agents 0.16.2 → 0.17.0

package/dist/email.js.map

@@ -1 +1 @@
-{"version":3,"file":"email.js","names":[],"sources":["../src/email.ts"],"sourcesContent":["/**\n * Email routing types, resolvers, and signing utilities for Agents\n */\n\n// Re-export AgentEmail type\nexport type { AgentEmail } from \"./internal_context\";\n\n// ============================================================================\n// Email header utilities\n// ============================================================================\n\n/**\n * Header object as returned by postal-mime and similar email parsing libraries.\n * Each header has a lowercase key and a string value.\n */\nexport type EmailHeader = {\n  /** Lowercase header name (e.g., \"content-type\", \"x-custom-header\") */\n  key: string;\n  /** Header value */\n  value: string;\n};\n\n/**\n * Check if an email appears to be an auto-reply based on standard headers.\n * Checks for Auto-Submitted (RFC 3834), X-Auto-Response-Suppress, and Precedence headers.\n *\n * @param headers - Headers array from postal-mime Email.headers or similar format\n * @returns true if email appears to be an auto-reply\n *\n * @example\n * ```typescript\n * if (isAutoReplyEmail(parsed.headers)) {\n *   // Skip processing auto-replies\n *   return;\n * }\n * ```\n */\nexport function isAutoReplyEmail(headers: EmailHeader[]): boolean {\n  return headers.some((h) => {\n    const key = h.key.toLowerCase();\n    const value = h.value.toLowerCase();\n\n    // RFC 3834: Auto-Submitted header\n    // \"no\" means normal (human-sent) email, anything else indicates auto-reply\n    if (key === \"auto-submitted\") {\n      return value !== \"no\";\n    }\n\n    // X-Auto-Response-Suppress: any value indicates sender doesn't want auto-replies\n    if (key === \"x-auto-response-suppress\") {\n      return true;\n    }\n\n    // Precedence: only bulk/junk/list indicate automated/mass mail\n    if (key === \"precedence\") {\n      return value === \"bulk\" || value === \"junk\" || value === \"list\";\n    }\n\n    return false;\n  });\n}\n\n// ============================================================================\n// Signing utilities\n// ============================================================================\n\n/** Default signature expiration: 30 days in seconds */\nexport const DEFAULT_MAX_AGE_SECONDS = 30 * 24 * 60 * 60;\n\n/** Maximum allowed clock skew for future timestamps: 5 minutes */\nconst MAX_CLOCK_SKEW_SECONDS = 5 * 60;\n\n/**\n * Compute HMAC-SHA256 signature for agent routing headers\n * @param secret - Secret key for HMAC\n * @param agentName - Name of the agent\n * @param agentId - ID of the agent instance\n * @param timestamp - Unix timestamp in seconds\n * @returns Base64-encoded HMAC signature\n */\nasync function computeAgentSignature(\n  secret: string,\n  agentName: string,\n  agentId: string,\n  timestamp: string\n): Promise<string> {\n  const encoder = new TextEncoder();\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"]\n  );\n  const data = encoder.encode(`${agentName}:${agentId}:${timestamp}`);\n  const signature = await crypto.subtle.sign(\"HMAC\", key, data);\n  return btoa(String.fromCharCode(...new Uint8Array(signature)));\n}\n\n/**\n * Result of signature verification\n */\ntype SignatureVerificationResult =\n  | { valid: true }\n  | { valid: false; reason: \"expired\" | \"invalid\" | \"malformed_timestamp\" };\n\n/**\n * Verify HMAC-SHA256 signature for agent routing headers\n * @param secret - Secret key for HMAC\n * @param agentName - Name of the agent\n * @param agentId - ID of the agent instance\n * @param signature - Base64-encoded signature to verify\n * @param timestamp - Unix timestamp in seconds when signature was created\n * @param maxAgeSeconds - Maximum age of signature in seconds (default: 30 days)\n * @returns Verification result with reason if invalid\n */\nasync function verifyAgentSignature(\n  secret: string,\n  agentName: string,\n  agentId: string,\n  signature: string,\n  timestamp: string,\n  maxAgeSeconds: number = DEFAULT_MAX_AGE_SECONDS\n): Promise<SignatureVerificationResult> {\n  try {\n    // Validate timestamp format\n    const timestampNum = Number.parseInt(timestamp, 10);\n    if (Number.isNaN(timestampNum)) {\n      return { valid: false, reason: \"malformed_timestamp\" };\n    }\n\n    // Check timestamp validity\n    const now = Math.floor(Date.now() / 1000);\n\n    // Reject timestamps too far in the future (prevents extending signature validity)\n    if (timestampNum > now + MAX_CLOCK_SKEW_SECONDS) {\n      return { valid: false, reason: \"invalid\" };\n    }\n\n    // Check if signature has expired\n    if (now - timestampNum > maxAgeSeconds) {\n      return { valid: false, reason: \"expired\" };\n    }\n\n    const expected = await computeAgentSignature(\n      secret,\n      agentName,\n      agentId,\n      timestamp\n    );\n    // Constant-time comparison to prevent timing attacks\n    if (expected.length !== signature.length) {\n      return { valid: false, reason: \"invalid\" };\n    }\n    let result = 0;\n    for (let i = 0; i < expected.length; i++) {\n      result |= expected.charCodeAt(i) ^ signature.charCodeAt(i);\n    }\n    if (result !== 0) {\n      return { valid: false, reason: \"invalid\" };\n    }\n    return { valid: true };\n  } catch (error) {\n    console.warn(\"[agents] Signature verification error:\", error);\n    return { valid: false, reason: \"invalid\" };\n  }\n}\n\n/**\n * Sign agent routing headers for secure reply flows.