agentfootprint 10.3.1 → 10.5.0

package/dist/types/hosting/requestSealing.d.ts

@@ -0,0 +1,66 @@
+/**
+ * requestSealing — a host hands each run the credential that arrived with ITS
+ * request, sealed for that run alone.
+ *
+ * `requestContext({ secrets })` (`agentfootprint/security`) seals a request's
+ * secrets; `requestCredentials` vends them to the tools that declare a `needs`
+ * for them. A host that runs the agent for you (`standingAgent`,
+ * `streamHandler`) cannot know which header holds the credential, so it asks
+ * the app — once per request, with the request's headers — through the
+ * {@link RequestSealer} option `sealRequest`, and passes the handle to that
+ * request's `run()` / `resume()` and nowhere else. The sealer is handed the
+ * headers ONLY: nothing about who is calling, so it can never be tempted to
+ * look a stored credential up by a name the caller could have claimed.
+ *
+ * THE RULES, in one funnel ({@link requestSealing}):
+ *   - asked only for a request that runs, after the caller is bound and every
+ *     refusal is behind it — a refused request never seals anything;
+ *   - the answer is a handle `requestContext` built, or `undefined` (no
+ *     request: a tool that needs one fails closed, by name);
+ *   - ONE HANDLE, ONE RUN, PROCESS-WIDE: a handle any host was handed before
+ *     is refused, so a sealer that caches one — even one shared by two doors
+ *     — cannot hand one caller's credential to another caller's run;
+ *   - a sealer that throws refuses the request in FIXED words
+ *     (`ERR_REQUEST_NOT_SEALED`, 400). Its own message is never sent: it may
+ *     quote the value it could not read.
+ * The handle never enters a frame, a stored session or a checkpoint; the
+ * headers never leave the sealer.
+ *
+ * Pattern: guarded strategy call. Role: hosting, run input.
+ */
+import { type RequestContext } from '../identity/requestContext.js';
+/** What a host hands the app's {@link RequestSealer} — one request's headers, and nothing else. */
+export interface RequestSealFacts {
+    /**
+     * The request's headers, names lower-cased — where a per-request credential
+     * travels (a gateway's encrypted token, a session-bound key). Untrusted, as
+     * every header is: what a sealer reads here is the CALLER's credential for
+     * the caller's own run, never proof of who the caller is — so seal what the
+     * request CARRIES, and never look a stored credential up by a header.
+     */
+    readonly headers: Readonly<Record<string, string>>;
+}
+/**
+ * The app's port that seals one request's credential for its run: return
+ * `requestContext({ secrets })`, or `undefined` for a request that carries
+ * none. Called once per request that runs; return a NEW handle every time.
+ *
+ * @example
+ * ```ts
+ * sealRequest: ({ headers }) =>
+ *   headers['x-crm-token'] === undefined
+ *     ? undefined
+ *     : requestContext({ secrets: { crmToken: headers['x-crm-token'] } }),
+ * ```
+ */
+export type RequestSealer = (facts: RequestSealFacts) => RequestContext | undefined | Promise<RequestContext | undefined>;
+/** The code a request refused by its sealer carries — the status is 400. */
+export declare const REQUEST_NOT_SEALED = "ERR_REQUEST_NOT_SEALED";
+/**
+ * The one funnel a host seals through: the app's sealer, checked. `undefined`
+ * when no sealer was given — the host passes no request, exactly as before.
+ *
+ * @throws TypeError at construction when `sealer` is not a function.
+ */
+export declare function requestSealing(sealer: RequestSealer | undefined, door: string): ((facts: RequestSealFacts) => Promise<RequestContext | undefined>) | undefined;
+//# sourceMappingURL=requestSealing.d.ts.map

package/dist/types/hosting/requestSealing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestSealing.d.ts","sourceRoot":"","sources":["../../../src/hosting/requestSealing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAoB,KAAK,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAGtF,mGAAmG;AACnG,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,KAAK,EAAE,gBAAgB,KACpB,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;AAEtE,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,2BAA2B,CAAC;AAS3D;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,IAAI,EAAE,MAAM,GACX,CAAC,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAsChF"}

