agentfootprint 10.3.0 → 10.4.0

package/dist/mcp/elicitation.js

@@ -0,0 +1,186 @@
+"use strict";
+/**
+ * mcp/elicitation — a typed ask carried as an MCP elicitation, and the
+ * elicitation's answer carried back (time design § 6.1).
+ *
+ * Pattern: Adapter, pure, both directions in one file so they cannot drift.
+ *          `elicitationOf` maps a pending `AwaitingInput` onto the MCP
+ *          elicitation request (`message` + a flat `requestedSchema` of
+ *          primitive properties, the MCP specification revision of
+ *          2025-06-18); `answerFromElicitation` maps the client's `content`
+ *          back to the `InputResponse` `agent.resume` takes. Nothing is
+ *          checked here that the resume door checks: the answer goes through
+ *          `tools/inputRequest.ts` · `applyInputResponse` like any other, and a
+ *          refused time answer comes back as a re-ask to elicit again.
+ * Role:    mcp (the transport). Reads `tools/inputRequest.ts` types only.
+ * Emits:   N/A.
+ *
+ * ## The mapping
+ *
+ * MCP's elicitation schema holds strings (with a `format` of `date-time`
+ * among a few), numbers, booleans and string choices (`enum` + `enumNames`).
+ * It has no range, so a time field becomes the properties a person can fill:
+ *
+ * | Field | Properties |
+ * |-------|------------|
+ * | `string` / `number` / `boolean` | `<id>`, as typed; a string's `enum` with its `labels` as `enumNames` |
+ * | `format: 'instant'` | `<id>`: `{ type: 'string', format: 'date-time' }` |
+ * | `format: 'zone'` | `<id>`: a string |
+ * | `format: 'time-range'` | `<id>.from` and `<id>.to`: two `date-time` strings, joined back as `from/to` |
+ * | a `format` field with choices | `<id>`: the choices, labelled; unless `strict`, ALSO the free-entry properties above (`<id>.other` for an instant or a zone) — answer one or the other |
+ *
+ * Only the fields still open are asked (a supplied value is known). A
+ * property is `required` only when it is the one way to answer a missing
+ * field. A number or boolean with `enum` has no MCP spelling and is refused,
+ * never widened; so is a field id that collides with a generated name.
+ *
+ * @example
+ * ```ts
+ * const out = await agent.run({ message });
+ * if (isInputPause(out)) {
+ *   const request = elicitationOf(out.awaitingInput);
+ *   const reply = await mcpClientSession.elicit(request); // { action: 'accept', content }
+ *   if (reply.action === 'accept')
+ *     await agent.resume(out.checkpoint, answerFromElicitation(out.awaitingInput, reply.content));
+ * }
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.answerFromElicitation = exports.elicitationOf = void 0;
+const inputRequest_js_1 = require("../tools/inputRequest.js");
+const own = (o, k) => Object.prototype.hasOwnProperty.call(o, k);
+function fail(reason) {
+    throw new inputRequest_js_1.InputRequestError(reason);
+}
+function carriageOf(field) {
+    const id = field.id;
+    if (field.enum === undefined) {
+        return { entry: field.format === 'time-range' ? [`${id}.from`, `${id}.to`] : [id] };
+    }
+    if (field.format === undefined || field.strict === true)
+        return { choice: id, entry: [] };
+    // A time field's choices keep free entry open (time design § 6.1): both ways travel.
+    return {
+        choice: id,
+        entry: field.format === 'time-range' ? [`${id}.from`, `${id}.to`] : [`${id}.other`],
+    };
+}
+function entryProperty(field) {
+    const description = field.description !== undefined ? { description: field.description } : {};
+    if (field.type === 'number')
+        return { type: 'number', ...description };
+    if (field.type === 'boolean')
+        return { type: 'boolean', ...description };
+    if (field.format === 'instant' || field.format === 'time-range')
+        return { type: 'string', format: 'date-time', ...description };
+    return { type: 'string', ...description };
+}
+function choiceProperty(field) {
+    if (field.type !== 'string') {
+        fail(`field '${field.id}': an MCP elicitation carries choices of strings only`);
+    }
+    return {
+        type: 'string',
+        ...(field.description !== undefined && { description: field.description }),
+        enum: (field.enum ?? []).map(String),
+        ...(field.labels !== undefined && { enumNames: [...field.labels] }),
+    };
+}
+/** The fields still open — a supplied value is known and not asked again. */
+const openFields = (awaiting) => awaiting.fields.filter((f) => !own(awaiting.supplied, f.id));
+/**
+ * The MCP elicitation for a pending typed ask: its question (after the
+ * refusal's reason, on a re-ask) and one property per way to answer each open
+ * field. Throws `InputRequestError` on a field MCP cannot carry.
