managed-deepagents 0.4.0-dev.72 → 0.4.0

package/dist/runtime/identity-runtime.js

@@ -1,4 +1,5 @@
 import { getConfig } from "@langchain/langgraph";
+import { trustedChannelSourceProviders } from "../channels/registry-store.js";
 /**
  * Identity fields a client must never assert via `config.configurable`; only the
  * custom-auth handler (`langgraph_auth_user`) is trusted.
@@ -18,14 +19,6 @@ const RESERVED_CONFIGURABLE_KEYS = new Set([
     /** Stamped by compiled cron entries; never client-asserted. */
     "mda_schedule",
 ]);
-/** Source channels a run can originate from (`runtime.identity.source.provider`). */
-const SOURCE_PROVIDERS = new Set([
-    "http",
-    "slack",
-    "schedule",
-    "cli",
-    "studio",
-]);
 let ambientConfigurableForTests;
 /** Override ambient LangGraph configurable resolution. Test-only. */
 export function setAmbientConfigurableForTests(loader) {
@@ -56,14 +49,16 @@ export function resolveRuntimeConfigurable(runtime) {
     }
     return fromRuntime;
 }
-function configurableFromRuntime(runtime) {
+/** Read `configurable` from a flat runtime or nested `ToolRuntime.config`. */
+export function configurableFromRuntime(runtime) {
     const fromRuntime = runtime?.configurable ?? runtime?.config?.configurable;
     if (fromRuntime && typeof fromRuntime === "object") {
         return fromRuntime;
     }
     return undefined;
 }
-function resolveAmbientConfigurable() {
+/** `configurable` from the running LangGraph node, if any. */
+export function resolveAmbientConfigurable() {
     if (ambientConfigurableForTests) {
         return ambientConfigurableForTests();
     }
@@ -135,46 +130,10 @@ function deepFreeze(value) {
     }
     return value;
 }
-/**
- * The durable Store namespace for the run, per `scoping.memory`. A
- * `deploymentId` prefix isolates deployments; identity segments follow. Returns
- * `undefined` for `none` (no durable memory). Fail-closed: an `actor` scope with
- * no actor already rejects at ingress, so the segments are never empty here.
- */
-export function memoryNamespace(cfg, ident, deploymentId) {
-    const scope = cfg.scoping.memory;
-    if (scope === "none") {
-        return undefined;
-    }
-    if (scope === "agent") {
-        return [deploymentId, "agent"];
-    }
-    return [
-        deploymentId,
-        ...memoryIdentitySegments(scope, cfg.tenancy, ident.actor.id, ident.tenant?.id),
-    ];
-}
-/**
- * Resolve the durable memory namespace for a run directly from the runtime the
- * memory `StoreBackend` receives, per `scoping.memory`. This is the
- * plug-in point for the (deferred) Store-backed memory: a `StoreBackend`
- * namespace factory becomes `(ctx) => memoryNamespaceFor(ctx.runtime, cfg, id)`.
- * Returns `undefined` when the run has no durable namespace (`none`, or a
- * per-actor scope with no resolved actor).
- */
-export function memoryNamespaceFor(runtime, cfg, deploymentId) {
-    const configurable = runtime?.configurable ?? runtime?.config?.configurable;
-    const identity = buildRuntimeIdentity(configurable);
-    if (identity) {
-        return memoryNamespace(cfg, identity, deploymentId);
-    }
-    // No resolved actor: only the actor-independent `agent` scope has a namespace.
-    return cfg.scoping.memory === "agent" ? [deploymentId, "agent"] : undefined;
-}
 /**
  * The identity portion of the memory namespace (no deployment prefix), shared by
- * the memory `StoreBackend` and the `@auth.on.store` boundary check so both agree
- * on exactly which segments identify a namespace.
+ * hub-repo naming and the `@auth.on.store` boundary check so both agree on
+ * exactly which segments identify a namespace.
  */
 export function memoryIdentitySegments(scope, tenancy, actorId, tenantId) {
     if (scope === "actor") {
@@ -221,19 +180,6 @@ export function memoryHubRepoHandle(deployRepo, scope, tenancy, actorId, tenantI
     }
     return `${base}--u--${segments[0]}`;
 }
-/**
- * Make identity ids safe as Hub / local-FS *path* segments (`guest:uuid` → `guest_uuid`).
- *
- * ASCII-only so npm and PyPI agree. Empty / `.` / `..` collapse to `_` so a
- * local `path.join` cannot escape the Context Hub root.
- */
-export function sanitizeMemoryPathSegment(segment) {
-    const cleaned = segment.replace(/[^A-Za-z0-9._@-]+/g, "_");
-    if (cleaned === "" || cleaned === "." || cleaned === "..") {
-        return "_";
-    }
-    return cleaned;
-}
 /**
  * Make identity ids safe as Context Hub *repo handles*
  * (`^[a-z][a-z0-9-_]*$` — LangSmith `pushAgent` requirement).
@@ -281,16 +227,35 @@ export function sanitizeConfigurable(configurable) {
     }
     return Object.fromEntries(Object.entries(configurable).filter(([key]) => !RESERVED_CONFIGURABLE_KEYS.has(key)));
 }
+/** Non-channel stamps that may appear on the runtime identity envelope. */
+const RUNTIME_SOURCE_PROVIDERS = new Set(["http", "schedule", "studio", "cli"]);
+function isAcceptedRuntimeSourceProvider(provider) {
+    if (RUNTIME_SOURCE_PROVIDERS.has(provider)) {
+        return true;
+    }
+    // Channel providers: first-party builtins + anything on the adapter registry.
+    return (provider === "slack" ||
+        provider === "github" ||
+        trustedChannelSourceProviders().has(provider));
+}
 function sourceProvider(configurable) {
     const user = configurable?.langgraph_auth_user;
     const fromUser = user?.mda_source_provider;
-    if (typeof fromUser === "string" && SOURCE_PROVIDERS.has(fromUser)) {
-        return fromUser;
+    if (typeof fromUser === "string" && fromUser.trim().length > 0) {
+        const provider = fromUser.trim();
+        if (isAcceptedRuntimeSourceProvider(provider)) {
+            return provider;
+        }
+        return "http";
     }
     // Legacy top-level stamp (pre-channel); reserved and stripped from clients.
     const declared = configurable?.mda_source_provider;
-    if (typeof declared === "string" && SOURCE_PROVIDERS.has(declared)) {
-        return declared;
+    if (typeof declared === "string" && declared.trim().length > 0) {
+        const provider = declared.trim();
+        if (isAcceptedRuntimeSourceProvider(provider)) {
+            return provider;
+        }
+        return "http";
     }
     return "http";
 }

