agentfootprint 12.1.0 → 12.2.0

package/dist/types/mcp/pool/listTools.d.ts

@@ -0,0 +1,34 @@
+/**
+ * listTools — one conversation's tools, bound to it: one listing operation.
+ *
+ * Pattern: one admitted operation per call, the provider's and the lease's alike.
+ * Role:    § 3.2 and § 6 of the design. A listing is one `list(ctx)` for one
+ *          conversation, admitted against `maxOperations`. Its setup — the open
+ *          of the key's client, the `tools/list` — runs inside its slot.
+ *
+ *   - PER CLIENT: the conversation's own client is opened (or reused) and its own
+ *     list served, listed again when it cannot be served as it stands.
+ *   - SHARED, under the app's contract: the plan is resolved and the context
+ *     computed WITHOUT opening anything; a current entry is served touching no
+ *     client (`client: 'not-needed'`); a listing already under way for it is
+ *     joined; otherwise the listing runs on THIS conversation's own client —
+ *     never in another conversation's session.
+ *   - THE CALLER'S CONTEXT AFTER EVERY WAIT: the app's names are asked again
+ *     after a joined listing and after this one's own (`Pool.ensureListed`); a
+ *     list is served only under the context the caller has at that moment, and
+ *     a moved context is resolved again — at most three rounds, then refused
+ *     (`binding-changed`).
+ *
+ * A refused listing never reaches the model as a tool result: it fails that
+ * iteration's tool discovery (`agentfootprint.tools.discovery_failed`), as any
+ * failing `ToolProvider` does. A list that cannot be read to its end
+ * (`McpToolListIncompleteError`, from the client's own discovery) is never
+ * served cut short.
+ */
+import type { Tool } from '../../tools/tools.js';
+import type { PoolKey } from './identityKey.js';
+import type { Pool } from './pool.js';
+import type { UseFacts } from './record.js';
+/** List `key`'s conversation's tools, bound to it, under one admitted operation. */
+export declare function listTools(pool: Pool, key: PoolKey, signal: AbortSignal | undefined, facts: UseFacts): Promise<readonly Tool[]>;
+//# sourceMappingURL=listTools.d.ts.map

package/dist/types/mcp/pool/listTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listTools.d.ts","sourceRoot":"","sources":["../../../../src/mcp/pool/listTools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAIjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,WAAW,CAAC;AAElD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,oFAAoF;AACpF,wBAAsB,SAAS,CAC7B,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,KAAK,EAAE,QAAQ,GACd,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAgD1B"}

