managed-deepagents 0.10.2-dev.5 → 0.10.2-dev.7

package/README.md

@@ -1629,6 +1629,9 @@ the installed backend. Use `uploadFiles` and `downloadFiles` for binary data.
 All paths refer to the current sandbox. Context Hub routes for skills and
 memory are not part of this backend.
 
+The sandbox opens on its first use. `openSandbox(runtime.backend)` opens it now
+and returns its name.
+
 Private published images can declare registry credentials by environment
 variable name; MDA creates or updates the deployment-owned Host registry:
 
@@ -1696,6 +1699,15 @@ reports its connection URL; complete OAuth there, then retry the run. API-key
 MCP servers require the caller to connect the key in LangSmith Tools before
 invoking one of their tools.
 
+A LangSmith tool kit asks for every unconnected provider before the run starts.
+Set `jitAuth: true` on `defineMcp` to ask on use instead: the kit's tools for
+unconnected providers are still offered to the model. When the model calls
+them, the run interrupts once per model step with the connect links for the
+providers those calls need, then runs the calls after it resumes. If the run
+resumes without a connection, or nobody can connect in this run (no signed-in
+caller, or a scheduled run), those calls return a tool error and the run
+continues.
+
 Deploy the project first, then provision its connections with
 `mda connections create`. Agent-owned opaque secrets are scoped to that
 deployment, so the command refuses to create one before `mda deploy`.

package/dist/connection-authorization.d.ts

@@ -1,4 +1,5 @@
 /** Resolve user-owned connections or interrupt for authorization. */
+import { z } from "zod";
 import { type AgentAuth } from "./agent-auth.js";
 export interface PendingCredential {
     slug: string;
@@ -8,12 +9,33 @@ export interface PendingCredential {
     /** Optional display label (e.g. MCP server name). Slack prefers this over slug. */
     provider?: string;
 }
+export declare const pendingCredentialSchema: z.ZodType<PendingCredential>;
+/** Tool metadata key naming the credential a tool needs before its first call. */
+export declare const CONNECT_ON_USE_METADATA = "mda_connect_on_use";
+/** The {@link CONNECT_ON_USE_METADATA} value: the server and credential a tool needs. */
+export interface ConnectOnUse {
+    server: string;
+    credential: PendingCredential;
+}
+export declare const connectOnUseSchema: z.ZodType<ConnectOnUse>;
 /** Interrupt payload when the caller has not granted one or more connections. */
 export interface CredentialAuthorizationRequiredInterrupt {
     type: "credential_authorization_required";
     message: string;
     credentials: PendingCredential[];
 }
+/**
+ * A tool call was refused until the caller connects its credentials.
+ *
+ * `credentials` is empty when the refusal carried no link to connect from.
+ */
+export declare class ToolCredentialRequiredError extends Error {
+    readonly provider: string;
+    readonly credentials: PendingCredential[];
+    constructor(provider: string, credentials: readonly PendingCredential[]);
+}
+/** The interrupt payload that asks the caller to connect `credentials`. */
+export declare function credentialAuthorizationInterrupt(credentials: readonly PendingCredential[], message?: string): CredentialAuthorizationRequiredInterrupt;
 interface UserConnectionGrant {
     slug: string;
     kind: "oauth2" | "secret";

