agentfootprint 9.66.0 → 9.68.0

package/dist/esm/adapters/mcp/agentcore.js

@@ -0,0 +1,149 @@
+/**
+ * adapters/mcp/agentcore — reaching an AWS Bedrock **AgentCore Gateway**.
+ *
+ * ── What lives here, and why it is one file ──────────────────────────────────
+ * A Gateway is an MCP server, and `mcpClient` + `gatewayTransport` already know
+ * how to talk to one of those. Neither knows — and neither should learn — the
+ * handful of facts that are AgentCore's alone: the hostname its endpoints take,
+ * the name of the tool that searches its catalogue, the header that groups a
+ * caller's requests into one policy session, and the service name a SigV4
+ * signature is computed against. Those four facts are this file, and this file
+ * is the only place in the library that holds them.
+ *
+ * `gatewayTransport` says of itself: *"Nothing here is vendor-specific."* That
+ * stays true precisely because this exists next to it.
+ *
+ * ── What it does NOT do ──────────────────────────────────────────────────────
+ * It does not manage a Gateway. Creating one, adding targets, attaching a
+ * policy engine, enabling semantic search — all control-plane operations on
+ * `bedrock-agentcore-control`, all things an operator does once with the
+ * console, the CLI or their IaC. This is the CLIENT side: an agent using a
+ * gateway somebody already stood up.
+ *
+ * @example  An agent whose tools come from a Gateway
+ *   import { mcpClient } from 'agentfootprint/providers';
+ *   import { agentCoreGatewayTransport } from 'agentfootprint/providers';
+ *   import { agentCoreIdentity } from 'agentfootprint/security';
+ *
+ *   const gateway = await mcpClient({
+ *     name: 'gateway',
+ *     transport: agentCoreGatewayTransport({
+ *       gatewayId: 'my-gateway-a1b2c3d4e5',
+ *       region: 'us-east-1',
+ *       credentials: agentCoreIdentity({ region: 'us-east-1' }),
+ *     }),
+ *   });
+ *   const tools = await gateway.tools();
+ */
+import { gatewayTransport } from '../../lib/mcp/gatewayTransport.js';
+/**
+ * The Gateway's built-in semantic tool search, by its exact wire name.
+ *
+ * It is an ordinary MCP tool — `tools/call` with `{ query }` — that returns the
+ * catalogue entries closest to a natural-language description. It matters at
+ * the scale where listing every tool into a prompt stops being sensible.
+ *
+ * **It can only be enabled when the Gateway is CREATED**, never afterwards, so
+ * its absence from a catalogue is a fact about that gateway rather than a
+ * transient condition to retry.
+ */
+export const AGENTCORE_GATEWAY_SEARCH_TOOL = 'x_amz_bedrock_agentcore_search';
+/**
+ * The header that groups a caller's requests into ONE policy session.
+ *
+ * AgentCore's temporal policies decide on SEQUENCES of actions — "not after
+ * three refunds", "only once this was approved" — and a sequence needs a
+ * boundary. This header is that boundary, and without it every request is its
+ * own history of one, which quietly makes every sequence rule unenforceable.
+ */
+export const AGENTCORE_POLICY_SESSION_HEADER = 'x-amzn-bedrock-agentcore-policy-session-id';
+/** The service name a SigV4 signature for a Gateway is computed against. */
+export const AGENTCORE_SIGV4_SERVICE = 'bedrock-agentcore';
+/**
+ * The MCP endpoint of a Gateway.
+ *
+ * `https://{gatewayId}.gateway.bedrock-agentcore.{region}.amazonaws.com/mcp` —
+ * a shape nobody remembers correctly, which is the entire reason it is a
+ * function and not a line in a README.
+ */
+export function agentCoreGatewayUrl(options) {
+    const { gatewayId, region } = options;
+    if (!gatewayId || !region) {
+        throw new TypeError('agentCoreGatewayUrl: both `gatewayId` and `region` are required — the endpoint hostname ' +
+            'is built from the two.');
+    }
+    return `https://${gatewayId}.gateway.bedrock-agentcore.${region}.amazonaws.com/mcp`;
+}
+/**
+ * An MCP transport pointed at an AgentCore Gateway.
+ *
+ * A configuration of {@link gatewayTransport}: the endpoint built from your
+ * gateway's id and region, and — when you name one — the policy session header
+ * stamped on every request. Token vending, the once-and-dropped secrecy rule
+ * and the rotation behaviour are all the neutral transport's, unchanged.
+ */
+export function agentCoreGatewayTransport(options) {
+    const { policySessionId, fetch: innerFetch } = options;
+    // The header is stamped in the `fetch` seam rather than in `headers` because
+    // the seam runs per request. That is what lets the session id come from a
+    // function, which is what keeps two people on one transport in two sessions.
+    const stampPolicySession = policySessionId === undefined
+        ? innerFetch
+        : async (input, init) => {
+            const id = typeof policySessionId === 'function' ? policySessionId() : policySessionId;
+            const next = id === undefined || id === ''
+                ? init
+                : {
+                    ...init,
+                    headers: {
+                        ...init?.headers,
+                        [AGENTCORE_POLICY_SESSION_HEADER]: id,
+                    },
+                };
+            return innerFetch ? innerFetch(input, next) : globalThis.fetch(input, next);
+        };
+    return gatewayTransport({
+        url: agentCoreGatewayUrl(options),
+        credentials: options.credentials,
+        ...(options.service !== undefined && { service: options.service }),
+        ...(options.scopes !== undefined && { scopes: options.scopes }),
+        ...(options.mode !== undefined && { mode: options.mode }),
+        ...(options.headers !== undefined && { headers: options.headers }),
+        ...(stampPolicySession !== undefined && { fetch: stampPolicySession }),
+    });
+}
+/**
+ * The Gateway's semantic search tool, if this gateway has one.
+ *
+ * Returns `undefined` rather than throwing, because absence is a legitimate and
+ * PERMANENT answer: semantic search is enabled when a Gateway is created and
+ * cannot be turned on afterwards, so there is nothing to retry.
+ *
+ * ── Why this finds the tool instead of calling it ────────────────────────────
+ * The obvious convenience would be `search(gateway, 'refund an order')`, and it
+ * is deliberately not here. Executing a tool needs a `ToolExecutionContext` —
+ * the call id, the iteration, the credential seam, the artifact store — and
+ * that object belongs to the agent loop. A helper would have to invent one,
+ * and a call made on an invented context is a call that appears in no trace:
+ * the model would be handed a shortlist nobody can later explain the origin of,
+ * which is the opposite of what this library is for.
+ *
+ * So the search tool is registered like any other tool, the model calls it when
+ * the catalogue is too large to reason about, and that call is an ordinary
+ * tool call in the trace — visible, attributable, and replayable.
+ *
+ * @example  Give the model the catalogue's own search
+ *   const tools = await gateway.tools();
+ *   const search = gatewaySearchTool(tools);
+ *   Agent.create({ provider, model })
+ *     .tools(search ? [search] : tools)   // search it, or list it
+ *     .build();
+ */
+export function gatewaySearchTool(tools) {
+    return tools.find((t) => t.schema.name === AGENTCORE_GATEWAY_SEARCH_TOOL);
+}
+/** Whether this gateway's catalogue can be searched rather than listed. */
+export function hasGatewaySearch(tools) {
+    return gatewaySearchTool(tools) !== undefined;
+}
+//# sourceMappingURL=agentcore.js.map

