@illuma-ai/agents 1.4.0-alpha.6 → 1.5.0

package/dist/cjs/providers/mcp/MCPCapabilityProvider.cjs

@@ -1,244 +0,0 @@
-'use strict';
-
-var tools = require('@langchain/core/tools');
-var index_js = require('@modelcontextprotocol/sdk/client/index.js');
-var types = require('../types.cjs');
-var capabilityNaming = require('../capabilityNaming.cjs');
-var transport = require('./transport.cjs');
-var config = require('./config.cjs');
-
-/**
- * MCPCapabilityProvider — connects to MCP servers via the official MCP SDK
- * and exposes their tools as `Capability` / `StructuredToolInterface`.
- *
- * Mirrors the pattern of `ToolsServerCapabilityProvider`: thin adapter,
- * protocol-specific transport, stateless as far as tokens/OAuth are
- * concerned (all auth is host-resolved and forwarded via `getAuthHeaders`).
- *
- * What the host supplies:
- *   - `servers`: unified spec map (normalized from whatever source:
- *     programmatic, YAML, DB, marketplace catalog).
- *   - `getAuthHeaders?`: per-server header resolver. Called at connect
- *     time. OAuth orchestration / token refresh happens in the host.
- *
- * What the library does:
- *   - Picks the right SDK transport per spec.
- *   - Connects, calls `listTools()`, wraps each tool as a `Capability`.
- *   - `createRunnables()` returns `StructuredTool`s that invoke the
- *     server's tools on demand, streaming the string result back to the
- *     agent.
- *   - Caches open connections per-instance so repeated `fetchManifest` /
- *     `createRunnables` calls reuse them.
- */
-class MCPCapabilityProvider {
-    providerId;
-    config;
-    logger;
-    connections = new Map();
-    constructor(config$1) {
-        if (!config$1.servers || Object.keys(config$1.servers).length === 0) {
-            throw new Error('MCPCapabilityProvider: at least one server is required');
-        }
-        const env = config.getMCPEnvDefaults();
-        this.config = {
-            servers: config$1.servers,
-            getAuthHeaders: config$1.getAuthHeaders,
-            clientInfo: config$1.clientInfo ?? {
-                name: env.clientName,
-                version: env.clientVersion,
-            },
-            connectTimeoutMs: config$1.connectTimeoutMs ?? env.connectTimeoutMs,
-            requestTimeoutMs: config$1.requestTimeoutMs ?? env.requestTimeoutMs,
-        };
-        this.logger = config$1.logger ?? config.consoleLogger;
-        const names = Object.keys(config$1.servers).sort().join(',');
-        this.providerId = `mcp:${names}`;
-    }
-    async fetchManifest(filter) {
-        // MCP only emits kind='mcp' — short-circuit if filter excludes us.
-        if (filter?.kind && filter.kind !== types.CapabilityKind.MCP)
-            return [];
-        const capabilities = [];
-        for (const serverName of Object.keys(this.config.servers)) {
-            try {
-                const conn = await this.ensureConnection(serverName);
-                for (const toolDesc of conn.tools) {
-                    const cap = this.toolToCapability(serverName, toolDesc);
-                    if (this.capabilityMatchesFilter(cap, filter)) {
-                        capabilities.push(cap);
-                    }
-                }
-            }
-            catch (err) {
-                // One server failing should not block the others — log and continue.
-                this.logger.warn(`[mcp] failed to fetch manifest for server "${serverName}":`, err instanceof Error ? err.message : err);
-            }
-        }
-        this.logger.debug(`[mcp] manifest assembled — ${capabilities.length} capabilities across ${this.connections.size}/${Object.keys(this.config.servers).length} connected servers`);
-        return capabilities;
-    }
-    async createRunnables(capabilities, _credentials) {
-        const runnables = [];
-        for (const cap of capabilities) {
-            if (cap.kind !== types.CapabilityKind.MCP)
-                continue;
-            const parsed = capabilityNaming.parseCapabilityName(cap.name);
-            const serverName = parsed?.sourceName;
-            const toolName = parsed?.itemName;
-            if (!serverName || !toolName) {
-                this.logger.warn(`[mcp] skipping capability "${cap.name}" — unparseable`);
-                continue;
-            }
-            const runnable = this.buildProxyTool(serverName, toolName, cap);
-            runnables.push(runnable);
-        }
-        return runnables;
-    }
-    /**
-     * Disconnect all open MCP client connections. Callers should invoke this
-     * on shutdown to release transports and child processes (for stdio).
-     */
-    async close() {
-        for (const [serverName, conn] of this.connections.entries()) {
-            try {
-                await conn.client.close();
-            }
-            catch (err) {
-                this.logger.warn(`[mcp] error closing connection to "${serverName}":`, err instanceof Error ? err.message : err);
-            }
-        }
-        this.connections.clear();
-    }
-    // --- internals ---------------------------------------------------------
-    async ensureConnection(serverName) {
-        const existing = this.connections.get(serverName);
-        if (existing)
-            return existing;
-        const spec = this.config.servers[serverName];
-        if (!spec) {
-            throw new Error(`[mcp] server "${serverName}" not in config`);
-        }
-        const authHeaders = await this.resolveAuthHeaders(serverName);
-        const transport$1 = transport.createTransport(spec, authHeaders);
-        const client = new index_js.Client(this.config.clientInfo, {
-            capabilities: {},
-        });
-        this.logger.debug(`[mcp] connecting to "${serverName}" (${spec.type})`);
-        await client.connect(transport$1);
-        const { tools } = await client.listTools();
-        this.logger.debug(`[mcp] connected to "${serverName}" — ${tools.length} tools discovered`);
-        const conn = {
-            serverName,
-            spec,
-            client,
-            transport: transport$1,
-            tools: tools,
-        };
-        this.connections.set(serverName, conn);
-        return conn;
-    }
-    async resolveAuthHeaders(serverName) {
-        if (!this.config.getAuthHeaders)
-            return undefined;
-        try {
-            return await this.config.getAuthHeaders(serverName);
-        }
-        catch (err) {
-            this.logger.warn(`[mcp] getAuthHeaders("${serverName}") threw:`, err instanceof Error ? err.message : err);
-            return undefined;
-        }
-    }
-    toolToCapability(serverName, toolDesc) {
-        return {
-            kind: types.CapabilityKind.MCP,
-            name: capabilityNaming.formatCapabilityName(serverName, toolDesc.name),
-            description: toolDesc.description ?? `${toolDesc.name} (via ${serverName})`,
-            schema: toolDesc.inputSchema ?? {
-                type: 'object',
-                properties: {},
-            },
-            authConfig: [],
-            metadata: {
-                category: 'mcp',
-                tags: [serverName],
-            },
-        };
-    }
-    capabilityMatchesFilter(cap, filter) {
-        if (!filter)
-            return true;
-        if (filter.kind && cap.kind !== filter.kind)
-            return false;
-        if (filter.names && !filter.names.includes(cap.name))
-            return false;
-        if (filter.tags?.length) {
-            const capTags = new Set(cap.metadata.tags ?? []);
-            if (!filter.tags.some((t) => capTags.has(t)))
-                return false;
-        }
-        return true;
-    }
-    buildProxyTool(serverName, toolName, cap) {
-        // Arrow-function closures would capture `this` correctly but LangChain's
-        // `tool()` helper expects a plain async function; bind the methods we
-        // need up-front so the closure body stays clean and strict-lint-friendly.
-        const logger = this.logger;
-        const ensureConnection = this.ensureConnection.bind(this);
-        return tools.tool(async (input) => {
-            // DEBUG: log tool invocation (remove after POC stabilizes)
-            logger.debug(`[mcp] invoking ${serverName}:${toolName}`, input && typeof input === 'object'
-                ? `inputKeys=${Object.keys(input).length}`
-                : '');
-            const conn = await ensureConnection(serverName);
-            const response = await conn.client.callTool({
-                name: toolName,
-                arguments: input ?? {},
-            });
-            const result = flattenToolCallResponse(response);
-            if (result.isError) {
-                throw new Error(`MCP tool "${serverName}:${toolName}" failed: ${result.text}`);
-            }
-            return result.text;
-        }, {
-            name: cap.name,
-            description: cap.description,
-            schema: cap.schema ?? { type: 'object', properties: {} },
-            responseFormat: 'content',
-        });
-    }
-}
-/**
- * Flatten the MCP SDK's callTool response into a plain text + error flag.
- * Concatenates any `text`-type content parts; non-text parts are
- * JSON-stringified so the LLM sees something rather than silently
- * dropping output.
- */
-function flattenToolCallResponse(response) {
-    const resp = response;
-    const rawContent = resp?.content ?? [];
-    const isError = resp?.isError === true;
-    if (!Array.isArray(rawContent) || rawContent.length === 0) {
-        return {
-            text: isError ? '(error with no content)' : '(empty response)',
-            rawContent,
-            isError,
-        };
-    }
-    const parts = rawContent.map((item) => {
-        if (item.type === 'text' && typeof item.text === 'string')
-            return item.text;
-        try {
-            return JSON.stringify(item);
-        }
-        catch {
-            return '[unserializable content part]';
-        }
-    });
-    return { text: parts.join('\n\n'), rawContent, isError };
-}
-
-exports.CAPABILITY_NAME_SEPARATOR = capabilityNaming.CAPABILITY_NAME_SEPARATOR;
-exports.formatCapabilityName = capabilityNaming.formatCapabilityName;
-exports.MCPCapabilityProvider = MCPCapabilityProvider;
-exports.flattenToolCallResponse = flattenToolCallResponse;
-//# sourceMappingURL=MCPCapabilityProvider.cjs.map

