eve 0.83.2 → 0.84.0

package/dist/src/eve-channel/index.js

@@ -1 +1 @@
-import{attachClientContext}from"#internal/client-context.js";import{createLogger,logError}from"#internal/logging.js";import{validateSessionHistory}from"#shared/session-history.js";import{FAIL_CLOSED_FORWARDED_TRACE_ASSERTION,formatTraceContentCeiling}from"#shared/forwarded-trace-policy.js";import{EVE_CALLBACK_ROUTE_PATTERN,EVE_CONNECTION_CALLBACK_ROUTE_PATTERN,EVE_HEALTH_ROUTE_PATH,EVE_INFO_ROUTE_PATH,EVE_ROUTE_PREFIX,EVE_SESSION_CANCEL_ROUTE_PATTERN,EVE_SESSION_CLEAR_ROUTE_PATTERN,EVE_SESSION_COMPACT_ROUTE_PATTERN,EVE_SESSION_RESET_ROUTE_PATTERN,EVE_SESSION_ROUTE_PATH,EVE_SESSION_ROUTE_PATTERN,EVE_SESSION_STREAM_ROUTE_PATTERN,EVE_SESSION_STUBS_ROUTE_PATTERN,EVE_SUBAGENT_STREAM_ROUTE_PATTERN,createEveSessionStreamRoutePath,createEveSubagentStreamRoutePath}from"#protocol/routes.js";import{EVE_SESSION_ID_HEADER,EVE_STREAM_CONTROL_VERSION_QUERY}from"#protocol/message.js";import{DELETE,GET,HEAD,PATCH,POST,PUT,defineChannel}from"#public/definitions/channel.js";import{readMatchedStubRules,readStubFailure}from"#execution/tool-stubs/steps.js";import{InvalidToolStubTargetError}from"#tool-stubs/validate-targets.js";import{getRun}from"#internal/workflow/runtime.js";import{proxyStreamHeaders}from"#eve-channel/stream-headers.js";import{handleExpiredLegacyAuthorization}from"#execution/legacy-session/authorization.js";import{resolveForwardedPrincipal}from"#channel/forwarded-principal.js";import{handleConnectionCallbackRequest}from"#execution/connections/callback-route.js";import{handleSessionCallbackRequest}from"#subagents/callback-route.js";import{WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest}from"#execution/workflow-webhook-route.js";import{readAgentInfoRouteResponse,readRemoteAgentStreamHeadersResolver,readRouteSessionCreator}from"#internal/nitro/routes/channel-route-context.js";import{legacyTaskInputRoute}from"#execution/legacy-remote-agent/protocol.js";import{parseTraceparent,readAgentDispatchTraceContext}from"#protocol/traceparent.js";import{readForwardedAudienceBaggage,readForwardedParentSessionBaggage}from"#protocol/baggage.js";import{agentDelegation}from"#tracing/eve/delegation.js";import{sessionAuthFromResult}from"#channel/auth/result.js";import{routeAuth}from"#public/channels/auth.js";import{defaultEveAudience}from"#eve-channel/audience.js";import{mergeUploadPolicy}from"#public/channels/upload-policy.js";import{checkUploadPolicy,createSessionStreamResponse,deriveOperationContinuationToken,parseCancelTurnBody,parseCreateBody,parseIncludeTailIndex,parseOptionalJsonRequest,parseResetBody,parseSessionControlBody,parseSessionMessageBody,parseStartIndex,rejectSessionContinuationToken,requireSessionId}from"#eve-channel/request.js";import{findRemoteAgentBinding,healthResponse,normalizeEveCors,resolveOnMessage,resolveTurnClientContext,strandedSessionResponse}from"#eve-channel/support.js";export*from"#eve-channel/types.js";const log=createLogger(`eve.channel`);function createdSessionBody(e,t){let n={ok:!0,sessionId:e,status:`accepted`};return t.protocolVersion!==void 0&&(n.protocolVersion=t.protocolVersion),n}function eveChannel(e){let t=mergeUploadPolicy(e.uploadPolicy);return defineChannel({cors:normalizeEveCors(e.cors),turnPolicy:e.turnPolicy,audience:t=>{let n=e.audience??defaultEveAudience;return typeof n==`function`?n(t):n},routes:[GET(EVE_HEALTH_ROUTE_PATH,async()=>healthResponse()),HEAD(EVE_HEALTH_ROUTE_PATH,async()=>healthResponse()),GET(EVE_INFO_ROUTE_PATH,async(t,n)=>{let r=await routeAuth(t,e.auth);if(r instanceof Response)return r;let i=readAgentInfoRouteResponse(n);return i===void 0?Response.json({error:`Agent info route requires internal channel dispatch context.`,ok:!1},{status:500}):await i()}),GET(`${EVE_ROUTE_PREFIX}/connections/:name/callback/:token`,handleExpiredLegacyAuthorization),POST(`${EVE_ROUTE_PREFIX}/connections/:name/callback/:token`,handleExpiredLegacyAuthorization),GET(EVE_CONNECTION_CALLBACK_ROUTE_PATTERN,handleConnectionCallbackRequest),POST(EVE_CONNECTION_CALLBACK_ROUTE_PATTERN,handleConnectionCallbackRequest),POST(EVE_CALLBACK_ROUTE_PATTERN,handleSessionCallbackRequest),POST(legacyTaskInputRoute.path,legacyTaskInputRoute.handler),GET(WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest),POST(WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest),PUT(WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest),PATCH(WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest),DELETE(WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest),POST(EVE_SESSION_ROUTE_PATH,async(n,r)=>{let i=await routeAuth(n,e.auth);if(i instanceof Response)return i;let a=sessionAuthFromResult(i),o=await parseOptionalJsonRequest(n);if(o instanceof Response)return o;if(o.stubs!==void 0&&i.allowToolStubs!==!0)return Response.json({ok:!1,error:`Tool stubbing is not permitted for this caller.`},{status:403});let s=rejectSessionContinuationToken(o);if(s!==null)return s;let c=await resolveForwardedPrincipal({trustedForwarders:e.trustedForwarders,forwarder:a,payload:o});if(c instanceof Response)return c;let l=parseCreateBody(o);if(l instanceof Response)return l;l.callback!==void 0&&l.legacyRemoteAgentCaller!==void 0&&log.info(`serving a remote agent protocol 1 caller`,{callerOrigin:new URL(l.callback.url).origin,forwarder:i.principalId});let u=l.callback===void 0?`absent`:readForwardedParentSessionBaggage(n.headers.get(`baggage`)),d;if(typeof u==`object`){if(u.callId!==l.callback?.callId)log.warn(`ignoring remote parent lineage with a mismatched callback`,{forwarder:i.principalId});else{let t=c.accepted;if(!t&&e.trustedForwarders!==void 0)try{t=await e.trustedForwarders(a,{})}catch(e){let t=logError(log,`trustedForwarders handler failed`,e,{forwarder:i.principalId});return Response.json({error:`trustedForwarders handler failed.`,errorId:t,ok:!1},{status:500})}t?d=u:log.warn(`ignoring remote parent lineage from an untrusted forwarder`,{forwarder:i.principalId})}}else u===`malformed`&&log.warn(`ignoring malformed remote parent lineage`,{forwarder:i.principalId});let f=l.callback===void 0?void 0:parseTraceparent(n.headers.get(`traceparent`)),p=l.callback===void 0?void 0:readAgentDispatchTraceContext(n.headers.get(`tracestate`),f)??f,m=checkUploadPolicy(l,t);if(m!==null)return m;if(l.operationId!==void 0&&c.auth.principalType===`anonymous`)return Response.json({error:`operationId requires an authenticated principal.`,ok:!1},{status:400});let h=l.operationId===void 0?void 0:await deriveOperationContinuationToken({auth:c.auth,operationId:l.operationId});if(h!==void 0){let e=await r.resolveSession(h);if(e!==void 0)return Response.json(createdSessionBody(e.id,l),{headers:{"cache-control":`no-store`,[EVE_SESSION_ID_HEADER]:e.id},status:202})}let g=f===void 0?`absent`:readForwardedAudienceBaggage(n.headers.get(`baggage`)),_=c.accepted&&f!==void 0&&(f.traceFlags&1)==1?typeof g==`object`?g:g===`malformed`?FAIL_CLOSED_FORWARDED_TRACE_ASSERTION:void 0:void 0,v=p;_!==void 0&&p!==void 0&&(v={...p,forwardedTracePolicy:_}),g===`malformed`?log.warn(`using metadata-only policy for malformed forwarded audience baggage`,{forwarder:i.principalId}):typeof g==`object`&&(_===void 0?log.warn(`ignoring forwarded trace policy without an accepted sampled principal`,{forwarder:i.principalId}):log.info(`accepted forwarded trace policy`,{audience:g.originAudience,ceiling:formatTraceContentCeiling(g.ceiling),forwarder:i.principalId}));let y=l.message===void 0?{auth:c.auth,clientContext:resolveTurnClientContext(void 0,l.context)}:await resolveOnMessage({auth:c.auth,clientContext:l.context,config:e,invocation:d===void 0||l.operationId===void 0?void 0:{operationId:l.operationId},message:l.message,request:n});if(y instanceof Response)return y;let b=readRouteSessionCreator(r);if(b===void 0)return Response.json({error:`Session creation requires internal channel dispatch context.`,ok:!1},{status:500});let x;try{x=await agentDelegation.receive({headers:n.headers,delegated:l.callback!==void 0,trusted:c.accepted,parent:d,callerTrace:p,parentTraceContext:v},({conversationId:e,parentTraceContext:t})=>b({audienceAuth:a,toolStubs:l.stubs===void 0?void 0:{rules:l.stubs,token:crypto.randomUUID()},auth:y.auth,capabilities:l.capabilities??{requestInput:!0},callback:l.callback,legacyRemoteAgentCaller:l.legacyRemoteAgentCaller,continuationToken:h,initiatorAuth:c.accepted?c.initiatorAuth:void 0,input:attachClientContext({message:l.message,context:y.context,history:validateSessionHistory(`history`in y?y.history:void 0),outputSchema:l.outputSchema},y.clientContext),conversationId:e,parent:d,parentTraceContext:t,traceRoot:d===void 0?void 0:{kind:`own`},title:y.title}))}catch(e){if(e instanceof InvalidToolStubTargetError)return Response.json({error:e.message,ok:!1},{status:400});let t=logError(log,`session-create request failed`,e);return Response.json({error:`Failed to create the session.`,errorId:t,ok:!1},{status:500})}return Response.json(createdSessionBody(x.sessionId,l),{headers:{"cache-control":`no-store`,[EVE_SESSION_ID_HEADER]:x.sessionId},status:202})}),POST(EVE_SESSION_ROUTE_PATTERN,async(n,{attachSession:r,params:i})=>{let a=await routeAuth(n,e.auth);if(a instanceof Response)return a;let o=requireSessionId(i);if(o instanceof Response)return o;let s=await parseOptionalJsonRequest(n);if(s instanceof Response)return s;if(Object.keys(s).length===0)try{let e=await r(o).prewarm();return Response.json({ok:!0,...e},{headers:{"cache-control":`no-store`},status:e.status===`accepted`?202:200})}catch(e){let t=logError(log,`session-prewarm request failed`,e,{sessionId:o});return Response.json({ok:!1,error:`Failed to prewarm the session.`,errorId:t},{status:500})}let c=await resolveForwardedPrincipal({trustedForwarders:e.trustedForwarders,forwarder:sessionAuthFromResult(a),payload:s});if(c instanceof Response)return c;let l=parseSessionMessageBody(s);if(l instanceof Response)return l;let u=checkUploadPolicy(l,t);if(u!==null)return u;let d=resolveTurnClientContext(void 0,l.context),f,p,m,h=c.auth;if(l.message!==void 0){let t=await resolveOnMessage({auth:c.auth,clientContext:l.context,config:e,message:l.message,request:n,sessionId:o});if(t instanceof Response)return t;d=t.clientContext,f=t.context,p=t.history,m=t.title,h=t.auth}let g;try{let e=r(o),t=attachClientContext({auth:h,callback:l.callback,context:f,history:p,outputSchema:l.outputSchema,turnPolicy:l.turnPolicy,title:m},d);g=l.inputResponses===void 0?await e.send(l.message,t):await e.respond(l.inputResponses,t)}catch(e){let t=strandedSessionResponse(e);if(t!==void 0)return t;let n=logError(log,`session-message request failed`,e,{sessionId:o});return Response.json({error:`Failed to send the session message.`,errorId:n,ok:!1},{status:500})}return g.status===`accepted`?Response.json({ok:!0,sessionId:g.sessionId,status:`accepted`,deliveryId:g.deliveryId},{headers:{"cache-control":`no-store`,[EVE_SESSION_ID_HEADER]:g.sessionId},status:202}):Response.json({code:g.retryable?`session_not_ready`:`session_not_active`,error:g.retryable===!0?`The session is not ready to accept messages yet.`:`The session is no longer active.`,ok:!1},{headers:{"cache-control":`no-store`},status:409})}),POST(EVE_SESSION_CANCEL_ROUTE_PATTERN,async(t,{attachSession:n,params:r})=>{let i=await routeAuth(t,e.auth);if(i instanceof Response)return i;let a=requireSessionId(r);if(a instanceof Response)return a;let o=await parseCancelTurnBody(t);if(o instanceof Response)return o;let s;try{s=await n(a).cancel({turnId:o.turnId})}catch(e){let t=logError(log,`cancel-turn request failed`,e,{sessionId:a});return Response.json({error:`Failed to cancel the turn.`,errorId:t,ok:!1},{status:500})}return Response.json(s.status===`accepted`?{ok:!0,sessionId:s.sessionId,status:`accepted`}:{ok:!0,status:`no_active_turn`},{headers:{"cache-control":`no-store`},status:s.status===`accepted`?202:200})}),POST(EVE_SESSION_COMPACT_ROUTE_PATTERN,async(t,{attachSession:n,params:r})=>{let i=await routeAuth(t,e.auth);if(i instanceof Response)return i;let a=requireSessionId(r);if(a instanceof Response)return a;let o=await parseSessionControlBody(t);if(o instanceof Response)return o;let s;try{s=await n(a).compact()}catch(e){let t=logError(log,`session-compaction request failed`,e,{sessionId:a});return Response.json({error:`Failed to compact the session.`,errorId:t,ok:!1},{status:500})}return Response.json(s.status===`accepted`?{ok:!0,sessionId:s.sessionId,status:`accepted`}:{ok:!0,status:`no_active_session`},{headers:{"cache-control":`no-store`},status:s.status===`accepted`?202:200})}),POST(EVE_SESSION_CLEAR_ROUTE_PATTERN,async(t,{attachSession:n,params:r})=>{let i=await routeAuth(t,e.auth);if(i instanceof Response)return i;let a=requireSessionId(r);if(a instanceof Response)return a;let o=await parseSessionControlBody(t);if(o instanceof Response)return o;let s;try{s=await n(a).clear()}catch(e){let t=strandedSessionResponse(e);if(t!==void 0)return t;let n=logError(log,`session-clear request failed`,e,{sessionId:a});return Response.json({error:`Failed to clear the session context.`,errorId:n,ok:!1},{status:500})}return Response.json({ok:!0,...s},{headers:{"cache-control":`no-store`},status:s.status===`accepted`?202:200})}),POST(EVE_SESSION_RESET_ROUTE_PATTERN,async(t,{attachSession:n,params:r})=>{let i=await routeAuth(t,e.auth);if(i instanceof Response)return i;let a=requireSessionId(r);if(a instanceof Response)return a;let o=await parseResetBody(t);if(o instanceof Response)return o;let s;try{s=await n(a).reset({reason:o.reason})}catch(e){let t=logError(log,`session-reset request failed`,e,{sessionId:a});return Response.json({error:`Failed to reset the session.`,errorId:t,ok:!1},{status:500})}return Response.json(s.status===`reset`?{ok:!0,previousSessionId:s.previousSessionId,status:`reset`}:{ok:!0,status:`no_active_session`},{headers:{"cache-control":`no-store`}})}),GET(EVE_SESSION_STUBS_ROUTE_PATTERN,async(t,{params:n})=>{let r=await routeAuth(t,e.auth);if(r instanceof Response)return r;if(r.allowToolStubs!==!0)return Response.json({error:`Tool stubbing is not permitted for this caller.`,ok:!1},{status:403});let i=requireSessionId(n);if(i instanceof Response)return i;try{return await getRun(i).exists?Response.json({error:await readStubFailure(i)??null,matchedRuleIds:await readMatchedStubRules(i)},{headers:{"cache-control":`no-store`}}):Response.json({error:`Session not found.`,ok:!1},{status:404})}catch(e){let t=logError(log,`tool-stub verification request failed`,e,{sessionId:i});return Response.json({error:`Failed to verify tool stubs.`,errorId:t,ok:!1},{status:500})}}),GET(EVE_SESSION_STREAM_ROUTE_PATTERN,async(t,{attachSession:n,params:r})=>{let i=await routeAuth(t,e.auth);if(i instanceof Response)return i;let a=requireSessionId(r);return a instanceof Response?a:await createSessionStreamResponse(t,n(a))}),GET(EVE_SUBAGENT_STREAM_ROUTE_PATTERN,async(t,n)=>{let r=await routeAuth(t,e.auth);if(r instanceof Response)return r;let i=n.params.parentSessionId,a=n.params.callId,o=n.params.childSessionId;if(!i||!a||!o)return Response.json({error:`Missing subagent stream coordinates.`,ok:!1},{status:400});let s=parseStartIndex(t);if(s instanceof Response)return s;let c=parseIncludeTailIndex(t),l=createEveSubagentStreamRoutePath({callId:a,childSessionId:o,parentSessionId:i}),u;try{let e=n.attachSession(i),t=await findRemoteAgentBinding({callId:a,childSessionId:o,childStreamPath:l,parent:e});if(t===void 0)throw Error(`Remote subagent binding not found.`);u=t}catch{return Response.json({error:`Subagent stream not found.`,ok:!1},{status:404})}let d=readRemoteAgentStreamHeadersResolver(n);if(d===void 0)return Response.json({error:`Subagent stream proxy requires internal channel dispatch context.`,ok:!1},{status:500});let f;try{f=await d(u)}catch{return Response.json({error:`Subagent stream not found.`,ok:!1},{status:404})}let p=new URL(createEveSessionStreamRoutePath(o).replace(/^\/+/,``),`${u.url.replace(/\/+$/,``)}/`);s!==void 0&&p.searchParams.set(`startIndex`,String(s));let m=new URL(t.url).searchParams.get(EVE_STREAM_CONTROL_VERSION_QUERY);m!==null&&p.searchParams.set(EVE_STREAM_CONTROL_VERSION_QUERY,m),c&&p.searchParams.set(`includeTailIndex`,`1`);let h=await fetch(p,{cache:`no-store`,headers:f,redirect:`manual`,signal:t.signal}),g=proxyStreamHeaders(h.headers);return new Response(h.body,{headers:g,status:h.status,statusText:h.statusText})})],events:e.events,fetchFile:e.fetchFile,uploadPolicy:e.uploadPolicy})}export{eveChannel};