+ */
+function elicitationOf(awaiting) {
+    const properties = {};
+    const required = [];
+    const ids = new Set(awaiting.fields.map((f) => f.id));
+    const place = (name, property, owner) => {
+        if (own(properties, name) || (name !== owner && ids.has(name))) {
+            fail(`field '${owner}': the elicitation property '${name}' collides with another field`);
+        }
+        properties[name] = property;
+    };
+    for (const field of openFields(awaiting)) {
+        const carriage = carriageOf(field);
+        if (carriage.choice !== undefined)
+            place(carriage.choice, choiceProperty(field), field.id);
+        for (const name of carriage.entry)
+            place(name, entryProperty(field), field.id);
+        // Required only when there is ONE way to answer: a choice with free entry is either-or.
+        if (awaiting.missing.includes(field.id) &&
+            (carriage.choice === undefined) !== (carriage.entry.length === 0)) {
+            required.push(...(carriage.choice !== undefined ? [carriage.choice] : carriage.entry));
+        }
+    }
+    const message = awaiting.refused !== undefined
+        ? `${awaiting.refused.reason}\n\n${awaiting.question}`
+        : awaiting.question;
+    return {
+        message,
+        requestedSchema: {
+            type: 'object',
+            properties,
+            ...(required.length > 0 && { required }),
+        },
+    };
+}
+exports.elicitationOf = elicitationOf;
+function primitive(name, value) {
+    if (typeof value === 'string' || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number' && Number.isFinite(value))
+        return value;
+    return fail(`the elicitation's '${name}' is not a string, number or boolean`);
+}
+/**
+ * The `InputResponse` an accepted elicitation's `content` names — each open
+ * field's value, a time range's two properties joined as `from/to`. Throws
+ * `InputRequestError` on a property the elicitation did not ask, on a choice
+ * AND a free entry for one field, and on half a range. The values are judged
+ * by `agent.resume`, as any answer is.
+ */
+function answerFromElicitation(awaiting, content) {
+    if (typeof content !== 'object' || content === null || Array.isArray(content)) {
+        fail("the elicitation's content must be an object");
+    }
+    const given = content;
+    const asked = new Set();
+    const values = {};
+    for (const field of openFields(awaiting)) {
+        const carriage = carriageOf(field);
+        const names = [...(carriage.choice !== undefined ? [carriage.choice] : []), ...carriage.entry];
+        names.forEach((n) => asked.add(n));
+        const chosen = carriage.choice !== undefined && own(given, carriage.choice);
+        const entered = carriage.entry.filter((n) => own(given, n));
+        if (chosen && entered.length > 0) {
+            fail(`field '${field.id}': answer with a choice or your own value, not both`);
+        }
+        let value;
+        if (chosen)
+            value = primitive(carriage.choice, given[carriage.choice]);
+        else if (field.format === 'time-range' && entered.length > 0) {
+            if (entered.length !== 2)
+                fail(`field '${field.id}': a time range needs its start and its end`);
+            value = `${primitive(`${field.id}.from`, given[`${field.id}.from`])}/${primitive(`${field.id}.to`, given[`${field.id}.to`])}`;
+        }
+        else if (entered.length === 1)
+            value = primitive(entered[0], given[entered[0]]);
+        if (value !== undefined) {
+            Object.defineProperty(values, field.id, {
+                value,
+                enumerable: true,
+                writable: true,
+                configurable: true,
+            });
+        }
+    }
+    const unasked = Object.keys(given).filter((k) => !asked.has(k));
+    if (unasked.length > 0)
+        fail(`the elicitation's content names properties it did not ask: ${unasked.join(', ')}`);
+    return { requestId: awaiting.requestId, values };
+}
+exports.answerFromElicitation = answerFromElicitation;
+//# sourceMappingURL=elicitation.js.map

package/dist/mcp/elicitation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elicitation.js","sourceRoot":"","sources":["../../src/mcp/elicitation.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;;;AAEH,8DAMkC;AA8BlC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAc,EAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE/F,SAAS,IAAI,CAAC,MAAc;IAC1B,MAAM,IAAI,mCAAiB,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACpB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC1F,qFAAqF;IACrF,OAAO;QACL,MAAM,EAAE,EAAE;QACV,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC;KACpF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC;IACvE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,CAAC;IACzE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY;QAC7D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB;IACvC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,uDAAuD,CAAC,CAAC;IAClF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1E,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,GAAG,CAAC,QAAuB,EAAyB,EAAE,CACpE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE/D;;;;GAIG;AACH,SAAgB,aAAa,CAAC,QAAuB;IACnD,MAAM,UAAU,GAAwC,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,QAA6B,EAAE,KAAa,EAAQ,EAAE;QACjF,IAAI,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,UAAU,KAAK,gCAAgC,IAAI,+BAA+B,CAAC,CAAC;QAC3F,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3F,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,wFAAwF;QACxF,IACE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EACjE,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GACX,QAAQ,CAAC,OAAO,KAAK,SAAS;QAC5B,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,OAAO,QAAQ,CAAC,QAAQ,EAAE;QACtD,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACxB,OAAO;QACL,OAAO;QACP,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;SACzC;KACF,CAAC;AACJ,CAAC;AAlCD,sCAkCC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,IAAI,CAAC,sBAAsB,IAAI,sCAAsC,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,qBAAqB,CAAC,QAAuB,EAAE,OAAgB;IAC7E,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC,6CAA6C,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,KAAK,GAAG,OAAkC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/F,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,qDAAqD,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,KAA6B,CAAC;QAClC,IAAI,MAAM;YAAE,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAgB,CAAC,CAAC,CAAC;aACtF,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBACtB,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,6CAA6C,CAAC,CAAC;YACxE,KAAK,GAAG,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,SAAS,CAC9E,GAAG,KAAK,CAAC,EAAE,KAAK,EAChB,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,CACxB,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAC7B,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC;QACvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE;gBACtC,KAAK;gBACL,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QACpB,IAAI,CAAC,8DAA8D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3F,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC;AAxCD,sDAwCC"}

package/dist/mcp/gatewayTransport.js

@@ -0,0 +1,130 @@
+"use strict";
+/**
+ * gatewayTransport — an MCP transport whose auth headers are vended per
+ * request, not per connection.
