@illuma-ai/agents 1.4.0-alpha.4 → 1.4.0-alpha.5

package/dist/cjs/providers/tools-server/ToolsServerCapabilityProvider.cjs

@@ -22,9 +22,10 @@ class ToolsServerCapabilityProvider {
     manifestPath;
     executePath;
     cache;
+    getExecuteAuthHeaders;
     constructor(config) {
         this.config = config;
-        const { baseUrl, apiKey, manifestPath = '/manifest', executePath = '/execute/:name', timeoutMs = 30_000, manifestTtlMs = 60_000, client, proxy, } = config;
+        const { baseUrl, apiKey, manifestPath = '/manifest', executePath = '/execute/:name', timeoutMs = 30_000, manifestTtlMs = 60_000, client, proxy, getExecuteAuthHeaders, } = config;
         if (!baseUrl) {
             throw new Error('ToolsServerCapabilityProvider: baseUrl is required');
         }
@@ -35,6 +36,7 @@ class ToolsServerCapabilityProvider {
         this.manifestPath = manifestPath;
         this.executePath = executePath;
         this.cache = new toolManifest.ManifestCache({ ttlMs: manifestTtlMs });
+        this.getExecuteAuthHeaders = getExecuteAuthHeaders;
         if (client) {
             this.client = client;
         }
@@ -81,6 +83,7 @@ class ToolsServerCapabilityProvider {
         return capabilities.map((cap) => proxyTool.buildProxyTool(cap, credentials, {
             client: this.client,
             executePath: this.executePath,
+            getAuthHeaders: this.getExecuteAuthHeaders,
         }));
     }
     /** Force a manifest refresh on next fetchManifest call. */

