alibabacloud-agentcore-sdk 0.1.0

package/dist/chunk-IUCLCPVV.js

@@ -0,0 +1,113 @@
+import {
+  ControllerClient
+} from "./chunk-UBP5CHU7.js";
+import {
+  CredentialExchangeError
+} from "./chunk-MZ5UWGXS.js";
+
+// src/auth/access-key.ts
+import { inspect } from "util";
+var AccessKeyCredential = class {
+  #values;
+  constructor(values) {
+    if (!values.accessKeyId?.trim() || !values.accessKeySecret?.trim() || values.securityToken !== void 0 && !values.securityToken.trim()) {
+      throw new TypeError("AccessKey ID, secret and optional security token must not be empty");
+    }
+    this.#values = { ...values };
+  }
+  get accessKeyId() {
+    return this.#values.accessKeyId;
+  }
+  get accessKeySecret() {
+    return this.#values.accessKeySecret;
+  }
+  get securityToken() {
+    return this.#values.securityToken;
+  }
+  [inspect.custom]() {
+    return `AccessKeyCredential(type=${this.securityToken ? "sts" : "access_key"}, <redacted>)`;
+  }
+  toJSON() {
+    return this[inspect.custom]();
+  }
+};
+var ResourceCredential = class extends AccessKeyCredential {
+  expiration;
+  credentialType = "ram_sts";
+  constructor(values) {
+    super(values);
+    if (!Number.isFinite(values.expiration.getTime())) throw new TypeError("STS expiration must be a valid Date");
+    this.expiration = new Date(values.expiration);
+  }
+  [inspect.custom]() {
+    return `ResourceCredential(expiration=${this.expiration.toISOString()}, <redacted>)`;
+  }
+};
+
+// src/auth/resource-sts.ts
+var HIGH_CODE_SDK_PURPOSE = "highcode_sdk";
+var AGENT_IDENTITY_DATA_PURPOSE = "agentidentitydata";
+var ResourceSTSProvider = class {
+  controller;
+  cache = /* @__PURE__ */ new Map();
+  pending = /* @__PURE__ */ new Map();
+  constructor(endpoint, source, options = {}) {
+    this.controller = new ControllerClient(endpoint, source, options);
+  }
+  async get(purpose) {
+    if (purpose !== void 0) {
+      purpose = purpose.trim();
+      if (!purpose) throw new TypeError("purpose must not be empty");
+    }
+    const cached = this.cache.get(purpose);
+    if (cached && cached.expiration.getTime() > Date.now() + 3e5) return cached;
+    const current = this.pending.get(purpose);
+    if (current) return current;
+    const request = this.exchange(purpose);
+    this.pending.set(purpose, request);
+    try {
+      const credential = await request;
+      this.cache.set(purpose, credential);
+      return credential;
+    } finally {
+      this.pending.delete(purpose);
+    }
+  }
+  close() {
+    this.controller.close();
+    this.cache.clear();
+  }
+  async exchange(purpose) {
+    const response = await this.controller.post("/api/v1/credentials/sts", purpose);
+    if (response.status < 200 || response.status >= 300) {
+      throw new CredentialExchangeError(`Controller STS request failed with HTTP ${response.status}${response.message ? `: ${response.message}` : ""}`);
+    }
+    try {
+      const value = response.payload;
+      const read = (key) => {
+        const item = value[key];
+        if (typeof item !== "string" || !item.trim()) throw new Error("invalid field");
+        return item.trim();
+      };
+      const expiration = new Date(read("expiration"));
+      if (!(expiration.getTime() > Date.now())) throw new Error("expired STS");
+      return new ResourceCredential({
+        accessKeyId: read("access_key_id"),
+        accessKeySecret: read("access_key_secret"),
+        securityToken: read("security_token"),
+        expiration
+      });
+    } catch {
+      throw new CredentialExchangeError("Controller returned an invalid STS response");
+    }
+  }
+};
+
+export {
+  AccessKeyCredential,
+  ResourceCredential,
+  HIGH_CODE_SDK_PURPOSE,
+  AGENT_IDENTITY_DATA_PURPOSE,
+  ResourceSTSProvider
+};
+//# sourceMappingURL=chunk-IUCLCPVV.js.map

package/dist/chunk-IUCLCPVV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/auth/access-key.ts","../src/auth/resource-sts.ts"],"sourcesContent":["import { inspect } from 'node:util';\n\nexport interface AccessKeyOptions {\n  accessKeyId: string;\n  accessKeySecret: string;\n  securityToken?: string;\n}\n\nexport class AccessKeyCredential {\n  #values: AccessKeyOptions;\n  constructor(values: AccessKeyOptions) {\n    if (!values.accessKeyId?.trim() || !values.accessKeySecret?.trim() ||\n      (values.securityToken !== undefined && !values.securityToken.trim())) {\n      throw new TypeError('AccessKey ID, secret and optional security token must not be empty');\n    }\n    this.#values = { ...values };\n  }\n  get accessKeyId(): string { return this.#values.accessKeyId; }\n  get accessKeySecret(): string { return this.#values.accessKeySecret; }\n  get securityToken(): string | undefined { return this.#values.securityToken; }\n  [inspect.custom](): string { return `AccessKeyCredential(type=${this.securityToken ? 'sts' : 'access_key'}, <redacted>)`; }\n  toJSON(): string { return this[inspect.custom](); }\n}\n\nexport class ResourceCredential extends AccessKeyCredential {\n  readonly expiration: Date;\n  readonly credentialType = 'ram_sts';\n  constructor(values: AccessKeyOptions & { securityToken: string; expiration: Date }) {\n    super(values);\n    if (!Number.isFinite(values.expiration.getTime())) throw new TypeError('STS expiration must be a valid Date');\n    this.expiration = new Date(values.expiration);\n  }\n  [inspect.custom](): string { return `ResourceCredential(expiration=${this.expiration.toISOString()}, <redacted>)`; }\n}\n\nexport interface CredentialProvider {\n  get(purpose?: string): Promise<AccessKeyCredential> | AccessKeyCredential;\n}\n","import { CredentialExchangeError } from '../errors';\nimport { ResourceCredential } from './access-key';\nimport type { AgentSATokenSource } from './agent-sa-token';\nimport { ControllerClient, type ControllerOptions } from './controller';\n\nexport const HIGH_CODE_SDK_PURPOSE = 'highcode_sdk';\nexport const AGENT_IDENTITY_DATA_PURPOSE = 'agentidentitydata';\n\nexport class ResourceSTSProvider {\n  private readonly controller: ControllerClient;\n  private readonly cache = new Map<string | undefined, ResourceCredential>();\n  private readonly pending = new Map<string | undefined, Promise<ResourceCredential>>();\n\n  constructor(endpoint: string, source: AgentSATokenSource, options: ControllerOptions = {}) {\n    this.controller = new ControllerClient(endpoint, source, options);\n  }\n  async get(purpose?: string): Promise<ResourceCredential> {\n    if (purpose !