agentfootprint 7.14.0 → 7.15.0

package/dist/hosting-providers.js

@@ -0,0 +1,57 @@
+"use strict";
+/**
+ * agentfootprint/hosting-providers — adapters for the two hosting ports.
+ *
+ *   agentfootprint/hosting            ← the PORTS (`AgentHost`, `SessionLifecycle`),
+ *                                       the composer, and the local adapters
+ *   agentfootprint/hosting-providers  ← adapters for somewhere you deploy (this file)
+ *
+ * Same split as `agentfootprint/memory` ↔ `agentfootprint/memory-providers`, and
+ * for the same reason. `agentfootprint/hosting` promises that not one field,
+ * name or assumption in it comes from any cloud, and a test greps its sources
+ * for vendor names to keep that honest — including the barrel. So the cloud
+ * adapters get their own subpath, and the port subpath stays a file you can
+ * read without learning anybody's product names.
+ *
+ * One subpath that grows: an adapter for the next runtime lands here beside
+ * this one rather than minting `agentfootprint/hosting-<vendor>`.
+ *
+ * ── What ships here ──────────────────────────────────────────────────────────
+ *   • `agentCoreRuntimeHost({ port?, hostname?, busy? })` — an `AgentHost` for
+ *     AWS Bedrock AgentCore Runtime's container contract: `POST /invocations`,
+ *     `GET /ping`, port 8080, and the conversation id read from the
+ *     `X-Amzn-Bedrock-AgentCore-Runtime-Session-Id` header.
+ *   • `agentCoreSessions({ store })` — a `SessionLifecycle` whose checkpoint
+ *     home you choose at construction: a JSON file in the runtime's own session
+ *     storage (survives a stop/resume, needs no SDK), or one AgentCore Memory
+ *     event per persist (outlives the session).
+ *
+ * ── How much of this is verified ─────────────────────────────────────────────
+ * `agentCoreRuntimeHost` is plain HTTP with no SDK on its path, and it passes
+ * the same host conformance suite as `nodeHost` over a real socket — that is
+ * real verification, not a mapping asserted in prose.
+ *
+ * Everything that talks to AWS — `agentCoreSessions({ store: 'memory' })` — is
+ * **contract-mapped and injection-tested**: the SDK calls are exercised through
+ * the `_client` seam and no test pretends to have reached AWS. Real-cloud
+ * verification lands with a field deployment.
+ *
+ * @example  An agent in an AgentCore Runtime container
+ *   import { standingAgent } from 'agentfootprint/hosting';
+ *   import { agentCoreRuntimeHost, agentCoreSessions } from 'agentfootprint/hosting-providers';
+ *
+ *   const handle = await standingAgent({
+ *     agent,
+ *     host: agentCoreRuntimeHost(),
+ *     sessions: agentCoreSessions({ store: 'session-storage' }),
+ *   });
+ *   process.on('SIGTERM', () => void handle.close());
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_SESSION_STORAGE_PATH = exports.agentCoreSessions = exports.agentCoreRuntimeWire = exports.agentCoreRuntimeHost = void 0;
+var agentcore_js_1 = require("./adapters/hosting/agentcore.js");
+Object.defineProperty(exports, "agentCoreRuntimeHost", { enumerable: true, get: function () { return agentcore_js_1.agentCoreRuntimeHost; } });
+Object.defineProperty(exports, "agentCoreRuntimeWire", { enumerable: true, get: function () { return agentcore_js_1.agentCoreRuntimeWire; } });
+Object.defineProperty(exports, "agentCoreSessions", { enumerable: true, get: function () { return agentcore_js_1.agentCoreSessions; } });
+Object.defineProperty(exports, "DEFAULT_SESSION_STORAGE_PATH", { enumerable: true, get: function () { return agentcore_js_1.DEFAULT_SESSION_STORAGE_PATH; } });
+//# sourceMappingURL=hosting-providers.js.map

package/dist/hosting-providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosting-providers.js","sourceRoot":"","sources":["../src/hosting-providers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;;;AAEH,gEAKyC;AAJvC,oHAAA,oBAAoB,OAAA;AACpB,oHAAA,oBAAoB,OAAA;AACpB,iHAAA,iBAAiB,OAAA;AACjB,4HAAA,4BAA4B,OAAA"}

