managed-deepagents 0.0.3-dev.32 → 0.0.3-dev.34

package/dist/runtime/connector.d.ts

@@ -1,138 +0,0 @@
-/**
- * The managed connector protocol.
- *
- * A connector is any object carrying {@link CONNECTOR_BRAND} that knows how to
- * contribute to a managed Deep Agent. MCP is one built-in implementation
- * (contributes tools); the LangSmith connector is another (mounts HTTP routes).
- * Third parties implement the same interface with their own `kind` — nothing
- * about the built-ins is privileged.
- *
- * Discovery is name-agnostic: the CLI globs every module under `connectors/`,
- * imports the single connector each one exposes as its default export, and hands
- * them to {@link collectConnectors}, which validates the brand at build/startup.
- * The two generated entrypoints each call the hook they care about — the agent
- * graph calls {@link Connector.tools}, the managed HTTP app calls
- * {@link Connector.http}.
- */
-import type { IdentityConfig, RuntimeIdentity } from "../identity.js";
-/**
- * Realm-global brand marking a value as a managed connector. `Symbol.for` keeps
- * the identity stable across duplicate module instances (e.g. a connector built
- * against one copy of the package and collected by another).
- */
-export declare const CONNECTOR_BRAND: unique symbol;
-/**
- * Build-time context handed to {@link Connector.tools} during agent-graph
- * construction. Intentionally minimal for v0: a connector's tools close over
- * their own configuration, and per-run identity flows through the existing
- * runtime seam into each tool's `invoke`, not through here. Reserved for future
- * deployment metadata.
- */
-export type ToolContext = Record<string, never>;
-/**
- * Request context handed to {@link Connector.http} when the managed HTTP app is
- * built. The connector receives its own namespaced sub-router (collision-safe),
- * the declared identity for its own authorization logic, and a
- * {@link HttpContext.requireIdentity} helper that fails closed.
- */
-export interface HttpContext {
-    /**
-     * Router the connector mounts its routes on. Already namespaced under the
-     * connector, so routes cannot collide with identity/API routes or with other
-     * connectors. Routes registered here are **secure by default** — MDA resolves
-     * and enforces caller identity before the handler runs (see
-     * {@link HttpSubRouter}).
-     */
-    readonly router: HttpSubRouter;
-    /** The declared identity, for the connector's own authorization decisions. */
-    readonly identity?: IdentityConfig;
-    /**
-     * Resolve the caller identity from the raw request, reusing the same resolver
-     * as the managed auth handler. Throws a 401-style error when identity is
-     * absent or invalid. Secured routes already resolve identity for you; use this
-     * only inside a {@link HttpSubRouter.public} route that wants optional or
-     * conditional authentication.
-     */
-    requireIdentity(request: Request): Promise<RuntimeIdentity>;
-}
-/**
- * The router a connector uses to register routes. Structural so the managed app
- * can back it with Hono without leaking the framework type into the contract.
- *
- * Routes registered on this router are **secure by default**: MDA resolves the
- * caller's identity (401 on failure) before invoking the handler, and passes the
- * frozen {@link RuntimeIdentity} as the handler's second argument. Authorization
- * (scopes, constraints, ownership) remains the connector's job.
- *
- * A route that must be reachable without authentication (webhooks, health
- * checks, public callbacks) has to opt out **explicitly** via
- * {@link HttpSubRouter.public} — the unauthenticated surface is never the
- * accidental default.
- */
-export interface HttpSubRouter {
-    get(path: string, handler: SecuredRouteHandler): void;
-    post(path: string, handler: SecuredRouteHandler): void;
-    put(path: string, handler: SecuredRouteHandler): void;
-    delete(path: string, handler: SecuredRouteHandler): void;
-    /** Explicit opt-out: routes reachable without MDA identity enforcement. */
-    readonly public: PublicSubRouter;
-}
-/** The unauthenticated router surface, reached only via {@link HttpSubRouter.public}. */
-export interface PublicSubRouter {
-    get(path: string, handler: PublicRouteHandler): void;
-    post(path: string, handler: PublicRouteHandler): void;
-    put(path: string, handler: PublicRouteHandler): void;
-    delete(path: string, handler: PublicRouteHandler): void;
-}
-/**
- * Handler for a secured route. MDA has already resolved and enforced the
- * caller's identity, which it passes as the second argument.
- */
-export type SecuredRouteHandler = (request: Request, identity: RuntimeIdentity) => Response | Promise<Response>;
-/** Handler for an explicitly public route. No identity is resolved by MDA. */
-export type PublicRouteHandler = (request: Request) => Response | Promise<Response>;
-/** Tools a connector contributes to the agent. Kept structural (`unknown[]`). */
-export type ConnectorToolList = unknown[];
-/**
- * A managed connector. Implement at least one of {@link Connector.tools} or
- * {@link Connector.http}; a connector implementing neither does nothing and is
- * rejected by {@link collectConnectors}.
- */
-export interface Connector {
-    readonly [CONNECTOR_BRAND]: true;
-    /** Diagnostic label, e.g. `"mcp_servers"` or `"langsmith"`. Not used for routing. */
-    readonly kind: string;
-    /** Contribute tools during agent-graph construction. MCP implements this. */
-    tools?(ctx: ToolContext): ConnectorToolList | Promise<ConnectorToolList>;
-    /** Mount HTTP routes during managed-app construction. LangSmith implements this. */
-    http?(ctx: HttpContext): void | Promise<void>;
-}
-/**
- * Run the `tools` hook of every connector that implements it and concatenate the
- * results, preserving connector order. Connectors without a `tools` hook (e.g.
- * HTTP-only connectors) contribute nothing.
- */
-export declare function loadConnectorTools(connectors: readonly Connector[], ctx?: ToolContext): Promise<unknown[]>;
-/** A discovered `connectors/` module paired with its source path for diagnostics. */
-export interface DiscoveredConnectorModule {
-    /** Project-relative path of the module, used in error messages. */
-    readonly source: string;
-    /** The imported module namespace; its default export is the connector. */
-    readonly module: {
-        default?: unknown;
-    } & Record<string, unknown>;
-}
-/** Narrow an arbitrary value to a {@link Connector} by its brand and hooks. */
-export declare function isConnector(value: unknown): value is Connector;
-/**
- * Validate and collect the connectors discovered under `connectors/`.
- *
- * Each module must expose exactly one connector as its default export. A module
- * whose default export is missing or is not a branded connector is a hard build
- * error — the file was placed under `connectors/` on purpose, so a silent no-op
- * would be the worst outcome. A connector implementing neither hook is likewise
- * rejected. Duplicate connector objects (re-exported from two modules) are
- * de-duplicated by identity.
- */
-export declare function collectConnectors(modules: readonly DiscoveredConnectorModule[]): Connector[];
-//# sourceMappingURL=connector.d.ts.map

