agentfootprint 10.3.0 → 10.3.1

package/dist/esm/lib/injection-engine/types.js

@@ -1,117 +0,0 @@
-/**
- * Injection Engine — types.
- *
- * THE primitive that unifies every form of context engineering in the
- * library. Skills, Steering docs, Instructions, RAG, Memory, custom
- * Context — all reduce to one shape: an `Injection` with a `trigger`
- * (when), `inject` (what — one or more slot targets), and a `flavor`
- * (observability tag).
- *
- * Pattern: Strategy (GoF) — each Injection's trigger is a strategy for
- *          "should I activate this iteration?". Each Injection's
- *          `inject` is the Memento (GoF) carrying content to slots.
- * Role:    Layer-3 context engineering primitive in the stack.
- *          Sits below the slot subflows.
- * Emits:   Engine emits `agentfootprint.context.evaluated` once per
- *          iteration. Slot subflows emit `agentfootprint.context.injected`
- *          for each InjectionRecord they place.
- */
-import { isSaidByPerson } from '../saidByPerson.js';
-import { renderTemplate } from './promptTemplate.js';
-/**
- * The iteration's tool-result batch, in call order — with the singular
- * fallback applied (9.16.0). THE one reader for batch-aware evaluation:
- * `ctx.toolResults` when the runtime supplied it, else `[ctx.lastToolResult]`
- * for contexts built by callers that only know the singular, else `[]`.
- * Both the evaluator's `on-tool-return` arm and the skill-graph cursor
- * resolver go through here, so the two can never disagree about what the
- * batch was.
- */
-export function toolResultsOf(ctx) {
-    return ctx.toolResults ?? (ctx.lastToolResult ? [ctx.lastToolResult] : []);
-}
-/**
- * The messages in `ctx.history` a PERSON actually wrote, in order (9.84.0).
- * THE one reader for a predicate that judges what was said.
- *
- * Seven kinds of `role: 'user'` message in that list came from this library,
- * not from anybody: a compaction frame, a drop notice, the two in-loop
- * corrections, the out-of-budget wrap-up instruction, the stepped-skill nudge,
- * and a message an Injection delivered. They are ours, they are in the
- * person's voice, two of them name tools and two quote text the model or a
- * validator produced — so a rule written as
- *
- * ```ts
- * activeWhen: (ctx) => ctx.history.some((m) => m.content.includes('refund'))
- * ```
- *
- * fires on a summary of a refund conversation and on a notice saying the
- * refund tool's result was dropped. Written as
- * `saidByPerson(ctx).some(...)`, it fires only when somebody said it.
- *
- * The test itself is `isSaidByPerson` in `lib/saidByPerson.ts` — the same
- * function the window's refusal engine uses to decide which message it may
- * never drop, imported rather than restated so the two answers cannot differ.
- *
- * @param ctx the iteration context a trigger or entry rule was handed
- */
-export function saidByPerson(ctx) {
-    return ctx.history.filter(isSaidByPerson);
-}
-/**
- * Project a full Injection (with functions) into a scope-safe POJO.
- *
- * `ctx` (9.57.0) is THE rendering seam: it is the one moment the context and
- * the content are both in scope, and every downstream reader — the slots, the
- * cache decision, Deliver, the ledger, the recorders, a foreign host —
- * continues to see the same static `ActiveInjection` it always saw. Optional,
- * so a caller from before 9.57.0 still compiles.
- *
- * A TEMPLATED injection projected with no usable ctx comes back with NO
- * `systemPrompt` at all. Absence is honest; a literal `{{actionsRemaining}}`
- * in front of the model is not. Through the engine that path is unreachable —
- * `evaluateInjections` has already skipped such an injection by name.
- */
-export function projectActiveInjection(inj, ctx) {
-    // Project per-skill metadata that slot subflows need to dispatch on.
-    // `surfaceMode` drives the system-prompt-suppression decision.
-    // `autoActivate` drives runtime tool gating: it tells the tools slot that
-    // this skill's tools are not in the static registry and must be readmitted
-    // while it is active.
-    const meta = inj.metadata;
-    // Rendered HERE, once, so the projection every reader shares is already
-    // plain text. `undefined` = a template whose facts this ctx cannot supply,
-    // and then the piece is absent rather than gappy.