== undefined) {\n      purpose = purpose.trim();\n      if (!purpose) throw new TypeError('purpose must not be empty');\n    }\n    const cached = this.cache.get(purpose);\n    if (cached && cached.expiration.getTime() > Date.now() + 300_000) return cached;\n    const current = this.pending.get(purpose);\n    if (current) return current;\n    const request = this.exchange(purpose);\n    this.pending.set(purpose, request);\n    try {\n      const credential = await request;\n      this.cache.set(purpose, credential);\n      return credential;\n    } finally { this.pending.delete(purpose); }\n  }\n  close(): void { this.controller.close(); this.cache.clear(); }\n\n  private async exchange(purpose?: string): Promise<ResourceCredential> {\n    const response = await this.controller.post('/api/v1/credentials/sts', purpose);\n    if (response.status < 200 || response.status >= 300) {\n      throw new CredentialExchangeError(`Controller STS request failed with HTTP ${response.status}${response.message ? `: ${response.message}` : ''}`);\n    }\n    try {\n      const value = response.payload as Record<string, unknown>;\n      const read = (key: string): string => {\n        const item = value[key];\n        if (typeof item !== 'string' || !item.trim()) throw new Error('invalid field');\n        return item.trim();\n      };\n      const expiration = new Date(read('expiration'));\n      if (!(expiration.getTime() > Date.now())) throw new Error('expired STS');\n      return new ResourceCredential({\n        accessKeyId: read('access_key_id'), accessKeySecret: read('access_key_secret'),\n        securityToken: read('security_token'), expiration,\n      });\n    } catch { throw new CredentialExchangeError('Controller returned an invalid STS response'); }\n  }\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,eAAe;AAQjB,IAAM,sBAAN,MAA0B;AAAA,EAC/B;AAAA,EACA,YAAY,QAA0B;AACpC,QAAI,CAAC,OAAO,aAAa,KAAK,KAAK,CAAC,OAAO,iBAAiB,KAAK,KAC9D,OAAO,kBAAkB,UAAa,CAAC,OAAO,cAAc,KAAK,GAAI;AACtE,YAAM,IAAI,UAAU,oEAAoE;AAAA,IAC1F;AACA,SAAK,UAAU,EAAE,GAAG,OAAO;AAAA,EAC7B;AAAA,EACA,IAAI,cAAsB;AAAE,WAAO,KAAK,QAAQ;AAAA,EAAa;AAAA,EAC7D,IAAI,kBAA0B;AAAE,WAAO,KAAK,QAAQ;AAAA,EAAiB;AAAA,EACrE,IAAI,gBAAoC;AAAE,WAAO,KAAK,QAAQ;AAAA,EAAe;AAAA,EAC7E,CAAC,QAAQ,MAAM,IAAY;AAAE,WAAO,4BAA4B,KAAK,gBAAgB,QAAQ,YAAY;AAAA,EAAiB;AAAA,EAC1H,SAAiB;AAAE,WAAO,KAAK,QAAQ,MAAM,EAAE;AAAA,EAAG;AACpD;AAEO,IAAM,qBAAN,cAAiC,oBAAoB;AAAA,EACjD;AAAA,EACA,iBAAiB;AAAA,EAC1B,YAAY,QAAwE;AAClF,UAAM,MAAM;AACZ,QAAI,CAAC,OAAO,SAAS,OAAO,WAAW,QAAQ,CAAC,EAAG,OAAM,IAAI,UAAU,qCAAqC;AAC5G,SAAK,aAAa,IAAI,KAAK,OAAO,UAAU;AAAA,EAC9C;AAAA,EACA,CAAC,QAAQ,MAAM,IAAY;AAAE,WAAO,iCAAiC,KAAK,WAAW,YAAY,CAAC;AAAA,EAAiB;AACrH;;;AC5BO,IAAM,wBAAwB;AAC9B,IAAM,8BAA8B;AAEpC,IAAM,sBAAN,MAA0B;AAAA,EACd;AAAA,EACA,QAAQ,oBAAI,IAA4C;AAAA,EACxD,UAAU,oBAAI,IAAqD;AAAA,EAEpF,YAAY,UAAkB,QAA4B,UAA6B,CAAC,GAAG;AACzF,SAAK,aAAa,IAAI,iBAAiB,UAAU,QAAQ,OAAO;AAAA,EAClE;AAAA,EACA,MAAM,IAAI,SAA+C;AACvD,QAAI,YAAY,QAAW;AACzB,gBAAU,QAAQ,KAAK;AACvB,UAAI,CAAC,QAAS,OAAM,IAAI,UAAU,2BAA2B;AAAA,IAC/D;AACA,UAAM,SAAS,KAAK,MAAM,IAAI,OAAO;AACrC,QAAI,UAAU,OAAO,WAAW,QAAQ,IAAI,KAAK,IAAI,IAAI,IAAS,QAAO;AACzE,UAAM,UAAU,KAAK,QAAQ,IAAI,OAAO;AACxC,QAAI,QAAS,QAAO;AACpB,UAAM,UAAU,KAAK,SAAS,OAAO;AACrC,SAAK,QAAQ,IAAI,SAAS,OAAO;AACjC,QAAI;AACF,YAAM,aAAa,MAAM;AACzB,WAAK,MAAM,IAAI,SAAS,UAAU;AAClC,aAAO;AAAA,IACT,UAAE;AAAU,WAAK,QAAQ,OAAO,OAAO;AAAA,IAAG;AAAA,EAC5C;AAAA,EACA,QAAc;AAAE,SAAK,WAAW,MAAM;AAAG,SAAK,MAAM,MAAM;AAAA,EAAG;AAAA,EAE7D,MAAc,SAAS,SAA+C;AACpE,UAAM,WAAW,MAAM,KAAK,WAAW,KAAK,2BAA2B,OAAO;AAC9E,QAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAAK;AACnD,YAAM,IAAI,wBAAwB,2CAA2C,SAAS,MAAM,GAAG,SAAS,UAAU,KAAK,SAAS,OAAO,KAAK,EAAE,EAAE;AAAA,IAClJ;AACA,QAAI;AACF,YAAM,QAAQ,SAAS;AACvB,YAAM,OAAO,CAAC,QAAwB;AACpC,cAAM,OAAO,MAAM,GAAG;AACtB,YAAI,OAAO,SAAS,YAAY,CAAC,KAAK,KAAK,EAAG,OAAM,IAAI,MAAM,eAAe;AAC7E,eAAO,KAAK,KAAK;AAAA,MACnB;AACA,YAAM,aAAa,IAAI,KAAK,KAAK,YAAY,CAAC;AAC9C,UAAI,EAAE,WAAW,QAAQ,IAAI,KAAK,IAAI,GAAI,OAAM,IAAI,MAAM,aAAa;AACvE,aAAO,IAAI,mBAAmB;AAAA,QAC5B,aAAa,KAAK,eAAe;AAAA,QAAG,iBAAiB,KAAK,mBAAmB;AAAA,QAC7E,eAAe,KAAK,gBAAgB;AAAA,QAAG;AAAA,MACzC,CAAC;AAAA,IACH,QAAQ;AAAE,YAAM,IAAI,wBAAwB,6CAA6C;AAAA,IAAG;AAAA,EAC9F;AACF;","names":[]}

package/dist/chunk-JSP7ZROS.cjs

@@ -0,0 +1,95 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); var _class; var _class2; var _class3; var _class4; var _class5; var _class6; var _class7; var _class8; var _class9; var _class10; var _class11; var _class12; var _class13; var _class14; var _class15; var _class16;// src/errors.ts
+var AgentCoreError = (_class = class extends Error {
+  __init() {this.code = "AGENTCORE_ERROR"}
+  constructor(message, options) {
+    super(message, options);_class.prototype.__init.call(this);;
+    this.name = new.target.name;
+  }
+}, _class);
+var ConfigError = (_class2 = class extends AgentCoreError {constructor(...args) { super(...args); _class2.prototype.__init2.call(this); }
+  __init2() {this.code = "CONFIG_INVALID"}
+}, _class2);
+var ContextError = (_class3 = class extends AgentCoreError {constructor(...args2) { super(...args2); _class3.prototype.__init3.call(this); }
+  __init3() {this.code = "CONTEXT_INVALID"}
+}, _class3);
+var AuthenticationError = (_class4 = class extends AgentCoreError {constructor(...args3) { super(...args3); _class4.prototype.__init4.call(this); }
+  __init4() {this.code = "AUTHENTICATION_FAILED"}
+}, _class4);
+var CredentialExchangeError = (_class5 = class extends AuthenticationError {constructor(...args4) { super(...args4); _class5.prototype.__init5.call(this); }
+  __init5() {this.code = "CREDENTIAL_EXCHANGE_FAILED"}
+}, _class5);
+var WorkloadIdentityNotConfiguredError = (_class6 = class extends AuthenticationError {constructor(...args5) { super(...args5); _class6.prototype.__init6.call(this); }
+  __init6() {this.code = "WORKLOAD_IDENTITY_NOT_CONFIGURED"}
+}, _class6);
+var WorkloadAccessTokenRejectedError = (_class7 = class extends CredentialExchangeError {constructor(...args6) { super(...args6); _class7.prototype.__init7.call(this); }
+  __init7() {this.code = "WORKLOAD_ACCESS_TOKEN_REJECTED"}
+}, _class7);
+var ResourceNotConfiguredError = (_class8 = class extends AgentCoreError {constructor(...args7) { super(...args7); _class8.prototype.__init8.call(this); }
+  __init8() {this.code = "RESOURCE_NOT_CONFIGURED"}
+}, _class8);
+var ModelConnectionNotFoundError = (_class9 = class extends ResourceNotConfiguredError {constructor(...args8) { super(...args8); _class9.prototype.__init9.call(this); }
+  __init9() {this.code = "MODEL_CONNECTION_NOT_FOUND"}
+}, _class9);
+var MCPServerNotFoundError = (_class10 = class extends ResourceNotConfiguredError {constructor(...args9) { super(...args9); _class10.prototype.__init10.call(this); }
+  __init10() {this.code = "MCP_SERVER_NOT_FOUND"}
+}, _class10);
+var InvocationError = (_class11 = class extends AgentCoreError {constructor(...args10) { super(...args10); _class11.prototype.__init11.call(this); }
+  __init11() {this.code = "INVOCATION_FAILED"}
+}, _class11);
+var UnsupportedFeatureError = (_class12 = class extends AgentCoreError {constructor(...args11) { super(...args11); _class12.prototype.__init12.call(this); }
+  __init12() {this.code = "UNSUPPORTED_FEATURE"}
+}, _class12);