package/dist/types/hosting/standingAgent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"standingAgent.d.ts","sourceRoot":"","sources":["../../../src/hosting/standingAgent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkGG;AAiEH,OAAO,KAAK,EAIV,UAAU,EAKV,mBAAmB,EACnB,oBAAoB,EAErB,MAAM,YAAY,CAAC;AAqFpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,aAAa,CAAC,EAAE,SAAS,UAAU,EACvD,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC,GAChC,OAAO,CAAC,EAAE,GAAG,mBAAmB,CAAC,CA6mDnC"}
+{"version":3,"file":"standingAgent.d.ts","sourceRoot":"","sources":["../../../src/hosting/standingAgent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkGG;AAkEH,OAAO,KAAK,EAIV,UAAU,EAIV,mBAAmB,EACnB,oBAAoB,EAErB,MAAM,YAAY,CAAC;AAqFpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,aAAa,CAAC,EAAE,SAAS,UAAU,EACvD,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC,GAChC,OAAO,CAAC,EAAE,GAAG,mBAAmB,CAAC,CAgoDnC"}

package/dist/types/hosting/stream.d.ts

@@ -66,7 +66,67 @@ export interface ToSSEOptions {
      * at this interval. Default 0 (disabled).
      */
     readonly heartbeatMs?: number;
+    /**
+     * How each event is written as a frame in the 'full' format — the framing
+     * STRATEGY ({@link SseFraming}). Default: {@link agentfootprintSse}, the
+     * frames `toSSE` has always written (`event: <type>` + `data: <json>`).
+     *
+     * Refused together with `eventName` (which names the event line of the
+     * default framing only) and with `format: 'text'` (which writes no frames).
+     */
+    readonly framing?: SseFraming<AgentfootprintEvent>;
+}
+/**
+ * How ONE event becomes ONE Server-Sent Events frame — the framing strategy.
+ *
+ * A framing decides the bytes of a frame and nothing else: which events go out,
+ * in what order, and when the stream ends belong to whoever drives it. Two
+ * strategies ship: {@link agentfootprintSse} frames agentfootprint's own events
+ * (what `toSSE` writes), and `agUiSse()` from `agentfootprint/ag-ui` frames AG-UI
+ * events the way the official `@ag-ui/encoder` does (a `data:` line only).
+ *
+ * @example Frame each event under its short name (`stream.token`, not `agentfootprint.stream.token`)
+ * ```ts
+ * const shortNames: SseFraming<AgentfootprintEvent> = {
+ *   contentType: 'text/event-stream',
+ *   frame: (event) => encodeSSE(event.type.replace(/^agentfootprint\./, ''), event),
+ * };
+ * for await (const frame of toSSE(agent, { framing: shortNames })) res.write(frame);
+ * ```
+ */
+export interface SseFraming<E> {
+    /** The media type a response framed this way declares. */
+    readonly contentType: string;
+    /**
+     * The whole frame for one event, its terminating blank line included.
+     *
+     * `at` is where the frame stands in ITS stream ({@link SseFramePosition}),
+     * counted by whoever drives the stream: a framing that numbers its frames
+     * (a gateway's `eventSequence`) reads the number here and keeps no counter
+     * of its own, so one framing serving many streams at once never numbers one
+     * stream's frames with another's.
+     */
+    frame(event: E, at: SseFramePosition): string;
+}
+/**
+ * Where one frame stands in its stream — handed to {@link SseFraming.frame} by
+ * whoever drives the stream (`toSSE`, `streamHandler`), never kept by a framing.
+ */
+export interface SseFramePosition {
+    /**
+     * The frame's number in this stream: 1 for the first, one more for each frame
+     * written after it. Counted per stream — one response, one run — and never
+     * shared: a resumed run is a new stream and counts from 1 again. Keep-alive
+     * comments are not frames and are not counted.
+     */
+    readonly sequence: number;
 }
+/**
+ * agentfootprint's own framing — `event: <type>` then `data: <json>` — the
+ * frames `toSSE` writes by default, byte for byte as before the framing seam
+ * existed. Every payload goes through the wire rule (`lib/wireJson.ts`).
+ */
+export declare const agentfootprintSse: SseFraming<AgentfootprintEvent>;
 /**
  * Subscribe to a runner's `EventDispatcher` and yield SSE-formatted
  * strings until the run completes.