+import{internalSession}from"#channel/session.js";import{attachClientContext}from"#internal/client-context.js";import{createLogger,logError}from"#internal/logging.js";import{deliveryIdForIdempotencyKey}from"#channel/delivery-idempotency.js";import{validateSessionHistory}from"#shared/session-history.js";import{FAIL_CLOSED_FORWARDED_TRACE_ASSERTION,formatTraceContentCeiling}from"#shared/forwarded-trace-policy.js";import{EVE_CALLBACK_ROUTE_PATTERN,EVE_CONNECTION_CALLBACK_ROUTE_PATTERN,EVE_DESCENDANT_STREAM_ROUTE_PATTERN,EVE_HEALTH_ROUTE_PATH,EVE_INFO_ROUTE_PATH,EVE_ROUTE_PREFIX,EVE_SESSION_CANCEL_ROUTE_PATTERN,EVE_SESSION_CLEAR_ROUTE_PATTERN,EVE_SESSION_COMPACT_ROUTE_PATTERN,EVE_SESSION_RESET_ROUTE_PATTERN,EVE_SESSION_ROUTE_PATH,EVE_SESSION_ROUTE_PATTERN,EVE_SESSION_STREAM_ROUTE_PATTERN,EVE_SESSION_STUBS_ROUTE_PATTERN,EVE_SUBAGENT_STREAM_ROUTE_PATTERN,createEveSessionStreamRoutePath,createEveSubagentStreamRoutePath}from"#protocol/routes.js";import{EVE_SESSION_ID_HEADER}from"#protocol/session-http.js";import{DELETE,GET,HEAD,PATCH,POST,PUT,defineChannel}from"#public/definitions/channel.js";import{readMatchedStubRules,readStubFailure}from"#execution/tool-stubs/steps.js";import{checkUploadPolicy,createSessionStreamResponse,deriveOperationContinuationToken,parseCancelTurnBody,parseCreateBody,parseIncludeTailIndex,parseOptionalJsonRequest,parseResetBody,parseSessionControlBody,parseSessionMessageBody,parseStartIndex,requireSessionId}from"#eve-channel/request.js";import{deliveryResponse,findRemoteAgentBinding,healthResponse,resolveOnMessage,resolveTurnClientContext,sessionCommandErrorResponse}from"#eve-channel/support.js";import{proxyStreamResponse}from"#eve-channel/stream-headers.js";import{InvalidToolStubTargetError}from"#tool-stubs/validate-targets.js";import{getRun}from"#internal/workflow/runtime.js";import{descendantStreamResponse}from"#eve-channel/descendant-stream.js";import{handleExpiredLegacyAuthorization}from"#execution/legacy-session/authorization.js";import{resolveForwardedPrincipal}from"#channel/forwarded-principal.js";import{handleConnectionCallbackRequest}from"#execution/connections/callback-route.js";import{handleSessionCallbackRequest}from"#subagents/callback-route.js";import{WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest}from"#execution/workflow-webhook-route.js";import{readAgentInfoRouteResponse,readRemoteAgentStreamHeadersResolver,readRouteSessionCreator}from"#internal/nitro/routes/channel-route-context.js";import{parseTraceparent,readAgentDispatchTraceContext}from"#protocol/traceparent.js";import{readForwardedAudienceBaggage,readForwardedParentSessionBaggage}from"#protocol/baggage.js";import{agentDelegation}from"#tracing/eve/delegation.js";import{sessionAuthFromResult}from"#channel/auth/result.js";import{routeAuth}from"#public/channels/auth.js";import{defaultEveAudience}from"#eve-channel/audience.js";import{mergeUploadPolicy}from"#public/channels/upload-policy.js";import{REMOTE_AGENT_PROTOCOL_MISMATCH,REMOTE_AGENT_PROTOCOL_VERSION,formatEarlierRemoteChildStreamError}from"#protocol/remote-agent-protocol.js";export*from"#eve-channel/types.js";const log=createLogger(`eve.channel`);function createdSessionBody(e,t,n){let r={ok:!0,sessionId:e};return n!==void 0&&(r.deliveryId=n),t.callback!==void 0&&(r.status=`accepted`),t.protocolVersion!==void 0&&(r.protocolVersion=t.protocolVersion),r}function eveChannel(e){let t=mergeUploadPolicy(e.uploadPolicy);return defineChannel({cors:e.cors,turnPolicy:e.turnPolicy,audience:t=>{let n=e.audience??defaultEveAudience;return typeof n==`function`?n(t):n},routes:[GET(EVE_HEALTH_ROUTE_PATH,async()=>healthResponse()),HEAD(EVE_HEALTH_ROUTE_PATH,async()=>healthResponse()),GET(EVE_INFO_ROUTE_PATH,async(t,n)=>{let r=await routeAuth(t,e.auth);if(r instanceof Response)return r;let i=readAgentInfoRouteResponse(n);return i===void 0?Response.json({error:`Agent info route requires internal channel dispatch context.`,ok:!1},{status:500}):await i()}),GET(`${EVE_ROUTE_PREFIX}/connections/:name/callback/:token`,handleExpiredLegacyAuthorization),POST(`${EVE_ROUTE_PREFIX}/connections/:name/callback/:token`,handleExpiredLegacyAuthorization),GET(EVE_CONNECTION_CALLBACK_ROUTE_PATTERN,handleConnectionCallbackRequest),POST(EVE_CONNECTION_CALLBACK_ROUTE_PATTERN,handleConnectionCallbackRequest),POST(EVE_CALLBACK_ROUTE_PATTERN,handleSessionCallbackRequest),GET(WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest),POST(WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest),PUT(WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest),PATCH(WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest),DELETE(WORKFLOW_WEBHOOK_ROUTE_PATTERN,handleWorkflowWebhookRequest),POST(EVE_SESSION_ROUTE_PATH,async(n,r)=>{let i=await routeAuth(n,e.auth);if(i instanceof Response)return i;let a=sessionAuthFromResult(i),o=await parseOptionalJsonRequest(n);if(o instanceof Response)return o;if(o.stubs!==void 0&&i.allowToolStubs!==!0)return Response.json({ok:!1,error:`Tool stubbing is not permitted for this caller.`},{status:403});let s=await resolveForwardedPrincipal({trustedForwarders:e.trustedForwarders,forwarder:a,payload:o});if(s instanceof Response)return s;let c=parseCreateBody(o);if(c instanceof Response)return c;let l=c.callback===void 0?`absent`:readForwardedParentSessionBaggage(n.headers.get(`baggage`)),u;if(typeof l==`object`){if(l.callId!==c.callback?.callId)log.warn(`ignoring remote parent lineage with a mismatched callback`,{forwarder:i.principalId});else{let t=s.accepted;if(!t&&e.trustedForwarders!==void 0)try{t=await e.trustedForwarders(a,{})}catch(e){let t=logError(log,`trustedForwarders handler failed`,e,{forwarder:i.principalId});return Response.json({error:`trustedForwarders handler failed.`,errorId:t,ok:!1},{status:500})}t?u=l:log.warn(`ignoring remote parent lineage from an untrusted forwarder`,{forwarder:i.principalId})}}else l===`malformed`&&log.warn(`ignoring malformed remote parent lineage`,{forwarder:i.principalId});let d=c.callback===void 0?void 0:parseTraceparent(n.headers.get(`traceparent`)),f=c.callback===void 0?void 0:readAgentDispatchTraceContext(n.headers.get(`tracestate`),d)??d,p=checkUploadPolicy(c,t);if(p!==null)return p;if(c.operationId!==void 0&&s.auth.principalType===`anonymous`)return Response.json({error:`operationId requires an authenticated principal.`,ok:!1},{status:400});let m=c.operationId===void 0?void 0:await deriveOperationContinuationToken({auth:s.auth,operationId:c.operationId}),h=m===void 0?void 0:`delivery:${m}`;if(m!==void 0){let e=await r.resolveSession(m);if(e!==void 0)return Response.json(createdSessionBody(e.id,c,h),{headers:{"cache-control":`no-store`,[EVE_SESSION_ID_HEADER]:e.id},status:202})}let g=d===void 0?`absent`:readForwardedAudienceBaggage(n.headers.get(`baggage`)),_=s.accepted&&d!==void 0&&(d.traceFlags&1)==1?typeof g==`object`?g:g===`malformed`?FAIL_CLOSED_FORWARDED_TRACE_ASSERTION:void 0:void 0,v=f;_!==void 0&&f!==void 0&&(v={...f,forwardedTracePolicy:_}),g===`malformed`?log.warn(`using metadata-only policy for malformed forwarded audience baggage`,{forwarder:i.principalId}):typeof g==`object`&&(_===void 0?log.warn(`ignoring forwarded trace policy without an accepted sampled principal`,{forwarder:i.principalId}):log.info(`accepted forwarded trace policy`,{audience:g.originAudience,ceiling:formatTraceContentCeiling(g.ceiling),forwarder:i.principalId}));let y=c.message===void 0?{auth:s.auth,clientContext:resolveTurnClientContext(void 0,c.context)}:await resolveOnMessage({auth:s.auth,clientContext:c.context,config:e,invocation:u===void 0||c.operationId===void 0?void 0:{operationId:c.operationId},message:c.message,request:n});if(y instanceof Response)return y;let b=readRouteSessionCreator(r);if(b===void 0)return Response.json({error:`Session creation requires internal channel dispatch context.`,ok:!1},{status:500});let x=c.protocolVersion===void 0||c.protocolVersion===REMOTE_AGENT_PROTOCOL_VERSION?void 0:c.protocolVersion,S;try{S=await agentDelegation.receive({headers:n.headers,delegated:c.callback!==void 0,trusted:s.accepted,parent:u,callerTrace:f,parentTraceContext:v},({conversationId:e,parentTraceContext:t})=>b({deliveryId:h,audienceAuth:a,toolStubs:c.stubs===void 0?void 0:{rules:c.stubs,token:crypto.randomUUID()},auth:y.auth,capabilities:x===void 0?c.capabilities??{requestInput:!0}:{requestInput:!1},callback:c.callback,earlierCallerProtocol:x,continuationToken:m,initiatorAuth:s.accepted?s.initiatorAuth:void 0,input:attachClientContext({message:c.message,context:y.context,history:validateSessionHistory(`history`in y?y.history:void 0),outputSchema:c.outputSchema},y.clientContext),conversationId:e,parent:u,parentTraceContext:t,traceRoot:u===void 0?void 0:{kind:`own`},title:y.title}))}catch(e){if(e instanceof InvalidToolStubTargetError)return Response.json({error:e.message,ok:!1},{status:400});let t=logError(log,`session-create request failed`,e);return Response.json({error:`Failed to create the session.`,errorId:t,ok:!1},{status:500})}return Response.json(createdSessionBody(S.sessionId,c,h??S.deliveryId),{headers:{"cache-control":`no-store`,[EVE_SESSION_ID_HEADER]:S.sessionId},status:202})}),POST(EVE_SESSION_ROUTE_PATTERN,async(n,{attachSession:r,params:i})=>{let a=await routeAuth(n,e.auth);if(a instanceof Response)return a;let o=requireSessionId(i);if(o instanceof Response)return o;let s=await parseOptionalJsonRequest(n);if(s instanceof Response)return s;if(Object.keys(s).length===0)try{let e=await r(o).prewarm();return Response.json({ok:!0,...e},{headers:{"cache-control":`no-store`},status:e.status===`accepted`?202:200})}catch(e){let t=logError(log,`session-prewarm request failed`,e,{sessionId:o});return Response.json({ok:!1,error:`Failed to prewarm the session.`,errorId:t},{status:500})}let c=await resolveForwardedPrincipal({trustedForwarders:e.trustedForwarders,forwarder:sessionAuthFromResult(a),payload:s});if(c instanceof Response)return c;let l=parseSessionMessageBody(s);if(l instanceof Response)return l;let u=checkUploadPolicy(l,t);if(u!==null)return u;let d=resolveTurnClientContext(void 0,l.context),f,p,m,h=c.auth;if(l.message!==void 0){let t=await resolveOnMessage({auth:c.auth,clientContext:l.context,config:e,message:l.message,request:n,sessionId:o});if(t instanceof Response)return t;d=t.clientContext,f=t.context,p=t.history,m=t.title,h=t.auth}let g;try{let e=r(o),t=attachClientContext({auth:h,callback:l.callback,context:f,history:p,outputSchema:l.outputSchema,turnPolicy:l.turnPolicy,title:m,...l.idempotencyKey!==void 0&&{deliveryId:await deliveryIdForIdempotencyKey(l.idempotencyKey),idempotencyKey:l.idempotencyKey}},d);g=l.answers===void 0?await e.send(l.message,t):await e.respond(l.answers,t)}catch(e){let t=sessionCommandErrorResponse(e);if(t!==void 0)return t;let n=logError(log,`session-message request failed`,e,{sessionId:o});return Response.json({error:`Failed to send the session message.`,errorId:n,ok:!1},{status:500})}return deliveryResponse(g)}),POST(EVE_SESSION_CANCEL_ROUTE_PATTERN,async(t,{attachSession:n,params:r})=>{let i=await routeAuth(t,e.auth);if(i instanceof Response)return i;let a=requireSessionId(r);if(a instanceof Response)return a;let o=await parseCancelTurnBody(t);if(o instanceof Response)return o;let s;try{s=await n(a).cancel({auth:sessionAuthFromResult(i),turnId:o.turnId})}catch(e){let t=sessionCommandErrorResponse(e);if(t!==void 0)return t;let n=logError(log,`cancel-turn request failed`,e,{sessionId:a});return Response.json({error:`Failed to cancel the turn.`,errorId:n,ok:!1},{status:500})}return deliveryResponse(s)}),POST(EVE_SESSION_COMPACT_ROUTE_PATTERN,async(t,{attachSession:n,params:r})=>{let i=await routeAuth(t,e.auth);if(i instanceof Response)return i;let a=requireSessionId(r);if(a instanceof Response)return a;let o=await parseSessionControlBody(t);if(o instanceof Response)return o;let s;try{s=await n(a).compact({auth:sessionAuthFromResult(i)})}catch(e){let t=sessionCommandErrorResponse(e);if(t!==void 0)return t;let n=logError(log,`session-compaction request failed`,e,{sessionId:a});return Response.json({error:`Failed to compact the session.`,errorId:n,ok:!1},{status:500})}return deliveryResponse(s)}),POST(EVE_SESSION_CLEAR_ROUTE_PATTERN,async(t,{attachSession:n,params:r})=>{let i=await routeAuth(t,e.auth);if(i instanceof Response)return i;let a=requireSessionId(r);if(a instanceof Response)return a;let o=await parseSessionControlBody(t);if(o instanceof Response)return o;let s;try{s=await n(a).clear({auth:sessionAuthFromResult(i)})}catch(e){let t=sessionCommandErrorResponse(e);if(t!==void 0)return t;let n=logError(log,`session-clear request failed`,e,{sessionId:a});return Response.json({error:`Failed to clear the session context.`,errorId:n,ok:!1},{status:500})}return deliveryResponse(s)}),POST(EVE_SESSION_RESET_ROUTE_PATTERN,async(t,{attachSession:n,params:r})=>{let i=await routeAuth(t,e.auth);if(i instanceof Response)return i;let a=requireSessionId(r);if(a instanceof Response)return a;let o=await parseResetBody(t);if(o instanceof Response)return o;let s;try{s=await n(a).reset({auth:sessionAuthFromResult(i),reason:o.reason})}catch(e){let t=sessionCommandErrorResponse(e);if(t!==void 0)return t;let n=logError(log,`session-reset request failed`,e,{sessionId:a});return Response.json({error:`Failed to reset the session.`,errorId:n,ok:!1},{status:500})}return deliveryResponse(s)}),GET(EVE_SESSION_STUBS_ROUTE_PATTERN,async(t,{params:n})=>{let r=await routeAuth(t,e.auth);if(r instanceof Response)return r;if(r.allowToolStubs!==!0)return Response.json({error:`Tool stubbing is not permitted for this caller.`,ok:!1},{status:403});let i=requireSessionId(n);if(i instanceof Response)return i;try{return await getRun(i).exists?Response.json({error:await readStubFailure(i)??null,matchedRuleIds:await readMatchedStubRules(i)},{headers:{"cache-control":`no-store`}}):Response.json({error:`Session not found.`,ok:!1},{status:404})}catch(e){let t=logError(log,`tool-stub verification request failed`,e,{sessionId:i});return Response.json({error:`Failed to verify tool stubs.`,errorId:t,ok:!1},{status:500})}}),GET(EVE_SESSION_STREAM_ROUTE_PATTERN,async(t,{attachSession:n,params:r})=>{let i=await routeAuth(t,e.auth);if(i instanceof Response)return i;let a=requireSessionId(r);return a instanceof Response?a:await createSessionStreamResponse(t,n(a))}),GET(EVE_DESCENDANT_STREAM_ROUTE_PATTERN,async(t,n)=>{let r=await routeAuth(t,e.auth);if(r instanceof Response)return r;let i=requireSessionId(n.params);return i instanceof Response?i:descendantStreamResponse({request:t,root:n.attachSession(i),attachSession:n.attachSession,resolveHeaders:readRemoteAgentStreamHeadersResolver(n)})}),GET(EVE_SUBAGENT_STREAM_ROUTE_PATTERN,async(t,n)=>{let r=await routeAuth(t,e.auth);if(r instanceof Response)return r;let i=n.params.parentSessionId,a=n.params.callId,o=n.params.childSessionId;if(!i||!a||!o)return Response.json({error:`Missing subagent stream coordinates.`,ok:!1},{status:400});let s=parseStartIndex(t);if(s instanceof Response)return s;let c=parseIncludeTailIndex(t),l=createEveSubagentStreamRoutePath({callId:a,childSessionId:o,parentSessionId:i}),u;try{let e=n.attachSession(i),t=await findRemoteAgentBinding({callId:a,childSessionId:o,childStreamPath:l,parent:internalSession(e)});if(t===void 0)throw Error(`Remote subagent binding not found.`);u=t}catch{return Response.json({error:`Subagent stream not found.`,ok:!1},{status:404})}if(u.earlierProtocol!==void 0)return Response.json({code:REMOTE_AGENT_PROTOCOL_MISMATCH,error:formatEarlierRemoteChildStreamError({childVersion:u.earlierProtocol,name:u.name}),ok:!1},{status:409});let d=readRemoteAgentStreamHeadersResolver(n);if(d===void 0)return Response.json({error:`Subagent stream proxy requires internal channel dispatch context.`,ok:!1},{status:500});let f;try{f=await d(u)}catch{return Response.json({error:`Subagent stream not found.`,ok:!1},{status:404})}let p=new URL(createEveSessionStreamRoutePath(o).replace(/^\/+/,``),`${u.url.replace(/\/+$/,``)}/`);s!==void 0&&p.searchParams.set(`startIndex`,String(s)),c&&p.searchParams.set(`includeTailIndex`,`1`);let m=await fetch(p,{cache:`no-store`,headers:f,redirect:`manual`,signal:t.signal});return proxyStreamResponse(m)})],events:e.events,fetchFile:e.fetchFile,uploadPolicy:e.uploadPolicy})}export{eveChannel};

