managed-deepagents 0.0.3-dev.26 → 0.0.3-dev.31

package/dist/index.d.ts

@@ -1,9 +1,14 @@
 export { defineDeepAgent } from "./define-deep-agent.js";
 export { defineMcpServers } from "./connectors.js";
+export * as langsmith from "./connectors/langsmith.js";
+export type { LangSmithCapability, LangSmithCallerSurface, LangSmithCapabilityScope, LangSmithConnector, LangSmithConnectorConfig, LangSmithResource, LangSmithResponseShape, } from "./connectors/langsmith.js";
 export { defineSchedule } from "./schedules.js";
 export { defineSandbox } from "./sandbox.js";
+export { defineIdentity, providers, validateIdentity } from "./identity.js";
+export type { CredentialResolver, CredentialResolverConfig, CredentialScope, CredentialTarget, DefineIdentity, HttpIngress, IdentityConfig, IdentityDefinition, IdentityPresetName, MemoryScope, ResolvedCredential, RuntimeIdentity, Tenancy, ThreadScope, ValidatedTokenIngress, ValidatedTokenProvider, } from "./identity.js";
 export type { HttpMcpServerConfig, McpServersConfig, McpServersDefinition, McpToolSelectionConfig, RemoteMcpServerBaseConfig, RemoteMcpServerConfig, SseMcpServerConfig, } from "./connectors.js";
 export type { ScheduleConfig, ScheduleDefinition, ScheduleDeliveryTarget, ScheduleThreadConfig, } from "./schedules.js";
 export type { ChannelAttachment, ChannelDestination, ChannelEvent, ChannelMessage, ChannelPostOptions, DeepAgentDefinition, DefineDeepAgentConfig, ManagedDeepAgentKey, PostedChannelMessage, Runtime, RuntimeChannel, } from "./types.js";
+export type { ManagedDeepAgentRuntime, ManagedRuntimeExtras, } from "./runtime/managed-tools.js";
 export type { DefineSandboxOptions, ManagedSandboxOptionKey, SandboxDefinition, SandboxProviderClass, SandboxProviderOptions, SandboxScope, } from "./sandbox.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,OAAO,EACP,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,GACb,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,SAAS,MAAM,2BAA2B,CAAC;AACvD,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE5E,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,OAAO,EACP,WAAW,EACX,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,OAAO,EACP,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAEpC,YAAY,EACV,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,GACb,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -1,5 +1,7 @@
 export { defineDeepAgent } from "./define-deep-agent.js";
 export { defineMcpServers } from "./connectors.js";
+export * as langsmith from "./connectors/langsmith.js";
 export { defineSchedule } from "./schedules.js";
 export { defineSandbox } from "./sandbox.js";
+export { defineIdentity, providers, validateIdentity } from "./identity.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,SAAS,MAAM,2BAA2B,CAAC;AAUvD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}

