managed-deepagents 0.0.3-dev.25 → 0.0.3-dev.29

package/dist/runtime/managed-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-middleware.js","sourceRoot":"","sources":["../../src/runtime/managed-middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAiB5B,wFAAwF;AACxF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,aAAa;IACb,aAAa;IACb,YAAY;IACZ,YAAY;CACb,CAAC,CAAC;AAEH,sEAAsE;AACtE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;AAE9D;;;;;;GAMG;AACH,SAAS,cAAc,CACrB,OAAsC,EACtC,GAAoB;IAEpB,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;QACtC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE;QAC9B,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAMD,SAAS,iBAAiB,CACxB,MAAc,EACd,KAAc,EACd,GAAoB;IAEpB,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,KAAoB,CAAC;QAChC,OAAO,CAAC,KAAc,EAAE,OAA2B,EAAE,EAAE,CACrD,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,IAAI,OAAQ,KAAyB,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,KAAwB,CAAC;QAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QACzB,OAAO;YACL,GAAG,QAAQ;YACX,IAAI,EAAE,CAAC,KAAc,EAAE,OAA2B,EAAE,EAAE,CACpD,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;SACvD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CACnB,MAAc,EACd,KAAc,EACd,GAAoB;IAEpB,MAAM,EAAE,GAAG,KAAe,CAAC;IAC3B,OAAO,CAAC,OAAwB,EAAE,OAAgB,EAAE,EAAE,CACpD,EAAE,CAAC,IAAI,CACL,MAAM,EACN,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAC9D,OAAO,CACR,CAAC;AACN,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAa,EACb,GAAoB;IAEpB,OAAO,IAAI,KAAK,CAAC,UAAU,EAAE;QAC3B,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACtD,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gCAAgC,CAC9C,UAAwB,EACxB,GAAoB;IAEpB,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/runtime/managed-tools.d.ts

@@ -0,0 +1,61 @@
+import type { ToolRuntime } from "@langchain/core/tools";
+import type { IdentityConfig, RuntimeIdentity } from "../identity.js";
+import { type CredentialsProvider } from "./credentials.js";
+import type { RuntimeConfigLike } from "./identity-runtime.js";
+export type { RuntimeConfigLike } from "./identity-runtime.js";
+/**
+ * A LangChain/LangGraph tool from MDA's perspective: the only surface the runtime
+ * seam touches is `invoke(input, runtime)`. Kept structural so the wrapper works
+ * across `DynamicStructuredTool`, MCP tools, and any other tool shape.
+ */
+export interface InvokableTool {
+    invoke(input: unknown, runtime?: RuntimeConfigLike): unknown;
+}
+/** The managed primitives MDA layers onto the tool runtime. */
+export interface ManagedRuntimeExtras {
+    identity?: RuntimeIdentity;
+    /**
+     * Per-run credential minting for custom mode (`scoping.credentials: "custom"`).
+     * Absent in managed/`none` modes. Call `runtime.credentials.for(target)` and
+     * attach the returned headers to the downstream request.
+     */
+    credentials?: CredentialsProvider;
+}
+/**
+ * The runtime surface managed Deep Agent tools receive: LangGraph's
+ * {@link ToolRuntime} plus MDA-managed primitives such as `identity`.
+ *
+ * Annotate the second parameter of a `tool(...)` handler when you need the
+ * frozen identity envelope for the current run.
+ */
+export interface ManagedDeepAgentRuntime<TState = unknown, TContext = unknown> extends ToolRuntime<TState, TContext>, ManagedRuntimeExtras {
+}
+/**
+ * Derive the managed runtime primitives for a run from its config. Identity is
+ * built only from the trusted `configurable.langgraph_auth_user` the custom-auth
+ * handler produced — the field LangGraph propagates to every node and tool.
+ */
+export declare function managedRuntimeExtras(runtime: RuntimeConfigLike | undefined, cfg?: IdentityConfig): ManagedRuntimeExtras;
+/**
+ * The fields MDA overlays onto the runtime a tool/middleware hook receives:
+ * the frozen `identity` (when an actor resolved) and a `configurable` with the
+ * reserved identity keys stripped (§8) so downstream code can't read a
+ * client-spoofed `actor_id`/`tenant_id`. Returns an empty object when there is
+ * nothing to change, so the original runtime passes through untouched.
+ */
+export declare function managedRuntimeOverrides(runtime: RuntimeConfigLike | undefined, cfg?: IdentityConfig): ManagedRuntimeExtras & {
+    configurable?: Record<string, unknown>;
+};
+/**
+ * Wrap a tool so its runtime carries the managed primitives (`runtime.identity`,
+ * …) without changing its name, schema, or class.
+ *
+ * Augments `invoke` (for LangGraph's `ToolNode`) and patches the tool's internal
+ * `func`/`coroutine` so identity reaches the authored handler even when LangChain
+ * rewrites the runtime into a RunnableConfig before calling the tool function.
+ * Every other property/method passes through untouched.
+ */
+export declare function withManagedRuntime<T extends InvokableTool>(managedTool: T, cfg?: IdentityConfig): T;
+/** Wrap every tool in a list with {@link withManagedRuntime}. */
+export declare function wrapToolsWithManagedRuntime<T extends InvokableTool>(tools: readonly T[], cfg?: IdentityConfig): T[];
+//# sourceMappingURL=managed-tools.d.ts.map