package/dist/types/mcp/pool/mcpClientPool.d.ts

@@ -0,0 +1,122 @@
+/**
+ * mcpClientPool — a client per conversation, for one MCP server.
+ *
+ *   const orders = mcpClientPool({
+ *     name: 'orders',
+ *     transport: () =>
+ *       agentCoreRuntimeMcpTransport({ agentRuntimeArn, region, session: 'reuse', client: aws }),
+ *   });
+ *   const agent = Agent.create({ provider, model }).toolProvider(orders.toolProvider()).build();
+ *   await agent.run({ message, identity: { tenant, principal, conversationId } });
+ *
+ * Pattern: Facade over one state machine (`pool.ts`), its accounting (`work.ts`),
+ *          its definitions (`definitions.ts`) and its bound tools (`boundTool.ts`).
+ * Role:    `docs/design/2026-10-mcp-client-pool.md`. A `'reuse'` session costs a
+ *          cold start once per conversation instead of once per call — but only
+ *          if each conversation has a client of its own, opened once, bounded,
+ *          never closed while in use, ended remotely and said to be. This is
+ *          the one place that does all of it:
+ *
+ *   - one client per authenticated conversation, keyed by the library's
+ *     identity encoding of the identity the CALLER named;
+ *   - one open per key, under the pool's own signal and `initTimeoutMs`;
+ *   - three budgets — open clients, endings, outstanding operations — each
+ *     charged until the work under it has SETTLED, and `PoolFullError` at once
+ *     when one is full: there is no queue;
+ *   - tool definitions per client incarnation by default, shared only under the
+ *     app's declared contract, every tool re-checked after each wait and at the
+ *     send gate;
+ *   - every ending through `terminate()`, with the remote outcome reported, and
+ *     `close()` still only local.
+ *
+ * What it does not do: repeat a call, share anything across processes, bound a
+ * remote session it could not end, or make a server enforce per-user
+ * permissions.
+ */
+import type { ToolProvider } from '../../tools/toolProvider.js';
+import type { McpTerminateOutcome } from '../types.js';
+import { type McpPoolLease } from './lease.js';
+import { type McpClientPoolOptions, type McpPoolIdentity } from './options.js';
+import { type McpPoolStats } from './pool.js';
+/** The scope `terminate` and `permissionsChanged` name. */
+export interface McpPoolScope {
+    /** Matched exactly, always: an absent tenant is "no tenant", never "every tenant". */
+    readonly tenant?: string;
+    /** Absent: every principal of the tenant (`permissionsChanged` only). */
+    readonly principal?: string;
+    /** Absent: every conversation of the principal. */
+    readonly conversationId?: string;
+}
+/** One pool per MCP server: a client per conversation. */
+export interface McpClientPool {
+    /** The pool's name: the server. */
+    readonly name: string;
+    /**
+     * The agent path: a `ToolProvider` (id `mcp-pool:<name>`) whose `list(ctx)`
+     * takes the run's caller identity (`ToolDispatchContext.callerIdentity`) and
+     * returns that conversation's tools, bound to it. A bound tool's `execute`
+     * takes a lease on the key's client for one call, opening the client first
+     * when the key has none; nothing is held between calls. A run with no caller
+     * identity is refused (`no-identity`) — a derived one counts as none.
+     */
+    toolProvider(): ToolProvider;
+    /**
+     * Hold `identity`'s conversation client — opened or reused — until
+     * `release()`, at most `maxLeaseMs`. The only way to protect a client between
+     * calls (a host holds one around `agent.run()`).
+     *
+     * @throws `McpPoolRefusedError` (`no-identity`, `incomplete-identity`,
+     *   `init-timeout`, `init-failed`, `closed`) or `PoolFullError`
+     */
+    acquire(identity: McpPoolIdentity, options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<McpPoolLease>;
+    /**
+     * End the conversations `scope` names — one (`{ tenant, principal,
+     * conversationId }`) or every one of a principal (`{ tenant, principal }`).
+     * New leases stop at once; the next acquire for a key opens a new client.
+     * In-flight work is waited for up to 5 s; then each client is ended through
+     * `terminate()` once an ending slot and an operation slot are reserved. A
+     * client still leased, or whose slots cannot be reserved yet, is reported
+     * deferred (`onEvent`), never as ended, and is ended when it can be.
+     *
+     * @returns one `McpTerminateOutcome` per client it ended
+     */
+    terminate(scope: McpPoolScope): Promise<readonly McpTerminateOutcome[]>;
+    /**
+     * Shut down: refuse new work, revoke app leases, abort in-flight calls
+     * through the pool's own signal, then end every client as slots can be
+     * reserved, at most `maxEnding` at a time. Resolves after a bounded wait;
+     * the clients it could not end yet are reported deferred and the work still
+     * unsettled stays charged until it settles (`stats()`). Idempotent.
+     *
+     * @returns one `McpTerminateOutcome` per client it ended
+     */
+    close(): Promise<readonly McpTerminateOutcome[]>;
+    /** Resolves once every charged operation and every ending has settled. */
+    settled(): Promise<void>;
+    /**
+     * The app's permission signal: every tool list in the scope stops being
+     * served, and every tool bound to one is refused (`stale-tools`) before it is
+     * sent. Per process: a fleet sends it to every process, or versions its
+     * `authorization` names.
+     */
+    permissionsChanged(scope: {
+        readonly tenant?: string;
+        readonly principal?: string;
+    }): void;
+    /** The server changed (a deploy hook): every tool list stops being served. */
+    toolsChanged(): void;
+    /** Run the lazy sweep now: revoked leases, idle ends, deferred ends. No timer is ever installed. */
+    sweep(): void;
+    /** Counts only — never keys. They report; the budgets enforce. */
+    stats(): McpPoolStats;
+}
+/**
+ * Build a pool for one MCP server.
+ *
+ * @throws TypeError when an option is missing, mistyped or out of range, or when
+ *   `connection` is given — here, when the pool is built
+ */
+export declare function mcpClientPool(options: McpClientPoolOptions): McpClientPool;
+//# sourceMappingURL=mcpClientPool.d.ts.map