package/dist/runtime/auth.d.ts

@@ -0,0 +1,54 @@
+import { Auth } from "@langchain/langgraph-sdk/auth";
+import type { IdentityConfig, IdentityDefinition, RuntimeIdentity } from "../identity.js";
+/**
+ * The user object `@auth.authenticate` returns. `identity`/`permissions` satisfy
+ * the LangGraph base shape; the `mda_*` fields carry the identity envelope into
+ * `config.configurable.langgraph_auth_user` for the runtime seam.
+ */
+export interface ManagedUser {
+    identity: string;
+    permissions: string[];
+    mda_actor_id: string;
+    mda_tenant_id?: string;
+    mda_actor_email?: string;
+    mda_claims?: Record<string, unknown>;
+    [key: string]: unknown;
+}
+/**
+ * Build the managed LangGraph custom-auth handler from a declared identity.
+ *
+ * Handles both ingress modes: `trusted_backend` (reserved headers behind a
+ * shared ingress secret) and `validated_token` (browser-direct IdP tokens
+ * verified via JWKS / introspection / MDA-signed guest). Also registers thread
+ * and store scoping with a studio bypass.
+ */
+export declare function buildManagedAuth(identity: IdentityDefinition): Auth;
+/**
+ * Resolve the caller's frozen {@link RuntimeIdentity} from a raw HTTP request,
+ * using the same ingress logic (`trusted_backend` headers / `validated_token`
+ * verification) as the managed auth handler. Throws an {@link HTTPException}
+ * (401) when the caller is unauthenticated or unresolvable.
+ *
+ * This is the resolver that backs default-secure connector HTTP routes: a
+ * connector route runs behind identity by default, and this is what enforces it.
+ */
+export declare function resolveRequestIdentity(cfg: IdentityConfig, request: Request): Promise<RuntimeIdentity>;
+/**
+ * Fail-closed (403) unless every identity segment the memory scope requires is
+ * present in the store `namespace`. `agent`/`none` scopes carry no per-identity
+ * restriction (shared or absent memory), so any namespace is allowed.
+ */
+export declare function assertStoreAccess(cfg: IdentityConfig, user: ManagedUser, value: unknown): void;
+/**
+ * Resolve the caller identity for `trusted_backend`: validate the shared ingress
+ * secret, then trust the reserved actor/tenant headers. Fail-closed (401) on a
+ * missing/invalid secret, a missing actor, or a missing tenant under multi.
+ */
+export declare function resolveTrustedBackendUser(cfg: IdentityConfig, request: Request): ManagedUser;
+/** Derive the owner value `@auth.on.threads` filters on, per the `threads` axis. */
+export declare function threadOwnerKey(cfg: IdentityConfig, user: ManagedUser): string;
+/** True when this deployment exposes guest issuance and the request targets it. */
+export declare function isGuestIssuanceRequest(request: Request, cfg: IdentityConfig): boolean;
+/** Placeholder identity so LangGraph auth middleware allows tokenless issuance. */
+export declare function guestIssuanceBypassUser(): ManagedUser;
+//# sourceMappingURL=auth.d.ts.map

package/dist/runtime/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EAGL,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EACV,cAAc,EACd,kBAAkB,EAClB,eAAe,EAChB,MAAM,gBAAgB,CAAC;AA0BxB;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAsCnE;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,eAAe,CAAC,CAc1B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,OAAO,GACb,IAAI,CAuBN;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,WAAW,CAgBb;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,CAY7E;AAuBD,mFAAmF;AACnF,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,cAAc,GAClB,OAAO,CAaT;AAED,mFAAmF;AACnF,wBAAgB,uBAAuB,IAAI,WAAW,CAMrD"}

