting for.
- */
-const http = __importStar(require("http"));
-const index_js_1 = require("@modelcontextprotocol/sdk/server/index.js");
-const streamableHttp_js_1 = require("@modelcontextprotocol/sdk/server/streamableHttp.js");
-const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
-const serve_hardening_1 = require("../serve-hardening");
-const registry_1 = require("./registry");
-/** Loopback URL of the data-plane gateway; set per turn into the engine child env. */
-exports.DATA_MCP_URL_ENV = 'AGENTHIPPO_DATA_MCP_URL';
-/** The turn capability. Per-spawn env only; never written to any shared file. */
-exports.TURN_NONCE_ENV = 'AGENTHIPPO_TURN_NONCE';
-/**
- * Request header carrying an EDGE-registered turn nonce (P1 fix, obo-inprogress §2). The
- * trusted edge (IdP Caddy) registers the turn with the sidecar via forward_auth and copies
- * this header onto the request it proxies to serve. Trusted exactly like the pinned identity
- * header: only the in-network edge can reach serve, and the edge overwrites any client-
- * supplied value. A forged value fails closed at the gateway (unknown nonce ⇒ 401).
- */
-exports.TURN_NONCE_HEADER = 'x-agent-turn-nonce';
-function bearerToken(header) {
-    const m = header?.match(/^Bearer\s+(\S+)$/i);
-    return m?.[1];
-}
-/** sha256 prefix for audit lines — never log a raw nonce (secure-obo-design §11). */
-function noncePrefix(nonce) {
-    return nonce ? (0, registry_1.hashNonce)(nonce).slice(0, 12) : 'none';
-}
-async function startDataGateway(opts) {
-    const server = http.createServer(async (req, res) => {
-        try {
-            const urlPath = req.url?.split('?')[0] ?? '';
-            // Release-by-nonce (edge-registration mode): serve holds the nonce but no control-API
-            // authority, so it ends the turn here. Auth is the nonce itself — releasing is the one
-            // operation safe to grant any nonce holder (fail-closed: it only kills the capability
-            // early; the registry deadline remains the backstop when this is never called).
-            if (urlPath === '/turn' && req.method === 'DELETE') {
-                const nonce = bearerToken(req.headers.authorization);
-                if (nonce) {
-                    const released = opts.registry.releaseByNonce(nonce);
-                    opts.audit?.('edge', 'turn_release', { released, nonce_sha256_prefix: noncePrefix(nonce) });
-                }
-                res.writeHead(204);
-                res.end();
-                return;
-            }
-            if (urlPath !== '/mcp') {
-                res.writeHead(404, { 'Content-Type': 'application/json' });
-                res.end(JSON.stringify({ error: 'not found' }));
-                return;
-            }
-            if (req.method !== 'POST') {
-                // Stateless transport: one POST per JSON-RPC exchange; no GET stream, no sessions.
-                res.writeHead(405, { 'Content-Type': 'application/json', 'Allow': 'POST' });
-                res.end(JSON.stringify({ error: 'method not allowed' }));
-                return;
-            }
-            const nonce = bearerToken(req.headers.authorization);
-            const turn = nonce ? opts.registry.resolve(nonce) : undefined;
-            if (!turn) {
-                // Expired / unknown / missing — a stale engine subprocess fails CLOSED here
-                // instead of ever using a stale user's credential (§3.2).
-                opts.audit?.('unauthorized', 'nonce_reject', {
-                    reason: nonce ? 'unknown_or_expired' : 'missing',
-                    nonce_sha256_prefix: noncePrefix(nonce),
-                });
-                res.writeHead(401, { 'Content-Type': 'application/json' });
-                res.end(JSON.stringify({
-                    jsonrpc: '2.0',
-                    error: { code: -32001, message: 'Unauthorized: missing, unknown, or expired turn nonce' },
-                    id: null,
-                }));
-                return;
-            }
-            opts.logger?.info(`[DataPlane] authorized request user=${turn.userId} session=${turn.sessionKey}`);
-            let body;
-            try {
-                body = JSON.parse(await (0, serve_hardening_1.readBodyWithCap)(req));
-            }
-            catch {
-                res.writeHead(400, { 'Content-Type': 'application/json' });
-                res.end(JSON.stringify({ jsonrpc: '2.0', error: { code: -32700, message: 'Parse error' }, id: null }));
-                return;
-            }
-            // Fresh stateless server+transport per request (SDK stateless pattern) so a request
-            // carries exactly its own turn's authority and nothing outlives the response.
