@assemblyline-agents/core 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OpenEve contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,19 @@
+# @assemblyline-agents/core
+
+Core contracts and definition primitives for Assembly Line, a vendor-neutral, filesystem-first framework for durable AI agents.
+
+This package has no runtime engine of its own. It provides the shared vocabulary the rest of the framework builds on: agent, channel, connection, and adapter definitions; connection plugin metadata and factories (`definePlugin`, `defineMcpPluginConnection`, and related helpers); the `AgentHarness` contract; manifest and resource types; deploy contracts; sandbox path utilities; and JSON Schema validation. Provider, channel, and adapter packages depend on `@assemblyline-agents/core` to stay decoupled from the runtime.
+
+## Install
+
+```sh
+npm install @assemblyline-agents/core
+```
+
+## Part of Assembly Line
+
+This package is part of [Assembly Line](https://github.com/jasonbadeaux/openeve), a vendor-neutral, filesystem-first framework for durable AI agents. See the developer documentation in [docs/developers/](https://github.com/jasonbadeaux/openeve/tree/main/docs/developers) for setup, agent authoring, and deployment guides.
+
+## License
+
+MIT

package/dist/adapter-metadata.d.ts

@@ -0,0 +1,7 @@
+import type { AdapterDefinition, AdapterProviderMetadata, AdapterRole, JsonObject } from "./index.js";
+export declare function adapter(kind: string, options?: JsonObject, extras?: {
+    package?: string;
+}): AdapterDefinition;
+export declare function adapterProviderMetadata(kind: string, role?: AdapterRole): AdapterProviderMetadata | undefined;
+export declare function allAdapterProviderMetadata(): AdapterProviderMetadata[];
+//# sourceMappingURL=adapter-metadata.d.ts.map

package/dist/adapter-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-metadata.d.ts","sourceRoot":"","sources":["../src/adapter-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGtG,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,UAAe,EAAE,MAAM,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,iBAAiB,CAIpH;AA4ND,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,uBAAuB,GAAG,SAAS,CAG7G;AAED,wBAAgB,0BAA0B,IAAI,uBAAuB,EAAE,CAEtE"}