package/dist/runtime/auth.js

@@ -0,0 +1,191 @@
+import { Auth, HTTPException, isStudioUser, } from "@langchain/langgraph-sdk/auth";
+import { buildRuntimeIdentity, memoryIdentitySegments, } from "./identity-runtime.js";
+import { resolveValidatedTokenUser } from "./validated-token.js";
+/**
+ * Reserved transport for the trusted-backend ingress mode. Actor/tenant travel
+ * as reserved headers (mapped into `config.configurable` by the generated
+ * `langgraph.json` allowlist); the ingress secret is validated here and is
+ * deliberately **not** allowlisted, so it never reaches `config.configurable`.
+ */
+const ACTOR_HEADER = "x-mda-actor-id";
+const TENANT_HEADER = "x-mda-tenant-id";
+const INGRESS_SECRET_HEADER = "x-mda-ingress-secret";
+/** Deployment env var carrying the shared secret the trusted backend presents. */
+const INGRESS_SECRET_ENV = "MDA_INGRESS_SECRET";
+/** Path MDA exposes for anonymous guest token issuance (must stay public). */
+const GUEST_ISSUANCE_PATH = "/identity/guest";
+/** Synthetic actor used only to satisfy auth middleware on the issuance route. */
+const GUEST_ISSUER_ACTOR = "mda:guest-issuer";
+/**
+ * Build the managed LangGraph custom-auth handler from a declared identity.
+ *
+ * Handles both ingress modes: `trusted_backend` (reserved headers behind a
+ * shared ingress secret) and `validated_token` (browser-direct IdP tokens
+ * verified via JWKS / introspection / MDA-signed guest). Also registers thread
+ * and store scoping with a studio bypass.
+ */
+export function buildManagedAuth(identity) {
+    const cfg = identity.config;
+    const http = cfg.ingress.http;
+    const auth = new Auth();
+    auth.authenticate(async (request) => {
+        if (isGuestIssuanceRequest(request, cfg)) {
+            return guestIssuanceBypassUser();
+        }
+        if (http === "trusted_backend") {
+            return resolveTrustedBackendUser(cfg, request);
+        }
+        return resolveValidatedTokenUser(cfg, http, request);
+    });
+    auth.on("threads", ({ user, value }) => {
+        if (isStudioUser(user)) {
+            return true;
+        }
+        const key = threadOwnerKey(cfg, user);
+        if (value && typeof value === "object") {
+            const container = value;
+            container.metadata = { ...(container.metadata ?? {}), owner: key };
+        }
+        return { owner: key };
+    });
+    // Mirror the memory namespace so raw store ops can't cross the identity
+    // boundary a run is scoped to (§5, §6.2).
+    auth.on("store", ({ user, value }) => {
+        if (isStudioUser(user)) {
+            return true;
+        }
+        assertStoreAccess(cfg, user, value);
+        return true;
+    });
+    return auth;
+}
+/**
+ * Resolve the caller's frozen {@link RuntimeIdentity} from a raw HTTP request,
+ * using the same ingress logic (`trusted_backend` headers / `validated_token`
+ * verification) as the managed auth handler. Throws an {@link HTTPException}
+ * (401) when the caller is unauthenticated or unresolvable.
+ *
+ * This is the resolver that backs default-secure connector HTTP routes: a
+ * connector route runs behind identity by default, and this is what enforces it.
+ */
+export async function resolveRequestIdentity(cfg, request) {
+    const http = cfg.ingress.http;
+    const user = http === "trusted_backend"
+        ? resolveTrustedBackendUser(cfg, request)
+        : await resolveValidatedTokenUser(cfg, http, request);
+    const identity = buildRuntimeIdentity({
+        langgraph_auth_user: user,
+        mda_source_provider: "http",
+    });
+    if (!identity) {
+        throw new HTTPException(401, { message: "unauthenticated" });
+    }
+    return identity;
+}
+/**
+ * Fail-closed (403) unless every identity segment the memory scope requires is
+ * present in the store `namespace`. `agent`/`none` scopes carry no per-identity
