agentfootprint 10.3.1 → 10.4.0

package/dist/adapters/mcp/agentcoreRuntime/safeAnswer.js

@@ -0,0 +1,415 @@
+"use strict";
+/**
+ * safeAnswer — what the MCP client may read of an answer: read ONCE, checked,
+ * and handed on as the canonical form of exactly what was checked.
+ *
+ * ── Why an allow-list ────────────────────────────────────────────────────────
+ * Whatever an answer's body says becomes the MCP client's error text, and a
+ * failed tool call hands that text to the model, the run's history and
+ * `tool_end`. Service text can carry anything the request did: AWS answers a
+ * signature mismatch with the whole signed request (the session token among
+ * it), its validation errors quote the value they refused, a proxy may echo a
+ * header. So a failure is RE-WRITTEN from parts that cannot carry a secret:
+ * the status; the AWS error type when it is a plain name; `Retry-After` when
+ * it is seconds or a date; and for a JSON-RPC error its integer `code`, the
+ * client's own `id`, and its `message` ONLY when it is one of the fixed
+ * sentences the MCP SDK and the AgentCore Runtime contract use
+ * ({@link KNOWN_ERROR_MESSAGES}).
+ *
+ * ── Why one reading ──────────────────────────────────────────────────────────
+ * A check that reads a body one way and a client that reads the same bytes
+ * another is a parser differential: a crafted answer passes the check and is
+ * used as something else. So a 2xx answer is never handed on as its raw bytes.
+ * It is classified by ONE rule (its media type, exactly `application/json` or
+ * `text/event-stream`, UTF-8), decoded strictly, parsed once
+ * (`strictJson.ts` — a duplicated key, trailing data or a byte-order mark is
+ * refused), checked, and RE-SERIALIZED: the client reads the value that was
+ * checked, never the bytes it came from. One message per body or event — a
+ * batch is refused. An answer that cannot be read unambiguously is refused by
+ * name, as a 502 whose text is this library's.
+ *
+ * Pattern: pure functions + one TransformStream. Role: outer ring, the
+ * transport's one rule for what the client reads.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.failureSentence = exports.safeAnswer = exports.isAuthFailure = exports.KNOWN_ERROR_MESSAGES = void 0;
+const errorType_js_1 = require("./errorType.js");
+const strictJson_js_1 = require("./strictJson.js");
+/**
+ * JSON-RPC error messages a reply may keep word for word — fixed strings that
+ * carry nothing of the request: the JSON-RPC 2.0 standard errors, the MCP
+ * Streamable HTTP session error, and the AgentCore Runtime MCP contract's
+ * mappings of its exceptions.
+ */
+exports.KNOWN_ERROR_MESSAGES = new Set([
+    'Parse error',
+    'Invalid Request',
+    'Method not found',
+    'Invalid params',
+    'Internal error',
+    'Session not found',
+    'Session operation in progress, please retry',
+    'Resource conflict - Resource already exists',
+    'Rate limit exceeded - Too many requests',
+    'Authentication error - Invalid credentials',
+    'Authorization error - Insufficient permissions',
+    'Tool execution error',
+]);
+/**
+ * AWS error types that mean "who you are, or what you may do" — whatever
+ * status they arrive with (`IncompleteSignatureException` is a 400).
+ */
+const AUTH_FAILURE_TYPES = new Set([
+    'AccessDeniedException',
+    'ExpiredTokenException',
+    'IncompleteSignatureException',
+    'InvalidClientTokenId',
+    'InvalidSignatureException',
+    'MissingAuthenticationTokenException',
+    'SignatureDoesNotMatch',
+    'UnauthorizedException',
+    'UnrecognizedClientException',
+]);
+/** An error type that is a plain name — anything else is not repeated. */
+const PLAIN_TYPE = /^[A-Za-z][A-Za-z0-9]{0,99}$/;
+/** A token the client may read back as it is: a request id, an event id or type, a session header. */
+const PLAIN_TOKEN = /^[A-Za-z0-9_.:-]{1,128}$/;
+/** `Retry-After`: delay-seconds, or an HTTP date. */
+const RETRY_AFTER = /^(?:\d{1,10}|[A-Za-z]{3}, \d{2} [A-Za-z]{3} \d{4} \d{2}:\d{2}:\d{2} GMT)$/;
+/** The response headers a 2xx answer keeps (besides its canonical content type). */
+const KEPT_HEADERS = ['mcp-session-id', 'mcp-protocol-version'];
+/** An answer this transport will not hand on, and why — in its own words. */
+class Unreadable extends Error {
+    reason;
+    constructor(reason) {
+        super(reason);
+        this.reason = reason;
+    }
+}
+/** Is this answer an authentication or authorization failure? */
+function isAuthFailure(status, type) {
+    if (status === 401 || status === 403)
+        return true;
+    return type !== undefined && AUTH_FAILURE_TYPES.has(type);
+}
+exports.isAuthFailure = isAuthFailure;
+/**
+ * The answer the MCP client may read: a failure rewritten from safe parts; a
+ * 2xx read once and re-serialized; an answer that cannot be read
+ * unambiguously refused (502).
