managed-deepagents 0.4.1 → 0.4.3-dev.94

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (453) hide show
  1. package/README.md +78 -35
  2. package/dist/channels/assistant-text.js +1 -1
  3. package/dist/channels/assistant-text.js.map +1 -1
  4. package/dist/channels/binding.d.ts.map +1 -1
  5. package/dist/channels/binding.js +3 -1
  6. package/dist/channels/binding.js.map +1 -1
  7. package/dist/channels/index.d.ts +7 -8
  8. package/dist/channels/index.d.ts.map +1 -1
  9. package/dist/channels/index.js +6 -5
  10. package/dist/channels/index.js.map +1 -1
  11. package/dist/channels/manifest.d.ts +7 -4
  12. package/dist/channels/manifest.d.ts.map +1 -1
  13. package/dist/channels/messaging-registry.d.ts +21 -0
  14. package/dist/channels/messaging-registry.d.ts.map +1 -0
  15. package/dist/channels/messaging-registry.js +50 -0
  16. package/dist/channels/messaging-registry.js.map +1 -0
  17. package/dist/channels/registry-types.d.ts +1 -1
  18. package/dist/channels/registry.d.ts +4 -3
  19. package/dist/channels/registry.d.ts.map +1 -1
  20. package/dist/channels/registry.js +5 -6
  21. package/dist/channels/registry.js.map +1 -1
  22. package/dist/channels/schedule-delivery.d.ts +4 -1
  23. package/dist/channels/schedule-delivery.d.ts.map +1 -1
  24. package/dist/channels/schedule-delivery.js +3 -1
  25. package/dist/channels/schedule-delivery.js.map +1 -1
  26. package/dist/channels/slack/adapter.d.ts +1 -2
  27. package/dist/channels/slack/adapter.d.ts.map +1 -1
  28. package/dist/channels/slack/adapter.js +0 -2
  29. package/dist/channels/slack/adapter.js.map +1 -1
  30. package/dist/channels/slack/http.d.ts +7 -39
  31. package/dist/channels/slack/http.d.ts.map +1 -1
  32. package/dist/channels/slack/http.js +64 -122
  33. package/dist/channels/slack/http.js.map +1 -1
  34. package/dist/channels/slack/index.d.ts +94 -8
  35. package/dist/channels/slack/index.d.ts.map +1 -1
  36. package/dist/channels/slack/index.js +144 -6
  37. package/dist/channels/slack/index.js.map +1 -1
  38. package/dist/channels/slack/normalize.d.ts +6 -4
  39. package/dist/channels/slack/normalize.d.ts.map +1 -1
  40. package/dist/channels/slack/normalize.js +61 -28
  41. package/dist/channels/slack/normalize.js.map +1 -1
  42. package/dist/channels/slack/transport.d.ts.map +1 -1
  43. package/dist/channels/slack/transport.js +3 -2
  44. package/dist/channels/slack/transport.js.map +1 -1
  45. package/dist/channels/store.d.ts +14 -0
  46. package/dist/channels/store.d.ts.map +1 -1
  47. package/dist/channels/store.js +41 -27
  48. package/dist/channels/store.js.map +1 -1
  49. package/dist/connectors/marketplace/catalog.d.ts +96 -0
  50. package/dist/connectors/marketplace/catalog.d.ts.map +1 -0
  51. package/dist/connectors/marketplace/catalog.js +213 -0
  52. package/dist/connectors/marketplace/catalog.js.map +1 -0
  53. package/dist/connectors/marketplace/fleet-mcp.d.ts +62 -0
  54. package/dist/connectors/marketplace/fleet-mcp.d.ts.map +1 -0
  55. package/dist/connectors/marketplace/fleet-mcp.js +215 -0
  56. package/dist/connectors/marketplace/fleet-mcp.js.map +1 -0
  57. package/dist/connectors/marketplace/index.d.ts +31 -0
  58. package/dist/connectors/marketplace/index.d.ts.map +1 -0
  59. package/dist/connectors/marketplace/index.js +39 -0
  60. package/dist/connectors/marketplace/index.js.map +1 -0
  61. package/dist/connectors/marketplace/load.d.ts +14 -0
  62. package/dist/connectors/marketplace/load.d.ts.map +1 -0
  63. package/dist/connectors/marketplace/load.js +206 -0
  64. package/dist/connectors/marketplace/load.js.map +1 -0
  65. package/dist/connectors/mcp/index.d.ts +13 -20
  66. package/dist/connectors/mcp/index.d.ts.map +1 -1
  67. package/dist/connectors/mcp/index.js +92 -112
  68. package/dist/connectors/mcp/index.js.map +1 -1
  69. package/dist/connectors/mcp/load.d.ts.map +1 -1
  70. package/dist/connectors/mcp/load.js +16 -40
  71. package/dist/connectors/mcp/load.js.map +1 -1
  72. package/dist/connectors/slack/index.d.ts +24 -0
  73. package/dist/connectors/slack/index.d.ts.map +1 -0
  74. package/dist/connectors/slack/index.js +64 -0
  75. package/dist/connectors/slack/index.js.map +1 -0