+ *
+ *   const gateway = await mcpClient({
+ *     name: 'gateway',
+ *     transport: gatewayTransport({ url, credentials, service: 'gateway' }),
+ *   });
+ *
+ * ── Why this exists ──────────────────────────────────────────────────────────
+ * The `http` transport takes headers once and reuses them for the life of the
+ * connection. That is right for a static API key and wrong for anything with an
+ * expiry: a standing agent outlives its bearer token, and the failure mode is a
+ * burst of 401s an hour into a session that worked perfectly when you tested
+ * it. Managed gateways — AgentCore's among them — hand out exactly that kind of
+ * token, so "get a fresh one before each request" is not an optimisation, it is
+ * the only way the connection stays up.
+ *
+ * Nothing here is vendor-specific. It is the {@link CredentialProvider} port on
+ * one side and Streamable HTTP on the other; who vends is your choice.
+ *
+ * ── The secrecy invariant, and how it is kept ────────────────────────────────
+ * **A vended token is used once and dropped.** It is not cached between
+ * requests, not stored on the transport object, not put in an event payload,
+ * not written to a log, and not included in any error this module throws —
+ * including the errors it throws WHILE holding one. A test asserts that: a
+ * hostile logger subscribed to everything the library can say never sees the
+ * header value.
+ *
+ * That is why the vend happens inside `fetch` rather than at construction. A
+ * token resolved at construction has to live somewhere for the connection to
+ * use it later, and "somewhere" is what leaks.
+ *
+ * Pattern: Adapter + Decorator over `fetch`. Role: Layer-3 tool integration.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createVendingFetch = exports.GatewayAuthorizationRequiredError = exports.gatewayTransport = void 0;
+const types_js_1 = require("../identity/types.js");
+const DEFAULT_SERVICE = 'gateway';
+/**
+ * Describe an MCP connection whose auth headers are vended per request.
+ *
+ * @example  A managed gateway with a token vault behind it
+ *   import { agentCoreIdentity } from 'agentfootprint/security';
+ *   import { gatewayTransport, mcpClient } from 'agentfootprint/providers';
+ *
+ *   const gateway = await mcpClient({
+ *     name: 'gateway',
+ *     transport: gatewayTransport({
+ *       url: process.env.GATEWAY_MCP_URL!,
+ *       credentials: agentCoreIdentity({ region: 'us-west-2' }),
+ *       service: 'gateway',
+ *     }),
+ *   });
+ *   const agent = Agent.create({ provider, model }).tools(await gateway.tools()).build();
+ */
+function gatewayTransport(options) {
+    if (!options.url)
+        throw new Error(`gatewayTransport requires 'url'.`);
+    if (!options.credentials)
+        throw new Error(`gatewayTransport requires 'credentials'.`);
+    return {
+        transport: 'gateway',
+        url: options.url,
+        credentials: options.credentials,
+        service: options.service ?? DEFAULT_SERVICE,
+        ...(options.scopes !== undefined && { scopes: options.scopes }),
+        ...(options.mode !== undefined && { mode: options.mode }),
+        ...(options.headers !== undefined && { headers: options.headers }),
+        ...(options.fetch !== undefined && { fetch: options.fetch }),
+    };
+}
+exports.gatewayTransport = gatewayTransport;
+/**
+ * Raised when the provider needs a human to authorize before it can vend.
+ *
+ * The URL is carried so the caller can surface it (pause the run, show a
+ * link); **the token is not, because there is not one yet** — that is the whole
+ * meaning of this error.
+ */
+class GatewayAuthorizationRequiredError extends Error {
+    code = 'ERR_GATEWAY_AUTHORIZATION_REQUIRED';
+    /** Send the user here, then retry. */
+    authorizationUrl;
+    constructor(service, authorizationUrl) {
+        super(`[mcp] the credential provider needs a person to authorize '${service}' before it can ` +
+            `vend a token for this gateway. A transport cannot run a consent flow mid-request — ` +
+            `surface the authorization URL to the user (pause the run), then call the tool again ` +
+            `once they have authorized.`);
+        this.name = 'GatewayAuthorizationRequiredError';
+        this.authorizationUrl = authorizationUrl;
+    }
+}
+exports.GatewayAuthorizationRequiredError = GatewayAuthorizationRequiredError;
+/**
+ * Build the `fetch` the MCP SDK will use: one that vends a credential, applies
+ * it to this one request, and keeps nothing.