package/dist/runtime/identity-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity-runtime.js","sourceRoot":"","sources":["../../src/runtime/identity-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAYjD;;;GAGG;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,UAAU;IACV,WAAW;IACX,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,YAAY;IACZ,gBAAgB;IAChB,qBAAqB;IACrB,sBAAsB;IACtB,6EAA6E;IAC7E,qBAAqB;IACrB,+DAA+D;IAC/D,cAAc;CACf,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM;IACN,OAAO;IACP,UAAU;IACV,KAAK;IACL,QAAQ;CACT,CAAC,CAAC;AAEH,IAAI,2BAES,CAAC;AAEd,qEAAqE;AACrE,MAAM,UAAU,8BAA8B,CAC5C,MAAkD;IAElD,2BAA2B,GAAG,MAAM,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAsC;IAEtC,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,WAAW,IAAI,qBAAqB,IAAI,WAAW,EAAE,CAAC;QACxD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,0BAA0B,EAAE,CAAC;IAC7C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAsC;IAEtC,MAAM,WAAW,GAAG,OAAO,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC;IAC3E,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACnD,OAAO,WAAsC,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,0BAA0B;IACjC,IAAI,2BAA2B,EAAE,CAAC;QAChC,OAAO,2BAA2B,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,SAAS,EAAE,CAAC,YAAY,CAAC;QAC9C,IAAI,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,YAAuC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAiD;IAEjD,MAAM,IAAI,GAAG,YAAY,EAAE,mBAA8C,CAAC;IAC1E,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,EAAE,YAAY,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAoB;QAChC,KAAK,EAAE;YACL,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YACtE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC;YAC1D,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE;KACF,CAAC;IACF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3D,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,UAAqC,CAAC;IAC/D,CAAC;IACD,4EAA4E;IAC5E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,oEAAoE;AACpE,SAAS,gBAAgB,CAAC,IAA6B;IACrD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,KAAK,uBAAuB,CAAC;AACnD,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAmB,EACnB,KAAsB,EACtB,YAAoB;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IACjC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO;QACL,YAAY;QACZ,GAAG,sBAAsB,CACvB,KAAK,EACL,GAAG,CAAC,OAAO,EACX,KAAK,CAAC,KAAK,CAAC,EAAE,EACd,KAAK,CAAC,MAAM,EAAE,EAAE,CACjB;KACF,CAAC;AACJ,CAAC;AAcD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAsC,EACtC,GAAmB,EACnB,YAAoB;IAEpB,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC;IAC5E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACtD,CAAC;IACD,+EAA+E;IAC/E,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAkB,EAClB,OAAgB,EAChB,OAA2B,EAC3B,QAA4B;IAE5B,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,OAAO,IAAI,QAAQ,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,CAAC;IACD,uEAAuE;IACvE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,KAAkB,EAClB,OAAgB,EAChB,OAA2B,EAC3B,QAA4B;IAE5B,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CACrC,KAAK,EACL,OAAO,EACP,OAAO,EACP,QAAQ,CACT,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC9B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,GAAG,IAAI,QAAQ,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC;IACD,QAAQ;IACR,IAAI,OAAO,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAChD,OAAO,GAAG,IAAI,QAAQ,QAAQ,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,IAAI,QAAQ,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1D,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACnC,yEAAyE;QACzE,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,GAAG,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3C,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACvB,IAAI,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,OAAO,IAAI,GAAG,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACtC,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,wEAAwE;YACxE,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,CAAC;IAChB,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;QACrE,OAAO,GAAG,KAAK,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAiD;IAEjD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CACjC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,CAChD,CACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,YAAiD;IAEjD,MAAM,IAAI,GAAG,YAAY,EAAE,mBAA8C,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,EAAE,mBAAmB,CAAC;IAC3C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,OAAO,QAAiD,CAAC;IAC3D,CAAC;IACD,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,YAAY,EAAE,mBAAmB,CAAC;IACnD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,OAAO,QAAiD,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CACf,YAAiD;IAEjD,MAAM,IAAI,GAAG,YAAY,EAAE,mBAA8C,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,EAAE,oBAAoB,CAAC;IAC5C,IAAI,QAAQ,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,8CAA8C;IAC9C,MAAM,KAAK,GAAG,YAAY,EAAE,SAAS,CAAC;IACtC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"identity-runtime.js","sourceRoot":"","sources":["../../src/runtime/identity-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAU9E;;;GAGG;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,UAAU;IACV,WAAW;IACX,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,YAAY;IACZ,gBAAgB;IAChB,qBAAqB;IACrB,sBAAsB;IACtB,6EAA6E;IAC7E,qBAAqB;IACrB,+DAA+D;IAC/D,cAAc;CACf,CAAC,CAAC;AAEH,IAAI,2BAES,CAAC;AAEd,qEAAqE;AACrE,MAAM,UAAU,8BAA8B,CAC5C,MAAkD;IAElD,2BAA2B,GAAG,MAAM,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAsC;IAEtC,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,WAAW,IAAI,qBAAqB,IAAI,WAAW,EAAE,CAAC;QACxD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,0BAA0B,EAAE,CAAC;IAC7C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CACrC,OAAsC;IAEtC,MAAM,WAAW,GAAG,OAAO,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC;IAC3E,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACnD,OAAO,WAAsC,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,0BAA0B;IAGxC,IAAI,2BAA2B,EAAE,CAAC;QAChC,OAAO,2BAA2B,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,SAAS,EAAE,CAAC,YAAY,CAAC;QAC9C,IAAI,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,YAAuC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAiD;IAEjD,MAAM,IAAI,GAAG,YAAY,EAAE,mBAA8C,CAAC;IAC1E,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,EAAE,YAAY,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAoB;QAChC,KAAK,EAAE;YACL,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YACtE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC;YAC1D,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE;KACF,CAAC;IACF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3D,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,UAAqC,CAAC;IAC/D,CAAC;IACD,4EAA4E;IAC5E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,oEAAoE;AACpE,SAAS,gBAAgB,CAAC,IAA6B;IACrD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,KAAK,uBAAuB,CAAC;AACnD,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAcD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAkB,EAClB,OAAgB,EAChB,OAA2B,EAC3B,QAA4B;IAE5B,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,OAAO,IAAI,QAAQ,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,CAAC;IACD,uEAAuE;IACvE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,KAAkB,EAClB,OAAgB,EAChB,OAA2B,EAC3B,QAA4B;IAE5B,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CACrC,KAAK,EACL,OAAO,EACP,OAAO,EACP,QAAQ,CACT,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC9B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,GAAG,IAAI,QAAQ,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC;IACD,QAAQ;IACR,IAAI,OAAO,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAChD,OAAO,GAAG,IAAI,QAAQ,QAAQ,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,IAAI,QAAQ,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACnC,yEAAyE;QACzE,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,GAAG,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3C,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACvB,IAAI,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,OAAO,IAAI,GAAG,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACtC,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,wEAAwE;YACxE,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,CAAC;IAChB,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;QACrE,OAAO,GAAG,KAAK,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAiD;IAEjD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CACjC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,CAChD,CACF,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAEhF,SAAS,+BAA+B,CAAC,QAAgB;IACvD,IAAI,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,8EAA8E;IAC9E,OAAO,CACL,QAAQ,KAAK,OAAO;QACpB,QAAQ,KAAK,QAAQ;QACrB,6BAA6B,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,YAAiD;IAEjD,MAAM,IAAI,GAAG,YAAY,EAAE,mBAA8C,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,EAAE,mBAAmB,CAAC;IAC3C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,+BAA+B,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,YAAY,EAAE,mBAAmB,CAAC;IACnD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,+BAA+B,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CACf,YAAiD;IAEjD,MAAM,IAAI,GAAG,YAAY,EAAE,mBAA8C,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,EAAE,oBAAoB,CAAC;IAC5C,IAAI,QAAQ,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,8CAA8C;IAC9C,MAAM,KAAK,GAAG,YAAY,EAAE,SAAS,CAAC;IACtC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC"}