-    const systemPrompt = inj.templated === true && inj.inject.systemPrompt !== undefined
-        ? ctx === undefined
-            ? undefined
-            : renderTemplate(inj.inject.systemPrompt, ctx)
-        : inj.inject.systemPrompt;
-    const out = {
-        id: inj.id,
-        flavor: inj.flavor,
-        ...(inj.description && { description: inj.description }),
-        ...(meta?.surfaceMode && { surfaceMode: meta.surfaceMode }),
-        ...(meta?.autoActivate && {
-            autoActivate: meta.autoActivate,
-        }),
-        // The cache directive rides across too — see the field's note. Without it
-        // the cache decision reads `undefined` for every injection and defaults to
-        // "never cacheable", which silently discards what the consumer declared.
-        ...(meta?.cache !== undefined && {
-            cache: meta.cache,
-        }),
-        inject: {
-            ...(systemPrompt !== undefined && systemPrompt.length > 0 && { systemPrompt }),
-            ...(inj.inject.messages && { messages: inj.inject.messages.map((m) => ({ ...m })) }),
-            ...(inj.inject.tools && {
-                tools: inj.inject.tools.map((t) => ({
-                    schema: { ...t.schema },
-                    injectionId: inj.id,
-                })),
-            }),
-        },
-    };
-    return out;
-}
-//# sourceMappingURL=types.js.map

package/dist/esm/lib/injection-engine/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/lib/injection-engine/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA+TrD;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,GAAqB;IAMjD,OAAO,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,YAAY,CAAC,GAAqB;IAChD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAC5C,CAAC;AAsMD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAc,EACd,GAA2D;IAE3D,qEAAqE;IACrE,+DAA+D;IAC/D,0EAA0E;IAC1E,2EAA2E;IAC3E,sBAAsB;IACtB,MAAM,IAAI,GAAG,GAAG,CAAC,QAEJ,CAAC;IACd,wEAAwE;IACxE,2EAA2E;IAC3E,kDAAkD;IAClD,MAAM,YAAY,GAChB,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;QAC7D,CAAC,CAAC,GAAG,KAAK,SAAS;YACjB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC;QAChD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IAC9B,MAAM,GAAG,GAAoB;QAC3B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAA6C,EAAE,CAAC;QAC7F,GAAG,CAAC,IAAI,EAAE,YAAY,IAAI;YACxB,YAAY,EAAE,IAAI,CAAC,YAA+C;SACnE,CAAC;QACF,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,GAAG,CAAC,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAiC;SAC9C,CAAC;QACF,MAAM,EAAE;YACN,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC;YAC9E,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI;gBACtB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAClC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE;oBACvB,WAAW,EAAE,GAAG,CAAC,EAAE;iBACpB,CAAC,CAAC;aACJ,CAAC;SACH;KACF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/esm/lib/mcp/connectionRefusals.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connectionRefusals.js","sourceRoot":"","sources":["../../../../src/lib/mcp/connectionRefusals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,0EAA0E;AAC1E,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AAEvE;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAA6C,EAC7C,IAAY;IAEZ,MAAM,EAAE,GAAG,aAAa,IAAI,GAAG,CAAC;IAChC,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,iCAAiC;IACjC,MAAM,KAAK,GAAG,IAAoD,CAAC;IAEnE,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CACb,GAAG,EAAE,kFAAkF;gBACrF,oDAAoD,CACvD,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,sDAAsD;IACtD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,sBAAsB,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,GAAG,EAAE,0BAA0B,MAAM,6BAA6B;gBAChE,oEAAoE,MAAM,QAAQ;gBAClF,6DAA6D,KAAK,EAAE,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,sBAAsB,GAExB;IACF;QACE,iBAAiB;QACjB,gFAAgF;YAC9E,+EAA+E;YAC/E,6CAA6C;KAChD;IACD;QACE,YAAY;QACZ,kGAAkG;KACnG;IACD;QACE,WAAW;QACX,gGAAgG;KACjG;IACD;QACE,KAAK;QACL,+EAA+E;YAC7E,wCAAwC;KAC3C;IACD;QACE,SAAS;QACT,uFAAuF;KACxF;CACF,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB,CAAC,UAAmB,EAAE,EAAU;IACvD,MAAM,OAAO,GAAG,CAAC,UAAU,IAAI,EAAE,CAAsC,CAAC;IACxE,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACxC,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,GAAG,EAAE,6BAA6B,MAAM,yCAAyC;gBAC/E,oFAAoF;gBACpF,kFAAkF;gBAClF,uDAAuD,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/esm/lib/mcp/elicitation.d.ts

@@ -1,84 +0,0 @@
-/**
- * lib/mcp/elicitation — a typed ask carried as an MCP elicitation, and the
- * elicitation's answer carried back (time design § 6.1).