package/dist/adapter-metadata.js

@@ -0,0 +1,232 @@
+import { allConnectionPluginMetadata } from "./plugin.js";
+export function adapter(kind, options = {}, extras = {}) {
+    const definition = { kind, options };
+    if (extras.package)
+        definition.packageName = extras.package;
+    return definition;
+}
+const BUILT_IN_ADAPTER_METADATA = [
+    { kind: "local", role: "deploy", capabilities: ["local-server"] },
+    { kind: "local", role: "state", capabilities: ["dev-state"] },
+    { kind: "local", role: "blob", capabilities: ["dev-blob"] },
+    { kind: "local", role: "sandbox", capabilities: ["trusted-local-shell"] },
+    { kind: "local", role: "scheduler", capabilities: ["in-process-scheduler"] },
+    { kind: "gateway", role: "scheduler", optionalEnv: ["OPENEVE_SCHEDULER_SECRET"], capabilities: ["external-cron", "gateway-triggered-scheduler"] },
+    { kind: "postgres", role: "scheduler", capabilities: ["state-backed-polling", "multi-worker-idempotency"] },
+    { kind: "node", role: "runtime", packageName: "@assemblyline-agents/node", capabilities: ["http-runtime", "local-server"] },
+    {
+        kind: "railway",
+        role: "deploy",
+        packageName: "@assemblyline-agents/railway",
+        requiredEnv: ["RAILWAY_TOKEN"],
+        capabilities: ["hosted-node-runtime", "persistent-storage", "remote-exec"],
+        setup: [
+            {
+                kind: "deploy",
+                name: "railway-project",
+                required: true,
+                message: "Configure a Railway project/service before publishing."
+            }
+        ]
+    },
+    {
+        kind: "docker",
+        role: "deploy",
+        packageName: "@assemblyline-agents/docker",
+        optionalEnv: ["OPENEVE_DOCKER_IMAGE"],
+        capabilities: ["container-runtime", "persistent-storage", "remote-exec"],
+        setup: [
+            {
+                kind: "deploy",
+                name: "docker-cli",
+                required: true,
+                message: "Install and start Docker before publishing with the Docker deploy adapter."
+            }
+        ]
+    },
+    {
+        kind: "docker",
+        role: "sandbox",
+        packageName: "@assemblyline-agents/docker",
+        optionalEnv: ["DOCKER_HOST", "OPENEVE_DOCKER_NETWORK", "OPENEVE_DOCKER_CPUS", "OPENEVE_DOCKER_MEMORY", "OPENEVE_DOCKER_PULL_POLICY", "OPENEVE_DOCKER_COMMAND_TIMEOUT_MS"],
+        capabilities: ["sandbox", "shell", "filesystem", "containers", "lifecycle"],
+        setup: [
+            {
+                kind: "sandbox",
+                name: "docker-cli",
+                required: true,
+                message: "Install and start Docker before using the Docker sandbox adapter."
+            }
+        ]
+    },
+    {
+        kind: "fly",
+        role: "deploy",
+        packageName: "@assemblyline-agents/fly",
+        requiredEnv: ["FLY_API_TOKEN"],
+        optionalEnv: ["FLY_APP_NAME", "FLY_ORG", "FLY_REGION"],
+        capabilities: ["hosted-container-runtime", "persistent-storage", "remote-exec"],
+        setup: [
+            {
+                kind: "deploy",
+                name: "fly-app",
+                required: true,
+                message: "Configure a Fly app name through gateway options, --fly-app, FLY_APP_NAME, or package config before publishing."
+            }
+        ]
+    },
+    {
+        kind: "vps",
+        role: "deploy",
+        stability: "supported",
+        packageName: "@assemblyline-agents/vps",
+        optionalEnv: ["OPENEVE_VPS_HOSTS_FILE"],
+        capabilities: ["hosted-container-runtime", "persistent-storage", "remote-exec", "blue-green"],
+        setup: [
+            {
+                kind: "deploy",
+                name: "vps-host-inventory",
+                required: true,
+                message: "Register an existing supported Linux VPS in openeve.hosts.json before publishing."
+            }
+        ]
+    },
+    {
+        kind: "postgres",
+        role: "state",
+        packageName: "@assemblyline-agents/postgres",
+        requiredEnv: ["DATABASE_URL"],
+        capabilities: ["durable-state", "migrations"],
+        setup: [
+            {
+                kind: "migration",
+                name: "postgres-schema",
+                required: true,
+                message: "Apply OpenEve state migrations to Postgres before production runs."
+            }
+        ]
+    },
+    {
+        kind: "s3",
+        role: "blob",
+        packageName: "@assemblyline-agents/s3",
+        requiredEnv: ["S3_BUCKET", "S3_REGION", "S3_ACCESS_KEY_ID", "S3_SECRET_ACCESS_KEY"],
+        optionalEnv: ["S3_ENDPOINT", "S3_FORCE_PATH_STYLE", "S3_PREFIX", "S3_PUBLIC_BASE_URL"],
+        capabilities: ["blob", "attachments", "artifacts"]
+    },
+    {
+        kind: "r2",
