@aigne/afs 1.11.0-beta → 1.11.0-beta.10

package/dist/type.d.mts

@@ -0,0 +1,420 @@
+import { JSONSchema7 } from "./node_modules/.pnpm/@types_json-schema@7.0.15/node_modules/@types/json-schema/index.mjs";
+import { AFSExplainResult, KindSchema, MetaPathInfo, NodeConstraint, NodesConstraints, ValidationError, ValidationResult } from "./meta/type.mjs";
+import { ZodType, z } from "zod";
+
+//#region src/type.d.ts
+/**
+ * Abstract auth context interface for collecting credentials.
+ * Implementations:
+ * - CLI: terminal prompt / masked input / open command
+ * - MCP: elicitation form mode / URL mode
+ */
+interface AuthContext {
+  /** Step 2 resolved fields (env/store/config), so auth() can skip already-resolved fields */
+  readonly resolved: Record<string, unknown>;
+  /**
+   * Collect fields from the user.
+   * Implementation auto-selects secure channel based on `sensitive` markers in schema:
+   * - All non-sensitive → MCP form mode / CLI prompt
+   * - Contains sensitive → MCP URL mode (local HTTP form) / CLI masked input
+   *
+   * @param schema - JSON Schema describing fields to collect (from z.toJSONSchema() or manifest)
+   * @returns collected values, or null if user declined/cancelled
+   */
+  collect(schema: JSONSchema7): Promise<Record<string, unknown> | null>;
+  /**
+   * Create a localhost callback server for OAuth redirect_uri flows.
+   * Provider uses callbackURL to construct auth URL, then waitForCallback() for the result.
+   */
+  createCallbackServer(): Promise<CallbackServer>;
+  /**
+   * Request the client to open a URL (MCP: URL mode elicitation, CLI: open command).
+   * Only opens — does not wait for data.
+   */
+  requestOpenURL(url: string, message: string): Promise<"accepted" | "declined" | "cancelled">;
+}
+/**
+ * Localhost callback server for OAuth flows.
+ * Created by AuthContext.createCallbackServer().
+ */
+interface CallbackServer {
+  /** Callback address, e.g. http://127.0.0.1:{port}/callback */
+  callbackURL: string;
+  /** Wait for a callback request. Returns query params, or null on timeout/cancel. */
+  waitForCallback(options?: {
+    timeout?: number;
+  }): Promise<Record<string, string> | null>;
+  /** Close the callback server. Idempotent. */
+  close(): void;
+}
+/** AFS change record — pure data, zero external dependencies */
+interface AFSChangeRecord {
+  kind: "write" | "delete" | "mount" | "unmount" | "rename";
+  path: string;
+  /** Module name (for mount/unmount events) */
+  moduleName?: string;
+  /** Namespace (for mount/unmount events) */
+  namespace?: string | null;
+  timestamp: number;
+  /** Optional metadata — AFS passes through without interpretation */
+  meta?: Record<string, unknown>;
+}
+/** Change listener — injected by AOS, called by AFS */
+type AFSChangeListener = (event: AFSChangeRecord) => void;
+/**
+ * Access mode for AFS modules and root.
+ * - "readonly": Only read operations are allowed (list, read, search)
+ * - "readwrite": All operations are allowed
+ */
+type AFSAccessMode = "readonly" | "readwrite";
+/**
+ * Zod schema for access mode validation.
+ * Can be reused across modules that support access mode configuration.
+ */
+declare const accessModeSchema: z.ZodOptional<z.ZodEnum<{
+  readonly: "readonly";
+  readwrite: "readwrite";
+}>>;
+interface AFSOperationOptions {
+  context?: any;
+}
+interface AFSListOptions extends AFSOperationOptions {
+  filter?: {
+    agentId?: string;
+    userId?: string;
+    sessionId?: string;
+    before?: string;
+    after?: string;
+  };
+  maxDepth?: number;
+  /**
+   * Number of entries to skip (pagination offset)
+   * @default 0
+   */
+  offset?: number;
+  /**
+   * Maximum number of entries to return
+   * @default 1000
+   */
+  limit?: number;
+  orderBy?: [string, "asc" | "desc"][];
+  maxChildren?: number;
+  onOverflow?: "truncate";
+  /**
+   * Whether to disable .gitignore files when listing files.
+   * @default false
+   */
+  disableGitignore?: boolean;
+  /**
+   * Glob pattern to filter entries by path.
+   * Examples: "*.ts", "**\/*.js", "src/**\/*.{ts,tsx}"
+   */
+  pattern?: string;
+}
+interface AFSListResult {
+  data: AFSEntry[];
+  message?: string;
+  /**
+   * Total count of entries (optional)
+   * - If present: indicates complete dataset size (data may be a subset)
+   * - If absent (undefined): data IS the complete result, total === data.length
+   */
+  total?: number;
+}
+interface AFSSearchOptions extends AFSOperationOptions {
+  limit?: number;
+  caseSensitive?: boolean;
+}
+interface AFSSearchResult {
+  data: AFSEntry[];
+  message?: string;
+}
+interface AFSReadOptions extends AFSOperationOptions {
+  filter?: AFSListOptions["filter"];
+}
+interface AFSReadResult {
+  data?: AFSEntry;
+  message?: string;
+}
+interface AFSDeleteOptions extends AFSOperationOptions {
+  recursive?: boolean;
+}
+interface AFSDeleteResult {
+  message?: string;
+}
+interface AFSRenameOptions extends AFSOperationOptions {
+  overwrite?: boolean;
+}
+interface AFSRenameResult {
+  message?: string;
+}
+interface AFSWriteOptions extends AFSOperationOptions {
+  append?: boolean;
+}
+interface AFSWriteResult {
+  data: AFSEntry;
+  message?: string;
+}
+interface AFSWriteEntryPayload extends Omit<AFSEntry, "id" | "path"> {}
+interface AFSExecOptions extends AFSOperationOptions {}
+interface AFSExecResult extends AFSActionResult {}
+/**
+ * Summary information for an action available on a node.
+ * Used in AFSEntry.actions to describe available actions.
+ */
+interface ActionSummary {
+  /** The action name (e.g., "refresh", "export", "delete") */
+  name: string;
+  /** Human-readable description of what the action does */
+  description?: string;
+  /** JSON Schema for input parameters */
+  inputSchema?: JSONSchema7;
+}
+/**
+ * Result from executing an action via the Action System.
+ * Actions return structured results with success/failure status.
+ */
+interface AFSActionResult {
+  /** Whether the action completed successfully */
+  success: boolean;
+  /** Data returned by the action on success */
+  data?: Record<string, unknown>;
+  /** Error information when success is false */
+  error?: {
+    /** Error code (e.g., "VALIDATION_ERROR", "NOT_FOUND") */code: string; /** Human-readable error message */
+    message: string; /** Additional error details */
+    details?: Record<string, unknown>;
+  };
+}
+interface AFSStatOptions extends AFSOperationOptions {}
+/**
+ * Result from stat operation.
+ * The data field follows AFSEntry structure but without content.
+ */
+interface AFSStatResult {
+  data?: Omit<AFSEntry, "content">;
+  message?: string;
+}
+interface AFSExplainOptions extends AFSOperationOptions {
+  format?: "markdown" | "text";
+}
+interface AFSModule {
+  readonly name: string;
+  readonly description?: string;
+  /**
+   * The complete source URI for this provider instance (including query params).
