@once-agent/sdk 0.1.11 → 0.1.12

package/dist-cjs/gateway/planner.js

@@ -0,0 +1,160 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GATEWAY_PLAN_VERSION = exports.GATEWAY_ROUTE = void 0;
+exports.gatewayDescriptorFingerprint = gatewayDescriptorFingerprint;
+exports.planGatewayToolset = planGatewayToolset;
+const node_crypto_1 = require("node:crypto");
+const manifest_js_1 = require("../connect/manifest.js");
+const tool_classifier_js_1 = require("../connect/tool-classifier.js");
+exports.GATEWAY_ROUTE = Object.freeze({
+    DIRECT: "DIRECT",
+    PROTECT: "PROTECT",
+    BLOCK: "BLOCK",
+});
+exports.GATEWAY_PLAN_VERSION = "once-gateway-plan-v1";
+const secretNamePattern = /(?:^|[_-])(authorization|api[_-]?key|token|password|passwd|secret|credential|cookie)(?:$|[_-])/i;
+function canonicalGatewayValue(value, depth = 0, seen = new Set(), secretContext = false) {
+    if (secretContext)
+        return "<redacted>";
+    if (value === null || typeof value === "string" || typeof value === "boolean") {
+        return value;
+    }
+    if (typeof value === "number") {
+        return Number.isFinite(value) ? value : null;
+    }
+    if (typeof value !== "object" || depth > 12) {
+        return "<opaque>";
+    }
+    const objectValue = value;
+    if (seen.has(objectValue))
+        return "<cycle>";
+    seen.add(objectValue);
+    try {
+        if (Array.isArray(value)) {
+            const output = [];
+            for (let index = 0; index < value.length; index += 1) {
+                const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+                output.push(descriptor && "value" in descriptor
+                    ? canonicalGatewayValue(descriptor.value, depth + 1, seen)
+                    : "<opaque>");
+            }
+            return output;
+        }
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null) {
+            return "<opaque>";
+        }
+        const output = {};
+        const descriptors = Object.getOwnPropertyDescriptors(value);
+        for (const key of Object.keys(descriptors).sort()) {
+            const descriptor = descriptors[key];
+            if (!("value" in descriptor)) {
+                output[key] = "<opaque>";
+                continue;
+            }
+            output[key] = canonicalGatewayValue(descriptor.value, depth + 1, seen, secretNamePattern.test(key));
+        }
+        return output;
+    }
+    finally {
+        seen.delete(objectValue);
+    }
+}
+/**
+ * Stable, secret-safe fingerprint of the exact descriptor shape used for
+ * gateway routing. Getter-backed/non-plain runtime state is never evaluated.
+ */
+function gatewayDescriptorFingerprint(descriptor) {
+    const canonical = canonicalGatewayValue(descriptor);
+    return (0, node_crypto_1.createHash)("sha256")
+        .update(JSON.stringify(canonical))
+        .digest("hex");
+}
+function mapRoute(decision) {
+    if (decision === tool_classifier_js_1.CONNECT_TOOL_DECISION.BYPASS) {
+        return exports.GATEWAY_ROUTE.DIRECT;
+    }
+    if (decision === tool_classifier_js_1.CONNECT_TOOL_DECISION.PROTECT) {
+        return exports.GATEWAY_ROUTE.PROTECT;
+    }
+    return exports.GATEWAY_ROUTE.BLOCK;
+}
+function freezeEntry(entry) {
+    return Object.freeze({
+        ...entry,
+        signals: Object.freeze([...entry.signals]),
+    });
+}
+function invalidPlan() {
+    const entries = Object.freeze([]);
+    const summary = Object.freeze({
+        total: 0,
+        direct: 0,
+        protect: 0,
+        blocked: 0,
+    });
+    return Object.freeze({
+        version: exports.GATEWAY_PLAN_VERSION,
+        valid: false,
+        ready: false,
+        reason: "INVALID_MANIFEST",
+        entries,
+        direct: entries,
+        protect: entries,
+        blocked: entries,
+        summary,
+    });
+}
+/**
+ * Plan how a runtime-selected tool subset should cross the Once Gateway.