package/dist/esm/adapters/mcp/agentcore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentcore.js","sourceRoot":"","sources":["../../../../src/adapters/mcp/agentcore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,gBAAgB,EAAkB,MAAM,mCAAmC,CAAC;AAKrF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,gCAAgC,CAAC;AAE9E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,4CAA4C,CAAC;AAE5F,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAS3D;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACrE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACtC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CACjB,0FAA0F;YACxF,wBAAwB,CAC3B,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,SAAS,8BAA8B,MAAM,oBAAoB,CAAC;AACtF,CAAC;AA6BD;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAyC;IAEzC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAEvD,6EAA6E;IAC7E,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,kBAAkB,GACtB,eAAe,KAAK,SAAS;QAC3B,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpB,MAAM,EAAE,GAAG,OAAO,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;YACvF,MAAM,IAAI,GACR,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE;gBAC3B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC;oBACE,GAAG,IAAI;oBACP,OAAO,EAAE;wBACP,GAAI,IAAI,EAAE,OAAkC;wBAC5C,CAAC,+BAA+B,CAAC,EAAE,EAAE;qBACtC;iBACF,CAAC;YACR,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9E,CAAC,CAAC;IAER,OAAO,gBAAgB,CAAC;QACtB,GAAG,EAAE,mBAAmB,CAAC,OAAO,CAAC;QACjC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAClE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAClE,GAAG,CAAC,kBAAkB,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;KACvE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAsB;IACtD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,6BAA6B,CAAC,CAAC;AAC5E,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,OAAO,iBAAiB,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;AAChD,CAAC"}

package/dist/esm/hosting-providers.d.ts

@@ -25,6 +25,21 @@
  *     idleMs: 900000 }` declared, session affinity readable from header or
  *     query, and a `Sec-WebSocket-Protocol` bearer mapped into
  *     `headers.authorization`.
+ *   • `agentCoreA2AHost({ card, port?, hostname?, maxBodyBytes? })` — an
+ *     `AgentHost` for AgentCore's **A2A** container contract, so OTHER AGENTS
+ *     can call yours: JSON-RPC 2.0 at `POST /` on port 9000, the agent card at
+ *     `/.well-known/agent-card.json`, `GET /ping` answering
+ *     `{"status":"Healthy"}`, and the session read from
+ *     `X-Amzn-Bedrock-AgentCore-Runtime-Session-Id`. It declares NO streaming
+ *     capability and its card says `streaming: false`, because `message/send`
+ *     has nowhere to put a chunk — the two agree on purpose. Errors carry a
+ *     REAL HTTP status alongside the JSON-RPC error body (the platform's
+ *     documented deviation from the A2A spec); `agentCoreA2AErrorCode` is the
+ *     table, exported so a client shares it rather than keeping a copy.
+ *   • `a2aWire({ card, health?, errorCodeFor? })` — the A2A PROTOCOL as an
+ *     `HttpWire`, with no vendor in it, for the next runtime that speaks it.
+ *     `a2aAgentCardDocument(card)` builds the discovery document on its own,
+ *     for deployments that must serve it from somewhere else.
  *   • `foundryResponsesHost({ port?, hostname?, model?, maxBodyBytes? })` — an
  *     `AgentHost` for Microsoft Foundry's hosted-agent contract: `POST
  *     /responses`, a `HEAD` capability probe on the same path, `GET /readiness`
@@ -100,6 +115,10 @@
  * symbols, one door. Import from the door.
  */
 export { agentCoreRuntimeHost, agentCoreRuntimeWire, readAgentCoreConversation, agentCoreSessions, DEFAULT_SESSION_STORAGE_PATH, } from './adapters/hosting/agentcore.js';
+export { agentCoreA2AHost, agentCoreA2AErrorCode, DEFAULT_AGENTCORE_A2A_PORT, AGENTCORE_A2A_INVOKE_PATH, AGENTCORE_PING_PATH, AGENTCORE_SESSION_HEADER, } from './adapters/hosting/agentCoreA2A.js';
+export type { AgentCoreA2AHostOptions } from './adapters/hosting/agentCoreA2A.js';
+export { a2aWire, a2aAgentCardDocument, readA2AMessageText, A2A_PROTOCOL_VERSION, A2A_AGENT_CARD_PATH, A2A_SEND_METHOD, JSONRPC_METHOD_NOT_FOUND, JSONRPC_INVALID_PARAMS, JSONRPC_INTERNAL_ERROR, } from './adapters/hosting/a2aWire.js';
+export type { A2AWireOptions, A2AAgentCard, A2ASkill } from './adapters/hosting/a2aWire.js';
 export { foundryResponsesHost, DEFAULT_FOUNDRY_PORT, FOUNDRY_INVOKE_PATH, FOUNDRY_READINESS_PATH, FOUNDRY_SESSION_FIELDS, } from './adapters/hosting/foundryResponses.js';
 export type { FoundryResponsesHostOptions } from './adapters/hosting/foundryResponses.js';
 export { responsesWire, readResponsesInput, readResponsesSession, DEFAULT_SESSION_FIELDS, PUBLIC_FAILURE_MESSAGE, } from './adapters/hosting/responsesWire.js';

