agentfootprint 9.2.0 → 9.4.0

package/dist/memory/store/capability.js

@@ -1,18 +1,84 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertServesVectors = void 0;
+exports.assertServesVectors = exports.resolveRankingMode = void 0;
 /** The stores this library ships that DO rank the vectors they were given. */
-const VECTOR_CAPABLE = 'InMemoryStore (dev/tests) or sqliteVectorStore (durable, one file)';
+const VECTOR_CAPABLE = 'InMemoryStore (dev/tests), sqliteVectorStore (durable, one file), pgVectorStore ' +
+    '(Postgres + pgvector) or s3VectorsStore (Amazon S3 Vectors)';
+/**
+ * The ranking mode a store DECLARES, with a contradiction refused by name.
+ *
+ * Two members answer two questions ({@link MemoryStore.supportsVectorSearch}
+ * "can you serve my vectors back?" and {@link MemoryStore.ranksBy} "what query
+ * form does your search take?"), and a store may state either, both, or
+ * neither. Both, disagreeing, is the one case that cannot be resolved: there is
+ * no reading of `{ supportsVectorSearch: true, ranksBy: 'server-text' }` that
+ * is not somebody's bug, and picking a winner would encode a guess about which
+ * line was the mistake. Refused — the same law that refuses `topK` beside
+ * `retrieval`.
+ *
+ * @returns `'vector'` | `'server-text'` | `undefined` (undeclared — the state
+ *          every adapter written before 9.3.0 is in, and the one that must
+ *          change nothing).
+ * @throws when the two declarations contradict each other.
+ */
+function resolveRankingMode(store, caller) {
+    const declared = store.ranksBy;
+    const servesVectors = store.supportsVectorSearch;
+    if (declared === undefined) {
+        // A bare `supportsVectorSearch: true` is a store saying it ranks the
+        // vectors it was given, which IS `'vector'` — read it as one, so a
+        // pre-9.3.0 adapter gets the new behaviour without a new line. A bare
+        // `false` says only that it cannot serve them back, not how it ranks, so
+        // it stays undeclared here.
+        return servesVectors === true ? 'vector' : undefined;
+    }
+    if (declared === 'vector' && servesVectors === false) {
+        throw new Error(contradiction(store, caller, 'vector', false));
+    }
+    if (declared === 'server-text' && servesVectors === true) {
+        throw new Error(contradiction(store, caller, 'server-text', true));
+    }
+    return declared;
+}
+exports.resolveRankingMode = resolveRankingMode;
+function contradiction(store, caller, ranksBy, supportsVectorSearch) {
+    const name = storeName(store);
+    return (`${caller}: \`${name}\` declares \`ranksBy: '${ranksBy}'\` and ` +
+        `\`supportsVectorSearch: ${String(supportsVectorSearch)}\`, and those two cannot both be ` +
+        `true.\n` +
+        `  \`ranksBy: 'vector'\` means search() ranks the embeddings you wrote, which is exactly ` +
+        `what \`supportsVectorSearch: true\` claims; \`'server-text'\` means the backend ranks ` +
+        `text on its own side, which is exactly what \`false\` admits.\n` +
+        `  Fix:  keep ONE of them. A local vector backend declares ` +
+        `\`ranksBy: 'vector'\` (or nothing but \`supportsVectorSearch: true\`); a managed ` +
+        `text-ranking backend declares \`ranksBy: 'server-text'\` and \`supportsVectorSearch: false\`.\n` +
+        `  This refuses rather than picking a winner — either line could be the mistake, and ` +
+        `guessing which would silently decide whether your queries get embedded.`);
+}
 /**
  * Refuse a store that has declared it cannot rank the vectors it is given.
  *
  * @param store  the store the caller passed.
  * @param caller the function name to put in the message — the call the
  *               reader actually wrote, not this helper.
- * @throws when `store.supportsVectorSearch === false`. Never throws on a
- *         store that declares nothing.
+ * @throws when `store.supportsVectorSearch === false`, when it declares
+ *         `ranksBy: 'server-text'`, or when the two declarations contradict.
+ *         Never throws on a store that declares nothing.
  */
 function assertServesVectors(store, caller) {
+    // A contradiction is refused here too — a corpus builder is usually the
+    // FIRST call a new store meets, and it is the cheapest place to find out.
+    const mode = resolveRankingMode(store, caller);
+    if (mode === 'server-text') {
+        throw new Error(`${caller}: \`${storeName(store)}\` declares \`ranksBy: 'server-text'\`, so indexing a ` +
+            `corpus into it would report success and retrieve nothing.\n` +
+            `  It embeds and ranks on the BACKEND's side, over a population the backend derived ` +
+            `itself — the vectors written here would be stored and never read.\n` +
+            `  Fix:  index into a vector-ranking store — ${VECTOR_CAPABLE}.\n` +
+            `  Or:   let the backend do its own ingestion (its console, its API), and point ` +
+            `\`defineRAG\` at it with NO embedder — a server-text store takes the question as ` +
+            `words, so there is nothing for this library to embed.`);
+    }
     if (store.supportsVectorSearch !== false)
         return;
     const name = storeName(store);