+        role: "blob",
+        packageName: "@assemblyline-agents/r2",
+        requiredEnv: ["R2_ACCOUNT_ID", "R2_ACCESS_KEY_ID", "R2_SECRET_ACCESS_KEY", "R2_BUCKET"],
+        optionalEnv: ["R2_PREFIX", "R2_PUBLIC_BASE_URL"],
+        capabilities: ["blob", "attachments", "artifacts", "s3-compatible"]
+    },
+    {
+        kind: "daytona",
+        role: "sandbox",
+        packageName: "@assemblyline-agents/daytona",
+        requiredEnv: ["DAYTONA_API_KEY"],
+        optionalEnv: [
+            "DAYTONA_API_URL",
+            "DAYTONA_TARGET",
+            "OPENEVE_DAYTONA_CREATE_TIMEOUT_SECONDS",
+            "OPENEVE_DAYTONA_LIFECYCLE_TIMEOUT_SECONDS",
+            "OPENEVE_DAYTONA_AUTO_STOP_MINUTES",
+            "OPENEVE_DAYTONA_AUTO_ARCHIVE_MINUTES",
+            "OPENEVE_DAYTONA_AUTO_DELETE_MINUTES",
+            "OPENEVE_DAYTONA_EPHEMERAL",
+            "OPENEVE_DAYTONA_NETWORK_BLOCK_ALL",
+            "OPENEVE_DAYTONA_NETWORK_ALLOW_LIST",
+            "OPENEVE_DAYTONA_DOMAIN_ALLOW_LIST",
+            "OPENEVE_ALLOW_LOCAL_SANDBOX_FALLBACK"
+        ],
+        capabilities: ["sandbox", "shell", "filesystem", "lifecycle", "snapshots"]
+    },
+    {
+        kind: "e2b",
+        role: "sandbox",
+        packageName: "@assemblyline-agents/e2b",
+        requiredEnv: ["E2B_API_KEY"],
+        optionalEnv: [
+            "E2B_TEMPLATE",
+            "OPENEVE_E2B_TIMEOUT_MS",
+            "OPENEVE_E2B_RETAIN_TIMEOUT_MS",
+            "OPENEVE_E2B_REQUEST_TIMEOUT_MS",
+            "OPENEVE_E2B_PAUSE_KEEP_MEMORY",
+            "OPENEVE_E2B_ALLOW_INTERNET_ACCESS"
+        ],
+        capabilities: ["sandbox", "shell", "filesystem", "lifecycle", "snapshots"]
+    },
+    {
+        kind: "modal",
+        role: "sandbox",
+        packageName: "@assemblyline-agents/modal",
+        requiredEnv: ["MODAL_TOKEN_ID", "MODAL_TOKEN_SECRET"],
+        optionalEnv: ["MODAL_APP_NAME", "OPENEVE_MODAL_TIMEOUT_MS", "OPENEVE_MODAL_WAIT_READY"],
+        capabilities: ["sandbox", "shell", "filesystem", "lifecycle", "snapshots"]
+    },
+    {
+        kind: "slack",
+        role: "channel",
+        packageName: "@assemblyline-agents/slack",
+        requiredEnv: ["SLACK_SIGNING_SECRET", "SLACK_BOT_TOKEN"],
+        optionalEnv: ["SLACK_BOT_USER_ID", "SLACK_ASSISTANT_ENABLED"],
+        capabilities: ["http-channel", "events-api", "assistant"]
+    },
+    {
+        kind: "discord",
+        role: "channel",
+        packageName: "@assemblyline-agents/discord",
+        requiredEnv: ["DISCORD_PUBLIC_KEY", "DISCORD_APPLICATION_ID", "DISCORD_BOT_TOKEN"],
+        optionalEnv: ["DISCORD_GATEWAY_ENABLED", "DISCORD_GATEWAY_INTENTS", "DISCORD_BOT_USER_ID"],
+        capabilities: ["http-channel", "ingress", "gateway", "interactions", "agent-chat"]
+    },
+    {
+        kind: "telegram",
+        role: "channel",
+        packageName: "@assemblyline-agents/telegram",
+        requiredEnv: ["TELEGRAM_BOT_TOKEN"],
+        optionalEnv: ["TELEGRAM_WEBHOOK_SECRET"],
+        capabilities: ["http-channel", "bot-api", "agent-chat", "rich-actions"]
+    },
+    {
+        kind: "github-app",
+        role: "connection",
+        packageName: "@assemblyline-agents/github",
+        requiredEnv: ["GITHUB_APP_ID", "GITHUB_PRIVATE_KEY"],
+        optionalEnv: ["GITHUB_CLIENT_ID", "GITHUB_CLIENT_SECRET"],
+        capabilities: ["github-app", "installation-token"]
+    },
+    {
+        kind: "teams",
+        role: "channel",
+        packageName: "@assemblyline-agents/teams",
+        requiredEnv: ["MICROSOFT_APP_ID", "MICROSOFT_APP_PASSWORD"],
+        optionalEnv: ["OPENEVE_TEAMS_ALLOWED_TENANTS", "OPENEVE_TEAMS_ALLOWED_SERVICE_URLS"],
+        capabilities: ["http-channel", "bot-framework", "agent-chat", "rich-actions"]
+    },
+    {
+        kind: "microsoft-bot",
+        role: "connection",
+        packageName: "@assemblyline-agents/teams",
+        requiredEnv: ["MICROSOFT_APP_ID", "MICROSOFT_APP_PASSWORD"],
+        capabilities: ["bot-framework"]
+    },
+    {
+        kind: "livekit",
+        role: "connection",
+        packageName: "@assemblyline-agents/livekit",
+        requiredEnv: ["LIVEKIT_URL", "LIVEKIT_API_KEY", "LIVEKIT_API_SECRET"],
+        optionalEnv: ["LIVEKIT_OUTBOUND_TRUNK_ID", "LIVEKIT_VOICE_AGENT_NAME"],
+        capabilities: ["agent-dispatch", "sip-call", "sip-admin", "typed-tools"]
+    }
+];
+export function adapterProviderMetadata(kind, role) {
+    return [...BUILT_IN_ADAPTER_METADATA, ...allConnectionPluginMetadata()]
+        .find((metadata) => metadata.kind === kind && (!role || metadata.role === role));
+}
+export function allAdapterProviderMetadata() {
+    return [...BUILT_IN_ADAPTER_METADATA.map((metadata) => ({ ...metadata })), ...allConnectionPluginMetadata()];
+}
+//# sourceMappingURL=adapter-metadata.js.map