package/dist/types/hosting/stream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../../../src/hosting/stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAKxD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC;IAC1D;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,MAAM,CAAC;IAC5D;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAuB,KAAK,CAAC,GAAG,EAAE,IAAI,EACpC,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAC7B,OAAO,GAAE,YAAiB,GACzB,aAAa,CAAC,MAAM,CAAC,CAsHvB;AAED;;;GAGG;AACH,qBAAa,YAAY,CAAC,GAAG,GAAG,OAAO,EAAE,IAAI,GAAG,OAAO;IAEnD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAC7B,OAAO,GAAE,YAAiB;IAG7C,8DAA8D;IAC9D,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC;CAGhC;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAQrE"}
+{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../../../src/hosting/stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAKxD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC;IAC1D;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,MAAM,CAAC;IAC5D;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC;CACpD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;;;;OAQG;IACH,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,gBAAgB,GAAG,MAAM,CAAC;CAC/C;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,UAAU,CAAC,mBAAmB,CAG7D,CAAC;AAEF;;;GAGG;AACH,wBAAuB,KAAK,CAAC,GAAG,EAAE,IAAI,EACpC,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAC7B,OAAO,GAAE,YAAiB,GACzB,aAAa,CAAC,MAAM,CAAC,CA0HvB;AAED;;;GAGG;AACH,qBAAa,YAAY,CAAC,GAAG,GAAG,OAAO,EAAE,IAAI,GAAG,OAAO;IAEnD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAC7B,OAAO,GAAE,YAAiB;IAG7C,8DAA8D;IAC9D,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC;CAGhC;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAQrE"}