package/dist/esm/hosting-providers.js

@@ -25,6 +25,21 @@
  *     idleMs: 900000 }` declared, session affinity readable from header or
  *     query, and a `Sec-WebSocket-Protocol` bearer mapped into
  *     `headers.authorization`.
+ *   • `agentCoreA2AHost({ card, port?, hostname?, maxBodyBytes? })` — an
+ *     `AgentHost` for AgentCore's **A2A** container contract, so OTHER AGENTS
+ *     can call yours: JSON-RPC 2.0 at `POST /` on port 9000, the agent card at
+ *     `/.well-known/agent-card.json`, `GET /ping` answering
+ *     `{"status":"Healthy"}`, and the session read from
+ *     `X-Amzn-Bedrock-AgentCore-Runtime-Session-Id`. It declares NO streaming
+ *     capability and its card says `streaming: false`, because `message/send`
+ *     has nowhere to put a chunk — the two agree on purpose. Errors carry a
+ *     REAL HTTP status alongside the JSON-RPC error body (the platform's
+ *     documented deviation from the A2A spec); `agentCoreA2AErrorCode` is the
+ *     table, exported so a client shares it rather than keeping a copy.
+ *   • `a2aWire({ card, health?, errorCodeFor? })` — the A2A PROTOCOL as an
+ *     `HttpWire`, with no vendor in it, for the next runtime that speaks it.
+ *     `a2aAgentCardDocument(card)` builds the discovery document on its own,
+ *     for deployments that must serve it from somewhere else.
  *   • `foundryResponsesHost({ port?, hostname?, model?, maxBodyBytes? })` — an
  *     `AgentHost` for Microsoft Foundry's hosted-agent contract: `POST
  *     /responses`, a `HEAD` capability probe on the same path, `GET /readiness`
@@ -100,6 +115,10 @@
  * symbols, one door. Import from the door.
  */
 export { agentCoreRuntimeHost, agentCoreRuntimeWire, readAgentCoreConversation, agentCoreSessions, DEFAULT_SESSION_STORAGE_PATH, } from './adapters/hosting/agentcore.js';
+export { agentCoreA2AHost, agentCoreA2AErrorCode, DEFAULT_AGENTCORE_A2A_PORT, AGENTCORE_A2A_INVOKE_PATH, AGENTCORE_PING_PATH, AGENTCORE_SESSION_HEADER, } from './adapters/hosting/agentCoreA2A.js';
+// The protocol under it, on the barrel in its own right — A2A is an open
+// protocol, and reaching it should not mean importing a vendor's module.
+export { a2aWire, a2aAgentCardDocument, readA2AMessageText, A2A_PROTOCOL_VERSION, A2A_AGENT_CARD_PATH, A2A_SEND_METHOD, JSONRPC_METHOD_NOT_FOUND, JSONRPC_INVALID_PARAMS, JSONRPC_INTERNAL_ERROR, } from './adapters/hosting/a2aWire.js';
 export { foundryResponsesHost, DEFAULT_FOUNDRY_PORT, FOUNDRY_INVOKE_PATH, FOUNDRY_READINESS_PATH, FOUNDRY_SESSION_FIELDS, } from './adapters/hosting/foundryResponses.js';
 // The protocol under it, on the barrel in its own right: a deployment that
 // speaks Responses on paths of its own is a `httpHost` away, and having to

package/dist/esm/hosting-providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"hosting-providers.js","sourceRoot":"","sources":["../../src/hosting-providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoGG;AAEH,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,wCAAwC,CAAC;AAIhD,2EAA2E;AAC3E,2EAA2E;AAC3E,8EAA8E;AAC9E,kCAAkC;AAClC,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qCAAqC,CAAC;AAI7C,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,yCAAyC,CAAC;AAOjD,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,6EAA6E;AAC7E,mBAAmB;AACnB,OAAO,EACL,iBAAiB,EACjB,0BAA0B;AAC1B,uEAAuE;AACvE,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,gBAAgB,EAChB,4BAA4B,EAC5B,4BAA4B,EAC5B,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,yCAAyC,CAAC"}
+{"version":3,"file":"hosting-providers.js","sourceRoot":"","sources":["../../src/hosting-providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmHG;AAEH,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC1B,yBAAyB,EACzB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAI5C,yEAAyE;AACzE,yEAAyE;AACzE,OAAO,EACL,OAAO,EACP,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,wCAAwC,CAAC;AAIhD,2EAA2E;AAC3E,2EAA2E;AAC3E,8EAA8E;AAC9E,kCAAkC;AAClC,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qCAAqC,CAAC;AAI7C,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,yCAAyC,CAAC;AAOjD,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,6EAA6E;AAC7E,mBAAmB;AACnB,OAAO,EACL,iBAAiB,EACjB,0BAA0B;AAC1B,uEAAuE;AACvE,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,gBAAgB,EAChB,4BAA4B,EAC5B,4BAA4B,EAC5B,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,yCAAyC,CAAC"}

package/dist/esm/tool-providers/index.d.ts

@@ -52,4 +52,6 @@ export { gatedTools } from './gatedTools.js';
 export { skillScopedTools, skillScopedToolsTarget, SKILL_SCOPED_TOOLS_ID_PREFIX, } from './skillScopedTools.js';
 export type { ToolProvider, ToolDispatchContext, ToolGatePredicate } from './types.js';
 export { mcpClient, mcpServe, mockMcpClient, gatewayTransport, GatewayAuthorizationRequiredError, } from '../lib/mcp/index.js';
+export { agentCoreGatewayTransport, agentCoreGatewayUrl, gatewaySearchTool, hasGatewaySearch, AGENTCORE_GATEWAY_SEARCH_TOOL, AGENTCORE_POLICY_SESSION_HEADER, AGENTCORE_SIGV4_SERVICE, } from '../adapters/mcp/agentcore.js';
+export type { AgentCoreGatewayTransportOptions, AgentCoreGatewayUrlOptions, } from '../adapters/mcp/agentcore.js';
 export type { GatewayTransportOptions, McpCallToolResult, McpClient, McpClientOptions, McpSdkClient, McpTransport, McpStdioTransport, McpHttpTransport, McpGatewayTransport, MockMcpClientOptions, MockMcpTool, McpServeOptions, McpServeHandle, McpServeTransport, McpStdioServeTransport, McpHttpServeTransport, McpSdkServer, } from '../lib/mcp/index.js';

package/dist/esm/tool-providers/index.js

@@ -57,4 +57,9 @@ skillScopedToolsTarget, SKILL_SCOPED_TOOLS_ID_PREFIX, } from './skillScopedTools
 // one place. This subpath is the ONLY place `mcpClient` is public — the
 // top-level barrel does not re-export it.
 export { mcpClient, mcpServe, mockMcpClient, gatewayTransport, GatewayAuthorizationRequiredError, } from '../lib/mcp/index.js';
+// Reaching an AWS Bedrock AgentCore Gateway (9.66.0). A configuration of
+// `gatewayTransport` plus the four facts that are AgentCore's alone — kept in
+// the vendor's own file so the transport above stays able to say, truthfully,
+// that nothing in it is vendor-specific.
+export { agentCoreGatewayTransport, agentCoreGatewayUrl, gatewaySearchTool, hasGatewaySearch, AGENTCORE_GATEWAY_SEARCH_TOOL, AGENTCORE_POLICY_SESSION_HEADER, AGENTCORE_SIGV4_SERVICE, } from '../adapters/mcp/agentcore.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/tool-providers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tool-providers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACL,gBAAgB;AAChB,kFAAkF;AAClF,kFAAkF;AAClF,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAG/B,uEAAuE;AACvE,wEAAwE;AACxE,0CAA0C;AAC1C,OAAO,EACL,SAAS,EACT,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,iCAAiC,GAClC,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tool-providers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACL,gBAAgB;AAChB,kFAAkF;AAClF,kFAAkF;AAClF,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAG/B,uEAAuE;AACvE,wEAAwE;AACxE,0CAA0C;AAC1C,OAAO,EACL,SAAS,EACT,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,yEAAyE;AACzE,8EAA8E;AAC9E,8EAA8E;AAC9E,yCAAyC;AACzC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,6BAA6B,EAC7B,+BAA+B,EAC/B,uBAAuB,GACxB,MAAM,8BAA8B,CAAC"}