+ *
+ * Exported for tests — the secrecy invariant is asserted against this function
+ * directly, because that is where a leak would happen and driving a whole SDK
+ * to reach it would test less while looking like it tested more.
+ *
+ * @internal
+ */
+function createVendingFetch(transport, baseFetch = globalThis.fetch.bind(globalThis)) {
+    return async (input, init) => {
+        const result = await transport.credentials.getCredential({
+            service: transport.service,
+            ...(transport.scopes !== undefined && { scopes: transport.scopes }),
+            ...(transport.mode !== undefined && { mode: transport.mode }),
+        });
+        if (!(0, types_js_1.isCredentialIssued)(result)) {
+            throw new GatewayAuthorizationRequiredError(transport.service, result.authorizationUrl);
+        }
+        // Static headers first, vended ones last: a vended auth header always wins,
+        // so a stale static one can never quietly shadow the live credential.
+        const headers = new Headers(init?.headers ?? {});
+        for (const [key, value] of Object.entries(transport.headers ?? {}))
+            headers.set(key, value);
+        for (const [key, value] of Object.entries(result.credential.toHeaders())) {
+            headers.set(key, value);
+        }
+        // The vended value exists only inside this call, on this Headers object,
+        // for the duration of this request. Nothing above closes over it.
+        return baseFetch(input, { ...init, headers });
+    };
+}
+exports.createVendingFetch = createVendingFetch;
+//# sourceMappingURL=gatewayTransport.js.map

package/dist/mcp/gatewayTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gatewayTransport.js","sourceRoot":"","sources":["../../src/mcp/gatewayTransport.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAEH,mDAAmF;AA8EnF,MAAM,eAAe,GAAG,SAAS,CAAC;AAElC;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,gBAAgB,CAAC,OAAgC;IAC/D,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtE,IAAI,CAAC,OAAO,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACtF,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe;QAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAClE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAbD,4CAaC;AAED;;;;;;GAMG;AACH,MAAa,iCAAkC,SAAQ,KAAK;IACjD,IAAI,GAAG,oCAA6C,CAAC;IAC9D,sCAAsC;IAC7B,gBAAgB,CAAS;IAElC,YAAY,OAAe,EAAE,gBAAwB;QACnD,KAAK,CACH,8DAA8D,OAAO,kBAAkB;YACrF,qFAAqF;YACrF,sFAAsF;YACtF,4BAA4B,CAC/B,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;QAChD,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;CACF;AAfD,8EAeC;AAKD;;;;;;;;;GASG;AACH,SAAgB,kBAAkB,CAChC,SAA8B,EAC9B,YAAuB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;IAExD,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,aAAa,CAAC;YACvD,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;YACnE,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,IAAI,CAAC,IAAA,6BAAkB,EAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,iCAAiC,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1F,CAAC;QAED,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;QAED,yEAAyE;QACzE,kEAAkE;QAClE,OAAO,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC;AACJ,CAAC;AA1BD,gDA0BC"}

package/dist/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACH,+CAA2C;AAAlC,yGAAA,SAAS,OAAA;AAClB,6CAAyC;AAAhC,uGAAA,QAAQ,OAAA;AACjB,8EAA8E;AAC9E,0EAA0E;AAC1E,iDAA0E;AAAjE,oHAAA,mBAAmB,OAAA;AAC5B,uDAAgG;AAAvF,iHAAA,aAAa,OAAA;AACtB,6DAI+B;AAH7B,uHAAA,gBAAgB,OAAA;AAChB,wIAAA,iCAAiC,OAAA;AAGnC,6EAA6E;AAC7E,4EAA4E;AAC5E,sEAAsE;AACtE,uDAAmD;AAA1C,iHAAA,aAAa,OAAA"}

package/dist/mcp/mcpClient.js

@@ -0,0 +1,303 @@
+"use strict";
+/**
+ * mcpClient — connect to an MCP server, expose its tools to your Agent.
+ *
+ *   const slack = await mcpClient({
+ *     name: 'slack',
+ *     transport: { transport: 'stdio', command: 'npx', args: ['@example/slack-mcp'] },
+ *   });
+ *
+ *   const tools = await slack.tools();   // → readonly Tool[]
+ *   const agent = Agent.create({ ... }).tools(tools).build();
+ *
+ *   // ...
+ *
+ *   await slack.close();
+ *
+ * Pattern: Adapter (GoF) — translates MCP `listTools()` / `callTool()`
+ *          into agentfootprint's `Tool` interface (schema + execute).
+ *          Each MCP tool becomes ONE agentfootprint Tool. The agent's
+ *          existing tool-call handler invokes `client.callTool()`
+ *          inside the wrapped `execute`.
