managed-deepagents 0.0.3-dev.26 → 0.0.3-dev.31

package/dist/runtime/credentials.js

@@ -0,0 +1,189 @@
+import { SignJWT } from "jose";
+/**
+ * Component 5 — Credentials, custom mode (`scoping.credentials: "custom"`, §7.2).
+ *
+ * The escape hatch Agent Auth can't cover: bespoke per-actor credential minting
+ * via an in-process resolver callback or a hosted token-exchange endpoint. It
+ * runs in the worker (not the shared ingress auth handler), applies the output
+ * to downstream calls, and caches per `(actor, tenant, target)` until the
+ * credential's `expiresAt`. Secrets live only in this in-memory cache keyed by
+ * identity — never in thread state or traces (§7.2, §8, identity-final §10).
+ *
+ * The managed modes (`agent`/`actor`) route to Agent Auth
+ * (`@langchain/auth`/`langchain-auth`, §7.1) and are wired separately; this
+ * module is only the custom path.
+ */
+/** Env var holding the HMAC secret MDA signs the endpoint assertion with. */
+export const CREDENTIAL_SIGNING_SECRET_ENV = "MDA_TOKEN_EXCHANGE_SECRET";
+/** How long a signed endpoint assertion is valid, in seconds. */
+const ASSERTION_TTL_SECONDS = 60;
+/**
+ * TTL cache for resolved credentials, keyed by `(actor, tenant, target)` so
+ * per-repo/per-install tokens never collide. Kept out of thread state; entries
+ * expire at the credential's `expiresAt`.
+ */
+export class CredentialCache {
+    entries = new Map();
+    get(key, nowMs) {
+        const hit = this.entries.get(key);
+        if (!hit) {
+            return undefined;
+        }
+        if (hit.expiresAtMs !== undefined && nowMs >= hit.expiresAtMs) {
+            this.entries.delete(key);
+            return undefined;
+        }
+        return hit.value;
+    }
+    set(key, value) {
+        let expiresAtMs;
+        if (value.expiresAt) {
+            const parsed = Date.parse(value.expiresAt);
+            expiresAtMs = Number.isNaN(parsed) ? undefined : parsed;
+        }
+        this.entries.set(key, { value, expiresAtMs });
+    }
+    clear() {
+        this.entries.clear();
+    }
+}
+/** Process-level cache shared across runs for the lifetime of the deployment. */
+const defaultCache = new CredentialCache();
+/** Clear the process-level credential cache. Test-only. */
+export function clearCredentialCacheForTests() {
+    defaultCache.clear();
+}
+/**
+ * Build the `runtime.credentials` provider for a run, or `undefined` when the
+ * deployment isn't in custom-credentials mode. The provider is bound to the
+ * run's resolved identity; every `for(target)` call is scoped to that actor.
+ */
+export function createCredentialsProvider(cfg, identity, deps, cache = defaultCache) {
+    if (cfg.scoping.credentials !== "custom" || !cfg.credentials) {
+        return undefined;
+    }
+    const resolved = {
+        fetch: deps?.fetch ?? fetch,
+        now: deps?.now ?? (() => Date.now()),
+        signAssertion: deps?.signAssertion ?? defaultSignAssertion,
+    };
+    return {
+        async for(target, options) {
+            if (!identity) {
+                throw new Error("runtime.credentials.for(...) requires a resolved identity, but none " +
+                    "was available for this run.");
+            }
+            const key = cacheKey(identity, target);
+            if (!options?.forceRefresh) {
+                const hit = cache.get(key, resolved.now());
+                if (hit) {
+                    return hit;
+                }
+            }
+            // Fail-closed: a resolver/endpoint error propagates and nothing is cached.
+            const out = await resolveCredential(cfg, identity, target, resolved);
+            cache.set(key, out);
+            return out;
+        },
+    };
+}
+async function resolveCredential(cfg, identity, target, deps) {
+    const creds = cfg.credentials;