package/dist/runtime/connector.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../src/runtime/connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,OAAO,MAAoC,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC;;;;;;OAMG;IACH,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC7D;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACtD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACvD,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACtD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACzD,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CAClC;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACrD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACtD,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACrD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzD;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,eAAe,KACtB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,8EAA8E;AAC9E,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,OAAO,KACb,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,iFAAiF;AACjF,MAAM,MAAM,iBAAiB,GAAG,OAAO,EAAE,CAAC;AAE1C;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC;IACjC,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,KAAK,CAAC,CAAC,GAAG,EAAE,WAAW,GAAG,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzE,oFAAoF;IACpF,IAAI,CAAC,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,SAAS,SAAS,EAAE,EAChC,GAAG,GAAE,WAAgB,GACpB,OAAO,CAAC,OAAO,EAAE,CAAC,CAQpB;AAED,qFAAqF;AACrF,MAAM,WAAW,yBAAyB;IACxC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClE;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAM9D;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,yBAAyB,EAAE,GAC5C,SAAS,EAAE,CAoCb"}

package/dist/runtime/connector.js

@@ -1,82 +0,0 @@
-/**
- * The managed connector protocol.
- *
- * A connector is any object carrying {@link CONNECTOR_BRAND} that knows how to
- * contribute to a managed Deep Agent. MCP is one built-in implementation
- * (contributes tools); the LangSmith connector is another (mounts HTTP routes).
- * Third parties implement the same interface with their own `kind` — nothing
- * about the built-ins is privileged.
- *
- * Discovery is name-agnostic: the CLI globs every module under `connectors/`,
- * imports the single connector each one exposes as its default export, and hands
- * them to {@link collectConnectors}, which validates the brand at build/startup.
- * The two generated entrypoints each call the hook they care about — the agent
- * graph calls {@link Connector.tools}, the managed HTTP app calls
- * {@link Connector.http}.
- */
-/**
- * Realm-global brand marking a value as a managed connector. `Symbol.for` keeps
- * the identity stable across duplicate module instances (e.g. a connector built
- * against one copy of the package and collected by another).
- */
-export const CONNECTOR_BRAND = Symbol.for("mda.connector");
-/**
- * Run the `tools` hook of every connector that implements it and concatenate the
- * results, preserving connector order. Connectors without a `tools` hook (e.g.
- * HTTP-only connectors) contribute nothing.
- */
-export async function loadConnectorTools(connectors, ctx = {}) {
-    const tools = [];
-    for (const connector of connectors) {
-        if (typeof connector.tools === "function") {
-            tools.push(...(await connector.tools(ctx)));
-        }
-    }
-    return tools;
-}
-/** Narrow an arbitrary value to a {@link Connector} by its brand and hooks. */
-export function isConnector(value) {
-    if (typeof value !== "object" || value === null) {
-        return false;
-    }
-    const branded = value[CONNECTOR_BRAND];
-    return branded === true;
-}
-/**
- * Validate and collect the connectors discovered under `connectors/`.
- *
- * Each module must expose exactly one connector as its default export. A module
- * whose default export is missing or is not a branded connector is a hard build
- * error — the file was placed under `connectors/` on purpose, so a silent no-op
- * would be the worst outcome. A connector implementing neither hook is likewise
- * rejected. Duplicate connector objects (re-exported from two modules) are
- * de-duplicated by identity.
- */
-export function collectConnectors(modules) {
-    const collected = [];
-    const seen = new Set();
-    for (const { source, module } of modules) {
-        const candidate = module.default;
-        if (candidate === undefined) {
-            throw new Error(`${source} exports no default connector. A file under connectors/ must ` +
-                `\`export default\` exactly one connector (e.g. ` +
-                `\`export default defineMcpServers(...)\`). Move helpers outside connectors/.`);
-        }
-        if (!isConnector(candidate)) {
-            throw new Error(`${source} default export is not a managed connector. Export the result ` +
-                `of a connector builder such as \`defineMcpServers(...)\`.`);
-        }
-        if (typeof candidate.tools !== "function" &&
-            typeof candidate.http !== "function") {
-            throw new Error(`${source} default export (kind "${candidate.kind}") implements neither ` +
-                `\`tools\` nor \`http\` and would do nothing.`);
-        }
-        if (seen.has(candidate)) {
-            continue;
-        }
-        seen.add(candidate);
-        collected.push(candidate);
-    }
-    return collected;
-}
-//# sourceMappingURL=connector.js.map

package/dist/runtime/connector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../src/runtime/connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAkB,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AAqG1E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAgC,EAChC,MAAmB,EAAE;IAErB,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAUD,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAI,KAAsC,CAAC,eAAe,CAAC,CAAC;IACzE,OAAO,OAAO,KAAK,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA6C;IAE7C,MAAM,SAAS,GAAgB,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAa,CAAC;IAElC,KAAK,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC;QACjC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,+DAA+D;gBACtE,iDAAiD;gBACjD,8EAA8E,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,gEAAgE;gBACvE,2DAA2D,CAC9D,CAAC;QACJ,CAAC;QACD,IACE,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU;YACrC,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU,EACpC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,0BAA0B,SAAS,CAAC,IAAI,wBAAwB;gBACvE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpB,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/runtime/credentials.d.ts