package/dist/runtime/managed-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-tools.d.ts","sourceRoot":"","sources":["../../src/runtime/managed-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,kBAAkB,CAAC;AAM1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;CAC9D;AAED,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;OAIG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACnC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB,CAAC,MAAM,GAAG,OAAO,EAAE,QAAQ,GAAG,OAAO,CAC3E,SAAQ,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,oBAAoB;CAAG;AAEhE;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,iBAAiB,GAAG,SAAS,EACtC,GAAG,CAAC,EAAE,cAAc,GACnB,oBAAoB,CAatB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,GAAG,SAAS,EACtC,GAAG,CAAC,EAAE,cAAc,GACnB,oBAAoB,GAAG;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CA8BnE;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,aAAa,EACxD,WAAW,EAAE,CAAC,EACd,GAAG,CAAC,EAAE,cAAc,GACnB,CAAC,CAoCH;AAED,iEAAiE;AACjE,wBAAgB,2BAA2B,CAAC,CAAC,SAAS,aAAa,EACjE,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,GAAG,CAAC,EAAE,cAAc,GACnB,CAAC,EAAE,CAEL"}

package/dist/runtime/managed-tools.js

@@ -0,0 +1,102 @@
+import { createCredentialsProvider, } from "./credentials.js";
+import { buildRuntimeIdentity, resolveRuntimeConfigurable, sanitizeConfigurable, } from "./identity-runtime.js";
+/**
+ * Derive the managed runtime primitives for a run from its config. Identity is
+ * built only from the trusted `configurable.langgraph_auth_user` the custom-auth
+ * handler produced — the field LangGraph propagates to every node and tool.
+ */
+export function managedRuntimeExtras(runtime, cfg) {
+    const identity = buildRuntimeIdentity(resolveRuntimeConfigurable(runtime));
+    const extras = {};
+    if (identity) {
+        extras.identity = identity;
+    }
+    if (cfg) {
+        const credentials = createCredentialsProvider(cfg, identity);
+        if (credentials) {
+            extras.credentials = credentials;
+        }
+    }
+    return extras;
+}
+/**
+ * The fields MDA overlays onto the runtime a tool/middleware hook receives:
+ * the frozen `identity` (when an actor resolved) and a `configurable` with the
+ * reserved identity keys stripped (§8) so downstream code can't read a
+ * client-spoofed `actor_id`/`tenant_id`. Returns an empty object when there is
+ * nothing to change, so the original runtime passes through untouched.
+ */
+export function managedRuntimeOverrides(runtime, cfg) {
+    const overrides = {};
+    const configurable = resolveRuntimeConfigurable(runtime);
+    const identity = buildRuntimeIdentity(configurable);
+    if (identity) {
+        overrides.identity = identity;
+    }
+    if (cfg) {
+        const credentials = createCredentialsProvider(cfg, identity);
+        if (credentials) {
+            overrides.credentials = credentials;
+        }
+    }
+    if (configurable) {
+        const sanitized = sanitizeConfigurable(configurable);
+        if (Object.keys(sanitized).length !== Object.keys(configurable).length) {
+            if (runtime?.configurable !== undefined) {
+                overrides.configurable = sanitized;
+            }
+            else if (runtime?.config) {
+                overrides.config = {
+                    ...runtime.config,
+                    configurable: sanitized,
+                };
+            }
+        }
+    }
+    return overrides;
+}
+function augmentToolConfig(config, cfg) {
+    const overrides = managedRuntimeOverrides(config, cfg);
+    return Object.keys(overrides).length > 0
+        ? { ...config, ...overrides }
+        : config;
+}
+function wrapToolCallable(original, cfg, receiver) {
+    return (input, runManager, config) => original.call(receiver, input, runManager, augmentToolConfig(config, cfg));
+}
+/**
+ * Wrap a tool so its runtime carries the managed primitives (`runtime.identity`,
+ * …) without changing its name, schema, or class.
+ *
+ * Augments `invoke` (for LangGraph's `ToolNode`) and patches the tool's internal
+ * `func`/`coroutine` so identity reaches the authored handler even when LangChain
+ * rewrites the runtime into a RunnableConfig before calling the tool function.
+ * Every other property/method passes through untouched.
+ */
+export function withManagedRuntime(managedTool, cfg) {
+    const patchable = managedTool;
+    if (typeof patchable.func === "function") {
+        patchable.func = wrapToolCallable(patchable.func.bind(managedTool), cfg, managedTool);
+    }
+    if (typeof patchable.coroutine === "function") {
+        patchable.coroutine = wrapToolCallable(patchable.coroutine.bind(managedTool), cfg, managedTool);
+    }
+    return new Proxy(managedTool, {
+        get(target, property, receiver) {
+            if (property === "invoke") {
+                return (input, runtime) => {
+                    const overrides = managedRuntimeOverrides(runtime, cfg);
+                    return target.invoke(input, Object.keys(overrides).length > 0
+                        ? { ...runtime, ...overrides }
+                        : runtime);
+                };
+            }
+            return Reflect.get(target, property, receiver);
+        },
+    });
+}
+/** Wrap every tool in a list with {@link withManagedRuntime}. */
+export function wrapToolsWithManagedRuntime(tools, cfg) {
+    return tools.map((managedTool) => withManagedRuntime(managedTool, cfg));
+}
+//# sourceMappingURL=managed-tools.js.map