package/dist/adapter-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-metadata.js","sourceRoot":"","sources":["../src/adapter-metadata.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,UAAsB,EAAE,EAAE,SAA+B,EAAE;IAC/F,MAAM,UAAU,GAAsB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACxD,IAAI,MAAM,CAAC,OAAO;QAAE,UAAU,CAAC,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC;IAC5D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,yBAAyB,GAA8B;IAC3D,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,cAAc,CAAC,EAAE;IACjE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC,EAAE;IAC7D,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE;IAC3D,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,qBAAqB,CAAC,EAAE;IACzE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,sBAAsB,CAAC,EAAE;IAC5E,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,0BAA0B,CAAC,EAAE,YAAY,EAAE,CAAC,eAAe,EAAE,6BAA6B,CAAC,EAAE;IACjJ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,sBAAsB,EAAE,0BAA0B,CAAC,EAAE;IAC3G,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE,YAAY,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE;IAC3H;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EAAE,CAAC,eAAe,CAAC;QAC9B,YAAY,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,aAAa,CAAC;QAC1E,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,wDAAwD;aAClE;SACF;KACF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,6BAA6B;QAC1C,WAAW,EAAE,CAAC,sBAAsB,CAAC;QACrC,YAAY,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,aAAa,CAAC;QACxE,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,4EAA4E;aACtF;SACF;KACF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,6BAA6B;QAC1C,WAAW,EAAE,CAAC,aAAa,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,mCAAmC,CAAC;QACzK,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC;QAC3E,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,mEAAmE;aAC7E;SACF;KACF;IACD;QACE,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE,CAAC,eAAe,CAAC;QAC9B,WAAW,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,YAAY,CAAC;QACtD,YAAY,EAAE,CAAC,0BAA0B,EAAE,oBAAoB,EAAE,aAAa,CAAC;QAC/E,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,iHAAiH;aAC3H;SACF;KACF;IACD;QACE,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE,CAAC,wBAAwB,CAAC;QACvC,YAAY,EAAE,CAAC,0BAA0B,EAAE,oBAAoB,EAAE,aAAa,EAAE,YAAY,CAAC;QAC7F,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,oBAAoB;gBAC1B,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,mFAAmF;aAC7F;SACF;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,+BAA+B;QAC5C,WAAW,EAAE,CAAC,cAAc,CAAC;QAC7B,YAAY,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC;QAC7C,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,oEAAoE;aAC9E;SACF;KACF;IACD;QACE,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,yBAAyB;QACtC,WAAW,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,CAAC;QACnF,WAAW,EAAE,CAAC,aAAa,EAAE,qBAAqB,EAAE,WAAW,EAAE,oBAAoB,CAAC;QACtF,YAAY,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC;KACnD;IACD;QACE,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,yBAAyB;QACtC,WAAW,EAAE,CAAC,eAAe,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,WAAW,CAAC;QACvF,WAAW,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC;QAChD,YAAY,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,CAAC;KACpE;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EAAE,CAAC,iBAAiB,CAAC;QAChC,WAAW,EAAE;YACX,iBAAiB;YACjB,gBAAgB;YAChB,wCAAwC;YACxC,2CAA2C;YAC3C,mCAAmC;YACnC,sCAAsC;YACtC,qCAAqC;YACrC,2BAA2B;YAC3B,mCAAmC;YACnC,oCAAoC;YACpC,mCAAmC;YACnC,sCAAsC;SACvC;QACD,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC;KAC3E;IACD;QACE,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE,CAAC,aAAa,CAAC;QAC5B,WAAW,EAAE;YACX,cAAc;YACd,wBAAwB;YACxB,+BAA+B;YAC/B,gCAAgC;YAChC,+BAA+B;YAC/B,mCAAmC;SACpC;QACD,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC;KAC3E;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,CAAC,gBAAgB,EAAE,oBAAoB,CAAC;QACrD,WAAW,EAAE,CAAC,gBAAgB,EAAE,0BAA0B,EAAE,0BAA0B,CAAC;QACvF,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC;KAC3E;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,CAAC,sBAAsB,EAAE,iBAAiB,CAAC;QACxD,WAAW,EAAE,CAAC,mBAAmB,EAAE,yBAAyB,CAAC;QAC7D,YAAY,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,WAAW,CAAC;KAC1D;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EAAE,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,mBAAmB,CAAC;QAClF,WAAW,EAAE,CAAC,yBAAyB,EAAE,yBAAyB,EAAE,qBAAqB,CAAC;QAC1F,YAAY,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,CAAC;KACnF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,+BAA+B;QAC5C,WAAW,EAAE,CAAC,oBAAoB,CAAC;QACnC,WAAW,EAAE,CAAC,yBAAyB,CAAC;QACxC,YAAY,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC;KACxE;IACD;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,6BAA6B;QAC1C,WAAW,EAAE,CAAC,eAAe,EAAE,oBAAoB,CAAC;QACpD,WAAW,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;QACzD,YAAY,EAAE,CAAC,YAAY,EAAE,oBAAoB,CAAC;KACnD;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;QAC3D,WAAW,EAAE,CAAC,+BAA+B,EAAE,oCAAoC,CAAC;QACpF,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,CAAC;KAC9E;IACD;QACE,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;QAC3D,YAAY,EAAE,CAAC,eAAe,CAAC;KAChC;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,oBAAoB,CAAC;QACrE,WAAW,EAAE,CAAC,2BAA2B,EAAE,0BAA0B,CAAC;QACtE,YAAY,EAAE,CAAC,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC;KACzE;CACF,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,IAAkB;IACtE,OAAO,CAAC,GAAG,yBAAyB,EAAE,GAAG,2BAA2B,EAAE,CAAC;SACpE,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO,CAAC,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,2BAA2B,EAAE,CAAC,CAAC;AAC/G,CAAC"}

