agentfootprint 9.28.0 → 9.30.0

package/dist/esm/adapters/hosting/googleAgentEngine.js

@@ -14,32 +14,83 @@
  * was designed under; where the product name and the API disagree, the API is
  * the one that has not moved.
  *
- * ── The fit, and it is a good one ───────────────────────────────────────────
+ * ── The fit, and the one thing it cost ──────────────────────────────────────
  * `Session.sessionState` is an arbitrary JSON `Struct`. A `CheckpointEnvelope`
  * is arbitrary JSON. So the envelope goes in whole, under one key, and comes
- * back whole — no event log to fold, no blob encoding to get wrong, no
- * per-turn append. That is a materially better fit than the other column's
- * session store, which had to learn the hard way that an object handed to an
- * event blob comes back as somebody else's `toString()`.
+ * back whole — no event log to fold, no blob encoding to get wrong. What it
+ * cost is the WRITE VERB, and that took a field trial to learn: state goes in
+ * through an appended EVENT, never through a patch. See fact 2b below.
  *
- * ── The four facts that shaped the code, all read off the installed SDK ─────
+ * ── The five facts that shaped the code ─────────────────────────────────────
  *  1. **`sessions.create` takes a caller-supplied `sessionId`.** So our session
  *     id IS the resource id and `hydrate` is one `get` by name. No mapping
  *     table, no listing to find a conversation.
  *  2. **`create` and `delete` answer a long-running Operation; `get` and
- *     `patch` answer the Session.** Every write here therefore waits for the
- *     operation to report `done` before it returns — a `persist` that returned
- *     early would make the very next `hydrate` a race whose failure mode is
- *     "no conversation", which nobody can tell from a new user.
+ *     `appendEvent` answer directly.** Every operation-shaped write here waits
+ *     for `done` before it returns — a `persist` that returned early would make
+ *     the very next `hydrate` a race whose failure mode is "no conversation",
+ *     which nobody can tell from a new user.
+ *
+ *  2b. **`sessionState` CANNOT be patched. This one is field truth, and it cost
+ *     a release.** 9.29.0 wrote the steady state as
+ *     `sessions.patch({ updateMask: 'sessionState,ttl' })`, which every
+ *     injected-client test accepted because a double will patch anything. An
+ *     independent field trial ran it against the live service (2026-08-14) and
+ *     found that turn one stored and **every later turn failed**:
+ *
+ *       HTTP 400 — "Can't update the session state for session …, you can only
+ *                   update it by appending an event."
+ *
+ *     A store that keeps the first turn of a conversation and refuses the
+ *     second is not a session store, so the verb changed rather than the
+ *     documentation: `persist` now appends a `SessionEvent` whose
+ *     `actions.stateDelta` carries the envelope, which the same trial verified
+ *     end to end (append accepted, `GET` returned the new state).
+ *
+ *     Two consequences worth saying out loud, because they are the difference
+ *     between this fix and a plausible-looking one:
+ *
+ *       • **A state delta MERGES by top-level key.** This store writes exactly
+ *         one key — {@link SESSION_STATE_KEY} — so "merge the delta" and
+ *         "replace our key" are the same outcome for us, and another guest's
+ *         keys under the same session are left alone either way.
+ *       • **A conversation now has an event log behind it**, one event per
+ *         persisted turn, because that is the only writing surface the service
+ *         offers. Nothing here READS that log — `hydrate` still reads the one
+ *         envelope out of `sessionState` — so the log is the service's audit
+ *         trail of our writes and never a second copy of the truth. Sessions
+ *         are per-conversation and events are small; if that growth matters to
+ *         you, `forget()` deletes the session and its events together.
  *  3. **`Session.userId` is required and immutable.** Our port's
  *     `persist(sessionId, envelope)` carries no user, so one has to be
  *     resolved — see {@link AgentEngineSessionsOptions.userId}. Immutable
- *     means the first write decides forever, which is exactly the ownership
- *     rule this library already enforces in its own stores; here the service
- *     enforces it for us.
+ *     means the first write decides forever, which is the same ownership rule
+ *     this library enforces in its own stores.
+ *
+ *     **It is metadata, not authorization, and a field trial proved it.** Two
+ *     sessions were created under `alice` and `bob`; the project's ordinary ADC
+ *     principal then read BOTH by name, presenting neither end-user identity
+ *     (FINDINGS "Native Agent Runtime Sessions"). `userId` is what a listing
+ *     filters on and what a first write pins — it is not a check the service
+ *     performs on a read. So the sentence "here the service enforces it for us"
+ *     would be false: anyone who can call the API with your project's
+ *     credentials and can guess a session id can read that conversation.
+ *
+ *     Where the check belongs is above this port, and this library already has
+ *     it: `envelopeOwner` records who a conversation belongs to, and the
+ *     host/gateway is what must compare that to the authenticated caller
+ *     before handing a session id down here. This adapter is a STORE. Nothing
+ *     that only stores can tell an impostor from an owner.
  *  4. **`ttl` is input-only with a 24-hour floor**, and `expireTime` always
- *     comes back. Sliding expiry is free; an hour-long TTL is not available at
- *     any price.
+ *     comes back. An hour-long TTL is not available at any price.
+ *
+ *     **Sliding expiry is NOT claimed here**, and that changed with fact 2b. A
+ *     `ttl` is sent on `create`, where the service takes it; later turns append
+ *     an event, and whether an appended event renews the expiry is a service
+ *     behaviour nothing in this repository has measured. Rather than send an
+ *     unverified second call per turn to "refresh" it — a write whose only
+ *     evidence would be that it did not error — the adapter sends the ttl once
+ *     and says so. See {@link AgentEngineSessionsOptions.ttl}.
  *
  * ── The laws it inherits rather than re-implements ──────────────────────────
  * `checkEnvelope` runs on the way OUT and on the way IN, so an envelope whose
@@ -65,13 +116,33 @@ const ADAPTER = 'agentEngineSessions';
 export const SESSION_STATE_KEY = 'agentfootprint.envelope';
 /** What a conversation that named nobody is stored under. */
 export const DEFAULT_USER_ID = 'agentfootprint-anonymous';
+/**
+ * The `author` on every event this store appends, unless
+ * {@link AgentEngineSessionsOptions.eventAuthor} names another.