package/dist/runtime/managed-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-tools.js","sourceRoot":"","sources":["../../src/runtime/managed-tools.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAmC/B;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAsC,EACtC,GAAoB;IAEpB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,WAAW,GAAG,yBAAyB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAsC,EACtC,GAAoB;IAEpB,MAAM,SAAS,GAGX,EAAE,CAAC;IACP,MAAM,YAAY,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAChC,CAAC;IACD,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,WAAW,GAAG,yBAAyB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,WAAW,EAAE,CAAC;YAChB,SAAS,CAAC,WAAW,GAAG,WAAW,CAAC;QACtC,CAAC;IACH,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;YACvE,IAAI,OAAO,EAAE,YAAY,KAAK,SAAS,EAAE,CAAC;gBACxC,SAAS,CAAC,YAAY,GAAG,SAAS,CAAC;YACrC,CAAC;iBAAM,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBAC3B,SAAS,CAAC,MAAM,GAAG;oBACjB,GAAG,OAAO,CAAC,MAAM;oBACjB,YAAY,EAAE,SAAS;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAqC,EACrC,GAAoB;IAEpB,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;QACtC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE;QAC7B,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAyC,EACzC,GAA+B,EAC/B,QAAiB;IAEjB,OAAO,CAAC,KAAc,EAAE,UAAmB,EAAE,MAAe,EAAE,EAAE,CAC9D,QAAQ,CAAC,IAAI,CACX,QAAQ,EACR,KAAK,EACL,UAAU,EACV,iBAAiB,CAAC,MAAuC,EAAE,GAAG,CAAC,CAChE,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAc,EACd,GAAoB;IAEpB,MAAM,SAAS,GAAG,WAGjB,CAAC;IACF,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACzC,SAAS,CAAC,IAAI,GAAG,gBAAgB,CAC/B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAChC,GAAG,EACH,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QAC9C,SAAS,CAAC,SAAS,GAAG,gBAAgB,CACpC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EACrC,GAAG,EACH,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,KAAK,CAAC,WAAW,EAAE;QAC5B,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAC5B,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAc,EAAE,OAA2B,EAAE,EAAE;oBACrD,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBACxD,OAAO,MAAM,CAAC,MAAM,CAClB,KAAK,EACL,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;wBAC/B,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE;wBAC9B,CAAC,CAAC,OAAO,CACZ,CAAC;gBACJ,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,2BAA2B,CACzC,KAAmB,EACnB,GAAoB;IAEpB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;AAC1E,CAAC"}

package/dist/runtime/sandbox-manager.d.ts

@@ -8,33 +8,15 @@ type LangSmithSandboxClientLoader = () => Promise<{
     };
 }>;
 /**
- * Resolve (and cache) the scoped sandbox backend for this run, provisioning it
- * with `setup.sh` the first time it is created.
+ * Resolve (and cache) the scoped LangSmith sandbox backend for this run,
+ * provisioning it with `setup.sh` the first time it is created.
  */
 export declare function resolveManagedSandbox(sandbox: SandboxDefinition, setupScript: string | undefined, config: ManagedRunConfig | undefined): Promise<ManagedSandboxBackend>;
-/**
- * Derive the reuse key from the run. Without runtime identity, sandboxes are
- * keyed by thread; with identity, by the configured tenant/actor scope.
- */
+/** Derive the process-level reuse key from the configured sandbox scope. */
 export declare function sandboxScopeKey(sandbox: SandboxDefinition, config: ManagedRunConfig | undefined): string;
 /** Clear the process-level sandbox cache. Test-only. */
 export declare function clearManagedSandboxCacheForTests(): void;
 /** Override the LangSmith SDK loader. Test-only. */
 export declare function setLangSmithSandboxClientLoaderForTests(loader?: LangSmithSandboxClientLoader): void;
-/**
- * Eagerly resolve the `mda dev` sandbox at startup so the developer sees the
- * definitive decision — local vs. the configured provider, and the temp dir
- * path when local — right when the dev server boots, not on the first run.
- *
- * Sandboxes are otherwise created lazily (on first run), so with `--browser`
- * off nothing would print until the agent is invoked. The generated entry
- * calls this at module load (graph registration); because dev shares one
- * sandbox ({@link DEV_SANDBOX_SCOPE_KEY}), the first real run reuses what is
- * created here rather than provisioning a second sandbox. The authoritative
- * "created" log (with the temp dir) is emitted by {@link createDevSandbox}.
- *
- * No-op outside `mda dev`, so the generated entry can always call it.
- */
-export declare function announceSandboxPlan(sandbox: SandboxDefinition, setupScript?: string): Promise<void>;
 export {};
 //# sourceMappingURL=sandbox-manager.d.ts.map

