@cuylabs/agent-core 0.11.0 → 0.13.0

package/dist/mcp/index.d.ts

@@ -1,7 +1,95 @@
-import { M as MCPConfig, a as MCPManager, R as RemoteTransportConfig, d as StdioTransportConfig } from '../types-Bj_J8u_W.js';
-export { H as HttpTransportConfig, b as MCPServerConfig, c as MCPServerStatus, S as SseTransportConfig } from '../types-Bj_J8u_W.js';
+import { M as MCPConfig, a as MCPManager, R as RemoteTransportConfig, g as StdioTransportConfig } from '../types-DMjoFKKv.js';
+export { H as HttpTransportConfig, b as MCPPromptInfo, c as MCPResourceInfo, d as MCPResourceTemplateInfo, e as MCPServerConfig, f as MCPServerStatus, S as SseTransportConfig } from '../types-DMjoFKKv.js';
+import { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';
+import { OAuthClientMetadata, OAuthClientInformation, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
+import '@modelcontextprotocol/sdk/types.js';
 import 'ai';
 
+/**
+ * Options for {@linkcode ClientCredentialsProvider}.
+ */
+interface ClientCredentialsOptions {
+    /**
+     * OAuth `client_id`.
+     */
+    clientId: string;
+    /**
+     * OAuth `client_secret`.
+     */
+    clientSecret: string;
+    /**
+     * The token endpoint URL.
+     * Required because machine-to-machine flows don't go through OAuth discovery
+     * (there is no user redirect that would trigger `/.well-known` lookups).
+     *
+     * @example "https://auth.example.com/oauth/token"
+     * @example "https://login.microsoftonline.com/<tenant>/oauth2/v2.0/token"
+     */
+    tokenUrl: string;
+    /**
+     * Space-separated OAuth scopes to request.
+     */
+    scope?: string;
+    /**
+     * Seconds before token expiry at which a proactive refresh is triggered.
+     * @default 60
+     */
+    expiryBufferSeconds?: number;
+}
+/**
+ * OAuth `client_credentials` provider for machine-to-machine MCP authentication.
+ *
+ * Implements {@linkcode OAuthClientProvider} from the official MCP TypeScript
+ * SDK so it can be passed directly to `httpServer()` / `sseServer()` as
+ * `authProvider`.
+ *
+ * Unlike user-interactive OAuth flows, this provider proactively fetches a
+ * bearer token via the `client_credentials` grant before any request is made,
+ * so the MCP transport's `Authorization` header is always populated.
+ * Token expiry is tracked and a new token is fetched automatically before the
+ * old one expires (controlled by {@linkcode ClientCredentialsOptions.expiryBufferSeconds}).
+ *
+ * @example
+ * ```ts
+ * import { serviceAccountServer } from "@cuylabs/agent-core/mcp";
+ *
+ * const mcpManager = createMCPManager({
+ *   myServer: serviceAccountServer("https://my-mcp.example.com", {
+ *     clientId: "my-service-account",
+ *     clientSecret: process.env.CLIENT_SECRET!,
+ *     tokenUrl: "https://auth.example.com/oauth/token",
+ *     scope: "mcp:read",
+ *   }),
+ * });
+ * ```
+ *
+ * @example Static API key (no OAuth needed — use headers instead)
+ * ```ts
+ * httpServer("https://my-mcp.example.com", {
+ *   headers: { Authorization: `Bearer ${process.env.API_KEY}` },
+ * });
+ * ```
+ */
+declare class ClientCredentialsProvider implements OAuthClientProvider {
+    private _tokens?;
+    private _expiresAt?;
+    private readonly _options;
+    constructor(options: ClientCredentialsOptions);
+    get redirectUrl(): undefined;
+    get clientMetadata(): OAuthClientMetadata;
+    clientInformation(): OAuthClientInformation;
+    saveClientInformation(): void;
+    tokens(): Promise<OAuthTokens | undefined>;
+    saveTokens(tokens: OAuthTokens): Promise<void>;
+    redirectToAuthorization(_authorizationUrl: URL): never;
+    saveCodeVerifier(): void;
+    codeVerifier(): never;
+    prepareTokenRequest(scope?: string): URLSearchParams;
+    addClientAuthentication(headers: Headers): void;
+    invalidateCredentials(scope: "all" | "client" | "tokens" | "verifier"): void;
+    private _fetchTokens;
+}
+
 /**
  * Create an MCP manager for connecting to multiple MCP servers.
  */
@@ -18,5 +106,30 @@ declare function httpServer(url: string, options?: Omit<RemoteTransportConfig, "
  * Helper to create an SSE server config.
  */
 declare function sseServer(url: string, options?: Omit<RemoteTransportConfig, "transport" | "url">): RemoteTransportConfig;
+/**
+ * Helper to create an HTTP server config authenticated with the OAuth
+ * `client_credentials` grant (machine-to-machine / service account).
+ *
+ * This uses agent-core's convenience `ClientCredentialsProvider`, which
+ * proactively fetches a bearer token from an explicit token endpoint before
+ * the first request. The official MCP SDK transport still owns the underlying
+ * auth orchestration and transport behavior.
+ *
+ * @example
+ * ```ts
+ * createMCPManager({
+ *   myServer: serviceAccountServer(
+ *     "https://my-mcp.example.com",
+ *     {
+ *       clientId: "svc-account-id",
+ *       clientSecret: process.env.CLIENT_SECRET!,
+ *       tokenUrl: "https://auth.example.com/oauth/token",
+ *       scope: "mcp:read",
+ *     }
+ *   ),
+ * });
+ * ```
+ */
+declare function serviceAccountServer(url: string, credentials: ClientCredentialsOptions, options?: Omit<RemoteTransportConfig, "transport" | "url" | "authProvider">): RemoteTransportConfig;
 