+ */
+async function safeAnswer(response) {
+    if (!response.ok)
+        return safeFailure(response);
+    try {
+        return await safeSuccess(response);
+    }
+    catch (err) {
+        if (err instanceof Unreadable)
+            return refusal(response.status, err.reason);
+        throw err;
+    }
+}
+exports.safeAnswer = safeAnswer;
+// ── 2xx ────────────────────────────────────────────────────────────────
+async function safeSuccess(response) {
+    const kind = mediaKind(response.headers.get('content-type'));
+    if (kind === 'event-stream')
+        return safeStream(response);
+    const bytes = response.body === null ? new Uint8Array() : await bytesOf(response);
+    if (bytes.length === 0) {
+        // An empty answer (a 202 to a notification): nothing to read, nothing handed on.
+        const headers = keptHeaders(response.headers, undefined);
+        return new Response(null, { status: response.status, headers });
+    }
+    if (kind !== 'json') {
+        throw new Unreadable(kind === 'none'
+            ? 'a body with no content type'
+            : 'a body whose content type is neither application/json nor text/event-stream');
+    }
+    const message = oneMessage(parseOnce(decodeUtf8(bytes)));
+    return new Response(JSON.stringify(canonicalMessage(message)), {
+        status: response.status,
+        headers: keptHeaders(response.headers, 'application/json'),
+    });
+}
+/** The ONE media type the transport reads a 2xx body as, by one rule. */
+function mediaKind(contentType) {
+    if (contentType === null || contentType.trim() === '')
+        return 'none';
+    const [type, ...params] = contentType.split(';').map((part) => part.trim().toLowerCase());
+    // Every parameter must be `charset=utf-8`: another charset is another reading.
+    const utf8 = params.every((p) => /^charset="?utf-8"?$/.test(p));
+    if (!utf8)
+        return 'other';
+    if (type === 'application/json')
+        return 'json';
+    if (type === 'text/event-stream')
+        return 'event-stream';
+    return 'other';
+}
+async function bytesOf(response) {
+    return new Uint8Array(await response.arrayBuffer());
+}
+/** UTF-8, strictly: an invalid sequence or a byte-order mark is refused. */
+function decodeUtf8(bytes) {
+    try {
+        return new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes);
+    }
+    catch {
+        throw new Unreadable('a body that is not UTF-8');
+    }
+}
+function parseOnce(text) {
+    try {
+        return (0, strictJson_js_1.parseStrictJson)(text);
+    }
+    catch (err) {
+        if (err instanceof strictJson_js_1.AmbiguousJsonError)
+            throw new Unreadable(err.reason);
+        throw err;
+    }
+}
+/** ONE JSON-RPC message — an object; a batch, or anything else, is refused. */
+function oneMessage(value) {
+    if (Array.isArray(value))
+        throw new Unreadable('more than one message in one body');
+    if (value === null || typeof value !== 'object') {
+        throw new Unreadable('a body that is not a JSON-RPC message');
+    }
+    return value;
+}
+/** The message as the client may read it: an error rewritten, anything else as checked. */
+function canonicalMessage(message) {
+    return 'error' in message ? safeErrorReply(message) : message;
+}
+/** The response headers a 2xx answer keeps, and its canonical content type. */
+function keptHeaders(from, contentType) {
+    const headers = new Headers(contentType === undefined ? {} : { 'content-type': contentType });
+    for (const name of KEPT_HEADERS) {
+        const value = from.get(name);
+        if (value !== null && PLAIN_TOKEN.test(value))
+            headers.set(name, value);
+    }
+    return headers;
+}
+/** A 2xx answer the transport cannot read unambiguously — refused in its own words. */
+function refusal(status, reason) {
+    return new Response(JSON.stringify({