package/dist/cjs/providers/tools-server/ToolsServerCapabilityProvider.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ToolsServerCapabilityProvider.cjs","sources":["../../../../src/providers/tools-server/ToolsServerCapabilityProvider.ts"],"sourcesContent":["/**\n * ToolsServerCapabilityProvider — capabilities sourced from a tools-server\n * HTTP endpoint.\n *\n * Fetches the manifest via GET /manifest, builds proxy StructuredTools via\n * POST /execute/:tool. Manifest is cached (TTL-configurable) so repeated\n * init cycles don't refetch.\n *\n * See docs/architecture-capability-layer.md for the design rationale.\n */\n\nimport type { AxiosInstance } from 'axios';\nimport type { StructuredToolInterface } from '@langchain/core/tools';\nimport {\n  CapabilityKind,\n  type Capability,\n  type CapabilityFilter,\n  type CapabilityProvider,\n  type CredentialMap,\n} from '@/providers/types';\nimport {\n  createHttpClient,\n  type HttpClientConfig,\n  assertOk,\n} from '@/utils/httpClient';\nimport {\n  ManifestCache,\n  filterToCacheKey,\n  applyFilter,\n} from '@/utils/toolManifest';\nimport { buildProxyTool } from '@/tools/proxyTool';\n\n/** Configuration for ToolsServerCapabilityProvider. */\nexport interface ToolsServerConfig {\n  /** Tools-server base URL (e.g., https://tools.illuma.ai or http://localhost:3500). */\n  baseUrl: string;\n  /** API key sent as x-api-key header on all requests. Required. */\n  apiKey: string;\n  /** Optional override for manifest path. Defaults to `/manifest`. */\n  manifestPath?: string;\n  /** Optional override for execute path template. Defaults to `/execute/:name`. */\n  executePath?: string;\n  /** Request timeout in ms. Defaults to 30_000. */\n  timeoutMs?: number;\n  /** Manifest cache TTL in ms. 0 disables. Defaults to 60_000 (1 min). */\n  manifestTtlMs?: number;\n  /** Optional pre-built axios instance (for testing). */\n  client?: AxiosInstance;\n  /** Optional proxy override (defaults to process.env.PROXY). */\n  proxy?: string | null;\n}\n\n/**\n * Shape of a single entry from tools-server's /manifest response.\n *\n * Matches the tools-server ManifestToolEntry type. We define our own here\n * to avoid cross-package coupling — the shape is a stable HTTP contract.\n */\ninterface ToolsServerManifestEntry {\n  pluginKey: string;\n  name: string;\n  description: string;\n  icon?: string;\n  authConfig?: Array<{\n    authField: string;\n    label?: string;\n    description?: string;\n    source?: string;\n    required?: boolean;\n    prod?: boolean;\n    admin?: boolean;\n    hide?: boolean;\n  }>;\n  /** Input schema as JSON Schema (tools-server emits `schema`). */\n  schema?: unknown;\n  /** Legacy alias accepted for backwards compatibility. */\n  jsonSchema?: unknown;\n  category?: string;\n  tags?: string[];\n  toolkit?: string;\n  endpoint?: string;\n  /** Governance flags forwarded by tools-server getManifest(). */\n  hidden?: boolean;\n  admin?: boolean;\n  env?: Array<'development' | 'production' | 'test' | 'staging'>;\n}\n\nexport class ToolsServerCapabilityProvider implements CapabilityProvider {\n  readonly providerId: string;\n  private readonly client: AxiosInstance;\n  private readonly manifestPath: string;\n  private readonly executePath: string;\n  private readonly cache: ManifestCache;\n\n  constructor(private readonly config: ToolsServerConfig) {\n    const {\n      baseUrl,\n      apiKey,\n      manifestPath = '/manifest',\n      executePath = '/execute/:name',\n      timeoutMs = 30_000,\n      manifestTtlMs = 60_000,\n      client,\n      proxy,\n    } = config;\n\n    if (!baseUrl) {\n      throw new Error('ToolsServerCapabilityProvider: baseUrl is required');\n    }\n    if (!apiKey) {\n      throw new Error('ToolsServerCapabilityProvider: apiKey is required');\n    }\n\n    this.providerId = `tools-server:${baseUrl}`;\n    this.manifestPath = manifestPath;\n    this.executePath = executePath;\n    this.cache = new ManifestCache({ ttlMs: manifestTtlMs });\n\n    if (client) {\n      this.client = client;\n    } else {\n      const httpConfig: HttpClientConfig = {\n        baseURL: baseUrl,\n        apiKey,\n        timeoutMs,\n        proxy,\n      };\n      this.client = createHttpClient(httpConfig);\n    }\n  }\n\n  async fetchManifest(filter?: CapabilityFilter): Promise<Capability[]> {\n    const cacheKey = filterToCacheKey(filter);\n    const cached = this.cache.get(cacheKey);\n    if (cached) {\n      // DEBUG: cache hit (remove after stabilization)\n      // eslint-disable-next-line no-console\n      console.debug(\n        `[${this.providerId}] manifest cache hit — ${cached.length} caps`\n      );\n      return cached;\n    }\n\n    // DEBUG\n    // eslint-disable-next-line no-console\n    console.debug(\n      `[${this.providerId}] fetching manifest from ${this.manifestPath}`\n    );\n\n    const res = await this.client.get<ToolsServerManifestEntry[]>(\n      this.manifestPath\n    );\n    assertOk(res.status, this.manifestPath, res.data);\n\n    const entries = Array.isArray(res.data) ? res.data : [];\n    const capabilities: Capability[] = entries.map((entry) =>\n      normalizeEntry(entry)\n    );\n\n    // Apply filter before caching the full list separately so unfiltered\n    // refetches don't re-hit the network.\n    const fullCacheKey = filterToCacheKey();\n    this.cache.set(fullCacheKey, capabilities);\n\n    const filtered = applyFilter(capabilities, filter);\n    if (cacheKey !== fullCacheKey) {\n      this.cache.set(cacheKey, filtered);\n    }\n\n    // DEBUG\n    // eslint-disable-next-line no-console\n    console.debug(\n      `[${this.providerId}] manifest loaded — ${capabilities.length} caps, ${filtered.length} after filter`\n    );\n\n    return filtered;\n  }\n\n  async createRunnables(\n    capabilities: Capability[],\n    credentials: CredentialMap\n  ): Promise<StructuredToolInterface[]> {\n    return capabilities.map((cap) =>\n      buildProxyTool(cap, credentials, {\n        client: this.client,\n        executePath: this.executePath,\n      })\n    );\n  }\n\n  /** Force a manifest refresh on next fetchManifest call. */\n  invalidateCache(): void {\n    this.cache.clear();\n  }\n}\n\n/**\n * Translate a raw tools-server manifest entry into a typed Capability.\n * Defensive — tools-server may add fields; we pull only what we need.\n */\nfunction normalizeEntry(entry: ToolsServerManifestEntry): Capability {\n  return {\n    kind: CapabilityKind.TOOL,\n    name: entry.pluginKey,\n    description: entry.description ?? '',\n    schema: entry.schema ?? entry.jsonSchema,\n    authConfig: (entry.authConfig ?? []).map((ac) => ({\n      authField: ac.authField,\n      label: ac.label,\n      description: ac.description,\n      required: ac.required,\n      prod: ac.prod,\n      admin: ac.admin,\n      hide: ac.hide,\n      // Source is a string in wire format; downstream consumers coerce to AuthSource.\n      source: ac.source as Capability['authConfig'][number]['source'],\n    })),\n    metadata: {\n      icon: entry.icon,\n      category: entry.category,\n      tags: entry.tags,\n      // Governance — hosts use these to gate UI/role/environment.\n      hidden: entry.hidden,\n      admin: entry.admin,\n      env: entry.env,\n    },\n  };\n}\n"],"names":["ManifestCache","createHttpClient","filterToCacheKey","assertOk","applyFilter","buildProxyTool","CapabilityKind"],"mappings":";;;;;;;AAAA;;;;;;;;;AASG;MA8EU,6BAA6B,CAAA;AAOX,IAAA,MAAA;AANpB,IAAA,UAAU;AACF,IAAA,MAAM;AACN,IAAA,YAAY;AACZ,IAAA,WAAW;AACX,IAAA,KAAK;AAEtB,IAAA,WAAA,CAA6B,MAAyB,EAAA;QAAzB,IAAA,CAAA,MAAM,GAAN,MAAM;QACjC,MAAM,EACJ,OAAO,EACP,MAAM,EACN,YAAY,GAAG,WAAW,EAC1B,WAAW,GAAG,gBAAgB,EAC9B,SAAS,GAAG,MAAM,EAClB,aAAa,GAAG,MAAM,EACtB,MAAM,EACN,KAAK,GACN,GAAG,MAAM;QAEV,IAAI,CAAC,OAAO,EAAE;AACZ,YAAA,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;QACvE;QACA,IAAI,CAAC,MAAM,EAAE;AACX,YAAA,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC;QACtE;AAEA,QAAA,IAAI,CAAC,UAAU,GAAG,CAAA,aAAA,EAAgB,OAAO,EAAE;AAC3C,QAAA,IAAI,CAAC,YAAY,GAAG,YAAY;AAChC,QAAA,IAAI,CAAC,WAAW,GAAG,WAAW;AAC9B,QAAA,IAAI,CAAC,KAAK,GAAG,IAAIA,0BAAa,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAExD,IAAI,MAAM,EAAE;AACV,YAAA,IAAI,CAAC,MAAM,GAAG,MAAM;QACtB;aAAO;AACL,YAAA,MAAM,UAAU,GAAqB;AACnC,gBAAA,OAAO,EAAE,OAAO;gBAChB,MAAM;gBACN,SAAS;gBACT,KAAK;aACN;AACD,YAAA,IAAI,CAAC,MAAM,GAAGC,2BAAgB,CAAC,UAAU,CAAC;QAC5C;IACF;IAEA,MAAM,aAAa,CAAC,MAAyB,EAAA;AAC3C,QAAA,MAAM,QAAQ,GAAGC,6BAAgB,CAAC,MAAM,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvC,IAAI,MAAM,EAAE;;;AAGV,YAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,uBAAA,EAA0B,MAAM,CAAC,MAAM,CAAA,KAAA,CAAO,CAClE;AACD,YAAA,OAAO,MAAM;QACf;;;AAIA,QAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,yBAAA,EAA4B,IAAI,CAAC,YAAY,CAAA,CAAE,CACnE;AAED,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAC/B,IAAI,CAAC,YAAY,CAClB;AACD,QAAAC,mBAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC;QAEjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,EAAE;AACvD,QAAA,MAAM,YAAY,GAAiB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,KACnD,cAAc,CAAC,KAAK,CAAC,CACtB;;;AAID,QAAA,MAAM,YAAY,GAAGD,6BAAgB,EAAE;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;QAE1C,MAAM,QAAQ,GAAGE,wBAAW,CAAC,YAAY,EAAE,MAAM,CAAC;AAClD,QAAA,IAAI,QAAQ,KAAK,YAAY,EAAE;YAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpC;;;AAIA,QAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,oBAAA,EAAuB,YAAY,CAAC,MAAM,CAAA,OAAA,EAAU,QAAQ,CAAC,MAAM,CAAA,aAAA,CAAe,CACtG;AAED,QAAA,OAAO,QAAQ;IACjB;AAEA,IAAA,MAAM,eAAe,CACnB,YAA0B,EAC1B,WAA0B,EAAA;AAE1B,QAAA,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,KAC1BC,wBAAc,CAAC,GAAG,EAAE,WAAW,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;AAC9B,SAAA,CAAC,CACH;IACH;;IAGA,eAAe,GAAA;AACb,QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;IACpB;AACD;AAED;;;AAGG;AACH,SAAS,cAAc,CAAC,KAA+B,EAAA;IACrD,OAAO;QACL,IAAI,EAAEC,oBAAc,CAAC,IAAI;QACzB,IAAI,EAAE,KAAK,CAAC,SAAS;AACrB,QAAA,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;AACpC,QAAA,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU;AACxC,QAAA,UAAU,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM;YAChD,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,IAAI,EAAE,EAAE,CAAC,IAAI;;YAEb,MAAM,EAAE,EAAE,CAAC,MAAoD;AAChE,SAAA,CAAC,CAAC;AACH,QAAA,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;;YAEhB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;AACf,SAAA;KACF;AACH;;;;"}
+{"version":3,"file":"ToolsServerCapabilityProvider.cjs","sources":["../../../../src/providers/tools-server/ToolsServerCapabilityProvider.ts"],"sourcesContent":["/**\n * ToolsServerCapabilityProvider — capabilities sourced from a tools-server\n * HTTP endpoint.\n *\n * Fetches the manifest via GET /manifest, builds proxy StructuredTools via\n * POST /execute/:tool. Manifest is cached (TTL-configurable) so repeated\n * init cycles don't refetch.\n *\n * See docs/architecture-capability-layer.md for the design rationale.\n */\n\nimport type { AxiosInstance } from 'axios';\nimport type { StructuredToolInterface } from '@langchain/core/tools';\nimport {\n  CapabilityKind,\n  type Capability,\n  type CapabilityFilter,\n  type CapabilityProvider,\n  type CredentialMap,\n} from '@/providers/types';\nimport {\n  createHttpClient,\n  type HttpClientConfig,\n  assertOk,\n} from '@/utils/httpClient';\nimport {\n  ManifestCache,\n  filterToCacheKey,\n  applyFilter,\n} from '@/utils/toolManifest';\nimport { buildProxyTool } from '@/tools/proxyTool';\n\n/** Configuration for ToolsServerCapabilityProvider. */\nexport interface ToolsServerConfig {\n  /** Tools-server base URL (e.g., https://tools.illuma.ai or http://localhost:3500). */\n  baseUrl: string;\n  /** API key sent as x-api-key header on all requests. Required. */\n  apiKey: string;\n  /** Optional override for manifest path. Defaults to `/manifest`. */\n  manifestPath?: string;\n  /** Optional override for execute path template. Defaults to `/execute/:name`. */\n  executePath?: string;\n  /** Request timeout in ms. Defaults to 30_000. */\n  timeoutMs?: number;\n  /** Manifest cache TTL in ms. 0 disables. Defaults to 60_000 (1 min). */\n  manifestTtlMs?: number;\n  /** Optional pre-built axios instance (for testing). */\n  client?: AxiosInstance;\n  /** Optional proxy override (defaults to process.env.PROXY). */\n  proxy?: string | null;\n  /**\n   * Optional per-request auth header builder — invoked on every tool\n   * invocation (NOT on the manifest fetch, which is service-to-service).\n   * When provided, the returned headers are merged into the `/execute`\n   * request so the host can pass user-scoped identity (e.g.,\n   * `Authorization: Bearer <jwt>`) that tools-server verifies for\n   * admin-gated tools.\n   *\n   * Typical host wiring: mint a short-lived JWT per call carrying the\n   * authenticated user's `{ userId, role }` claims; tools-server's\n   * `TOOLS_SERVER_JWT_SECRET` validates.\n   */\n  getExecuteAuthHeaders?: () =>\n    | Record<string, string>\n    | Promise<Record<string, string>>;\n}\n\n/**\n * Shape of a single entry from tools-server's /manifest response.\n *\n * Matches the tools-server ManifestToolEntry type. We define our own here\n * to avoid cross-package coupling — the shape is a stable HTTP contract.\n */\ninterface ToolsServerManifestEntry {\n  pluginKey: string;\n  name: string;\n  description: string;\n  icon?: string;\n  authConfig?: Array<{\n    authField: string;\n    label?: string;\n    description?: string;\n    source?: string;\n    required?: boolean;\n    prod?: boolean;\n    admin?: boolean;\n    hide?: boolean;\n  }>;\n  /** Input schema as JSON Schema (tools-server emits `schema`). */\n  schema?: unknown;\n  /** Legacy alias accepted for backwards compatibility. */\n  jsonSchema?: unknown;\n  category?: string;\n  tags?: string[];\n  toolkit?: string;\n  endpoint?: string;\n  /** Governance flags forwarded by tools-server getManifest(). */\n  hidden?: boolean;\n  admin?: boolean;\n  env?: Array<'development' | 'production' | 'test' | 'staging'>;\n}\n\nexport class ToolsServerCapabilityProvider implements CapabilityProvider {\n  readonly providerId: string;\n  private readonly client: AxiosInstance;\n  private readonly manifestPath: string;\n  private readonly executePath: string;\n  private readonly cache: ManifestCache;\n  private readonly getExecuteAuthHeaders?:\n    | (() => Record<string, string> | Promise<Record<string, string>>);\n\n  constructor(private readonly config: ToolsServerConfig) {\n    const {\n      baseUrl,\n      apiKey,\n      manifestPath = '/manifest',\n      executePath = '/execute/:name',\n      timeoutMs = 30_000,\n      manifestTtlMs = 60_000,\n      client,\n      proxy,\n      getExecuteAuthHeaders,\n    } = config;\n\n    if (!baseUrl) {\n      throw new Error('ToolsServerCapabilityProvider: baseUrl is required');\n    }\n    if (!apiKey) {\n      throw new Error('ToolsServerCapabilityProvider: apiKey is required');\n    }\n\n    this.providerId = `tools-server:${baseUrl}`;\n    this.manifestPath = manifestPath;\n    this.executePath = executePath;\n    this.cache = new ManifestCache({ ttlMs: manifestTtlMs });\n    this.getExecuteAuthHeaders = getExecuteAuthHeaders;\n\n    if (client) {\n      this.client = client;\n    } else {\n      const httpConfig: HttpClientConfig = {\n        baseURL: baseUrl,\n        apiKey,\n        timeoutMs,\n        proxy,\n      };\n      this.client = createHttpClient(httpConfig);\n    }\n  }\n\n  async fetchManifest(filter?: CapabilityFilter): Promise<Capability[]> {\n    const cacheKey = filterToCacheKey(filter);\n    const cached = this.cache.get(cacheKey);\n    if (cached) {\n      // DEBUG: cache hit (remove after stabilization)\n      // eslint-disable-next-line no-console\n      console.debug(\n        `[${this.providerId}] manifest cache hit — ${cached.length} caps`\n      );\n      return cached;\n    }\n\n    // DEBUG\n    // eslint-disable-next-line no-console\n    console.debug(\n      `[${this.providerId}] fetching manifest from ${this.manifestPath}`\n    );\n\n    const res = await this.client.get<ToolsServerManifestEntry[]>(\n      this.manifestPath\n    );\n    assertOk(res.status, this.manifestPath, res.data);\n\n    const entries = Array.isArray(res.data) ? res.data : [];\n    const capabilities: Capability[] = entries.map((entry) =>\n      normalizeEntry(entry)\n    );\n\n    // Apply filter before caching the full list separately so unfiltered\n    // refetches don't re-hit the network.\n    const fullCacheKey = filterToCacheKey();\n    this.cache.set(fullCacheKey, capabilities);\n\n    const filtered = applyFilter(capabilities, filter);\n    if (cacheKey !== fullCacheKey) {\n      this.cache.set(cacheKey, filtered);\n    }\n\n    // DEBUG\n    // eslint-disable-next-line no-console\n    console.debug(\n      `[${this.providerId}] manifest loaded — ${capabilities.length} caps, ${filtered.length} after filter`\n    );\n\n    return filtered;\n  }\n\n  async createRunnables(\n    capabilities: Capability[],\n    credentials: CredentialMap\n  ): Promise<StructuredToolInterface[]> {\n    return capabilities.map((cap) =>\n      buildProxyTool(cap, credentials, {\n        client: this.client,\n        executePath: this.executePath,\n        getAuthHeaders: this.getExecuteAuthHeaders,\n      })\n    );\n  }\n\n  /** Force a manifest refresh on next fetchManifest call. */\n  invalidateCache(): void {\n    this.cache.clear();\n  }\n}\n\n/**\n * Translate a raw tools-server manifest entry into a typed Capability.\n * Defensive — tools-server may add fields; we pull only what we need.\n */\nfunction normalizeEntry(entry: ToolsServerManifestEntry): Capability {\n  return {\n    kind: CapabilityKind.TOOL,\n    name: entry.pluginKey,\n    description: entry.description ?? '',\n    schema: entry.schema ?? entry.jsonSchema,\n    authConfig: (entry.authConfig ?? []).map((ac) => ({\n      authField: ac.authField,\n      label: ac.label,\n      description: ac.description,\n      required: ac.required,\n      prod: ac.prod,\n      admin: ac.admin,\n      hide: ac.hide,\n      // Source is a string in wire format; downstream consumers coerce to AuthSource.\n      source: ac.source as Capability['authConfig'][number]['source'],\n    })),\n    metadata: {\n      icon: entry.icon,\n      category: entry.category,\n      tags: entry.tags,\n      // Governance — hosts use these to gate UI/role/environment.\n      hidden: entry.hidden,\n      admin: entry.admin,\n      env: entry.env,\n    },\n  };\n}\n"],"names":["ManifestCache","createHttpClient","filterToCacheKey","assertOk","applyFilter","buildProxyTool","CapabilityKind"],"mappings":";;;;;;;AAAA;;;;;;;;;AASG;MA6FU,6BAA6B,CAAA;AASX,IAAA,MAAA;AARpB,IAAA,UAAU;AACF,IAAA,MAAM;AACN,IAAA,YAAY;AACZ,IAAA,WAAW;AACX,IAAA,KAAK;AACL,IAAA,qBAAqB;AAGtC,IAAA,WAAA,CAA6B,MAAyB,EAAA;QAAzB,IAAA,CAAA,MAAM,GAAN,MAAM;AACjC,QAAA,MAAM,EACJ,OAAO,EACP,MAAM,EACN,YAAY,GAAG,WAAW,EAC1B,WAAW,GAAG,gBAAgB,EAC9B,SAAS,GAAG,MAAM,EAClB,aAAa,GAAG,MAAM,EACtB,MAAM,EACN,KAAK,EACL,qBAAqB,GACtB,GAAG,MAAM;QAEV,IAAI,CAAC,OAAO,EAAE;AACZ,YAAA,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;QACvE;QACA,IAAI,CAAC,MAAM,EAAE;AACX,YAAA,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC;QACtE;AAEA,QAAA,IAAI,CAAC,UAAU,GAAG,CAAA,aAAA,EAAgB,OAAO,EAAE;AAC3C,QAAA,IAAI,CAAC,YAAY,GAAG,YAAY;AAChC,QAAA,IAAI,CAAC,WAAW,GAAG,WAAW;AAC9B,QAAA,IAAI,CAAC,KAAK,GAAG,IAAIA,0BAAa,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AACxD,QAAA,IAAI,CAAC,qBAAqB,GAAG,qBAAqB;QAElD,IAAI,MAAM,EAAE;AACV,YAAA,IAAI,CAAC,MAAM,GAAG,MAAM;QACtB;aAAO;AACL,YAAA,MAAM,UAAU,GAAqB;AACnC,gBAAA,OAAO,EAAE,OAAO;gBAChB,MAAM;gBACN,SAAS;gBACT,KAAK;aACN;AACD,YAAA,IAAI,CAAC,MAAM,GAAGC,2BAAgB,CAAC,UAAU,CAAC;QAC5C;IACF;IAEA,MAAM,aAAa,CAAC,MAAyB,EAAA;AAC3C,QAAA,MAAM,QAAQ,GAAGC,6BAAgB,CAAC,MAAM,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvC,IAAI,MAAM,EAAE;;;AAGV,YAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,uBAAA,EAA0B,MAAM,CAAC,MAAM,CAAA,KAAA,CAAO,CAClE;AACD,YAAA,OAAO,MAAM;QACf;;;AAIA,QAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,yBAAA,EAA4B,IAAI,CAAC,YAAY,CAAA,CAAE,CACnE;AAED,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAC/B,IAAI,CAAC,YAAY,CAClB;AACD,QAAAC,mBAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC;QAEjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,EAAE;AACvD,QAAA,MAAM,YAAY,GAAiB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,KACnD,cAAc,CAAC,KAAK,CAAC,CACtB;;;AAID,QAAA,MAAM,YAAY,GAAGD,6BAAgB,EAAE;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;QAE1C,MAAM,QAAQ,GAAGE,wBAAW,CAAC,YAAY,EAAE,MAAM,CAAC;AAClD,QAAA,IAAI,QAAQ,KAAK,YAAY,EAAE;YAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpC;;;AAIA,QAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,oBAAA,EAAuB,YAAY,CAAC,MAAM,CAAA,OAAA,EAAU,QAAQ,CAAC,MAAM,CAAA,aAAA,CAAe,CACtG;AAED,QAAA,OAAO,QAAQ;IACjB;AAEA,IAAA,MAAM,eAAe,CACnB,YAA0B,EAC1B,WAA0B,EAAA;AAE1B,QAAA,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,KAC1BC,wBAAc,CAAC,GAAG,EAAE,WAAW,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,cAAc,EAAE,IAAI,CAAC,qBAAqB;AAC3C,SAAA,CAAC,CACH;IACH;;IAGA,eAAe,GAAA;AACb,QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;IACpB;AACD;AAED;;;AAGG;AACH,SAAS,cAAc,CAAC,KAA+B,EAAA;IACrD,OAAO;QACL,IAAI,EAAEC,oBAAc,CAAC,IAAI;QACzB,IAAI,EAAE,KAAK,CAAC,SAAS;AACrB,QAAA,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;AACpC,QAAA,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU;AACxC,QAAA,UAAU,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM;YAChD,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,IAAI,EAAE,EAAE,CAAC,IAAI;;YAEb,MAAM,EAAE,EAAE,CAAC,MAAoD;AAChE,SAAA,CAAC,CAAC;AACH,QAAA,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;;YAEhB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;AACf,SAAA;KACF;AACH;;;;"}