package/dist/src/eve-channel/request.d.ts

@@ -1,9 +1,9 @@
-import type { UserContent } from "ai";
+import { type MessageContent } from "#shared/message-content.js";
 import type { SessionAuthContext, SessionCallback, TurnPolicy } from "#channel/types.js";
 import type { Session } from "#channel/session.js";
 import type { ClientContextValue } from "#eve-channel/types.js";
 import { type UploadPolicy } from "#public/channels/upload-policy.js";
-import { type ValidatedInputResponse } from "#shared/input.js";
+import { type ValidatedAnswer } from "#shared/input.js";
 import { type JsonObject } from "#shared/json.js";
 import { type ParsedCreateBody } from "#eve-channel/create-request.js";
 /** Replay-stable identity for one authenticated create operation. */
@@ -14,15 +14,17 @@ export declare function deriveOperationContinuationToken(input: {
 export declare function parseCreateBody(input: Record<string, unknown>): ParsedCreateBody | Response;
 interface ParsedSessionMessageBody {
     callback?: SessionCallback;
-    message?: string | UserContent;
-    inputResponses?: readonly ValidatedInputResponse[];
+    /** Names the delivery: a repeat with the same key is the same delivery, with the same receipt. */
+    idempotencyKey?: string;
+    message?: MessageContent;
+    answers?: readonly ValidatedAnswer[];
     context?: ClientContextValue;
     outputSchema?: JsonObject;
     turnPolicy?: TurnPolicy;
 }
 export declare function parseSessionMessageBody(input: Record<string, unknown>): ParsedSessionMessageBody | Response;
 interface ParsedCancelTurnBody {
-    turnId?: string;
+    turnId?: string | null;
 }
 export declare function parseCancelTurnBody(req: Request): Promise<ParsedCancelTurnBody | Response>;
 export declare function parseResetBody(req: Request): Promise<{
@@ -30,7 +32,6 @@ export declare function parseResetBody(req: Request): Promise<{
 } | Response>;
 export declare function parseSessionControlBody(req: Request): Promise<Record<string, unknown> | Response>;
 export declare function parseOptionalJsonRequest(req: Request): Promise<Record<string, unknown> | Response>;
-export declare function rejectSessionContinuationToken(payload: Record<string, unknown>): Response | null;
 export declare function requireSessionId(params: Readonly<Record<string, string>>): string | Response;
 export declare function createSessionStreamResponse(request: Request, session: Session): Promise<Response>;
 export declare function checkUploadPolicy(body: ParsedCreateBody | ParsedSessionMessageBody, policy: UploadPolicy): Response | null;