package/dist/hosting-providers.js

@@ -26,6 +26,21 @@
  *     idleMs: 900000 }` declared, session affinity readable from header or
  *     query, and a `Sec-WebSocket-Protocol` bearer mapped into
  *     `headers.authorization`.
+ *   • `agentCoreA2AHost({ card, port?, hostname?, maxBodyBytes? })` — an
+ *     `AgentHost` for AgentCore's **A2A** container contract, so OTHER AGENTS
+ *     can call yours: JSON-RPC 2.0 at `POST /` on port 9000, the agent card at
+ *     `/.well-known/agent-card.json`, `GET /ping` answering
+ *     `{"status":"Healthy"}`, and the session read from
+ *     `X-Amzn-Bedrock-AgentCore-Runtime-Session-Id`. It declares NO streaming
+ *     capability and its card says `streaming: false`, because `message/send`
+ *     has nowhere to put a chunk — the two agree on purpose. Errors carry a
+ *     REAL HTTP status alongside the JSON-RPC error body (the platform's
+ *     documented deviation from the A2A spec); `agentCoreA2AErrorCode` is the
+ *     table, exported so a client shares it rather than keeping a copy.
+ *   • `a2aWire({ card, health?, errorCodeFor? })` — the A2A PROTOCOL as an
+ *     `HttpWire`, with no vendor in it, for the next runtime that speaks it.
+ *     `a2aAgentCardDocument(card)` builds the discovery document on its own,
+ *     for deployments that must serve it from somewhere else.
  *   • `foundryResponsesHost({ port?, hostname?, model?, maxBodyBytes? })` — an
  *     `AgentHost` for Microsoft Foundry's hosted-agent contract: `POST
  *     /responses`, a `HEAD` capability probe on the same path, `GET /readiness`
@@ -101,13 +116,32 @@
  * symbols, one door. Import from the door.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FirestoreIndexMissingError = exports.EnvelopeTooLargeError = exports.FIRESTORE_MAX_ENVELOPE_BYTES = exports.FIRESTORE_MAX_DOCUMENT_BYTES = exports.EXPIRES_AT_FIELD = exports.DEFAULT_SESSION_COLLECTION = exports.firestoreSessions = exports.SESSION_EVENT_AUTHOR = exports.SESSION_STATE_KEY = exports.DEFAULT_USER_ID = exports.agentEngineSessions = exports.PUBLIC_FAILURE_MESSAGE = exports.DEFAULT_SESSION_FIELDS = exports.readResponsesSession = exports.readResponsesInput = exports.responsesWire = exports.FOUNDRY_SESSION_FIELDS = exports.FOUNDRY_READINESS_PATH = exports.FOUNDRY_INVOKE_PATH = exports.DEFAULT_FOUNDRY_PORT = exports.foundryResponsesHost = exports.DEFAULT_SESSION_STORAGE_PATH = exports.agentCoreSessions = exports.readAgentCoreConversation = exports.agentCoreRuntimeWire = exports.agentCoreRuntimeHost = void 0;
+exports.FirestoreIndexMissingError = exports.EnvelopeTooLargeError = exports.FIRESTORE_MAX_ENVELOPE_BYTES = exports.FIRESTORE_MAX_DOCUMENT_BYTES = exports.EXPIRES_AT_FIELD = exports.DEFAULT_SESSION_COLLECTION = exports.firestoreSessions = exports.SESSION_EVENT_AUTHOR = exports.SESSION_STATE_KEY = exports.DEFAULT_USER_ID = exports.agentEngineSessions = exports.PUBLIC_FAILURE_MESSAGE = exports.DEFAULT_SESSION_FIELDS = exports.readResponsesSession = exports.readResponsesInput = exports.responsesWire = exports.FOUNDRY_SESSION_FIELDS = exports.FOUNDRY_READINESS_PATH = exports.FOUNDRY_INVOKE_PATH = exports.DEFAULT_FOUNDRY_PORT = exports.foundryResponsesHost = exports.JSONRPC_INTERNAL_ERROR = exports.JSONRPC_INVALID_PARAMS = exports.JSONRPC_METHOD_NOT_FOUND = exports.A2A_SEND_METHOD = exports.A2A_AGENT_CARD_PATH = exports.A2A_PROTOCOL_VERSION = exports.readA2AMessageText = exports.a2aAgentCardDocument = exports.a2aWire = exports.AGENTCORE_SESSION_HEADER = exports.AGENTCORE_PING_PATH = exports.AGENTCORE_A2A_INVOKE_PATH = exports.DEFAULT_AGENTCORE_A2A_PORT = exports.agentCoreA2AErrorCode = exports.agentCoreA2AHost = exports.DEFAULT_SESSION_STORAGE_PATH = exports.agentCoreSessions = exports.readAgentCoreConversation = exports.agentCoreRuntimeWire = exports.agentCoreRuntimeHost = void 0;
 var agentcore_js_1 = require("./adapters/hosting/agentcore.js");
 Object.defineProperty(exports, "agentCoreRuntimeHost", { enumerable: true, get: function () { return agentcore_js_1.agentCoreRuntimeHost; } });
 Object.defineProperty(exports, "agentCoreRuntimeWire", { enumerable: true, get: function () { return agentcore_js_1.agentCoreRuntimeWire; } });
 Object.defineProperty(exports, "readAgentCoreConversation", { enumerable: true, get: function () { return agentcore_js_1.readAgentCoreConversation; } });
 Object.defineProperty(exports, "agentCoreSessions", { enumerable: true, get: function () { return agentcore_js_1.agentCoreSessions; } });
 Object.defineProperty(exports, "DEFAULT_SESSION_STORAGE_PATH", { enumerable: true, get: function () { return agentcore_js_1.DEFAULT_SESSION_STORAGE_PATH; } });
+var agentCoreA2A_js_1 = require("./adapters/hosting/agentCoreA2A.js");
+Object.defineProperty(exports, "agentCoreA2AHost", { enumerable: true, get: function () { return agentCoreA2A_js_1.agentCoreA2AHost; } });
+Object.defineProperty(exports, "agentCoreA2AErrorCode", { enumerable: true, get: function () { return agentCoreA2A_js_1.agentCoreA2AErrorCode; } });
+Object.defineProperty(exports, "DEFAULT_AGENTCORE_A2A_PORT", { enumerable: true, get: function () { return agentCoreA2A_js_1.DEFAULT_AGENTCORE_A2A_PORT; } });
+Object.defineProperty(exports, "AGENTCORE_A2A_INVOKE_PATH", { enumerable: true, get: function () { return agentCoreA2A_js_1.AGENTCORE_A2A_INVOKE_PATH; } });
+Object.defineProperty(exports, "AGENTCORE_PING_PATH", { enumerable: true, get: function () { return agentCoreA2A_js_1.AGENTCORE_PING_PATH; } });
+Object.defineProperty(exports, "AGENTCORE_SESSION_HEADER", { enumerable: true, get: function () { return agentCoreA2A_js_1.AGENTCORE_SESSION_HEADER; } });
+// The protocol under it, on the barrel in its own right — A2A is an open
+// protocol, and reaching it should not mean importing a vendor's module.
+var a2aWire_js_1 = require("./adapters/hosting/a2aWire.js");
+Object.defineProperty(exports, "a2aWire", { enumerable: true, get: function () { return a2aWire_js_1.a2aWire; } });
+Object.defineProperty(exports, "a2aAgentCardDocument", { enumerable: true, get: function () { return a2aWire_js_1.a2aAgentCardDocument; } });
+Object.defineProperty(exports, "readA2AMessageText", { enumerable: true, get: function () { return a2aWire_js_1.readA2AMessageText; } });
+Object.defineProperty(exports, "A2A_PROTOCOL_VERSION", { enumerable: true, get: function () { return a2aWire_js_1.A2A_PROTOCOL_VERSION; } });
+Object.defineProperty(exports, "A2A_AGENT_CARD_PATH", { enumerable: true, get: function () { return a2aWire_js_1.A2A_AGENT_CARD_PATH; } });
+Object.defineProperty(exports, "A2A_SEND_METHOD", { enumerable: true, get: function () { return a2aWire_js_1.A2A_SEND_METHOD; } });
+Object.defineProperty(exports, "JSONRPC_METHOD_NOT_FOUND", { enumerable: true, get: function () { return a2aWire_js_1.JSONRPC_METHOD_NOT_FOUND; } });
+Object.defineProperty(exports, "JSONRPC_INVALID_PARAMS", { enumerable: true, get: function () { return a2aWire_js_1.JSONRPC_INVALID_PARAMS; } });
+Object.defineProperty(exports, "JSONRPC_INTERNAL_ERROR", { enumerable: true, get: function () { return a2aWire_js_1.JSONRPC_INTERNAL_ERROR; } });
 var foundryResponses_js_1 = require("./adapters/hosting/foundryResponses.js");
 Object.defineProperty(exports, "foundryResponsesHost", { enumerable: true, get: function () { return foundryResponses_js_1.foundryResponsesHost; } });
 Object.defineProperty(exports, "DEFAULT_FOUNDRY_PORT", { enumerable: true, get: function () { return foundryResponses_js_1.DEFAULT_FOUNDRY_PORT; } });