-export { MCPConfig, MCPManager, RemoteTransportConfig, StdioTransportConfig, createMCPManager, httpServer, sseServer, stdioServer };
+export { type ClientCredentialsOptions, ClientCredentialsProvider, MCPConfig, MCPManager, RemoteTransportConfig, StdioTransportConfig, createMCPManager, httpServer, serviceAccountServer, sseServer, stdioServer };

package/dist/mcp/index.js

@@ -1,13 +1,17 @@
 import {
+  ClientCredentialsProvider,
   createMCPManager,
   httpServer,
+  serviceAccountServer,
   sseServer,
   stdioServer
-} from "../chunk-ROTGCYDW.js";
-import "../chunk-T4UIX5D7.js";
+} from "../chunk-US7S4FYW.js";
+import "../chunk-S6AKEPAX.js";
 export {
+  ClientCredentialsProvider,
   createMCPManager,
   httpServer,
+  serviceAccountServer,
   sseServer,
   stdioServer
 };

package/dist/middleware/index.d.ts

@@ -1,11 +1,13 @@
-import { bR as OtelMiddlewareConfig, L as AgentMiddleware, de as TelemetryConfig, df as TelemetryConfigResult } from '../instance-DzPiv6EK.js';
-export { N as AgentModelHooks, ac as ApprovalAgentMiddleware, al as ApprovalMiddlewareConfig, as as BlockedModelCall, au as ChatLifecycleContext, b as MiddlewareRunner, d as ModelCallContext, bK as ModelCallInput, bL as ModelCallOutput, dh as ToolCallDecision, di as ToolCallOutput, dz as approvalMiddleware, dM as isApprovalMiddleware, dN as isBlockedModelCall } from '../instance-DzPiv6EK.js';
+import { bR as OtelMiddlewareConfig, L as AgentMiddleware, de as TelemetryConfig, df as TelemetryConfigResult } from '../instance-N5VhcNT2.js';
+export { N as AgentModelHooks, ac as ApprovalAgentMiddleware, al as ApprovalMiddlewareConfig, as as BlockedModelCall, au as ChatLifecycleContext, b as MiddlewareRunner, d as ModelCallContext, bK as ModelCallInput, bL as ModelCallOutput, dh as ToolCallDecision, di as ToolCallOutput, dz as approvalMiddleware, dM as isApprovalMiddleware, dN as isBlockedModelCall } from '../instance-N5VhcNT2.js';
 import '../types-C_LCeYNg.js';
 import 'ai';
 import '../types-RSCv7nQ4.js';
 import 'zod';
 import '../types-CQaXbRsS.js';
-import '../types-Bj_J8u_W.js';
+import '../types-DMjoFKKv.js';
+import '@modelcontextprotocol/sdk/client/auth.js';
+import '@modelcontextprotocol/sdk/types.js';
 import '@ai-sdk/provider-utils';
 import '../sandbox/index.js';
 import '../llm-error-D93FNNLY.js';

package/dist/middleware/index.js

@@ -5,14 +5,14 @@ import {
   isApprovalMiddleware,
   otelMiddleware,
   promptCacheMiddleware
-} from "../chunk-NDZWXCBZ.js";
+} from "../chunk-TZ4VA4VX.js";
 import {
   isBlockedModelCall
 } from "../chunk-CJI7PVS2.js";
 import "../chunk-I6PKJ7XQ.js";
-import "../chunk-V4RFNEET.js";
+import "../chunk-MLTJHUVG.js";
 import "../chunk-FII65CN7.js";
-import "../chunk-T4UIX5D7.js";
+import "../chunk-S6AKEPAX.js";
 export {
   MiddlewareRunner,
   approvalMiddleware,

package/dist/{model-messages-CJfwfzGe.d.ts → model-messages-DnsiSiZj.d.ts}

@@ -1,5 +1,5 @@
 import { ModelMessage } from 'ai';
-import { M as Message } from './instance-DzPiv6EK.js';
+import { M as Message } from './instance-N5VhcNT2.js';
 