+ *
+ * This is a pure control-plane operation. It does not execute tools, resolve
+ * per-invocation operation identity/effect payload, open local protection
+ * state, contact MCP/providers, or retain executable implementations.
+ *
+ * Existing Connect classification remains authoritative:
+ * BYPASS -> DIRECT, PROTECT -> PROTECT, UNKNOWN -> BLOCK.
+ */
+function planGatewayToolset(manifest) {
+    const normalized = (0, manifest_js_1.normalizeConnectToolManifest)(manifest);
+    const connectPlan = (0, manifest_js_1.planConnectToolManifest)(manifest);
+    if (!normalized ||
+        !connectPlan.valid ||
+        normalized.length !== connectPlan.entries.length) {
+        return invalidPlan();
+    }
+    const entries = connectPlan.entries.map((connectEntry, index) => {
+        const normalizedEntry = normalized[index];
+        return freezeEntry({
+            index,
+            name: connectEntry.name,
+            source: connectEntry.source,
+            route: mapRoute(connectEntry.decision),
+            descriptorFingerprint: gatewayDescriptorFingerprint(normalizedEntry.descriptor),
+            connectDecision: connectEntry.decision,
+            connectReason: connectEntry.reason,
+            signals: connectEntry.signals,
+        });
+    });
+    const direct = entries.filter(entry => entry.route === exports.GATEWAY_ROUTE.DIRECT);
+    const protect = entries.filter(entry => entry.route === exports.GATEWAY_ROUTE.PROTECT);
+    const blocked = entries.filter(entry => entry.route === exports.GATEWAY_ROUTE.BLOCK);
+    const summary = Object.freeze({
+        total: entries.length,
+        direct: direct.length,
+        protect: protect.length,
+        blocked: blocked.length,
+    });
+    return Object.freeze({
+        version: exports.GATEWAY_PLAN_VERSION,
+        valid: true,
+        ready: blocked.length === 0,
+        reason: "PLANNED",
+        entries: Object.freeze(entries),
+        direct: Object.freeze(direct),
+        protect: Object.freeze(protect),
+        blocked: Object.freeze(blocked),
+        summary,
+    });
+}
+//# sourceMappingURL=planner.js.map

package/dist-cjs/gateway/planner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.js","sourceRoot":"","sources":["../../src/gateway/planner.ts"],"names":[],"mappings":";;;AAgIA,oEAOC;AAmDD,gDA2DC;AArPD,6CAAyC;AAEzC,wDAIgC;AAChC,sEAIuC;AAE1B,QAAA,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACN,CAAC,CAAC;AAKC,QAAA,oBAAoB,GAAG,sBAA+B,CAAC;AAgCpE,MAAM,iBAAiB,GACrB,iGAAiG,CAAC;AAEpG,SAAS,qBAAqB,CAC5B,KAAc,EACd,KAAK,GAAG,CAAC,EACT,OAAoB,IAAI,GAAG,EAAE,EAC7B,aAAa,GAAG,KAAK;IAErB,IAAI,aAAa;QAAE,OAAO,YAAY,CAAC;IAEvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QAC5C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,WAAW,GAAG,KAAe,CAAC;IACpC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAEtB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,GAAc,EAAE,CAAC;YAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzE,MAAM,CAAC,IAAI,CACT,UAAU,IAAI,OAAO,IAAI,UAAU;oBACjC,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC;oBAC1D,CAAC,CAAC,UAAU,CACf,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACzD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAE5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,MAAM,CAAC,GAAG,CAAC,GAAG,qBAAqB,CACjC,UAAU,CAAC,KAAK,EAChB,KAAK,GAAG,CAAC,EACT,IAAI,EACJ,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAC5B,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,4BAA4B,CAC1C,UAAmB;IAEnB,MAAM,SAAS,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACpD,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;SACjC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,QAA6B;IAC7C,IAAI,QAAQ,KAAK,0CAAqB,CAAC,MAAM,EAAE,CAAC;QAC9C,OAAO,qBAAa,CAAC,MAAM,CAAC;IAC9B,CAAC;IACD,IAAI,QAAQ,KAAK,0CAAqB,CAAC,OAAO,EAAE,CAAC;QAC/C,OAAO,qBAAa,CAAC,OAAO,CAAC;IAC/B,CAAC;IACD,OAAO,qBAAa,CAAC,KAAK,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,KAAuB;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,KAAK;QACR,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAA0C,CAAC;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;KACX,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,4BAAoB;QAC7B,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,kBAA2B;QACnC,OAAO;QACP,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,OAAO;QAChB,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,kBAAkB,CAChC,QAAiB;IAEjB,MAAM,UAAU,GAAG,IAAA,0CAA4B,EAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAA,qCAAuB,EAAC,QAAQ,CAAC,CAAC;IAEtD,IACE,CAAC,UAAU;QACX,CAAC,WAAW,CAAC,KAAK;QAClB,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,OAAO,CAAC,MAAM,EAChD,CAAC;QACD,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE;QAC9D,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,WAAW,CAAC;YACjB,KAAK;YACL,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC;YACtC,qBAAqB,EAAE,4BAA4B,CACjD,eAAe,CAAC,UAAU,CAC3B;YACD,eAAe,EAAE,YAAY,CAAC,QAAQ;YACtC,aAAa,EAAE,YAAY,CAAC,MAAM;YAClC,OAAO,EAAE,YAAY,CAAC,OAAO;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAC3B,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,qBAAa,CAAC,MAAM,CAC9C,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAC5B,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,qBAAa,CAAC,OAAO,CAC/C,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAC5B,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,qBAAa,CAAC,KAAK,CAC7C,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,OAAO,EAAE,OAAO,CAAC,MAAM;KACxB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,4BAAoB;QAC7B,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QAC3B,MAAM,EAAE,SAAkB;QAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}

package/dist-cjs/gateway/tool-graph-binding.js

@@ -0,0 +1,126 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bindGatewayPlanToToolGraph = bindGatewayPlanToToolGraph;
+const planner_js_1 = require("./planner.js");
+function nonEmptyString(value) {
+    return typeof value === "string" && value.trim() !== "";
+}
+function validScore(value) {
+    return value === undefined ||
+        (typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= 100);
+}
+const evidenceLevels = new Set([
+    "EXECUTED",
+    "MODEL_VISIBLE",
+    "RUNTIME_REGISTERED",
+    "SERVER_AUTHORITATIVE",
+    "HOST_CONFIGURED",
+    "SOURCE_DISCOVERED",
+    "REGISTRY_CANDIDATE",
+]);
+const protectionStates = new Set([
+    "NONE",
+    "NATIVE_IDEMPOTENCY",
+    "AUTHORITATIVE_RECONCILIATION",
+    "ONCE_HEALTHY",
+    "ONCE_UNVERIFIED",
+]);
+function normalizeBinding(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return undefined;
+    }
+    const record = value;
+    if (!nonEmptyString(record.toolId) ||
+        !nonEmptyString(record.namespacedName) ||
+        !nonEmptyString(record.canonicalName) ||
+        !nonEmptyString(record.descriptorFingerprint) ||
+        !evidenceLevels.has(record.evidenceLevel) ||
+        !validScore(record.actionPriorityScore) ||
+        (record.protection !== undefined &&
+            !protectionStates.has(record.protection))) {
+        return undefined;
+    }
+    return Object.freeze({
+        toolId: record.toolId,
+        namespacedName: record.namespacedName,
+        canonicalName: record.canonicalName,
+        descriptorFingerprint: record.descriptorFingerprint,
+        evidenceLevel: record.evidenceLevel,
+        ...(record.actionPriorityScore !== undefined
+            ? { actionPriorityScore: record.actionPriorityScore }
+            : {}),
+        ...(record.protection !== undefined
+            ? { protection: record.protection }
+            : {}),
+    });
+}
+function blockedEntry(entry, bindingStatus) {
+    return Object.freeze({
+        index: entry.index,
+        name: entry.name,
+        plannedRoute: entry.route,
+        route: planner_js_1.GATEWAY_ROUTE.BLOCK,
+        descriptorFingerprint: entry.descriptorFingerprint,
+        bindingStatus,
+    });
+}
+/**
+ * Bind a gateway route plan to safe Tool Graph identity records.
