aismemory 0.7.0 → 0.7.2

package/dist/token-manager.d.ts

@@ -18,11 +18,22 @@
  *   successful renewal — retries never stop, and recovery needs no restart.
  * - No code path ever serializes the token to disk; it lives only in the
  *   closure state below for the process lifetime.
- * - `invalidate()` drops the current token (without touching backoff state)
- *   so a caller that discovers the server rejected it mid-session — e.g. a
- *   401 from a JWT_SECRET rotation, CORBOT-A5BBD580 — can force the next
- *   `getCredentials()` to acquire a fresh one instead of re-serving the
- *   rejected token.
+ * - `invalidate()` drops the current token (without touching backoff state,
+ *   unless `{ resetBackoff: true }` is passed) so a caller that discovers the
+ *   server rejected it mid-session — e.g. a 401 from a JWT_SECRET rotation,
+ *   CORBOT-A5BBD580 — can force the next `getCredentials()` to acquire a
+ *   fresh one instead of re-serving the rejected token. `resetBackoff: true`
+ *   additionally clears any escalated backoff window, so a server-rejection
+ *   that arrives mid-outage (after prior renewal failures already escalated
+ *   retryDelayMs) still re-proves immediately instead of being held behind
+ *   the stale backoff gate (CORBOT-4F7CAA8E).
+ * - The background renewal loop and the on-demand backoff gate in
+ *   `getCredentials()` are driven off the SAME single-flight `inFlight`
+ *   promise and the same jittered `nextAttemptAt` timestamp — computed once
+ *   per failure — so a caller can never race the timer into a second,
+ *   concurrent `authenticate()` call, and a failed attempt is recorded into
+ *   backoff state exactly once no matter how many callers were waiting on it
+ *   (CORBOT-4F7CAA8E).
  */
 /** Credentials handed back by `getCredentials()`. */
 export interface ManagedCredentials {
@@ -39,6 +50,11 @@ export interface ManagedCredentials {
  */
 export declare class AisUnreachableError extends Error {
 }
+/**
+ * Returns true when the error message contains NO_REGISTERED_KEYS or NO_REGISTERED_KEY
+ * (the 401 did-prove codes from tryKeyAuth).
+ */
+export declare function isNoRegisteredKeyFailure(err: unknown): boolean;
 export interface TokenManagerOpts {
     /** Runs challenge/prove; throws on failure. */
     authenticate: () => Promise<{
@@ -54,8 +70,19 @@ export interface TokenManagerOpts {
     /** Injectable clock for tests; defaults to Date.now. */
     now?: () => number;
 }
+export interface InvalidateOpts {
+    /**
+     * Also clears any escalated backoff window (retryDelayMs/lastAttemptAt/
+     * nextAttemptAt/hardExpiryEmitted) so the next `getCredentials()` re-proves
+     * immediately instead of being held behind a stale gate. Use this for a
+     * server-rejected-token path (e.g. a 401 mid-session) — the server just
+     * proved it can be reached, so waiting out a backoff window computed from
+     * unrelated prior failures makes no sense.
+     */
+    resetBackoff?: boolean;
+}
 export declare function createTokenManager(opts: TokenManagerOpts): {
     getCredentials(): Promise<ManagedCredentials>;
-    invalidate(): void;
+    invalidate(invalidateOpts?: InvalidateOpts): void;
     stop(): void;
 };

package/dist/token-manager.js

@@ -18,11 +18,22 @@
  *   successful renewal — retries never stop, and recovery needs no restart.
  * - No code path ever serializes the token to disk; it lives only in the
  *   closure state below for the process lifetime.
- * - `invalidate()` drops the current token (without touching backoff state)
- *   so a caller that discovers the server rejected it mid-session — e.g. a
- *   401 from a JWT_SECRET rotation, CORBOT-A5BBD580 — can force the next
- *   `getCredentials()` to acquire a fresh one instead of re-serving the
- *   rejected token.
+ * - `invalidate()` drops the current token (without touching backoff state,
+ *   unless `{ resetBackoff: true }` is passed) so a caller that discovers the
+ *   server rejected it mid-session — e.g. a 401 from a JWT_SECRET rotation,
+ *   CORBOT-A5BBD580 — can force the next `getCredentials()` to acquire a
+ *   fresh one instead of re-serving the rejected token. `resetBackoff: true`
+ *   additionally clears any escalated backoff window, so a server-rejection
+ *   that arrives mid-outage (after prior renewal failures already escalated
+ *   retryDelayMs) still re-proves immediately instead of being held behind
+ *   the stale backoff gate (CORBOT-4F7CAA8E).
