managed-deepagents 0.0.3-dev.26 → 0.0.3-dev.29

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,OAAO,EACP,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,GACb,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE5E,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,OAAO,EACP,WAAW,EACX,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,OAAO,EACP,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAEpC,YAAY,EACV,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,GACb,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -2,4 +2,5 @@ export { defineDeepAgent } from "./define-deep-agent.js";
 export { defineMcpServers } from "./connectors.js";
 export { defineSchedule } from "./schedules.js";
 export { defineSandbox } from "./sandbox.js";
+export { defineIdentity, providers, validateIdentity } from "./identity.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}

package/dist/runtime/auth.d.ts

@@ -0,0 +1,44 @@
+import { Auth } from "@langchain/langgraph-sdk/auth";
+import type { IdentityConfig, IdentityDefinition } from "../identity.js";
+/**
+ * The user object `@auth.authenticate` returns. `identity`/`permissions` satisfy
+ * the LangGraph base shape; the `mda_*` fields carry the identity envelope into
+ * `config.configurable.langgraph_auth_user` for the runtime seam.
+ */
+export interface ManagedUser {
+    identity: string;
+    permissions: string[];
+    mda_actor_id: string;
+    mda_tenant_id?: string;
+    mda_actor_email?: string;
+    mda_claims?: Record<string, unknown>;
+    [key: string]: unknown;
+}
+/**
+ * Build the managed LangGraph custom-auth handler from a declared identity.
+ *
+ * Handles both ingress modes: `trusted_backend` (reserved headers behind a
+ * shared ingress secret) and `validated_token` (browser-direct IdP tokens
+ * verified via JWKS / introspection / MDA-signed guest). Also registers thread
+ * and store scoping with a studio bypass.
+ */
+export declare function buildManagedAuth(identity: IdentityDefinition): Auth;
+/**
+ * Fail-closed (403) unless every identity segment the memory scope requires is
+ * present in the store `namespace`. `agent`/`none` scopes carry no per-identity
+ * restriction (shared or absent memory), so any namespace is allowed.
+ */
+export declare function assertStoreAccess(cfg: IdentityConfig, user: ManagedUser, value: unknown): void;
+/**
+ * Resolve the caller identity for `trusted_backend`: validate the shared ingress
+ * secret, then trust the reserved actor/tenant headers. Fail-closed (401) on a
+ * missing/invalid secret, a missing actor, or a missing tenant under multi.
+ */
+export declare function resolveTrustedBackendUser(cfg: IdentityConfig, request: Request): ManagedUser;
+/** Derive the owner value `@auth.on.threads` filters on, per the `threads` axis. */
+export declare function threadOwnerKey(cfg: IdentityConfig, user: ManagedUser): string;
+/** True when this deployment exposes guest issuance and the request targets it. */
+export declare function isGuestIssuanceRequest(request: Request, cfg: IdentityConfig): boolean;
+/** Placeholder identity so LangGraph auth middleware allows tokenless issuance. */
+export declare function guestIssuanceBypassUser(): ManagedUser;
+//# sourceMappingURL=auth.d.ts.map

package/dist/runtime/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EAGL,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAuBzE;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAsCnE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,OAAO,GACb,IAAI,CAuBN;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,WAAW,CAgBb;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,CAY7E;AAuBD,mFAAmF;AACnF,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,cAAc,GAClB,OAAO,CAaT;AAED,mFAAmF;AACnF,wBAAgB,uBAAuB,IAAI,WAAW,CAMrD"}