-            const mcp = buildTurnScopedMcpServer(opts, turn);
-            const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({ sessionIdGenerator: undefined, enableJsonResponse: true });
-            res.on('close', () => {
-                void transport.close();
-                void mcp.close();
-            });
-            await mcp.connect(transport);
-            await transport.handleRequest(req, res, body);
-        }
-        catch (err) {
-            opts.logger?.warn(`[DataPlane] gateway error: ${err instanceof Error ? err.message : String(err)}`);
-            if (!res.headersSent) {
-                res.writeHead(500, { 'Content-Type': 'application/json' });
-            }
-            res.end(JSON.stringify({ jsonrpc: '2.0', error: { code: -32603, message: 'Internal error' }, id: null }));
-        }
-    });
-    const bindHost = opts.host ?? '127.0.0.1';
-    await new Promise((resolve, reject) => {
-        server.once('error', reject);
-        // Default loopback; a sidecar binds 0.0.0.0 for the private pod network only.
-        server.listen(opts.port ?? 0, bindHost, () => resolve());
-    });
-    const address = server.address();
-    if (!address || typeof address === 'string') {
-        throw new Error('Data gateway failed to bind a port');
-    }
-    const url = `http://${opts.advertiseHost ?? '127.0.0.1'}:${address.port}/mcp`;
-    opts.logger?.info(`[DataPlane] gateway listening at ${url}`);
-    return {
-        url,
-        close: () => new Promise((resolve) => server.close(() => resolve())),
-    };
-}
-function buildTurnScopedMcpServer(opts, turn) {
-    const server = new index_js_1.Server({ name: 'agenthippo-data-gateway', version: '1.0.0' }, { capabilities: { tools: {} } });
-    server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => ({
-        tools: await opts.connector.listTools(),
-    }));
-    server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
-        const toolName = request.params.name;
-        // Server-side credential selection at call time (§5 step 7): the registry entry's
-        // verified userId picks the credential — never anything in the MCP request.
-        let secretRef;
-        try {
-            const credential = await opts.broker.acquire(turn.userId, turn.inboundToken);
-            secretRef = credential.secretRef;
-            opts.audit?.(turn.sessionKey, 'tool_authorize', { tool: toolName, userId: turn.userId, provider: opts.broker.provider.name });
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : String(err);
-            opts.audit?.(turn.sessionKey, 'tool_deny', { tool: toolName, userId: turn.userId, reason: 'acquire_failed', error: message });
-            return {
-                content: [{ type: 'text', text: JSON.stringify({ ok: false, error: `credential acquire failed (fail-closed): ${message}` }) }],
-                isError: true,
-            };
-        }
-        try {
-            return await opts.connector.callTool(toolName, request.params.arguments ?? {}, { userId: turn.userId, credential: secretRef });
-        }
-        catch (err) {
-            // Mid-turn credential expiry: drop the cache, re-acquire once, retry once (§5).