+var MemoryValidationError = (_class13 = class extends AgentCoreError {constructor(...args12) { super(...args12); _class13.prototype.__init13.call(this); }
+  __init13() {this.code = "MEMORY_VALIDATION_FAILED"}
+}, _class13);
+var MemoryAPIError = (_class14 = class extends AgentCoreError {
+  constructor(operation, details = {}) {
+    super(`AgentCore Memory operation ${operation} failed`);_class14.prototype.__init14.call(this);;
+    this.operation = operation;
+    this.serviceCode = details.serviceCode;
+    this.httpStatusCode = details.httpStatusCode;
+    this.requestId = details.requestId;
+  }
+  
+  __init14() {this.code = "MEMORY_API_FAILED"}
+  
+  
+  
+}, _class14);
+var MemoryContractError = (_class15 = class extends AgentCoreError {
+  constructor(operation, detail) {
+    super(`AgentCore Memory ${operation} returned an invalid response: ${detail}`);_class15.prototype.__init15.call(this);;
+    this.operation = operation;
+    this.detail = detail;
+  }
+  
+  
+  __init15() {this.code = "MEMORY_RESPONSE_INVALID"}
+}, _class15);
+var AddMemoriesOutcomeUnknownError = (_class16 = class extends MemoryAPIError {
+  __init16() {this.code = "ADD_MEMORIES_OUTCOME_UNKNOWN"}
+  constructor(operation, details = {}) {
+    super(operation, details);_class16.prototype.__init16.call(this);;
+    this.message = "AgentCore Memory AddMemories outcome is unknown; the write may have succeeded";
+  }
+}, _class16);
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.AgentCoreError = AgentCoreError; exports.ConfigError = ConfigError; exports.ContextError = ContextError; exports.AuthenticationError = AuthenticationError; exports.CredentialExchangeError = CredentialExchangeError; exports.WorkloadIdentityNotConfiguredError = WorkloadIdentityNotConfiguredError; exports.WorkloadAccessTokenRejectedError = WorkloadAccessTokenRejectedError; exports.ResourceNotConfiguredError = ResourceNotConfiguredError; exports.ModelConnectionNotFoundError = ModelConnectionNotFoundError; exports.MCPServerNotFoundError = MCPServerNotFoundError; exports.InvocationError = InvocationError; exports.UnsupportedFeatureError = UnsupportedFeatureError; exports.MemoryValidationError = MemoryValidationError; exports.MemoryAPIError = MemoryAPIError; exports.MemoryContractError = MemoryContractError; exports.AddMemoriesOutcomeUnknownError = AddMemoriesOutcomeUnknownError;
+//# sourceMappingURL=chunk-JSP7ZROS.cjs.map

package/dist/chunk-JSP7ZROS.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/zhuoguang/Documents/Code/collaborate/hiclaw/agentcore-sdk-nodejs/dist/chunk-JSP7ZROS.cjs","../src/errors.ts"],"names":[],"mappings":"AAAA;ACAO,IAAM,eAAA,YAAN,MAAA,QAA6B,MAAM;AAAA,iBAC/B,KAAA,EAAe,kBAAA;AAAA,EACxB,WAAA,CAAY,OAAA,EAAiB,OAAA,EAAwB;AACnD,IAAA,KAAA,CAAM,OAAA,EAAS,OAAO,qCAAA;AACtB,IAAA,IAAA,CAAK,KAAA,EAAO,GAAA,CAAA,MAAA,CAAW,IAAA;AAAA,EACzB;AACF,UAAA;AAEO,IAAM,YAAA,aAAN,MAAA,QAA0B,eAAe;AAAA,kBAAoB,KAAA,EAAe,iBAAA;AAAkB,WAAA;AAC9F,IAAM,aAAA,aAAN,MAAA,QAA2B,eAAe;AAAA,kBAAoB,KAAA,EAAe,kBAAA;AAAmB,WAAA;AAChG,IAAM,oBAAA,aAAN,MAAA,QAAkC,eAAe;AAAA,kBAAoB,KAAA,EAAe,wBAAA;AAAyB,WAAA;AAC7G,IAAM,wBAAA,aAAN,MAAA,QAAsC,oBAAoB;AAAA,kBAAoB,KAAA,EAAe,6BAAA;AAA8B,WAAA;AAC3H,IAAM,mCAAA,aAAN,MAAA,QAAiD,oBAAoB;AAAA,kBAAoB,KAAA,EAAO,mCAAA;AAAoC,WAAA;AACpI,IAAM,iCAAA,aAAN,MAAA,QAA+C,wBAAwB;AAAA,kBAAoB,KAAA,EAAO,iCAAA;AAAkC,WAAA;AACpI,IAAM,2BAAA,aAAN,MAAA,QAAyC,eAAe;AAAA,kBAAoB,KAAA,EAAe,0BAAA;AAA2B,WAAA;AACtH,IAAM,6BAAA,aAAN,MAAA,QAA2C,2BAA2B;AAAA,kBAAoB,KAAA,EAAO,6BAAA;AAA8B,WAAA;AAC/H,IAAM,uBAAA,cAAN,MAAA,QAAqC,2BAA2B;AAAA,mBAAoB,KAAA,EAAO,uBAAA;AAAwB,YAAA;AACnH,IAAM,gBAAA,cAAN,MAAA,QAA8B,eAAe;AAAA,mBAAoB,KAAA,EAAO,oBAAA;AAAqB,YAAA;AAC7F,IAAM,wBAAA,cAAN,MAAA,QAAsC,eAAe;AAAA,mBAAoB,KAAA,EAAO,sBAAA;AAAuB,YAAA;AAEvG,IAAM,sBAAA,cAAN,MAAA,QAAoC,eAAe;AAAA,mBAAoB,KAAA,EAAO,2BAAA;AAA4B,YAAA;AAE1G,IAAM,eAAA,cAAN,MAAA,QAA6B,eAAe;AAAA,EAKjD,WAAA,CAAqB,SAAA,EAAmB,QAAA,EAA8B,CAAC,CAAA,EAAG;AACxE,IAAA,KAAA,CAAM,CAAA,2BAAA,EAA8B,SAAS,CAAA,OAAA,CAAS,yCAAA;AADnC,IAAA,IAAA,CAAA,UAAA,EAAA,SAAA;AAEnB,IAAA,IAAA,CAAK,YAAA,EAAc,OAAA,CAAQ,WAAA;AAAa,IAAA,IAAA,CAAK,eAAA,EAAiB,OAAA,CAAQ,cAAA;AAAgB,IAAA,IAAA,CAAK,UAAA,EAAY,OAAA,CAAQ,SAAA;AAAA,EACjH;AAAA,EAHqB;AAAA,mBAJH,KAAA,EAAe,oBAAA;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAKX,YAAA;AACO,IAAM,oBAAA,cAAN,MAAA,QAAkC,eAAe;AAAA,EAEtD,WAAA,CAAqB,SAAA,EAA4B,MAAA,EAAgB;AAAE,IAAA,KAAA,CAAM,CAAA,iBAAA,EAAoB,SAAS,CAAA,+BAAA,EAAkC,MAAM,CAAA,CAAA;AAAzH,IAAA;AAA4B,IAAA;AAAkG,EAAA;AAA9H,EAAA;AAA4B,EAAA;AADxB,mBAAA;AAE3B;AACmE;AACxC,mBAAA;AACwC,EAAA;AACvC,IAAA;AAAkB,IAAA;AAC5C,EAAA;AACF;ADkCgF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/zhuoguang/Documents/Code/collaborate/hiclaw/agentcore-sdk-nodejs/dist/chunk-JSP7ZROS.cjs","sourcesContent":[null,"export class AgentCoreError extends Error {\n  readonly code: string = 'AGENTCORE_ERROR';\n  constructor(message: string, options?: ErrorOptions) {\n    super(message, options);\n    this.name = new.target.name;\n  }\n}\n\nexport class ConfigError extends AgentCoreError { override readonly code: string = 'CONFIG_INVALID'; }\nexport class ContextError extends AgentCoreError { override readonly code: string = 'CONTEXT_INVALID'; }\nexport class AuthenticationError extends AgentCoreError { override readonly code: string = 'AUTHENTICATION_FAILED'; }\nexport class CredentialExchangeError extends AuthenticationError { override readonly code: string = 'CREDENTIAL_EXCHANGE_FAILED'; }\nexport class WorkloadIdentityNotConfiguredError extends AuthenticationError { override readonly code = 'WORKLOAD_IDENTITY_NOT_CONFIGURED'; }\nexport class WorkloadAccessTokenRejectedError extends CredentialExchangeError { override readonly code = 'WORKLOAD_ACCESS_TOKEN_REJECTED'; }\nexport class ResourceNotConfiguredError extends AgentCoreError { override readonly code: string = 'RESOURCE_NOT_CONFIGURED'; }\nexport class ModelConnectionNotFoundError extends ResourceNotConfiguredError { override readonly code = 'MODEL_CONNECTION_NOT_FOUND'; }\nexport class MCPServerNotFoundError extends ResourceNotConfiguredError { override readonly code = 'MCP_SERVER_NOT_FOUND'; }\nexport class InvocationError extends AgentCoreError { override readonly code = 'INVOCATION_FAILED'; }\nexport class UnsupportedFeatureError extends AgentCoreError { override readonly code = 'UNSUPPORTED_FEATURE'; }\n\nexport class MemoryValidationError extends AgentCoreError { override readonly code = 'MEMORY_VALIDATION_FAILED'; }\nexport interface MemoryErrorDetails { serviceCode?: string; httpStatusCode?: number; requestId?: string; }\nexport class MemoryAPIError extends AgentCoreError {\n  override readonly code: string = 'MEMORY_API_FAILED';\n  readonly serviceCode?: string;\n  readonly httpStatusCode?: number;\n  readonly requestId?: string;\n  constructor(readonly operation: string, details: MemoryErrorDetails = {}) {\n    super(`AgentCore Memory operation ${operation} failed`);\n    this.serviceCode = details.serviceCode; this.httpStatusCode = details.httpStatusCode; this.requestId = details.requestId;\n  }\n}\nexport class MemoryContractError extends AgentCoreError {\n  override readonly code = 'MEMORY_RESPONSE_INVALID';\n  constructor(readonly operation: string, readonly detail: string) { super(`AgentCore Memory ${operation} returned an invalid response: ${detail}`); }\n}\nexport class AddMemoriesOutcomeUnknownError extends MemoryAPIError {\n  override readonly code = 'ADD_MEMORIES_OUTCOME_UNKNOWN';\n  constructor(operation: string, details: MemoryErrorDetails = {}) {\n    super(operation, details); this.message = 'AgentCore Memory AddMemories outcome is unknown; the write may have succeeded';\n  }\n}\n"]}