package/dist/artifact-dir.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Dual-read resolution for the generated artifact directory (`.assembly-line`
+ * with the legacy `.openeve` spelling). Core is platform-neutral, so callers
+ * inject an existence probe (typically `existsSync`-based).
+ *
+ * The two names are never merged: an agent parent directory containing both is
+ * a hard error so a stale tree can never be silently mixed with a live one.
+ */
+export declare const KNOWN_ARTIFACT_DIR_NAMES: readonly string[];
+export declare class ArtifactDirConflictError extends Error {
+    constructor(parentDir: string);
+}
+export interface ResolveArtifactDirOptions {
+    /** Returns true when `parentDir` contains an entry named `name`. */
+    exists(parentDir: string, name: string): boolean;
+    /** Directory name used when neither spelling exists yet. */
+    defaultName?: string;
+}
+export declare function resolveArtifactDirName(parentDir: string, options: ResolveArtifactDirOptions): string;
+export declare function isKnownArtifactDirName(name: string): boolean;
+//# sourceMappingURL=artifact-dir.d.ts.map

package/dist/artifact-dir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-dir.d.ts","sourceRoot":"","sources":["../src/artifact-dir.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAGrD,CAAC;AAEF,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,SAAS,EAAE,MAAM;CAO9B;AAED,MAAM,WAAW,yBAAyB;IACxC,oEAAoE;IACpE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACjD,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,yBAAyB,GACjC,MAAM,CAOR;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D"}

package/dist/artifact-dir.js

@@ -0,0 +1,35 @@
+import { ARTIFACT_DIR_NAME, LEGACY_ARTIFACT_DIR_NAME } from "./brand.js";
+/**
+ * Dual-read resolution for the generated artifact directory (`.assembly-line`
+ * with the legacy `.openeve` spelling). Core is platform-neutral, so callers
+ * inject an existence probe (typically `existsSync`-based).
+ *
+ * The two names are never merged: an agent parent directory containing both is
+ * a hard error so a stale tree can never be silently mixed with a live one.
+ */
+export const KNOWN_ARTIFACT_DIR_NAMES = [
+    ARTIFACT_DIR_NAME,
+    LEGACY_ARTIFACT_DIR_NAME,
+];
+export class ArtifactDirConflictError extends Error {
+    constructor(parentDir) {
+        super(`Both ${ARTIFACT_DIR_NAME} and ${LEGACY_ARTIFACT_DIR_NAME} exist under ${parentDir}. ` +
+            `Remove or rename one of them; they are alternate spellings of the same artifact directory and cannot coexist.`);
+        this.name = "ArtifactDirConflictError";
+    }
+}
+export function resolveArtifactDirName(parentDir, options) {
+    const hasNew = options.exists(parentDir, ARTIFACT_DIR_NAME);
+    const hasLegacy = options.exists(parentDir, LEGACY_ARTIFACT_DIR_NAME);
+    if (hasNew && hasLegacy)
+        throw new ArtifactDirConflictError(parentDir);
+    if (hasNew)
+        return ARTIFACT_DIR_NAME;
+    if (hasLegacy)
+        return LEGACY_ARTIFACT_DIR_NAME;
+    return options.defaultName ?? ARTIFACT_DIR_NAME;
+}
+export function isKnownArtifactDirName(name) {
+    return KNOWN_ARTIFACT_DIR_NAMES.includes(name);
+}
+//# sourceMappingURL=artifact-dir.js.map

package/dist/artifact-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-dir.js","sourceRoot":"","sources":["../src/artifact-dir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEzE;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IACzD,iBAAiB;IACjB,wBAAwB;CACzB,CAAC;AAEF,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,SAAiB;QAC3B,KAAK,CACH,QAAQ,iBAAiB,QAAQ,wBAAwB,gBAAgB,SAAS,IAAI;YACpF,+GAA+G,CAClH,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AASD,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,OAAkC;IAElC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACtE,IAAI,MAAM,IAAI,SAAS;QAAE,MAAM,IAAI,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,MAAM;QAAE,OAAO,iBAAiB,CAAC;IACrC,IAAI,SAAS;QAAE,OAAO,wBAAwB,CAAC;IAC/C,OAAO,OAAO,CAAC,WAAW,IAAI,iBAAiB,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC"}