\n * Use this when sending outbound emails to ensure replies can be securely routed back.\n *\n * @param secret - Secret key for HMAC signing (store in environment variables)\n * @param agentName - Name of the agent\n * @param agentId - ID of the agent instance\n * @returns Headers object with X-Agent-Name, X-Agent-ID, X-Agent-Sig, and X-Agent-Sig-Ts\n *\n * @example\n * ```typescript\n * const headers = await signAgentHeaders(env.EMAIL_SECRET, \"MyAgent\", this.name);\n * // Use these headers when sending outbound emails\n * ```\n */\nexport async function signAgentHeaders(\n  secret: string,\n  agentName: string,\n  agentId: string\n): Promise<Record<string, string>> {\n  if (!secret) {\n    throw new Error(\"secret is required for signing agent headers\");\n  }\n  if (!agentName) {\n    throw new Error(\"agentName is required for signing agent headers\");\n  }\n  if (!agentId) {\n    throw new Error(\"agentId is required for signing agent headers\");\n  }\n  // Reject colons to prevent signature confusion attacks\n  // (signature payload uses colon as delimiter: \"agentName:agentId:timestamp\")\n  if (agentName.includes(\":\")) {\n    throw new Error(\"agentName cannot contain colons\");\n  }\n  if (agentId.includes(\":\")) {\n    throw new Error(\"agentId cannot contain colons\");\n  }\n\n  const timestamp = Math.floor(Date.now() / 1000).toString();\n  const signature = await computeAgentSignature(\n    secret,\n    agentName,\n    agentId,\n    timestamp\n  );\n  return {\n    \"X-Agent-Name\": agentName,\n    \"X-Agent-ID\": agentId,\n    \"X-Agent-Sig\": signature,\n    \"X-Agent-Sig-Ts\": timestamp\n  };\n}\n\n// ============================================================================\n// Email routing types and resolvers\n// ============================================================================\n\nexport type EmailResolverResult = {\n  agentName: string;\n  agentId: string;\n  /** @internal Indicates this resolver requires secure reply signing */\n  _secureRouted?: boolean;\n} | null;\n\nexport type EmailResolver<Env> = (\n  email: ForwardableEmailMessage,\n  env: Env\n) => Promise<EmailResolverResult>;\n\n/**\n * Reason for signature verification failure\n */\nexport type SignatureFailureReason =\n  | \"missing_headers\"\n  | \"expired\"\n  | \"invalid\"\n  | \"malformed_timestamp\";\n\n/**\n * Options for createSecureReplyEmailResolver\n */\nexport type SecureReplyResolverOptions = {\n  /**\n   * Maximum age of signature in seconds.\n   * Signatures older than this will be rejected.\n   * Default: 30 days (2592000 seconds)\n   */\n  maxAge?: number;\n  /**\n   * Callback invoked when signature verification fails.\n   * Useful for logging and debugging.\n   */\n  onInvalidSignature?: (\n    email: ForwardableEmailMessage,\n    reason: SignatureFailureReason\n  ) => void;\n};\n\n/**\n * @deprecated REMOVED due to security vulnerability (IDOR via spoofed headers).\n * @throws Always throws an error with migration guidance.\n */\nexport function createHeaderBasedEmailResolver<Env>(): EmailResolver<Env> {\n  throw new Error(\n    \"createHeaderBasedEmailResolver has been removed due to a security vulnerability. \" +\n      \"It trusted attacker-controlled email headers for routing, enabling IDOR attacks.\\n\\n\" +\n      \"Migration options:\\n\" +\n      \"  - For inbound mail: use createAddressBasedEmailResolver(agentName)\\n\" +\n      \"  - For reply flows: use createSecureReplyEmailResolver(secret) with signed headers\\n\\n\" +\n      \"See https://github.com/cloudflare/agents/blob/main/docs/email.md for details.\"\n  );\n}\n\n/**\n * Create a resolver for routing email replies with signature verification.\n * This resolver verifies that replies contain a valid HMAC signature, preventing\n * attackers from routing emails to arbitrary agent instances.\n *\n * @param secret - Secret key for HMAC verification (must match the key used with signAgentHeaders)\n * @param options - Optional configuration for signature verification\n * @returns A function that resolves the agent to route the email to, or null if signature is invalid\n *\n * @example\n * ```typescript\n * // In your email handler\n * const secureResolver = createSecureReplyEmailResolver(env.EMAIL_SECRET, {\n *   maxAge: 7 * 24 * 60 * 60, // 7 days\n *   onInvalidSignature: (email, reason) => {\n *     console.warn(`Invalid signature from ${email.from}: ${reason}`);\n *   }\n * });\n * const addressResolver = createAddressBasedEmailResolver(\"MyAgent\");\n *\n * await routeAgentEmail(email, env, {\n *   resolver: async (email, env) => {\n *     // Try secure reply routing first\n *     const replyRouting = await secureResolver(email, env);\n *     if (replyRouting) return replyRouting;\n *     // Fall back to address-based routing\n *     return addressResolver(email, env);\n *   }\n * });\n * ```\n */\nexport function createSecureReplyEmailResolver<Env>(\n  secret: string,\n  options?: SecureReplyResolverOptions\n): EmailResolver<Env> {\n  if (!secret) {\n    throw new Error(\"secret is required for createSecureReplyEmailResolver\");\n  }\n\n  const maxAge = options?.maxAge ?? DEFAULT_MAX_AGE_SECONDS;\n  const onInvalidSignature = options?.onInvalidSignature;\n\n  return async (email: ForwardableEmailMessage, _env: Env) => {\n    const agentName = email.headers.get(\"x-agent-name\");\n    const agentId = email.headers.get(\"x-agent-id\");\n    const signature = email.headers.get(\"x-agent-sig\");\n    const timestamp = email.headers.get(\"x-agent-sig-ts\");\n\n    if (!agentName || !agentId || !signature || !timestamp) {\n      onInvalidSignature?.