@@ -1,60 +0,0 @@
-import type { CredentialTarget, IdentityConfig, ResolvedCredential, RuntimeIdentity } from "../identity.js";
-/**
- * Component 5 — Credentials, custom mode (`scoping.credentials: "custom"`, §7.2).
- *
- * The escape hatch Agent Auth can't cover: bespoke per-actor credential minting
- * via an in-process resolver callback or a hosted token-exchange endpoint. It
- * runs in the worker (not the shared ingress auth handler), applies the output
- * to downstream calls, and caches per `(actor, tenant, target)` until the
- * credential's `expiresAt`. Secrets live only in this in-memory cache keyed by
- * identity — never in thread state or traces (§7.2, §8, identity-final §10).
- *
- * The managed modes (`agent`/`actor`) route to Agent Auth
- * (`@langchain/auth`/`langchain-auth`, §7.1) and are wired separately; this
- * module is only the custom path.
- */
-/** Env var holding the HMAC secret MDA signs the endpoint assertion with. */
-export declare const CREDENTIAL_SIGNING_SECRET_ENV = "MDA_TOKEN_EXCHANGE_SECRET";
-/** Per-call options for {@link CredentialsProvider.for}. */
-export interface CredentialForOptions {
-    /** Skip the cache and force a fresh mint (e.g. after a downstream 401). */
-    forceRefresh?: boolean;
-}
-/**
- * The per-run credential surface a tool receives as `runtime.credentials`.
- * Tools call `runtime.credentials.for(target)` and attach the returned headers
- * to their downstream request.
- */
-export interface CredentialsProvider {
-    for(target: CredentialTarget, options?: CredentialForOptions): Promise<ResolvedCredential>;
-}
-/**
- * Side effects the executor depends on, injectable so resolution is
- * deterministic under test (no real clock, network, or signing key).
- */
-export interface CredentialDeps {
-    fetch: typeof fetch;
-    now: () => number;
-    /** Signs the assertion MDA presents to a hosted token-exchange endpoint. */
-    signAssertion: (identity: RuntimeIdentity, target: CredentialTarget) => Promise<string>;
-}
-/**
- * TTL cache for resolved credentials, keyed by `(actor, tenant, target)` so
- * per-repo/per-install tokens never collide. Kept out of thread state; entries
- * expire at the credential's `expiresAt`.
- */
-export declare class CredentialCache {
-    private readonly entries;
-    get(key: string, nowMs: number): ResolvedCredential | undefined;
-    set(key: string, value: ResolvedCredential): void;
-    clear(): void;
-}
-/** Clear the process-level credential cache. Test-only. */
-export declare function clearCredentialCacheForTests(): void;
-/**
- * Build the `runtime.credentials` provider for a run, or `undefined` when the
- * deployment isn't in custom-credentials mode. The provider is bound to the
- * run's resolved identity; every `for(target)` call is scoped to that actor.
- */
-export declare function createCredentialsProvider(cfg: IdentityConfig, identity: RuntimeIdentity | undefined, deps?: Partial<CredentialDeps>, cache?: CredentialCache): CredentialsProvider | undefined;
-//# sourceMappingURL=credentials.d.ts.map

package/dist/runtime/credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/runtime/credentials.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,eAAe,EAChB,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;;;;;;GAaG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,6BAA6B,8BAA8B,CAAC;AAKzE,4DAA4D;AAC5D,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,GAAG,CACD,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,4EAA4E;IAC5E,aAAa,EAAE,CACb,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,gBAAgB,KACrB,OAAO,CAAC,MAAM,CAAC,CAAC;CACtB;AAQD;;;;GAIG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IAEzD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAY/D,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI;IASjD,KAAK,IAAI,IAAI;CAGd;AAKD,2DAA2D;AAC3D,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,IAAI,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,EAC9B,KAAK,GAAE,eAA8B,GACpC,mBAAmB,GAAG,SAAS,CA8BjC"}