  76. package/dist/connectors/tool-selection.d.ts +55 -0
  77. package/dist/connectors/tool-selection.d.ts.map +1 -0
  78. package/dist/connectors/tool-selection.js +112 -0
  79. package/dist/connectors/tool-selection.js.map +1 -0
  80. package/dist/connectors/toolserver/catalog.d.ts +326 -0
  81. package/dist/connectors/toolserver/catalog.d.ts.map +1 -0
  82. package/dist/connectors/toolserver/catalog.js +415 -0
  83. package/dist/connectors/toolserver/catalog.js.map +1 -0
  84. package/dist/connectors/toolserver/connectors.d.ts +698 -0
  85. package/dist/connectors/toolserver/connectors.d.ts.map +1 -0
  86. package/dist/connectors/toolserver/connectors.js +13 -0
  87. package/dist/connectors/toolserver/connectors.js.map +1 -0
  88. package/dist/connectors/toolserver/index.d.ts +142 -0
  89. package/dist/connectors/toolserver/index.d.ts.map +1 -0
  90. package/dist/connectors/toolserver/index.js +105 -0
  91. package/dist/connectors/toolserver/index.js.map +1 -0
  92. package/dist/connectors/toolserver/integrations.d.ts +103 -0
  93. package/dist/connectors/toolserver/integrations.d.ts.map +1 -0
  94. package/dist/connectors/toolserver/integrations.js +288 -0
  95. package/dist/connectors/toolserver/integrations.js.map +1 -0
  96. package/dist/connectors/toolserver/load.d.ts +55 -0
  97. package/dist/connectors/toolserver/load.d.ts.map +1 -0
  98. package/dist/connectors/toolserver/load.js +289 -0
  99. package/dist/connectors/toolserver/load.js.map +1 -0
  100. package/dist/define-deep-agent.d.ts.map +1 -1
  101. package/dist/define-deep-agent.js +9 -3
  102. package/dist/define-deep-agent.js.map +1 -1
  103. package/dist/extension.d.ts +69 -0
  104. package/dist/extension.d.ts.map +1 -0
  105. package/dist/extension.js +108 -0
  106. package/dist/extension.js.map +1 -0
  107. package/dist/identity/actor-subject.d.ts +60 -0
  108. package/dist/identity/actor-subject.d.ts.map +1 -0
  109. package/dist/identity/actor-subject.js +107 -0
  110. package/dist/identity/actor-subject.js.map +1 -0
  111. package/dist/identity/byo-oauth.d.ts +105 -0
  112. package/dist/identity/byo-oauth.d.ts.map +1 -0
  113. package/dist/identity/byo-oauth.js +190 -0
  114. package/dist/identity/byo-oauth.js.map +1 -0
  115. package/dist/identity/claims.d.ts +16 -0
  116. package/dist/identity/claims.d.ts.map +1 -0
  117. package/dist/identity/claims.js +33 -0
  118. package/dist/identity/claims.js.map +1 -0
  119. package/dist/identity/connect-inference.d.ts +37 -0
  120. package/dist/identity/connect-inference.d.ts.map +1 -0
  121. package/dist/identity/connect-inference.js +53 -0
  122. package/dist/identity/connect-inference.js.map +1 -0
  123. package/dist/identity/connect-provider-types.d.ts +35 -6
  124. package/dist/identity/connect-provider-types.d.ts.map +1 -1
  125. package/dist/identity/connect-provider-types.js +3 -1
  126. package/dist/identity/connect-provider-types.js.map +1 -1
  127. package/dist/identity/connect-provider.d.ts +9 -4
  128. package/dist/identity/connect-provider.d.ts.map +1 -1
  129. package/dist/identity/connect-provider.js +39 -13
  130. package/dist/identity/connect-provider.js.map +1 -1
  131. package/dist/identity/credential-resolvers.d.ts +33 -0
  132. package/dist/identity/credential-resolvers.d.ts.map +1 -0
  133. package/dist/identity/credential-resolvers.js +62 -0
  134. package/dist/identity/credential-resolvers.js.map +1 -0
  135. package/dist/identity/define-fleet-connect.d.ts +53 -0
  136. package/dist/identity/define-fleet-connect.d.ts.map +1 -0
  137. package/dist/identity/define-fleet-connect.js +76 -0
  138. package/dist/identity/define-fleet-connect.js.map +1 -0
  139. package/dist/identity/fleet-connect-hint.d.ts +41 -0
  140. package/dist/identity/fleet-connect-hint.d.ts.map +1 -0
  141. package/dist/identity/fleet-connect-hint.js +190 -0
  142. package/dist/identity/fleet-connect-hint.js.map +1 -0
  143. package/dist/identity/fleet-connect.d.ts +93 -0
  144. package/dist/identity/fleet-connect.d.ts.map +1 -0
  145. package/dist/identity/fleet-connect.js +256 -0
  146. package/dist/identity/fleet-connect.js.map +1 -0
  147. package/dist/identity/fleet-integration-connect.d.ts +32 -0
  148. package/dist/identity/fleet-integration-connect.d.ts.map +1 -0