+ * - The background renewal loop and the on-demand backoff gate in
+ *   `getCredentials()` are driven off the SAME single-flight `inFlight`
+ *   promise and the same jittered `nextAttemptAt` timestamp — computed once
+ *   per failure — so a caller can never race the timer into a second,
+ *   concurrent `authenticate()` call, and a failed attempt is recorded into
+ *   backoff state exactly once no matter how many callers were waiting on it
+ *   (CORBOT-4F7CAA8E).
  */
 /**
  * Thrown by `getCredentials()` once the current token has hard-expired and
@@ -32,6 +43,19 @@
  */
 export class AisUnreachableError extends Error {
 }
+/**
+ * Returns true when the error message contains NO_REGISTERED_KEYS or NO_REGISTERED_KEY
+ * (the 401 did-prove codes from tryKeyAuth).
+ */
+export function isNoRegisteredKeyFailure(err) {
+    if (err instanceof Error) {
+        return err.message.includes('NO_REGISTERED_KEYS') || err.message.includes('NO_REGISTERED_KEY');
+    }
+    if (typeof err === 'string') {
+        return err.includes('NO_REGISTERED_KEYS') || err.includes('NO_REGISTERED_KEY');
+    }
+    return false;
+}
 const RENEW_FRACTION = 0.75;
 const BACKOFF_BASE_MS = 5_000;
 const BACKOFF_CAP_MS = 300_000;
@@ -49,6 +73,12 @@ export function createTokenManager(opts) {
     let timer = null;
     let retryDelayMs = 0;
     let lastAttemptAt = 0;
+    // Absolute timestamp of the next permitted attempt, computed ONCE per
+    // failure (in recordFailure) as `lastAttemptAt + jitter(retryDelayMs)`.
+    // Both the background retry timer (renew()'s reschedule) and the on-demand
+    // gate in getCredentials() key off this SAME value, so they can never
+    // disagree about when the next attempt is due (CORBOT-4F7CAA8E / F1).
+    let nextAttemptAt = 0;
     let hardExpiryEmitted = false;
     let stopped = false;
     let lastError = '';
@@ -65,22 +95,27 @@ export function createTokenManager(opts) {
     }
     function scheduleRenewal(expiresAt) {
         const ttlMs = new Date(expiresAt).getTime() - now();
-        schedule(Math.max(1_000, Math.floor(ttlMs * RENEW_FRACTION)), () => {
+        // Floored at 30s (not 1s): a very short or skewed TTL must not turn
+        // renewal into a near-1Hz hammer on the auth endpoint (F7).
+        schedule(Math.max(30_000, Math.floor(ttlMs * RENEW_FRACTION)), () => {
             void renew();
         });
     }
     /**
      * Records a failed authenticate/resolveIdentity attempt into the shared
-     * backoff state, regardless of whether it came from the background renewal
-     * loop or from an on-demand `getCredentials()` call on an expired token.
-     * Escalates retryDelayMs, marks the attempt time (so callers can tell
-     * whether a fresh attempt is due), emits `renew.retry`, and — once — the
-     * `renew.hard_expiry` event when the current token has passed hard expiry.
+     * backoff state. Called exactly once per failed attempt — from the single
+     * `.catch` on the shared `inFlight` promise in `acquireShared()` — no
+     * matter how many callers (getCredentials() waiters, or the background
+     * renewal loop) were waiting on that attempt (F2a). Escalates
+     * retryDelayMs, computes the jittered `nextAttemptAt` gate/schedule value
+     * once, emits `renew.retry`, and — once — the `renew.hard_expiry` event
+     * when the current token has passed hard expiry.