package/dist/hosting-providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"hosting-providers.js","sourceRoot":"","sources":["../src/hosting-providers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoGG;;;AAEH,gEAMyC;AALvC,oHAAA,oBAAoB,OAAA;AACpB,oHAAA,oBAAoB,OAAA;AACpB,yHAAA,yBAAyB,OAAA;AACzB,iHAAA,iBAAiB,OAAA;AACjB,4HAAA,4BAA4B,OAAA;AAG9B,8EAMgD;AAL9C,2HAAA,oBAAoB,OAAA;AACpB,2HAAA,oBAAoB,OAAA;AACpB,0HAAA,mBAAmB,OAAA;AACnB,6HAAA,sBAAsB,OAAA;AACtB,6HAAA,sBAAsB,OAAA;AAKxB,2EAA2E;AAC3E,2EAA2E;AAC3E,8EAA8E;AAC9E,kCAAkC;AAClC,wEAM6C;AAL3C,iHAAA,aAAa,OAAA;AACb,sHAAA,kBAAkB,OAAA;AAClB,wHAAA,oBAAoB,OAAA;AACpB,0HAAA,sBAAsB,OAAA;AACtB,0HAAA,sBAAsB,OAAA;AAKxB,gFAKiD;AAJ/C,2HAAA,mBAAmB,OAAA;AACnB,uHAAA,eAAe,OAAA;AACf,yHAAA,iBAAiB,OAAA;AACjB,4HAAA,oBAAoB,OAAA;AAQtB,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,6EAA6E;AAC7E,mBAAmB;AACnB,gFAaiD;AAZ/C,yHAAA,iBAAiB,OAAA;AACjB,kIAAA,0BAA0B,OAAA;AAC1B,uEAAuE;AACvE,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,wHAAA,gBAAgB,OAAA;AAChB,oIAAA,4BAA4B,OAAA;AAC5B,oIAAA,4BAA4B,OAAA;AAC5B,6HAAA,qBAAqB,OAAA;AACrB,kIAAA,0BAA0B,OAAA"}
+{"version":3,"file":"hosting-providers.js","sourceRoot":"","sources":["../src/hosting-providers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmHG;;;AAEH,gEAMyC;AALvC,oHAAA,oBAAoB,OAAA;AACpB,oHAAA,oBAAoB,OAAA;AACpB,yHAAA,yBAAyB,OAAA;AACzB,iHAAA,iBAAiB,OAAA;AACjB,4HAAA,4BAA4B,OAAA;AAG9B,sEAO4C;AAN1C,mHAAA,gBAAgB,OAAA;AAChB,wHAAA,qBAAqB,OAAA;AACrB,6HAAA,0BAA0B,OAAA;AAC1B,4HAAA,yBAAyB,OAAA;AACzB,sHAAA,mBAAmB,OAAA;AACnB,2HAAA,wBAAwB,OAAA;AAK1B,yEAAyE;AACzE,yEAAyE;AACzE,4DAUuC;AATrC,qGAAA,OAAO,OAAA;AACP,kHAAA,oBAAoB,OAAA;AACpB,gHAAA,kBAAkB,OAAA;AAClB,kHAAA,oBAAoB,OAAA;AACpB,iHAAA,mBAAmB,OAAA;AACnB,6GAAA,eAAe,OAAA;AACf,sHAAA,wBAAwB,OAAA;AACxB,oHAAA,sBAAsB,OAAA;AACtB,oHAAA,sBAAsB,OAAA;AAKxB,8EAMgD;AAL9C,2HAAA,oBAAoB,OAAA;AACpB,2HAAA,oBAAoB,OAAA;AACpB,0HAAA,mBAAmB,OAAA;AACnB,6HAAA,sBAAsB,OAAA;AACtB,6HAAA,sBAAsB,OAAA;AAKxB,2EAA2E;AAC3E,2EAA2E;AAC3E,8EAA8E;AAC9E,kCAAkC;AAClC,wEAM6C;AAL3C,iHAAA,aAAa,OAAA;AACb,sHAAA,kBAAkB,OAAA;AAClB,wHAAA,oBAAoB,OAAA;AACpB,0HAAA,sBAAsB,OAAA;AACtB,0HAAA,sBAAsB,OAAA;AAKxB,gFAKiD;AAJ/C,2HAAA,mBAAmB,OAAA;AACnB,uHAAA,eAAe,OAAA;AACf,yHAAA,iBAAiB,OAAA;AACjB,4HAAA,oBAAoB,OAAA;AAQtB,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,6EAA6E;AAC7E,mBAAmB;AACnB,gFAaiD;AAZ/C,yHAAA,iBAAiB,OAAA;AACjB,kIAAA,0BAA0B,OAAA;AAC1B,uEAAuE;AACvE,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,wHAAA,gBAAgB,OAAA;AAChB,oIAAA,4BAA4B,OAAA;AAC5B,oIAAA,4BAA4B,OAAA;AAC5B,6HAAA,qBAAqB,OAAA;AACrB,kIAAA,0BAA0B,OAAA"}