+    if (!creds) {
+        throw new Error("No credentials resolver is configured for this deployment.");
+    }
+    if ("resolve" in creds) {
+        const out = await creds.resolve({ identity, target });
+        return normalizeResolved(out, "resolver");
+    }
+    const assertion = await deps.signAssertion(identity, target);
+    return callTokenExchange(creds.endpoint.url, assertion, deps);
+}
+async function callTokenExchange(url, assertion, deps) {
+    const response = await deps.fetch(url, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${assertion}`,
+        },
+        body: JSON.stringify({ assertion }),
+    });
+    if (!response.ok) {
+        throw new Error(`Credential token-exchange endpoint ${url} responded ${response.status}.`);
+    }
+    return normalizeResolved(await response.json(), `endpoint ${url}`);
+}
+async function defaultSignAssertion(identity, target) {
+    const secret = process.env[CREDENTIAL_SIGNING_SECRET_ENV];
+    if (!secret) {
+        throw new Error(`A hosted credential endpoint requires a signing secret. Set ` +
+            `${CREDENTIAL_SIGNING_SECRET_ENV} in the deployment environment.`);
+    }
+    const issuedAt = Math.floor(Date.now() / 1000);
+    return new SignJWT({
+        actor_id: identity.actor.id,
+        actor_type: identity.actor.type,
+        tenant_id: identity.tenant?.id,
+        target: { kind: target.kind, name: target.name, intent: target.intent },
+    })
+        .setProtectedHeader({ alg: "HS256" })
+        .setSubject(identity.actor.id)
+        .setIssuedAt(issuedAt)
+        .setExpirationTime(issuedAt + ASSERTION_TTL_SECONDS)
+        .sign(new TextEncoder().encode(secret));
+}
+/**
+ * The cache key that discriminates a minted credential: the actor + tenant it
+ * belongs to, plus the target's kind/name/intent/thread and metadata (§7.2).
+ */
+function cacheKey(identity, target) {
+    return stableStringify([
+        identity.actor.id,
+        identity.tenant?.id ?? null,
+        target.kind,
+        target.name,
+        target.intent ?? null,
+        target.threadId ?? null,
+        target.metadata ?? null,
+    ]);
+}
+/** Deterministic JSON with object keys sorted, so the cache key is stable. */
+function stableStringify(value) {
+    if (value === null || typeof value !== "object") {
+        return JSON.stringify(value) ?? "null";
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map(stableStringify).join(",")}]`;
+    }
+    const obj = value;
+    return `{${Object.keys(obj)
+        .sort()
+        .map((key) => `${JSON.stringify(key)}:${stableStringify(obj[key])}`)
+        .join(",")}}`;
+}
+/** Validate a resolver/endpoint result into a {@link ResolvedCredential}. */
+function normalizeResolved(value, sourceLabel) {
+    if (!value || typeof value !== "object") {
+        throw new Error(`Credential ${sourceLabel} returned a non-object result.`);
+    }
+    const { headers, expiresAt } = value;
+    if (!headers || typeof headers !== "object" || Array.isArray(headers)) {
+        throw new Error(`Credential ${sourceLabel} result is missing a headers object.`);
+    }
+    const normalizedHeaders = {};
+    for (const [name, headerValue] of Object.entries(headers)) {
+        if (typeof headerValue !== "string") {
+            throw new Error(`Credential ${sourceLabel} header "${name}" must be a string.`);
+        }
+        normalizedHeaders[name] = headerValue;
+    }
+    const result = { headers: normalizedHeaders };
+    if (expiresAt !== undefined) {
+        if (typeof expiresAt !== "string") {
+            throw new Error(`Credential ${sourceLabel} \`expiresAt\` must be an ISO string.`);
+        }
+        result.expiresAt = expiresAt;
+    }
+    return result;
+}
+//# sourceMappingURL=credentials.js.map