package/dist/runtime/sandbox-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-manager.d.ts","sourceRoot":"","sources":["../../src/runtime/sandbox-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AASvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAoB1E,KAAK,4BAA4B,GAAG,MAAM,OAAO,CAAC;IAChD,aAAa,EAAE,KAAK,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK;QACpD,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACpE,CAAC;CACH,CAAC,CAAC;AAeH;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,iBAAiB,EAC1B,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,OAAO,CAAC,qBAAqB,CAAC,CAchC;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,MAAM,CAoBR;AAED,wDAAwD;AACxD,wBAAgB,gCAAgC,IAAI,IAAI,CAEvD;AAED,oDAAoD;AACpD,wBAAgB,uCAAuC,CACrD,MAAM,CAAC,EAAE,4BAA4B,GACpC,IAAI,CAEN;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,iBAAiB,EAC1B,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAGf"}
+{"version":3,"file":"sandbox-manager.d.ts","sourceRoot":"","sources":["../../src/runtime/sandbox-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAS1E,KAAK,4BAA4B,GAAG,MAAM,OAAO,CAAC;IAChD,aAAa,EAAE,KAAK,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK;QACpD,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACpE,CAAC;CACH,CAAC,CAAC;AAeH;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,iBAAiB,EAC1B,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,OAAO,CAAC,qBAAqB,CAAC,CAYhC;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAC7B,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,MAAM,CAMR;AAED,wDAAwD;AACxD,wBAAgB,gCAAgC,IAAI,IAAI,CAEvD;AAED,oDAAoD;AACpD,wBAAgB,uCAAuC,CACrD,MAAM,CAAC,EAAE,4BAA4B,GACpC,IAAI,CAEN"}