package/dist/runtime/index.d.ts

@@ -3,12 +3,18 @@ import type { ManagedAgentOptions, ManagedRunConfig } from "./types.js";
 export type { ManagedAgentOptions, ManagedRunConfig } from "./types.js";
 export { buildManagedAuth } from "./auth.js";
 export { buildManagedHttpApp } from "./identity-http.js";
-export { CONNECTOR_BRAND, collectConnectors, isConnector, loadConnectorTools, } from "./connector.js";
-export type { Connector, ConnectorToolList, DiscoveredConnectorModule, HttpContext, HttpSubRouter, PublicRouteHandler, PublicSubRouter, SecuredRouteHandler, ToolContext, } from "./connector.js";
+export { identityConnectPaths, mountIdentityConnectProviders, } from "../identity/connect-provider.js";
+export type { IdentityConnectAuthorizeResult, IdentityConnectCallbackResult, IdentityConnectJson, IdentityConnectMountContext, IdentityConnectProvider, IdentityConnectRedirectBaseOptions, } from "../identity/connect-provider.js";
+export { collectChannels } from "../channels/collect.js";
+export type { ChannelModuleEntry } from "../channels/collect.js";
+export { CHANNEL_BRAND, defineChannel, isChannelDefinition, manifestsFromChannelDefinitions, } from "../channels/plugin.js";
+export type { ChannelDefinition, DefineChannelOptions, } from "../channels/plugin.js";
+export { CONNECTOR_BRAND, collectConnectors, hasSandboxConnectors, isConnector, loadConnectorTools, runConnectorSandboxHooks, } from "./connector.js";
+export type { Connector, ConnectorSandboxBackend, ConnectorToolList, DiscoveredConnectorModule, HttpContext, HttpSubRouter, PublicRouteHandler, PublicSubRouter, SandboxContext, SecuredRouteHandler, ToolContext, } from "./connector.js";
 export type { ManagedUser } from "./auth.js";
-export { CredentialCache, CREDENTIAL_SIGNING_SECRET_ENV, clearCredentialCacheForTests, createCredentialsProvider, } from "./credentials.js";
+export { CredentialCache, CREDENTIAL_SIGNING_SECRET_ENV, createCredentialsProvider, } from "./credentials.js";
 export type { CredentialDeps, CredentialForOptions, CredentialsProvider, } from "./credentials.js";
-export { buildRuntimeIdentity, memoryHubRepoHandle, memoryIdentitySegments, memoryNamespace, memoryNamespaceFor, resolveRuntimeConfigurable, sanitizeConfigurable, sanitizeHubRepoSegment, sanitizeMemoryPathSegment, setAmbientConfigurableForTests, } from "./identity-runtime.js";
+export { buildRuntimeIdentity, memoryHubRepoHandle, memoryIdentitySegments, resolveAmbientConfigurable, resolveRuntimeConfigurable, sanitizeConfigurable, sanitizeHubRepoSegment, } from "./identity-runtime.js";
 export { managedRuntimeOverrides, withManagedRuntime, wrapToolsWithManagedRuntime, } from "./managed-tools.js";
 export type { InvokableTool, ManagedDeepAgentRuntime, ManagedRuntimeExtras, } from "./managed-tools.js";
 export { withManagedMiddleware, wrapMiddlewareWithManagedRuntime, } from "./managed-middleware.js";
@@ -185,7 +191,7 @@ export declare function compileManagedAgent(definition: DeepAgentDefinition, con
         filePath: import("zod").ZodNullable<import("zod").ZodString>;
     }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>, undefined, unknown, readonly (import("@langchain/core/tools").ServerTool | import("@langchain/core/tools").ClientTool)[], readonly []>, import("langchain").AgentMiddleware<undefined, undefined, unknown, readonly (import("@langchain/core/tools").ServerTool | import("@langchain/core/tools").ClientTool)[], readonly []>], readonly [], readonly [], readonly []>>>;
-export interface ManagedEvalOptions extends Omit<ManagedAgentOptions, "contextRepo" | "contextCommit" | "hasSkills" | "sandbox"> {
+export interface ManagedEvalOptions extends Omit<ManagedAgentOptions, "contextRepo" | "hasSkills" | "sandbox"> {
     modelOverride?: string;
 }
 /**

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAuBvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAExE,YAAY,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,SAAS,EACT,iBAAiB,EACjB,yBAAyB,EACzB,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EACL,eAAe,EACf,6BAA6B,EAC7B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,aAAa,EACb,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAgGvD;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,mBAAmB,EAC/B,MAAM,CAAC,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2YAoK9B;AAED,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAC9C,mBAAmB,EACnB,aAAa,GAAG,eAAe,GAAG,WAAW,GAAG,SAAS,CAC1D;IACC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,mBAAmB,EAC/B,MAAM,CAAC,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2YAe7B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAuBvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAExE,YAAY,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,8BAA8B,EAC9B,6BAA6B,EAC7B,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,kCAAkC,GACnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACL,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,SAAS,EACT,uBAAuB,EACvB,iBAAiB,EACjB,yBAAyB,EACzB,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EACL,eAAe,EACf,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,0BAA0B,EAC1B,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,aAAa,EACb,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,mBAAmB,EAC/B,MAAM,CAAC,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2YAgL9B;AAED,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAC9C,mBAAmB,EACnB,aAAa,GAAG,WAAW,GAAG,SAAS,CACxC;IACC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,mBAAmB,EAC/B,MAAM,CAAC,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2YAe7B"}