package/dist/lib/mcp/gatewayTransport.js

@@ -0,0 +1,129 @@
+"use strict";
+/**
+ * gatewayTransport — an MCP transport whose auth headers are vended per
+ * request, not per connection.
+ *
+ *   const gateway = await mcpClient({
+ *     name: 'gateway',
+ *     transport: gatewayTransport({ url, credentials, service: 'gateway' }),
+ *   });
+ *
+ * ── Why this exists ──────────────────────────────────────────────────────────
+ * The `http` transport takes headers once and reuses them for the life of the
+ * connection. That is right for a static API key and wrong for anything with an
+ * expiry: a standing agent outlives its bearer token, and the failure mode is a
+ * burst of 401s an hour into a session that worked perfectly when you tested
+ * it. Managed gateways — AgentCore's among them — hand out exactly that kind of
+ * token, so "get a fresh one before each request" is not an optimisation, it is
+ * the only way the connection stays up.
+ *
+ * Nothing here is vendor-specific. It is the {@link CredentialProvider} port on
+ * one side and Streamable HTTP on the other; who vends is your choice.
+ *
+ * ── The secrecy invariant, and how it is kept ────────────────────────────────
+ * **A vended token is used once and dropped.** It is not cached between
+ * requests, not stored on the transport object, not put in an event payload,
+ * not written to a log, and not included in any error this module throws —
+ * including the errors it throws WHILE holding one. A test asserts that: a
+ * hostile logger subscribed to everything the library can say never sees the
+ * header value.
+ *
+ * That is why the vend happens inside `fetch` rather than at construction. A
+ * token resolved at construction has to live somewhere for the connection to
+ * use it later, and "somewhere" is what leaks.
+ *
+ * Pattern: Adapter + Decorator over `fetch`. Role: Layer-3 tool integration.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createVendingFetch = exports.GatewayAuthorizationRequiredError = exports.gatewayTransport = void 0;
+const types_js_1 = require("../../identity/types.js");
+const DEFAULT_SERVICE = 'gateway';
+/**
+ * Describe an MCP connection whose auth headers are vended per request.
+ *
+ * @example  A managed gateway with a token vault behind it
+ *   import { agentCoreIdentity } from 'agentfootprint/identity';
+ *   import { gatewayTransport, mcpClient } from 'agentfootprint/tool-providers';
+ *
+ *   const gateway = await mcpClient({
+ *     name: 'gateway',
+ *     transport: gatewayTransport({
+ *       url: process.env.GATEWAY_MCP_URL!,
+ *       credentials: agentCoreIdentity({ region: 'us-west-2' }),
+ *       service: 'gateway',
+ *     }),
+ *   });
+ *   const agent = Agent.create({ provider, model }).tools(await gateway.tools()).build();
+ */
+function gatewayTransport(options) {
+    if (!options.url)
+        throw new Error(`gatewayTransport requires 'url'.`);
+    if (!options.credentials)
+        throw new Error(`gatewayTransport requires 'credentials'.`);
+    return {
+        transport: 'gateway',
+        url: options.url,
+        credentials: options.credentials,
+        service: options.service ?? DEFAULT_SERVICE,
+        ...(options.scopes !== undefined && { scopes: options.scopes }),
+        ...(options.mode !== undefined && { mode: options.mode }),
+        ...(options.headers !== undefined && { headers: options.headers }),
+    };
+}
+exports.gatewayTransport = gatewayTransport;
+/**
+ * Raised when the provider needs a human to authorize before it can vend.
+ *
+ * The URL is carried so the caller can surface it (pause the run, show a
+ * link); **the token is not, because there is not one yet** — that is the whole
+ * meaning of this error.
+ */
+class GatewayAuthorizationRequiredError extends Error {
+    code = 'ERR_GATEWAY_AUTHORIZATION_REQUIRED';
+    /** Send the user here, then retry. */
+    authorizationUrl;
+    constructor(service, authorizationUrl) {
+        super(`[mcp] the credential provider needs a person to authorize '${service}' before it can ` +
+            `vend a token for this gateway. A transport cannot run a consent flow mid-request — ` +
+            `surface the authorization URL to the user (pause the run), then call the tool again ` +
+            `once they have authorized.`);
+        this.name = 'GatewayAuthorizationRequiredError';
+        this.authorizationUrl = authorizationUrl;
+    }
+}
+exports.GatewayAuthorizationRequiredError = GatewayAuthorizationRequiredError;
+/**
+ * Build the `fetch` the MCP SDK will use: one that vends a credential, applies
+ * it to this one request, and keeps nothing.
+ *
+ * Exported for tests — the secrecy invariant is asserted against this function
+ * directly, because that is where a leak would happen and driving a whole SDK
+ * to reach it would test less while looking like it tested more.
+ *
+ * @internal
+ */
+function createVendingFetch(transport, baseFetch = globalThis.fetch.bind(globalThis)) {
+    return async (input, init) => {
+        const result = await transport.credentials.getCredential({
+            service: transport.service,
+            ...(transport.scopes !== undefined && { scopes: transport.scopes }),
+            ...(transport.mode !== undefined && { mode: transport.mode }),
+        });
+        if (!(0, types_js_1.isCredentialIssued)(result)) {
+            throw new GatewayAuthorizationRequiredError(transport.service, result.authorizationUrl);
+        }
+        // Static headers first, vended ones last: a vended auth header always wins,
+        // so a stale static one can never quietly shadow the live credential.
+        const headers = new Headers(init?.headers ?? {});
+        for (const [key, value] of Object.entries(transport.headers ?? {}))
+            headers.set(key, value);
+        for (const [key, value] of Object.entries(result.credential.toHeaders())) {
+            headers.set(key, value);
+        }
+        // The vended value exists only inside this call, on this Headers object,
+        // for the duration of this request. Nothing above closes over it.
+        return baseFetch(input, { ...init, headers });
+    };
+}
+exports.createVendingFetch = createVendingFetch;
+//# sourceMappingURL=gatewayTransport.js.map