+ *
+ * Binding is intentionally stricter than name matching: one and only one
+ * Tool Graph record must match both canonical name and the exact gateway
+ * descriptor fingerprint. Evidence/protection state is retained only for
+ * reporting; it never downgrades a PROTECT route to DIRECT.
+ *
+ * The caller may pass a larger/global Tool Graph binding set. Unrelated
+ * entries are ignored, so binding the selected runtime subset does not force
+ * the global catalog into model context or into the returned plan.
+ */
+function bindGatewayPlanToToolGraph(plan, bindings) {
+    const normalized = Array.isArray(bindings)
+        ? bindings
+            .map(normalizeBinding)
+            .filter((binding) => Boolean(binding))
+        : [];
+    const entries = plan.entries.map(entry => {
+        if (entry.route === planner_js_1.GATEWAY_ROUTE.BLOCK || !entry.name) {
+            return blockedEntry(entry, "NOT_ROUTABLE");
+        }
+        const sameName = normalized.filter(binding => binding.canonicalName === entry.name);
+        const exact = sameName.filter(binding => binding.descriptorFingerprint === entry.descriptorFingerprint);
+        if (exact.length > 1) {
+            return blockedEntry(entry, "AMBIGUOUS");
+        }
+        if (exact.length === 0) {
+            return blockedEntry(entry, sameName.length > 0 ? "FINGERPRINT_MISMATCH" : "MISSING");
+        }
+        return Object.freeze({
+            index: entry.index,
+            name: entry.name,
+            plannedRoute: entry.route,
+            route: entry.route,
+            descriptorFingerprint: entry.descriptorFingerprint,
+            bindingStatus: "MATCHED",
+            toolGraph: exact[0],
+        });
+    });
+    const matched = entries.filter(entry => entry.bindingStatus === "MATCHED");
+    const blocked = entries.filter(entry => entry.route === planner_js_1.GATEWAY_ROUTE.BLOCK);
+    const summary = Object.freeze({
+        total: entries.length,
+        matched: matched.length,
+        missing: entries.filter(entry => entry.bindingStatus === "MISSING").length,
+        fingerprintMismatch: entries.filter(entry => entry.bindingStatus === "FINGERPRINT_MISMATCH").length,
+        ambiguous: entries.filter(entry => entry.bindingStatus === "AMBIGUOUS").length,
+        blocked: blocked.length,
+    });
+    return Object.freeze({
+        valid: plan.valid,
+        ready: plan.valid && plan.ready && blocked.length === 0,
+        entries: Object.freeze(entries),
+        matched: Object.freeze(matched),
+        blocked: Object.freeze(blocked),
+        summary,
+    });
+}
+//# sourceMappingURL=tool-graph-binding.js.map

package/dist-cjs/gateway/tool-graph-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-graph-binding.js","sourceRoot":"","sources":["../../src/gateway/tool-graph-binding.ts"],"names":[],"mappings":";;AAiJA,gEAiEC;AA9MD,6CAKsB;AA+CtB,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,KAAK,SAAS;QACxB,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAoB;IAChD,UAAU;IACV,eAAe;IACf,oBAAoB;IACpB,sBAAsB;IACtB,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAsB;IACpD,MAAM;IACN,oBAAoB;IACpB,8BAA8B;IAC9B,cAAc;IACd,iBAAiB;CAClB,CAAC,CAAC;AAEH,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IACE,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;QAC9B,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC;QACtC,CAAC,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC;QACrC,CAAC,cAAc,CAAC,MAAM,CAAC,qBAAqB,CAAC;QAC7C,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,aAAkC,CAAC;QAC9D,CAAC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACvC,CACE,MAAM,CAAC,UAAU,KAAK,SAAS;YAC/B,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,UAAiC,CAAC,CAChE,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,aAAa,EAAE,MAAM,CAAC,aAAkC;QACxD,GAAG,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAA6B,EAAE;YAC/D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAiC,EAAE;YAC1D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