agentfootprint 9.3.0 → 9.5.0

package/dist/security/index.js

@@ -11,8 +11,12 @@
  * Today's surface is small and data-driven on purpose: one role
  * allowlist primitive that satisfies BOTH the v2.4 `PermissionChecker`
  * interface AND a sync `isAllowed(toolId)` predicate for use with
- * `gatedTools` from `agentfootprint/providers` — plus
- * `agentCorePolicy()`, the same port answered by a remote policy store.
+ * `gatedTools` from `agentfootprint/providers`.
+ *
+ * There is no shipped REMOTE policy engine. `agentCorePolicy()` was one
+ * through 9.3.0 and is retired in 9.4.0 — see the note beside its export
+ * below. The port stays open: a remote checker is an object with a
+ * `check()` method, and anybody can write one.
  *
  * A local allowlist and a remote policy engine differ in one way that
  * matters here: the local one can answer synchronously, so it doubles
@@ -44,7 +48,7 @@
  *   const agent = Agent.create({ provider, model, permissionChecker: policy }).build();
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.agentCorePolicy = exports.REDACTED_PLACEHOLDER = exports.redactThinkingBlocks = exports.SYNTHETIC_DENY_PREFIX = exports.extractSequence = exports.PolicyHaltError = exports.PermissionPolicy = void 0;
+exports.AgentCorePolicyRetiredError = exports.agentCorePolicy = exports.REDACTED_PLACEHOLDER = exports.redactThinkingBlocks = exports.SYNTHETIC_DENY_PREFIX = exports.extractSequence = exports.PolicyHaltError = exports.PermissionPolicy = void 0;
 var PermissionPolicy_js_1 = require("./PermissionPolicy.js");
 Object.defineProperty(exports, "PermissionPolicy", { enumerable: true, get: function () { return PermissionPolicy_js_1.PermissionPolicy; } });
 var PolicyHaltError_js_1 = require("./PolicyHaltError.js");
@@ -55,10 +59,12 @@ Object.defineProperty(exports, "SYNTHETIC_DENY_PREFIX", { enumerable: true, get:
 var thinkingRedaction_js_1 = require("./thinkingRedaction.js");
 Object.defineProperty(exports, "redactThinkingBlocks", { enumerable: true, get: function () { return thinkingRedaction_js_1.redactThinkingBlocks; } });
 Object.defineProperty(exports, "REDACTED_PLACEHOLDER", { enumerable: true, get: function () { return thinkingRedaction_js_1.REDACTED_PLACEHOLDER; } });
-// A remote policy engine behind the same port. Lazy peer-dep: importing this
-// barrel loads no AWS SDK — only constructing the checker and letting it
-// evaluate does. Same home as `PermissionPolicy` because it is the same job,
-// just asked of somebody else.
+// RETIRED in 9.4.0. `agentCorePolicy()` dispatched a command that does not
+// exist in `@aws-sdk/client-bedrock-agentcore`, because AgentCore has no
+// data-plane policy-evaluation operation — policy is enforced AT THE GATEWAY.
+// The export stays and refuses at construction with the whole explanation; the
+// alternatives are `PermissionPolicy.fromRoles` above and `.toolMiddleware()`.
 var agentcore_js_1 = require("../adapters/security/agentcore.js");
 Object.defineProperty(exports, "agentCorePolicy", { enumerable: true, get: function () { return agentcore_js_1.agentCorePolicy; } });
+Object.defineProperty(exports, "AgentCorePolicyRetiredError", { enumerable: true, get: function () { return agentcore_js_1.AgentCorePolicyRetiredError; } });
 //# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;;;AAEH,6DAAyD;AAAhD,uHAAA,gBAAgB,OAAA;AAGzB,2DAAuD;AAA9C,qHAAA,eAAe,OAAA;AAGxB,2DAA8E;AAArE,qHAAA,eAAe,OAAA;AAAE,2HAAA,qBAAqB,OAAA;AAG/C,+DAAoF;AAA3E,4HAAA,oBAAoB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAEnD,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,+BAA+B;AAC/B,kEAO2C;AANzC,+GAAA,eAAe,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;;;AAEH,6DAAyD;AAAhD,uHAAA,gBAAgB,OAAA;AAGzB,2DAAuD;AAA9C,qHAAA,eAAe,OAAA;AAGxB,2DAA8E;AAArE,qHAAA,eAAe,OAAA;AAAE,2HAAA,qBAAqB,OAAA;AAG/C,+DAAoF;AAA3E,4HAAA,oBAAoB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAEnD,2EAA2E;AAC3E,yEAAyE;AACzE,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,kEAQ2C;AAPzC,+GAAA,eAAe,OAAA;AACf,2HAAA,2BAA2B,OAAA"}