package/dist/runtime/index.js

@@ -1,78 +1,21 @@
 import { ContextHubBackend, FilesystemBackend, createDeepAgent, } from "deepagents";
+import { LazyManagedSandboxBackend } from "./backend.js";
 import { loadConnectorTools } from "./connector.js";
 import { createScheduleDeliveryMiddleware } from "../channels/schedule-delivery.js";
 import { wrapMiddlewareWithManagedRuntime, } from "./managed-middleware.js";
 import { wrapToolsWithManagedRuntime, } from "./managed-tools.js";
 import { asText, downloadContextFile, ensureUserMemorySeed, hasOrgMemory, managedContextBackend, managedContextPermissions, openUserMemoryBackend, resolveMemoryRepoPrefix, resolveRunMemoryRepoHandle, } from "./memory/index.js";
-import { resolveManagedSandbox } from "./sandbox-manager.js";
 export { buildManagedAuth } from "./auth.js";
 export { buildManagedHttpApp } from "./identity-http.js";
-export { CONNECTOR_BRAND, collectConnectors, isConnector, loadConnectorTools, } from "./connector.js";
-export { CredentialCache, CREDENTIAL_SIGNING_SECRET_ENV, clearCredentialCacheForTests, createCredentialsProvider, } from "./credentials.js";
-export { buildRuntimeIdentity, memoryHubRepoHandle, memoryIdentitySegments, memoryNamespace, memoryNamespaceFor, resolveRuntimeConfigurable, sanitizeConfigurable, sanitizeHubRepoSegment, sanitizeMemoryPathSegment, setAmbientConfigurableForTests, } from "./identity-runtime.js";
+export { identityConnectPaths, mountIdentityConnectProviders, } from "../identity/connect-provider.js";
+export { collectChannels } from "../channels/collect.js";
+export { CHANNEL_BRAND, defineChannel, isChannelDefinition, manifestsFromChannelDefinitions, } from "../channels/plugin.js";
+export { CONNECTOR_BRAND, collectConnectors, hasSandboxConnectors, isConnector, loadConnectorTools, runConnectorSandboxHooks, } from "./connector.js";
+export { CredentialCache, CREDENTIAL_SIGNING_SECRET_ENV, createCredentialsProvider, } from "./credentials.js";
+export { buildRuntimeIdentity, memoryHubRepoHandle, memoryIdentitySegments, resolveAmbientConfigurable, resolveRuntimeConfigurable, sanitizeConfigurable, sanitizeHubRepoSegment, } from "./identity-runtime.js";
 export { managedRuntimeOverrides, withManagedRuntime, wrapToolsWithManagedRuntime, } from "./managed-tools.js";
 export { withManagedMiddleware, wrapMiddlewareWithManagedRuntime, } from "./managed-middleware.js";
 export { issueGuestToken } from "./validated-token.js";
-class LazyManagedSandboxBackend {
-    sandbox;
-    setupScript;
-    runConfig;
-    pendingBackend;
-    resolvedBackend;
-    constructor(sandbox, setupScript, runConfig) {
-        this.sandbox = sandbox;
-        this.setupScript = setupScript;
-        this.runConfig = runConfig;
-    }
-    get id() {
-        return this.resolvedBackend?.id ?? "";
-    }
-    async ls(path = "/") {
-        return (await this.backend()).ls(path);
-    }
-    async read(filePath, offset, limit) {
-        return (await this.backend()).read(filePath, offset, limit);
-    }
-    async readRaw(filePath) {
-        return (await this.backend()).readRaw(filePath);
-    }
-    async grep(pattern, path, glob) {
-        return (await this.backend()).grep(pattern, path, glob);
-    }
-    async glob(pattern, path) {
-        return (await this.backend()).glob(pattern, path);
-    }
-    async write(filePath, content) {
-        return (await this.backend()).write(filePath, content);
-    }
-    async edit(filePath, oldString, newString, replaceAll = false) {
-        return (await this.backend()).edit(filePath, oldString, newString, replaceAll);
-    }
-    async delete(filePath) {
-        return (await this.backend()).delete?.(filePath);
-    }
-    async uploadFiles(files) {
-        return (await this.backend()).uploadFiles?.(files);
-    }
-    async downloadFiles(paths) {
-        return (await this.backend()).downloadFiles?.(paths);
-    }
-    async execute(command) {
-        return (await this.backend()).execute(command);
-    }
-    backend() {
-        if (!this.pendingBackend) {
-            this.pendingBackend = resolveManagedSandbox(this.sandbox, this.setupScript, this.runConfig).then((backend) => {
-                this.resolvedBackend = backend;
-                return this.resolvedBackend;
-            }, (error) => {
-                this.pendingBackend = undefined;
-                throw error;
-            });
-        }
-        return this.pendingBackend;
-    }
-}
 /**
  * Compile a {@link DeepAgentDefinition} into a runnable Deep Agent.
  *
@@ -102,7 +45,13 @@ export async function compileManagedAgent(definition, config, options) {
         ? loadConnectorTools(connectors)
         : undefined;
     const sandboxBackend = sandbox
-        ? new LazyManagedSandboxBackend(sandbox, setupScript, config)
+        ? LazyManagedSandboxBackend.create({
+            sandbox,
+            setupScript,
+            runConfig: config,
+            connectors,
+            identity,
+        })
         : undefined;
     const contextBackend = await resolveContextBackend(contextRepo, contextRoot);
     if (contextBackend) {
@@ -113,7 +62,9 @@ export async function compileManagedAgent(definition, config, options) {
         const mountOrgMemory = await hasOrgMemory(contextBackend.backend, contextBackend.kind === "filesystem" ? contextBackend.rootDir : undefined);
         const identityConfig = identity?.config;
         const memoryScope = identityConfig?.scoping.memory;
-        const perRunMemoryRemount = memoryScope === "actor" || memoryScope === "tenant";
+        // ``disableMemory`` opts out of hot-memory injection and per-run
+        // actor/tenant remounts (matches Python runtime behavior).
+        const perRunMemoryRemount = !disableMemory && (memoryScope === "actor" || memoryScope === "tenant");
         if (perRunMemoryRemount && identityConfig) {
             // One Context Hub repo per actor/tenant. Deploy hub keeps instructions,
             // skills, org-memory, and the shared agent seed template.
@@ -122,6 +73,8 @@ export async function compileManagedAgent(definition, config, options) {
                 : undefined;
             const deployHandle = contextRepo ?? "local";
             params.backend = async (runtime) => {
+                // Per-run backend freezes this request's thread/actor configurable.
+                const scopedSandbox = sandboxBackend?.forRuntime(runtime);
                 const userRepo = resolveRunMemoryRepoHandle(deployHandle, identityConfig, runtime);
                 const memoryBackend = userRepo === null
                     ? null
@@ -134,7 +87,7 @@ export async function compileManagedAgent(definition, config, options) {
                         deployRoot: localRoot,
                     });
                 }
-                return managedContextBackend(contextBackend.backend, sandboxBackend, memoryBackend
+                return managedContextBackend(contextBackend.backend, scopedSandbox, memoryBackend
                     ? { kind: "repo", backend: memoryBackend.backend }
                     : null, mountOrgMemory);
             };
@@ -143,7 +96,7 @@ export async function compileManagedAgent(definition, config, options) {
             const agentFallbackPrefix = await resolveMemoryRepoPrefix(contextBackend.backend, contextBackend.kind === "filesystem"
                 ? contextBackend.rootDir
                 : undefined);
-            const memoryRepoPrefix = memoryScope === "none"
+            const memoryRepoPrefix = disableMemory || memoryScope === "none"
                 ? null
                 : memoryScope === "agent"
                     ? "memories/agent"
@@ -152,7 +105,12 @@ export async function compileManagedAgent(definition, config, options) {
                 ? null
                 : { kind: "path", repoPrefix: memoryRepoPrefix }, mountOrgMemory);
         }
-        params.permissions = managedContextPermissions(params.permissions, mountOrgMemory);
+        // Sandbox + FilesystemPermission cannot coexist at execute() time: deepagents
+        // adapts CompositeBackend and drops routePrefixes, so any permission rule
+        // disables shell. Rely on read-only Context Hub mounts instead.
+        params.permissions = sandboxBackend
+            ? []
+            : managedContextPermissions(params.permissions, mountOrgMemory);
         if (hasSkills) {
             params.skills = ["/skills/"];
         }