package/dist/chunk-JW62DVIC.js

@@ -0,0 +1,238 @@
+import {
+  Tool
+} from "./chunk-EKXZKKJJ.js";
+import {
+  nullLogger
+} from "./chunk-NZL3VPJ2.js";
+import {
+  ConfigError
+} from "./chunk-MZ5UWGXS.js";
+
+// src/mcp/client.ts
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { CallToolResultSchema, McpError, ErrorCode } from "@modelcontextprotocol/sdk/types.js";
+import { inspect } from "util";
+
+// src/mcp/headers.ts
+var transportHeaders = /* @__PURE__ */ new Set([
+  "host",
+  "content-length",
+  "connection",
+  "transfer-encoding",
+  "upgrade",
+  "mcp-session-id",
+  "mcp-protocol-version",
+  "last-event-id",
+  "content-type",
+  "accept"
+]);
+function mergeMCPHeaders(base, custom) {
+  const result = { ...base };
+  if (custom === void 0) return result;
+  if (!custom || typeof custom !== "object" || Array.isArray(custom)) throw new ConfigError("MCP headers must be an object");
+  const protectedNames = /* @__PURE__ */ new Set([...Object.keys(base).map((name) => name.toLowerCase()), ...transportHeaders, "authorization"]);
+  const seen = /* @__PURE__ */ new Set();
+  for (const [name, value] of Object.entries(custom)) {
+    if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name)) throw new ConfigError("Invalid MCP header name");
+    if (typeof value !== "string" || /[\x00-\x1f\x7f]/.test(value)) throw new ConfigError("MCP header values must be strings without control characters");
+    const folded = name.toLowerCase();
+    if (protectedNames.has(folded)) throw new ConfigError(`MCP header is protected: ${folded}`);
+    if (seen.has(folded)) throw new ConfigError(`Duplicate MCP header: ${folded}`);
+    seen.add(folded);
+    Object.defineProperty(result, folded, { value, enumerable: true, configurable: true, writable: true });
+  }
+  return result;
+}
+
+// src/mcp/client.ts
+function mcpServerURL(gatewayURL, id) {
+  const gateway = gatewayURL.replace(/\/+$/, "").replace(/\/(?:mcp|mcp-servers)$/, "");
+  return `${gateway}/mcp-servers/${encodeURIComponent(id)}`;
+}
+var MCPClient = class _MCPClient {
+  constructor(options, descriptor) {
+    this.options = options;
+    this.descriptor = descriptor;
+    this.logger = options.logger ?? nullLogger;
+    this.timeouts = { sessionMs: options.sessionMs ?? 3e4, metadataMs: options.metadataMs ?? 6e4, toolMs: options.toolMs ?? 6e5 };
+    if (Object.values(this.timeouts).some((timeout) => !Number.isFinite(timeout) || timeout <= 0)) throw new ConfigError("MCP operation timeouts must be positive");
+    if (options.transport !== "stdio") {
+      let url;
+      try {
+        url = new URL(options.url);
+      } catch {
+        throw new ConfigError("Direct MCP URL must be HTTP(S)");
+      }
+      if (!["http:", "https:"].includes(url.protocol)) throw new ConfigError("Direct MCP URL must be HTTP(S)");
+      if (options.transport !== void 0 && !["streamable-http", "sse"].includes(options.transport)) throw new ConfigError("MCP transport must be streamable-http, sse, or stdio");
+    }
+    this.logger.info("agentcore.mcp.client.created", { mode: descriptor ? "managed" : "direct", transport: options.transport ?? "streamable-http", url: this.safeURL });
+  }
+  options;
+  descriptor;
+  logger;
+  state;
+  opening;
+  closed = false;
+  closing;
+  timeouts;
+  static platform(config, descriptor, options = {}) {
+    const { headers: custom, credentialHeadersProvider, ...connectionOptions } = options;
+    const customHeaders = mergeMCPHeaders({}, custom);
+    const headers = mergeMCPHeaders(config.gatewayHeaders, custom);
+    return new _MCPClient({ ...connectionOptions, url: mcpServerURL(config.mcpGatewayUrl, descriptor.mcpServerId), transport: "streamable-http", headersProvider: async () => {
+      if (!credentialHeadersProvider) return headers;
+      const bound = mergeMCPHeaders(config.gatewayHeaders, await credentialHeadersProvider());
+      return mergeMCPHeaders(bound, customHeaders);
+    } }, descriptor);
+  }
+  static direct(options) {
+    return new _MCPClient(options);
+  }
+  async listTools(options = {}) {
+    return this.withSession("list_tools", async (session) => {
+      const definitions = [];
+      let cursor;
+      const deadline = AbortSignal.timeout(this.timeouts.metadataMs);
+      const signal = AbortSignal.any([deadline, ...options.signal ? [options.signal] : []]);
+      do {
+        const result = await session.client.listTools(cursor ? { cursor } : void 0, { signal, timeout: this.timeouts.metadataMs });
+        definitions.push(...result.tools);
+        cursor = result.nextCursor;
+      } while (cursor);
+      return definitions.map((definition) => new Tool({
+        name: definition.name,
+        description: definition.description ?? "",
+        parameters: definition.inputSchema,
+        invoke: (arguments_) => this.callTool(definition.name, arguments_)
+      }));
+    });
+  }
+  async tools(options = {}) {
+    return this.listTools(options);
+  }
+  async callTool(name, arguments_, options = {}) {
+    return this.withSession("call_tool", (session) => session.client.callTool(
+      { name, arguments: arguments_ },
+      CallToolResultSchema,
+      { timeout: this.timeouts.toolMs, signal: options.signal }
+    ));
+  }
+  close() {
+    if (this.closing) return this.closing;
+    this.closed = true;
+    this.closing = (async () => {
+      if (this.opening && this.state) this.state.abort.abort();
+      await this.opening?.catch(() => void 0);
+      if (this.state) await this.retire(this.state);
+    })();
+    return this.closing;
+  }
+  [inspect.custom]() {
+    return `MCPClient(url=${this.safeURL}, <redacted>)`;
+  }
+  toJSON() {
+    return this[inspect.custom]();
+  }
+  get safeURL() {
+    if (this.options.transport === "stdio") return "stdio";
+    const url = new URL(this.options.url);
+    return `${url.origin}${url.pathname}`;
+  }
+  async acquire() {
+    for (; ; ) {
+      if (this.closed) throw new Error("MCP client is closed");
+      if (this.opening) return this.opening;
+      if (this.state?.invalid) {
+        await this.retire(this.state);
+        continue;
+      }