package/dist/brand.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Central brand/name constants for the OpenEve → Assembly Line rename.
+ *
+ * Every module that needs a brand-derived identifier imports it from here
+ * instead of spelling a literal. Legacy values remain supported through the
+ * compatibility window; identifiers that must never change (crypto contexts,
+ * migration IDs, physical database names) are documented in
+ * docs/rename/manifest.md and deliberately absent from this module.
+ */
+export declare const PRODUCT_NAME = "Assembly Line";
+export declare const LEGACY_PRODUCT_NAME = "OpenEve";
+export declare const ENV_PREFIX = "ASSEMBLY_LINE_";
+export declare const LEGACY_ENV_PREFIX = "OPENEVE_";
+export declare const ARTIFACT_DIR_NAME = ".assembly-line";
+export declare const LEGACY_ARTIFACT_DIR_NAME = ".openeve";
+export declare const HOSTS_FILE_NAME = "assembly-line.hosts.json";
+export declare const LEGACY_HOSTS_FILE_NAME = "openeve.hosts.json";
+export declare const INTERNAL_ROUTE_PREFIX = "/assembly-line";
+export declare const LEGACY_INTERNAL_ROUTE_PREFIX = "/openeve";
+export declare const SCHEDULER_SECRET_HEADER = "x-assembly-line-scheduler-secret";
+export declare const LEGACY_SCHEDULER_SECRET_HEADER = "x-openeve-scheduler-secret";
+export declare const PLUGIN_EXPORT_NAME = "assemblyLinePlugin";
+export declare const LEGACY_PLUGIN_EXPORT_NAME = "openevePlugin";
+export declare const PROVIDER_EXPORT_NAME = "assemblyLineProvider";
+export declare const LEGACY_PROVIDER_EXPORT_NAME = "openeveProvider";
+export declare const NPM_SCOPE = "@assemblyline-agents";
+export declare const LEGACY_NPM_SCOPE = "@openeve";
+/**
+ * Reads a module-surface export that may live under its new or legacy name.
+ * The new name wins; defining both with different values is a configuration
+ * error surfaced to the caller so it can fail with actionable context.
+ */
+export declare function readAliasedExport(candidate: object, newName: string, legacyName: string): {
+    value: unknown;
+    conflict: boolean;
+};
+//# sourceMappingURL=brand.d.ts.map

package/dist/brand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brand.d.ts","sourceRoot":"","sources":["../src/brand.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,YAAY,kBAAkB,CAAC;AAC5C,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAE7C,eAAO,MAAM,UAAU,mBAAmB,CAAC;AAC3C,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAE5C,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAClD,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAEnD,eAAO,MAAM,eAAe,6BAA6B,CAAC;AAC1D,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAE3D,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AACtD,eAAO,MAAM,4BAA4B,aAAa,CAAC;AAEvD,eAAO,MAAM,uBAAuB,qCAAqC,CAAC;AAC1E,eAAO,MAAM,8BAA8B,+BAA+B,CAAC;AAE3E,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,yBAAyB,kBAAkB,CAAC;AAEzD,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,2BAA2B,oBAAoB,CAAC;AAE7D,eAAO,MAAM,SAAS,yBAAyB,CAAC;AAChD,eAAO,MAAM,gBAAgB,aAAa,CAAC;AAE3C;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAQvC"}

package/dist/brand.js

@@ -0,0 +1,42 @@
+/**
+ * Central brand/name constants for the OpenEve → Assembly Line rename.
+ *
+ * Every module that needs a brand-derived identifier imports it from here
+ * instead of spelling a literal. Legacy values remain supported through the
+ * compatibility window; identifiers that must never change (crypto contexts,
+ * migration IDs, physical database names) are documented in
+ * docs/rename/manifest.md and deliberately absent from this module.
+ */
+export const PRODUCT_NAME = "Assembly Line";
+export const LEGACY_PRODUCT_NAME = "OpenEve";
+export const ENV_PREFIX = "ASSEMBLY_LINE_";
+export const LEGACY_ENV_PREFIX = "OPENEVE_";
+export const ARTIFACT_DIR_NAME = ".assembly-line";
+export const LEGACY_ARTIFACT_DIR_NAME = ".openeve";
+export const HOSTS_FILE_NAME = "assembly-line.hosts.json";
+export const LEGACY_HOSTS_FILE_NAME = "openeve.hosts.json";
+export const INTERNAL_ROUTE_PREFIX = "/assembly-line";
+export const LEGACY_INTERNAL_ROUTE_PREFIX = "/openeve";
+export const SCHEDULER_SECRET_HEADER = "x-assembly-line-scheduler-secret";
+export const LEGACY_SCHEDULER_SECRET_HEADER = "x-openeve-scheduler-secret";
+export const PLUGIN_EXPORT_NAME = "assemblyLinePlugin";
+export const LEGACY_PLUGIN_EXPORT_NAME = "openevePlugin";
+export const PROVIDER_EXPORT_NAME = "assemblyLineProvider";
+export const LEGACY_PROVIDER_EXPORT_NAME = "openeveProvider";
+export const NPM_SCOPE = "@assemblyline-agents";
+export const LEGACY_NPM_SCOPE = "@openeve";
+/**
+ * Reads a module-surface export that may live under its new or legacy name.
+ * The new name wins; defining both with different values is a configuration
+ * error surfaced to the caller so it can fail with actionable context.
+ */
+export function readAliasedExport(candidate, newName, legacyName) {
+    const record = candidate;
+    const next = record[newName];
+    const legacy = record[legacyName];
+    if (next !== undefined && legacy !== undefined && next !== legacy) {
+        return { value: undefined, conflict: true };
+    }
+    return { value: next !== undefined ? next : legacy, conflict: false };
+}
+//# sourceMappingURL=brand.js.map