+   * Set by ProviderRegistry factories after creating the provider.
+   * Used by loadProvider injection to persist mount configuration.
+   */
+  readonly uri?: string;
+  /**
+   * Access mode for this module.
+   * - "readonly": Only read operations are allowed
+   * - "readwrite": All operations are allowed
+   * Default behavior is implementation-specific.
+   */
+  readonly accessMode?: AFSAccessMode;
+  /**
+   * Enable automatic agent skill scanning for this module.
+   * When set to true, the system will scan this module for agent skills.
+   * @default false
+   */
+  readonly agentSkills?: boolean;
+  /**
+   * Timeout in milliseconds for provider operations.
+   * Currently used for mount check.
+   * If not specified, uses the default value (10s).
+   * Remote providers (MCP, HTTP) may need longer timeouts.
+   */
+  readonly timeout?: number;
+  onMount?(root: AFSRoot, mountPath?: string): void;
+  symlinkToPhysical?(path: string): Promise<void>;
+  list?(path: string, options?: AFSListOptions): Promise<AFSListResult>;
+  read?(path: string, options?: AFSReadOptions): Promise<AFSReadResult>;
+  write?(path: string, content: AFSWriteEntryPayload, options?: AFSWriteOptions): Promise<AFSWriteResult>;
+  delete?(path: string, options?: AFSDeleteOptions): Promise<AFSDeleteResult>;
+  rename?(oldPath: string, newPath: string, options?: AFSRenameOptions): Promise<AFSRenameResult>;
+  search?(path: string, query: string, options?: AFSSearchOptions): Promise<AFSSearchResult>;
+  exec?(path: string, args: Record<string, any>, options: AFSExecOptions): Promise<AFSExecResult>;
+  stat?(path: string, options?: AFSStatOptions): Promise<AFSStatResult>;
+  explain?(path: string, options?: AFSExplainOptions): Promise<AFSExplainResult>;
+}
+/**
+ * Parameters for loading a module from configuration.
+ */
+interface AFSModuleLoadParams {
+  /**
+   * Base path for resolving relative paths in configuration.
+   * Typically the directory containing the configuration file.
+   */
+  basePath?: string;
+  /**
+   * Parsed configuration object.
+   * The caller is responsible for parsing YAML/JSON/TOML into this object.
+   */
+  config?: object;
+}
+/**
+ * Mount configuration for a single provider.
+ * Used by ProviderRegistry and provider factories at runtime.
+ * The validated Zod schema version lives in @aigne/afs-cli (config file validation).
+ */
+interface MountConfig {
+  /** Mount path */
+  path: string;
+  /** Provider URI (e.g., fs:///path, git:///repo?branch=main) */
+  uri: string;
+  /** Namespace for this mount */
+  namespace?: string;
+  /** Human/LLM readable description */
+  description?: string;
+  /** Access mode: readonly or readwrite */
+  access_mode?: AFSAccessMode;
+  /** Authentication string */
+  auth?: string;
+  /** Authorization token */
+  token?: string;
+  /** Provider-specific options */
+  options?: Record<string, unknown>;
+}
+/**
+ * Provider manifest — self-description of a provider's URI template, schema, and metadata.
+ *
+ * Declared via `static manifest()` on Provider class.
+ * Schema contains ALL provider parameters (path vars + options + sensitive).
+ * Parameter source is determined by rules:
+ * - Field in uriTemplate {} → extracted from URI body
+ * - Field with sensitive: true in schema → credential store
+ * - Everything else → config/query params
+ */
+interface ProviderManifest {
+  /** Provider name */
+  name: string;
+  /** Human-readable description */
+  description: string;
+  /** URI template, e.g. "s3://{bucket}/{prefix+?}" */
+  uriTemplate: string;
+  /** Category (storage, database, cloud, compute, integration, ...) */
+  category: string;
+  /** Zod schema containing ALL parameters (path vars + options + sensitive) */
+  schema: ZodType;
+  /** Tags for discovery */
+  tags?: string[];
+  /** Use case descriptions */
+  useCases?: string[];
+}
+/**
+ * Interface for module classes that support schema validation and loading from configuration.
+ * This describes the static part of a module class.
+ *
+ * @example
+ * ```typescript
+ * class MyModule implements AFSModule {
+ *   static schema() { return mySchema; }
+ *   static async load(params: AFSModuleLoadParams) { ... }
+ *   // ...
+ * }
+ *
+ * // Type check
+ * const _check: AFSModuleClass<MyModule, MyModuleOptions> = MyModule;
+ * ```
+ */
+interface AFSModuleClass<T extends AFSModule = AFSModule, O extends object = object> {
+  /**
+   * Returns the Zod schema for validating module configuration.
+   * @deprecated Use `manifest()` instead — the manifest includes the schema
+   * along with URI template, category, and tags for unified provider loading.
+   */
+  schema(): ZodType<O>;
+  /**
+   * Returns provider manifest(s) describing URI template, schema, and metadata.
+   * Single manifest for most providers; array for multi-scheme providers (e.g., MCP).
+   */
+  manifest?(): ProviderManifest | ProviderManifest[];
+  /** Loads a module instance from configuration file path and parsed config */
+  load(params: AFSModuleLoadParams): Promise<T>;
+  /**
+   * Optional: Custom authentication flow for this provider.
+   * When present, called instead of the default schema-based collection.
+   * The context provides resolved fields and primitives (collect, createCallbackServer, requestOpenURL).
+   *
+   * @returns all collected fields (both sensitive and non-sensitive), or null if user declined
+   */
+  auth?(context: AuthContext): Promise<Record<string, unknown> | null>;
+  /** Constructor */
+  new (options: O): T;
+}
+interface AFSRoot extends AFSModule {
+  list(path: string, options?: AFSListOptions): Promise<AFSListResult>;
+  search(path: string, query: string, options?: AFSSearchOptions): Promise<AFSSearchResult>;
+  initializePhysicalPath(): Promise<string>;
+  cleanupPhysicalPath(): Promise<void>;
+}
+interface AFSEntryMetadata extends Record<string, any> {
+  /** Kind identifier (e.g., "afs:node", "chamber:project") */
+  kind?: string;
+  /**
+   * Kind inheritance chain, from most specific to most general.
+   * First element should match the `kind` field.
+   *
+   * Example: MCP tool has `kinds: ["mcp:tool", "afs:executable", "afs:node"]`
+   * Use for capability detection: `kinds.includes("afs:executable")`
+   *
+   * @example
+   * ```typescript
+   * // Check if node is executable
+   * const isExecutable = metadata.kinds?.includes("afs:executable") ?? false;
+   * ```
+   */
+  kinds?: string[];
+  /**
+   * Number of children this node has.
+   * - undefined: leaf node / file (no children possible)
+   * - 0: directory with no children (empty container)
+   * - N (N > 0): directory with exactly N children
+   * - -1: directory with children, but count unknown (lazy loading)
+   *
+   * Note: This is a runtime value computed by Provider. There is no file/directory
+   * distinction in AFS — all nodes can potentially have children.
+   *
+   * Design: undefined defaults to "leaf" for safety — if a developer forgets
+   * to set childrenCount, the node is treated as a leaf (safe failure).