- *
- * Pattern: Adapter, pure, both directions in one file so they cannot drift.
- *          `elicitationOf` maps a pending `AwaitingInput` onto the MCP
- *          elicitation request (`message` + a flat `requestedSchema` of
- *          primitive properties, the MCP specification revision of
- *          2025-06-18); `answerFromElicitation` maps the client's `content`
- *          back to the `InputResponse` `agent.resume` takes. Nothing is
- *          checked here that the resume door checks: the answer goes through
- *          `core/inputRequest.ts` · `applyInputResponse` like any other, and a
- *          refused time answer comes back as a re-ask to elicit again.
- * Role:    lib/mcp (the transport). Reads `core/inputRequest.ts` types only.
- * Emits:   N/A.
- *
- * ## The mapping
- *
- * MCP's elicitation schema holds strings (with a `format` of `date-time`
- * among a few), numbers, booleans and string choices (`enum` + `enumNames`).
- * It has no range, so a time field becomes the properties a person can fill:
- *
- * | Field | Properties |
- * |-------|------------|
- * | `string` / `number` / `boolean` | `<id>`, as typed; a string's `enum` with its `labels` as `enumNames` |
- * | `format: 'instant'` | `<id>`: `{ type: 'string', format: 'date-time' }` |
- * | `format: 'zone'` | `<id>`: a string |
- * | `format: 'time-range'` | `<id>.from` and `<id>.to`: two `date-time` strings, joined back as `from/to` |
- * | a `format` field with choices | `<id>`: the choices, labelled; unless `strict`, ALSO the free-entry properties above (`<id>.other` for an instant or a zone) — answer one or the other |
- *
- * Only the fields still open are asked (a supplied value is known). A
- * property is `required` only when it is the one way to answer a missing
- * field. A number or boolean with `enum` has no MCP spelling and is refused,
- * never widened; so is a field id that collides with a generated name.
- *
- * @example
- * ```ts
- * const out = await agent.run({ message });
- * if (isInputPause(out)) {
- *   const request = elicitationOf(out.awaitingInput);
- *   const reply = await mcpClientSession.elicit(request); // { action: 'accept', content }
- *   if (reply.action === 'accept')
- *     await agent.resume(out.checkpoint, answerFromElicitation(out.awaitingInput, reply.content));
- * }
- * ```
- */
-import { type AwaitingInput, type InputResponse } from '../../core/inputRequest.js';
-/** One primitive property of an elicitation's `requestedSchema`. */
-export type ElicitationProperty = {
-    readonly type: 'string';
-    readonly description?: string;
-    readonly format?: 'date-time';
-    readonly enum?: readonly string[];
-    readonly enumNames?: readonly string[];
-} | {
-    readonly type: 'number';
-    readonly description?: string;
-} | {
-    readonly type: 'boolean';
-    readonly description?: string;
-};
-/** The MCP `elicitation/create` request's params. */
-export interface ElicitationRequest {
-    readonly message: string;
-    readonly requestedSchema: {
-        readonly type: 'object';
-        readonly properties: Readonly<Record<string, ElicitationProperty>>;
-        readonly required?: readonly string[];
-    };
-}
-/**
- * The MCP elicitation for a pending typed ask: its question (after the
- * refusal's reason, on a re-ask) and one property per way to answer each open
- * field. Throws `InputRequestError` on a field MCP cannot carry.
- */
-export declare function elicitationOf(awaiting: AwaitingInput): ElicitationRequest;
-/**
- * The `InputResponse` an accepted elicitation's `content` names — each open
- * field's value, a time range's two properties joined as `from/to`. Throws
- * `InputRequestError` on a property the elicitation did not ask, on a choice
- * AND a free entry for one field, and on half a range. The values are judged
- * by `agent.resume`, as any answer is.
- */
-export declare function answerFromElicitation(awaiting: AwaitingInput, content: unknown): InputResponse;

package/dist/esm/lib/mcp/elicitation.js

@@ -1,181 +0,0 @@
-/**
- * lib/mcp/elicitation — a typed ask carried as an MCP elicitation, and the
- * elicitation's answer carried back (time design § 6.1).