package/dist/memory/store/capability.js.map

@@ -1 +1 @@
-{"version":3,"file":"capability.js","sourceRoot":"","sources":["../../../src/memory/store/capability.ts"],"names":[],"mappings":";;;AA2BA,8EAA8E;AAC9E,MAAM,cAAc,GAAG,oEAAoE,CAAC;AAE5F;;;;;;;;GAQG;AACH,SAAgB,mBAAmB,CAAC,KAAkB,EAAE,MAAc;IACpE,IAAI,KAAK,CAAC,oBAAoB,KAAK,KAAK;QAAE,OAAO;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,wEAAwE;IACxE,wEAAwE;IACxE,4DAA4D;IAC5D,MAAM,GAAG,GACP,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU;QAChC,CAAC,CAAC,iFAAiF;YACjF,oDAAoD;QACtD,CAAC,CAAC,6EAA6E;YAC7E,cAAc,CAAC;IACrB,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,OAAO,IAAI,mEAAmE;QACrF,wCAAwC;QACxC,kDAAkD,GAAG,gCAAgC;QACrF,mBAAmB;QACnB,+CAA+C,cAAc,wBAAwB;QACrF,oEAAoE;QACpE,YAAY,IAAI,yDAAyD;QACzE,gFAAgF,CACnF,CAAC;AACJ,CAAC;AAtBD,kDAsBC;AAED,oFAAoF;AACpF,SAAS,SAAS,CAAC,KAAkB;IACnC,MAAM,IAAI,GAAI,KAA6C,CAAC,WAAW,CAAC;IACxE,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../../../src/memory/store/capability.ts"],"names":[],"mappings":";;;AA2BA,8EAA8E;AAC9E,MAAM,cAAc,GAClB,kFAAkF;IAClF,6DAA6D,CAAC;AAEhE;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,kBAAkB,CAChC,KAAkB,EAClB,MAAc;IAEd,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC;IAC/B,MAAM,aAAa,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,yEAAyE;QACzE,4BAA4B;QAC5B,OAAO,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,QAAQ,KAAK,aAAa,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AArBD,gDAqBC;AAED,SAAS,aAAa,CACpB,KAAkB,EAClB,MAAc,EACd,OAAiC,EACjC,oBAA6B;IAE7B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,CACL,GAAG,MAAM,OAAO,IAAI,2BAA2B,OAAO,UAAU;QAChE,2BAA2B,MAAM,CAAC,oBAAoB,CAAC,mCAAmC;QAC1F,SAAS;QACT,0FAA0F;QAC1F,wFAAwF;QACxF,iEAAiE;QACjE,4DAA4D;QAC5D,mFAAmF;QACnF,iGAAiG;QACjG,sFAAsF;QACtF,yEAAyE,CAC1E,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,mBAAmB,CAAC,KAAkB,EAAE,MAAc;IACpE,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,OAAO,SAAS,CAAC,KAAK,CAAC,wDAAwD;YACtF,6DAA6D;YAC7D,qFAAqF;YACrF,qEAAqE;YACrE,+CAA+C,cAAc,KAAK;YAClE,iFAAiF;YACjF,mFAAmF;YACnF,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,KAAK;QAAE,OAAO;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,wEAAwE;IACxE,wEAAwE;IACxE,4DAA4D;IAC5D,MAAM,GAAG,GACP,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU;QAChC,CAAC,CAAC,iFAAiF;YACjF,oDAAoD;QACtD,CAAC,CAAC,6EAA6E;YAC7E,cAAc,CAAC;IACrB,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,OAAO,IAAI,mEAAmE;QACrF,wCAAwC;QACxC,kDAAkD,GAAG,gCAAgC;QACrF,mBAAmB;QACnB,+CAA+C,cAAc,wBAAwB;QACrF,oEAAoE;QACpE,YAAY,IAAI,yDAAyD;QACzE,gFAAgF,CACnF,CAAC;AACJ,CAAC;AArCD,kDAqCC;AAED,oFAAoF;AACpF,SAAS,SAAS,CAAC,KAAkB;IACnC,MAAM,IAAI,GAAI,KAA6C,CAAC,WAAW,CAAC;IACxE,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC;AAC9E,CAAC"}

