@cursor/bdk 0.2.1

package/dist/internal/mcp-oauth.js

@@ -0,0 +1,450 @@
+/**
+ * Host-side MCP OAuth for `defineConnection({ url, oauth: true })`.
+ * Local: mcp-auth.json. Prod secrets: `mcp oauth <name> --store`.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { execFile } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
+import { createServer } from "node:http";
+import { dirname, join } from "node:path";
+import { configDirPath } from "./cursor/credentials.js";
+export const MCP_OAUTH_CALLBACK_PORT = 8787;
+export const MCP_OAUTH_CALLBACK_PATH = "/callback";
+export const MCP_OAUTH_CALLBACK_URL = `http://localhost:${MCP_OAUTH_CALLBACK_PORT}${MCP_OAUTH_CALLBACK_PATH}`;
+/** `anytool` → `MCP_OAUTH_ANYTOOL`. */
+export function mcpOauthEnvPrefix(connection) {
+    const key = connection
+        .trim()
+        .toUpperCase()
+        .replace(/[^A-Z0-9]+/g, "_")
+        .replace(/^_+|_+$/g, "");
+    return `MCP_OAUTH_${key.length > 0 ? key : "CONNECTION"}`;
+}
+export function mcpOauthSecretNames(connection) {
+    const prefix = mcpOauthEnvPrefix(connection);
+    return {
+        accessToken: `${prefix}_ACCESS_TOKEN`,
+        refreshToken: `${prefix}_REFRESH_TOKEN`,
+        clientId: `${prefix}_CLIENT_ID`,
+    };
+}
+export function tokensFromEnv(connection, env = process.env) {
+    var _a, _b;
+    const names = mcpOauthSecretNames(connection);
+    const access = (_a = env[names.accessToken]) === null || _a === void 0 ? void 0 : _a.trim();
+    if (access === undefined || access === "") {
+        return undefined;
+    }
+    const refresh = (_b = env[names.refreshToken]) === null || _b === void 0 ? void 0 : _b.trim();
+    return {
+        access_token: access,
+        refresh_token: refresh === undefined || refresh === "" ? undefined : refresh,
+        token_type: "Bearer",
+    };
+}
+export function clientIdFromEnv(connection, env = process.env) {
+    var _a;
+    const clientId = (_a = env[mcpOauthSecretNames(connection).clientId]) === null || _a === void 0 ? void 0 : _a.trim();
+    if (clientId === undefined || clientId === "") {
+        return undefined;
+    }
+    return {
+        client_id: clientId,
+        redirect_uris: [MCP_OAUTH_CALLBACK_URL],
+    };
+}
+const locks = new Map();
+/** Sibling of `credentials.json` under `~/.config/agent-serve/`. */
+export function defaultMcpAuthPath() {
+    return join(configDirPath(), "mcp-auth.json");
+}
+/** Canonical MCP resource key for binding stored tokens to a server URL. */
+export function normalizeMcpResourceUrl(url) {
+    const parsed = new URL(url);
+    parsed.hash = "";
+    parsed.search = "";
+    // Drop default ports so http://h:80 and http://h match.
+    if ((parsed.protocol === "https:" && parsed.port === "443") ||
+        (parsed.protocol === "http:" && parsed.port === "80")) {
+        parsed.port = "";
+    }
+    let path = parsed.pathname;
+    if (path.length > 1 && path.endsWith("/")) {
+        path = path.slice(0, -1);
+    }
+    return `${parsed.origin}${path === "/" ? "" : path}`;
+}
+export class FileMcpOAuthStore {
+    constructor(path = defaultMcpAuthPath()) {
+        this.path = path;
+    }
+    loadTokens(id, resourceUrl) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            return (_a = (yield this.entryFor(id, resourceUrl))) === null || _a === void 0 ? void 0 : _a.tokens;
+        });
+    }
+    loadClientInformation(id, resourceUrl) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            return (_a = (yield this.entryFor(id, resourceUrl))) === null || _a === void 0 ? void 0 : _a.clientInfo;
+        });
+    }
+    saveTokens(id, resourceUrl, tokens) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.update(id, resourceUrl, entry => {
+                entry.tokens = tokens;
+            });
+        });
+    }
+    saveClientInformation(id, resourceUrl, clientInfo) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.update(id, resourceUrl, entry => {
+                entry.clientInfo = clientInfo;
+            });
+        });
+    }
+    deleteCredentials(id) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.withLock(() => __awaiter(this, void 0, void 0, function* () {
+                const data = yield this.read();
+                delete data[id];
+                yield this.write(data);
+            }));
+        });
+    }