      */
     function recordFailure(err) {
         lastError = err instanceof Error ? err.message : String(err);
         lastAttemptAt = now();
         retryDelayMs = retryDelayMs === 0 ? BACKOFF_BASE_MS : Math.min(retryDelayMs * 2, BACKOFF_CAP_MS);
+        nextAttemptAt = lastAttemptAt + jitter(retryDelayMs);
         opts.onEvent?.('renew.retry', lastError);
         if (current && new Date(current.expiresAt).getTime() <= now() && !hardExpiryEmitted) {
             hardExpiryEmitted = true;
@@ -89,9 +124,13 @@ export function createTokenManager(opts) {
     }
     async function acquire() {
         const fresh = await opts.authenticate();
-        if (!Number.isFinite(new Date(fresh.expiresAt).getTime())) {
+        const expiresAtMs = new Date(fresh.expiresAt).getTime();
+        if (!Number.isFinite(expiresAtMs)) {
             throw new Error(`TokenManager.acquire(): authenticate() returned an invalid expiresAt: ${JSON.stringify(fresh.expiresAt)}`);
         }
+        if (expiresAtMs <= now()) {
+            throw new Error(`TokenManager.acquire(): authenticate() returned an expiresAt in the past: ${JSON.stringify(fresh.expiresAt)}`);
+        }
         // Identity is resolved only on the very first acquire; every later
         // acquire (renewal, or a re-acquire after invalidate()) reuses the
         // cached agentId/tenantId.
@@ -109,20 +148,46 @@ export function createTokenManager(opts) {
         }
         current = { token: fresh.token, expiresAt: fresh.expiresAt, agentId, tenantId };
         retryDelayMs = 0;
+        nextAttemptAt = 0;
         hardExpiryEmitted = false;
         scheduleRenewal(fresh.expiresAt);
         return current;
     }
+    /**
+     * Starts (or joins) the single in-flight acquire attempt. Both the
+     * background renewal loop (`renew()`) and an on-demand `getCredentials()`
+     * call on a missing/expired token route through this — so there is never
+     * more than one concurrent `authenticate()` call, and a failure is
+     * recorded into backoff state exactly once, by this function's own
+     * `.catch`, regardless of how many callers are awaiting the same flight
+     * (F1, F2a). A failure also schedules the next background retry here, so
+     * that retry loop starts even from a failed FIRST acquire — not only from
+     * a renewal failure (F3).
+     */
+    function acquireShared() {
+        if (!inFlight) {
+            inFlight = acquire()
+                .catch((err) => {
+                recordFailure(err);
+                schedule(Math.max(0, nextAttemptAt - now()), () => {
+                    void renew();
+                });
+                throw err;
+            })
+                .finally(() => {
+                inFlight = null;
+            });
+        }
+        return inFlight;
+    }
     async function renew() {
         try {
-            await acquire();
+            await acquireShared();
             opts.onEvent?.('renew.success');
         }
-        catch (err) {
-            recordFailure(err);
-            schedule(jitter(retryDelayMs), () => {
-                void renew();
-            });
+        catch {
+            // Failure already recorded and the next retry already scheduled by
+            // acquireShared()'s own .catch — nothing left to do here.
         }
     }
     return {
@@ -130,28 +195,23 @@ export function createTokenManager(opts) {
             if (current && new Date(current.expiresAt).getTime() > now()) {
                 return current;
             }
-            if (!inFlight) {
-                // The current token is missing or expired. If a prior attempt
-                // (from here or from the background renewal loop) failed and we're
-                // still inside its backoff window, don't make a fresh attempt —
-                // that would let a burst of sequential calls (e.g. several tool
-                // calls in one MCP chat turn) each hammer the auth endpoint during
-                // an outage, racing the properly-backed-off background timer and
-                // defeating the point of backoff. Fail fast with the last known
-                // error instead; the background timer (or the next call after the
-                // window elapses) makes the next real attempt.
-                if (retryDelayMs > 0 && now() - lastAttemptAt < retryDelayMs) {
-                    throw new AisUnreachableError(`AIS unreachable — renewing automatically; no action needed. Last error: ${lastError}`);
-                }
-                inFlight = acquire().finally(() => {
-                    inFlight = null;
-                });
+            // The current token is missing or expired. If a prior attempt (from
+            // here or from the background renewal loop) failed and we're still
+            // inside its jittered backoff window, don't make a fresh attempt —
+            // that would let a burst of sequential calls (e.g. several tool calls
+            // in one MCP chat turn) each hammer the auth endpoint during an
+            // outage, racing the properly-backed-off background timer and
+            // defeating the point of backoff. Fail fast with the last known error
+            // instead; the background timer (or the next call after the window
+            // elapses) makes the next real attempt. Skipped once a flight is
+            // already in progress — join it instead of gating it.