package/dist/runtime/sandbox-manager.js

@@ -1,40 +1,25 @@
-import { isDevMode, providerCredentialStatus, providerKey, } from "./credentials.js";
-import { logDevSandboxNoticeOnce } from "./dev-notice.js";
-import { createLocalDevSandbox } from "./local-dev-sandbox.js";
-import { runSetupScript, runSetupScriptInline } from "./setup-script.js";
+import { runSetupScript } from "./setup-script.js";
 /**
  * Created sandboxes, keyed by scope, reused for the lifetime of this runtime
  * process. Storing the in-flight promise dedupes concurrent runs and guarantees
  * `setup.sh` is executed only once per newly created sandbox.
  */
 const managedSandboxes = new Map();
-/**
- * Cache key for the single, process-wide sandbox used under `mda dev`.
- *
- * Deploys key sandboxes per scope (thread/tenant/actor) for isolation. Dev is a
- * single developer iterating locally, so it shares one sandbox across every
- * thread: that lets `announceSandboxPlan` create it eagerly at startup (to
- * report local-vs-remote and the temp dir up front) and have the first real run
- * reuse it instead of provisioning a second one.
- */
-const DEV_SANDBOX_SCOPE_KEY = "__mda_dev__";
 const defaultLangSmithSandboxClientLoader = async () => {
     const dynamicImport = new Function("specifier", "return import(specifier)");
     return (await dynamicImport("langsmith/sandbox"));
 };
 let langSmithSandboxClientLoader = defaultLangSmithSandboxClientLoader;
 /**
- * Resolve (and cache) the scoped sandbox backend for this run, provisioning it
- * with `setup.sh` the first time it is created.
+ * Resolve (and cache) the scoped LangSmith sandbox backend for this run,
+ * provisioning it with `setup.sh` the first time it is created.
  */
 export function resolveManagedSandbox(sandbox, setupScript, config) {
-    const key = isDevMode()
-        ? DEV_SANDBOX_SCOPE_KEY
-        : sandboxScopeKey(sandbox, config);
+    const key = sandboxScopeKey(sandbox, config);
     let pending = managedSandboxes.get(key);
     if (!pending) {
-        pending = createManagedSandbox(sandbox, setupScript).catch((error) => {
-            // Don't cache a failed provisioning attempt — let the next run retry.
+        pending = createLangSmithSandbox(sandbox, setupScript).catch((error) => {
+            // Don't cache a failed provisioning attempt. Let the next run retry.
             managedSandboxes.delete(key);
             throw error;
         });
@@ -42,26 +27,13 @@ export function resolveManagedSandbox(sandbox, setupScript, config) {
     }
     return pending;
 }
-/**
- * Derive the reuse key from the run. Without runtime identity, sandboxes are
- * keyed by thread; with identity, by the configured tenant/actor scope.
- */
+/** Derive the process-level reuse key from the configured sandbox scope. */
 export function sandboxScopeKey(sandbox, config) {
-    const configurable = (config?.configurable ?? {});
-    const identity = configurable.identity;
     const scope = sandbox.options?.scope ?? "thread";
-    let key;
-    if (scope === "tenant")
-        key = identity?.tenant?.id;
-    else if (scope === "actor")
-        key = identity?.actor?.id;
-    else
-        key = configurable.thread_id;
-    return (key ??
-        identity?.tenant?.id ??
-        identity?.actor?.id ??
-        configurable.thread_id ??
-        "default");
+    if (scope === "agent") {
+        return `agent:${assistantIdFromConfig(config)}`;
+    }
+    return `thread:${threadIdFromConfig(config)}`;
 }
 /** Clear the process-level sandbox cache. Test-only. */
 export function clearManagedSandboxCacheForTests() {
@@ -71,93 +43,16 @@ export function clearManagedSandboxCacheForTests() {
 export function setLangSmithSandboxClientLoaderForTests(loader) {
     langSmithSandboxClientLoader = loader ?? defaultLangSmithSandboxClientLoader;
 }
-/**
- * Eagerly resolve the `mda dev` sandbox at startup so the developer sees the
- * definitive decision — local vs. the configured provider, and the temp dir
- * path when local — right when the dev server boots, not on the first run.
- *
- * Sandboxes are otherwise created lazily (on first run), so with `--browser`
- * off nothing would print until the agent is invoked. The generated entry
- * calls this at module load (graph registration); because dev shares one
- * sandbox ({@link DEV_SANDBOX_SCOPE_KEY}), the first real run reuses what is
- * created here rather than provisioning a second sandbox. The authoritative
- * "created" log (with the temp dir) is emitted by {@link createDevSandbox}.
- *
- * No-op outside `mda dev`, so the generated entry can always call it.
- */
-export async function announceSandboxPlan(sandbox, setupScript) {
-    if (!isDevMode())
-        return;
-    await resolveManagedSandbox(sandbox, setupScript, undefined);
-}
-function createManagedSandbox(sandbox, setupScript) {
-    // `mda dev` never provisions a real provider sandbox the same way a deploy
-    // does (it builds no snapshot/image), so it gets its own resolution path with
-    // a local fallback. The flag gating ensures a real deployment can never be
-    // silently downgraded to local shell execution.
-    return isDevMode()
-        ? createDevSandbox(sandbox, setupScript)
-        : createProviderSandbox(sandbox, setupScript, {
-            useDefaultLangSmithRuntime: true,
-        });
-}
-/**
- * Production path: construct the configured provider's sandbox and provision it.
- * Any failure propagates — a misconfigured deployment must surface, not degrade.
- */
-async function createProviderSandbox(sandbox, setupScript, options) {
-    const backend = await createProviderBackend(sandbox, options);
-    if (setupScript && setupScript.trim().length > 0) {
-        await runSetupScript(backend, setupScript);
-    }
-    return backend;
-}
-/**
- * Dev path: prefer the configured provider when its credentials are present,
- * but fall back to a local temp-directory sandbox when credentials are missing
- * *or* the provider cannot be created (e.g. `LangSmithSandbox`, which needs a
- * snapshot that only `mda deploy` builds). This keeps `mda dev` working offline
- * and resilient to provider/config gaps while still exercising real providers
- * that can spin up from an API key alone.
- */
-async function createDevSandbox(sandbox, setupScript) {
-    const cred = providerCredentialStatus(sandbox.provider);
-    if (cred.status !== "missing") {
-        try {
-            const backend = await createProviderSandbox(sandbox, setupScript, {
-                useDefaultLangSmithRuntime: false,
-            });
-            logDevSandboxNoticeOnce(cred.status === "available"
-                ? `[mda dev] using the configured ${cred.provider} sandbox.`
-                : `[mda dev] using the configured sandbox provider (${cred.provider}).`);
-            return backend;
-        }
-        catch (error) {
-            return createLocalSandbox(setupScript, `the configured ${cred.provider} sandbox could not be created ` +
-                `(${errorMessage(error)}); using a local temporary directory instead`);
-        }
+async function createLangSmithSandbox(sandbox, setupScript) {
+    if (providerKey(sandbox.provider) !== "LangSmithSandbox") {
+        throw new Error("MDA only supports deepagents' LangSmithSandbox provider");
     }
-    const missing = cred.missing.join(", ") || "the provider credentials";
-    return createLocalSandbox(setupScript, `no credentials found for the configured sandbox provider (${cred.provider}); ` +
-        `using a local temporary directory instead — set ${missing} to use it`);
-}
-/** Provision the local dev sandbox and run `setup.sh` inline inside it. */
-async function createLocalSandbox(setupScript, reason) {
-    const backend = await createLocalDevSandbox(reason);
+    const backend = await createLangSmithSandboxBackend(sandbox);
     if (setupScript && setupScript.trim().length > 0) {
-        await runSetupScriptInline(backend, setupScript);
+        await runSetupScript(backend, setupScript);
     }
     return backend;
 }
-/** Construct the configured provider's backend, stripping MDA-managed knobs. */
-async function createProviderBackend(sandbox, options) {
-    if (options.useDefaultLangSmithRuntime &&
-        providerKey(sandbox.provider) === "LangSmithSandbox") {
-        return createLangSmithSandboxBackend(sandbox);
-    }
-    const { scope: _scope, idleTtlSeconds: _idleTtlSeconds, ...providerOptions } = sandbox.options ?? {};
-    return (await sandbox.provider.create(providerOptions));
-}
 async function createLangSmithSandboxBackend(sandbox) {
     const { scope: _scope, apiKey = process.env.LANGSMITH_API_KEY, defaultTimeout, templateName, snapshotId, ...createSandboxOptions } = sandbox.options ?? {};
     if (snapshotId && templateName) {
@@ -166,20 +61,41 @@ async function createLangSmithSandboxBackend(sandbox) {
     if (templateName) {
         createSandboxOptions.snapshotName = templateName;
     }
-    const { SandboxClient } = await langSmithSandboxClientLoader();
     if (snapshotId) {
         createSandboxOptions.snapshotId = snapshotId;
     }
+    const { SandboxClient } = await langSmithSandboxClientLoader();
     const sdkOptions = stringOption(apiKey);
     const client = new SandboxClient(sdkOptions ? { apiKey: sdkOptions } : undefined);
     const langSmithSandbox = await client.createSandbox(createSandboxOptions);
     const Backend = sandbox.provider;
     return new Backend({ sandbox: langSmithSandbox, defaultTimeout });
 }
+function providerKey(provider) {
+    const providerId = provider.providerId;
+    if (typeof providerId === "string" && providerId.trim()) {
+        return providerId.trim();
+    }
+    return typeof provider.name === "string" ? provider.name.trim() : "";
+}
+function threadIdFromConfig(config) {
+    const threadId = configValue(config, "thread_id");
+    if (threadId === undefined) {
+        throw new Error('sandbox scope "thread" requires configurable.thread_id');
+    }
+    return threadId;
+}
+function assistantIdFromConfig(config) {
+    return configValue(config, "assistant_id") ?? "agent";
+}
 function stringOption(value) {
-    return typeof value === "string" && value.length > 0 ? value : undefined;
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
 }
-function errorMessage(error) {
-    return error instanceof Error ? error.message : String(error);
+function configValue(config, key) {
+    return (stringOption(config?.metadata?.[key]) ??
+        stringOption(config?.configurable?.[key]));
 }
 //# sourceMappingURL=sandbox-manager.js.map

