managed-deepagents 0.0.3-dev.33 → 0.0.3-dev.37
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-http.d.ts","sourceRoot":"","sources":["../../src/runtime/identity-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"identity-http.d.ts","sourceRoot":"","sources":["../../src/runtime/identity-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAkB,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,KAAK,EACV,SAAS,EAKV,MAAM,gBAAgB,CAAC;AAGxB,iDAAiD;AACjD,MAAM,WAAW,oBAAoB;IACnC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,qEAAqE;IACrE,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;CAC1B;AAuBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAgBtE"}
|
|
@@ -1,22 +1,6 @@
|
|
|
1
1
|
import { Hono } from "hono";
|
|
2
|
-
import { cors } from "hono/cors";
|
|
3
2
|
import { resolveRequestIdentity } from "./auth.js";
|
|
4
3
|
import { issueGuestToken } from "./validated-token.js";
|
|
5
|
-
/**
|
|
6
|
-
* Deployment env var carrying the browser origins allowed to call the managed
|
|
7
|
-
* HTTP surface (comma-separated). The managed routes are token-based (Bearer
|
|
8
|
-
* `Authorization`, no ambient cookies), so an unset value defaults to `*`.
|
|
9
|
-
*/
|
|
10
|
-
const CORS_ORIGINS_ENV = "MDA_HTTP_CORS_ORIGINS";
|
|
11
|
-
/** Request headers the browser is allowed to send to the managed routes. */
|
|
12
|
-
const CORS_ALLOW_HEADERS = [
|
|
13
|
-
"Authorization",
|
|
14
|
-
"Content-Type",
|
|
15
|
-
"X-Supabase-Region",
|
|
16
|
-
"X-Auth-Key",
|
|
17
|
-
"x-mda-actor-id",
|
|
18
|
-
"x-mda-tenant-id",
|
|
19
|
-
];
|
|
20
4
|
/** Signals a secured route was reached but no identity is declared to resolve it. */
|
|
21
5
|
class IdentityNotConfiguredError extends Error {
|
|
22
6
|
status = 401;
|
|
@@ -42,12 +26,6 @@ class IdentityNotConfiguredError extends Error {
|
|
|
42
26
|
*/
|
|
43
27
|
export function buildManagedHttpApp(inputs) {
|
|
44
28
|
const app = new Hono();
|
|
45
|
-
// The managed connector/identity routes are meant to be called directly from
|
|
46
|
-
// the browser, so CORS (preflight + `Access-Control-*`) must be enabled.
|
|
47
|
-
// Registered before the routes so it also covers preflight `OPTIONS`.
|
|
48
|
-
if (hasManagedSurface(inputs)) {
|
|
49
|
-
applyCors(app);
|
|
50
|
-
}
|
|
51
29
|
if (inputs.identity) {
|
|
52
30
|
mountIdentityRoutes(app, inputs.identity);
|
|
53
31
|
}
|
|
@@ -60,47 +38,6 @@ export function buildManagedHttpApp(inputs) {
|
|
|
60
38
|
logConnectorSurface(mounted);
|
|
61
39
|
return app;
|
|
62
40
|
}
|
|
63
|
-
/**
|
|
64
|
-
* Whether the project contributes any managed HTTP routes (guest issuance or a
|
|
65
|
-
* connector `http` hook). CORS is only enabled when there is a surface to call,
|
|
66
|
-
* so an empty managed app stays a pure no-op on top of the platform API.
|
|
67
|
-
*/
|
|
68
|
-
function hasManagedSurface(inputs) {
|
|
69
|
-
const http = inputs.identity?.config.ingress.http;
|
|
70
|
-
const hasGuest = http !== undefined &&
|
|
71
|
-
http !== "trusted_backend" &&
|
|
72
|
-
http.providers.some((provider) => provider.guest?.issue);
|
|
73
|
-
const hasConnectorHttp = (inputs.connectors ?? []).some((connector) => typeof connector.http === "function");
|
|
74
|
-
return Boolean(hasGuest) || hasConnectorHttp;
|
|
75
|
-
}
|
|
76
|
-
/**
|
|
77
|
-
* Enable CORS on the managed HTTP surface. Origins come from
|
|
78
|
-
* `MDA_HTTP_CORS_ORIGINS` (comma-separated); unset means `*`. A wildcard cannot
|
|
79
|
-
* be combined with credentials per the CORS spec, and the managed routes never
|
|
80
|
-
* rely on cookies, so credentials are only enabled with an explicit allowlist.