+ *
+ * The service requires the field and treats it as free text. This name says
+ * which library wrote the turn, which is the useful thing to see in the console
+ * beside somebody else's agent writing to the same engine.
+ */
+export const SESSION_EVENT_AUTHOR = 'agentfootprint';
 /**
  * Conversations in Vertex AI's session service — the store that survives a
  * fleet, not just a restart.
  *
- * **Status: contract-shaped and tested; awaiting field use.** Every call is
- * exercised through an injected client and pinned against the really-installed
- * SDK. None of it has yet answered a request from Google in a real project.
+ * **Status: field-validated except the write verb, which is field-CORRECTED.**
+ * An independent trial ran this adapter against a live Agent Runtime engine
+ * (2026-08-14) and everything below answered a real request from Google:
+ * creating first-turn sessions from real envelopes, hydrating them through a
+ * fresh instance, owners preserved, paged `listByUser` filtering, `ownerOf`,
+ * an unknown envelope format refused before storage, and idempotent `forget`.
+ *
+ * The one thing that FAILED was the second write to an existing session — the
+ * core job — because 9.29.0 patched `sessionState` and the service refuses
+ * that. The trial recovered the service's own words and verified the repair
+ * path (`appendEvent` with `actions.stateDelta`, then a `GET` showing the new
+ * state) with a raw diagnostic. This adapter now uses that verb; the repair is
+ * built on measured service behaviour and tested here, but the corrected write
+ * has not itself been re-run through this adapter in a live project.
  *
  * @example  A standing agent whose conversations are shared across instances
  *   import { standingAgent, nodeHost } from 'agentfootprint/hosting';
@@ -102,6 +173,60 @@ export function agentEngineSessions(options) {
             `bug rather than surface it. Build a new store if you need one after closing this.`);
     };
     const nameOf = (sessionId) => `${scope.parent}/sessions/${safeResourceId(sessionId)}`;
+    /**
+     * Does a session by this name exist? Asked ONLY to tell "there is nothing to
+     * append to" apart from "the append itself was refused".
+     *
+     * The live trial proved the two ends of the write path — `create` stores a
+     * new conversation, `appendEvent` updates an existing one — and left the
+     * middle unmeasured: what the service answers when you append to a session
+     * that is not there. Branching on an assumed 404 would put the FIRST turn of
+     * every conversation on a guess. So a failed append asks the resource itself,
+     * which is a fact rather than a convention, and costs one call on the one
+     * turn where the append was never going to work anyway.
+     */
+    const missing = async (name) => {
+        try {
+            await sessions.get({ name });
+            return false;
+        }
+        catch (err) {
+            // Anything that is not a clean "no such session" leaves the append's own
+            // failure standing — it is the one that says what went wrong.
+            return isNotFound(err);
+        }
+    };
+    /**
+     * Write the envelope onto an EXISTING session, as one appended event.
+     *
+     * Answers `false` — rather than raising — for the one case the caller has a
+     * repair for: there is no session here yet, so it has to be created.
+     */
+    const append = async (name, stateDelta) => {
+        try {
+            await sessions.appendEvent({
+                name,
+                requestBody: {
+                    author: options.eventAuthor ?? SESSION_EVENT_AUTHOR,
+                    // Required, and one per persisted turn. It groups the events of one
+                    // invocation on the service's side; this store writes exactly one
+                    // event per turn, so a fresh id per call is the honest grouping.
+                    invocationId: newInvocationId(),
+                    timestamp: new Date().toISOString(),
+                    // ONE top-level key — see the module header. A state delta merges by
+                    // top-level key, so this replaces our envelope and touches nothing
+                    // else in the struct.
+                    actions: { stateDelta },
+                },
+            });
+            return true;
+        }
+        catch (err) {
+            if (isNotFound(err) || (await missing(name)))
+                return false;
+            throw googleSdkFailure(ADAPTER, 'sessions.appendEvent', err);
+        }
+    };
     return {
         parent: scope.parent,
         async hydrate(sessionId) {
@@ -144,54 +269,42 @@ export function agentEngineSessions(options) {
             // read back is one it has no business writing.
             const checked = checkEnvelope(envelope, sessionId);
             const name = nameOf(sessionId);
-            const body = {
-                sessionState: { [SESSION_STATE_KEY]: checked },
-                ...(options.ttl !== undefined && { ttl: options.ttl }),
-            };
-            // PATCH first, CREATE on 404 — rather than the other way round.
+            const state = { [SESSION_STATE_KEY]: checked };
+            // APPEND first, CREATE when there is no session to append to.
             //
-            // The steady state of a conversation is "it already exists": a session
-            // is created once and written on every turn after that. Trying create
-            // first would mean one guaranteed-to-fail call per turn for the life of
-            // every conversation, and would burn a long-running operation to learn
-            // something a patch answers directly.
-            try {
-                await sessions.patch({
-                    name,
-                    // Only the fields we own. Without a mask a patch is a REPLACE, and a
-                    // replace would drop `userId` — which is immutable, so the service
-                    // would refuse the write and a conversation would stop persisting.
-                    updateMask: maskFor(body),
-                    requestBody: body,
-                });
+            // The steady state of a conversation is "it already exists": created
+            // once, written on every turn after that. So the ordinary turn costs one
+            // call, and the extra call is paid on turn one only.
+            //
+            // Appending — not patching. `sessions.patch` with a `sessionState` mask is
+            // refused by the live service (module header, fact 2b); it is the verb
+            // 9.29.0 used and the reason a second turn could not be stored.