package/dist/tool-providers/index.js

@@ -49,7 +49,7 @@
  * symbols, one door. Import from the door.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GatewayAuthorizationRequiredError = exports.gatewayTransport = exports.mockMcpClient = exports.mcpServe = exports.mcpClient = exports.SKILL_SCOPED_TOOLS_ID_PREFIX = exports.skillScopedToolsTarget = exports.skillScopedTools = exports.gatedTools = exports.staticTools = void 0;
+exports.AGENTCORE_SIGV4_SERVICE = exports.AGENTCORE_POLICY_SESSION_HEADER = exports.AGENTCORE_GATEWAY_SEARCH_TOOL = exports.hasGatewaySearch = exports.gatewaySearchTool = exports.agentCoreGatewayUrl = exports.agentCoreGatewayTransport = exports.GatewayAuthorizationRequiredError = exports.gatewayTransport = exports.mockMcpClient = exports.mcpServe = exports.mcpClient = exports.SKILL_SCOPED_TOOLS_ID_PREFIX = exports.skillScopedToolsTarget = exports.skillScopedTools = exports.gatedTools = exports.staticTools = void 0;
 var staticTools_js_1 = require("./staticTools.js");
 Object.defineProperty(exports, "staticTools", { enumerable: true, get: function () { return staticTools_js_1.staticTools; } });
 var gatedTools_js_1 = require("./gatedTools.js");
@@ -69,4 +69,16 @@ Object.defineProperty(exports, "mcpServe", { enumerable: true, get: function ()
 Object.defineProperty(exports, "mockMcpClient", { enumerable: true, get: function () { return index_js_1.mockMcpClient; } });
 Object.defineProperty(exports, "gatewayTransport", { enumerable: true, get: function () { return index_js_1.gatewayTransport; } });
 Object.defineProperty(exports, "GatewayAuthorizationRequiredError", { enumerable: true, get: function () { return index_js_1.GatewayAuthorizationRequiredError; } });
+// Reaching an AWS Bedrock AgentCore Gateway (9.66.0). A configuration of
+// `gatewayTransport` plus the four facts that are AgentCore's alone — kept in
+// the vendor's own file so the transport above stays able to say, truthfully,
+// that nothing in it is vendor-specific.
+var agentcore_js_1 = require("../adapters/mcp/agentcore.js");
+Object.defineProperty(exports, "agentCoreGatewayTransport", { enumerable: true, get: function () { return agentcore_js_1.agentCoreGatewayTransport; } });
+Object.defineProperty(exports, "agentCoreGatewayUrl", { enumerable: true, get: function () { return agentcore_js_1.agentCoreGatewayUrl; } });
+Object.defineProperty(exports, "gatewaySearchTool", { enumerable: true, get: function () { return agentcore_js_1.gatewaySearchTool; } });
+Object.defineProperty(exports, "hasGatewaySearch", { enumerable: true, get: function () { return agentcore_js_1.hasGatewaySearch; } });
+Object.defineProperty(exports, "AGENTCORE_GATEWAY_SEARCH_TOOL", { enumerable: true, get: function () { return agentcore_js_1.AGENTCORE_GATEWAY_SEARCH_TOOL; } });
+Object.defineProperty(exports, "AGENTCORE_POLICY_SESSION_HEADER", { enumerable: true, get: function () { return agentcore_js_1.AGENTCORE_POLICY_SESSION_HEADER; } });
+Object.defineProperty(exports, "AGENTCORE_SIGV4_SERVICE", { enumerable: true, get: function () { return agentcore_js_1.AGENTCORE_SIGV4_SERVICE; } });
 //# sourceMappingURL=index.js.map

package/dist/tool-providers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tool-providers/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;;;AAEH,mDAA+C;AAAtC,6GAAA,WAAW,OAAA;AACpB,iDAA6C;AAApC,2GAAA,UAAU,OAAA;AACnB,6DAM+B;AAL7B,uHAAA,gBAAgB,OAAA;AAChB,kFAAkF;AAClF,kFAAkF;AAClF,6HAAA,sBAAsB,OAAA;AACtB,mIAAA,4BAA4B,OAAA;AAI9B,uEAAuE;AACvE,wEAAwE;AACxE,0CAA0C;AAC1C,gDAM6B;AAL3B,qGAAA,SAAS,OAAA;AACT,oGAAA,QAAQ,OAAA;AACR,yGAAA,aAAa,OAAA;AACb,4GAAA,gBAAgB,OAAA;AAChB,6HAAA,iCAAiC,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tool-providers/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;;;AAEH,mDAA+C;AAAtC,6GAAA,WAAW,OAAA;AACpB,iDAA6C;AAApC,2GAAA,UAAU,OAAA;AACnB,6DAM+B;AAL7B,uHAAA,gBAAgB,OAAA;AAChB,kFAAkF;AAClF,kFAAkF;AAClF,6HAAA,sBAAsB,OAAA;AACtB,mIAAA,4BAA4B,OAAA;AAI9B,uEAAuE;AACvE,wEAAwE;AACxE,0CAA0C;AAC1C,gDAM6B;AAL3B,qGAAA,SAAS,OAAA;AACT,oGAAA,QAAQ,OAAA;AACR,yGAAA,aAAa,OAAA;AACb,4GAAA,gBAAgB,OAAA;AAChB,6HAAA,iCAAiC,OAAA;AAEnC,yEAAyE;AACzE,8EAA8E;AAC9E,8EAA8E;AAC9E,yCAAyC;AACzC,6DAQsC;AAPpC,yHAAA,yBAAyB,OAAA;AACzB,mHAAA,mBAAmB,OAAA;AACnB,iHAAA,iBAAiB,OAAA;AACjB,gHAAA,gBAAgB,OAAA;AAChB,6HAAA,6BAA6B,OAAA;AAC7B,+HAAA,+BAA+B,OAAA;AAC/B,uHAAA,uBAAuB,OAAA"}