package/dist/types/adapters/identity/agentcore.d.ts

@@ -33,25 +33,41 @@
  * tenant isolation derives from the workload identity itself (per-tenant
  * workloads), or encode it via `userIdFor` (e.g. `${tenant}:${principal}`).
  *
+ * ── How this talks to the SDK (9.4.0 — read this before editing) ────────────
+ * Through **`client.send(new SomeCommand(input))`**, never through a method on
+ * the client. A bare `@aws-sdk/client-*` **Client** is command-based: its
+ * prototype carries `send` and `destroy` and NOTHING ELSE. The per-operation
+ * shortcuts (`getResourceOauth2Token(...)`) live on the AGGREGATED client
+ * (`BedrockAgentCore`), which is a different class.
+ *
+ * Until 9.4.0 this adapter built a `BedrockAgentCoreClient` and then duck-typed
+ * `client.getResourceOauth2Token` — a method that is never there — so the
+ * documented path failed 100% of the time on the very first call, with a
+ * message blaming the SDK version. Every test injected `_client` and so never
+ * touched the shim. The sibling memory adapter in this same package had the
+ * command form right all along; this one now matches it, and
+ * `test/adapters/aws/aws-command-pin.test.ts` pins the command names for both.
+ *
  * Pattern: Adapter (GoF) + lazy peer-dep load — the AWS SDK is required only when
- * `getCredential` first runs (or never, if you inject `_client`). NOTE: confirm
- * the SDK command/field names against your installed
- * `@aws-sdk/client-bedrock-agentcore` version — this adapter targets the
- * `GetResourceOauth2Token` shape and is structured so the request→result mapping
- * is unit-tested via the `_client` seam independent of the SDK.
+ * `getCredential` first runs (or never, if you inject `_client` / `_sdk`).
  */
 import type { CredentialProvider } from '../../identity/types.js';
 /** Raw result shape we consume from the AgentCore identity client. */
 export interface AgentCoreOauthResponse {
     readonly accessToken?: string;
     readonly authorizationUrl?: string;
+    /** Correlates a 3LO consent round-trip. The real service reports this as
+     *  `sessionUri`; the SDK shim renames it here. */
     readonly sessionId?: string;
-    /** Unix seconds. */
+    /** Unix seconds. **AgentCore does not report one** —
+     *  `GetResourceOauth2TokenResponse` has no expiry field, so this is only ever
+     *  populated by an injected `_client` that knows one from elsewhere. */
     readonly expiresAt?: number;
 }
-/** The minimal client surface the adapter calls — wraps `GetResourceOauth2Token`
+/** The minimal, operation-semantic surface the adapter calls — `GetResourceOauth2Token`
  *  and (for per-user workload scoping) `GetWorkloadAccessTokenForUserId`.
- *  The real AWS SDK client is adapted to this; tests inject a fake via `_client`. */
+ *  `createIdentityClient` maps the real SDK's `send(new Command(...))` onto this;
+ *  tests and custom integrations inject a fake via `_client`. */
 export interface AgentCoreIdentityClientLike {
     getResourceOauth2Token(input: {
         readonly resourceCredentialProviderName: string;
@@ -93,8 +109,22 @@ export interface AgentCoreIdentityOptions {
     }) => string | undefined;
     /** Stable provider id (default 'agentcore-identity'). */
     readonly id?: string;
-    /** Test seam — inject a client implementing {@link AgentCoreIdentityClientLike}. */
+    /** Test seam — inject a client implementing {@link AgentCoreIdentityClientLike}.
+     *  Bypasses the SDK entirely; the field mapping below is then yours. */
     readonly _client?: AgentCoreIdentityClientLike;
+    /** @internal Test injection — the AWS SDK module, to exercise the real shim
+     *  (`send(new Command(...))`) with a fake SDK. */
+    readonly _sdk?: BedrockAgentCoreIdentitySdkModule;
+}
+/** The slice of `@aws-sdk/client-bedrock-agentcore` this shim touches. */
+export interface BedrockAgentCoreIdentitySdkModule {
+    readonly BedrockAgentCoreClient?: new (config: {
+        region?: string;
+    }) => {
+        send(cmd: unknown): Promise<unknown>;
+    };
+    readonly GetResourceOauth2TokenCommand?: new (input: unknown) => unknown;
+    readonly GetWorkloadAccessTokenForUserIdCommand?: new (input: unknown) => unknown;
 }
 /** Build a {@link CredentialProvider} backed by AWS Bedrock AgentCore Identity. */
 export declare function agentCoreIdentity(options?: AgentCoreIdentityOptions): CredentialProvider;

package/dist/types/adapters/identity/agentcore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentcore.d.ts","sourceRoot":"","sources":["../../../../src/adapters/identity/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,KAAK,EACV,kBAAkB,EAGnB,MAAM,yBAAyB,CAAC;AAGjC,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB;IACpB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;qFAEqF;AACrF,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB,CAAC,KAAK,EAAE;QAC5B,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAC;QAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,UAAU,EAAE,KAAK,GAAG,iBAAiB,CAAC;QAC/C,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;QACtC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KACzC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC;;kEAE8D;IAC9D,+BAA+B,CAAC,CAAC,KAAK,EAAE;QACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;2DAEuD;IACvD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;0FAIsF;IACtF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;iEAI6D;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE;QAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;CAChD;AAwCD,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,kBAAkB,CAuE5F"}
+{"version":3,"file":"agentcore.d.ts","sourceRoot":"","sources":["../../../../src/adapters/identity/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAGH,OAAO,KAAK,EACV,kBAAkB,EAGnB,MAAM,yBAAyB,CAAC;AAGjC,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;sDACkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;4EAEwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;iEAGiE;AACjE,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB,CAAC,KAAK,EAAE;QAC5B,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAC;QAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,UAAU,EAAE,KAAK,GAAG,iBAAiB,CAAC;QAC/C,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;QACtC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KACzC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC;;kEAE8D;IAC9D,+BAA+B,CAAC,CAAC,KAAK,EAAE;QACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;2DAEuD;IACvD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;0FAIsF;IACtF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;iEAI6D;IAC7D,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE;QAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB;4EACwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC;IAC/C;sDACkD;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC;CACnD;AAED,0EAA0E;AAC1E,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK;QACrE,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,6BAA6B,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACzE,QAAQ,CAAC,sCAAsC,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACnF;AA6GD,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,kBAAkB,CAyE5F"}