package/dist/types/mcp/pool/mcpClientPool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpClientPool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/pool/mcpClientPool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGvD,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAE5D,OAAO,EAAmB,KAAK,oBAAoB,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAChG,OAAO,EAAQ,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AAGpD,2DAA2D;AAC3D,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,mDAAmD;IACnD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,mCAAmC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,YAAY,IAAI,YAAY,CAAC;IAC7B;;;;;;;OAOG;IACH,OAAO,CACL,QAAQ,EAAE,eAAe,EACzB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC1C,OAAO,CAAC,YAAY,CAAC,CAAC;IACzB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC;IACxE;;;;;;;;OAQG;IACH,KAAK,IAAI,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC;IACjD,0EAA0E;IAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB;;;;;OAKG;IACH,kBAAkB,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3F,8EAA8E;IAC9E,YAAY,IAAI,IAAI,CAAC;IACrB,oGAAoG;IACpG,KAAK,IAAI,IAAI,CAAC;IACd,kEAAkE;IAClE,KAAK,IAAI,YAAY,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CAqE1E"}

package/dist/types/mcp/pool/options.d.ts

@@ -0,0 +1,184 @@
+/**
+ * options — what `mcpClientPool` is built from, read and checked once.
+ *
+ * Pattern: one options type + one reader that refuses by name.
+ * Role:    The pool's budgets and clocks (`docs/design/2026-10-mcp-client-pool.md`
+ *          § 3.1). Every number is checked when the pool is built, never at the
+ *          first call. The pool takes the `mcpClient` options that shape one
+ *          connection and hands them to every client it opens; it never takes
+ *          `connection`, because it must build the transport itself — to end
+ *          the session, to hear the tools-changed notice, and to place the send
+ *          gate.
+ */
+import type { MemoryIdentity } from '../../memory/identity/types.js';
+import { type McpReplayOptions } from '../replay.js';
+import type { RetryOnThrottle } from '../throttleRetry.js';
+import type { McpJsonSchemaValidator, McpSdk, McpTransport } from '../types.js';
+import type { McpPoolReport } from './record.js';
+import type { PoolClientOpener } from './plan.js';
+/** The identity a pool keys a client by: `{ tenant?, principal?, conversationId }`. */
+export type McpPoolIdentity = MemoryIdentity;
+/** What a conversation's tool list may be shared under: two names the app vouches for. */
+export interface McpPoolShareContext {
+    /**
+     * What the transport hides in its code — a signer's role, the credentials of
+     * an AWS client, a custom `fetch`. Hashed into the context, never recorded.
+     */
+    readonly configuration: string;
+    /**
+     * What the server's tool visibility depends on — a role and a policy version
+     * (`'analyst@policy-7'`). A version in the name reaches a new entry without
+     * `permissionsChanged`, for conversations that already have a client too:
+     * their tools are listed again under the new name, and a tool bound under the
+     * old one is refused before it is sent. Hashed into the context, never
+     * recorded.
+     */
+    readonly authorization: string;
+}
+/**
+ * Share tool definitions between conversations — declared by the app, checked by
+ * the pool. `share` is asked for every conversation before anything opens, and
+ * again at every listing, every call and every send gate after that, so a
+ * changed answer takes effect at the next one; it must be synchronous and
+ * cheap. A listing's answer is kept only if the names still give the context it
+ * was listed for when it arrives — otherwise it is dropped and listed again. Return both names, or `undefined` to keep that conversation's list to
+ * itself. Conversations share a list only when the transport's comparable
+ * data, both names and the tenant are all equal. A `share` that throws refuses
+ * the open (`init-failed`) or, for a conversation that already has a client,
+ * that listing or call (`binding-changed`) — its error as `cause`. Never share
+ * a server whose list follows the session (one that unlocks tools as a
+ * conversation goes on).
+ */
+export interface McpPoolDefinitionSharing {
+    readonly share: (identity: McpPoolIdentity) => McpPoolShareContext | undefined;
+}
+/** Options for {@link mcpClientPool}. */
+export interface McpClientPoolOptions {
+    /** The server's name: every tool's `source`, the provider's id, and the record. */
+    readonly name: string;
+    /**
+     * The transport each client is opened over. A FUNCTION of the identity is
+     * preferred: it is called before each client opens (and again for every
+     * replacement) with the identity the client is for, so each client gets a
+     * transport — and a session map — of its own, and a provider can vend THAT
+     * user's credential. One shared object serves every client; a shared
+     * `'reuse'` runtime transport then needs `maxClients + maxEnding` at or below
+     * its 256 remembered connections.
+     */
+    readonly transport: McpTransport | ((identity: McpPoolIdentity) => McpTransport);
+    /** Open clients — opening, busy or idle. Default 64. */
+    readonly maxClients?: number;
+    /** Open clients for one principal (one tenant's principal). Default 8. */