+            if (!inFlight && nextAttemptAt > 0 && now() < nextAttemptAt) {
+                throw new AisUnreachableError(`AIS unreachable — renewing automatically; no action needed. Last error: ${lastError}`);
             }
             try {
-                return await inFlight;
+                return await acquireShared();
             }
-            catch (err) {
-                recordFailure(err);
+            catch {
                 throw new AisUnreachableError(`AIS unreachable — renewing automatically; no action needed. Last error: ${lastError}`);
             }
         },
@@ -159,15 +219,26 @@ export function createTokenManager(opts) {
          * Drops the current token so the next `getCredentials()` must acquire a
          * fresh one — used when the server itself rejects a still-time-valid
          * token (e.g. a mid-session JWT_SECRET rotation, CORBOT-A5BBD580).
-         * Deliberately does NOT touch backoff bookkeeping (`retryDelayMs` /
-         * `lastAttemptAt`): a server that keeps rejecting tokens must not turn
-         * into an unthrottled hammer on the auth endpoint — `recordFailure`'s
-         * shared-backoff-window gate in `getCredentials()` still applies as-is.
-         * Does not cancel or reschedule the background renewal timer; a
-         * successful next acquire reschedules renewal exactly as it does today.
+         * By default this does NOT touch backoff bookkeeping (`retryDelayMs` /
+         * `lastAttemptAt` / `nextAttemptAt`): a server that keeps rejecting
+         * tokens must not turn into an unthrottled hammer on the auth endpoint —
+         * the shared-backoff-window gate in `getCredentials()` still applies.
+         * Pass `{ resetBackoff: true }` when the caller has independent evidence
+         * the server is reachable right now (e.g. it just returned the 401 this
+         * invalidate() is responding to) — this clears the backoff window so the
+         * re-prove is not held behind a stale gate computed from unrelated prior
+         * failures (F2b). Does not cancel or reschedule the background renewal
+         * timer; a successful next acquire reschedules renewal exactly as it
+         * does today.
          */
-        invalidate() {
+        invalidate(invalidateOpts) {
             current = null;
+            if (invalidateOpts?.resetBackoff) {
+                retryDelayMs = 0;
+                lastAttemptAt = 0;
+                nextAttemptAt = 0;
+                hardExpiryEmitted = false;
+            }
         },
         stop() {
             stopped = true;

package/dist/token-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-manager.js","sourceRoot":"","sources":["../src/token-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAUH;;;;;GAKG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;CAAG;AAYjD,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IAKvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,IAAI,OAAO,GAA8B,IAAI,CAAC;IAC9C,mEAAmE;IACnE,qEAAqE;IACrE,qEAAqE;IACrE,yEAAyE;IACzE,qEAAqE;IACrE,0BAA0B;IAC1B,IAAI,gBAAgB,GAAiD,IAAI,CAAC;IAC1E,IAAI,QAAQ,GAAuC,IAAI,CAAC;IACxD,IAAI,KAAK,GAAyC,IAAI,CAAC;IACvD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAS,GAAG,EAAE,CAAC;IAEnB,SAAS,MAAM,CAAC,EAAU;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,SAAS,QAAQ,CAAC,OAAe,EAAE,EAAc;QAC/C,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,GAAG,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC;IAED,SAAS,eAAe,CAAC,SAAiB;QACxC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE;YACjE,KAAK,KAAK,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,aAAa,CAAC,GAAY;QACjC,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,aAAa,GAAG,GAAG,EAAE,CAAC;QACtB,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;QACjG,IAAI,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACpF,iBAAiB,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,yEAAyE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9H,CAAC;QACD,mEAAmE;QACnE,mEAAmE;QACnE,2BAA2B;QAC3B,IAAI,OAAe,CAAC;QACpB,IAAI,QAAgB,CAAC;QACrB,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC;YACnC,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpD,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