package/dist/connection-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection-authorization.d.ts","sourceRoot":"","sources":["../src/connection-authorization.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAIrE,OAAO,EACL,KAAK,SAAS,EAGf,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,iFAAiF;AACjF,MAAM,WAAW,wCAAwC;IACvD,IAAI,EAAE,mCAAmC,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,iBAAiB,EAAE,CAAC;CAClC;AAED,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,oCAAoC,CAClD,WAAW,EAAE,SAAS,iBAAiB,EAAE,EACzC,OAAO,SAAoD,GAC1D,KAAK,CAaP;AAED,0EAA0E;AAC1E,wBAAsB,uCAAuC,CAC3D,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAK9B;AAED,iFAAiF;AACjF,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAS9B;AAgCD,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,CAAC,CAa9B"}
+{"version":3,"file":"connection-authorization.d.ts","sourceRoot":"","sources":["../src/connection-authorization.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAGrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,KAAK,SAAS,EAGf,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAM/D,CAAC;AAEH,kFAAkF;AAClF,eAAO,MAAM,uBAAuB,uBAAuB,CAAC;AAE5D,yFAAyF;AACzF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,iBAAiB,CAAC;CAC/B;AAED,eAAO,MAAM,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAGrD,CAAC;AAEH,iFAAiF;AACjF,MAAM,WAAW,wCAAwC;IACvD,IAAI,EAAE,mCAAmC,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,iBAAiB,EAAE,CAAC;CAClC;AAKD;;;;GAIG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IAIlD,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAH3B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAE1C,YACW,QAAQ,EAAE,MAAM,EACzB,WAAW,EAAE,SAAS,iBAAiB,EAAE,EAK1C;CACF;AAED,2EAA2E;AAC3E,wBAAgB,gCAAgC,CAC9C,WAAW,EAAE,SAAS,iBAAiB,EAAE,EACzC,OAAO,SAAgC,GACtC,wCAAwC,CAM1C;AAED,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,oCAAoC,CAClD,WAAW,EAAE,SAAS,iBAAiB,EAAE,EACzC,OAAO,SAAgC,GACtC,KAAK,CAQP;AAED,0EAA0E;AAC1E,wBAAsB,uCAAuC,CAC3D,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAK9B;AAED,iFAAiF;AACjF,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAS9B;AAgCD,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,CAAC,CAa9B"}

package/dist/connection-authorization.js

@@ -1,22 +1,55 @@
 /** Resolve user-owned connections or interrupt for authorization. */
 import { interrupt } from "@langchain/langgraph";
+import { z } from "zod";
 import { CredentialAuthorizationRequiredError, CredentialStoreError, } from "./agent-auth.js";
+export const pendingCredentialSchema = z.object({
+    slug: z.string(),
+    kind: z.enum(["oauth2", "secret"]),
+    connect_url: z.string().optional(),
+    auth_id: z.string().optional(),
+    provider: z.string().optional(),
+});
+/** Tool metadata key naming the credential a tool needs before its first call. */
+export const CONNECT_ON_USE_METADATA = "mda_connect_on_use";
+export const connectOnUseSchema = z.object({
+    server: z.string(),
+    credential: pendingCredentialSchema,
+});
+const DEFAULT_AUTHORIZATION_MESSAGE = "Connect the following integrations to continue.";
+/**
+ * A tool call was refused until the caller connects its credentials.
+ *
+ * `credentials` is empty when the refusal carried no link to connect from.
+ */
+export class ToolCredentialRequiredError extends Error {
+    provider;
+    credentials;
+    constructor(provider, credentials) {
+        super(`${provider} is not connected`);
+        this.provider = provider;
+        this.name = "ToolCredentialRequiredError";
+        this.credentials = [...credentials];
+    }
+}
+/** The interrupt payload that asks the caller to connect `credentials`. */
+export function credentialAuthorizationInterrupt(credentials, message = DEFAULT_AUTHORIZATION_MESSAGE) {
+    return {
+        type: "credential_authorization_required",
+        message,
+        credentials: [...credentials],
+    };
+}
 /**
  * Interrupt once with the given missing credentials, then throw.
  *
  * Shared by the credential gate (ordinary MCP connections) and LMT collectors so
  * every missing grant becomes one `credential_authorization_required`.