package/dist/runtime/auth.js

@@ -0,0 +1,168 @@
+import { Auth, HTTPException, isStudioUser, } from "@langchain/langgraph-sdk/auth";
+import { memoryIdentitySegments } from "./identity-runtime.js";
+import { resolveValidatedTokenUser } from "./validated-token.js";
+/**
+ * Reserved transport for the trusted-backend ingress mode. Actor/tenant travel
+ * as reserved headers (mapped into `config.configurable` by the generated
+ * `langgraph.json` allowlist); the ingress secret is validated here and is
+ * deliberately **not** allowlisted, so it never reaches `config.configurable`.
+ */
+const ACTOR_HEADER = "x-mda-actor-id";
+const TENANT_HEADER = "x-mda-tenant-id";
+const INGRESS_SECRET_HEADER = "x-mda-ingress-secret";
+/** Deployment env var carrying the shared secret the trusted backend presents. */
+const INGRESS_SECRET_ENV = "MDA_INGRESS_SECRET";
+/** Path MDA exposes for anonymous guest token issuance (must stay public). */
+const GUEST_ISSUANCE_PATH = "/identity/guest";
+/** Synthetic actor used only to satisfy auth middleware on the issuance route. */
+const GUEST_ISSUER_ACTOR = "mda:guest-issuer";
+/**
+ * Build the managed LangGraph custom-auth handler from a declared identity.
+ *
+ * Handles both ingress modes: `trusted_backend` (reserved headers behind a
+ * shared ingress secret) and `validated_token` (browser-direct IdP tokens
+ * verified via JWKS / introspection / MDA-signed guest). Also registers thread
+ * and store scoping with a studio bypass.
+ */
+export function buildManagedAuth(identity) {
+    const cfg = identity.config;
+    const http = cfg.ingress.http;
+    const auth = new Auth();
+    auth.authenticate(async (request) => {
+        if (isGuestIssuanceRequest(request, cfg)) {
+            return guestIssuanceBypassUser();
+        }
+        if (http === "trusted_backend") {
+            return resolveTrustedBackendUser(cfg, request);
+        }
+        return resolveValidatedTokenUser(cfg, http, request);
+    });
+    auth.on("threads", ({ user, value }) => {
+        if (isStudioUser(user)) {
+            return true;
+        }
+        const key = threadOwnerKey(cfg, user);
+        if (value && typeof value === "object") {
+            const container = value;
+            container.metadata = { ...(container.metadata ?? {}), owner: key };
+        }
+        return { owner: key };
+    });
+    // Mirror the memory namespace so raw store ops can't cross the identity
+    // boundary a run is scoped to (§5, §6.2).
+    auth.on("store", ({ user, value }) => {
+        if (isStudioUser(user)) {
+            return true;
+        }
+        assertStoreAccess(cfg, user, value);
+        return true;
+    });
+    return auth;
+}
+/**
+ * Fail-closed (403) unless every identity segment the memory scope requires is
+ * present in the store `namespace`. `agent`/`none` scopes carry no per-identity
+ * restriction (shared or absent memory), so any namespace is allowed.
+ */
+export function assertStoreAccess(cfg, user, value) {
+    const required = memoryIdentitySegments(cfg.scoping.memory, cfg.tenancy, user.mda_actor_id ? String(user.mda_actor_id) : undefined, user.mda_tenant_id ? String(user.mda_tenant_id) : undefined);
+    if (required.length === 0) {
+        return;
+    }
+    const namespace = value &&
+        typeof value === "object" &&
+        Array.isArray(value.namespace)
+        ? value.namespace.map(String)
+        : [];
+    for (const segment of required) {
+        if (!namespace.includes(segment)) {
+            throw new HTTPException(403, {
+                message: "store namespace is outside the caller's identity boundary",
+            });
+        }
+    }
+}
+/**
+ * Resolve the caller identity for `trusted_backend`: validate the shared ingress
+ * secret, then trust the reserved actor/tenant headers. Fail-closed (401) on a
+ * missing/invalid secret, a missing actor, or a missing tenant under multi.
+ */
+export function resolveTrustedBackendUser(cfg, request) {
+    requireIngressSecret(request);
+    const actor = request.headers.get(ACTOR_HEADER);
+    if (!actor) {
+        throw new HTTPException(401, { message: `missing ${ACTOR_HEADER}` });
+    }
+    const tenant = request.headers.get(TENANT_HEADER) ?? undefined;
+    assertTenantPresentIfMulti(cfg, tenant);
+    return {
+        identity: actor,
+        permissions: [],
+        mda_actor_id: actor,
+        ...(tenant ? { mda_tenant_id: tenant } : {}),
+    };
+}
+/** Derive the owner value `@auth.on.threads` filters on, per the `threads` axis. */
+export function threadOwnerKey(cfg, user) {
+    const scope = cfg.scoping.threads ?? "actor";
+    const actor = String(user.mda_actor_id ?? "");
+    const tenant = user.mda_tenant_id ? String(user.mda_tenant_id) : undefined;
+    if (scope === "tenant") {
+        return tenant ?? actor;
+    }
+    if (scope === "channel") {
+        const channel = user.mda_source_thread_id;
+        return channel ? String(channel) : actor;
+    }
+    return actor;
+}
+function requireIngressSecret(request) {
+    const expected = process.env[INGRESS_SECRET_ENV];
+    const provided = request.headers.get(INGRESS_SECRET_HEADER);
+    if (!expected || !provided || !constantTimeEquals(expected, provided)) {
+        throw new HTTPException(401, {
+            message: "invalid or missing ingress secret",
+        });
+    }
+}
+function assertTenantPresentIfMulti(cfg, tenant) {
+    if (cfg.tenancy === "multi" && !tenant) {
+        throw new HTTPException(401, {
+            message: "missing tenant for multi-tenant deployment",
+        });
+    }
+}
+/** True when this deployment exposes guest issuance and the request targets it. */
+export function isGuestIssuanceRequest(request, cfg) {
+    if (request.method !== "POST") {
+        return false;
+    }
+    const { pathname } = new URL(request.url);
+    if (pathname !== GUEST_ISSUANCE_PATH) {
+        return false;
+    }
+    const http = cfg.ingress.http;
+    if (http === "trusted_backend") {
+        return false;
+    }
+    return http.providers.some((provider) => provider.guest?.issue);
+}
+/** Placeholder identity so LangGraph auth middleware allows tokenless issuance. */
+export function guestIssuanceBypassUser() {
+    return {
+        identity: GUEST_ISSUER_ACTOR,
+        permissions: [],
+        mda_actor_id: GUEST_ISSUER_ACTOR,
+    };
+}
+function constantTimeEquals(a, b) {
+    if (a.length !== b.length) {
+        return false;
+    }
+    let mismatch = 0;
+    for (let i = 0; i < a.length; i += 1) {
+        mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    }
+    return mismatch === 0;
+}
+//# sourceMappingURL=auth.js.map