package/dist/runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAEL,gCAAgC,GACjC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEL,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,MAAM,EACN,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAI7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAaxB,OAAO,EACL,eAAe,EACf,6BAA6B,EAC7B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAM1B,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAM5B,OAAO,EACL,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAOvD,MAAM,yBAAyB;IAKV,OAAO;IACP,WAAW;IACX,SAAS;IANpB,cAAc,CAAkC;IAChD,eAAe,CAAyB;IAEhD,YACmB,OAAoD,EACpD,WAA+B,EAC/B,SAAuC;uBAFvC,OAAO;2BACP,WAAW;yBACX,SAAS;IACzB,CAAC;IAEJ,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG;QACjB,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,MAAe,EAAE,KAAc;QAC1D,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,IAAoB,EAAE,IAAoB;QACpE,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,IAAa;QACvC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,OAAe;QAC3C,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,IAAI,CACR,QAAgB,EAChB,SAAiB,EACjB,SAAiB,EACjB,UAAU,GAAG,KAAK;QAElB,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAChC,QAAQ,EACR,SAAS,EACT,SAAS,EACT,UAAU,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAkC;QAClD,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAe;QACjC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe;QAC3B,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,GAAG,qBAAqB,CACzC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,CACf,CAAC,IAAI,CACJ,CAAC,OAAO,EAAE,EAAE;gBACV,IAAI,CAAC,eAAe,GAAG,OAAgC,CAAC;gBACxD,OAAO,IAAI,CAAC,eAAe,CAAC;YAC9B,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;gBACR,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC,CACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAA+B,EAC/B,MAAyB,EACzB,OAA6B;IAE7B,MAAM,EACJ,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,GAAG,KAAK,EACjB,OAAO,EACP,WAAW,EACX,UAAU;IACV,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,QAAQ,GACT,GAAG,OAAO,IAAI,EAAE,CAAC;IAElB,MAAM,EAAE,aAAa,GAAG,KAAK,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC;IAC9E,MAAM,MAAM,GAA4B,EAAE,GAAG,WAAW,EAAE,CAAC;IAE3D;;;;;;;;OAQG;IACH,MAAM,qBAAqB,GACzB,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC;QAChC,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,cAAc,GAAG,OAAO;QAC5B,CAAC,CAAC,IAAI,yBAAyB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC;QAC7D,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC7E,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC;QAClC,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,YAAY,CACvC,cAAc,CAAC,OAAO,EACtB,cAAc,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAC1E,CAAC;QACF,MAAM,cAAc,GAAG,QAAQ,EAAE,MAAM,CAAC;QACxC,MAAM,WAAW,GAAG,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC;QACnD,MAAM,mBAAmB,GACvB,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,QAAQ,CAAC;QAEtD,IAAI,mBAAmB,IAAI,cAAc,EAAE,CAAC;YAC1C,wEAAwE;YACxE,0DAA0D;YAC1D,MAAM,SAAS,GACb,cAAc,CAAC,IAAI,KAAK,YAAY;gBAClC,CAAC,CAAC,cAAc,CAAC,OAAO;gBACxB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,YAAY,GAAG,WAAW,IAAI,OAAO,CAAC;YAC5C,MAAM,CAAC,OAAO,GAAG,KAAK,EAAE,OAAgB,EAAE,EAAE;gBAC1C,MAAM,QAAQ,GAAG,0BAA0B,CACzC,YAAY,EACZ,cAAc,EACd,OAAO,CACR,CAAC;gBACF,MAAM,aAAa,GACjB,QAAQ,KAAK,IAAI;oBACf,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,MAAM,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACvD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;oBAC3B,MAAM,oBAAoB,CAAC;wBACzB,WAAW,EAAE,aAAa,CAAC,OAAO;wBAClC,aAAa,EAAE,cAAc,CAAC,OAAO;wBACrC,SAAS,EAAE,aAAa,CAAC,OAAO;wBAChC,UAAU,EAAE,SAAS;qBACtB,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,qBAAqB,CAC1B,cAAc,CAAC,OAAO,EACtB,cAAc,EACd,aAAa;oBACX,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE;oBAClD,CAAC,CAAC,IAAI,EACR,cAAc,CACf,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,mBAAmB,GAAG,MAAM,uBAAuB,CACvD,cAAc,CAAC,OAAO,EACtB,cAAc,CAAC,IAAI,KAAK,YAAY;gBAClC,CAAC,CAAC,cAAc,CAAC,OAAO;gBACxB,CAAC,CAAC,SAAS,CACd,CAAC;YACF,MAAM,gBAAgB,GACpB,WAAW,KAAK,MAAM;gBACpB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,WAAW,KAAK,OAAO;oBACvB,CAAC,CAAC,gBAAgB;oBAClB,CAAC,CAAC,mBAAmB,CAAC;YAC5B,MAAM,CAAC,OAAO,GAAG,qBAAqB,CACpC,cAAc,CAAC,OAAO,EACtB,cAAc,EACd,gBAAgB,KAAK,IAAI;gBACvB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAClD,cAAc,CACf,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,WAAW,GAAG,yBAAyB,CAC5C,MAAM,CAAC,WAAW,EAClB,cAAc,CACf,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,aAAa,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAC7C,MAAM,CAAC,MAAM,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,6EAA6E;QAC7E,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QACrC,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,CAAC,OAAO,GAAG,cAAc,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC;IACnD,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,cAAc,CAAC,CAAC;IACvD,CAAC;IAED,+EAA+E;IAC/E,+EAA+E;IAC/E,0DAA0D;IAC1D,IAAI,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,KAAK,GAAG,2BAA2B,CACxC,MAAM,CAAC,KAAwB,EAC/B,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QACzD,CAAC,CAAE,MAAM,CAAC,UAAkC;QAC5C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,eAAe,GAAG,QAAQ;QAC9B,CAAC,CAAC,gCAAgC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC;QACvE,CAAC,CAAC,kBAAkB,CAAC;IACvB,+EAA+E;IAC/E,MAAM,CAAC,UAAU,GAAG,CAAC,gCAAgC,EAAE,EAAE,GAAG,eAAe,CAAC,CAAC;IAE7E,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,UAA+B,EAC/B,MAAyB,EACzB,OAA4B;IAE5B,MAAM,EAAE,aAAa,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAC3D,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,cAAc,GAAwB;QAC1C,GAAG,UAAU;QACb,MAAM,EAAE;YACN,GAAG,UAAU,CAAC,MAAM;YACpB,GAAG,CAAC,aAAa,IAAI,eAAe;gBAClC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,IAAI,eAAe,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,aAAa,EAAE,IAAI;SACpB;KACF,CAAC;IACF,OAAO,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAyB;IAClD,MAAM,KAAK,GAAG,