@agentskit/adapters 0.13.13 → 0.14.0

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { G as GenericAdapterConfig } from './createAdapter-Dfnf3Iio.cjs';
-export { C as CreateAdapterConfig, c as createAdapter } from './createAdapter-Dfnf3Iio.cjs';
+import { G as GenericAdapterConfig } from './createAdapter-C-pKR1aO.cjs';
+export { C as CreateAdapterConfig, c as createAdapter } from './createAdapter-C-pKR1aO.cjs';
 import * as _agentskit_core from '@agentskit/core';
 import { AdapterFactory, AdapterRequest, DataRegion, AdapterCapabilities, StreamChunk, EmbedFn } from '@agentskit/core';
 export { DataRegion } from '@agentskit/core';
@@ -284,10 +284,15 @@ interface BedrockConfig {
 /**
  * Minimal structural type for `BedrockRuntimeClient` so we don't take a hard
  * dep on `@aws-sdk/client-bedrock-runtime`.
+ *
+ * Second options argument is optional so existing one-argument injected
+ * clients remain structurally valid.
  */
 interface BedrockRuntimeClientLike {
     send(command: {
         input: BedrockInvokeInput;
+    }, options?: {
+        abortSignal?: AbortSignal;
     }): Promise<{
         body?: AsyncIterable<{
             chunk?: {
@@ -349,7 +354,13 @@ interface WebLlmEngineLike {
                         content?: string;
                     };
                 }>;
-            }>;
+            }> | Promise<AsyncIterable<{
+                choices: Array<{
+                    delta?: {
+                        content?: string;
+                    };
+                }>;
+            }>>;
         };
     };
 }
@@ -731,20 +742,25 @@ declare function withDeprecationPolicy<F extends AdapterFactory>(factory: F, opt
 } & DeprecationPolicy): F;
 
 /**
- * Credential rotation hook for adapters. Today rotating a provider key
- * means bouncing the runtime — unacceptable for 24/7 production.
+ * Opt-in credential rotation primitives.
  *
- * Adapters opt in by accepting `apiKey` as either a `string`, a
- * `() => string | Promise<string>`, or a `RotatingCredentials` holder.
- * The holder lets external code (Vault, AWS Secrets Manager, KMS)
- * push a new value without restart, and `refreshCredentials()` is the
- * one-call API that performs the swap and emits an audit event.
+ * These utilities do **not** automatically wire into stock adapters. Built-in
+ * factories (openai, anthropic, bedrock, vertex, …) still take a plain
+ * `apiKey` / `accessToken` string (or a caller-supplied resolver) at
+ * construction. Use `createRotatingCredentials` / `refreshCredentials` only
+ * when you explicitly opt in — e.g. custom wrappers that call `current()` on
+ * every request, or adapters you implement that expose
+ * `CredentialRefreshable.refreshCredentials`.
  *
- * Closes issue #799.
+ * Without that opt-in, rotating a provider key still means reconstructing the
+ * adapter (or restarting the process). The helpers stay exported so production
+ * apps can build that layer without re-inventing the holder + audit event shape.
+ *
+ * Closes issue #799 (primitives only; adapter adoption is opt-in).
  */
 type CredentialResolver = () => string | Promise<string>;
 interface RotatingCredentials {
-    /** Resolve the current secret. Adapters call this on every request. */
+    /** Resolve the current secret. Opt-in adapters call this on every request. */
     current: CredentialResolver;
     /** Replace the in-memory secret. Returns the new value. */
     rotate: (next: string) => Promise<string>;
@@ -761,7 +777,8 @@ interface CredentialRotationEvent {
 }
 interface CredentialRefreshable {
     /**
-     * Adapters that support credential rotation expose this method.
+     * Opt-in adapters that support credential rotation expose this method.
+     * Stock AgentsKit adapters do not implement it unless documented otherwise.
      * Calling it replaces the in-memory secret. The next request uses
      * the new value; in-flight requests are unaffected.
      */
@@ -775,6 +792,9 @@ declare function createRotatingCredentials(initial: string, options: {
  * `CredentialRefreshable`. A no-op (with a debug log) if the adapter
  * doesn't support rotation, so callers can run the rotation playbook
  * across a heterogeneous set of adapters without branching.
+ *
+ * Most stock adapters do **not** implement `refreshCredentials` — this
+ * remains an opt-in primitive unless an adapter documents support.
  */
 declare function refreshCredentials(adapter: unknown, next: string, options?: {
     id?: string;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { G as GenericAdapterConfig } from './createAdapter-Dfnf3Iio.js';
-export { C as CreateAdapterConfig, c as createAdapter } from './createAdapter-Dfnf3Iio.js';
+import { G as GenericAdapterConfig } from './createAdapter-C-pKR1aO.js';
+export { C as CreateAdapterConfig, c as createAdapter } from './createAdapter-C-pKR1aO.js';
 import * as _agentskit_core from '@agentskit/core';
 import { AdapterFactory, AdapterRequest, DataRegion, AdapterCapabilities, StreamChunk, EmbedFn } from '@agentskit/core';
 export { DataRegion } from '@agentskit/core';
@@ -284,10 +284,15 @@ interface BedrockConfig {
 /**
  * Minimal structural type for `BedrockRuntimeClient` so we don't take a hard
  * dep on `@aws-sdk/client-bedrock-runtime`.
+ *
+ * Second options argument is optional so existing one-argument injected
+ * clients remain structurally valid.
  */
 interface BedrockRuntimeClientLike {
     send(command: {
         input: BedrockInvokeInput;
+    }, options?: {
+        abortSignal?: AbortSignal;
     }): Promise<{
         body?: AsyncIterable<{
             chunk?: {
@@ -349,7 +354,13 @@ interface WebLlmEngineLike {
                         content?: string;
                     };
                 }>;
-            }>;
+            }> | Promise<AsyncIterable<{
+                choices: Array<{
+                    delta?: {
+                        content?: string;
+                    };
+                }>;
+            }>>;
         };
     };
 }
@@ -731,20 +742,25 @@ declare function withDeprecationPolicy<F extends AdapterFactory>(factory: F, opt
 } & DeprecationPolicy): F;
 