+        message: `Unreadable answer (HTTP ${status}): ${reason}. It was not passed on, because a ` +
+            'reading the transport could not check is a reading the model must not get.',
+    }), { status: 502, headers: { 'content-type': 'application/json' } });
+}
+// ── failures ───────────────────────────────────────────────────────────
+/** A failure, rewritten from its status, its type and — for a JSON-RPC error — its code. */
+async function safeFailure(response) {
+    const type = plainType((0, errorType_js_1.awsErrorType)(response.headers));
+    const reply = await failureReplyOf(response);
+    const body = reply !== undefined
+        ? safeErrorReply(reply)
+        : { message: failureSentence(response.status, type) };
+    const headers = new Headers({ 'content-type': 'application/json' });
+    if (type !== undefined)
+        headers.set('x-amzn-errortype', type);
+    const retryAfter = response.headers.get('retry-after')?.trim();
+    if (retryAfter !== undefined && RETRY_AFTER.test(retryAfter)) {
+        headers.set('retry-after', retryAfter);
+    }
+    return new Response(JSON.stringify(body), { status: response.status, headers });
+}
+/** The JSON-RPC error message a failure's body is — read once, strictly — or `undefined`. */
+async function failureReplyOf(response) {
+    if (response.body === null || mediaKind(response.headers.get('content-type')) !== 'json') {
+        await response.body?.cancel().catch(() => undefined);
+        return undefined;
+    }
+    try {
+        const message = oneMessage(parseOnce(decodeUtf8(await bytesOf(response))));
+        return 'error' in message ? message : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The fixed sentence a failure with no JSON-RPC reply is answered with. */
+function failureSentence(status, type) {
+    if (isAuthFailure(status, type)) {
+        return (`${type ?? 'Request refused'} (HTTP ${status}). The service's message for this request ` +
+            'was not passed on, because AWS can quote the signed request in it, credentials ' +
+            'included. Check the caller’s credentials and its permission to invoke this runtime.');
+    }
+    return (`${type ?? 'Request failed'} (HTTP ${status}). The service's message for this request ` +
+        'was not passed on, because it can quote what the request carried.');
+}
+exports.failureSentence = failureSentence;
+/** A JSON-RPC error reply rebuilt from safe parts only. */
+function safeErrorReply(message) {
+    const error = message['error'];
+    const fields = error !== null && typeof error === 'object' && !Array.isArray(error)
+        ? error
+        : {};
+    const rawCode = fields['code'];
+    const code = typeof rawCode === 'number' && Number.isInteger(rawCode) ? rawCode : -32603;
+    const rawId = message['id'];
+    const id = typeof rawId === 'number' && Number.isFinite(rawId)
+        ? rawId
+        : typeof rawId === 'string' && PLAIN_TOKEN.test(rawId)
+            ? rawId
+            : null;
+    const rawMessage = fields['message'];
+    const text = typeof rawMessage === 'string' && exports.KNOWN_ERROR_MESSAGES.has(rawMessage)
+        ? rawMessage
+        : `Server error (JSON-RPC ${code}). Its message was not passed on, because it can quote ` +
+            'what the request carried.';
+    return { jsonrpc: '2.0', id, error: { code, message: text } };
+}
+function plainType(type) {
+    return type !== undefined && PLAIN_TYPE.test(type) ? type : undefined;
+}
+// ── event streams ──────────────────────────────────────────────────────
+/**
+ * A 2xx event stream, read once as it passes: each event parsed by the SSE
+ * rules, its data parsed strictly as ONE JSON-RPC message, and re-emitted in
+ * canonical form (`event`, `id` when plain, one `data` line) — an error
+ * rewritten. Events still reach the client as they arrive. An event that
+ * cannot be read unambiguously ends the stream with a refusal in this
+ * library's words.