-            const message = err instanceof Error ? err.message : String(err);
-            if (/401|unauthoriz|expired/i.test(message)) {
-                opts.broker.invalidate(turn.userId);
-                try {
-                    const retryCred = await opts.broker.acquire(turn.userId, turn.inboundToken);
-                    return await opts.connector.callTool(toolName, request.params.arguments ?? {}, { userId: turn.userId, credential: retryCred.secretRef });
-                }
-                catch {
-                    // fall through to the original error below
-                }
-            }
-            opts.audit?.(turn.sessionKey, 'tool_deny', { tool: toolName, userId: turn.userId, reason: 'call_failed', error: message });
-            return {
-                content: [{ type: 'text', text: JSON.stringify({ ok: false, error: message }) }],
-                isError: true,
-            };
-        }
-    });
-    return server;
-}

package/out/cli/data-plane/index.js

@@ -1,153 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DataPlane = exports.resolveEdgeDataPlane = exports.EdgeDataPlane = exports.resolveRemoteDataPlane = exports.RemoteDataPlane = exports.ASSERTION_HEADER = exports.startDataPlaneSidecar = exports.EGRESS_URL_ENV = exports.startEgressBroker = exports.TURN_NONCE_HEADER = exports.TURN_NONCE_ENV = exports.DATA_MCP_URL_ENV = exports.startDataGateway = exports.TURN_META_KEY = exports.ConnectorHost = exports.identityProvider = exports.passthroughProvider = exports.resolveProvider = exports.CredentialBroker = exports.DEFAULT_TURN_DEADLINE_MS = exports.hashNonce = exports.TurnRegistry = void 0;
-exports.resolveDataPlaneConfig = resolveDataPlaneConfig;
-/**
- * DataPlane — orchestration of the credential broker + data-plane gateway
- * (secure-obo-design §3): TurnRegistry + CredentialBroker + broker-owned connector
- * subprocess + loopback streamable-HTTP MCP gateway.
- *
- * serve starts one DataPlane at boot when the pack declares `spec.dataPlane`, then
- * registers each verified turn to get `{ AGENTHIPPO_TURN_NONCE }` for the engine's
- * per-spawn env. The pack's MCP config points at `${env:AGENTHIPPO_DATA_MCP_URL}` with
- * `bearerTokenEnv: AGENTHIPPO_TURN_NONCE` — turn-invariant bytes, per-turn authority.
- */
-const path = __importStar(require("path"));
-const registry_1 = require("./registry");
-const broker_1 = require("./broker");
-const connector_host_1 = require("./connector-host");
-const gateway_1 = require("./gateway");
-var registry_2 = require("./registry");
-Object.defineProperty(exports, "TurnRegistry", { enumerable: true, get: function () { return registry_2.TurnRegistry; } });
-Object.defineProperty(exports, "hashNonce", { enumerable: true, get: function () { return registry_2.hashNonce; } });
-Object.defineProperty(exports, "DEFAULT_TURN_DEADLINE_MS", { enumerable: true, get: function () { return registry_2.DEFAULT_TURN_DEADLINE_MS; } });
-var broker_2 = require("./broker");
-Object.defineProperty(exports, "CredentialBroker", { enumerable: true, get: function () { return broker_2.CredentialBroker; } });
-Object.defineProperty(exports, "resolveProvider", { enumerable: true, get: function () { return broker_2.resolveProvider; } });
-Object.defineProperty(exports, "passthroughProvider", { enumerable: true, get: function () { return broker_2.passthroughProvider; } });
-Object.defineProperty(exports, "identityProvider", { enumerable: true, get: function () { return broker_2.identityProvider; } });
-var connector_host_2 = require("./connector-host");
-Object.defineProperty(exports, "ConnectorHost", { enumerable: true, get: function () { return connector_host_2.ConnectorHost; } });
-Object.defineProperty(exports, "TURN_META_KEY", { enumerable: true, get: function () { return connector_host_2.TURN_META_KEY; } });
-var gateway_2 = require("./gateway");
-Object.defineProperty(exports, "startDataGateway", { enumerable: true, get: function () { return gateway_2.startDataGateway; } });
-Object.defineProperty(exports, "DATA_MCP_URL_ENV", { enumerable: true, get: function () { return gateway_2.DATA_MCP_URL_ENV; } });
-Object.defineProperty(exports, "TURN_NONCE_ENV", { enumerable: true, get: function () { return gateway_2.TURN_NONCE_ENV; } });
-Object.defineProperty(exports, "TURN_NONCE_HEADER", { enumerable: true, get: function () { return gateway_2.TURN_NONCE_HEADER; } });