+ * restriction (shared or absent memory), so any namespace is allowed.
+ */
+export function assertStoreAccess(cfg, user, value) {
+    const required = memoryIdentitySegments(cfg.scoping.memory, cfg.tenancy, user.mda_actor_id ? String(user.mda_actor_id) : undefined, user.mda_tenant_id ? String(user.mda_tenant_id) : undefined);
+    if (required.length === 0) {
+        return;
+    }
+    const namespace = value &&
+        typeof value === "object" &&
+        Array.isArray(value.namespace)
+        ? value.namespace.map(String)
+        : [];
+    for (const segment of required) {
+        if (!namespace.includes(segment)) {
+            throw new HTTPException(403, {
+                message: "store namespace is outside the caller's identity boundary",
+            });
+        }
+    }
+}
+/**
+ * Resolve the caller identity for `trusted_backend`: validate the shared ingress
+ * secret, then trust the reserved actor/tenant headers. Fail-closed (401) on a
+ * missing/invalid secret, a missing actor, or a missing tenant under multi.
+ */
+export function resolveTrustedBackendUser(cfg, request) {
+    requireIngressSecret(request);
+    const actor = request.headers.get(ACTOR_HEADER);
+    if (!actor) {
+        throw new HTTPException(401, { message: `missing ${ACTOR_HEADER}` });
+    }
+    const tenant = request.headers.get(TENANT_HEADER) ?? undefined;
+    assertTenantPresentIfMulti(cfg, tenant);
+    return {
+        identity: actor,
+        permissions: [],
+        mda_actor_id: actor,
+        ...(tenant ? { mda_tenant_id: tenant } : {}),
+    };
+}
+/** Derive the owner value `@auth.on.threads` filters on, per the `threads` axis. */
+export function threadOwnerKey(cfg, user) {
+    const scope = cfg.scoping.threads ?? "actor";
+    const actor = String(user.mda_actor_id ?? "");
+    const tenant = user.mda_tenant_id ? String(user.mda_tenant_id) : undefined;
+    if (scope === "tenant") {
+        return tenant ?? actor;
+    }
+    if (scope === "channel") {
+        const channel = user.mda_source_thread_id;
+        return channel ? String(channel) : actor;
+    }
+    return actor;
+}
+function requireIngressSecret(request) {
+    const expected = process.env[INGRESS_SECRET_ENV];
+    const provided = request.headers.get(INGRESS_SECRET_HEADER);
+    if (!expected || !provided || !constantTimeEquals(expected, provided)) {
+        throw new HTTPException(401, {
+            message: "invalid or missing ingress secret",
+        });
+    }
+}
+function assertTenantPresentIfMulti(cfg, tenant) {
+    if (cfg.tenancy === "multi" && !tenant) {
+        throw new HTTPException(401, {
+            message: "missing tenant for multi-tenant deployment",
+        });
+    }
+}
+/** True when this deployment exposes guest issuance and the request targets it. */
+export function isGuestIssuanceRequest(request, cfg) {
+    if (request.method !== "POST") {
+        return false;
+    }
+    const { pathname } = new URL(request.url);
+    if (pathname !== GUEST_ISSUANCE_PATH) {
+        return false;
+    }
+    const http = cfg.ingress.http;
+    if (http === "trusted_backend") {
+        return false;
+    }
+    return http.providers.some((provider) => provider.guest?.issue);
+}
+/** Placeholder identity so LangGraph auth middleware allows tokenless issuance. */
+export function guestIssuanceBypassUser() {
+    return {
+        identity: GUEST_ISSUER_ACTOR,
+        permissions: [],
+        mda_actor_id: GUEST_ISSUER_ACTOR,
+    };
+}
+function constantTimeEquals(a, b) {
+    if (a.length !== b.length) {
+        return false;
+    }
+    let mismatch = 0;
+    for (let i = 0; i < a.length; i += 1) {
+        mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    }
+    return mismatch === 0;
+}
+//# sourceMappingURL=auth.js.map