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAA0B;IAE1B,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC1E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,mFAAmF;IACnF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAMD,KAAK,UAAU,qBAAqB,CAClC,WAA+B,EAC/B,WAA+B;IAE/B,8EAA8E;IAC9E,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,IAAI,iBAAiB,CAAC;gBAC7B,OAAO,EAAE,WAAW;gBACpB,WAAW,EAAE,IAAI;aAClB,CAAC;YACF,OAAO,EAAE,WAAW;SACrB,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAEL,gCAAgC,GACjC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEL,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,MAAM,EACN,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AASzC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EACL,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAexB,OAAO,EACL,eAAe,EACf,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAM1B,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,0BAA0B,EAC1B,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAM5B,OAAO,EACL,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAA+B,EAC/B,MAAyB,EACzB,OAA6B;IAE7B,MAAM,EACJ,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,GAAG,KAAK,EACjB,OAAO,EACP,WAAW,EACX,UAAU;IACV,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,QAAQ,GACT,GAAG,OAAO,IAAI,EAAE,CAAC;IAElB,MAAM,EAAE,aAAa,GAAG,KAAK,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC;IAC9E,MAAM,MAAM,GAA4B,EAAE,GAAG,WAAW,EAAE,CAAC;IAE3D;;;;;;;;OAQG;IACH,MAAM,qBAAqB,GACzB,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC;QAChC,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,cAAc,GAAG,OAAO;QAC5B,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC;YAC/B,OAAO;YACP,WAAW;YACX,SAAS,EAAE,MAAM;YACjB,UAAU;YACV,QAAQ;SACT,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC7E,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC;QAClC,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,YAAY,CACvC,cAAc,CAAC,OAAO,EACtB,cAAc,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAC1E,CAAC;QACF,MAAM,cAAc,GAAG,QAAQ,EAAE,MAAM,CAAC;QACxC,MAAM,WAAW,GAAG,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC;QACnD,iEAAiE;QACjE,2DAA2D;QAC3D,MAAM,mBAAmB,GACvB,CAAC,aAAa,IAAI,CAAC,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,QAAQ,CAAC,CAAC;QAE1E,IAAI,mBAAmB,IAAI,cAAc,EAAE,CAAC;YAC1C,wEAAwE;YACxE,0DAA0D;YAC1D,MAAM,SAAS,GACb,cAAc,CAAC,IAAI,KAAK,YAAY;gBAClC,CAAC,CAAC,cAAc,CAAC,OAAO;gBACxB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,YAAY,GAAG,WAAW,IAAI,OAAO,CAAC;YAC5C,MAAM,CAAC,OAAO,GAAG,KAAK,EAAE,OAAgB,EAAE,EAAE;gBAC1C,oEAAoE;gBACpE,MAAM,aAAa,GAAG,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;gBAC1D,MAAM,QAAQ,GAAG,0BAA0B,CACzC,YAAY,EACZ,cAAc,EACd,OAAO,CACR,CAAC;gBACF,MAAM,aAAa,GACjB,QAAQ,KAAK,IAAI;oBACf,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,MAAM,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACvD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;oBAC3B,MAAM,oBAAoB,CAAC;wBACzB,WAAW,EAAE,aAAa,CAAC,OAAO;wBAClC,aAAa,EAAE,cAAc,CAAC,OAAO;wBACrC,SAAS,EAAE,aAAa,CAAC,OAAO;wBAChC,UAAU,EAAE,SAAS;qBACtB,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,qBAAqB,CAC1B,cAAc,CAAC,OAAO,EACtB,aAAa,EACb,aAAa;oBACX,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE;oBAClD,CAAC,CAAC,IAAI,EACR,cAAc,CACf,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,mBAAmB,GAAG,MAAM,uBAAuB,CACvD,cAAc,CAAC,OAAO,EACtB,cAAc,CAAC,IAAI,KAAK,YAAY;gBAClC,CAAC,CAAC,cAAc,CAAC,OAAO;gBACxB,CAAC,CAAC,SAAS,CACd,CAAC;YACF,MAAM,gBAAgB,GACpB,aAAa,IAAI,WAAW,KAAK,MAAM;gBACrC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,WAAW,KAAK,OAAO;oBACvB,CAAC,CAAC,gBAAgB;oBAClB,CAAC,CAAC,mBAAmB,CAAC;YAC5B,MAAM,CAAC,OAAO,GAAG,qBAAqB,CACpC,cAAc,CAAC,OAAO,EACtB,cAAc,EACd,gBAAgB,KAAK,IAAI;gBACvB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAClD,cAAc,CACf,CAAC;QACJ,CAAC;QACD,8EAA8E;QAC9E,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,CAAC,WAAW,GAAG,cAAc;YACjC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAClE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,aAAa,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAC7C,MAAM,CAAC,MAAM,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,6EAA6E;QAC7E,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QACrC,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,CAAC,OAAO,GAAG,cAAc,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC;IACnD,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,cAAc,CAAC,CAAC;IACvD,CAAC;IAED,+EAA+E;IAC/E,+EAA+E;IAC/E,0DAA0D;IAC1D,IAAI,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,KAAK,GAAG,2BAA2B,CACxC,MAAM,CAAC,KAAwB,EAC/B,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QACzD,CAAC,CAAE,MAAM,CAAC,UAAkC;QAC5C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,eAAe,GAAG,QAAQ;QAC9B,CAAC,CAAC,gCAAgC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC;QACvE,CAAC,CAAC,kBAAkB,CAAC;IACvB,+EAA+E;IAC/E,MAAM,CAAC,UAAU,GAAG,CAAC,gCAAgC,EAAE,EAAE,GAAG,eAAe,CAAC,CAAC;IAE7E,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,UAA+B,EAC/B,MAAyB,EACzB,OAA4B;IAE5B,MAAM,EAAE,aAAa,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAC3D,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,cAAc,GAAwB;QAC1C,GAAG,UAAU;QACb,MAAM,EAAE;YACN,GAAG,UAAU,CAAC,MAAM;YACpB,GAAG,CAAC,aAAa,IAAI,eAAe;gBAClC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,IAAI,eAAe,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,aAAa,EAAE,IAAI;SACpB;KACF,CAAC;IACF,OAAO,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAyB;IAClD,MAAM,KAAK,GAAG,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAA0B;IAE1B,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC1E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,mFAAmF;IACnF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAMD,KAAK,UAAU,qBAAqB,CAClC,WAA+B,EAC/B,WAA+B;IAE/B,8EAA8E;IAC9E,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,IAAI,iBAAiB,CAAC;gBAC7B,OAAO,EAAE,WAAW;gBACpB,WAAW,EAAE,IAAI;aAClB,CAAC;YACF,OAAO,EAAE,WAAW;SACrB,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/runtime/memory/index.d.ts