+   * Directory nodes whose children count is not yet known should use -1.
+   */
+  childrenCount?: number;
+  /** File size in bytes (for content nodes) */
+  size?: number;
+  /** Human-readable description */
+  description?: string;
+}
+interface AFSEntry<T = any> {
+  id: string;
+  createdAt?: Date;
+  updatedAt?: Date;
+  path: string;
+  agentId?: string | null;
+  userId?: string | null;
+  sessionId?: string | null;
+  summary?: string | null;
+  meta?: AFSEntryMetadata | null;
+  linkTo?: string | null;
+  content?: T;
+  /**
+   * Available actions for this entry.
+   * Actions can be executed via the `/.actions/<action-name>` path.
+   * Each action uses `afs:executable` kind.
+   */
+  actions?: ActionSummary[];
+}
+/**
+ * Zod schema for ActionSummary validation.
+ */
+declare const actionSummarySchema: z.ZodObject<{
+  name: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  inputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, z.core.$strip>;
+declare const afsEntrySchema: ZodType<AFSEntry>;
+//#endregion
+export { AFSAccessMode, AFSActionResult, AFSChangeListener, AFSChangeRecord, AFSDeleteOptions, AFSDeleteResult, AFSEntry, AFSEntryMetadata, AFSExecOptions, AFSExecResult, AFSExplainOptions, AFSListOptions, AFSListResult, AFSModule, AFSModuleClass, AFSModuleLoadParams, AFSOperationOptions, AFSReadOptions, AFSReadResult, AFSRenameOptions, AFSRenameResult, AFSRoot, AFSSearchOptions, AFSSearchResult, AFSStatOptions, AFSStatResult, AFSWriteEntryPayload, AFSWriteOptions, AFSWriteResult, ActionSummary, AuthContext, CallbackServer, MountConfig, ProviderManifest, accessModeSchema, actionSummarySchema, afsEntrySchema };
+//# sourceMappingURL=type.d.mts.map

package/dist/type.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.d.mts","names":[],"sources":["../src/type.ts"],"mappings":";;;;;;;;AAaA;;;UAAiB,WAAA;EAaC;EAAA,SAXP,QAAA,EAAU,MAAA;EAWW;;;;;;;;;EAA9B,OAAA,CAAQ,MAAA,EAAQ,WAAA,GAAc,OAAA,CAAQ,MAAA;EAA9B;;;;EAMR,oBAAA,IAAwB,OAAA,CAAQ,cAAA;EAAA;;;;EAMhC,cAAA,CAAe,GAAA,UAAa,OAAA,WAAkB,OAAA;AAAA;;AAOhD;;;UAAiB,cAAA;EAEf;EAAA,WAAA;EAG4B;EAA5B,eAAA,CAAgB,OAAA;IAAY,OAAA;EAAA,IAAqB,OAAA,CAAQ,MAAA;EAGzD;EAAA,KAAA;AAAA;AAIF;AAAA,UAAiB,eAAA;EACf,IAAA;EACA,IAAA;EADA;EAGA,UAAA;EAAA;EAEA,SAAA;EACA,SAAA;EAEA;EAAA,IAAA,GAAO,MAAA;AAAA;;KAIG,iBAAA,IAAqB,KAAA,EAAO,eAAA;;;;;AAOxC;KAAY,aAAA;;;;AAMZ;cAAa,gBAAA,EAAgB,CAAA,CAAA,WAAA,CAAA,CAAA,CAAA,OAAA;;;;UAEZ,mBAAA;EACf,OAAA;AAAA;AAAA,UAGe,cAAA,SAAuB,mBAAA;EACtC,MAAA;IACE,OAAA;IACA,MAAA;IACA,SAAA;IACA,MAAA;IACA,KAAA;EAAA;EAEF,QAAA;EARe;;;;EAaf,MAAA;EAZA;;;;EAiBA,KAAA;EACA,OAAA;EACA,WAAA;EACA,UAAA;EAHA;;;;EAQA,gBAAA;EAKA;;;AAGF;EAHE,OAAA;AAAA;AAAA,UAGe,aAAA;EACf,IAAA,EAAM,QAAA;EACN,OAAA;EAAA;;;;AASF;EAHE,KAAA;AAAA;AAAA,UAGe,gBAAA,SAAyB,mBAAA;EACxC,KAAA;EACA,aAAA;AAAA;AAAA,UAGe,eAAA;EACf,IAAA,EAAM,QAAA;EACN,OAAA;AAAA;AAAA,UAGe,cAAA,SAAuB,mBAAA;EACtC,MAAA,GAAS,cAAA;AAAA;AAAA,UAGM,aAAA;EACf,IAAA,GAAO,QAAA;EACP,OAAA;AAAA;AAAA,UAGe,gBAAA,SAAyB,mBAAA;EACxC,SAAA;AAAA;AAAA,UAGe,eAAA;EACf,OAAA;AAAA;AAAA,UAGe,gBAAA,SAAyB,mBAAA;EACxC,SAAA;AAAA;AAAA,UAGe,eAAA;EACf,OAAA;AAAA;AAAA,UAGe,eAAA,SAAwB,mBAAA;EACvC,MAAA;AAAA;AAAA,UAGe,cAAA;EACf,IAAA,EAAM,QAAA;EACN,OAAA;AAAA;AAAA,UAGe,oBAAA,SAA6B,IAAA,CAAK,QAAA;AAAA,UAElC,cAAA,SAAuB,mBAAA;AAAA,UAEvB,aAAA,SAAsB,eAAA;;;;AArBvC;UA2BiB,aAAA;;EAEf,IAAA;EA5BS;EA8BT,WAAA;EA3B8B;EA6B9B,WAAA,GAAc,WAAA;AAAA;;AAzBhB;;;UAgCiB,eAAA;EA/BT;EAiCN,OAAA;EA9B6B;EAgC7B,IAAA,GAAO,MAAA;EA/BO;EAiCd,KAAA;IAjCM,yDAmCJ,IAAA,UAlCK;IAoCL,OAAA,UAjCa;IAmCb,OAAA,GAAU,MAAA;EAAA;AAAA;AAAA,UAIG,cAAA,SAAuB,mBAAA;;;;;UAMvB,aAAA;EACf,IAAA,GAAO,IAAA,CAAK,QAAA;EACZ,OAAA;AAAA;AAAA,UAGe,iBAAA,SAA0B,mBAAA;EACzC,MAAA;AAAA;AAAA,UAGe,SAAA;EAAA,SACN,IAAA;EAAA,SAEA,WAAA;EA3CT;;;;;EAAA,SAkDS,GAAA;EAzCqB;;;;;;EAAA,SAiDrB,UAAA,GAAa,aAAA;EAzCpB;;;;;EAAA,SAgDO,WAAA;EAxCM;;;;;AAMjB;EANiB,SAgDN,OAAA;EAET,OAAA,EAAS,IAAA,EAAM,OAAA,EAAS,SAAA;EAExB,iBAAA,EAAmB,IAAA,WAAe,OAAA;EAElC,IAAA,EAAM,IAAA,UAAc,OAAA,GAAU,cAAA,GAAiB,OAAA,CAAQ,aAAA;EAEvD,IAAA,EAAM,IAAA,UAAc,OAAA,GAAU,cAAA,GAAiB,OAAA,CAAQ,aAAA;EAEvD,KAAA,EACE,IAAA,UACA,OAAA,EAAS,oBAAA,EACT,OAAA,GAAU,eAAA,GACT,OAAA,CAAQ,cAAA;EAEX,MAAA,EAAQ,IAAA,UAAc,OAAA,GAAU,gBAAA,GAAmB,OAAA,CAAQ,eAAA;EAE3D,MAAA,EAAQ,OAAA,UAAiB,OAAA,UAAiB,OAAA,GAAU,gBAAA,GAAmB,OAAA,CAAQ,eAAA;EAE/E,MAAA,EAAQ,IAAA,UAAc,KAAA,UAAe,OAAA,GAAU,gBAAA,GAAmB,OAAA,CAAQ,eAAA;EAE1E,IAAA,EAAM,IAAA,UAAc,IAAA,EAAM,MAAA,eAAqB,OAAA,EAAS,cAAA,GAAiB,OAAA,CAAQ,aAAA;EAEjF,IAAA,EAAM,IAAA,UAAc,OAAA,GAAU,cAAA,GAAiB,OAAA,CAAQ,aAAA;EAEvD,OAAA,EAAS,IAAA,UAAc,OAAA,GAAU,iBAAA,GAAoB,OAAA,CAAQ,gBAAA;AAAA;;AA3D/D;;UAiEiB,mBAAA;EA/CO;;;;EAoDtB,QAAA;EA/B+C;;;;EAoC/C,MAAA;AAAA;;;;;;UAQe,WAAA;EAhCgE;EAkC/E,IAAA;EAhC+C;EAkC/C,GAAA;EAlCkE;EAoClE,SAAA;EAlCwD;EAoCxD,WAAA;EApCyE;EAsCzE,WAAA,GAAc,aAAA;EApCyC;EAsCvD,IAAA;EApCiC;EAsCjC,KAAA;EAtCqD;EAwCrD,OAAA,GAAU,MAAA;AAAA;;;;;;;;;;;UAaK,gBAAA;EA3Ef;EA6EA,IAAA;EA7EkC;EA+ElC,WAAA;EA7EM;EA+EN,WAAA;EA/EoB;EAiFpB,QAAA;EAjFuD;EAmFvD,MAAA,EAAQ,OAAA;EAjFF;EAmFN,IAAA;EAnFoB;EAqFpB,QAAA;AAAA;;;;;;;;;;;;;;;;;UAmBe,cAAA,WAAyB,SAAA,GAAY,SAAA;EA9FA;;;;;EAoGpD,MAAA,IAAU,OAAA,CAAQ,CAAA;EAlGI;;;;EAwGtB,QAAA,KAAa,gBAAA,GAAmB,gBAAA;EAtGhC;EAyGA,IAAA,CAAK,MAAA,EAAQ,mBAAA,GAAsB,OAAA,CAAQ,CAAA;EAzGjB;;;;;;;EAkH1B,IAAA,EAAM,OAAA,EAAS,WAAA,GAAc,OAAA,CAAQ,MAAA;EAhHP;EAAA,KAmHzB,OAAA,EAAS,CAAA,GAAI,CAAA;AAAA;AAAA,UAGH,OAAA,SAAgB,SAAA;EAC/B,IAAA,CAAK,IAAA,UAAc,OAAA,GAAU,cAAA,GAAiB,OAAA,CAAQ,aAAA;EAEtD,MAAA,CAAO,IAAA,UAAc,KAAA,UAAe,OAAA,GAAU,gBAAA,GAAmB,OAAA,CAAQ,eAAA;EAEzE,sBAAA,IAA0B,OAAA;EAE1B,mBAAA,IAAuB,OAAA;AAAA;AAAA,UAGR,gBAAA,SAAyB,MAAA;EA9HqC;EAgI7E,IAAA;EA1He;;;;;AAkBjB;;;;;;;;EAsHE,KAAA;EA5Gc;;;;;;;AAmBhB;;;;;;;EAwGE,aAAA;EA9FA;EAgGA,IAAA;EA9FA;EAgGA,WAAA;AAAA;AAAA,UAIe,QAAA;EACf,EAAA;EACA,SAAA,GAAY,IAAA;EACZ,SAAA,GAAY,IAAA;EACZ,IAAA;EACA,OAAA;EACA,MAAA;EACA,SAAA;EACA,OAAA;EACA,IAAA,GAAO,gBAAA;EACP,MAAA;EACA,OAAA,GAAU,CAAA;EA3EyB;;;;;EAiFnC,OAAA,GAAU,aAAA;AAAA;;;;cAMC,mBAAA,EAAmB,CAAA,CAAA,SAAA;;;;;cAMnB,cAAA,EAAgB,OAAA,CAAQ,QAAA"}