 /**
  * Convert framework messages into Vercel AI SDK model messages.

package/dist/models/index.js

@@ -28,7 +28,7 @@ import {
   shouldIncludeReasoningSummary,
   supportsReasoning,
   supportsReasoningSync
-} from "../chunk-RN6WZEUF.js";
+} from "../chunk-WI5JFEAI.js";
 import {
   DEFAULT_RESOLVER_OPTIONS,
   PatternCapabilitySource,
@@ -42,7 +42,7 @@ import {
   inferProvider,
   likelySupportsReasoning
 } from "../chunk-I6PKJ7XQ.js";
-import "../chunk-T4UIX5D7.js";
+import "../chunk-S6AKEPAX.js";
 export {
   CacheCapabilitySource,
   CapabilityCache,

package/dist/models/reasoning/index.js

@@ -17,9 +17,9 @@ import {
   shouldIncludeReasoningSummary,
   supportsReasoning,
   supportsReasoningSync
-} from "../../chunk-RN6WZEUF.js";
+} from "../../chunk-WI5JFEAI.js";
 import "../../chunk-I6PKJ7XQ.js";
-import "../../chunk-T4UIX5D7.js";
+import "../../chunk-S6AKEPAX.js";
 export {
   EXTENDED_LEVELS,
   FIXED_LEVELS,

package/dist/plugin/index.d.ts

@@ -1,11 +1,13 @@
-import { T as Tool, L as AgentMiddleware, c5 as PromptSection } from '../instance-DzPiv6EK.js';
+import { T as Tool, L as AgentMiddleware, c5 as PromptSection } from '../instance-N5VhcNT2.js';
 import { ZodType } from 'zod';
 import { Jiti } from 'jiti';
 import '../types-C_LCeYNg.js';
 import 'ai';
 import '../types-RSCv7nQ4.js';
 import '../types-CQaXbRsS.js';
-import '../types-Bj_J8u_W.js';
+import '../types-DMjoFKKv.js';
+import '@modelcontextprotocol/sdk/client/auth.js';
+import '@modelcontextprotocol/sdk/types.js';
 import '@ai-sdk/provider-utils';
 import '../sandbox/index.js';
 import '../llm-error-D93FNNLY.js';

package/dist/plugin/index.js

@@ -13,7 +13,7 @@ import {
   resetFrameworkAliases,
   resetPluginLoader,
   resolveFrameworkAliases
-} from "../chunk-QAL3OMI3.js";
+} from "../chunk-MO3N6M32.js";
 export {
   LayeredSettings,
   NullSettings,

package/dist/profiles/index.d.ts

@@ -1,10 +1,12 @@
-import { T as Tool, c2 as Profile, aa as AppliedProfile } from '../instance-DzPiv6EK.js';
+import { T as Tool, c2 as Profile, aa as AppliedProfile } from '../instance-N5VhcNT2.js';
 import '../types-C_LCeYNg.js';
 import 'ai';
 import '../types-RSCv7nQ4.js';
 import 'zod';
 import '../types-CQaXbRsS.js';
-import '../types-Bj_J8u_W.js';
+import '../types-DMjoFKKv.js';
+import '@modelcontextprotocol/sdk/client/auth.js';
+import '@modelcontextprotocol/sdk/types.js';
 import '@ai-sdk/provider-utils';
 import '../sandbox/index.js';
 import '../llm-error-D93FNNLY.js';

package/dist/profiles/index.js

@@ -13,7 +13,7 @@ import {
   quick,
   review,
   watch
-} from "../chunk-6HZBHFOL.js";
+} from "../chunk-TPZ37IWI.js";
 export {
   Profiles,
   applyProfile,

package/dist/prompt/index.d.ts

@@ -1,11 +1,13 @@
-import { bM as ModelFamily, b6 as EnvironmentInfo, bq as InstructionFile } from '../instance-DzPiv6EK.js';
-export { c3 as PromptBuildContext, P as PromptBuilder, c4 as PromptConfig, c5 as PromptSection, cq as SkillConfig, dG as createPromptBuilder } from '../instance-DzPiv6EK.js';
+import { bM as ModelFamily, b6 as EnvironmentInfo, bq as InstructionFile } from '../instance-N5VhcNT2.js';
+export { c3 as PromptBuildContext, P as PromptBuilder, c4 as PromptConfig, c5 as PromptSection, cq as SkillConfig, dG as createPromptBuilder } from '../instance-N5VhcNT2.js';
 import { LanguageModel } from 'ai';
 import '../types-C_LCeYNg.js';
 import '../types-RSCv7nQ4.js';
 import 'zod';
 import '../types-CQaXbRsS.js';
-import '../types-Bj_J8u_W.js';
+import '../types-DMjoFKKv.js';
+import '@modelcontextprotocol/sdk/client/auth.js';
+import '@modelcontextprotocol/sdk/types.js';
 import '@ai-sdk/provider-utils';
 import '../sandbox/index.js';
 import '../llm-error-D93FNNLY.js';