+ *
+ * Role:    Layer-3 integration. Sits next to `defineTool` — same
+ *          shape, different source. Once tools land on the agent,
+ *          the rest of the library doesn't know they came from MCP.
+ *          Since 9.71.0 that is true of DECLARATIONS too: a server's
+ *          `_meta` bag becomes `argumentsFrom` / `resultKind` / `owner`
+ *          / `resultClass` / `resultCeiling` on the registered `Tool`,
+ *          so the integrity checks, the placement mint and the identity
+ *          joins arm for a remote tool exactly as for a local one. The
+ *          reading NEVER throws — see `toolExtras.ts`.
+ *
+ * Emits:   N/A — wrapped tools emit the standard
+ *          `agentfootprint.stream.tool_start` / `tool_end` events
+ *          when the agent calls them. Add `name: '<mcp-server>'` to
+ *          `McpClientOptions` so observability surfaces can group
+ *          tool calls by server.
+ *
+ * Lazy-require pattern: the `@modelcontextprotocol/sdk` peer-dep
+ * loads only when a consumer actually constructs a client. Tests
+ * inject `_client` and skip the import path entirely.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mcpClient = void 0;
+const toolExtras_js_1 = require("./toolExtras.js");
+const toolResult_js_1 = require("./toolResult.js");
+const gatewayTransport_js_1 = require("./gatewayTransport.js");
+const throttleRetry_js_1 = require("./throttleRetry.js");
+const connectionRefusals_js_1 = require("./connectionRefusals.js");
+const sdkLoadFailure_js_1 = require("./sdkLoadFailure.js");
+const transportUrl_js_1 = require("./transportUrl.js");
+const lazyRequire_js_1 = require("../lib/lazyRequire.js");
+// Version-less identity. The MCP `clientInfo` field is informational
+// (server logs it); a hardcoded number drifts every release. Consumers
+// who care about wire-level identity pass `clientInfo` explicitly.
+const DEFAULT_CLIENT_INFO = {
+    name: 'agentfootprint',
+    version: '0.0.0',
+};
+/**
+ * Connect to an MCP server. Returns an `McpClient` that exposes the
+ * server's tools as agentfootprint `Tool[]` and a `close()` to tear
+ * down the transport.
+ *
+ * Three ways to get a connection, and they are three because a browser can
+ * only take the last two:
+ *
+ *   - `{ transport }` — the library loads the SDK through its Node loader and
+ *     builds everything. The default, and what every Node consumer already
+ *     does.
+ *   - `{ transport, sdk }` — you supply the two SDK modules with static
+ *     imports; the library still builds the transport, so gateway vending,
+ *     `retryOnThrottle`, `headers` and your own `fetch` all keep working.
+ *   - `{ connection }` — you built and connected the client yourself; the
+ *     library only adapts its tools.
+ *
+ * @throws when the two arms are mixed, when a `connection` is not one, or when
+ *   `@modelcontextprotocol/sdk` cannot be loaded (the message says which of
+ *   "not installed" and "no Node loader here" actually happened), or when the
+ *   transport fails to connect.
+ */
+async function mcpClient(opts) {
+    const name = opts.name ?? 'mcp';
+    const resultMode = (0, toolResult_js_1.resultModeOf)(opts.resultMode, name);
+    // Before anything connects: an option that names a behaviour which cannot
+    // happen on the chosen arm is a defect, not a preference.
+    (0, connectionRefusals_js_1.refuseConflictingOptions)(opts, name);
+    const connection = await openConnection(opts);
+    // Tool cache so consumers calling `.tools()` more than once don't
+    // hammer the server. `.refresh()` invalidates it.
+    let cache = null;
+    let closed = false;
+    const ensureOpen = (op) => {
+        if (closed) {
+            throw new Error(`mcpClient[${name}].${op}() called after close(). Construct a new client to reconnect.`);
+        }
+    };
+    const buildTools = async () => {
+        // `signal` rides in the SDK's THIRD argument (RequestOptions), not in
+        // the request params — see `wrapMcpTool`.
+        const listed = opts.signal
+            ? await connection.listTools(undefined, { signal: opts.signal })
+            : await connection.listTools();
+        return listed.tools.map((t) => wrapMcpTool(name, connection, t, opts.signal, resultMode));
+    };
+    return {
+        name,
+        async tools() {
+            ensureOpen('tools');
+            if (!cache)
+                cache = await buildTools();
+            return cache;
+        },
+        async refresh() {
+            ensureOpen('refresh');
+            cache = await buildTools();
+            return cache;
+        },
+        async close() {
+            if (closed)
+                return;
+            closed = true;
+            cache = null;
+            await connection.close();
+        },
+    };
+}
+exports.mcpClient = mcpClient;
+// ─── Getting a connection ──────────────────────────────────────────
+/**
+ * The one funnel every arm passes through, in precedence order: a connection
+ * you handed over, the internal test seam, then the library building one.
+ *
+ * A call with neither `connection` nor `sdk` reaches `resolveClient` with two
+ * `undefined` arguments and takes the identical path it always took.