package/dist/runtime/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,aAAa,EACb,YAAY,GACb,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAErD,kFAAkF;AAClF,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAE9C,kFAAkF;AAClF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAiB9C;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA4B;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAExB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAgB,EAAwB,EAAE;QACjE,IAAI,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,uBAAuB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC/B,OAAO,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,IAA8B,CAAC,CAAC;QAChE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,KAA+C,CAAC;YAClE,SAAS,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,0CAA0C;IAC1C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACnC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iBAAiB,CAAC,GAAG,EAAE,IAA8B,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAmB,EACnB,OAAgB;IAEhB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GACR,IAAI,KAAK,iBAAiB;QACxB,CAAC,CAAC,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC;QACzC,CAAC,CAAC,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,mBAAmB,EAAE,IAAI;QACzB,mBAAmB,EAAE,MAAM;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAmB,EACnB,IAAiB,EACjB,KAAc;IAEd,MAAM,QAAQ,GAAG,sBAAsB,CACrC,GAAG,CAAC,OAAO,CAAC,MAAM,EAClB,GAAG,CAAC,OAAO,EACX,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EACzD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAC5D,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GACb,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,SAAS,CAAC;QACzD,CAAC,CAAE,KAAkC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IACT,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,2DAA2D;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAmB,EACnB,OAAgB;IAEhB,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,YAAY,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;IAC/D,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAExC,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,KAAK;QACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,GAAmB,EAAE,IAAiB;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,MAAM,IAAI,KAAK,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC;QAC1C,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgB;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,GAAmB,EACnB,MAA0B;IAE1B,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CACpC,OAAgB,EAChB,GAAmB;IAEnB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAC5B,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,kBAAkB;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC"}