YACtB,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YACxB,gBAAgB,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAChF,YAAY,GAAG,CAAC,CAAC;QACjB,iBAAiB,GAAG,KAAK,CAAC;QAC1B,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE;gBAClC,KAAK,KAAK,EAAE,CAAC;YACf,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,cAAc;YAClB,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC;gBAC7D,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,8DAA8D;gBAC9D,mEAAmE;gBACnE,gEAAgE;gBAChE,gEAAgE;gBAChE,mEAAmE;gBACnE,iEAAiE;gBACjE,gEAAgE;gBAChE,kEAAkE;gBAClE,+CAA+C;gBAC/C,IAAI,YAAY,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,aAAa,GAAG,YAAY,EAAE,CAAC;oBAC7D,MAAM,IAAI,mBAAmB,CAC3B,2EAA2E,SAAS,EAAE,CACvF,CAAC;gBACJ,CAAC;gBACD,QAAQ,GAAG,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;oBAChC,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,QAAQ,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnB,MAAM,IAAI,mBAAmB,CAC3B,2EAA2E,SAAS,EAAE,CACvF,CAAC;YACJ,CAAC;QACH,CAAC;QACD;;;;;;;;;;WAUG;QACH,UAAU;YACR,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"token-manager.js","sourceRoot":"","sources":["../src/token-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAUH;;;;;GAKG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;CAAG;AAEjD;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAYD,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,cAAc,GAAG,OAAO,CAAC;AAc/B,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IAKvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,IAAI,OAAO,GAA8B,IAAI,CAAC;IAC9C,mEAAmE;IACnE,qEAAqE;IACrE,qEAAqE;IACrE,yEAAyE;IACzE,qEAAqE;IACrE,0BAA0B;IAC1B,IAAI,gBAAgB,GAAiD,IAAI,CAAC;IAC1E,IAAI,QAAQ,GAAuC,IAAI,CAAC;IACxD,IAAI,KAAK,GAAyC,IAAI,CAAC;IACvD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,sEAAsE;IACtE,wEAAwE;IACxE,2EAA2E;IAC3E,sEAAsE;IACtE,sEAAsE;IACtE,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAS,GAAG,EAAE,CAAC;IAEnB,SAAS,MAAM,CAAC,EAAU;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,SAAS,QAAQ,CAAC,OAAe,EAAE,EAAc;QAC/C,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,GAAG,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC;IAED,SAAS,eAAe,CAAC,SAAiB;QACxC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;QACpD,oEAAoE;QACpE,4DAA4D;QAC5D,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE;YAClE,KAAK,KAAK,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACH,SAAS,aAAa,CAAC,GAAY;QACjC,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,aAAa,GAAG,GAAG,EAAE,CAAC;QACtB,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;QACjG,aAAa,GAAG,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACpF,iBAAiB,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,yEAAyE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9H,CAAC;QACD,IAAI,WAAW,IAAI,GAAG,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,6EAA6E,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAClI,CAAC;QACD,mEAAmE;QACnE,mEAAmE;QACnE,2BAA2B;QAC3B,IAAI,OAAe,CAAC;QACpB,IAAI,QAAgB,CAAC;QACrB,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC;YACnC,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpD,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YACtB,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YACxB,gBAAgB,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAChF,YAAY,GAAG,CAAC,CAAC;QACjB,aAAa,GAAG,CAAC,CAAC;QAClB,iBAAiB,GAAG,KAAK,CAAC;QAC1B,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;;;OAUG;IACH,SAAS,aAAa;QACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,OAAO,EAAE;iBACjB,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACtB,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE;oBAChD,KAAK,KAAK,EAAE,CAAC;gBACf,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC;YACZ,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,IAAI,CAAC;YACH,MAAM,aAAa,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,0DAA0D;QAC5D,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,cAAc;YAClB,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC;gBAC7D,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,sEAAsE;YACtE,gEAAgE;YAChE,8DAA8D;YAC9D,sEAAsE;YACtE,mEAAmE;YACnE,iEAAiE;YACjE,sDAAsD;YACtD,IAAI,CAAC,QAAQ,IAAI,aAAa,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;gBAC5D,MAAM,IAAI,mBAAmB,CAC3B,2EAA2E,SAAS,EAAE,CACvF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,aAAa,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,mBAAmB,CAC3B,2EAA2E,SAAS,EAAE,CACvF,CAAC;YACJ,CAAC;QACH,CAAC;QACD;;;;;;;;;;;;;;;WAeG;QACH,UAAU,CAAC,cAA+B;YACxC,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,cAAc,EAAE,YAAY,EAAE,CAAC;gBACjC,YAAY,GAAG,CAAC,CAAC;gBACjB,aAAa,GAAG,CAAC,CAAC;gBAClB,aAAa,GAAG,CAAC,CAAC;gBAClB,iBAAiB,GAAG,KAAK,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tool-args.d.ts