package/dist/lib/mcp/gatewayTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gatewayTransport.js","sourceRoot":"","sources":["../../../src/lib/mcp/gatewayTransport.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAEH,sDAAsF;AA0BtF,MAAM,eAAe,GAAG,SAAS,CAAC;AAElC;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,gBAAgB,CAAC,OAAgC;IAC/D,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtE,IAAI,CAAC,OAAO,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACtF,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe;QAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAZD,4CAYC;AAED;;;;;;GAMG;AACH,MAAa,iCAAkC,SAAQ,KAAK;IACjD,IAAI,GAAG,oCAA6C,CAAC;IAC9D,sCAAsC;IAC7B,gBAAgB,CAAS;IAElC,YAAY,OAAe,EAAE,gBAAwB;QACnD,KAAK,CACH,8DAA8D,OAAO,kBAAkB;YACrF,qFAAqF;YACrF,sFAAsF;YACtF,4BAA4B,CAC/B,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;QAChD,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;CACF;AAfD,8EAeC;AAKD;;;;;;;;;GASG;AACH,SAAgB,kBAAkB,CAChC,SAA8B,EAC9B,YAAuB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;IAExD,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,aAAa,CAAC;YACvD,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;YACnE,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,IAAI,CAAC,IAAA,6BAAkB,EAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,iCAAiC,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1F,CAAC;QAED,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;QAED,yEAAyE;QACzE,kEAAkE;QAClE,OAAO,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC;AACJ,CAAC;AA1BD,gDA0BC"}

package/dist/lib/mcp/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.mockMcpClient = exports.mcpServe = exports.mcpClient = void 0;
+exports.GatewayAuthorizationRequiredError = exports.gatewayTransport = exports.mockMcpClient = exports.mcpServe = exports.mcpClient = void 0;
 /**
  * MCP — Model Context Protocol, both directions. `mcpClient` connects to
  * someone else's MCP server and registers its tools on your Agent;
@@ -13,4 +13,7 @@ var mcpServe_js_1 = require("./mcpServe.js");
 Object.defineProperty(exports, "mcpServe", { enumerable: true, get: function () { return mcpServe_js_1.mcpServe; } });
 var mockMcpClient_js_1 = require("./mockMcpClient.js");
 Object.defineProperty(exports, "mockMcpClient", { enumerable: true, get: function () { return mockMcpClient_js_1.mockMcpClient; } });
+var gatewayTransport_js_1 = require("./gatewayTransport.js");
+Object.defineProperty(exports, "gatewayTransport", { enumerable: true, get: function () { return gatewayTransport_js_1.gatewayTransport; } });
+Object.defineProperty(exports, "GatewayAuthorizationRequiredError", { enumerable: true, get: function () { return gatewayTransport_js_1.GatewayAuthorizationRequiredError; } });
 //# sourceMappingURL=index.js.map

package/dist/lib/mcp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/mcp/index.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACH,+CAA2C;AAAlC,yGAAA,SAAS,OAAA;AAClB,6CAAyC;AAAhC,uGAAA,QAAQ,OAAA;AACjB,uDAAgG;AAAvF,iHAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/mcp/index.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACH,+CAA2C;AAAlC,yGAAA,SAAS,OAAA;AAClB,6CAAyC;AAAhC,uGAAA,QAAQ,OAAA;AACjB,uDAAgG;AAAvF,iHAAA,aAAa,OAAA;AACtB,6DAI+B;AAH7B,uHAAA,gBAAgB,OAAA;AAChB,wIAAA,iCAAiC,OAAA"}

package/dist/lib/mcp/mcpClient.js

@@ -36,6 +36,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.mcpClient = void 0;
+const gatewayTransport_js_1 = require("./gatewayTransport.js");
 const lazyRequire_js_1 = require("../lazyRequire.js");
 // Version-less identity. The MCP `clientInfo` field is informational
 // (server logs it); a hardcoded number drifts every release. Consumers
@@ -135,15 +136,22 @@ async function buildTransport(t) {
             ...(t.cwd !== undefined && { cwd: t.cwd }),
         });
     }
-    // http transport
+    // http + gateway transports both ride Streamable HTTP. They differ only in
+    // WHEN the auth headers are decided: `http` fixes them at construction,
+    // `gateway` vends them inside every request (see gatewayTransport.ts).
     let httpMod;
     try {
         httpMod = (0, lazyRequire_js_1.lazyRequire)('@modelcontextprotocol/sdk/client/streamableHttp.js');
     }
     catch {
-        throw new Error('mcpClient(http) requires @modelcontextprotocol/sdk/client/streamableHttp.js — ' +
+        throw new Error(`mcpClient(${t.transport}) requires @modelcontextprotocol/sdk/client/streamableHttp.js — ` +
             'check that @modelcontextprotocol/sdk is installed at the latest version.');
     }
+    if (t.transport === 'gateway') {
+        return new httpMod.StreamableHTTPClientTransport(new URL(t.url), {
+            fetch: (0, gatewayTransport_js_1.createVendingFetch)(t),
+        });
+    }
     return new httpMod.StreamableHTTPClientTransport(new URL(t.url), {
         ...(t.headers && { requestInit: { headers: { ...t.headers } } }),
     });