+    entryFor(id, resourceUrl) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const entry = (yield this.read())[id];
+            if (entry === undefined) {
+                return undefined;
+            }
+            const bound = entry.resourceUrl;
+            if (bound === undefined || bound !== normalizeMcpResourceUrl(resourceUrl)) {
+                return undefined;
+            }
+            return entry;
+        });
+    }
+    update(id, resourceUrl, mutate) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const normalized = normalizeMcpResourceUrl(resourceUrl);
+            yield this.withLock(() => __awaiter(this, void 0, void 0, function* () {
+                const data = yield this.read();
+                const existing = data[id];
+                const entry = (existing === null || existing === void 0 ? void 0 : existing.resourceUrl) === normalized ? Object.assign({}, existing) : {};
+                entry.resourceUrl = normalized;
+                mutate(entry);
+                data[id] = entry;
+                yield this.write(data);
+            }));
+        });
+    }
+    read() {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            if (this.cache !== undefined) {
+                return this.cache;
+            }
+            (_a = this.loading) !== null && _a !== void 0 ? _a : (this.loading = this.readDisk().then(data => {
+                this.cache = data;
+                return data;
+            }));
+            return this.loading;
+        });
+    }
+    readDisk() {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const parsed = JSON.parse(yield readFile(this.path, "utf8"));
+                if (typeof parsed !== "object" || parsed === null) {
+                    return {};
+                }
+                return parsed;
+            }
+            catch (error) {
+                if (typeof error === "object" &&
+                    error !== null &&
+                    "code" in error &&
+                    error.code === "ENOENT") {
+                    return {};
+                }
+                throw error;
+            }
+        });
+    }
+    write(data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.cache = data;
+            yield mkdir(dirname(this.path), { recursive: true, mode: 0o700 });
+            yield writeFile(this.path, `${JSON.stringify(data, null, 2)}\n`, {
+                mode: 0o600,
+            });
+            yield chmod(this.path, 0o600);
+        });
+    }
+    withLock(fn) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const prev = (_a = locks.get(this.path)) !== null && _a !== void 0 ? _a : Promise.resolve();
+            let release;
+            locks.set(this.path, new Promise(resolve => {
+                release = resolve;
+            }));
+            try {
+                yield prev;
+                return yield fn();
+            }
+            finally {
+                release();
+            }
+        });
+    }
+}
+/**
+ * Reads the Cursor REST-as-MCP translator's OAuth quirk off the resource's
+ * RFC 9728 protected-resource metadata. Deliberately self-contained
+ * (`@cursor/bdk` publishes to public npm with no private workspace
+ * dependencies — see `waitForMcpOAuthCallback`): matches the translator
+ * path shape on any origin so local translators work, and fails to the
+ * default behavior (indicator kept) when the PRM is unreachable.
+ */
+export function fetchOmitResourceIndicatorFromPrm(resourceUrl_1) {
+    return __awaiter(this, arguments, void 0, function* (resourceUrl, fetchImpl = fetch) {
+        let url;
+        try {
+            url = new URL(resourceUrl);
+        }
+        catch (_a) {
+            return false;
+        }
+        if (!/^\/rest-mcp\/[^/]+\/mcp\/?$/.test(url.pathname)) {
+            return false;
+        }
+        const prmUrl = `${url.origin}/.well-known/oauth-protected-resource${url.pathname.replace(/\/+$/, "")}`;
+        try {
+            const response = yield fetchImpl(prmUrl);
+            if (!response.ok) {
+                return false;
+            }
+            const document = (yield response.json());
+            return document.cursor_omit_resource_indicator === true;
+        }
+        catch (_b) {
+            return false;
+        }
+    });
+}
+export class HostMcpOAuthProvider {
+    constructor(args) {
+        var _a;
+        this.args = args;
+        this.tokensValue = args.tokens;
