agentfootprint 6.21.0 → 6.22.0

package/dist/adapters/identity/agentcore.js

@@ -10,12 +10,30 @@
  * `GetResourceOauth2Token` (the SDK's `@requires_access_token` underneath):
  *   - request.mode 'machine' → `M2M`; 'user' → `USER_FEDERATION`
  *   - request.service        → the configured OAuth2 credential-provider name
+ *   - request.identity       → (per-request workload identity scoping; see below)
  *   - a returned access token → `{ status: 'issued', credential: bearer(token) }`
  *   - a returned auth URL     → `{ status: 'authorization-required' }` (3LO consent)
  *
  * The token vault + refresh-token handling live in AgentCore, so repeat calls
  * usually return a token directly (no consent round-trip).
  *
+ * **Per-request identity forwarding (workload identity scoping).**
+ * `GetResourceOauth2Token` carries NO user/tenant field — in AgentCore the
+ * user identity is bound EARLIER, at workload-token acquisition:
+ * `GetWorkloadAccessTokenForUserId(workloadName, userId)` returns a workload
+ * access token scoped to that user, and AgentCore keys its token vault + 3LO
+ * grants per (workload, user). So this adapter forwards `req.identity` (the
+ * `runIdentity` that the agent threads through `getCredential`) by resolving a
+ * per-user workload token first, then vending with it. Engages only when ALL of:
+ *   - `req.mode === 'user'` (USER_FEDERATION — M2M is the workload's own identity),
+ *   - a userId derives from `req.identity` (default `identity.principal`;
+ *     override via `userIdFor`), and
+ *   - `options.workloadName` is configured (the opt-in).
+ * Otherwise the static `options.workloadIdentityToken` flows exactly as before.
+ * `tenant` has no native AgentCore field and is NOT forwarded by default —
+ * tenant isolation derives from the workload identity itself (per-tenant
+ * workloads), or encode it via `userIdFor` (e.g. `${tenant}:${principal}`).
+ *
  * Pattern: Adapter (GoF) + lazy peer-dep load — the AWS SDK is required only when
  * `getCredential` first runs (or never, if you inject `_client`). NOTE: confirm
  * the SDK command/field names against your installed
@@ -44,28 +62,56 @@ function resolveClient(options) {
     }
     return {
         getResourceOauth2Token: (input) => client.getResourceOauth2Token(input),
+        // Duck-typed like the primary call — only wired when the SDK exposes it
+        // (used only when `workloadName` is configured).
+        ...(typeof client.getWorkloadAccessTokenForUserId === 'function' && {
+            getWorkloadAccessTokenForUserId: (input) => client.getWorkloadAccessTokenForUserId(input),
+        }),
     };
 }
+const defaultUserIdFor = (identity) => identity.principal;
 /** Build a {@link CredentialProvider} backed by AWS Bedrock AgentCore Identity. */
 function agentCoreIdentity(options = {}) {
     let client;
     const getClient = () => (client ??= resolveClient(options));
+    const userIdFor = options.userIdFor ?? defaultUserIdFor;
+    // Per-request identity forwarding (workload identity scoping) — see module
+    // header. `GetResourceOauth2Token` has no user field; the user is bound at
+    // workload-token acquisition, so a `mode: 'user'` request carrying an
+    // identity exchanges (workloadName, userId) for a USER-SCOPED workload token
+    // and vends with that. Requires `workloadName` (the opt-in); without it the
+    // static `workloadIdentityToken` flows unchanged (pre-forwarding behavior).
+    const resolveWorkloadToken = async (req) => {
+        const userId = req.mode === 'user' && req.identity !== undefined ? userIdFor(req.identity) : undefined;
+        if (userId === undefined || !options.workloadName)
+            return options.workloadIdentityToken;
+        const c = getClient();
+        if (typeof c.getWorkloadAccessTokenForUserId !== 'function') {
+            // Explicit config must not silently degrade to workload-level tokens.
+            throw new Error('agentCoreIdentity: `workloadName` is configured for per-user workload scoping, ' +
+                'but the client has no getWorkloadAccessTokenForUserId. Confirm the ' +
+                '@aws-sdk/client-bedrock-agentcore version, or pass `_client`.');
+        }
+        const res = await c.getWorkloadAccessTokenForUserId({
+            workloadName: options.workloadName,
+            userId,
+        });
+        if (!res.workloadAccessToken) {
+            throw new Error('agentCoreIdentity: GetWorkloadAccessTokenForUserId returned no workloadAccessToken ' +
+                'for per-user scoped vending.');
+        }
+        return res.workloadAccessToken;
+    };
     return {
         id: options.id ?? 'agentcore-identity',
         async getCredential(req) {
-            // NOTE: `req.identity` (principal/tenant) is intentionally NOT forwarded
-            // yet — tenant isolation here derives solely from `workloadIdentityToken`
-            // (the AgentCore-injected workload identity). Don't assume the threaded
-            // principal/tenant is enforced at the IdP until a future release maps it
-            // onto the user-federation subject.
+            const workloadIdentityToken = await resolveWorkloadToken(req);
             const res = await getClient().getResourceOauth2Token({
                 resourceCredentialProviderName: req.service,
                 scopes: req.scopes ?? [],
                 oauth2Flow: req.mode === 'user' ? 'USER_FEDERATION' : 'M2M',
                 forceAuthentication: req.forceReauth ?? false,
-                ...(options.workloadIdentityToken && {
-                    workloadIdentityToken: options.workloadIdentityToken,
-                }),
+                ...(workloadIdentityToken && { workloadIdentityToken }),
             });
             if (res.accessToken) {
                 // AgentCore Identity vends OAuth access tokens → a bearer credential.