package/dist/types/adapters/llm/BedrockProvider.d.ts

@@ -144,6 +144,30 @@ export interface BedrockProviderOptions {
         readonly Converse: new (input: BedrockConverseCommand) => unknown;
         readonly ConverseStream: new (input: BedrockConverseCommand) => unknown;
     };
+    /**
+     * @internal Test injection (9.4.0) — the AWS SDK MODULE, keyed by the
+     * constructor names the package really exports.
+     *
+     * `_commands` above is keyed `Converse` / `ConverseStream`, which is
+     * convenient and hides the one fact worth pinning: which exported command
+     * this adapter reaches for. Two adapters in this package have shipped
+     * dispatching operations that do not exist, so the shared pin
+     * (test/adapters/aws/) drives every AWS adapter through an `_sdk` double and
+     * asserts the names. Takes precedence over `_commands` when both are given.
+     */
+    readonly _sdk?: BedrockConverseSdkModule;
+}
+/**
+ * The slice of `@aws-sdk/client-bedrock-runtime` this provider touches, named
+ * as the package names it. (The embedder door declares its own slice for
+ * `InvokeModel` — same package, different operation.)
+ */
+export interface BedrockConverseSdkModule {
+    readonly BedrockRuntimeClient?: new (config: {
+        region?: string;
+    }) => BedrockClient;
+    readonly ConverseCommand?: new (input: BedrockConverseCommand) => unknown;
+    readonly ConverseStreamCommand?: new (input: BedrockConverseCommand) => unknown;
 }
 export declare function bedrock(options?: BedrockProviderOptions): LLMProvider;
 export declare class BedrockProvider implements LLMProvider {

package/dist/types/adapters/llm/BedrockProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BedrockProvider.d.ts","sourceRoot":"","sources":["../../../../src/adapters/llm/BedrockProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,QAAQ,EAER,WAAW,EACX,UAAU,EACV,WAAW,EAEX,QAAQ,EACT,MAAM,aAAa,CAAC;AAKrB,UAAU,aAAa;IACrB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1C;AAED,UAAU,sBAAsB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,WAAW,EAAE,CAAC;QACrB;;mEAE2D;QAC3D,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KACzC,CAAC;IACF,eAAe,CAAC,EAAE;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;CACH;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED,KAAK,mBAAmB,GACpB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;CAAE,GAChF;IACE,UAAU,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;KAC9B,CAAC;CACH,CAAC;AAEN,UAAU,WAAW;IACnB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC;KAChD,CAAC;CACH;AAqBD;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,CAAC,EAAE;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KAC7D,CAAC;IACF,iBAAiB,CAAC,EAAE;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,KAAK,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KACzD,CAAC;IACF,gBAAgB,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,WAAW,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAEtE;AAQD,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,QAAQ,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;QAClE,QAAQ,CAAC,cAAc,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;KACzE,CAAC;CACH;AAaD,wBAAgB,OAAO,CAAC,OAAO,GAAE,sBAA2B,GAAG,WAAW,CAkIzE;AAED,qBAAa,eAAgB,YAAW,WAAW;IACjD,QAAQ,CAAC,IAAI,aAAa;IAC1B,QAAQ,CAAC,iBAAiB,sBAAuB;IACjD,QAAQ,CAAC,uBAAuB,QAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;gBAExB,OAAO,GAAE,sBAA2B;IAKhD,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAIrE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC;CAIvE"}
+{"version":3,"file":"BedrockProvider.d.ts","sourceRoot":"","sources":["../../../../src/adapters/llm/BedrockProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,QAAQ,EAER,WAAW,EACX,UAAU,EACV,WAAW,EAEX,QAAQ,EACT,MAAM,aAAa,CAAC;AAKrB,UAAU,aAAa;IACrB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1C;AAED,UAAU,sBAAsB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,WAAW,EAAE,CAAC;QACrB;;mEAE2D;QAC3D,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KACzC,CAAC;IACF,eAAe,CAAC,EAAE;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;CACH;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED,KAAK,mBAAmB,GACpB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;CAAE,GAChF;IACE,UAAU,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;KAC9B,CAAC;CACH,CAAC;AAEN,UAAU,WAAW;IACnB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC;KAChD,CAAC;CACH;AAqBD;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,CAAC,EAAE;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KAC7D,CAAC;IACF,iBAAiB,CAAC,EAAE;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,KAAK,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KACzD,CAAC;IACF,gBAAgB,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,WAAW,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAEtE;AAQD,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,QAAQ,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;QAClE,QAAQ,CAAC,cAAc,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;KACzE,CAAC;IACF;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,wBAAwB,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,KAAK,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,aAAa,CAAC;IACnF,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;IAC1E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC;CACjF;AAaD,wBAAgB,OAAO,CAAC,OAAO,GAAE,sBAA2B,GAAG,WAAW,CAkIzE;AAED,qBAAa,eAAgB,YAAW,WAAW;IACjD,QAAQ,CAAC,IAAI,aAAa;IAC1B,QAAQ,CAAC,iBAAiB,sBAAuB;IACjD,QAAQ,CAAC,uBAAuB,QAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;gBAExB,OAAO,GAAE,sBAA2B;IAKhD,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAIrE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC;CAIvE"}