package/dist/runtime/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,aAAa,EACb,YAAY,GACb,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAErD,kFAAkF;AAClF,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAE9C,kFAAkF;AAClF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAiB9C;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA4B;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAExB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAgB,EAAwB,EAAE;QACjE,IAAI,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,uBAAuB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC/B,OAAO,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,IAA8B,CAAC,CAAC;QAChE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,KAA+C,CAAC;YAClE,SAAS,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,0CAA0C;IAC1C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACnC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iBAAiB,CAAC,GAAG,EAAE,IAA8B,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAmB,EACnB,IAAiB,EACjB,KAAc;IAEd,MAAM,QAAQ,GAAG,sBAAsB,CACrC,GAAG,CAAC,OAAO,CAAC,MAAM,EAClB,GAAG,CAAC,OAAO,EACX,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EACzD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAC5D,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GACb,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,SAAS,CAAC;QACzD,CAAC,CAAE,KAAkC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IACT,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,2DAA2D;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAmB,EACnB,OAAgB;IAEhB,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,YAAY,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;IAC/D,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAExC,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,KAAK;QACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,GAAmB,EAAE,IAAiB;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,MAAM,IAAI,KAAK,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC;QAC1C,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgB;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,GAAmB,EACnB,MAA0B;IAE1B,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CACpC,OAAgB,EAChB,GAAmB;IAEnB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAC5B,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,kBAAkB;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC"}