 /**
- * Credential rotation hook for adapters. Today rotating a provider key
- * means bouncing the runtime — unacceptable for 24/7 production.
+ * Opt-in credential rotation primitives.
  *
- * Adapters opt in by accepting `apiKey` as either a `string`, a
- * `() => string | Promise<string>`, or a `RotatingCredentials` holder.
- * The holder lets external code (Vault, AWS Secrets Manager, KMS)
- * push a new value without restart, and `refreshCredentials()` is the
- * one-call API that performs the swap and emits an audit event.
+ * These utilities do **not** automatically wire into stock adapters. Built-in
+ * factories (openai, anthropic, bedrock, vertex, …) still take a plain
+ * `apiKey` / `accessToken` string (or a caller-supplied resolver) at
+ * construction. Use `createRotatingCredentials` / `refreshCredentials` only
+ * when you explicitly opt in — e.g. custom wrappers that call `current()` on
+ * every request, or adapters you implement that expose
+ * `CredentialRefreshable.refreshCredentials`.
  *
- * Closes issue #799.
+ * Without that opt-in, rotating a provider key still means reconstructing the
+ * adapter (or restarting the process). The helpers stay exported so production
+ * apps can build that layer without re-inventing the holder + audit event shape.
+ *
+ * Closes issue #799 (primitives only; adapter adoption is opt-in).
  */
 type CredentialResolver = () => string | Promise<string>;
 interface RotatingCredentials {
-    /** Resolve the current secret. Adapters call this on every request. */
+    /** Resolve the current secret. Opt-in adapters call this on every request. */
     current: CredentialResolver;
     /** Replace the in-memory secret. Returns the new value. */
     rotate: (next: string) => Promise<string>;
@@ -761,7 +777,8 @@ interface CredentialRotationEvent {
 }
 interface CredentialRefreshable {
     /**
-     * Adapters that support credential rotation expose this method.
+     * Opt-in adapters that support credential rotation expose this method.
+     * Stock AgentsKit adapters do not implement it unless documented otherwise.
      * Calling it replaces the in-memory secret. The next request uses
      * the new value; in-flight requests are unaffected.
      */
@@ -775,6 +792,9 @@ declare function createRotatingCredentials(initial: string, options: {
  * `CredentialRefreshable`. A no-op (with a debug log) if the adapter
  * doesn't support rotation, so callers can run the rotation playbook
  * across a heterogeneous set of adapters without branching.
+ *
+ * Most stock adapters do **not** implement `refreshCredentials` — this
+ * remains an opt-in primitive unless an adapter documents support.
  */
 declare function refreshCredentials(adapter: unknown, next: string, options?: {
     id?: string;