package/dist/runtime/connector.d.ts

@@ -0,0 +1,138 @@
+/**
+ * The managed connector protocol.
+ *
+ * A connector is any object carrying {@link CONNECTOR_BRAND} that knows how to
+ * contribute to a managed Deep Agent. MCP is one built-in implementation
+ * (contributes tools); the LangSmith connector is another (mounts HTTP routes).
+ * Third parties implement the same interface with their own `kind` — nothing
+ * about the built-ins is privileged.
+ *
+ * Discovery is name-agnostic: the CLI globs every module under `connectors/`,
+ * imports the single connector each one exposes as its default export, and hands
+ * them to {@link collectConnectors}, which validates the brand at build/startup.
+ * The two generated entrypoints each call the hook they care about — the agent
+ * graph calls {@link Connector.tools}, the managed HTTP app calls
+ * {@link Connector.http}.
+ */
+import type { IdentityConfig, RuntimeIdentity } from "../identity.js";
+/**
+ * Realm-global brand marking a value as a managed connector. `Symbol.for` keeps
+ * the identity stable across duplicate module instances (e.g. a connector built
+ * against one copy of the package and collected by another).
+ */
+export declare const CONNECTOR_BRAND: unique symbol;
+/**
+ * Build-time context handed to {@link Connector.tools} during agent-graph
+ * construction. Intentionally minimal for v0: a connector's tools close over
+ * their own configuration, and per-run identity flows through the existing
+ * runtime seam into each tool's `invoke`, not through here. Reserved for future
+ * deployment metadata.
+ */
+export type ToolContext = Record<string, never>;
+/**
+ * Request context handed to {@link Connector.http} when the managed HTTP app is
+ * built. The connector receives its own namespaced sub-router (collision-safe),
+ * the declared identity for its own authorization logic, and a
+ * {@link HttpContext.requireIdentity} helper that fails closed.
+ */
+export interface HttpContext {
+    /**
+     * Router the connector mounts its routes on. Already namespaced under the
+     * connector, so routes cannot collide with identity/API routes or with other
+     * connectors. Routes registered here are **secure by default** — MDA resolves
+     * and enforces caller identity before the handler runs (see
+     * {@link HttpSubRouter}).
+     */
+    readonly router: HttpSubRouter;
+    /** The declared identity, for the connector's own authorization decisions. */
+    readonly identity?: IdentityConfig;
+    /**
+     * Resolve the caller identity from the raw request, reusing the same resolver
+     * as the managed auth handler. Throws a 401-style error when identity is
+     * absent or invalid. Secured routes already resolve identity for you; use this
+     * only inside a {@link HttpSubRouter.public} route that wants optional or
+     * conditional authentication.
+     */
+    requireIdentity(request: Request): Promise<RuntimeIdentity>;
+}
+/**
+ * The router a connector uses to register routes. Structural so the managed app
+ * can back it with Hono without leaking the framework type into the contract.
+ *
+ * Routes registered on this router are **secure by default**: MDA resolves the
+ * caller's identity (401 on failure) before invoking the handler, and passes the
+ * frozen {@link RuntimeIdentity} as the handler's second argument. Authorization
+ * (scopes, constraints, ownership) remains the connector's job.
+ *
+ * A route that must be reachable without authentication (webhooks, health
+ * checks, public callbacks) has to opt out **explicitly** via
+ * {@link HttpSubRouter.public} — the unauthenticated surface is never the
+ * accidental default.
+ */
+export interface HttpSubRouter {
+    get(path: string, handler: SecuredRouteHandler): void;
+    post(path: string, handler: SecuredRouteHandler): void;
+    put(path: string, handler: SecuredRouteHandler): void;
+    delete(path: string, handler: SecuredRouteHandler): void;
+    /** Explicit opt-out: routes reachable without MDA identity enforcement. */
+    readonly public: PublicSubRouter;
+}
+/** The unauthenticated router surface, reached only via {@link HttpSubRouter.public}. */
+export interface PublicSubRouter {
+    get(path: string, handler: PublicRouteHandler): void;
+    post(path: string, handler: PublicRouteHandler): void;
+    put(path: string, handler: PublicRouteHandler): void;
+    delete(path: string, handler: PublicRouteHandler): void;
+}
+/**
+ * Handler for a secured route. MDA has already resolved and enforced the
+ * caller's identity, which it passes as the second argument.
+ */
+export type SecuredRouteHandler = (request: Request, identity: RuntimeIdentity) => Response | Promise<Response>;
+/** Handler for an explicitly public route. No identity is resolved by MDA. */
+export type PublicRouteHandler = (request: Request) => Response | Promise<Response>;
+/** Tools a connector contributes to the agent. Kept structural (`unknown[]`). */
+export type ConnectorToolList = unknown[];
+/**
+ * A managed connector. Implement at least one of {@link Connector.tools} or
+ * {@link Connector.http}; a connector implementing neither does nothing and is
+ * rejected by {@link collectConnectors}.
+ */
+export interface Connector {
+    readonly [CONNECTOR_BRAND]: true;
+    /** Diagnostic label, e.g. `"mcp_servers"` or `"langsmith"`. Not used for routing. */
+    readonly kind: string;
+    /** Contribute tools during agent-graph construction. MCP implements this. */
+    tools?(ctx: ToolContext): ConnectorToolList | Promise<ConnectorToolList>;
+    /** Mount HTTP routes during managed-app construction. LangSmith implements this. */
+    http?(ctx: HttpContext): void | Promise<void>;
+}
+/**
+ * Run the `tools` hook of every connector that implements it and concatenate the
+ * results, preserving connector order. Connectors without a `tools` hook (e.g.
+ * HTTP-only connectors) contribute nothing.
+ */
+export declare function loadConnectorTools(connectors: readonly Connector[], ctx?: ToolContext): Promise<unknown[]>;
+/** A discovered `connectors/` module paired with its source path for diagnostics. */
+export interface DiscoveredConnectorModule {
+    /** Project-relative path of the module, used in error messages. */
+    readonly source: string;
+    /** The imported module namespace; its default export is the connector. */
+    readonly module: {
+        default?: unknown;
+    } & Record<string, unknown>;
+}
+/** Narrow an arbitrary value to a {@link Connector} by its brand and hooks. */
+export declare function isConnector(value: unknown): value is Connector;
+/**
+ * Validate and collect the connectors discovered under `connectors/`.
+ *
+ * Each module must expose exactly one connector as its default export. A module
+ * whose default export is missing or is not a branded connector is a hard build
+ * error — the file was placed under `connectors/` on purpose, so a silent no-op
+ * would be the worst outcome. A connector implementing neither hook is likewise
+ * rejected. Duplicate connector objects (re-exported from two modules) are
+ * de-duplicated by identity.
+ */
+export declare function collectConnectors(modules: readonly DiscoveredConnectorModule[]): Connector[];
+//# sourceMappingURL=connector.d.ts.map