package/dist/runtime/sandbox-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-manager.js","sourceRoot":"","sources":["../../src/runtime/sandbox-manager.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,wBAAwB,EACxB,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAGzE;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0C,CAAC;AAE3E;;;;;;;;GAQG;AACH,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAQ5C,MAAM,mCAAmC,GACvC,KAAK,IAAI,EAAE;IACT,MAAM,aAAa,GAAG,IAAI,QAAQ,CAChC,WAAW,EACX,0BAA0B,CACgB,CAAC;IAC7C,OAAO,CAAC,MAAM,aAAa,CAAC,mBAAmB,CAAC,CAE/C,CAAC;AACJ,CAAC,CAAC;AAEJ,IAAI,4BAA4B,GAAG,mCAAmC,CAAC;AAEvE;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAC1B,WAA+B,EAC/B,MAAoC;IAEpC,MAAM,GAAG,GAAG,SAAS,EAAE;QACrB,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,sEAAsE;YACtE,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA0B,EAC1B,MAAoC;IAEpC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAG/C,CAAC;IACF,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,QAAQ,CAAC;IAEjD,IAAI,GAAuB,CAAC;IAC5B,IAAI,KAAK,KAAK,QAAQ;QAAE,GAAG,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC;SAC9C,IAAI,KAAK,KAAK,OAAO;QAAE,GAAG,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;;QACjD,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC;IAElC,OAAO,CACL,GAAG;QACH,QAAQ,EAAE,MAAM,EAAE,EAAE;QACpB,QAAQ,EAAE,KAAK,EAAE,EAAE;QACnB,YAAY,CAAC,SAAS;QACtB,SAAS,CACV,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,gCAAgC;IAC9C,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,uCAAuC,CACrD,MAAqC;IAErC,4BAA4B,GAAG,MAAM,IAAI,mCAAmC,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA0B,EAC1B,WAAoB;IAEpB,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO;IACzB,MAAM,qBAAqB,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA0B,EAC1B,WAA+B;IAE/B,2EAA2E;IAC3E,8EAA8E;IAC9E,2EAA2E;IAC3E,gDAAgD;IAChD,OAAO,SAAS,EAAE;QAChB,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC;QACxC,CAAC,CAAC,qBAAqB,CAAC,OAAO,EAAE,WAAW,EAAE;YAC1C,0BAA0B,EAAE,IAAI;SACjC,CAAC,CAAC;AACT,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAClC,OAA0B,EAC1B,WAA+B,EAC/B,OAAgD;IAEhD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAA0B,EAC1B,WAA+B;IAE/B,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,WAAW,EAAE;gBAChE,0BAA0B,EAAE,KAAK;aAClC,CAAC,CAAC;YACH,uBAAuB,CACrB,IAAI,CAAC,MAAM,KAAK,WAAW;gBACzB,CAAC,CAAC,kCAAkC,IAAI,CAAC,QAAQ,WAAW;gBAC5D,CAAC,CAAC,oDAAoD,IAAI,CAAC,QAAQ,IAAI,CAC1E,CAAC;YACF,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,kBAAkB,CACvB,WAAW,EACX,kBAAkB,IAAI,CAAC,QAAQ,gCAAgC;gBAC7D,IAAI,YAAY,CAAC,KAAK,CAAC,8CAA8C,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC;IACtE,OAAO,kBAAkB,CACvB,WAAW,EACX,6DAA6D,IAAI,CAAC,QAAQ,KAAK;QAC7E,mDAAmD,OAAO,YAAY,CACzE,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,kBAAkB,CAC/B,WAA+B,EAC/B,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,qBAAqB,CAClC,OAA0B,EAC1B,OAAgD;IAEhD,IACE,OAAO,CAAC,0BAA0B;QAClC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,kBAAkB,EACpD,CAAC;QACD,OAAO,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,EACJ,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,eAAe,EAC/B,GAAG,eAAe,EACnB,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1B,OAAO,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CACnC,eAAe,CAChB,CAA0B,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,OAA0B;IAE1B,MAAM,EACJ,KAAK,EAAE,MAAM,EACb,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EACtC,cAAc,EACd,YAAY,EACZ,UAAU,EACV,GAAG,oBAAoB,EACxB,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IAE1B,IAAI,UAAU,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,oBAAoB,CAAC,YAAY,GAAG,YAAY,CAAC;IACnD,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,4BAA4B,EAAE,CAAC;IAC/D,IAAI,UAAU,EAAE,CAAC;QACf,oBAAoB,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,aAAa,CAC9B,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,QAGG,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}
+{"version":3,"file":"sandbox-manager.js","sourceRoot":"","sources":["../../src/runtime/sandbox-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0C,CAAC;AAQ3E,MAAM,mCAAmC,GACvC,KAAK,IAAI,EAAE;IACT,MAAM,aAAa,GAAG,IAAI,QAAQ,CAChC,WAAW,EACX,0BAA0B,CACgB,CAAC;IAC7C,OAAO,CAAC,MAAM,aAAa,CAAC,mBAAmB,CAAC,CAE/C,CAAC;AACJ,CAAC,CAAC;AAEJ,IAAI,4BAA4B,GAAG,mCAAmC,CAAC;AAEvE;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAC1B,WAA+B,EAC/B,MAAoC;IAEpC,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrE,qEAAqE;YACrE,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAC7B,OAA0B,EAC1B,MAAoC;IAEpC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,QAAQ,CAAC;IACjD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,OAAO,SAAS,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,UAAU,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,gCAAgC;IAC9C,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,uCAAuC,CACrD,MAAqC;IAErC,4BAA4B,GAAG,MAAM,IAAI,mCAAmC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,OAA0B,EAC1B,WAA+B;IAE/B,IAAI,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,kBAAkB,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,OAA0B;IAE1B,MAAM,EACJ,KAAK,EAAE,MAAM,EACb,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EACtC,cAAc,EACd,YAAY,EACZ,UAAU,EACV,GAAG,oBAAoB,EACxB,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IAE1B,IAAI,UAAU,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,oBAAoB,CAAC,YAAY,GAAG,YAAY,CAAC;IACnD,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,oBAAoB,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/C,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,4BAA4B,EAAE,CAAC;IAC/D,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,aAAa,CAC9B,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,QAGG,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAClB,QAA2D;IAE3D,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IACvC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAoC;IAC9D,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAoC;IACjE,OAAO,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,OAAO,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAClB,MAAoC,EACpC,GAAW;IAEX,OAAO,CACL,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;QACrC,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,CAC1C,CAAC;AACJ,CAAC"}