  */
-export function raiseCredentialAuthorizationRequired(credentials, message = "Connect the following integrations to continue.") {
+export function raiseCredentialAuthorizationRequired(credentials, message = DEFAULT_AUTHORIZATION_MESSAGE) {
     if (credentials.length === 0) {
         throw new Error("credentials must be non-empty");
     }
-    const payload = {
-        type: "credential_authorization_required",
-        message,
-        credentials: [...credentials],
-    };
-    interrupt(payload);
+    interrupt(credentialAuthorizationInterrupt(credentials, message));
     throw new CredentialAuthorizationRequiredError(credentials.map((credential) => credential.slug));
 }
 /** Return pending credentials for missing grants without interrupting. */

package/dist/connection-authorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"connection-authorization.js","sourceRoot":"","sources":["../src/connection-authorization.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAErE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAEL,oCAAoC,EACpC,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAwBzB;;;;;GAKG;AACH,MAAM,UAAU,oCAAoC,CAClD,WAAyC,EACzC,OAAO,GAAG,iDAAiD;IAE3D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,OAAO,GAA6C;QACxD,IAAI,EAAE,mCAAmC;QACzC,OAAO;QACP,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;KAC9B,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,IAAI,oCAAoC,CAC5C,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,SAAoB,EACpB,KAAwB;IAExB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAC5E,CAAC;IACF,OAAO,2BAA2B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,SAAoB,EACpB,KAAwB;IAExB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAC5E,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,oCAAoC,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,SAAoB,EACpB,MAAsC;IAEtC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CACnD,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CACjC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CACnD,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAC7E,CAAC;IACF,OAAO;QACL,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,QAAiB;YACvB,WAAW,EAAE,OAAO,CAAC,UAAU;YAC/B,OAAO,EAAE,OAAO,CAAC,MAAM;SACxB,CAAC,CAAC;QACH,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,QAAiB;SACxB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAoB,EACpB,IAAY;IAEZ,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,oBAAoB,CAC5B,wBAAwB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oBAAoB,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACzD,MAAM,KAAK,GACT,IAAI,KAAK,QAAQ;QACf,CAAC,CAAC,MAAM,SAAS,CAAC,2BAA2B,CAAC,GAAG,CAAC;QAClD,CAAC,CAAC,MAAM,SAAS,CAAC,gCAAgC,CAAC,GAAG,CAAC,CAAC;IAC5D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"connection-authorization.js","sourceRoot":"","sources":["../src/connection-authorization.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAErE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,oCAAoC,EACpC,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAWzB,MAAM,CAAC,MAAM,uBAAuB,GAAiC,CAAC,CAAC,MAAM,CAAC;IAC5E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAQ5D,MAAM,CAAC,MAAM,kBAAkB,GAA4B,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,uBAAuB;CACpC,CAAC,CAAC;AASH,MAAM,6BAA6B,GACjC,iDAAiD,CAAC;AAEpD;;;;GAIG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAIzC,QAAQ;IAHV,WAAW,CAAsB;IAE1C,YACW,QAAgB,EACzB,WAAyC;QAEzC,KAAK,CAAC,GAAG,QAAQ,mBAAmB,CAAC,CAAC;wBAH7B,QAAQ;QAIjB,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IACtC,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,UAAU,gCAAgC,CAC9C,WAAyC,EACzC,OAAO,GAAG,6BAA6B;IAEvC,OAAO;QACL,IAAI,EAAE,mCAAmC;QACzC,OAAO;QACP,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;KAC9B,CAAC;AACJ,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,oCAAoC,CAClD,WAAyC,EACzC,OAAO,GAAG,6BAA6B;IAEvC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,SAAS,CAAC,gCAAgC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAClE,MAAM,IAAI,oCAAoC,CAC5C,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,SAAoB,EACpB,KAAwB;IAExB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAC5E,CAAC;IACF,OAAO,2BAA2B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,SAAoB,EACpB,KAAwB;IAExB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAC5E,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,oCAAoC,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,SAAoB,EACpB,MAAsC;IAEtC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CACnD,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CACjC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CACnD,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAC7E,CAAC;IACF,OAAO;QACL,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,QAAiB;YACvB,WAAW,EAAE,OAAO,CAAC,UAAU;YAC/B,OAAO,EAAE,OAAO,CAAC,MAAM;SACxB,CAAC,CAAC;QACH,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,QAAiB;SACxB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAoB,EACpB,IAAY;IAEZ,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,oBAAoB,CAC5B,wBAAwB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oBAAoB,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACzD,MAAM,KAAK,GACT,IAAI,KAAK,QAAQ;QACf,CAAC,CAAC,MAAM,SAAS,CAAC,2BAA2B,CAAC,GAAG,CAAC;QAClD,CAAC,CAAC,MAAM,SAAS,CAAC,gCAAgC,CAAC,GAAG,CAAC,CAAC;IAC5D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC"}