package/dist/brand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brand.js","sourceRoot":"","sources":["../src/brand.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAE7C,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAC3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAE5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAClD,MAAM,CAAC,MAAM,wBAAwB,GAAG,UAAU,CAAC;AAEnD,MAAM,CAAC,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AACtD,MAAM,CAAC,MAAM,4BAA4B,GAAG,UAAU,CAAC;AAEvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,kCAAkC,CAAC;AAC1E,MAAM,CAAC,MAAM,8BAA8B,GAAG,4BAA4B,CAAC;AAE3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC;AAEzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,MAAM,CAAC,MAAM,2BAA2B,GAAG,iBAAiB,CAAC;AAE7D,MAAM,CAAC,MAAM,SAAS,GAAG,sBAAsB,CAAC;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAE3C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,OAAe,EACf,UAAkB;IAElB,MAAM,MAAM,GAAG,SAAoC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACxE,CAAC"}

package/dist/connection-auth.d.ts

@@ -0,0 +1,27 @@
+import type { ConnectionAccessDefinition, ConnectionAuthDefinition, ConnectionAuthorizationChallenge, ToolFilterDefinition } from "./index.js";
+export declare class ConnectionAuthorizationRequiredError extends Error {
+    readonly connectionName: string;
+    readonly reason: string;
+    readonly challenge?: ConnectionAuthorizationChallenge;
+    constructor(connectionName: string, options?: {
+        message?: string;
+        reason?: string;
+        challenge?: ConnectionAuthorizationChallenge;
+    });
+}
+export declare class ConnectionAuthorizationFailedError extends Error {
+    readonly connectionName: string;
+    readonly reason: string;
+    readonly retryable: boolean;
+    constructor(connectionName: string, options?: {
+        message?: string;
+        reason?: string;
+        retryable?: boolean;
+    });
+}
+export declare function isConnectionAuthorizationRequiredError(error: unknown): error is ConnectionAuthorizationRequiredError;
+export declare function isConnectionAuthorizationFailedError(error: unknown): error is ConnectionAuthorizationFailedError;
+export declare function validateConnectionAuthDefinition(auth: ConnectionAuthDefinition | undefined, prefix: string): void;
+export declare function validateToolFilter(filter: ToolFilterDefinition | undefined, prefix: string): void;
+export declare function validateConnectionAccess(access: ConnectionAccessDefinition | undefined, prefix: string): void;
+//# sourceMappingURL=connection-auth.d.ts.map

package/dist/connection-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-auth.d.ts","sourceRoot":"","sources":["../src/connection-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,wBAAwB,EACxB,gCAAgC,EAChC,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAEpB,qBAAa,oCAAqC,SAAQ,KAAK;IAC7D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,gCAAgC,CAAC;gBAE1C,cAAc,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,gCAAgC,CAAA;KAAO;CAOtI;AAED,qBAAa,kCAAmC,SAAQ,KAAK;IAC3D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,cAAc,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAO;CAO7G;AAED,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,oCAAoC,CAEpH;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kCAAkC,CAEhH;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,wBAAwB,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAgBjH;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,oBAAoB,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAKjG;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAa7G"}