+ */
+function safeStream(response) {
+    const body = response.body;
+    if (body === null) {
+        return new Response(null, {
+            status: response.status,
+            headers: keptHeaders(response.headers, undefined),
+        });
+    }
+    const decoder = new TextDecoder('utf-8', { fatal: true });
+    const encoder = new TextEncoder();
+    const parser = sseParser((event) => encoder.encode(canonicalEvent(event)));
+    const stream = body.pipeThrough(new TransformStream({
+        transform(chunk, controller) {
+            let text;
+            try {
+                text = decoder.decode(chunk, { stream: true });
+            }
+            catch {
+                controller.error(new Error(streamRefusal('an event stream that is not UTF-8')));
+                return;
+            }
+            try {
+                for (const out of parser.push(text))
+                    controller.enqueue(out);
+            }
+            catch (err) {
+                controller.error(new Error(streamRefusal(err instanceof Unreadable ? err.reason : 'an unreadable event')));
+            }
+        },
+        flush(controller) {
+            let tail;
+            try {
+                tail = decoder.decode();
+            }
+            catch {
+                controller.error(new Error(streamRefusal('an event stream that is not UTF-8')));
+                return;
+            }
+            try {
+                for (const out of [...parser.push(tail), ...parser.finish()])
+                    controller.enqueue(out);
+            }
+            catch (err) {
+                controller.error(new Error(streamRefusal(err instanceof Unreadable ? err.reason : 'an unreadable event')));
+            }
+        },
+    }));
+    return new Response(stream, {
+        status: response.status,
+        headers: keptHeaders(response.headers, 'text/event-stream'),
+    });
+}
+function streamRefusal(reason) {
+    return (`agentCoreRuntimeMcpTransport: the event stream was cut: ${reason}. The rest was not ` +
+        'passed on, because a reading the transport could not check is a reading the model must ' +
+        'not get.');
+}
+/**
+ * The SSE line rules (WHATWG `text/event-stream`): lines end in CRLF, LF or CR;
+ * a blank line dispatches; `:` starts a comment; `data` lines join with `\n`;
+ * one leading space after the colon is dropped; an event with no data is not
+ * dispatched.
+ */
+function sseParser(emit) {
+    let pending = '';
+    let data = [];
+    let type;
+    let id;
+    const line = (raw, out) => {
+        if (raw === '') {
+            if (data.length > 0) {
+                out.push(emit({
+                    ...(type !== undefined && { type }),
+                    ...(id !== undefined && { id }),
+                    data: data.join('\n'),
+                }));
+            }
+            data = [];
+            type = undefined;
+            return;
+        }
+        if (raw.startsWith(':'))
+            return;
+        const colon = raw.indexOf(':');
+        const field = colon === -1 ? raw : raw.slice(0, colon);
+        const value = colon === -1 ? '' : raw.slice(colon + 1).replace(/^ /, '');
+        if (field === 'data')
+            data.push(value);
+        else if (field === 'event')
+            type = value;
+        else if (field === 'id' && !value.includes('\0'))
+            id = value;
+    };
+    return {
+        push(text) {
+            pending += text;
+            const out = [];
+            for (;;) {
+                const match = /\r\n|\n|\r/.exec(pending);
+                if (match === null)
+                    break;
+                // A CR at the very end may be the first half of a CRLF still to come.
+                if (match[0] === '\r' && match.index === pending.length - 1)
+                    break;
+                line(pending.slice(0, match.index), out);
+                pending = pending.slice(match.index + match[0].length);
+            }
+            return out;
+        },
+        finish() {
+            // The stream ended: a CR held back for a CRLF that never came ends its
+            // line. Text with no line end is an unfinished line, and an event with
+            // no blank line after it is not dispatched (the SSE rule).
+            const out = [];
+            if (pending.endsWith('\r'))
+                line(pending.slice(0, -1), out);
+            pending = '';
+            return out;
+        },
+    };
+}
+/** One event in canonical form — its data the ONE message it held, read strictly. */
+function canonicalEvent(event) {
+    // An event type that is not a plain token cannot be re-emitted as it was,
+    // and re-emitting it as a default `message` would make the client act on an
+    // event it would have ignored — so it is dropped.