package/dist/types/hosting/streamHandler.d.ts

@@ -0,0 +1,154 @@
+/**
+ * streamHandler — one run per request, streamed in a wire protocol, as a
+ * framework-agnostic Fetch-API handler: `(request: Request) => Promise<Response>`.
+ *
+ * Pattern: Template method over a {@link ProtocolAdapter} (the protocol is a
+ *          strategy; AG-UI is one). Everything HTTP happens here once — the
+ *          door guard, the body ceiling, the JSON parse, binding the
+ *          conversation to its caller, keeping it between requests, the client
+ *          hanging up, a failure that is never the process's — so an adapter
+ *          only reads its request, plans the turn and translates.
+ * Role:    the host for a protocol whose response is a STREAM OF EVENTS rather
+ *          than text pieces (`httpHost`'s port). It mounts in anything that
+ *          speaks `Request`/`Response` — a framework's route handler, an edge
+ *          or serverless runtime, or Node through any fetch adapter.
+ *          Deliberately names no vendor, like every file in this folder.
+ *
+ * THE REQUEST IS UNTRUSTED. A body is what anybody could send. It decides
+ * nothing the server owns:
+ *   - WHO is calling and WHICH conversation is theirs come from the app's
+ *     {@link ThreadBinder} (`threads`), from the request's headers — the id a
+ *     request names is format-checked caller data and never a key;
+ *   - WHAT WAS SAID BEFORE comes from the server: the session store
+ *     (`sessions`), or the agent's own memory keyed by the bound session;
+ *   - WHAT A PAUSED RUN WAITS ON is the stored run's own record — an answer is
+ *     matched to it by the adapter, never taken on the request's word;
+ *   - identity and redaction settings never come from a request. A credential
+ *     the request CARRIES (a gateway's per-request token) reaches its own run
+ *     only through the app's `sealRequest`, sealed: never a frame, a stored
+ *     session or a checkpoint.
+ *
+ * NOTHING IS SHARED BETWEEN REQUESTS. Every request builds a FRESH runner
+ * (`agent`, a factory): footprintjs runs one executor per run and a runner
+ * holds one run's context, so a request can neither see another's events nor
+ * leave anything behind for one — no shared listener, recorder, buffer, tool
+ * session or frame count (each stream numbers its own frames, and hands the
+ * number to the framing: `SseFramePosition`). A factory that hands back a
+ * runner it handed back before is refused; so is a `sealRequest` that hands
+ * back a sealed request twice. The handler's own state is KEYS, never content:
+ * the bound conversations with a turn in flight and who holds each (a second
+ * turn on one conversation is refused rather than racing the first for the
+ * stored state), and the runners and sealed requests already used (by
+ * identity, held weakly).
+ *
+ * ONE TURN PER THREAD IS A PER-PROCESS GUARD. Two instances of the handler
+ * (several serverless instances, several workers) do not see each other's
+ * turns: route a thread to one instance (sticky sessions), or a double-sent
+ * answer can resume one paused run twice and a later persist can overwrite an
+ * earlier one. The session store port has no compare-and-set yet.
+ *
+ * The laws it keeps from `httpHost`:
+ *   - The door guard runs first, on the headers alone (`doorGuard.ts`): a Host
+ *     not configured (421), a browser origin not allowed (403), a POST that
+ *     does not say it is JSON (415). A refused body is never read.
+ *   - A body over `maxBodyBytes` is refused at the byte that crosses it (413).
+ *   - A refusal answers with its own status and code (`refusalStatus.ts`);
+ *     anything else is a 500 that names nothing the caller sent and no thrown
+ *     message.
+ *   - Nothing in a request's lifecycle is the process's failure: every step is
+ *     caught, and a stream always ends.
+ */
+import type { AgentRunCheckpoint } from '../core/runCheckpoint.js';
+import type { Runner } from '../core/runner.js';
+import { type CrossSiteOptions } from './doorGuard.js';
+import type { ProtocolAdapter, StreamRunContext, ThreadBinder } from './protocolAdapter.js';
+import { type RequestSealer } from './requestSealing.js';
+import type { SessionLifecycle } from './types.js';
+/** The default body ceiling — 1 MiB, the same as `nodeHost`. */
+export declare const DEFAULT_STREAM_MAX_BODY_BYTES = 1048576;
+/** The default keep-alive interval: an SSE comment every 15 s of silence. */
+export declare const DEFAULT_STREAM_HEARTBEAT_MS = 15000;
+/**
+ * The runner one request runs — an `Agent`, an `LLMCall`, a composition. An
+ * Agent's `checkpoint()` is the conversation a session store keeps; a runner
+ * without one answers each request's message on its own.
+ */
+export type StreamRunner = Pick<Runner, 'on' | 'run' | 'resume'> & {
+    checkpoint?(): AgentRunCheckpoint | undefined;
+    shutdown?(options?: {
+        readonly stop?: boolean;
+    }): Promise<void>;
+};
+/** Options for {@link streamHandler}. */
+export interface StreamHandlerOptions<TRequest, TEvent> extends CrossSiteOptions {
+    /**
+     * Builds a FRESH runner for every request — called once per request, with
+     * what that request's runner is built with ({@link StreamRunContext}: the
+     * tools the caller runs, the values the app's validators accepted, the bound
+     * conversation). A runner is never shared between requests; one handed back
+     * twice is refused.
+     */
+    readonly agent: (run: StreamRunContext) => StreamRunner;
+    /** The wire protocol — `agUi()` from `agentfootprint/ag-ui`. */
+    readonly adapter: ProtocolAdapter<TRequest, TEvent>;
+    /**
+     * The app's port that binds the conversation a request names to the caller
+     * the app authenticates ({@link ThreadBinder}). Without it every request is
+     * a conversation of one message: no session, no identity, nothing kept.
+     */
+    readonly threads?: ThreadBinder;
+    /**
+     * Where a bound conversation is kept between requests — what was said (an
+     * Agent's `checkpoint()`) and a run paused on an answer — under the key
+     * `threads` binds (`memorySessions()`, `sqliteSessions()`, or yours). Needs
+     * `threads`: nothing is ever kept under the id a request names.
+     */
+    readonly sessions?: SessionLifecycle;
+    /**
+     * Seal the credential a request carries for its run ({@link RequestSealer}) —
+     * a gateway's per-request token in a header, read by a `requestCredentials`
+     * provider for the tools that declare a `needs` for it. Called once per
+     * request that runs, after the thread is bound and the turn is planned, with
+     * the request's headers; its handle goes to THAT request's
+     * `run()` / `resume()` and nowhere else — never a frame, a stored session or
+     * a checkpoint. A handle returned twice is refused; a sealer that throws
+     * refuses the request in fixed words (`ERR_REQUEST_NOT_SEALED`, 400).
+     * Without it, no run carries a request.
+     */
+    readonly sealRequest?: RequestSealer;
+    /** The largest request body read, in bytes. Default {@link DEFAULT_STREAM_MAX_BODY_BYTES}. */
+    readonly maxBodyBytes?: number;
+    /**
+     * An SSE comment (`: ping`) every this many milliseconds, so a proxy does not
+     * cut a stream that is quiet while the model thinks. Default
+     * {@link DEFAULT_STREAM_HEARTBEAT_MS}; `0` turns it off.
+     */
+    readonly heartbeatMs?: number;
+    /** Names this handler in refusals. Default `'<adapter name> stream'`. */
+    readonly name?: string;
+}
+/** A Fetch-API handler: one request in, one streamed response out. */
+export type StreamHandler = (request: Request) => Promise<Response>;
+/**
+ * Serve runs in `adapter`'s protocol: POST a protocol request, read a stream
+ * of the protocol's events.
+ *
+ * @throws TypeError at construction for options that cannot be served, and
+ *   when the adapter's framing cannot be built (an optional peer missing) —
+ *   refused at boot, never mid-request.
+ *
+ * @example A route handler that speaks `Request`/`Response`
+ * ```ts
+ * import { memorySessions, streamHandler } from 'agentfootprint/hosting';
+ * import { agUi } from 'agentfootprint/ag-ui';
+ *
+ * export const POST = streamHandler({
+ *   agent: ({ tools }) => buildAgent(tools), // a fresh agent per request
+ *   adapter: agUi(),
+ *   threads: { bind: ({ conversation, headers }) => bindToUser(conversation, headers) },
+ *   sessions: memorySessions(),
+ * });
+ * ```
+ */
+export declare function streamHandler<TRequest, TEvent>(options: StreamHandlerOptions<TRequest, TEvent>): StreamHandler;
+//# sourceMappingURL=streamHandler.d.ts.map