package/dist/prompt/index.js

@@ -19,8 +19,8 @@ import {
   getTemplate,
   loadGlobalInstructions,
   summarizeEnvironment
-} from "../chunk-GFTW23FV.js";
-import "../chunk-SPILYYDF.js";
+} from "../chunk-BGG2HVIR.js";
+import "../chunk-I7EJGKUP.js";
 import "../chunk-I6PKJ7XQ.js";
 export {
   DEFAULT_INSTRUCTION_PATTERNS,

package/dist/safety/index.d.ts

@@ -1,11 +1,13 @@
-import { c9 as RiskLevel, ap as ApprovalRule, an as ApprovalRequest, aq as ApprovalRuleContext, ca as RuleSource, ae as ApprovalCascadePolicy, am as ApprovalRememberScope, ah as ApprovalDecision, af as ApprovalConfig } from '../instance-DzPiv6EK.js';
-export { ab as ApprovalAction, ad as ApprovalCascadeMode, ag as ApprovalCorrection, ai as ApprovalEvaluation, ak as ApprovalHandler, ao as ApprovalResolution, dE as createApprovalHandler } from '../instance-DzPiv6EK.js';
+import { c9 as RiskLevel, ap as ApprovalRule, an as ApprovalRequest, aq as ApprovalRuleContext, ca as RuleSource, ae as ApprovalCascadePolicy, am as ApprovalRememberScope, ah as ApprovalDecision, af as ApprovalConfig } from '../instance-N5VhcNT2.js';
+export { ab as ApprovalAction, ad as ApprovalCascadeMode, ag as ApprovalCorrection, ai as ApprovalEvaluation, ak as ApprovalHandler, ao as ApprovalResolution, dE as createApprovalHandler } from '../instance-N5VhcNT2.js';
 import '../types-C_LCeYNg.js';
 import 'ai';
 import '../types-RSCv7nQ4.js';
 import 'zod';
 import '../types-CQaXbRsS.js';
-import '../types-Bj_J8u_W.js';
+import '../types-DMjoFKKv.js';
+import '@modelcontextprotocol/sdk/client/auth.js';
+import '@modelcontextprotocol/sdk/types.js';
 import '@ai-sdk/provider-utils';
 import '../sandbox/index.js';
 import '../llm-error-D93FNNLY.js';

package/dist/safety/index.js

@@ -27,7 +27,7 @@ import {
   normalizeRememberScopes,
   selectRememberScope,
   shouldCascadeApprovalDecision
-} from "../chunk-V4RFNEET.js";
+} from "../chunk-MLTJHUVG.js";
 import {
   describeApprovalOperation,
   extractApprovalPatterns,

package/dist/skill/index.d.ts

@@ -1,11 +1,13 @@
-import { cy as SkillScope, cz as SkillSource, cu as SkillMetadata, cx as SkillResourceType, cw as SkillResource, cr as SkillContent, cq as SkillConfig, ct as SkillDiscoveryResult, cv as SkillRegistry, T as Tool } from '../instance-DzPiv6EK.js';
-export { c7 as RemoteSkillEntry, c8 as RemoteSkillIndex, cs as SkillDiscoveryError, cA as SkillSourceType, dH as createSkillRegistry, dJ as emptySkillRegistry } from '../instance-DzPiv6EK.js';
+import { cy as SkillScope, cz as SkillSource, cu as SkillMetadata, cx as SkillResourceType, cw as SkillResource, cr as SkillContent, cq as SkillConfig, ct as SkillDiscoveryResult, cv as SkillRegistry, T as Tool } from '../instance-N5VhcNT2.js';
+export { c7 as RemoteSkillEntry, c8 as RemoteSkillIndex, cs as SkillDiscoveryError, cA as SkillSourceType, dH as createSkillRegistry, dJ as emptySkillRegistry } from '../instance-N5VhcNT2.js';
 import '../types-C_LCeYNg.js';
 import 'ai';
 import '../types-RSCv7nQ4.js';
 import 'zod';
 import '../types-CQaXbRsS.js';
-import '../types-Bj_J8u_W.js';
+import '../types-DMjoFKKv.js';
+import '@modelcontextprotocol/sdk/client/auth.js';
+import '@modelcontextprotocol/sdk/types.js';
 import '@ai-sdk/provider-utils';
 import '../sandbox/index.js';
 import '../llm-error-D93FNNLY.js';