package/dist/type.mjs

@@ -0,0 +1,33 @@
+import { z } from "zod";
+
+//#region src/type.ts
+/**
+* Zod schema for access mode validation.
+* Can be reused across modules that support access mode configuration.
+*/
+const accessModeSchema = z.enum(["readonly", "readwrite"]).optional();
+/**
+* Zod schema for ActionSummary validation.
+*/
+const actionSummarySchema = z.object({
+	name: z.string(),
+	description: z.string().optional(),
+	inputSchema: z.record(z.string(), z.any()).optional()
+});
+const afsEntrySchema = z.object({
+	id: z.string(),
+	createdAt: z.date().optional(),
+	updatedAt: z.date().optional(),
+	path: z.string(),
+	userId: z.string().nullable().optional(),
+	sessionId: z.string().nullable().optional(),
+	summary: z.string().nullable().optional(),
+	meta: z.record(z.string(), z.any()).nullable().optional(),
+	linkTo: z.string().nullable().optional(),
+	content: z.any().optional(),
+	actions: z.array(actionSummarySchema).optional()
+});
+
+//#endregion
+export { accessModeSchema, actionSummarySchema, afsEntrySchema };
+//# sourceMappingURL=type.mjs.map

package/dist/type.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.mjs","names":[],"sources":["../src/type.ts"],"sourcesContent":["import { type ZodType, z } from \"zod\";\nimport type { AFSExplainResult, JSONSchema7 } from \"./meta/type.js\";\n\n// =============================================================================\n// AUTH CONTEXT TYPES\n// =============================================================================\n\n/**\n * Abstract auth context interface for collecting credentials.\n * Implementations:\n * - CLI: terminal prompt / masked input / open command\n * - MCP: elicitation form mode / URL mode\n */\nexport interface AuthContext {\n  /** Step 2 resolved fields (env/store/config), so auth() can skip already-resolved fields */\n  readonly resolved: Record<string, unknown>;\n\n  /**\n   * Collect fields from the user.\n   * Implementation auto-selects secure channel based on `sensitive` markers in schema:\n   * - All non-sensitive → MCP form mode / CLI prompt\n   * - Contains sensitive → MCP URL mode (local HTTP form) / CLI masked input\n   *\n   * @param schema - JSON Schema describing fields to collect (from z.toJSONSchema() or manifest)\n   * @returns collected values, or null if user declined/cancelled\n   */\n  collect(schema: JSONSchema7): Promise<Record<string, unknown> | null>;\n\n  /**\n   * Create a localhost callback server for OAuth redirect_uri flows.\n   * Provider uses callbackURL to construct auth URL, then waitForCallback() for the result.\n   */\n  createCallbackServer(): Promise<CallbackServer>;\n\n  /**\n   * Request the client to open a URL (MCP: URL mode elicitation, CLI: open command).\n   * Only opens — does not wait for data.\n   */\n  requestOpenURL(url: string, message: string): Promise<\"accepted\" | \"declined\" | \"cancelled\">;\n}\n\n/**\n * Localhost callback server for OAuth flows.\n * Created by AuthContext.createCallbackServer().\n */\nexport interface CallbackServer {\n  /** Callback address, e.g. http://127.0.0.1:{port}/callback */\n  callbackURL: string;\n\n  /** Wait for a callback request. Returns query params, or null on timeout/cancel. */\n  waitForCallback(options?: { timeout?: number }): Promise<Record<string, string> | null>;\n\n  /** Close the callback server. Idempotent. */\n  close(): void;\n}\n\n/** AFS change record — pure data, zero external dependencies */\nexport interface AFSChangeRecord {\n  kind: \"write\" | \"delete\" | \"mount\" | \"unmount\" | \"rename\";\n  path: string;\n  /** Module name (for mount/unmount events) */\n  moduleName?: string;\n  /** Namespace (for mount/unmount events) */\n  namespace?: string | null;\n  timestamp: number;\n  /** Optional metadata — AFS passes through without interpretation */\n  meta?: Record<string, unknown>;\n}\n\n/** Change listener — injected by AOS, called by AFS */\nexport type AFSChangeListener = (event: AFSChangeRecord) => void;\n\n/**\n * Access mode for AFS modules and root.\n * - \"readonly\": Only read operations are allowed (list, read, search)\n * - \"readwrite\": All operations are allowed\n */\nexport type AFSAccessMode = \"readonly\" | \"readwrite\";\n\n/**\n * Zod schema for access mode validation.\n * Can be reused across modules that support access mode configuration.\n */\nexport const accessModeSchema = z.enum([\"readonly\", \"readwrite\"] as const).optional();\n\nexport interface AFSOperationOptions {\n  context?: any;\n}\n\nexport interface AFSListOptions extends AFSOperationOptions {\n  filter?: {\n    agentId?: string;\n    userId?: string;\n    sessionId?: string;\n    before?: string;\n    after?: string;\n  };\n  maxDepth?: number;\n  /**\n   * Number of entries to skip (pagination offset)\n   * @default 0\n   */\n  offset?: number;\n  /**\n   * Maximum number of entries to return\n   * @default 1000\n   */\n  limit?: number;\n  orderBy?: [string, \"asc\" | \"desc\"][];\n  maxChildren?: number;\n  onOverflow?: \"truncate\";\n  /**\n   * Whether to disable .gitignore files when listing files.