package/dist/types/hosting/streamHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamHandler.d.ts","sourceRoot":"","sources":["../../../src/hosting/streamHandler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAA6B,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAUlF,OAAO,KAAK,EAEV,eAAe,EAIf,gBAAgB,EAChB,YAAY,EAEb,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAa,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG9D,gEAAgE;AAChE,eAAO,MAAM,6BAA6B,UAAY,CAAC;AAEvD,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAElD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,KAAK,GAAG,QAAQ,CAAC,GAAG;IACjE,UAAU,CAAC,IAAI,kBAAkB,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE,CAAC;AAEF,yCAAyC;AACzC,MAAM,WAAW,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAE,SAAQ,gBAAgB;IAC9E;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,YAAY,CAAC;IACxD,gEAAgE;IAChE,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IACrC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC,8FAA8F;IAC9F,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,sEAAsE;AACtE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAoBpE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAC5C,OAAO,EAAE,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,GAC9C,aAAa,CAyXf"}

package/dist/types/hosting/types.d.ts

@@ -34,6 +34,7 @@ import type { AnswerAccountsOptions } from './answerAccounts.js';
 import type { DoorIdentity } from './identityVerification.js';
 import type { AdmissionPolicy } from './admission.js';
 import type { IngressSink } from './ingressRecord.js';
+import type { RequestSealer } from './requestSealing.js';
 import type { SessionSummary, SessionWireRequest, SessionWireResult } from './sessionWire.js';
 export type { Unsubscribe };
 /**
@@ -871,6 +872,21 @@ export interface PausedRun {
     readonly conversation: AgentRunCheckpoint;
     /** What the run is waiting on, as data. */
     readonly pending: PendingAsk;
+    /**
+     * What the WIRE that served the pause recorded about it — the ids it handed
+     * the caller for the answer — so a later request on that wire is matched to
+     * this pause and continued as the same invocation (`streamHandler` keeps the
+     * AG-UI adapter's record here). Absent for a pause a door with nothing to
+     * remember stored, and opaque to the store and to every other door.
+     */
+    readonly wire?: PausedWire;
+}
+/** One wire protocol's own record of a pause it served — see {@link PausedRun.wire}. */
+export interface PausedWire {
+    /** The protocol that recorded it: the protocol adapter's `name`. */
+    readonly protocol: string;
+    /** Plain JSON, the protocol's own; ids and names, never a value of the run. */
+    readonly record: unknown;
 }
 /**
  * The question a paused run is waiting on — the part of a pause that is safe to
@@ -1402,6 +1418,34 @@ export interface StandingAgentBaseOptions<TH extends HostHandle = HostHandle> {
      * decided against a window none of them had joined.
      */
     readonly admission?: AdmissionPolicy;
+    /**
+     * Seal the credential a request carries for its run — a gateway's
+     * per-request token in a header, read by a `requestCredentials` provider
+     * (`agentfootprint/security`) for the tools that declare a `needs` for it.
+     *
+     * Called once per request that RUNS (a turn or an answer — never an
+     * artifact or session op, never a refused request), after the caller is
+     * verified and the session's ownership is checked, with the request's
+     * headers ({@link HostRequest.headers}: `nodeHost` and `httpHost` deliver
+     * them) and nothing else. Return
+     * `requestContext({ secrets })`, or `undefined` for a request that carries
+     * none; the handle goes to THAT request's `run()` / `resume()` only — never
+     * the reply, the stored session or the checkpoint, so a resumed run is
+     * served the RESUMING request's credential. A handle any host was handed
+     * before is refused; a sealer that throws refuses the request in fixed words
+     * (`ERR_REQUEST_NOT_SEALED`, 400) — so decrypt at vend time
+     * (`decodedWith`), not here. The HANDLE never reaches a reply; a tool that
+     * returns the credential's value itself does (`hostFilled` scrubs an echo).
+     *
+     * Unset — the default — no run carries a request, exactly as before.
+     *
+     * @example
+     *   sealRequest: ({ headers }) =>
+     *     headers['x-crm-token'] === undefined
+     *       ? undefined
+     *       : requestContext({ secrets: { crmToken: headers['x-crm-token'] } }),
+     */
+    readonly sealRequest?: RequestSealer;
     /**
      * Where this door's ingress decisions go (9.32.0) — one record per request,
      * including every request that never became a run.