+      if (this.state) return this.state;
+      const request = this.open();
+      this.opening = request;
+      try {
+        return await request;
+      } finally {
+        this.opening = void 0;
+      }
+    }
+  }
+  async open() {
+    const client = new Client({ name: "agentcore-sdk", version: "0.1.0" });
+    const abort = new AbortController();
+    let transport;
+    if (this.options.transport === "stdio") transport = new StdioClientTransport(this.options.server);
+    else {
+      const headers = await this.options.headersProvider?.() ?? {};
+      const fetch = (input, init) => globalThis.fetch(input, { ...init, redirect: "manual", signal: AbortSignal.any([abort.signal, ...init?.signal ? [init.signal] : []]) });
+      transport = this.options.transport === "sse" ? new SSEClientTransport(new URL(this.options.url), { requestInit: { headers }, fetch }) : new StreamableHTTPClientTransport(new URL(this.options.url), { requestInit: { headers }, fetch });
+    }
+    const session = { client, transport, abort, invalid: false, active: /* @__PURE__ */ new Set() };
+    this.state = session;
+    const timer = setTimeout(() => abort.abort(new Error("MCP session open timed out")), this.timeouts.sessionMs);
+    client.onclose = () => {
+      session.invalid = true;
+    };
+    client.onerror = (error) => {
+      if (this.closed || session.closing) return;
+      session.invalid = true;
+      this.logger.warn("agentcore.mcp.session.error", { url: this.safeURL, errorType: error.name });
+    };
+    this.logger.info("agentcore.mcp.session.open.started", { url: this.safeURL, timeoutMs: this.timeouts.sessionMs });
+    try {
+      await client.connect(transport, { signal: abort.signal, timeout: this.timeouts.sessionMs });
+      abort.signal.throwIfAborted();
+      if (this.closed) throw new Error("MCP client is closed");
+      this.logger.info("agentcore.mcp.session.open.succeeded", { url: this.safeURL });
+      return session;
+    } catch (error) {
+      await this.retire(session);
+      throw error;
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  async withSession(operation, call) {
+    const session = await this.acquire();
+    if (this.closed) throw new Error("MCP client is closed");
+    const request = call(session);
+    session.active.add(request);
+    this.logger.info("agentcore.mcp.request.started", { operation, url: this.safeURL });
+    try {
+      const result = await request;
+      this.logger.info("agentcore.mcp.request.succeeded", { operation, url: this.safeURL });
+      return result;
+    } catch (error) {
+      if (!(error instanceof McpError) || [ErrorCode.ConnectionClosed, ErrorCode.RequestTimeout].includes(error.code)) session.invalid = true;
+      this.logger.warn("agentcore.mcp.request.failed", { operation, url: this.safeURL, errorType: error instanceof Error ? error.name : "unknown" });
+      throw error;
+    } finally {
+      session.active.delete(request);
+    }
+  }
+  retire(session) {
+    if (session.closing) return session.closing;
+    session.invalid = true;
+    session.closing = (async () => {
+      await Promise.allSettled([...session.active]);
+      session.abort.abort();
+      try {
+        await session.client.close();
+      } catch (error) {
+        this.logger.warn("agentcore.mcp.session.close.failed", { errorType: error instanceof Error ? error.name : "unknown", url: this.safeURL });
+      }
+      if (this.state === session) this.state = void 0;
+    })();
+    return session.closing;
+  }
+};
+
+export {
+  mergeMCPHeaders,
+  mcpServerURL,
+  MCPClient
+};
+//# sourceMappingURL=chunk-JW62DVIC.js.map

package/dist/chunk-JW62DVIC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mcp/client.ts","../src/mcp/headers.ts"],"sourcesContent":["import { Client } from '@modelcontextprotocol/sdk/client/index.js';\nimport { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';\nimport { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';\nimport { StdioClientTransport, type StdioServerParameters } from '@modelcontextprotocol/sdk/client/stdio.js';\nimport type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';\nimport { CallToolResultSchema, McpError, ErrorCode, type CallToolResult } from '@modelcontextprotocol/sdk/types.js';\nimport { inspect } from 'node:util';\nimport { ConfigError } from '../errors';\nimport { nullLogger, type Logger } from '../logging';\nimport type { MCPDescriptor } from '../controlplane/client';\nimport type { AgentConfig } from '../runtime/config';\nimport type { HeadersProvider } from '../model/client';\nimport { Tool, type ToolArguments } from '../integrations/common';\nimport { mergeMCPHeaders } from './headers';\n\nexport interface MCPTimeouts { sessionMs?: number; metadataMs?: number; toolMs?: number; }\nexport interface ManagedMCPOptions extends MCPTimeouts { headers?: Readonly<Record<string, string>>; credentialName?: string; }\nexport type DirectMCPOptions = ({ url: string; transport?: 'streamable-http' | 'sse'; headersProvider?: HeadersProvider } |\n  { transport: 'stdio'; server: StdioServerParameters }) & MCPTimeouts & { logger?: Logger };\nexport interface MCPCallOptions { signal?: AbortSignal; }\ninterface Session {\n  client: Client;\n  transport: Transport;\n  abort: AbortController;\n  invalid: boolean;\n  active: Set<Promise<unknown>>;\n  closing?: Promise<void>;\n}\n\nexport function mcpServerURL(gatewayURL: string, id: string): string {\n  const gateway = gatewayURL.replace(/\\/+$/, '').replace(/\\/(?:mcp|mcp-servers)$/, '');\n  return `${gateway}/mcp-servers/${encodeURIComponent(id)}`;\n}\n\nexport class MCPClient {\n  readonly descriptor?: MCPDescriptor;\n  private readonly logger: Logger;\n  private state?: Session;\n  private opening?: Promise<Session>;\n  private closed = false;\n  private closing?: Promise<void>;\n  private readonly timeouts: Required<MCPTimeouts>;\n\n  private constructor(private readonly options: DirectMCPOptions, descriptor?: MCPDescriptor) {\n    this.descriptor = descriptor;\n    this.logger = options.logger ?? nullLogger;\n    this.timeouts = { sessionMs: options.sessionMs ?? 30_000, metadataMs: options.metadataMs ?? 60_000, toolMs: options.toolMs ?? 600_000 };\n    if (Object.values(this.timeouts).some((timeout) => !Number.isFinite(timeout) || timeout <= 0)) throw new ConfigError('MCP operation timeouts must be positive');\n    if (options.transport !== 'stdio') {\n      let url: URL;\n      try { url = new URL(options.url); } catch { throw new ConfigError('Direct MCP URL must be HTTP(S)'); }\n      if (!['http:', 'https:'].includes(url.protocol)) throw new ConfigError('Direct MCP URL must be HTTP(S)');\n      if (options.transport !== undefined && !['streamable-http', 'sse'].includes(options.transport)) throw new ConfigError('MCP transport must be streamable-http, sse, or stdio');\n    }\n    this.logger.info('agentcore.mcp.client.created', { mode: descriptor ? 