package/dist/runtime/credentials.d.ts

@@ -0,0 +1,60 @@
+import type { CredentialTarget, IdentityConfig, ResolvedCredential, RuntimeIdentity } from "../identity.js";
+/**
+ * Component 5 — Credentials, custom mode (`scoping.credentials: "custom"`, §7.2).
+ *
+ * The escape hatch Agent Auth can't cover: bespoke per-actor credential minting
+ * via an in-process resolver callback or a hosted token-exchange endpoint. It
+ * runs in the worker (not the shared ingress auth handler), applies the output
+ * to downstream calls, and caches per `(actor, tenant, target)` until the
+ * credential's `expiresAt`. Secrets live only in this in-memory cache keyed by
+ * identity — never in thread state or traces (§7.2, §8, identity-final §10).
+ *
+ * The managed modes (`agent`/`actor`) route to Agent Auth
+ * (`@langchain/auth`/`langchain-auth`, §7.1) and are wired separately; this
+ * module is only the custom path.
+ */
+/** Env var holding the HMAC secret MDA signs the endpoint assertion with. */
+export declare const CREDENTIAL_SIGNING_SECRET_ENV = "MDA_TOKEN_EXCHANGE_SECRET";
+/** Per-call options for {@link CredentialsProvider.for}. */
+export interface CredentialForOptions {
+    /** Skip the cache and force a fresh mint (e.g. after a downstream 401). */
+    forceRefresh?: boolean;
+}
+/**
+ * The per-run credential surface a tool receives as `runtime.credentials`.
+ * Tools call `runtime.credentials.for(target)` and attach the returned headers
+ * to their downstream request.
+ */
+export interface CredentialsProvider {
+    for(target: CredentialTarget, options?: CredentialForOptions): Promise<ResolvedCredential>;
+}
+/**
+ * Side effects the executor depends on, injectable so resolution is
+ * deterministic under test (no real clock, network, or signing key).
+ */
+export interface CredentialDeps {
+    fetch: typeof fetch;
+    now: () => number;
+    /** Signs the assertion MDA presents to a hosted token-exchange endpoint. */
+    signAssertion: (identity: RuntimeIdentity, target: CredentialTarget) => Promise<string>;
+}
+/**
+ * TTL cache for resolved credentials, keyed by `(actor, tenant, target)` so
+ * per-repo/per-install tokens never collide. Kept out of thread state; entries
+ * expire at the credential's `expiresAt`.
+ */
+export declare class CredentialCache {
+    private readonly entries;
+    get(key: string, nowMs: number): ResolvedCredential | undefined;
+    set(key: string, value: ResolvedCredential): void;
+    clear(): void;
+}
+/** Clear the process-level credential cache. Test-only. */
+export declare function clearCredentialCacheForTests(): void;
+/**
+ * Build the `runtime.credentials` provider for a run, or `undefined` when the
+ * deployment isn't in custom-credentials mode. The provider is bound to the
+ * run's resolved identity; every `for(target)` call is scoped to that actor.
+ */
+export declare function createCredentialsProvider(cfg: IdentityConfig, identity: RuntimeIdentity | undefined, deps?: Partial<CredentialDeps>, cache?: CredentialCache): CredentialsProvider | undefined;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/runtime/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/runtime/credentials.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,eAAe,EAChB,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;;;;;;GAaG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,6BAA6B,8BAA8B,CAAC;AAKzE,4DAA4D;AAC5D,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,GAAG,CACD,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,4EAA4E;IAC5E,aAAa,EAAE,CACb,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,gBAAgB,KACrB,OAAO,CAAC,MAAM,CAAC,CAAC;CACtB;AAQD;;;;GAIG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IAEzD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAY/D,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI;IASjD,KAAK,IAAI,IAAI;CAGd;AAKD,2DAA2D;AAC3D,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,IAAI,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,EAC9B,KAAK,GAAE,eAA8B,GACpC,mBAAmB,GAAG,SAAS,CA8BjC"}