+            if (await append(name, state))
                 return;
-            }
-            catch (err) {
-                if (!isNotFound(err))
-                    throw googleSdkFailure(ADAPTER, 'sessions.patch', err);
-            }
             const userId = resolveUserId(sessionId, checked);
             let created;
             try {
                 created = await sessions.create({
                     parent: scope.parent,
                     sessionId: safeResourceId(sessionId),
-                    requestBody: { ...body, userId },
+                    requestBody: {
+                        sessionState: state,
+                        ...(options.ttl !== undefined && { ttl: options.ttl }),
+                        userId,
+                    },
                 });
             }
             catch (err) {
                 // Two writers opened the same conversation at once and the other one
                 // won. That is not a failure: the session exists now, which is all
-                // this call wanted, so the patch below writes our state onto it.
+                // this call wanted, so our state goes on with the same appended event.
                 if (!isAlreadyExists(err))
                     throw googleSdkFailure(ADAPTER, 'sessions.create', err);
-                try {
-                    await sessions.patch({ name, updateMask: maskFor(body), requestBody: body });
-                }
-                catch (patchErr) {
-                    throw googleSdkFailure(ADAPTER, 'sessions.patch', patchErr);
-                }
-                return;
+                if (await append(name, state))
+                    return;
+                // Created by somebody and gone again before we could write to it.
+                // Nothing here can say this turn landed, so it does not say it.
+                throw googleSdkFailure(ADAPTER, 'sessions.create', err);
             }
             // OUTSIDE the try on purpose: this refusal is already sanitized and
             // already says what to do, and re-wrapping it would replace a precise
@@ -334,17 +447,23 @@ function userIdResolver(option) {
     return (_sessionId, envelope) => envelopeOwner(envelope) ?? DEFAULT_USER_ID;
 }
 /**
- * The update mask for a patch.
+ * A fresh `invocationId` for one appended event.
+ *
+ * The field is required and groups the events of one invocation on the
+ * service's side. This store writes exactly one event per persisted turn, so a
+ * new id per call is what that grouping honestly is — reusing one across turns
+ * would tell the console that a whole conversation was a single invocation.
  *
- * A patch with no mask REPLACES the resource, which would clear `userId` — and
- * `userId` is immutable, so the service refuses the write and the conversation
- * silently stops persisting. Naming the fields we own is the whole fix.
+ * `randomUUID` where the runtime has it, and a time-plus-random id where it
+ * does not: this is a correlation label, not a security value, and an adapter
+ * that threw on an old runtime because a label could not be minted would be
+ * failing a conversation over nothing.
  */
-function maskFor(body) {
-    const fields = ['sessionState'];
-    if (body.ttl !== undefined)
-        fields.push('ttl');
-    return fields.join(',');
+function newInvocationId() {
+    const uuid = globalThis.crypto?.randomUUID;
+    if (typeof uuid === 'function')
+        return `af-${uuid.call(globalThis.crypto)}`;
+    return `af-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
 }
 /** The id out of a resource name, which is everything after the last `/`. */
 function lastSegment(name) {

package/dist/esm/adapters/hosting/googleAgentEngine.js.map

@@ -1 +1 @@
-{"version":3,"file":"googleAgentEngine.js","sourceRoot":"","sources":["../../../../src/adapters/hosting/googleAgentEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAOlE,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,4BAA4B,EAC5B,gBAAgB,EAChB,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,GAMf,MAAM,yBAAyB,CAAC;AAEjC,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAgD3D,6DAA6D;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,0BAA0B,CAAC;AA0B1D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACrE,MAAM,KAAK,GAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAyB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAgB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC;IAClF,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;IACtF,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAErD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAQ,EAAE;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,IAAI,KAAK,CACb,iBAAiB,OAAO,eAAe,KAAK,CAAC,MAAM,6BAA6B,IAAI,IAAI;YACtF,sFAAsF;YACtF,mFAAmF,CACtF,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAU,EAAE,CAC3C,GAAG,KAAK,CAAC,MAAM,aAAa,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;IAE1D,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QAEpB,KAAK,CAAC,OAAO,CAAC,SAAiB;YAC7B,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC1B,IAAI,OAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;YACpE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,uEAAuE;gBACvE,eAAe;gBACf,IAAI,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,SAAS,CAAC;gBACtC,MAAM,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAE5C,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC;YACnC,sEAAsE;YACtE,mEAAmE;YACnE,qDAAqD;YACrD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC3C,yEAAyE;YACzE,yDAAyD;YACzD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAClD,MAAM,IAAI,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACvD,CAAC;YACD,wEAAwE;YACxE,uEAAuE;YACvE,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,QAA4B;YAC3D,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC1B,uEAAuE;YACvE,+CAA+C;YAC/C,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAkB;gBAC1B,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAA6C,EAAE;gBACpF,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;aACvD,CAAC;YAEF,gEAAgE;YAChE,EAAE;YACF,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,sCAAsC;YACtC,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,KAAK,CAAC;oBACnB,IAAI;oBACJ,qEAAqE;oBACrE,mEAAmE;oBACnE,mEAAmE;oBACnE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC;oBACzB,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAC/E,CAAC;YAED,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;oBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;oBACpC,WAAW,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE;iBACjC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,mEAAmE;gBACnE,iEAAiE;gBACjE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;oBAAE,MAAM,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;gBACnF,IAAI,CAAC;oBACH,