-var egress_1 = require("./egress");
-Object.defineProperty(exports, "startEgressBroker", { enumerable: true, get: function () { return egress_1.startEgressBroker; } });
-Object.defineProperty(exports, "EGRESS_URL_ENV", { enumerable: true, get: function () { return egress_1.EGRESS_URL_ENV; } });
-var sidecar_1 = require("./sidecar");
-Object.defineProperty(exports, "startDataPlaneSidecar", { enumerable: true, get: function () { return sidecar_1.startDataPlaneSidecar; } });
-Object.defineProperty(exports, "ASSERTION_HEADER", { enumerable: true, get: function () { return sidecar_1.ASSERTION_HEADER; } });
-var remote_1 = require("./remote");
-Object.defineProperty(exports, "RemoteDataPlane", { enumerable: true, get: function () { return remote_1.RemoteDataPlane; } });
-Object.defineProperty(exports, "resolveRemoteDataPlane", { enumerable: true, get: function () { return remote_1.resolveRemoteDataPlane; } });
-Object.defineProperty(exports, "EdgeDataPlane", { enumerable: true, get: function () { return remote_1.EdgeDataPlane; } });
-Object.defineProperty(exports, "resolveEdgeDataPlane", { enumerable: true, get: function () { return remote_1.resolveEdgeDataPlane; } });
-/**
- * Resolve the pack's data-plane declaration. The connector path resolves against the PACK
- * SOURCE directory (operator-authored, broker trust domain) — not the agent-readable
- * workspace copy.
- */
-function resolveDataPlaneConfig(spec, packPath) {
-    const dp = spec?.dataPlane;
-    const connector = dp?.connector?.trim();
-    if (!connector) {
-        return undefined;
-    }
-    return {
-        connectorPath: path.isAbsolute(connector) ? connector : path.join(packPath, connector),
-        provider: dp?.provider?.trim() || undefined,
-    };
-}
-class DataPlane {
-    url;
-    registry;
-    broker;
-    connector;
-    gateway;
-    constructor(url, registry, broker, connector, gateway) {
-        this.url = url;
-        this.registry = registry;
-        this.broker = broker;
-        this.connector = connector;
-        this.gateway = gateway;
-    }
-    static async start(cfg, opts) {
-        // Reuse serve's shared registry when given, so one nonce grants BOTH data and egress
-        // capabilities (secure-obo-design §7.6 step 2). Standalone (probe/tests) get their own.
-        const registry = opts?.registry ?? new registry_1.TurnRegistry();
-        const broker = new broker_1.CredentialBroker((0, broker_1.resolveProvider)(cfg.provider));
-        const connector = await connector_host_1.ConnectorHost.spawn({ connectorPath: cfg.connectorPath, logger: opts?.logger });
-        try {
-            const gateway = await (0, gateway_1.startDataGateway)({
-                registry, broker, connector, logger: opts?.logger, audit: opts?.audit,
-                host: opts?.gateway?.host, port: opts?.gateway?.port, advertiseHost: opts?.gateway?.advertiseHost,
-            });
-            return new DataPlane(gateway.url, registry, broker, connector, gateway);
-        }
-        catch (err) {
-            await connector.close();
-            throw err;
-        }
-    }
-    /** Register a turn directly in the local registry (used by the sidecar control API). */
-    registerTurnRaw(reg) {
-        return this.registry.register(reg);
-    }
-    /**
-     * Register a verified turn. Returns the per-spawn env for the engine and the release()
-     * to call in the turn's `finally`. The gateway URL itself is boot-stable and rides
-     * process.env (see serve), keeping codex's config.toml turn-invariant.
-     */
-    registerTurn(reg) {
-        const { nonce, release } = this.registry.register(reg);
-        return {
-            nonce,
-            env: { [gateway_1.TURN_NONCE_ENV]: nonce, [gateway_1.DATA_MCP_URL_ENV]: this.url },
-            release,
-        };
-    }
-    async close() {
-        await this.gateway.close();
-        await this.connector.close();
-    }
-}
-exports.DataPlane = DataPlane;

package/out/cli/data-plane/registry.js

@@ -1,89 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TurnRegistry = exports.DEFAULT_TURN_DEADLINE_MS = void 0;
-exports.hashNonce = hashNonce;
-/**
- * TurnRegistry — the per-turn capability table of the data-plane gateway
- * (secure-obo-design §3.1). Replaces the on-disk token file entirely.