@@ -20,6 +20,7 @@ export declare const rememberArgsSchema: z.ZodObject<{
     importance: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, z.core.$strip>;
 export declare const recallArgsSchema: z.ZodObject<{
+    principalAgentId: z.ZodOptional<z.ZodString>;
     query: z.ZodString;
     limit: z.ZodOptional<z.ZodNumber>;
     type: z.ZodOptional<z.ZodEnum<{
@@ -40,13 +41,54 @@ export declare const agentLoadArgsSchema: z.ZodObject<{
 }, z.core.$strip>;
 /** Tools with no parameters — reject unexpected keys. */
 export declare const emptyArgsSchema: z.ZodObject<{}, z.core.$strict>;
+/** full_context: optional delegated-read principal + configurable memory limit (CORBOT-45FE6ECE). */
+export declare const fullContextArgsSchema: z.ZodObject<{
+    principalAgentId: z.ZodOptional<z.ZodString>;
+    memoriesLimit: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const INBOX_MAX_BODY_CHARS = 8000;
+export declare const INBOX_MAX_TASK_ID_CHARS = 128;
+export declare const INBOX_MIN_TTL_SECONDS = 300;
+export declare const INBOX_MAX_TTL_SECONDS = 604800;
+export declare const INBOX_DEFAULT_TTL_SECONDS: number;
+export declare const INBOX_DEFAULT_PAGE_SIZE = 20;
+export declare const INBOX_MAX_PAGE_SIZE = 100;
+export declare const inboxSendArgsSchema: z.ZodObject<{
+    recipientAgentId: z.ZodString;
+    kind: z.ZodEnum<{
+        task: "task";
+        update: "update";
+        question: "question";
+        decision: "decision";
+        handoff: "handoff";
+        ack: "ack";
+    }>;
+    body: z.ZodString;
+    threadId: z.ZodOptional<z.ZodString>;
+    taskId: z.ZodOptional<z.ZodString>;
+    inReplyTo: z.ZodOptional<z.ZodString>;
+    messageId: z.ZodOptional<z.ZodString>;
+    ttlSeconds: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const inboxReadArgsSchema: z.ZodObject<{
+    cursor: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    unreadOnly: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    ack: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strict>;
 export type RememberArgs = z.infer<typeof rememberArgsSchema>;
 export type RecallArgs = z.infer<typeof recallArgsSchema>;
 export type HandoffArgs = z.infer<typeof handoffArgsSchema>;
 export type AgentLoadArgs = z.infer<typeof agentLoadArgsSchema>;
+export type FullContextArgs = z.infer<typeof fullContextArgsSchema>;
+export type InboxSendArgs = z.infer<typeof inboxSendArgsSchema>;
+export type InboxReadArgs = z.infer<typeof inboxReadArgsSchema>;
 export declare function formatValidationError(error: z.ZodError): string;
 export declare function parseRememberArgs(raw: unknown): RememberArgs;
 export declare function parseRecallArgs(raw: unknown): RecallArgs;
 export declare function parseHandoffArgs(raw: unknown): HandoffArgs;
 export declare function parseAgentLoadArgs(raw: unknown): AgentLoadArgs;
 export declare function parseEmptyToolArgs(raw: unknown): Record<string, never>;
+export declare function parseFullContextArgs(raw: unknown): FullContextArgs;
+export declare function parseInboxSendArgs(raw: unknown): InboxSendArgs;
+export declare function parseInboxReadArgs(raw: unknown): InboxReadArgs;

package/dist/tool-args.js

@@ -16,7 +16,18 @@ export const rememberArgsSchema = z.object({
     type: memoryTypeSchema.optional().default('context'),
     importance: z.number().min(0).max(1).optional().default(0.5),
 });
+/**
+ * Optional delegated-read principal (CORBOT-3785D10D).
+ *
+ * Names ANOTHER agent whose memories should be read. The server refuses with
+ * 403 unless that agent's owner has granted this agent the `memory:read` scope
+ * and both share a tenant. Read-only — never accepted on a write tool.