+        this.clientInfo = args.clientInformation;
+        if (args.omitResourceIndicator === true) {
+            this.validateResourceURL = () => __awaiter(this, void 0, void 0, function* () { return undefined; });
+        }
+        this.meta = {
+            redirect_uris: [(_a = args.redirectUrl) !== null && _a !== void 0 ? _a : MCP_OAUTH_CALLBACK_URL],
+            token_endpoint_auth_method: "none",
+            grant_types: ["authorization_code", "refresh_token"],
+            response_types: ["code"],
+            client_name: "Agent SDK",
+        };
+    }
+    get redirectUrl() {
+        var _a;
+        return (_a = this.args.redirectUrl) !== null && _a !== void 0 ? _a : MCP_OAUTH_CALLBACK_URL;
+    }
+    get clientMetadata() {
+        return this.meta;
+    }
+    get lastRedirectUrl() {
+        return this.redirect;
+    }
+    state() {
+        return randomUUID();
+    }
+    clientInformation() {
+        return this.clientInfo;
+    }
+    saveClientInformation(info) {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.clientInfo = info;
+            yield this.args.store.saveClientInformation(this.args.identifier, this.args.resourceUrl, info);
+        });
+    }
+    tokens() {
+        return this.tokensValue;
+    }
+    saveTokens(tokens) {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.tokensValue = tokens;
+            yield this.args.store.saveTokens(this.args.identifier, this.args.resourceUrl, tokens);
+        });
+    }
+    redirectToAuthorization(url) {
+        var _a, _b;
+        this.redirect = url;
+        (_b = (_a = this.args).onRedirect) === null || _b === void 0 ? void 0 : _b.call(_a, url);
+    }
+    saveCodeVerifier(codeVerifier) {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.verifier = codeVerifier;
+        });
+    }
+    codeVerifier() {
+        if (this.verifier === undefined) {
+            throw new Error("No PKCE code verifier saved for this OAuth attempt.");
+        }
+        return this.verifier;
+    }
+    invalidateCredentials(scope) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (scope === "tokens" || scope === "all") {
+                this.tokensValue = undefined;
+            }
+            if (scope === "client" || scope === "all") {
+                this.clientInfo = undefined;
+            }
+            if (scope === "verifier" || scope === "all") {
+                this.verifier = undefined;
+                this.redirect = undefined;
+            }
+            if (scope === "all") {
+                yield this.args.store.deleteCredentials(this.args.identifier);
+            }
+        });
+    }
+}
+function clientForRedirect(info, redirectUrl) {
+    if (info === undefined || !info.redirect_uris.includes(redirectUrl)) {
+        return undefined;
+    }
+    return info;
+}
+export function createHostMcpOAuthProvider(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        const store = (_a = args.store) !== null && _a !== void 0 ? _a : new FileMcpOAuthStore();
+        const redirectUrl = (_b = args.redirectUrl) !== null && _b !== void 0 ? _b : MCP_OAUTH_CALLBACK_URL;
+        const [fileTokens, fileClient, omitResourceIndicator] = yield Promise.all([
+            store.loadTokens(args.identifier, args.resourceUrl),
+            store.loadClientInformation(args.identifier, args.resourceUrl),
+            fetchOmitResourceIndicatorFromPrm(args.resourceUrl),
+        ]);
+        return new HostMcpOAuthProvider({
+            identifier: args.identifier,
+            resourceUrl: args.resourceUrl,
+            store,
+            redirectUrl,
+            tokens: fileTokens !== null && fileTokens !== void 0 ? fileTokens : tokensFromEnv(args.identifier),
+            clientInformation: clientForRedirect(fileClient !== null && fileClient !== void 0 ? fileClient : clientIdFromEnv(args.identifier), redirectUrl),
+            onRedirect: args.onRedirect,
+            omitResourceIndicator,
+        });
+    });
+}
+/**
+ * Deliberately not `@anysphere/mcp-core/oauth/loopback`, which is the canonical
+ * implementation every other Cursor surface shares. `@cursor/bdk` publishes to
+ * public npm with no private workspace dependencies, and its OAuth state is a
+ * bare UUID rather than the payload that module's validator expects.
+ */
+export function waitForMcpOAuthCallback(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const port = (_a = args.port) !== null && _a !== void 0 ? _a : MCP_OAUTH_CALLBACK_PORT;