package/dist/adapters/identity/agentcore.js.map

@@ -1 +1 @@
-{"version":3,"file":"agentcore.js","sourceRoot":"","sources":["../../../src/adapters/identity/agentcore.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AAEH,6DAAuD;AAMvD,sDAAiD;AAkCjD,SAAS,aAAa,CAAC,OAAiC;IACtD,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC5C,iFAAiF;IACjF,MAAM,GAAG,GAAG,IAAA,4BAAW,EAA0B,mCAAmC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,GAAG,CAAC,sBAEJ,CAAC;IACd,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,8FAA8F;YAC5F,sEAAsE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAE5E,CAAC;IACF,IAAI,OAAO,MAAM,CAAC,sBAAsB,KAAK,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE,CAChC,MAAM,CAAC,sBAAuB,CAAC,KAAK,CAAoC;KAC3E,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAgB,iBAAiB,CAAC,UAAoC,EAAE;IACtE,IAAI,MAA+C,CAAC;IACpD,MAAM,SAAS,GAAG,GAAgC,EAAE,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAEzF,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,oBAAoB;QACtC,KAAK,CAAC,aAAa,CAAC,GAAsB;YACxC,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,yEAAyE;YACzE,oCAAoC;YACpC,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC,sBAAsB,CAAC;gBACnD,8BAA8B,EAAE,GAAG,CAAC,OAAO;gBAC3C,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;gBACxB,UAAU,EAAE,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK;gBAC3D,mBAAmB,EAAE,GAAG,CAAC,WAAW,IAAI,KAAK;gBAC7C,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI;oBACnC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;iBACrD,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,sEAAsE;gBACtE,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,IAAA,iBAAM,EAAC,GAAG,CAAC,WAAW,CAAC;oBACnC,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;iBACjE,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;gBACzB,OAAO;oBACL,MAAM,EAAE,wBAAwB;oBAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;oBACtC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;iBAC/B,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kDAAkD,GAAG,CAAC,OAAO,qBAAqB;gBAChF,2CAA2C,CAC9C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AA3CD,8CA2CC"}
+{"version":3,"file":"agentcore.js","sourceRoot":"","sources":["../../../src/adapters/identity/agentcore.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;;;AAEH,6DAAuD;AAMvD,sDAAiD;AA0DjD,SAAS,aAAa,CAAC,OAAiC;IACtD,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC5C,iFAAiF;IACjF,MAAM,GAAG,GAAG,IAAA,4BAAW,EAA0B,mCAAmC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,GAAG,CAAC,sBAEJ,CAAC;IACd,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,8FAA8F;YAC5F,sEAAsE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAG5E,CAAC;IACF,IAAI,OAAO,MAAM,CAAC,sBAAsB,KAAK,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE,CAChC,MAAM,CAAC,sBAAuB,CAAC,KAAK,CAAoC;QAC1E,wEAAwE;QACxE,iDAAiD;QACjD,GAAG,CAAC,OAAO,MAAM,CAAC,+BAA+B,KAAK,UAAU,IAAI;YAClE,+BAA+B,EAAE,CAAC,KAA+C,EAAE,EAAE,CACnF,MAAM,CAAC,+BAAgC,CAAC,KAAK,CAAC;SACjD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,QAAyC,EAAsB,EAAE,CACzF,QAAQ,CAAC,SAAS,CAAC;AAErB,mFAAmF;AACnF,SAAgB,iBAAiB,CAAC,UAAoC,EAAE;IACtE,IAAI,MAA+C,CAAC;IACpD,MAAM,SAAS,GAAG,GAAgC,EAAE,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAExD,2EAA2E;IAC3E,2EAA2E;IAC3E,sEAAsE;IACtE,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAsB,EAA+B,EAAE;QACzF,MAAM,MAAM,GACV,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY;YAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC;QAExF,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,CAAC,+BAA+B,KAAK,UAAU,EAAE,CAAC;YAC5D,sEAAsE;YACtE,MAAM,IAAI,KAAK,CACb,iFAAiF;gBAC/E,qEAAqE;gBACrE,+DAA+D,CAClE,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,+BAA+B,CAAC;YAClD,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,qFAAqF;gBACnF,8BAA8B,CACjC,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,mBAAmB,CAAC;IACjC,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,oBAAoB;QACtC,KAAK,CAAC,aAAa,CAAC,GAAsB;YACxC,MAAM,qBAAqB,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC9D,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC,sBAAsB,CAAC;gBACnD,8BAA8B,EAAE,GAAG,CAAC,OAAO;gBAC3C,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;gBACxB,UAAU,EAAE,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK;gBAC3D,mBAAmB,EAAE,GAAG,CAAC,WAAW,IAAI,KAAK;gBAC7C,GAAG,CAAC,qBAAqB,IAAI,EAAE,qBAAqB,EAAE,CAAC;aACxD,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,sEAAsE;gBACtE,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,IAAA,iBAAM,EAAC,GAAG,CAAC,WAAW,CAAC;oBACnC,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;iBACjE,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;gBACzB,OAAO;oBACL,MAAM,EAAE,wBAAwB;oBAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;oBACtC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;iBAC/B,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kDAAkD,GAAG,CAAC,OAAO,qBAAqB;gBAChF,2CAA2C,CAC9C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAvED,8CAuEC"}

package/dist/esm/adapters/identity/agentcore.js

@@ -9,12 +9,30 @@
  * `GetResourceOauth2Token` (the SDK's `@requires_access_token` underneath):
  *   - request.mode 'machine' → `M2M`; 'user' → `USER_FEDERATION`
  *   - request.service        → the configured OAuth2 credential-provider name
+ *   - request.identity       → (per-request workload identity scoping; see below)
  *   - a returned access token → `{ status: 'issued', credential: bearer(token) }`
  *   - a returned auth URL     → `{ status: 'authorization-required' }` (3LO consent)
  *
  * The token vault + refresh-token handling live in AgentCore, so repeat calls
  * usually return a token directly (no consent round-trip).
  *
+ * **Per-request identity forwarding (workload identity scoping).**
+ * `GetResourceOauth2Token` carries NO user/tenant field — in AgentCore the
+ * user identity is bound EARLIER, at workload-token acquisition:
+ * `GetWorkloadAccessTokenForUserId(workloadName, userId)` returns a workload
+ * access token scoped to that user, and AgentCore keys its token vault + 3LO
+ * grants per (workload, user). So this adapter forwards `req.identity` (the
+ * `runIdentity` that the agent threads through `getCredential`) by resolving a
+ * per-user workload token first, then vending with it. Engages only when ALL of:
+ *   - `req.mode === 'user'` (USER_FEDERATION — M2M is the workload's own identity),
+ *   - a userId derives from `req.identity` (default `identity.principal`;
+ *     override via `userIdFor`), and
+ *   - `options.workloadName` is configured (the opt-in).
+ * Otherwise the static `options.workloadIdentityToken` flows exactly as before.
+ * `tenant` has no native AgentCore field and is NOT forwarded by default —
+ * tenant isolation derives from the workload identity itself (per-tenant
+ * workloads), or encode it via `userIdFor` (e.g. `${tenant}:${principal}`).
+ *
  * Pattern: Adapter (GoF) + lazy peer-dep load — the AWS SDK is required only when
  * `getCredential` first runs (or never, if you inject `_client`). NOTE: confirm
  * the SDK command/field names against your installed
@@ -41,28 +59,56 @@ function resolveClient(options) {
     }
     return {
         getResourceOauth2Token: (input) => client.getResourceOauth2Token(input),
+        // Duck-typed like the primary call — only wired when the SDK exposes it
+        // (used only when `workloadName` is configured).
+        ...(typeof client.getWorkloadAccessTokenForUserId === 'function' && {
+            getWorkloadAccessTokenForUserId: (input) => client.getWorkloadAccessTokenForUserId(input),
+        }),
     };
 }
+const defaultUserIdFor = (identity) => identity.principal;
 /** Build a {@link CredentialProvider} backed by AWS Bedrock AgentCore Identity. */
 export function agentCoreIdentity(options = {}) {
     let client;
     const getClient = () => (client ??= resolveClient(options));
+    const userIdFor = options.userIdFor ?? defaultUserIdFor;
+    // Per-request identity forwarding (workload identity scoping) — see module
+    // header. `GetResourceOauth2Token` has no user field; the user is bound at
+    // workload-token acquisition, so a `mode: 'user'` request carrying an
+    // identity exchanges (workloadName, userId) for a USER-SCOPED workload token
+    // and vends with that. Requires `workloadName` (the opt-in); without it the
+    // static `workloadIdentityToken` flows unchanged (pre-forwarding behavior).
+    const resolveWorkloadToken = async (req) => {
+        const userId = req.mode === 'user' && req.identity !== undefined ? userIdFor(req.identity) : undefined;
+        if (userId === undefined || !options.workloadName)
+            return options.workloadIdentityToken;
+        const c = getClient();
+        if (typeof c.getWorkloadAccessTokenForUserId !== 'function') {
+            // Explicit config must not silently degrade to workload-level tokens.
+            throw new Error('agentCoreIdentity: `workloadName` is configured for per-user workload scoping, ' +
+                'but the client has no getWorkloadAccessTokenForUserId. Confirm the ' +
+                '@aws-sdk/client-bedrock-agentcore version, or pass `_client`.');
+        }
+        const res = await c.getWorkloadAccessTokenForUserId({
+            workloadName: options.workloadName,
+            userId,
+        });
+        if (!res.workloadAccessToken) {
+            throw new Error('agentCoreIdentity: GetWorkloadAccessTokenForUserId returned no workloadAccessToken ' +
+                'for per-user scoped vending.');
+        }
+        return res.workloadAccessToken;
+    };
     return {
         id: options.id ?? 'agentcore-identity',
         async getCredential(req) {
-            // NOTE: `req.identity` (principal/tenant) is intentionally NOT forwarded
-            // yet — tenant isolation here derives solely from `workloadIdentityToken`
-            // (the AgentCore-injected workload identity). Don't assume the threaded
-            // principal/tenant is enforced at the IdP until a future release maps it
-            // onto the user-federation subject.
+            const workloadIdentityToken = await resolveWorkloadToken(req);
             const res = await getClient().getResourceOauth2Token({
                 resourceCredentialProviderName: req.service,
                 scopes: req.scopes ?? [],
                 oauth2Flow: req.mode === 'user' ? 'USER_FEDERATION' : 'M2M',
                 forceAuthentication: req.forceReauth ?? false,
-                ...(options.workloadIdentityToken && {
-                    workloadIdentityToken: options.workloadIdentityToken,
-                }),
+                ...(workloadIdentityToken && { workloadIdentityToken }),
             });
             if (res.accessToken) {
                 // AgentCore Identity vends OAuth access tokens → a bearer credential.