(email, \"missing_headers\");\n      return null;\n    }\n\n    const result = await verifyAgentSignature(\n      secret,\n      agentName,\n      agentId,\n      signature,\n      timestamp,\n      maxAge\n    );\n\n    if (!result.valid) {\n      onInvalidSignature?.(email, result.reason);\n      return null;\n    }\n\n    return { agentName, agentId, _secureRouted: true };\n  };\n}\n\n/**\n * Create a resolver that uses the email address to determine the agent to route the email to\n * @param defaultAgentName The default agent name to use if the email address does not contain a sub-address\n * @returns A function that resolves the agent to route the email to\n */\nexport function createAddressBasedEmailResolver<Env>(\n  defaultAgentName: string\n): EmailResolver<Env> {\n  return async (email: ForwardableEmailMessage, _env: Env) => {\n    // Length limits per RFC 5321: local part max 64 chars, domain max 253 chars\n    const emailMatch = email.to.match(\n      /^([^+@]{1,64})(?:\\+([^@]{1,64}))?@(.{1,253})$/\n    );\n    if (!emailMatch) {\n      return null;\n    }\n\n    const [, localPart, subAddress] = emailMatch;\n\n    if (subAddress) {\n      return {\n        agentName: localPart,\n        agentId: subAddress\n      };\n    }\n\n    // Option 2: Use defaultAgentName namespace, localPart as agentId\n    // Common for catch-all email routing to a single EmailAgent namespace\n    return {\n      agentName: defaultAgentName,\n      agentId: localPart\n    };\n  };\n}\n\n/**\n * Create a resolver that uses the agentName and agentId to determine the agent to route the email to\n * @param agentName The name of the agent to route the email to\n * @param agentId The id of the agent to route the email to\n * @returns A function that resolves the agent to route the email to\n */\nexport function createCatchAllEmailResolver<Env>(\n  agentName: string,\n  agentId: string\n): EmailResolver<Env> {\n  return async () => ({ agentName, agentId });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAqCA,SAAgB,iBAAiB,SAAiC;CAChE,OAAO,QAAQ,MAAM,MAAM;EACzB,MAAM,MAAM,EAAE,IAAI,YAAY;EAC9B,MAAM,QAAQ,EAAE,MAAM,YAAY;EAIlC,IAAI,QAAQ,kBACV,OAAO,UAAU;EAInB,IAAI,QAAQ,4BACV,OAAO;EAIT,IAAI,QAAQ,cACV,OAAO,UAAU,UAAU,UAAU,UAAU,UAAU;EAG3D,OAAO;CACT,CAAC;AACH;;AAOA,MAAa,0BAA0B,MAAU,KAAK;;AAGtD,MAAM,yBAAyB;;;;;;;;;AAU/B,eAAe,sBACb,QACA,WACA,SACA,WACiB;CACjB,MAAM,UAAU,IAAI,YAAY;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAC9B,OACA,QAAQ,OAAO,MAAM,GACrB;EAAE,MAAM;EAAQ,MAAM;CAAU,GAChC,OACA,CAAC,MAAM,CACT;CACA,MAAM,OAAO,QAAQ,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW;CAClE,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI;CAC5D,OAAO,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,SAAS,CAAC,CAAC;AAC/D;;;;;;;;;;;AAmBA,eAAe,qBACb,QACA,WACA,SACA,WACA,WACA,gBAAwB,yBACc;CACtC,IAAI;EAEF,MAAM,eAAe,OAAO,SAAS,WAAW,EAAE;EAClD,IAAI,OAAO,MAAM,YAAY,GAC3B,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAsB;EAIvD,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EAGxC,IAAI,eAAe,MAAM,wBACvB,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAU;EAI3C,IAAI,MAAM,eAAe,eACvB,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAU;EAG3C,MAAM,WAAW,MAAM,sBACrB,QACA,WACA,SACA,SACF;EAEA,IAAI,SAAS,WAAW,UAAU,QAChC,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAU;EAE3C,IAAI,SAAS;EACb,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KACnC,UAAU,SAAS,WAAW,CAAC,IAAI,UAAU,WAAW,CAAC;EAE3D,IAAI,WAAW,GACb,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAU;EAE3C,OAAO,EAAE,OAAO,KAAK;CACvB,SAAS,OAAO;EACd,QAAQ,KAAK,0CAA0C,KAAK;EAC5D,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAU;CAC3C;AACF;;;;;;;;;;;;;;;;AAiBA,eAAsB,iBACpB,QACA,WACA,SACiC;CACjC,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,8CAA8C;CAEhE,IAAI,CAAC,WACH,MAAM,IAAI,MAAM,iDAAiD;CAEnE,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,+CAA+C;CAIjE,IAAI,UAAU,SAAS,GAAG,GACxB,MAAM,IAAI,MAAM,iCAAiC;CAEnD,IAAI,QAAQ,SAAS,GAAG,GACtB,MAAM,IAAI,MAAM,+BAA+B;CAGjD,MAAM,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC,CAAC,SAAS;CAOzD,OAAO;EACL,gBAAgB;EAChB,cAAc;EACd,eAAe,MATO,sBACtB,QACA,WACA,SACA,SACF;EAKE,kBAAkB;CACpB;AACF;;;;;AAmDA,SAAgB,iCAA0D;CACxE,MAAM,IAAI,MACR,qaAMF;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,+BACd,QACA,SACoB;CACpB,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,uDAAuD;CAGzE,MAAM,SAAS,SAAS,UAAA;CACxB,MAAM,qBAAqB,SAAS;CAEpC,OAAO,OAAO,OAAgC,SAAc;EAC1D,MAAM,YAAY,MAAM,QAAQ,IAAI,cAAc;EAClD,MAAM,UAAU,MAAM,QAAQ,IAAI,YAAY;EAC9C,MAAM,YAAY,MAAM,QAAQ,IAAI,aAAa;EACjD,MAAM,YAAY,MAAM,QAAQ,IAAI,gBAAgB;EAEpD,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,aAAa,CAAC,WAAW;GACtD,qBAAqB,OAAO,iBAAiB;GAC7C,OAAO;EACT;EAEA,MAAM,SAAS,MAAM,qBACnB,QACA,WACA,SACA,WACA,WACA,MACF;EAEA,IAAI,CAAC,OAAO,OAAO;GACjB,qBAAqB,OAAO,OAAO,MAAM;GACzC,OAAO;EACT;EAEA,OAAO;GAAE;GAAW;GAAS,eAAe;EAAK;CACnD;AACF;;;;;;AAOA,SAAgB,gCACd,kBACoB;CACpB,OAAO,OAAO,OAAgC,SAAc;EAE1D,MAAM,aAAa,MAAM,GAAG,MAC1B,+CACF;EACA,IAAI,CAAC,YACH,OAAO;EAGT,MAAM,GAAG,WAAW,cAAc;EAElC,IAAI,YACF,OAAO;GACL,WAAW;GACX,SAAS;EACX;EAKF,OAAO;GACL,WAAW;GACX,SAAS;EACX;CACF;AACF;;;;;;;AAQA,SAAgB,4BACd,WACA,SACoB;CACpB,OAAO,aAAa;EAAE;EAAW;CAAQ;AAC3C"}