+ */
+const principalAgentIdSchema = z
+    .string()
+    .regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i, 'principalAgentId must be a valid agent UUID');
 export const recallArgsSchema = z.object({
+    principalAgentId: principalAgentIdSchema.optional(),
     query: z
         .string({ message: 'query is required and must be a string' })
         .min(1, 'query is required and must be a string')
@@ -45,6 +56,56 @@ export const agentLoadArgsSchema = z.object({
 });
 /** Tools with no parameters — reject unexpected keys. */
 export const emptyArgsSchema = z.object({}).strict();
+/** full_context: optional delegated-read principal + configurable memory limit (CORBOT-45FE6ECE). */
+export const fullContextArgsSchema = z
+    .object({
+    principalAgentId: principalAgentIdSchema.optional(),
+    memoriesLimit: z.number().int().min(1).max(50).optional(),
+})
+    .strict();
+// ── Agent inbox (CORBOT-7115B8AE) ───────────────────────────────────────
+// Mirrors packages/agent-identity-service/src/core/inbox/types.ts and
+// mcp/handlers/agent-inbox-handlers.ts — this package cannot import from
+// agent-identity-service (it ships standalone to npm), so the limits and
+// arg shapes are duplicated here on purpose. Keep them in sync by hand if
+// the server side ever changes them.
+const AGENT_MESSAGE_KINDS = ['task', 'update', 'question', 'decision', 'handoff', 'ack'];
+export const INBOX_MAX_BODY_CHARS = 8_000;
+export const INBOX_MAX_TASK_ID_CHARS = 128;
+export const INBOX_MIN_TTL_SECONDS = 300;
+export const INBOX_MAX_TTL_SECONDS = 604_800;
+export const INBOX_DEFAULT_TTL_SECONDS = 7 * 24 * 60 * 60;
+export const INBOX_DEFAULT_PAGE_SIZE = 20;
+export const INBOX_MAX_PAGE_SIZE = 100;
+const inboxUuidSchema = z
+    .string()
+    .regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i, 'must be a valid uuid');
+export const inboxSendArgsSchema = z
+    .object({
+    recipientAgentId: inboxUuidSchema,
+    kind: z.enum(AGENT_MESSAGE_KINDS),
+    body: z
+        .string({ message: 'body is required' })
+        .min(1, 'body is required')
+        .max(INBOX_MAX_BODY_CHARS, `body exceeds ${INBOX_MAX_BODY_CHARS} characters`),
+    threadId: inboxUuidSchema.optional(),
+    taskId: z.string().min(1).max(INBOX_MAX_TASK_ID_CHARS).optional(),
+    inReplyTo: inboxUuidSchema.optional(),
+    messageId: inboxUuidSchema.optional(),
+    ttlSeconds: z.number().int().min(INBOX_MIN_TTL_SECONDS).max(INBOX_MAX_TTL_SECONDS).optional(),
+})
+    .strict();
+export const inboxReadArgsSchema = z
+    .object({
+    cursor: z.string().min(1).max(512).optional(),
+    limit: z.number().int().min(1).max(INBOX_MAX_PAGE_SIZE).optional().default(INBOX_DEFAULT_PAGE_SIZE),
+    // True by default, unlike the REST default of false — a harness reading
+    // its inbox wants what's new, not the whole retained stream (matches the
+    // MCP tool contract in agent-identity-service's inbox-tools.ts).