+    if (event.type !== undefined && !PLAIN_TOKEN.test(event.type))
+        return '';
+    const message = oneMessage(parseOnce(event.data));
+    const lines = [];
+    if (event.type !== undefined)
+        lines.push(`event: ${event.type}`);
+    if (event.id !== undefined && PLAIN_TOKEN.test(event.id))
+        lines.push(`id: ${event.id}`);
+    lines.push(`data: ${JSON.stringify(canonicalMessage(message))}`);
+    return `${lines.join('\n')}\n\n`;
+}
+//# sourceMappingURL=safeAnswer.js.map

package/dist/adapters/mcp/agentcoreRuntime/safeAnswer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeAnswer.js","sourceRoot":"","sources":["../../../../src/adapters/mcp/agentcoreRuntime/safeAnswer.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;;;AAEH,iDAA8C;AAC9C,mDAAsF;AAEtF;;;;;GAKG;AACU,QAAA,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,aAAa;IACb,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,6CAA6C;IAC7C,6CAA6C;IAC7C,yCAAyC;IACzC,4CAA4C;IAC5C,gDAAgD;IAChD,sBAAsB;CACvB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,uBAAuB;IACvB,uBAAuB;IACvB,8BAA8B;IAC9B,sBAAsB;IACtB,2BAA2B;IAC3B,qCAAqC;IACrC,uBAAuB;IACvB,uBAAuB;IACvB,6BAA6B;CAC9B,CAAC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAEjD,sGAAsG;AACtG,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAE/C,qDAAqD;AACrD,MAAM,WAAW,GAAG,2EAA2E,CAAC;AAEhG,oFAAoF;AACpF,MAAM,YAAY,GAAG,CAAC,gBAAgB,EAAE,sBAAsB,CAAU,CAAC;AAEzE,6EAA6E;AAC7E,MAAM,UAAW,SAAQ,KAAK;IACP;IAArB,YAAqB,MAAc;QACjC,KAAK,CAAC,MAAM,CAAC,CAAC;QADK,WAAM,GAAN,MAAM,CAAQ;IAEnC,CAAC;CACF;AAED,iEAAiE;AACjE,SAAgB,aAAa,CAAC,MAAc,EAAE,IAAwB;IACpE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,IAAI,KAAK,SAAS,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAHD,sCAGC;AAED;;;;GAIG;AACI,KAAK,UAAU,UAAU,CAAC,QAAkB;IACjD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,UAAU;YAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AARD,gCAQC;AAED,0EAA0E;AAE1E,KAAK,UAAU,WAAW,CAAC,QAAkB;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7D,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,iFAAiF;QACjF,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACzD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAClB,IAAI,KAAK,MAAM;YACb,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,6EAA6E,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE;QAC7D,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,SAAS,SAAS,CAAC,WAA0B;IAC3C,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IACrE,MAAM,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1F,+EAA+E;IAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC;IAC1B,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,MAAM,CAAC;IAC/C,IAAI,IAAI,KAAK,mBAAmB;QAAE,OAAO,cAAc,CAAC;IACxD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,QAAkB;IACvC,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,4EAA4E;AAC5E,SAAS,UAAU,CAAC,KAAiB;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,0BAA0B,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,IAAA,+BAAe,EAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,kCAAkB;YAAE,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,UAAU,CAAC,KAAgB;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;IACpF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,UAAU,CAAC,uCAAuC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAA8C,CAAC;AACxD,CAAC;AAED,2FAA2F;AAC3F,SAAS,gBAAgB,CAAC,OAA8C;IACtE,OAAO,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAChE,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,IAAa,EAAE,WAA+B;IACjE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9F,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,uFAAuF;AACvF,SAAS,OAAO,CAAC,MAAc,EAAE,MAAc;IAC7C,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EACL,2BAA2B,MAAM,MAAM,MAAM,oCAAoC;YACjF,4EAA4E;KAC/E,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,0EAA0E;AAE1E,4FAA4F;AAC5F,KAAK,UAAU,WAAW,CAAC,QAAkB;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAA,2BAAY,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,IAAI,GACR,KAAK,KAAK,SAAS;QACjB,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACpE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,cAAc,CAC3B,QAAkB;IAElB,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACzF,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,OAAO,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAgB,eAAe,CAAC,MAAc,EAAE,IAAwB;IACtE,IAAI,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,CACL,GAAG,IAAI,IAAI,iBAAiB,UAAU,MAAM,4CAA4C;YACxF,iFAAiF;YACjF,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,CACL,GAAG,IAAI,IAAI,gBAAgB,UAAU,MAAM,4CAA4C;QACvF,mEAAmE,CACpE,CAAC;AACJ,CAAC;AAZD,0CAYC;AAED,2DAA2D;AAC3D,SAAS,cAAc,CAAC,OAA8C;IAKpE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,MAAM,GACV,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAClE,CAAC,CAAE,KAA+C;QAClD,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,EAAE,GACN,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACjD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YACtD,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,IAAI,GACR,OAAO,UAAU,KAAK,QAAQ,IAAI,4BAAoB,CAAC,GAAG,CAAC,UAAU,CAAC;QACpE,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,0BAA