package/dist/connectors/mcp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,mCAAmC,CAAC;AAO3C,OAAO,KAAK,EACV,kBAAkB,EAEnB,MAAM,0BAA0B,CAAC;AAUlC,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EAGrB,MAAM,YAAY,CAAC;AAEpB,mBAAmB,YAAY,CAAC;AAqBhC;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,oBAAoB,GAC/B,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAWlC;AAED,yDAAyD;AACzD,wBAAgB,iCAAiC,CAC/C,UAAU,CAAC,EAAE,oBAAoB,GAChC,IAAI,CAMN;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,GACzC,kBAAkB,EAAE,CA+BtB;AAmMD;;;;;GAKG;AACH,wBAAsB,qCAAqC,CACzD,UAAU,EAAE,oBAAoB,EAChC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAM9B;AAmVD;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAC7C,eAAe,GAAG;IAAE,YAAY,CAAC,EAAE,YAAY,CAAA;CAAE,CAAC;AA4FpD,+EAA+E;AAC/E,eAAO,MAAM,SAAS,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,oBAOlD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAML,KAAK,iBAAiB,EACvB,MAAM,mCAAmC,CAAC;AAO3C,OAAO,KAAK,EACV,kBAAkB,EAEnB,MAAM,0BAA0B,CAAC;AAWlC,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EAGrB,MAAM,YAAY,CAAC;AAEpB,mBAAmB,YAAY,CAAC;AAqBhC;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,oBAAoB,GAC/B,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAWlC;AAED,yDAAyD;AACzD,wBAAgB,iCAAiC,CAC/C,UAAU,CAAC,EAAE,oBAAoB,GAChC,IAAI,CAMN;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,GACzC,kBAAkB,EAAE,CAoCtB;AAuOD;;;;;GAKG;AACH,wBAAsB,qCAAqC,CACzD,UAAU,EAAE,oBAAoB,EAChC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAM9B;AAuaD;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAC7C,eAAe,GAAG;IAAE,YAAY,CAAC,EAAE,YAAY,CAAA;CAAE,CAAC;AA2PpD,+EAA+E;AAC/E,eAAO,MAAM,SAAS,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,oBAOlD,CAAC"}

package/dist/connectors/mcp/index.js

@@ -34,13 +34,14 @@
  * });
  * ```
  */
-import { MCPAdapter, } from "@langchain/mcp-adapters";
+import { loadMcpTools, MCPAdapter, } from "@langchain/mcp-adapters";
 import { AGENT_AUTH_TIMEOUT_MS, agentAuthHeaders, AgentAuth, } from "../../agent-auth.js";
-import { raiseCredentialAuthorizationRequired, readUserConnectionGrant, } from "../../connection-authorization.js";
+import { CONNECT_ON_USE_METADATA, raiseCredentialAuthorizationRequired, readUserConnectionGrant, ToolCredentialRequiredError, } from "../../connection-authorization.js";
 import { defineExtension } from "../../extension.js";
 import { connections, isConnectionReference, } from "../../connections.js";
 import { fetchWithTimeout } from "../../runtime/http.js";
 import { logger } from "../../runtime/log.js";
+import { isRecord } from "../../values.js";
 import { mcpServersConfig } from "./schema.js";
 import { isLangSmithManagedToolsPath, isLangSmithManagedToolsUrl, } from "./langsmith-url.js";
 import { selectTools } from "../tool-selection.js";
@@ -113,6 +114,9 @@ export function mcpCredentialConsumers(connectors) {
             collectPendingCredentials: hasLangSmith
                 ? (context) => collectPendingManagedToolsCredentials(definition, context)
                 : undefined,
+            connectLinks: hasLangSmith && definition.jitAuth === true
+                ? (context, wanted) => managedToolsConnectLinks(definition, context, wanted)
+                : undefined,
             load: (accessTokens, context) => loadCallerMcpTools(definition, accessTokens, context),
         });
     }
@@ -199,28 +203,34 @@ async function loadCallerMcpTools(connectors, accessTokens, context) {
         const slug = connection.slug;
         connectable[name] = withConnectionProvider(server, slug, accessToken, () => readUserConnectionGrant(agentAuth, slug).then((grant) => grant.token));
     }
-    const loadableLangsmith = await loadableLangSmithServers(connectors, langsmith, context);
+    const { servers: loadableLangsmith, deferred } = await loadableLangSmithServers(connectors, langsmith, context);
     Object.assign(connectable, loadableLangsmith);
     if (Object.keys(connectable).length === 0) {
         return { tools: [], close: async () => { } };
     }
-    const { tools, client } = await loadToolsFromServers(connectors, connectable);
+    const { tools, client } = await loadToolsFromServers(connectors, connectable, {
+        stored: deferred,
+        askToConnect: new Set(connectors.jitAuth === true ? Object.keys(loadableLangsmith) : []),
+    });
     return { tools, close: () => client.close() };
 }
 /**
- * Probe LangSmith MCP servers once: ready configs plus any pending credentials.