package/dist/cjs/tools/proxyTool.cjs

@@ -24,7 +24,7 @@ var httpClient = require('../utils/httpClient.cjs');
  * per-invocation credential rotation should rebuild the tool.
  */
 function buildProxyTool(capability, credentials, options) {
-    const { client, executePath = '/execute/:name', onExecute } = options;
+    const { client, executePath = '/execute/:name', onExecute, getAuthHeaders, } = options;
     const url = executePath.replace(':name', encodeURIComponent(capability.name));
     return tools.tool(async (input) => {
         const startMs = Date.now();
@@ -33,10 +33,12 @@ function buildProxyTool(capability, credentials, options) {
             // DEBUG: log (remove after POC stabilizes)
             // eslint-disable-next-line no-console
             console.debug(`${debugPrefix} invoking — inputKeys=${input && typeof input === 'object' ? Object.keys(input).length : 0}`);
-            const res = await client.post(url, {
-                input,
-                credentials,
-            });
+            const extraHeaders = getAuthHeaders
+                ? await getAuthHeaders()
+                : undefined;
+            const res = await client.post(url, { input, credentials }, extraHeaders && Object.keys(extraHeaders).length > 0
+                ? { headers: extraHeaders }
+                : undefined);
             const durationMs = Date.now() - startMs;
             if (res.status < 200 || res.status >= 300) {
                 throw new httpClient.HttpError(res.status, url, res.data);