@@ -1,8 +1,5 @@
-export { asText, downloadContextFile, pathExists } from "./context-io.js";
-export { managedContextBackend, managedContextPermissions, managedContextRoutes, MountedPathBackend, } from "./mounts.js";
-export type { MemoryUserMount } from "./mounts.js";
-export { ensureAbsolute, localMemoryHotPath, stripTrailingSlash, trimSlashes, } from "./paths.js";
-export { ensureIdentityMemorySlice, ensureLocalMemorySlice, ensureUserMemorySeed, LOCAL_MEMORY_SEED, memorySeedNeedsRefresh, } from "./seed.js";
+export { asText, downloadContextFile } from "./context-io.js";
+export { managedContextBackend, managedContextPermissions } from "./mounts.js";
+export { ensureUserMemorySeed } from "./seed.js";
 export { hasOrgMemory, openUserMemoryBackend, resolveMemoryRepoPrefix, resolveRunMemoryRepoHandle, } from "./user-repo.js";
-export type { UserMemoryBackend } from "./user-repo.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/memory/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/memory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/memory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC"}

package/dist/runtime/memory/index.js

@@ -1,6 +1,5 @@
-export { asText, downloadContextFile, pathExists } from "./context-io.js";
-export { managedContextBackend, managedContextPermissions, managedContextRoutes, MountedPathBackend, } from "./mounts.js";
-export { ensureAbsolute, localMemoryHotPath, stripTrailingSlash, trimSlashes, } from "./paths.js";
-export { ensureIdentityMemorySlice, ensureLocalMemorySlice, ensureUserMemorySeed, LOCAL_MEMORY_SEED, memorySeedNeedsRefresh, } from "./seed.js";
+export { asText, downloadContextFile } from "./context-io.js";
+export { managedContextBackend, managedContextPermissions } from "./mounts.js";
+export { ensureUserMemorySeed } from "./seed.js";
 export { hasOrgMemory, openUserMemoryBackend, resolveMemoryRepoPrefix, resolveRunMemoryRepoHandle, } from "./user-repo.js";
 //# sourceMappingURL=index.js.map

package/dist/runtime/memory/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/memory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/memory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC"}

package/dist/runtime/memory/mounts.d.ts

@@ -12,8 +12,11 @@ export declare function managedContextBackend(contextBackend: BackendProtocolV2,
 export declare class MountedPathBackend {
     private readonly backend;
     private readonly target;
+    private readonly readOnly;
     private constructor();
-    static directory(backend: BackendProtocolV2, repoPrefix: string, visiblePrefix: string): MountedPathBackend;
+    static directory(backend: BackendProtocolV2, repoPrefix: string, visiblePrefix: string, options?: {
+        readOnly?: boolean;
+    }): MountedPathBackend;
     static file(backend: BackendProtocolV2, repoFile: string, visibleFile: string): MountedPathBackend;
     ls(path?: string): Promise<import("deepagents").LsResult>;
     read(filePath: string, offset?: number, limit?: number): Promise<import("deepagents").ReadResult>;
@@ -32,7 +35,18 @@ export declare class MountedPathBackend {
     private fromRepoPath;
     private toVisiblePath;
     private assertFileRootPath;
+    /** Deploy-owned mounts (instructions, skills, org memory) reject writes. */
+    private assertWritable;
 }
 export declare function managedContextRoutes(contextBackend: BackendProtocolV2, memoryUser: MemoryUserMount, mountOrgMemory: boolean): Record<string, MountedPathBackend>;
+/**
+ * Path-permission rules for non-sandbox (StateBackend) agents.
+ *
+ * When a sandbox backend is present, callers must pass `[]` instead: deepagents
+ * `resolveBackend()` runs CompositeBackend through `adaptSandboxProtocol`, which
+ * drops `routePrefixes`, so `allPathsScopedToRoutes` fails and `execute` is
+ * disabled for any non-empty permissions list. Deploy-owned paths are enforced
+ * via read-only {@link MountedPathBackend} mounts instead.
+ */
 export declare function managedContextPermissions(existing: unknown, mountOrgMemory: boolean): unknown[];
 //# sourceMappingURL=mounts.d.ts.map