+        const path = (_b = args.path) !== null && _b !== void 0 ? _b : MCP_OAUTH_CALLBACK_PATH;
+        const timeoutMs = (_c = args.timeoutMs) !== null && _c !== void 0 ? _c : 5 * 60 * 1000;
+        const expectedState = new URL(args.authorizationUrl).searchParams.get("state");
+        return new Promise((resolve, reject) => {
+            let done = false;
+            const finish = (result, error) => {
+                if (done) {
+                    return;
+                }
+                done = true;
+                clearTimeout(timer);
+                server.close();
+                if (error !== undefined) {
+                    reject(error);
+                    return;
+                }
+                if (result !== undefined) {
+                    resolve(result);
+                }
+            };
+            const server = createServer((req, res) => {
+                var _a, _b;
+                if (req.url === "/favicon.ico") {
+                    res.writeHead(404).end();
+                    return;
+                }
+                const url = new URL((_a = req.url) !== null && _a !== void 0 ? _a : "", `http://localhost:${port}`);
+                if (url.pathname !== path) {
+                    res.writeHead(404).end("Not found");
+                    return;
+                }
+                const code = url.searchParams.get("code");
+                const oauthError = url.searchParams.get("error");
+                const state = (_b = url.searchParams.get("state")) !== null && _b !== void 0 ? _b : undefined;
+                // Without this, any page that can reach the loopback port during a login
+                // can inject its own authorization code into the exchange. Ignore what is
+                // not ours rather than failing the login: treating a stray request as
+                // fatal would let any page cancel a login, and free the port for someone
+                // else to bind before the real callback arrives.
+                if (state !== (expectedState !== null && expectedState !== void 0 ? expectedState : undefined)) {
+                    res
+                        .writeHead(404, { "content-type": "text/html; charset=utf-8" })
+                        .end("<!doctype html><html><body><h1>Not found</h1></body></html>");
+                    return;
+                }
+                if (code) {
+                    res
+                        .writeHead(200, { "content-type": "text/html; charset=utf-8" })
+                        .end("<!doctype html><html><body><h1>Authorized</h1><p>Return to Agent SDK.</p></body></html>");
+                    finish({ code, state });
+                    return;
+                }
+                res
+                    .writeHead(400, { "content-type": "text/html; charset=utf-8" })
+                    .end(`<!doctype html><html><body><h1>Authorization failed</h1><p>${oauthError !== null && oauthError !== void 0 ? oauthError : "missing code"}</p></body></html>`);
+                finish(undefined, new Error(`OAuth authorization failed: ${oauthError !== null && oauthError !== void 0 ? oauthError : "missing code"}`));
+            });
+            const timer = setTimeout(() => {
+                finish(undefined, new Error(`Timed out waiting for OAuth callback on http://localhost:${port}${path}`));
+            }, timeoutMs);
+            server.on("error", error => {
+                finish(undefined, new Error(`OAuth callback port ${port} failed: ${error instanceof Error ? error.message : String(error)}`));
+            });
+            server.listen(port, "127.0.0.1");
+        });
+    });
+}
+export function openBrowser(url) {
+    const parsed = new URL(url);
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+        throw new Error(`Refusing to open non-http(s) authorization URL: ${parsed.protocol}`);
+    }
+    const href = parsed.href;
+    if (process.platform === "darwin") {
+        execFile("open", [href], () => undefined);
+        return;
+    }
+    if (process.platform === "win32") {
+        // Avoid `cmd /c start` — authorize URLs with `&` are shell-metachar risks.
+        execFile("rundll32", ["url.dll,FileProtocolHandler", href], () => undefined);
+        return;
+    }
+    execFile("xdg-open", [href], () => undefined);
+}