package/dist/types/hosting/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/hosting/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE9F,YAAY,EAAE,WAAW,EAAE,CAAC;AAI5B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,cAAc,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IACxC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,yCAAyC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,SAAS;IACxB,kDAAkD;IAClD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACrC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC5C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC3C;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4EG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,oCAAoC;IACpC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,UAAU,CAAA;CAAE,CAAC;AAE1E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,MAAM,yBAAyB,GACjC;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GAC3D;IACE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EACX,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,iBAAiB,GACjB,WAAW,GACX,UAAU,CAAC;IACf,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CACxB,CAAC;AAEN;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuDG;IACH,mBAAmB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CAC5F;AAED;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3F,mBAAmB;AACnB,MAAM,WAAW,UAAU;IACzB;;;;;;;;;;;OAWG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,cAAc,CAAC;IAC1C,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,oFAAoF;IACpF,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD,8DAA8D;IAC9D,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjD;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,GAAG,WAAW,CAAC;CACnE;AAID;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,WAAW,CAAC;IAClD;;;;OAIG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,WAAW,CAAC;IAC9D;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,GAAG,WAAW,CAAC;IAC/C,iDAAiD;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;OAKG;IACH,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACvE;AAID;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAE1E,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,sBAAsB;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,SAAS;IACxB,qFAAqF;IACrF,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,2CAA2C;IAC3C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,wFAAwF;IACxF,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,mFAAmF;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC;IAC7B;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,YAAY,CAAC;AAEzE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IACpE;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuDG;IACH,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpF;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkEG;IACH,SAAS,CAAC,IAAI,gBAAgB,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,mBAAmB,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC7F;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,0BAA0B;AAC1B,MAAM,WAAW,kBAAkB;IACjC,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC;uCACuC;AACvC,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;WAEW;AACX,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,oCAAoC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,wBAAwB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU;IAC1E,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG;QAAE,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;KAAE,CAAC;IACxE,8DAA8D;IAC9D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC;IACzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,gBAAgB,GAAG,MAAM,CAAC;IACxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,CAAC,OAAO,EAAE,CAAC;IAChD;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC;IAC1D;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC;AAED;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAElD;iFACiF;AACjF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,OAAQ,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,WAAW,0BAA0B,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,CAC5E,SAAQ,wBAAwB,CAAC,EAAE,CAAC;IACpC;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC;CACxC;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,CAC1E,SAAQ,wBAAwB,CAAC,EAAE,CAAC;IACpC,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,KAAK,CAAC;IACnC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,oBAAoB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,IAC/D,0BAA0B,CAAC,EAAE,CAAC,GAC9B,wBAAwB,CAAC,EAAE,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/hosting/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE9F,YAAY,EAAE,WAAW,EAAE,CAAC;AAI5B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,cAAc,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IACxC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,yCAAyC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,SAAS;IACxB,kDAAkD;IAClD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACrC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC5C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC3C;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4EG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,oCAAoC;IACpC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,UAAU,CAAA;CAAE,CAAC;AAE1E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,MAAM,yBAAyB,GACjC;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GAC3D;IACE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EACX,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,iBAAiB,GACjB,WAAW,GACX,UAAU,CAAC;IACf,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CACxB,CAAC;AAEN;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuDG;IACH,mBAAmB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CAC5F;AAED;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3F,mBAAmB;AACnB,MAAM,WAAW,UAAU;IACzB;;;;;;;;;;;OAWG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,cAAc,CAAC;IAC1C,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,oFAAoF;IACpF,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD,8DAA8D;IAC9D,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjD;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,GAAG,WAAW,CAAC;CACnE;AAID;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,WAAW,CAAC;IAClD;;;;OAIG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,WAAW,CAAC;IAC9D;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,GAAG,WAAW,CAAC;IAC/C,iDAAiD;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;OAKG;IACH,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACvE;AAID;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAE1E,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,sBAAsB;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,SAAS;IACxB,qFAAqF;IACrF,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,2CAA2C;IAC3C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;CAC5B;AAED,wFAAwF;AACxF,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,wFAAwF;IACxF,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,mFAAmF;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC;IAC7B;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,YAAY,CAAC;AAEzE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IACpE;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuDG;IACH,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpF;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkEG;IACH,SAAS,CAAC,IAAI,gBAAgB,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,mBAAmB,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC7F;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,0BAA0B;AAC1B,MAAM,WAAW,kBAAkB;IACjC,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC;uCACuC;AACvC,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;WAEW;AACX,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,oCAAoC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,wBAAwB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU;IAC1E,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG;QAAE,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;KAAE,CAAC;IACxE,8DAA8D;IAC9D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC;IACzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,gBAAgB,GAAG,MAAM,CAAC;IACxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,CAAC,OAAO,EAAE,CAAC;IAChD;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC;IAC1D;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC;AAED;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAElD;iFACiF;AACjF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,OAAQ,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,WAAW,0BAA0B,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,CAC5E,SAAQ,wBAAwB,CAAC,EAAE,CAAC;IACpC;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC;CACxC;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,CAC1E,SAAQ,wBAAwB,CAAC,EAAE,CAAC;IACpC,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,KAAK,CAAC;IACnC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,oBAAoB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,IAC/D,0BAA0B,CAAC,EAAE,CAAC,GAC9B,wBAAwB,CAAC,EAAE,CAAC,CAAC"}