+{"version":3,"file":"email.js","names":[],"sources":["../src/email.ts"],"sourcesContent":["/**\n * Email routing types, resolvers, and signing utilities for Agents\n */\n\n// Re-export AgentEmail type\nexport type { AgentEmail } from \"./internal_context\";\n\n// ============================================================================\n// Email header utilities\n// ============================================================================\n\n/**\n * Header object as returned by postal-mime and similar email parsing libraries.\n * Each header has a lowercase key and a string value.\n */\nexport type EmailHeader = {\n  /** Lowercase header name (e.g., \"content-type\", \"x-custom-header\") */\n  key: string;\n  /** Header value */\n  value: string;\n};\n\n/**\n * Check if an email appears to be an auto-reply based on standard headers.\n * Checks for Auto-Submitted (RFC 3834), X-Auto-Response-Suppress, and Precedence headers.\n *\n * @param headers - Headers array from postal-mime Email.headers or similar format\n * @returns true if email appears to be an auto-reply\n *\n * @example\n * ```typescript\n * if (isAutoReplyEmail(parsed.headers)) {\n *   // Skip processing auto-replies\n *   return;\n * }\n * ```\n */\nexport function isAutoReplyEmail(headers: EmailHeader[]): boolean {\n  return headers.some((h) => {\n    const key = h.key.toLowerCase();\n    const value = h.value.toLowerCase();\n\n    // RFC 3834: Auto-Submitted header\n    // \"no\" means normal (human-sent) email, anything else indicates auto-reply\n    if (key === \"auto-submitted\") {\n      return value !== \"no\";\n    }\n\n    // X-Auto-Response-Suppress: any value indicates sender doesn't want auto-replies\n    if (key === \"x-auto-response-suppress\") {\n      return true;\n    }\n\n    // Precedence: only bulk/junk/list indicate automated/mass mail\n    if (key === \"precedence\") {\n      return value === \"bulk\" || value === \"junk\" || value === \"list\";\n    }\n\n    return false;\n  });\n}\n\n// ============================================================================\n// Signing utilities\n// ============================================================================\n\n/** Default signature expiration: 30 days in seconds */\nexport const DEFAULT_MAX_AGE_SECONDS = 30 * 24 * 60 * 60;\n\n/** Maximum allowed clock skew for future timestamps: 5 minutes */\nconst MAX_CLOCK_SKEW_SECONDS = 5 * 60;\n\n/**\n * Compute HMAC-SHA256 signature for agent routing headers\n * @param secret - Secret key for HMAC\n * @param agentName - Name of the agent\n * @param agentId - ID of the agent instance\n * @param timestamp - Unix timestamp in seconds\n * @returns Base64-encoded HMAC signature\n */\nasync function computeAgentSignature(\n  secret: string,\n  agentName: string,\n  agentId: string,\n  timestamp: string\n): Promise<string> {\n  const encoder = new TextEncoder();\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"]\n  );\n  const data = encoder.encode(`${agentName}:${agentId}:${timestamp}`);\n  const signature = await crypto.subtle.sign(\"HMAC\", key, data);\n  return btoa(String.fromCharCode(...new Uint8Array(signature)));\n}\n\n/**\n * Result of signature verification\n */\ntype SignatureVerificationResult =\n  | { valid: true }\n  | { valid: false; reason: \"expired\" | \"invalid\" | \"malformed_timestamp\" };\n\n/**\n * Verify HMAC-SHA256 signature for agent routing headers\n * @param secret - Secret key for HMAC\n * @param agentName - Name of the agent\n * @param agentId - ID of the agent instance\n * @param signature - Base64-encoded signature to verify\n * @param timestamp - Unix timestamp in seconds when signature was created\n * @param maxAgeSeconds - Maximum age of signature in seconds (default: 30 days)\n * @returns Verification result with reason if invalid\n */\nasync function verifyAgentSignature(\n  secret: string,\n  agentName: string,\n  agentId: string,\n  signature: string,\n  timestamp: string,\n  maxAgeSeconds: number = DEFAULT_MAX_AGE_SECONDS\n): Promise<SignatureVerificationResult> {\n  try {\n    // Validate timestamp format\n    const timestampNum = Number.parseInt(timestamp, 10);\n    if (Number.isNaN(timestampNum)) {\n      return { valid: false, reason: \"malformed_timestamp\" };\n    }\n\n    // Check timestamp validity\n    const now = Math.floor(Date.now() / 1000);\n\n    // Reject timestamps too far in the future (prevents extending signature validity)\n    if (timestampNum > now + MAX_CLOCK_SKEW_SECONDS) {\n      return { valid: false, reason: \"invalid\" };\n    }\n\n    // Check if signature has expired\n    if (now - timestampNum > maxAgeSeconds) {\n      return { valid: false, reason: \"expired\" };\n    }\n\n    const expected = await computeAgentSignature(\n      secret,\n      agentName,\n      agentId,\n      timestamp\n    );\n    // Constant-time comparison to prevent timing attacks\n    if (expected.length !== signature.length) {\n      return { valid: false, reason: \"invalid\" };\n    }\n    let result = 0;\n    for (let i = 0; i < expected.length; i++) {\n      result |= expected.charCodeAt(i) ^ signature.charCodeAt(i);\n    }\n    if (result !== 0) {\n      return { valid: false, reason: \"invalid\" };\n    }\n    return { valid: true };\n  } catch (error) {\n    console.warn(\"[agents] Signature verification error:\", error);\n    return { valid: false, reason: \"invalid\" };\n  }\n}\n\n/**\n * Sign agent routing headers for secure reply flows.\n * Use this when sending outbound emails to ensure replies can be securely routed back.