package/dist/cjs/tools/proxyTool.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"proxyTool.cjs","sources":["../../../src/tools/proxyTool.ts"],"sourcesContent":["/**\n * proxyTool — wraps a Capability into a LangChain StructuredTool that\n * dispatches execution to a remote backend (e.g., tools-server) over HTTP.\n *\n * The LLM sees this tool identically to a locally-implemented tool:\n *   - same name\n *   - same description\n *   - same input schema (JSON Schema)\n *   - same invoke(input) contract\n *\n * Under the hood, invoke() POSTs to the backend's execute endpoint with\n * the input and a caller-supplied credential map. The backend returns\n * { success, result, error, timing } which this wrapper unpacks.\n */\n\nimport type { AxiosInstance } from 'axios';\nimport { tool, type StructuredToolInterface } from '@langchain/core/tools';\nimport type { Capability, CredentialMap } from '@/providers/types';\nimport { HttpError } from '@/utils/httpClient';\n\n/** Shape of the backend's execute response. Matches tools-server. */\nexport interface ExecuteResponse {\n  success: boolean;\n  result?: unknown;\n  error?: string;\n  timing?: { durationMs: number };\n}\n\n/** Options passed to buildProxyTool. */\nexport interface ProxyToolOptions {\n  /** HTTP client configured with backend base URL + auth. */\n  client: AxiosInstance;\n  /**\n   * Path template for execution. The literal `:name` is replaced with the\n   * capability's name. Defaults to `/execute/:name` (tools-server convention).\n   */\n  executePath?: string;\n  /**\n   * Optional callback invoked on every execution — used for metrics,\n   * telemetry, debug logging. Errors in the hook are swallowed.\n   */\n  onExecute?: (ctx: ExecuteCallbackContext) => void;\n}\n\nexport interface ExecuteCallbackContext {\n  capabilityName: string;\n  input: unknown;\n  response?: ExecuteResponse;\n  error?: Error;\n  durationMs: number;\n}\n\n/**\n * Build a StructuredTool that proxies to a remote backend.\n *\n * The credentialMap is baked into the closure — callers that need\n * per-invocation credential rotation should rebuild the tool.\n */\nexport function buildProxyTool(\n  capability: Capability,\n  credentials: CredentialMap,\n  options: ProxyToolOptions\n): StructuredToolInterface {\n  const { client, executePath = '/execute/:name', onExecute } = options;\n  const url = executePath.replace(':name', encodeURIComponent(capability.name));\n\n  return tool(\n    async (input: unknown): Promise<string> => {\n      const startMs = Date.now();\n      const debugPrefix = `[proxyTool:${capability.name}]`;\n\n      try {\n        // DEBUG: log (remove after POC stabilizes)\n        // eslint-disable-next-line no-console\n        console.debug(\n          `${debugPrefix} invoking — inputKeys=${input && typeof input === 'object' ? Object.keys(input as object).length : 0}`\n        );\n\n        const res = await client.post<ExecuteResponse>(url, {\n          input,\n          credentials,\n        });\n\n        const durationMs = Date.now() - startMs;\n\n        if (res.status < 200 || res.status >= 300) {\n          throw new HttpError(res.status, url, res.data);\n        }\n\n        const body = res.data;\n        if (onExecute) {\n          try {\n            onExecute({\n              capabilityName: capability.name,\n              input,\n              response: body,\n              durationMs,\n            });\n          } catch {\n            // hook errors are non-fatal\n          }\n        }\n\n        if (!body.success) {\n          // DEBUG\n          // eslint-disable-next-line no-console\n          console.debug(\n            `${debugPrefix} backend reported failure — ${body.error}`\n          );\n          throw new Error(body.error ?? 'Tool execution failed');\n        }\n\n        // LangChain tools typically return strings; stringify non-string results\n        if (typeof body.result === 'string') {\n          return body.result;\n        }\n        return JSON.stringify(body.result);\n      } catch (err) {\n        const durationMs = Date.now() - startMs;\n        const error = err instanceof Error ? err : new Error(String(err));\n        if (onExecute) {\n          try {\n            onExecute({\n              capabilityName: capability.name,\n              input,\n              error,\n              durationMs,\n            });\n          } catch {\n            // hook errors are non-fatal\n          }\n        }\n        throw error;\n      }\n    },\n    {\n      name: capability.name,\n      description: capability.description,\n      schema: (capability.schema as object) ?? {\n        type: 'object',\n        properties: {},\n      },\n      responseFormat: 'content',\n    }\n  );\n}\n"],"names":["tool","HttpError"],"mappings":";;;;;AAAA;;;;;;;;;;;;;AAaG;AAuCH;;;;;AAKG;SACa,cAAc,CAC5B,UAAsB,EACtB,WAA0B,EAC1B,OAAyB,EAAA;IAEzB,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,gBAAgB,EAAE,SAAS,EAAE,GAAG,OAAO;AACrE,IAAA,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAE7E,IAAA,OAAOA,UAAI,CACT,OAAO,KAAc,KAAqB;AACxC,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;AAC1B,QAAA,MAAM,WAAW,GAAG,CAAA,WAAA,EAAc,UAAU,CAAC,IAAI,GAAG;AAEpD,QAAA,IAAI;;;AAGF,YAAA,OAAO,CAAC,KAAK,CACX,CAAA,EAAG,WAAW,CAAA,sBAAA,EAAyB,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA,CAAE,CACtH;YAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAkB,GAAG,EAAE;gBAClD,KAAK;gBACL,WAAW;AACZ,aAAA,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;AAEvC,YAAA,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE;AACzC,gBAAA,MAAM,IAAIC,oBAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC;YAChD;AAEA,YAAA,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI;YACrB,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI;AACF,oBAAA,SAAS,CAAC;wBACR,cAAc,EAAE,UAAU,CAAC,IAAI;wBAC/B,KAAK;AACL,wBAAA,QAAQ,EAAE,IAAI;wBACd,UAAU;AACX,qBAAA,CAAC;gBACJ;AAAE,gBAAA,MAAM;;gBAER;YACF;AAEA,YAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;;;gBAGjB,OAAO,CAAC,KAAK,CACX,CAAA,EAAG,WAAW,CAAA,4BAAA,EAA+B,IAAI,CAAC,KAAK,CAAA,CAAE,CAC1D;gBACD,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,uBAAuB,CAAC;YACxD;;AAGA,YAAA,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE;gBACnC,OAAO,IAAI,CAAC,MAAM;YACpB;YACA,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QACpC;QAAE,OAAO,GAAG,EAAE;YACZ,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YACvC,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI;AACF,oBAAA,SAAS,CAAC;wBACR,cAAc,EAAE,UAAU,CAAC,IAAI;wBAC/B,KAAK;wBACL,KAAK;wBACL,UAAU;AACX,qBAAA,CAAC;gBACJ;AAAE,gBAAA,MAAM;;gBAER;YACF;AACA,YAAA,MAAM,KAAK;QACb;AACF,IAAA,CAAC,EACD;QACE,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,WAAW,EAAE,UAAU,CAAC,WAAW;AACnC,QAAA,MAAM,EAAG,UAAU,CAAC,MAAiB,IAAI;AACvC,YAAA,IAAI,EAAE,QAAQ;AACd,YAAA,UAAU,EAAE,EAAE;AACf,SAAA;AACD,QAAA,cAAc,EAAE,SAAS;AAC1B,KAAA,CACF;AACH;;;;"}
+{"version":3,"file":"proxyTool.cjs","sources":["../../../src/tools/proxyTool.ts"],"sourcesContent":["/**\n * proxyTool — wraps a Capability into a LangChain StructuredTool that\n * dispatches execution to a remote backend (e.g., tools-server) over HTTP.\n *\n * The LLM sees this tool identically to a locally-implemented tool:\n *   - same name\n *   - same description\n *   - same input schema (JSON Schema)\n *   - same invoke(input) contract\n *\n * Under the hood, invoke() POSTs to the backend's execute endpoint with\n * the input and a caller-supplied credential map. The backend returns\n * { success, result, error, timing } which this wrapper unpacks.\n */\n\nimport type { AxiosInstance } from 'axios';\nimport { tool, type StructuredToolInterface } from '@langchain/core/tools';\nimport type { Capability, CredentialMap } from '@/providers/types';\nimport { HttpError } from '@/utils/httpClient';\n\n/** Shape of the backend's execute response. Matches tools-server. */\nexport interface ExecuteResponse {\n  success: boolean;\n  result?: unknown;\n  error?: string;\n  timing?: { durationMs: number };\n}\n\n/** Options passed to buildProxyTool. */\nexport interface ProxyToolOptions {\n  /** HTTP client configured with backend base URL + auth. */\n  client: AxiosInstance;\n  /**\n   * Path template for execution. The literal `:name` is replaced with the\n   * capability's name. Defaults to `/execute/:name` (tools-server convention).\n   */\n  executePath?: string;\n  /**\n   * Optional callback invoked on every execution — used for metrics,\n   * telemetry, debug logging. Errors in the hook are swallowed.\n   */\n  onExecute?: (ctx: ExecuteCallbackContext) => void;\n  /**\n   * Optional per-invocation auth header builder. Called on every tool\n   * invocation before POSTing; returned headers are merged into the\n   * request alongside the base client's headers. Typical use: pass a\n   * freshly minted per-user JWT for admin-gated tools.\n   */\n  getAuthHeaders?: () =>\n    | Record<string, string>\n    | Promise<Record<string, string>>;\n}\n\nexport interface ExecuteCallbackContext {\n  capabilityName: string;\n  input: unknown;\n  response?: ExecuteResponse;\n  error?: Error;\n  durationMs: number;\n}\n\n/**\n * Build a StructuredTool that proxies to a remote backend.\n *\n * The credentialMap is baked into the closure — callers that need\n * per-invocation credential rotation should rebuild the tool.\n */\nexport function buildProxyTool(\n  capability: Capability,\n  credentials: CredentialMap,\n  options: ProxyToolOptions\n): StructuredToolInterface {\n  const {\n    client,\n    executePath = '/execute/:name',\n    onExecute,\n    getAuthHeaders,\n  } = options;\n  const url = executePath.replace(':name', encodeURIComponent(capability.name));\n\n  return tool(\n    async (input: unknown): Promise<string> => {\n      const startMs = Date.now();\n      const debugPrefix = `[proxyTool:${capability.name}]`;\n\n      try {\n        // DEBUG: log (remove after POC stabilizes)\n        // eslint-disable-next-line no-console\n        console.debug(\n          `${debugPrefix} invoking — inputKeys=${input && typeof input === 'object' ? Object.keys(input as object).length : 0}`\n        );\n\n        const extraHeaders = getAuthHeaders\n          ? await getAuthHeaders()\n          : undefined;\n        const res = await client.post<ExecuteResponse>(\n          url,\n          { input, credentials },\n          extraHeaders && Object.keys(extraHeaders).length > 0\n            ? { headers: extraHeaders }\n            : undefined,\n        );\n\n        const durationMs = Date.now() - startMs;\n\n        if (res.status < 200 || res.status >= 300) {\n          throw new HttpError(res.status, url, res.data);\n        }\n\n        const body = res.data;\n        if (onExecute) {\n          try {\n            onExecute({\n              capabilityName: capability.name,\n              input,\n              response: body,\n              durationMs,\n            });\n          } catch {\n            // hook errors are non-fatal\n          }\n        }\n\n        if (!body.success) {\n          // DEBUG\n          // eslint-disable-next-line no-console\n          console.debug(\n            `${debugPrefix} backend reported failure — ${body.error}`\n          );\n          throw new Error(body.error ?? 'Tool execution failed');\n        }\n\n        // LangChain tools typically return strings; stringify non-string results\n        if (typeof body.result === 'string') {\n          return body.result;\n        }\n        return JSON.stringify(body.result);\n      } catch (err) {\n        const durationMs = Date.now() - startMs;\n        const error = err instanceof Error ? err : new Error(String(err));\n        if (onExecute) {\n          try {\n            onExecute({\n              capabilityName: capability.name,\n              input,\n              error,\n              durationMs,\n            });\n          } catch {\n            // hook errors are non-fatal\n          }\n        }\n        throw error;\n      }\n    },\n    {\n      name: capability.name,\n      description: capability.description,\n      schema: (capability.schema as object) ?? {\n        type: 'object',\n        properties: {},\n      },\n      responseFormat: 'content',\n    }\n  );\n}\n"],"names":["tool","HttpError"],"mappings":";;;;;AAAA;;;;;;;;;;;;;AAaG;AAgDH;;;;;AAKG;SACa,cAAc,CAC5B,UAAsB,EACtB,WAA0B,EAC1B,OAAyB,EAAA;AAEzB,IAAA,MAAM,EACJ,MAAM,EACN,WAAW,GAAG,gBAAgB,EAC9B,SAAS,EACT,cAAc,GACf,GAAG,OAAO;AACX,IAAA,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAE7E,IAAA,OAAOA,UAAI,CACT,OAAO,KAAc,KAAqB;AACxC,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;AAC1B,QAAA,MAAM,WAAW,GAAG,CAAA,WAAA,EAAc,UAAU,CAAC,IAAI,GAAG;AAEpD,QAAA,IAAI;;;AAGF,YAAA,OAAO,CAAC,KAAK,CACX,CAAA,EAAG,WAAW,CAAA,sBAAA,EAAyB,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA,CAAE,CACtH;YAED,MAAM,YAAY,GAAG;kBACjB,MAAM,cAAc;kBACpB,SAAS;YACb,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,GAAG,EACH,EAAE,KAAK,EAAE,WAAW,EAAE,EACtB,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG;AACjD,kBAAE,EAAE,OAAO,EAAE,YAAY;kBACvB,SAAS,CACd;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;AAEvC,YAAA,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE;AACzC,gBAAA,MAAM,IAAIC,oBAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC;YAChD;AAEA,YAAA,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI;YACrB,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI;AACF,oBAAA,SAAS,CAAC;wBACR,cAAc,EAAE,UAAU,CAAC,IAAI;wBAC/B,KAAK;AACL,wBAAA,QAAQ,EAAE,IAAI;wBACd,UAAU;AACX,qBAAA,CAAC;gBACJ;AAAE,gBAAA,MAAM;;gBAER;YACF;AAEA,YAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;;;gBAGjB,OAAO,CAAC,KAAK,CACX,CAAA,EAAG,WAAW,CAAA,4BAAA,EAA+B,IAAI,CAAC,KAAK,CAAA,CAAE,CAC1D;gBACD,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,uBAAuB,CAAC;YACxD;;AAGA,YAAA,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE;gBACnC,OAAO,IAAI,CAAC,MAAM;YACpB;YACA,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QACpC;QAAE,OAAO,GAAG,EAAE;YACZ,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YACvC,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI;AACF,oBAAA,SAAS,CAAC;wBACR,cAAc,EAAE,UAAU,CAAC,IAAI;wBAC/B,KAAK;wBACL,KAAK;wBACL,UAAU;AACX,qBAAA,CAAC;gBACJ;AAAE,gBAAA,MAAM;;gBAER;YACF;AACA,YAAA,MAAM,KAAK;QACb;AACF,IAAA,CAAC,EACD;QACE,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,WAAW,EAAE,UAAU,CAAC,WAAW;AACnC,QAAA,MAAM,EAAG,UAAU,CAAC,MAAiB,IAAI;AACvC,YAAA,IAAI,EAAE,QAAQ;AACd,YAAA,UAAU,EAAE,EAAE;AACf,SAAA;AACD,QAAA,cAAc,EAAE,SAAS;AAC1B,KAAA,CACF;AACH;;;;"}

package/dist/esm/providers/tools-server/ToolsServerCapabilityProvider.mjs

@@ -20,9 +20,10 @@ class ToolsServerCapabilityProvider {
     manifestPath;
     executePath;
     cache;
+    getExecuteAuthHeaders;
     constructor(config) {
         this.config = config;
-        const { baseUrl, apiKey, manifestPath = '/manifest', executePath = '/execute/:name', timeoutMs = 30_000, manifestTtlMs = 60_000, client, proxy, } = config;
+        const { baseUrl, apiKey, manifestPath = '/manifest', executePath = '/execute/:name', timeoutMs = 30_000, manifestTtlMs = 60_000, client, proxy, getExecuteAuthHeaders, } = config;
         if (!baseUrl) {
             throw new Error('ToolsServerCapabilityProvider: baseUrl is required');
         }
@@ -33,6 +34,7 @@ class ToolsServerCapabilityProvider {
         this.manifestPath = manifestPath;
         this.executePath = executePath;
         this.cache = new ManifestCache({ ttlMs: manifestTtlMs });
+        this.getExecuteAuthHeaders = getExecuteAuthHeaders;
         if (client) {
             this.client = client;
         }
@@ -79,6 +81,7 @@ class ToolsServerCapabilityProvider {
         return capabilities.map((cap) => buildProxyTool(cap, credentials, {
             client: this.client,
             executePath: this.executePath,
+            getAuthHeaders: this.getExecuteAuthHeaders,
         }));
     }
     /** Force a manifest refresh on next fetchManifest call. */

