@mondaydotcomorg/atp-compiler 0.17.14

package/dist/protocol/src/auth.js

@@ -0,0 +1,202 @@
+/**
+ * Authentication and credential management types for Agent Tool Protocol
+ */
+/**
+ * Credential resolver - resolves auth config to actual credentials
+ */
+export class CredentialResolver {
+    providers = new Map();
+    /**
+     * Registers a runtime credential provider
+     */
+    registerProvider(provider) {
+        this.providers.set(provider.name, provider);
+    }
+    /**
+     * Resolves auth configuration to credentials
+     */
+    async resolve(authConfig) {
+        if (authConfig.provider) {
+            const provider = this.providers.get(authConfig.provider);
+            if (!provider) {
+                throw new Error(`Credential provider '${authConfig.provider}' not found`);
+            }
+            return await provider.resolve();
+        }
+        switch (authConfig.scheme) {
+            case 'apiKey':
+                return this.resolveAPIKey(authConfig);
+            case 'bearer':
+                return this.resolveBearer(authConfig);
+            case 'basic':
+                return this.resolveBasic(authConfig);
+            case 'oauth2':
+                return this.resolveOAuth2(authConfig);
+            case 'custom':
+                return this.resolveCustom(authConfig);
+            case 'composite':
+                return this.resolveComposite(authConfig);
+            default:
+                throw new Error(`Unsupported auth scheme: ${authConfig.scheme}`);
+        }
+    }
+    resolveAPIKey(config) {
+        const value = this.getValue(config);
+        if (!value) {
+            throw new Error(`API key not provided for '${config.name}'`);
+        }
+        if (config.in === 'header') {
+            return { headers: { [config.name]: value } };
+        }
+        else {
+            return { queryParams: { [config.name]: value } };
+        }
+    }
+    resolveBearer(config) {
+        const token = this.getValue(config);
+        if (!token) {
+            throw new Error('Bearer token not provided');
+        }
+        return {
+            headers: {
+                Authorization: `Bearer ${token}`,
+            },
+        };
+    }
+    resolveBasic(config) {
+        const username = config.usernameEnvVar ? process.env[config.usernameEnvVar] : config.username;
+        const password = config.passwordEnvVar
+            ? process.env[config.passwordEnvVar]
+            : this.getValue(config);
+        if (!username || !password) {
+            throw new Error('Basic auth username and password not provided');
+        }
+        const credentials = Buffer.from(`${username}:${password}`).toString('base64');
+        return {
+            headers: {
+                Authorization: `Basic ${credentials}`,
+            },
+        };
+    }
+    async resolveOAuth2(config) {
+        const clientId = config.clientIdEnvVar ? process.env[config.clientIdEnvVar] : config.clientId;
+        const clientSecret = config.clientSecretEnvVar
+            ? process.env[config.clientSecretEnvVar]
+            : undefined;
+        if (!clientId || !clientSecret) {
+            throw new Error('OAuth2 client credentials not provided');
+        }
+        if (config.flow === 'clientCredentials') {
+            const token = await this.fetchOAuth2Token(config.tokenUrl, clientId, clientSecret, config.scopes);
+            return {
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                },
+            };
+        }
+        const token = this.getValue(config);
+        if (token) {
+            return {
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                },
+            };
+        }
+        throw new Error(`OAuth2 flow '${config.flow}' requires manual token setup`);
+    }
+    resolveCustom(config) {
+        const headers = {};
+        const queryParams = {};
+        Object.assign(headers, config.headers);
+        if (config.headerEnvVars) {
+            for (const [headerName, envVar] of Object.entries(config.headerEnvVars)) {
+                const value = process.env[envVar];
+                if (value) {
+                    headers[headerName] = value;
+                }
+            }
+        }
+        if (config.queryParams) {
+            Object.assign(queryParams, config.queryParams);
+        }
+        if (config.queryParamEnvVars) {
+            for (const [paramName, envVar] of Object.entries(config.queryParamEnvVars)) {
+                const value = process.env[envVar];
+                if (value) {
+                    queryParams[paramName] = value;
+                }
+            }
+        }
+        return {
+            headers: Object.keys(headers).length > 0 ? headers : undefined,
+            queryParams: Object.keys(queryParams).length > 0 ? queryParams : undefined,
+        };
+    }
+    resolveComposite(config) {
+        const headers = {};
+        const queryParams = {};
+        for (const [credName, credConfig] of Object.entries(config.credentials)) {
+            const value = credConfig.envVar ? process.env[credConfig.envVar] : credConfig.value;
+            if (!value) {
+                if (credConfig.required !== false) {
+                    throw new Error(`Required credential '${credName}' not provided`);
+                }
+                continue;
+            }
+            const injectAs = config.injectAs || 'header';
+            if ((injectAs === 'header' || injectAs === 'both') && credConfig.headerName) {
+                headers[credConfig.headerName] = value;
+            }
+            if ((injectAs === 'query' || injectAs === 'both') && credConfig.queryParamName) {
+                queryParams[credConfig.queryParamName] = value;
+            }
+            if (!credConfig.headerName && !credConfig.queryParamName) {
+                if (injectAs === 'query' || injectAs === 'both') {
+                    queryParams[credName] = value;