\n *\n * @param secret - Secret key for HMAC signing (store in environment variables)\n * @param agentName - Name of the agent\n * @param agentId - ID of the agent instance\n * @returns Headers object with X-Agent-Name, X-Agent-ID, X-Agent-Sig, and X-Agent-Sig-Ts\n *\n * @example\n * ```typescript\n * const headers = await signAgentHeaders(env.EMAIL_SECRET, \"MyAgent\", this.name);\n * // Use these headers when sending outbound emails\n * ```\n */\nexport async function signAgentHeaders(\n  secret: string,\n  agentName: string,\n  agentId: string\n): Promise<Record<string, string>> {\n  if (!secret) {\n    throw new Error(\"secret is required for signing agent headers\");\n  }\n  if (!agentName) {\n    throw new Error(\"agentName is required for signing agent headers\");\n  }\n  if (!agentId) {\n    throw new Error(\"agentId is required for signing agent headers\");\n  }\n  // Reject colons to prevent signature confusion attacks\n  // (signature payload uses colon as delimiter: \"agentName:agentId:timestamp\")\n  if (agentName.includes(\":\")) {\n    throw new Error(\"agentName cannot contain colons\");\n  }\n  if (agentId.includes(\":\")) {\n    throw new Error(\"agentId cannot contain colons\");\n  }\n\n  const timestamp = Math.floor(Date.now() / 1000).toString();\n  const signature = await computeAgentSignature(\n    secret,\n    agentName,\n    agentId,\n    timestamp\n  );\n  return {\n    \"X-Agent-Name\": agentName,\n    \"X-Agent-ID\": agentId,\n    \"X-Agent-Sig\": signature,\n    \"X-Agent-Sig-Ts\": timestamp\n  };\n}\n\n// ============================================================================\n// Email routing types and resolvers\n// ============================================================================\n\nexport type EmailResolverResult = {\n  agentName: string;\n  agentId: string;\n  /** @internal Indicates this resolver requires secure reply signing */\n  _secureRouted?: boolean;\n} | null;\n\nexport type EmailResolver<Env> = (\n  email: ForwardableEmailMessage,\n  env: Env\n) => Promise<EmailResolverResult>;\n\n/**\n * Reason for signature verification failure\n */\nexport type SignatureFailureReason =\n  | \"missing_headers\"\n  | \"expired\"\n  | \"invalid\"\n  | \"malformed_timestamp\";\n\n/**\n * Options for createSecureReplyEmailResolver\n */\nexport type SecureReplyResolverOptions = {\n  /**\n   * Maximum age of signature in seconds.\n   * Signatures older than this will be rejected.\n   * Default: 30 days (2592000 seconds)\n   */\n  maxAge?: number;\n  /**\n   * Callback invoked when signature verification fails.\n   * Useful for logging and debugging.\n   */\n  onInvalidSignature?: (\n    email: ForwardableEmailMessage,\n    reason: SignatureFailureReason\n  ) => void;\n};\n\n/**\n * @deprecated REMOVED due to security vulnerability (IDOR via spoofed headers).\n * @throws Always throws an error with migration guidance.\n */\nexport function createHeaderBasedEmailResolver<Env>(): EmailResolver<Env> {\n  throw new Error(\n    \"createHeaderBasedEmailResolver has been removed due to a security vulnerability. \" +\n      \"It trusted attacker-controlled email headers for routing, enabling IDOR attacks.\\n\\n\" +\n      \"Migration options:\\n\" +\n      \"  - For inbound mail: use createAddressBasedEmailResolver(agentName)\\n\" +\n      \"  - For reply flows: use createSecureReplyEmailResolver(secret) with signed headers\\n\\n\" +\n      \"See https://github.com/cloudflare/agents/blob/main/docs/agents/email.md for details.\"\n  );\n}\n\n/**\n * Create a resolver for routing email replies with signature verification.\n * This resolver verifies that replies contain a valid HMAC signature, preventing\n * attackers from routing emails to arbitrary agent instances.\n *\n * @param secret - Secret key for HMAC verification (must match the key used with signAgentHeaders)\n * @param options - Optional configuration for signature verification\n * @returns A function that resolves the agent to route the email to, or null if signature is invalid\n *\n * @example\n * ```typescript\n * // In your email handler\n * const secureResolver = createSecureReplyEmailResolver(env.EMAIL_SECRET, {\n *   maxAge: 7 * 24 * 60 * 60, // 7 days\n *   onInvalidSignature: (email, reason) => {\n *     console.warn(`Invalid signature from ${email.from}: ${reason}`);\n *   }\n * });\n * const addressResolver = createAddressBasedEmailResolver(\"MyAgent\");\n *\n * await routeAgentEmail(email, env, {\n *   resolver: async (email, env) => {\n *     // Try secure reply routing first\n *     const replyRouting = await secureResolver(email, env);\n *     if (replyRouting) return replyRouting;\n *     // Fall back to address-based routing\n *     return addressResolver(email, env);\n *   }\n * });\n * ```\n */\nexport function createSecureReplyEmailResolver<Env>(\n  secret: string,\n  options?: SecureReplyResolverOptions\n): EmailResolver<Env> {\n  if (!secret) {\n    throw new Error(\"secret is required for createSecureReplyEmailResolver\");\n  }\n\n  const maxAge = options?.maxAge ?? DEFAULT_MAX_AGE_SECONDS;\n  const onInvalidSignature = options?.onInvalidSignature;\n\n  return async (email: ForwardableEmailMessage, _env: Env) => {\n    const agentName = email.headers.get(\"x-agent-name\");\n    const agentId = email.headers.get(\"x-agent-id\");\n    const signature = email.headers.get(\"x-agent-sig\");\n    const timestamp = email.headers.get(\"x-agent-sig-ts\");\n\n    if (!agentName || !agentId || !signature || !timestamp) {\n      onInvalidSignature?.