package/dist/runtime/setup-script.d.ts

@@ -10,10 +10,8 @@ export declare function runSetupScript(backend: ManagedSandboxBackend, script: s
 /**
  * Run `setup.sh` by piping its contents straight to the backend's shell.
  *
- * Used for the local dev sandbox: that backend virtualizes file paths (uploads
- * land under the temp root) but executes shell commands against the real
- * filesystem, so an uploaded `/tmp/mda-setup.sh` would not be found by `bash`.
- * Executed inline, the script runs with the temp root as its working directory.
+ * Kept as a compatibility fallback for sandbox backend implementations that
+ * conform to the execute surface but do not expose upload support.
  */
 export declare function runSetupScriptInline(backend: ManagedSandboxBackend, script: string): Promise<void>;
 export declare function assertSetupSucceeded(result: {

package/dist/runtime/setup-script.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-script.d.ts","sourceRoot":"","sources":["../../src/runtime/setup-script.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAKxD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,IAAI,CAOP"}
+{"version":3,"file":"setup-script.d.ts","sourceRoot":"","sources":["../../src/runtime/setup-script.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAKxD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,IAAI,CAOP"}

package/dist/runtime/setup-script.js

@@ -20,10 +20,8 @@ export async function runSetupScript(backend, script) {
 /**
  * Run `setup.sh` by piping its contents straight to the backend's shell.
  *
- * Used for the local dev sandbox: that backend virtualizes file paths (uploads
- * land under the temp root) but executes shell commands against the real
- * filesystem, so an uploaded `/tmp/mda-setup.sh` would not be found by `bash`.
- * Executed inline, the script runs with the temp root as its working directory.
+ * Kept as a compatibility fallback for sandbox backend implementations that
+ * conform to the execute surface but do not expose upload support.
  */
 export async function runSetupScriptInline(backend, script) {
     assertSetupSucceeded(await backend.execute(script));