package/dist/esm/adapters/identity/agentcore.js.map

@@ -1 +1 @@
-{"version":3,"file":"agentcore.js","sourceRoot":"","sources":["../../../../src/adapters/identity/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAMvD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAkCjD,SAAS,aAAa,CAAC,OAAiC;IACtD,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC5C,iFAAiF;IACjF,MAAM,GAAG,GAAG,WAAW,CAA0B,mCAAmC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,GAAG,CAAC,sBAEJ,CAAC;IACd,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,8FAA8F;YAC5F,sEAAsE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAE5E,CAAC;IACF,IAAI,OAAO,MAAM,CAAC,sBAAsB,KAAK,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE,CAChC,MAAM,CAAC,sBAAuB,CAAC,KAAK,CAAoC;KAC3E,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,UAAoC,EAAE;IACtE,IAAI,MAA+C,CAAC;IACpD,MAAM,SAAS,GAAG,GAAgC,EAAE,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAEzF,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,oBAAoB;QACtC,KAAK,CAAC,aAAa,CAAC,GAAsB;YACxC,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,yEAAyE;YACzE,oCAAoC;YACpC,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC,sBAAsB,CAAC;gBACnD,8BAA8B,EAAE,GAAG,CAAC,OAAO;gBAC3C,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;gBACxB,UAAU,EAAE,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK;gBAC3D,mBAAmB,EAAE,GAAG,CAAC,WAAW,IAAI,KAAK;gBAC7C,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI;oBACnC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;iBACrD,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,sEAAsE;gBACtE,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;oBACnC,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;iBACjE,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;gBACzB,OAAO;oBACL,MAAM,EAAE,wBAAwB;oBAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;oBACtC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;iBAC/B,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kDAAkD,GAAG,CAAC,OAAO,qBAAqB;gBAChF,2CAA2C,CAC9C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"agentcore.js","sourceRoot":"","sources":["../../../../src/adapters/identity/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAMvD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AA0DjD,SAAS,aAAa,CAAC,OAAiC;IACtD,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC5C,iFAAiF;IACjF,MAAM,GAAG,GAAG,WAAW,CAA0B,mCAAmC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,GAAG,CAAC,sBAEJ,CAAC;IACd,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,8FAA8F;YAC5F,sEAAsE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAG5E,CAAC;IACF,IAAI,OAAO,MAAM,CAAC,sBAAsB,KAAK,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE,CAChC,MAAM,CAAC,sBAAuB,CAAC,KAAK,CAAoC;QAC1E,wEAAwE;QACxE,iDAAiD;QACjD,GAAG,CAAC,OAAO,MAAM,CAAC,+BAA+B,KAAK,UAAU,IAAI;YAClE,+BAA+B,EAAE,CAAC,KAA+C,EAAE,EAAE,CACnF,MAAM,CAAC,+BAAgC,CAAC,KAAK,CAAC;SACjD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,QAAyC,EAAsB,EAAE,CACzF,QAAQ,CAAC,SAAS,CAAC;AAErB,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,UAAoC,EAAE;IACtE,IAAI,MAA+C,CAAC;IACpD,MAAM,SAAS,GAAG,GAAgC,EAAE,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAExD,2EAA2E;IAC3E,2EAA2E;IAC3E,sEAAsE;IACtE,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAsB,EAA+B,EAAE;QACzF,MAAM,MAAM,GACV,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY;YAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC;QAExF,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,CAAC,+BAA+B,KAAK,UAAU,EAAE,CAAC;YAC5D,sEAAsE;YACtE,MAAM,IAAI,KAAK,CACb,iFAAiF;gBAC/E,qEAAqE;gBACrE,+DAA+D,CAClE,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,+BAA+B,CAAC;YAClD,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,qFAAqF;gBACnF,8BAA8B,CACjC,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,mBAAmB,CAAC;IACjC,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,oBAAoB;QACtC,KAAK,CAAC,aAAa,CAAC,GAAsB;YACxC,MAAM,qBAAqB,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC9D,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC,sBAAsB,CAAC;gBACnD,8BAA8B,EAAE,GAAG,CAAC,OAAO;gBAC3C,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;gBACxB,UAAU,EAAE,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK;gBAC3D,mBAAmB,EAAE,GAAG,CAAC,WAAW,IAAI,KAAK;gBAC7C,GAAG,CAAC,qBAAqB,IAAI,EAAE,qBAAqB,EAAE,CAAC;aACxD,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,sEAAsE;gBACtE,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;oBACnC,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;iBACjE,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;gBACzB,OAAO;oBACL,MAAM,EAAE,wBAAwB;oBAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;oBACtC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;iBAC/B,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kDAAkD,GAAG,CAAC,OAAO,qBAAqB;gBAChF,2CAA2C,CAC9C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/identity/withCredentialRetry.js