package/dist/runtime/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/runtime/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAS/B;;;;;;;;;;;;;GAaG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,CAAC;AAEzE,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAwCjC;;;;GAIG;AACH,MAAM,OAAO,eAAe;IACT,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEzD,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAyB;QACxC,IAAI,WAA+B,CAAC;QACpC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3C,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;AAE3C,2DAA2D;AAC3D,MAAM,UAAU,4BAA4B;IAC1C,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAmB,EACnB,QAAqC,EACrC,IAA8B,EAC9B,QAAyB,YAAY;IAErC,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAmB;QAC/B,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,KAAK;QAC3B,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,oBAAoB;KAC3D,CAAC;IACF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO;YACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CACb,sEAAsE;oBACpE,6BAA6B,CAChC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3C,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,GAAG,CAAC;gBACb,CAAC;YACH,CAAC;YACD,2EAA2E;YAC3E,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpB,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAmB,EACnB,QAAyB,EACzB,MAAwB,EACxB,IAAoB;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAW,EACX,SAAiB,EACjB,IAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,SAAS,EAAE;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,cAAc,QAAQ,CAAC,MAAM,GAAG,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,YAAY,GAAG,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,QAAyB,EACzB,MAAwB;IAExB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,8DAA8D;YAC5D,GAAG,6BAA6B,iCAAiC,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,OAAO,IAAI,OAAO,CAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC3B,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;QAC/B,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE;QAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACxE,CAAC;SACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;SAC7B,WAAW,CAAC,QAAQ,CAAC;SACrB,iBAAiB,CAAC,QAAQ,GAAG,qBAAqB,CAAC;SACnD,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,QAAyB,EAAE,MAAwB;IACnE,OAAO,eAAe,CAAC;QACrB,QAAQ,CAAC,KAAK,CAAC,EAAE;QACjB,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;QAC3B,MAAM,CAAC,IAAI;QACX,MAAM,CAAC,IAAI;QACX,MAAM,CAAC,MAAM,IAAI,IAAI;QACrB,MAAM,CAAC,QAAQ,IAAI,IAAI;QACvB,MAAM,CAAC,QAAQ,IAAI,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACxB,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;SACnE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CACxB,KAAc,EACd,WAAmB;IAEnB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,cAAc,WAAW,gCAAgC,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAG9B,CAAC;IACF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,sCAAsC,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAA2B,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,YAAY,IAAI,qBAAqB,CAC/D,CAAC;QACJ,CAAC;QACD,iBAAiB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAuB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAClE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,uCAAuC,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/runtime/identity-http.d.ts