package/dist/runtime/credentials.js

@@ -1,189 +0,0 @@
-import { SignJWT } from "jose";
-/**
- * Component 5 — Credentials, custom mode (`scoping.credentials: "custom"`, §7.2).
- *
- * The escape hatch Agent Auth can't cover: bespoke per-actor credential minting
- * via an in-process resolver callback or a hosted token-exchange endpoint. It
- * runs in the worker (not the shared ingress auth handler), applies the output
- * to downstream calls, and caches per `(actor, tenant, target)` until the
- * credential's `expiresAt`. Secrets live only in this in-memory cache keyed by
- * identity — never in thread state or traces (§7.2, §8, identity-final §10).
- *
- * The managed modes (`agent`/`actor`) route to Agent Auth
- * (`@langchain/auth`/`langchain-auth`, §7.1) and are wired separately; this
- * module is only the custom path.
- */
-/** Env var holding the HMAC secret MDA signs the endpoint assertion with. */
-export const CREDENTIAL_SIGNING_SECRET_ENV = "MDA_TOKEN_EXCHANGE_SECRET";
-/** How long a signed endpoint assertion is valid, in seconds. */
-const ASSERTION_TTL_SECONDS = 60;
-/**
- * TTL cache for resolved credentials, keyed by `(actor, tenant, target)` so
- * per-repo/per-install tokens never collide. Kept out of thread state; entries
- * expire at the credential's `expiresAt`.
- */
-export class CredentialCache {
-    entries = new Map();
-    get(key, nowMs) {
-        const hit = this.entries.get(key);
-        if (!hit) {
-            return undefined;
-        }
-        if (hit.expiresAtMs !== undefined && nowMs >= hit.expiresAtMs) {
-            this.entries.delete(key);
-            return undefined;
-        }
-        return hit.value;
-    }
-    set(key, value) {
-        let expiresAtMs;
-        if (value.expiresAt) {
-            const parsed = Date.parse(value.expiresAt);
-            expiresAtMs = Number.isNaN(parsed) ? undefined : parsed;
-        }
-        this.entries.set(key, { value, expiresAtMs });
-    }
-    clear() {
-        this.entries.clear();
-    }
-}
-/** Process-level cache shared across runs for the lifetime of the deployment. */
-const defaultCache = new CredentialCache();
-/** Clear the process-level credential cache. Test-only. */
-export function clearCredentialCacheForTests() {
-    defaultCache.clear();
-}
-/**
- * Build the `runtime.credentials` provider for a run, or `undefined` when the
- * deployment isn't in custom-credentials mode. The provider is bound to the
- * run's resolved identity; every `for(target)` call is scoped to that actor.
- */
-export function createCredentialsProvider(cfg, identity, deps, cache = defaultCache) {
-    if (cfg.scoping.credentials !== "custom" || !cfg.credentials) {
-        return undefined;
-    }
-    const resolved = {
-        fetch: deps?.fetch ?? fetch,
-        now: deps?.now ?? (() => Date.now()),
-        signAssertion: deps?.signAssertion ?? defaultSignAssertion,
-    };
-    return {
-        async for(target, options) {
-            if (!identity) {
-                throw new Error("runtime.credentials.for(...) requires a resolved identity, but none " +
-                    "was available for this run.");
-            }
-            const key = cacheKey(identity, target);
-            if (!options?.forceRefresh) {
-                const hit = cache.get(key, resolved.now());
-                if (hit) {
-                    return hit;
-                }
-            }
-            // Fail-closed: a resolver/endpoint error propagates and nothing is cached.
-            const out = await resolveCredential(cfg, identity, target, resolved);
-            cache.set(key, out);
-            return out;
-        },
-    };
-}
-async function resolveCredential(cfg, identity, target, deps) {
-    const creds = cfg.credentials;
-    if (!creds) {