@@ -0,0 +1,98 @@
+/**
+ * withCredentialRetry — CredentialProvider decorator that retries transient
+ * `getCredential` failures with exponential backoff.
+ *
+ * Pattern: Decorator (GoF) — the credential twin of `withRetry` (resilience)
+ *          for LLM providers. SAME option vocabulary (`maxAttempts` /
+ *          `initialDelayMs` / `backoffFactor` / `maxDelayMs` / `shouldRetry` /
+ *          `onRetry`) and the SAME default transience policy (the shared
+ *          `defaultShouldRetry`: skip AbortError + 4xx except 429; retry 5xx,
+ *          network errors, unknown shapes). AgentCore's documented transient
+ *          errors (`InternalServerException` 500, `ThrottlingException` 429)
+ *          retry out of the box.
+ *
+ * Why a decorator and not a reliability rule: the rules-based reliability
+ * subsystem (`Agent.create(...).reliability({...})`) is LLM-call-scoped —
+ * `ReliabilityScope` carries `request: LLMRequest` and the gate chart loops
+ * around the CallLLM stage with provider failover. Credential resolution
+ * happens at a different boundary (the tool-dispatch loop, declare-and-push);
+ * promoting it to a chart-level gate is the deferred `sf-credential` node.
+ * Until that exists, retry is a TRANSPORT property of the credential provider
+ * — exactly like `withRetry` is for LLM transports.
+ *
+ * Semantics:
+ *   • Only THROWN errors retry. Both result branches return immediately:
+ *     `issued` is success; `authorization-required` is a HUMAN flow (3LO
+ *     consent), not a transient fault — retrying it would hammer the IdP
+ *     without the user having authorized anything.
+ *   • After retries exhaust, the LAST error is rethrown — the call site
+ *     behaves byte-identically to an unwrapped provider (fail-closed:
+ *     `agentfootprint.credential.failed` emit + error tool result; the tool
+ *     does NOT run).
+ *   • Visibility: the agent trace brackets the whole retried resolution with
+ *     `credential.requested` → `credential.acquired` / `credential.failed`.
+ *     Per-attempt visibility is consumer-wired via `onRetry` — the established
+ *     decorator contract (same as `withRetry`; the `agentfootprint.error.*`
+ *     event family is reserved for these decorators, see events/payloads.ts).
+ *     No new event types.
+ *
+ * @example
+ *   import { agentCoreIdentity, withCredentialRetry } from 'agentfootprint/identity';
+ *
+ *   const credentials = withCredentialRetry(agentCoreIdentity({ region: 'us-east-1' }), {
+ *     maxAttempts: 3,
+ *     onRetry: (err, attempt, ms) => console.warn(`credential retry ${attempt} in ${ms}ms`, err),
+ *   });
+ *   const agent = Agent.create({ provider, model, credentials }).tools([...]).build();
+ */
+import { defaultShouldRetry } from '../resilience/withRetry.js';
+/**
+ * Wrap a {@link CredentialProvider} so transient `getCredential` failures
+ * retry with exponential backoff before failing closed.
+ *
+ * Defaults mirror `withRetry`: 3 attempts total, 200ms → 400ms → 800ms
+ * backoff capped at 10s, retry on 5xx/429/network/unknown, never on
+ * AbortError or other 4xx.
+ */
+export function withCredentialRetry(provider, options = {}) {
+    const maxAttempts = Math.max(1, options.maxAttempts ?? 3);
+    const initialDelayMs = options.initialDelayMs ?? 200;
+    const backoffFactor = options.backoffFactor ?? 2;
+    const maxDelayMs = options.maxDelayMs ?? 10_000;
+    const shouldRetry = options.shouldRetry ?? defaultShouldRetry;
+    const onRetry = options.onRetry;
+    return {
+        id: `${provider.id}+retry`,
+        async getCredential(req) {
+            let lastError;
+            for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+                try {
+                    // Both result branches return as-is (same object — the wrapper never
+                    // clones or serializes the credential): `issued` is success;
+                    // `authorization-required` is consent, not a fault — never retried.
+                    return await provider.getCredential(req);
+                }
+                catch (err) {
+                    lastError = err;
+                    if (attempt >= maxAttempts || !shouldRetry(err, attempt)) {
+                        throw err;
+                    }
+                    const delay = Math.min(maxDelayMs, initialDelayMs * Math.pow(backoffFactor, attempt - 1));
+                    onRetry?.(err, attempt + 1, delay);
+                    await sleep(delay);
+                }
+            }
+            // Unreachable — the last attempt either returned or threw above.
+            throw lastError;
+        },
+    };
+}
+// `CredentialRequest` carries no AbortSignal (port contract), so this sleep is
+// the signal-less twin of withRetry's. If the port ever grows a signal, mirror
+// withRetry's abort-aware sleep here.
+function sleep(ms) {
+    if (ms <= 0)
+        return Promise.resolve();
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=withCredentialRetry.js.map

package/dist/esm/identity/withCredentialRetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"withCredentialRetry.js","sourceRoot":"","sources":["../../../src/identity/withCredentialRetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,kBAAkB,EAAyB,MAAM,4BAA4B,CAAC;AAUvF;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAA4B,EAC5B,UAAsC,EAAE;IAExC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,OAAO;QACL,EAAE,EAAE,GAAG,QAAQ,CAAC,EAAE,QAAQ;QAC1B,KAAK,CAAC,aAAa,CAAC,GAAsB;YACxC,IAAI,SAAkB,CAAC;YACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,IAAI,CAAC;oBACH,qEAAqE;oBACrE,6DAA6D;oBAC7D,oEAAoE;oBACpE,OAAO,MAAM,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC3C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS,GAAG,GAAG,CAAC;oBAChB,IAAI,OAAO,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;wBACzD,MAAM,GAAG,CAAC;oBACZ,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC1F,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;oBACnC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,iEAAiE;YACjE,MAAM,SAAS,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,+EAA+E;AAC/E,sCAAsC;AACtC,SAAS,KAAK,CAAC,EAAU;IACvB,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/esm/identity.js

@@ -26,5 +26,6 @@
 export { isCredentialIssued, unconfiguredCredentialProvider } from './identity/types.js';
 export { bearer, apiKey, basic, headers, } from './identity/kinds.js';
 export { staticTokens } from './identity/staticTokens.js';
+export { withCredentialRetry, } from './identity/withCredentialRetry.js';
 export { agentCoreIdentity, } from './adapters/identity/agentcore.js';
 //# sourceMappingURL=identity.js.map

package/dist/esm/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAWH,OAAO,EAAE,kBAAkB,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EACL,MAAM,EACN,MAAM,EACN,KAAK,EACL,OAAO,GAKR,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAA4B,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,iBAAiB,GAIlB,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAWH,OAAO,EAAE,kBAAkB,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EACL,MAAM,EACN,MAAM,EACN,KAAK,EACL,OAAO,GAKR,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAA4B,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,mBAAmB,GAEpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iBAAiB,GAIlB,MAAM,kCAAkC,CAAC"}

package/dist/esm/resilience/withRetry.js

@@ -75,8 +75,13 @@ export function withRetry(provider, options = {}) {
  * surface HTTP status should set `error.status` for this to work; the
  * predicate falls back to retrying when status is unknown (better to
  * retry once than to surface a flaky failure).
+ *
+ * Exported (module-level, NOT on the resilience barrel) as the single
+ * source of truth for the decorators' transience policy — shared by
+ * `withCredentialRetry` (identity) so "what counts as transient" never
+ * drifts between the LLM and credential retry wrappers.
  */
-function defaultShouldRetry(err, _attempt) {
+export function defaultShouldRetry(err, _attempt) {
     if (isAbortError(err))
         return false;
     const status = err?.status ??