- *
- * Per turn: mint a random 128-bit nonce, store the turn's verified identity under
- * `sha256(nonce)` (the raw nonce is never stored or used as a lookup key, so lookups leak
- * no timing signal about live nonces), hand the nonce to the engine via per-spawn env only,
- * and delete the entry in the same `finally` that ends the turn. `deadline` is the backstop
- * for a stranded entry — a leaked nonce dies on its own.
- *
- * The registry holds NO data credential: the gateway selects the credential server-side at
- * call time from the broker's per-user cache (§5 step 7) — nothing a client sends can name
- * a user or a credential.
- */
-const crypto_1 = require("crypto");
-/** Backstop lifetime for a turn's nonce. Turns are seconds-to-minutes; 30 min is generous. */
-exports.DEFAULT_TURN_DEADLINE_MS = 30 * 60_000;
-function hashNonce(nonce) {
-    return (0, crypto_1.createHash)('sha256').update(nonce).digest('hex');
-}
-class TurnRegistry {
-    entries = new Map();
-    /**
-     * Mint a nonce and register the turn. Call `release()` in the turn's `finally`.
-     */
-    register(reg) {
-        this.prune();
-        // Never derived from anything — pure randomness (secure-obo-design §3.1).
-        const nonce = (0, crypto_1.randomBytes)(16).toString('hex');
-        const key = hashNonce(nonce);
-        this.entries.set(key, {
-            userId: reg.userId,
-            sessionKey: reg.sessionKey,
-            inboundToken: reg.inboundToken,
-            egressStoreKey: reg.egressStoreKey,
-            deadline: reg.deadline ?? Date.now() + exports.DEFAULT_TURN_DEADLINE_MS,
-        });
-        let released = false;
-        return {
-            nonce,
-            release: () => {
-                if (!released) {
-                    released = true;
-                    this.entries.delete(key);
-                }
-            },
-        };
-    }
-    /**
-     * Release a turn by its nonce (idempotent). Lets a holder of the nonce end its own turn —
-     * used by the gateway's release endpoint for EDGE-registered turns, where serve holds the
-     * nonce but no registration authority. Strictly fail-closed: the worst a stolen nonce can
-     * do here is end the capability early.
-     */
-    releaseByNonce(nonce) {
-        return this.entries.delete(hashNonce(nonce));
-    }
-    /** Resolve a presented nonce to its turn, enforcing the deadline. Fail-closed: unknown/expired → undefined. */
-    resolve(nonce, now = Date.now()) {
-        const entry = this.entries.get(hashNonce(nonce));
-        if (!entry) {
-            return undefined;
-        }
-        if (now > entry.deadline) {
-            this.entries.delete(hashNonce(nonce));
-            return undefined;
-        }
-        return entry;
-    }
-    /** Drop expired entries (called on every register; cheap at realistic turn counts). */
-    prune(now = Date.now()) {
-        for (const [key, entry] of this.entries) {
-            if (now > entry.deadline) {
-                this.entries.delete(key);
-            }
-        }
-    }
-    get size() {
-        return this.entries.size;
-    }
-}
-exports.TurnRegistry = TurnRegistry;

package/out/cli/data-plane/remote.js

@@ -1,106 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RemoteDataPlane = exports.EdgeDataPlane = void 0;
-exports.resolveEdgeDataPlane = resolveEdgeDataPlane;
-exports.resolveRemoteDataPlane = resolveRemoteDataPlane;
-/**
- * RemoteDataPlane — serve's client to a data-plane SIDECAR (secure-obo-design §7.6).
- *
- * When the connector runs in its own container, serve (in the agent container) holds NO base
- * credential. It registers each verified turn with the sidecar's authenticated control API and
- * hands the engine the returned nonce plus the sidecar's gateway URL. The engine dials the
- * sidecar gateway with the nonce; the sidecar resolves nonce → user and runs the connector.