package/dist/connection-auth.js

@@ -0,0 +1,75 @@
+export class ConnectionAuthorizationRequiredError extends Error {
+    connectionName;
+    reason;
+    challenge;
+    constructor(connectionName, options = {}) {
+        super(options.message ?? `Connection ${connectionName} requires authorization.`);
+        this.name = "ConnectionAuthorizationRequiredError";
+        this.connectionName = connectionName;
+        this.reason = options.reason ?? "authorization_required";
+        if (options.challenge)
+            this.challenge = options.challenge;
+    }
+}
+export class ConnectionAuthorizationFailedError extends Error {
+    connectionName;
+    reason;
+    retryable;
+    constructor(connectionName, options = {}) {
+        super(options.message ?? `Connection ${connectionName} authorization failed.`);
+        this.name = "ConnectionAuthorizationFailedError";
+        this.connectionName = connectionName;
+        this.reason = options.reason ?? "authorization_failed";
+        this.retryable = options.retryable ?? true;
+    }
+}
+export function isConnectionAuthorizationRequiredError(error) {
+    return isNamedConnectionError(error, "ConnectionAuthorizationRequiredError");
+}
+export function isConnectionAuthorizationFailedError(error) {
+    return isNamedConnectionError(error, "ConnectionAuthorizationFailedError");
+}
+export function validateConnectionAuthDefinition(auth, prefix) {
+    if (!auth || typeof auth === "function")
+        return;
+    if ("authorizeUrl" in auth || "tokenUrl" in auth) {
+        if (auth.principalType !== "user") {
+            throw new Error(`${prefix}: OAuth authorization must use principalType "user".`);
+        }
+        return;
+    }
+    const hasStart = "startAuthorization" in auth && auth.startAuthorization !== undefined;
+    const hasComplete = "completeAuthorization" in auth && auth.completeAuthorization !== undefined;
+    if (hasStart !== hasComplete) {
+        throw new Error(`${prefix}: startAuthorization and completeAuthorization must be provided together.`);
+    }
+    if (hasStart && auth.principalType && auth.principalType !== "user") {
+        throw new Error(`${prefix}: interactive authorization must use principalType "user".`);
+    }
+}
+export function validateToolFilter(filter, prefix) {
+    if (!filter)
+        return;
+    if ("allow" in filter && "block" in filter) {
+        throw new Error(`${prefix}: specify only one of allow or block.`);
+    }
+}
+export function validateConnectionAccess(access, prefix) {
+    if (!access)
+        throw new Error(`${prefix}: access is required for live connections.`);
+    if (!Array.isArray(access.read?.tools) || access.read.tools.length === 0) {
+        throw new Error(`${prefix}: access.read.tools must contain at least one tool pattern.`);
+    }
+    if (access.write !== false) {
+        if (!Array.isArray(access.write?.tools) || access.write.tools.length === 0) {
+            throw new Error(`${prefix}: access.write.tools must contain at least one tool pattern when writes are enabled.`);
+        }
+        if (access.write.approval === undefined) {
+            throw new Error(`${prefix}: access.write.approval is required when writes are enabled.`);
+        }
+    }
+}
+function isNamedConnectionError(error, name) {
+    return typeof error === "object" && error !== null && "name" in error && error.name === name;
+}
+//# sourceMappingURL=connection-auth.js.map

package/dist/connection-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-auth.js","sourceRoot":"","sources":["../src/connection-auth.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IACpD,cAAc,CAAS;IACvB,MAAM,CAAS;IACf,SAAS,CAAoC;IAEtD,YAAY,cAAsB,EAAE,UAA+F,EAAE;QACnI,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,cAAc,0BAA0B,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,GAAG,sCAAsC,CAAC;QACnD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,wBAAwB,CAAC;QACzD,IAAI,OAAO,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAClD,cAAc,CAAS;IACvB,MAAM,CAAS;IACf,SAAS,CAAU;IAE5B,YAAY,cAAsB,EAAE,UAAsE,EAAE;QAC1G,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,cAAc,wBAAwB,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;QACjD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,sBAAsB,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,UAAU,sCAAsC,CAAC,KAAc;IACnE,OAAO,sBAAsB,CAAC,KAAK,EAAE,sCAAsC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,OAAO,sBAAsB,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,IAA0C,EAAE,MAAc;IACzG,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,UAAU;QAAE,OAAO;IAChD,IAAI,cAAc,IAAI,IAAI,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,sDAAsD,CAAC,CAAC;QACnF,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,IAAI,IAAI,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC;IACvF,MAAM,WAAW,GAAG,uBAAuB,IAAI,IAAI,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,CAAC;IAChG,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,2EAA2E,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,QAAQ,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,4DAA4D,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAwC,EAAE,MAAc;IACzF,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,IAAI,OAAO,IAAI,MAAM,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,uCAAuC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA8C,EAAE,MAAc;IACrG,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,4CAA4C,CAAC,CAAC;IACpF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,6DAA6D,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,sFAAsF,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,8DAA8D,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,IAAY;IAC1D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAK,KAA4B,CAAC,IAAI,KAAK,IAAI,CAAC;AACvH,CAAC"}