package/dist/cjs/providers/mcp/MCPCapabilityProvider.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"MCPCapabilityProvider.cjs","sources":["../../../../src/providers/mcp/MCPCapabilityProvider.ts"],"sourcesContent":["/**\n * MCPCapabilityProvider — connects to MCP servers via the official MCP SDK\n * and exposes their tools as `Capability` / `StructuredToolInterface`.\n *\n * Mirrors the pattern of `ToolsServerCapabilityProvider`: thin adapter,\n * protocol-specific transport, stateless as far as tokens/OAuth are\n * concerned (all auth is host-resolved and forwarded via `getAuthHeaders`).\n *\n * What the host supplies:\n *   - `servers`: unified spec map (normalized from whatever source:\n *     programmatic, YAML, DB, marketplace catalog).\n *   - `getAuthHeaders?`: per-server header resolver. Called at connect\n *     time. OAuth orchestration / token refresh happens in the host.\n *\n * What the library does:\n *   - Picks the right SDK transport per spec.\n *   - Connects, calls `listTools()`, wraps each tool as a `Capability`.\n *   - `createRunnables()` returns `StructuredTool`s that invoke the\n *     server's tools on demand, streaming the string result back to the\n *     agent.\n *   - Caches open connections per-instance so repeated `fetchManifest` /\n *     `createRunnables` calls reuse them.\n */\n\nimport { tool, type StructuredToolInterface } from '@langchain/core/tools';\nimport { Client } from '@modelcontextprotocol/sdk/client/index.js';\nimport type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';\n\nimport {\n  CapabilityKind,\n  type Capability,\n  type CapabilityFilter,\n  type CapabilityProvider,\n  type CredentialMap,\n} from '@/providers/types';\nimport {\n  CAPABILITY_NAME_SEPARATOR,\n  formatCapabilityName,\n  parseCapabilityName,\n} from '@/providers/capabilityNaming';\nimport { createTransport } from './transport';\nimport { consoleLogger, getMCPEnvDefaults } from './config';\nimport type {\n  MCPLogger,\n  MCPProviderConfig,\n  MCPServerSpec,\n  MCPToolCallResult,\n  MCPToolDescriptor,\n} from './types';\n\n/**\n * Per-server connection state kept inside the provider. Reused across\n * manifest fetches and tool invocations.\n */\ninterface ServerConnection {\n  serverName: string;\n  spec: MCPServerSpec;\n  client: Client;\n  transport: Transport;\n  tools: MCPToolDescriptor[];\n}\n\nexport class MCPCapabilityProvider implements CapabilityProvider {\n  readonly providerId: string;\n  private readonly config: Required<\n    Pick<\n      MCPProviderConfig,\n      'connectTimeoutMs' | 'requestTimeoutMs' | 'clientInfo'\n    >\n  > &\n    Pick<MCPProviderConfig, 'servers' | 'getAuthHeaders'>;\n  private readonly logger: MCPLogger;\n  private readonly connections = new Map<string, ServerConnection>();\n\n  constructor(config: MCPProviderConfig) {\n    if (!config.servers || Object.keys(config.servers).length === 0) {\n      throw new Error('MCPCapabilityProvider: at least one server is required');\n    }\n    const env = getMCPEnvDefaults();\n    this.config = {\n      servers: config.servers,\n      getAuthHeaders: config.getAuthHeaders,\n      clientInfo: config.clientInfo ?? {\n        name: env.clientName,\n        version: env.clientVersion,\n      },\n      connectTimeoutMs: config.connectTimeoutMs ?? env.connectTimeoutMs,\n      requestTimeoutMs: config.requestTimeoutMs ?? env.requestTimeoutMs,\n    };\n    this.logger = config.logger ?? consoleLogger;\n    const names = Object.keys(config.servers).sort().join(',');\n    this.providerId = `mcp:${names}`;\n  }\n\n  async fetchManifest(filter?: CapabilityFilter): Promise<Capability[]> {\n    // MCP only emits kind='mcp' — short-circuit if filter excludes us.\n    if (filter?.kind && filter.kind !== CapabilityKind.MCP) return [];\n\n    const capabilities: Capability[] = [];\n\n    for (const serverName of Object.keys(this.config.servers)) {\n      try {\n        const conn = await this.ensureConnection(serverName);\n        for (const toolDesc of conn.tools) {\n          const cap = this.toolToCapability(serverName, toolDesc);\n          if (this.capabilityMatchesFilter(cap, filter)) {\n            capabilities.push(cap);\n          }\n        }\n      } catch (err) {\n        // One server failing should not block the others — log and continue.\n        this.logger.warn(\n          `[mcp] failed to fetch manifest for server \"${serverName}\":`,\n          err instanceof Error ? err.message : err\n        );\n      }\n    }\n\n    this.logger.debug(\n      `[mcp] manifest assembled — ${capabilities.length} capabilities across ${this.connections.size}/${Object.keys(this.config.servers).length} connected servers`\n    );\n\n    return capabilities;\n  }\n\n  async createRunnables(\n    capabilities: Capability[],\n    _credentials: CredentialMap\n  ): Promise<StructuredToolInterface[]> {\n    const runnables: StructuredToolInterface[] = [];\n\n    for (const cap of capabilities) {\n      if (cap.kind !== CapabilityKind.MCP) continue;\n\n      const parsed = parseCapabilityName(cap.name);\n      const serverName = parsed?.sourceName;\n      const toolName = parsed?.itemName;\n      if (!serverName || !toolName) {\n        this.logger.warn(\n          `[mcp] skipping capability \"${cap.name}\" — unparseable`\n        );\n        continue;\n      }\n\n      const runnable = this.buildProxyTool(serverName, toolName, cap);\n      runnables.push(runnable);\n    }\n\n    return runnables;\n  }\n\n  /**\n   * Disconnect all open MCP client connections. Callers should invoke this\n   * on shutdown to release transports and child processes (for stdio).\n   */\n  async close(): Promise<void> {\n    for (const [serverName, conn] of this.connections.entries()) {\n      try {\n        await conn.client.close();\n      } catch (err) {\n        this.logger.warn(\n          `[mcp] error closing connection to \"${serverName}\":`,\n          err instanceof Error ? err.message : err\n        );\n      }\n    }\n    this.connections.clear();\n  }\n\n  // --- internals ---------------------------------------------------------\n\n  private async ensureConnection(\n    serverName: string\n  ): Promise<ServerConnection> {\n    const existing = this.connections.get(serverName);\n    if (existing) return existing;\n\n    const spec = this.config.servers[serverName];\n    if (!spec) {\n      throw new Error(`[mcp] server \"${serverName}\" not in config`);\n    }\n\n    const authHeaders = await this.resolveAuthHeaders(serverName);\n    const transport = createTransport(spec, authHeaders);\n    const client = new Client(this.config.clientInfo, {\n      capabilities: {},\n    });\n\n    this.logger.debug(`[mcp] connecting to \"${serverName}\" (${spec.type})`);\n    await client.connect(transport);\n\n    const { tools } = await client.listTools();\n    this.logger.debug(\n      `[mcp] connected to \"${serverName}\" — ${tools.length} tools discovered`\n    );\n\n    const conn: ServerConnection = {\n      serverName,\n      spec,\n      client,\n      transport,\n      tools: tools as MCPToolDescriptor[],\n    };\n    this.connections.set(serverName, conn);\n    return conn;\n  }\n\n  private async resolveAuthHeaders(\n    serverName: string\n  ): Promise<Record<string, string> | undefined> {\n    if (!this.config.getAuthHeaders) return undefined;\n    try {\n      return await this.config.getAuthHeaders(serverName);\n    } catch (err) {\n      this.logger.warn(\n        `[mcp] getAuthHeaders(\"${serverName}\") threw:`,\n        err instanceof Error ? err.message : err\n      );\n      return undefined;\n    }\n  }\n\n  private toolToCapability(\n    serverName: string,\n    toolDesc: MCPToolDescriptor\n  ): Capability {\n    return {\n      kind: CapabilityKind.MCP,\n      name: formatCapabilityName(serverName, toolDesc.name),\n      description:\n        toolDesc.description ?? `${toolDesc.name} (via ${serverName})`,\n      schema: toolDesc.inputSchema ?? {\n        type: 'object',\n        properties: {},\n      },\n      authConfig: [],\n      metadata: {\n        category: 'mcp',\n        tags: [serverName],\n      },\n    };\n  }\n\n  private capabilityMatchesFilter(\n    cap: Capability,\n    filter?: CapabilityFilter\n  ): boolean {\n    if (!filter) return true;\n    if (filter.kind && cap.kind !== filter.kind) return false;\n    if (filter.names && !filter.names.includes(cap.name)) return false;\n    if (filter.tags?.length) {\n      const capTags = new Set(cap.metadata.tags ?? []);\n      if (!filter.tags.some((t) => capTags.has(t))) return false;\n    }\n    return true;\n  }\n\n  private buildProxyTool(\n    serverName: string,\n    toolName: string,\n    cap: Capability\n  ): StructuredToolInterface {\n    // Arrow-function closures would capture `this` correctly but LangChain's\n    // `tool()` helper expects a plain async function; bind the methods we\n    // need up-front so the closure body stays clean and strict-lint-friendly.