package/dist/esm/providers/tools-server/ToolsServerCapabilityProvider.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ToolsServerCapabilityProvider.mjs","sources":["../../../../src/providers/tools-server/ToolsServerCapabilityProvider.ts"],"sourcesContent":["/**\n * ToolsServerCapabilityProvider — capabilities sourced from a tools-server\n * HTTP endpoint.\n *\n * Fetches the manifest via GET /manifest, builds proxy StructuredTools via\n * POST /execute/:tool. Manifest is cached (TTL-configurable) so repeated\n * init cycles don't refetch.\n *\n * See docs/architecture-capability-layer.md for the design rationale.\n */\n\nimport type { AxiosInstance } from 'axios';\nimport type { StructuredToolInterface } from '@langchain/core/tools';\nimport {\n  CapabilityKind,\n  type Capability,\n  type CapabilityFilter,\n  type CapabilityProvider,\n  type CredentialMap,\n} from '@/providers/types';\nimport {\n  createHttpClient,\n  type HttpClientConfig,\n  assertOk,\n} from '@/utils/httpClient';\nimport {\n  ManifestCache,\n  filterToCacheKey,\n  applyFilter,\n} from '@/utils/toolManifest';\nimport { buildProxyTool } from '@/tools/proxyTool';\n\n/** Configuration for ToolsServerCapabilityProvider. */\nexport interface ToolsServerConfig {\n  /** Tools-server base URL (e.g., https://tools.illuma.ai or http://localhost:3500). */\n  baseUrl: string;\n  /** API key sent as x-api-key header on all requests. Required. */\n  apiKey: string;\n  /** Optional override for manifest path. Defaults to `/manifest`. */\n  manifestPath?: string;\n  /** Optional override for execute path template. Defaults to `/execute/:name`. */\n  executePath?: string;\n  /** Request timeout in ms. Defaults to 30_000. */\n  timeoutMs?: number;\n  /** Manifest cache TTL in ms. 0 disables. Defaults to 60_000 (1 min). */\n  manifestTtlMs?: number;\n  /** Optional pre-built axios instance (for testing). */\n  client?: AxiosInstance;\n  /** Optional proxy override (defaults to process.env.PROXY). */\n  proxy?: string | null;\n}\n\n/**\n * Shape of a single entry from tools-server's /manifest response.\n *\n * Matches the tools-server ManifestToolEntry type. We define our own here\n * to avoid cross-package coupling — the shape is a stable HTTP contract.\n */\ninterface ToolsServerManifestEntry {\n  pluginKey: string;\n  name: string;\n  description: string;\n  icon?: string;\n  authConfig?: Array<{\n    authField: string;\n    label?: string;\n    description?: string;\n    source?: string;\n    required?: boolean;\n    prod?: boolean;\n    admin?: boolean;\n    hide?: boolean;\n  }>;\n  /** Input schema as JSON Schema (tools-server emits `schema`). */\n  schema?: unknown;\n  /** Legacy alias accepted for backwards compatibility. */\n  jsonSchema?: unknown;\n  category?: string;\n  tags?: string[];\n  toolkit?: string;\n  endpoint?: string;\n  /** Governance flags forwarded by tools-server getManifest(). */\n  hidden?: boolean;\n  admin?: boolean;\n  env?: Array<'development' | 'production' | 'test' | 'staging'>;\n}\n\nexport class ToolsServerCapabilityProvider implements CapabilityProvider {\n  readonly providerId: string;\n  private readonly client: AxiosInstance;\n  private readonly manifestPath: string;\n  private readonly executePath: string;\n  private readonly cache: ManifestCache;\n\n  constructor(private readonly config: ToolsServerConfig) {\n    const {\n      baseUrl,\n      apiKey,\n      manifestPath = '/manifest',\n      executePath = '/execute/:name',\n      timeoutMs = 30_000,\n      manifestTtlMs = 60_000,\n      client,\n      proxy,\n    } = config;\n\n    if (!baseUrl) {\n      throw new Error('ToolsServerCapabilityProvider: baseUrl is required');\n    }\n    if (!apiKey) {\n      throw new Error('ToolsServerCapabilityProvider: apiKey is required');\n    }\n\n    this.providerId = `tools-server:${baseUrl}`;\n    this.manifestPath = manifestPath;\n    this.executePath = executePath;\n    this.cache = new ManifestCache({ ttlMs: manifestTtlMs });\n\n    if (client) {\n      this.client = client;\n    } else {\n      const httpConfig: HttpClientConfig = {\n        baseURL: baseUrl,\n        apiKey,\n        timeoutMs,\n        proxy,\n      };\n      this.client = createHttpClient(httpConfig);\n    }\n  }\n\n  async fetchManifest(filter?: CapabilityFilter): Promise<Capability[]> {\n    const cacheKey = filterToCacheKey(filter);\n    const cached = this.cache.get(cacheKey);\n    if (cached) {\n      // DEBUG: cache hit (remove after stabilization)\n      // eslint-disable-next-line no-console\n      console.debug(\n        `[${this.providerId}] manifest cache hit — ${cached.length} caps`\n      );\n      return cached;\n    }\n\n    // DEBUG\n    // eslint-disable-next-line no-console\n    console.debug(\n      `[${this.providerId}] fetching manifest from ${this.manifestPath}`\n    );\n\n    const res = await this.client.get<ToolsServerManifestEntry[]>(\n      this.manifestPath\n    );\n    assertOk(res.status, this.manifestPath, res.data);\n\n    const entries = Array.isArray(res.data) ? res.data : [];\n    const capabilities: Capability[] = entries.map((entry) =>\n      normalizeEntry(entry)\n    );\n\n    // Apply filter before caching the full list separately so unfiltered\n    // refetches don't re-hit the network.\n    const fullCacheKey = filterToCacheKey();\n    this.cache.set(fullCacheKey, capabilities);\n\n    const filtered = applyFilter(capabilities, filter);\n    if (cacheKey !== fullCacheKey) {\n      this.cache.set(cacheKey, filtered);\n    }\n\n    // DEBUG\n    // eslint-disable-next-line no-console\n    console.debug(\n      `[${this.providerId}] manifest loaded — ${capabilities.length} caps, ${filtered.length} after filter`\n    );\n\n    return filtered;\n  }\n\n  async createRunnables(\n    capabilities: Capability[],\n    credentials: CredentialMap\n  ): Promise<StructuredToolInterface[]> {\n    return capabilities.map((cap) =>\n      buildProxyTool(cap, credentials, {\n        client: this.client,\n        executePath: this.executePath,\n      })\n    );\n  }\n\n  /** Force a manifest refresh on next fetchManifest call. */\n  invalidateCache(): void {\n    this.cache.clear();\n  }\n}\n\n/**\n * Translate a raw tools-server manifest entry into a typed Capability.\n * Defensive — tools-server may add fields; we pull only what we need.\n */\nfunction normalizeEntry(entry: ToolsServerManifestEntry): Capability {\n  return {\n    kind: CapabilityKind.TOOL,\n    name: entry.pluginKey,\n    description: entry.description ?? '',\n    schema: entry.schema ?? entry.jsonSchema,\n    authConfig: (entry.authConfig ?? []).map((ac) => ({\n      authField: ac.authField,\n      label: ac.label,\n      description: ac.description,\n      required: ac.required,\n      prod: ac.prod,\n      admin: ac.admin,\n      hide: ac.hide,\n      // Source is a string in wire format; downstream consumers coerce to AuthSource.\n      source: ac.source as Capability['authConfig'][number]['source'],\n    })),\n    metadata: {\n      icon: entry.icon,\n      category: entry.category,\n      tags: entry.tags,\n      // Governance — hosts use these to gate UI/role/environment.\n      hidden: entry.hidden,\n      admin: entry.admin,\n      env: entry.env,\n    },\n  };\n}\n"],"names":[],"mappings":";;;;;AAAA;;;;;;;;;AASG;MA8EU,6BAA6B,CAAA;AAOX,IAAA,MAAA;AANpB,IAAA,UAAU;AACF,IAAA,MAAM;AACN,IAAA,YAAY;AACZ,IAAA,WAAW;AACX,IAAA,KAAK;AAEtB,IAAA,WAAA,CAA6B,MAAyB,EAAA;QAAzB,IAAA,CAAA,MAAM,GAAN,MAAM;QACjC,MAAM,EACJ,OAAO,EACP,MAAM,EACN,YAAY,GAAG,WAAW,EAC1B,WAAW,GAAG,gBAAgB,EAC9B,SAAS,GAAG,MAAM,EAClB,aAAa,GAAG,MAAM,EACtB,MAAM,EACN,KAAK,GACN,GAAG,MAAM;QAEV,IAAI,CAAC,OAAO,EAAE;AACZ,YAAA,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;QACvE;QACA,IAAI,CAAC,MAAM,EAAE;AACX,YAAA,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC;QACtE;AAEA,QAAA,IAAI,CAAC,UAAU,GAAG,CAAA,aAAA,EAAgB,OAAO,EAAE;AAC3C,QAAA,IAAI,CAAC,YAAY,GAAG,YAAY;AAChC,QAAA,IAAI,CAAC,WAAW,GAAG,WAAW;AAC9B,QAAA,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAExD,IAAI,MAAM,EAAE;AACV,YAAA,IAAI,CAAC,MAAM,GAAG,MAAM;QACtB;aAAO;AACL,YAAA,MAAM,UAAU,GAAqB;AACnC,gBAAA,OAAO,EAAE,OAAO;gBAChB,MAAM;gBACN,SAAS;gBACT,KAAK;aACN;AACD,YAAA,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC;QAC5C;IACF;IAEA,MAAM,aAAa,CAAC,MAAyB,EAAA;AAC3C,QAAA,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvC,IAAI,MAAM,EAAE;;;AAGV,YAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,uBAAA,EAA0B,MAAM,CAAC,MAAM,CAAA,KAAA,CAAO,CAClE;AACD,YAAA,OAAO,MAAM;QACf;;;AAIA,QAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,yBAAA,EAA4B,IAAI,CAAC,YAAY,CAAA,CAAE,CACnE;AAED,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAC/B,IAAI,CAAC,YAAY,CAClB;AACD,QAAA,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC;QAEjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,EAAE;AACvD,QAAA,MAAM,YAAY,GAAiB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,KACnD,cAAc,CAAC,KAAK,CAAC,CACtB;;;AAID,QAAA,MAAM,YAAY,GAAG,gBAAgB,EAAE;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;QAE1C,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC;AAClD,QAAA,IAAI,QAAQ,KAAK,YAAY,EAAE;YAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpC;;;AAIA,QAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,oBAAA,EAAuB,YAAY,CAAC,MAAM,CAAA,OAAA,EAAU,QAAQ,CAAC,MAAM,CAAA,aAAA,CAAe,CACtG;AAED,QAAA,OAAO,QAAQ;IACjB;AAEA,IAAA,MAAM,eAAe,CACnB,YAA0B,EAC1B,WAA0B,EAAA;AAE1B,QAAA,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,KAC1B,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;AAC9B,SAAA,CAAC,CACH;IACH;;IAGA,eAAe,GAAA;AACb,QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;IACpB;AACD;AAED;;;AAGG;AACH,SAAS,cAAc,CAAC,KAA+B,EAAA;IACrD,OAAO;QACL,IAAI,EAAE,cAAc,CAAC,IAAI;QACzB,IAAI,EAAE,KAAK,CAAC,SAAS;AACrB,QAAA,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;AACpC,QAAA,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU;AACxC,QAAA,UAAU,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM;YAChD,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,IAAI,EAAE,EAAE,CAAC,IAAI;;YAEb,MAAM,EAAE,EAAE,CAAC,MAAoD;AAChE,SAAA,CAAC,CAAC;AACH,QAAA,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;;YAEhB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;AACf,SAAA;KACF;AACH;;;;"}
+{"version":3,"file":"ToolsServerCapabilityProvider.mjs","sources":["../../../../src/providers/tools-server/ToolsServerCapabilityProvider.ts"],"sourcesContent":["/**\n * ToolsServerCapabilityProvider — capabilities sourced from a tools-server\n * HTTP endpoint.\n *\n * Fetches the manifest via GET /manifest, builds proxy StructuredTools via\n * POST /execute/:tool. Manifest is cached (TTL-configurable) so repeated\n * init cycles don't refetch.\n *\n * See docs/architecture-capability-layer.md for the design rationale.\n */\n\nimport type { AxiosInstance } from 'axios';\nimport type { StructuredToolInterface } from '@langchain/core/tools';\nimport {\n  CapabilityKind,\n  type Capability,\n  type CapabilityFilter,\n  type CapabilityProvider,\n  type CredentialMap,\n} from '@/providers/types';\nimport {\n  createHttpClient,\n  type HttpClientConfig,\n  assertOk,\n} from '@/utils/httpClient';\nimport {\n  ManifestCache,\n  filterToCacheKey,\n  applyFilter,\n} from '@/utils/toolManifest';\nimport { buildProxyTool } from '@/tools/proxyTool';\n\n/** Configuration for ToolsServerCapabilityProvider. */\nexport interface ToolsServerConfig {\n  /** Tools-server base URL (e.g., https://tools.illuma.ai or http://localhost:3500). */\n  baseUrl: string;\n  /** API key sent as x-api-key header on all requests. Required. */\n  apiKey: string;\n  /** Optional override for manifest path. Defaults to `/manifest`. */\n  manifestPath?: string;\n  /** Optional override for execute path template. Defaults to `/execute/:name`. */\n  executePath?: string;\n  /** Request timeout in ms. Defaults to 30_000. */\n  timeoutMs?: number;\n  /** Manifest cache TTL in ms. 0 disables. Defaults to 60_000 (1 min). */\n  manifestTtlMs?: number;\n  /** Optional pre-built axios instance (for testing). */\n  client?: AxiosInstance;\n  /** Optional proxy override (defaults to process.env.PROXY). */\n  proxy?: string | null;\n  /**\n   * Optional per-request auth header builder — invoked on every tool\n   * invocation (NOT on the manifest fetch, which is service-to-service).\n   * When provided, the returned headers are merged into the `/execute`\n   * request so the host can pass user-scoped identity (e.g.,\n   * `Authorization: Bearer <jwt>`) that tools-server verifies for\n   * admin-gated tools.\n   *\n   * Typical host wiring: mint a short-lived JWT per call carrying the\n   * authenticated user's `{ userId, role }` claims; tools-server's\n   * `TOOLS_SERVER_JWT_SECRET` validates.\n   */\n  getExecuteAuthHeaders?: () =>\n    | Record<string, string>\n    | Promise<Record<string, string>>;\n}\n\n/**\n * Shape of a single entry from tools-server's /manifest response.\n *\n * Matches the tools-server ManifestToolEntry type. We define our own here\n * to avoid cross-package coupling — the shape is a stable HTTP contract.\n */\ninterface ToolsServerManifestEntry {\n  pluginKey: string;\n  name: string;\n  description: string;\n  icon?: string;\n  authConfig?: Array<{\n    authField: string;\n    label?: string;\n    description?: string;\n    source?: string;\n    required?: boolean;\n    prod?: boolean;\n    admin?: boolean;\n    hide?: boolean;\n  }>;\n  /** Input schema as JSON Schema (tools-server emits `schema`). */\n  schema?: unknown;\n  /** Legacy alias accepted for backwards compatibility. */\n  jsonSchema?: unknown;\n  category?: string;\n  tags?: string[];\n  toolkit?: string;\n  endpoint?: string;\n  /** Governance flags forwarded by tools-server getManifest(). */\n  hidden?: boolean;\n  admin?: boolean;\n  env?: Array<'development' | 'production' | 'test' | 'staging'>;\n}\n\nexport class ToolsServerCapabilityProvider implements CapabilityProvider {\n  readonly providerId: string;\n  private readonly client: AxiosInstance;\n  private readonly manifestPath: string;\n  private readonly executePath: string;\n  private readonly cache: ManifestCache;\n  private readonly getExecuteAuthHeaders?:\n    | (() => Record<string, string> | Promise<Record<string, string>>);\n\n  constructor(private readonly config: ToolsServerConfig) {\n    const {\n      baseUrl,\n      apiKey,\n      manifestPath = '/manifest',\n      executePath = '/execute/:name',\n      timeoutMs = 30_000,\n      manifestTtlMs = 60_000,\n      client,\n      proxy,\n      getExecuteAuthHeaders,\n    } = config;\n\n    if (!baseUrl) {\n      throw new Error('ToolsServerCapabilityProvider: baseUrl is required');\n    }\n    if (!apiKey) {\n      throw new Error('ToolsServerCapabilityProvider: apiKey is required');\n    }\n\n    this.providerId = `tools-server:${baseUrl}`;\n    this.manifestPath = manifestPath;\n    this.executePath = executePath;\n    this.cache = new ManifestCache({ ttlMs: manifestTtlMs });\n    this.getExecuteAuthHeaders = getExecuteAuthHeaders;\n\n    if (client) {\n      this.client = client;\n    } else {\n      const httpConfig: HttpClientConfig = {\n        baseURL: baseUrl,\n        apiKey,\n        timeoutMs,\n        proxy,\n      };\n      this.client = createHttpClient(httpConfig);\n    }\n  }\n\n  async fetchManifest(filter?: CapabilityFilter): Promise<Capability[]> {\n    const cacheKey = filterToCacheKey(filter);\n    const cached = this.cache.get(cacheKey);\n    if (cached) {\n      // DEBUG: cache hit (remove after stabilization)\n      // eslint-disable-next-line no-console\n      console.debug(\n        `[${this.providerId}] manifest cache hit — ${cached.length} caps`\n      );\n      return cached;\n    }\n\n    // DEBUG\n    // eslint-disable-next-line no-console\n    console.debug(\n      `[${this.providerId}] fetching manifest from ${this.manifestPath}`\n    );\n\n    const res = await this.client.get<ToolsServerManifestEntry[]>(\n      this.manifestPath\n    );\n    assertOk(res.status, this.manifestPath, res.data);\n\n    const entries = Array.isArray(res.data) ? res.data : [];\n    const capabilities: Capability[] = entries.map((entry) =>\n      normalizeEntry(entry)\n    );\n\n    // Apply filter before caching the full list separately so unfiltered\n    // refetches don't re-hit the network.\n    const fullCacheKey = filterToCacheKey();\n    this.cache.set(fullCacheKey, capabilities);\n\n    const filtered = applyFilter(capabilities, filter);\n    if (cacheKey !== fullCacheKey) {\n      this.cache.set(cacheKey, filtered);\n    }\n\n    // DEBUG\n    // eslint-disable-next-line no-console\n    console.debug(\n      `[${this.providerId}] manifest loaded — ${capabilities.length} caps, ${filtered.length} after filter`\n    );\n\n    return filtered;\n  }\n\n  async createRunnables(\n    capabilities: Capability[],\n    credentials: CredentialMap\n  ): Promise<StructuredToolInterface[]> {\n    return capabilities.map((cap) =>\n      buildProxyTool(cap, credentials, {\n        client: this.client,\n        executePath: this.executePath,\n        getAuthHeaders: this.getExecuteAuthHeaders,\n      })\n    );\n  }\n\n  /** Force a manifest refresh on next fetchManifest call. */\n  invalidateCache(): void {\n    this.cache.clear();\n  }\n}\n\n/**\n * Translate a raw tools-server manifest entry into a typed Capability.\n * Defensive — tools-server may add fields; we pull only what we need.\n */\nfunction normalizeEntry(entry: ToolsServerManifestEntry): Capability {\n  return {\n    kind: CapabilityKind.TOOL,\n    name: entry.pluginKey,\n    description: entry.description ?? '',\n    schema: entry.schema ?? entry.jsonSchema,\n    authConfig: (entry.authConfig ?? []).map((ac) => ({\n      authField: ac.authField,\n      label: ac.label,\n      description: ac.description,\n      required: ac.required,\n      prod: ac.prod,\n      admin: ac.admin,\n      hide: ac.hide,\n      // Source is a string in wire format; downstream consumers coerce to AuthSource.\n      source: ac.source as Capability['authConfig'][number]['source'],\n    })),\n    metadata: {\n      icon: entry.icon,\n      category: entry.category,\n      tags: entry.tags,\n      // Governance — hosts use these to gate UI/role/environment.\n      hidden: entry.hidden,\n      admin: entry.admin,\n      env: entry.env,\n    },\n  };\n}\n"],"names":[],"mappings":";;;;;AAAA;;;;;;;;;AASG;MA6FU,6BAA6B,CAAA;AASX,IAAA,MAAA;AARpB,IAAA,UAAU;AACF,IAAA,MAAM;AACN,IAAA,YAAY;AACZ,IAAA,WAAW;AACX,IAAA,KAAK;AACL,IAAA,qBAAqB;AAGtC,IAAA,WAAA,CAA6B,MAAyB,EAAA;QAAzB,IAAA,CAAA,MAAM,GAAN,MAAM;AACjC,QAAA,MAAM,EACJ,OAAO,EACP,MAAM,EACN,YAAY,GAAG,WAAW,EAC1B,WAAW,GAAG,gBAAgB,EAC9B,SAAS,GAAG,MAAM,EAClB,aAAa,GAAG,MAAM,EACtB,MAAM,EACN,KAAK,EACL,qBAAqB,GACtB,GAAG,MAAM;QAEV,IAAI,CAAC,OAAO,EAAE;AACZ,YAAA,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;QACvE;QACA,IAAI,CAAC,MAAM,EAAE;AACX,YAAA,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC;QACtE;AAEA,QAAA,IAAI,CAAC,UAAU,GAAG,CAAA,aAAA,EAAgB,OAAO,EAAE;AAC3C,QAAA,IAAI,CAAC,YAAY,GAAG,YAAY;AAChC,QAAA,IAAI,CAAC,WAAW,GAAG,WAAW;AAC9B,QAAA,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AACxD,QAAA,IAAI,CAAC,qBAAqB,GAAG,qBAAqB;QAElD,IAAI,MAAM,EAAE;AACV,YAAA,IAAI,CAAC,MAAM,GAAG,MAAM;QACtB;aAAO;AACL,YAAA,MAAM,UAAU,GAAqB;AACnC,gBAAA,OAAO,EAAE,OAAO;gBAChB,MAAM;gBACN,SAAS;gBACT,KAAK;aACN;AACD,YAAA,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC;QAC5C;IACF;IAEA,MAAM,aAAa,CAAC,MAAyB,EAAA;AAC3C,QAAA,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvC,IAAI,MAAM,EAAE;;;AAGV,YAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,uBAAA,EAA0B,MAAM,CAAC,MAAM,CAAA,KAAA,CAAO,CAClE;AACD,YAAA,OAAO,MAAM;QACf;;;AAIA,QAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,yBAAA,EAA4B,IAAI,CAAC,YAAY,CAAA,CAAE,CACnE;AAED,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAC/B,IAAI,CAAC,YAAY,CAClB;AACD,QAAA,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC;QAEjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,EAAE;AACvD,QAAA,MAAM,YAAY,GAAiB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,KACnD,cAAc,CAAC,KAAK,CAAC,CACtB;;;AAID,QAAA,MAAM,YAAY,GAAG,gBAAgB,EAAE;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;QAE1C,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC;AAClD,QAAA,IAAI,QAAQ,KAAK,YAAY,EAAE;YAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpC;;;AAIA,QAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,oBAAA,EAAuB,YAAY,CAAC,MAAM,CAAA,OAAA,EAAU,QAAQ,CAAC,MAAM,CAAA,aAAA,CAAe,CACtG;AAED,QAAA,OAAO,QAAQ;IACjB;AAEA,IAAA,MAAM,eAAe,CACnB,YAA0B,EAC1B,WAA0B,EAAA;AAE1B,QAAA,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,KAC1B,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,cAAc,EAAE,IAAI,CAAC,qBAAqB;AAC3C,SAAA,CAAC,CACH;IACH;;IAGA,eAAe,GAAA;AACb,QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;IACpB;AACD;AAED;;;AAGG;AACH,SAAS,cAAc,CAAC,KAA+B,EAAA;IACrD,OAAO;QACL,IAAI,EAAE,cAAc,CAAC,IAAI;QACzB,IAAI,EAAE,KAAK,CAAC,SAAS;AACrB,QAAA,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;AACpC,QAAA,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU;AACxC,QAAA,UAAU,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM;YAChD,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,IAAI,EAAE,EAAE,CAAC,IAAI;;YAEb,MAAM,EAAE,EAAE,CAAC,MAAoD;AAChE,SAAA,CAAC,CAAC;AACH,QAAA,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;;YAEhB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;AACf,SAAA;KACF;AACH;;;;"}