-        throw new Error("No credentials resolver is configured for this deployment.");
-    }
-    if ("resolve" in creds) {
-        const out = await creds.resolve({ identity, target });
-        return normalizeResolved(out, "resolver");
-    }
-    const assertion = await deps.signAssertion(identity, target);
-    return callTokenExchange(creds.endpoint.url, assertion, deps);
-}
-async function callTokenExchange(url, assertion, deps) {
-    const response = await deps.fetch(url, {
-        method: "POST",
-        headers: {
-            "content-type": "application/json",
-            authorization: `Bearer ${assertion}`,
-        },
-        body: JSON.stringify({ assertion }),
-    });
-    if (!response.ok) {
-        throw new Error(`Credential token-exchange endpoint ${url} responded ${response.status}.`);
-    }
-    return normalizeResolved(await response.json(), `endpoint ${url}`);
-}
-async function defaultSignAssertion(identity, target) {
-    const secret = process.env[CREDENTIAL_SIGNING_SECRET_ENV];
-    if (!secret) {
-        throw new Error(`A hosted credential endpoint requires a signing secret. Set ` +
-            `${CREDENTIAL_SIGNING_SECRET_ENV} in the deployment environment.`);
-    }
-    const issuedAt = Math.floor(Date.now() / 1000);
-    return new SignJWT({
-        actor_id: identity.actor.id,
-        actor_type: identity.actor.type,
-        tenant_id: identity.tenant?.id,
-        target: { kind: target.kind, name: target.name, intent: target.intent },
-    })
-        .setProtectedHeader({ alg: "HS256" })
-        .setSubject(identity.actor.id)
-        .setIssuedAt(issuedAt)
-        .setExpirationTime(issuedAt + ASSERTION_TTL_SECONDS)
-        .sign(new TextEncoder().encode(secret));
-}
-/**
- * The cache key that discriminates a minted credential: the actor + tenant it
- * belongs to, plus the target's kind/name/intent/thread and metadata (§7.2).
- */
-function cacheKey(identity, target) {
-    return stableStringify([
-        identity.actor.id,
-        identity.tenant?.id ?? null,
-        target.kind,
-        target.name,
-        target.intent ?? null,
-        target.threadId ?? null,
-        target.metadata ?? null,
-    ]);
-}
-/** Deterministic JSON with object keys sorted, so the cache key is stable. */
-function stableStringify(value) {
-    if (value === null || typeof value !== "object") {
-        return JSON.stringify(value) ?? "null";
-    }
-    if (Array.isArray(value)) {
-        return `[${value.map(stableStringify).join(",")}]`;
-    }
-    const obj = value;
-    return `{${Object.keys(obj)
-        .sort()
-        .map((key) => `${JSON.stringify(key)}:${stableStringify(obj[key])}`)
-        .join(",")}}`;
-}
-/** Validate a resolver/endpoint result into a {@link ResolvedCredential}. */
-function normalizeResolved(value, sourceLabel) {
-    if (!value || typeof value !== "object") {
-        throw new Error(`Credential ${sourceLabel} returned a non-object result.`);
-    }
-    const { headers, expiresAt } = value;
-    if (!headers || typeof headers !== "object" || Array.isArray(headers)) {
-        throw new Error(`Credential ${sourceLabel} result is missing a headers object.`);
-    }
-    const normalizedHeaders = {};
-    for (const [name, headerValue] of Object.entries(headers)) {
-        if (typeof headerValue !== "string") {
-            throw new Error(`Credential ${sourceLabel} header "${name}" must be a string.`);
-        }
-        normalizedHeaders[name] = headerValue;
-    }
-    const result = { headers: normalizedHeaders };
-    if (expiresAt !== undefined) {
-        if (typeof expiresAt !== "string") {
-            throw new Error(`Credential ${sourceLabel} \`expiresAt\` must be an ISO string.`);
-        }
-        result.expiresAt = expiresAt;
-    }
-    return result;
-}
-//# sourceMappingURL=credentials.js.map