+                }
+                else {
+                    headers[`X-${credName}`] = value;
+                }
+            }
+        }
+        return {
+            headers: Object.keys(headers).length > 0 ? headers : undefined,
+            queryParams: Object.keys(queryParams).length > 0 ? queryParams : undefined,
+        };
+    }
+    /**
+     * Gets credential value from config (env var or direct value)
+     */
+    getValue(config) {
+        if (config.envVar) {
+            return process.env[config.envVar];
+        }
+        return config.value;
+    }
+    /**
+     * Fetches OAuth2 token using client credentials flow
+     */
+    async fetchOAuth2Token(tokenUrl, clientId, clientSecret, scopes) {
+        const params = new URLSearchParams({
+            grant_type: 'client_credentials',
+            client_id: clientId,
+            client_secret: clientSecret,
+        });
+        if (scopes && scopes.length > 0) {
+            params.append('scope', scopes.join(' '));
+        }
+        const response = await fetch(tokenUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: params.toString(),
+        });
+        if (!response.ok) {
+            throw new Error(`OAuth2 token fetch failed: ${response.statusText}`);
+        }
+        const data = (await response.json());
+        return data.access_token;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/protocol/src/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../protocol/src/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAiKH;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACtB,SAAS,GAAoC,IAAI,GAAG,EAAE,CAAC;IAE/D;;OAEG;IACH,gBAAgB,CAAC,QAA4B;QAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,UAAsB;QACnC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,CAAC,QAAQ,aAAa,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,CAAC;QAED,QAAQ,UAAU,CAAC,MAAM,EAAE,CAAC;YAC3B,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACvC,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACvC,KAAK,OAAO;gBACX,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YACtC,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACvC,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACvC,KAAK,WAAW;gBACf,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC1C;gBACC,MAAM,IAAI,KAAK,CAAC,4BAA6B,UAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC;IACF,CAAC;IAEO,aAAa,CAAC,MAAwB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9C,CAAC;aAAM,CAAC;YACP,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,CAAC;IACF,CAAC;IAEO,aAAa,CAAC,MAAwB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO;YACN,OAAO,EAAE;gBACR,aAAa,EAAE,UAAU,KAAK,EAAE;aAChC;SACD,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAuB;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc;YACrC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;YACpC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEzB,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9E,OAAO;YACN,OAAO,EAAE;gBACR,aAAa,EAAE,SAAS,WAAW,EAAE;aACrC;SACD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAwB;QACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC9F,MAAM,YAAY,GAAG,MAAM,CAAC,kBAAkB;YAC7C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC;YACxC,CAAC,CAAC,SAAS,CAAC;QAEb,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CACxC,MAAM,CAAC,QAAQ,EACf,QAAQ,EACR,YAAY,EACZ,MAAM,CAAC,MAAM,CACb,CAAC;YACF,OAAO;gBACN,OAAO,EAAE;oBACR,aAAa,EAAE,UAAU,KAAK,EAAE;iBAChC;aACD,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,KAAK,EAAE,CAAC;YACX,OAAO;gBACN,OAAO,EAAE;oBACR,aAAa,EAAE,UAAU,KAAK,EAAE;iBAChC;aACD,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,+BAA+B,CAAC,CAAC;IAC7E,CAAC;IAEO,aAAa,CAAC,MAAwB;QAC7C,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,WAAW,GAA2B,EAAE,CAAC;QAE/C,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAEvC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBACzE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,KAAK,EAAE,CAAC;oBACX,OAAO,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;gBAC7B,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC5E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,KAAK,EAAE,CAAC;oBACX,WAAW,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;gBAChC,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC9D,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;SAC1E,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,MAA2B;QACnD,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,WAAW,GAA2B,EAAE,CAAC;QAE/C,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACzE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YAEpF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;oBACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,gBAAgB,CAAC,CAAC;gBACnE,CAAC;gBACD,SAAS;YACV,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAE7C,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC7E,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;YACxC,CAAC;YAED,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;gBAChF,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC;YAChD,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;gBAC1D,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;oBACjD,WAAW,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;gBAC/B,CAAC;qBAAM,CAAC;oBACP,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC;gBAClC,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC9D,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;SAC1E,CAAC;IACH,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,MAAsB;QACtC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC7B,QAAgB,EAChB,QAAgB,EAChB,YAAoB,EACpB,MAAiB;QAEjB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YAClC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY;SAC3B,CAAC,CAAC;QAEH,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,cAAc,EAAE,mCAAmC;aACnD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC;QACjE,OAAO,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;CACD"}