package/dist/memory/store/index.js

@@ -1,8 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CORPUS_BUNDLE_FORMAT = exports.bundleEntryToMemoryEntry = exports.assertCorpusBundle = exports.staticVectorStore = exports.InMemoryStore = void 0;
+exports.CORPUS_BUNDLE_FORMAT = exports.bundleEntryToMemoryEntry = exports.assertCorpusBundle = exports.staticVectorStore = exports.resolveRankingMode = exports.assertServesVectors = exports.InMemoryStore = void 0;
 var InMemoryStore_js_1 = require("./InMemoryStore.js");
 Object.defineProperty(exports, "InMemoryStore", { enumerable: true, get: function () { return InMemoryStore_js_1.InMemoryStore; } });
+// The declared-capability readers (9.3.0). `resolveRankingMode` is exported so
+// an adapter author can check their own two declarations agree without waiting
+// for a corpus builder to tell them.
+var capability_js_1 = require("./capability.js");
+Object.defineProperty(exports, "assertServesVectors", { enumerable: true, get: function () { return capability_js_1.assertServesVectors; } });
+Object.defineProperty(exports, "resolveRankingMode", { enumerable: true, get: function () { return capability_js_1.resolveRankingMode; } });
 var staticVectorStore_js_1 = require("./staticVectorStore.js");
 Object.defineProperty(exports, "staticVectorStore", { enumerable: true, get: function () { return staticVectorStore_js_1.staticVectorStore; } });
 Object.defineProperty(exports, "assertCorpusBundle", { enumerable: true, get: function () { return staticVectorStore_js_1.assertCorpusBundle; } });

package/dist/memory/store/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/memory/store/index.ts"],"names":[],"mappings":";;;AASA,uDAAmD;AAA1C,iHAAA,aAAa,OAAA;AACtB,+DAQgC;AAP9B,yHAAA,iBAAiB,OAAA;AACjB,0HAAA,kBAAkB,OAAA;AAClB,gIAAA,wBAAwB,OAAA;AACxB,4HAAA,oBAAoB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/memory/store/index.ts"],"names":[],"mappings":";;;AASA,uDAAmD;AAA1C,iHAAA,aAAa,OAAA;AACtB,+EAA+E;AAC/E,+EAA+E;AAC/E,qCAAqC;AACrC,iDAA0E;AAAjE,oHAAA,mBAAmB,OAAA;AAAE,mHAAA,kBAAkB,OAAA;AAChD,+DAQgC;AAP9B,yHAAA,iBAAiB,OAAA;AACjB,0HAAA,kBAAkB,OAAA;AAClB,gIAAA,wBAAwB,OAAA;AACxB,4HAAA,oBAAoB,OAAA"}