package/dist/runtime/credentials.js

@@ -0,0 +1,189 @@
+import { SignJWT } from "jose";
+/**
+ * Component 5 — Credentials, custom mode (`scoping.credentials: "custom"`, §7.2).
+ *
+ * The escape hatch Agent Auth can't cover: bespoke per-actor credential minting
+ * via an in-process resolver callback or a hosted token-exchange endpoint. It
+ * runs in the worker (not the shared ingress auth handler), applies the output
+ * to downstream calls, and caches per `(actor, tenant, target)` until the
+ * credential's `expiresAt`. Secrets live only in this in-memory cache keyed by
+ * identity — never in thread state or traces (§7.2, §8, identity-final §10).
+ *
+ * The managed modes (`agent`/`actor`) route to Agent Auth
+ * (`@langchain/auth`/`langchain-auth`, §7.1) and are wired separately; this
+ * module is only the custom path.
+ */
+/** Env var holding the HMAC secret MDA signs the endpoint assertion with. */
+export const CREDENTIAL_SIGNING_SECRET_ENV = "MDA_TOKEN_EXCHANGE_SECRET";
+/** How long a signed endpoint assertion is valid, in seconds. */
+const ASSERTION_TTL_SECONDS = 60;
+/**
+ * TTL cache for resolved credentials, keyed by `(actor, tenant, target)` so
+ * per-repo/per-install tokens never collide. Kept out of thread state; entries
+ * expire at the credential's `expiresAt`.
+ */
+export class CredentialCache {
+    entries = new Map();
+    get(key, nowMs) {
+        const hit = this.entries.get(key);
+        if (!hit) {
+            return undefined;
+        }
+        if (hit.expiresAtMs !== undefined && nowMs >= hit.expiresAtMs) {
+            this.entries.delete(key);
+            return undefined;
+        }
+        return hit.value;
+    }
+    set(key, value) {
+        let expiresAtMs;
+        if (value.expiresAt) {
+            const parsed = Date.parse(value.expiresAt);
+            expiresAtMs = Number.isNaN(parsed) ? undefined : parsed;
+        }
+        this.entries.set(key, { value, expiresAtMs });
+    }
+    clear() {
+        this.entries.clear();
+    }
+}
+/** Process-level cache shared across runs for the lifetime of the deployment. */
+const defaultCache = new CredentialCache();
+/** Clear the process-level credential cache. Test-only. */
+export function clearCredentialCacheForTests() {
+    defaultCache.clear();
+}
+/**
+ * Build the `runtime.credentials` provider for a run, or `undefined` when the
+ * deployment isn't in custom-credentials mode. The provider is bound to the
+ * run's resolved identity; every `for(target)` call is scoped to that actor.
+ */
+export function createCredentialsProvider(cfg, identity, deps, cache = defaultCache) {
+    if (cfg.scoping.credentials !== "custom" || !cfg.credentials) {
+        return undefined;
+    }
+    const resolved = {
+        fetch: deps?.fetch ?? fetch,
+        now: deps?.now ?? (() => Date.now()),
+        signAssertion: deps?.signAssertion ?? defaultSignAssertion,
+    };
+    return {
+        async for(target, options) {
+            if (!identity) {
+                throw new Error("runtime.credentials.for(...) requires a resolved identity, but none " +
+                    "was available for this run.");
+            }
+            const key = cacheKey(identity, target);
+            if (!options?.forceRefresh) {
+                const hit = cache.get(key, resolved.now());
+                if (hit) {
+                    return hit;
+                }
+            }
+            // Fail-closed: a resolver/endpoint error propagates and nothing is cached.
+            const out = await resolveCredential(cfg, identity, target, resolved);
+            cache.set(key, out);
+            return out;
+        },
+    };
+}
+async function resolveCredential(cfg, identity, target, deps) {
+    const creds = cfg.credentials;
+    if (!creds) {
+        throw new Error("No credentials resolver is configured for this deployment.");
+    }
+    if ("resolve" in creds) {
+        const out = await creds.resolve({ identity, target });
+        return normalizeResolved(out, "resolver");
+    }
+    const assertion = await deps.signAssertion(identity, target);
+    return callTokenExchange(creds.endpoint.url, assertion, deps);
+}
+async function callTokenExchange(url, assertion, deps) {
+    const response = await deps.fetch(url, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${assertion}`,
+        },
+        body: JSON.stringify({ assertion }),
+    });
+    if (!response.ok) {
+        throw new Error(`Credential token-exchange endpoint ${url} responded ${response.status}.`);
+    }
+    return normalizeResolved(await response.json(), `endpoint ${url}`);
+}
+async function defaultSignAssertion(identity, target) {
+    const secret = process.env[CREDENTIAL_SIGNING_SECRET_ENV];
+    if (!secret) {
+        throw new Error(`A hosted credential endpoint requires a signing secret. Set ` +
+            `${CREDENTIAL_SIGNING_SECRET_ENV} in the deployment environment.`);
+    }
+    const issuedAt = Math.floor(Date.now() / 1000);
+    return new SignJWT({
+        actor_id: identity.actor.id,
+        actor_type: identity.actor.type,
+        tenant_id: identity.tenant?.id,
+        target: { kind: target.kind, name: target.name, intent: target.intent },
+    })
+        .setProtectedHeader({ alg: "HS256" })
+        .setSubject(identity.actor.id)
+        .setIssuedAt(issuedAt)
+        .setExpirationTime(issuedAt + ASSERTION_TTL_SECONDS)
+        .sign(new TextEncoder().encode(secret));
+}
+/**
+ * The cache key that discriminates a minted credential: the actor + tenant it
+ * belongs to, plus the target's kind/name/intent/thread and metadata (§7.2).
+ */
+function cacheKey(identity, target) {
+    return stableStringify([
+        identity.actor.id,
+        identity.tenant?.id ?? null,
+        target.kind,
+        target.name,
+        target.intent ?? null,
+        target.threadId ?? null,
+        target.metadata ?? null,
+    ]);
+}
+/** Deterministic JSON with object keys sorted, so the cache key is stable. */
+function stableStringify(value) {
+    if (value === null || typeof value !== "object") {
+        return JSON.stringify(value) ?? "null";
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map(stableStringify).join(",")}]`;
+    }
+    const obj = value;
+    return `{${Object.keys(obj)
+        .sort()
+        .map((key) => `${JSON.stringify(key)}:${stableStringify(obj[key])}`)
+        .join(",")}}`;
+}
+/** Validate a resolver/endpoint result into a {@link ResolvedCredential}. */
+function normalizeResolved(value, sourceLabel) {
+    if (!value || typeof value !== "object") {
+        throw new Error(`Credential ${sourceLabel} returned a non-object result.`);
+    }
+    const { headers, expiresAt } = value;
+    if (!headers || typeof headers !== "object" || Array.isArray(headers)) {
+        throw new Error(`Credential ${sourceLabel} result is missing a headers object.`);
+    }
+    const normalizedHeaders = {};
+    for (const [name, headerValue] of Object.entries(headers)) {
+        if (typeof headerValue !== "string") {
+            throw new Error(`Credential ${sourceLabel} header "${name}" must be a string.`);
+        }
+        normalizedHeaders[name] = headerValue;
+    }
+    const result = { headers: normalizedHeaders };
+    if (expiresAt !== undefined) {
+        if (typeof expiresAt !== "string") {
+            throw new Error(`Credential ${sourceLabel} \`expiresAt\` must be an ISO string.`);
+        }
+        result.expiresAt = expiresAt;
+    }
+    return result;
+}
+//# sourceMappingURL=credentials.js.map