package/dist/src/eve-channel/request.js

@@ -1,3 +1 @@
-import{isInputResponse}from"#shared/input.js";import{hasInternalRefScheme}from"#internal/attachments/url-refs.js";import{EVE_MESSAGE_STREAM_CONTENT_TYPE,EVE_MESSAGE_STREAM_FORMAT,EVE_MESSAGE_STREAM_VERSION,EVE_SESSION_ID_HEADER,EVE_STREAM_CONTROL_VERSION,EVE_STREAM_CONTROL_VERSION_QUERY,EVE_STREAM_FORMAT_HEADER,EVE_STREAM_LEASE_ENDED_CONTROL,EVE_STREAM_TAIL_INDEX_HEADER,EVE_STREAM_VERSION_HEADER}from"#protocol/message.js";import{parseJsonObject}from"#shared/json.js";import{LEGACY_REMOTE_AGENT_PROTOCOL_VERSION,splitLegacyTaskFields}from"#execution/legacy-remote-agent/protocol.js";import{collectUploadPolicyViolations,formatUploadPolicyViolation}from"#public/channels/upload-policy.js";import{strandedSessionResponse}from"#eve-channel/support.js";import{parseToolStubs}from"#tool-stubs/rules.js";import{parseSessionCallback}from"#channel/session-callback.js";import{isExpiredWorkflowRunError,isMissingWorkflowRunError}from"#internal/workflow/is-inactive-workflow-run-error.js";import{REMOTE_AGENT_PROTOCOL_MISMATCH,REMOTE_AGENT_PROTOCOL_VERSION,readRemoteAgentProtocolVersion}from"#protocol/remote-agent-protocol.js";import{parseTurnPolicyField}from"#eve-channel/turn-policy-request.js";import{validateMessageFreeCreate}from"#eve-channel/create-request.js";async function deriveOperationContinuationToken(e){let t=JSON.stringify([`eve:create-session:v1`,e.auth.authenticator,e.auth.issuer??null,e.auth.principalType,e.auth.principalId,e.operationId]),n=await crypto.subtle.digest(`SHA-256`,new TextEncoder().encode(t));return`eve:op:${Array.from(new Uint8Array(n),e=>e.toString(16).padStart(2,`0`)).join(``).slice(0,32)}`}function parseCreateBody(e){let t=splitLegacyTaskFields(e),{payload:n}=t;if(n.inputResponses!==void 0)return Response.json({error:`'inputResponses' is only accepted for an existing session.`,ok:!1},{status:400});let r=parseMessageField(n.message);if(r instanceof Response)return r;let i=parseClientContextField(n.clientContext);if(i instanceof Response)return i;let a=parseCallbackField(n.callback);if(a instanceof Response)return a;let o=a===void 0?void 0:parseProtocolVersionField(n.protocolVersion);if(o instanceof Response)return o;let s=parseCapabilitiesField(n.capabilities);if(s instanceof Response)return s;let c=parseOutputSchemaField(n.outputSchema);if(c instanceof Response)return c;let l=validateMessageFreeCreate({callback:a,hasClientContext:n.clientContext!==void 0,hasMessageField:`message`in n,message:r,outputSchema:c});if(l!==void 0)return l;let u=n.operationId;if(u!==void 0&&(typeof u!=`string`||!u))return Response.json({error:`Expected 'operationId' to be a non-empty string.`,ok:!1},{status:400});let d={callback:a,capabilities:s,context:i,outputSchema:c};if(n.stubs!==void 0)try{d.stubs=parseToolStubs(n.stubs)}catch(e){return Response.json({ok:!1,error:e instanceof Error?e.message:`Invalid tool stubs.`},{status:400})}return r!==void 0&&(d.message=r),typeof u==`string`&&(d.operationId=u),o!==void 0&&(d.protocolVersion=o),o===LEGACY_REMOTE_AGENT_PROTOCOL_VERSION&&(d.legacyRemoteAgentCaller=t.taskId===void 0?{}:{taskId:t.taskId}),d}function parseSessionMessageBody(e){let{payload:t}=splitLegacyTaskFields(e);if(Object.hasOwn(t,`stubs`))return Response.json({ok:!1,error:`Tool stubs are fixed at session creation.`},{status:400});let n=rejectSessionContinuationToken(t);if(n!==null)return n;let r=parseMessageField(t.message);if(r instanceof Response)return r;let i=parseCallbackField(t.callback);if(i instanceof Response)return i;let a=parseInputResponses$1(t.inputResponses);if(a instanceof Response)return a;let o=parseClientContextField(t.clientContext);if(o instanceof Response)return o;let s=parseOutputSchemaField(t.outputSchema);if(s instanceof Response)return s;let c=parseTurnPolicyField(t.turnPolicy);return c instanceof Response?c:r===void 0&&a===void 0?Response.json({error:`Expected a non-empty 'message' or a non-empty 'inputResponses' array.`,ok:!1},{status:400}):r!==void 0&&a!==void 0?Response.json({error:`'message' and 'inputResponses' are mutually exclusive.`,ok:!1},{status:400}):{callback:i,message:r,inputResponses:a,context:o,outputSchema:s,turnPolicy:c}}async function parseCancelTurnBody(e){let t=await parseOptionalJsonRequest(e);if(t instanceof Response)return t;let n=rejectSessionContinuationToken(t);if(n!==null)return n;let r=t.turnId;return r!==void 0&&(typeof r!=`string`||r.length===0)?Response.json({error:`Expected 'turnId' to be a non-empty string.`,ok:!1},{status:400}):typeof r==`string`?{turnId:r}:{}}async function parseResetBody(e){let t=await parseOptionalJsonRequest(e);if(t instanceof Response)return t;let n=rejectSessionContinuationToken(t);if(n!==null)return n;let r=t.reason;return r!==void 0&&(typeof r!=`string`||r.length===0)?Response.json({error:`Expected 'reason' to be a non-empty string.`,ok:!1},{status:400}):r===void 0?{}:{reason:r}}async function parseSessionControlBody(e){let t=await parseOptionalJsonRequest(e);return t instanceof Response?t:rejectSessionContinuationToken(t)??t}async function parseOptionalJsonRequest(e){let t;try{t=await e.text()}catch{return Response.json({error:`Unreadable request body.`,ok:!1},{status:400})}if(t.trim().length===0)return{};let n;try{n=JSON.parse(t)}catch{return Response.json({error:`Invalid JSON body.`,ok:!1},{status:400})}return typeof n!=`object`||!n||Array.isArray(n)?Response.json({error:`Expected a JSON object.`,ok:!1},{status:400}):n}function rejectSessionContinuationToken(e){return`continuationToken`in e?Response.json({error:`Session-ID routes do not accept 'continuationToken'.`,ok:!1},{status:400}):null}function requireSessionId(e){return e.sessionId||Response.json({error:`Missing session id.`,ok:!1},{status:400})}async function createSessionStreamResponse(e,t){let n=parseStartIndex(e);if(n instanceof Response)return n;let r=parseFollow(e),i=!r||parseIncludeTailIndex(e);try{let a=t.getEventStream({follow:r,startIndex:n});a.catch(()=>{});let o;if(i)try{o=await t.getStreamTailIndex()}catch(e){throw a.then(e=>e.cancel()).catch(()=>{}),e}let s=await a,c=new URL(e.url).searchParams.get(EVE_STREAM_CONTROL_VERSION_QUERY)===EVE_STREAM_CONTROL_VERSION?EVE_STREAM_CONTROL_VERSION:void 0,l=new Headers({"cache-control":`no-store, no-transform`,"content-type":EVE_MESSAGE_STREAM_CONTENT_TYPE,"x-accel-buffering":`no`,[EVE_SESSION_ID_HEADER]:t.id,[EVE_STREAM_FORMAT_HEADER]:EVE_MESSAGE_STREAM_FORMAT,[EVE_STREAM_VERSION_HEADER]:EVE_MESSAGE_STREAM_VERSION});return o!==void 0&&l.set(EVE_STREAM_TAIL_INDEX_HEADER,String(o)),new Response(serializeAsNdjson(s,e.signal,o===void 0?void 0:streamEventLimit(n,o),c!==void 0),{headers:l})}catch(e){let t=strandedSessionResponse(e);if(t!==void 0)return t;if(isExpiredWorkflowRunError(e))return Response.json({code:`session_expired`,error:`Session history is no longer available.`,ok:!1},{headers:{"cache-control":`no-store`},status:410});let n=isMissingWorkflowRunError(e);return Response.json({error:n?`Session not found.`:`Session stream unavailable.`,ok:!1},{status:n?404:503})}}function parseOutputSchemaField(e){if(e!==void 0)try{return parseJsonObject(e)}catch{return Response.json({error:`Expected 'outputSchema' to be a JSON-serializable object.`,ok:!1},{status:400})}}function parseCallbackField(e){if(e===void 0)return;let t=parseSessionCallback(e);return t.ok?t.callback:Response.json({error:t.message,ok:!1},{status:400})}function parseProtocolVersionField(e){if(e!==void 0&&typeof e!=`number`)return Response.json({error:`Expected 'protocolVersion' to be a number.`,ok:!1},{status:400});let t=readRemoteAgentProtocolVersion(e);return t===REMOTE_AGENT_PROTOCOL_VERSION||t===LEGACY_REMOTE_AGENT_PROTOCOL_VERSION?t:Response.json({code:REMOTE_AGENT_PROTOCOL_MISMATCH,error:`This deployment speaks eve remote agent protocol ${String(REMOTE_AGENT_PROTOCOL_VERSION)}, but the caller speaks protocol ${String(t)}. Upgrade both deployments to the same eve release.`,ok:!1,protocolVersion:REMOTE_AGENT_PROTOCOL_VERSION},{status:409})}function parseCapabilitiesField(e){if(e===void 0)return;if(typeof e!=`object`||!e||Array.isArray(e))return Response.json({error:`Expected 'capabilities' to be an object.`,ok:!1},{status:400});let t=Object.keys(e),n=Reflect.get(e,`requestInput`);return t.some(e=>e!==`requestInput`)||n!==void 0&&typeof n!=`boolean`?Response.json({error:`Expected 'capabilities.requestInput' to be a boolean when provided.`,ok:!1},{status:400}):n===void 0?{}:{requestInput:n}}function parseMessageField(e){if(e===void 0)return;if(typeof e==`string`)return e.length>0?e:void 0;if(!Array.isArray(e))return Response.json({error:`Expected 'message' to be a string or an array of text/file parts.`,ok:!1},{status:400});if(e.length===0)return;let t=[];for(let n of e){let e=parseMessagePart(n);if(e instanceof Response)return e;t.push(e)}return t}function parseMessagePart(e){if(typeof e!=`object`||!e)return Response.json({error:`Expected each message part to be an object.`,ok:!1},{status:400});let t=e;if(t.type===`text`)return typeof t.text!=`string`||t.text.length===0?Response.json({error:`Text parts require a non-empty 'text' string.`,ok:!1},{status:400}):{type:`text`,text:t.text};if(t.type===`file`){if(typeof t.mediaType!=`string`||t.mediaType.length===0)return Response.json({error:`File parts require a non-empty 'mediaType' string.`,ok:!1},{status:400});if(typeof t.data!=`string`)return Response.json({error:`File parts require a 'data' string (base64, data URL, or URL).`,ok:!1},{status:400});if(hasInternalRefScheme(t.data))return Response.json({error:`File part 'data' must not use a framework-internal ref scheme.`,ok:!1},{status:400});let e={type:`file`,mediaType:t.mediaType,data:t.data};return typeof t.filename==`string`&&t.filename.length>0&&(e.filename=t.filename),e}return Response.json({error:`Unsupported message part type "${String(t.type)}". Use 'text' or 'file'.`,ok:!1},{status:400})}function checkUploadPolicy(e,t){if(!e.message)return null;let n=collectUploadPolicyViolations(e.message,t);if(n.length===0)return null;let[r]=n;if(!r)return null;let i=r.kind===`too-large`?413:415;return Response.json({error:formatUploadPolicyViolation(r),ok:!1,violations:n.map(e=>e.kind===`too-large`?{byteLength:e.byteLength,filename:e.filename,kind:e.kind,limit:e.limit,mediaType:e.mediaType}:{allowedMediaTypes:e.allowedMediaTypes,filename:e.filename,kind:e.kind,mediaType:e.mediaType})},{status:i})}function parseInputResponses$1(e){if(e===void 0)return;if(!Array.isArray(e)||e.length===0)return Response.json({error:`Expected 'inputResponses' to be a non-empty array.`,ok:!1},{status:400});let t=e.filter(isInputResponse);return t.length===e.length?t:Response.json({error:`Expected every 'inputResponses' entry to match the HITL response schema.`,ok:!1},{status:400})}function parseClientContextField(e){if(e!==void 0){if(typeof e==`string`)return e.length>0?e:void 0;if(Array.isArray(e))return e.length===0?void 0:e.every(e=>typeof e==`string`&&e.length>0)?e:Response.json({error:`Expected 'clientContext' array entries to be non-empty strings.`,ok:!1},{status:400});if(typeof e!=`object`||!e)return Response.json({error:`Expected 'clientContext' to be a string, string array, or JSON object.`,ok:!1},{status:400});try{return parseJsonObject(e)}catch{return Response.json({error:`Expected 'clientContext' to be a JSON-serializable object.`,ok:!1},{status:400})}}}function parseIncludeTailIndex(e){let t=new URL(e.url).searchParams.get(`includeTailIndex`);return t===`1`||t===`true`}function parseFollow(e){let t=new URL(e.url).searchParams.get(`follow`);return t!==`0`&&t!==`false`}function parseStartIndex(e){let t=new URL(e.url).searchParams.get(`startIndex`);if(t===null)return;let n=Number(t);return!/^-?\d+$/.test(t)||!Number.isSafeInteger(n)?Response.json({error:`Expected startIndex to be an integer.`,ok:!1},{status:400}):n}function streamEventLimit(e,t){if(t===void 0)return;let n=e===void 0?0:e<0?Math.max(0,t+1+e):e;return Math.max(0,t-n+1)}function serializeAsNdjson(e,t,n,r=!1){let i=new TextEncoder,a=0,o,s,clearTimers=()=>{clearTimeout(o),clearTimeout(s),o=void 0,s=void 0},scheduleHeartbeat=e=>{clearTimeout(o),o=setTimeout(()=>{try{e.enqueue(i.encode(`
-`)),scheduleHeartbeat(e)}catch{clearTimers()}},1e4)},startLease=e=>{scheduleHeartbeat(e),s=setTimeout(()=>{clearTimers();try{e.enqueue(i.encode(`${JSON.stringify(EVE_STREAM_LEASE_ENDED_CONTROL)}\n`)),e.terminate()}catch{}},6e4)},c=new TransformStream({start(e){e.enqueue(i.encode(`
-`)),n===0?e.terminate():r&&startLease(e)},transform(e,t){t.enqueue(i.encode(`${JSON.stringify(e)}\n`)),a+=1,a===n?(clearTimers(),t.terminate()):r&&scheduleHeartbeat(t)},flush(){clearTimers()}});return e.pipeTo(c.writable,{signal:t}).catch(()=>{}).finally(clearTimers),c.readable}export{checkUploadPolicy,createSessionStreamResponse,deriveOperationContinuationToken,parseCancelTurnBody,parseCreateBody,parseIncludeTailIndex,parseOptionalJsonRequest,parseResetBody,parseSessionControlBody,parseSessionMessageBody,parseStartIndex,rejectSessionContinuationToken,requireSessionId};
+import{internalSession}from"#channel/session.js";import{MAX_DELIVERY_IDEMPOTENCY_KEY_LENGTH}from"#channel/delivery-idempotency.js";import{isAnswer}from"#shared/input.js";import{hasInternalRefScheme}from"#internal/attachments/url-refs.js";import{HEARTBEAT_RECORD,LEASE_ENDED_RECORD,STREAM_ENDED_RECORD}from"#protocol/session-events/envelope.js";import{EVE_MESSAGE_STREAM_CONTENT_TYPE,EVE_MESSAGE_STREAM_FORMAT,EVE_MESSAGE_STREAM_VERSION,EVE_SESSION_ID_HEADER,EVE_STREAM_FORMAT_HEADER,EVE_STREAM_TAIL_INDEX_HEADER,EVE_STREAM_VERSION_HEADER}from"#protocol/session-http.js";import{isV26Line}from"#protocol/v26-lines.js";import{parseJsonObject}from"#shared/json.js";import{sessionCommandErrorResponse}from"#eve-channel/support.js";import{isExpiredWorkflowRunError,isMissingWorkflowRunError}from"#internal/workflow/is-inactive-workflow-run-error.js";import{collectUploadPolicyViolations,formatUploadPolicyViolation}from"#public/channels/upload-policy.js";import{REMOTE_AGENT_PROTOCOL_MISMATCH,REMOTE_AGENT_PROTOCOL_VERSION,readRemoteAgentProtocolVersion,servesRemoteAgentCaller}from"#protocol/remote-agent-protocol.js";import{parseToolStubs}from"#tool-stubs/rules.js";import{MAX_MESSAGE_PARTS}from"#shared/message-content.js";import{v26LineStream}from"#execution/v26-history.js";import{parseSessionCallback}from"#channel/session-callback.js";import{parseTurnPolicyField}from"#eve-channel/turn-policy-request.js";import{validateMessageFreeCreate}from"#eve-channel/create-request.js";function rejectUnknownFields(e,t){let n=[];for(let r in e)if(Object.hasOwn(e,r)&&!t.includes(r)&&(n.push(r.length>128?`${r.slice(0,128)}…`:r),n.length===9))break;if(n.length===0)return;let r=n.slice(0,8).sort().map(e=>`'${JSON.stringify(e).slice(1,-1).replaceAll(`'`,`\\'`)}'`),i=n.length>8?` (additional unknown fields omitted)`:``;return Response.json({ok:!1,error:`Unknown field${n.length===1?``:`s`} ${r.join(`, `)}${i}. Accepted fields: ${t.length===0?`(none)`:t.join(`, `)}.`},{status:400})}async function deriveOperationContinuationToken(e){let t=JSON.stringify([`eve:create-session:v1`,e.auth.authenticator,e.auth.issuer??null,e.auth.principalType,e.auth.principalId,e.operationId]),n=await crypto.subtle.digest(`SHA-256`,new TextEncoder().encode(t));return`eve:op:${Array.from(new Uint8Array(n),e=>e.toString(16).padStart(2,`0`)).join(``).slice(0,32)}`}function parseCreateBody(e){let t=e.callback===void 0?void 0:parseProtocolVersionField(e.protocolVersion);if(t instanceof Response)return t;let n=[`message`,`clientContext`,`outputSchema`,`operationId`,`callback`,`protocolVersion`,`capabilities`,`stubs`,`forwardedPrincipal`];e.callback!==void 0&&n.push(`activityObserver`);let r=rejectUnknownFields(e,n);if(r!==void 0)return r;let i=e,a=parseMessageField(i.message);if(a instanceof Response)return a;let o=parseClientContextField(i.clientContext);if(o instanceof Response)return o;let s=parseCallbackField(i.callback);if(s instanceof Response)return s;let c=parseCapabilitiesField(i.capabilities);if(c instanceof Response)return c;let l=parseOutputSchemaField(i.outputSchema);if(l instanceof Response)return l;let u=validateMessageFreeCreate({callback:s,hasClientContext:i.clientContext!==void 0,hasMessageField:`message`in i,message:a,outputSchema:l});if(u!==void 0)return u;let d=i.operationId;if(d!==void 0&&(typeof d!=`string`||!d))return Response.json({error:`Expected 'operationId' to be a non-empty string.`,ok:!1},{status:400});let f={callback:s,capabilities:c,context:o,outputSchema:l};if(i.stubs!==void 0)try{f.stubs=parseToolStubs(i.stubs)}catch(e){return Response.json({ok:!1,error:e instanceof Error?e.message:`Invalid tool stubs.`},{status:400})}return a!==void 0&&(f.message=a),typeof d==`string`&&(f.operationId=d),t!==void 0&&(f.protocolVersion=t),f}function parseSessionMessageBody(e){let t=[`message`,`answers`,`clientContext`,`outputSchema`,`turnPolicy`,`callback`,`forwardedPrincipal`,`idempotencyKey`];e.callback!==void 0&&t.push(`activityObserver`);let n=rejectUnknownFields(e,t);if(n!==void 0)return n;let r=e,i=parseIdempotencyKeyField(r.idempotencyKey);if(i instanceof Response)return i;let a=parseMessageField(r.message);if(a instanceof Response)return a;let o=parseCallbackField(r.callback);if(o instanceof Response)return o;let s=parseAnswers$1(r.answers);if(s instanceof Response)return s;let c=parseClientContextField(r.clientContext);if(c instanceof Response)return c;let l=parseOutputSchemaField(r.outputSchema);if(l instanceof Response)return l;let u=parseTurnPolicyField(r.turnPolicy);return u instanceof Response?u:a===void 0&&s===void 0?Response.json({error:`Expected a non-empty 'message' or a non-empty 'answers' array.`,ok:!1},{status:400}):a!==void 0&&s!==void 0?Response.json({error:`'message' and 'answers' are mutually exclusive.`,ok:!1},{status:400}):{callback:o,message:a,answers:s,context:c,outputSchema:l,turnPolicy:u,...i!==void 0&&{idempotencyKey:i}}}function parseIdempotencyKeyField(e){if(e!==void 0)return typeof e!=`string`||e.length===0||e.length>MAX_DELIVERY_IDEMPOTENCY_KEY_LENGTH?Response.json({error:`Expected 'idempotencyKey' to be a nonempty string of at most ${String(MAX_DELIVERY_IDEMPOTENCY_KEY_LENGTH)} characters.`,ok:!1},{status:400}):e}async function parseCancelTurnBody(e){let t=await parseOptionalJsonRequest(e);if(t instanceof Response)return t;let n=rejectUnknownFields(t,[`turnId`]);if(n!==void 0)return n;let r=t.turnId;return r!=null&&(typeof r!=`string`||r.length===0)?Response.json({error:`Expected 'turnId' to be a non-empty string or null.`,ok:!1},{status:400}):r===null||typeof r==`string`?{turnId:r}:{}}async function parseResetBody(e){let t=await parseOptionalJsonRequest(e);if(t instanceof Response)return t;let n=rejectUnknownFields(t,[`reason`]);if(n!==void 0)return n;let r=t.reason;return r!==void 0&&(typeof r!=`string`||r.length===0)?Response.json({error:`Expected 'reason' to be a non-empty string.`,ok:!1},{status:400}):r===void 0?{}:{reason:r}}async function parseSessionControlBody(e){let t=await parseOptionalJsonRequest(e);return t instanceof Response?t:rejectUnknownFields(t,[])??t}async function parseOptionalJsonRequest(e){let t;try{t=await e.text()}catch{return Response.json({error:`Unreadable request body.`,ok:!1},{status:400})}if(t.trim().length===0)return{};let n;try{n=JSON.parse(t)}catch{return Response.json({error:`Invalid JSON body.`,ok:!1},{status:400})}return typeof n!=`object`||!n||Array.isArray(n)?Response.json({error:`Expected a JSON object.`,ok:!1},{status:400}):n}function requireSessionId(e){return e.sessionId||Response.json({error:`Missing session id.`,ok:!1},{status:400})}async function createSessionStreamResponse(e,t){let n=parseStartIndex(e);if(n instanceof Response)return n;let r=parseFollow(e),i=!r||parseIncludeTailIndex(e);try{let a=n===void 0||n>=0?internalSession(t).getLineStream({follow:r,startIndex:n??0}):void 0;a?.catch(()=>{});let o=startedOnEarlierEve(t),s;if(i||a===void 0)try{s=await internalSession(t).getStreamTailIndex()}catch(e){throw a?.then(e=>e.cancel()).catch(()=>{}),e}let c=a===void 0?Math.max(0,(s??-1)+1+(n??0)):n??0,l,u=i&&s!==void 0?Math.max(0,s-c+1):void 0;if(await o){a?.then(e=>e.cancel()).catch(()=>{});let e=r&&await internalSession(t).hasRunnableOwner();r&&!e&&(u=void 0),l=v26LineStream(await internalSession(t).getLineStream({follow:e,startIndex:0}),c)}else l=await(a??internalSession(t).getLineStream({follow:r,startIndex:c}));let d=new Headers({"cache-control":`no-store, no-transform`,"content-type":EVE_MESSAGE_STREAM_CONTENT_TYPE,"x-accel-buffering":`no`,[EVE_SESSION_ID_HEADER]:t.id,[EVE_STREAM_FORMAT_HEADER]:EVE_MESSAGE_STREAM_FORMAT,[EVE_STREAM_VERSION_HEADER]:EVE_MESSAGE_STREAM_VERSION});return i&&s!==void 0&&d.set(EVE_STREAM_TAIL_INDEX_HEADER,String(s)),new Response(serializeLines(l,e.signal,u),{headers:d})}catch(e){let t=sessionCommandErrorResponse(e);if(t!==void 0)return t;if(isExpiredWorkflowRunError(e))return Response.json({code:`session_expired`,error:`Session history is no longer available.`,ok:!1},{headers:{"cache-control":`no-store`},status:410});let n=isMissingWorkflowRunError(e);return Response.json({error:n?`Session not found.`:`Session stream unavailable.`,ok:!1},{status:n?404:503})}}async function startedOnEarlierEve(e){let t,n,r=(async()=>{n=(await internalSession(e).getLineStream({follow:!1,startIndex:0})).getReader();let{done:t,value:r}=await n.read();return!t&&isV26Line(r)})(),i=new Promise(e=>{t=setTimeout(()=>e(!1),5e3)});try{return await Promise.race([r,i])}catch{return!1}finally{clearTimeout(t),r.finally(()=>n?.cancel().catch(()=>{})).catch(()=>{})}}function parseOutputSchemaField(e){if(e!==void 0)try{return parseJsonObject(e)}catch{return Response.json({error:`Expected 'outputSchema' to be a JSON-serializable object.`,ok:!1},{status:400})}}function parseCallbackField(e){if(e===void 0)return;let t=parseSessionCallback(e);return t.ok?t.callback:Response.json({error:t.message,ok:!1},{status:400})}function parseProtocolVersionField(e){if(e!==void 0&&typeof e!=`number`)return Response.json({error:`Expected 'protocolVersion' to be a number.`,ok:!1},{status:400});let t=readRemoteAgentProtocolVersion(e);return servesRemoteAgentCaller(t)?t:Response.json({code:REMOTE_AGENT_PROTOCOL_MISMATCH,error:`This deployment speaks eve remote agent protocol ${String(REMOTE_AGENT_PROTOCOL_VERSION)}, but the caller speaks protocol ${String(t)}. Upgrade both deployments to the same eve release.`,ok:!1,protocolVersion:REMOTE_AGENT_PROTOCOL_VERSION},{status:409})}function parseCapabilitiesField(e){if(e===void 0)return;if(typeof e!=`object`||!e||Array.isArray(e))return Response.json({error:`Expected 'capabilities' to be an object.`,ok:!1},{status:400});let t=Object.keys(e),n=Reflect.get(e,`requestInput`);return t.some(e=>e!==`requestInput`)||n!==void 0&&typeof n!=`boolean`?Response.json({error:`Expected 'capabilities.requestInput' to be a boolean when provided.`,ok:!1},{status:400}):n===void 0?{}:{requestInput:n}}function parseMessageField(e){if(e===void 0)return;if(typeof e==`string`)return e.length>0?e:void 0;if(!Array.isArray(e))return Response.json({error:`Expected 'message' to be a string or an array of text/file parts.`,ok:!1},{status:400});if(e.length===0)return;if(e.length>MAX_MESSAGE_PARTS)return Response.json({ok:!1,error:`Expected at most ${MAX_MESSAGE_PARTS} message parts. Combine text or reduce attachments.`},{status:400});let t=[];for(let n of e){let e=parseMessagePart(n);if(e instanceof Response)return e;t.push(e)}return t}function parseMessagePart(e){if(typeof e!=`object`||!e)return Response.json({error:`Expected each message part to be an object.`,ok:!1},{status:400});let t=e;if(t.type===`text`)return typeof t.text!=`string`||t.text.length===0?Response.json({error:`Text parts require a non-empty 'text' string.`,ok:!1},{status:400}):{type:`text`,text:t.text};if(t.type===`file`){if(typeof t.mediaType!=`string`||t.mediaType.length===0)return Response.json({error:`File parts require a non-empty 'mediaType' string.`,ok:!1},{status:400});if(typeof t.data!=`string`)return Response.json({error:`File parts require a 'data' string (base64, data URL, or URL).`,ok:!1},{status:400});if(hasInternalRefScheme(t.data))return Response.json({error:`File part 'data' must not use a framework-internal ref scheme.`,ok:!1},{status:400});let e={type:`file`,mediaType:t.mediaType,data:t.data};return typeof t.filename==`string`&&t.filename.length>0?{...e,filename:t.filename}:e}return Response.json({error:`Unsupported message part type "${String(t.type)}". Use 'text' or 'file'.`,ok:!1},{status:400})}function checkUploadPolicy(e,t){if(!e.message)return null;let n=collectUploadPolicyViolations(e.message,t);if(n.length===0)return null;let[r]=n;if(!r)return null;let i=r.kind===`too-large`?413:415;return Response.json({error:formatUploadPolicyViolation(r),ok:!1,violations:n.map(e=>e.kind===`too-large`?{byteLength:e.byteLength,filename:e.filename,kind:e.kind,limit:e.limit,mediaType:e.mediaType}:{allowedMediaTypes:e.allowedMediaTypes,filename:e.filename,kind:e.kind,mediaType:e.mediaType})},{status:i})}function parseAnswers$1(e){if(e===void 0)return;if(!Array.isArray(e)||e.length===0)return Response.json({error:`Expected 'answers' to be a non-empty array.`,ok:!1},{status:400});let t=e.filter(isAnswer);return t.length===e.length?t:Response.json({error:`Expected every 'answers' entry to match the HITL response schema.`,ok:!1},{status:400})}function parseClientContextField(e){if(e!==void 0){if(typeof e==`string`)return e.length>0?e:void 0;if(Array.isArray(e))return e.length===0?void 0:e.every(e=>typeof e==`string`&&e.length>0)?e:Response.json({error:`Expected 'clientContext' array entries to be non-empty strings.`,ok:!1},{status:400});if(typeof e!=`object`||!e)return Response.json({error:`Expected 'clientContext' to be a string, string array, or JSON object.`,ok:!1},{status:400});try{return parseJsonObject(e)}catch{return Response.json({error:`Expected 'clientContext' to be a JSON-serializable object.`,ok:!1},{status:400})}}}function parseIncludeTailIndex(e){let t=new URL(e.url).searchParams.get(`includeTailIndex`);return t===`1`||t===`true`}function parseFollow(e){let t=new URL(e.url).searchParams.get(`follow`);return t!==`0`&&t!==`false`}function parseStartIndex(e){let t=new URL(e.url).searchParams.get(`startIndex`);if(t===null)return;let n=Number(t);return!/^-?\d+$/.test(t)||!Number.isSafeInteger(n)?Response.json({error:`Expected startIndex to be an integer.`,ok:!1},{status:400}):n}function serializeLines(e,t,n){let r=new TextEncoder,record=e=>r.encode(`${JSON.stringify(e)}\n`),i=0,a,o,clearTimers=()=>{clearTimeout(a),clearTimeout(o),a=void 0,o=void 0},scheduleHeartbeat=e=>{clearTimeout(a),a=setTimeout(()=>{try{e.enqueue(record(HEARTBEAT_RECORD)),scheduleHeartbeat(e)}catch{clearTimers()}},1e4)},s=new TransformStream({start(e){if(e.enqueue(record(HEARTBEAT_RECORD)),n===0){e.terminate();return}scheduleHeartbeat(e),o=setTimeout(()=>{clearTimers();try{e.enqueue(record(LEASE_ENDED_RECORD)),e.terminate()}catch{}},6e4)},transform(e,t){t.enqueue(record(e)),i+=1,i===n?(clearTimers(),t.terminate()):scheduleHeartbeat(t)},flush(e){clearTimers(),e.enqueue(record(STREAM_ENDED_RECORD))}});return e.pipeTo(s.writable,{signal:t}).catch(()=>{}).finally(clearTimers),s.readable}export{checkUploadPolicy,createSessionStreamResponse,deriveOperationContinuationToken,parseCancelTurnBody,parseCreateBody,parseIncludeTailIndex,parseOptionalJsonRequest,parseResetBody,parseSessionControlBody,parseSessionMessageBody,parseStartIndex,requireSessionId};