package/dist/lib/mcp/mcpClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcpClient.js","sourceRoot":"","sources":["../../../src/lib/mcp/mcpClient.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAIH,sDAAgD;AAEhD,qEAAqE;AACrE,uEAAuE;AACvE,mEAAmE;AACnE,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,OAAO;CACjB,CAAC;AAEF;;;;;;;;GAQG;AACI,KAAK,UAAU,SAAS,CAAC,IAAsB;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhG,kEAAkE;IAClE,kDAAkD;IAClD,IAAI,KAAK,GAA2B,IAAI,CAAC;IACzC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,UAAU,GAAG,CAAC,EAAU,EAAQ,EAAE;QACtC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,KAAK,EAAE,+DAA+D,CACxF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAA8B,EAAE;QACtD,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;YACxB,CAAC,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACzD,CAAC,CAAC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,KAAK,CAAC,KAAK;YACT,UAAU,CAAC,OAAO,CAAC,CAAC;YACpB,IAAI,CAAC,KAAK;gBAAE,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,OAAO;YACX,UAAU,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,KAAK,GAAG,IAAI,CAAC;YACb,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC;AA7CD,8BA6CC;AAED,sEAAsE;AAEtE,KAAK,UAAU,aAAa,CAC1B,SAAuB,EACvB,UAA8C,EAC9C,MAAoB;IAEpB,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,4BAAW,EAAgB,2CAA2C,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,iDAAiD;YAC/C,qDAAqD;YACrD,yCAAyC,CAC5C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAiB,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,mBAAmB,EAAE;QAC7E,YAAY,EAAE,EAAE;KACjB,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IACtD,6EAA6E;IAC7E,IAAI,MAAM;QAAE,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;;QACvD,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,CAAe;IAC3C,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAA,4BAAW,EAAkB,2CAA2C,CAAC,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,wEAAwE;gBACtE,0EAA0E,CAC7E,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,oBAAoB,CAAC;YACvC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,IAAA,4BAAW,EAAiB,oDAAoD,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,gFAAgF;YAC9E,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,6BAA6B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;QAC/D,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;KACjE,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AAEtE,SAAS,WAAW,CAClB,UAAkB,EAClB,GAAiB,EACjB,GAIC,EACD,MAAoB;IAEpB,MAAM,IAAI,GAAS;QACjB,MAAM,EAAE;YACN,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,aAAa,GAAG,CAAC,IAAI,EAAE;YACvD,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,4DAA4D;YAC5D,+DAA+D;YAC/D,6BAA6B;YAC7B,MAAM,OAAO,GACX,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC/D,CAAC,CAAE,IAAgC;gBACnC,CAAC,CAAC,EAAE,CAAC;YACT,oEAAoE;YACpE,qEAAqE;YACrE,oEAAoE;YACpE,oEAAoE;YACpE,6DAA6D;YAC7D,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM;gBACnB,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC;gBACnD,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,8DAA8D;YAC9D,6DAA6D;YAC7D,gEAAgE;YAChE,iEAAiE;YACjE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO;iBACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;iBAClE,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CACb,aAAa,GAAG,CAAC,IAAI,cAAc,UAAU,yBAAyB,IAAI,EAAE,CAC7E,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"mcpClient.js","sourceRoot":"","sources":["../../../src/lib/mcp/mcpClient.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAIH,+DAA2E;AAC3E,sDAAgD;AAEhD,qEAAqE;AACrE,uEAAuE;AACvE,mEAAmE;AACnE,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,OAAO;CACjB,CAAC;AAEF;;;;;;;;GAQG;AACI,KAAK,UAAU,SAAS,CAAC,IAAsB;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhG,kEAAkE;IAClE,kDAAkD;IAClD,IAAI,KAAK,GAA2B,IAAI,CAAC;IACzC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,UAAU,GAAG,CAAC,EAAU,EAAQ,EAAE;QACtC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,KAAK,EAAE,+DAA+D,CACxF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAA8B,EAAE;QACtD,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;YACxB,CAAC,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACzD,CAAC,CAAC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,KAAK,CAAC,KAAK;YACT,UAAU,CAAC,OAAO,CAAC,CAAC;YACpB,IAAI,CAAC,KAAK;gBAAE,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,OAAO;YACX,UAAU,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,KAAK,GAAG,IAAI,CAAC;YACb,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC;AA7CD,8BA6CC;AAED,sEAAsE;AAEtE,KAAK,UAAU,aAAa,CAC1B,SAAuB,EACvB,UAA8C,EAC9C,MAAoB;IAEpB,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,4BAAW,EAAgB,2CAA2C,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,iDAAiD;YAC/C,qDAAqD;YACrD,yCAAyC,CAC5C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAiB,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,mBAAmB,EAAE;QAC7E,YAAY,EAAE,EAAE;KACjB,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IACtD,6EAA6E;IAC7E,IAAI,MAAM;QAAE,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;;QACvD,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,CAAe;IAC3C,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAA,4BAAW,EAAkB,2CAA2C,CAAC,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,wEAAwE;gBACtE,0EAA0E,CAC7E,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,oBAAoB,CAAC;YACvC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,IAAA,4BAAW,EAAiB,oDAAoD,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,aAAa,CAAC,CAAC,SAAS,kEAAkE;YACxF,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,IAAI,OAAO,CAAC,6BAA6B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;YAC/D,KAAK,EAAE,IAAA,wCAAkB,EAAC,CAAC,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,6BAA6B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;QAC/D,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;KACjE,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AAEtE,SAAS,WAAW,CAClB,UAAkB,EAClB,GAAiB,EACjB,GAIC,EACD,MAAoB;IAEpB,MAAM,IAAI,GAAS;QACjB,MAAM,EAAE;YACN,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,aAAa,GAAG,CAAC,IAAI,EAAE;YACvD,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,4DAA4D;YAC5D,+DAA+D;YAC/D,6BAA6B;YAC7B,MAAM,OAAO,GACX,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC/D,CAAC,CAAE,IAAgC;gBACnC,CAAC,CAAC,EAAE,CAAC;YACT,oEAAoE;YACpE,qEAAqE;YACrE,oEAAoE;YACpE,oEAAoE;YACpE,6DAA6D;YAC7D,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM;gBACnB,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC;gBACnD,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,8DAA8D;YAC9D,6DAA6D;YAC7D,gEAAgE;YAChE,iEAAiE;YACjE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO;iBACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;iBAClE,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CACb,aAAa,GAAG,CAAC,IAAI,cAAc,UAAU,yBAAyB,IAAI,EAAE,CAC7E,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/memory-providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory-providers.js","sourceRoot":"","sources":["../src/memory-providers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;;;AAEH,sEAAsE;AACtE,sEAAsE;AACtE,wDAAwD;AACxD,uDAKoC;AAJlC,sGAAA,UAAU,OAAA;AAMZ,+DAIwC;AAHtC,8GAAA,cAAc,OAAA;AAKhB,8EAA8E;AAC9E,yEAAyE;AACzE,iFAKiD;AAJ/C,2HAAA,kBAAkB,OAAA"}
+{"version":3,"file":"memory-providers.js","sourceRoot":"","sources":["../src/memory-providers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;;;AAEH,sEAAsE;AACtE,sEAAsE;AACtE,wDAAwD;AACxD,uDAKoC;AAJlC,sGAAA,UAAU,OAAA;AAMZ,+DAMwC;AALtC,8GAAA,cAAc,OAAA;AAOhB,8EAA8E;AAC9E,yEAAyE;AACzE,iFAKiD;AAJ/C,2HAAA,kBAAkB,OAAA"}