'managed' : 'direct', transport: options.transport ?? 'streamable-http', url: this.safeURL });\n  }\n  static platform(config: AgentConfig, descriptor: MCPDescriptor, options: Omit<ManagedMCPOptions, 'credentialName'> & {\n    logger?: Logger; credentialHeadersProvider?: () => Promise<Record<string, string>>;\n  } = {}): MCPClient {\n    const { headers: custom, credentialHeadersProvider, ...connectionOptions } = options;\n    const customHeaders = mergeMCPHeaders({}, custom);\n    const headers = mergeMCPHeaders(config.gatewayHeaders, custom);\n    return new MCPClient({ ...connectionOptions, url: mcpServerURL(config.mcpGatewayUrl, descriptor.mcpServerId), transport: 'streamable-http', headersProvider: async () => {\n      if (!credentialHeadersProvider) return headers;\n      const bound = mergeMCPHeaders(config.gatewayHeaders, await credentialHeadersProvider());\n      return mergeMCPHeaders(bound, customHeaders);\n    } }, descriptor);\n  }\n  static direct(options: DirectMCPOptions): MCPClient { return new MCPClient(options); }\n\n  async listTools(options: MCPCallOptions = {}): Promise<Tool[]> {\n    return this.withSession('list_tools', async (session) => {\n      const definitions: Awaited<ReturnType<Client['listTools']>>['tools'] = [];\n      let cursor: string | undefined;\n      const deadline = AbortSignal.timeout(this.timeouts.metadataMs);\n      const signal = AbortSignal.any([deadline, ...(options.signal ? [options.signal] : [])]);\n      do {\n        const result = await session.client.listTools(cursor ? { cursor } : undefined, { signal, timeout: this.timeouts.metadataMs });\n        definitions.push(...result.tools); cursor = result.nextCursor;\n      } while (cursor);\n      return definitions.map((definition) => new Tool({ name: definition.name, description: definition.description ?? '', parameters: definition.inputSchema,\n        invoke: (arguments_) => this.callTool(definition.name, arguments_),\n      }));\n    });\n  }\n  async tools(options: MCPCallOptions = {}): Promise<Tool[]> { return this.listTools(options); }\n  async callTool(name: string, arguments_: ToolArguments, options: MCPCallOptions = {}): Promise<CallToolResult> {\n    return this.withSession('call_tool', (session) => session.client.callTool({ name, arguments: arguments_ }, CallToolResultSchema,\n      { timeout: this.timeouts.toolMs, signal: options.signal }) as Promise<CallToolResult>);\n  }\n\n  close(): Promise<void> {\n    if (this.closing) return this.closing;\n    this.closed = true;\n    this.closing = (async () => {\n      if (this.opening && this.state) this.state.abort.abort();\n      await this.opening?.catch(() => undefined);\n      if (this.state) await this.retire(this.state);\n    })();\n    return this.closing;\n  }\n  [inspect.custom](): string { return `MCPClient(url=${this.safeURL}, <redacted>)`; }\n  toJSON(): string { return this[inspect.custom](); }\n\n  private get safeURL(): string {\n    if (this.options.transport === 'stdio') return 'stdio';\n    const url = new URL(this.options.url); return `${url.origin}${url.pathname}`;\n  }\n  private async acquire(): Promise<Session> {\n    for (;;) {\n      if (this.closed) throw new Error('MCP client is closed');\n      if (this.opening) return this.opening;\n      if (this.state?.invalid) { await this.retire(this.state); continue; }\n      if (this.state) return this.state;\n      const request = this.open(); this.opening = request;\n      try { return await request; } finally { this.opening = undefined; }\n    }\n  }\n  private async open(): Promise<Session> {\n    const client = new Client({ name: 'agentcore-sdk', version: '0.1.0' });\n    const abort = new AbortController();\n    let transport: Transport;\n    if (this.options.transport === 'stdio') transport = new StdioClientTransport(this.options.server);\n    else {\n      const headers = await this.options.headersProvider?.() ?? {};\n      const fetch: typeof globalThis.fetch = (input, init) => globalThis.fetch(input, { ...init, redirect: 'manual', signal: AbortSignal.any([abort.signal, ...(init?.signal ? [init.signal] : [])]) });\n      transport = this.options.transport === 'sse'\n        ? new SSEClientTransport(new URL(this.options.url), { requestInit: { headers }, fetch })\n        : new StreamableHTTPClientTransport(new URL(this.options.url), { requestInit: { headers }, fetch });\n    }\n    const session: Session = { client, transport, abort, invalid: false, active: new Set() };\n    this.state = session;\n    const timer = setTimeout(() => abort.abort(new Error('MCP session open timed out')), this.timeouts.sessionMs);\n    client.onclose = () => { session.invalid = true; };\n    client.onerror = (error) => {\n      if (this.closed || session.closing) return;\n      session.invalid = true;\n      this.logger.warn('agentcore.mcp.session.error', { url: this.safeURL, errorType: error.name });\n    };\n    this.logger.info('agentcore.mcp.session.open.started', { url: this.safeURL, timeoutMs: this.timeouts.sessionMs });\n    try {\n      await client.connect(transport, { signal: abort.signal, timeout: this.timeouts.sessionMs });\n      abort.signal.throwIfAborted();\n      if (this.closed) throw new Error('MCP client is closed');\n      this.logger.info('agentcore.mcp.session.open.succeeded', { url: this.safeURL });\n      return session;\n    } catch (error) { await this.retire(session); throw error; }\n    finally { clearTimeout(timer); }\n  }\n\n  private async withSession<T>(operation: string, call: (session: Session) => Promise<T>): Promise<T> {\n    const session = await this.acquire();\n    if (this.closed) throw new Error('MCP client is closed');\n    const request = call(session); session.active.add(request);\n    this.logger.info('agentcore.mcp.request.started', { operation, url: this.safeURL });\n    try { const result = await request; this.logger.info('agentcore.mcp.request.succeeded', { operation, url: this.safeURL }); return result; }\n    catch (error) {\n      if (!(error instanceof McpError) || [ErrorCode.ConnectionClosed, ErrorCode.RequestTimeout].includes(error.code)) session.invalid = true;\n      this.logger.warn('agentcore.mcp.request.failed', { operation, url: this.safeURL, errorType: error instanceof Error ? error.name : 'unknown' });\n      throw error;\n    } finally { session.active.delete(request); }\n  }\n  private retire(session: Session): Promise<void> {\n    if (session.closing) return session.closing;\n    session.invalid = true;\n    session.closing = (async () => {\n      await Promise.allSettled([...session.active]);\n      session.abort.abort();\n      try { await session.client.close(); }\n      catch (error) { this.logger.warn('agentcore.mcp.session.close.failed', { errorType: error instanceof Error ? error.name : 'unknown', url: this.safeURL }); }\n      if (this.state === session) this.state = undefined;\n    })();\n    return session.closing;\n  }\n}\n","import { ConfigError } from '../errors';\n\nconst transportHeaders = new Set([\n  'host', 'content-length', 'connection', 'transfer-encoding', 'upgrade',\n  'mcp-session-id', 'mcp-protocol-version', 'last-event-id', 'content-type', 'accept',\n]);\n\n/** Copy fixed headers, rejecting case-insensitive credential/transport conflicts. */\nexport function mergeMCPHeaders(base: Readonly<Record<string, string>>, custom?: Readonly<Record<string, string>>): Record<string, string> {\n  const result = { ...base };\n  if (custom === undefined) return result;\n  if (!custom || typeof custom !