package/dist/protocol/src/index.d.ts

@@ -0,0 +1,7 @@
+export * from './types.js';
+export * from './schemas.js';
+export * from './validation.js';
+export * from './auth.js';
+export * from './providers.js';
+export * from './oauth.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/protocol/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../protocol/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}

package/dist/protocol/src/index.js

@@ -0,0 +1,7 @@
+export * from './types.js';
+export * from './schemas.js';
+export * from './validation.js';
+export * from './auth.js';
+export * from './providers.js';
+export * from './oauth.js';
+//# sourceMappingURL=index.js.map

package/dist/protocol/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../protocol/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}

package/dist/protocol/src/oauth.d.ts

@@ -0,0 +1,63 @@
+/**
+ * OAuth and scope checking interfaces for Agent Tool Protocol
+ */
+/**
+ * Scope checker interface
+ * Checks what OAuth scopes a token has for a given provider
+ */
+export interface ScopeChecker {
+    /** Provider name (e.g., 'github', 'google', 'microsoft') */
+    provider: string;
+    /**
+     * Check what scopes a token has
+     * @param token - Access token to check
+     * @returns Array of scope strings (e.g., ['repo', 'read:user'])
+     */
+    check(token: string): Promise<string[]>;
+    /**
+     * Validate if a token is still valid (optional)
+     * @param token - Access token to validate
+     * @returns true if valid, false if expired/revoked
+     */
+    validate?(token: string): Promise<boolean>;
+}
+/**
+ * Token information returned by providers
+ */
+export interface TokenInfo {
+    /** Whether the token is valid */
+    valid: boolean;
+    /** OAuth scopes the token has */
+    scopes: string[];
+    /** Token expiration timestamp (milliseconds since epoch) */
+    expiresAt?: number;
+    /** User identifier from the provider */
+    userId?: string;
+    /** Additional provider-specific data */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Scope filtering configuration
+ */
+export interface ScopeFilteringConfig {
+    /** Enable scope-based filtering */
+    enabled: boolean;
+    /**
+     * Filtering mode:
+     * - 'eager': Filter tools at /api/definitions based on user's scopes
+     * - 'lazy': Return all tools, validate scopes only at execution time
+     */
+    mode: 'eager' | 'lazy';
+    /**
+     * Cache TTL for scope checks in seconds
+     * Default: 3600 (1 hour)
+     */
+    cacheTTL?: number;
+    /**
+     * Fail behavior when scope checker not available for a provider
+     * - 'allow': Allow all tools (no filtering)
+     * - 'deny': Hide all tools requiring scopes
+     */
+    fallback?: 'allow' | 'deny';
+}
+//# sourceMappingURL=oauth.d.ts.map

package/dist/protocol/src/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../protocol/src/oauth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC5B,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC;;;;OAIG;IACH,QAAQ,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACzB,iCAAiC;IACjC,KAAK,EAAE,OAAO,CAAC;IAEf,iCAAiC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;IAEjB;;;;OAIG;IACH,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IAEvB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC5B"}

package/dist/protocol/src/oauth.js

@@ -0,0 +1,5 @@
+/**
+ * OAuth and scope checking interfaces for Agent Tool Protocol
+ */
+export {};
+//# sourceMappingURL=oauth.js.map

package/dist/protocol/src/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../../protocol/src/oauth.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/protocol/src/providers.d.ts