package/dist/memory-providers.js

@@ -2,9 +2,9 @@
 /**
  * memory-providers — memory store adapters.
  *
- * RedisStore, AgentCoreStore, and future stores (DynamoDB, Postgres,
- * Pinecone, …) all live here — a new store adds an export, never a new
- * import path.
+ * RedisStore, AgentCoreStore, sqliteVectorStore, pgVectorStore, s3VectorsStore
+ * and future stores (DynamoDB, Pinecone, …) all live here — a new store adds an
+ * export, never a new import path.
  *
  * Pattern: Adapter (GoF) — each store translates the `MemoryStore`
  *          interface onto a specific backend (Redis, DynamoDB-style
@@ -22,7 +22,7 @@
  * symbols, one door. Import from the door.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BedrockAgentMemory = exports.SqliteUnavailableError = exports.EmbedderMismatchError = exports.UnreadableIndexFileError = exports.sqliteVectorStore = exports.UnreadableMemoryEntryError = exports.AgentCoreStore = exports.RedisStore = void 0;
+exports.BedrockAgentMemory = exports.s3VectorsStore = exports.PgVectorSchemaError = exports.pgVectorStore = exports.EmbedderMismatchError = exports.SqliteUnavailableError = exports.UnreadableIndexFileError = exports.sqliteVectorStore = exports.UnreadableMemoryEntryError = exports.AgentCoreStore = exports.RedisStore = void 0;
 // Lazy-required peer-dep stores. Both adapters defer their vendor SDK
 // `require()` to constructor time; importing this barrel doesn't load
 // `ioredis` or `@aws-sdk/client-bedrock-agent-runtime`.
@@ -38,11 +38,28 @@ Object.defineProperty(exports, "UnreadableMemoryEntryError", { enumerable: true,
 var sqliteVector_js_1 = require("./adapters/memory/sqliteVector.js");
 Object.defineProperty(exports, "sqliteVectorStore", { enumerable: true, get: function () { return sqliteVector_js_1.sqliteVectorStore; } });
 Object.defineProperty(exports, "UnreadableIndexFileError", { enumerable: true, get: function () { return sqliteVector_js_1.UnreadableIndexFileError; } });
-Object.defineProperty(exports, "EmbedderMismatchError", { enumerable: true, get: function () { return sqliteVector_js_1.EmbedderMismatchError; } });
 // The SAME refusal `sqliteSessions` raises for the same missing module — one
 // class, so catching it does not require knowing which store was being built.
 var sqliteUnavailable_js_1 = require("./lib/sqliteUnavailable.js");
 Object.defineProperty(exports, "SqliteUnavailableError", { enumerable: true, get: function () { return sqliteUnavailable_js_1.SqliteUnavailableError; } });
+// ONE refusal for every store that can tell a vector met an index built by a
+// different embedder (9.3.0). It lived in sqliteVector.ts from 8.9.0; when
+// pgVectorStore and s3VectorsStore learned the same check it moved to lib/, so
+// `catch (e) { if (e instanceof EmbedderMismatchError) }` cannot depend on
+// which store threw. The old import path still works.
+var embedderMismatch_js_1 = require("./lib/embedderMismatch.js");
+Object.defineProperty(exports, "EmbedderMismatchError", { enumerable: true, get: function () { return embedderMismatch_js_1.EmbedderMismatchError; } });
+// Postgres + pgvector: the corpus beside the application's own data, inheriting
+// its backups, failover and access control. `pg` is lazy-required at the first
+// call — pass `client` to reuse the pool your app already has.
+var pgVector_js_1 = require("./adapters/memory/pgVector.js");
+Object.defineProperty(exports, "pgVectorStore", { enumerable: true, get: function () { return pgVector_js_1.pgVectorStore; } });
+Object.defineProperty(exports, "PgVectorSchemaError", { enumerable: true, get: function () { return pgVector_js_1.PgVectorSchemaError; } });
+// Amazon S3 Vectors: a durable corpus with nothing to run, that can be added to
+// from a cron job rather than at the next deploy. Lazy-requires
+// `@aws-sdk/client-s3vectors` at the first call.
+var s3Vectors_js_1 = require("./adapters/memory/s3Vectors.js");
+Object.defineProperty(exports, "s3VectorsStore", { enumerable: true, get: function () { return s3Vectors_js_1.s3VectorsStore; } });
 // Read-only reader for the legacy Bedrock Agents auto session-summary memory.
 // NOT a MemoryStore (Bedrock owns the writes) — see the class docstring.
 var bedrockAgentMemory_js_1 = require("./adapters/memory/bedrockAgentMemory.js");

package/dist/memory-providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory-providers.js","sourceRoot":"","sources":["../src/memory-providers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAEH,sEAAsE;AACtE,sEAAsE;AACtE,wDAAwD;AACxD,uDAKoC;AAJlC,sGAAA,UAAU,OAAA;AAMZ,+DAOwC;AANtC,8GAAA,cAAc,OAAA;AACd,0HAAA,0BAA0B,OAAA;AAO5B,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,mDAAmD;AACnD,qEAS2C;AARzC,oHAAA,iBAAiB,OAAA;AACjB,2HAAA,wBAAwB,OAAA;AACxB,wHAAA,qBAAqB,OAAA;AAQvB,6EAA6E;AAC7E,8EAA8E;AAC9E,mEAAoE;AAA3D,8HAAA,sBAAsB,OAAA;AAE/B,8EAA8E;AAC9E,yEAAyE;AACzE,iFAKiD;AAJ/C,2HAAA,kBAAkB,OAAA"}
+{"version":3,"file":"memory-providers.js","sourceRoot":"","sources":["../src/memory-providers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAEH,sEAAsE;AACtE,sEAAsE;AACtE,wDAAwD;AACxD,uDAKoC;AAJlC,sGAAA,UAAU,OAAA;AAMZ,+DAOwC;AANtC,8GAAA,cAAc,OAAA;AACd,0HAAA,0BAA0B,OAAA;AAO5B,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,mDAAmD;AACnD,qEAQ2C;AAPzC,oHAAA,iBAAiB,OAAA;AACjB,2HAAA,wBAAwB,OAAA;AAQ1B,6EAA6E;AAC7E,8EAA8E;AAC9E,mEAAoE;AAA3D,8HAAA,sBAAsB,OAAA;AAE/B,6EAA6E;AAC7E,2EAA2E;AAC3E,+EAA+E;AAC/E,2EAA2E;AAC3E,sDAAsD;AACtD,iEAAkE;AAAzD,4HAAA,qBAAqB,OAAA;AAE9B,gFAAgF;AAChF,+EAA+E;AAC/E,+DAA+D;AAC/D,6DASuC;AARrC,4GAAA,aAAa,OAAA;AACb,kHAAA,mBAAmB,OAAA;AASrB,gFAAgF;AAChF,gEAAgE;AAChE,iDAAiD;AACjD,+DAMwC;AALtC,8GAAA,cAAc,OAAA;AAOhB,8EAA8E;AAC9E,yEAAyE;AACzE,iFAKiD;AAJ/C,2HAAA,kBAAkB,OAAA"}