package/dist/types/adapters/memory/s3Vectors.d.ts

@@ -68,6 +68,29 @@
  * Only `ns` (the identity namespace) and `tier` are ever filtered on, and both
  * are short strings.
  *
+ * ── The preflight: this store now READS the index before trusting it (9.4.0) ─
+ * One `GetIndex`, lazily on first use and memoized for the life of the store.
+ * It checks the three things this adapter used to assume — and that a
+ * production deployment got wrong in all three ways at once:
+ *
+ *   1. the distance metric really is cosine (a euclidean index scored a
+ *      self-query at 0.999…, where a true cosine is exactly 1.0);
+ *   2. `af` really is non-filterable, checked BEFORE the first write, so a
+ *      misconfigured index fails at document 1 rather than at document 400
+ *      with an AWS "Filterable metadata must have at most 2048 bytes";
+ *   3. the index dimension matches the vectors being written or searched.
+ *
+ * This is the discipline every sibling store already had at open —
+ * `sqliteVectorStore`'s schema identity, `pgVectorStore`'s schema check,
+ * `staticVectorStore`'s load-time fingerprint. This store had nothing to open,
+ * so it opened nothing.
+ *
+ * **IAM:** the caller now needs `s3vectors:GetIndex` alongside `PutVectors` /
+ * `QueryVectors` / `GetVectors` / `ListVectors` / `DeleteVectors`. A GetIndex
+ * that fails is refused by name, never passed through — an index this store
+ * cannot read is an index whose metric, layout and dimension it would be
+ * guessing at.
+ *
  * ── Cosine only, said out loud ──────────────────────────────────────────────
  * The port's score is a cosine similarity, and every threshold in this library
  * — starting with `defineRAG`'s 0.7 default — is calibrated on that range. A
@@ -93,10 +116,16 @@
  *     one is what survives a restart: the first query after an embedder swap
  *     sees documents stamped by the old embedder and refuses by name, instead
  *     of returning a confident ranking of two incompatible spaces.
- *   - What is NOT caught: the first WRITE of a fresh process into a namespace
- *     another embedder built. There is no cheap read that would catch it, and a
- *     full index scan on every boot is not one either. It is caught at the next
- *     search, before a single wrong answer is returned.
+ *   - Since 9.4.0 the index's OWN dimension is checked too, at the preflight —
+ *     so a wrong-size embedder is caught on the first write and the first
+ *     search of a fresh process, which the per-process fingerprint could not do
+ *     (it has nothing to disagree with at boot).
+ *   - What is still NOT caught: the first write of a fresh process into a
+ *     namespace built by a different embedder OF THE SAME SIZE. Only the model
+ *     id separates those, and it lives in the vectors rather than on the index.
+ *     There is no cheap read that would catch it, and a full index scan on
+ *     every boot is not one either. It is caught at the next search, before a
+ *     single wrong answer is returned.
  *
  * ── Lazy peer dependency ────────────────────────────────────────────────────
  * `@aws-sdk/client-s3vectors` is an OPTIONAL peer dependency, required at
@@ -126,6 +155,9 @@ export interface S3VectorsSdkModule {
     readonly S3VectorsClient?: new (config: {
         region?: string;
     }) => S3VectorsLikeClient;
+    /** The PREFLIGHT (9.4.0) — the one call that reads the index rather than its
+     *  vectors. See `verifyIndex` for what it checks and why each one is fatal. */
+    readonly GetIndexCommand?: new (input: unknown) => unknown;
     readonly PutVectorsCommand?: new (input: unknown) => unknown;
     readonly QueryVectorsCommand?: new (input: unknown) => unknown;
     readonly GetVectorsCommand?: new (input: unknown) => unknown;

package/dist/types/adapters/memory/s3Vectors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"s3Vectors.d.ts","sourceRoot":"","sources":["../../../../src/adapters/memory/s3Vectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyGG;AAWH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,KAAK,EAGV,WAAW,EAIZ,MAAM,6BAA6B,CAAC;AAIrC;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,4FAA4F;IAC5F,OAAO,CAAC,IAAI,IAAI,CAAC;CAClB;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,mBAAmB,CAAC;IACpF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC7D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC7D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC9D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACjE;AAID,MAAM,WAAW,qBAAqB;IACpC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,+FAA+F;IAC/F,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;CACpC;AAED,yFAAyF;AACzF,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5D;;;OAGG;IACH,KAAK,IAAI,IAAI,CAAC;CACf;AAiBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,cAAc,CA2c7E"}
+{"version":3,"file":"s3Vectors.d.ts","sourceRoot":"","sources":["../../../../src/adapters/memory/s3Vectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsIG;AAWH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,KAAK,EAGV,WAAW,EAIZ,MAAM,6BAA6B,CAAC;AAIrC;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,4FAA4F;IAC5F,OAAO,CAAC,IAAI,IAAI,CAAC;CAClB;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,mBAAmB,CAAC;IACpF;mFAC+E;IAC/E,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC3D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC7D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC7D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC9D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACjE;AAID,MAAM,WAAW,qBAAqB;IACpC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,+FAA+F;IAC/F,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;CACpC;AAED,yFAAyF;AACzF,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5D;;;OAGG;IACH,KAAK,IAAI,IAAI,CAAC;CACf;AAiBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,cAAc,CAsoB7E"}