@@ -0,0 +1,27 @@
+import { Hono } from "hono";
+import type { IdentityDefinition } from "../identity.js";
+import type { Connector } from "./connector.js";
+/** Inputs the managed HTTP app is built from. */
+export interface ManagedHttpAppInputs {
+    /** The declared identity, if the project opts into managed identity. */
+    identity?: IdentityDefinition;
+    /** Discovered connectors; those implementing `http` mount routes. */
+    connectors?: Connector[];
+}
+/**
+ * Build the single managed HTTP app mounted via `langgraph.json` `http.app`.
+ *
+ * It layers two concerns onto the built-in LangGraph routes:
+ *  - **identity** — public guest issuance (`POST /identity/guest`) when the
+ *    declared identity enables a guest provider;
+ *  - **connectors** — each connector implementing `http` gets a sub-router
+ *    namespaced under `/connectors/{kind}` and mounts its own routes.
+ *
+ * Connector routes are **secure by default**: MDA resolves and enforces the
+ * caller's identity before the handler runs, and a route must opt out of
+ * authentication explicitly (`router.public.*`). The connector HTTP surface is
+ * logged at construction so the (especially unauthenticated) routes are never
+ * invisible.
+ */
+export declare function buildManagedHttpApp(inputs: ManagedHttpAppInputs): Hono;
+//# sourceMappingURL=identity-http.d.ts.map

package/dist/runtime/identity-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-http.d.ts","sourceRoot":"","sources":["../../src/runtime/identity-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAkB,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,KAAK,EACV,SAAS,EAKV,MAAM,gBAAgB,CAAC;AAGxB,iDAAiD;AACjD,MAAM,WAAW,oBAAoB;IACnC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,qEAAqE;IACrE,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;CAC1B;AAuBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAgBtE"}