package/dist/recorders/core/CredentialRecorder.js

@@ -0,0 +1,39 @@
+"use strict";
+/**
+ * CredentialRecorder — forwards `agentfootprint.credential.*` emits to the
+ * dispatcher.
+ *
+ * Pattern: Factory over EmitBridge.
+ * Role:    Bridges the declare-and-push credential lifecycle — requested,
+ *          acquired, authorization_required, failed — so consumers observe it
+ *          via `agent.on('agentfootprint.credential.failed', …)` and
+ *          `agent.on('agentfootprint.credential.*', …)`.
+ * Emits:   agentfootprint.credential.{requested,acquired,authorization_required,failed}
+ *
+ * ── Why this did not exist until 9.4.0, and what it cost ────────────────────
+ * The credential domain has had payload types, registry entries and real
+ * `typedEmit` call sites since 6.11.0 — and NO BRIDGE. Every one of those
+ * events was raised onto footprintjs's emit channel and stopped there: a raw
+ * `agent.attach()` recorder saw them, and `agent.on(...)` never did. So the
+ * documented way to watch for credential failures observed nothing, and an AWS
+ * identity adapter that failed 100% of its calls for two minor versions did so
+ * in a silence that read exactly like health.
+ *
+ * This is the law CLAUDE.md states for a new event DOMAIN — payload + registry
+ * entry + `DomainWildcard` arm + a bridge attach — with the fourth part
+ * missing. Zero-cost when nothing fires: `EmitBridge` drops an event with no
+ * listener before building any meta.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.credentialRecorder = void 0;
+const EmitBridge_js_1 = require("./EmitBridge.js");
+function credentialRecorder(options) {
+    return new EmitBridge_js_1.EmitBridge({
+        id: options.id ?? 'agentfootprint.credential-recorder',
+        prefix: 'agentfootprint.credential.',
+        dispatcher: options.dispatcher,
+        getRunContext: options.getRunContext,
+    });
+}
+exports.credentialRecorder = credentialRecorder;
+//# sourceMappingURL=CredentialRecorder.js.map

package/dist/recorders/core/CredentialRecorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialRecorder.js","sourceRoot":"","sources":["../../../src/recorders/core/CredentialRecorder.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;;;AAEH,mDAAqE;AAMrE,SAAgB,kBAAkB,CAAC,OAAkC;IACnE,OAAO,IAAI,0BAAU,CAAC;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,oCAAoC;QACtD,MAAM,EAAE,4BAA4B;QACpC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;AACL,CAAC;AAPD,gDAOC"}