package/dist/runtime/credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/runtime/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAS/B;;;;;;;;;;;;;GAaG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,CAAC;AAEzE,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAwCjC;;;;GAIG;AACH,MAAM,OAAO,eAAe;IACT,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEzD,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAyB;QACxC,IAAI,WAA+B,CAAC;QACpC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3C,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;AAE3C,2DAA2D;AAC3D,MAAM,UAAU,4BAA4B;IAC1C,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAmB,EACnB,QAAqC,EACrC,IAA8B,EAC9B,QAAyB,YAAY;IAErC,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAmB;QAC/B,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,KAAK;QAC3B,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,oBAAoB;KAC3D,CAAC;IACF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO;YACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CACb,sEAAsE;oBACpE,6BAA6B,CAChC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3C,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,GAAG,CAAC;gBACb,CAAC;YACH,CAAC;YACD,2EAA2E;YAC3E,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpB,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAmB,EACnB,QAAyB,EACzB,MAAwB,EACxB,IAAoB;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAW,EACX,SAAiB,EACjB,IAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,SAAS,EAAE;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,cAAc,QAAQ,CAAC,MAAM,GAAG,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,YAAY,GAAG,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,QAAyB,EACzB,MAAwB;IAExB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,8DAA8D;YAC5D,GAAG,6BAA6B,iCAAiC,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,OAAO,IAAI,OAAO,CAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC3B,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;QAC/B,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE;QAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACxE,CAAC;SACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;SAC7B,WAAW,CAAC,QAAQ,CAAC;SACrB,iBAAiB,CAAC,QAAQ,GAAG,qBAAqB,CAAC;SACnD,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,QAAyB,EAAE,MAAwB;IACnE,OAAO,eAAe,CAAC;QACrB,QAAQ,CAAC,KAAK,CAAC,EAAE;QACjB,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;QAC3B,MAAM,CAAC,IAAI;QACX,MAAM,CAAC,IAAI;QACX,MAAM,CAAC,MAAM,IAAI,IAAI;QACrB,MAAM,CAAC,QAAQ,IAAI,IAAI;QACvB,MAAM,CAAC,QAAQ,IAAI,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACxB,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;SACnE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CACxB,KAAc,EACd,WAAmB;IAEnB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,cAAc,WAAW,gCAAgC,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAG9B,CAAC;IACF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,sCAAsC,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAA2B,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,YAAY,IAAI,qBAAqB,CAC/D,CAAC;QACJ,CAAC;QACD,iBAAiB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAuB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAClE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,uCAAuC,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/runtime/identity-http.d.ts