+    readonly maxClientsPerPrincipal?: number;
+    /** Clients being ended at once, until each ending's work has settled. Default 8. */
+    readonly maxEnding?: number;
+    /**
+     * Opens, listings, calls and endings outstanding on any client, each from
+     * its admission until its work has settled — not merely until its caller was
+     * answered. Default 256. Size it above `maxEnding`.
+     */
+    readonly maxOperations?: number;
+    /** One open per conversation, under this ceiling. Default 30 000 ms. */
+    readonly initTimeoutMs?: number;
+    /**
+     * End a client idle this long, at the next pool interaction (no timer is
+     * installed). Default 600 000 ms — below AgentCore Runtime's 900 s idle
+     * timeout; set it lower for a runtime configured lower.
+     */
+    readonly idleMs?: number;
+    /** An app lease (`acquire`) is revoked past this. Default 900 000 ms (15 minutes). */
+    readonly maxLeaseMs?: number;
+    /** A tool list is listed again after this, at the next list. Default 600 000 ms. */
+    readonly definitionTtlMs?: number;
+    /** `'per-client'` (the default), or the app's declared sharing contract. */
+    readonly definitions?: 'per-client' | McpPoolDefinitionSharing;
+    /** Refuse an identity without a `principal`. Default `true`. */
+    readonly requirePrincipal?: boolean;
+    /** Refuse an identity without a `tenant` — for multitenant hosts. Default `false`. */
+    readonly requireTenant?: boolean;
+    /**
+     * What happens outside a run — endings, deferred endings, revoked leases,
+     * work that settled after its deadline. Ids and outcomes only. A throwing
+     * handler is swallowed and changes nothing.
+     */
+    readonly onEvent?: (report: McpPoolReport) => void;
+    /** Passed to every client: how a tool's result is decoded (`McpClientOptions.resultMode`). */
+    readonly resultMode?: 'text' | 'structured' | 'structured-or-json';
+    /** Passed to every client: the `initialize` identity. */
+    readonly clientInfo?: {
+        readonly name: string;
+        readonly version: string;
+    };
+    /** Passed to every client: the 429 retry (`McpClientOptions.retryOnThrottle`). */
+    readonly retryOnThrottle?: RetryOnThrottle;
+    /**
+     * Passed to every client: who may send a tool call again
+     * (`McpClientOptions.replay`). Read and checked when the pool is built. The
+     * default stays `'compatibility'`. Whatever the policy, the pool's own send
+     * gate refuses a pooled request it cannot check (`request-unmatched`).
+     */
+    readonly replay?: McpReplayOptions;
+    /** Passed to every client: the two SDK modules, imported by you (`McpClientOptions.sdk`). */
+    readonly sdk?: McpSdk;
+    /**
+     * Passed to every client: the JSON Schema validator a tool's own output checks
+     * use (`McpClientOptions.jsonSchemaValidator`). With `sdk`, give it: a shared
+     * definition always runs its own checks, and without a validator a tool that
+     * declares an `outputSchema` is refused unsent.
+     */
+    readonly jsonSchemaValidator?: McpJsonSchemaValidator;
+    /** Clock seam — tests drive idle, lease and definition ages without waiting. */
+    readonly now?: () => number;
+    /** @internal Test seam: how a client is opened (the real path is `openPooledClient`). */
+    readonly _open?: PoolClientOpener;
+}
+/** The defaults, named so a test and a docstring cannot drift from the code. */
+export declare const MCP_POOL_DEFAULTS: Readonly<{
+    maxClients: 64;
+    maxClientsPerPrincipal: 8;
+    maxEnding: 8;
+    maxOperations: 256;
+    initTimeoutMs: 30000;
+    idleMs: 600000;
+    maxLeaseMs: 900000;
+    definitionTtlMs: 600000;
+}>;
+/** At most this many shared definition entries are kept; the least recently used goes first. */
+export declare const MAX_DEFINITION_ENTRIES = 256;
+/** A list longer than this is used by its own client and never shared. */
+export declare const MAX_SHARED_TOOLS = 512;
+/** The pool's settings, read once. */
+export interface PoolSettings {
+    readonly name: string;
+    readonly transport: (identity: McpPoolIdentity) => McpTransport;
+    readonly maxClients: number;
+    readonly maxClientsPerPrincipal: number;
+    readonly maxEnding: number;
+    readonly maxOperations: number;
+    readonly initTimeoutMs: number;
+    readonly idleMs: number;
+    readonly maxLeaseMs: number;
+    readonly definitionTtlMs: number;
+    readonly share: McpPoolDefinitionSharing['share'] | undefined;
+    readonly requirePrincipal: boolean;
+    readonly requireTenant: boolean;
+    readonly onEvent: ((report: McpPoolReport) => void) | undefined;
+    readonly client: {
+        readonly resultMode?: McpClientPoolOptions['resultMode'];
+        readonly clientInfo?: McpClientPoolOptions['clientInfo'];
+        readonly retryOnThrottle?: RetryOnThrottle;
+        readonly replay?: McpReplayOptions;
+        readonly sdk?: McpSdk;
+        readonly jsonSchemaValidator?: McpJsonSchemaValidator;
+    };
+    readonly now: () => number;
+    readonly open: PoolClientOpener | undefined;
+}
+/**
+ * Read `options` once.
+ *
+ * @throws TypeError naming the option, when one is missing, mistyped or out of
+ *   range, or when `connection` is given — here, when the pool is built.
+ */
+export declare function readPoolOptions(options: McpClientPoolOptions): PoolSettings;
+//# sourceMappingURL=options.d.ts.map