(email, \"missing_headers\");\n      return null;\n    }\n\n    const result = await verifyAgentSignature(\n      secret,\n      agentName,\n      agentId,\n      signature,\n      timestamp,\n      maxAge\n    );\n\n    if (!result.valid) {\n      onInvalidSignature?.(email, result.reason);\n      return null;\n    }\n\n    return { agentName, agentId, _secureRouted: true };\n  };\n}\n\n/**\n * Create a resolver that uses the email address to determine the agent to route the email to\n * @param defaultAgentName The default agent name to use if the email address does not contain a sub-address\n * @returns A function that resolves the agent to route the email to\n */\nexport function createAddressBasedEmailResolver<Env>(\n  defaultAgentName: string\n): EmailResolver<Env> {\n  return async (email: ForwardableEmailMessage, _env: Env) => {\n    // Length limits per RFC 5321: local part max 64 chars, domain max 253 chars\n    const emailMatch = email.to.match(\n      /^([^+@]{1,64})(?:\\+([^@]{1,64}))?@(.{1,253})$/\n    );\n    if (!emailMatch) {\n      return null;\n    }\n\n    const [, localPart, subAddress] = emailMatch;\n\n    if (subAddress) {\n      return {\n        agentName: localPart,\n        agentId: subAddress\n      };\n    }\n\n    // Option 2: Use defaultAgentName namespace, localPart as agentId\n    // Common for catch-all email routing to a single EmailAgent namespace\n    return {\n      agentName: defaultAgentName,\n      agentId: localPart\n    };\n  };\n}\n\n/**\n * Create a resolver that uses the agentName and agentId to determine the agent to route the email to\n * @param agentName The name of the agent to route the email to\n * @param agentId The id of the agent to route the email to\n * @returns A function that resolves the agent to route the email to\n */\nexport function createCatchAllEmailResolver<Env>(\n  agentName: string,\n  agentId: string\n): EmailResolver<Env> {\n  return async () => ({ agentName, agentId });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAqCA,SAAgB,iBAAiB,SAAiC;CAChE,OAAO,QAAQ,MAAM,MAAM;EACzB,MAAM,MAAM,EAAE,IAAI,YAAY;EAC9B,MAAM,QAAQ,EAAE,MAAM,YAAY;EAIlC,IAAI,QAAQ,kBACV,OAAO,UAAU;EAInB,IAAI,QAAQ,4BACV,OAAO;EAIT,IAAI,QAAQ,cACV,OAAO,UAAU,UAAU,UAAU,UAAU,UAAU;EAG3D,OAAO;CACT,CAAC;AACH;;AAOA,MAAa,0BAA0B,MAAU,KAAK;;AAGtD,MAAM,yBAAyB;;;;;;;;;AAU/B,eAAe,sBACb,QACA,WACA,SACA,WACiB;CACjB,MAAM,UAAU,IAAI,YAAY;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAC9B,OACA,QAAQ,OAAO,MAAM,GACrB;EAAE,MAAM;EAAQ,MAAM;CAAU,GAChC,OACA,CAAC,MAAM,CACT;CACA,MAAM,OAAO,QAAQ,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW;CAClE,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI;CAC5D,OAAO,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,SAAS,CAAC,CAAC;AAC/D;;;;;;;;;;;AAmBA,eAAe,qBACb,QACA,WACA,SACA,WACA,WACA,gBAAwB,yBACc;CACtC,IAAI;EAEF,MAAM,eAAe,OAAO,SAAS,WAAW,EAAE;EAClD,IAAI,OAAO,MAAM,YAAY,GAC3B,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAsB;EAIvD,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EAGxC,IAAI,eAAe,MAAM,wBACvB,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAU;EAI3C,IAAI,MAAM,eAAe,eACvB,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAU;EAG3C,MAAM,WAAW,MAAM,sBACrB,QACA,WACA,SACA,SACF;EAEA,IAAI,SAAS,WAAW,UAAU,QAChC,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAU;EAE3C,IAAI,SAAS;EACb,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KACnC,UAAU,SAAS,WAAW,CAAC,IAAI,UAAU,WAAW,CAAC;EAE3D,IAAI,WAAW,GACb,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAU;EAE3C,OAAO,EAAE,OAAO,KAAK;CACvB,SAAS,OAAO;EACd,QAAQ,KAAK,0CAA0C,KAAK;EAC5D,OAAO;GAAE,OAAO;GAAO,QAAQ;EAAU;CAC3C;AACF;;;;;;;;;;;;;;;;AAiBA,eAAsB,iBACpB,QACA,WACA,SACiC;CACjC,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,8CAA8C;CAEhE,IAAI,CAAC,WACH,MAAM,IAAI,MAAM,iDAAiD;CAEnE,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,+CAA+C;CAIjE,IAAI,UAAU,SAAS,GAAG,GACxB,MAAM,IAAI,MAAM,iCAAiC;CAEnD,IAAI,QAAQ,SAAS,GAAG,GACtB,MAAM,IAAI,MAAM,+BAA+B;CAGjD,MAAM,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC,CAAC,SAAS;CAOzD,OAAO;EACL,gBAAgB;EAChB,cAAc;EACd,eAAe,MATO,sBACtB,QACA,WACA,SACA,SACF;EAKE,kBAAkB;CACpB;AACF;;;;;AAmDA,SAAgB,iCAA0D;CACxE,MAAM,IAAI,MACR,4aAMF;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,+BACd,QACA,SACoB;CACpB,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,uDAAuD;CAGzE,MAAM,SAAS,SAAS,UAAA;CACxB,MAAM,qBAAqB,SAAS;CAEpC,OAAO,OAAO,OAAgC,SAAc;EAC1D,MAAM,YAAY,MAAM,QAAQ,IAAI,cAAc;EAClD,MAAM,UAAU,MAAM,QAAQ,IAAI,YAAY;EAC9C,MAAM,YAAY,MAAM,QAAQ,IAAI,aAAa;EACjD,MAAM,YAAY,MAAM,QAAQ,IAAI,gBAAgB;EAEpD,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,aAAa,CAAC,WAAW;GACtD,qBAAqB,OAAO,iBAAiB;GAC7C,OAAO;EACT;EAEA,MAAM,SAAS,MAAM,qBACnB,QACA,WACA,SACA,WACA,WACA,MACF;EAEA,IAAI,CAAC,OAAO,OAAO;GACjB,qBAAqB,OAAO,OAAO,MAAM;GACzC,OAAO;EACT;EAEA,OAAO;GAAE;GAAW;GAAS,eAAe;EAAK;CACnD;AACF;;;;;;AAOA,SAAgB,gCACd,kBACoB;CACpB,OAAO,OAAO,OAAgC,SAAc;EAE1D,MAAM,aAAa,MAAM,GAAG,MAC1B,+CACF;EACA,IAAI,CAAC,YACH,OAAO;EAGT,MAAM,GAAG,WAAW,cAAc;EAElC,IAAI,YACF,OAAO;GACL,WAAW;GACX,SAAS;EACX;EAKF,OAAO;GACL,WAAW;GACX,SAAS;EACX;CACF;AACF;;;;;;;AAQA,SAAgB,4BACd,WACA,SACoB;CACpB,OAAO,aAAa;EAAE;EAAW;CAAQ;AAC3C"}

package/dist/{index-B7IbEeze.d.ts → index-CcbnKkNh.d.ts}

@@ -225,6 +225,127 @@ type AgentObservabilityEvent =
         error: string;
       }
     >
+  | BaseEvent<
+      "action:ledger:replayed",
+      {
+        action: string;
+        key: string;
+        inputHash: string;
+      }
+    >
+  | BaseEvent<