@@ -1,27 +0,0 @@
-import { Hono } from "hono";
-import type { IdentityDefinition } from "../identity.js";
-import type { Connector } from "./connector.js";
-/** Inputs the managed HTTP app is built from. */
-export interface ManagedHttpAppInputs {
-    /** The declared identity, if the project opts into managed identity. */
-    identity?: IdentityDefinition;
-    /** Discovered connectors; those implementing `http` mount routes. */
-    connectors?: Connector[];
-}
-/**
- * Build the single managed HTTP app mounted via `langgraph.json` `http.app`.
- *
- * It layers two concerns onto the built-in LangGraph routes:
- *  - **identity** — public guest issuance (`POST /identity/guest`) when the
- *    declared identity enables a guest provider;
- *  - **connectors** — each connector implementing `http` gets a sub-router
- *    namespaced under `/connectors/{kind}` and mounts its own routes.
- *
- * Connector routes are **secure by default**: MDA resolves and enforces the
- * caller's identity before the handler runs, and a route must opt out of
- * authentication explicitly (`router.public.*`). The connector HTTP surface is
- * logged at construction so the (especially unauthenticated) routes are never
- * invisible.
- */
-export declare function buildManagedHttpApp(inputs: ManagedHttpAppInputs): Hono;
-//# sourceMappingURL=identity-http.d.ts.map

package/dist/runtime/identity-http.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"identity-http.d.ts","sourceRoot":"","sources":["../../src/runtime/identity-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAkB,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,KAAK,EACV,SAAS,EAKV,MAAM,gBAAgB,CAAC;AAGxB,iDAAiD;AACjD,MAAM,WAAW,oBAAoB;IACnC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,qEAAqE;IACrE,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;CAC1B;AAuBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAgBtE"}