package/dist/skill/index.js

@@ -2,7 +2,7 @@ import {
   createSkillResourceTool,
   createSkillTool,
   createSkillTools
-} from "../chunk-TOTDGK3P.js";
+} from "../chunk-CSR75JVC.js";
 import {
   DEFAULT_EXTERNAL_DIRS,
   DEFAULT_MAX_SCAN_DEPTH,
@@ -17,7 +17,7 @@ import {
   loadSkillContent,
   loadSkillMetadata,
   parseFrontmatter
-} from "../chunk-SPILYYDF.js";
+} from "../chunk-I7EJGKUP.js";
 import "../chunk-Q742PSH3.js";
 export {
   DEFAULT_EXTERNAL_DIRS,

package/dist/storage/index.d.ts

@@ -1,11 +1,13 @@
-import { b8 as FileEntry, ci as SessionEntry, M as Message, bB as MessageEntry, bJ as MetadataEntry, cf as SerializedMessage, ck as SessionInfo, cl as SessionStorage, cj as SessionHeader, S as SessionManager } from '../instance-DzPiv6EK.js';
-export { at as BranchEntry, ay as CompactionEntry, aA as ConfigChangeEntry, aG as CreateSessionOptions, b5 as EntryBase, ce as STORAGE_VERSION, ch as SessionContext } from '../instance-DzPiv6EK.js';
+import { b8 as FileEntry, ci as SessionEntry, M as Message, bB as MessageEntry, bJ as MetadataEntry, cf as SerializedMessage, ck as SessionInfo, cl as SessionStorage, cj as SessionHeader, S as SessionManager } from '../instance-N5VhcNT2.js';
+export { at as BranchEntry, ay as CompactionEntry, aA as ConfigChangeEntry, aG as CreateSessionOptions, b5 as EntryBase, ce as STORAGE_VERSION, ch as SessionContext } from '../instance-N5VhcNT2.js';
 import { L as Logger } from '../types-RSCv7nQ4.js';
 import '../types-C_LCeYNg.js';
 import 'ai';
 import 'zod';
 import '../types-CQaXbRsS.js';
-import '../types-Bj_J8u_W.js';
+import '../types-DMjoFKKv.js';
+import '@modelcontextprotocol/sdk/client/auth.js';
+import '@modelcontextprotocol/sdk/types.js';
 import '@ai-sdk/provider-utils';
 import '../sandbox/index.js';
 import '../llm-error-D93FNNLY.js';

package/dist/storage/index.js

@@ -22,7 +22,7 @@ import {
   serializeMessage,
   toJSONL,
   toJSONLBatch
-} from "../chunk-ICZ66572.js";
+} from "../chunk-CZ5XOVDV.js";
 export {
   FileStorage,
   MemoryStorage,

package/dist/subagents/index.d.ts

@@ -1,10 +1,12 @@
-import { aT as DispatchRole, aS as DispatchResult, br as LocalDispatchRuntimeOptions, B as Agent, T as Tool, aU as DispatchRuntime, c2 as Profile } from '../instance-DzPiv6EK.js';
+import { aT as DispatchRole, aS as DispatchResult, br as LocalDispatchRuntimeOptions, B as Agent, T as Tool, aU as DispatchRuntime, c2 as Profile } from '../instance-N5VhcNT2.js';
 import '../types-C_LCeYNg.js';
 import 'ai';
 import '../types-RSCv7nQ4.js';
 import 'zod';
 import '../types-CQaXbRsS.js';
-import '../types-Bj_J8u_W.js';
+import '../types-DMjoFKKv.js';
+import '@modelcontextprotocol/sdk/client/auth.js';
+import '@modelcontextprotocol/sdk/types.js';
 import '@ai-sdk/provider-utils';
 import '../sandbox/index.js';
 import '../llm-error-D93FNNLY.js';

package/dist/subagents/index.js

@@ -34,11 +34,11 @@ import {
   parseSubAgentRoleFrontmatter,
   parseSubAgentToolSpec,
   toSubAgentRole
-} from "../chunk-2O4MCSQS.js";
-import "../chunk-6HZBHFOL.js";
-import "../chunk-SSFBF3US.js";
+} from "../chunk-FYC33XFI.js";
+import "../chunk-TPZ37IWI.js";
+import "../chunk-JPBFAQNS.js";
 import "../chunk-Q742PSH3.js";
-import "../chunk-ICZ66572.js";
+import "../chunk-CZ5XOVDV.js";
 export {
   DEFAULT_SUBAGENT_CONCURRENCY,
   DEFAULT_SUBAGENT_DEPTH,