package/dist/runtime/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/runtime/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAS/B;;;;;;;;;;;;;GAaG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,CAAC;AAEzE,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAwCjC;;;;GAIG;AACH,MAAM,OAAO,eAAe;IACT,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEzD,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAyB;QACxC,IAAI,WAA+B,CAAC;QACpC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3C,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;AAE3C,2DAA2D;AAC3D,MAAM,UAAU,4BAA4B;IAC1C,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAmB,EACnB,QAAqC,EACrC,IAA8B,EAC9B,QAAyB,YAAY;IAErC,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAmB;QAC/B,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,KAAK;QAC3B,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,oBAAoB;KAC3D,CAAC;IACF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO;YACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CACb,sEAAsE;oBACpE,6BAA6B,CAChC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3C,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,GAAG,CAAC;gBACb,CAAC;YACH,CAAC;YACD,2EAA2E;YAC3E,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpB,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAmB,EACnB,QAAyB,EACzB,MAAwB,EACxB,IAAoB;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAW,EACX,SAAiB,EACjB,IAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,SAAS,EAAE;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,cAAc,QAAQ,CAAC,MAAM,GAAG,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,YAAY,GAAG,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,QAAyB,EACzB,MAAwB;IAExB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,8DAA8D;YAC5D,GAAG,6BAA6B,iCAAiC,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,OAAO,IAAI,OAAO,CAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC3B,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;QAC/B,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE;QAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACxE,CAAC;SACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;SAC7B,WAAW,CAAC,QAAQ,CAAC;SACrB,iBAAiB,CAAC,QAAQ,GAAG,qBAAqB,CAAC;SACnD,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,QAAyB,EAAE,MAAwB;IACnE,OAAO,eAAe,CAAC;QACrB,QAAQ,CAAC,KAAK,CAAC,EAAE;QACjB,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;QAC3B,MAAM,CAAC,IAAI;QACX,MAAM,CAAC,IAAI;QACX,MAAM,CAAC,MAAM,IAAI,IAAI;QACrB,MAAM,CAAC,QAAQ,IAAI,IAAI;QACvB,MAAM,CAAC,QAAQ,IAAI,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACxB,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;SACnE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CACxB,KAAc,EACd,WAAmB;IAEnB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,cAAc,WAAW,gCAAgC,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAG9B,CAAC;IACF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,sCAAsC,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAA2B,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,YAAY,IAAI,qBAAqB,CAC/D,CAAC;QACJ,CAAC;QACD,iBAAiB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAuB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAClE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,uCAAuC,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/runtime/identity-http.d.ts