CACnB,KAAiC,EACjC,aAA4C;IAE5C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,KAAK,CAAC,KAAK;QACzB,KAAK,EAAE,0BAAa,CAAC,KAAK;QAC1B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,aAAa;KACd,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,0BAA0B,CACxC,IAA2B,EAC3B,QAA4B;IAE5B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxC,CAAC,CAAC,QAAQ;aACL,GAAG,CAAC,gBAAgB,CAAC;aACrB,MAAM,CAAC,CAAC,OAAO,EAAsC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9E,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACvC,IAAI,KAAK,CAAC,KAAK,KAAK,0BAAa,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACvD,OAAO,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAChC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,IAAI,CAChD,CAAC;QACF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB,CACzE,CAAC;QAEF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,YAAY,CACjB,KAAK,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CACzD,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,KAAK;YACzB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;YAClD,aAAa,EAAE,SAAkB;YACjC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,0BAAa,CAAC,KAAK,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,MAAM;QAC1E,mBAAmB,EAAE,OAAO,CAAC,MAAM,CACjC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,sBAAsB,CACxD,CAAC,MAAM;QACR,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,WAAW,CAAC,CAAC,MAAM;QAC9E,OAAO,EAAE,OAAO,CAAC,MAAM;KACxB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACvD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}

package/dist-cjs/langchain-execution-observer.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createLangChainExecutionObserver = createLangChainExecutionObserver;
+const execution_observation_js_1 = require("./execution-observation.js");
+function asRecord(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function ownDataValue(value, key) {
+    const record = asRecord(value);
+    if (!record)
+        return undefined;
+    const descriptor = Object.getOwnPropertyDescriptor(record, key);
+    return descriptor && "value" in descriptor
+        ? descriptor.value
+        : undefined;
+}
+function ownString(value, key) {
+    const raw = ownDataValue(value, key);
+    return typeof raw === "string" && raw.trim() !== ""
+        ? raw
+        : undefined;
+}
+function optionalArgString(args, index) {
+    const value = args[index];
+    return typeof value === "string" && value.trim() !== ""
+        ? value
+        : undefined;
+}
+function toolByName(snapshot) {
+    const map = new Map();
+    for (const tool of snapshot.tools) {
+        if (!map.has(tool.canonicalName)) {
+            map.set(tool.canonicalName, tool);
+        }
+        else {
+            map.set(tool.canonicalName, null);
+        }
+    }
+    return map;
+}
+function serializedToolName(serialized) {
+    const direct = ownString(serialized, "name");
+    if (direct)
+        return direct;
+    const id = ownDataValue(serialized, "id");
+    if (!Array.isArray(id) || id.length === 0)
+        return undefined;
+    const last = id[id.length - 1];
+    return typeof last === "string" && last.trim() !== ""
+        ? last
+        : undefined;
+}
+/**
+ * Create a dependency-free object compatible with LangChain callback handler
+ * methods for tool execution observation.
+ *
+ * The observer never invokes a tool and never retains input, output, errors,
+ * tags, metadata or parent run state. A matching handleToolStart establishes
+ * exact tool identity; handleToolEnd/handleToolError close that run as
+ * SUCCEEDED/FAILED respectively.
+ */
+function createLangChainExecutionObserver(visibleSnapshot) {
+    const byName = toolByName(visibleSnapshot);
+    const pending = new Map();
+    const collected = [];
+    const handleToolStart = (...args) => {
+        // Current CallbackHandlerMethods shape:
+        // (serializedTool, input, runId, parentRunId?, tags?, metadata?, runName?, toolCallId?)