package/dist/types/mcp/pool/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../../../src/mcp/pool/options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAuB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAElD,uFAAuF;AACvF,MAAM,MAAM,eAAe,GAAG,cAAc,CAAC;AAE7C,0FAA0F;AAC1F,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,mBAAmB,GAAG,SAAS,CAAC;CAChF;AAED,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,YAAY,GAAG,CAAC,CAAC,QAAQ,EAAE,eAAe,KAAK,YAAY,CAAC,CAAC;IACjF,wDAAwD;IACxD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,oFAAoF;IACpF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,wEAAwE;IACxE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,sFAAsF;IACtF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE,YAAY,GAAG,wBAAwB,CAAC;IAC/D,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,sFAAsF;IACtF,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;IACnD,8FAA8F;IAC9F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,oBAAoB,CAAC;IACnE,yDAAyD;IACzD,QAAQ,CAAC,UAAU,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1E,kFAAkF;IAClF,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IACnC,6FAA6F;IAC7F,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,sBAAsB,CAAC;IACtD,gFAAgF;IAChF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,yFAAyF;IACzF,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;CACnC;AAED,gFAAgF;AAChF,eAAO,MAAM,iBAAiB;;;;;;;;;EAS5B,CAAC;AAEH,gGAAgG;AAChG,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,MAAM,CAAC;AAEpC,sCAAsC;AACtC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,YAAY,CAAC;IAChE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC;QACzD,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC;QACzD,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;QAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;QACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,mBAAmB,CAAC,EAAE,sBAAsB,CAAC;KACvD,CAAC;IACF,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAAC;CAC7C;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,oBAAoB,GAAG,YAAY,CA+D3E"}