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/E,CAAC;gBAAC,OAAO,QAAQ,EAAE,CAAC;oBAClB,MAAM,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO;YACT,CAAC;YACD,oEAAoE;YACpE,sEAAsE;YACtE,gCAAgC;YAChC,MAAM,cAAc,CAClB,OAAO,EACP,QAAQ,CAAC,UAAU,EACnB,OAAO,EAAE,IAAI,EACb,qBAAqB,SAAS,GAAG,EACjC,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,WAAgC;YAC/D,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC;YAC1E,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,CACL,MAAM,QAAQ,CAAC,IAAI,CAAC;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,kEAAkE;oBAClE,0DAA0D;oBAC1D,MAAM,EAAE,WAAW,gBAAgB,CAAC,MAAM,CAAC,EAAE;oBAC7C,OAAO,EAAE,kBAAkB;oBAC3B,QAAQ,EAAE,KAAK;oBACf,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;iBAC5E,CAAC,CACH,EAAE,IAAI,CAAC;YACV,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBACvD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,iBAAiB,CAAC,CAAC;gBACzD,oEAAoE;gBACpE,qEAAqE;gBACrE,sEAAsE;gBACtE,4DAA4D;gBAC5D,MAAM,QAAQ,GAAG,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpF,OAAO;oBACL,SAAS;oBACT,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;oBAC3D,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC;oBAC1B,YAAY,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,MAAM;iBAC/E,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,EAAE,aAAa,CAAC;YACnC,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;aAC/D,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,SAAiB;YAC7B,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;gBACxE,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;gBAC/B,uEAAuE;gBACvE,sEAAsE;gBACtE,oEAAoE;gBACpE,0DAA0D;gBAC1D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,eAAe;oBAC9E,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,SAAS,CAAC;gBACtC,MAAM,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,SAAiB;YAC5B,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,8CAA8C;gBAC9C,IAAI,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO;gBAC5B,MAAM,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,cAAc,CAClB,OAAO,EACP,QAAQ,CAAC,UAAU,EACnB,OAAO,EAAE,IAAI,EACb,qBAAqB,SAAS,GAAG,EACjC,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAED,KAAK;YACH,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,kFAAkF;AAClF,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CACrB,MAA4C;IAE5C,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE;YAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC3D,MAAM,IAAI,SAAS,CACjB,GAAG,OAAO,oCAAoC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe;oBACnF,IAAI,SAAS,qEAAqE;oBAClF,wEAAwE;oBACxE,2CAA2C;oBAC3C,aAAa,eAAe,oDAAoD;oBAChF,WAAW,CACd,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CACjB,GAAG,OAAO,yEAAyE;gBACjF,oFAAoF;gBACpF,gDAAgD,CACnD,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC;IACtB,CAAC;IACD,sEAAsE;IACtE,gEAAgE;IAChE,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,IAAmB;IAClC,MAAM,MAAM,GAAG,CAAC,cAAc,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,IAA+B;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,KAAgC;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,6EAA6E;AAC7E,SAAS,QAAQ,CAAC,MAAe;IAC/B,MAAM,MAAM,GAAI,MAA2C,EAAE,MAAM,CAAC;IACpE,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC"}
+{"version":3,"file":"googleAgentEngine.js","sourceRoot":"","sources":["../../../../src/adapters/hosting/googleAgentEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqGG;AAEH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAOlE,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,4BAA4B,EAC5B,gBAAgB,EAChB,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,GAMf,MAAM,yBAAyB,CAAC;AAEjC,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AA+D3D,6DAA6D;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AA0BrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACrE,MAAM,KAAK,GAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAyB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAgB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC;IAClF,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;IACtF,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAErD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAQ,EAAE;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,IAAI,KAAK,CACb,iBAAiB,OAAO,eAAe,KAAK,CAAC,MAAM,6BAA6B,IAAI,IAAI;YACtF,sFAAsF;YACtF,mFAAmF,CACtF,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAU,EAAE,CAC3C,GAAG,KAAK,CAAC,MAAM,aAAa,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;IAE1D;;;;;;;;;;;OAWG;IACH,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAoB,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yEAAyE;YACzE,8DAA8D;YAC9D,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAE,UAAmC,EAAoB,EAAE;QAC3F,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,WAAW,CAAC;gBACzB,IAAI;gBACJ,WAAW,EAAE;oBACX,MAAM,EAAE,OAAO,CAAC,WAAW,IAAI,oBAAoB;oBACnD,oEAAoE;oBACpE,kEAAkE;oBAClE,iEAAiE;oBACjE,YAAY,EAAE,eAAe,EAAE;oBAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,qEAAqE;oBACrE,mEAAmE;oBACnE,sBAAsB;oBACtB,OAAO,EAAE,EAAE,UAAU,EAAE;iBACxB;aACF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC3D,MAAM,gBAAgB,CAAC,OAAO,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QAEpB,KAAK,CAAC,OAAO,CAAC,SAAiB;YAC7B,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC1B,IAAI,OAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;YACpE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,uEAAuE;gBACvE,eAAe;gBACf,IAAI,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,SAAS,CAAC;gBACtC,MAAM,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAE5C,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC;YACnC,sEAAsE;YACtE,mEAAmE;YACnE,qDAAqD;YACrD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC3C,yEAAyE;YACzE,yDAAyD;YACzD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAClD,MAAM,IAAI,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACvD,CAAC;YACD,wEAAwE;YACxE,uEAAuE;YACvE,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,QAA4B;YAC3D,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC1B,uEAAuE;YACvE,+CAA+C;YAC/C,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAA6C,EAAE,CAAC;YAErF,8DAA8D;YAC9D,EAAE;YACF,qEAAqE;YACrE,yEAAyE;YACzE,qDAAqD;YACrD,EAAE;YACF,2EAA2E;YAC3E,uEAAuE;YACvE,gEAAgE;YAChE,IAAI,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;gBAAE,OAAO;YAEtC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;oBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;oBACpC,WAAW,EAAE;wBACX,YAAY,EAAE,KAAK;wBACnB,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;wBACtD,MAAM;qBACP;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,mEAAmE;gBACnE,uEAAuE;gBACvE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;oBAAE,MAAM,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;gBACnF,IAAI,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;oBAAE,OAAO;gBACtC,kEAAkE;gBAClE,gEAAgE;gBAChE,MAAM,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YACD,oEAAoE;YACpE,sEAAsE;YACtE,gCAAgC;YAChC,MAAM,cAAc,CAClB,OAAO,EACP,QAAQ,CAAC,UAAU,EACnB,OAAO,EAAE,IAAI,EACb,qBAAqB,SAAS,GAAG,EACjC,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,WAAgC;YAC/D,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC;YAC1E,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,CACL,MAAM,QAAQ,CAAC,IAAI,CAAC;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,kEAAkE;oBAClE,0DAA0D;oBAC1D,MAAM,EAAE,WAAW,gBAAgB,CAAC,MAAM,CAAC,EAAE;oBAC7C,OAAO,EAAE,kBAAkB;oBAC3B,QAAQ,EAAE,KAAK;oBACf,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;iBAC5E,CAAC,CACH,EAAE,IAAI,CAAC;YACV,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBACvD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,iBAAiB,CAAC,CAAC;gBACzD,oEAAoE;gBACpE,qEAAqE;gBACrE,sEAAsE;gBACtE,4DAA4D;gBAC5D,MAAM,QAAQ,GAAG,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpF,OAAO;oBACL,SAAS;oBACT,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;oBAC3D,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC;oBAC1B,YAAY,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,MAAM;iBAC/E,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,EAAE,aAAa,CAAC;YACnC,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;aAC/D,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,SAAiB;YAC7B,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;gBACxE,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;gBAC/B,uEAAuE;gBACvE,sEAAsE;gBACtE,oEAAoE;gBACpE,0DAA0D;gBAC1D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,eAAe;oBAC9E,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,SAAS,CAAC;gBACtC,MAAM,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,SAAiB;YAC5B,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,8CAA8C;gBAC9C,IAAI,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO;gBAC5B,MAAM,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,cAAc,CAClB,OAAO,EACP,QAAQ,CAAC,UAAU,EACnB,OAAO,EAAE,IAAI,EACb,qBAAqB,SAAS,GAAG,EACjC,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAED,KAAK;YACH,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,kFAAkF;AAClF,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CACrB,MAA4C;IAE5C,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE;YAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC3D,MAAM,IAAI,SAAS,CACjB,GAAG,OAAO,oCAAoC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe;oBACnF,IAAI,SAAS,qEAAqE;oBAClF,wEAAwE;oBACxE,2CAA2C;oBAC3C,aAAa,eAAe,oDAAoD;oBAChF,WAAW,CACd,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CACjB,GAAG,OAAO,yEAAyE;gBACjF,oFAAoF;gBACpF,gDAAgD,CACnD,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC;IACtB,CAAC;IACD,sEAAsE;IACtE,gEAAgE;IAChE,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe;IACtB,MAAM,IAAI,GAAI,UAAU,CAAC,MAAoD,EAAE,UAAU,CAAC;IAC1F,IAAI,OAAO,IAAI,KAAK,UAAU;QAAE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5E,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,IAA+B;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,KAAgC;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,6EAA6E;AAC7E,SAAS,QAAQ,CAAC,MAAe;IAC/B,MAAM,MAAM,GAAI,MAA2C,EAAE,MAAM,CAAC;IACpE,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC"}

package/dist/esm/adapters/identity/google.d.ts

@@ -151,10 +151,24 @@ export interface GoogleIdentityOptions {
 /**
  * Vend Google access tokens from whatever credential this environment has.
  *
- * **Status: contract-shaped and tested; awaiting field use.** Every path is
- * exercised through an injected client and the loaded surface is pinned
- * against the really-installed package. None of it has yet answered a real
- * Google token request in a live project.
+ * **Status: field-validated for machine identity; refresh bounded.** An
+ * independent trial ran this adapter on live Google Cloud (2026-08-14):
+ * `googleIdentity({ services: ['aiplatform'] })` vended a real bearer
+ * credential from Application Default Credentials, and that credential
+ * authorized a Vertex AI request with HTTP 200. The same run proved the
+ * `bearer` kind, an expiry about 3,599 seconds out, a second vend without
+ * reconstruction, `mode: 'user'` failing CLOSED rather than quietly handing
+ * back machine access, a disallowed service failing closed, and
+ * `JSON.stringify(credential)` yielding `{"kind":"bearer"}` — no token, no
+ * Authorization header.
+ *
+ * **What is NOT proven:** an expiry-triggered refresh. The trial called the
+ * provider twice minutes apart and checked a future expiry; it did not wait an
+ * hour. Google's own auth client is what refreshes (this adapter caches the
+ * CLIENT, never a token — see {@link CachedGoogleClient}), and that refresh was
+ * field-proved on a different door (`gemini({ googleAuthOptions })`). A soak or
+ * a controlled expiring-credential double is still owed before anyone claims
+ * long-duration production proof for THIS provider.
  *
  * @throws when `mode: 'user'` is requested — Google's per-user token vault has
  *   no Node surface, and a machine token returned in its place would be a

package/dist/esm/adapters/identity/google.js

@@ -62,10 +62,24 @@ export const CLOUD_PLATFORM_SCOPE = 'https://www.googleapis.com/auth/cloud-platf
 /**
  * Vend Google access tokens from whatever credential this environment has.
  *
- * **Status: contract-shaped and tested; awaiting field use.** Every path is
- * exercised through an injected client and the loaded surface is pinned
- * against the really-installed package. None of it has yet answered a real
- * Google token request in a live project.
+ * **Status: field-validated for machine identity; refresh bounded.** An
+ * independent trial ran this adapter on live Google Cloud (2026-08-14):
+ * `googleIdentity({ services: ['aiplatform'] })` vended a real bearer
+ * credential from Application Default Credentials, and that credential
+ * authorized a Vertex AI request with HTTP 200. The same run proved the
+ * `bearer` kind, an expiry about 3,599 seconds out, a second vend without
+ * reconstruction, `mode: 'user'` failing CLOSED rather than quietly handing
+ * back machine access, a disallowed service failing closed, and
+ * `JSON.stringify(credential)` yielding `{"kind":"bearer"}` — no token, no
+ * Authorization header.
+ *
+ * **What is NOT proven:** an expiry-triggered refresh. The trial called the
+ * provider twice minutes apart and checked a future expiry; it did not wait an
+ * hour. Google's own auth client is what refreshes (this adapter caches the
+ * CLIENT, never a token — see {@link CachedGoogleClient}), and that refresh was
+ * field-proved on a different door (`gemini({ googleAuthOptions })`). A soak or
+ * a controlled expiring-credential double is still owed before anyone claims
+ * long-duration production proof for THIS provider.