\n    const logger = this.logger;\n    const ensureConnection = this.ensureConnection.bind(this);\n    return tool(\n      async (input: unknown): Promise<string> => {\n        // DEBUG: log tool invocation (remove after POC stabilizes)\n        logger.debug(\n          `[mcp] invoking ${serverName}:${toolName}`,\n          input && typeof input === 'object'\n            ? `inputKeys=${Object.keys(input as object).length}`\n            : ''\n        );\n\n        const conn = await ensureConnection(serverName);\n        const response = await conn.client.callTool({\n          name: toolName,\n          arguments: (input as Record<string, unknown>) ?? {},\n        });\n\n        const result = flattenToolCallResponse(response);\n        if (result.isError) {\n          throw new Error(\n            `MCP tool \"${serverName}:${toolName}\" failed: ${result.text}`\n          );\n        }\n        return result.text;\n      },\n      {\n        name: cap.name,\n        description: cap.description,\n        schema: (cap.schema as object) ?? { type: 'object', properties: {} },\n        responseFormat: 'content',\n      }\n    );\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers exported for testing\n// ---------------------------------------------------------------------------\n\n// CAPABILITY_NAME_SEPARATOR + formatCapabilityName live in the shared\n// `@/providers/capabilityNaming` module so MCP and A2A providers stay in\n// lockstep on name encoding. Re-exported here for callers that already\n// import from the MCP barrel.\nexport { CAPABILITY_NAME_SEPARATOR, formatCapabilityName };\n\n/**\n * Flatten the MCP SDK's callTool response into a plain text + error flag.\n * Concatenates any `text`-type content parts; non-text parts are\n * JSON-stringified so the LLM sees something rather than silently\n * dropping output.\n */\nexport function flattenToolCallResponse(response: unknown): MCPToolCallResult {\n  const resp = response as {\n    content?: Array<{ type?: string; text?: string; [k: string]: unknown }>;\n    isError?: boolean;\n  } | null;\n\n  const rawContent = resp?.content ?? [];\n  const isError = resp?.isError === true;\n\n  if (!Array.isArray(rawContent) || rawContent.length === 0) {\n    return {\n      text: isError ? '(error with no content)' : '(empty response)',\n      rawContent,\n      isError,\n    };\n  }\n\n  const parts = rawContent.map((item) => {\n    if (item.type === 'text' && typeof item.text === 'string') return item.text;\n    try {\n      return JSON.stringify(item);\n    } catch {\n      return '[unserializable content part]';\n    }\n  });\n\n  return { text: parts.join('\\n\\n'), rawContent, isError };\n}\n"],"names":["config","getMCPEnvDefaults","consoleLogger","CapabilityKind","parseCapabilityName","transport","createTransport","Client","formatCapabilityName","tool"],"mappings":";;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;AAsBG;MAwCU,qBAAqB,CAAA;AACvB,IAAA,UAAU;AACF,IAAA,MAAM;AAON,IAAA,MAAM;AACN,IAAA,WAAW,GAAG,IAAI,GAAG,EAA4B;AAElE,IAAA,WAAA,CAAYA,QAAyB,EAAA;AACnC,QAAA,IAAI,CAACA,QAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAACA,QAAM,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE;AAC/D,YAAA,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC;QAC3E;AACA,QAAA,MAAM,GAAG,GAAGC,wBAAiB,EAAE;QAC/B,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAED,QAAM,CAAC,OAAO;YACvB,cAAc,EAAEA,QAAM,CAAC,cAAc;AACrC,YAAA,UAAU,EAAEA,QAAM,CAAC,UAAU,IAAI;gBAC/B,IAAI,EAAE,GAAG,CAAC,UAAU;gBACpB,OAAO,EAAE,GAAG,CAAC,aAAa;AAC3B,aAAA;AACD,YAAA,gBAAgB,EAAEA,QAAM,CAAC,gBAAgB,IAAI,GAAG,CAAC,gBAAgB;AACjE,YAAA,gBAAgB,EAAEA,QAAM,CAAC,gBAAgB,IAAI,GAAG,CAAC,gBAAgB;SAClE;QACD,IAAI,CAAC,MAAM,GAAGA,QAAM,CAAC,MAAM,IAAIE,oBAAa;AAC5C,QAAA,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAACF,QAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;AAC1D,QAAA,IAAI,CAAC,UAAU,GAAG,CAAA,IAAA,EAAO,KAAK,EAAE;IAClC;IAEA,MAAM,aAAa,CAAC,MAAyB,EAAA;;QAE3C,IAAI,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,KAAKG,oBAAc,CAAC,GAAG;AAAE,YAAA,OAAO,EAAE;QAEjE,MAAM,YAAY,GAAiB,EAAE;AAErC,QAAA,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;AACzD,YAAA,IAAI;gBACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;AACpD,gBAAA,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE;oBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC;oBACvD,IAAI,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE;AAC7C,wBAAA,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;oBACxB;gBACF;YACF;YAAE,OAAO,GAAG,EAAE;;gBAEZ,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAA,2CAAA,EAA8C,UAAU,CAAA,EAAA,CAAI,EAC5D,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,GAAG,CACzC;YACH;QACF;AAEA,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,CAAA,2BAAA,EAA8B,YAAY,CAAC,MAAM,CAAA,qBAAA,EAAwB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAA,CAAA,EAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAA,kBAAA,CAAoB,CAC9J;AAED,QAAA,OAAO,YAAY;IACrB;AAEA,IAAA,MAAM,eAAe,CACnB,YAA0B,EAC1B,YAA2B,EAAA;QAE3B,MAAM,SAAS,GAA8B,EAAE;AAE/C,QAAA,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE;AAC9B,YAAA,IAAI,GAAG,CAAC,IAAI,KAAKA,oBAAc,CAAC,GAAG;gBAAE;YAErC,MAAM,MAAM,GAAGC,oCAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5C,YAAA,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU;AACrC,YAAA,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ;AACjC,YAAA,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE;gBAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAA,2BAAA,EAA8B,GAAG,CAAC,IAAI,CAAA,eAAA,CAAiB,CACxD;gBACD;YACF;AAEA,YAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC;AAC/D,YAAA,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC1B;AAEA,QAAA,OAAO,SAAS;IAClB;AAEA;;;AAGG;AACH,IAAA,MAAM,KAAK,GAAA;AACT,QAAA,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE;AAC3D,YAAA,IAAI;AACF,gBAAA,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YAC3B;YAAE,OAAO,GAAG,EAAE;gBACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAA,mCAAA,EAAsC,UAAU,CAAA,EAAA,CAAI,EACpD,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,GAAG,CACzC;YACH;QACF;AACA,QAAA,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE;IAC1B;;IAIQ,MAAM,gBAAgB,CAC5B,UAAkB,EAAA;QAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;AACjD,QAAA,IAAI,QAAQ;AAAE,YAAA,OAAO,QAAQ;QAE7B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE;AACT,YAAA,MAAM,IAAI,KAAK,CAAC,iBAAiB,UAAU,CAAA,eAAA,CAAiB,CAAC;QAC/D;QAEA,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;QAC7D,MAAMC,WAAS,GAAGC,yBAAe,CAAC,IAAI,EAAE,WAAW,CAAC;QACpD,MAAM,MAAM,GAAG,IAAIC,eAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;AAChD,YAAA,YAAY,EAAE,EAAE;AACjB,SAAA,CAAC;AAEF,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,qBAAA,EAAwB,UAAU,CAAA,GAAA,EAAM,IAAI,CAAC,IAAI,CAAA,CAAA,CAAG,CAAC;AACvE,QAAA,MAAM,MAAM,CAAC,OAAO,CAACF,WAAS,CAAC;QAE/B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE;AAC1C,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,CAAA,oBAAA,EAAuB,UAAU,CAAA,IAAA,EAAO,KAAK,CAAC,MAAM,CAAA,iBAAA,CAAmB,CACxE;AAED,QAAA,MAAM,IAAI,GAAqB;YAC7B,UAAU;YACV,IAAI;YACJ,MAAM;uBACNA,WAAS;AACT,YAAA,KAAK,EAAE,KAA4B;SACpC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC;AACtC,QAAA,OAAO,IAAI;IACb;IAEQ,MAAM,kBAAkB,CAC9B,UAAkB,EAAA;AAElB,QAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc;AAAE,YAAA,OAAO,SAAS;AACjD,QAAA,IAAI;YACF,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC;QACrD;QAAE,OAAO,GAAG,EAAE;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAA,sBAAA,EAAyB,UAAU,CAAA,SAAA,CAAW,EAC9C,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,GAAG,CACzC;AACD,YAAA,OAAO,SAAS;QAClB;IACF;IAEQ,gBAAgB,CACtB,UAAkB,EAClB,QAA2B,EAAA;QAE3B,OAAO;YACL,IAAI,EAAEF,oBAAc,CAAC,GAAG;YACxB,IAAI,EAAEK,qCAAoB,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC;YACrD,WAAW,EACT,QAAQ,CAAC,WAAW,IAAI,CAAA,EAAG,QAAQ,CAAC,IAAI,CAAA,MAAA,EAAS,UAAU,CAAA,CAAA,CAAG;AAChE,YAAA,MAAM,EAAE,QAAQ,CAAC,WAAW,IAAI;AAC9B,gBAAA,IAAI,EAAE,QAAQ;AACd,gBAAA,UAAU,EAAE,EAAE;AACf,aAAA;AACD,YAAA,UAAU,EAAE,EAAE;AACd,YAAA,QAAQ,EAAE;AACR,gBAAA,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,CAAC,UAAU,CAAC;AACnB,aAAA;SACF;IACH;IAEQ,uBAAuB,CAC7B,GAAe,EACf,MAAyB,EAAA;AAEzB,QAAA,IAAI,CAAC,MAAM;AAAE,YAAA,OAAO,IAAI;QACxB,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;AAAE,YAAA,OAAO,KAAK;AACzD,QAAA,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;AAAE,YAAA,OAAO,KAAK;AAClE,QAAA,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE;AACvB,YAAA,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;AAChD,YAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAAE,gBAAA,OAAO,KAAK;QAC5D;AACA,QAAA,OAAO,IAAI;IACb;AAEQ,IAAA,cAAc,CACpB,UAAkB,EAClB,QAAgB,EAChB,GAAe,EAAA;;;;AAKf,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;QAC1B,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;AACzD,QAAA,OAAOC,UAAI,CACT,OAAO,KAAc,KAAqB;;AAExC,YAAA,MAAM,CAAC,KAAK,CACV,CAAA,eAAA,EAAkB,UAAU,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAE,EAC1C,KAAK,IAAI,OAAO,KAAK,KAAK;kBACtB,CAAA,UAAA,EAAa,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,MAAM,CAAA;kBAChD,EAAE,CACP;AAED,YAAA,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;AAC1C,gBAAA,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAG,KAAiC,IAAI,EAAE;AACpD,aAAA,CAAC;AAEF,YAAA,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC;AAChD,YAAA,IAAI,MAAM,CAAC,OAAO,EAAE;AAClB,gBAAA,MAAM,IAAI,KAAK,CACb,CAAA,UAAA,EAAa,UAAU,CAAA,CAAA,EAAI,QAAQ,CAAA,UAAA,EAAa,MAAM,CAAC,IAAI,CAAA,CAAE,CAC9D;YACH;YACA,OAAO,MAAM,CAAC,IAAI;AACpB,QAAA,CAAC,EACD;YACE,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW;AAC5B,YAAA,MAAM,EAAG,GAAG,CAAC,MAAiB,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;AACpE,YAAA,cAAc,EAAE,SAAS;AAC1B,SAAA,CACF;IACH;AACD;AAYD;;;;;AAKG;AACG,SAAU,uBAAuB,CAAC,QAAiB,EAAA;IACvD,MAAM,IAAI,GAAG,QAGL;AAER,IAAA,MAAM,UAAU,GAAG,IAAI,EAAE,OAAO,IAAI,EAAE;AACtC,IAAA,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,KAAK,IAAI;AAEtC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE;QACzD,OAAO;YACL,IAAI,EAAE,OAAO,GAAG,yBAAyB,GAAG,kBAAkB;YAC9D,UAAU;YACV,OAAO;SACR;IACH;IAEA,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,KAAI;QACpC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,IAAI;AAC3E,QAAA,IAAI;AACF,YAAA,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC7B;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,+BAA+B;QACxC;AACF,IAAA,CAAC,CAAC;AAEF,IAAA,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE;AAC1D;;;;;;;"}

