@illuma-ai/agents 1.4.0-alpha.3 → 1.4.0-alpha.5

package/src/tools/artifacts/tool.ts

@@ -62,14 +62,14 @@ async function resolveContentIdIfPresent(
   resolver: ContentIdResolver | undefined,
   id: string | undefined,
   scope: ArtifactToolScope,
-  logger?: { debug: (msg: string) => void },
+  logger?: { debug: (msg: string) => void }
 ): Promise<string | undefined> {
   if (!resolver || !id) return id;
   const out = await resolver.resolve(id, scope);
   if (!out) return id;
   if (out.resolvedId !== id) {
     logger?.debug(
-      `[artifact] resolved "${id}" → "${out.resolvedId}"${out.resolvedName ? ` ("${out.resolvedName}")` : ''}`,
+      `[artifact] resolved "${id}" → "${out.resolvedId}"${out.resolvedName ? ` ("${out.resolvedName}")` : ''}`
     );
   }
   return out.resolvedId;
@@ -78,7 +78,7 @@ async function resolveContentIdIfPresent(
 // ─── Writer tool (artifact_tool) ─────────────────────────────────────────
 
 export function createArtifactTool(
-  config: ArtifactToolConfig,
+  config: ArtifactToolConfig
 ): DynamicStructuredTool {
   const { handlers, getScope, resolver, logger, descriptionOverride } = config;
 
@@ -104,7 +104,7 @@ export function createArtifactTool(
         resolver,
         input.content_id,
         scope,
-        logger,
+        logger
       );
 
       const started = Date.now();
@@ -121,7 +121,8 @@ export function createArtifactTool(
             return await handlers.write(args, scope);
           }
           case 'edit': {
-            if (!resolvedContentId) return ['Error: edit requires content_id', {}];
+            if (!resolvedContentId)
+              return ['Error: edit requires content_id', {}];
             const args: EditArgs = {
               action: 'edit',
               content_id: resolvedContentId,
@@ -133,7 +134,8 @@ export function createArtifactTool(
             return await handlers.edit(args, scope);
           }
           case 'verify': {
-            if (!resolvedContentId) return ['Error: verify requires content_id', {}];
+            if (!resolvedContentId)
+              return ['Error: verify requires content_id', {}];
             const args: VerifyArgs = {
               action: 'verify',
               content_id: resolvedContentId,
@@ -141,7 +143,8 @@ export function createArtifactTool(
             return await handlers.verify(args, scope);
           }
           case 'delete': {
-            if (!resolvedContentId) return ['Error: delete requires content_id', {}];
+            if (!resolvedContentId)
+              return ['Error: delete requires content_id', {}];
             const args: DeleteArgs = {
               action: 'delete',
               content_id: resolvedContentId,
@@ -149,7 +152,10 @@ export function createArtifactTool(
             return await handlers.delete(args, scope);
           }
           default:
-            return [`Unknown action: ${(input as { action: string }).action}`, {}];
+            return [
+              `Unknown action: ${(input as { action: string }).action}`,
+              {},
+            ];
         }
       } catch (err) {
         const e = err instanceof Error ? err : new Error(String(err));
@@ -167,14 +173,14 @@ export function createArtifactTool(
       responseFormat: 'content_and_artifact',
       description: descriptionOverride ?? DEFAULT_ARTIFACT_DESCRIPTION,
       schema: artifactToolSchema,
-    },
+    }
   );
 }
 
 // ─── Reader tool (content_reader) ────────────────────────────────────────
 
 export function createContentReaderTool(
-  config: ContentReaderToolConfig,
+  config: ContentReaderToolConfig
 ): DynamicStructuredTool {
   const { handlers, getScope, resolver, logger, descriptionOverride } = config;
 
@@ -202,14 +208,15 @@ export function createContentReaderTool(
         resolver,
         input.content_id,
         scope,
-        logger,
+        logger
       );
 
       const started = Date.now();
       try {
         switch (input.action) {
           case 'read': {
-            if (!resolvedContentId) return ['Error: read requires content_id', {}];
+            if (!resolvedContentId)
+              return ['Error: read requires content_id', {}];
             const args: ReadArgs = {
               action: 'read',
               content_id: resolvedContentId,
@@ -221,7 +228,8 @@ export function createContentReaderTool(
             return await handlers.read(args, scope);
           }
           case 'search': {
-            if (!resolvedContentId) return ['Error: search requires content_id', {}];
+            if (!resolvedContentId)
+              return ['Error: search requires content_id', {}];
             if (!input.pattern) return ['Error: search requires pattern', {}];
             const args: SearchArgs = {
               action: 'search',
@@ -239,7 +247,8 @@ export function createContentReaderTool(
             return await handlers.list(args, scope);
           }
           case 'info': {
-            if (!resolvedContentId) return ['Error: info requires content_id', {}];
+            if (!resolvedContentId)
+              return ['Error: info requires content_id', {}];
             const args: InfoArgs = {
               action: 'info',
               content_id: resolvedContentId,
@@ -247,7 +256,10 @@ export function createContentReaderTool(
             return await handlers.info(args, scope);
           }
           default:
-            return [`Unknown action: ${(input as { action: string }).action}`, {}];
+            return [
+              `Unknown action: ${(input as { action: string }).action}`,
+              {},
+            ];
         }
       } catch (err) {
         const e = err instanceof Error ? err : new Error(String(err));
@@ -265,7 +277,7 @@ export function createContentReaderTool(
       responseFormat: 'content_and_artifact',
       description: descriptionOverride ?? DEFAULT_CONTENT_READER_DESCRIPTION,
       schema: contentReaderSchema,
-    },
+    }
   );
 }
 