package/dist/runtime/connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../src/runtime/connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,OAAO,MAAoC,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC;;;;;;OAMG;IACH,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC7D;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACtD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACvD,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACtD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACzD,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CAClC;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACrD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACtD,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACrD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzD;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,eAAe,KACtB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,8EAA8E;AAC9E,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,OAAO,KACb,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,iFAAiF;AACjF,MAAM,MAAM,iBAAiB,GAAG,OAAO,EAAE,CAAC;AAE1C;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC;IACjC,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,KAAK,CAAC,CAAC,GAAG,EAAE,WAAW,GAAG,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzE,oFAAoF;IACpF,IAAI,CAAC,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,SAAS,SAAS,EAAE,EAChC,GAAG,GAAE,WAAgB,GACpB,OAAO,CAAC,OAAO,EAAE,CAAC,CAQpB;AAED,qFAAqF;AACrF,MAAM,WAAW,yBAAyB;IACxC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClE;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAM9D;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,yBAAyB,EAAE,GAC5C,SAAS,EAAE,CAoCb"}

package/dist/runtime/connector.js

@@ -0,0 +1,82 @@
+/**
+ * The managed connector protocol.
+ *
+ * A connector is any object carrying {@link CONNECTOR_BRAND} that knows how to
+ * contribute to a managed Deep Agent. MCP is one built-in implementation
+ * (contributes tools); the LangSmith connector is another (mounts HTTP routes).
+ * Third parties implement the same interface with their own `kind` — nothing
+ * about the built-ins is privileged.
+ *
+ * Discovery is name-agnostic: the CLI globs every module under `connectors/`,
+ * imports the single connector each one exposes as its default export, and hands
+ * them to {@link collectConnectors}, which validates the brand at build/startup.
+ * The two generated entrypoints each call the hook they care about — the agent
+ * graph calls {@link Connector.tools}, the managed HTTP app calls
+ * {@link Connector.http}.
+ */
+/**
+ * Realm-global brand marking a value as a managed connector. `Symbol.for` keeps
+ * the identity stable across duplicate module instances (e.g. a connector built
+ * against one copy of the package and collected by another).
+ */
+export const CONNECTOR_BRAND = Symbol.for("mda.connector");
+/**
+ * Run the `tools` hook of every connector that implements it and concatenate the
+ * results, preserving connector order. Connectors without a `tools` hook (e.g.
+ * HTTP-only connectors) contribute nothing.
+ */
+export async function loadConnectorTools(connectors, ctx = {}) {
+    const tools = [];
+    for (const connector of connectors) {
+        if (typeof connector.tools === "function") {
+            tools.push(...(await connector.tools(ctx)));
+        }
+    }
+    return tools;
+}
+/** Narrow an arbitrary value to a {@link Connector} by its brand and hooks. */
+export function isConnector(value) {
+    if (typeof value !== "object" || value === null) {
+        return false;
+    }
+    const branded = value[CONNECTOR_BRAND];
+    return branded === true;
+}
+/**
+ * Validate and collect the connectors discovered under `connectors/`.
+ *
+ * Each module must expose exactly one connector as its default export. A module
+ * whose default export is missing or is not a branded connector is a hard build
+ * error — the file was placed under `connectors/` on purpose, so a silent no-op
+ * would be the worst outcome. A connector implementing neither hook is likewise
+ * rejected. Duplicate connector objects (re-exported from two modules) are
+ * de-duplicated by identity.
+ */
+export function collectConnectors(modules) {
+    const collected = [];
+    const seen = new Set();
+    for (const { source, module } of modules) {
+        const candidate = module.default;
+        if (candidate === undefined) {
+            throw new Error(`${source} exports no default connector. A file under connectors/ must ` +
+                `\`export default\` exactly one connector (e.g. ` +
+                `\`export default defineMcpServers(...)\`). Move helpers outside connectors/.`);
+        }
+        if (!isConnector(candidate)) {
+            throw new Error(`${source} default export is not a managed connector. Export the result ` +
+                `of a connector builder such as \`defineMcpServers(...)\`.`);
+        }
+        if (typeof candidate.tools !== "function" &&
+            typeof candidate.http !== "function") {
+            throw new Error(`${source} default export (kind "${candidate.kind}") implements neither ` +
+                `\`tools\` nor \`http\` and would do nothing.`);
+        }
+        if (seen.has(candidate)) {
+            continue;
+        }
+        seen.add(candidate);
+        collected.push(candidate);
+    }
+    return collected;
+}
+//# sourceMappingURL=connector.js.map

package/dist/runtime/connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../src/runtime/connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAkB,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AAqG1E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAgC,EAChC,MAAmB,EAAE;IAErB,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAUD,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAI,KAAsC,CAAC,eAAe,CAAC,CAAC;IACzE,OAAO,OAAO,KAAK,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA6C;IAE7C,MAAM,SAAS,GAAgB,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAa,CAAC;IAElC,KAAK,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC;QACjC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,+DAA+D;gBACtE,iDAAiD;gBACjD,8EAA8E,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,gEAAgE;gBACvE,2DAA2D,CAC9D,CAAC;QACJ,CAAC;QACD,IACE,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU;YACrC,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU,EACpC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,0BAA0B,SAAS,CAAC,IAAI,wBAAwB;gBACvE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpB,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/runtime/credentials.d.ts