\n   * @default false\n   */\n  disableGitignore?: boolean;\n  /**\n   * Glob pattern to filter entries by path.\n   * Examples: \"*.ts\", \"**\\/*.js\", \"src/**\\/*.{ts,tsx}\"\n   */\n  pattern?: string;\n}\n\nexport interface AFSListResult {\n  data: AFSEntry[];\n  message?: string;\n  /**\n   * Total count of entries (optional)\n   * - If present: indicates complete dataset size (data may be a subset)\n   * - If absent (undefined): data IS the complete result, total === data.length\n   */\n  total?: number;\n}\n\nexport interface AFSSearchOptions extends AFSOperationOptions {\n  limit?: number;\n  caseSensitive?: boolean;\n}\n\nexport interface AFSSearchResult {\n  data: AFSEntry[];\n  message?: string;\n}\n\nexport interface AFSReadOptions extends AFSOperationOptions {\n  filter?: AFSListOptions[\"filter\"];\n}\n\nexport interface AFSReadResult {\n  data?: AFSEntry;\n  message?: string;\n}\n\nexport interface AFSDeleteOptions extends AFSOperationOptions {\n  recursive?: boolean;\n}\n\nexport interface AFSDeleteResult {\n  message?: string;\n}\n\nexport interface AFSRenameOptions extends AFSOperationOptions {\n  overwrite?: boolean;\n}\n\nexport interface AFSRenameResult {\n  message?: string;\n}\n\nexport interface AFSWriteOptions extends AFSOperationOptions {\n  append?: boolean;\n}\n\nexport interface AFSWriteResult {\n  data: AFSEntry;\n  message?: string;\n}\n\nexport interface AFSWriteEntryPayload extends Omit<AFSEntry, \"id\" | \"path\"> {}\n\nexport interface AFSExecOptions extends AFSOperationOptions {}\n\nexport interface AFSExecResult extends AFSActionResult {}\n\n/**\n * Summary information for an action available on a node.\n * Used in AFSEntry.actions to describe available actions.\n */\nexport interface ActionSummary {\n  /** The action name (e.g., \"refresh\", \"export\", \"delete\") */\n  name: string;\n  /** Human-readable description of what the action does */\n  description?: string;\n  /** JSON Schema for input parameters */\n  inputSchema?: JSONSchema7;\n}\n\n/**\n * Result from executing an action via the Action System.\n * Actions return structured results with success/failure status.\n */\nexport interface AFSActionResult {\n  /** Whether the action completed successfully */\n  success: boolean;\n  /** Data returned by the action on success */\n  data?: Record<string, unknown>;\n  /** Error information when success is false */\n  error?: {\n    /** Error code (e.g., \"VALIDATION_ERROR\", \"NOT_FOUND\") */\n    code: string;\n    /** Human-readable error message */\n    message: string;\n    /** Additional error details */\n    details?: Record<string, unknown>;\n  };\n}\n\nexport interface AFSStatOptions extends AFSOperationOptions {}\n\n/**\n * Result from stat operation.\n * The data field follows AFSEntry structure but without content.\n */\nexport interface AFSStatResult {\n  data?: Omit<AFSEntry, \"content\">;\n  message?: string;\n}\n\nexport interface AFSExplainOptions extends AFSOperationOptions {\n  format?: \"markdown\" | \"text\";\n}\n\nexport interface AFSModule {\n  readonly name: string;\n\n  readonly description?: string;\n\n  /**\n   * The complete source URI for this provider instance (including query params).\n   * Set by ProviderRegistry factories after creating the provider.\n   * Used by loadProvider injection to persist mount configuration.\n   */\n  readonly uri?: string;\n\n  /**\n   * Access mode for this module.\n   * - \"readonly\": Only read operations are allowed\n   * - \"readwrite\": All operations are allowed\n   * Default behavior is implementation-specific.\n   */\n  readonly accessMode?: AFSAccessMode;\n\n  /**\n   * Enable automatic agent skill scanning for this module.\n   * When set to true, the system will scan this module for agent skills.\n   * @default false\n   */\n  readonly agentSkills?: boolean;\n\n  /**\n   * Timeout in milliseconds for provider operations.\n   * Currently used for mount check.\n   * If not specified, uses the default value (10s).\n   * Remote providers (MCP, HTTP) may need longer timeouts.\n   */\n  readonly timeout?: number;\n\n  onMount?(root: AFSRoot, mountPath?: string): void;\n\n  symlinkToPhysical?(path: string): Promise<void>;\n\n  list?(path: string, options?: AFSListOptions): Promise<AFSListResult>;\n\n  read?(path: string, options?: AFSReadOptions): Promise<AFSReadResult>;\n\n  write?(\n    path: string,\n    content: AFSWriteEntryPayload,\n    options?: AFSWriteOptions,\n  ): Promise<AFSWriteResult>;\n\n  delete?(path: string, options?: AFSDeleteOptions): Promise<AFSDeleteResult>;\n\n  rename?(oldPath: string, newPath: string, options?: AFSRenameOptions): Promise<AFSRenameResult>;\n\n  search?(path: string, query: string, options?: AFSSearchOptions): Promise<AFSSearchResult>;\n\n  exec?(path: string, args: Record<string, any>, options: AFSExecOptions): Promise<AFSExecResult>;\n\n  stat?(path: string, options?: AFSStatOptions): Promise<AFSStatResult>;\n\n  explain?(path: string, options?: AFSExplainOptions): Promise<AFSExplainResult>;\n}\n\n/**\n * Parameters for loading a module from configuration.\n */\nexport interface AFSModuleLoadParams {\n  /**\n   * Base path for resolving relative paths in configuration.