package/dist/esm/resilience/withRetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"withRetry.js","sourceRoot":"","sources":["../../../src/resilience/withRetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA2BH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CAAC,QAAqB,EAAE,UAA4B,EAAE;IAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,QAAQ;QAC9B,KAAK,CAAC,QAAQ,CAAC,GAAe;YAC5B,IAAI,SAAkB,CAAC;YACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,IAAI,CAAC;oBACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACtC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS,GAAG,GAAG,CAAC;oBAChB,IAAI,OAAO,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;wBACzD,MAAM,GAAG,CAAC;oBACZ,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC1F,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;oBACnC,MAAM,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;YACD,6DAA6D;YAC7D,MAAM,SAAS,CAAC;QAClB,CAAC;KACF,CAAC;IAEF,kEAAkE;IAClE,oEAAoE;IACpE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,2DAA2D;QAC3D,oEAAoE;QACpE,OAAO,CAAC,MAAM,GAAG,CAAC,GAAe,EAA2B,EAAE,CAAC,QAAQ,CAAC,MAAO,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,uEAAuE;AAEvE;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,GAAY,EAAE,QAAgB;IACxD,IAAI,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,MAAM,GACT,GAAgD,EAAE,MAAM;QACxD,GAA+B,EAAE,UAAU,CAAC;IAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QAChE,iEAAiE;QACjE,OAAO,MAAM,KAAK,GAAG,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAAuC,CAAC;IAClD,OAAO,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;AAC3D,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,EAAE,CAAC,CAAC;YACjB,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"withRetry.js","sourceRoot":"","sources":["../../../src/resilience/withRetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA6BH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CAAC,QAAqB,EAAE,UAA4B,EAAE;IAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,QAAQ;QAC9B,KAAK,CAAC,QAAQ,CAAC,GAAe;YAC5B,IAAI,SAAkB,CAAC;YACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,IAAI,CAAC;oBACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACtC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS,GAAG,GAAG,CAAC;oBAChB,IAAI,OAAO,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;wBACzD,MAAM,GAAG,CAAC;oBACZ,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC1F,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;oBACnC,MAAM,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;YACD,6DAA6D;YAC7D,MAAM,SAAS,CAAC;QAClB,CAAC;KACF,CAAC;IAEF,kEAAkE;IAClE,oEAAoE;IACpE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,2DAA2D;QAC3D,oEAAoE;QACpE,OAAO,CAAC,MAAM,GAAG,CAAC,GAAe,EAA2B,EAAE,CAAC,QAAQ,CAAC,MAAO,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,QAAgB;IAC/D,IAAI,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,MAAM,GACT,GAAgD,EAAE,MAAM;QACxD,GAA+B,EAAE,UAAU,CAAC;IAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QAChE,iEAAiE;QACjE,OAAO,MAAM,KAAK,GAAG,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAAuC,CAAC;IAClD,OAAO,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;AAC3D,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,EAAE,CAAC,CAAC;YACjB,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/identity/withCredentialRetry.js

@@ -0,0 +1,102 @@
+"use strict";
+/**
+ * withCredentialRetry — CredentialProvider decorator that retries transient
+ * `getCredential` failures with exponential backoff.
+ *
+ * Pattern: Decorator (GoF) — the credential twin of `withRetry` (resilience)
+ *          for LLM providers. SAME option vocabulary (`maxAttempts` /
+ *          `initialDelayMs` / `backoffFactor` / `maxDelayMs` / `shouldRetry` /
+ *          `onRetry`) and the SAME default transience policy (the shared
+ *          `defaultShouldRetry`: skip AbortError + 4xx except 429; retry 5xx,
+ *          network errors, unknown shapes). AgentCore's documented transient
+ *          errors (`InternalServerException` 500, `ThrottlingException` 429)
+ *          retry out of the box.
+ *
+ * Why a decorator and not a reliability rule: the rules-based reliability
+ * subsystem (`Agent.create(...).reliability({...})`) is LLM-call-scoped —
+ * `ReliabilityScope` carries `request: LLMRequest` and the gate chart loops
+ * around the CallLLM stage with provider failover. Credential resolution
+ * happens at a different boundary (the tool-dispatch loop, declare-and-push);
+ * promoting it to a chart-level gate is the deferred `sf-credential` node.
+ * Until that exists, retry is a TRANSPORT property of the credential provider
+ * — exactly like `withRetry` is for LLM transports.
+ *
+ * Semantics:
+ *   • Only THROWN errors retry. Both result branches return immediately:
+ *     `issued` is success; `authorization-required` is a HUMAN flow (3LO
+ *     consent), not a transient fault — retrying it would hammer the IdP
+ *     without the user having authorized anything.
+ *   • After retries exhaust, the LAST error is rethrown — the call site
+ *     behaves byte-identically to an unwrapped provider (fail-closed:
+ *     `agentfootprint.credential.failed` emit + error tool result; the tool
+ *     does NOT run).
+ *   • Visibility: the agent trace brackets the whole retried resolution with
+ *     `credential.requested` → `credential.acquired` / `credential.failed`.
+ *     Per-attempt visibility is consumer-wired via `onRetry` — the established
+ *     decorator contract (same as `withRetry`; the `agentfootprint.error.*`
+ *     event family is reserved for these decorators, see events/payloads.ts).
+ *     No new event types.
+ *
+ * @example
+ *   import { agentCoreIdentity, withCredentialRetry } from 'agentfootprint/identity';
+ *
+ *   const credentials = withCredentialRetry(agentCoreIdentity({ region: 'us-east-1' }), {
+ *     maxAttempts: 3,
+ *     onRetry: (err, attempt, ms) => console.warn(`credential retry ${attempt} in ${ms}ms`, err),
+ *   });
+ *   const agent = Agent.create({ provider, model, credentials }).tools([...]).build();
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withCredentialRetry = void 0;
+const withRetry_js_1 = require("../resilience/withRetry.js");
+/**
+ * Wrap a {@link CredentialProvider} so transient `getCredential` failures
+ * retry with exponential backoff before failing closed.
+ *
+ * Defaults mirror `withRetry`: 3 attempts total, 200ms → 400ms → 800ms
+ * backoff capped at 10s, retry on 5xx/429/network/unknown, never on
+ * AbortError or other 4xx.
+ */
+function withCredentialRetry(provider, options = {}) {
+    const maxAttempts = Math.max(1, options.maxAttempts ?? 3);
+    const initialDelayMs = options.initialDelayMs ?? 200;
+    const backoffFactor = options.backoffFactor ?? 2;
+    const maxDelayMs = options.maxDelayMs ?? 10_000;
+    const shouldRetry = options.shouldRetry ?? withRetry_js_1.defaultShouldRetry;
+    const onRetry = options.onRetry;
+    return {
+        id: `${provider.id}+retry`,
+        async getCredential(req) {
+            let lastError;
+            for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+                try {
+                    // Both result branches return as-is (same object — the wrapper never
+                    // clones or serializes the credential): `issued` is success;
+                    // `authorization-required` is consent, not a fault — never retried.
+                    return await provider.getCredential(req);
+                }
+                catch (err) {
+                    lastError = err;
+                    if (attempt >= maxAttempts || !shouldRetry(err, attempt)) {
+                        throw err;
+                    }
+                    const delay = Math.min(maxDelayMs, initialDelayMs * Math.pow(backoffFactor, attempt - 1));
+                    onRetry?.(err, attempt + 1, delay);
+                    await sleep(delay);
+                }
+            }
+            // Unreachable — the last attempt either returned or threw above.
+            throw lastError;
+        },
+    };
+}
+exports.withCredentialRetry = withCredentialRetry;
+// `CredentialRequest` carries no AbortSignal (port contract), so this sleep is
+// the signal-less twin of withRetry's. If the port ever grows a signal, mirror
+// withRetry's abort-aware sleep here.
+function sleep(ms) {
+    if (ms <= 0)
+        return Promise.resolve();
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=withCredentialRetry.js.map

package/dist/identity/withCredentialRetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"withCredentialRetry.js","sourceRoot":"","sources":["../../src/identity/withCredentialRetry.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;;;AAEH,6DAAuF;AAUvF;;;;;;;GAOG;AACH,SAAgB,mBAAmB,CACjC,QAA4B,EAC5B,UAAsC,EAAE;IAExC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,iCAAkB,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,OAAO;QACL,EAAE,EAAE,GAAG,QAAQ,CAAC,EAAE,QAAQ;QAC1B,KAAK,CAAC,aAAa,CAAC,GAAsB;YACxC,IAAI,SAAkB,CAAC;YACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,IAAI,CAAC;oBACH,qEAAqE;oBACrE,6DAA6D;oBAC7D,oEAAoE;oBACpE,OAAO,MAAM,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC3C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS,GAAG,GAAG,CAAC;oBAChB,IAAI,OAAO,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;wBACzD,MAAM,GAAG,CAAC;oBACZ,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC1F,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;oBACnC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,iEAAiE;YACjE,MAAM,SAAS,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAnCD,kDAmCC;AAED,+EAA+E;AAC/E,+EAA+E;AAC/E,sCAAsC;AACtC,SAAS,KAAK,CAAC,EAAU;IACvB,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/identity.js