package/dist/security/index.js

@@ -11,7 +11,15 @@
  * Today's surface is small and data-driven on purpose: one role
  * allowlist primitive that satisfies BOTH the v2.4 `PermissionChecker`
  * interface AND a sync `isAllowed(toolId)` predicate for use with
- * `gatedTools` from `agentfootprint/tool-providers`.
+ * `gatedTools` from `agentfootprint/tool-providers` — plus
+ * `agentCorePolicy()`, the same port answered by a remote policy store.
+ *
+ * A local allowlist and a remote policy engine differ in one way that
+ * matters here: the local one can answer synchronously, so it doubles
+ * as a `gatedTools` predicate; a remote one cannot, so it plugs in ONLY
+ * as `permissionChecker`. That is not a limitation of either — the gate
+ * decides what the model is shown, the checker decides what actually
+ * runs, and they compose without knowing about each other.
  *
  * Future additions (capability gating, gate_open flows, audit logs)
  * land here without expanding the public root barrel.
@@ -36,7 +44,7 @@
  *   const agent = Agent.create({ provider, model, permissionChecker: policy }).build();
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.REDACTED_PLACEHOLDER = exports.redactThinkingBlocks = exports.SYNTHETIC_DENY_PREFIX = exports.extractSequence = exports.PolicyHaltError = exports.PermissionPolicy = void 0;
+exports.agentCorePolicy = exports.REDACTED_PLACEHOLDER = exports.redactThinkingBlocks = exports.SYNTHETIC_DENY_PREFIX = exports.extractSequence = exports.PolicyHaltError = exports.PermissionPolicy = void 0;
 var PermissionPolicy_js_1 = require("./PermissionPolicy.js");
 Object.defineProperty(exports, "PermissionPolicy", { enumerable: true, get: function () { return PermissionPolicy_js_1.PermissionPolicy; } });
 var PolicyHaltError_js_1 = require("./PolicyHaltError.js");
@@ -47,4 +55,10 @@ Object.defineProperty(exports, "SYNTHETIC_DENY_PREFIX", { enumerable: true, get:
 var thinkingRedaction_js_1 = require("./thinkingRedaction.js");
 Object.defineProperty(exports, "redactThinkingBlocks", { enumerable: true, get: function () { return thinkingRedaction_js_1.redactThinkingBlocks; } });
 Object.defineProperty(exports, "REDACTED_PLACEHOLDER", { enumerable: true, get: function () { return thinkingRedaction_js_1.REDACTED_PLACEHOLDER; } });
+// A remote policy engine behind the same port. Lazy peer-dep: importing this
+// barrel loads no AWS SDK — only constructing the checker and letting it
+// evaluate does. Same home as `PermissionPolicy` because it is the same job,
+// just asked of somebody else.
+var agentcore_js_1 = require("../adapters/security/agentcore.js");
+Object.defineProperty(exports, "agentCorePolicy", { enumerable: true, get: function () { return agentcore_js_1.agentCorePolicy; } });
 //# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;;;AAEH,6DAAyD;AAAhD,uHAAA,gBAAgB,OAAA;AAGzB,2DAAuD;AAA9C,qHAAA,eAAe,OAAA;AAGxB,2DAA8E;AAArE,qHAAA,eAAe,OAAA;AAAE,2HAAA,qBAAqB,OAAA;AAG/C,+DAAoF;AAA3E,4HAAA,oBAAoB,OAAA;AAAE,4HAAA,oBAAoB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;;;AAEH,6DAAyD;AAAhD,uHAAA,gBAAgB,OAAA;AAGzB,2DAAuD;AAA9C,qHAAA,eAAe,OAAA;AAGxB,2DAA8E;AAArE,qHAAA,eAAe,OAAA;AAAE,2HAAA,qBAAqB,OAAA;AAG/C,+DAAoF;AAA3E,4HAAA,oBAAoB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAEnD,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,+BAA+B;AAC/B,kEAO2C;AANzC,+GAAA,eAAe,OAAA"}