\n   * Typically the directory containing the configuration file.\n   */\n  basePath?: string;\n  /**\n   * Parsed configuration object.\n   * The caller is responsible for parsing YAML/JSON/TOML into this object.\n   */\n  config?: object;\n}\n\n/**\n * Mount configuration for a single provider.\n * Used by ProviderRegistry and provider factories at runtime.\n * The validated Zod schema version lives in @aigne/afs-cli (config file validation).\n */\nexport interface MountConfig {\n  /** Mount path */\n  path: string;\n  /** Provider URI (e.g., fs:///path, git:///repo?branch=main) */\n  uri: string;\n  /** Namespace for this mount */\n  namespace?: string;\n  /** Human/LLM readable description */\n  description?: string;\n  /** Access mode: readonly or readwrite */\n  access_mode?: AFSAccessMode;\n  /** Authentication string */\n  auth?: string;\n  /** Authorization token */\n  token?: string;\n  /** Provider-specific options */\n  options?: Record<string, unknown>;\n}\n\n/**\n * Provider manifest — self-description of a provider's URI template, schema, and metadata.\n *\n * Declared via `static manifest()` on Provider class.\n * Schema contains ALL provider parameters (path vars + options + sensitive).\n * Parameter source is determined by rules:\n * - Field in uriTemplate {} → extracted from URI body\n * - Field with sensitive: true in schema → credential store\n * - Everything else → config/query params\n */\nexport interface ProviderManifest {\n  /** Provider name */\n  name: string;\n  /** Human-readable description */\n  description: string;\n  /** URI template, e.g. \"s3://{bucket}/{prefix+?}\" */\n  uriTemplate: string;\n  /** Category (storage, database, cloud, compute, integration, ...) */\n  category: string;\n  /** Zod schema containing ALL parameters (path vars + options + sensitive) */\n  schema: ZodType;\n  /** Tags for discovery */\n  tags?: string[];\n  /** Use case descriptions */\n  useCases?: string[];\n}\n\n/**\n * Interface for module classes that support schema validation and loading from configuration.\n * This describes the static part of a module class.\n *\n * @example\n * ```typescript\n * class MyModule implements AFSModule {\n *   static schema() { return mySchema; }\n *   static async load(params: AFSModuleLoadParams) { ... }\n *   // ...\n * }\n *\n * // Type check\n * const _check: AFSModuleClass<MyModule, MyModuleOptions> = MyModule;\n * ```\n */\nexport interface AFSModuleClass<T extends AFSModule = AFSModule, O extends object = object> {\n  /**\n   * Returns the Zod schema for validating module configuration.\n   * @deprecated Use `manifest()` instead — the manifest includes the schema\n   * along with URI template, category, and tags for unified provider loading.\n   */\n  schema(): ZodType<O>;\n\n  /**\n   * Returns provider manifest(s) describing URI template, schema, and metadata.\n   * Single manifest for most providers; array for multi-scheme providers (e.g., MCP).\n   */\n  manifest?(): ProviderManifest | ProviderManifest[];\n\n  /** Loads a module instance from configuration file path and parsed config */\n  load(params: AFSModuleLoadParams): Promise<T>;\n\n  /**\n   * Optional: Custom authentication flow for this provider.\n   * When present, called instead of the default schema-based collection.\n   * The context provides resolved fields and primitives (collect, createCallbackServer, requestOpenURL).\n   *\n   * @returns all collected fields (both sensitive and non-sensitive), or null if user declined\n   */\n  auth?(context: AuthContext): Promise<Record<string, unknown> | null>;\n\n  /** Constructor */\n  new (options: O): T;\n}\n\nexport interface AFSRoot extends AFSModule {\n  list(path: string, options?: AFSListOptions): Promise<AFSListResult>;\n\n  search(path: string, query: string, options?: AFSSearchOptions): Promise<AFSSearchResult>;\n\n  initializePhysicalPath(): Promise<string>;\n\n  cleanupPhysicalPath(): Promise<void>;\n}\n\nexport interface AFSEntryMetadata extends Record<string, any> {\n  /** Kind identifier (e.g., \"afs:node\", \"chamber:project\") */\n  kind?: string;\n  /**\n   * Kind inheritance chain, from most specific to most general.\n   * First element should match the `kind` field.\n   *\n   * Example: MCP tool has `kinds: [\"mcp:tool\", \"afs:executable\", \"afs:node\"]`\n   * Use for capability detection: `kinds.includes(\"afs:executable\")`\n   *\n   * @example\n   * ```typescript\n   * // Check if node is executable\n   * const isExecutable = metadata.kinds?.includes(\"afs:executable\") ?? false;\n   * ```\n   */\n  kinds?: string[];\n  /**\n   * Number of children this node has.\n   * - undefined: leaf node / file (no children possible)\n   * - 0: directory with no children (empty container)\n   * - N (N > 0): directory with exactly N children\n   * - -1: directory with children, but count unknown (lazy loading)\n   *\n   * Note: This is a runtime value computed by Provider. There is no file/directory\n   * distinction in AFS — all nodes can potentially have children.\n   *\n   * Design: undefined defaults to \"leaf\" for safety — if a developer forgets\n   * to set childrenCount, the node is treated as a leaf (safe failure).\n   * Directory nodes whose children count is not yet known should use -1.