+      "action:ledger:pending",
+      {
+        action: string;
+        key: string;
+        inputHash: string;
+      }
+    >
+  | BaseEvent<
+      "action:ledger:conflict",
+      {
+        action: string;
+        key: string;
+        inputHash: string;
+      }
+    >
+  | BaseEvent<
+      "action:ledger:serialize_failed",
+      {
+        action: string;
+        key: string;
+      }
+    >
+  | BaseEvent<
+      "action:ledger:settled",
+      {
+        action: string;
+        key: string;
+        inputHash: string;
+      }
+    >
+  | BaseEvent<
+      "action:ledger:reclaimed",
+      {
+        action: string;
+        key: string;
+        inputHash: string;
+        ageMs: number;
+      }
+    >
+  | BaseEvent<
+      "action:ledger:swept",
+      {
+        settled: number;
+        pending: number;
+      }
+    >
+  | BaseEvent<
+      "action:pause:created",
+      {
+        action: string;
+        executionId: string;
+        toolCallId: string;
+      }
+    >
+  | BaseEvent<
+      "action:pause:approved",
+      {
+        action: string;
+        executionId: string;
+      }
+    >
+  | BaseEvent<
+      "action:pause:rejected",
+      {
+        action: string;
+        executionId: string;
+      }
+    >
+  | BaseEvent<
+      "action:pause:swept",
+      {
+        swept: number;
+      }
+    >
+  | BaseEvent<
+      "action:reply-attached",
+      {
+        action?: string;
+        attachmentType: string;
+      }
+    >
+  | BaseEvent<
+      "channel:resolved",
+      {
+        channel: string;
+        kind: string;
+        requestId?: string;
+      }
+    >
+  | BaseEvent<
+      "channel:delivered",
+      {
+        channel: string;
+        kind: string;
+        turnEnded: boolean;
+      }
+    >
+  | BaseEvent<
+      "notice:delivered",
+      {
+        channel: string;
+        kind: string;
+        informModel: boolean;
+      }
+    >
+  | BaseEvent<
+      "notice:failed",
+      {
+        channel: string;
+        error: string;
+      }
+    >
   | BaseEvent<
       "fiber:run:started",
       {
@@ -326,6 +447,29 @@ type AgentObservabilityEvent =
         error: string;
       }
     >
+  | BaseEvent<
+      "chat:turn:start",
+      {
+        requestId: string;
+        trigger: string;
+        admission: string;
+        continuation?: boolean;
+        generation?: number;
+      }
+    >
+  | BaseEvent<
+      "chat:turn:finish",
+      {
+        requestId: string;
+        trigger: string;
+        admission: string;
+        continuation?: boolean;
+        generation?: number;
+        status: string;
+        durationMs: number;
+        error?: string;
+      }
+    >
   | BaseEvent<
       "chat:recovery:detected",
       {
@@ -508,6 +652,25 @@ type AgentObservabilityEvent =
         error: string;
       }
     >
+  | BaseEvent<
+      "agent_tool:detached:delivery_failed",
+      {
+        runId: string /** Which ledger slot was being delivered. */;
+        kind:
+          | "finish"
+          | "give_up" /** Terminal status that was being delivered. */;
+        status: string /** The per-run `onFinish` callback name, if one was wired. */;
+        callback?: string;
+        error: string;
+      }
+    >
+  | BaseEvent<
+      "agent_tool:detached:live_count_warning",
+      {
+        /** Detached runs currently holding a concurrency slot (non-terminal). */ liveCount: number /** The threshold that was crossed. */;
+        threshold: number;
+      }
+    >
   | BaseEvent<"destroy">
   | BaseEvent<
       "connect",
@@ -632,18 +795,19 @@ interface Observability {
  * Tail Workers via `event.diagnosticsChannelEvents` — no subscription needed.
  */
 declare const channels: {
-  readonly state: Channel<unknown, unknown>;
-  readonly rpc: Channel<unknown, unknown>;
-  readonly message: Channel<unknown, unknown>;
-  readonly chat: Channel<unknown, unknown>;
-  readonly transcript: Channel<unknown, unknown>;
-  readonly fiber: Channel<unknown, unknown>;
-  readonly agentTool: Channel<unknown, unknown>;
-  readonly schedule: Channel<unknown, unknown>;
-  readonly lifecycle: Channel<unknown, unknown>;
-  readonly workflow: Channel<unknown, unknown>;
-  readonly mcp: Channel<unknown, unknown>;
-  readonly email: Channel<unknown, unknown>;
+  readonly state: Channel<any, any>;
+  readonly rpc: Channel<any, any>;
+  readonly message: Channel<any, any>;
+  readonly chat: Channel<any, any>;
+  readonly transcript: Channel<any, any>;
+  readonly fiber: Channel<any, any>;
+  readonly agentTool: Channel<any, any>;
+  readonly schedule: Channel<any, any>;
+  readonly lifecycle: Channel<any, any>;
+  readonly workflow: Channel<any, any>;
+  readonly mcp: Channel<any, any>;
+  readonly email: Channel<any, any>;
+  readonly channel: Channel<any, any>;
 };
 /**
  * The default observability implementation.
@@ -671,7 +835,11 @@ type ChannelEventMap = {
   message: Extract<
     ObservabilityEvent,
     {
-      type: `message:${string}` | `tool:${string}` | `submission:${string}`;
+      type:
+        | `message:${string}`
+        | `tool:${string}`
+        | `submission:${string}`
+        | `action:${string}`;
     }
   >;
   chat: Exclude<
@@ -733,6 +901,12 @@ type ChannelEventMap = {
       type: `email:${string}`;
     }
   >;
+  channel: Extract<
+    ObservabilityEvent,
+    {
+      type: `channel:${string}` | `notice:${string}`;
+    }
+  >;
 };
 /**
  * Subscribe to a typed observability channel.