package/dist/team/index.d.ts

@@ -1,11 +1,13 @@
-import { aB as CoordinatorNotification, cS as TaskCompletion, dg as TokenUsage, A as AgentEvent, dT as CoordinatorCtx, B as Agent, bw as MemberRuntime, cP as TaskBoard, bs as Mailbox, cW as TaskDispatchMode, bV as PermissionHandler, d4 as TeamCoordinatorConfig, cX as TaskExecutor, d5 as TeamEvent, d6 as TeamMember, c6 as QueueTaskInput, dd as TeamTask, d7 as TeamMessage, d9 as TeamPlan, cL as SynthesisResult, da as TeamSnapshot, c_ as TaskListFilter, bF as MessageListFilter, c1 as PreparedExternalTask, c$ as TaskResult, d1 as TaskTransition, bx as MemberStats, by as MemberStatus, L as AgentMiddleware, dh as ToolCallDecision } from '../instance-DzPiv6EK.js';
-export { aC as CoordinatorNotificationKind, aD as CoordinatorRoundEvent, b7 as ExternalTaskControl, b9 as GuidancePayload, bl as IdleNotificationPayload, bm as InMemoryMailboxStore, bn as InMemoryTaskBoardStore, bt as MailboxStore, bu as MailboxSubscriber, bv as MemberRegisteredEvent, bz as MemberStatusChangedEvent, bD as MessageInput, bE as MessageKind, bG as MessagePayload, bI as MessageSentEvent, bO as NotificationPriority, bU as PermissionForwardedEvent, bW as PermissionRequestPayload, bX as PermissionResolvedEvent, bY as PermissionResponsePayload, bZ as PlanCreatedEvent, b_ as PlannedTask, cm as ShutdownRequestPayload, cn as ShutdownRequestedEvent, co as ShutdownResolvedEvent, cp as ShutdownResponsePayload, cK as SynthesisCompleteEvent, cN as TERMINAL_STATUSES, cO as TaskAbortedEvent, cQ as TaskBoardStore, cR as TaskCompletedEvent, cT as TaskConflictError, cU as TaskCreateInput, cV as TaskCreatedEvent, cY as TaskExecutorInput, cZ as TaskFailedEvent, d0 as TaskStatus, d2 as TaskTransitionEvent, d3 as TaskTransitionReason, d8 as TeamNotificationEvent, db as TeamStartedEvent, dc as TeamStoppedEvent, dw as WorkerReportPayload, dA as buildCoordinatorNotificationEvent } from '../instance-DzPiv6EK.js';
+import { aB as CoordinatorNotification, cS as TaskCompletion, dg as TokenUsage, A as AgentEvent, dT as CoordinatorCtx, B as Agent, bw as MemberRuntime, cP as TaskBoard, bs as Mailbox, cW as TaskDispatchMode, bV as PermissionHandler, d4 as TeamCoordinatorConfig, cX as TaskExecutor, d5 as TeamEvent, d6 as TeamMember, c6 as QueueTaskInput, dd as TeamTask, d7 as TeamMessage, d9 as TeamPlan, cL as SynthesisResult, da as TeamSnapshot, c_ as TaskListFilter, bF as MessageListFilter, c1 as PreparedExternalTask, c$ as TaskResult, d1 as TaskTransition, bx as MemberStats, by as MemberStatus, L as AgentMiddleware, dh as ToolCallDecision } from '../instance-N5VhcNT2.js';
+export { aC as CoordinatorNotificationKind, aD as CoordinatorRoundEvent, b7 as ExternalTaskControl, b9 as GuidancePayload, bl as IdleNotificationPayload, bm as InMemoryMailboxStore, bn as InMemoryTaskBoardStore, bt as MailboxStore, bu as MailboxSubscriber, bv as MemberRegisteredEvent, bz as MemberStatusChangedEvent, bD as MessageInput, bE as MessageKind, bG as MessagePayload, bI as MessageSentEvent, bO as NotificationPriority, bU as PermissionForwardedEvent, bW as PermissionRequestPayload, bX as PermissionResolvedEvent, bY as PermissionResponsePayload, bZ as PlanCreatedEvent, b_ as PlannedTask, cm as ShutdownRequestPayload, cn as ShutdownRequestedEvent, co as ShutdownResolvedEvent, cp as ShutdownResponsePayload, cK as SynthesisCompleteEvent, cN as TERMINAL_STATUSES, cO as TaskAbortedEvent, cQ as TaskBoardStore, cR as TaskCompletedEvent, cT as TaskConflictError, cU as TaskCreateInput, cV as TaskCreatedEvent, cY as TaskExecutorInput, cZ as TaskFailedEvent, d0 as TaskStatus, d2 as TaskTransitionEvent, d3 as TaskTransitionReason, d8 as TeamNotificationEvent, db as TeamStartedEvent, dc as TeamStoppedEvent, dw as WorkerReportPayload, dA as buildCoordinatorNotificationEvent } from '../instance-N5VhcNT2.js';
 import { R as ReasoningLevel } from '../types-CQaXbRsS.js';
 import '../types-C_LCeYNg.js';
 import 'ai';
 import '../types-RSCv7nQ4.js';
 import 'zod';
-import '../types-Bj_J8u_W.js';
+import '../types-DMjoFKKv.js';
+import '@modelcontextprotocol/sdk/client/auth.js';
+import '@modelcontextprotocol/sdk/types.js';
 import '@ai-sdk/provider-utils';
 import '../sandbox/index.js';
 import '../llm-error-D93FNNLY.js';