+ */
+async function openConnection(opts) {
+    if (opts.connection !== undefined)
+        return opts.connection;
+    if (opts._client !== undefined)
+        return opts._client;
+    // `refuseConflictingOptions` has already refused the case where this is
+    // absent, so the assertion documents that guarantee rather than assuming it.
+    const transport = opts.transport;
+    return resolveClient(transport, opts.clientInfo, opts.signal, opts.retryOnThrottle, opts.sdk);
+}
+// ─── SDK construction (lazy require, unless the caller supplied it) ─
+async function resolveClient(transport, clientInfo, signal, retryOnThrottle, sdk) {
+    const mod = sdk ?? loadClientModule();
+    const client = new mod.Client(clientInfo ?? DEFAULT_CLIENT_INFO, {
+        capabilities: {},
+    });
+    const transportImpl = await buildTransport(transport, retryOnThrottle, sdk);
+    // Same rule as callTool: options ride beside the transport, never inside it.
+    if (signal)
+        await client.connect(transportImpl, { signal });
+    else
+        await client.connect(transportImpl);
+    return client;
+}
+/** The Node loader path, unchanged — reached only when no `sdk` was supplied. */
+function loadClientModule() {
+    try {
+        return (0, lazyRequire_js_1.lazyRequire)('@modelcontextprotocol/sdk/client/index.js');
+    }
+    catch (err) {
+        throw new Error((0, sdkLoadFailure_js_1.sdkLoadFailure)(err, {
+            notInstalled: 'mcpClient requires @modelcontextprotocol/sdk.\n' +
+                '  Install:  npm install @modelcontextprotocol/sdk\n' +
+                '  Or pass `_client` for test injection.',
+            caller: 'mcpClient',
+            specifier: '@modelcontextprotocol/sdk/client/index.js',
+            instead: 'Pass `sdk` (the two SDK modules, imported statically) or `connection` ' +
+                '(a client you connected yourself).',
+        }));
+    }
+}
+async function buildTransport(t, retryOnThrottle, sdk) {
+    if (t.transport === 'stdio') {
+        // Deliberately NOT served by `sdk`: stdio spawns a subprocess, so it can
+        // never run in a browser, and `client/stdio.js` is the SDK's one client
+        // module that imports `node:process`/`node:stream`. Keeping it behind the
+        // loader is what keeps it off every browser module graph.
+        let stdioMod;
+        try {
+            stdioMod = (0, lazyRequire_js_1.lazyRequire)('@modelcontextprotocol/sdk/client/stdio.js');
+        }
+        catch (err) {
+            throw new Error((0, sdkLoadFailure_js_1.sdkLoadFailure)(err, {
+                notInstalled: 'mcpClient(stdio) requires @modelcontextprotocol/sdk/client/stdio.js — ' +
+                    'check that @modelcontextprotocol/sdk is installed at the latest version.',
+                caller: 'mcpClient(stdio)',
+                specifier: '@modelcontextprotocol/sdk/client/stdio.js',
+                instead: 'stdio spawns a subprocess, so it cannot run in a browser at all — ' +
+                    "reach the server over `transport: { transport: 'http', url }` instead.",
+            }));
+        }
+        return new stdioMod.StdioClientTransport({
+            command: t.command,
+            args: t.args ? [...t.args] : [],
+            ...(t.env && { env: { ...t.env } }),
+            ...(t.cwd !== undefined && { cwd: t.cwd }),
+        });
+    }
+    // http + gateway transports both ride Streamable HTTP. They differ only in
+    // WHEN the auth headers are decided: `http` fixes them at construction,
+    // `gateway` vends them inside every request (see gatewayTransport.ts).
+    const httpMod = sdk ?? loadHttpModule(t.transport);
+    // Throttle retry wraps the OUTERMOST fetch, so every attempt is re-signed
+    // and re-vended: signatures expire, and a token that would have died during
+    // the wait is simply never the one reused. `retryingFetch` returns its input
+    // untouched when retry is off — including `undefined`, so a plain `http`
+    // transport with no custom fetch still passes none and behaves exactly as it
+    // did before 8.11.0.
+    if (t.transport === 'gateway') {
+        // The consumer's own `fetch` (9.32.0) goes UNDERNEATH the vending, not
+        // beside it: `createVendingFetch` resolves the credential, applies it to
+        // this one request, and then calls the base fetch — so an mTLS agent or a
+        // DPoP signer sees the final headers and has the last word, while the
+        // credential is still vended per request. Passing `undefined` is the
+        // default global `fetch`, which is byte-identical to every release before
+        // the seam existed.
+        return new httpMod.StreamableHTTPClientTransport((0, transportUrl_js_1.transportUrl)(t.url, 'mcpClient'), {
+            fetch: (0, throttleRetry_js_1.retryingFetch)((0, gatewayTransport_js_1.createVendingFetch)(t, t.fetch), retryOnThrottle),
+        });
+    }
+    // Both options ride the SAME SDK transport, and both are forwarded when both
+    // are given. The SDK folds `requestInit.headers` into the `init.headers` it
+    // hands the custom fetch, so a signer sees the static headers and has the
+    // final word over the bytes — see `McpHttpTransport.fetch`.