package/dist/runtime/memory/mounts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mounts.d.ts","sourceRoot":"","sources":["../../../src/runtime/memory/mounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAgB,MAAM,YAAY,CAAC;AAC5D,OAAO,KAAK,EAAsB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAMxE,sFAAsF;AACtF,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GAC5C,IAAI,CAAC;AAET,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,iBAAiB,EACjC,cAAc,EAAE,OAAO,GAAG,SAAS,EACnC,UAAU,EAAE,eAAe,EAC3B,cAAc,EAAE,OAAO,oBAUxB;AAED,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFzB,OAAO,eAKH;IAEJ,MAAM,CAAC,SAAS,CACd,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,sBAMtB;IAED,MAAM,CAAC,IAAI,CACT,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,sBAMpB;IAEK,EAAE,CAAC,IAAI,SAAM,0CAGlB;IAEK,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,4CAE3D;IAEK,OAAO,CAAC,QAAQ,EAAE,MAAM,+CAE7B;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,4CAOrE;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,SAAM,4CAMrC;IAEK,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,6CAG5C;IAEK,IAAI,CACR,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,UAAQ,4CASnB;IAEK,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,sDAWnD;IAEK,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,wDAMlC;IAED,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,UAAU;IAgBlB,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,oBAAoB;IAgB5B,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,YAAY;IAoBpB,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,kBAAkB;CAU3B;AAED,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,iBAAiB,EACjC,UAAU,EAAE,eAAe,EAC3B,cAAc,EAAE,OAAO,sCAqCxB;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,OAAO,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,EAAE,CAaX"}
+{"version":3,"file":"mounts.d.ts","sourceRoot":"","sources":["../../../src/runtime/memory/mounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAgB,MAAM,YAAY,CAAC;AAC5D,OAAO,KAAK,EAAsB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAMxE,sFAAsF;AACtF,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GAC5C,IAAI,CAAC;AAET,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,iBAAiB,EACjC,cAAc,EAAE,OAAO,GAAG,SAAS,EACnC,UAAU,EAAE,eAAe,EAC3B,cAAc,EAAE,OAAO,oBAUxB;AAED,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAGvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,OAAO,eAMH;IAEJ,MAAM,CAAC,SAAS,CACd,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,sBAUjC;IAED,MAAM,CAAC,IAAI,CACT,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,sBAUpB;IAEK,EAAE,CAAC,IAAI,SAAM,0CAGlB;IAEK,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,4CAE3D;IAEK,OAAO,CAAC,QAAQ,EAAE,MAAM,+CAE7B;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,4CAOrE;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,SAAM,4CAMrC;IAEK,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,6CAI5C;IAEK,IAAI,CACR,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,UAAQ,4CAUnB;IAEK,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,sDAYnD;IAEK,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,wDAMlC;IAED,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,UAAU;IAgBlB,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,oBAAoB;IAgB5B,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,YAAY;IAoBpB,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,kBAAkB;IAW1B,4EAA4E;IAC5E,OAAO,CAAC,cAAc;CAUvB;AAED,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,iBAAiB,EACjC,UAAU,EAAE,eAAe,EAC3B,cAAc,EAAE,OAAO,sCAuCxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,OAAO,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,EAAE,CAaX"}

package/dist/runtime/memory/mounts.js

@@ -9,21 +9,23 @@ export function managedContextBackend(contextBackend, sandboxBackend, memoryUser
 export class MountedPathBackend {
     backend;
     target;
-    constructor(backend, target) {
+    readOnly;
+    constructor(backend, target, readOnly = false) {
         this.backend = backend;
         this.target = target;
+        this.readOnly = readOnly;
     }
-    static directory(backend, repoPrefix, visiblePrefix) {
+    static directory(backend, repoPrefix, visiblePrefix, options) {
         return new MountedPathBackend(backend, {
             repoPrefix: trimSlashes(repoPrefix),
             visiblePrefix: stripTrailingSlash(ensureAbsolute(visiblePrefix)),
-        });
+        }, options?.readOnly ?? false);
     }
     static file(backend, repoFile, visibleFile) {
         return new MountedPathBackend(backend, {
             repoFile: trimSlashes(repoFile),
             visibleFile: ensureAbsolute(visibleFile),
-        });
+        }, true);
     }
     async ls(path = "/") {
         const result = await this.backend.ls(this.toRepoPath(path));
@@ -44,14 +46,17 @@ export class MountedPathBackend {
         return this.remapPathCollections(result, "files");
     }
     async write(filePath, content) {
+        this.assertWritable();
         const result = await this.backend.write(this.toRepoPath(filePath), content);
         return this.withVisiblePath(result, filePath);
     }
     async edit(filePath, oldString, newString, replaceAll = false) {
+        this.assertWritable();
         const result = await this.backend.edit(this.toRepoPath(filePath), oldString, newString, replaceAll);
         return this.withVisiblePath(result, filePath);
     }
     async uploadFiles(files) {
+        this.assertWritable();
         const upload = this.optional("uploadFiles");
         const result = await upload(files.map(([path, content]) => [this.toRepoPath(path), content]));
         return result.map((entry, index) => this.withVisiblePath(entry, files[index]?.[0] ?? "/"));
@@ -149,11 +154,21 @@ export class MountedPathBackend {
             throw new Error(`Context Hub file mount ${visible} does not contain ${normalized}`);
         }
     }
+    /** Deploy-owned mounts (instructions, skills, org memory) reject writes. */
+    assertWritable() {
+        if (!this.readOnly) {
+            return;
+        }
+        const label = "visibleFile" in this.target
+            ? this.target.visibleFile
+            : this.target.visiblePrefix;
+        throw new Error(`Context Hub mount ${label} is read-only`);
+    }
 }
 export function managedContextRoutes(contextBackend, memoryUser, mountOrgMemory) {
     const routes = {
         "/instructions.md": MountedPathBackend.file(contextBackend, "instructions.md", "/instructions.md"),
-        "/skills/": MountedPathBackend.directory(contextBackend, "skills", "/skills"),
+        "/skills/": MountedPathBackend.directory(contextBackend, "skills", "/skills", { readOnly: true }),
     };
     if (memoryUser?.kind === "path") {
         // Shared agent (or legacy flat) slice inside the deployment Hub repo.
@@ -164,12 +179,21 @@ export function managedContextRoutes(contextBackend, memoryUser, mountOrgMemory)
         routes["/memories/user/"] = MountedPathBackend.directory(memoryUser.backend, "", "/memories/user");
     }
     if (mountOrgMemory) {
-        routes["/memories/org/"] = MountedPathBackend.directory(contextBackend, "org-memory", "/memories/org");
+        routes["/memories/org/"] = MountedPathBackend.directory(contextBackend, "org-memory", "/memories/org", { readOnly: true });
     }
     return routes;
 }
+/**
+ * Path-permission rules for non-sandbox (StateBackend) agents.
+ *
+ * When a sandbox backend is present, callers must pass `[]` instead: deepagents
+ * `resolveBackend()` runs CompositeBackend through `adaptSandboxProtocol`, which
+ * drops `routePrefixes`, so `allPathsScopedToRoutes` fails and `execute` is
+ * disabled for any non-empty permissions list. Deploy-owned paths are enforced
+ * via read-only {@link MountedPathBackend} mounts instead.
+ */
 export function managedContextPermissions(existing, mountOrgMemory) {
-    const deniedPaths = ["/instructions.md", "/skills/**"];
+    const deniedPaths = ["/skills/**"];
     if (mountOrgMemory) {
         deniedPaths.push("/memories/org/**");
     }