  *
  * @throws when `mode: 'user'` is requested — Google's per-user token vault has
  *   no Node surface, and a machine token returned in its place would be a

package/dist/esm/adapters/identity/google.js.map

@@ -1 +1 @@
-{"version":3,"file":"google.js","sourceRoot":"","sources":["../../../../src/adapters/identity/google.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAOjD,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAEjC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,gDAAgD,CAAC;AAwGrF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,cAAc,CAAC,UAAiC,EAAE;IAChE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvF,MAAM,KAAK,GAAuB,EAAE,CAAC;IAErC,MAAM,SAAS,GAAG,CAAC,MAAyB,EAAiC,EAAE;QAC7E,+DAA+D;QAC/D,2EAA2E;QAC3E,0EAA0E;QAC1E,2DAA2D;QAC3D,IAAI,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,iBAAiB;QAEnC,KAAK,CAAC,aAAa,CAAC,GAAsB;YACxC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,6CAA6C,GAAG,CAAC,OAAO,cAAc;oBAC9E,8BAA8B;oBAC9B,kFAAkF;oBAClF,mFAAmF;oBACnF,gFAAgF;oBAChF,aAAa;oBACb,kFAAkF;oBAClF,iFAAiF;oBACjF,SAAS;oBACT,iFAAiF;oBACjF,yEAAyE,CAC5E,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAChC,sEAAsE;gBACtE,oEAAoE;gBACpE,qEAAqE;gBACrE,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,kCAAkC,GAAG,CAAC,OAAO,2BAA2B;oBAChF,mFAAmF;oBACnF,yCAAyC;oBACzC,oFAAoF;oBACpF,0DAA0D,CAC7D,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,sCAAsC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;oBACjF,cAAc,GAAG,CAAC,OAAO,MAAM;oBAC/B,iFAAiF;oBACjF,kFAAkF;oBAClF,mBAAmB;oBACnB,gBAAgB,GAAG,CAAC,OAAO,uDAAuD,CACrF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;YAC9F,IAAI,MAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sEAAsE;gBACtE,sEAAsE;gBACtE,qEAAqE;gBACrE,kEAAkE;gBAClE,mEAAmE;gBACnE,qEAAqE;gBACrE,+DAA+D;gBAC/D,IAAI,YAAY,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;gBACjC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YAED,IAAI,MAAmE,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC;YAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,mDAAmD,GAAG,CAAC,OAAO,MAAM;oBAC5E,8EAA8E;oBAC9E,yEAAyE;oBACzE,mFAAmF;oBACnF,uCAAuC,CAC1C,CAAC;YACJ,CAAC;YAED,yEAAyE;YACzE,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC;YACjD,MAAM,SAAS,GACb,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;gBACvE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAC7B,CAAC,CAAC,SAAS,CAAC;YAEhB,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC;gBACzB,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;aAC9C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,SAAS,UAAU,CAAC,CAAoB,EAAE,CAAoB;IAC5D,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,WAAW,CACxB,OAA8B,EAC9B,MAAyB;IAEzB,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtC,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,wEAAwE;YAChF,kFAAkF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IAE7E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAE7C,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,uEAAuE;YAC/E,+EAA+E;YAC/E,6BAA6B,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,WAAW,CAAC,eAAe,KAAK,QAAQ,IAAI,WAAW,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QAC1F,MAAM,IAAI,SAAS,CACjB,GAAG,OAAO,+EAA+E;YACvF,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC;QAC1B,YAAY,EAAE,MAAM;QACpB,eAAe,EAAE,WAAW,CAAC,eAAe;QAC5C,YAAY,EAAE,CAAC,GAAG,MAAM,CAAC;QACzB,GAAG,CAAC,WAAW,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,WAAW,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,eAAe,EAAE,CAAC;KAC5F,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,QAAyC;IAC5D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,WAAW,CAAsB,qBAAqB,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,0DAA0D;YAClE,+CAA+C;YAC/C,sFAAsF;YACtF,2BAA2B,CAC9B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,KAAK,CACvB,GAAG,OAAO,iEAAiE,IAAI,KAAK;QAClF,mFAAmF;QACnF,kFAAkF;QAClF,gFAAgF;QAChF,qEAAqE;QACrE,iFAAiF;QACjF,cAAc,CACjB,CAAC;IACF,OAAO,CAAC,IAAI,GAAG,mCAAmC,CAAC;IACnD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,SAAS,UAAU,CAAC,SAAiB,EAAE,GAAY;IACjD,MAAM,OAAO,GAAG,IAAI,KAAK,CACvB,GAAG,OAAO,KAAK,SAAS,aAAa,SAAS,CAAC,GAAG,CAAC,KAAK;QACtD,oFAAoF;QACpF,0FAA0F,CAC7F,CAAC;IACF,OAAO,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;IACtD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;AACnF,CAAC"}
+{"version":3,"file":"google.js","sourceRoot":"","sources":["../../../../src/adapters/identity/google.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAOjD,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAEjC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,gDAAgD,CAAC;AAwGrF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,UAAU,cAAc,CAAC,UAAiC,EAAE;IAChE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvF,MAAM,KAAK,GAAuB,EAAE,CAAC;IAErC,MAAM,SAAS,GAAG,CAAC,MAAyB,EAAiC,EAAE;QAC7E,+DAA+D;QAC/D,2EAA2E;QAC3E,0EAA0E;QAC1E,2DAA2D;QAC3D,IAAI,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,iBAAiB;QAEnC,KAAK,CAAC,aAAa,CAAC,GAAsB;YACxC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,6CAA6C,GAAG,CAAC,OAAO,cAAc;oBAC9E,8BAA8B;oBAC9B,kFAAkF;oBAClF,mFAAmF;oBACnF,gFAAgF;oBAChF,aAAa;oBACb,kFAAkF;oBAClF,iFAAiF;oBACjF,SAAS;oBACT,iFAAiF;oBACjF,yEAAyE,CAC5E,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAChC,sEAAsE;gBACtE,oEAAoE;gBACpE,qEAAqE;gBACrE,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,kCAAkC,GAAG,CAAC,OAAO,2BAA2B;oBAChF,mFAAmF;oBACnF,yCAAyC;oBACzC,oFAAoF;oBACpF,0DAA0D,CAC7D,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,sCAAsC