package/dist/team/index.js

@@ -16,7 +16,7 @@ import {
   formatCoordinatorTaskNotifications,
   formatCoordinatorWorkerReports,
   teamPermissionPolicy
-} from "../chunk-MXAP4UG6.js";
+} from "../chunk-QJV5XPPS.js";
 import "../chunk-SZ2XBPTW.js";
 import "../chunk-Q742PSH3.js";
 import "../chunk-FII65CN7.js";

package/dist/tool/index.d.ts

@@ -1,5 +1,5 @@
-import { dq as ToolReplayPolicy, F as FileOperationMeta, bN as NormalizedToolReplayPolicy, T as Tool, H as HumanInputController, a as TurnTrackerContext, b as MiddlewareRunner, A as AgentEvent, dn as ToolMetadata, dj as ToolCapabilities } from '../instance-DzPiv6EK.js';
-export { az as CompatibleSchema, bo as InferSchemaOutput, bp as InputCheckResult, dL as getRequiredToolHost, dR as resolveCapability } from '../instance-DzPiv6EK.js';
+import { dq as ToolReplayPolicy, F as FileOperationMeta, bN as NormalizedToolReplayPolicy, T as Tool, H as HumanInputController, a as TurnTrackerContext, b as MiddlewareRunner, A as AgentEvent, dn as ToolMetadata, dj as ToolCapabilities } from '../instance-N5VhcNT2.js';
+export { az as CompatibleSchema, bo as InferSchemaOutput, bp as InputCheckResult, dL as getRequiredToolHost, dR as resolveCapability } from '../instance-N5VhcNT2.js';
 import { T as ToolHost } from '../types-C_LCeYNg.js';
 export { D as DirEntry, E as ExecOptions, a as ExecResult, F as FileStat } from '../types-C_LCeYNg.js';
 export { ToolHostProvider, ToolHostProviderSummary, ToolHostRegistry, defaultToolHostRegistry, localHost } from './host/index.js';
@@ -7,7 +7,9 @@ import 'ai';
 import '../types-RSCv7nQ4.js';
 import 'zod';
 import '../types-CQaXbRsS.js';
-import '../types-Bj_J8u_W.js';
+import '../types-DMjoFKKv.js';
+import '@modelcontextprotocol/sdk/client/auth.js';
+import '@modelcontextprotocol/sdk/types.js';
 import '@ai-sdk/provider-utils';
 import '../sandbox/index.js';
 import '../llm-error-D93FNNLY.js';

package/dist/tool/index.js

@@ -17,8 +17,8 @@ import {
 } from "../chunk-Q742PSH3.js";
 import {
   executeAgentToolCall
-} from "../chunk-5NVVNXPQ.js";
-import "../chunk-V4RFNEET.js";
+} from "../chunk-ZKEC7MFQ.js";
+import "../chunk-MLTJHUVG.js";
 import {
   getRequiredToolHost,
   resolveCapability

package/dist/{types-Bj_J8u_W.d.ts → types-DMjoFKKv.d.ts}

@@ -1,3 +1,5 @@
+import { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';
+import { Resource, ResourceTemplate, ReadResourceResult, Prompt, GetPromptResult, ClientCapabilities } from '@modelcontextprotocol/sdk/types.js';
 import { Tool } from 'ai';
 