package/dist/cjs/providers/mcp/config.cjs

@@ -1,42 +0,0 @@
-'use strict';
-
-/**
- * Environment-driven configuration defaults for the MCP capability provider.
- *
- * Hosts can override any of these via the provider config object. Env vars
- * exist so deployments can brand or tune the library without code changes.
- */
-/**
- * Read env values with fallbacks. Kept as a function (not a constant) so
- * tests and hosts that mutate process.env after import get the current
- * value on each call.
- */
-function getMCPEnvDefaults() {
-    return {
-        /**
-         * Identity sent to MCP servers on handshake. Precedence:
-         *   1. explicit `clientInfo.name` on the provider config
-         *   2. `MCP_CLIENT_NAME` env var
-         *   3. library fallback identity
-         */
-        clientName: process.env.MCP_CLIENT_NAME ?? 'illuma-agents',
-        clientVersion: process.env.MCP_CLIENT_VERSION ?? '1.0.0',
-        connectTimeoutMs: Number(process.env.MCP_CONNECT_TIMEOUT_MS ?? 30_000),
-        requestTimeoutMs: Number(process.env.MCP_REQUEST_TIMEOUT_MS ?? 30_000),
-    };
-}
-/** Console-routed default logger. */
-const consoleLogger = {
-    // eslint-disable-next-line no-console
-    debug: (...args) => console.debug('[mcp]', ...args),
-    // eslint-disable-next-line no-console
-    info: (...args) => console.info('[mcp]', ...args),
-    // eslint-disable-next-line no-console
-    warn: (...args) => console.warn('[mcp]', ...args),
-    // eslint-disable-next-line no-console
-    error: (...args) => console.error('[mcp]', ...args),
-};
-
-exports.consoleLogger = consoleLogger;
-exports.getMCPEnvDefaults = getMCPEnvDefaults;
-//# sourceMappingURL=config.cjs.map

package/dist/cjs/providers/mcp/config.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.cjs","sources":["../../../../src/providers/mcp/config.ts"],"sourcesContent":["/**\n * Environment-driven configuration defaults for the MCP capability provider.\n *\n * Hosts can override any of these via the provider config object. Env vars\n * exist so deployments can brand or tune the library without code changes.\n */\n\nimport type { MCPLogger } from './types';\n\n/**\n * Read env values with fallbacks. Kept as a function (not a constant) so\n * tests and hosts that mutate process.env after import get the current\n * value on each call.\n */\nexport function getMCPEnvDefaults(): {\n  clientName: string;\n  clientVersion: string;\n  connectTimeoutMs: number;\n  requestTimeoutMs: number;\n} {\n  return {\n    /**\n     * Identity sent to MCP servers on handshake. Precedence:\n     *   1. explicit `clientInfo.name` on the provider config\n     *   2. `MCP_CLIENT_NAME` env var\n     *   3. library fallback identity\n     */\n    clientName: process.env.MCP_CLIENT_NAME ?? 'illuma-agents',\n    clientVersion: process.env.MCP_CLIENT_VERSION ?? '1.0.0',\n    connectTimeoutMs: Number(process.env.MCP_CONNECT_TIMEOUT_MS ?? 30_000),\n    requestTimeoutMs: Number(process.env.MCP_REQUEST_TIMEOUT_MS ?? 30_000),\n  };\n}\n\n/** Console-routed default logger. */\nexport const consoleLogger: MCPLogger = {\n  // eslint-disable-next-line no-console\n  debug: (...args) => console.debug('[mcp]', ...args),\n  // eslint-disable-next-line no-console\n  info: (...args) => console.info('[mcp]', ...args),\n  // eslint-disable-next-line no-console\n  warn: (...args) => console.warn('[mcp]', ...args),\n  // eslint-disable-next-line no-console\n  error: (...args) => console.error('[mcp]', ...args),\n};\n"],"names":[],"mappings":";;AAAA;;;;;AAKG;AAIH;;;;AAIG;SACa,iBAAiB,GAAA;IAM/B,OAAO;AACL;;;;;AAKG;AACH,QAAA,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,eAAe;AAC1D,QAAA,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO;QACxD,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC;QACtE,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC;KACvE;AACH;AAEA;AACO,MAAM,aAAa,GAAc;;AAEtC,IAAA,KAAK,EAAE,CAAC,GAAG,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;;AAEnD,IAAA,IAAI,EAAE,CAAC,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;;AAEjD,IAAA,IAAI,EAAE,CAAC,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;;AAEjD,IAAA,KAAK,EAAE,CAAC,GAAG,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;;;;;;"}