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;oBACjF,cAAc,GAAG,CAAC,OAAO,MAAM;oBAC/B,iFAAiF;oBACjF,kFAAkF;oBAClF,mBAAmB;oBACnB,gBAAgB,GAAG,CAAC,OAAO,uDAAuD,CACrF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;YAC9F,IAAI,MAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sEAAsE;gBACtE,sEAAsE;gBACtE,qEAAqE;gBACrE,kEAAkE;gBAClE,mEAAmE;gBACnE,qEAAqE;gBACrE,+DAA+D;gBAC/D,IAAI,YAAY,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;gBACjC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YAED,IAAI,MAAmE,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC;YAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,mDAAmD,GAAG,CAAC,OAAO,MAAM;oBAC5E,8EAA8E;oBAC9E,yEAAyE;oBACzE,mFAAmF;oBACnF,uCAAuC,CAC1C,CAAC;YACJ,CAAC;YAED,yEAAyE;YACzE,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC;YACjD,MAAM,SAAS,GACb,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;gBACvE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAC7B,CAAC,CAAC,SAAS,CAAC;YAEhB,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC;gBACzB,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;aAC9C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,SAAS,UAAU,CAAC,CAAoB,EAAE,CAAoB;IAC5D,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,WAAW,CACxB,OAA8B,EAC9B,MAAyB;IAEzB,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtC,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,wEAAwE;YAChF,kFAAkF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IAE7E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAE7C,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,uEAAuE;YAC/E,+EAA+E;YAC/E,6BAA6B,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,WAAW,CAAC,eAAe,KAAK,QAAQ,IAAI,WAAW,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QAC1F,MAAM,IAAI,SAAS,CACjB,GAAG,OAAO,+EAA+E;YACvF,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC;QAC1B,YAAY,EAAE,MAAM;QACpB,eAAe,EAAE,WAAW,CAAC,eAAe;QAC5C,YAAY,EAAE,CAAC,GAAG,MAAM,CAAC;QACzB,GAAG,CAAC,WAAW,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,WAAW,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,eAAe,EAAE,CAAC;KAC5F,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,QAAyC;IAC5D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,WAAW,CAAsB,qBAAqB,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,0DAA0D;YAClE,+CAA+C;YAC/C,sFAAsF;YACtF,2BAA2B,CAC9B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,KAAK,CACvB,GAAG,OAAO,iEAAiE,IAAI,KAAK;QAClF,mFAAmF;QACnF,kFAAkF;QAClF,gFAAgF;QAChF,qEAAqE;QACrE,iFAAiF;QACjF,cAAc,CACjB,CAAC;IACF,OAAO,CAAC,IAAI,GAAG,mCAAmC,CAAC;IACnD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,SAAS,UAAU,CAAC,SAAiB,EAAE,GAAY;IACjD,MAAM,OAAO,GAAG,IAAI,KAAK,CACvB,GAAG,OAAO,KAAK,SAAS,aAAa,SAAS,CAAC,GAAG,CAAC,KAAK;QACtD,oFAAoF;QACpF,0FAA0F,CAC7F,CAAC;IACF,OAAO,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;IACtD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;AACnF,CAAC"}

package/dist/esm/adapters/llm/GeminiProvider.d.ts

@@ -26,18 +26,77 @@
  * the first call, which reads like a network problem rather than a missing
  * setting.
  *
+ * ─── Status, per door, because the doors differ ─────────────────────
+ *
+ * • **Vertex: field-validated.** An independent trial ran this adapter,
+ *   unchanged since 9.13.0, against a live project through Application Default
+ *   Credentials: a two-call tool loop on `gemini-2.5-flash` returning the
+ *   expected answer with real token counts, and a stream delivering 10 content
+ *   chunks that reconstructed exactly (FINDINGS "Part 1 — native Gemini on
+ *   Vertex through ADC", "Part 2C"). `geminiEmbedder` passed on the same door.
+ * • **Gemini API (AI Studio): NOT field-validated, and not for want of
+ *   trying.** The trial's key-door calls never reached a model: the old
+ *   default model answered 404 for a new account, and a current model answered
+ *   429 for AI Studio prepayment, which is billing SEPARATE from the Google
+ *   Cloud account's credit. What that door does with a funded key is
+ *   untested here, which is why it has no default model.
+ * • **Tool calling on a 3.x model: field-validated.** The signature round trip
+ *   below was built from the trial's captured 400, and the same independent
+ *   trial then re-ran it on live Vertex against the published fix
+ *   (2026-08-14): `gemini-3.1-flash-lite` called a tool, the tool answered,
+ *   the signature went back byte for byte, and the second model call
+ *   completed with the right answer — two LLM calls, one tool execution, real
+ *   token counts. What it does NOT cover is a signature attached to a TEXT
+ *   part with no function call beside it; see below.
+ *
  * ─── Why native, and not `openai({ baseURL })` ──────────────────────
  *
  * Google publishes an OpenAI-compatible endpoint, and it does work — for about
- * an hour. It authenticates with an OAuth access token that expires and has no
- * refresh home in `OpenAIProviderOptions`; its `tools.function.parameters` is
- * **OpenAPI**, not JSON Schema, so `$ref` / `oneOf` / `additionalProperties`
- * diverge silently; unsupported parameters are ignored rather than refused; and
- * its documented response carries no cached- or reasoning-token counts. This
- * adapter exists because every one of those is answerable on the native SDK:
- * ADC refreshes itself, tools go over as JSON Schema untranslated
- * (`parametersJsonSchema`), a forced single tool is expressible, and
- * `usageMetadata` reports cached and thinking tokens as separate numbers.