package/dist/runtime/identity-http.js

@@ -0,0 +1,150 @@
+import { Hono } from "hono";
+import { resolveRequestIdentity } from "./auth.js";
+import { issueGuestToken } from "./validated-token.js";
+/** Signals a secured route was reached but no identity is declared to resolve it. */
+class IdentityNotConfiguredError extends Error {
+    status = 401;
+    constructor() {
+        super("secured connector route requires an identity declaration, but this " +
+            "deployment has none");
+    }
+}
+/**
+ * Build the single managed HTTP app mounted via `langgraph.json` `http.app`.
+ *
+ * It layers two concerns onto the built-in LangGraph routes:
+ *  - **identity** — public guest issuance (`POST /identity/guest`) when the
+ *    declared identity enables a guest provider;
+ *  - **connectors** — each connector implementing `http` gets a sub-router
+ *    namespaced under `/connectors/{kind}` and mounts its own routes.
+ *
+ * Connector routes are **secure by default**: MDA resolves and enforces the
+ * caller's identity before the handler runs, and a route must opt out of
+ * authentication explicitly (`router.public.*`). The connector HTTP surface is
+ * logged at construction so the (especially unauthenticated) routes are never
+ * invisible.
+ */
+export function buildManagedHttpApp(inputs) {
+    const app = new Hono();
+    if (inputs.identity) {
+        mountIdentityRoutes(app, inputs.identity);
+    }
+    const mounted = [];
+    for (const connector of inputs.connectors ?? []) {
+        if (typeof connector.http === "function") {
+            mountConnectorRoutes(app, connector, inputs.identity?.config, mounted);
+        }
+    }
+    logConnectorSurface(mounted);
+    return app;
+}
+/** Mount the public identity routes (guest issuance) onto `app`. */
+function mountIdentityRoutes(app, identity) {
+    const http = identity.config.ingress.http;
+    if (http === "trusted_backend") {
+        return;
+    }
+    const guestProvider = http.providers.find((provider) => provider.guest?.issue);
+    if (!guestProvider) {
+        return;
+    }
+    app.post("/identity/guest", async (c) => {
+        const token = await issueGuestToken(guestProvider);
+        return c.json({ token });
+    });
+}
+/**
+ * Mount a connector's `http` routes on a sub-router namespaced under
+ * `/connectors/{kind}`, so connector routes cannot collide with identity/API
+ * routes or with each other.
+ */
+function mountConnectorRoutes(app, connector, cfg, mounted) {
+    const sub = new Hono();
+    const router = honoConnectorRouter(sub, connector.kind, cfg, mounted);
+    const ctx = {
+        router,
+        identity: cfg,
+        requireIdentity: (request) => {
+            if (!cfg) {
+                return Promise.reject(new Error("identity is not configured for this deployment; declare an " +
+                    "identity to resolve caller identity on connector routes."));
+            }
+            return resolveRequestIdentity(cfg, request);
+        },
+    };
+    connector.http?.(ctx);
+    app.route(`/connectors/${connector.kind}`, sub);
+}
+/**
+ * Build the secure-by-default {@link HttpSubRouter} over a Hono sub-app. Secured
+ * routes resolve identity (401 on failure) before the handler runs; `public.*`
+ * routes skip enforcement. Every registration is recorded in `mounted`.
+ */
+function honoConnectorRouter(sub, kind, cfg, mounted) {
+    const secured = (method) => (path, handler) => {
+        mounted.push({ connector: kind, method, path, secured: true });
+        sub[method](path, async (c) => {
+            const request = c.req.raw;
+            if (!cfg) {
+                return unauthorizedResponse(new IdentityNotConfiguredError());
+            }
+            let identity;
+            try {
+                identity = await resolveRequestIdentity(cfg, request);
+            }
+            catch (error) {
+                return unauthorizedResponse(error);
+            }
+            return handler(request, identity);
+        });
+    };
+    const publicRoute = (method) => (path, handler) => {
+        mounted.push({ connector: kind, method, path, secured: false });
+        sub[method](path, (c) => handler(c.req.raw));
+    };
+    return {
+        get: secured("get"),
+        post: secured("post"),
+        put: secured("put"),
+        delete: secured("delete"),
+        public: {
+            get: publicRoute("get"),
+            post: publicRoute("post"),
+            put: publicRoute("put"),
+            delete: publicRoute("delete"),
+        },
+    };
+}
+/** Map a resolution error to a fail-closed JSON response. */
+function unauthorizedResponse(error) {
+    const status = typeof error.status === "number"
+        ? error.status
+        : 401;
+    const message = error instanceof Error && error.message ? error.message : "unauthorized";
+    return new Response(JSON.stringify({ error: message }), {
+        status,
+        headers: { "content-type": "application/json" },
+    });
+}
+/**
+ * Log the connector HTTP surface so both secured and (loudly) public routes are
+ * visible in deploy/dev startup logs — the routes are mounted at runtime, so
+ * this is where the actual surface can be enumerated.
+ */
+function logConnectorSurface(mounted) {
+    if (mounted.length === 0) {
+        return;
+    }
+    console.info(`[mda] connector HTTP surface (${mounted.length} route(s)):`);
+    for (const route of mounted) {
+        const full = `/connectors/${route.connector}${route.path}`;
+        const line = `[mda]   ${route.method.toUpperCase().padEnd(6)} ${full}`;
+        if (route.secured) {
+            console.info(`${line}  (identity enforced)`);
+        }
+        else {
+            console.warn(`${line}  (PUBLIC — no identity enforcement)`);
+        }
+    }
+}
+//# sourceMappingURL=identity-http.js.map