@@ -761,4 +935,4 @@ export {
   MCPObservabilityEvent as s,
   ChannelEventMap as t
 };
-//# sourceMappingURL=index-B7IbEeze.d.ts.map
+//# sourceMappingURL=index-CcbnKkNh.d.ts.map

package/dist/index.d.ts

@@ -1,77 +1,87 @@
 /// <reference path="../skills-module.d.ts" />
 import { r as __DO_NOT_USE_WILL_BREAK__agentContext } from "./internal_context-Dg4Cgjcu.js";
 import {
-  $ as StreamingResponse,
-  A as DeleteFibersOptions,
-  B as MCPServerMessage,
-  C as AgentNamespace,
-  D as Connection,
-  E as CallableMetadata,
-  F as FiberRecoveryContext,
-  G as RoutingRetryOptions,
-  Gt as SUB_PREFIX,
-  H as QueueItem,
-  I as FiberRecoveryResult,
-  J as SendEmailOptions,
-  Jt as parseSubAgentPath,
-  K as Schedule,
-  Kt as SubAgentPathMatch,
-  L as FiberStatus,
-  M as EmailSendBinding,
-  N as FiberContext,
-  O as ConnectionContext,
-  P as FiberInspection,
-  Q as StateUpdateMessage,
-  R as ListFibersOptions,
-  S as AgentGetOptions,
-  T as AgentStaticOptions,
-  U as RPCRequest,
-  V as MCPServersState,
-  W as RPCResponse,
-  Wt as TransportType,
-  X as StartFiberOptions,
-  Y as SqlError,
-  Yt as routeSubAgentRequest,
-  Z as StartFiberResult,
-  _ as RunAgentToolResult,
-  a as AgentToolEventState,
-  at as getCurrentAgent,
-  b as Agent,
-  c as AgentToolLifecycleResult,
-  ct as unstable_callable,
-  d as AgentToolRunState,
-  et as SubAgentClass,
-  f as AgentToolRunStatus,
-  g as RunAgentToolOptions,
-  h as ChatCapableAgentClass,
-  i as AgentToolEventMessage,
-  it as getAgentByName,
-  j as EmailRoutingOptions,
-  k as DEFAULT_AGENT_STATIC_OPTIONS,
-  l as AgentToolRunInfo,
-  m as AgentToolTerminalStatus,
-  n as AgentToolDisplayMetadata,
-  nt as WSMessage,
-  o as AgentToolFailure,
-  ot as routeAgentEmail,
-  p as AgentToolStoredChunk,
-  q as ScheduleCriteria,
-  qt as getSubAgentByName,
-  r as AgentToolEvent,
-  rt as callable,
-  s as AgentToolInterruptedReason,
-  st as routeAgentRequest,
-  t as AgentToolChildAdapter,
-  tt as SubAgentStub,
-  u as AgentToolRunInspection,
-  v as AddMcpServerOptions,
-  vt as MCP_SERVER_ID_MAX_LENGTH,
-  w as AgentOptions,
-  x as AgentContext,
-  xt as normalizeServerId,
-  y as AddRpcMcpServerOptions,
-  z as MCPServer
-} from "./agent-tool-types-CTw3UJUP.js";
+  $ as RoutingRetryOptions,
+  A as AgentGetOptions,
+  B as EmailSendBinding,
+  C as DetachedRunAgentToolResult,
+  D as AddRpcMcpServerOptions,
+  E as AddMcpServerOptions,
+  F as Connection,
+  G as FiberStatus,
+  H as FiberInspection,
+  I as ConnectionContext,
+  J as MCPServerMessage,
+  K as ListFibersOptions,
+  L as DEFAULT_AGENT_STATIC_OPTIONS,
+  M as AgentOptions,
+  N as AgentStaticOptions,
+  O as Agent,
+  Ot as MCP_SERVER_ID_MAX_LENGTH,
+  P as CallableMetadata,
+  Q as RPCResponse,
+  R as DeleteFibersOptions,
+  S as DetachedAgentToolConfig,
+  T as RunAgentToolResult,
+  U as FiberRecoveryContext,
+  V as FiberContext,
+  W as FiberRecoveryResult,
+  X as QueueItem,
+  Y as MCPServersState,
+  Z as RPCRequest,
+  _ as AgentToolRunState,
+  _t as MCPAITool,
+  a as AgentToolEvent,
+  an as routeSubAgentRequest,
+  at as StartFiberResult,
+  b as AgentToolTerminalStatus,
+  c as AgentToolFailure,
+  ct as SubAgentClass,
+  d as AgentToolMilestone,
+  dt as callable,
+  en as TransportType,
+  et as Schedule,
+  f as AgentToolProgress,
+  ft as getAgentByName,
+  g as AgentToolRunPart,
+  gt as unstable_callable,
+  h as AgentToolRunInspection,
+  ht as routeAgentRequest,
+  i as AgentToolDisplayMetadata,
+  in as parseSubAgentPath,
+  it as StartFiberOptions,
+  j as AgentNamespace,
+  jt as normalizeServerId,
+  k as AgentContext,
+  l as AgentToolInterruptedReason,
+  lt as SubAgentStub,
+  m as AgentToolRunInfo,
+  mt as routeAgentEmail,
+  n as AGENT_TOOL_PROGRESS_PART,
+  nn as SubAgentPathMatch,
+  nt as SendEmailOptions,
+  o as AgentToolEventMessage,
+  ot as StateUpdateMessage,
+  p as AgentToolProgressSnapshot,
+  pt as getCurrentAgent,
+  q as MCPServer,
+  r as AgentToolChildAdapter,
+  rn as getSubAgentByName,
+  rt as SqlError,
+  s as AgentToolEventState,
+  st as StreamingResponse,
+  t as AGENT_TOOL_MILESTONE_PART,
+  tn as SUB_PREFIX,
+  tt as ScheduleCriteria,
+  u as AgentToolLifecycleResult,
+  ut as WSMessage,
+  v as AgentToolRunStatus,
+  vt as MCPAIToolSet,
+  w as RunAgentToolOptions,
+  x as ChatCapableAgentClass,
+  y as AgentToolStoredChunk,
+  z as EmailRoutingOptions
+} from "./agent-tool-types-Cd1TZPfB.js";
 import { n as camelCaseToKebabCase } from "./utils-CGtGDSgA.js";
 import {
   i as isPlatformTransientError,
@@ -86,6 +96,8 @@ import {
 import { t as MessageType } from "./types-6Zo2zfoO.js";
 import { l as createHeaderBasedEmailResolver } from "./email-CL27preh.js";
 export {
+  AGENT_TOOL_MILESTONE_PART,
+  AGENT_TOOL_PROGRESS_PART,
   AddMcpServerOptions,
   AddRpcMcpServerOptions,
   Agent,
@@ -103,8 +115,12 @@ export {
   type AgentToolFailure,
   type AgentToolInterruptedReason,
   type AgentToolLifecycleResult,
+  type AgentToolMilestone,
+  type AgentToolProgress,
+  type AgentToolProgressSnapshot,
   type AgentToolRunInfo,
   type AgentToolRunInspection,
+  type AgentToolRunPart,
   type AgentToolRunState,
   type AgentToolRunStatus,
   type AgentToolStoredChunk,
@@ -116,6 +132,8 @@ export {
   type ConnectionContext,
   DEFAULT_AGENT_STATIC_OPTIONS,
   DeleteFibersOptions,
+  type DetachedAgentToolConfig,
+  type DetachedRunAgentToolResult,
   DurableObjectOAuthClientProvider,
   EmailRoutingOptions,
   EmailSendBinding,
@@ -125,6 +143,8 @@ export {
   FiberRecoveryResult,
   FiberStatus,
   ListFibersOptions,
+  type MCPAITool,
+  type MCPAIToolSet,
   MCPServer,
   MCPServerMessage,
   MCPServersState,