- *
- * Pattern: Adapter, pure, both directions in one file so they cannot drift.
- *          `elicitationOf` maps a pending `AwaitingInput` onto the MCP
- *          elicitation request (`message` + a flat `requestedSchema` of
- *          primitive properties, the MCP specification revision of
- *          2025-06-18); `answerFromElicitation` maps the client's `content`
- *          back to the `InputResponse` `agent.resume` takes. Nothing is
- *          checked here that the resume door checks: the answer goes through
- *          `core/inputRequest.ts` · `applyInputResponse` like any other, and a
- *          refused time answer comes back as a re-ask to elicit again.
- * Role:    lib/mcp (the transport). Reads `core/inputRequest.ts` types only.
- * Emits:   N/A.
- *
- * ## The mapping
- *
- * MCP's elicitation schema holds strings (with a `format` of `date-time`
- * among a few), numbers, booleans and string choices (`enum` + `enumNames`).
- * It has no range, so a time field becomes the properties a person can fill:
- *
- * | Field | Properties |
- * |-------|------------|
- * | `string` / `number` / `boolean` | `<id>`, as typed; a string's `enum` with its `labels` as `enumNames` |
- * | `format: 'instant'` | `<id>`: `{ type: 'string', format: 'date-time' }` |
- * | `format: 'zone'` | `<id>`: a string |
- * | `format: 'time-range'` | `<id>.from` and `<id>.to`: two `date-time` strings, joined back as `from/to` |
- * | a `format` field with choices | `<id>`: the choices, labelled; unless `strict`, ALSO the free-entry properties above (`<id>.other` for an instant or a zone) — answer one or the other |
- *
- * Only the fields still open are asked (a supplied value is known). A
- * property is `required` only when it is the one way to answer a missing
- * field. A number or boolean with `enum` has no MCP spelling and is refused,
- * never widened; so is a field id that collides with a generated name.
- *
- * @example
- * ```ts
- * const out = await agent.run({ message });
- * if (isInputPause(out)) {
- *   const request = elicitationOf(out.awaitingInput);
- *   const reply = await mcpClientSession.elicit(request); // { action: 'accept', content }
- *   if (reply.action === 'accept')
- *     await agent.resume(out.checkpoint, answerFromElicitation(out.awaitingInput, reply.content));
- * }
- * ```
- */
-import { InputRequestError, } from '../../core/inputRequest.js';
-const own = (o, k) => Object.prototype.hasOwnProperty.call(o, k);
-function fail(reason) {
-    throw new InputRequestError(reason);
-}
-function carriageOf(field) {
-    const id = field.id;
-    if (field.enum === undefined) {
-        return { entry: field.format === 'time-range' ? [`${id}.from`, `${id}.to`] : [id] };
-    }
-    if (field.format === undefined || field.strict === true)
-        return { choice: id, entry: [] };
-    // A time field's choices keep free entry open (time design § 6.1): both ways travel.
-    return {
-        choice: id,
-        entry: field.format === 'time-range' ? [`${id}.from`, `${id}.to`] : [`${id}.other`],
-    };
-}
-function entryProperty(field) {
-    const description = field.description !== undefined ? { description: field.description } : {};
-    if (field.type === 'number')
-        return { type: 'number', ...description };
-    if (field.type === 'boolean')
-        return { type: 'boolean', ...description };
-    if (field.format === 'instant' || field.format === 'time-range')
-        return { type: 'string', format: 'date-time', ...description };
-    return { type: 'string', ...description };
-}
-function choiceProperty(field) {
-    if (field.type !== 'string') {
-        fail(`field '${field.id}': an MCP elicitation carries choices of strings only`);
-    }
-    return {
-        type: 'string',
-        ...(field.description !== undefined && { description: field.description }),
-        enum: (field.enum ?? []).map(String),
-        ...(field.labels !== undefined && { enumNames: [...field.labels] }),
-    };
-}
-/** The fields still open — a supplied value is known and not asked again. */
-const openFields = (awaiting) => awaiting.fields.filter((f) => !own(awaiting.supplied, f.id));
-/**
- * The MCP elicitation for a pending typed ask: its question (after the
- * refusal's reason, on a re-ask) and one property per way to answer each open
- * field. Throws `InputRequestError` on a field MCP cannot carry.