package/dist/types/hosting/verifiedThreads.d.ts

@@ -0,0 +1,30 @@
+/**
+ * verifiedThreads — the {@link ThreadBinder} that binds a thread to a VERIFIED
+ * caller, so the secure binding is the one-line one.
+ *
+ * A request names a thread; naming one proves nothing. This binder checks the
+ * caller's credential with the door's own identity verification
+ * (`verifyRequestIdentity` — the bearer token, through your verifier), never a
+ * header read as a name, and keys the conversation by WHO
+ * plus WHICH: the same thread id from two people is two conversations. The
+ * run's `identity` names the verified person, so a stored conversation records
+ * its owner and a later request from anyone else is refused as not found.
+ *
+ * A caller with no credential is REFUSED (401), even at a door that allows
+ * anonymous requests elsewhere: a thread with no owner would be anybody's who
+ * guessed its id.
+ */
+import { type IdentityVerificationOptions } from './identityVerification.js';
+import type { ThreadBinder } from './protocolAdapter.js';
+/**
+ * Bind every thread to the caller `identity` verifies.
+ *
+ * @example
+ * ```ts
+ * import { jwksIdentity } from 'agentfootprint/security';
+ * const threads = verifiedThreads(jwksIdentity({ jwksUrl, issuer, audience }));
+ * streamHandler({ agent, adapter: agUi(), threads, sessions: memorySessions() });
+ * ```
+ */
+export declare function verifiedThreads(identity: IdentityVerificationOptions): ThreadBinder;
+//# sourceMappingURL=verifiedThreads.d.ts.map

package/dist/types/hosting/verifiedThreads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedThreads.d.ts","sourceRoot":"","sources":["../../../src/hosting/verifiedThreads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAyB,KAAK,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACpG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,2BAA2B,GAAG,YAAY,CAenF"}