+    unreadOnly: z.boolean().optional().default(true),
+    ack: z.boolean().optional().default(false),
+})
+    .strict();
 export function formatValidationError(error) {
     return error.issues
         .map((issue) => {
@@ -75,4 +136,13 @@ export function parseAgentLoadArgs(raw) {
 export function parseEmptyToolArgs(raw) {
     return parseOrThrow(emptyArgsSchema, raw);
 }
+export function parseFullContextArgs(raw) {
+    return parseOrThrow(fullContextArgsSchema, raw);
+}
+export function parseInboxSendArgs(raw) {
+    return parseOrThrow(inboxSendArgsSchema, raw);
+}
+export function parseInboxReadArgs(raw) {
+    return parseOrThrow(inboxReadArgsSchema, raw);
+}
 //# sourceMappingURL=tool-args.js.map

package/dist/tool-args.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-args.js","sourceRoot":"","sources":["../src/tool-args.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,2EAA2E;AAC3E,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,GAAG,IAAI,CAAC;AAEpD,sDAAsD;AACtD,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAExF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC;SACP,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;SAC/D,GAAG,CAAC,CAAC,EAAE,0CAA0C,CAAC;SAClD,GAAG,CACF,yBAAyB,EACzB,qCAAqC,yBAAyB,QAAQ,CACvE;IACH,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;CAC7D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC;SACL,MAAM,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;SAC7D,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC;SAChD,GAAG,CACF,yBAAyB,EACzB,mCAAmC,yBAAyB,QAAQ,CACrE;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC9D,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CACF,yBAAyB,EACzB,qCAAqC,yBAAyB,QAAQ,CACvE;SACA,QAAQ,EAAE;IACb,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC;SACE,MAAM,EAAE;SACR,GAAG,CACF,yBAAyB,EACzB,+CAA+C,yBAAyB,QAAQ,CACjF,CACJ;SACA,GAAG,CAAC,GAAG,EAAE,2CAA2C,CAAC;SACrD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC;SACL,MAAM,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;SACpD,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC;SACvC,GAAG,CAAC,GAAG,EAAE,4DAA4D,CAAC;CAC1E,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAOrD,MAAM,UAAU,qBAAqB,CAAC,KAAiB;IACrD,OAAO,KAAK,CAAC,MAAM;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAI,MAAoB,EAAE,GAAY;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,OAAO,YAAY,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,OAAO,YAAY,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,YAAY,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,OAAO,YAAY,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,OAAO,YAAY,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"tool-args.js","sourceRoot":"","sources":["../src/tool-args.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,2EAA2E;AAC3E,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,GAAG,IAAI,CAAC;AAEpD,sDAAsD;AACtD,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAExF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC;SACP,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;SAC/D,GAAG,CAAC,CAAC,EAAE,0CAA0C,CAAC;SAClD,GAAG,CACF,yBAAyB,EACzB,qCAAqC,yBAAyB,QAAQ,CACvE;IACH,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;CAC7D,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,EAAE;KACR,KAAK,CACJ,iEAAiE,EACjE,6CAA6C,CAC9C,CAAC;AAEJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,gBAAgB,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IACnD,KAAK,EAAE,CAAC;SACL,MAAM,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;SAC7D,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC;SAChD,GAAG,CACF,yBAAyB,EACzB,mCAAmC,yBAAyB,QAAQ,CACrE;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC9D,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CACF,yBAAyB,EACzB,qCAAqC,yBAAyB,QAAQ,CACvE;SACA,QAAQ,EAAE;IACb,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC;SACE,MAAM,EAAE;SACR,GAAG,CACF,yBAAyB,EACzB,+CAA+C,yBAAyB,QAAQ,CACjF,CACJ;SACA,GAAG,CAAC,GAAG,EAAE,2CAA2C,CAAC;SACrD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC;SACL,MAAM,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;SACpD,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC;SACvC,GAAG,CAAC,GAAG,EAAE,4DAA4D,CAAC;CAC1E,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAErD,qGAAqG;AACrG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,gBAAgB,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,2EAA2E;AAC3E,sEAAsE;AACtE,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,qCAAqC;AAErC,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAU,CAAC;AAClG,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAC7C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,KAAK,CAAC,iEAAiE,EAAE,sBAAsB,CAAC,CAAC;AAEpG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,gBAAgB,EAAE,eAAe;IACjC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACjC,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;SACvC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;SAC1B,GAAG,CAAC,oBAAoB,EAAE,gBAAgB,oBAAoB,aAAa,CAAC;IAC/E,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;IACjE,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CAC9F,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACnG,wEAAwE;IACxE,yEAAyE;IACzE,iEAAiE;IACjE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAUZ,MAAM,UAAU,qBAAqB,CAAC,KAAiB;IACrD,OAAO,KAAK,CAAC,MAAM;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAI,MAAoB,EAAE,GAAY;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,OAAO,YAAY,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,OAAO,YAAY,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,YAAY,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,OAAO,YAAY,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,OAAO,YAAY,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,OAAO,YAAY,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,OAAO,YAAY,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,OAAO,YAAY,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aismemory",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Persistent memory for AI agents. MCP server that connects to Agent Identity Service.",
   "mcpName": "ai.agentsandswarms/ais-memory",
   "type": "module",