+    const httpFetch = (0, throttleRetry_js_1.retryingFetch)(t.fetch, retryOnThrottle);
+    return new httpMod.StreamableHTTPClientTransport((0, transportUrl_js_1.transportUrl)(t.url, 'mcpClient'), {
+        ...(t.headers && { requestInit: { headers: { ...t.headers } } }),
+        ...(httpFetch && { fetch: httpFetch }),
+    });
+}
+/** The Node loader path for Streamable HTTP — reached only with no `sdk`. */
+function loadHttpModule(transport) {
+    try {
+        return (0, lazyRequire_js_1.lazyRequire)('@modelcontextprotocol/sdk/client/streamableHttp.js');
+    }
+    catch (err) {
+        throw new Error((0, sdkLoadFailure_js_1.sdkLoadFailure)(err, {
+            notInstalled: `mcpClient(${transport}) requires @modelcontextprotocol/sdk/client/streamableHttp.js — ` +
+                'check that @modelcontextprotocol/sdk is installed at the latest version.',
+            caller: `mcpClient(${transport})`,
+            specifier: '@modelcontextprotocol/sdk/client/streamableHttp.js',
+            instead: 'Pass `sdk` (the two SDK modules, imported statically) or `connection` ' +
+                '(a client you connected yourself).',
+        }));
+    }
+}
+// ─── Tool wrapping ─────────────────────────────────────────────────
+function wrapMcpTool(serverName, connection, mcp, signal, resultMode) {
+    const tool = {
+        schema: {
+            name: mcp.name,
+            description: mcp.description ?? `MCP tool: ${mcp.name}`,
+            inputSchema: mcp.inputSchema,
+        },
+        // Provenance, carried to the decision point. Governance that matches on a
+        // bare tool name cannot tell two servers' identically-named tools apart;
+        // this is the fact that lets it. See `Tool.source`.
+        source: serverName,
+        // The DECLARATIONS the server sent in MCP's `_meta` bag (9.71.0) — read
+        // defensively, per field, by the same rules `defineTool` enforces, and
+        // NEVER throwing: a malformed field is warned about once and dropped, and
+        // this tool still registers. That is what keeps one bad tool from killing
+        // a forty-tool bulk register. A server that sent no bag adds no keys here,
+        // so the Tool is byte-identical to one built before this existed.
+        ...(0, toolExtras_js_1.readToolExtras)(mcp._meta, {
+            server: serverName,
+            tool: mcp.name,
+            inputSchema: mcp.inputSchema,
+        }),
+        execute: async (args, ctx) => {
+            // The agent passes args as `unknown` per Tool contract. MCP
+            // expects a JSON object — non-object inputs become `{}` rather
+            // than failing the SDK call.
+            const argsObj = args !== null && typeof args === 'object' && !Array.isArray(args)
+                ? args
+                : {};
+            // The abort signal is NOT a request param — it belongs to the SDK's
+            // third argument (`RequestOptions`). Put it in the params object and
+            // it gets serialized onto the wire as an empty `{}` and the call is
+            // uncancellable: a silent no-op that only a real transport reveals.
+            // `resultSchema` (2nd arg) is left to the SDK's own default.
+            // The call's time (`ctx.time`, the time layer) crosses in the request's own
+            // `_meta` bag, under the one namespaced key; a call without it sends no `_meta`.
+            const params = {
+                name: mcp.name,
+                arguments: argsObj,
+                ...(ctx?.time !== undefined && { _meta: (0, toolExtras_js_1.callMetaOf)(ctx.time) }),
+            };
+            const result = signal
+                ? await connection.callTool(params, undefined, { signal })
+                : await connection.callTool(params);
+            return (0, toolResult_js_1.readToolResult)(result, mcp.name, serverName, resultMode);
+        },
+    };
+    return tool;
+}
+//# sourceMappingURL=mcpClient.js.map

package/dist/mcp/mcpClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpClient.js","sourceRoot":"","sources":["../../src/mcp/mcpClient.