package/dist/cjs/providers/mcp/transport.cjs

@@ -1,65 +0,0 @@
-'use strict';
-
-var stdio_js = require('@modelcontextprotocol/sdk/client/stdio.js');
-var sse_js = require('@modelcontextprotocol/sdk/client/sse.js');
-var streamableHttp_js = require('@modelcontextprotocol/sdk/client/streamableHttp.js');
-var websocket_js = require('@modelcontextprotocol/sdk/client/websocket.js');
-
-/**
- * Transport factory — turns an `MCPServerSpec` into a configured
- * MCP SDK transport. One switch statement per kind.
- *
- * Each transport is constructed with the merged header map (spec headers
- * plus any `getAuthHeaders`-resolved additions) for HTTP-based kinds.
- * Stdio uses `env` + `command` + `args` directly.
- */
-/**
- * Build a Transport from a spec + resolved auth headers.
- *
- * @param spec - the server spec (one of stdio / sse / streamable-http / websocket)
- * @param authHeaders - headers merged over `spec.headers` at connect time
- * @returns a configured Transport ready to be passed to `Client.connect()`
- */
-function createTransport(spec, authHeaders) {
-    switch (spec.type) {
-        case 'stdio':
-            return new stdio_js.StdioClientTransport({
-                command: spec.command,
-                args: spec.args,
-                env: spec.env,
-                cwd: spec.cwd,
-            });
-        case 'sse': {
-            const headers = mergeHeaders(spec.headers, authHeaders);
-            return new sse_js.SSEClientTransport(new URL(spec.url), {
-                requestInit: headers ? { headers } : undefined,
-            });
-        }
-        case 'streamable-http': {
-            const headers = mergeHeaders(spec.headers, authHeaders);
-            return new streamableHttp_js.StreamableHTTPClientTransport(new URL(spec.url), {
-                requestInit: headers ? { headers } : undefined,
-            });
-        }
-        case 'websocket':
-            // Node's WebSocket doesn't natively accept arbitrary headers; the MCP
-            // SDK's transport ignores them. We keep the param for future support
-            // but log a warning elsewhere if headers are provided with websocket.
-            return new websocket_js.WebSocketClientTransport(new URL(spec.url));
-        default: {
-            // Exhaustiveness check — TypeScript errors here if a new spec kind
-            // is added without being handled in the switch.
-            const _exhaustive = spec;
-            throw new Error(`Unknown MCP transport spec: ${JSON.stringify(_exhaustive)}`);
-        }
-    }
-}
-/** Merge headers from two sources, with the second taking precedence. */
-function mergeHeaders(base, overrides) {
-    if (!base && !overrides)
-        return undefined;
-    return { ...(base ?? {}), ...(overrides ?? {}) };
-}
-
-exports.createTransport = createTransport;
-//# sourceMappingURL=transport.cjs.map

package/dist/cjs/providers/mcp/transport.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"transport.cjs","sources":["../../../../src/providers/mcp/transport.ts"],"sourcesContent":["/**\n * Transport factory — turns an `MCPServerSpec` into a configured\n * MCP SDK transport. One switch statement per kind.\n *\n * Each transport is constructed with the merged header map (spec headers\n * plus any `getAuthHeaders`-resolved additions) for HTTP-based kinds.\n * Stdio uses `env` + `command` + `args` directly.\n */\n\nimport { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';\nimport { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';\nimport { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';\nimport { WebSocketClientTransport } from '@modelcontextprotocol/sdk/client/websocket.js';\nimport type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';\n\nimport type { MCPServerSpec } from './types';\n\n/**\n * Build a Transport from a spec + resolved auth headers.\n *\n * @param spec - the server spec (one of stdio / sse / streamable-http / websocket)\n * @param authHeaders - headers merged over `spec.headers` at connect time\n * @returns a configured Transport ready to be passed to `Client.connect()`\n */\nexport function createTransport(\n  spec: MCPServerSpec,\n  authHeaders?: Record<string, string>\n): Transport {\n  switch (spec.type) {\n    case 'stdio':\n      return new StdioClientTransport({\n        command: spec.command,\n        args: spec.args,\n        env: spec.env,\n        cwd: spec.cwd,\n      });\n\n    case 'sse': {\n      const headers = mergeHeaders(spec.headers, authHeaders);\n      return new SSEClientTransport(new URL(spec.url), {\n        requestInit: headers ? { headers } : undefined,\n      });\n    }\n\n    case 'streamable-http': {\n      const headers = mergeHeaders(spec.headers, authHeaders);\n      return new StreamableHTTPClientTransport(new URL(spec.url), {\n        requestInit: headers ? { headers } : undefined,\n      });\n    }\n\n    case 'websocket':\n      // Node's WebSocket doesn't natively accept arbitrary headers; the MCP\n      // SDK's transport ignores them. We keep the param for future support\n      // but log a warning elsewhere if headers are provided with websocket.\n      return new WebSocketClientTransport(new URL(spec.url));\n\n    default: {\n      // Exhaustiveness check — TypeScript errors here if a new spec kind\n      // is added without being handled in the switch.\n      const _exhaustive: never = spec;\n      throw new Error(\n        `Unknown MCP transport spec: ${JSON.stringify(_exhaustive)}`\n      );\n    }\n  }\n}\n\n/** Merge headers from two sources, with the second taking precedence. */\nfunction mergeHeaders(\n  base: Record<string, string> | undefined,\n  overrides: Record<string, string> | undefined\n): Record<string, string> | undefined {\n  if (!base && !overrides) return undefined;\n  return { ...(base ?? {}), ...(overrides ?? {}) };\n}\n"],"names":["StdioClientTransport","SSEClientTransport","StreamableHTTPClientTransport","WebSocketClientTransport"],"mappings":";;;;;;;AAAA;;;;;;;AAOG;AAUH;;;;;;AAMG;AACG,SAAU,eAAe,CAC7B,IAAmB,EACnB,WAAoC,EAAA;AAEpC,IAAA,QAAQ,IAAI,CAAC,IAAI;AACf,QAAA,KAAK,OAAO;YACV,OAAO,IAAIA,6BAAoB,CAAC;gBAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,IAAI,CAAC,GAAG;AACd,aAAA,CAAC;QAEJ,KAAK,KAAK,EAAE;YACV,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;YACvD,OAAO,IAAIC,yBAAkB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC/C,WAAW,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,SAAS;AAC/C,aAAA,CAAC;QACJ;QAEA,KAAK,iBAAiB,EAAE;YACtB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;YACvD,OAAO,IAAIC,+CAA6B,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC1D,WAAW,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,SAAS;AAC/C,aAAA,CAAC;QACJ;AAEA,QAAA,KAAK,WAAW;;;;YAId,OAAO,IAAIC,qCAAwB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAExD,SAAS;;;YAGP,MAAM,WAAW,GAAU,IAAI;AAC/B,YAAA,MAAM,IAAI,KAAK,CACb,CAAA,4BAAA,EAA+B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA,CAAE,CAC7D;QACH;;AAEJ;AAEA;AACA,SAAS,YAAY,CACnB,IAAwC,EACxC,SAA6C,EAAA;AAE7C,IAAA,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS;AAAE,QAAA,OAAO,SAAS;AACzC,IAAA,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,EAAE,IAAI,SAAS,IAAI,EAAE,CAAC,EAAE;AAClD;;;;"}

package/dist/cjs/providers/tools-server/ToolsServerCapabilityProvider.cjs

@@ -1,128 +0,0 @@
-'use strict';
-
-var types = require('../types.cjs');
-var httpClient = require('../../utils/httpClient.cjs');
-var toolManifest = require('../../utils/toolManifest.cjs');
-var proxyTool = require('../../tools/proxyTool.cjs');
-
-/**
- * ToolsServerCapabilityProvider — capabilities sourced from a tools-server
- * HTTP endpoint.
- *
- * Fetches the manifest via GET /manifest, builds proxy StructuredTools via
- * POST /execute/:tool. Manifest is cached (TTL-configurable) so repeated
- * init cycles don't refetch.
- *
- * See docs/architecture-capability-layer.md for the design rationale.
- */
-class ToolsServerCapabilityProvider {
-    config;
-    providerId;
-    client;
-    manifestPath;
-    executePath;
-    cache;
-    getExecuteAuthHeaders;
-    constructor(config) {
-        this.config = config;
-        const { baseUrl, apiKey, manifestPath = '/manifest', executePath = '/execute/:name', timeoutMs = 30_000, manifestTtlMs = 60_000, client, proxy, getExecuteAuthHeaders, } = config;
-        if (!baseUrl) {
-            throw new Error('ToolsServerCapabilityProvider: baseUrl is required');
-        }
-        if (!apiKey) {
-            throw new Error('ToolsServerCapabilityProvider: apiKey is required');
-        }
-        this.providerId = `tools-server:${baseUrl}`;
-        this.manifestPath = manifestPath;
-        this.executePath = executePath;
-        this.cache = new toolManifest.ManifestCache({ ttlMs: manifestTtlMs });
-        this.getExecuteAuthHeaders = getExecuteAuthHeaders;
-        if (client) {
-            this.client = client;
-        }
-        else {
-            const httpConfig = {
-                baseURL: baseUrl,
-                apiKey,
-                timeoutMs,
-                proxy,
-            };
-            this.client = httpClient.createHttpClient(httpConfig);
-        }
-    }
-    async fetchManifest(filter) {
-        const cacheKey = toolManifest.filterToCacheKey(filter);
-        const cached = this.cache.get(cacheKey);
-        if (cached) {
-            // DEBUG: cache hit (remove after stabilization)
-            // eslint-disable-next-line no-console
-            console.debug(`[${this.providerId}] manifest cache hit — ${cached.length} caps`);
-            return cached;
-        }
-        // DEBUG
-        // eslint-disable-next-line no-console
-        console.debug(`[${this.providerId}] fetching manifest from ${this.manifestPath}`);
-        const res = await this.client.get(this.manifestPath);
-        httpClient.assertOk(res.status, this.manifestPath, res.data);
-        const entries = Array.isArray(res.data) ? res.data : [];
-        const capabilities = entries.map((entry) => normalizeEntry(entry));
-        // Apply filter before caching the full list separately so unfiltered
-        // refetches don't re-hit the network.
-        const fullCacheKey = toolManifest.filterToCacheKey();
-        this.cache.set(fullCacheKey, capabilities);
-        const filtered = toolManifest.applyFilter(capabilities, filter);
-        if (cacheKey !== fullCacheKey) {
-            this.cache.set(cacheKey, filtered);
-        }
-        // DEBUG
-        // eslint-disable-next-line no-console
-        console.debug(`[${this.providerId}] manifest loaded — ${capabilities.length} caps, ${filtered.length} after filter`);
-        return filtered;
-    }
-    async createRunnables(capabilities, credentials) {
-        return capabilities.map((cap) => proxyTool.buildProxyTool(cap, credentials, {
-            client: this.client,
-            executePath: this.executePath,
-            getAuthHeaders: this.getExecuteAuthHeaders,
-        }));
-    }
-    /** Force a manifest refresh on next fetchManifest call. */
-    invalidateCache() {
-        this.cache.clear();
-    }
-}
-/**
- * Translate a raw tools-server manifest entry into a typed Capability.
- * Defensive — tools-server may add fields; we pull only what we need.
- */
-function normalizeEntry(entry) {
-    return {
-        kind: types.CapabilityKind.TOOL,
-        name: entry.pluginKey,
-        description: entry.description ?? '',
-        schema: entry.schema ?? entry.jsonSchema,
-        authConfig: (entry.authConfig ?? []).map((ac) => ({
-            authField: ac.authField,
-            label: ac.label,
-            description: ac.description,
-            required: ac.required,
-            prod: ac.prod,
-            admin: ac.admin,
-            hide: ac.hide,
-            // Source is a string in wire format; downstream consumers coerce to AuthSource.
-            source: ac.source,
-        })),
-        metadata: {
-            icon: entry.icon,
-            category: entry.category,
-            tags: entry.tags,
-            // Governance — hosts use these to gate UI/role/environment.
-            hidden: entry.hidden,
-            admin: entry.admin,
-            env: entry.env,
-        },
-    };
-}
-
-exports.ToolsServerCapabilityProvider = ToolsServerCapabilityProvider;
-//# sourceMappingURL=ToolsServerCapabilityProvider.cjs.map