package/dist/src/eve-channel/stream-headers.d.ts

@@ -1 +1 @@
-export declare function proxyStreamHeaders(headers: Headers): Headers;
+export declare function proxyStreamResponse(upstream: Response): Response;

package/dist/src/eve-channel/stream-headers.js

@@ -1 +1 @@
-import{EVE_SESSION_ID_HEADER,EVE_STREAM_FORMAT_HEADER,EVE_STREAM_TAIL_INDEX_HEADER,EVE_STREAM_VERSION_HEADER}from"#protocol/message.js";function proxyStreamHeaders(e){let t=[`cache-control`,`content-type`,`x-accel-buffering`,EVE_SESSION_ID_HEADER,EVE_STREAM_FORMAT_HEADER,EVE_STREAM_TAIL_INDEX_HEADER,EVE_STREAM_VERSION_HEADER];return new Headers([...e].filter(([e])=>t.includes(e)))}export{proxyStreamHeaders};
+import{EVE_MESSAGE_STREAM_CONTENT_TYPE,EVE_SESSION_ID_HEADER,EVE_STREAM_FORMAT_HEADER,EVE_STREAM_TAIL_INDEX_HEADER,EVE_STREAM_VERSION_HEADER}from"#protocol/session-http.js";function proxyStreamResponse(e){let t=[`x-accel-buffering`,EVE_SESSION_ID_HEADER,EVE_STREAM_FORMAT_HEADER,EVE_STREAM_TAIL_INDEX_HEADER,EVE_STREAM_VERSION_HEADER],n=new Headers([...e.headers].filter(([e])=>t.includes(e))),r=e.ok?EVE_MESSAGE_STREAM_CONTENT_TYPE:`application/json`;return n.set(`content-type`,r),n.set(`x-content-type-options`,`nosniff`),n.set(`cache-control`,`no-store`),e.headers.get(`content-type`)?.split(`;`)[0]?.trim().toLowerCase()!==r.split(`;`)[0]||!e.ok&&e.status<400?(e.body?.cancel().catch(()=>{}),n.set(`content-type`,`application/json`),Response.json({ok:!1,code:`invalid_stream_response`,error:`Remote session stream returned an unexpected response type.`},{status:e.status>=400?e.status:502,headers:n})):new Response(e.body,{headers:n,status:e.status,statusText:e.statusText})}export{proxyStreamResponse};

package/dist/src/eve-channel/support.d.ts

@@ -1,34 +1,46 @@
-import type { UserContent } from "ai";
+import type { JsonValue } from "#shared/json.js";
+import type { MessageContent } from "#shared/message-content.js";
+import type { DeliveryReceipt } from "#protocol/delivery.js";
 import type { SessionAuthContext } from "#channel/types.js";
 import type { SessionHistoryMessage } from "#shared/session-history.js";
-import type { MessageStreamEvent } from "#protocol/message.js";
-import type { ChannelCors } from "#public/definitions/channel.js";
-import { type ClientContextValue, type EveChannelCors, type EveChannelInput, type EveHandle } from "#eve-channel/types.js";
+import { type ClientContextValue, type EveChannelConfig, type EveHandle } from "#eve-channel/types.js";
 export declare function healthResponse(): Response;
 /** Clients display the error text directly; keep operator details in structured fields. */
-export declare function strandedSessionResponse(error: unknown): Response | undefined;
+export declare function sessionCommandErrorResponse(error: unknown): Response | undefined;
+export declare function deliveryResponse(receipt: DeliveryReceipt): Response;
 /** Where a remote child the parent session recorded runs, and its credential key. */
 export interface RemoteAgentBinding {
     readonly forwardPrincipal?: boolean;
     readonly name: string;
     readonly resolverId?: string;
+    /**
+     * A dynamic remote agent's binding: what its credentials are built from again. Private: only
+     * the parent session's own state and steps carry it, never a request.
+     */
+    readonly dynamicBinding?: JsonValue;
     readonly url: string;
+    /** The child's remote agent protocol, when it speaks an earlier one. */
+    readonly earlierProtocol?: number;
 }
 interface RemoteAgentStreamCoordinates {
     readonly callId: string;
     readonly childSessionId: string;
     readonly childStreamPath: string;
 }
-/** Finds the remote child the parent session recorded for one proxy route, from its `agent.started` event. */
+/** Finds the remote child the parent session recorded for one proxy route, from its private binding. */
 export declare function findRemoteAgentBinding(input: RemoteAgentStreamCoordinates & {
     readonly parent: {
-        getEventStream(options?: {
-            startIndex?: number;
-        }): Promise<ReadableStream<MessageStreamEvent>>;
-        getStreamTailIndex(): Promise<number>;
+        getChildBinding?(childSessionId: string): Promise<{
+            readonly callId: string;
+            readonly name: string;
+            readonly resolverId?: string;
+            readonly dynamicBinding?: JsonValue;
+            readonly streamPath: string;
+            readonly url: string;
+            readonly earlierProtocol?: number;
+        } | undefined>;
     };
 }): Promise<RemoteAgentBinding | undefined>;
-export declare function normalizeEveCors(cors: EveChannelCors | undefined): ChannelCors;
 interface OnMessageOutcome {
     readonly auth: SessionAuthContext | null;
     /** Model-ready turn context: `onMessage`'s replacement, or the request's labeled entries. */
@@ -40,9 +52,9 @@ interface OnMessageOutcome {
 export declare function resolveOnMessage(input: {
     readonly auth: SessionAuthContext | null;
     readonly clientContext?: ClientContextValue;
-    readonly config: EveChannelInput;
+    readonly config: EveChannelConfig;
     readonly invocation?: EveHandle["invocation"];
-    readonly message: string | UserContent;
+    readonly message: MessageContent;
     readonly request: Request;
     readonly sessionId?: string;
 }): Promise<OnMessageOutcome | Response>;