package/dist/runtime/identity-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-http.js","sourceRoot":"","sources":["../../src/runtime/identity-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAQnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAoBvD,qFAAqF;AACrF,MAAM,0BAA2B,SAAQ,KAAK;IACnC,MAAM,GAAG,GAAG,CAAC;IACtB;QACE,KAAK,CACH,qEAAqE;YACnE,qBAAqB,CACxB,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA4B;IAC9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACzC,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,SAAS,mBAAmB,CAAC,GAAS,EAAE,QAA4B;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1C,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CACvC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CACpC,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,GAAS,EACT,SAAoB,EACpB,GAA+B,EAC/B,OAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACtE,MAAM,GAAG,GAAgB;QACvB,MAAM;QACN,QAAQ,EAAE,GAAG;QACb,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE;YAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,6DAA6D;oBAC3D,0DAA0D,CAC7D,CACF,CAAC;YACJ,CAAC;YACD,OAAO,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;IACF,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IACtB,GAAG,CAAC,KAAK,CAAC,eAAe,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,GAAS,EACT,IAAY,EACZ,GAA+B,EAC/B,OAAuB;IAEvB,MAAM,OAAO,GACX,CAAC,MAAkB,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,OAA4B,EAAE,EAAE;QACrE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,oBAAoB,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,QAAQ,CAAC;YACb,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEJ,MAAM,WAAW,GACf,CAAC,MAAkB,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,OAA2B,EAAE,EAAE;QACpE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEJ,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;QACrB,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC;QACnB,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE;YACN,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC;YACvB,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;YACzB,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC;YACvB,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC;SAC9B;KACF,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,MAAM,GACV,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ;QACxD,CAAC,CAAE,KAA4B,CAAC,MAAM;QACtC,CAAC,CAAC,GAAG,CAAC;IACV,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;IAC3E,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE;QACtD,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,OAAuB;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,iCAAiC,OAAO,CAAC,MAAM,aAAa,CAAC,CAAC;IAC3E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,eAAe,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,WAAW,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/runtime/identity-runtime.d.ts

@@ -0,0 +1,54 @@
+import type { IdentityConfig, MemoryScope, RuntimeIdentity, Tenancy } from "../identity.js";
+import type { ConfigurableCarrier } from "./types.js";
+/**
+ * Resolve the LangGraph `configurable` bag from either a flat runtime or the
+ * nested `ToolRuntime` shape LangChain passes to tools (`runtime.config.configurable`).
+ */
+export declare function resolveRuntimeConfigurable(runtime: RuntimeConfigLike | undefined): Record<string, unknown> | undefined;
+/**
+ * Build the frozen identity envelope for the current run from the trusted
+ * `langgraph_auth_user` the custom-auth handler produced (§6.1). Returns
+ * `undefined` when the deployment has no resolvable actor (identity is opt-in).
+ */
+export declare function buildRuntimeIdentity(configurable: Record<string, unknown> | undefined): RuntimeIdentity | undefined;
+/**
+ * The durable Store namespace for the run, per `scoping.memory` (§6.2). A
+ * `deploymentId` prefix isolates deployments; identity segments follow. Returns
+ * `undefined` for `none` (no durable memory). Fail-closed: an `actor` scope with
+ * no actor already rejects at ingress, so the segments are never empty here.
+ */
+export declare function memoryNamespace(cfg: IdentityConfig, ident: RuntimeIdentity, deploymentId: string): string[] | undefined;
+/**
+ * The runtime the managed seam sees: the shared `configurable` carrier, plus the
+ * optional nested `config` (e.g. LangGraph `ToolRuntime.config`) and the frozen
+ * `identity` envelope the seam layers on. Single source for the tool, middleware,
+ * and memory-namespace helpers.
+ */
+export interface RuntimeConfigLike extends ConfigurableCarrier {
+    identity?: RuntimeIdentity;
+    config?: {
+        configurable?: Record<string, unknown>;
+    };
+}
+/**
+ * Resolve the durable memory namespace for a run directly from the runtime the
+ * memory `StoreBackend` receives, per `scoping.memory` (§6.2). This is the
+ * plug-in point for the (deferred) Store-backed memory: a `StoreBackend`
+ * namespace factory becomes `(ctx) => memoryNamespaceFor(ctx.runtime, cfg, id)`.
+ * Returns `undefined` when the run has no durable namespace (`none`, or a
+ * per-actor scope with no resolved actor).
+ */
+export declare function memoryNamespaceFor(runtime: RuntimeConfigLike | undefined, cfg: IdentityConfig, deploymentId: string): string[] | undefined;
+/**
+ * The identity portion of the memory namespace (no deployment prefix), shared by
+ * the memory `StoreBackend` and the `@auth.on.store` boundary check so both agree
+ * on exactly which segments identify a namespace.
+ */
+export declare function memoryIdentitySegments(scope: MemoryScope, tenancy: Tenancy, actorId: string | undefined, tenantId: string | undefined): string[];
+/**
+ * Strip client-supplied identity keys from an incoming `configurable` so a
+ * request body can never spoof the actor/tenant the handler resolved (§8). The
+ * platform-set `langgraph_auth_user` is preserved — it is the only trusted source.
+ */
+export declare function sanitizeConfigurable(configurable: Record<string, unknown> | undefined): Record<string, unknown>;
+//# sourceMappingURL=identity-runtime.d.ts.map