package/dist/cjs/providers/tools-server/ToolsServerCapabilityProvider.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"ToolsServerCapabilityProvider.cjs","sources":["../../../../src/providers/tools-server/ToolsServerCapabilityProvider.ts"],"sourcesContent":["/**\n * ToolsServerCapabilityProvider — capabilities sourced from a tools-server\n * HTTP endpoint.\n *\n * Fetches the manifest via GET /manifest, builds proxy StructuredTools via\n * POST /execute/:tool. Manifest is cached (TTL-configurable) so repeated\n * init cycles don't refetch.\n *\n * See docs/architecture-capability-layer.md for the design rationale.\n */\n\nimport type { AxiosInstance } from 'axios';\nimport type { StructuredToolInterface } from '@langchain/core/tools';\nimport {\n  CapabilityKind,\n  type Capability,\n  type CapabilityFilter,\n  type CapabilityProvider,\n  type CredentialMap,\n} from '@/providers/types';\nimport {\n  createHttpClient,\n  type HttpClientConfig,\n  assertOk,\n} from '@/utils/httpClient';\nimport {\n  ManifestCache,\n  filterToCacheKey,\n  applyFilter,\n} from '@/utils/toolManifest';\nimport { buildProxyTool } from '@/tools/proxyTool';\n\n/** Configuration for ToolsServerCapabilityProvider. */\nexport interface ToolsServerConfig {\n  /** Tools-server base URL (e.g., https://tools.illuma.ai or http://localhost:3500). */\n  baseUrl: string;\n  /** API key sent as x-api-key header on all requests. Required. */\n  apiKey: string;\n  /** Optional override for manifest path. Defaults to `/manifest`. */\n  manifestPath?: string;\n  /** Optional override for execute path template. Defaults to `/execute/:name`. */\n  executePath?: string;\n  /** Request timeout in ms. Defaults to 30_000. */\n  timeoutMs?: number;\n  /** Manifest cache TTL in ms. 0 disables. Defaults to 60_000 (1 min). */\n  manifestTtlMs?: number;\n  /** Optional pre-built axios instance (for testing). */\n  client?: AxiosInstance;\n  /** Optional proxy override (defaults to process.env.PROXY). */\n  proxy?: string | null;\n  /**\n   * Optional per-request auth header builder — invoked on every tool\n   * invocation (NOT on the manifest fetch, which is service-to-service).\n   * When provided, the returned headers are merged into the `/execute`\n   * request so the host can pass user-scoped identity (e.g.,\n   * `Authorization: Bearer <jwt>`) that tools-server verifies for\n   * admin-gated tools.\n   *\n   * Typical host wiring: mint a short-lived JWT per call carrying the\n   * authenticated user's `{ userId, role }` claims; tools-server's\n   * `TOOLS_SERVER_JWT_SECRET` validates.\n   */\n  getExecuteAuthHeaders?: () =>\n    | Record<string, string>\n    | Promise<Record<string, string>>;\n}\n\n/**\n * Shape of a single entry from tools-server's /manifest response.\n *\n * Matches the tools-server ManifestToolEntry type. We define our own here\n * to avoid cross-package coupling — the shape is a stable HTTP contract.\n */\ninterface ToolsServerManifestEntry {\n  pluginKey: string;\n  name: string;\n  description: string;\n  icon?: string;\n  authConfig?: Array<{\n    authField: string;\n    label?: string;\n    description?: string;\n    source?: string;\n    required?: boolean;\n    prod?: boolean;\n    admin?: boolean;\n    hide?: boolean;\n  }>;\n  /** Input schema as JSON Schema (tools-server emits `schema`). */\n  schema?: unknown;\n  /** Legacy alias accepted for backwards compatibility. */\n  jsonSchema?: unknown;\n  category?: string;\n  tags?: string[];\n  toolkit?: string;\n  endpoint?: string;\n  /** Governance flags forwarded by tools-server getManifest(). */\n  hidden?: boolean;\n  admin?: boolean;\n  env?: Array<'development' | 'production' | 'test' | 'staging'>;\n}\n\nexport class ToolsServerCapabilityProvider implements CapabilityProvider {\n  readonly providerId: string;\n  private readonly client: AxiosInstance;\n  private readonly manifestPath: string;\n  private readonly executePath: string;\n  private readonly cache: ManifestCache;\n  private readonly getExecuteAuthHeaders?: () =>\n    | Record<string, string>\n    | Promise<Record<string, string>>;\n\n  constructor(private readonly config: ToolsServerConfig) {\n    const {\n      baseUrl,\n      apiKey,\n      manifestPath = '/manifest',\n      executePath = '/execute/:name',\n      timeoutMs = 30_000,\n      manifestTtlMs = 60_000,\n      client,\n      proxy,\n      getExecuteAuthHeaders,\n    } = config;\n\n    if (!baseUrl) {\n      throw new Error('ToolsServerCapabilityProvider: baseUrl is required');\n    }\n    if (!apiKey) {\n      throw new Error('ToolsServerCapabilityProvider: apiKey is required');\n    }\n\n    this.providerId = `tools-server:${baseUrl}`;\n    this.manifestPath = manifestPath;\n    this.executePath = executePath;\n    this.cache = new ManifestCache({ ttlMs: manifestTtlMs });\n    this.getExecuteAuthHeaders = getExecuteAuthHeaders;\n\n    if (client) {\n      this.client = client;\n    } else {\n      const httpConfig: HttpClientConfig = {\n        baseURL: baseUrl,\n        apiKey,\n        timeoutMs,\n        proxy,\n      };\n      this.client = createHttpClient(httpConfig);\n    }\n  }\n\n  async fetchManifest(filter?: CapabilityFilter): Promise<Capability[]> {\n    const cacheKey = filterToCacheKey(filter);\n    const cached = this.cache.get(cacheKey);\n    if (cached) {\n      // DEBUG: cache hit (remove after stabilization)\n      // eslint-disable-next-line no-console\n      console.debug(\n        `[${this.providerId}] manifest cache hit — ${cached.length} caps`\n      );\n      return cached;\n    }\n\n    // DEBUG\n    // eslint-disable-next-line no-console\n    console.debug(\n      `[${this.providerId}] fetching manifest from ${this.manifestPath}`\n    );\n\n    const res = await this.client.get<ToolsServerManifestEntry[]>(\n      this.manifestPath\n    );\n    assertOk(res.status, this.manifestPath, res.data);\n\n    const entries = Array.isArray(res.data) ? res.data : [];\n    const capabilities: Capability[] = entries.map((entry) =>\n      normalizeEntry(entry)\n    );\n\n    // Apply filter before caching the full list separately so unfiltered\n    // refetches don't re-hit the network.\n    const fullCacheKey = filterToCacheKey();\n    this.cache.set(fullCacheKey, capabilities);\n\n    const filtered = applyFilter(capabilities, filter);\n    if (cacheKey !== fullCacheKey) {\n      this.cache.set(cacheKey, filtered);\n    }\n\n    // DEBUG\n    // eslint-disable-next-line no-console\n    console.debug(\n      `[${this.providerId}] manifest loaded — ${capabilities.length} caps, ${filtered.length} after filter`\n    );\n\n    return filtered;\n  }\n\n  async createRunnables(\n    capabilities: Capability[],\n    credentials: CredentialMap\n  ): Promise<StructuredToolInterface[]> {\n    return capabilities.map((cap) =>\n      buildProxyTool(cap, credentials, {\n        client: this.client,\n        executePath: this.executePath,\n        getAuthHeaders: this.getExecuteAuthHeaders,\n      })\n    );\n  }\n\n  /** Force a manifest refresh on next fetchManifest call. */\n  invalidateCache(): void {\n    this.cache.clear();\n  }\n}\n\n/**\n * Translate a raw tools-server manifest entry into a typed Capability.\n * Defensive — tools-server may add fields; we pull only what we need.\n */\nfunction normalizeEntry(entry: ToolsServerManifestEntry): Capability {\n  return {\n    kind: CapabilityKind.TOOL,\n    name: entry.pluginKey,\n    description: entry.description ?? '',\n    schema: entry.schema ?? entry.jsonSchema,\n    authConfig: (entry.authConfig ?? []).map((ac) => ({\n      authField: ac.authField,\n      label: ac.label,\n      description: ac.description,\n      required: ac.required,\n      prod: ac.prod,\n      admin: ac.admin,\n      hide: ac.hide,\n      // Source is a string in wire format; downstream consumers coerce to AuthSource.\n      source: ac.source as Capability['authConfig'][number]['source'],\n    })),\n    metadata: {\n      icon: entry.icon,\n      category: entry.category,\n      tags: entry.tags,\n      // Governance — hosts use these to gate UI/role/environment.\n      hidden: entry.hidden,\n      admin: entry.admin,\n      env: entry.env,\n    },\n  };\n}\n"],"names":["ManifestCache","createHttpClient","filterToCacheKey","assertOk","applyFilter","buildProxyTool","CapabilityKind"],"mappings":";;;;;;;AAAA;;;;;;;;;AASG;MA6FU,6BAA6B,CAAA;AAUX,IAAA,MAAA;AATpB,IAAA,UAAU;AACF,IAAA,MAAM;AACN,IAAA,YAAY;AACZ,IAAA,WAAW;AACX,IAAA,KAAK;AACL,IAAA,qBAAqB;AAItC,IAAA,WAAA,CAA6B,MAAyB,EAAA;QAAzB,IAAA,CAAA,MAAM,GAAN,MAAM;AACjC,QAAA,MAAM,EACJ,OAAO,EACP,MAAM,EACN,YAAY,GAAG,WAAW,EAC1B,WAAW,GAAG,gBAAgB,EAC9B,SAAS,GAAG,MAAM,EAClB,aAAa,GAAG,MAAM,EACtB,MAAM,EACN,KAAK,EACL,qBAAqB,GACtB,GAAG,MAAM;QAEV,IAAI,CAAC,OAAO,EAAE;AACZ,YAAA,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;QACvE;QACA,IAAI,CAAC,MAAM,EAAE;AACX,YAAA,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC;QACtE;AAEA,QAAA,IAAI,CAAC,UAAU,GAAG,CAAA,aAAA,EAAgB,OAAO,EAAE;AAC3C,QAAA,IAAI,CAAC,YAAY,GAAG,YAAY;AAChC,QAAA,IAAI,CAAC,WAAW,GAAG,WAAW;AAC9B,QAAA,IAAI,CAAC,KAAK,GAAG,IAAIA,0BAAa,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AACxD,QAAA,IAAI,CAAC,qBAAqB,GAAG,qBAAqB;QAElD,IAAI,MAAM,EAAE;AACV,YAAA,IAAI,CAAC,MAAM,GAAG,MAAM;QACtB;aAAO;AACL,YAAA,MAAM,UAAU,GAAqB;AACnC,gBAAA,OAAO,EAAE,OAAO;gBAChB,MAAM;gBACN,SAAS;gBACT,KAAK;aACN;AACD,YAAA,IAAI,CAAC,MAAM,GAAGC,2BAAgB,CAAC,UAAU,CAAC;QAC5C;IACF;IAEA,MAAM,aAAa,CAAC,MAAyB,EAAA;AAC3C,QAAA,MAAM,QAAQ,GAAGC,6BAAgB,CAAC,MAAM,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvC,IAAI,MAAM,EAAE;;;AAGV,YAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,uBAAA,EAA0B,MAAM,CAAC,MAAM,CAAA,KAAA,CAAO,CAClE;AACD,YAAA,OAAO,MAAM;QACf;;;AAIA,QAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,yBAAA,EAA4B,IAAI,CAAC,YAAY,CAAA,CAAE,CACnE;AAED,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAC/B,IAAI,CAAC,YAAY,CAClB;AACD,QAAAC,mBAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC;QAEjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,EAAE;AACvD,QAAA,MAAM,YAAY,GAAiB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,KACnD,cAAc,CAAC,KAAK,CAAC,CACtB;;;AAID,QAAA,MAAM,YAAY,GAAGD,6BAAgB,EAAE;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;QAE1C,MAAM,QAAQ,GAAGE,wBAAW,CAAC,YAAY,EAAE,MAAM,CAAC;AAClD,QAAA,IAAI,QAAQ,KAAK,YAAY,EAAE;YAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpC;;;AAIA,QAAA,OAAO,CAAC,KAAK,CACX,CAAA,CAAA,EAAI,IAAI,CAAC,UAAU,CAAA,oBAAA,EAAuB,YAAY,CAAC,MAAM,CAAA,OAAA,EAAU,QAAQ,CAAC,MAAM,CAAA,aAAA,CAAe,CACtG;AAED,QAAA,OAAO,QAAQ;IACjB;AAEA,IAAA,MAAM,eAAe,CACnB,YAA0B,EAC1B,WAA0B,EAAA;AAE1B,QAAA,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,KAC1BC,wBAAc,CAAC,GAAG,EAAE,WAAW,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,cAAc,EAAE,IAAI,CAAC,qBAAqB;AAC3C,SAAA,CAAC,CACH;IACH;;IAGA,eAAe,GAAA;AACb,QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;IACpB;AACD;AAED;;;AAGG;AACH,SAAS,cAAc,CAAC,KAA+B,EAAA;IACrD,OAAO;QACL,IAAI,EAAEC,oBAAc,CAAC,IAAI;QACzB,IAAI,EAAE,KAAK,CAAC,SAAS;AACrB,QAAA,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;AACpC,QAAA,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU;AACxC,QAAA,UAAU,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM;YAChD,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,IAAI,EAAE,EAAE,CAAC,IAAI;;YAEb,MAAM,EAAE,EAAE,CAAC,MAAoD;AAChE,SAAA,CAAC,CAAC;AACH,QAAA,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;;YAEhB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;AACf,SAAA;KACF;AACH;;;;"}