+ * Probe LangSmith MCP servers once: ready configs, pending and deferred credentials.
  *
  * Shared by load (interrupt if pending) and the credential-gate collector
- * (return pending only). Transport failures follow `throwOnLoadError`;
- * authorization failures are never skipped.
+ * (return pending only). With `jitAuth`, a kit's missing credentials that
+ * come with stored tools are deferred to first use instead of pending.
+ * Transport failures follow `throwOnLoadError`; authorization failures are
+ * never skipped.
  */
 async function resolveLangSmithServers(connectors, serverNames, context) {
     const prepared = prepareLangSmithServers(connectors, serverNames, context);
     if (!prepared)
-        return { servers: {}, pending: [] };
+        return { servers: {}, pending: [], deferred: {} };
     const { matching, headers } = prepared;
     const servers = {};
     const pending = [];
+    const deferred = {};
     for (const { name, declared, url } of matching) {
         let probe;
         try {
@@ -232,26 +242,34 @@ async function resolveLangSmithServers(connectors, serverNames, context) {
             console.warn(`[managed-deepagents] MCP server "${name}" failed to load and was skipped: ${error}`);
             continue;
         }
-        const required = pendingCredentialsFromLangSmithProbe(name, probe);
-        if (required.length > 0) {
-            pending.push(...required);
+        const required = credentialsFromLangSmithProbe(name, probe, connectors.jitAuth === true);
+        if (required.pending.length > 0) {
+            pending.push(...required.pending);
             continue;
         }
-        servers[name] = {
+        const server = {
             ...declared,
             transport: "http",
             headers,
         };
+        // A call that declares elicitation makes LangSmith answer with a bare URL
+        // elicitation instead of the 428 naming the credential to connect.
+        servers[name] =
+            connectors.jitAuth === true && server.mode !== "legacy"
+                ? { ...server, elicitation: false }
+                : server;
+        if (required.deferred.length > 0)
+            deferred[name] = required.deferred;
     }
-    return { servers, pending };
+    return { servers, pending, deferred };
 }
 async function loadableLangSmithServers(connectors, serverNames, context) {
-    const { servers, pending } = await resolveLangSmithServers(connectors, serverNames, context);
+    const { servers, pending, deferred } = await resolveLangSmithServers(connectors, serverNames, context);
     // Authorization failures must still stop the load so it remains uncached.
     if (pending.length > 0) {
         raiseCredentialAuthorizationRequired(pending);
     }
-    return servers;
+    return { servers, deferred };
 }
 /**
  * Collect pending Managed Tools credentials without interrupting.
@@ -266,6 +284,34 @@ export async function collectPendingManagedToolsCredentials(connectors, context)
     return (await resolveLangSmithServers(connectors, serverNames, context))
         .pending;
 }
+/**
+ * Fresh connect links for the wanted slugs of each kit, and only those kits.
+ *
+ * The gate caches loaded tools, so the links their metadata carries can
+ * predate a connection; a new listing names only what is still missing.
+ */
+async function managedToolsConnectLinks(connectors, context, wanted) {
+    const prepared = prepareLangSmithServers(connectors, [...wanted.keys()], context);
+    if (!prepared)
+        return [];
+    const links = [];
+    for (const { name, url } of prepared.matching) {
+        let pending;
+        try {
+            const probe = await probeLangSmithServer(url, prepared.headers);
+            pending = credentialsFromLangSmithProbe(name, probe, false).pending;
+        }
+        catch (error) {
+            // Each refused call still asks on its own with the link from its 428.
+            logger.warn("could not list connect links for LangSmith MCP server " +
+                `"${logger.logIdentifier(name)}": ${logger.safeErrorLabel(error)}`);
+            continue;
+        }
+        const slugs = wanted.get(name);
+        links.push(...pending.filter((credential) => slugs?.has(credential.slug)));
+    }
+    return links;
+}
 function prepareLangSmithServers(connectors, serverNames, context) {
     if (serverNames.length === 0)
         return undefined;
@@ -296,22 +342,26 @@ function prepareLangSmithServers(connectors, serverNames, context) {
 }
 /**
  * Map a Managed Tools probe result to pending credentials from a complete 428
- * or a partial kit's `_meta`, or throw for incomplete 428s. Returns an empty
- * list when the server is fully accessible.