\n   */\n  childrenCount?: number;\n  /** File size in bytes (for content nodes) */\n  size?: number;\n  /** Human-readable description */\n  description?: string;\n  // User-defined meta fields from .afs/meta.yaml are spread directly into this object\n}\n\nexport interface AFSEntry<T = any> {\n  id: string;\n  createdAt?: Date;\n  updatedAt?: Date;\n  path: string;\n  agentId?: string | null;\n  userId?: string | null;\n  sessionId?: string | null;\n  summary?: string | null;\n  meta?: AFSEntryMetadata | null;\n  linkTo?: string | null;\n  content?: T;\n  /**\n   * Available actions for this entry.\n   * Actions can be executed via the `/.actions/<action-name>` path.\n   * Each action uses `afs:executable` kind.\n   */\n  actions?: ActionSummary[];\n}\n\n/**\n * Zod schema for ActionSummary validation.\n */\nexport const actionSummarySchema = z.object({\n  name: z.string(),\n  description: z.string().optional(),\n  inputSchema: z.record(z.string(), z.any()).optional(),\n});\n\nexport const afsEntrySchema: ZodType<AFSEntry> = z.object({\n  id: z.string(),\n  createdAt: z.date().optional(),\n  updatedAt: z.date().optional(),\n  path: z.string(),\n  userId: z.string().nullable().optional(),\n  sessionId: z.string().nullable().optional(),\n  summary: z.string().nullable().optional(),\n  meta: z.record(z.string(), z.any()).nullable().optional(),\n  linkTo: z.string().nullable().optional(),\n  content: z.any().optional(),\n  actions: z.array(actionSummarySchema).optional(),\n});\n\n// Re-export meta types for backward compatibility\nexport type {\n  AFSExplainResult,\n  JSONSchema7,\n  KindSchema,\n  MetaPathInfo,\n  NodeConstraint,\n  NodesConstraints,\n  ValidationError,\n  ValidationResult,\n} from \"./meta/type.js\";\n"],"mappings":";;;;;;;AAmFA,MAAa,mBAAmB,EAAE,KAAK,CAAC,YAAY,YAAY,CAAU,CAAC,UAAU;;;;AA4YrF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,MAAM,EAAE,QAAQ;CAChB,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,UAAU;CACtD,CAAC;AAEF,MAAa,iBAAoC,EAAE,OAAO;CACxD,IAAI,EAAE,QAAQ;CACd,WAAW,EAAE,MAAM,CAAC,UAAU;CAC9B,WAAW,EAAE,MAAM,CAAC,UAAU;CAC9B,MAAM,EAAE,QAAQ;CAChB,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;CACxC,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;CAC3C,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;CACzC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU;CACzD,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;CACxC,SAAS,EAAE,KAAK,CAAC,UAAU;CAC3B,SAAS,EAAE,MAAM,oBAAoB,CAAC,UAAU;CACjD,CAAC"}

package/dist/utils/camelize.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"camelize.d.cts","names":[],"sources":["../../src/utils/camelize.ts"],"mappings":";KAAY,SAAA,qBAA8B,CAAA,mDACnC,EAAA,GAAK,SAAA,CAAU,EAAA,IAAM,SAAA,CAAU,EAAA,MAClC,CAAA;AAAA,KAEQ,cAAA,+BACE,CAAA,IAAK,YAAA,CAAa,SAAA,UAAmB,CAAA,KAAM,CAAA,CAAE,CAAA,UAAW,IAAA,GAChE,CAAA,CAAE,CAAA,IACF,CAAA,CAAE,CAAA,UAAW,MAAA,GACX,CAAA,CAAE,CAAA,IACF,CAAA,CAAE,CAAA,UAAW,KAAA,YAAA,CAAA,8BAET,KAAA,CAAM,cAAA,CAAe,CAAA,KACrB,CAAA,CAAE,CAAA,IACJ,CAAA,CAAE,CAAA,+BACA,CAAA,gBACE,CAAA,CAAE,CAAA,IACF,cAAA,CAAe,CAAA,CAAE,CAAA,KACnB,CAAA,CAAE,CAAA;AAAA,KAGF,QAAA,iBAAyB,CAAA,SAAU,KAAA,YAC3C,KAAA,CAAM,cAAA,CAAe,CAAA,EAAG,CAAA,KACxB,cAAA,CAAe,CAAA,EAAG,CAAA;AAAA,iBAEN,QAAA,8BAAA,CAAA,GAAA,EACT,CAAA,EAAA,OAAA,GACK,CAAA,GACT,CAAA,2BAA4B,QAAA,CAAS,CAAA,EAAG,CAAA;AAAA,iBAI3B,SAAA,8BAAA,CAAA,GAAA,EACT,CAAA,EAAA,OAAA,GACK,CAAA,GACT,CAAA"}
+{"version":3,"file":"camelize.d.cts","names":[],"sources":["../../src/utils/camelize.ts"],"mappings":";KAAY,SAAA,qBAA8B,CAAA,mDACnC,EAAA,GAAK,SAAA,CAAU,EAAA,IAAM,SAAA,CAAU,EAAA,MAClC,CAAA;AAAA,KAEQ,cAAA,+BACE,CAAA,IAAK,YAAA,CAAa,SAAA,UAAmB,CAAA,KAAM,CAAA,CAAE,CAAA,UAAW,IAAA,GAChE,CAAA,CAAE,CAAA,IACF,CAAA,CAAE,CAAA,UAAW,MAAA,GACX,CAAA,CAAE,CAAA,IACF,CAAA,CAAE,CAAA,UAAW,KAAA,YACX,CAAA,8BACE,KAAA,CAAM,cAAA,CAAe,CAAA,KACrB,CAAA,CAAE,CAAA,IACJ,CAAA,CAAE,CAAA,+BACA,CAAA,gBACE,CAAA,CAAE,CAAA,IACF,cAAA,CAAe,CAAA,CAAE,CAAA,KACnB,CAAA,CAAE,CAAA;AAAA,KAGF,QAAA,iBAAyB,CAAA,SAAU,KAAA,YAC3C,KAAA,CAAM,cAAA,CAAe,CAAA,EAAG,CAAA,KACxB,cAAA,CAAe,CAAA,EAAG,CAAA;AAAA,iBAEN,QAAA,8BAAA,CACd,GAAA,EAAK,CAAA,EACL,OAAA,GAAU,CAAA,GACT,CAAA,2BAA4B,QAAA,CAAS,CAAA,EAAG,CAAA;AAAA,iBAI3B,SAAA,8BAAA,CACd,GAAA,EAAK,CAAA,EACL,OAAA,GAAU,CAAA,GACT,CAAA"}

package/dist/utils/camelize.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"camelize.d.mts","names":[],"sources":["../../src/utils/camelize.ts"],"mappings":";KAAY,SAAA,qBAA8B,CAAA,mDACnC,EAAA,GAAK,SAAA,CAAU,EAAA,IAAM,SAAA,CAAU,EAAA,MAClC,CAAA;AAAA,KAEQ,cAAA,+BACE,CAAA,IAAK,YAAA,CAAa,SAAA,UAAmB,CAAA,KAAM,CAAA,CAAE,CAAA,UAAW,IAAA,GAChE,CAAA,CAAE,CAAA,IACF,CAAA,CAAE,CAAA,UAAW,MAAA,GACX,CAAA,CAAE,CAAA,IACF,CAAA,CAAE,CAAA,UAAW,KAAA,YAAA,CAAA,8BAET,KAAA,CAAM,cAAA,CAAe,CAAA,KACrB,CAAA,CAAE,CAAA,IACJ,CAAA,CAAE,CAAA,+BACA,CAAA,gBACE,CAAA,CAAE,CAAA,IACF,cAAA,CAAe,CAAA,CAAE,CAAA,KACnB,CAAA,CAAE,CAAA;AAAA,KAGF,QAAA,iBAAyB,CAAA,SAAU,KAAA,YAC3C,KAAA,CAAM,cAAA,CAAe,CAAA,EAAG,CAAA,KACxB,cAAA,CAAe,CAAA,EAAG,CAAA;AAAA,iBAEN,QAAA,8BAAA,CAAA,GAAA,EACT,CAAA,EAAA,OAAA,GACK,CAAA,GACT,CAAA,2BAA4B,QAAA,CAAS,CAAA,EAAG,CAAA;AAAA,iBAI3B,SAAA,8BAAA,CAAA,GAAA,EACT,CAAA,EAAA,OAAA,GACK,CAAA,GACT,CAAA"}