@@ -0,0 +1,60 @@
+import type { CredentialTarget, IdentityConfig, ResolvedCredential, RuntimeIdentity } from "../identity.js";
+/**
+ * Component 5 — Credentials, custom mode (`scoping.credentials: "custom"`, §7.2).
+ *
+ * The escape hatch Agent Auth can't cover: bespoke per-actor credential minting
+ * via an in-process resolver callback or a hosted token-exchange endpoint. It
+ * runs in the worker (not the shared ingress auth handler), applies the output
+ * to downstream calls, and caches per `(actor, tenant, target)` until the
+ * credential's `expiresAt`. Secrets live only in this in-memory cache keyed by
+ * identity — never in thread state or traces (§7.2, §8, identity-final §10).
+ *
+ * The managed modes (`agent`/`actor`) route to Agent Auth
+ * (`@langchain/auth`/`langchain-auth`, §7.1) and are wired separately; this
+ * module is only the custom path.
+ */
+/** Env var holding the HMAC secret MDA signs the endpoint assertion with. */
+export declare const CREDENTIAL_SIGNING_SECRET_ENV = "MDA_TOKEN_EXCHANGE_SECRET";
+/** Per-call options for {@link CredentialsProvider.for}. */
+export interface CredentialForOptions {
+    /** Skip the cache and force a fresh mint (e.g. after a downstream 401). */
+    forceRefresh?: boolean;
+}
+/**
+ * The per-run credential surface a tool receives as `runtime.credentials`.
+ * Tools call `runtime.credentials.for(target)` and attach the returned headers
+ * to their downstream request.
+ */
+export interface CredentialsProvider {
+    for(target: CredentialTarget, options?: CredentialForOptions): Promise<ResolvedCredential>;
+}
+/**
+ * Side effects the executor depends on, injectable so resolution is
+ * deterministic under test (no real clock, network, or signing key).
+ */
+export interface CredentialDeps {
+    fetch: typeof fetch;
+    now: () => number;
+    /** Signs the assertion MDA presents to a hosted token-exchange endpoint. */
+    signAssertion: (identity: RuntimeIdentity, target: CredentialTarget) => Promise<string>;
+}
+/**
+ * TTL cache for resolved credentials, keyed by `(actor, tenant, target)` so
+ * per-repo/per-install tokens never collide. Kept out of thread state; entries
+ * expire at the credential's `expiresAt`.
+ */
+export declare class CredentialCache {
+    private readonly entries;
+    get(key: string, nowMs: number): ResolvedCredential | undefined;
+    set(key: string, value: ResolvedCredential): void;
+    clear(): void;
+}
+/** Clear the process-level credential cache. Test-only. */
+export declare function clearCredentialCacheForTests(): void;
+/**
+ * Build the `runtime.credentials` provider for a run, or `undefined` when the
+ * deployment isn't in custom-credentials mode. The provider is bound to the
+ * run's resolved identity; every `for(target)` call is scoped to that actor.
+ */
+export declare function createCredentialsProvider(cfg: IdentityConfig, identity: RuntimeIdentity | undefined, deps?: Partial<CredentialDeps>, cache?: CredentialCache): CredentialsProvider | undefined;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/runtime/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/runtime/credentials.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,eAAe,EAChB,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;;;;;;GAaG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,6BAA6B,8BAA8B,CAAC;AAKzE,4DAA4D;AAC5D,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,GAAG,CACD,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,4EAA4E;IAC5E,aAAa,EAAE,CACb,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,gBAAgB,KACrB,OAAO,CAAC,MAAM,CAAC,CAAC;CACtB;AAQD;;;;GAIG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IAEzD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAY/D,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI;IASjD,KAAK,IAAI,IAAI;CAGd;AAKD,2DAA2D;AAC3D,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,IAAI,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,EAC9B,KAAK,GAAE,eAA8B,GACpC,mBAAmB,GAAG,SAAS,CA8BjC"}