package/dist/internal/net.d.ts

@@ -0,0 +1,5 @@
+/** True for IPv4/IPv6 loopback addresses (including IPv4-mapped IPv6). */
+export declare function isLoopbackAddress(address: string): boolean;
+/** True when a parsed URL hostname refers to loopback (localhost / 127.x / ::1). */
+export declare function isLoopbackHostname(hostname: string): boolean;
+//# sourceMappingURL=net.d.ts.map

package/dist/internal/net.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"net.d.ts","sourceRoot":"","sources":["../../src/internal/net.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAM1D;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAkB5D"}

package/dist/internal/net.js

@@ -0,0 +1,28 @@
+/** True for IPv4/IPv6 loopback addresses (including IPv4-mapped IPv6). */
+export function isLoopbackAddress(address) {
+    const normalized = address.startsWith("::ffff:") ? address.slice("::ffff:".length) : address;
+    if (normalized === "::1" || normalized === "localhost") {
+        return true;
+    }
+    return normalized.startsWith("127.");
+}
+/** True when a parsed URL hostname refers to loopback (localhost / 127.x / ::1). */
+export function isLoopbackHostname(hostname) {
+    const normalized = hostname.toLowerCase();
+    if (normalized === "localhost" || normalized === "::1") {
+        return true;
+    }
+    if (normalized.startsWith("[") && normalized.endsWith("]")) {
+        const inner = normalized.slice(1, -1);
+        return inner === "::1";
+    }
+    const ipv4 = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(normalized);
+    if (ipv4 === null) {
+        return false;
+    }
+    const octets = ipv4.slice(1, 5).map(part => Number(part));
+    if (octets.some(octet => octet > 255)) {
+        return false;
+    }
+    return octets[0] === 127;
+}

package/dist/internal/open-browser.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Best-effort browser open; callers should always print the URL as fallback.
+ */
+export declare function openBrowser(url: string): void;
+//# sourceMappingURL=open-browser.d.ts.map

package/dist/internal/open-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-browser.d.ts","sourceRoot":"","sources":["../../src/internal/open-browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAiC7C"}

package/dist/internal/open-browser.js

@@ -0,0 +1,34 @@
+/**
+ * Best-effort browser open; callers should always print the URL as fallback.
+ */
+import { spawn } from "node:child_process";
+import { join } from "node:path";
+export function openBrowser(url) {
+    var _a;
+    const command = process.platform === "darwin"
+        ? { cmd: "open", args: [url] }
+        : process.platform === "win32"
+            ? {
+                cmd: join((_a = process.env.SYSTEMROOT) !== null && _a !== void 0 ? _a : "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
+                args: [
+                    "-NoProfile",
+                    "-NonInteractive",
+                    "-WindowStyle",
+                    "Hidden",
+                    "-Command",
+                    `Start-Process '${url.replace(/'/g, "''")}'`,
+                ],
+            }
+            : { cmd: "xdg-open", args: [url] };
+    try {
+        const child = spawn(command.cmd, command.args, {
+            stdio: "ignore",
+            detached: true,
+        });
+        child.on("error", () => { });
+        child.unref();
+    }
+    catch (_b) {
+        // Printed URL is the fallback.
+    }
+}