package/dist/src/eve-channel/support.js

@@ -1,2 +1,2 @@
-import{createLogger,logError}from"#internal/logging.js";import{SessionStrandedError}from"#channel/session-stranded-error.js";import{defaultEveAuth}from"#eve-channel/types.js";import{workflowEntryReference}from"#execution/workflow-runtime.js";const log=createLogger(`eve.channel`);function healthResponse(){return Response.json({ok:!0,status:`ready`,workflowId:workflowEntryReference.workflowId})}function strandedSessionResponse(e){if(!SessionStrandedError.is(e))return;let t={code:`session_stranded`,error:`This session is no longer available.`,ok:!1};return e.owner.eveVersion!==void 0&&(t.eveVersion=e.owner.eveVersion),Response.json(t,{headers:{"cache-control":`no-store`},status:409})}async function findRemoteAgentBinding(e){let t=await e.parent.getStreamTailIndex();if(t<0)return;let n=(await e.parent.getEventStream({startIndex:0})).getReader();try{for(let r=0;r<=t;r+=1){let t=await n.read();if(t.done)break;let r=readRemoteAgentBinding(t.value,e);if(r!==void 0)return r}}finally{await n.cancel().catch(()=>{})}}function readRemoteAgentBinding(e,t){if(e.type!==`agent.started`)return;let{data:n}=e;if(n.callId===t.callId&&n.sessionId===t.childSessionId&&n.streamPath===t.childStreamPath&&n.remote!==void 0)return{name:n.name,...n.remote}}function normalizeEveCors(e){if(e===void 0||e===!1)return!1;if(e===!0)return!0;let t={};return e.origin!==void 0&&(t.origin=normalizeEveCorsOrigin(e.origin)),e.methods!==void 0&&(t.methods=e.methods),e.allowedHeaders!==void 0&&(t.allowHeaders=e.allowedHeaders),e.exposedHeaders!==void 0&&(t.exposeHeaders=e.exposedHeaders),e.credentials!==void 0&&(t.credentials=e.credentials),e.maxAge!==void 0&&(t.maxAge=e.maxAge),e.preflightStatus!==void 0&&(t.preflight={statusCode:e.preflightStatus}),t}function normalizeEveCorsOrigin(e){return e===`*`||e===`null`?e:typeof e==`string`?[e]:e}async function resolveOnMessage(e){let t=e.config.onMessage??defaultOnMessage,n;try{let r={caller:e.auth,clientContext:e.clientContext,request:e.request};if(n=await t({eve:e.sessionId===void 0?e.invocation===void 0?r:{...r,invocation:e.invocation}:{...r,sessionId:e.sessionId}},e.message),n==null)throw TypeError(`eveChannel onMessage must return an auth result.`)}catch(t){let n=logError(log,`onMessage handler failed`,t,{sessionId:e.sessionId});return Response.json({error:`onMessage handler failed.`,errorId:n,ok:!1},{status:500})}return{auth:n.auth,clientContext:resolveTurnClientContext(n.clientContext,e.clientContext),context:n.context,history:n.history,title:n.title}}function resolveTurnClientContext(e,t){let n=e===void 0?toContextEntries(t).map(e=>`Client context:
-${e}`):toContextEntries(e);return n.length===0?void 0:n}function toContextEntries(e){return e===void 0||e===``?[]:typeof e==`string`?[e]:Array.isArray(e)?e:[JSON.stringify(e)]}function defaultOnMessage(e){return{auth:defaultEveAuth(e)}}export{findRemoteAgentBinding,healthResponse,normalizeEveCors,resolveOnMessage,resolveTurnClientContext,strandedSessionResponse};
+import{createLogger,logError}from"#internal/logging.js";import{SessionNotActiveError}from"#channel/session-not-active-error.js";import{SessionStrandedError}from"#channel/session-stranded-error.js";import{EVE_SESSION_ID_HEADER}from"#protocol/session-http.js";import{defaultEveAuth}from"#eve-channel/types.js";import{workflowEntryReference}from"#execution/workflow-runtime.js";const log=createLogger(`eve.channel`);function healthResponse(){return Response.json({ok:!0,status:`ready`,workflowId:workflowEntryReference.workflowId})}function sessionCommandErrorResponse(e){if(SessionNotActiveError.is(e))return Response.json({ok:!1,code:e.retryable?`session_not_ready`:`session_not_active`,error:e.retryable?`The session is not ready to accept messages yet.`:`The session is no longer active.`},{headers:{"cache-control":`no-store`},status:409});if(!SessionStrandedError.is(e))return;let t={code:`session_stranded`,error:`This session is no longer available.`,ok:!1};return e.owner.eveVersion!==void 0&&(t.eveVersion=e.owner.eveVersion),Response.json(t,{headers:{"cache-control":`no-store`},status:409})}function deliveryResponse(e){return Response.json({ok:!0,sessionId:e.sessionId,deliveryId:e.deliveryId},{headers:{"cache-control":`no-store`,[EVE_SESSION_ID_HEADER]:e.sessionId},status:202})}async function findRemoteAgentBinding(e){let t=await e.parent.getChildBinding?.(e.childSessionId);if(t===void 0||t.callId!==e.callId||t.streamPath!==e.childStreamPath)return;let n={name:t.name,url:t.url};return t.resolverId!==void 0&&(n.resolverId=t.resolverId),t.dynamicBinding!==void 0&&(n.dynamicBinding=t.dynamicBinding),t.earlierProtocol!==void 0&&(n.earlierProtocol=t.earlierProtocol),n}async function resolveOnMessage(e){let t=e.config.onMessage??defaultOnMessage,n;try{let r={caller:e.auth,clientContext:e.clientContext,request:e.request};if(n=await t({eve:e.sessionId===void 0?e.invocation===void 0?r:{...r,invocation:e.invocation}:{...r,sessionId:e.sessionId}},e.message),n==null)throw TypeError(`eveChannel onMessage must return an auth result.`)}catch(t){let n=logError(log,`onMessage handler failed`,t,{sessionId:e.sessionId});return Response.json({error:`onMessage handler failed.`,errorId:n,ok:!1},{status:500})}return{auth:n.auth,clientContext:resolveTurnClientContext(n.clientContext,e.clientContext),context:n.context,history:n.history,title:n.title}}function resolveTurnClientContext(e,t){let n=e===void 0?toContextEntries(t).map(e=>`Client context:
+${e}`):toContextEntries(e);return n.length===0?void 0:n}function toContextEntries(e){return e===void 0||e===``?[]:typeof e==`string`?[e]:Array.isArray(e)?e:[JSON.stringify(e)]}function defaultOnMessage(e){return{auth:defaultEveAuth(e)}}export{deliveryResponse,findRemoteAgentBinding,healthResponse,resolveOnMessage,resolveTurnClientContext,sessionCommandErrorResponse};

package/dist/src/eve-channel/types.d.ts

@@ -1,11 +1,12 @@
-import type { UserContent } from "ai";
+import type { ChannelCors } from "#channel/cors.js";
+import type { MessageContent } from "#shared/message-content.js";
 import type { SessionAuthContext, TurnPolicy } from "#channel/types.js";
 import type { TrustedForwarders } from "#channel/forwarded-principal.js";
 import type { AuthFn } from "#public/channels/auth.js";
 import type { UploadPolicyInput } from "#public/channels/upload-policy.js";
 import type { FetchFileFunction } from "#shared/channel-definition.js";
 import type { JsonObject } from "#shared/json.js";
-import type { AudienceContext, Channel, ChannelContinuationOps, ChannelEvents, ChannelMethod } from "#public/definitions/channel.js";
+import type { AudienceContext, Channel, ChannelContinuationOps, ChannelEvents } from "#public/definitions/channel.js";
 import type { ChannelAudience } from "#shared/channel-audience.js";
 import type { SessionHistoryMessage } from "#shared/session-history.js";
 export type { ForwardedAssertion, TrustedForwarders } from "#channel/forwarded-principal.js";
@@ -17,30 +18,6 @@ export type { ForwardedAssertion, TrustedForwarders } from "#channel/forwarded-p
 export type EveEventContext = ChannelContinuationOps;
 /** Runtime stream-event handlers supported by `eveChannel({ events })`. */
 export type EveChannelEvents = ChannelEvents<EveEventContext>;
-export interface EveChannelCorsOptions {
-    /**
-     * Allowed request origin. Pass a single origin string, an exact-origin list,
-     * `"null"`, or `"*"`. Omit for `"*"`.
-     */
-    readonly origin?: "*" | "null" | string | readonly string[];
-    /** Methods emitted on preflight responses. Omit for `"*"`. */
-    readonly methods?: "*" | readonly ChannelMethod[];
-    /** Request headers emitted on preflight responses. Omit for `"*"`. */
-    readonly allowedHeaders?: "*" | readonly string[];
-    /** Response headers exposed to browser callers. Omit for `"*"`. */
-    readonly exposedHeaders?: "*" | readonly string[];
-    /** Whether to emit `access-control-allow-credentials: true`. */
-    readonly credentials?: boolean;
-    /** Max age, in seconds, emitted on preflight responses. */
-    readonly maxAge?: number | false;
-    /** Preflight response status code. Defaults to 204. */
-    readonly preflightStatus?: number;
-}
-/**
- * Higher-level CORS policy for the default eve HTTP channel. Pass `true` for
- * fully permissive browser access, or pass an options object to narrow it.
- */
-export type EveChannelCors = boolean | EveChannelCorsOptions;
 /**
  * Turn-scoped context: a string, an array of strings, or a JSON object. The same
  * shape the eve client sends as `clientContext`.
@@ -94,14 +71,14 @@ export type EveMessageResult = {
 export type EveMessageResultOrPromise = EveMessageResult | Promise<EveMessageResult>;
 /**
  * Default `onMessage` auth projection: returns {@link EveHandle.caller} unchanged as the
- * runtime session auth when {@link EveChannelInput.onMessage} is omitted. Call it from a custom `onMessage` to inherit the default while adding `context`.
+ * runtime session auth when {@link EveChannelConfig.onMessage} is omitted. Call it from a custom `onMessage` to inherit the default while adding `context`.
  */
 export declare function defaultEveAuth(ctx: EveMessageContext): SessionAuthContext | null;
 /**
  * Configuration for {@link eveChannel}. Only {@link auth} is required;
  * `uploadPolicy`, `onMessage`, and `events` refine the default HTTP behavior.
  */
-export interface EveChannelInput {
+export interface EveChannelConfig {
     /**
      * Route auth policy: a single {@link AuthFn} or an ordered array walked by {@link routeAuth}.
      * The first entry returning a {@link SessionAuthContext} wins; `null` / `undefined` skips to
@@ -170,7 +147,7 @@ export interface EveChannelInput {
      * CORS untouched, pass `true` for fully permissive CORS, or pass an options
      * object to narrow the policy.
      */
-    readonly cors?: EveChannelCors;
+    readonly cors?: ChannelCors;
     /** Policy for follow-up messages that arrive while a turn is active. */
     readonly turnPolicy?: TurnPolicy;
     /**
@@ -179,7 +156,7 @@ export interface EveChannelInput {
      * parks before session initialization. The first message supplies auth and context
      * for initialization and its first turn.
      */
-    readonly onMessage?: (ctx: EveMessageContext, message: string | UserContent) => EveMessageResultOrPromise;
+    readonly onMessage?: (ctx: EveMessageContext, message: MessageContent) => EveMessageResultOrPromise;
     /**
      * Runtime stream-event handlers for the default eve HTTP channel. Handlers receive
      * the event data, {@link EveEventContext}, and `SessionContext` (the same shape as custom channels).

package/dist/src/execution/agent-sessions/message.d.ts

@@ -0,0 +1,4 @@
+import type { JsonObject } from "#shared/json.js";
+import { type MessageContent, type MessagePart } from "#shared/message-content.js";
+/** Workflow messages carry references, not attachment bytes, through durable step inputs. */
+export declare function normalizeAgentMessage(message: MessageContent<string | URL>): string | readonly (MessagePart<string> & JsonObject)[];

package/dist/src/execution/agent-sessions/message.js

@@ -0,0 +1 @@
+import{MAX_MESSAGE_PARTS}from"#shared/message-content.js";function normalizeAgentMessage(e){if(typeof e==`string`){if(e.trim()===``)throw TypeError(`ctx.agent().send() requires a non-empty message.`);return e}if(!Array.isArray(e)||e.length===0||e.length>MAX_MESSAGE_PARTS)throw TypeError(`ctx.agent().send() requires text or between 1 and 64 text/file parts.`);let t=e.map(e=>{if(e.type===`text`&&typeof e.text==`string`)return{type:`text`,text:e.text};let invalidFile=()=>TypeError(`ctx.agent().send() file parts require an HTTP(S) URL, not inline bytes or base64.`);if(e.type!==`file`||typeof e.data!=`string`&&!(e.data instanceof URL))throw invalidFile();let t;try{t=new URL(String(e.data))}catch{throw invalidFile()}if(t.protocol!==`http:`&&t.protocol!==`https:`)throw invalidFile();let n={type:`file`,data:t.href,mediaType:e.mediaType};return e.filename!==void 0&&(n.filename=e.filename),n});if(!t.some(e=>e.type===`file`||e.text.trim()!==``))throw TypeError(`ctx.agent().send() requires a non-empty message.`);return t}export{normalizeAgentMessage};

package/dist/src/execution/agent-sessions/metadata.js

@@ -1 +1 @@
-import{ParentSessionKey,SessionDynamicSubagentSelectionsKey,TurnDynamicSubagentSelectionsKey}from"#context/keys.js";import{BundleKey}from"#runtime/sessions/runtime-context-keys.js";import{AGENT_TOOL_NAME}from"#tools/framework/agent-contract.js";function resolveWorkflowAgentMetadata(e){let t=e.get(BundleKey);if(t===void 0)return{};let n=new Map;t.nodeId===void 0&&e.get(ParentSessionKey)===void 0&&n.set(AGENT_TOOL_NAME,{description:t.resolvedAgent.config?.description??``});for(let[e,r]of t.subagentRegistry.subagentsByName??[]){let t=r.definition.description;t!==void 0&&n.set(e,{description:t})}let r=effectiveDynamicSelections(e);for(let e of Object.values(r))e!==null&&n.set(e.prepared.name,{description:e.kind===`subagent`?e.agentConfig.description:e.remoteAgent.description});return Object.fromEntries(n)}function effectiveDynamicSelections(e){return{...e.get(SessionDynamicSubagentSelectionsKey),...e.get(TurnDynamicSubagentSelectionsKey)}}export{resolveWorkflowAgentMetadata};
+import{ParentSessionKey}from"#context/keys.js";import{BundleKey}from"#runtime/sessions/runtime-context-keys.js";import{readDynamicSubagentSelections}from"#reactions/kinds/subagent.js";import{AGENT_TOOL_NAME}from"#tools/framework/agent-contract.js";function resolveWorkflowAgentMetadata(e){let t=e.get(BundleKey);if(t===void 0)return{};let n=new Map;t.nodeId===void 0&&e.get(ParentSessionKey)===void 0&&n.set(AGENT_TOOL_NAME,{description:t.resolvedAgent.config?.description??``});for(let[e,r]of t.subagentRegistry.subagentsByName??[]){let t=r.definition.description;t!==void 0&&n.set(e,{description:t})}for(let t of Object.values(readDynamicSubagentSelections(e)))n.set(t.prepared.name,{description:t.kind===`subagent`?t.agentConfig.description:t.remoteAgent.description});return Object.fromEntries(n)}export{resolveWorkflowAgentMetadata};

package/dist/src/execution/agent-sessions/remote-credentials.d.ts

@@ -0,0 +1,19 @@
+import type { DynamicRemoteBinding } from "#reactions/remote.js";
+import type { RemoteAgentCredentials } from "#runtime/subagents/dynamic-remote-agent-config.js";
+import type { ResolvedDynamicSubagentResolver } from "#runtime/subagents/registry.js";
+/**
+ * Builds a dynamic remote agent's credentials from the binding its child was opened with: the
+ * definition runs again with the session as the binding holds it, and memos return the bound
+ * results without running. The destination it returns must be the one the child was opened at,
+ * or the request fails rather than send credentials elsewhere.
+ */
+export declare function remoteAgentCredentials(input: {
+    readonly resolvers: readonly ResolvedDynamicSubagentResolver[];
+    readonly nodeId: string;
+    readonly binding: DynamicRemoteBinding | undefined;
+    readonly destination: {
+        readonly name: string;
+        readonly url: string;
+    };
+    readonly abortSignal?: AbortSignal;
+}): Promise<RemoteAgentCredentials>;

package/dist/src/execution/agent-sessions/remote-credentials.js

@@ -0,0 +1 @@
+import{emptySessionView,foldLine}from"#protocol/session-projection/fold.js";import{snapshotOf}from"#protocol/session-projection/session-view.js";import{streamSessionLines}from"#execution/session-event-stream.js";import{openMemos}from"#reactions/records.js";import{latestTurn}from"#reactions/turn.js";import{normalizeDynamicRemoteAgent}from"#runtime/subagents/dynamic-remote-agent-config.js";async function remoteAgentCredentials(e){let t=e.resolvers.find(({nodeId:t})=>t===e.nodeId),{binding:n}=e;if(t===void 0||n===void 0)throw Error(`Remote agent "${e.destination.name}" carries credentials, but this deployment can't build them from what the session kept for its child.`);let r=t.logicalPath,i=await foldSessionViewTo(n.session.id,n.position),a=openMemos({abortSignal:e.abortSignal??new AbortController().signal,kept:n.memos,label:r,restoring:`a remote agent's credentials are built from the memos its child was opened with, and this memo isn't one of them. Key the memo on what the child was opened with`,scope:`subagent:${e.nodeId}`,sessionId:n.session.id}),o={channel:n.channel,...n.conversation!==void 0&&{conversation:n.conversation},now:new Date(n.at),session:n.session,turn:latestTurn(i),view:snapshotOf(i),memo:a.memo,messages:async()=>{throw Error(`"${r}" read ctx.messages() while eve rebuilt a remote agent's credentials for its child, where the conversation as it was isn't available. Decide from the conversation inside a memo, so the child keeps the decision.`)},model:{id:n.model??``}},s;try{s=await t.evaluate(o)}finally{a.close()}if(s==null||s.kind!==`remote`)throw destinationChanged(e.destination.name);let c=await normalizeDynamicRemoteAgent({name:t.name,value:s});if(t.name!==e.destination.name||c.config.url!==e.destination.url)throw destinationChanged(e.destination.name);return c.credentials??{}}function destinationChanged(e){return Error(`Remote agent "${e}" now resolves to another destination than the one its child was opened at, so eve doesn't send its credentials. Open a new child.`)}async function foldSessionViewTo(e,t){let n=emptySessionView();for await(let{line:r,position:i}of streamSessionLines(e,{follow:!1})){if(i>t)break;r!==void 0&&foldLine(n,r,i)}return n}export{remoteAgentCredentials};