package/dist/types/adapters/observability/cloudwatch.d.ts

@@ -90,6 +90,10 @@ export interface CloudwatchObservabilityOptions {
     /** Test injection — bypasses SDK lazy-require entirely. When set,
      *  `region` / IAM are ignored. */
     readonly _client?: CloudWatchLikeClient;
+    /** @internal Test injection (9.4.0) — the AWS SDK module, so the real shim
+     *  (`send(new Command(...))`) runs against a fake SDK and the command names
+     *  it dispatches can be asserted. Ignored when `_client` is set. */
+    readonly _sdk?: CloudWatchSdkModule;
 }
 export interface CloudWatchLikeClient {
     putLogEvents(input: {
@@ -112,6 +116,22 @@ export interface CloudWatchLikeClient {
         logStreamName: string;
     }): Promise<unknown>;
 }
+/**
+ * The slice of `@aws-sdk/client-cloudwatch-logs` this shim touches.
+ *
+ * Exported since 9.4.0 so `opts._sdk` can name it — which is what lets the
+ * shared command-name pin (test/adapters/aws/) assert the OPERATIONS this
+ * adapter dispatches without an AWS account or the peer dep installed. A
+ * `_client` double proves the batching; only an `_sdk` double can prove the
+ * adapter reaches for `PutLogEvents` and not something that does not exist.
+ */
+export interface CloudWatchSdkModule {
+    readonly CloudWatchLogsClient?: new (config: {
+        region?: string;
+    }) => unknown;
+    readonly PutLogEventsCommand?: new (input: unknown) => unknown;
+    readonly CreateLogStreamCommand?: new (input: unknown) => unknown;
+}
 /**
  * Internal: shared CloudWatch Logs base used by every adapter that
  * ships to CWL. `cloudwatchObservability` is the public generic

package/dist/types/adapters/observability/cloudwatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudwatch.d.ts","sourceRoot":"","sources":["../../../../src/adapters/observability/cloudwatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAMvE,MAAM,WAAW,8BAA8B;IAC7C,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;0DAOsD;IACtD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;4BAKwB;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;oDAEgD;IAChD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;mEAC+D;IAC/D,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACvE;sCACkC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC;CACzC;AAID,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,KAAK,EAAE;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,aAAa,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAClE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB;;;;;;OAMG;IACH,eAAe,CAAC,CAAC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5F;AAUD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,8BAA8B,EACpC,YAAY,EAAE,MAAM,GACnB,qBAAqB,CAsOvB;AA4BD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,8BAA8B,GACnC,qBAAqB,CAEvB"}
+{"version":3,"file":"cloudwatch.d.ts","sourceRoot":"","sources":["../../../../src/adapters/observability/cloudwatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAMvE,MAAM,WAAW,8BAA8B;IAC7C,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;0DAOsD;IACtD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;4BAKwB;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;oDAEgD;IAChD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;mEAC+D;IAC/D,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACvE;sCACkC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC;IACxC;;wEAEoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAID,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,KAAK,EAAE;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,aAAa,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAClE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB;;;;;;OAMG;IACH,eAAe,CAAC,CAAC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5F;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,KAAK,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;IAC7E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAC/D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACnE;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,8BAA8B,EACpC,YAAY,EAAE,MAAM,GACnB,qBAAqB,CAsOvB;AA4BD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,8BAA8B,GACnC,qBAAqB,CAEvB"}

package/dist/types/adapters/observability/xray.d.ts

@@ -94,11 +94,29 @@ export interface XrayObservabilityOptions {
     readonly onError?: (error: Error, event?: AgentfootprintEvent) => void;
     /** Test injection — bypasses SDK lazy-require entirely. */
     readonly _client?: XRayLikeClient;
+    /** @internal Test injection (9.4.0) — the AWS SDK module, so the real shim
+     *  (`send(new Command(...))`) runs against a fake SDK and the command name it
+     *  dispatches can be asserted. Ignored when `_client` is set. */
+    readonly _sdk?: XRaySdkModule;
 }
 export interface XRayLikeClient {
     putTraceSegments(input: {
         TraceSegmentDocuments: ReadonlyArray<string>;
     }): Promise<unknown>;
 }
+/**
+ * The slice of `@aws-sdk/client-xray` this shim touches.
+ *
+ * Exported since 9.4.0 so `opts._sdk` can name it — which is what lets the
+ * shared command-name pin (test/adapters/aws/) assert that this adapter
+ * dispatches `PutTraceSegments` and nothing invented, without an AWS account
+ * or the peer dep installed.
+ */
+export interface XRaySdkModule {
+    readonly XRayClient?: new (config: {
+        region?: string;
+    }) => unknown;
+    readonly PutTraceSegmentsCommand?: new (input: unknown) => unknown;
+}
 export declare function xrayObservability(opts: XrayObservabilityOptions): ObservabilityStrategy;
 //# sourceMappingURL=xray.d.ts.map