+        const runId = optionalArgString(args, 2);
+        if (!runId)
+            return;
+        const serialized = args[0];
+        const runName = optionalArgString(args, 6);
+        const name = runName ?? serializedToolName(serialized);
+        if (!name)
+            return;
+        const tool = byName.get(name);
+        if (!tool)
+            return;
+        const toolCallId = optionalArgString(args, 7);
+        pending.set(runId, {
+            tool,
+            startedAtMs: Date.now(),
+            ...(toolCallId ? { toolCallId } : {}),
+        });
+    };
+    const finish = (status, args) => {
+        // handleToolEnd(output, runId, ...)
+        // handleToolError(error, runId, ...)
+        const runId = optionalArgString(args, 1);
+        if (!runId)
+            return;
+        const started = pending.get(runId);
+        if (!started)
+            return;
+        pending.delete(runId);
+        const now = Date.now();
+        const observed = (0, execution_observation_js_1.observeToolExecution)({
+            eventId: `langchain-tool-run:${runId}`,
+            toolId: started.tool.toolId,
+            namespacedName: started.tool.namespacedName,
+            descriptorFingerprint: (0, execution_observation_js_1.executionToolFingerprint)(started.tool),
+            canonicalName: started.tool.canonicalName,
+            framework: "langchain",
+            runtimeName: visibleSnapshot.runtimeName,
+            source: "framework_callback",
+            status,
+            observedAt: new Date(now).toISOString(),
+            durationMs: Math.max(0, now - started.startedAtMs),
+        });
+        if (observed.accepted) {
+            collected.push(observed.event);
+        }
+    };
+    return Object.freeze({
+        name: "once-execution-observer",
+        handleToolStart,
+        handleToolEnd: (...args) => finish("SUCCEEDED", args),
+        handleToolError: (...args) => finish("FAILED", args),
+        events: () => Object.freeze([...collected]),
+        drain: () => {
+            const drained = Object.freeze([...collected]);
+            collected.length = 0;
+            return drained;
+        },
+        pendingCount: () => pending.size,
+    });
+}
+//# sourceMappingURL=langchain-execution-observer.js.map

package/dist-cjs/langchain-execution-observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"langchain-execution-observer.js","sourceRoot":"","sources":["../src/langchain-execution-observer.ts"],"names":[],"mappings":";;AA4FA,4EA2EC;AAvKD,yEAIoC;AAwBpC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAC,KAAmB;QACrB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,GAAW;IAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChE,OAAO,UAAU,IAAI,OAAO,IAAI,UAAU;QACxC,CAAC,CAAC,UAAU,CAAC,KAAK;QAClB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,GAAW;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QACjD,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAwB,EAAE,KAAa;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QACrD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CACjB,QAA2C;IAE3C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkD,CAAC;IACtE,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAmB;IAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QACnD,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,gCAAgC,CAC9C,eAAkD;IAElD,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,MAAM,SAAS,GAA+B,EAAE,CAAC;IAEjD,MAAM,eAAe,GAAG,CAAC,GAAG,IAAe,EAAQ,EAAE;QACnD,wCAAwC;QACxC,wFAAwF;QACxF,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE;YACjB,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;YACvB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CACb,MAA8B,EAC9B,IAAwB,EAClB,EAAE;QACR,oCAAoC;QACpC,qCAAqC;QACrC,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAA,+CAAoB,EAAC;YACpC,OAAO,EAAE,sBAAsB,KAAK,EAAE;YACtC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;YAC3B,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;YAC3C,qBAAqB,EAAE,IAAA,mDAAwB,EAAC,OAAO,CAAC,IAAI,CAAC;YAC7D,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa;YACzC,SAAS,EAAE,WAAW;YACtB,WAAW,EAAE,eAAe,CAAC,WAAW;YACxC,MAAM,EAAE,oBAAoB;YAC5B,MAAM;YACN,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YACvC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC;SACnD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,yBAAkC;QACxC,eAAe;QACf,aAAa,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC;QAChE,eAAe,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;QAC/D,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;QAC3C,KAAK,EAAE,GAAG,EAAE;YACV,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;YAC9C,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;YACrB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI;KACjC,CAAC,CAAC;AACL,CAAC"}