+{"version":3,"file":"camelize.d.mts","names":[],"sources":["../../src/utils/camelize.ts"],"mappings":";KAAY,SAAA,qBAA8B,CAAA,mDACnC,EAAA,GAAK,SAAA,CAAU,EAAA,IAAM,SAAA,CAAU,EAAA,MAClC,CAAA;AAAA,KAEQ,cAAA,+BACE,CAAA,IAAK,YAAA,CAAa,SAAA,UAAmB,CAAA,KAAM,CAAA,CAAE,CAAA,UAAW,IAAA,GAChE,CAAA,CAAE,CAAA,IACF,CAAA,CAAE,CAAA,UAAW,MAAA,GACX,CAAA,CAAE,CAAA,IACF,CAAA,CAAE,CAAA,UAAW,KAAA,YACX,CAAA,8BACE,KAAA,CAAM,cAAA,CAAe,CAAA,KACrB,CAAA,CAAE,CAAA,IACJ,CAAA,CAAE,CAAA,+BACA,CAAA,gBACE,CAAA,CAAE,CAAA,IACF,cAAA,CAAe,CAAA,CAAE,CAAA,KACnB,CAAA,CAAE,CAAA;AAAA,KAGF,QAAA,iBAAyB,CAAA,SAAU,KAAA,YAC3C,KAAA,CAAM,cAAA,CAAe,CAAA,EAAG,CAAA,KACxB,cAAA,CAAe,CAAA,EAAG,CAAA;AAAA,iBAEN,QAAA,8BAAA,CACd,GAAA,EAAK,CAAA,EACL,OAAA,GAAU,CAAA,GACT,CAAA,2BAA4B,QAAA,CAAS,CAAA,EAAG,CAAA;AAAA,iBAI3B,SAAA,8BAAA,CACd,GAAA,EAAK,CAAA,EACL,OAAA,GAAU,CAAA,GACT,CAAA"}

package/dist/utils/schema.cjs

@@ -0,0 +1,129 @@
+
+//#region src/utils/schema.ts
+/**
+* Extract the list of top-level property names marked as sensitive.
+*
+* Works with both flat schemas and nested schemas (e.g. credentials.accessKeyId).
+* For nested objects, returns dot-notation paths (e.g. "credentials.accessKeyId").
+*
+* @param schema - JSON Schema (from z.toJSONSchema() or manifest schema)
+* @returns array of sensitive field paths
+*/
+function getSensitiveFields(schema) {
+	const result = [];
+	collectSensitiveFields(schema, "", result);
+	return result;
+}
+function collectSensitiveFields(schema, prefix, result) {
+	if (typeof schema !== "object" || schema === null) return;
+	const properties = schema.properties;
+	if (!properties || typeof properties !== "object") return;
+	for (const [key, propSchema] of Object.entries(properties)) {
+		const prop = propSchema;
+		const fieldPath = prefix ? `${prefix}.${key}` : key;
+		if (prop.sensitive === true) result.push(fieldPath);
+		if (prop.type === "object" && prop.properties) collectSensitiveFields(prop, fieldPath, result);
+	}
+}
+/**
+* Extract environment variable mappings from a JSON Schema.
+*
+* Returns a map from field path to array of env variable names.
+* Only includes fields that have `env` metadata set.
+*
+* @param schema - JSON Schema (from z.toJSONSchema() or manifest schema)
+* @returns map of field path → env variable names
+*/
+function getEnvMappings(schema) {
+	const result = {};
+	collectEnvMappings(schema, "", result);
+	return result;
+}
+function collectEnvMappings(schema, prefix, result) {
+	if (typeof schema !== "object" || schema === null) return;
+	const properties = schema.properties;
+	if (!properties || typeof properties !== "object") return;
+	for (const [key, propSchema] of Object.entries(properties)) {
+		const prop = propSchema;
+		const fieldPath = prefix ? `${prefix}.${key}` : key;
+		if (Array.isArray(prop.env) && prop.env.length > 0) result[fieldPath] = prop.env;
+		if (prop.type === "object" && prop.properties) collectEnvMappings(prop, fieldPath, result);
+	}
+}
+/**
+* Resolve environment variables for schema fields that declare `env` metadata.
+*
+* For each field with env mapping, checks process.env for the first matching variable.
+* Only returns fields where an env variable was found.
+*
+* @param schema - JSON Schema with env metadata
+* @param env - Environment variables (defaults to process.env)
+* @returns resolved field values from environment
+*/
+function resolveEnvFromSchema(schema, env = process.env) {
+	const mappings = getEnvMappings(schema);
+	const resolved = {};
+	for (const [field, envVars] of Object.entries(mappings)) for (const envVar of envVars) {
+		const value = env[envVar];
+		if (value !== void 0 && value !== "") {
+			resolved[field] = value;
+			break;
+		}
+	}
+	return resolved;
+}
+/**
+* Reserved key for passing sensitiveArgs annotations through mount.options.
+* Used by CLI --sensitive-args and exec mount actions to annotate which
+* user-provided options are sensitive (for ad-hoc schema construction).
+*/
+const SENSITIVE_ARGS_KEY = "_sensitiveArgs";
+/**
+* Build an ad-hoc JSON Schema from user-provided key-value pairs and sensitiveArgs.
+*
+* Used when a provider has no native schema() and no registry manifest schema,
+* e.g., generic MCP servers mounted via direct URI with extra options.
+*
+* @param values - Key-value pairs provided by the user
+* @param sensitiveArgs - Field names that should be marked as sensitive
+* @returns JSON Schema with properties derived from values
+*/
+function buildAdHocSchema(values, sensitiveArgs = []) {
+	const sensitiveSet = new Set(sensitiveArgs);
+	const properties = {};
+	for (const [key, value] of Object.entries(values)) {
+		const prop = { type: typeof value === "number" ? "number" : typeof value === "boolean" ? "boolean" : "string" };
+		if (sensitiveSet.has(key)) prop.sensitive = true;
+		properties[key] = prop;
+	}
+	return {
+		type: "object",
+		properties
+	};
+}
+/**
+* Separate values into sensitive and non-sensitive groups based on schema metadata.
+*
+* @param schema - JSON Schema with sensitive metadata
+* @param values - Values to separate
+* @returns object with `sensitive` and `nonSensitive` value groups
+*/
+function separateSensitiveValues(schema, values) {
+	const sensitiveFields = new Set(getSensitiveFields(schema));
+	const sensitive = {};
+	const nonSensitive = {};
+	for (const [key, value] of Object.entries(values)) if (sensitiveFields.has(key)) sensitive[key] = String(value);
+	else nonSensitive[key] = value;
+	return {
+		sensitive,
+		nonSensitive
+	};
+}
+
+//#endregion
+exports.SENSITIVE_ARGS_KEY = SENSITIVE_ARGS_KEY;
+exports.buildAdHocSchema = buildAdHocSchema;
+exports.getEnvMappings = getEnvMappings;
+exports.getSensitiveFields = getSensitiveFields;
+exports.resolveEnvFromSchema = resolveEnvFromSchema;
+exports.separateSensitiveValues = separateSensitiveValues;