package/dist/types/adapters/hosting/a2aWire.d.ts

@@ -0,0 +1,111 @@
+/**
+ * adapters/hosting/a2aWire — the A2A protocol, as an `HttpWire`.
+ *
+ * ── What this is ─────────────────────────────────────────────────────────────
+ * **A2A** (agent-to-agent) is an open protocol for one agent calling another:
+ * JSON-RPC 2.0 over HTTP, a `message/send` method carrying text parts, a result
+ * carrying artifacts, and a discovery document — the **agent card** — that says
+ * what the agent is and what it can do. It is nobody's product; several
+ * runtimes speak it, so it lives here on its own and the runtimes that host it
+ * configure this rather than reimplement it.
+ *
+ * ── The subset, stated plainly ───────────────────────────────────────────────
+ * One method: `message/send`, text parts only. Deliberately NOT carried:
+ * `message/stream` and the rest of the task lifecycle (`tasks/get`,
+ * `tasks/cancel`, push notifications), non-text parts, and multi-turn task
+ * state. An agent card built here therefore declares `streaming: false` by
+ * default — advertising a capability this wire cannot honour is how a caller
+ * finds out by hanging.
+ *
+ * ── Why it fits `httpHost` without changing it ───────────────────────────────
+ * JSON-RPC's one hard requirement on a reply is that it ECHOES the request's
+ * `id`. That is possible here only because `HttpWire`'s body methods receive
+ * the request that produced them — a seam added for a different protocol
+ * entirely, and the reason this one needed no new machinery.
+ *
+ * @example  A2A on paths of your own choosing
+ *   httpHost({
+ *     name: 'myA2AHost',
+ *     wire: a2aWire({ card: { name: 'triage', description: '…', version: '1.0.0' } }),
+ *     invokePath: '/',
+ *     healthPath: '/health',
+ *   });
+ */
+import type { HttpWire } from '../../hosting/httpHost.js';
+/** The A2A protocol revision this wire's documents declare. */
+export declare const A2A_PROTOCOL_VERSION = "0.3.0";
+/** Where the A2A specification puts an agent's discovery document. */
+export declare const A2A_AGENT_CARD_PATH = "/.well-known/agent-card.json";
+/** The one method this wire carries. */
+export declare const A2A_SEND_METHOD = "message/send";
+/**
+ * JSON-RPC's own reserved codes, the two this wire can raise.
+ *
+ * `-32601` is "method not found" and `-32602` is "invalid params" — both from
+ * the JSON-RPC specification rather than from A2A or any runtime, which is why
+ * they are the only numbers this neutral file knows. A runtime's own error
+ * codes belong to that runtime's adapter.
+ */
+export declare const JSONRPC_METHOD_NOT_FOUND = -32601;
+export declare const JSONRPC_INVALID_PARAMS = -32602;
+export declare const JSONRPC_INTERNAL_ERROR = -32603;
+/** One skill an agent card advertises. */
+export interface A2ASkill {
+    readonly id: string;
+    readonly name: string;
+    readonly description: string;
+    readonly tags?: readonly string[];
+}
+/** The agent card this wire serves — what another agent reads to decide to call yours. */
+export interface A2AAgentCard {
+    readonly name: string;
+    readonly description: string;
+    readonly version: string;
+    /** Where callers reach this agent. A runtime that mounts the agent behind its
+     *  own URL fills this in; left out, the card simply omits it. */
+    readonly url?: string;
+    /** Default `false` — see the module note on why this wire does not claim it. */
+    readonly streaming?: boolean;
+    readonly defaultInputModes?: readonly string[];
+    readonly defaultOutputModes?: readonly string[];
+    readonly skills?: readonly A2ASkill[];
+}
+export interface A2AWireOptions {
+    /** The agent card. Required: A2A discovery is not optional in the protocol. */
+    readonly card: A2AAgentCard;
+    /** Body for the health probe. Default `{ status: 'ok' }`. */
+    readonly health?: unknown;
+    /**
+     * Map a refusal's stable code onto the numeric JSON-RPC code this deployment
+     * reports. Absent, everything that is not a malformed request is
+     * `-32603` (internal error) — the JSON-RPC catch-all.
+     *
+     * A runtime with its own published code table passes one; that table is the
+     * runtime's, and this file does not carry anybody's.
+     */
+    readonly errorCodeFor?: (code: string | undefined) => number;
+    /** Name used in refusal messages. Default `'a2aWire'`. */
+    readonly name?: string;
+}
+type JsonObject = Readonly<Record<string, unknown>>;
+/**
+ * The text of one A2A message — every part concatenated, refusing what is not text.
+ *
+ * A non-text part is refused rather than skipped for the reason every dialect
+ * in this library refuses rather than skips: an answer produced from the parts
+ * that happened to be understood is a wrong answer delivered confidently.
+ */
+export declare function readA2AMessageText(message: unknown): string;
+/**
+ * The agent card document, as the protocol prints it.
+ *
+ * Exported on its own because a deployment often has to serve the card from
+ * somewhere this wire does not own — a CDN, a route in a framework, a runtime's
+ * own discovery API — and the document should be built once, here, rather than
+ * hand-copied into each of those places.
+ */
+export declare function a2aAgentCardDocument(card: A2AAgentCard): JsonObject;
+/** An `HttpWire` speaking A2A's `message/send`. */
+export declare function a2aWire(options: A2AWireOptions): HttpWire;
+export {};
+//# sourceMappingURL=a2aWire.d.ts.map