package/src/tools/artifacts/types.ts

@@ -83,7 +83,11 @@ export interface InfoArgs {
   content_id: string;
 }
 
-export type ArtifactWriteAction = WriteArgs | EditArgs | VerifyArgs | DeleteArgs;
+export type ArtifactWriteAction =
+  | WriteArgs
+  | EditArgs
+  | VerifyArgs
+  | DeleteArgs;
 export type ArtifactReadAction = ReadArgs | SearchArgs | ListArgs | InfoArgs;
 
 // ─── Handler bundles ──────────────────────────────────────────────────────
@@ -92,14 +96,23 @@ export type ArtifactReadAction = ReadArgs | SearchArgs | ListArgs | InfoArgs;
 export interface ArtifactWriteHandlers {
   write(args: WriteArgs, scope: ArtifactToolScope): Promise<ArtifactToolResult>;
   edit(args: EditArgs, scope: ArtifactToolScope): Promise<ArtifactToolResult>;
-  verify(args: VerifyArgs, scope: ArtifactToolScope): Promise<ArtifactToolResult>;
-  delete(args: DeleteArgs, scope: ArtifactToolScope): Promise<ArtifactToolResult>;
+  verify(
+    args: VerifyArgs,
+    scope: ArtifactToolScope
+  ): Promise<ArtifactToolResult>;
+  delete(
+    args: DeleteArgs,
+    scope: ArtifactToolScope
+  ): Promise<ArtifactToolResult>;
 }
 
 /** Reader-surface handlers — invoked by `content_reader`. */
 export interface ContentReadHandlers {
   read(args: ReadArgs, scope: ArtifactToolScope): Promise<ArtifactToolResult>;
-  search(args: SearchArgs, scope: ArtifactToolScope): Promise<ArtifactToolResult>;
+  search(
+    args: SearchArgs,
+    scope: ArtifactToolScope
+  ): Promise<ArtifactToolResult>;
   list(args: ListArgs, scope: ArtifactToolScope): Promise<ArtifactToolResult>;
   info(args: InfoArgs, scope: ArtifactToolScope): Promise<ArtifactToolResult>;
 }
@@ -112,7 +125,7 @@ export interface ContentReadHandlers {
 export interface ContentIdResolver {
   resolve(
     id: string,
-    scope: ArtifactToolScope,
+    scope: ArtifactToolScope
   ): Promise<{ resolvedId: string; resolvedName?: string } | null>;
 }
 

package/src/tools/proxyTool.ts

@@ -40,6 +40,15 @@ export interface ProxyToolOptions {
    * telemetry, debug logging. Errors in the hook are swallowed.
    */
   onExecute?: (ctx: ExecuteCallbackContext) => void;
+  /**
+   * Optional per-invocation auth header builder. Called on every tool
+   * invocation before POSTing; returned headers are merged into the
+   * request alongside the base client's headers. Typical use: pass a
+   * freshly minted per-user JWT for admin-gated tools.
+   */
+  getAuthHeaders?: () =>
+    | Record<string, string>
+    | Promise<Record<string, string>>;
 }
 
 export interface ExecuteCallbackContext {
@@ -61,7 +70,12 @@ export function buildProxyTool(
   credentials: CredentialMap,
   options: ProxyToolOptions
 ): StructuredToolInterface {
-  const { client, executePath = '/execute/:name', onExecute } = options;
+  const {
+    client,
+    executePath = '/execute/:name',
+    onExecute,
+    getAuthHeaders,
+  } = options;
   const url = executePath.replace(':name', encodeURIComponent(capability.name));
 
   return tool(
@@ -76,10 +90,16 @@ export function buildProxyTool(
           `${debugPrefix} invoking — inputKeys=${input && typeof input === 'object' ? Object.keys(input as object).length : 0}`
         );
 
-        const res = await client.post<ExecuteResponse>(url, {
-          input,
-          credentials,
-        });
+        const extraHeaders = getAuthHeaders
+          ? await getAuthHeaders()
+          : undefined;
+        const res = await client.post<ExecuteResponse>(
+          url,
+          { input, credentials },
+          extraHeaders && Object.keys(extraHeaders).length > 0
+            ? { headers: extraHeaders }
+            : undefined,
+        );
 
         const durationMs = Date.now() - startMs;