@@ -25,7 +25,7 @@
  * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.agentCoreIdentity = exports.staticTokens = exports.headers = exports.basic = exports.apiKey = exports.bearer = exports.unconfiguredCredentialProvider = exports.isCredentialIssued = void 0;
+exports.agentCoreIdentity = exports.withCredentialRetry = exports.staticTokens = exports.headers = exports.basic = exports.apiKey = exports.bearer = exports.unconfiguredCredentialProvider = exports.isCredentialIssued = void 0;
 var types_js_1 = require("./identity/types.js");
 Object.defineProperty(exports, "isCredentialIssued", { enumerable: true, get: function () { return types_js_1.isCredentialIssued; } });
 Object.defineProperty(exports, "unconfiguredCredentialProvider", { enumerable: true, get: function () { return types_js_1.unconfiguredCredentialProvider; } });
@@ -36,6 +36,8 @@ Object.defineProperty(exports, "basic", { enumerable: true, get: function () { r
 Object.defineProperty(exports, "headers", { enumerable: true, get: function () { return kinds_js_1.headers; } });
 var staticTokens_js_1 = require("./identity/staticTokens.js");
 Object.defineProperty(exports, "staticTokens", { enumerable: true, get: function () { return staticTokens_js_1.staticTokens; } });
+var withCredentialRetry_js_1 = require("./identity/withCredentialRetry.js");
+Object.defineProperty(exports, "withCredentialRetry", { enumerable: true, get: function () { return withCredentialRetry_js_1.withCredentialRetry; } });
 var agentcore_js_1 = require("./adapters/identity/agentcore.js");
 Object.defineProperty(exports, "agentCoreIdentity", { enumerable: true, get: function () { return agentcore_js_1.agentCoreIdentity; } });
 //# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;;;AAWH,gDAAyF;AAAhF,8GAAA,kBAAkB,OAAA;AAAE,0HAAA,8BAA8B,OAAA;AAC3D,gDAS6B;AAR3B,kGAAA,MAAM,OAAA;AACN,kGAAA,MAAM,OAAA;AACN,iGAAA,KAAK,OAAA;AACL,mGAAA,OAAO,OAAA;AAMT,8DAAoF;AAA3E,+GAAA,YAAY,OAAA;AACrB,iEAK0C;AAJxC,iHAAA,iBAAiB,OAAA"}
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;;;AAWH,gDAAyF;AAAhF,8GAAA,kBAAkB,OAAA;AAAE,0HAAA,8BAA8B,OAAA;AAC3D,gDAS6B;AAR3B,kGAAA,MAAM,OAAA;AACN,kGAAA,MAAM,OAAA;AACN,iGAAA,KAAK,OAAA;AACL,mGAAA,OAAO,OAAA;AAMT,8DAAoF;AAA3E,+GAAA,YAAY,OAAA;AACrB,4EAG2C;AAFzC,6HAAA,mBAAmB,OAAA;AAGrB,iEAK0C;AAJxC,iHAAA,iBAAiB,OAAA"}

package/dist/resilience/withRetry.js

@@ -20,7 +20,7 @@
  *                  network errors, and unknown shapes.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.withRetry = void 0;
+exports.defaultShouldRetry = exports.withRetry = void 0;
 /**
  * Wrap a provider so its `complete()` retries transient failures.
  *
@@ -79,6 +79,11 @@ exports.withRetry = withRetry;
  * surface HTTP status should set `error.status` for this to work; the
  * predicate falls back to retrying when status is unknown (better to
  * retry once than to surface a flaky failure).
+ *
+ * Exported (module-level, NOT on the resilience barrel) as the single
+ * source of truth for the decorators' transience policy — shared by
+ * `withCredentialRetry` (identity) so "what counts as transient" never
+ * drifts between the LLM and credential retry wrappers.
  */
 function defaultShouldRetry(err, _attempt) {
     if (isAbortError(err))
@@ -91,6 +96,7 @@ function defaultShouldRetry(err, _attempt) {
     }
     return true;
 }
+exports.defaultShouldRetry = defaultShouldRetry;
 function isAbortError(err) {
     if (!err || typeof err !== 'object')
         return false;

package/dist/resilience/withRetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"withRetry.js","sourceRoot":"","sources":["../../src/resilience/withRetry.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AA2BH;;;;;;;;;;;GAWG;AACH,SAAgB,SAAS,CAAC,QAAqB,EAAE,UAA4B,EAAE;IAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,QAAQ;QAC9B,KAAK,CAAC,QAAQ,CAAC,GAAe;YAC5B,IAAI,SAAkB,CAAC;YACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,IAAI,CAAC;oBACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACtC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS,GAAG,GAAG,CAAC;oBAChB,IAAI,OAAO,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;wBACzD,MAAM,GAAG,CAAC;oBACZ,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC1F,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;oBACnC,MAAM,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;YACD,6DAA6D;YAC7D,MAAM,SAAS,CAAC;QAClB,CAAC;KACF,CAAC;IAEF,kEAAkE;IAClE,oEAAoE;IACpE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,2DAA2D;QAC3D,oEAAoE;QACpE,OAAO,CAAC,MAAM,GAAG,CAAC,GAAe,EAA2B,EAAE,CAAC,QAAQ,CAAC,MAAO,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAvCD,8BAuCC;AAED,uEAAuE;AAEvE;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,GAAY,EAAE,QAAgB;IACxD,IAAI,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,MAAM,GACT,GAAgD,EAAE,MAAM;QACxD,GAA+B,EAAE,UAAU,CAAC;IAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QAChE,iEAAiE;QACjE,OAAO,MAAM,KAAK,GAAG,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAAuC,CAAC;IAClD,OAAO,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;AAC3D,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,EAAE,CAAC,CAAC;YACjB,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"withRetry.js","sourceRoot":"","sources":["../../src/resilience/withRetry.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AA6BH;;;;;;;;;;;GAWG;AACH,SAAgB,SAAS,CAAC,QAAqB,EAAE,UAA4B,EAAE;IAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,QAAQ;QAC9B,KAAK,CAAC,QAAQ,CAAC,GAAe;YAC5B,IAAI,SAAkB,CAAC;YACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,IAAI,CAAC;oBACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACtC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS,GAAG,GAAG,CAAC;oBAChB,IAAI,OAAO,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;wBACzD,MAAM,GAAG,CAAC;oBACZ,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC1F,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;oBACnC,MAAM,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;YACD,6DAA6D;YAC7D,MAAM,SAAS,CAAC;QAClB,CAAC;KACF,CAAC;IAEF,kEAAkE;IAClE,oEAAoE;IACpE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,2DAA2D;QAC3D,oEAAoE;QACpE,OAAO,CAAC,MAAM,GAAG,CAAC,GAAe,EAA2B,EAAE,CAAC,QAAQ,CAAC,MAAO,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAvCD,8BAuCC;AAED,uEAAuE;AAEvE;;;;;;;;;;;GAWG;AACH,SAAgB,kBAAkB,CAAC,GAAY,EAAE,QAAgB;IAC/D,IAAI,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,MAAM,GACT,GAAgD,EAAE,MAAM;QACxD,GAA+B,EAAE,UAAU,CAAC;IAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QAChE,iEAAiE;QACjE,OAAO,MAAM,KAAK,GAAG,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAVD,gDAUC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAAuC,CAAC;IAClD,OAAO,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;AAC3D,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,EAAE,CAAC,CAAC;YACjB,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/types/adapters/identity/agentcore.d.ts