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;;;AAaH,mDAA6D;AAC7D,mDAA+D;AAC/D,+DAA2D;AAC3D,yDAAyE;AACzE,mEAAmE;AACnE,2DAAqD;AACrD,uDAAiD;AACjD,0DAAoD;AAEpD,qEAAqE;AACrE,uEAAuE;AACvE,mEAAmE;AACnE,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,OAAO;CACjB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACI,KAAK,UAAU,SAAS,CAAC,IAA6C;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,MAAM,UAAU,GAAG,IAAA,4BAAY,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACvD,0EAA0E;IAC1E,0DAA0D;IAC1D,IAAA,gDAAwB,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAE9C,kEAAkE;IAClE,kDAAkD;IAClD,IAAI,KAAK,GAA2B,IAAI,CAAC;IACzC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,UAAU,GAAG,CAAC,EAAU,EAAQ,EAAE;QACtC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,KAAK,EAAE,+DAA+D,CACxF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAA8B,EAAE;QACtD,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;YACxB,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAChE,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,KAAK,CAAC,KAAK;YACT,UAAU,CAAC,OAAO,CAAC,CAAC;YACpB,IAAI,CAAC,KAAK;gBAAE,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,OAAO;YACX,UAAU,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,KAAK,GAAG,IAAI,CAAC;YACb,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC;AAjDD,8BAiDC;AAED,sEAAsE;AAEtE;;;;;;GAMG;AACH,KAAK,UAAU,cAAc,CAC3B,IAA6C;IAE7C,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC;IAC1D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IACpD,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAyB,CAAC;IACjD,OAAO,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;AAChG,CAAC;AAED,uEAAuE;AAEvE,KAAK,UAAU,aAAa,CAC1B,SAAuB,EACvB,UAA8C,EAC9C,MAAoB,EACpB,eAAiC,EACjC,GAAY;IAEZ,MAAM,GAAG,GAAkB,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAErD,MAAM,MAAM,GAAiB,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,mBAAmB,EAAE;QAC7E,YAAY,EAAE,EAAE;KACjB,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;IAC5E,6EAA6E;IAC7E,IAAI,MAAM;QAAE,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;;QACvD,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,OAAO,IAAA,4BAAW,EAAgB,2CAA2C,CAAC,CAAC;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,IAAA,kCAAc,EAAC,GAAG,EAAE;YAClB,YAAY,EACV,iDAAiD;gBACjD,qDAAqD;gBACrD,yCAAyC;YAC3C,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,2CAA2C;YACtD,OAAO,EACL,wEAAwE;gBACxE,oCAAoC;SACvC,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,CAAe,EACf,eAAiC,EACjC,GAAY;IAEZ,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAC5B,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,0DAA0D;QAC1D,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAA,4BAAW,EAAkB,2CAA2C,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,IAAA,kCAAc,EAAC,GAAG,EAAE;gBAClB,YAAY,EACV,wEAAwE;oBACxE,0EAA0E;gBAC5E,MAAM,EAAE,kBAAkB;gBAC1B,SAAS,EAAE,2CAA2C;gBACtD,OAAO,EACL,oEAAoE;oBACpE,wEAAwE;aAC3E,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,oBAAoB,CAAC;YACvC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,OAAO,GAAmB,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnE,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,6EAA6E;IAC7E,qBAAqB;IACrB,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,sEAAsE;QACtE,qEAAqE;QACrE,0EAA0E;QAC1E,oBAAoB;QACpB,OAAO,IAAI,OAAO,CAAC,6BAA6B,CAAC,IAAA,8BAAY,EAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE;YACjF,KAAK,EAAE,IAAA,gCAAa,EAAC,IAAA,wCAAkB,EAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,SAAS,GAAG,IAAA,gCAAa,EAAC,CAAC,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC1D,OAAO,IAAI,OAAO,CAAC,6BAA6B,CAAC,IAAA,8BAAY,EAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE;QACjF,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;QAChE,GAAG,CAAC,SAAS,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;KACvC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,SAA6B;IACnD,IAAI,CAAC;QACH,OAAO,IAAA,4BAAW,EAAiB,oDAAoD,CAAC,CAAC;IAC3F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,IAAA,kCAAc,EAAC,GAAG,EAAE;YAClB,YAAY,EACV,aAAa,SAAS,kEAAkE;gBACxF,0EAA0E;YAC5E,MAAM,EAAE,aAAa,SAAS,GAAG;YACjC,SAAS,EAAE,oDAAoD;YAC/D,OAAO,EACL,wEAAwE;gBACxE,oCAAoC;SACvC,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,sEAAsE;AAEtE,SAAS,WAAW,CAClB,UAAkB,EAClB,UAAyB,EACzB,GAAkB,EAClB,MAAoB,EACpB,UAA2C;IAE3C,MAAM,IAAI,GAAS;QACjB,MAAM,EAAE;YACN,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,aAAa,GAAG,CAAC,IAAI,EAAE;YACvD,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,oDAAoD;QACpD,MAAM,EAAE,UAAU;QAClB,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,kEAAkE;QAClE,GAAG,IAAA,8BAAc,EAAC,GAAG,CAAC,KAAK,EAAE;YAC3B,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAC3B,4DAA4D;YAC5D,+DAA+D;YAC/D,6BAA6B;YAC7B,MAAM,OAAO,GACX,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC/D,CAAC,CAAE,IAAgC;gBACnC,CAAC,CAAC,EAAE,CAAC;YACT,oEAAoE;YACpE,qEAAqE;YACrE,oEAAoE;YACpE,oEAAoE;YACpE,6DAA6D;YAC7D,4EAA4E;YAC5E,iFAAiF;YACjF,MAAM,MAAM,GAAG;gBACb,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,SAAS,EAAE,OAAO;gBAClB,GAAG,CAAC,GAAG,EAAE,IAAI,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,IAAA,0BAAU,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;aAChE,CAAC;YACF,MAAM,MAAM,GAAG,MAAM;gBACnB,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC;gBAC1D,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtC,OAAO,IAAA,8BAAc,EAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAClE,CAAC;KACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}