package/dist/src/execution/agent-sessions/remote.d.ts

@@ -1,3 +1,4 @@
+import type { MessageContent } from "#shared/message-content.js";
 import { type ResetResponse } from "#protocol/reset-session.js";
 import type { CancelTurnResult, SessionAuthContext, SessionCapabilities } from "#channel/types.js";
 import type { ChannelAudience } from "#shared/channel-audience.js";
@@ -5,14 +6,20 @@ import { type SubagentParentContext } from "#subagents/invocation.js";
 import type { HarnessSession } from "#harness/types.js";
 import type { RuntimeRemoteAgentDispatchRequest } from "#shared/action-types.js";
 import type { RuntimeSubagentRegistry } from "#runtime/subagents/registry.js";
-import type { DynamicRemoteAgentConfig } from "#runtime/subagents/dynamic-remote-agent-config.js";
+import type { DynamicRemoteAgentConfig, RemoteAgentCredentials } from "#runtime/subagents/dynamic-remote-agent-config.js";
+import type { DynamicRemoteBinding } from "#reactions/remote.js";
+import type { JsonValue } from "#shared/json.js";
 import type { CompiledRuntimeAgentBundle } from "#runtime/sessions/compiled-agent-cache.js";
 import type { RemoteAgentBinding } from "#eve-channel/support.js";
-import type { InputResponse } from "#shared/input.js";
+import type { Answer } from "#shared/input.js";
 import type { ResolvedRuntimeRemoteAgentNode } from "#runtime/types.js";
 import type { JsonObject } from "#shared/json.js";
 type RemoteAgentSessionCoordinates = {
     readonly sessionId: string;
+    /** The first message's delivery, which earlier-protocol receivers don't name. */
+    readonly deliveryId?: string;
+    /** The child's protocol, when it speaks an earlier one: its result arrives, nothing else. */
+    readonly earlierProtocol?: number;
 };
 export declare function startRemoteAgentSession(input: {
     readonly action: RuntimeRemoteAgentDispatchRequest;
@@ -41,7 +48,12 @@ export declare function respondToRemoteAgentSession(input: {
     };
     readonly headers: Record<string, string>;
     readonly auth: SessionAuthContext | null | undefined;
-    readonly responses: readonly InputResponse[];
+    /**
+     * Names this set of answers, so a retried step's repeat is the same delivery to the child.
+     * Only a child on this protocol accepts it.
+     */
+    readonly idempotencyKey?: string;
+    readonly responses: readonly Answer[];
 }): Promise<void>;
 /** Continues one remote-agent session by its immutable session ID. */
 export declare function continueRemoteAgentSession(input: {
@@ -53,11 +65,20 @@ export declare function continueRemoteAgentSession(input: {
         readonly token: string;
         readonly url: string;
     };
-    readonly message: string;
+    readonly earlierProtocol?: number;
+    /**
+     * Names this message, so a retried step's repeat is the same delivery and returns the same
+     * receipt. Only a child on this protocol accepts it.
+     */
+    readonly idempotencyKey?: string;
+    readonly message: MessageContent<string | URL>;
     readonly outputSchema?: JsonObject;
     readonly remote: ResolvedRuntimeRemoteAgentNode;
     readonly sessionId: string;
-}): Promise<void>;
+}): Promise<{
+    readonly sessionId: string;
+    readonly deliveryId?: string;
+}>;
 export declare function cancelRemoteAgentTurn(input: {
     readonly remote: Pick<ResolvedRuntimeRemoteAgentNode, "auth" | "headers" | "name" | "url">;
     readonly sessionId: string;
@@ -70,6 +91,8 @@ export declare function resetRemoteAgentSession(input: {
 }): Promise<ResetResponse>;
 export declare function resolveRemoteAgentForAction(input: {
     readonly dynamicRemoteAgent?: DynamicRemoteAgentConfig;
+    /** A dynamic remote agent's credentials, built again from its child's binding. */
+    readonly credentials?: RemoteAgentCredentials;
     readonly nodeId: string;
     readonly registry: RuntimeSubagentRegistry["subagentsByNodeId"];
     readonly remoteAgentName: string;
@@ -77,19 +100,18 @@ export declare function resolveRemoteAgentForAction(input: {
 /**
  * Resolves authored outbound headers for a server-authored remote child event.
  *
- * `resolverId` is the key persisted on the `agent.started` event (see
- * `AgentStartedStreamEvent`): it identifies the authored credential
- * functions, never their resolved values. Lookup order mirrors how dispatch
- * chose the key — first as a subagent node id (static remote definition),
- * then as a `credentialsStepId` in the step registry (dynamic remote
- * definition). The matched static definition must still agree with the
- * event's `name`/`url`, so a stale or mismatched key fails closed rather
- * than minting headers for the wrong upstream.
+ * `resolverId` is the key the parent's private child binding records: the subagent's node id,
+ * never resolved credentials. A static remote agent's definition must still agree with the
+ * event's `name`/`url`, and a dynamic one's credentials are built again from the binding the
+ * child was opened with, for the same destination, so a stale or mismatched key fails closed
+ * rather than minting headers for the wrong upstream.
  */
 export declare function resolveRemoteAgentStreamHeaders(input: {
     readonly bundle: CompiledRuntimeAgentBundle;
     readonly name: string;
     readonly resolverId?: string;
     readonly url: string;
+    /** A dynamic remote agent's binding, from the parent's binding for the child. */
+    readonly dynamicBinding?: JsonValue | DynamicRemoteBinding;
 }): Promise<Record<string, string>>;
 export {};