package/dist/esm/tools/proxyTool.mjs

@@ -22,7 +22,7 @@ import { HttpError } from '../utils/httpClient.mjs';
  * per-invocation credential rotation should rebuild the tool.
  */
 function buildProxyTool(capability, credentials, options) {
-    const { client, executePath = '/execute/:name', onExecute } = options;
+    const { client, executePath = '/execute/:name', onExecute, getAuthHeaders, } = options;
     const url = executePath.replace(':name', encodeURIComponent(capability.name));
     return tool(async (input) => {
         const startMs = Date.now();
@@ -31,10 +31,12 @@ function buildProxyTool(capability, credentials, options) {
             // DEBUG: log (remove after POC stabilizes)
             // eslint-disable-next-line no-console
             console.debug(`${debugPrefix} invoking — inputKeys=${input && typeof input === 'object' ? Object.keys(input).length : 0}`);
-            const res = await client.post(url, {
-                input,
-                credentials,
-            });
+            const extraHeaders = getAuthHeaders
+                ? await getAuthHeaders()
+                : undefined;
+            const res = await client.post(url, { input, credentials }, extraHeaders && Object.keys(extraHeaders).length > 0
+                ? { headers: extraHeaders }
+                : undefined);
             const durationMs = Date.now() - startMs;
             if (res.status < 200 || res.status >= 300) {
                 throw new HttpError(res.status, url, res.data);