package/dist/types/identity/requestContext.d.ts

@@ -0,0 +1,97 @@
+/**
+ * requestContext — the INCOMING REQUEST's secrets, sealed for one run.
+ *
+ * A host that receives a per-request credential (an encrypted token in a
+ * header, a session-bound key) seals it here and hands the handle to the run:
+ *
+ * ```ts
+ * const request = requestContext({ secrets: { mcpToken: req.headers['x-mcp-token'] } });
+ * await agent.run({ message }, { request });
+ * ```
+ *
+ * ── Why a sealed handle and not a plain object ──────────────────────────────
+ * The run's input, its options and its state all travel: input and state into
+ * the commit log, the recorders and every exporter; options into whatever a
+ * host logs. A plain `{ mcpToken: '…' }` would ride all of them. The handle
+ * holds NOTHING an enumeration, `JSON.stringify`, `structuredClone` or an
+ * inspector can reach — the values live in a module-private `WeakMap` keyed by
+ * the handle, and only {@link requestSecretOf} (internal, never on a door)
+ * reads them. So the handle can sit in an options bag, be logged by accident,
+ * or be copied, and nothing secret moves with it.
+ *
+ * ── Who reads it ─────────────────────────────────────────────────────────────
+ * Only a credential provider, through `CredentialRequest.request`, which the
+ * framework fills from the run the call belongs to (`bindRequest`). The model
+ * never sees it, no stage writes it to scope, and a tool reaches what it
+ * vends only as `ctx.credential`.
+ *
+ * ── One request, one run ─────────────────────────────────────────────────────
+ * The framework decides WHICH handle a call carries — the agent's own run, or
+ * the run a composition opened for its members (`core/memberRun.ts`). A call
+ * with no run that carries a request gets none: a request credential then
+ * fails closed (`requestCredentials`), and is never borrowed from another run.
+ *
+ * Pattern: sealed value object (module-private WeakMap). Role: identity, run input.
+ */
+import type { CredentialProvider } from './types.js';
+/** What {@link requestContext} takes. */
+export interface RequestContextOptions {
+    /**
+     * The request's secrets, by name — `{ mcpToken: '<from the header>' }`.
+     * Each value must be a non-empty string; names are compared exactly.
+     */
+    readonly secrets: Readonly<Record<string, string>>;
+}
+/**
+ * The incoming request's secrets, sealed. Opaque: it has no readable fields,
+ * serializes as a fixed placeholder, and is recognised by the framework only
+ * when {@link requestContext} built it.
+ */
+export interface RequestContext {
+    /** Type-only brand: no value carries it at run time. A value built anywhere
+     *  else is refused at the door (`assertRequestContext`), never read. */
+    readonly [requestContextBrand]: never;
+}
+/** The brand's key — declared, never created; it exists only in the types. */
+declare const requestContextBrand: unique symbol;
+/**
+ * Seal an incoming request's secrets for one run. Pass the result as
+ * `run(input, { request })` (or `resume(…, { request })`); a credential
+ * provider built by `requestCredentials` reads it there.
+ *
+ * @throws TypeError when `secrets` is not a plain object of non-empty strings.
+ */
+export declare function requestContext(options: RequestContextOptions): RequestContext;
+/** Whether `value` is a handle {@link requestContext} built. */
+export declare function isRequestContext(value: unknown): value is RequestContext;
+/**
+ * Refuse a `request` that {@link requestContext} did not build — at the door
+ * the caller used, before anything moves. A plain object would carry its
+ * values wherever the options travel.
+ *
+ * @throws TypeError naming the door.
+ */
+export declare function assertRequestContext(value: unknown, door: string): void;
+/**
+ * The secret a sealed request holds under `name`, or `undefined`.
+ *
+ * @internal Never re-exported on a door. The only reader is a credential
+ * provider in this folder, which turns it into a `Credential` for one call.
+ */
+export declare function requestSecretOf(request: unknown, name: string): string | undefined;
+/**
+ * The provider a call of ONE run is handed: a `getCredential` for `service` —
+ * the service the calling tool DECLARES in its `needs` — carries that run's
+ * request, and only that run's. A request the caller put on the request
+ * itself is always replaced (or removed), so a tool cannot present another
+ * run's handle through `ctx.credentials`; and a call for any OTHER service
+ * carries no request, so a tool cannot pull a request credential it never
+ * declared. `service` undefined → no call carries a request.
+ *
+ * Every other field passes through untouched; the provider's `id` is kept.
+ *
+ * @internal The framework's binding; not on a door.
+ */
+export declare function bindRequest(provider: CredentialProvider, request: RequestContext | undefined, service: string | undefined): CredentialProvider;
+export {};
+//# sourceMappingURL=requestContext.d.ts.map

package/dist/types/identity/requestContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestContext.d.ts","sourceRoot":"","sources":["../../../src/identity/requestContext.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAqB,MAAM,YAAY,CAAC;AAKxE,yCAAyC;AACzC,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B;4EACwE;IACxE,QAAQ,CAAC,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC;CACvC;AAED,8EAA8E;AAC9E,OAAO,CAAC,MAAM,mBAAmB,EAAE,OAAO,MAAM,CAAC;AAIjD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,cAAc,CAsB7E;AAcD,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAMvE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGlF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,cAAc,GAAG,SAAS,EACnC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,kBAAkB,CAUpB"}