package/dist/types/adapters/observability/xray.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"xray.d.ts","sourceRoot":"","sources":["../../../../src/adapters/observability/xray.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAMvE,MAAM,WAAW,wBAAwB;IACvC,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;iCAC6B;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;oDAEgD;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;0CAEsC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;yCACqC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACvE,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;CACnC;AAID,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,KAAK,EAAE;QAAE,qBAAqB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7F;AA6BD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,qBAAqB,CA4ZvF"}
+{"version":3,"file":"xray.d.ts","sourceRoot":"","sources":["../../../../src/adapters/observability/xray.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAMvE,MAAM,WAAW,wBAAwB;IACvC,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;iCAC6B;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;oDAEgD;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;0CAEsC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;yCACqC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACvE,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC;;qEAEiE;IACjE,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;CAC/B;AAID,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,KAAK,EAAE;QAAE,qBAAqB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7F;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;IACnE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACpE;AAwBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,qBAAqB,CA4ZvF"}

package/dist/types/adapters/security/agentcore.d.ts

@@ -1,152 +1,106 @@
 /**
- * agentCorePolicy — AWS Bedrock **AgentCore Policy** adapter for the
- * {@link PermissionChecker} port (peer-dep `@aws-sdk/client-bedrock-agentcore`).
+ * agentCorePolicy — **RETIRED in 9.4.0.** The factory still exists and still
+ * type-checks; calling it now refuses, by name, with the reason and the
+ * alternatives. Nothing was removed from the public surface.
  *
- *   import { agentCorePolicy } from 'agentfootprint/security';
+ * ── What was wrong ──────────────────────────────────────────────────────────
+ * This adapter dispatched `EvaluatePolicyCommand` against
+ * `@aws-sdk/client-bedrock-agentcore`. **That command does not exist** — not in
+ * 3.1066.0, not in any version, not under any other name. The AgentCore
+ * data-plane client has no authorization-evaluation operation at all
+ * (`EvaluateCommand` is there, but it scores agent transcripts against an
+ * evaluator; it decides nothing about permissions). The policy surface is
+ * **control-plane only**: you author and attach policies, and **AgentCore
+ * enforces them AT THE GATEWAY**, in front of the tool, before any request
+ * reaches your process.
  *
- *   const agent = Agent.create({
- *     provider,
- *     model,
- *     permissionChecker: agentCorePolicy({ policyStoreId: process.env.POLICY_STORE_ID! }),
- *   }).build();
+ * So every `check()` this adapter ever ran ended in the `catch` — and the
+ * default is fail-closed, which means it denied every tool call and said the
+ * policy engine was unreachable. It compiled, it passed its tests (all of which
+ * injected `_client` past the SDK), and it could never have worked.
  *
- * Maps one port method onto one data-plane call: every attempted tool call
- * becomes a policy evaluation, and the returned decision becomes a
- * `PermissionDecision`. Nothing else.
+ * ── Why a refusal rather than a deletion ────────────────────────────────────
+ * Deleting an export breaks a build with a module-resolution error that
+ * explains nothing. A factory that refuses breaks the same build with a
+ * paragraph that names the mistake, the alternative, and where denials really
+ * come from. The removal decision belongs to the next major.
  *
- * ── The three rules this adapter is written under ────────────────────────────
+ * ── What to use instead ─────────────────────────────────────────────────────
+ *   • **Local, in-process rules** — `PermissionPolicy.fromRoles(...)` behind
+ *     the same `permissionChecker` port. Synchronous, so it doubles as a
+ *     `gatedTools` predicate.
+ *   • **Anything richer** — the `.toolMiddleware()` chain: allow / deny / ask /
+ *     transform per call, with the run's own history in hand.
+ *   • **AgentCore Gateway policy** — already enforced, without this library's
+ *     help. A denial arrives as an **MCP error** on the tool call made through
+ *     `mcpClient(...)`, and lands in the loop as the tool's result, which the
+ *     model reads and adapts to. The library's job there is to surface that
+ *     denial honestly, not to pre-evaluate a copy of the rule.
  *
- * **1. Fail closed.** A policy engine you cannot reach has not said yes. When
- * evaluation throws — network, credentials, a renamed field, a policy store
- * that does not exist — the decision is `deny`, and it says so in words a
- * human can act on. `onUnavailable: 'allow-with-warning'` is available for
- * teams rolling policy out gradually, and it is deliberately awkward to type,
- * because "we could not check, so we allowed it" is a sentence you should have
- * to write down on purpose.
- *
- * **2. The reason rides to the model AS DATA.** A denied tool call comes back
- * to the LLM as a `tellLLM` string, not as an exception. The model then
- * re-decides with the refusal in front of it, which is the difference between
- * an agent that says "I am not allowed to do that" and a run that dies.
- * Telemetry (`reason`) stays out of `tellLLM` — the model does not get taught
- * the shape of the rule space.
- *
- * **3. One evaluation per (tool, principal) per turn.** The ReAct loop can put
- * the same tool in front of the gate several times in one iteration; paying for
- * a round-trip each time buys nothing, because nothing between them could have
- * changed the answer. The cache key is the tool, the principal AND the
- * iteration, so the NEXT turn re-asks — a policy that changed mid-conversation
- * is honoured on the next turn rather than at the end of the run.
- *
- * ── Verification status, stated plainly ──────────────────────────────────────
- * **Contract-mapped and injection-tested.** Every AWS interaction is exercised
- * through the `_client` seam; no test in this repo reaches AWS, and none
- * pretends to. Confirm the command and field names against your installed
- * `@aws-sdk/client-bedrock-agentcore` — this adapter targets an
- * evaluate-a-request shape and is structured so the request → decision mapping
- * is unit-tested independently of the SDK. Real-cloud verification lands with a
- * field deployment.
- *
- * Pattern: Adapter (GoF) + lazy peer-dep load. Role: Layer-3 cross-cutting
- * guard, exactly where `PermissionPolicy` sits — this one just asks somebody