package/dist-cjs/langchain-runtime-discovery.js

@@ -0,0 +1,218 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.discoverLangChainRegisteredTools = discoverLangChainRegisteredTools;
+exports.discoverLangChainModelVisibleTools = discoverLangChainModelVisibleTools;
+const node_crypto_1 = require("node:crypto");
+const tool_importance_js_1 = require("./tool-importance.js");
+function asRecord(value) {
+    if (value &&
+        typeof value === "object" &&
+        !Array.isArray(value)) {
+        return value;
+    }
+    return undefined;
+}
+function ownDataValue(record, key) {
+    if (!record)
+        return undefined;
+    const descriptor = Object.getOwnPropertyDescriptor(record, key);
+    return descriptor && "value" in descriptor
+        ? descriptor.value
+        : undefined;
+}
+function stableId(value) {
+    return `tool:${(0, node_crypto_1.createHash)("sha256")
+        .update(JSON.stringify(value))
+        .digest("hex")}`;
+}
+function stringValue(value) {
+    return typeof value === "string" && value.trim() !== ""
+        ? value
+        : undefined;
+}
+const secretNamePattern = /(?:^|[_-])(authorization|api[_-]?key|token|password|passwd|secret|credential|cookie)(?:$|[_-])/i;
+function safeJsonData(value, depth = 0, seen = new Set(), secretContext = false) {
+    if (value === null)
+        return null;
+    if (typeof value === "string" ||
+        typeof value === "boolean") {
+        return secretContext ? "<redacted>" : value;
+    }
+    if (typeof value === "number") {
+        return Number.isFinite(value)
+            ? (secretContext ? "<redacted>" : value)
+            : undefined;
+    }
+    if (typeof value !== "object" || depth > 12) {
+        return undefined;
+    }
+    const objectValue = value;
+    if (seen.has(objectValue))
+        return undefined;
+    const prototype = Object.getPrototypeOf(value);
+    if (!Array.isArray(value) &&
+        prototype !== Object.prototype &&
+        prototype !== null) {
+        return undefined;
+    }
+    seen.add(objectValue);
+    try {
+        if (Array.isArray(value)) {
+            const output = [];
+            for (let index = 0; index < value.length; index++) {
+                const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+                if (!descriptor || !("value" in descriptor)) {
+                    return undefined;
+                }
+                const item = safeJsonData(descriptor.value, depth + 1, seen, secretContext);
+                if (item === undefined)
+                    return undefined;
+                output.push(item);
+            }
+            return output;
+        }
+        const output = {};
+        const descriptors = Object.getOwnPropertyDescriptors(value);
+        for (const [key, descriptor] of Object.entries(descriptors)) {
+            if (!("value" in descriptor))
+                continue;
+            if (descriptor.value === undefined)
+                continue;
+            const child = safeJsonData(descriptor.value, depth + 1, seen, secretContext || secretNamePattern.test(key));
+            if (child !== undefined) {
+                output[key] = child;
+            }
+        }
+        return output;
+    }
+    finally {
+        seen.delete(objectValue);
+    }
+}
+function langChainTools(input) {
+    if (Array.isArray(input))
+        return input;
+    const record = asRecord(input);
+    if (!record)
+        return [];
+    const tools = ownDataValue(record, "tools");
+    return Array.isArray(tools) ? tools : [];
+}
+function openAiFormattedFunction(tool) {
+    const type = stringValue(ownDataValue(tool, "type"));
+    if (type !== "function")
+        return undefined;
+    return asRecord(ownDataValue(tool, "function"));
+}
+function observeLangChainTool(rawTool, evidence, source, index, runtimeName) {
+    const tool = asRecord(rawTool);
+    if (!tool)
+        return undefined;
+    const formatted = openAiFormattedFunction(tool);
+    const name = stringValue(ownDataValue(tool, "name")) ??