package/dist/cjs/providers/types.cjs

@@ -1,51 +0,0 @@
-'use strict';
-
-/**
- * CapabilityProvider types — the abstraction that lets agents consume tools,
- * skills, and MCP-backed capabilities through a single interface regardless
- * of where they come from.
- *
- * Design principles:
- *   1. Source-agnostic — providers are distinguished by WHERE they come from
- *      (tools-server, skill store, MCP server), not by the backend service
- *      any individual tool calls.
- *   2. Credential-agnostic — providers receive a flat credentialMap from the
- *      host; they don't know about user settings, databases, OAuth flows.
- *   3. Extension-ready — the shape reserves slots for upcoming patterns
- *      (skills injectedMessages, ToolCall.auth/expires_at, skill sessions)
- *      so when those land we don't refactor the core.
- */
-/**
- * Kind of capability. Today only TOOL is implemented; SKILL and MCP are
- * reserved — SkillCapabilityProvider + MCPCapabilityProvider will populate
- * them in later phases. Keeping the enum from day one prevents a breaking
- * change when those ship.
- */
-exports.CapabilityKind = void 0;
-(function (CapabilityKind) {
-    CapabilityKind["TOOL"] = "tool";
-    CapabilityKind["SKILL"] = "skill";
-    CapabilityKind["MCP"] = "mcp";
-    /**
-     * Remote agent reachable over the A2A (Agent-to-Agent) protocol.
-     * The library's `A2ACapabilityProvider` is a client for this kind —
-     * invoking an A2A capability sends a JSON-RPC `tasks/send` to the
-     * remote agent's endpoint.
-     */
-    CapabilityKind["A2A"] = "a2a";
-})(exports.CapabilityKind || (exports.CapabilityKind = {}));
-/**
- * Where an auth credential comes from. Used by hosts to decide whether to
- * forward the credential per-request or let the capability provider resolve
- * it from its own environment.
- */
-exports.AuthSource = void 0;
-(function (AuthSource) {
-    /** Resolved by the capability provider itself from its environment. Host never sends. */
-    AuthSource["SERVER"] = "server";
-    /** User-configured value stored in the host's credential store. Host forwards per-request. */
-    AuthSource["USER"] = "user";
-    /** Active OAuth/session token. Host forwards per-request from active session. */
-    AuthSource["FORWARDED"] = "forwarded";
-})(exports.AuthSource || (exports.AuthSource = {}));
-//# sourceMappingURL=types.cjs.map