package/dist/esm/tools/proxyTool.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"proxyTool.mjs","sources":["../../../src/tools/proxyTool.ts"],"sourcesContent":["/**\n * proxyTool — wraps a Capability into a LangChain StructuredTool that\n * dispatches execution to a remote backend (e.g., tools-server) over HTTP.\n *\n * The LLM sees this tool identically to a locally-implemented tool:\n *   - same name\n *   - same description\n *   - same input schema (JSON Schema)\n *   - same invoke(input) contract\n *\n * Under the hood, invoke() POSTs to the backend's execute endpoint with\n * the input and a caller-supplied credential map. The backend returns\n * { success, result, error, timing } which this wrapper unpacks.\n */\n\nimport type { AxiosInstance } from 'axios';\nimport { tool, type StructuredToolInterface } from '@langchain/core/tools';\nimport type { Capability, CredentialMap } from '@/providers/types';\nimport { HttpError } from '@/utils/httpClient';\n\n/** Shape of the backend's execute response. Matches tools-server. */\nexport interface ExecuteResponse {\n  success: boolean;\n  result?: unknown;\n  error?: string;\n  timing?: { durationMs: number };\n}\n\n/** Options passed to buildProxyTool. */\nexport interface ProxyToolOptions {\n  /** HTTP client configured with backend base URL + auth. */\n  client: AxiosInstance;\n  /**\n   * Path template for execution. The literal `:name` is replaced with the\n   * capability's name. Defaults to `/execute/:name` (tools-server convention).\n   */\n  executePath?: string;\n  /**\n   * Optional callback invoked on every execution — used for metrics,\n   * telemetry, debug logging. Errors in the hook are swallowed.\n   */\n  onExecute?: (ctx: ExecuteCallbackContext) => void;\n}\n\nexport interface ExecuteCallbackContext {\n  capabilityName: string;\n  input: unknown;\n  response?: ExecuteResponse;\n  error?: Error;\n  durationMs: number;\n}\n\n/**\n * Build a StructuredTool that proxies to a remote backend.\n *\n * The credentialMap is baked into the closure — callers that need\n * per-invocation credential rotation should rebuild the tool.\n */\nexport function buildProxyTool(\n  capability: Capability,\n  credentials: CredentialMap,\n  options: ProxyToolOptions\n): StructuredToolInterface {\n  const { client, executePath = '/execute/:name', onExecute } = options;\n  const url = executePath.replace(':name', encodeURIComponent(capability.name));\n\n  return tool(\n    async (input: unknown): Promise<string> => {\n      const startMs = Date.now();\n      const debugPrefix = `[proxyTool:${capability.name}]`;\n\n      try {\n        // DEBUG: log (remove after POC stabilizes)\n        // eslint-disable-next-line no-console\n        console.debug(\n          `${debugPrefix} invoking — inputKeys=${input && typeof input === 'object' ? Object.keys(input as object).length : 0}`\n        );\n\n        const res = await client.post<ExecuteResponse>(url, {\n          input,\n          credentials,\n        });\n\n        const durationMs = Date.now() - startMs;\n\n        if (res.status < 200 || res.status >= 300) {\n          throw new HttpError(res.status, url, res.data);\n        }\n\n        const body = res.data;\n        if (onExecute) {\n          try {\n            onExecute({\n              capabilityName: capability.name,\n              input,\n              response: body,\n              durationMs,\n            });\n          } catch {\n            // hook errors are non-fatal\n          }\n        }\n\n        if (!body.success) {\n          // DEBUG\n          // eslint-disable-next-line no-console\n          console.debug(\n            `${debugPrefix} backend reported failure — ${body.error}`\n          );\n          throw new Error(body.error ?? 'Tool execution failed');\n        }\n\n        // LangChain tools typically return strings; stringify non-string results\n        if (typeof body.result === 'string') {\n          return body.result;\n        }\n        return JSON.stringify(body.result);\n      } catch (err) {\n        const durationMs = Date.now() - startMs;\n        const error = err instanceof Error ? err : new Error(String(err));\n        if (onExecute) {\n          try {\n            onExecute({\n              capabilityName: capability.name,\n              input,\n              error,\n              durationMs,\n            });\n          } catch {\n            // hook errors are non-fatal\n          }\n        }\n        throw error;\n      }\n    },\n    {\n      name: capability.name,\n      description: capability.description,\n      schema: (capability.schema as object) ?? {\n        type: 'object',\n        properties: {},\n      },\n      responseFormat: 'content',\n    }\n  );\n}\n"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;AAaG;AAuCH;;;;;AAKG;SACa,cAAc,CAC5B,UAAsB,EACtB,WAA0B,EAC1B,OAAyB,EAAA;IAEzB,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,gBAAgB,EAAE,SAAS,EAAE,GAAG,OAAO;AACrE,IAAA,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAE7E,IAAA,OAAO,IAAI,CACT,OAAO,KAAc,KAAqB;AACxC,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;AAC1B,QAAA,MAAM,WAAW,GAAG,CAAA,WAAA,EAAc,UAAU,CAAC,IAAI,GAAG;AAEpD,QAAA,IAAI;;;AAGF,YAAA,OAAO,CAAC,KAAK,CACX,CAAA,EAAG,WAAW,CAAA,sBAAA,EAAyB,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA,CAAE,CACtH;YAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAkB,GAAG,EAAE;gBAClD,KAAK;gBACL,WAAW;AACZ,aAAA,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;AAEvC,YAAA,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE;AACzC,gBAAA,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC;YAChD;AAEA,YAAA,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI;YACrB,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI;AACF,oBAAA,SAAS,CAAC;wBACR,cAAc,EAAE,UAAU,CAAC,IAAI;wBAC/B,KAAK;AACL,wBAAA,QAAQ,EAAE,IAAI;wBACd,UAAU;AACX,qBAAA,CAAC;gBACJ;AAAE,gBAAA,MAAM;;gBAER;YACF;AAEA,YAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;;;gBAGjB,OAAO,CAAC,KAAK,CACX,CAAA,EAAG,WAAW,CAAA,4BAAA,EAA+B,IAAI,CAAC,KAAK,CAAA,CAAE,CAC1D;gBACD,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,uBAAuB,CAAC;YACxD;;AAGA,YAAA,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE;gBACnC,OAAO,IAAI,CAAC,MAAM;YACpB;YACA,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QACpC;QAAE,OAAO,GAAG,EAAE;YACZ,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YACvC,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI;AACF,oBAAA,SAAS,CAAC;wBACR,cAAc,EAAE,UAAU,CAAC,IAAI;wBAC/B,KAAK;wBACL,KAAK;wBACL,UAAU;AACX,qBAAA,CAAC;gBACJ;AAAE,gBAAA,MAAM;;gBAER;YACF;AACA,YAAA,MAAM,KAAK;QACb;AACF,IAAA,CAAC,EACD;QACE,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,WAAW,EAAE,UAAU,CAAC,WAAW;AACnC,QAAA,MAAM,EAAG,UAAU,CAAC,MAAiB,IAAI;AACvC,YAAA,IAAI,EAAE,QAAQ;AACd,YAAA,UAAU,EAAE,EAAE;AACf,SAAA;AACD,QAAA,cAAc,EAAE,SAAS;AAC1B,KAAA,CACF;AACH;;;;"}
+{"version":3,"file":"proxyTool.mjs","sources":["../../../src/tools/proxyTool.ts"],"sourcesContent":["/**\n * proxyTool — wraps a Capability into a LangChain StructuredTool that\n * dispatches execution to a remote backend (e.g., tools-server) over HTTP.\n *\n * The LLM sees this tool identically to a locally-implemented tool:\n *   - same name\n *   - same description\n *   - same input schema (JSON Schema)\n *   - same invoke(input) contract\n *\n * Under the hood, invoke() POSTs to the backend's execute endpoint with\n * the input and a caller-supplied credential map. The backend returns\n * { success, result, error, timing } which this wrapper unpacks.\n */\n\nimport type { AxiosInstance } from 'axios';\nimport { tool, type StructuredToolInterface } from '@langchain/core/tools';\nimport type { Capability, CredentialMap } from '@/providers/types';\nimport { HttpError } from '@/utils/httpClient';\n\n/** Shape of the backend's execute response. Matches tools-server. */\nexport interface ExecuteResponse {\n  success: boolean;\n  result?: unknown;\n  error?: string;\n  timing?: { durationMs: number };\n}\n\n/** Options passed to buildProxyTool. */\nexport interface ProxyToolOptions {\n  /** HTTP client configured with backend base URL + auth. */\n  client: AxiosInstance;\n  /**\n   * Path template for execution. The literal `:name` is replaced with the\n   * capability's name. Defaults to `/execute/:name` (tools-server convention).\n   */\n  executePath?: string;\n  /**\n   * Optional callback invoked on every execution — used for metrics,\n   * telemetry, debug logging. Errors in the hook are swallowed.\n   */\n  onExecute?: (ctx: ExecuteCallbackContext) => void;\n  /**\n   * Optional per-invocation auth header builder. Called on every tool\n   * invocation before POSTing; returned headers are merged into the\n   * request alongside the base client's headers. Typical use: pass a\n   * freshly minted per-user JWT for admin-gated tools.\n   */\n  getAuthHeaders?: () =>\n    | Record<string, string>\n    | Promise<Record<string, string>>;\n}\n\nexport interface ExecuteCallbackContext {\n  capabilityName: string;\n  input: unknown;\n  response?: ExecuteResponse;\n  error?: Error;\n  durationMs: number;\n}\n\n/**\n * Build a StructuredTool that proxies to a remote backend.\n *\n * The credentialMap is baked into the closure — callers that need\n * per-invocation credential rotation should rebuild the tool.\n */\nexport function buildProxyTool(\n  capability: Capability,\n  credentials: CredentialMap,\n  options: ProxyToolOptions\n): StructuredToolInterface {\n  const {\n    client,\n    executePath = '/execute/:name',\n    onExecute,\n    getAuthHeaders,\n  } = options;\n  const url = executePath.replace(':name', encodeURIComponent(capability.name));\n\n  return tool(\n    async (input: unknown): Promise<string> => {\n      const startMs = Date.now();\n      const debugPrefix = `[proxyTool:${capability.name}]`;\n\n      try {\n        // DEBUG: log (remove after POC stabilizes)\n        // eslint-disable-next-line no-console\n        console.debug(\n          `${debugPrefix} invoking — inputKeys=${input && typeof input === 'object' ? Object.keys(input as object).length : 0}`\n        );\n\n        const extraHeaders = getAuthHeaders\n          ? await getAuthHeaders()\n          : undefined;\n        const res = await client.post<ExecuteResponse>(\n          url,\n          { input, credentials },\n          extraHeaders && Object.keys(extraHeaders).length > 0\n            ? { headers: extraHeaders }\n            : undefined,\n        );\n\n        const durationMs = Date.now() - startMs;\n\n        if (res.status < 200 || res.status >= 300) {\n          throw new HttpError(res.status, url, res.data);\n        }\n\n        const body = res.data;\n        if (onExecute) {\n          try {\n            onExecute({\n              capabilityName: capability.name,\n              input,\n              response: body,\n              durationMs,\n            });\n          } catch {\n            // hook errors are non-fatal\n          }\n        }\n\n        if (!body.success) {\n          // DEBUG\n          // eslint-disable-next-line no-console\n          console.debug(\n            `${debugPrefix} backend reported failure — ${body.error}`\n          );\n          throw new Error(body.error ?? 'Tool execution failed');\n        }\n\n        // LangChain tools typically return strings; stringify non-string results\n        if (typeof body.result === 'string') {\n          return body.result;\n        }\n        return JSON.stringify(body.result);\n      } catch (err) {\n        const durationMs = Date.now() - startMs;\n        const error = err instanceof Error ? err : new Error(String(err));\n        if (onExecute) {\n          try {\n            onExecute({\n              capabilityName: capability.name,\n              input,\n              error,\n              durationMs,\n            });\n          } catch {\n            // hook errors are non-fatal\n          }\n        }\n        throw error;\n      }\n    },\n    {\n      name: capability.name,\n      description: capability.description,\n      schema: (capability.schema as object) ?? {\n        type: 'object',\n        properties: {},\n      },\n      responseFormat: 'content',\n    }\n  );\n}\n"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;AAaG;AAgDH;;;;;AAKG;SACa,cAAc,CAC5B,UAAsB,EACtB,WAA0B,EAC1B,OAAyB,EAAA;AAEzB,IAAA,MAAM,EACJ,MAAM,EACN,WAAW,GAAG,gBAAgB,EAC9B,SAAS,EACT,cAAc,GACf,GAAG,OAAO;AACX,IAAA,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAE7E,IAAA,OAAO,IAAI,CACT,OAAO,KAAc,KAAqB;AACxC,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;AAC1B,QAAA,MAAM,WAAW,GAAG,CAAA,WAAA,EAAc,UAAU,CAAC,IAAI,GAAG;AAEpD,QAAA,IAAI;;;AAGF,YAAA,OAAO,CAAC,KAAK,CACX,CAAA,EAAG,WAAW,CAAA,sBAAA,EAAyB,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA,CAAE,CACtH;YAED,MAAM,YAAY,GAAG;kBACjB,MAAM,cAAc;kBACpB,SAAS;YACb,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,GAAG,EACH,EAAE,KAAK,EAAE,WAAW,EAAE,EACtB,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG;AACjD,kBAAE,EAAE,OAAO,EAAE,YAAY;kBACvB,SAAS,CACd;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;AAEvC,YAAA,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE;AACzC,gBAAA,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC;YAChD;AAEA,YAAA,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI;YACrB,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI;AACF,oBAAA,SAAS,CAAC;wBACR,cAAc,EAAE,UAAU,CAAC,IAAI;wBAC/B,KAAK;AACL,wBAAA,QAAQ,EAAE,IAAI;wBACd,UAAU;AACX,qBAAA,CAAC;gBACJ;AAAE,gBAAA,MAAM;;gBAER;YACF;AAEA,YAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;;;gBAGjB,OAAO,CAAC,KAAK,CACX,CAAA,EAAG,WAAW,CAAA,4BAAA,EAA+B,IAAI,CAAC,KAAK,CAAA,CAAE,CAC1D;gBACD,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,uBAAuB,CAAC;YACxD;;AAGA,YAAA,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE;gBACnC,OAAO,IAAI,CAAC,MAAM;YACpB;YACA,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QACpC;QAAE,OAAO,GAAG,EAAE;YACZ,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YACvC,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI;AACF,oBAAA,SAAS,CAAC;wBACR,cAAc,EAAE,UAAU,CAAC,IAAI;wBAC/B,KAAK;wBACL,KAAK;wBACL,UAAU;AACX,qBAAA,CAAC;gBACJ;AAAE,gBAAA,MAAM;;gBAER;YACF;AACA,YAAA,MAAM,KAAK;QACb;AACF,IAAA,CAAC,EACD;QACE,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,WAAW,EAAE,UAAU,CAAC,WAAW;AACnC,QAAA,MAAM,EAAG,UAAU,CAAC,MAAiB,IAAI;AACvC,YAAA,IAAI,EAAE,QAAQ;AACd,YAAA,UAAU,EAAE,EAAE;AACf,SAAA;AACD,QAAA,cAAc,EAAE,SAAS;AAC1B,KAAA,CACF;AACH;;;;"}