+        stringValue(ownDataValue(formatted, "name"));
+    if (!name)
+        return undefined;
+    const description = stringValue(ownDataValue(tool, "description")) ??
+        stringValue(ownDataValue(formatted, "description")) ??
+        "";
+    const rawSchema = ownDataValue(tool, "schema") ??
+        ownDataValue(tool, "inputSchema") ??
+        ownDataValue(tool, "parameters") ??
+        ownDataValue(formatted, "parameters");
+    const schema = safeJsonData(rawSchema);
+    const schemaOpaque = rawSchema !== undefined &&
+        schema === undefined;
+    const autoExecutable = [
+        ownDataValue(tool, "invoke"),
+        ownDataValue(tool, "call"),
+        ownDataValue(tool, "func"),
+    ].some(value => typeof value === "function");
+    const rawReturnDirect = ownDataValue(tool, "returnDirect");
+    const returnDirect = typeof rawReturnDirect === "boolean"
+        ? rawReturnDirect
+        : undefined;
+    const namespace = `langchain/${runtimeName ?? "runtime"}`;
+    const toolType = formatted
+        ? "function"
+        : "structured_tool";
+    const safeMetadata = {
+        autoExecutable,
+        ...(schemaOpaque ? { schemaOpaque: true } : {}),
+        ...(returnDirect !== undefined ? { returnDirect } : {}),
+    };
+    const once = (0, tool_importance_js_1.assessToolImportance)({
+        name,
+        description,
+        sourceCategory: toolType,
+        evidence,
+        readOnlyHint: /(?:^|[_-])(?:search|lookup|retrieve|fetch|get|list|read|find)(?:$|[_-])/i.test(name)
+            ? true
+            : undefined,
+    });
+    return {
+        toolId: stableId({
+            framework: "langchain",
+            namespace,
+            name,
+            toolType,
+            description,
+            schema,
+        }),
+        namespacedName: `${namespace}/${name}`,
+        canonicalName: name,
+        displayName: name,
+        description,
+        toolType,
+        framework: "langchain",
+        origin: {
+            kind: "runtime",
+            source,
+            ...(runtimeName ? { runtimeName } : {}),
+            index,
+        },
+        evidence: {
+            level: evidence,
+            source: `${namespace}:${source}`,
+        },
+        visibility: {
+            configured: true,
+            runtimeRegistered: true,
+            modelVisible: evidence === "MODEL_VISIBLE",
+            executed: false,
+        },
+        ...(schema !== undefined ? { inputSchema: schema } : {}),
+        safeMetadata,
+        once,
+    };
+}
+function discover(input, evidence, source, runtimeName) {
+    return langChainTools(input)
+        .map((tool, index) => observeLangChainTool(tool, evidence, source, index, runtimeName))
+        .filter((tool) => Boolean(tool));
+}
+function discoverLangChainRegisteredTools(toolsOrAgentConfig, runtimeName) {
+    const tools = discover(toolsOrAgentConfig, "RUNTIME_REGISTERED", "langchain.tools", runtimeName);
+    return {
+        framework: "langchain",
+        ...(runtimeName ? { runtimeName } : {}),
+        registeredToolCount: tools.length,
+        tools,
+        externalCallsMade: false,
+        toolInvocationsMade: false,
+        secretValuesRetained: false,
+    };
+}
+function discoverLangChainModelVisibleTools(toolsPassedToBindTools, runtimeName) {
+    const tools = discover(toolsPassedToBindTools, "MODEL_VISIBLE", "langchain.bindTools", runtimeName);
+    return {
+        framework: "langchain",
+        ...(runtimeName ? { runtimeName } : {}),
+        modelVisibleToolCount: tools.length,
+        tools,
+        externalCallsMade: false,
+        toolInvocationsMade: false,
+        secretValuesRetained: false,
+    };
+}
+//# sourceMappingURL=langchain-runtime-discovery.js.map