== 'object' || Array.isArray(custom)) throw new ConfigError('MCP headers must be an object');\n  const protectedNames = new Set([...Object.keys(base).map((name) => name.toLowerCase()), ...transportHeaders, 'authorization']);\n  const seen = new Set<string>();\n  for (const [name, value] of Object.entries(custom)) {\n    if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name)) throw new ConfigError('Invalid MCP header name');\n    if (typeof value !== 'string' || /[\\x00-\\x1f\\x7f]/.test(value)) throw new ConfigError('MCP header values must be strings without control characters');\n    const folded = name.toLowerCase();\n    if (protectedNames.has(folded)) throw new ConfigError(`MCP header is protected: ${folded}`);\n    if (seen.has(folded)) throw new ConfigError(`Duplicate MCP header: ${folded}`);\n    seen.add(folded);\n    Object.defineProperty(result, folded, { value, enumerable: true, configurable: true, writable: true });\n  }\n  return result;\n}\n"],"mappings":";;;;;;;;;;;AAAA,SAAS,cAAc;AACvB,SAAS,qCAAqC;AAC9C,SAAS,0BAA0B;AACnC,SAAS,4BAAwD;AAEjE,SAAS,sBAAsB,UAAU,iBAAsC;AAC/E,SAAS,eAAe;;;ACJxB,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EAAQ;AAAA,EAAkB;AAAA,EAAc;AAAA,EAAqB;AAAA,EAC7D;AAAA,EAAkB;AAAA,EAAwB;AAAA,EAAiB;AAAA,EAAgB;AAC7E,CAAC;AAGM,SAAS,gBAAgB,MAAwC,QAAmE;AACzI,QAAM,SAAS,EAAE,GAAG,KAAK;AACzB,MAAI,WAAW,OAAW,QAAO;AACjC,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,OAAM,IAAI,YAAY,+BAA+B;AACzH,QAAM,iBAAiB,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,IAAI,EAAE,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,GAAG,GAAG,kBAAkB,eAAe,CAAC;AAC7H,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,QAAI,CAAC,gCAAgC,KAAK,IAAI,EAAG,OAAM,IAAI,YAAY,yBAAyB;AAChG,QAAI,OAAO,UAAU,YAAY,kBAAkB,KAAK,KAAK,EAAG,OAAM,IAAI,YAAY,8DAA8D;AACpJ,UAAM,SAAS,KAAK,YAAY;AAChC,QAAI,eAAe,IAAI,MAAM,EAAG,OAAM,IAAI,YAAY,4BAA4B,MAAM,EAAE;AAC1F,QAAI,KAAK,IAAI,MAAM,EAAG,OAAM,IAAI,YAAY,yBAAyB,MAAM,EAAE;AAC7E,SAAK,IAAI,MAAM;AACf,WAAO,eAAe,QAAQ,QAAQ,EAAE,OAAO,YAAY,MAAM,cAAc,MAAM,UAAU,KAAK,CAAC;AAAA,EACvG;AACA,SAAO;AACT;;;ADKO,SAAS,aAAa,YAAoB,IAAoB;AACnE,QAAM,UAAU,WAAW,QAAQ,QAAQ,EAAE,EAAE,QAAQ,0BAA0B,EAAE;AACnF,SAAO,GAAG,OAAO,gBAAgB,mBAAmB,EAAE,CAAC;AACzD;AAEO,IAAM,YAAN,MAAM,WAAU;AAAA,EASb,YAA6B,SAA2B,YAA4B;AAAvD;AACnC,SAAK,aAAa;AAClB,SAAK,SAAS,QAAQ,UAAU;AAChC,SAAK,WAAW,EAAE,WAAW,QAAQ,aAAa,KAAQ,YAAY,QAAQ,cAAc,KAAQ,QAAQ,QAAQ,UAAU,IAAQ;AACtI,QAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,OAAO,SAAS,OAAO,KAAK,WAAW,CAAC,EAAG,OAAM,IAAI,YAAY,yCAAyC;AAC9J,QAAI,QAAQ,cAAc,SAAS;AACjC,UAAI;AACJ,UAAI;AAAE,cAAM,IAAI,IAAI,QAAQ,GAAG;AAAA,MAAG,QAAQ;AAAE,cAAM,IAAI,YAAY,gCAAgC;AAAA,MAAG;AACrG,UAAI,CAAC,CAAC,SAAS,QAAQ,EAAE,SAAS,IAAI,QAAQ,EAAG,OAAM,IAAI,YAAY,gCAAgC;AACvG,UAAI,QAAQ,cAAc,UAAa,CAAC,CAAC,mBAAmB,KAAK,EAAE,SAAS,QAAQ,SAAS,EAAG,OAAM,IAAI,YAAY,sDAAsD;AAAA,IAC9K;AACA,SAAK,OAAO,KAAK,gCAAgC,EAAE,MAAM,aAAa,YAAY,UAAU,WAAW,QAAQ,aAAa,mBAAmB,KAAK,KAAK,QAAQ,CAAC;AAAA,EACpK;AAAA,EAZqC;AAAA,EAR5B;AAAA,EACQ;AAAA,EACT;AAAA,EACA;AAAA,EACA,SAAS;AAAA,EACT;AAAA,EACS;AAAA,EAejB,OAAO,SAAS,QAAqB,YAA2B,UAE5D,CAAC,GAAc;AACjB,UAAM,EAAE,SAAS,QAAQ,2BAA2B,GAAG,kBAAkB,IAAI;AAC7E,UAAM,gBAAgB,gBAAgB,CAAC,GAAG,MAAM;AAChD,UAAM,UAAU,gBAAgB,OAAO,gBAAgB,MAAM;AAC7D,WAAO,IAAI,WAAU,EAAE,GAAG,mBAAmB,KAAK,aAAa,OAAO,eAAe,WAAW,WAAW,GAAG,WAAW,mBAAmB,iBAAiB,YAAY;AACvK,UAAI,CAAC,0BAA2B,QAAO;AACvC,YAAM,QAAQ,gBAAgB,OAAO,gBAAgB,MAAM,0BAA0B,CAAC;AACtF,aAAO,gBAAgB,OAAO,aAAa;AAAA,IAC7C,EAAE,GAAG,UAAU;AAAA,EACjB;AAAA,EACA,OAAO,OAAO,SAAsC;AAAE,WAAO,IAAI,WAAU,OAAO;AAAA,EAAG;AAAA,EAErF,MAAM,UAAU,UAA0B,CAAC,GAAoB;AAC7D,WAAO,KAAK,YAAY,cAAc,OAAO,YAAY;AACvD,YAAM,cAAiE,CAAC;AACxE,UAAI;AACJ,YAAM,WAAW,YAAY,QAAQ,KAAK,SAAS,UAAU;AAC7D,YAAM,SAAS,YAAY,IAAI,CAAC,UAAU,GAAI,QAAQ,SAAS,CAAC,QAAQ,MAAM,IAAI,CAAC,CAAE,CAAC;AACtF,SAAG;AACD,cAAM,SAAS,MAAM,QAAQ,OAAO,UAAU,SAAS,EAAE,OAAO,IAAI,QAAW,EAAE,QAAQ,SAAS,KAAK,SAAS,WAAW,CAAC;AAC5H,oBAAY,KAAK,GAAG,OAAO,KAAK;AAAG,iBAAS,OAAO;AAAA,MACrD,SAAS;AACT,aAAO,YAAY,IAAI,CAAC,eAAe,IAAI,KAAK;AAAA,QAAE,MAAM,WAAW;AAAA,QAAM,aAAa,WAAW,eAAe;AAAA,QAAI,YAAY,WAAW;AAAA,QACzI,QAAQ,CAAC,eAAe,KAAK,SAAS,WAAW,MAAM,UAAU;AAAA,MACnE,CAAC,CAAC;AAAA,IACJ,CAAC;AAAA,EACH;AAAA,EACA,MAAM,MAAM,UAA0B,CAAC,GAAoB;AAAE,WAAO,KAAK,UAAU,OAAO;AAAA,EAAG;AAAA,EAC7F,MAAM,SAAS,MAAc,YAA2B,UAA0B,CAAC,GAA4B;AAC7G,WAAO,KAAK,YAAY,aAAa,CAAC,YAAY,QAAQ,OAAO;AAAA,MAAS,EAAE,MAAM,WAAW,WAAW;AAAA,MAAG;AAAA,MACzG,EAAE,SAAS,KAAK,SAAS,QAAQ,QAAQ,QAAQ,OAAO;AAAA,IAAC,CAA4B;AAAA,EACzF;AAAA,EAEA,QAAuB;AACrB,QAAI,KAAK,QAAS,QAAO,KAAK;AAC9B,SAAK,SAAS;AACd,SAAK,WAAW,YAAY;AAC1B,UAAI,KAAK,WAAW,KAAK,MAAO,MAAK,MAAM,MAAM,MAAM;AACvD,YAAM,KAAK,SAAS,MAAM,MAAM,MAAS;AACzC,UAAI,KAAK,MAAO,OAAM,KAAK,OAAO,KAAK,KAAK;AAAA,IAC9C,GAAG;AACH,WAAO,KAAK;AAAA,EACd;AAAA,EACA,CAAC,QAAQ,MAAM,IAAY;AAAE,WAAO,iBAAiB,KAAK,OAAO;AAAA,EAAiB;AAAA,EAClF,SAAiB;AAAE,WAAO,KAAK,QAAQ,MAAM,EAAE;AAAA,EAAG;AAAA,EAElD,IAAY,UAAkB;AAC5B,QAAI,KAAK,QAAQ,cAAc,QAAS,QAAO;AAC/C,UAAM,MAAM,IAAI,IAAI,KAAK,QAAQ,GAAG;AAAG,WAAO,GAAG,IAAI,MAAM,GAAG,IAAI,QAAQ;AAAA,EAC5E;AAAA,EACA,MAAc,UAA4B;AACxC,eAAS;AACP,UAAI,KAAK,OAAQ,OAAM,IAAI,MAAM,sBAAsB;AACvD,UAAI,KAAK,QAAS,QAAO,KAAK;AAC9B,UAAI,KAAK,OAAO,SAAS;AAAE,cAAM,KAAK,OAAO,KAAK,KAAK;AAAG;AAAA,MAAU;AACpE,UAAI,KAAK,MAAO,QAAO,KAAK;AAC5B,YAAM,UAAU,KAAK,KAAK;AAAG,WAAK,UAAU;AAC5C,UAAI;AAAE,eAAO,MAAM;AAAA,MAAS,UAAE;AAAU,aAAK,UAAU;AAAA,MAAW;AAAA,IACpE;AAAA,EACF;AAAA,EACA,MAAc,OAAyB;AACrC,UAAM,SAAS,IAAI,OAAO,EAAE,MAAM,iBAAiB,SAAS,QAAQ,CAAC;AACrE,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI;AACJ,QAAI,KAAK,QAAQ,cAAc,QAAS,aAAY,IAAI,qBAAqB,KAAK,QAAQ,MAAM;AAAA,SAC3F;AACH,YAAM,UAAU,MAAM,KAAK,QAAQ,kBAAkB,KAAK,CAAC;AAC3D,YAAM,QAAiC,CAAC,OAAO,SAAS,WAAW,MAAM,OAAO,EAAE,GAAG,MAAM,UAAU,UAAU,QAAQ,YAAY,IAAI,CAAC,MAAM,QAAQ,GAAI,MAAM,SAAS,CAAC,KAAK,MAAM,IAAI,CAAC,CAAE,CAAC,EAAE,CAAC;AAChM,kBAAY,KAAK,QAAQ,cAAc,QACnC,IAAI,mBAAmB,IAAI,IAAI,KAAK,QAAQ,GAAG,GAAG,EAAE,aAAa,EAAE,QAAQ,GAAG,MAAM,CAAC,IACrF,IAAI,8BAA8B,IAAI,IAAI,KAAK,QAAQ,GAAG,GAAG,EAAE,aAAa,EAAE,QAAQ,GAAG,MAAM,CAAC;AAAA,IACtG;AACA,UAAM,UAAmB,EAAE,QAAQ,WAAW,OAAO,SAAS,OAAO,QAAQ,oBAAI,IAAI,EAAE;AACvF,SAAK,QAAQ;AACb,UAAM,QAAQ,WAAW,MAAM,MAAM,MAAM,IAAI,MAAM,4BAA4B,CAAC,GAAG,KAAK,SAAS,SAAS;AAC5G,WAAO,UAAU,MAAM;AAAE,cAAQ,UAAU;AAAA,IAAM;AACjD,WAAO,UAAU,CAAC,UAAU;AAC1B,UAAI,KAAK,UAAU,QAAQ,QAAS;AACpC,cAAQ,UAAU;AAClB,WAAK,OAAO,KAAK,+BAA+B,EAAE,KAAK,KAAK,SAAS,WAAW,MAAM,KAAK,CAAC;AAAA,IAC9F;AACA,SAAK,OAAO,KAAK,sCAAsC,EAAE,KAAK,KAAK,SAAS,WAAW,KAAK,SAAS,UAAU,CAAC;AAChH,QAAI;AACF,YAAM,OAAO,QAAQ,WAAW,EAAE,QAAQ,MAAM,QAAQ,SAAS,KAAK,SAAS,UAAU,CAAC;AAC1F,YAAM,OAAO,eAAe;AAC5B,UAAI,KAAK,OAAQ,OAAM,IAAI,MAAM,sBAAsB;AACvD,WAAK,OAAO,KAAK,wCAAwC,EAAE,KAAK,KAAK,QAAQ,CAAC;AAC9E,aAAO;AAAA,IACT,SAAS,OAAO;AAAE,YAAM,KAAK,OAAO,OAAO;AAAG,YAAM;AAAA,IAAO,UAC3D;AAAU,mBAAa,KAAK;AAAA,IAAG;AAAA,EACjC;AAAA,EAEA,MAAc,YAAe,WAAmB,MAAoD;AAClG,UAAM,UAAU,MAAM,KAAK,QAAQ;AACnC,QAAI,KAAK,OAAQ,OAAM,IAAI,MAAM,sBAAsB;AACvD,UAAM,UAAU,KAAK,OAAO;AAAG,YAAQ,OAAO,IAAI,OAAO;AACzD,SAAK,OAAO,KAAK,iCAAiC,EAAE,WAAW,KAAK,KAAK,QAAQ,CAAC;AAClF,QAAI;AAAE,YAAM,SAAS,MAAM;AAAS,WAAK,OAAO,KAAK,mCAAmC,EAAE,WAAW,KAAK,KAAK,QAAQ,CAAC;AAAG,aAAO;AAAA,IAAQ,SACnI,OAAO;AACZ,UAAI,EAAE,iBAAiB,aAAa,CAAC,UAAU,kBAAkB,UAAU,cAAc,EAAE,SAAS,MAAM,IAAI,EAAG,SAAQ,UAAU;AACnI,WAAK,OAAO,KAAK,gCAAgC,EAAE,WAAW,KAAK,KAAK,SAAS,WAAW,iBAAiB,QAAQ,MAAM,OAAO,UAAU,CAAC;AAC7I,YAAM;AAAA,IACR,UAAE;AAAU,cAAQ,OAAO,OAAO,OAAO;AAAA,IAAG;AAAA,EAC9C;AAAA,EACQ,OAAO,SAAiC;AAC9C,QAAI,QAAQ,QAAS,QAAO,QAAQ;AACpC,YAAQ,UAAU;AAClB,YAAQ,WAAW,YAAY;AAC7B,YAAM,QAAQ,WAAW,CAAC,GAAG,QAAQ,MAAM,CAAC;AAC5C,cAAQ,MAAM,MAAM;AACpB,UAAI;AAAE,cAAM,QAAQ,OAAO,MAAM;AAAA,MAAG,SAC7B,OAAO;AAAE,aAAK,OAAO,KAAK,sCAAsC,EAAE,WAAW,iBAAiB,QAAQ,MAAM,OAAO,WAAW,KAAK,KAAK,QAAQ,CAAC;AAAA,MAAG;AAC3J,UAAI,KAAK,UAAU,QAAS,MAAK,QAAQ;AAAA,IAC3C,GAAG;AACH,WAAO,QAAQ;AAAA,EACjB;AACF;","names":[]}

package/dist/chunk-K3TE7625.js

@@ -0,0 +1,139 @@
+import {
+  ConfigError
+} from "./chunk-MZ5UWGXS.js";
+
+// src/runtime/config.ts
+import { readFile } from "fs/promises";
+import { parseDocument, visit } from "yaml";
+var DEFAULT_CONFIG_PATH = "/var/run/agentcore/agent/agent.yaml";
+function object(value, label) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new ConfigError(`${label} must be an object`);
+  }
+  return value;
+}
+function requiredString(value, label) {
+  if (typeof value !== "string" || !value.trim()) {
+    throw new ConfigError(`${label} must be a non-empty string`);
+  }
+  return value.trim();
+}
+function httpUrl(value, label) {
+  const text = requiredString(value, label);
+  let url;
+  try {
+    url = new URL(text);
+  } catch {
+    throw new ConfigError(`${label} must be an absolute HTTP(S) URL`);
+  }
+  if (!["http:", "https:"].includes(url.protocol) || !url.hostname || url.username || url.password || url.search || url.hash) {
+    throw new ConfigError(`${label} must be HTTP(S) without user info, query, or fragment`);
+  }
+  return text.replace(/\/+$/, "");
+}
+var sensitive = /* @__PURE__ */ new Set([
+  "apikey",
+  "api_key",
+  "authorization",
+  "accesskeyid",
+  "accesskeysecret",
+  "cookie",
+  "header",
+  "headers",
+  "password",
+  "secret",
+  "securitytoken",
+  "token"
+]);
+function rejectInlineCredentials(value, label) {
+  if (Array.isArray(value)) {
+    value.forEach((item, i) => rejectInlineCredentials(item, `${label}[${i}]`));
+  } else if (value && typeof value === "object") {
+    for (const [key, item] of Object.entries(value)) {
+      if (sensitive.has(key.toLowerCase())) throw new ConfigError(`${label}.${key} must not contain inline credentials`);
+      rejectInlineCredentials(item, `${label}.${key}`);
+    }
+  }
+}
+function parseAgentConfig(data) {
+  if (Buffer.byteLength(data) > 1024 * 1024) throw new ConfigError("agent.yaml exceeds the 1 MiB size limit");
+  let value;
+  try {
+    const text = typeof data === "string" ? data : new TextDecoder("utf-8", { fatal: true }).decode(data);
+    const doc = parseDocument(text, { uniqueKeys: true });
+    if (doc.errors.length) throw new Error("invalid YAML");
+    visit(doc, {
+      Alias() {
+        throw new Error("YAML alias");
+      },
+      Node(_key, node) {
+        if ("anchor" in node && node.anchor) throw new Error("YAML anchor");
+      },
+      Pair(_key, pair) {
+        if (!pair.key || typeof pair.key !== "object" || !("value" in pair.key) || typeof pair.key.value !== "string") {
+          throw new Error("non-string YAML key");
+        }
+      }
+    });
+    value = doc.toJS();
+  } catch {
+    throw new ConfigError("invalid agent.yaml (UTF-8 YAML, unique string keys, no anchors or aliases required)");
+  }
+  return parseAgentConfigMapping(value);
+}
+function parseAgentConfigMapping(value) {
+  const root = object(value, "agent.yaml");
+  if (root.apiVersion !== "agentteams.io/v1alpha1" || root.kind !== "AgentConfig") {
+    throw new ConfigError("unsupported agent.yaml apiVersion or kind");
+  }
+  const metadata = object(root.metadata, "metadata");
+  const spec = object(root.spec, "spec");
+  const model = object(spec.model, "spec.model");
+  const mcp = object(spec.mcp, "spec.mcp");
+  rejectInlineCredentials(model, "spec.model");
+  rejectInlineCredentials(mcp, "spec.mcp");
+  const rawHeaders = object(spec.credentials, "spec.credentials").header;
+  if (!Array.isArray(rawHeaders) || !rawHeaders.length) throw new ConfigError("spec.credentials.header must be a non-empty list");
+  const headers = {};
+  for (const raw of rawHeaders) {
+    const header = object(raw, "gateway header");
+    const key = requiredString(header.key, "header.key").toLowerCase();
+    const val = requiredString(header.value, "header.value");
+    if (!/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/.test(key) || /[\r\n]/.test(val)) throw new ConfigError("invalid gateway header");
+    if (Object.hasOwn(headers, key)) throw new ConfigError(`duplicate gateway header: ${key}`);
+    Object.defineProperty(headers, key, { value: val, enumerable: true });
+  }
+  if (!/^bearer\s+\S/i.test(headers.authorization ?? "")) throw new ConfigError("spec.credentials.header requires a Bearer Authorization header");
+  const runtimeName = requiredString(metadata.runtimeName, "metadata.runtimeName");
+  return Object.freeze({
+    apiVersion: root.apiVersion,
+    kind: root.kind,
+    name: metadata.name == null ? runtimeName : requiredString(metadata.name, "metadata.name"),
+    runtimeName,
+    workspaceId: requiredString(metadata.workspaceId, "metadata.workspaceId"),
+    regionId: requiredString(metadata.regionId, "metadata.regionId"),
+    modelGatewayUrl: httpUrl(model.gatewayUrl, "spec.model.gatewayUrl"),
+    mcpGatewayUrl: httpUrl(mcp.gatewayUrl, "spec.mcp.gatewayUrl"),
+    gatewayHeaders: Object.freeze(headers)
+  });
+}
+async function loadAgentConfig(path = process.env.AGENTCORE_CONFIG_PATH || DEFAULT_CONFIG_PATH) {
+  let data;
+  try {
+    data = await readFile(path);
+  } catch (cause) {
+    throw new ConfigError("cannot read agent.yaml", { cause });
+  }
+  return parseAgentConfig(data);
+}
+
+export {
+  DEFAULT_CONFIG_PATH,
+  object,
+  requiredString,
+  httpUrl,
+  parseAgentConfig,
+  parseAgentConfigMapping,
+  loadAgentConfig
+};
+//# sourceMappingURL=chunk-K3TE7625.js.map