package/dist/security/index.js

@@ -11,8 +11,12 @@
  * Today's surface is small and data-driven on purpose: one role
  * allowlist primitive that satisfies BOTH the v2.4 `PermissionChecker`
  * interface AND a sync `isAllowed(toolId)` predicate for use with
- * `gatedTools` from `agentfootprint/providers` — plus
- * `agentCorePolicy()`, the same port answered by a remote policy store.
+ * `gatedTools` from `agentfootprint/providers`.
+ *
+ * There is no shipped REMOTE policy engine. `agentCorePolicy()` was one
+ * through 9.3.0 and is retired in 9.4.0 — see the note beside its export
+ * below. The port stays open: a remote checker is an object with a
+ * `check()` method, and anybody can write one.
  *
  * A local allowlist and a remote policy engine differ in one way that
  * matters here: the local one can answer synchronously, so it doubles
@@ -44,7 +48,7 @@
  *   const agent = Agent.create({ provider, model, permissionChecker: policy }).build();
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.agentCorePolicy = exports.REDACTED_PLACEHOLDER = exports.redactThinkingBlocks = exports.SYNTHETIC_DENY_PREFIX = exports.extractSequence = exports.PolicyHaltError = exports.PermissionPolicy = void 0;
+exports.AgentCorePolicyRetiredError = exports.agentCorePolicy = exports.REDACTED_PLACEHOLDER = exports.redactThinkingBlocks = exports.SYNTHETIC_DENY_PREFIX = exports.extractSequence = exports.PolicyHaltError = exports.PermissionPolicy = void 0;
 var PermissionPolicy_js_1 = require("./PermissionPolicy.js");
 Object.defineProperty(exports, "PermissionPolicy", { enumerable: true, get: function () { return PermissionPolicy_js_1.PermissionPolicy; } });
 var PolicyHaltError_js_1 = require("./PolicyHaltError.js");
@@ -55,10 +59,12 @@ Object.defineProperty(exports, "SYNTHETIC_DENY_PREFIX", { enumerable: true, get:
 var thinkingRedaction_js_1 = require("./thinkingRedaction.js");
 Object.defineProperty(exports, "redactThinkingBlocks", { enumerable: true, get: function () { return thinkingRedaction_js_1.redactThinkingBlocks; } });
 Object.defineProperty(exports, "REDACTED_PLACEHOLDER", { enumerable: true, get: function () { return thinkingRedaction_js_1.REDACTED_PLACEHOLDER; } });
-// A remote policy engine behind the same port. Lazy peer-dep: importing this
-// barrel loads no AWS SDK — only constructing the checker and letting it
-// evaluate does. Same home as `PermissionPolicy` because it is the same job,
-// just asked of somebody else.
+// RETIRED in 9.4.0. `agentCorePolicy()` dispatched a command that does not
+// exist in `@aws-sdk/client-bedrock-agentcore`, because AgentCore has no
+// data-plane policy-evaluation operation — policy is enforced AT THE GATEWAY.
+// The export stays and refuses at construction with the whole explanation; the
+// alternatives are `PermissionPolicy.fromRoles` above and `.toolMiddleware()`.
 var agentcore_js_1 = require("../adapters/security/agentcore.js");
 Object.defineProperty(exports, "agentCorePolicy", { enumerable: true, get: function () { return agentcore_js_1.agentCorePolicy; } });
+Object.defineProperty(exports, "AgentCorePolicyRetiredError", { enumerable: true, get: function () { return agentcore_js_1.AgentCorePolicyRetiredError; } });
 //# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;;;AAEH,6DAAyD;AAAhD,uHAAA,gBAAgB,OAAA;AAGzB,2DAAuD;AAA9C,qHAAA,eAAe,OAAA;AAGxB,2DAA8E;AAArE,qHAAA,eAAe,OAAA;AAAE,2HAAA,qBAAqB,OAAA;AAG/C,+DAAoF;AAA3E,4HAAA,oBAAoB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAEnD,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,+BAA+B;AAC/B,kEAO2C;AANzC,+GAAA,eAAe,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;;;AAEH,6DAAyD;AAAhD,uHAAA,gBAAgB,OAAA;AAGzB,2DAAuD;AAA9C,qHAAA,eAAe,OAAA;AAGxB,2DAA8E;AAArE,qHAAA,eAAe,OAAA;AAAE,2HAAA,qBAAqB,OAAA;AAG/C,+DAAoF;AAA3E,4HAAA,oBAAoB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAEnD,2EAA2E;AAC3E,yEAAyE;AACzE,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,kEAQ2C;AAPzC,+GAAA,eAAe,OAAA;AACf,2HAAA,2BAA2B,OAAA"}