+ * an hour. It authenticates with an OAuth access token that expires (9.29.0
+ * gives `openai({ apiKey })` a callback form so a long-running process can
+ * refresh one, which is a mitigation and not a fix); its
+ * `tools.function.parameters` is **OpenAPI**, not JSON Schema, so `$ref` /
+ * `oneOf` / `additionalProperties` diverge silently; unsupported parameters are
+ * ignored rather than refused; and its documented response carries no cached-
+ * or reasoning-token counts. This adapter exists because every one of those is
+ * answerable on the native SDK: ADC refreshes itself, tools go over as JSON
+ * Schema untranslated (`parametersJsonSchema`), a forced single tool is
+ * expressible, and `usageMetadata` reports cached and thinking tokens as
+ * separate numbers.
+ *
+ * A field trial measured both halves of that: the native path completed a call
+ * after a forced credential expiry, while the compatible path returned HTTP 401
+ * on an expired token (FINDINGS "Part 2B").
+ *
+ * ─── Thought signatures: the round trip a tool loop cannot skip ─────
+ *
+ * A current Gemini model does not merely PREFER its thought signature back —
+ * it refuses the turn without it. An independent field trial on live GCP ran
+ * `gemini-3.1-flash-lite` on Vertex through one ordinary tool loop: the first
+ * call asked for the function, the tool ran, and the second call came back
+ *
+ *   400 INVALID_ARGUMENT — "Function call is missing a thought_signature in
+ *   functionCall parts. This is required for tools to work correctly …"
+ *
+ * (FINDINGS "Failure 4"). The cost of that shape is what makes it worth this
+ * paragraph: the failure lands AFTER the tool has already executed, so a
+ * side-effecting tool has run and the answer is unreachable.
+ *
+ * So the signature is CARRIED, not dropped. `Part.thoughtSignature` (a base64
+ * string on the installed @google/genai 2.16.0 `Part`) is read off the same
+ * part as the `functionCall` it belongs to, parked on the port's neutral
+ * `toolCalls[].providerMeta`, and written back onto the reconstructed
+ * `functionCall` part on the next request — byte for byte, because a signature
+ * is checked and not read. This is the same round trip the Anthropic adapter
+ * does with signed thinking blocks, one field along: there the carrier is
+ * `LLMMessage.thinkingBlocks[].signature`, here it is the tool call itself,
+ * because that is where Google puts it.
+ *
+ * What that does NOT cover, said plainly: a signature attached to a TEXT part
+ * of an answer with no function call. The port's assistant turn is a string,
+ * and a string has nowhere to keep one. The trial's failure was the functionCall
+ * shape; that shape is fixed here, and the other one is named rather than
+ * quietly half-handled.
  *
  * ─── Limitations (stated, not discovered) ───────────────────────────
  *
@@ -47,12 +106,12 @@
  * • **Thought summaries are not requested.** `usage.thinking` is reported
  *   honestly from `thoughtsTokenCount`, and `req.thinking.budget` is threaded
  *   to `thinkingConfig.thinkingBudget` — but `includeThoughts` is deliberately
- *   left unset, so no `rawThinking` is produced. Gemini's thought parts carry a
- *   `thoughtSignature` that has to be echoed byte-exact on the next turn, and
- *   there is no Gemini `ThinkingHandler` in this release to normalize and
- *   round-trip them. Asking for content nothing can carry would be a leak, not
- *   a feature. `thinkingConfig.thinkingLevel` has no field on `LLMRequest` and
- *   is likewise not sent.
+ *   left unset, so no `rawThinking` is produced and there is no Gemini
+ *   `ThinkingHandler` in this release to normalize thought TEXT. Asking for
+ *   content nothing can carry would be a leak, not a feature. Signature
+ *   round-tripping (above) is a separate thing and does not need one.
+ *   `thinkingConfig.thinkingLevel` has no field on `LLMRequest` and is
+ *   likewise not sent.
  * • `responseJsonSchema` (native structured output) is NOT exposed; use
  *   `.outputSchema(...)`, which goes over as a forced tool — a shape this
  *   adapter DOES carry.
@@ -66,6 +125,15 @@ export interface GeminiPart {
     readonly text?: string;
     /** `true` on a thought-summary part. Never joined into visible content. */
     readonly thought?: boolean;
+    /**
+     * The model's opaque signature for the thinking behind THIS part — base64,
+     * per `Part.thoughtSignature` on the installed @google/genai 2.16.0 surface.
+     *
+     * Read off a `functionCall` part and written back onto the same part on the
+     * next request. Never parsed, never trimmed, never regenerated: the service
+     * verifies it, so the only correct handling is byte-for-byte.
+     */
+    readonly thoughtSignature?: string;
     readonly functionCall?: {
         readonly id?: string;
         readonly name?: string;
@@ -157,6 +225,19 @@ export interface GeminiProviderOptions extends GoogleGenAIConnectionOptions {
     /**
      * Default model used when `LLMRequest.model` is `'gemini'` (the shorthand).
      * A request naming a full model id wins.
+     *
+     * **Unset behaves differently per door, because the doors behave
+     * differently.** On **Vertex** the shorthand resolves to
+     * `'gemini-2.5-flash'`, which a live field trial ran end to end through ADC.
+     * On the **Gemini API (AI Studio)** door the shorthand is REFUSED by name:
+     * the same trial's key-door call to that exact model returned HTTP 404 —
+     * *"no longer available to new users"* (FINDINGS "Failure 1") — and no model
+     * could be proven working on that door at all, because the account's separate
+     * AI Studio prepayment was empty (FINDINGS "Failure 2", a 429 on
+     * `gemini-3.1-flash-lite`, which at least proves that id resolves there).
+     *
+     * Shipping a second silent default nobody has run would be this library
+     * guessing on a service's behalf; the refusal names the door and the fix.
      */
     readonly defaultModel?: string;
     /** Default `maxOutputTokens` when the request doesn't set it. Optional. */