package/dist/runtime/identity-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-runtime.d.ts","sourceRoot":"","sources":["../../src/runtime/identity-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,eAAe,EACf,OAAO,EACR,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA0BtD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iBAAiB,GAAG,SAAS,GACrC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAErC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAChD,eAAe,GAAG,SAAS,CAyB7B;AAaD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,eAAe,EACtB,YAAY,EAAE,MAAM,GACnB,MAAM,EAAE,GAAG,SAAS,CAiBtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC5D,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CACrD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,iBAAiB,GAAG,SAAS,EACtC,GAAG,EAAE,cAAc,EACnB,YAAY,EAAE,MAAM,GACnB,MAAM,EAAE,GAAG,SAAS,CAQtB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,MAAM,EAAE,CAgBV;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAChD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASzB"}

package/dist/runtime/identity-runtime.js

@@ -0,0 +1,151 @@
+/**
+ * Identity fields a client must never assert via `config.configurable`; only the
+ * custom-auth handler (`langgraph_auth_user`) is trusted (§8, tamper-proofing).
+ */
+const RESERVED_CONFIGURABLE_KEYS = new Set([
+    "actor_id",
+    "tenant_id",
+    "mda_actor_id",
+    "mda_tenant_id",
+    "mda_actor_email",
+    "mda_claims",
+    "mda_actor_type",
+    "mda_source_thread_id",
+]);
+/** Source channels a run can originate from (`runtime.identity.source.provider`). */
+const SOURCE_PROVIDERS = new Set([
+    "http",
+    "slack",
+    "schedule",
+    "cli",
+    "studio",
+]);
+/**
+ * Resolve the LangGraph `configurable` bag from either a flat runtime or the
+ * nested `ToolRuntime` shape LangChain passes to tools (`runtime.config.configurable`).
+ */
+export function resolveRuntimeConfigurable(runtime) {
+    return runtime?.configurable ?? runtime?.config?.configurable;
+}
+/**
+ * Build the frozen identity envelope for the current run from the trusted
+ * `langgraph_auth_user` the custom-auth handler produced (§6.1). Returns
+ * `undefined` when the deployment has no resolvable actor (identity is opt-in).
+ */
+export function buildRuntimeIdentity(configurable) {
+    const user = configurable?.langgraph_auth_user;
+    const actorId = user?.mda_actor_id;
+    if (!user || !actorId) {
+        return undefined;
+    }
+    const identity = {
+        actor: {
+            type: user.mda_actor_type === "service" ? "service" : "user",
+            id: String(actorId),
+            ...(user.mda_actor_email ? { email: String(user.mda_actor_email) } : {}),
+        },
+        source: {
+            provider: sourceProvider(configurable),
+            ...(threadId(configurable) ? { threadId: threadId(configurable) } : {}),
+        },
+    };
+    if (user.mda_tenant_id) {
+        identity.tenant = { id: String(user.mda_tenant_id) };
+    }
+    if (user.mda_claims && typeof user.mda_claims === "object") {
+        identity.claims = user.mda_claims;
+    }
+    // Immutable: tools/middleware get a read-only view they cannot tamper with (§8).
+    return deepFreeze(identity);
+}
+/** Recursively freeze an object graph so the identity envelope is read-only. */
+function deepFreeze(value) {
+    if (value && typeof value === "object" && !Object.isFrozen(value)) {
+        for (const nested of Object.values(value)) {
+            deepFreeze(nested);
+        }
+        Object.freeze(value);
+    }
+    return value;
+}
+/**
+ * The durable Store namespace for the run, per `scoping.memory` (§6.2). A
+ * `deploymentId` prefix isolates deployments; identity segments follow. Returns
+ * `undefined` for `none` (no durable memory). Fail-closed: an `actor` scope with
+ * no actor already rejects at ingress, so the segments are never empty here.
+ */
+export function memoryNamespace(cfg, ident, deploymentId) {
+    const scope = cfg.scoping.memory;
+    if (scope === "none") {
+        return undefined;
+    }
+    if (scope === "agent") {
+        return [deploymentId, "agent"];
+    }
+    return [
+        deploymentId,
+        ...memoryIdentitySegments(scope, cfg.tenancy, ident.actor.id, ident.tenant?.id),
+    ];
+}
+/**
+ * Resolve the durable memory namespace for a run directly from the runtime the
+ * memory `StoreBackend` receives, per `scoping.memory` (§6.2). This is the
+ * plug-in point for the (deferred) Store-backed memory: a `StoreBackend`
+ * namespace factory becomes `(ctx) => memoryNamespaceFor(ctx.runtime, cfg, id)`.
+ * Returns `undefined` when the run has no durable namespace (`none`, or a
+ * per-actor scope with no resolved actor).
+ */
+export function memoryNamespaceFor(runtime, cfg, deploymentId) {
+    const configurable = runtime?.configurable ?? runtime?.config?.configurable;
+    const identity = buildRuntimeIdentity(configurable);
+    if (identity) {
+        return memoryNamespace(cfg, identity, deploymentId);
+    }
+    // No resolved actor: only the actor-independent `agent` scope has a namespace.
+    return cfg.scoping.memory === "agent" ? [deploymentId, "agent"] : undefined;
+}
+/**
+ * The identity portion of the memory namespace (no deployment prefix), shared by
+ * the memory `StoreBackend` and the `@auth.on.store` boundary check so both agree
+ * on exactly which segments identify a namespace.
+ */
+export function memoryIdentitySegments(scope, tenancy, actorId, tenantId) {
+    if (scope === "actor") {
+        const segments = [];
+        if (tenancy === "multi" && tenantId) {
+            segments.push(tenantId);
+        }
+        if (actorId) {
+            segments.push(actorId);
+        }
+        return segments;
+    }
+    if (scope === "tenant") {
+        return tenantId ? [tenantId] : [];
+    }
+    // "agent" (shared) | "none" (no memory) → no per-identity restriction.
+    return [];
+}
+/**
+ * Strip client-supplied identity keys from an incoming `configurable` so a
+ * request body can never spoof the actor/tenant the handler resolved (§8). The
+ * platform-set `langgraph_auth_user` is preserved — it is the only trusted source.
+ */
+export function sanitizeConfigurable(configurable) {
+    if (!configurable) {
+        return {};
+    }
+    return Object.fromEntries(Object.entries(configurable).filter(([key]) => !RESERVED_CONFIGURABLE_KEYS.has(key)));
+}
+function sourceProvider(configurable) {
+    const declared = configurable?.mda_source_provider;
+    if (typeof declared === "string" && SOURCE_PROVIDERS.has(declared)) {
+        return declared;
+    }
+    return "http";
+}
+function threadId(configurable) {
+    const value = configurable?.thread_id;
+    return value == null ? undefined : String(value);
+}
+//# sourceMappingURL=identity-runtime.js.map