@@ -9,12 +9,30 @@
  * `GetResourceOauth2Token` (the SDK's `@requires_access_token` underneath):
  *   - request.mode 'machine' → `M2M`; 'user' → `USER_FEDERATION`
  *   - request.service        → the configured OAuth2 credential-provider name
+ *   - request.identity       → (per-request workload identity scoping; see below)
  *   - a returned access token → `{ status: 'issued', credential: bearer(token) }`
  *   - a returned auth URL     → `{ status: 'authorization-required' }` (3LO consent)
  *
  * The token vault + refresh-token handling live in AgentCore, so repeat calls
  * usually return a token directly (no consent round-trip).
  *
+ * **Per-request identity forwarding (workload identity scoping).**
+ * `GetResourceOauth2Token` carries NO user/tenant field — in AgentCore the
+ * user identity is bound EARLIER, at workload-token acquisition:
+ * `GetWorkloadAccessTokenForUserId(workloadName, userId)` returns a workload
+ * access token scoped to that user, and AgentCore keys its token vault + 3LO
+ * grants per (workload, user). So this adapter forwards `req.identity` (the
+ * `runIdentity` that the agent threads through `getCredential`) by resolving a
+ * per-user workload token first, then vending with it. Engages only when ALL of:
+ *   - `req.mode === 'user'` (USER_FEDERATION — M2M is the workload's own identity),
+ *   - a userId derives from `req.identity` (default `identity.principal`;
+ *     override via `userIdFor`), and
+ *   - `options.workloadName` is configured (the opt-in).
+ * Otherwise the static `options.workloadIdentityToken` flows exactly as before.
+ * `tenant` has no native AgentCore field and is NOT forwarded by default —
+ * tenant isolation derives from the workload identity itself (per-tenant
+ * workloads), or encode it via `userIdFor` (e.g. `${tenant}:${principal}`).
+ *
  * Pattern: Adapter (GoF) + lazy peer-dep load — the AWS SDK is required only when
  * `getCredential` first runs (or never, if you inject `_client`). NOTE: confirm
  * the SDK command/field names against your installed
@@ -31,7 +49,8 @@ export interface AgentCoreOauthResponse {
     /** Unix seconds. */
     readonly expiresAt?: number;
 }
-/** The minimal client surface the adapter calls — wraps `GetResourceOauth2Token`.
+/** The minimal client surface the adapter calls — wraps `GetResourceOauth2Token`
+ *  and (for per-user workload scoping) `GetWorkloadAccessTokenForUserId`.
  *  The real AWS SDK client is adapted to this; tests inject a fake via `_client`. */
 export interface AgentCoreIdentityClientLike {
     getResourceOauth2Token(input: {
@@ -41,12 +60,37 @@ export interface AgentCoreIdentityClientLike {
         readonly forceAuthentication: boolean;
         readonly workloadIdentityToken?: string;
     }): Promise<AgentCoreOauthResponse>;
+    /** Optional — required only when `workloadName` is configured. Exchanges
+     *  (workloadName, userId) for a USER-SCOPED workload access token; AgentCore
+     *  keys its token vault + 3LO grants per (workload, user). */
+    getWorkloadAccessTokenForUserId?(input: {
+        readonly workloadName: string;
+        readonly userId: string;
+    }): Promise<{
+        readonly workloadAccessToken?: string;
+    }>;
 }
 export interface AgentCoreIdentityOptions {
     readonly region?: string;
     /** The agent's workload access token (AgentCore Runtime injects one in-container;
-     *  supply it explicitly when running elsewhere). */
+     *  supply it explicitly when running elsewhere). Used as-is unless a per-user
+     *  workload token is resolved (see `workloadName`). */
     readonly workloadIdentityToken?: string;
+    /** The AgentCore workload identity name — the OPT-IN for per-request identity
+     *  scoping. When set, `mode: 'user'` requests carrying `req.identity` resolve a
+     *  per-user workload access token via `GetWorkloadAccessTokenForUserId(workloadName,
+     *  userId)` before vending, so AgentCore's token vault + 3LO grants are keyed per
+     *  (workload, user) instead of per workload. Omit → today's static-token behavior. */
+    readonly workloadName?: string;
+    /** Map `req.identity` → the AgentCore `userId`. Default: `identity.principal`.
+     *  `tenant` has no native AgentCore field — encode it here if you need
+     *  tenant-scoped vault entries (e.g. ``({ tenant, principal }) =>
+     *  tenant && principal ? `${tenant}:${principal}` : principal``). Return
+     *  `undefined` to skip per-user scoping for that request. */
+    readonly userIdFor?: (identity: {
+        readonly principal?: string;
+        readonly tenant?: string;
+    }) => string | undefined;
     /** Stable provider id (default 'agentcore-identity'). */
     readonly id?: string;
     /** Test seam — inject a client implementing {@link AgentCoreIdentityClientLike}. */

package/dist/types/adapters/identity/agentcore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentcore.d.ts","sourceRoot":"","sources":["../../../../src/adapters/identity/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,KAAK,EACV,kBAAkB,EAGnB,MAAM,yBAAyB,CAAC;AAGjC,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB;IACpB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;qFACqF;AACrF,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB,CAAC,KAAK,EAAE;QAC5B,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAC;QAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,UAAU,EAAE,KAAK,GAAG,iBAAiB,CAAC;QAC/C,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;QACtC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KACzC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;wDACoD;IACpD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,yDAAyD;IACzD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;CAChD;AA8BD,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,kBAAkB,CA2C5F"}
+{"version":3,"file":"agentcore.d.ts","sourceRoot":"","sources":["../../../../src/adapters/identity/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,KAAK,EACV,kBAAkB,EAGnB,MAAM,yBAAyB,CAAC;AAGjC,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB;IACpB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;qFAEqF;AACrF,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB,CAAC,KAAK,EAAE;QAC5B,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAC;QAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,UAAU,EAAE,KAAK,GAAG,iBAAiB,CAAC;QAC/C,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;QACtC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KACzC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC;;kEAE8D;IAC9D,+BAA+B,CAAC,CAAC,KAAK,EAAE;QACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;2DAEuD;IACvD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;0FAIsF;IACtF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;iEAI6D;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE;QAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;CAChD;AAwCD,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,kBAAkB,CAuE5F"}