@@ -0,0 +1,167 @@
+/**
+ * Provider interfaces for dependency injection
+ * These allow users to inject their own implementations for cache, auth, and audit
+ */
+/**
+ * Cache provider interface
+ * Allows pluggable caching backends (Memory, Redis, FileSystem, etc.)
+ */
+export interface CacheProvider {
+    /** Provider name for identification */
+    name: string;
+    /** Get a value from cache */
+    get<T>(key: string): Promise<T | null>;
+    /** Set a value in cache with optional TTL (in seconds) */
+    set(key: string, value: unknown, ttl?: number): Promise<void>;
+    /** Delete a value from cache */
+    delete(key: string): Promise<void>;
+    /** Check if a key exists in cache */
+    has(key: string): Promise<boolean>;
+    /** Clear cache entries matching a pattern (e.g., 'user:*') */
+    clear(pattern?: string): Promise<void>;
+    /** Get multiple values at once (optional, for performance) */
+    mget?(keys: string[]): Promise<Array<unknown | null>>;
+    /** Set multiple values at once (optional, for performance) */
+    mset?(entries: Array<[string, unknown, number?]>): Promise<void>;
+    /** Disconnect/cleanup (optional) */
+    disconnect?(): Promise<void>;
+}
+/**
+ * User credential data stored per provider
+ */
+export interface UserCredentialData {
+    /** Access token */
+    token: string;
+    /** OAuth scopes granted (if applicable) */
+    scopes?: string[];
+    /** Token expiration timestamp (milliseconds since epoch) */
+    expiresAt?: number;
+    /** Refresh token for automatic token refresh */
+    refreshToken?: string;
+    /** Additional provider-specific metadata */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Auth provider interface
+ * Allows pluggable credential storage (Env vars, AWS Secrets Manager, Vault, etc.)
+ */
+export interface AuthProvider {
+    /** Provider name for identification */
+    name: string;
+    /** Get a credential by key (server-level credentials) */
+    getCredential(key: string): Promise<string | null>;
+    /** Set a credential (for OAuth tokens, etc.) */
+    setCredential(key: string, value: string, ttl?: number): Promise<void>;
+    /** Delete a credential */
+    deleteCredential(key: string): Promise<void>;
+    /** List all credential keys (optional, for admin/debugging) */
+    listCredentials?(): Promise<string[]>;
+    /**
+     * Get user-scoped credential for a specific provider
+     * @param userId - User identifier
+     * @param provider - Provider name (e.g., 'github', 'google', 'stripe')
+     * @returns User credential data or null if not found
+     */
+    getUserCredential?(userId: string, provider: string): Promise<UserCredentialData | null>;
+    /**
+     * Set user-scoped credential for a specific provider
+     * @param userId - User identifier
+     * @param provider - Provider name
+     * @param data - Credential data including token, scopes, etc.
+     */
+    setUserCredential?(userId: string, provider: string, data: UserCredentialData): Promise<void>;
+    /**
+     * Delete user's credential for a specific provider
+     * @param userId - User identifier
+     * @param provider - Provider name
+     */
+    deleteUserCredential?(userId: string, provider: string): Promise<void>;
+    /**
+     * List all providers a user has connected
+     * @param userId - User identifier
+     * @returns Array of provider names
+     */
+    listUserProviders?(userId: string): Promise<string[]>;
+    /** Disconnect/cleanup (optional) */
+    disconnect?(): Promise<void>;
+}
+/**
+ * Audit event structure
+ * Comprehensive logging of all operations for security and compliance
+ */
+export interface AuditEvent {
+    eventId: string;
+    timestamp: number;
+    clientId: string;
+    userId?: string;
+    ipAddress?: string;
+    userAgent?: string;
+    eventType: 'execution' | 'tool_call' | 'llm_call' | 'approval' | 'auth' | 'error' | 'client_init';
+    action: string;
+    resource?: string;
+    resourceId?: string;
+    code?: string;
+    toolName?: string;
+    apiGroup?: string;
+    input?: unknown;
+    output?: unknown;
+    error?: {
+        message: string;
+        code?: string;
+        stack?: string;
+    };
+    securityEvents?: string[];
+    riskScore?: number;
+    annotations?: Record<string, unknown>;
+    duration?: number;
+    memoryUsed?: number;
+    llmCallsCount?: number;
+    httpCallsCount?: number;
+    status: 'success' | 'failed' | 'timeout' | 'cancelled' | 'paused';
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Audit filter for querying events
+ */
+export interface AuditFilter {
+    clientId?: string;
+    userId?: string;
+    eventType?: string | string[];
+    from?: number;
+    to?: number;
+    resource?: string;
+    status?: string | string[];
+    minRiskScore?: number;
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Audit sink interface
+ * Allows pluggable audit destinations (JSONL, PostgreSQL, Elasticsearch, S3, etc.)
+ */
+export interface AuditSink {
+    /** Sink name for identification */
+    name: string;
+    /** Write a single audit event */
+    write(event: AuditEvent): Promise<void>;
+    /** Write multiple audit events (for performance) */
+    writeBatch(events: AuditEvent[]): Promise<void>;
+    /** Query audit events (optional, for queryable sinks) */
+    query?(filter: AuditFilter): Promise<AuditEvent[]>;
+    /** Disconnect/cleanup (optional) */
+    disconnect?(): Promise<void>;
+}
+/**
+ * Multi-sink audit wrapper
+ * Allows writing to multiple audit sinks simultaneously
+ */
+export declare class MultiAuditSink implements AuditSink {
+    name: string;
+    private sinks;
+    constructor(sinks: AuditSink[]);
+    write(event: AuditEvent): Promise<void>;
+    writeBatch(events: AuditEvent[]): Promise<void>;
+    query(filter: AuditFilter): Promise<AuditEvent[]>;
+    disconnect(): Promise<void>;
+}
+//# sourceMappingURL=providers.d.ts.map