package/dist/types/mcp/pool/plan.d.ts

@@ -0,0 +1,78 @@
+/**
+ * plan — what one client is opened from, resolved before anything opens, and
+ * the context its tool definitions belong to.
+ *
+ * Pattern: a pure resolution step + two hashes.
+ * Role:    § 6.1–6.2 of the design. A client is opened from a PLAN: the
+ *          transport the factory returns for this identity, resolved at that
+ *          moment and kept unchanged for the client's life. The plan's
+ *          `configHash` is SHA-256 over a canonical encoding of the transport's
+ *          comparable data — the pool name; the transport kind and URL; header
+ *          names and a digest of their values; a gateway's service, scopes,
+ *          mode and credential provider id; stdio's command, args and working
+ *          directory; the transport's own stated `settings`; `resultMode` and
+ *          `clientInfo`. A function (a `fetch`, an AWS client) cannot be
+ *          compared: the app's `configuration` name covers it.
+ *
+ * The definitions CONTEXT is the binding a tool is listed under:
+ *
+ *   - per client (the default): `pc:<configHash>` — the client's own list;
+ *   - shared, when the app's `share` names both a configuration and an
+ *     authorization: `sh:<sha256(configHash, configuration, authorization,
+ *     tenant)>`. The tenant is always in it: the app's names widen sharing
+ *     across principals, never across tenants.
+ *
+ * The transport is resolved once, when a client opens; the context is not. The
+ * app's names can move — a policy version in `authorization` — so the pool asks
+ * `share` again at every listing, every call and every send gate
+ * (`contextFor`), over the client's own `configHash`: a conversation that
+ * already has a client follows a new name as a new conversation would.
+ *
+ * Neither hash leaves the process; the app's names are hashed and never kept.
+ */
+import type { ClientPort, PooledClientSeam } from '../clientPort.js';
+import type { McpClient, McpClientOptions, McpTransport } from '../types.js';
+import type { PoolKey } from './identityKey.js';
+import type { PoolSettings } from './options.js';
+/** What a client is opened from. */
+export interface ClientPlan {
+    readonly transport: McpTransport;
+    readonly configHash: string;
+    /** The definitions context: `pc:<configHash>` or `sh:<context>`. */
+    readonly context: string;
+    /** True when the app's sharing contract applies to this conversation. */
+    readonly shared: boolean;
+}
+/** An opened client: the ordinary `McpClient`, and the port back (`clientPort.ts`). */
+export interface OpenedClient {
+    readonly client: McpClient;
+    readonly port: ClientPort;
+}
+/**
+ * How the pool opens one client. The real path is `openPooledClient`; a test
+ * injects its own (the `_open` seam).
+ */
+export type PoolClientOpener = (options: McpClientOptions, seam: PooledClientSeam) => Promise<OpenedClient>;
+/**
+ * The plan for `key`: the transport the factory returns now, and the context
+ * its definitions belong to.
+ *
+ * @throws what the transport factory or `share` throws, and a TypeError when
+ *   `share` answers with anything but two names or `undefined` — the caller
+ *   refuses the open with `init-failed`, the error as its `cause`
+ */
+export declare function resolvePlan(settings: PoolSettings, key: PoolKey): ClientPlan;
+/**
+ * The definitions context `key` belongs to now, for a client opened with
+ * `configHash`: the app's `share` asked again.
+ *
+ * @throws what `share` throws, and a TypeError when it answers with anything
+ *   but two names or `undefined`
+ */
+export declare function contextFor(settings: PoolSettings, key: PoolKey, configHash: string): {
+    readonly context: string;
+    readonly shared: boolean;
+};
+/** SHA-256 over the transport's comparable data (see the module note). */
+export declare function configHashOf(settings: PoolSettings, transport: McpTransport): string;
+//# sourceMappingURL=plan.d.ts.map

package/dist/types/mcp/pool/plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../../../src/mcp/pool/plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAuB,YAAY,EAAE,MAAM,cAAc,CAAC;AAEtE,oCAAoC;AACpC,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,uFAAuF;AACvF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAC7B,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,gBAAgB,KACnB,OAAO,CAAC,YAAY,CAAC,CAAC;AAE3B;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,GAAG,UAAU,CAa5E;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,YAAY,EACtB,GAAG,EAAE,OAAO,EACZ,UAAU,EAAE,MAAM,GACjB;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAYxD;AAsBD,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,GAAG,MAAM,CASpF"}