package/dist/types/adapters/identity/agentcore.d.ts

@@ -33,25 +33,41 @@
  * tenant isolation derives from the workload identity itself (per-tenant
  * workloads), or encode it via `userIdFor` (e.g. `${tenant}:${principal}`).
  *
+ * ── How this talks to the SDK (9.4.0 — read this before editing) ────────────
+ * Through **`client.send(new SomeCommand(input))`**, never through a method on
+ * the client. A bare `@aws-sdk/client-*` **Client** is command-based: its
+ * prototype carries `send` and `destroy` and NOTHING ELSE. The per-operation
+ * shortcuts (`getResourceOauth2Token(...)`) live on the AGGREGATED client
+ * (`BedrockAgentCore`), which is a different class.
+ *
+ * Until 9.4.0 this adapter built a `BedrockAgentCoreClient` and then duck-typed
+ * `client.getResourceOauth2Token` — a method that is never there — so the
+ * documented path failed 100% of the time on the very first call, with a
+ * message blaming the SDK version. Every test injected `_client` and so never
+ * touched the shim. The sibling memory adapter in this same package had the
+ * command form right all along; this one now matches it, and
+ * `test/adapters/aws/aws-command-pin.test.ts` pins the command names for both.
+ *
  * Pattern: Adapter (GoF) + lazy peer-dep load — the AWS SDK is required only when
- * `getCredential` first runs (or never, if you inject `_client`). NOTE: confirm
- * the SDK command/field names against your installed
- * `@aws-sdk/client-bedrock-agentcore` version — this adapter targets the
- * `GetResourceOauth2Token` shape and is structured so the request→result mapping
- * is unit-tested via the `_client` seam independent of the SDK.
+ * `getCredential` first runs (or never, if you inject `_client` / `_sdk`).
  */
 import type { CredentialProvider } from '../../identity/types.js';
 /** Raw result shape we consume from the AgentCore identity client. */
 export interface AgentCoreOauthResponse {
     readonly accessToken?: string;
     readonly authorizationUrl?: string;
+    /** Correlates a 3LO consent round-trip. The real service reports this as
+     *  `sessionUri`; the SDK shim renames it here. */
     readonly sessionId?: string;
-    /** Unix seconds. */
+    /** Unix seconds. **AgentCore does not report one** —
+     *  `GetResourceOauth2TokenResponse` has no expiry field, so this is only ever
+     *  populated by an injected `_client` that knows one from elsewhere. */
     readonly expiresAt?: number;
 }
-/** The minimal client surface the adapter calls — wraps `GetResourceOauth2Token`
+/** The minimal, operation-semantic surface the adapter calls — `GetResourceOauth2Token`
  *  and (for per-user workload scoping) `GetWorkloadAccessTokenForUserId`.
- *  The real AWS SDK client is adapted to this; tests inject a fake via `_client`. */
+ *  `createIdentityClient` maps the real SDK's `send(new Command(...))` onto this;
+ *  tests and custom integrations inject a fake via `_client`. */
 export interface AgentCoreIdentityClientLike {
     getResourceOauth2Token(input: {
         readonly resourceCredentialProviderName: string;
@@ -93,8 +109,22 @@ export interface AgentCoreIdentityOptions {
     }) => string | undefined;
     /** Stable provider id (default 'agentcore-identity'). */
     readonly id?: string;
-    /** Test seam — inject a client implementing {@link AgentCoreIdentityClientLike}. */
+    /** Test seam — inject a client implementing {@link AgentCoreIdentityClientLike}.
+     *  Bypasses the SDK entirely; the field mapping below is then yours. */
     readonly _client?: AgentCoreIdentityClientLike;
+    /** @internal Test injection — the AWS SDK module, to exercise the real shim
+     *  (`send(new Command(...))`) with a fake SDK. */
+    readonly _sdk?: BedrockAgentCoreIdentitySdkModule;
+}
+/** The slice of `@aws-sdk/client-bedrock-agentcore` this shim touches. */
+export interface BedrockAgentCoreIdentitySdkModule {
+    readonly BedrockAgentCoreClient?: new (config: {
+        region?: string;
+    }) => {
+        send(cmd: unknown): Promise<unknown>;
+    };
+    readonly GetResourceOauth2TokenCommand?: new (input: unknown) => unknown;
+    readonly GetWorkloadAccessTokenForUserIdCommand?: new (input: unknown) => unknown;
 }
 /** Build a {@link CredentialProvider} backed by AWS Bedrock AgentCore Identity. */
 export declare function agentCoreIdentity(options?: AgentCoreIdentityOptions): CredentialProvider;

package/dist/types/adapters/identity/agentcore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentcore.d.ts","sourceRoot":"","sources":["../../../../src/adapters/identity/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,KAAK,EACV,kBAAkB,EAGnB,MAAM,yBAAyB,CAAC;AAGjC,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB;IACpB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;qFAEqF;AACrF,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB,CAAC,KAAK,EAAE;QAC5B,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAC;QAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,UAAU,EAAE,KAAK,GAAG,iBAAiB,CAAC;QAC/C,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;QACtC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KACzC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC;;kEAE8D;IAC9D,+BAA+B,CAAC,CAAC,KAAK,EAAE;QACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;2DAEuD;IACvD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;0FAIsF;IACtF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;iEAI6D;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE;QAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;CAChD;AAwCD,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,kBAAkB,CAuE5F"}
+{"version":3,"file":"agentcore.d.ts","sourceRoot":"","sources":["../../../../src/adapters/identity/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAGH,OAAO,KAAK,EACV,kBAAkB,EAGnB,MAAM,yBAAyB,CAAC;AAGjC,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;sDACkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;4EAEwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;iEAGiE;AACjE,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB,CAAC,KAAK,EAAE;QAC5B,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAC;QAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,UAAU,EAAE,KAAK,GAAG,iBAAiB,CAAC;QAC/C,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;QACtC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KACzC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC;;kEAE8D;IAC9D,+BAA+B,CAAC,CAAC,KAAK,EAAE;QACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;2DAEuD;IACvD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;0FAIsF;IACtF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;iEAI6D;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE;QAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB;4EACwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;IAC/C;sDACkD;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC;CACnD;AAED,0EAA0E;AAC1E,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK;QACrE,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,6BAA6B,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACzE,QAAQ,CAAC,sCAAsC,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACnF;AA6GD,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,kBAAkB,CAyE5F"}