package/dist/types/providers/tools-server/ToolsServerCapabilityProvider.d.ts

@@ -29,6 +29,19 @@ export interface ToolsServerConfig {
     client?: AxiosInstance;
     /** Optional proxy override (defaults to process.env.PROXY). */
     proxy?: string | null;
+    /**
+     * Optional per-request auth header builder — invoked on every tool
+     * invocation (NOT on the manifest fetch, which is service-to-service).
+     * When provided, the returned headers are merged into the `/execute`
+     * request so the host can pass user-scoped identity (e.g.,
+     * `Authorization: Bearer <jwt>`) that tools-server verifies for
+     * admin-gated tools.
+     *
+     * Typical host wiring: mint a short-lived JWT per call carrying the
+     * authenticated user's `{ userId, role }` claims; tools-server's
+     * `TOOLS_SERVER_JWT_SECRET` validates.
+     */
+    getExecuteAuthHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
 }
 export declare class ToolsServerCapabilityProvider implements CapabilityProvider {
     private readonly config;
@@ -37,6 +50,7 @@ export declare class ToolsServerCapabilityProvider implements CapabilityProvider
     private readonly manifestPath;
     private readonly executePath;
     private readonly cache;
+    private readonly getExecuteAuthHeaders?;
     constructor(config: ToolsServerConfig);
     fetchManifest(filter?: CapabilityFilter): Promise<Capability[]>;
     createRunnables(capabilities: Capability[], credentials: CredentialMap): Promise<StructuredToolInterface[]>;

package/dist/types/tools/proxyTool.d.ts

@@ -38,6 +38,13 @@ export interface ProxyToolOptions {
      * telemetry, debug logging. Errors in the hook are swallowed.
      */
     onExecute?: (ctx: ExecuteCallbackContext) => void;
+    /**
+     * Optional per-invocation auth header builder. Called on every tool
+     * invocation before POSTing; returned headers are merged into the
+     * request alongside the base client's headers. Typical use: pass a
+     * freshly minted per-user JWT for admin-gated tools.
+     */
+    getAuthHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
 }
 export interface ExecuteCallbackContext {
     capabilityName: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@illuma-ai/agents",
-  "version": "1.4.0-alpha.4",
+  "version": "1.4.0-alpha.5",
   "main": "./dist/cjs/main.cjs",
   "module": "./dist/esm/main.mjs",
   "types": "./dist/types/index.d.ts",

package/src/providers/__tests__/ToolsServerCapabilityProvider.test.ts

@@ -203,4 +203,67 @@ describe('ToolsServerCapabilityProvider.createRunnables', () => {
       /missing API key/
     );
   });
+
+  it('getExecuteAuthHeaders is invoked per call and forwarded as HTTP headers', async () => {
+    const client = {
+      get: jest.fn().mockResolvedValue({ status: 200, data: manifestFixture }),
+      post: jest.fn().mockResolvedValue({
+        status: 200,
+        data: {
+          success: true,
+          result: 'ok',
+          timing: { durationMs: 1 },
+        },
+      }),
+      defaults: { baseURL: 'http://stub', headers: {} },
+    };
+
+    let mintCount = 0;
+    const p = new ToolsServerCapabilityProvider({
+      baseUrl: 'http://x',
+      apiKey: 'k',
+      client: client as unknown as ReturnType<typeof axios.create>,
+      getExecuteAuthHeaders: async () => {
+        mintCount += 1;
+        return { Authorization: `Bearer TOKEN-${mintCount}` };
+      },
+    });
+    const caps = await p.fetchManifest();
+    const [wikipedia] = await p.createRunnables(
+      caps.filter((c) => c.name === 'wikipedia'),
+      {}
+    );
+
+    await wikipedia.invoke({ query: 'a' });
+    await wikipedia.invoke({ query: 'b' });
+
+    // Two invocations → two mints (fresh token each call)
+    expect(mintCount).toBe(2);
+
+    // Each POST includes the Authorization header from the mint
+    const firstCall = (client.post as jest.Mock).mock.calls[0];
+    const secondCall = (client.post as jest.Mock).mock.calls[1];
+    expect(firstCall[2]?.headers).toEqual({ Authorization: 'Bearer TOKEN-1' });
+    expect(secondCall[2]?.headers).toEqual({ Authorization: 'Bearer TOKEN-2' });
+  });
+
+  it('getExecuteAuthHeaders is NOT called during manifest fetch (service-to-service)', async () => {
+    const client = {
+      get: jest.fn().mockResolvedValue({ status: 200, data: manifestFixture }),
+      post: jest.fn(),
+      defaults: { baseURL: 'http://stub', headers: {} },
+    };
+
+    const authBuilder = jest.fn().mockReturnValue({ Authorization: 'Bearer X' });
+    const p = new ToolsServerCapabilityProvider({
+      baseUrl: 'http://x',
+      apiKey: 'k',
+      client: client as unknown as ReturnType<typeof axios.create>,
+      getExecuteAuthHeaders: authBuilder,
+    });
+
+    await p.fetchManifest();
+    // Manifest fetch is service-to-service — no per-user auth headers
+    expect(authBuilder).not.toHaveBeenCalled();
+  });
 });

package/src/providers/tools-server/ToolsServerCapabilityProvider.ts

@@ -48,6 +48,21 @@ export interface ToolsServerConfig {
   client?: AxiosInstance;
   /** Optional proxy override (defaults to process.env.PROXY). */
   proxy?: string | null;
+  /**
+   * Optional per-request auth header builder — invoked on every tool
+   * invocation (NOT on the manifest fetch, which is service-to-service).
+   * When provided, the returned headers are merged into the `/execute`
+   * request so the host can pass user-scoped identity (e.g.,
+   * `Authorization: Bearer <jwt>`) that tools-server verifies for
+   * admin-gated tools.
+   *
+   * Typical host wiring: mint a short-lived JWT per call carrying the
+   * authenticated user's `{ userId, role }` claims; tools-server's
+   * `TOOLS_SERVER_JWT_SECRET` validates.
+   */
+  getExecuteAuthHeaders?: () =>
+    | Record<string, string>
+    | Promise<Record<string, string>>;
 }
 
 /**
@@ -91,6 +106,8 @@ export class ToolsServerCapabilityProvider implements CapabilityProvider {
   private readonly manifestPath: string;
   private readonly executePath: string;
   private readonly cache: ManifestCache;
+  private readonly getExecuteAuthHeaders?:
+    | (() => Record<string, string> | Promise<Record<string, string>>);
 
   constructor(private readonly config: ToolsServerConfig) {
     const {
@@ -102,6 +119,7 @@ export class ToolsServerCapabilityProvider implements CapabilityProvider {
       manifestTtlMs = 60_000,
       client,
       proxy,
+      getExecuteAuthHeaders,
     } = config;
 
     if (!baseUrl) {
@@ -115,6 +133,7 @@ export class ToolsServerCapabilityProvider implements CapabilityProvider {
     this.manifestPath = manifestPath;
     this.executePath = executePath;
     this.cache = new ManifestCache({ ttlMs: manifestTtlMs });
+    this.getExecuteAuthHeaders = getExecuteAuthHeaders;
 
     if (client) {
       this.client = client;
@@ -184,6 +203,7 @@ export class ToolsServerCapabilityProvider implements CapabilityProvider {
       buildProxyTool(cap, credentials, {
         client: this.client,
         executePath: this.executePath,
+        getAuthHeaders: this.getExecuteAuthHeaders,
       })
     );
   }

package/src/tools/proxyTool.ts

@@ -40,6 +40,15 @@ export interface ProxyToolOptions {
    * telemetry, debug logging. Errors in the hook are swallowed.
    */
   onExecute?: (ctx: ExecuteCallbackContext) => void;
+  /**
+   * Optional per-invocation auth header builder. Called on every tool
+   * invocation before POSTing; returned headers are merged into the
+   * request alongside the base client's headers. Typical use: pass a
+   * freshly minted per-user JWT for admin-gated tools.
+   */
+  getAuthHeaders?: () =>
+    | Record<string, string>
+    | Promise<Record<string, string>>;
 }
 
 export interface ExecuteCallbackContext {
@@ -61,7 +70,12 @@ export function buildProxyTool(
   credentials: CredentialMap,
   options: ProxyToolOptions
 ): StructuredToolInterface {
-  const { client, executePath = '/execute/:name', onExecute } = options;
+  const {
+    client,
+    executePath = '/execute/:name',
+    onExecute,
+    getAuthHeaders,
+  } = options;
   const url = executePath.replace(':name', encodeURIComponent(capability.name));
 
   return tool(
@@ -76,10 +90,16 @@ export function buildProxyTool(
           `${debugPrefix} invoking — inputKeys=${input && typeof input === 'object' ? Object.keys(input as object).length : 0}`
         );
 
-        const res = await client.post<ExecuteResponse>(url, {
-          input,
-          credentials,
-        });
+        const extraHeaders = getAuthHeaders
+          ? await getAuthHeaders()
+          : undefined;
+        const res = await client.post<ExecuteResponse>(
+          url,
+          { input, credentials },
+          extraHeaders && Object.keys(extraHeaders).length > 0
+            ? { headers: extraHeaders }
+            : undefined,
+        );
 
         const durationMs = Date.now() - startMs;