0B,IAAI,yDAAyD;YACvF,2BAA2B,CAAC;IAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,SAAS,CAAC,IAAwB;IACzC,OAAO,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,0EAA0E;AAE1E;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,QAAkB;IACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAC7B,IAAI,eAAe,CAAyB;QAC1C,SAAS,CAAC,KAAK,EAAE,UAAU;YACzB,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,mCAAmC,CAAC,CAAC,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,UAAU,CAAC,KAAK,CACd,IAAI,KAAK,CACP,aAAa,CAAC,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAC9E,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,UAAU;YACd,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,mCAAmC,CAAC,CAAC,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;oBAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,UAAU,CAAC,KAAK,CACd,IAAI,KAAK,CACP,aAAa,CAAC,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAC9E,CACF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CACH,CAAC;IACF,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;QAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,CACL,2DAA2D,MAAM,qBAAqB;QACtF,yFAAyF;QACzF,UAAU,CACX,CAAC;AACJ,CAAC;AASD;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAAqC;IAItD,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,IAAI,GAAa,EAAE,CAAC;IACxB,IAAI,IAAwB,CAAC;IAC7B,IAAI,EAAsB,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,GAAiB,EAAQ,EAAE;QACpD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,CACN,IAAI,CAAC;oBACH,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;oBACnC,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,EAAE,EAAE,CAAC;oBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;iBACtB,CAAC,CACH,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,EAAE,CAAC;YACV,IAAI,GAAG,SAAS,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QAChC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,KAAK,KAAK,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aAClC,IAAI,KAAK,KAAK,OAAO;YAAE,IAAI,GAAG,KAAK,CAAC;aACpC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,EAAE,GAAG,KAAK,CAAC;IAC/D,CAAC,CAAC;IACF,OAAO;QACL,IAAI,CAAC,IAAI;YACP,OAAO,IAAI,IAAI,CAAC;YAChB,MAAM,GAAG,GAAiB,EAAE,CAAC;YAC7B,SAAS,CAAC;gBACR,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzC,IAAI,KAAK,KAAK,IAAI;oBAAE,MAAM;gBAC1B,sEAAsE;gBACtE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM;gBACnE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;gBACzC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM;YACJ,uEAAuE;YACvE,uEAAuE;YACvE,2DAA2D;YAC3D,MAAM,GAAG,GAAiB,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5D,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc,CAAC,KAAe;IACrC,0EAA0E;IAC1E,4EAA4E;IAC5E,kDAAkD;IAClD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACzE,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;AACnC,CAAC"}

package/dist/adapters/mcp/agentcoreRuntime/session.js

@@ -0,0 +1,179 @@
+"use strict";
+/**
+ * session — the session strategies: which AgentCore Runtime session a request
+ * lands in.
+ *
+ * ── The facts they rest on ───────────────────────────────────────────────────
+ * From the AgentCore Runtime MCP protocol contract and the `InvokeAgentRuntime`
+ * API reference:
+ *
+ *   - The runtime routes by `Mcp-Session-Id` and always returns one. A client
+ *     "must capture the Mcp-Session-Id returned in the response and include it
+ *     in all subsequent requests" for microVM affinity; without it "each request
+ *     may be routed to a new microVM".
+ *   - `InvokeAgentRuntime` also carries `runtimeSessionId`
+ *     (`X-Amzn-Bedrock-AgentCore-Runtime-Session-Id`, 33–256 characters), and
+ *     the AWS SDK models it as an idempotency token — it fills a FRESH random id
+ *     on every call that leaves it unset.
+ *
+ * ── 'per-call' (the default) ─────────────────────────────────────────────────
+ * Every request in a session of its own: this strategy sends a FRESH runtime
+ * session id with every request and no `Mcp-Session-Id`, and the
+ * `Mcp-Session-Id` a response carries is not handed to the MCP client, so
+ * nothing can carry one call's session into the next. Isolation by
+ * construction: a client shared by every user of a process (tools built once at
+ * startup — the common shape) never puts two users in one microVM. The price is
+ * a cold start per call, and it needs a STATELESS server (`stateless_http=True`,
+ * the runtime's recommended default) — a stateful one sees every request as a
+ * stranger.
+ *
+ * ── 'reuse' ──────────────────────────────────────────────────────────────────
+ * One session per CONNECTION (per `mcpClient` built on the transport), and the
+ * TRANSPORT owns the key. A request with no `Mcp-Session-Id` (a client's
+ * `initialize`) opens a connection with a fresh runtime session id; the
+ * `Mcp-Session-Id` the server returns for it is stored WITH that connection,
+ * and the client is handed an opaque handle of the transport's own in its
+ * place. Every later request carrying the handle is sent in that connection's
+ * runtime session with the server's own id; a handle the transport does not
+ * know is answered 404 "Session not found" here, never sent.