+ * or a partial kit's `_meta`, or throw for incomplete 428s. With `jitAuth`,
+ * `_meta` entries that carry stored tools are deferred instead of pending. No
+ * pending credentials means the server's connected tools load.
  */
-function pendingCredentialsFromLangSmithProbe(serverName, probe) {
+function credentialsFromLangSmithProbe(serverName, probe, jitAuth) {
     if (probe.status === 200) {
-        return pendingCredentialsFromLangSmithMeta(probe.body, serverName);
+        return credentialsFromLangSmithMeta(probe.body, serverName, jitAuth);
     }
     if (probe.status !== 428)
-        return [];
+        return { pending: [], deferred: [] };
     const credentials = probe.body.credentials;
     if (Array.isArray(credentials)) {
-        return pendingCredentialsFromLangsmithGateway428(credentials, serverName);
+        return {
+            pending: pendingCredentialsFromLangsmithGateway428(credentials, serverName),
+            deferred: [],
+        };
     }
     const pending = pendingCredentialFromLangsmith428(probe.body, serverName);
     if (pending !== undefined)
-        return [pending];
+        return { pending: [pending], deferred: [] };
     const verificationUrl = probe.body.verification_url;
     if (typeof verificationUrl === "string" && verificationUrl) {
         throw new Error(`LangSmith MCP server "${serverName}" requires authorization. ` +
@@ -325,29 +375,57 @@ function pendingCredentialsFromLangSmithProbe(serverName, probe) {
  *
  * The kit's connected tools work without these, so entries without a
  * complete link are skipped with a warning instead of failing the run.
+ * With `jitAuth`, an entry with at least one valid stored tool is deferred to
+ * first use; invalid stored definitions are skipped with a warning.
  */
-function pendingCredentialsFromLangSmithMeta(body, serverName) {
-    const result = body.result;
-    const meta = typeof result === "object" && result !== null
-        ? result._meta
-        : undefined;
-    const entries = typeof meta === "object" && meta !== null
+function credentialsFromLangSmithMeta(body, serverName, jitAuth) {
+    const meta = isRecord(body.result) ? body.result._meta : undefined;
+    const entries = isRecord(meta)
         ? meta["com.langchain.langsmith/missingCredentials"]
         : undefined;
     if (!Array.isArray(entries))
-        return [];
+        return { pending: [], deferred: [] };
     const pending = [];
+    const deferred = [];
     for (const entry of entries) {
-        const credential = typeof entry === "object" && entry !== null
+        const credential = isRecord(entry)
             ? pendingCredentialFromLangsmith428(entry, serverName)
             : undefined;
-        if (credential === undefined) {
+        if (!isRecord(entry) || credential === undefined) {
             warnSkippedMetaCredential(serverName, entry);
             continue;
         }
+        const tools = jitAuth ? storedToolDefinitions(serverName, entry.tools) : [];
+        if (tools.length > 0) {
+            deferred.push({ credential, tools });
+            continue;
+        }
         pending.push(credential);
     }
-    return pending;
+    return { pending, deferred };
+}
+/** The valid MCP tool definitions LMT stored for a provider; warns if any were not. */
+function storedToolDefinitions(serverName, tools) {
+    if (!Array.isArray(tools))
+        return [];
+    const valid = tools.filter(isMcpTool);
+    if (valid.length < tools.length) {
+        logger.warn("skipped invalid stored tools for LangSmith MCP server " +
+            `"${logger.logIdentifier(serverName)}"`);
+    }
+    return valid;
+}
+function isMcpTool(value) {
+    if (!isRecord(value))
+        return false;
+    const { name, title, description, inputSchema, annotations } = value;
+    return (typeof name === "string" &&
+        name.length > 0 &&
+        (title === undefined || typeof title === "string") &&
+        (description === undefined || typeof description === "string") &&
+        isRecord(inputSchema) &&
+        inputSchema.type === "object" &&
+        (annotations === undefined || isRecord(annotations)));
 }
 /** Name the skipped entry's provider and missing fields, never their values. */
 function warnSkippedMetaCredential(serverName, entry) {
@@ -372,28 +450,35 @@ function warnSkippedMetaCredential(serverName, entry) {
  * any of them throw with every missing name before an interrupt is shown.