package/dist/internal/otel/attrs.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Build OTel attribute maps without conditional spreads. `undefined` values
+ * are dropped (the OTel API rejects them).
+ */
+export type AttrValue = string | number | boolean;
+export declare function attrs(input: Record<string, AttrValue | undefined>): Record<string, AttrValue>;
+//# sourceMappingURL=attrs.d.ts.map

package/dist/internal/otel/attrs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attrs.d.ts","sourceRoot":"","sources":["../../../src/internal/otel/attrs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAElD,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAQ7F"}

package/dist/internal/otel/attrs.js

@@ -0,0 +1,13 @@
+/**
+ * Build OTel attribute maps without conditional spreads. `undefined` values
+ * are dropped (the OTel API rejects them).
+ */
+export function attrs(input) {
+    const out = {};
+    for (const [key, value] of Object.entries(input)) {
+        if (value !== undefined) {
+            out[key] = value;
+        }
+    }
+    return out;
+}

package/dist/internal/otel/collector.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Maps the durable session event stream onto OTel traces / metrics / logs.
+ *
+ * Attribute names reuse Cursor enterprise wire keys where they overlap
+ * (`cursor.conversation.id`, `cursor.token.*`, `cursor.tool.*`,
+ * `cursor.cost.usage`, `cursor.model.name`) so Agent SDK traces join org
+ * metrics/logs in the same collector. Agent-SDK-only fields use `agent_sdk.*`.
+ */
+import type { SessionEvent, SessionInfo } from "../../types.js";
+import { type AttrValue } from "./attrs.js";
+import type { OtelRuntime } from "./runtime.js";
+export interface OtelTurnContext {
+    sessionId: string;
+    session: SessionInfo;
+    turnId: string;
+}
+export interface OtelCallContext extends OtelTurnContext {
+    callId: string;
+    toolName: string;
+}
+export interface OtelCollector {
+    onEvent(event: SessionEvent, session: SessionInfo): void;
+    close(): void;
+    /**
+     * Run `fn` under the turn span so outbound inject sees that context.
+     * Host files / VFS / Factory RPCs during `runner.runTurn` are not
+     * inside `runInCall`. Opens the turn if `turn.started` has not been
+     * applied yet (dispatch is async).
+     */
+    runInTurn<T>(args: OtelTurnContext, fn: () => T | Promise<T>): Promise<T>;
+    /**
+     * Run `fn` under the tool span so outbound inject sees that context.
+     * Opens the turn / tool span if the event stream has not reached
+     * `actions.requested` yet (dispatch is async).
+     */
+    runInCall<T>(args: OtelCallContext, fn: () => T | Promise<T>): Promise<T>;
+    /** Merge author tags onto the session; paints open spans immediately. */
+    setSessionAttributes(sessionId: string, attributes: Record<string, AttrValue>): void;
+    /** Session tags previously set by {@link setSessionAttributes}. */
+    getSessionAttributes(sessionId: string): Record<string, AttrValue> | undefined;
+}
+export declare function createOtelCollector(runtime: OtelRuntime, agentName: string, log: (line: string) => void): OtelCollector;
+//# sourceMappingURL=collector.d.ts.map

package/dist/internal/otel/collector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collector.d.ts","sourceRoot":"","sources":["../../../src/internal/otel/collector.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAcH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAAE,KAAK,SAAS,EAAS,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAIhD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IACzD,KAAK,IAAI,IAAI,CAAC;IACd;;;;;OAKG;IACH,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1E;;;;OAIG;IACH,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1E,yEAAyE;IACzE,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC;IACrF,mEAAmE;IACnE,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,SAAS,CAAC;CAChF;AAiBD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC1B,aAAa,CAkyBf"}