- */
-export function elicitationOf(awaiting) {
-    const properties = {};
-    const required = [];
-    const ids = new Set(awaiting.fields.map((f) => f.id));
-    const place = (name, property, owner) => {
-        if (own(properties, name) || (name !== owner && ids.has(name))) {
-            fail(`field '${owner}': the elicitation property '${name}' collides with another field`);
-        }
-        properties[name] = property;
-    };
-    for (const field of openFields(awaiting)) {
-        const carriage = carriageOf(field);
-        if (carriage.choice !== undefined)
-            place(carriage.choice, choiceProperty(field), field.id);
-        for (const name of carriage.entry)
-            place(name, entryProperty(field), field.id);
-        // Required only when there is ONE way to answer: a choice with free entry is either-or.
-        if (awaiting.missing.includes(field.id) &&
-            (carriage.choice === undefined) !== (carriage.entry.length === 0)) {
-            required.push(...(carriage.choice !== undefined ? [carriage.choice] : carriage.entry));
-        }
-    }
-    const message = awaiting.refused !== undefined
-        ? `${awaiting.refused.reason}\n\n${awaiting.question}`
-        : awaiting.question;
-    return {
-        message,
-        requestedSchema: {
-            type: 'object',
-            properties,
-            ...(required.length > 0 && { required }),
-        },
-    };
-}
-function primitive(name, value) {
-    if (typeof value === 'string' || typeof value === 'boolean')
-        return value;
-    if (typeof value === 'number' && Number.isFinite(value))
-        return value;
-    return fail(`the elicitation's '${name}' is not a string, number or boolean`);
-}
-/**
- * The `InputResponse` an accepted elicitation's `content` names — each open
- * field's value, a time range's two properties joined as `from/to`. Throws
- * `InputRequestError` on a property the elicitation did not ask, on a choice
- * AND a free entry for one field, and on half a range. The values are judged
- * by `agent.resume`, as any answer is.
- */
-export function answerFromElicitation(awaiting, content) {
-    if (typeof content !== 'object' || content === null || Array.isArray(content)) {
-        fail("the elicitation's content must be an object");
-    }
-    const given = content;
-    const asked = new Set();
-    const values = {};
-    for (const field of openFields(awaiting)) {
-        const carriage = carriageOf(field);
-        const names = [...(carriage.choice !== undefined ? [carriage.choice] : []), ...carriage.entry];
-        names.forEach((n) => asked.add(n));
-        const chosen = carriage.choice !== undefined && own(given, carriage.choice);
-        const entered = carriage.entry.filter((n) => own(given, n));
-        if (chosen && entered.length > 0) {
-            fail(`field '${field.id}': answer with a choice or your own value, not both`);
-        }
-        let value;
-        if (chosen)
-            value = primitive(carriage.choice, given[carriage.choice]);
-        else if (field.format === 'time-range' && entered.length > 0) {
-            if (entered.length !== 2)
-                fail(`field '${field.id}': a time range needs its start and its end`);
-            value = `${primitive(`${field.id}.from`, given[`${field.id}.from`])}/${primitive(`${field.id}.to`, given[`${field.id}.to`])}`;
-        }
-        else if (entered.length === 1)
-            value = primitive(entered[0], given[entered[0]]);
-        if (value !== undefined) {
-            Object.defineProperty(values, field.id, {
-                value,
-                enumerable: true,
-                writable: true,
-                configurable: true,
-            });
-        }
-    }
-    const unasked = Object.keys(given).filter((k) => !asked.has(k));
-    if (unasked.length > 0)
-        fail(`the elicitation's content names properties it did not ask: ${unasked.join(', ')}`);
-    return { requestId: awaiting.requestId, values };
-}
-//# sourceMappingURL=elicitation.js.map

package/dist/esm/lib/mcp/elicitation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"elicitation.js","sourceRoot":"","sources":["../../../../src/lib/mcp/elicitation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EACL,iBAAiB,GAKlB,MAAM,4BAA4B,CAAC;AA8BpC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAc,EAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE/F,SAAS,IAAI,CAAC,MAAc;IAC1B,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACpB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC1F,qFAAqF;IACrF,OAAO;QACL,MAAM,EAAE,EAAE;QACV,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC;KACpF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC;IACvE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,CAAC;IACzE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY;QAC7D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB;IACvC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,uDAAuD,CAAC,CAAC;IAClF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1E,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,GAAG,CAAC,QAAuB,EAAyB,EAAE,CACpE