  */
 function pendingCredentialsFromLangsmithGateway428(credentials, serverName) {
+    const { pending, unresolved } = partitionLangSmith428Entries(credentials, serverName);
+    if (unresolved.length > 0 || pending.length === 0) {
+        const names = unresolved.length > 0 ? unresolved.join(", ") : serverName;
+        throw new Error(`LangSmith MCP server "${serverName}" requires credentials for ${names}; ` +
+            "connect them in LangSmith Tools before running the agent");
+    }
+    return pending;
+}
+/**
+ * Split 428 entries into interrupt credentials and the labels of entries
+ * without a complete link (`display_name`, `slug`, else the server name).
+ */
+function partitionLangSmith428Entries(entries, serverName) {
     const pending = [];
     const unresolved = [];
-    for (const entry of credentials) {
-        if (typeof entry !== "object" || entry === null) {
-            unresolved.push(serverName);
-            continue;
-        }
-        const body = entry;
-        const credential = pendingCredentialFromLangsmith428(body, serverName);
+    for (const entry of entries) {
+        const credential = isRecord(entry)
+            ? pendingCredentialFromLangsmith428(entry, serverName)
+            : undefined;
         if (credential !== undefined) {
             pending.push(credential);
             continue;
         }
-        const label = body.display_name || body.slug;
+        const label = isRecord(entry)
+            ? entry.display_name || entry.slug
+            : undefined;
         unresolved.push(typeof label === "string" && label ? label : serverName);
     }
-    if (unresolved.length > 0 || pending.length === 0) {
-        const names = unresolved.length > 0 ? unresolved.join(", ") : serverName;
-        throw new Error(`LangSmith MCP server "${serverName}" requires credentials for ${names}; ` +
-            "connect them in LangSmith Tools before running the agent");
-    }
-    return pending;
+    return { pending, unresolved };
 }
 /**
  * Build an interrupt credential only when LMT returns the full triple.
@@ -516,7 +601,7 @@ function warnDeferredUserConnectionServers(serverNames) {
         `a user connection; tools load after the pre-run credential gate ` +
         `confirms grants for the caller.`);
 }
-async function loadToolsFromServers(connectors, connectable) {
+async function loadToolsFromServers(connectors, connectable, kits = {}) {
     const { prefixToolNameWithServerName, throwOnLoadError, onConnectionError } = connectors;
     const client = new MCPAdapter({
         servers: Object.fromEntries(Object.entries(connectable).map(([name, { includeTools: _includeTools, excludeTools: _excludeTools, connection: _connection, ...server },]) => [name, server])),
@@ -527,7 +612,7 @@ async function loadToolsFromServers(connectors, connectable) {
     // The adapter prefixes by default; tool selection strips the same prefix.
     const prefixed = prefixToolNameWithServerName ?? true;
     try {
-        const tools = await loadToolsByServer(client, connectable, prefixed);
+        const tools = await loadToolsByServer(client, connectable, prefixed, kits);
         assertNoToolNameCollisions(tools);
         return { tools, client };
     }
@@ -536,16 +621,136 @@ async function loadToolsFromServers(connectors, connectable) {
         throw error;
     }
 }
-async function loadToolsByServer(client, servers, prefixToolNameWithServerName) {
+async function loadToolsByServer(client, servers, prefixToolNameWithServerName, { stored = {}, askToConnect = new Set() } = {}) {
     // One discovery: listTools(name) would rediscover every server on each call.
     const toolsets = await client.listToolsets();
     const tools = [];
     for (const [serverName, server] of Object.entries(servers)) {
-        const serverTools = toolsets[serverName] ?? [];
+        let serverTools = toolsets[serverName] ?? [];
+        const definitions = stored[serverName] ?? [];
+        if (serverName in toolsets && definitions.length > 0) {
+            serverTools = [
+                ...serverTools,
+                ...(await storedTools(client, serverName, server, definitions, serverTools, prefixToolNameWithServerName)),
+            ];
+        }
+        if (askToConnect.has(serverName)) {
+            serverTools = serverTools.map((tool) => askingToConnect(serverName, tool));
+        }
         tools.push(...filterToolsForServer(serverName, server, serverTools, prefixToolNameWithServerName));
     }
     return tools;
 }
+/**
+ * Bind a kit's stored definitions through the adapter's own tool path: the
+ * server's connected client serves them as its listing, so calls reach the
+ * kit by raw name exactly as live tools do. Live tools win a name clash.