package/dist/protocol/src/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../../../protocol/src/providers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC7B,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IAEb,6BAA6B;IAC7B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEvC,0DAA0D;IAC1D,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9D,gCAAgC;IAChC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC,qCAAqC;IACrC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEnC,8DAA8D;IAC9D,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvC,8DAA8D;IAC9D,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;IAEtD,8DAA8D;IAC9D,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjE,oCAAoC;IACpC,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAClC,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IAEd,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC5B,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IAEb,yDAAyD;IACzD,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAEnD,gDAAgD;IAChD,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvE,0BAA0B;IAC1B,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7C,+DAA+D;IAC/D,eAAe,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC;;;;;OAKG;IACH,iBAAiB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAEzF;;;;;OAKG;IACH,iBAAiB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9F;;;;OAIG;IACH,oBAAoB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvE;;;;OAIG;IACH,iBAAiB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtD,oCAAoC;IACpC,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAElB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,aAAa,CAAC;IAClG,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IAEF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAElE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACzB,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IAEb,iCAAiC;IACjC,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,oDAAoD;IACpD,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhD,yDAAyD;IACzD,KAAK,CAAC,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAEnD,oCAAoC;IACpC,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;;GAGG;AACH,qBAAa,cAAe,YAAW,SAAS;IAC/C,IAAI,SAAW;IACf,OAAO,CAAC,KAAK,CAAc;gBAEf,KAAK,EAAE,SAAS,EAAE;IAIxB,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IASjD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAKjC"}

package/dist/protocol/src/providers.js

@@ -0,0 +1,33 @@
+/**
+ * Provider interfaces for dependency injection
+ * These allow users to inject their own implementations for cache, auth, and audit
+ */
+/**
+ * Multi-sink audit wrapper
+ * Allows writing to multiple audit sinks simultaneously
+ */
+export class MultiAuditSink {
+    name = 'multi';
+    sinks;
+    constructor(sinks) {
+        this.sinks = sinks;
+    }
+    async write(event) {
+        await Promise.all(this.sinks.map((sink) => sink.write(event)));
+    }
+    async writeBatch(events) {
+        await Promise.all(this.sinks.map((sink) => sink.writeBatch(events)));
+    }
+    async query(filter) {
+        for (const sink of this.sinks) {
+            if (sink.query) {
+                return await sink.query(filter);
+            }
+        }
+        throw new Error('No queryable audit sink available');
+    }
+    async disconnect() {
+        await Promise.all(this.sinks.map((sink) => (sink.disconnect ? sink.disconnect() : Promise.resolve())));
+    }
+}
+//# sourceMappingURL=providers.js.map