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,QAAuB;IACnD,MAAM,UAAU,GAAwC,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,QAA6B,EAAE,KAAa,EAAQ,EAAE;QACjF,IAAI,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,UAAU,KAAK,gCAAgC,IAAI,+BAA+B,CAAC,CAAC;QAC3F,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3F,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,wFAAwF;QACxF,IACE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EACjE,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GACX,QAAQ,CAAC,OAAO,KAAK,SAAS;QAC5B,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,OAAO,QAAQ,CAAC,QAAQ,EAAE;QACtD,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACxB,OAAO;QACL,OAAO;QACP,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;SACzC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,IAAI,CAAC,sBAAsB,IAAI,sCAAsC,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAuB,EAAE,OAAgB;IAC7E,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC,6CAA6C,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,KAAK,GAAG,OAAkC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/F,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,qDAAqD,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,KAA6B,CAAC;QAClC,IAAI,MAAM;YAAE,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAgB,CAAC,CAAC,CAAC;aACtF,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBACtB,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,6CAA6C,CAAC,CAAC;YACxE,KAAK,GAAG,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,SAAS,CAC9E,GAAG,KAAK,CAAC,EAAE,KAAK,EAChB,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,CACxB,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAC7B,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC;QACvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE;gBACtC,KAAK;gBACL,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QACpB,IAAI,CAAC,8DAA8D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3F,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC"}

package/dist/esm/lib/mcp/gatewayTransport.d.ts

@@ -1,155 +0,0 @@
-/**
- * gatewayTransport — an MCP transport whose auth headers are vended per
- * request, not per connection.
- *
- *   const gateway = await mcpClient({
- *     name: 'gateway',
- *     transport: gatewayTransport({ url, credentials, service: 'gateway' }),
- *   });
- *
- * ── Why this exists ──────────────────────────────────────────────────────────
- * The `http` transport takes headers once and reuses them for the life of the
- * connection. That is right for a static API key and wrong for anything with an
- * expiry: a standing agent outlives its bearer token, and the failure mode is a
- * burst of 401s an hour into a session that worked perfectly when you tested
- * it. Managed gateways — AgentCore's among them — hand out exactly that kind of
- * token, so "get a fresh one before each request" is not an optimisation, it is
- * the only way the connection stays up.
- *
- * Nothing here is vendor-specific. It is the {@link CredentialProvider} port on
- * one side and Streamable HTTP on the other; who vends is your choice.
- *
- * ── The secrecy invariant, and how it is kept ────────────────────────────────
- * **A vended token is used once and dropped.** It is not cached between
- * requests, not stored on the transport object, not put in an event payload,
- * not written to a log, and not included in any error this module throws —
- * including the errors it throws WHILE holding one. A test asserts that: a
- * hostile logger subscribed to everything the library can say never sees the
- * header value.
- *
- * That is why the vend happens inside `fetch` rather than at construction. A
- * token resolved at construction has to live somewhere for the connection to
- * use it later, and "somewhere" is what leaks.
- *
- * Pattern: Adapter + Decorator over `fetch`. Role: Layer-3 tool integration.
- */
-import { type CredentialProvider } from '../../identity/types.js';
-import type { McpGatewayTransport } from './types.js';
-/** Options for {@link gatewayTransport}. */
-export interface GatewayTransportOptions {
-    /** The MCP endpoint URL. */
-    readonly url: string;
-    /** Who vends the token — any `CredentialProvider`. */
-    readonly credentials: CredentialProvider;
-    /**
-     * The downstream service id the provider understands. Default `'gateway'`.
-     * `staticTokens({ gateway: '...' })` and `agentCoreIdentity()` both key on it.
-     */
-    readonly service?: string;
-    /** OAuth scopes to request, when the provider uses them. */
-    readonly scopes?: readonly string[];
-    /** `machine` (2-legged, the default) or `user` (3-legged, on behalf of a user). */
-    readonly mode?: 'machine' | 'user';
-    /**
-     * Extra headers sent alongside the vended ones. Applied FIRST, so a vended
-     * auth header always wins. **Put no secrets here** — these are held for the
-     * life of the transport, which is what the vended ones exist to avoid.
-     */
-    readonly headers?: Readonly<Record<string, string>>;
-    /**
-     * Your own `fetch`, called UNDERNEATH the per-request vending (9.32.0).