|
|
81
|
-
*/
|
|
82
|
-
function applyCors(app) {
|
|
83
|
-
const raw = (process.env[CORS_ORIGINS_ENV] ?? "").trim();
|
|
84
|
-
let origin;
|
|
85
|
-
let credentials;
|
|
86
|
-
if (raw && raw !== "*") {
|
|
87
|
-
origin = raw
|
|
88
|
-
.split(",")
|
|
89
|
-
.map((value) => value.trim())
|
|
90
|
-
.filter(Boolean);
|
|
91
|
-
credentials = true;
|
|
92
|
-
}
|
|
93
|
-
else {
|
|
94
|
-
origin = "*";
|
|
95
|
-
credentials = false;
|
|
96
|
-
}
|
|
97
|
-
app.use("*", cors({
|
|
98
|
-
origin,
|
|
99
|
-
credentials,
|
|
100
|
-
allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
|
|
101
|
-
allowHeaders: CORS_ALLOW_HEADERS,
|
|
102
|
-
}));
|
|
103
|
-
}
|
|
104
41
|
/** Mount the public identity routes (guest issuance) onto `app`. */
|
|
105
42
|
function mountIdentityRoutes(app, identity) {
|
|
106
43
|
const http = identity.config.ingress.http;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-http.js","sourceRoot":"","sources":["../../src/runtime/identity-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"identity-http.js","sourceRoot":"","sources":["../../src/runtime/identity-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAQnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAoBvD,qFAAqF;AACrF,MAAM,0BAA2B,SAAQ,KAAK;IACnC,MAAM,GAAG,GAAG,CAAC;IACtB;QACE,KAAK,CACH,qEAAqE;YACnE,qBAAqB,CACxB,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA4B;IAC9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACzC,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,SAAS,mBAAmB,CAAC,GAAS,EAAE,QAA4B;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1C,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CACvC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CACpC,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,GAAS,EACT,SAAoB,EACpB,GAA+B,EAC/B,OAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACtE,MAAM,GAAG,GAAgB;QACvB,MAAM;QACN,QAAQ,EAAE,GAAG;QACb,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE;YAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,6DAA6D;oBAC3D,0DAA0D,CAC7D,CACF,CAAC;YACJ,CAAC;YACD,OAAO,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;IACF,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IACtB,GAAG,CAAC,KAAK,CAAC,eAAe,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,GAAS,EACT,IAAY,EACZ,GAA+B,EAC/B,OAAuB;IAEvB,MAAM,OAAO,GACX,CAAC,MAAkB,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,OAA4B,EAAE,EAAE;QACrE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,oBAAoB,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,QAAQ,CAAC;YACb,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEJ,MAAM,WAAW,GACf,CAAC,MAAkB,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,OAA2B,EAAE,EAAE;QACpE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEJ,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;QACrB,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC;QACnB,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE;YACN,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC;YACvB,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;YACzB,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC;YACvB,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC;SAC9B;KACF,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,MAAM,GACV,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ;QACxD,CAAC,CAAE,KAA4B,CAAC,MAAM;QACtC,CAAC,CAAC,GAAG,CAAC;IACV,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;IAC3E,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE;QACtD,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,OAAuB;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,iCAAiC,OAAO,CAAC,MAAM,aAAa,CAAC,CAAC;IAC3E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,eAAe,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,WAAW,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;AACH,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "managed-deepagents",
|
|
3
|
-
"version": "0.0.3-dev.
|
|
3
|
+
"version": "0.0.3-dev.37",
|
|
4
4
|
"description": "Managed Deep Agents — the `defineDeepAgent` authoring interface plus the CLI that compiles and deploys a code-first Deep Agent repository to a managed LangGraph runtime.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"langchain",
|
|
@@ -58,12 +58,12 @@
|
|
|
58
58
|
"langsmith": "^0.7.16"
|
|
59
59
|
},
|
|
60
60
|
"optionalDependencies": {
|
|
61
|
-
"@langchain/managed-deepagents-darwin-arm64": "0.0.3-dev.
|
|
62
|
-
"@langchain/managed-deepagents-darwin-x64": "0.0.3-dev.
|
|
63
|
-
"@langchain/managed-deepagents-linux-arm64": "0.0.3-dev.
|
|
64
|
-
"@langchain/managed-deepagents-linux-x64": "0.0.3-dev.
|
|
65
|
-
"@langchain/managed-deepagents-win32-arm64": "0.0.3-dev.
|
|
66
|
-
"@langchain/managed-deepagents-win32-x64": "0.0.3-dev.
|
|
61
|
+
"@langchain/managed-deepagents-darwin-arm64": "0.0.3-dev.37",
|
|
62
|
+
"@langchain/managed-deepagents-darwin-x64": "0.0.3-dev.37",
|
|
63
|
+
"@langchain/managed-deepagents-linux-arm64": "0.0.3-dev.37",
|
|
64
|
+
"@langchain/managed-deepagents-linux-x64": "0.0.3-dev.37",
|
|
65
|
+
"@langchain/managed-deepagents-win32-arm64": "0.0.3-dev.37",
|
|
66
|
+
"@langchain/managed-deepagents-win32-x64": "0.0.3-dev.37"
|
|
67
67
|
},
|
|
68
68
|
"devDependencies": {
|
|
69
69
|
"@types/node": "^26.0.1",
|