@@ -0,0 +1,8 @@
+import { Hono } from "hono";
+import type { IdentityDefinition } from "../identity.js";
+/**
+ * Build the managed identity HTTP app (guest issuance, etc.) from a declared
+ * identity. Mounted via `langgraph.json` `http.app` when identity is enabled.
+ */
+export declare function buildManagedIdentityApp(identity: IdentityDefinition): Hono;
+//# sourceMappingURL=identity-http.d.ts.map

package/dist/runtime/identity-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-http.d.ts","sourceRoot":"","sources":["../../src/runtime/identity-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGzD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAoB1E"}

package/dist/runtime/identity-http.js

@@ -0,0 +1,23 @@
+import { Hono } from "hono";
+import { issueGuestToken } from "./validated-token.js";
+/**
+ * Build the managed identity HTTP app (guest issuance, etc.) from a declared
+ * identity. Mounted via `langgraph.json` `http.app` when identity is enabled.
+ */
+export function buildManagedIdentityApp(identity) {
+    const app = new Hono();
+    const http = identity.config.ingress.http;
+    if (http === "trusted_backend") {
+        return app;
+    }
+    const guestProvider = http.providers.find((provider) => provider.guest?.issue);
+    if (!guestProvider) {
+        return app;
+    }
+    app.post("/identity/guest", async (c) => {
+        const token = await issueGuestToken(guestProvider);
+        return c.json({ token });
+    });
+    return app;
+}
+//# sourceMappingURL=identity-http.js.map

package/dist/runtime/identity-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-http.js","sourceRoot":"","sources":["../../src/runtime/identity-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAA4B;IAClE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1C,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CACvC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CACpC,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/runtime/identity-runtime.d.ts