package/dist/types/identity/withCredentialRetry.d.ts

@@ -0,0 +1,65 @@
+/**
+ * withCredentialRetry — CredentialProvider decorator that retries transient
+ * `getCredential` failures with exponential backoff.
+ *
+ * Pattern: Decorator (GoF) — the credential twin of `withRetry` (resilience)
+ *          for LLM providers. SAME option vocabulary (`maxAttempts` /
+ *          `initialDelayMs` / `backoffFactor` / `maxDelayMs` / `shouldRetry` /
+ *          `onRetry`) and the SAME default transience policy (the shared
+ *          `defaultShouldRetry`: skip AbortError + 4xx except 429; retry 5xx,
+ *          network errors, unknown shapes). AgentCore's documented transient
+ *          errors (`InternalServerException` 500, `ThrottlingException` 429)
+ *          retry out of the box.
+ *
+ * Why a decorator and not a reliability rule: the rules-based reliability
+ * subsystem (`Agent.create(...).reliability({...})`) is LLM-call-scoped —
+ * `ReliabilityScope` carries `request: LLMRequest` and the gate chart loops
+ * around the CallLLM stage with provider failover. Credential resolution
+ * happens at a different boundary (the tool-dispatch loop, declare-and-push);
+ * promoting it to a chart-level gate is the deferred `sf-credential` node.
+ * Until that exists, retry is a TRANSPORT property of the credential provider
+ * — exactly like `withRetry` is for LLM transports.
+ *
+ * Semantics:
+ *   • Only THROWN errors retry. Both result branches return immediately:
+ *     `issued` is success; `authorization-required` is a HUMAN flow (3LO
+ *     consent), not a transient fault — retrying it would hammer the IdP
+ *     without the user having authorized anything.
+ *   • After retries exhaust, the LAST error is rethrown — the call site
+ *     behaves byte-identically to an unwrapped provider (fail-closed:
+ *     `agentfootprint.credential.failed` emit + error tool result; the tool
+ *     does NOT run).
+ *   • Visibility: the agent trace brackets the whole retried resolution with
+ *     `credential.requested` → `credential.acquired` / `credential.failed`.
+ *     Per-attempt visibility is consumer-wired via `onRetry` — the established
+ *     decorator contract (same as `withRetry`; the `agentfootprint.error.*`
+ *     event family is reserved for these decorators, see events/payloads.ts).
+ *     No new event types.
+ *
+ * @example
+ *   import { agentCoreIdentity, withCredentialRetry } from 'agentfootprint/identity';
+ *
+ *   const credentials = withCredentialRetry(agentCoreIdentity({ region: 'us-east-1' }), {
+ *     maxAttempts: 3,
+ *     onRetry: (err, attempt, ms) => console.warn(`credential retry ${attempt} in ${ms}ms`, err),
+ *   });
+ *   const agent = Agent.create({ provider, model, credentials }).tools([...]).build();
+ */
+import { type WithRetryOptions } from '../resilience/withRetry.js';
+import type { CredentialProvider } from './types.js';
+/**
+ * Same vocabulary as the LLM-provider `withRetry` — one retry language across
+ * both decorators. `shouldRetry` sees only THROWN errors (never an
+ * `authorization-required` result, which returns immediately).
+ */
+export type WithCredentialRetryOptions = WithRetryOptions;
+/**
+ * Wrap a {@link CredentialProvider} so transient `getCredential` failures
+ * retry with exponential backoff before failing closed.
+ *
+ * Defaults mirror `withRetry`: 3 attempts total, 200ms → 400ms → 800ms
+ * backoff capped at 10s, retry on 5xx/429/network/unknown, never on
+ * AbortError or other 4xx.
+ */
+export declare function withCredentialRetry(provider: CredentialProvider, options?: WithCredentialRetryOptions): CredentialProvider;
+//# sourceMappingURL=withCredentialRetry.d.ts.map

package/dist/types/identity/withCredentialRetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"withCredentialRetry.d.ts","sourceRoot":"","sources":["../../../src/identity/withCredentialRetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACvF,OAAO,KAAK,EAAE,kBAAkB,EAAuC,MAAM,YAAY,CAAC;AAE1F;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;AAE1D;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,GAAE,0BAA+B,GACvC,kBAAkB,CAgCpB"}

package/dist/types/identity.d.ts

@@ -27,5 +27,6 @@ export type { Credential, CredentialProvider, CredentialRequest, CredentialResul
 export { isCredentialIssued, unconfiguredCredentialProvider } from './identity/types.js';
 export { bearer, apiKey, basic, headers, type BearerCredential, type ApiKeyCredential, type BasicCredential, type HeadersCredential, } from './identity/kinds.js';
 export { staticTokens, type StaticTokensOptions } from './identity/staticTokens.js';
+export { withCredentialRetry, type WithCredentialRetryOptions, } from './identity/withCredentialRetry.js';
 export { agentCoreIdentity, type AgentCoreIdentityOptions, type AgentCoreIdentityClientLike, type AgentCoreOauthResponse, } from './adapters/identity/agentcore.js';
 //# sourceMappingURL=identity.d.ts.map

package/dist/types/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,YAAY,EACV,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,+BAA+B,EAC/B,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EACL,MAAM,EACN,MAAM,EACN,KAAK,EACL,OAAO,EACP,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,GAC5B,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,YAAY,EACV,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,+BAA+B,EAC/B,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EACL,MAAM,EACN,MAAM,EACN,KAAK,EACL,OAAO,EACP,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,GAChC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,GAC5B,MAAM,kCAAkC,CAAC"}

package/dist/types/resilience/withRetry.d.ts

@@ -35,9 +35,11 @@ export interface WithRetryOptions {
      */
     readonly shouldRetry?: (error: unknown, attempt: number) => boolean;
     /**
-     * Hook invoked before each retry. Useful for logging or
-     * `agentfootprint.resilience.retry` emit. Receives the attempt
-     * number that's about to start (so attempt 2 = first retry).
+     * Hook invoked before each retry. Useful for logging or an
+     * `agentfootprint.error.retried` emit (the event family reserved for
+     * the standalone provider decorators — see events/payloads.ts).
+     * Receives the attempt number that's about to start (so attempt 2 =
+     * first retry).
      */
     readonly onRetry?: (error: unknown, attempt: number, delayMs: number) => void;
 }
@@ -54,4 +56,17 @@ export interface WithRetryOptions {
  *   });
  */
 export declare function withRetry(provider: LLMProvider, options?: WithRetryOptions): LLMProvider;
+/**
+ * Skip retry for AbortError + 4xx-class errors. Retry on everything
+ * else (network errors, 5xx, unknown shapes). Provider adapters that
+ * surface HTTP status should set `error.status` for this to work; the
+ * predicate falls back to retrying when status is unknown (better to
+ * retry once than to surface a flaky failure).
+ *
+ * Exported (module-level, NOT on the resilience barrel) as the single
+ * source of truth for the decorators' transience policy — shared by
+ * `withCredentialRetry` (identity) so "what counts as transient" never
+ * drifts between the LLM and credential retry wrappers.
+ */
+export declare function defaultShouldRetry(err: unknown, _attempt: number): boolean;
 //# sourceMappingURL=withRetry.d.ts.map

package/dist/types/resilience/withRetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"withRetry.d.ts","sourceRoot":"","sources":["../../../src/resilience/withRetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAY,WAAW,EAA2B,MAAM,sBAAsB,CAAC;AAE3F,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,sEAAsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,+CAA+C;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACpE;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,GAAE,gBAAqB,GAAG,WAAW,CAuC5F"}
+{"version":3,"file":"withRetry.d.ts","sourceRoot":"","sources":["../../../src/resilience/withRetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAY,WAAW,EAA2B,MAAM,sBAAsB,CAAC;AAE3F,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,sEAAsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,+CAA+C;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACpE;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,GAAE,gBAAqB,GAAG,WAAW,CAuC5F;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAU1E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentfootprint",
-  "version": "6.21.0",
+  "version": "6.22.0",
   "description": "The explainable agent framework — build AI agents you can explain, audit, and trust. Built on footprintjs.",
   "license": "MIT",
   "author": "Sanjay Krishna Anbalagan",