package/dist/types/adapters/llm/BedrockProvider.d.ts

@@ -144,6 +144,30 @@ export interface BedrockProviderOptions {
         readonly Converse: new (input: BedrockConverseCommand) => unknown;
         readonly ConverseStream: new (input: BedrockConverseCommand) => unknown;
     };
+    /**
+     * @internal Test injection (9.4.0) — the AWS SDK MODULE, keyed by the
+     * constructor names the package really exports.
+     *
+     * `_commands` above is keyed `Converse` / `ConverseStream`, which is
+     * convenient and hides the one fact worth pinning: which exported command
+     * this adapter reaches for. Two adapters in this package have shipped
+     * dispatching operations that do not exist, so the shared pin
+     * (test/adapters/aws/) drives every AWS adapter through an `_sdk` double and
+     * asserts the names. Takes precedence over `_commands` when both are given.
+     */
+    readonly _sdk?: BedrockConverseSdkModule;
+}
+/**
+ * The slice of `@aws-sdk/client-bedrock-runtime` this provider touches, named
+ * as the package names it. (The embedder door declares its own slice for
+ * `InvokeModel` — same package, different operation.)
+ */
+export interface BedrockConverseSdkModule {
+    readonly BedrockRuntimeClient?: new (config: {
+        region?: string;
+    }) => BedrockClient;
+    readonly ConverseCommand?: new (input: BedrockConverseCommand) => unknown;
+    readonly ConverseStreamCommand?: new (input: BedrockConverseCommand) => unknown;
 }
 export declare function bedrock(options?: BedrockProviderOptions): LLMProvider;
 export declare class BedrockProvider implements LLMProvider {

package/dist/types/adapters/llm/BedrockProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BedrockProvider.d.ts","sourceRoot":"","sources":["../../../../src/adapters/llm/BedrockProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,QAAQ,EAER,WAAW,EACX,UAAU,EACV,WAAW,EAEX,QAAQ,EACT,MAAM,aAAa,CAAC;AAKrB,UAAU,aAAa;IACrB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1C;AAED,UAAU,sBAAsB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,WAAW,EAAE,CAAC;QACrB;;mEAE2D;QAC3D,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KACzC,CAAC;IACF,eAAe,CAAC,EAAE;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;CACH;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED,KAAK,mBAAmB,GACpB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;CAAE,GAChF;IACE,UAAU,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;KAC9B,CAAC;CACH,CAAC;AAEN,UAAU,WAAW;IACnB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC;KAChD,CAAC;CACH;AAqBD;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,CAAC,EAAE;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KAC7D,CAAC;IACF,iBAAiB,CAAC,EAAE;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,KAAK,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KACzD,CAAC;IACF,gBAAgB,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,WAAW,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAEtE;AAQD,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,QAAQ,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;QAClE,QAAQ,CAAC,cAAc,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;KACzE,CAAC;CACH;AAaD,wBAAgB,OAAO,CAAC,OAAO,GAAE,sBAA2B,GAAG,WAAW,CAkIzE;AAED,qBAAa,eAAgB,YAAW,WAAW;IACjD,QAAQ,CAAC,IAAI,aAAa;IAC1B,QAAQ,CAAC,iBAAiB,sBAAuB;IACjD,QAAQ,CAAC,uBAAuB,QAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;gBAExB,OAAO,GAAE,sBAA2B;IAKhD,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAIrE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC;CAIvE"}
+{"version":3,"file":"BedrockProvider.d.ts","sourceRoot":"","sources":["../../../../src/adapters/llm/BedrockProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,QAAQ,EAER,WAAW,EACX,UAAU,EACV,WAAW,EAEX,QAAQ,EACT,MAAM,aAAa,CAAC;AAKrB,UAAU,aAAa;IACrB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1C;AAED,UAAU,sBAAsB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,WAAW,EAAE,CAAC;QACrB;;mEAE2D;QAC3D,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KACzC,CAAC;IACF,eAAe,CAAC,EAAE;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;CACH;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED,KAAK,mBAAmB,GACpB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;CAAE,GAChF;IACE,UAAU,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;KAC9B,CAAC;CACH,CAAC;AAEN,UAAU,WAAW;IACnB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC;KAChD,CAAC;CACH;AAqBD;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,CAAC,EAAE;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KAC7D,CAAC;IACF,iBAAiB,CAAC,EAAE;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,KAAK,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KACzD,CAAC;IACF,gBAAgB,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,WAAW,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAEtE;AAQD,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,QAAQ,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;QAClE,QAAQ,CAAC,cAAc,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;KACzE,CAAC;IACF;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,wBAAwB,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,KAAK,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,aAAa,CAAC;IACnF,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;IAC1E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;CACjF;AAaD,wBAAgB,OAAO,CAAC,OAAO,GAAE,sBAA2B,GAAG,WAAW,CAkIzE;AAED,qBAAa,eAAgB,YAAW,WAAW;IACjD,QAAQ,CAAC,IAAI,aAAa;IAC1B,QAAQ,CAAC,iBAAiB,sBAAuB;IACjD,QAAQ,CAAC,uBAAuB,QAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;gBAExB,OAAO,GAAE,sBAA2B;IAKhD,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAIrE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC;CAIvE"}