package/dist/tool-providers/index.js

@@ -13,6 +13,10 @@
  * 2. Tool sources (re-exported from existing modules)
  *    - `mcpClient(opts)` — connect to an MCP server (real)
  *    - `mockMcpClient({ tools })` — in-memory MCP source for dev / tests
+ *    - `gatewayTransport({ url, credentials, service })` — an MCP
+ *      transport whose auth headers are vended PER REQUEST by a
+ *      `CredentialProvider`, for endpoints behind a token with an
+ *      expiry. The token is used once and never stored.
  *
  * 3. Tool sink — the other direction
  *    - `mcpServe(tools, opts)` — expose your own `Tool[]` AS an MCP
@@ -41,7 +45,7 @@
  *   const provider = gatedTools(staticTools(slackTools), (name) => allowed(name));
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.mockMcpClient = exports.mcpServe = exports.mcpClient = exports.skillScopedTools = exports.gatedTools = exports.staticTools = void 0;
+exports.GatewayAuthorizationRequiredError = exports.gatewayTransport = exports.mockMcpClient = exports.mcpServe = exports.mcpClient = exports.skillScopedTools = exports.gatedTools = exports.staticTools = void 0;
 var staticTools_js_1 = require("./staticTools.js");
 Object.defineProperty(exports, "staticTools", { enumerable: true, get: function () { return staticTools_js_1.staticTools; } });
 var gatedTools_js_1 = require("./gatedTools.js");
@@ -55,4 +59,6 @@ var index_js_1 = require("../lib/mcp/index.js");
 Object.defineProperty(exports, "mcpClient", { enumerable: true, get: function () { return index_js_1.mcpClient; } });
 Object.defineProperty(exports, "mcpServe", { enumerable: true, get: function () { return index_js_1.mcpServe; } });
 Object.defineProperty(exports, "mockMcpClient", { enumerable: true, get: function () { return index_js_1.mockMcpClient; } });
+Object.defineProperty(exports, "gatewayTransport", { enumerable: true, get: function () { return index_js_1.gatewayTransport; } });
+Object.defineProperty(exports, "GatewayAuthorizationRequiredError", { enumerable: true, get: function () { return index_js_1.GatewayAuthorizationRequiredError; } });
 //# sourceMappingURL=index.js.map

package/dist/tool-providers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tool-providers/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;;;AAEH,mDAA+C;AAAtC,6GAAA,WAAW,OAAA;AACpB,iDAA6C;AAApC,2GAAA,UAAU,OAAA;AACnB,6DAAyD;AAAhD,uHAAA,gBAAgB,OAAA;AAGzB,uEAAuE;AACvE,wEAAwE;AACxE,0CAA0C;AAC1C,gDAAyE;AAAhE,qGAAA,SAAS,OAAA;AAAE,oGAAA,QAAQ,OAAA;AAAE,yGAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tool-providers/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;;;AAEH,mDAA+C;AAAtC,6GAAA,WAAW,OAAA;AACpB,iDAA6C;AAApC,2GAAA,UAAU,OAAA;AACnB,6DAAyD;AAAhD,uHAAA,gBAAgB,OAAA;AAGzB,uEAAuE;AACvE,wEAAwE;AACxE,0CAA0C;AAC1C,gDAM6B;AAL3B,qGAAA,SAAS,OAAA;AACT,oGAAA,QAAQ,OAAA;AACR,yGAAA,aAAa,OAAA;AACb,4GAAA,gBAAgB,OAAA;AAChB,6HAAA,iCAAiC,OAAA"}