@@ -0,0 +1,54 @@
+import type { IdentityConfig, MemoryScope, RuntimeIdentity, Tenancy } from "../identity.js";
+import type { ConfigurableCarrier } from "./types.js";
+/**
+ * Resolve the LangGraph `configurable` bag from either a flat runtime or the
+ * nested `ToolRuntime` shape LangChain passes to tools (`runtime.config.configurable`).
+ */
+export declare function resolveRuntimeConfigurable(runtime: RuntimeConfigLike | undefined): Record<string, unknown> | undefined;
+/**
+ * Build the frozen identity envelope for the current run from the trusted
+ * `langgraph_auth_user` the custom-auth handler produced (§6.1). Returns
+ * `undefined` when the deployment has no resolvable actor (identity is opt-in).
+ */
+export declare function buildRuntimeIdentity(configurable: Record<string, unknown> | undefined): RuntimeIdentity | undefined;
+/**
+ * The durable Store namespace for the run, per `scoping.memory` (§6.2). A
+ * `deploymentId` prefix isolates deployments; identity segments follow. Returns
+ * `undefined` for `none` (no durable memory). Fail-closed: an `actor` scope with
+ * no actor already rejects at ingress, so the segments are never empty here.
+ */
+export declare function memoryNamespace(cfg: IdentityConfig, ident: RuntimeIdentity, deploymentId: string): string[] | undefined;
+/**
+ * The runtime the managed seam sees: the shared `configurable` carrier, plus the
+ * optional nested `config` (e.g. LangGraph `ToolRuntime.config`) and the frozen
+ * `identity` envelope the seam layers on. Single source for the tool, middleware,
+ * and memory-namespace helpers.
+ */
+export interface RuntimeConfigLike extends ConfigurableCarrier {
+    identity?: RuntimeIdentity;
+    config?: {
+        configurable?: Record<string, unknown>;
+    };
+}
+/**
+ * Resolve the durable memory namespace for a run directly from the runtime the
+ * memory `StoreBackend` receives, per `scoping.memory` (§6.2). This is the
+ * plug-in point for the (deferred) Store-backed memory: a `StoreBackend`
+ * namespace factory becomes `(ctx) => memoryNamespaceFor(ctx.runtime, cfg, id)`.
+ * Returns `undefined` when the run has no durable namespace (`none`, or a
+ * per-actor scope with no resolved actor).
+ */
+export declare function memoryNamespaceFor(runtime: RuntimeConfigLike | undefined, cfg: IdentityConfig, deploymentId: string): string[] | undefined;
+/**
+ * The identity portion of the memory namespace (no deployment prefix), shared by
+ * the memory `StoreBackend` and the `@auth.on.store` boundary check so both agree
+ * on exactly which segments identify a namespace.
+ */
+export declare function memoryIdentitySegments(scope: MemoryScope, tenancy: Tenancy, actorId: string | undefined, tenantId: string | undefined): string[];
+/**
+ * Strip client-supplied identity keys from an incoming `configurable` so a
+ * request body can never spoof the actor/tenant the handler resolved (§8). The
+ * platform-set `langgraph_auth_user` is preserved — it is the only trusted source.
+ */
+export declare function sanitizeConfigurable(configurable: Record<string, unknown> | undefined): Record<string, unknown>;
+//# sourceMappingURL=identity-runtime.d.ts.map

package/dist/runtime/identity-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-runtime.d.ts","sourceRoot":"","sources":["../../src/runtime/identity-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,eAAe,EACf,OAAO,EACR,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA0BtD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iBAAiB,GAAG,SAAS,GACrC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAErC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAChD,eAAe,GAAG,SAAS,CAyB7B;AAaD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,eAAe,EACtB,YAAY,EAAE,MAAM,GACnB,MAAM,EAAE,GAAG,SAAS,CAiBtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC5D,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CACrD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,iBAAiB,GAAG,SAAS,EACtC,GAAG,EAAE,cAAc,EACnB,YAAY,EAAE,MAAM,GACnB,MAAM,EAAE,GAAG,SAAS,CAQtB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,MAAM,EAAE,CAgBV;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAChD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASzB"}