 /**
@@ -23,7 +25,7 @@ interface StdioTransportConfig {
 /**
  * HTTP/SSE transport configuration for remote MCP servers.
  *
- * Supports all options from the AI SDK's `MCPTransportConfig` so that
+ * Supports the official MCP TypeScript SDK client transport options so that
  * agents can leverage OAuth, custom fetch, and redirect control.
  */
 interface RemoteTransportConfig {
@@ -34,10 +36,18 @@ interface RemoteTransportConfig {
     headers?: Record<string, string>;
     /**
      * OAuth client provider for authenticated MCP servers.
-     * Pass an `OAuthClientProvider` from `@ai-sdk/mcp` when the server
-     * requires OAuth authentication.
+     *
+     * Pass an `OAuthClientProvider` from the official MCP TypeScript SDK for
+     * user-interactive OAuth flows, or a {@linkcode ClientCredentialsProvider}
+     * from `@cuylabs/agent-core/mcp` for machine-to-machine (service account)
+     * auth with an explicit token endpoint.
+     *
+     * For static API keys or gateway-managed tokens, prefer `headers` instead:
+     * ```ts
+     * headers: { Authorization: `Bearer ${process.env.API_KEY}` }
+     * ```
      */
-    authProvider?: any;
+    authProvider?: OAuthClientProvider;
     /**
      * How HTTP redirects are handled.
      * - `'follow'` — follow automatically
@@ -75,9 +85,9 @@ type MCPServerConfig = (StdioTransportConfig | RemoteTransportConfig) & {
     name?: string;
     /**
      * Client capabilities to advertise during MCP initialization.
-     * Enables features like elicitation when the server supports them.
+     * Enables MCP-native features like elicitation when the server supports them.
      */
-    capabilities?: Record<string, unknown>;
+    capabilities?: ClientCapabilities;
     /**
      * Callback for uncaught transport errors.
      */
@@ -103,6 +113,24 @@ type MCPServerStatus = {
 } | {
     status: "disabled";
 };
+/**
+ * Aggregated resource metadata with the originating server name attached.
+ */
+interface MCPResourceInfo extends Resource {
+    server: string;
+}
+/**
+ * Aggregated resource template metadata with the originating server name attached.
+ */
+interface MCPResourceTemplateInfo extends ResourceTemplate {
+    server: string;
+}
+/**
+ * Aggregated prompt metadata with the originating server name attached.
+ */
+interface MCPPromptInfo extends Prompt {
+    server: string;
+}
 /**
  * MCP manager - handles connections to multiple MCP servers.
  */
@@ -115,6 +143,26 @@ interface MCPManager {
      * Get all tools from connected servers, ready for AI SDK use.
      */
     getTools(): Promise<Record<string, Tool>>;
+    /**
+     * List resources from all connected servers.
+     */
+    listResources(): Promise<MCPResourceInfo[]>;
+    /**
+     * List resource templates from all connected servers.
+     */
+    listResourceTemplates(): Promise<MCPResourceTemplateInfo[]>;
+    /**
+     * Read a resource from a specific connected server.
+     */
+    readResource(serverName: string, uri: string): Promise<ReadResourceResult>;
+    /**
+     * List prompts from all connected servers.
+     */
+    listPrompts(): Promise<MCPPromptInfo[]>;
+    /**
+     * Get a prompt from a specific connected server.
+     */
+    getPrompt(serverName: string, name: string, args?: Record<string, string>): Promise<GetPromptResult>;
     /**
      * Get status of a specific server.
      */
@@ -133,4 +181,4 @@ interface MCPManager {
     isConnected(): boolean;
 }
 
-export type { HttpTransportConfig as H, MCPConfig as M, RemoteTransportConfig as R, SseTransportConfig as S, MCPManager as a, MCPServerConfig as b, MCPServerStatus as c, StdioTransportConfig as d };
+export type { HttpTransportConfig as H, MCPConfig as M, RemoteTransportConfig as R, SseTransportConfig as S, MCPManager as a, MCPPromptInfo as b, MCPResourceInfo as c, MCPResourceTemplateInfo as d, MCPServerConfig as e, MCPServerStatus as f, StdioTransportConfig as g };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cuylabs/agent-core",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "description": "Embeddable AI agent infrastructure — execution, sessions, tools, skills, dispatch, tracing",
   "type": "module",
   "main": "./dist/index.js",
@@ -134,7 +134,6 @@
     "@ai-sdk/google": "^3.0.0",
     "@ai-sdk/google-vertex": "^4.0.0",
     "@ai-sdk/groq": "^3.0.0",
-    "@ai-sdk/mcp": "^1.0.0",
     "@ai-sdk/mistral": "^3.0.0",
     "@ai-sdk/openai": "^3.0.0",
     "@ai-sdk/openai-compatible": "^2.0.0",
@@ -171,9 +170,6 @@
     "@ai-sdk/groq": {
       "optional": true
     },
-    "@ai-sdk/mcp": {
-      "optional": true
-    },
     "@ai-sdk/mistral": {
       "optional": true
     },
@@ -206,7 +202,6 @@
     "@ai-sdk/google": "^3.0.30",
     "@ai-sdk/google-vertex": "^4.0.80",
     "@ai-sdk/groq": "^3.0.29",
-    "@ai-sdk/mcp": "^1.0.19",
     "@ai-sdk/mistral": "^3.0.24",
     "@ai-sdk/openai": "^3.0.25",
     "@ai-sdk/openai-compatible": "^2.0.30",