package/dist/src/execution/agent-sessions/remote.js

@@ -1 +1 @@
-import{z}from"#compiled/zod/index.js";import{decisionToTraceContentCeiling}from"#shared/forwarded-trace-policy.js";import{expectFunction,expectObjectRecord}from"#internal/authored-module.js";import{createEveCallbackRoutePath,createEveSessionCancelRoutePath,createEveSessionResetRoutePath,createEveSessionRoutePath}from"#protocol/routes.js";import{CancelTurnResponseSchema}from"#protocol/cancel-turn.js";import{ResetResponseSchema}from"#protocol/reset-session.js";import{formatTraceparent,writeAgentDispatchTracestate}from"#protocol/traceparent.js";import{writeForwardedAudienceBaggage,writeForwardedParentSessionBaggage}from"#protocol/baggage.js";import{agentDelegation}from"#tracing/eve/delegation.js";import{REMOTE_AGENT_PROTOCOL_MISMATCH,REMOTE_AGENT_PROTOCOL_VERSION,UNVERSIONED_REMOTE_AGENT_PROTOCOL,formatRemoteAgentProtocolMismatch,readRemoteAgentProtocolVersion}from"#protocol/remote-agent-protocol.js";import{FatalError}from"#compiled/@workflow/core/index.js";import{createWorkflowCallbackUrl}from"#execution/workflow-callback-url.js";import{createRemoteAgentRouteUrl}from"#subagents/remote-route-url.js";import{formatSubagentInput}from"#subagents/invocation.js";import{writeConversationBaggage}from"#tracing/eve/conversation-context.js";const CreateSessionResponseSchema=z.object({ok:z.literal(!0),protocolVersion:z.number().optional(),sessionId:z.string().min(1),status:z.literal(`accepted`)}),UNKNOWN_REMOTE_OUTCOME=`The request may have completed on the remote agent. Do not retry automatically; check the remote outcome before sending the request again.`;async function startRemoteAgentSession(e){let t=e.parent?.continuationToken??e.session.continuationToken;if(!t)throw Error(`Cannot dispatch remote agent without a parent continuation token.`);if(!e.callbackBaseUrl)throw Error(`Cannot dispatch remote agent without a callback base URL.`);let n=buildForwardedPrincipalField(e),r={capabilities:e.capabilities??{},callback:{callId:e.action.callId,subagentName:e.action.remoteAgentName,token:t,url:createWorkflowCallbackUrl(e.callbackBaseUrl,createEveCallbackRoutePath(t))},message:formatRemoteAgentCallInputMessage({action:e.action,remote:e.remote}),outputSchema:e.action.input.outputSchema,protocolVersion:REMOTE_AGENT_PROTOCOL_VERSION};n!==void 0&&(r.forwardedPrincipal=n),e.operationId!==void 0&&(r.operationId=e.operationId);let i=await resolveRemoteAgentRequestHeaders(e.remote),a=formatTraceparent(e.parent?.traceContext);a!==void 0&&setHeader(i,`traceparent`,a),setHeader(i,`tracestate`,writeAgentDispatchTracestate(readHeader(i,`tracestate`),e.parent?.traceContext));let o=writeForwardedAudienceBaggage(readHeader(i,`baggage`),buildForwardedTraceAssertion({forwardedPrincipal:n,originAudience:e.originAudience,parentTraceContext:e.parent?.traceContext,traceparent:a})),s=writeConversationBaggage(o,e.parent?.conversationId);setHeader(i,`baggage`,writeForwardedParentSessionBaggage(s,e.parent?.lineage));let c=await agentDelegation.fetch(createRemoteAgentSessionUrl(e.remote),{body:JSON.stringify(r),headers:{"content-type":`application/json`,...i},method:`POST`});if(!c.ok)throw await throwIfRemoteAgentProtocolMismatch(c,e.action.remoteAgentName),Error(`Remote agent "${e.action.remoteAgentName}" create-session request failed with HTTP ${c.status}.`);let l;try{l=await c.json()}catch{throw new FatalError(`Remote agent "${e.action.remoteAgentName}" create-session response was not valid JSON. ${UNKNOWN_REMOTE_OUTCOME}`)}let u=CreateSessionResponseSchema.safeParse(l);if(!u.success)throw new FatalError(`Remote agent "${e.action.remoteAgentName}" create-session response was invalid. ${UNKNOWN_REMOTE_OUTCOME}`);let d=readRemoteAgentProtocolVersion(u.data.protocolVersion);if(d!==REMOTE_AGENT_PROTOCOL_VERSION&&d!==UNVERSIONED_REMOTE_AGENT_PROTOCOL)throw new FatalError(`${formatRemoteAgentProtocolMismatch({name:e.action.remoteAgentName,receiverVersion:d})} ${UNKNOWN_REMOTE_OUTCOME} Remote session: ${u.data.sessionId}.`);return{sessionId:u.data.sessionId}}async function throwIfRemoteAgentProtocolMismatch(e,t){let n;try{n=await e.json()}catch{return}if(typeof n!=`object`||!n||Reflect.get(n,`code`)!==REMOTE_AGENT_PROTOCOL_MISMATCH)return;let r=readRemoteAgentProtocolVersion(Reflect.get(n,`protocolVersion`));throw new FatalError(formatRemoteAgentProtocolMismatch({name:t,receiverVersion:r}))}function buildForwardedTraceAssertion(e){let t=decisionToTraceContentCeiling(e.parentTraceContext?.decision);if(e.forwardedPrincipal!==void 0&&e.parentTraceContext!==void 0&&(e.parentTraceContext.traceFlags&1)==1&&e.traceparent!==void 0&&t!==void 0)return{ceiling:t,originAudience:e.originAudience??`unknown`}}async function respondToRemoteAgentSession(e){let t=await fetch(createRemoteAgentRouteUrl(e.remote.url,createEveSessionRoutePath(e.remote.sessionId)),{body:JSON.stringify({inputResponses:e.responses,...e.remote.forwardPrincipal===!0&&e.auth!=null&&{forwardedPrincipal:{current:e.auth}}}),headers:{"content-type":`application/json`,...e.headers},method:`POST`,redirect:`error`});if(!t.ok)throw Error(`Remote agent "${e.remote.name}" input answer failed with HTTP ${t.status}.`)}async function continueRemoteAgentSession(e){let t=buildForwardedPrincipalField(e),n={callback:e.callback,message:e.message,outputSchema:e.outputSchema};t!==void 0&&(n.forwardedPrincipal=t);let r=await fetch(createRemoteAgentContinueUrl(e.remote,e.sessionId),{body:JSON.stringify(n),headers:{"content-type":`application/json`,...await resolveRemoteAgentRequestHeaders(e.remote)},method:`POST`});if(!r.ok){let n=r.status===400&&t!==void 0?` The receiver may support forwarded principals only on session creation; upgrade it before retrying.`:``;throw Error(`Remote agent "${e.remote.name}" continue-session request failed with HTTP ${r.status}.${n}`)}}function buildForwardedPrincipalField(e){if(e.remote.forwardPrincipal!==!0||e.auth===null||e.auth===void 0)return;let t={current:e.auth};return e.initiatorAuth!==null&&e.initiatorAuth!==void 0&&(t.initiator=e.initiatorAuth),t}async function cancelRemoteAgentTurn(e){let t=await fetch(createRemoteAgentCancelTurnUrl(e.remote,e.sessionId),{headers:await resolveRemoteAgentRequestHeaders(e.remote),method:`POST`});if(!t.ok)throw Error(`Remote agent "${e.remote.name}" cancel-turn request failed with HTTP ${t.status}.`);let n;try{n=await t.json()}catch{throw Error(`Remote agent "${e.remote.name}" cancel-turn response was not valid JSON.`)}let r=CancelTurnResponseSchema.safeParse(n);if(!r.success||r.data.status===`accepted`&&r.data.sessionId!==e.sessionId)throw Error(`Remote agent "${e.remote.name}" cancel-turn response was invalid.`);return r.data.status===`accepted`?{sessionId:r.data.sessionId,status:`accepted`}:{status:`no_active_turn`}}function readHeader(e,t){let n=Object.keys(e).find(e=>e.toLowerCase()===t);return n===void 0?void 0:e[n]}function setHeader(e,t,n){for(let n of Object.keys(e))n.toLowerCase()===t&&delete e[n];n!==void 0&&(e[t]=n)}async function resetRemoteAgentSession(e){let t=await resolveRemoteAgentRequestHeaders(e.remote),n=await fetch(createRemoteAgentRouteUrl(e.remote.url,createEveSessionResetRoutePath(e.sessionId)),{body:JSON.stringify({reason:e.reason}),headers:{"content-type":`application/json`,...t},method:`POST`});if(!n.ok)throw Error(`Remote agent "${e.remote.name}" reset-session request failed with HTTP ${n.status}.`);let r=ResetResponseSchema.safeParse(await n.json());if(!r.success||r.data.status===`reset`&&r.data.previousSessionId!==e.sessionId)throw Error(`Remote agent "${e.remote.name}" reset-session response was invalid.`);return r.data}function resolveRemoteAgentForAction(e){let t=e.registry.get(e.nodeId)?.definition;if(e.dynamicRemoteAgent!==void 0){if(t===void 0)throw new FatalError(`Missing remote agent "${e.remoteAgentName}" in runtime registry.`);let n=resolveDynamicRemoteAgentCredentials(e.dynamicRemoteAgent),r=e.dynamicRemoteAgent,i={description:r.description,kind:`remote`,logicalPath:t.logicalPath,name:e.remoteAgentName,nodeId:e.nodeId,path:r.path,sourceId:t.sourceId,sourceKind:`module`,url:r.url};return r.forwardPrincipal!==void 0&&(i.forwardPrincipal=r.forwardPrincipal),n.auth!==void 0&&(i.auth=n.auth),n.headers!==void 0&&(i.headers=n.headers),i}if(t?.kind!==`remote`)throw new FatalError(`Missing remote agent "${e.remoteAgentName}" in runtime registry.`);return t}async function resolveRemoteAgentStreamHeaders(e){if(e.resolverId===void 0)return{};let t=new Set([e.bundle.graph.root,...e.bundle.graph.nodesByNodeId.values()]);for(let n of t){let t=n.subagentRegistry.subagentsByNodeId.get(e.resolverId)?.definition;if(t!==void 0){if(t.kind!==`remote`||t.name!==e.name||t.url!==e.url)throw Error(`Remote child stream resolver does not match the authored remote agent.`);return await resolveRemoteAgentRequestHeaders(t)}}return await resolveRemoteAgentRequestHeaders(resolveDynamicRemoteAgentCredentials({credentialsStepId:e.resolverId,description:``,path:``,url:e.url}))}function resolveDynamicRemoteAgentCredentials(e){if(e.credentialsStepId===void 0)return{};let t=getStepRegistry().get(e.credentialsStepId);if(t===void 0)throw Error(`Dynamic remote subagent credentials function "${e.credentialsStepId}" is not registered.`);let n=expectObjectRecord(t(),`Dynamic remote subagent credentials are invalid.`),r={};return n.auth!==void 0&&(r.auth=expectFunction(n.auth,`Dynamic remote subagent auth is invalid.`)),n.headers!==void 0&&(r.headers=resolveDynamicRemoteAgentHeaders(n.headers)),r}function resolveDynamicRemoteAgentHeaders(e){if(typeof e==`function`)return e;let t=expectObjectRecord(e,`Dynamic remote subagent headers are invalid.`);for(let e of Object.values(t))if(typeof e!=`string`)throw Error(`Dynamic remote subagent headers are invalid.`);return t}function getStepRegistry(){let e=Symbol.for(`@workflow/core//registeredSteps`),t=globalThis,n=t[e];return n===void 0&&(n=new Map,t[e]=n),n}function createRemoteAgentSessionUrl(e){return createRemoteAgentRouteUrl(e.url,e.path)}function createRemoteAgentCancelTurnUrl(e,t){return createRemoteAgentRouteUrl(e.url,createEveSessionCancelRoutePath(t))}function createRemoteAgentContinueUrl(e,t){return createRemoteAgentRouteUrl(e.url,createEveSessionRoutePath(t))}async function resolveRemoteAgentRequestHeaders(e){let t={};return e.headers!==void 0&&Object.assign(t,typeof e.headers==`function`?await e.headers():e.headers),e.auth!==void 0&&Object.assign(t,(await e.auth()).headers),t}function formatRemoteAgentCallInputMessage(e){let t=typeof e.action.input.message==`string`?e.action.input.message:``;return formatSubagentInput({description:e.remote.description,message:t,name:e.action.remoteAgentName,type:`remote`}).message}export{cancelRemoteAgentTurn,continueRemoteAgentSession,resetRemoteAgentSession,resolveRemoteAgentForAction,resolveRemoteAgentStreamHeaders,respondToRemoteAgentSession,startRemoteAgentSession};
+import{z}from"#compiled/zod/index.js";import{decisionToTraceContentCeiling}from"#shared/forwarded-trace-policy.js";import{createEveCallbackRoutePath,createEveSessionCancelRoutePath,createEveSessionResetRoutePath,createEveSessionRoutePath}from"#protocol/routes.js";import{formatTraceparent,writeAgentDispatchTracestate}from"#protocol/traceparent.js";import{writeForwardedAudienceBaggage,writeForwardedParentSessionBaggage}from"#protocol/baggage.js";import{agentDelegation}from"#tracing/eve/delegation.js";import{REMOTE_AGENT_PROTOCOL_MISMATCH,REMOTE_AGENT_PROTOCOL_VERSION,V26_INPUT_REMOTE_AGENT_PROTOCOL,callbackUrlForProtocol,formatRemoteAgentProtocolMismatch,readRemoteAgentProtocolVersion,servesRemoteAgentCaller}from"#protocol/remote-agent-protocol.js";import{normalizeAgentMessage}from"#execution/agent-sessions/message.js";import{FatalError}from"#compiled/@workflow/core/index.js";import{CancelTurnResponseSchema}from"#protocol/cancel-turn.js";import{ResetResponseSchema}from"#protocol/reset-session.js";import{createWorkflowCallbackUrl}from"#execution/workflow-callback-url.js";import{createRemoteAgentRouteUrl}from"#subagents/remote-route-url.js";import{formatSubagentInput}from"#subagents/invocation.js";import{remoteAgentCredentials}from"#execution/agent-sessions/remote-credentials.js";import{writeConversationBaggage}from"#tracing/eve/conversation-context.js";const DeliveryReceiptResponseSchema=z.object({ok:z.literal(!0),sessionId:z.string().min(1),deliveryId:z.string().min(1)}),ProtocolRejectionSchema=z.object({code:z.literal(REMOTE_AGENT_PROTOCOL_MISMATCH),ok:z.unknown().optional(),protocolVersion:z.unknown().optional(),sessionId:z.unknown().optional()}),RemoteCancelResponseSchema=z.union([DeliveryReceiptResponseSchema.transform(({sessionId:e})=>({sessionId:e,status:`accepted`})),CancelTurnResponseSchema]),RemoteResetResponseSchema=z.union([DeliveryReceiptResponseSchema.transform(({sessionId:e})=>({ok:!0,previousSessionId:e,status:`reset`})),ResetResponseSchema]),CreateSessionResponseSchema=z.object({ok:z.literal(!0),protocolVersion:z.number().optional(),sessionId:z.string().min(1)}).and(z.union([z.object({deliveryId:z.string().min(1)}),z.object({status:z.literal(`accepted`)})])),UNKNOWN_REMOTE_OUTCOME=`The request may have completed on the remote agent. Do not retry automatically; check the remote outcome before sending the request again.`;async function startRemoteAgentSession(e){let t=e.parent?.continuationToken??e.session.continuationToken;if(!t)throw Error(`Cannot dispatch remote agent without a parent continuation token.`);if(!e.callbackBaseUrl)throw Error(`Cannot dispatch remote agent without a callback base URL.`);let n=buildForwardedPrincipalField(e),r={capabilities:e.capabilities??{},callback:{callId:e.action.callId,subagentName:e.action.remoteAgentName,token:t,url:callbackUrlForProtocol(createWorkflowCallbackUrl(e.callbackBaseUrl,createEveCallbackRoutePath(t)),REMOTE_AGENT_PROTOCOL_VERSION)},message:formatRemoteAgentCallInputMessage({action:e.action,remote:e.remote}),outputSchema:e.action.input.outputSchema,protocolVersion:REMOTE_AGENT_PROTOCOL_VERSION};n!==void 0&&(r.forwardedPrincipal=n),e.operationId!==void 0&&(r.operationId=e.operationId);let post=async()=>{let t=await resolveRemoteAgentRequestHeaders(e.remote),i=formatTraceparent(e.parent?.traceContext);i!==void 0&&setHeader(t,`traceparent`,i),setHeader(t,`tracestate`,writeAgentDispatchTracestate(readHeader(t,`tracestate`),e.parent?.traceContext));let a=writeForwardedAudienceBaggage(readHeader(t,`baggage`),buildForwardedTraceAssertion({forwardedPrincipal:n,originAudience:e.originAudience,parentTraceContext:e.parent?.traceContext,traceparent:i})),o=writeConversationBaggage(a,e.parent?.conversationId);return setHeader(t,`baggage`,writeForwardedParentSessionBaggage(o,e.parent?.lineage)),agentDelegation.fetch(createRemoteAgentSessionUrl(e.remote),{body:JSON.stringify(r),headers:{"content-type":`application/json`,...t},method:`POST`})},i=await post(),a=i.ok?void 0:await readProtocolRejection(i);if(i.status===409&&a?.refusedBeforeAdmission&&servesRemoteAgentCaller(a.version)&&a.version<REMOTE_AGENT_PROTOCOL_VERSION&&(r.protocolVersion=a.version,r.callback.url=callbackUrlForProtocol(r.callback.url,a.version),i=await post(),a=i.ok?void 0:await readProtocolRejection(i)),!i.ok)throw a?new FatalError(formatRemoteAgentProtocolMismatch({name:e.action.remoteAgentName,receiverVersion:a.version})):Error(`Remote agent "${e.action.remoteAgentName}" create-session request failed with HTTP ${i.status}.`);let o;try{o=await i.json()}catch{throw new FatalError(`Remote agent "${e.action.remoteAgentName}" create-session response was not valid JSON. ${UNKNOWN_REMOTE_OUTCOME}`)}let s=CreateSessionResponseSchema.safeParse(o);if(!s.success)throw new FatalError(`Remote agent "${e.action.remoteAgentName}" create-session response was invalid. ${UNKNOWN_REMOTE_OUTCOME}`);let c=readRemoteAgentProtocolVersion(s.data.protocolVersion);if(!servesRemoteAgentCaller(c))throw new FatalError(`${formatRemoteAgentProtocolMismatch({name:e.action.remoteAgentName,receiverVersion:c})} ${UNKNOWN_REMOTE_OUTCOME} Remote session: ${s.data.sessionId}.`);return c===REMOTE_AGENT_PROTOCOL_VERSION?`deliveryId`in s.data?{deliveryId:s.data.deliveryId,sessionId:s.data.sessionId}:{sessionId:s.data.sessionId}:{earlierProtocol:c,sessionId:s.data.sessionId}}async function readProtocolRejection(e){let t=ProtocolRejectionSchema.safeParse(await e.json().catch(()=>void 0));if(t.success)return{version:readRemoteAgentProtocolVersion(t.data.protocolVersion),refusedBeforeAdmission:t.data.ok===!1&&t.data.sessionId===void 0&&typeof t.data.protocolVersion==`number`}}function buildForwardedTraceAssertion(e){let t=decisionToTraceContentCeiling(e.parentTraceContext?.decision);if(e.forwardedPrincipal!==void 0&&e.parentTraceContext!==void 0&&(e.parentTraceContext.traceFlags&1)==1&&e.traceparent!==void 0&&t!==void 0)return{ceiling:t,originAudience:e.originAudience??`unknown`}}async function respondToRemoteAgentSession(e){let t=await fetch(createRemoteAgentRouteUrl(e.remote.url,createEveSessionRoutePath(e.remote.sessionId)),{body:JSON.stringify({...e.remote.earlierProtocol===V26_INPUT_REMOTE_AGENT_PROTOCOL?{inputResponses:e.responses.map(({interactionId:e,optionId:t,text:n})=>({requestId:e,...t!==void 0&&{optionId:t},...n!==void 0&&{text:n}}))}:{answers:e.responses},...e.remote.earlierProtocol===void 0&&e.idempotencyKey!==void 0&&{idempotencyKey:e.idempotencyKey},...e.remote.forwardPrincipal===!0&&e.auth!=null&&{forwardedPrincipal:{current:e.auth}}}),headers:{"content-type":`application/json`,...e.headers},method:`POST`,redirect:`error`});if(!t.ok)throw Error(`Remote agent "${e.remote.name}" input answer failed with HTTP ${t.status}.`)}async function continueRemoteAgentSession(e){let t=buildForwardedPrincipalField(e),n={callback:{...e.callback,url:callbackUrlForProtocol(e.callback.url,e.earlierProtocol??REMOTE_AGENT_PROTOCOL_VERSION)},message:e.message,outputSchema:e.outputSchema};e.earlierProtocol===void 0&&e.idempotencyKey!==void 0&&(n.idempotencyKey=e.idempotencyKey),t!==void 0&&(n.forwardedPrincipal=t);let r=await fetch(createRemoteAgentContinueUrl(e.remote,e.sessionId),{body:JSON.stringify(n),headers:{"content-type":`application/json`,...await resolveRemoteAgentRequestHeaders(e.remote)},method:`POST`});if(!r.ok){let n=r.status===400&&t!==void 0?` The receiver may support forwarded principals only on session creation; upgrade it before retrying.`:``;throw Error(`Remote agent "${e.remote.name}" continue-session request failed with HTTP ${r.status}.${n}`)}if(e.earlierProtocol!==void 0)return{sessionId:e.sessionId};let i=DeliveryReceiptResponseSchema.safeParse(await r.json().catch(()=>null));if(!i.success)throw Error(`Remote agent "${e.remote.name}" continue-session response was not a delivery receipt. The message may have been accepted.`);return{deliveryId:i.data.deliveryId,sessionId:i.data.sessionId}}function buildForwardedPrincipalField(e){if(e.remote.forwardPrincipal!==!0||e.auth===null||e.auth===void 0)return;let t={current:e.auth};return e.initiatorAuth!==null&&e.initiatorAuth!==void 0&&(t.initiator=e.initiatorAuth),t}async function cancelRemoteAgentTurn(e){let t=await fetch(createRemoteAgentCancelTurnUrl(e.remote,e.sessionId),{headers:await resolveRemoteAgentRequestHeaders(e.remote),method:`POST`});if(!t.ok)throw Error(`Remote agent "${e.remote.name}" cancel-turn request failed with HTTP ${t.status}.`);let n;try{n=await t.json()}catch{throw Error(`Remote agent "${e.remote.name}" cancel-turn response was not valid JSON.`)}let r=RemoteCancelResponseSchema.safeParse(n);if(!r.success||r.data.status===`accepted`&&r.data.sessionId!==e.sessionId)throw Error(`Remote agent "${e.remote.name}" cancel-turn response was invalid.`);return r.data.status===`accepted`?{sessionId:r.data.sessionId,status:`accepted`}:{status:`no_active_turn`}}function readHeader(e,t){let n=Object.keys(e).find(e=>e.toLowerCase()===t);return n===void 0?void 0:e[n]}function setHeader(e,t,n){for(let n of Object.keys(e))n.toLowerCase()===t&&delete e[n];n!==void 0&&(e[t]=n)}async function resetRemoteAgentSession(e){let t=await resolveRemoteAgentRequestHeaders(e.remote),n=await fetch(createRemoteAgentRouteUrl(e.remote.url,createEveSessionResetRoutePath(e.sessionId)),{body:JSON.stringify({reason:e.reason}),headers:{"content-type":`application/json`,...t},method:`POST`});if(!n.ok)throw Error(`Remote agent "${e.remote.name}" reset-session request failed with HTTP ${n.status}.`);let r=RemoteResetResponseSchema.safeParse(await n.json());if(!r.success||r.data.status===`reset`&&r.data.previousSessionId!==e.sessionId)throw Error(`Remote agent "${e.remote.name}" reset-session response was invalid.`);return r.data}function resolveRemoteAgentForAction(e){let t=e.registry.get(e.nodeId)?.definition;if(e.dynamicRemoteAgent!==void 0){if(t===void 0)throw new FatalError(`Missing remote agent "${e.remoteAgentName}" in runtime registry.`);let n=e.dynamicRemoteAgent,r={description:n.description,kind:`remote`,logicalPath:t.logicalPath,name:e.remoteAgentName,nodeId:e.nodeId,path:n.path,sourceId:t.sourceId,sourceKind:`module`,url:n.url};return n.forwardPrincipal!==void 0&&(r.forwardPrincipal=n.forwardPrincipal),e.credentials?.auth!==void 0&&(r.auth=e.credentials.auth),e.credentials?.headers!==void 0&&(r.headers=e.credentials.headers),r}if(t?.kind!==`remote`)throw new FatalError(`Missing remote agent "${e.remoteAgentName}" in runtime registry.`);return t}async function resolveRemoteAgentStreamHeaders(e){if(e.resolverId===void 0)return{};let t=new Set([e.bundle.graph.root,...e.bundle.graph.nodesByNodeId.values()]);for(let n of t){let{dynamicNodeIds:t,dynamicResolvers:r}=n.subagentRegistry;if(t.has(e.resolverId))return e.dynamicBinding===void 0?{}:await resolveRemoteAgentRequestHeaders(await remoteAgentCredentials({binding:e.dynamicBinding,destination:{name:e.name,url:e.url},nodeId:e.resolverId,resolvers:r}));let i=n.subagentRegistry.subagentsByNodeId.get(e.resolverId)?.definition;if(i!==void 0){if(i.kind!==`remote`||i.name!==e.name||i.url!==e.url)throw Error(`Remote child stream resolver does not match the authored remote agent.`);return await resolveRemoteAgentRequestHeaders(i)}}throw Error(`This remote child's stream doesn't match an authored remote agent.`)}function createRemoteAgentSessionUrl(e){return createRemoteAgentRouteUrl(e.url,e.path)}function createRemoteAgentCancelTurnUrl(e,t){return createRemoteAgentRouteUrl(e.url,createEveSessionCancelRoutePath(t))}function createRemoteAgentContinueUrl(e,t){return createRemoteAgentRouteUrl(e.url,createEveSessionRoutePath(t))}async function resolveRemoteAgentRequestHeaders(e){let t={};return e.headers!==void 0&&Object.assign(t,typeof e.headers==`function`?await e.headers():e.headers),e.auth!==void 0&&Object.assign(t,(await e.auth()).headers),t}function formatRemoteAgentCallInputMessage(e){let t=normalizeAgentMessage(e.action.input.message);return formatSubagentInput({description:e.remote.description,message:t,name:e.action.remoteAgentName,type:`remote`}).message}export{cancelRemoteAgentTurn,continueRemoteAgentSession,resetRemoteAgentSession,resolveRemoteAgentForAction,resolveRemoteAgentStreamHeaders,respondToRemoteAgentSession,startRemoteAgentSession};

package/dist/src/execution/agent-sessions/requests.d.ts

@@ -1,13 +1,13 @@
-import type { SubagentAuthorizationEventHookPayload, SubagentInputRequestHookPayload } from "#channel/types.js";
+import type { SubagentInteractionHookPayload } from "#channel/types.js";
 import type { WorkflowToolRunRef } from "#execution/tools/workflow/messages.js";
 import type { WorkflowToolRunInbox } from "#execution/tools/workflow/owner.js";
 import type { RemoteAgentBinding } from "#eve-channel/support.js";
-/** A child's question or sign-in, which only a person at the root can answer. */
-export type AgentSessionRequest = SubagentAuthorizationEventHookPayload | SubagentInputRequestHookPayload;
+/** A child's interaction fact, which the session that owns the run mirrors up to the root. */
+export type AgentSessionRequest = SubagentInteractionHookPayload;
 /**
- * Sends a child's question or sign-in to the session that owns the run, which
- * proxies it up the owner chain to the root. Answers route back down to the
- * child by request id.
+ * Sends a child's interaction fact to the session that owns the run, which proxies it up the
+ * owner chain to the root. Answers route back down to the child by interaction id; a remote
+ * child's answers go to its remote session.
  */
 export declare function forwardAgentSessionRequest(input: {
     readonly from: WorkflowToolRunRef;