-     *
-     * ── The gap this closes ──────────────────────────────────────────────────
-     * Some gateways do not authenticate with a bearer alone. A managed identity
-     * path may want a client certificate (mTLS) or a proof-of-possession
-     * signature over the request itself (DPoP) — things computed FROM the
-     * request, which no header fixed at construction can express. Until this
-     * existed the only workaround was to abandon this transport for the generic
-     * `http` one, which has a `fetch` seam and fixes its headers at connect
-     * time — so a caller traded away token rotation to get a client certificate.
-     * That is a bad trade, and it was the shape an independent field trial
-     * reported (2026-08-13): *"exposes bearer-credential, header and scope
-     * options, but no certificate, DPoP or custom-fetch seam."*
-     *
-     * ── The composition, and its order ───────────────────────────────────────
-     * The credential is vended FIRST and applied to the request; your function is
-     * then called with that request. So a signer sees the final headers and has
-     * the last word over the bytes, exactly as it does on the `http` transport —
-     * and the vending still happens on every request, so rotation is not lost.
-     *
-     * **Zero vendor code lives here.** This library ships no signer, no
-     * certificate loader and no DPoP implementation; a scheme this repo has never
-     * heard of works on the day you write it. Whatever you do inside is between
-     * you and the server.
-     *
-     * ── What the secrecy invariant still guarantees ──────────────────────────
-     * Your function sees the request it is asked to send, headers included —
-     * which is what makes signing possible and is the whole point of the seam.
-     * What is still true is everything this module controls: the vended value is
-     * never cached, never stored on the transport, and never enters an event, an
-     * error or a log. A `fetch` you inject that logs its own headers is
-     * publishing your credential, and that is your decision to make in your code
-     * rather than something this library can do behind you.
-     *
-     * @example  mTLS, through an agent you own
-     *   gatewayTransport({
-     *     url, credentials, service: 'gateway',
-     *     fetch: (input, init) => fetch(input, { ...init, dispatcher: mtlsAgent }),
-     *   })
-     *
-     * @example  Proof-of-possession over the request
-     *   gatewayTransport({
-     *     url, credentials,
-     *     fetch: async (input, init) => {
-     *       const headers = new Headers(init?.headers);
-     *       headers.set('dpop', await sign(init?.method ?? 'POST', String(input)));
-     *       return fetch(input, { ...init, headers });
-     *     },
-     *   })
-     */
-    readonly fetch?: FetchLike;
-}
-/**
- * Describe an MCP connection whose auth headers are vended per request.
- *
- * @example  A managed gateway with a token vault behind it
- *   import { agentCoreIdentity } from 'agentfootprint/security';
- *   import { gatewayTransport, mcpClient } from 'agentfootprint/providers';
- *
- *   const gateway = await mcpClient({
- *     name: 'gateway',
- *     transport: gatewayTransport({
- *       url: process.env.GATEWAY_MCP_URL!,
- *       credentials: agentCoreIdentity({ region: 'us-west-2' }),
- *       service: 'gateway',
- *     }),
- *   });
- *   const agent = Agent.create({ provider, model }).tools(await gateway.tools()).build();
- */
-export declare function gatewayTransport(options: GatewayTransportOptions): McpGatewayTransport;
-/**
- * Raised when the provider needs a human to authorize before it can vend.
- *
- * The URL is carried so the caller can surface it (pause the run, show a
- * link); **the token is not, because there is not one yet** — that is the whole
- * meaning of this error.
- */
-export declare class GatewayAuthorizationRequiredError extends Error {
-    readonly code: "ERR_GATEWAY_AUTHORIZATION_REQUIRED";
-    /** Send the user here, then retry. */
-    readonly authorizationUrl: string;
-    constructor(service: string, authorizationUrl: string);
-}
-/** Just the part of `fetch` this module needs, so it is trivially injectable in tests. */
-export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
-/**
- * Build the `fetch` the MCP SDK will use: one that vends a credential, applies
- * it to this one request, and keeps nothing.
- *
- * Exported for tests — the secrecy invariant is asserted against this function
- * directly, because that is where a leak would happen and driving a whole SDK
- * to reach it would test less while looking like it tested more.
- *
- * @internal
- */
-export declare function createVendingFetch(transport: McpGatewayTransport, baseFetch?: FetchLike): FetchLike;