+ *
+ * Each carries the credential it needs, so the gate can ask once per model step.
+ */
+async function storedTools(adapter, serverName, server, deferred, live, prefixToolNameWithServerName) {
+    const connected = await adapter.getClient(serverName);
+    if (!connected) {
+        logger.warn("skipped stored tools for LangSmith MCP server " +
+            `"${logger.logIdentifier(serverName)}": it is not connected`);
+        return [];
+    }
+    const names = new Set(live.map((tool) => tool.name));
+    const listing = [];
+    const connects = new Map();
+    for (const { credential, tools } of deferred) {
+        for (const definition of tools) {
+            const name = prefixToolNameWithServerName
+                ? `${serverName}_${definition.name}`
+                : definition.name;
+            if (names.has(name))
+                continue;
+            names.add(name);
+            listing.push(definition);
+            connects.set(name, { server: serverName, credential });
+        }
+    }
+    if (listing.length === 0)
+        return [];
+    const listTools = async () => ({ tools: listing });
+    // The live listing omits unconnected tools, so loadMcpTools builds them from
+    // the stored definitions.
+    const view = new Proxy(connected, {
+        get(target, property) {
+            if (property === "listTools")
+                return listTools;
+            const value = Reflect.get(target, property, target);
+            return typeof value === "function" ? value.bind(target) : value;
+        },
+    });
+    const { defaultToolTimeout, outputHandling, logLevel } = server;
+    const tools = await loadMcpTools(serverName, view, {
+        prefixToolNameWithServerName,
+        throwOnLoadError: false,
+        // Stored tools exist only with jitAuth; see `resolveLangSmithServers`.
+        elicitation: false,
+        ...(defaultToolTimeout !== undefined && { defaultToolTimeout }),
+        ...(outputHandling !== undefined && { outputHandling }),
+        ...(logLevel !== undefined && { logLevel }),
+    });
+    for (const tool of tools) {
+        tool.metadata = {
+            ...tool.metadata,
+            [CONNECT_ON_USE_METADATA]: connects.get(tool.name),
+        };
+    }
+    return tools;
+}
+/** Turn a kit's 428 for one call into a {@link ToolCredentialRequiredError}. */
+function askingToConnect(serverName, tool) {
+    const call = tool.func.bind(tool);
+    tool.func = async (...args) => {
+        try {
+            return await call(...args);
+        }
+        catch (error) {
+            throw toolCredentialRequired(serverName, error) ?? error;
+        }
+    };
+    return tool;
+}
+/**
+ * Map a kit's 428 anywhere in `error`'s cause chain; credentials stay empty
+ * without a complete link. The SDK transport reports the status and body as
+ * an HTTP error's `data`, which the adapter wraps in a `ToolException`.
+ */
+function toolCredentialRequired(serverName, error) {
+    for (let cause = error; cause instanceof Error; cause = cause.cause) {
+        // The SDK's `SdkHttpError` carries `data: { status, text }`, but neither
+        // the adapter nor a direct dependency exports that class to check against.
+        const data = cause.data;
+        if (isRecord(data) && data.status === 428) {
+            return refusalFromLangSmith428(serverName, data.text);
+        }
+    }
+    return undefined;
+}
+function refusalFromLangSmith428(serverName, text) {
+    let body;
+    try {
+        body = typeof text === "string" ? JSON.parse(text) : undefined;
+    }
+    catch {
+        body = undefined;
+    }
+    const listed = isRecord(body) ? body.credentials : undefined;
+    const { pending, unresolved } = partitionLangSmith428Entries(Array.isArray(listed) ? listed : [body], serverName);
+    if (unresolved.length > 0 || pending.length === 0) {
+        logger.warn("could not read the connect link from a LangSmith MCP server " +
+            `"${logger.logIdentifier(serverName)}" refusal`);
+        const labels = [...new Set(unresolved)].join(", ");
+        return new ToolCredentialRequiredError(labels || serverName, []);
+    }
+    const provider = [
+        ...new Set(pending.map((credential) => credential.provider ?? serverName)),
+    ].join(", ");
+    return new ToolCredentialRequiredError(provider, pending);
+}
 function filterToolsForServer(serverName, selection, tools, prefixToolNameWithServerName) {
     return selectTools(`MCP server "${serverName}"`, selection, tools, (tool) => {
         const { name } = tool;