package/dist/types/adapters/hosting/a2aWire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2aWire.d.ts","sourceRoot":"","sources":["../../../../src/adapters/hosting/a2aWire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,KAAK,EAAmC,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAE3F,+DAA+D;AAC/D,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C,sEAAsE;AACtE,eAAO,MAAM,mBAAmB,iCAAiC,CAAC;AAElE,wCAAwC;AACxC,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAC7C,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAE7C,0CAA0C;AAC1C,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,0FAA0F;AAC1F,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;qEACiE;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAC;IAC7D,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,KAAK,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAYpD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAyB3D;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,YAAY,GAAG,UAAU,CAkBnE;AAED,mDAAmD;AACnD,wBAAgB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,QAAQ,CAwEzD"}

package/dist/types/adapters/hosting/agentCoreA2A.d.ts

@@ -0,0 +1,96 @@
+/**
+ * adapters/hosting/agentCoreA2A — an agentfootprint agent as an AWS Bedrock
+ * **AgentCore A2A** server, callable by other agents.
+ *
+ * ── The split, again ─────────────────────────────────────────────────────────
+ * Two different things are needed, and only one is Amazon's:
+ *
+ *   • The **A2A protocol** — JSON-RPC 2.0, `message/send`, artifacts, the agent
+ *     card. An open protocol several runtimes speak, so it lives in
+ *     `a2aWire.ts` with no vendor in it.
+ *   • The **container contract** — port 9000 (not 8080, and not 8000: each
+ *     protocol gets its own), the agent mounted at `/`, `GET /ping` answering
+ *     `{"status":"Healthy"}`, the session id arriving in
+ *     `X-Amzn-Bedrock-AgentCore-Runtime-Session-Id`, and a table of JSON-RPC
+ *     error codes that are this runtime's exceptions rather than A2A's. That
+ *     IS Amazon's, and it is what this file supplies.
+ *
+ * ── One deviation you must know about ────────────────────────────────────────
+ * The A2A specification delivers JSON-RPC errors over HTTP 200. **AgentCore
+ * does not** — it returns the real status code (409, 404, …) with the JSON-RPC
+ * error body. That is a fact about the platform in front of your container, so
+ * a CLIENT must parse the error body even on a non-2xx response; see
+ * `agentCoreA2AErrorCode` for the table this host mirrors on the way out.
+ *
+ * ── What is NOT provided ─────────────────────────────────────────────────────
+ * `message/stream` and the task lifecycle. The agent card this host serves
+ * therefore declares `streaming: false` unless you overrule it, because a card
+ * that advertises streaming to a wire that cannot stream is a caller left
+ * waiting. AWS's own sample card says `true`; ours says what is true of ours.
+ *
+ * @example  An agent other agents can call
+ *   import { agentCoreA2AHost, memorySessions, standingAgent } from 'agentfootprint/hosting';
+ *
+ *   const handle = await standingAgent({
+ *     agent,
+ *     sessions: memorySessions(),
+ *     host: agentCoreA2AHost({
+ *       card: { name: 'triage', description: 'Triages SAN alerts.', version: '1.0.0' },
+ *     }),
+ *   });
+ *   process.on('SIGTERM', () => void handle.close());
+ */
+/// <reference types="node" />
+import type { IncomingMessage, Server, ServerResponse } from 'node:http';
+import { type HttpHost } from '../../hosting/httpHost.js';
+import { type A2AAgentCard } from './a2aWire.js';
+/** The port an AgentCore A2A server is expected on — its own, not HTTP's or MCP's. */
+export declare const DEFAULT_AGENTCORE_A2A_PORT = 9000;
+/** A2A mounts the agent at the root. */
+export declare const AGENTCORE_A2A_INVOKE_PATH = "/";
+/** The runtime's health path for every protocol. */
+export declare const AGENTCORE_PING_PATH = "/ping";
+/** Where the platform puts the caller's session. */
+export declare const AGENTCORE_SESSION_HEADER = "X-Amzn-Bedrock-AgentCore-Runtime-Session-Id";
+/**
+ * AgentCore's own JSON-RPC error codes, mapped from this library's refusal codes.
+ *
+ * These numbers are the RUNTIME's exception table, not A2A's: `-32051`
+ * ResourceNotFound, `-32052` Validation, `-32053` Throttling and
+ * ServiceQuotaExceeded, `-32054` Conflict and RetryableConflict, `-32055`
+ * RuntimeClientError, `-32603` anything else. A client reads them to decide
+ * whether to retry — `-32054` with "Session operation in progress" is the one
+ * that must be retried with backoff, and A2A clients do not do that on their
+ * own.
+ *
+ * Exported so a client built against this host can share one table with it
+ * rather than keep a second copy that drifts.
+ */
+export declare function agentCoreA2AErrorCode(code: string | undefined): number;
+export interface AgentCoreA2AHostOptions {
+    /** The agent card other agents read. Required — discovery is not optional in A2A. */
+    readonly card: A2AAgentCard;
+    /** Port to bind. Default {@link DEFAULT_AGENTCORE_A2A_PORT}. Pass `0` in tests. */
+    readonly port?: number;
+    /** Interface to bind. Default `'0.0.0.0'` — a container's door must be reachable. */
+    readonly hostname?: string;
+    /** Ceiling on a request body. Default one mebibyte. */
+    readonly maxBodyBytes?: number;
+    /** A `node:http` server you own. Refused together with `port`/`hostname`. */
+    readonly server?: Server;
+    /**
+     * Answer a path this host does not own. The agent card is served BEFORE this
+     * runs, and everything else falls through to you unchanged — so supplying one
+     * costs you nothing the card was not already going to take.
+     */
+    readonly onUnhandled?: (req: IncomingMessage, res: ServerResponse) => void;
+}
+/**
+ * An {@link HttpHost} serving AgentCore's A2A container contract.
+ *
+ * `httpHost` keeps its own promises — draining, aborting on disconnect, failing
+ * a handler that throws or answers nothing — and this supplies the protocol,
+ * the paths, the port, the session header and the error table.
+ */
+export declare function agentCoreA2AHost(options: AgentCoreA2AHostOptions): HttpHost;
+//# sourceMappingURL=agentCoreA2A.d.ts.map

package/dist/types/adapters/hosting/agentCoreA2A.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentCoreA2A.d.ts","sourceRoot":"","sources":["../../../../src/adapters/hosting/agentCoreA2A.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEzE,OAAO,EAAyB,KAAK,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACjF,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,cAAc,CAAC;AAEtB,sFAAsF;AACtF,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C,wCAAwC;AACxC,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAE7C,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAE3C,oDAAoD;AACpD,eAAO,MAAM,wBAAwB,gDAAgD,CAAC;AAEtF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CA4BtE;AAED,MAAM,WAAW,uBAAuB;IACtC,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,mFAAmF;IACnF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uDAAuD;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;CAC5E;AAID;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,QAAQ,CAmE3E"}