+ *
+ * Why a handle and not the server's id: the server's ids are unique only as far
+ * as the server makes them. One that numbers sessions per process hands every
+ * fresh microVM the same first id, and a map keyed by it would send the second
+ * client into the first one's microVM. A handle is ours, random, and per
+ * connection, so two clients on one transport are two sessions whatever the
+ * server returns — while ONE client is still one session for whoever calls
+ * through it. Build a client per conversation; never share a 'reuse' client
+ * between users.
+ *
+ * At most {@link MAX_CONNECTIONS} connections are remembered, least recently
+ * used forgotten first; a client's `DELETE` (its `close()`) forgets its own.
+ *
+ * Pattern: Strategy. Role: outer ring, vendor fact. Holds no credential.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionStrategy = exports.MAX_CONNECTIONS = exports.MCP_SESSION_HEADER = exports.AGENTCORE_RUNTIME_SESSION_HEADER = void 0;
+/** The runtime session header, as `InvokeAgentRuntime` binds `runtimeSessionId` to it. */
+exports.AGENTCORE_RUNTIME_SESSION_HEADER = 'X-Amzn-Bedrock-AgentCore-Runtime-Session-Id';
+/** The MCP Streamable HTTP session header. */
+exports.MCP_SESSION_HEADER = 'Mcp-Session-Id';
+/** How many connections a 'reuse' transport remembers before it forgets the least recently used. */
+exports.MAX_CONNECTIONS = 256;
+/**
+ * A fresh runtime session id — `crypto.randomUUID()`, 36 characters, inside the
+ * 33–256 the API takes. Never injectable: freshness IS the isolation, and a
+ * source that repeated itself would put two requests (or two clients) in one
+ * session.
+ */
+const newId = () => globalThis.crypto.randomUUID();
+/**
+ * Build the strategy for one transport.
+ *
+ * @throws when `kind` is not one of the two strategies.
+ */
+function sessionStrategy(kind) {
+    if (kind === 'reuse')
+        return reuse();
+    if (kind === 'per-call')
+        return perCall();
+    throw new TypeError(`agentCoreRuntimeMcpTransport: \`session\` must be 'reuse' or 'per-call' — got ` +
+        `${JSON.stringify(kind)}. 'per-call' gives every request its own session (safe to share); ` +
+        `'reuse' keeps one runtime session per client (build one client per conversation).`);
+}
+exports.sessionStrategy = sessionStrategy;
+function reuse() {
+    const connections = new Map();
+    const remember = (handle, connection) => {
+        connections.delete(handle);
+        connections.set(handle, connection); // most recently used last
+        while (connections.size > exports.MAX_CONNECTIONS) {
+            const oldest = connections.keys().next().value;
+            if (oldest === undefined)
+                break;
+            connections.delete(oldest);
+        }
+    };
+    return {
+        request(headers, method) {
+            const handle = headers.get(exports.MCP_SESSION_HEADER);
+            const known = handle === null ? undefined : connections.get(handle);
+            // A handle this transport did not issue, or has forgotten: fail closed.
+            if (handle !== null && known === undefined)
+                return { answer: sessionNotFound() };
+            const connection = known ?? { runtimeId: newId() };
+            if (handle !== null) {
+                if (method === 'DELETE')
+                    connections.delete(handle);
+                else
+                    remember(handle, connection);
+            }
+            // Set, not merged: these are the only session ids this request sends.
+            headers.set(exports.AGENTCORE_RUNTIME_SESSION_HEADER, connection.runtimeId);
+            if (connection.serverSessionId !== undefined) {
+                headers.set(exports.MCP_SESSION_HEADER, connection.serverSessionId);
+            }
+            else {
+                headers.delete(exports.MCP_SESSION_HEADER);
+            }
+            return {
+                settle: (response) => {
+                    const returned = response.headers.get(exports.MCP_SESSION_HEADER);
+                    if (returned === null)
+                        return response;
+                    if (handle === null) {
+                        // A new connection: bound under a handle of our own, shown in the server's id's place.
+                        const issued = newId();
+                        remember(issued, { ...connection, serverSessionId: returned });
+                        return withSessionHeader(response, issued);
+                    }
+                    if (method !== 'DELETE')
+                        connection.serverSessionId = returned;
+                    return withSessionHeader(response, handle);
+                },
+            };
+        },
+    };
+}
+function perCall() {
+    return {
+        request(headers) {
+            headers.delete(exports.MCP_SESSION_HEADER);
+            // A fresh runtime session of our own for every request — as fresh as the
+            // SDK's own default, and set the same way on both auth paths.