- * else.
+ * The `PermissionChecker` port itself is untouched, and so is every local
+ * policy built on it. A real AgentCore *data-plane* authorization API, if one
+ * ever ships, plugs in behind that same port.
  */
 import type { PermissionChecker } from '../types.js';
-/** What the policy engine answered. */
+/**
+ * What the policy engine answered.
+ *
+ * @deprecated 9.4.0 — kept so existing imports still compile. See the module
+ * header: there is no AgentCore data-plane policy evaluation to answer.
+ */
 export interface AgentCorePolicyEvaluation {
-    /**
-     * The engine's verdict. Compared case-insensitively against `'allow'`;
-     * ANYTHING else is a denial, including a value this adapter has never seen.
-     * An unrecognised verdict is not a permission.
-     */
     readonly decision: string;
-    /** Why, when the engine explains itself. Surfaces to the model on a denial. */
     readonly reason?: string;
-    /** Which policy decided, for the audit trail. */
     readonly policyId?: string;
 }
 /**
- * The minimal surface this adapter calls. The real SDK client is adapted to it
- * in one function below; tests inject a fake via `_client` and never touch AWS.
+ * The minimal surface the retired adapter called.
+ *
+ * @deprecated 9.4.0 — kept so existing imports still compile.
  */
 export interface AgentCorePolicyClientLike {
     evaluate(input: {
         readonly policyStoreId: string;
-        /** Who is acting — the end user when the run carries one, else the agent. */
         readonly principal: string;
-        /** What they are trying to do — the tool name for a tool call. */
         readonly action: string;
-        /** What they are trying to do it to — the capability being exercised. */
         readonly resource: string;
-        /** Everything else the policy may want to read. */
         readonly context?: Readonly<Record<string, unknown>>;
     }): Promise<AgentCorePolicyEvaluation>;
 }
-/** What to do when the policy engine cannot be reached or answers unintelligibly. */
+/**
+ * What to do when the policy engine cannot be reached.
+ *
+ * @deprecated 9.4.0 — kept so existing imports still compile.
+ */
 export type AgentCorePolicyUnavailable = 'deny' | 'allow-with-warning';
-/** Options for {@link agentCorePolicy}. */
+/**
+ * Options for the retired {@link agentCorePolicy}.
+ *
+ * @deprecated 9.4.0 — kept so existing imports still compile.
+ */
 export interface AgentCorePolicyOptions {
-    /** The AgentCore policy store to evaluate against. Required. */
     readonly policyStoreId: string;
-    /** AWS region, when the adapter constructs the SDK client itself. */
     readonly region?: string;
-    /**
-     * What an evaluation FAILURE means. Default `'deny'` — fail closed.
-     *
-     * `'allow-with-warning'` allows the call and reports the failure through
-     * `onWarning`, for a rollout where the policy store is not yet the source of
-     * truth. It never applies to a successful evaluation that said no: an
-     * explicit denial is always a denial.
-     */
     readonly onUnavailable?: AgentCorePolicyUnavailable;
-    /**
-     * Called when `onUnavailable: 'allow-with-warning'` lets a call through.
-     * Default: `console.warn`. Give it your logger so the allow-on-failure is
-     * something an on-call engineer can find later.
-     */
     readonly onWarning?: (message: string, error: Error) => void;
-    /**
-     * Derive the policy principal from the run's identity. Default:
-     * `identity.principal`, else `identity.tenant`, else `'agent'`.
-     *
-     * The default is also the cache key, so a checker shared across users never
-     * hands one user's decision to another.
-     */
     readonly principalFor?: (identity: {
         readonly principal?: string;
         readonly tenant?: string;
     } | undefined) => string;
-    /** Stable name, surfaced on permission events. Default `'agentCorePolicy'`. */
     readonly name?: string;
-    /** Most decisions to keep cached at once. Default 500. Oldest are evicted first. */
     readonly cacheSize?: number;
-    /** @internal Test injection — skips the SDK require entirely. */
+    /** @internal */
     readonly _client?: AgentCorePolicyClientLike;
-    /** @internal Test injection — the AWS SDK module, to exercise the real shim with a fake SDK. */
+    /** @internal */
     readonly _sdk?: BedrockAgentCorePolicySdkModule;
 }
 /**
- * A `PermissionChecker` backed by an AgentCore policy store.
+ * The slice of `@aws-sdk/client-bedrock-agentcore` the retired shim reached for.
+ * `EvaluatePolicyCommand` is listed here as the record of a command that never
+ * existed — see the module header.
  *
- * Composes with everything already in the box and knows about none of it. In
- * particular `gatedTools(...)` is a DIFFERENT layer and stays untouched: the
- * gate decides what the model is shown, this decides what actually runs, and
- * neither needs to be told the other exists. A tool hidden by a gate is never
- * evaluated (the model cannot call what it cannot see); a tool the gate shows
- * still has to get past the policy.
- *
- * @example  Fail closed (the default)
- *   permissionChecker: agentCorePolicy({ policyStoreId, region: 'us-west-2' })
- *
- * @example  Rolling policy out, with the allow-on-failure logged where you can find it
- *   agentCorePolicy({
- *     policyStoreId,
- *     onUnavailable: 'allow-with-warning',
- *     onWarning: (message, error) => logger.warn({ err: error }, message),
- *   });
+ * @deprecated 9.4.0 — kept so existing imports still compile.
  */
-export declare function agentCorePolicy(options: AgentCorePolicyOptions): PermissionChecker;
-/** The slice of `@aws-sdk/client-bedrock-agentcore` this shim touches. */
 export interface BedrockAgentCorePolicySdkModule {
     readonly BedrockAgentCoreClient?: new (config: {
         region?: string;
@@ -155,4 +109,24 @@ export interface BedrockAgentCorePolicySdkModule {
     };
     readonly EvaluatePolicyCommand?: new (input: unknown) => unknown;
 }
+/**
+ * Raised by {@link agentCorePolicy}. Carries the whole explanation in
+ * `message`; the class exists so a caller can catch this specific retirement
+ * rather than pattern-matching prose.
+ */
+export declare class AgentCorePolicyRetiredError extends Error {
+    readonly code: "ERR_AGENTCORE_POLICY_RETIRED";
+    constructor();
+}
+/**
+ * **Retired (9.4.0).** Throws {@link AgentCorePolicyRetiredError} naming why,
+ * what to use for local rules, and where Gateway-enforced denials actually
+ * arrive. See the module header for the full story.
+ *
+ * @deprecated 9.4.0 — use `PermissionPolicy.fromRoles(...)` (local rules) or
+ * `.toolMiddleware()` (conditional rules); AgentCore Gateway policy is enforced
+ * at the Gateway and surfaces as an MCP error on the tool call.
+ * @throws {AgentCorePolicyRetiredError} always.
+ */
+export declare function agentCorePolicy(_options: AgentCorePolicyOptions): PermissionChecker;
 //# sourceMappingURL=agentcore.d.ts.map