package/dist/types/adapters/hosting/agentcore.d.ts

@@ -0,0 +1,200 @@
+/**
+ * adapters/hosting/agentcore — AWS Bedrock **AgentCore Runtime** adapters for
+ * the two hosting ports.
+ *
+ *   import { agentCoreRuntimeHost, agentCoreSessions } from 'agentfootprint/hosting-providers';
+ *   import { standingAgent } from 'agentfootprint/hosting';
+ *
+ *   const handle = await standingAgent({
+ *     agent,
+ *     host: agentCoreRuntimeHost(),
+ *     sessions: agentCoreSessions({ store: 'session-storage' }),
+ *   });
+ *
+ * ── What this file actually is ───────────────────────────────────────────────
+ * Vendor paths, a header name, and two JSON body shapes. That is the whole
+ * adapter, and it is the claim the hosting ports were designed to make: a
+ * container runtime's contract is a CONFIGURATION of HTTP work that already
+ * exists, not a second implementation of it. Nothing here reaches into the
+ * ports, and nothing here needed the ports to change.
+ *
+ * AgentCore Runtime is a **container contract**: an ARM64 image serving HTTP on
+ * `0.0.0.0:8080` —
+ *
+ *   POST /invocations   JSON `{ "prompt": "..." }` → JSON `{ "response", "status" }`
+ *   GET  /ping          → `{ "status": "Healthy", "time_of_last_update": <unix seconds> }`
+ *
+ * and the caller's conversation arrives in the
+ * `X-Amzn-Bedrock-AgentCore-Runtime-Session-Id` header rather than in the body,
+ * which is the one thing paths-and-bodies configuration alone could not
+ * express before this release.
+ *
+ * ── Verification status, stated plainly ──────────────────────────────────────
+ * `agentCoreRuntimeHost` is **plain HTTP and is really verified**: it runs the
+ * same host conformance suite as `nodeHost`, over a real socket, in
+ * `test/hosting/host-contract.test.ts`. There is no AWS SDK on its path.
+ *
+ * `agentCoreSessions({ store: 'memory' })` is **contract-mapped and
+ * injection-tested**: its AgentCore Memory calls are exercised through the
+ * `_client` seam, never against AWS. Confirm the command and field names
+ * against your installed `@aws-sdk/client-bedrock-agentcore` before you rely
+ * on it; real-cloud verification lands with a field deployment.
+ *
+ * Pattern: Adapter (GoF). Role: outer ring. The file-backed session store uses
+ * `node:fs` and nothing else; the event-backed one lazy-loads the AWS SDK, so
+ * importing this module costs zero peer-dep load.
+ */
+import type { HttpHost, HttpWire } from '../../hosting/httpHost.js';
+import type { CheckpointEnvelope, SessionLifecycle } from '../../hosting/types.js';
+/** Options for {@link agentCoreRuntimeHost}. */
+export interface AgentCoreRuntimeHostOptions {
+    /**
+     * Port to bind. Default `8080` — the port the container contract specifies.
+     * Pass `0` in tests to take an ephemeral one.
+     */
+    readonly port?: number;
+    /**
+     * Interface to bind. Default `'0.0.0.0'`, which the contract requires: bind
+     * to loopback inside the container and the runtime's health probe cannot
+     * reach you.
+     */
+    readonly hostname?: string;
+    /**
+     * Report `'HealthyBusy'` instead of `'Healthy'` on the health path.
+     *
+     * A function, not a flag, because busy is a live fact about the process, not
+     * a setting: the runtime reads it on every probe to decide whether to send
+     * you more work. Omit it and the host reports `'Healthy'`, which is the
+     * honest answer for an agent that answers synchronously.
+     */
+    readonly busy?: () => boolean;
+}
+/**
+ * The AgentCore Runtime contract as an {@link HttpWire}.
+ *
+ * Exported so the body shapes are inspectable and testable without binding a
+ * socket, and so a deployment that must serve the same bodies from somewhere
+ * else can reuse them by name.
+ */
+export declare function agentCoreRuntimeWire(busy?: () => boolean): HttpWire;
+/**
+ * An `AgentHost` that speaks AgentCore Runtime's container contract.
+ *
+ * Passes the same conformance suite as `nodeHost` — it is the same HTTP host
+ * with this runtime's two paths, its header, and its two body shapes.
+ *
+ * @example  The container's entry point
+ *   const handle = await standingAgent({
+ *     agent,
+ *     host: agentCoreRuntimeHost(),
+ *     sessions: agentCoreSessions({ store: 'session-storage' }),
+ *   });
+ *   process.on('SIGTERM', () => void handle.close());
+ */
+export declare function agentCoreRuntimeHost(options?: AgentCoreRuntimeHostOptions): HttpHost;
+/**
+ * Where {@link agentCoreSessions} keeps a conversation between requests.
+ *
+ *  - `'session-storage'` — a JSON file under the container's own storage. The
+ *    runtime keeps that storage for the life of a session, INCLUDING across a
+ *    stop/resume of the container, so a conversation survives the thing most
+ *    likely to interrupt it. It does not survive the session ending.
+ *  - `'memory'` — one AgentCore Memory event per persist. Outlives the session,
+ *    the container and the deployment; costs an API call per turn and the
+ *    `@aws-sdk/client-bedrock-agentcore` peer dependency.
+ *
+ * Chosen at construction, never per call: a store that silently changed where
+ * it wrote would be a store you cannot reason about after an incident.
+ */
+export type AgentCoreSessionStore = 'session-storage' | 'memory';
+/** The default file the `'session-storage'` mode writes to. */
+export declare const DEFAULT_SESSION_STORAGE_PATH = "/tmp/agentcore-session";
+/** Options for the file-backed mode. */
+export interface AgentCoreFileSessionsOptions {
+    readonly store: 'session-storage';
+    /**
+     * Where to write. Default {@link DEFAULT_SESSION_STORAGE_PATH}. One file
+     * holds every session this container has seen, keyed by session id — the
+     * runtime already gives each session its own storage, so the keying is
+     * belt-and-braces for the case where it does not.
+     */
+    readonly path?: string;
+}
+/** One AgentCore Memory event, as this adapter cares about it. */
+export interface AgentCoreSessionEvent {
+    /** Server-assigned event id. */
+    readonly eventId: string;
+    /** The envelope decoded from the event's blob payload, or `null` when unreadable. */
+    readonly envelope: unknown;
+}
+/**
+ * The minimal AgentCore Memory surface the session store calls. The real SDK is
+ * adapted to this shape in one function below; tests inject a fake via
+ * `_client` and never touch AWS.
+ */
+export interface AgentCoreSessionClientLike {
+    /** Append one envelope as an event (the server assigns the event id). */
+    createEvent(input: {
+        memoryId: string;
+        actorId: string;
+        sessionId: string;
+        envelope: CheckpointEnvelope;
+    }): Promise<void>;
+    /** The session's events, newest first — the adapter reads only the newest. */
+    listEvents(input: {
+        memoryId: string;
+        actorId: string;
+        sessionId: string;
+        maxResults?: number;
+    }): Promise<{
+        events: readonly AgentCoreSessionEvent[];
+    }>;
+}
+/** Options for the event-backed mode. */
+export interface AgentCoreMemorySessionsOptions {
+    readonly store: 'memory';
+    /** AgentCore Memory ARN or id. Required. */
+    readonly memoryId: string;
+    /** AWS region, when the adapter constructs the SDK client itself. */
+    readonly region?: string;
+    /**
+     * The AgentCore `actorId` these conversations belong to. Default
+     * `'afp-standing-agent'`. One actor per deployed agent is the usual shape.
+     */
+    readonly actorId?: string;
+    /** Pre-built client, to share one SDK config across the host app. */
+    readonly client?: AgentCoreSessionClientLike;
+    /** @internal Test injection — skips the SDK require entirely. */
+    readonly _client?: AgentCoreSessionClientLike;
+    /** @internal Test injection — the AWS SDK module, to exercise the real shim with a fake SDK. */
+    readonly _sdk?: BedrockAgentCoreSessionSdkModule;
+}
+/** Options for {@link agentCoreSessions}. */
+export type AgentCoreSessionsOptions = AgentCoreFileSessionsOptions | AgentCoreMemorySessionsOptions;
+/**
+ * A `SessionLifecycle` backed by AgentCore, with the checkpoint's home chosen
+ * at construction.
+ *
+ * Both modes store the SAME `CheckpointEnvelope` the port defines, and both
+ * refuse an unknown `format` by name through the shared `readEnvelope` — a
+ * conversation written by a newer runtime is refused, never half-restored.
+ * That law is inherited, not re-implemented.
+ *
+ * @example  Survive a stop/resume, no AWS SDK required
+ *   agentCoreSessions({ store: 'session-storage' });
+ *
+ * @example  Outlive the session entirely
+ *   agentCoreSessions({ store: 'memory', memoryId: process.env.MEMORY_ID!, region: 'us-west-2' });
+ */
+export declare function agentCoreSessions(options: AgentCoreSessionsOptions): SessionLifecycle;
+/** The slice of `@aws-sdk/client-bedrock-agentcore` this shim touches. */
+export interface BedrockAgentCoreSessionSdkModule {
+    readonly BedrockAgentCoreClient?: new (config: {
+        region?: string;
+    }) => {
+        send(cmd: unknown): Promise<unknown>;
+    };
+    readonly CreateEventCommand?: new (input: unknown) => unknown;
+    readonly ListEventsCommand?: new (input: unknown) => unknown;
+}
+//# sourceMappingURL=agentcore.d.ts.map