+            headers.set(exports.AGENTCORE_RUNTIME_SESSION_HEADER, newId());
+            return { settle: (response) => withSessionHeader(response, undefined) };
+        },
+    };
+}
+/**
+ * The response with its `Mcp-Session-Id` replaced by `value`, or removed when
+ * `value` is undefined. A fetched Response's headers are immutable, so the copy
+ * is rebuilt around the same body rather than edited.
+ */
+function withSessionHeader(response, value) {
+    const current = response.headers.get(exports.MCP_SESSION_HEADER);
+    if (current === (value ?? null))
+        return response;
+    const headers = new Headers(response.headers);
+    if (value === undefined)
+        headers.delete(exports.MCP_SESSION_HEADER);
+    else
+        headers.set(exports.MCP_SESSION_HEADER, value);
+    return new Response(response.body, {
+        status: response.status,
+        statusText: response.statusText,
+        headers,
+    });
+}
+/**
+ * The MCP Streamable HTTP answer to a session the server does not know: 404,
+ * after which a client starts a new session with `initialize`.
+ */
+function sessionNotFound() {
+    return new Response(JSON.stringify({
+        jsonrpc: '2.0',
+        id: null,
+        error: { code: -32001, message: 'Session not found' },
+    }), { status: 404, headers: { 'content-type': 'application/json' } });
+}
+//# sourceMappingURL=session.js.map

package/dist/adapters/mcp/agentcoreRuntime/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../../src/adapters/mcp/agentcoreRuntime/session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;;;AAEH,0FAA0F;AAC7E,QAAA,gCAAgC,GAAG,6CAA6C,CAAC;AAE9F,8CAA8C;AACjC,QAAA,kBAAkB,GAAG,gBAAgB,CAAC;AAmBnD,oGAAoG;AACvF,QAAA,eAAe,GAAG,GAAG,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,KAAK,GAAG,GAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AAE3D;;;;GAIG;AACH,SAAgB,eAAe,CAAC,IAA6B;IAC3D,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,EAAE,CAAC;IACrC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,OAAO,EAAE,CAAC;IAC1C,MAAM,IAAI,SAAS,CACjB,gFAAgF;QAC9E,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oEAAoE;QAC3F,mFAAmF,CACtF,CAAC;AACJ,CAAC;AARD,0CAQC;AAQD,SAAS,KAAK;IACZ,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IAClD,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,UAAsB,EAAQ,EAAE;QAChE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,0BAA0B;QAC/D,OAAO,WAAW,CAAC,IAAI,GAAG,uBAAe,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC/C,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,OAAO,CAAC,OAAO,EAAE,MAAM;YACrB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpE,wEAAwE;YACxE,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC;YACjF,MAAM,UAAU,GAAe,KAAK,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;YAC/D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,IAAI,MAAM,KAAK,QAAQ;oBAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;;oBAC/C,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACpC,CAAC;YACD,sEAAsE;YACtE,OAAO,CAAC,GAAG,CAAC,wCAAgC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;YACpE,IAAI,UAAU,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,0BAAkB,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,0BAAkB,CAAC,CAAC;YACrC,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;oBACnB,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,CAAC;oBAC1D,IAAI,QAAQ,KAAK,IAAI;wBAAE,OAAO,QAAQ,CAAC;oBACvC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;wBACpB,uFAAuF;wBACvF,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC;wBACvB,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;wBAC/D,OAAO,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAC7C,CAAC;oBACD,IAAI,MAAM,KAAK,QAAQ;wBAAE,UAAU,CAAC,eAAe,GAAG,QAAQ,CAAC;oBAC/D,OAAO,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC7C,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,OAAO;IACd,OAAO;QACL,OAAO,CAAC,OAAO;YACb,OAAO,CAAC,MAAM,CAAC,0BAAkB,CAAC,CAAC;YACnC,yEAAyE;YACzE,8DAA8D;YAC9D,OAAO,CAAC,GAAG,CAAC,wCAAgC,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1E,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,QAAkB,EAAE,KAAyB;IACtE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0BAAkB,CAAC,CAAC;IACzD,IAAI,OAAO,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,0BAAkB,CAAC,CAAC;;QACvD,OAAO,CAAC,GAAG,CAAC,0BAAkB,EAAE,KAAK,CAAC,CAAC;IAC5C,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;QACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe;IACtB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;KACtD,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;AACJ,CAAC"}