package/dist/runtime/identity-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-runtime.js","sourceRoot":"","sources":["../../src/runtime/identity-runtime.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,UAAU;IACV,WAAW;IACX,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,YAAY;IACZ,gBAAgB;IAChB,sBAAsB;CACvB,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM;IACN,OAAO;IACP,UAAU;IACV,KAAK;IACL,QAAQ;CACT,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAsC;IAEtC,OAAO,OAAO,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAiD;IAEjD,MAAM,IAAI,GAAG,YAAY,EAAE,mBAA8C,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,EAAE,YAAY,CAAC;IACnC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAoB;QAChC,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YAC5D,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,cAAc,CAAC,YAAY,CAAC;YACtC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE;KACF,CAAC;IACF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3D,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,UAAqC,CAAC;IAC/D,CAAC;IACD,iFAAiF;IACjF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAmB,EACnB,KAAsB,EACtB,YAAoB;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IACjC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO;QACL,YAAY;QACZ,GAAG,sBAAsB,CACvB,KAAK,EACL,GAAG,CAAC,OAAO,EACX,KAAK,CAAC,KAAK,CAAC,EAAE,EACd,KAAK,CAAC,MAAM,EAAE,EAAE,CACjB;KACF,CAAC;AACJ,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAsC,EACtC,GAAmB,EACnB,YAAoB;IAEpB,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC;IAC5E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACtD,CAAC;IACD,+EAA+E;IAC/E,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAkB,EAClB,OAAgB,EAChB,OAA2B,EAC3B,QAA4B;IAE5B,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,OAAO,IAAI,QAAQ,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,CAAC;IACD,uEAAuE;IACvE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAiD;IAEjD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CACjC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,CAChD,CACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,YAAiD;IAEjD,MAAM,QAAQ,GAAG,YAAY,EAAE,mBAAmB,CAAC;IACnD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,OAAO,QAAiD,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CACf,YAAiD;IAEjD,MAAM,KAAK,GAAG,YAAY,EAAE,SAAS,CAAC;IACtC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC"}

package/dist/runtime/index.d.ts

@@ -1,6 +1,19 @@
 import type { DeepAgentDefinition } from "../types.js";
 import type { ManagedAgentOptions, ManagedRunConfig } from "./types.js";
 export type { ManagedAgentOptions, ManagedRunConfig } from "./types.js";
+export { buildManagedAuth } from "./auth.js";
+export { buildManagedHttpApp } from "./identity-http.js";
+export { CONNECTOR_BRAND, collectConnectors, isConnector, loadConnectorTools, } from "./connector.js";
+export type { Connector, ConnectorToolList, DiscoveredConnectorModule, HttpContext, HttpSubRouter, PublicRouteHandler, PublicSubRouter, SecuredRouteHandler, ToolContext, } from "./connector.js";
+export type { ManagedUser } from "./auth.js";
+export { CredentialCache, CREDENTIAL_SIGNING_SECRET_ENV, clearCredentialCacheForTests, createCredentialsProvider, } from "./credentials.js";
+export type { CredentialDeps, CredentialForOptions, CredentialsProvider, } from "./credentials.js";
+export { buildRuntimeIdentity, memoryIdentitySegments, memoryNamespace, memoryNamespaceFor, sanitizeConfigurable, } from "./identity-runtime.js";
+export { managedRuntimeExtras, managedRuntimeOverrides, withManagedRuntime, wrapToolsWithManagedRuntime, } from "./managed-tools.js";
+export type { InvokableTool, ManagedDeepAgentRuntime, ManagedRuntimeExtras, } from "./managed-tools.js";
+export { withManagedMiddleware, wrapMiddlewareWithManagedRuntime, } from "./managed-middleware.js";
+export type { ManagedMiddleware } from "./managed-middleware.js";
+export { issueGuestToken } from "./validated-token.js";
 /**
  * Compile a {@link DeepAgentDefinition} into a runnable Deep Agent.
  *

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGvD,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA4HxE;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,mBAAmB,EAC/B,MAAM,CAAC,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2YA4D9B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAWvD,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,SAAS,EACT,iBAAiB,EACjB,yBAAyB,EACzB,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EACL,eAAe,EACf,6BAA6B,EAC7B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,aAAa,EACb,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AA4HvD;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,mBAAmB,EAC/B,MAAM,CAAC,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2YAsF9B"}