package/dist/types/adapters/hosting/agentcore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentcore.d.ts","sourceRoot":"","sources":["../../../../src/adapters/hosting/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAoB,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtF,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAkBnF,gDAAgD;AAChD,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,OAAO,GAAG,QAAQ,CA+BnE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,2BAAgC,GAAG,QAAQ,CASxF;AAID;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,GAAG,QAAQ,CAAC;AAEjE,+DAA+D;AAC/D,eAAO,MAAM,4BAA4B,2BAA2B,CAAC;AAErE,wCAAwC;AACxC,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,kEAAkE;AAClE,MAAM,WAAW,qBAAqB;IACpC,gCAAgC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,yEAAyE;IACzE,WAAW,CAAC,KAAK,EAAE;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,kBAAkB,CAAC;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,8EAA8E;IAC9E,UAAU,CAAC,KAAK,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAA;KAAE,CAAC,CAAC;CAC3D;AAED,yCAAyC;AACzC,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,0BAA0B,CAAC;IAC7C,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,0BAA0B,CAAC;IAC9C,gGAAgG;IAChG,QAAQ,CAAC,IAAI,CAAC,EAAE,gCAAgC,CAAC;CAClD;AAED,6CAA6C;AAC7C,MAAM,MAAM,wBAAwB,GAChC,4BAA4B,GAC5B,8BAA8B,CAAC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,gBAAgB,CAErF;AA4HD,0EAA0E;AAC1E,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK;QACrE,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC9D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CAC9D"}