package/dist/types/adapters/security/agentcore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentcore.d.ts","sourceRoot":"","sources":["../../../../src/adapters/security/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAyC,MAAM,aAAa,CAAC;AAE5F,uCAAuC;AACvC,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,6EAA6E;QAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,kEAAkE;QAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,yEAAyE;QACzE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,mDAAmD;QACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACtD,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACxC;AAED,qFAAqF;AACrF,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,oBAAoB,CAAC;AAEvE,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,0BAA0B,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAC7D;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,QAAQ,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,KAC5E,MAAM,CAAC;IACZ,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;IAC7C,gGAAgG;IAChG,QAAQ,CAAC,IAAI,CAAC,EAAE,+BAA+B,CAAC;CACjD;AAWD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,iBAAiB,CA4GlF;AAID,0EAA0E;AAC1E,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK;QACrE,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CAClE"}
+{"version":3,"file":"agentcore.d.ts","sourceRoot":"","sources":["../../../../src/adapters/security/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACtD,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACxC;AAED;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,oBAAoB,CAAC;AAEvE;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,0BAA0B,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,QAAQ,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,KAC5E,MAAM,CAAC;IACZ,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB;IAChB,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;IAC7C,gBAAgB;IAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,+BAA+B,CAAC;CACjD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK;QACrE,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CAClE;AAED;;;;GAIG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,IAAI,iCAA2C;;CA6BzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,sBAAsB,GAAG,iBAAiB,CAEnF"}

package/dist/types/bridge/eventMeta.d.ts

@@ -38,6 +38,9 @@ export interface RunContext {
     /** Optional turn/iter indices from agent runtime. */
     readonly turnIndex?: number;
     readonly iterIndex?: number;
+    /** The hosting conversation this run belongs to, when it belongs to one
+     *  (9.4.0). Absent for an unhosted or anonymous run — never fabricated. */
+    readonly sessionId?: string;
 }
 /**
  * Build an EventMeta from a stage origin + run-level context.

package/dist/types/bridge/eventMeta.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eventMeta.d.ts","sourceRoot":"","sources":["../../../src/bridge/eventMeta.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAMpD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,UAAU;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,WAAW,GAAG,gBAAgB,GAAG,SAAS,EAClD,GAAG,EAAE,UAAU,GACd,SAAS,CAyBX;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAG3E"}
+{"version":3,"file":"eventMeta.d.ts","sourceRoot":"","sources":["../../../src/bridge/eventMeta.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAMpD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,UAAU;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;+EAC2E;IAC3E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,WAAW,GAAG,gBAAgB,GAAG,SAAS,EAClD,GAAG,EAAE,UAAU,GACd,SAAS,CA4BX;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAG3E"}