package/dist/runtime/setup-script.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-script.js","sourceRoot":"","sources":["../../src/runtime/setup-script.ts"],"names":[],"mappings":"AAEA,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA8B,EAC9B,MAAc;IAEd,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,OAAO,CAAC,WAAW,CAAC;YACxB,CAAC,iBAAiB,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SACtD,CAAC,CAAC;QACH,oBAAoB,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,iBAAiB,EAAE,CAAC,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IACD,MAAM,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA8B,EAC9B,MAAc;IAEd,oBAAoB,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAGpC;IACC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,0CAA0C,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"setup-script.js","sourceRoot":"","sources":["../../src/runtime/setup-script.ts"],"names":[],"mappings":"AAEA,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA8B,EAC9B,MAAc;IAEd,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,OAAO,CAAC,WAAW,CAAC;YACxB,CAAC,iBAAiB,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SACtD,CAAC,CAAC;QACH,oBAAoB,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,iBAAiB,EAAE,CAAC,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IACD,MAAM,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA8B,EAC9B,MAAc;IAEd,oBAAoB,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAGpC;IACC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,0CAA0C,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/runtime/types.d.ts

@@ -1,15 +1,24 @@
 import type { McpServersDefinition } from "../connectors.js";
+import type { IdentityDefinition } from "../identity.js";
 import type { SandboxDefinition } from "../sandbox.js";
 /**
- * The LangGraph runnable config passed to a graph factory at invocation time.
- *
- * Kept loose for v0; the managed runtime reads identity and thread metadata
- * from here to scope the store/sandbox.
+ * Any object that carries a per-run LangGraph `configurable` map. The shared base
+ * for the run config and the runtime the seam augments, so the `configurable`
+ * carrier shape is declared once.
  */
-export interface ManagedRunConfig {
+export interface ConfigurableCarrier {
     configurable?: Record<string, unknown>;
     [key: string]: unknown;
 }
+/**
+ * The LangGraph runnable config passed to a graph factory at invocation time.
+ *
+ * Kept loose for v0; the managed runtime reads LangGraph metadata/configurable
+ * values from here to scope the managed sandbox.
+ */
+export interface ManagedRunConfig extends ConfigurableCarrier {
+    metadata?: Record<string, unknown>;
+}
 /**
  * Managed values the CLI injects into the generated entry module.
  *
@@ -37,6 +46,13 @@ export interface ManagedAgentOptions {
      * The runtime loads their tools and appends them to the agent's tools.
      */
     connectors?: McpServersDefinition;
+    /**
+     * The root `identity.ts` declaration, if the project opts into managed
+     * identity. Resolution + thread scoping run in the generated custom-auth
+     * handler (`buildManagedAuth`); this seam reserves the declaration for the
+     * frozen `runtime.identity` envelope and memory namespacing.
+     */
+    identity?: IdentityDefinition;
 }
 /**
  * The subset of a created sandbox backend the managed runtime relies on to run

package/dist/runtime/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CACL,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC;QACT,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,WAAW,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CACL,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC;QACT,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,WAAW,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpE"}

package/dist/runtime/validated-token.d.ts

@@ -0,0 +1,25 @@
+import { type JWTPayload } from "jose";
+import type { IdentityConfig, ValidatedTokenIngress, ValidatedTokenProvider } from "../identity.js";
+import type { ManagedUser } from "./auth.js";
+/**
+ * Resolve the caller identity for the `validated_token` ingress mode (§6.2): pick
+ * the provider by token issuer, verify the token (JWKS / introspection / guest),
+ * then map its claims into the identity envelope. Fail-closed (401) throughout.
+ */
+export declare function resolveValidatedTokenUser(cfg: IdentityConfig, ingress: ValidatedTokenIngress, request: Request): Promise<ManagedUser>;
+/** Extract the bearer token from the `Authorization` header, or 401. */
+export declare function bearerToken(request: Request): string;
+/**
+ * Select the provider that should verify `token`. A single-provider deployment
+ * always uses its one entry; otherwise selection is by the token's `iss` claim
+ * (guest tokens carry MDA's own issuer). Fail-closed on no match (401).
+ */
+export declare function selectProvider(providers: ValidatedTokenProvider[], token: string): ValidatedTokenProvider;
+/** Map verified token claims into the managed user envelope, per `provider.claims`. */
+export declare function claimsToUser(provider: ValidatedTokenProvider, claims: JWTPayload): ManagedUser;
+/**
+ * Mint a short-lived guest token for an anonymous caller. Exposed for the guest
+ * issue/reissue route; the same deployment key verifies it on later calls.
+ */
+export declare function issueGuestToken(provider: ValidatedTokenProvider, subject?: string): Promise<string>;
+//# sourceMappingURL=validated-token.d.ts.map

package/dist/runtime/validated-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validated-token.d.ts","sourceRoot":"","sources":["../../src/runtime/validated-token.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,UAAU,EAGhB,MAAM,MAAM,CAAC;AAEd,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAc7C;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,WAAW,CAAC,CAWtB;AAED,wEAAwE;AACxE,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAQpD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,sBAAsB,EAAE,EACnC,KAAK,EAAE,MAAM,GACZ,sBAAsB,CAsBxB;AAED,uFAAuF;AACvF,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,sBAAsB,EAChC,MAAM,EAAE,UAAU,GACjB,WAAW,CA0Bb;AA0JD;;;GAGG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,sBAAsB,EAChC,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAejB"}