package/dist/cjs/providers/types.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.cjs","sources":["../../../src/providers/types.ts"],"sourcesContent":["/**\n * CapabilityProvider types — the abstraction that lets agents consume tools,\n * skills, and MCP-backed capabilities through a single interface regardless\n * of where they come from.\n *\n * Design principles:\n *   1. Source-agnostic — providers are distinguished by WHERE they come from\n *      (tools-server, skill store, MCP server), not by the backend service\n *      any individual tool calls.\n *   2. Credential-agnostic — providers receive a flat credentialMap from the\n *      host; they don't know about user settings, databases, OAuth flows.\n *   3. Extension-ready — the shape reserves slots for upcoming patterns\n *      (skills injectedMessages, ToolCall.auth/expires_at, skill sessions)\n *      so when those land we don't refactor the core.\n */\n\nimport type { StructuredToolInterface } from '@langchain/core/tools';\n\n/**\n * Kind of capability. Today only TOOL is implemented; SKILL and MCP are\n * reserved — SkillCapabilityProvider + MCPCapabilityProvider will populate\n * them in later phases. Keeping the enum from day one prevents a breaking\n * change when those ship.\n */\nexport enum CapabilityKind {\n  TOOL = 'tool',\n  SKILL = 'skill',\n  MCP = 'mcp',\n  /**\n   * Remote agent reachable over the A2A (Agent-to-Agent) protocol.\n   * The library's `A2ACapabilityProvider` is a client for this kind —\n   * invoking an A2A capability sends a JSON-RPC `tasks/send` to the\n   * remote agent's endpoint.\n   */\n  A2A = 'a2a',\n}\n\n/**\n * Where an auth credential comes from. Used by hosts to decide whether to\n * forward the credential per-request or let the capability provider resolve\n * it from its own environment.\n */\nexport enum AuthSource {\n  /** Resolved by the capability provider itself from its environment. Host never sends. */\n  SERVER = 'server',\n  /** User-configured value stored in the host's credential store. Host forwards per-request. */\n  USER = 'user',\n  /** Active OAuth/session token. Host forwards per-request from active session. */\n  FORWARDED = 'forwarded',\n}\n\n/**\n * One entry in a capability's auth config. Describes a single credential\n * the capability needs. The `source` field tells the host how to resolve\n * the value; the `prod`/`admin`/`hide` flags control UI visibility.\n */\nexport interface AuthConfigEntry {\n  /** Environment-variable-style name (e.g., \"OPENAI_API_KEY\"). Stable identifier. */\n  authField: string;\n  /** Human-readable label for UI. */\n  label?: string;\n  /** Optional description of how to obtain the credential. */\n  description?: string;\n  /** Where the value comes from. Defaults to USER if unspecified. */\n  source?: AuthSource;\n  /** True if the credential is required for the capability to function. */\n  required?: boolean;\n  /** Platform-managed in production — never prompt user. */\n  prod?: boolean;\n  /** Only admins can configure. */\n  admin?: boolean;\n  /** Never show in any UI (used when source === SERVER). */\n  hide?: boolean;\n}\n\n/**\n * Arbitrary metadata attached to a capability. Extension point.\n *\n * Fields prefixed with \"Reserved for\" are not populated today but exist in\n * the type so upstream patterns (skills, auth expiration, sessions) can\n * drop in without a schema migration.\n */\nexport interface CapabilityMetadata {\n  /** Icon URL or path relative to the provider's static asset root. */\n  icon?: string;\n  /** Category for UI grouping (e.g., \"search\", \"image\", \"finance\"). */\n  category?: string;\n  /** Free-form tags for filtering / search. */\n  tags?: string[];\n\n  // --- Governance flags ------------------------------------------------\n\n  /**\n   * When true, hosts omit this capability from user-facing pickers\n   * (Agent Builder, tool dropdown). Still invokable when a saved agent\n   * references it by name.\n   */\n  hidden?: boolean;\n  /** When true, only admin-role users can enable or invoke this capability. */\n  admin?: boolean;\n  /**\n   * Deployment-stage restriction. When set, hosts whose deployment stage\n   * isn't in the array should hide the capability (e.g., a prod host\n   * shouldn't surface a tool with `env: ['development']`).\n   */\n  env?: Array<'development' | 'production' | 'test' | 'staging'>;\n\n  // --- Reserved for upstream patterns (not populated today) ---\n\n  /** Reserved for upstream `fix/auth-events` — auth mode declared by tool. */\n  auth?: string;\n  /** Reserved for upstream `fix/auth-events` — Unix timestamp for token expiration. */\n  expires_at?: number;\n  /** Reserved for upstream skills — capability returns injected messages on execute. */\n  injectedMessages?: boolean;\n  /** Reserved for upstream skills — capability consumes ToolSessionMap state. */\n  sessionAware?: boolean;\n}\n\n/**\n * A single capability — a tool, skill, or MCP-backed operation that an agent\n * can invoke. The shape mirrors common plugin-manifest conventions so the\n * same entry can round-trip between an upstream catalog and a host registry.\n */\nexport interface Capability {\n  /** What kind of capability this is. Controls how it's invoked downstream. */\n  kind: CapabilityKind;\n  /**\n   * Stable unique identifier. For tools this is the pluginKey\n   * (e.g., \"dalle\", \"wikipedia\"). For skills this is the skill's `name`.\n   * Used everywhere the capability is referenced.\n   */\n  name: string;\n  /** Human-readable description for the LLM and UI. */\n  description: string;\n  /**\n   * Input schema as JSON Schema. For tools this comes from the Zod schema\n   * passed through `zodToJsonSchema`. Optional for capabilities with no\n   * input (e.g., parameter-less skills).\n   */\n  schema?: unknown;\n  /** Credential requirements. */\n  authConfig: AuthConfigEntry[];\n  /** Extension metadata. See CapabilityMetadata. */\n  metadata: CapabilityMetadata;\n}\n\n/** Filter for fetchManifest. All fields optional; missing = no filter. */\nexport interface CapabilityFilter {\n  kind?: CapabilityKind;\n  tags?: string[];\n  /** Restrict to capabilities whose `name` is in this list. */\n  names?: string[];\n}\n\n/**\n * A flat credential map: authField → value.\n *\n * The host is responsible for resolving values (from env vars, user\n * settings, OAuth sessions, etc.) before passing to the provider. The\n * provider does not inspect the origin — it just forwards to the tool.\n */\nexport type CredentialMap = Record<string, string>;\n\n/**\n * The core interface. All concrete providers implement this.\n *\n * Providers are identified by `providerId` for logging/debug. They fetch\n * their own manifest and build LangChain-compatible runnables from it.\n *\n * Lifetime: a provider may be instantiated once at startup (e.g., tools-\n * server pointing at a stable URL) or per-user (e.g., MCP with per-user\n * OAuth). The interface is agnostic.\n */\nexport interface CapabilityProvider {\n  /** Stable identifier for this provider instance (e.g., \"tools-server:https://...\"). */\n  readonly providerId: string;\n\n  /**\n   * Return the list of capabilities this provider exposes.\n   *\n   * Implementations may cache the manifest — the contract is that the\n   * returned list reflects the provider's current view of available\n   * capabilities.\n   *\n   * @param filter optional filter to scope the result\n   */\n  fetchManifest(filter?: CapabilityFilter): Promise<Capability[]>;\n\n  /**\n   * Build LangChain StructuredTools from a set of capabilities using the\n   * caller-supplied credentials.\n   *\n   * Called at agent init. The returned tools are bound to the LLM and\n   * invoked during the graph's tool-calling loop.\n   *\n   * @param capabilities the subset of capabilities the agent wants to use\n   * @param credentials credential values keyed by authField\n   */\n  createRunnables(\n    capabilities: Capability[],\n    credentials: CredentialMap\n  ): Promise<StructuredToolInterface[]>;\n}\n"],"names":["CapabilityKind","AuthSource"],"mappings":";;AAAA;;;;;;;;;;;;;;AAcG;AAIH;;;;;AAKG;AACSA;AAAZ,CAAA,UAAY,cAAc,EAAA;AACxB,IAAA,cAAA,CAAA,MAAA,CAAA,GAAA,MAAa;AACb,IAAA,cAAA,CAAA,OAAA,CAAA,GAAA,OAAe;AACf,IAAA,cAAA,CAAA,KAAA,CAAA,GAAA,KAAW;AACX;;;;;AAKG;AACH,IAAA,cAAA,CAAA,KAAA,CAAA,GAAA,KAAW;AACb,CAAC,EAXWA,sBAAc,KAAdA,sBAAc,GAAA,EAAA,CAAA,CAAA;AAa1B;;;;AAIG;AACSC;AAAZ,CAAA,UAAY,UAAU,EAAA;;AAEpB,IAAA,UAAA,CAAA,QAAA,CAAA,GAAA,QAAiB;;AAEjB,IAAA,UAAA,CAAA,MAAA,CAAA,GAAA,MAAa;;AAEb,IAAA,UAAA,CAAA,WAAA,CAAA,GAAA,WAAuB;AACzB,CAAC,EAPWA,kBAAU,KAAVA,kBAAU,GAAA,EAAA,CAAA,CAAA;;"}