package/dist/protocol/src/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../../../protocol/src/providers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA6LH;;;GAGG;AACH,MAAM,OAAO,cAAc;IAC1B,IAAI,GAAG,OAAO,CAAC;IACP,KAAK,CAAc;IAE3B,YAAY,KAAkB;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC5B,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAoB;QACpC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAmB;QAC9B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;QACF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,UAAU;QACf,MAAM,OAAO,CAAC,GAAG,CAChB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CACnF,CAAC;IACH,CAAC;CACD"}

package/dist/protocol/src/schemas.d.ts

@@ -0,0 +1,6 @@
+import type { JSONSchema } from './types.js';
+export declare const ExecutionConfigSchema: JSONSchema;
+export declare const SearchOptionsSchema: JSONSchema;
+export declare const AgentToolProtocolRequestSchema: JSONSchema;
+export declare const AgentToolProtocolResponseSchema: JSONSchema;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/protocol/src/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../protocol/src/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,eAAO,MAAM,qBAAqB,EAAE,UAUnC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,UAUjC,CAAC;AAEF,eAAO,MAAM,8BAA8B,EAAE,UAS5C,CAAC;AAEF,eAAO,MAAM,+BAA+B,EAAE,UAiB7C,CAAC"}

package/dist/protocol/src/schemas.js

@@ -0,0 +1,51 @@
+export const ExecutionConfigSchema = {
+    type: 'object',
+    properties: {
+        timeout: { type: 'number', minimum: 1000, maximum: 300000 },
+        maxMemory: { type: 'number', minimum: 1048576, maximum: 536870912 },
+        maxLLMCalls: { type: 'number', minimum: 0, maximum: 100 },
+        allowedAPIs: { type: 'array', items: { type: 'string' } },
+        allowLLMCalls: { type: 'boolean' },
+    },
+    required: ['timeout', 'maxMemory', 'maxLLMCalls', 'allowedAPIs', 'allowLLMCalls'],
+};
+export const SearchOptionsSchema = {
+    type: 'object',
+    properties: {
+        query: { type: 'string', minLength: 1 },
+        apiGroups: { type: 'array', items: { type: 'string' } },
+        maxResults: { type: 'number', minimum: 1, maximum: 100 },
+        useEmbeddings: { type: 'boolean' },
+        embeddingModel: { type: 'string' },
+    },
+    required: ['query'],
+};
+export const AgentToolProtocolRequestSchema = {
+    type: 'object',
+    properties: {
+        jsonrpc: { type: 'string', enum: ['2.0'] },
+        id: { type: ['string', 'number'] },
+        method: { type: 'string' },
+        params: { type: 'object' },
+    },
+    required: ['jsonrpc', 'id', 'method', 'params'],
+};
+export const AgentToolProtocolResponseSchema = {
+    type: 'object',
+    properties: {
+        jsonrpc: { type: 'string', enum: ['2.0'] },
+        id: { type: ['string', 'number'] },
+        result: {},
+        error: {
+            type: 'object',
+            properties: {
+                code: { type: 'number' },
+                message: { type: 'string' },
+                data: {},
+            },
+            required: ['code', 'message'],
+        },
+    },
+    required: ['jsonrpc', 'id'],
+};
+//# sourceMappingURL=schemas.js.map

package/dist/protocol/src/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../../protocol/src/schemas.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAChD,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;QAC3D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE;QACnE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE;QACzD,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACzD,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;KAClC;IACD,QAAQ,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC;CACjF,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAe;IAC9C,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACX,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACvC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACvD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE;QACxD,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAClC;IACD,QAAQ,EAAE,CAAC,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAe;IACzD,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QAC1C,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;QAClC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC1B;IACD,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC;CAC/C,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAe;IAC1D,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QAC1C,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;QAClC,MAAM,EAAE,EAAE;QACV,KAAK,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACX,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,IAAI,EAAE,EAAE;aACR;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;SAC7B;KACD;IACD,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;CAC3B,CAAC"}