- *
- * Presents the same `registerTurn()` shape as the in-process `DataPlane`, so serve's turn
- * handling is identical whether the connector is in-process or a sidecar.
- */
-const gateway_1 = require("./gateway");
-/** Read the edge-mode wiring from env. Returns null unless explicitly enabled. */
-function resolveEdgeDataPlane(env = process.env) {
-    const enabled = env.AGENTHIPPO_DATA_PLANE_EDGE?.trim();
-    const gatewayUrl = env.AGENTHIPPO_DATA_MCP_URL?.trim();
-    if (!enabled || enabled === '0' || enabled.toLowerCase() === 'false' || !gatewayUrl) {
-        return null;
-    }
-    return { gatewayUrl };
-}
-class EdgeDataPlane {
-    cfg;
-    constructor(cfg) {
-        this.cfg = cfg;
-    }
-    /** The engine-facing gateway URL (boot-stable; set into process.env by serve like the local plane). */
-    get url() { return this.cfg.gatewayUrl; }
-    /**
-     * Adopt an edge-registered nonce for this turn. Release calls the gateway's
-     * nonce-authenticated `DELETE /turn` — the one operation a bare nonce may perform besides
-     * the tool surface, and strictly fail-closed (it only ends the capability early; the
-     * sidecar's registry deadline is the backstop when the call never lands).
-     */
-    adoptTurn(nonce) {
-        return {
-            nonce,
-            env: { [gateway_1.TURN_NONCE_ENV]: nonce, [gateway_1.DATA_MCP_URL_ENV]: this.cfg.gatewayUrl },
-            release: async () => {
-                try {
-                    await fetch(new URL('/turn', this.cfg.gatewayUrl), {
-                        method: 'DELETE',
-                        headers: { Authorization: `Bearer ${nonce}` },
-                    });
-                }
-                catch { /* best-effort release; the sidecar deadline is the backstop */ }
-            },
-        };
-    }
-}
-exports.EdgeDataPlane = EdgeDataPlane;
-/** Read the sidecar wiring from env (set at deploy on the agent container). Returns null if absent. */
-function resolveRemoteDataPlane(env = process.env) {
-    const controlUrl = env.AGENTHIPPO_DATA_PLANE_CONTROL_URL?.trim();
-    const registerToken = env.AGENTHIPPO_DATA_PLANE_TOKEN?.trim();
-    const gatewayUrl = env.AGENTHIPPO_DATA_MCP_URL?.trim();
-    if (!controlUrl || !registerToken || !gatewayUrl) {
-        return null;
-    }
-    return { controlUrl, registerToken, gatewayUrl };
-}
-class RemoteDataPlane {
-    cfg;
-    constructor(cfg) {
-        this.cfg = cfg;
-    }
-    /** The engine-facing gateway URL (boot-stable; set into process.env by serve like the local plane). */
-    get url() { return this.cfg.gatewayUrl; }
-    /**
-     * Register a turn with the sidecar. Returns the per-spawn env + release, matching DataPlane.
-     * The base credential never touches this process — only the nonce comes back.
-     */
-    async registerTurn(reg) {
-        const res = await fetch(`${this.cfg.controlUrl.replace(/\/$/, '')}/turns`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${this.cfg.registerToken}` },
-            body: JSON.stringify(reg),
-        });
-        if (!res.ok) {
-            throw new Error(`data-plane sidecar register failed: HTTP ${res.status}`);
-        }
-        const { nonce } = await res.json();
-        return {
-            nonce,
-            env: { [gateway_1.TURN_NONCE_ENV]: nonce, [gateway_1.DATA_MCP_URL_ENV]: this.cfg.gatewayUrl },
-            release: async () => {
-                try {
-                    await fetch(`${this.cfg.controlUrl.replace(/\/$/, '')}/turns/${encodeURIComponent(nonce)}`, {
-                        method: 'DELETE',
-                        headers: { Authorization: `Bearer ${this.cfg.registerToken}` },
-                    });
-                }
-                catch { /* best-effort release; the sidecar deadline is the backstop */ }
-            },
-        };
-    }
-}
-exports.RemoteDataPlane = RemoteDataPlane;