  149. package/dist/identity/fleet-integration-connect.js +35 -0
  150. package/dist/identity/fleet-integration-connect.js.map +1 -0
  151. package/dist/identity/fleet.d.ts +56 -0
  152. package/dist/identity/fleet.d.ts.map +1 -0
  153. package/dist/identity/fleet.js +131 -0
  154. package/dist/identity/fleet.js.map +1 -0
  155. package/dist/identity/github/connect-http.d.ts +8 -4
  156. package/dist/identity/github/connect-http.d.ts.map +1 -1
  157. package/dist/identity/github/connect-http.js +32 -15
  158. package/dist/identity/github/connect-http.js.map +1 -1
  159. package/dist/identity/github/credentials-store.d.ts +10 -10
  160. package/dist/identity/github/credentials-store.d.ts.map +1 -1
  161. package/dist/identity/github/credentials-store.js +51 -49
  162. package/dist/identity/github/credentials-store.js.map +1 -1
  163. package/dist/identity/github/credentials.d.ts +19 -14
  164. package/dist/identity/github/credentials.d.ts.map +1 -1
  165. package/dist/identity/github/credentials.js +54 -24
  166. package/dist/identity/github/credentials.js.map +1 -1
  167. package/dist/identity/github/index.d.ts +1 -4
  168. package/dist/identity/github/index.d.ts.map +1 -1
  169. package/dist/identity/github/index.js +0 -3
  170. package/dist/identity/github/index.js.map +1 -1
  171. package/dist/identity/github/oauth.d.ts +18 -20
  172. package/dist/identity/github/oauth.d.ts.map +1 -1
  173. package/dist/identity/github/oauth.js +90 -109
  174. package/dist/identity/github/oauth.js.map +1 -1
  175. package/dist/identity/google/connect-http.d.ts +37 -0
  176. package/dist/identity/google/connect-http.d.ts.map +1 -0
  177. package/dist/identity/google/connect-http.js +42 -0
  178. package/dist/identity/google/connect-http.js.map +1 -0
  179. package/dist/identity/google/index.d.ts +7 -0
  180. package/dist/identity/google/index.d.ts.map +1 -0
  181. package/dist/identity/google/index.js +6 -0
  182. package/dist/identity/google/index.js.map +1 -0
  183. package/dist/identity/google/oauth.d.ts +22 -0
  184. package/dist/identity/google/oauth.d.ts.map +1 -0
  185. package/dist/identity/google/oauth.js +48 -0
  186. package/dist/identity/google/oauth.js.map +1 -0
  187. package/dist/identity/index.d.ts +40 -64
  188. package/dist/identity/index.d.ts.map +1 -1
  189. package/dist/identity/index.js +104 -243
  190. package/dist/identity/index.js.map +1 -1
  191. package/dist/identity/linkedin/connect-http.d.ts +37 -0
  192. package/dist/identity/linkedin/connect-http.d.ts.map +1 -0
  193. package/dist/identity/linkedin/connect-http.js +41 -0
  194. package/dist/identity/linkedin/connect-http.js.map +1 -0
  195. package/dist/identity/linkedin/index.d.ts +7 -0
  196. package/dist/identity/linkedin/index.d.ts.map +1 -0
  197. package/dist/identity/linkedin/index.js +6 -0
  198. package/dist/identity/linkedin/index.js.map +1 -0
  199. package/dist/identity/linkedin/oauth.d.ts +22 -0
  200. package/dist/identity/linkedin/oauth.d.ts.map +1 -0
  201. package/dist/identity/linkedin/oauth.js +47 -0
  202. package/dist/identity/linkedin/oauth.js.map +1 -0
  203. package/dist/identity/loopback.d.ts +27 -2
  204. package/dist/identity/loopback.d.ts.map +1 -1
  205. package/dist/identity/loopback.js +61 -8
  206. package/dist/identity/loopback.js.map +1 -1
  207. package/dist/identity/marketplace/connect-hint.d.ts +31 -0
  208. package/dist/identity/marketplace/connect-hint.d.ts.map +1 -0
  209. package/dist/identity/marketplace/connect-hint.js +59 -0
  210. package/dist/identity/marketplace/connect-hint.js.map +1 -0
  211. package/dist/identity/marketplace/connect.d.ts +51 -0
  212. package/dist/identity/marketplace/connect.d.ts.map +1 -0
  213. package/dist/identity/marketplace/connect.js +88 -0
  214. package/dist/identity/marketplace/connect.js.map +1 -0
  215. package/dist/identity/marketplace/index.d.ts +9 -0
  216. package/dist/identity/marketplace/index.d.ts.map +1 -0
  217. package/dist/identity/marketplace/index.js +9 -0
  218. package/dist/identity/marketplace/index.js.map +1 -0
  219. package/dist/identity/microsoft/connect-http.d.ts +38 -0
  220. package/dist/identity/microsoft/connect-http.d.ts.map +1 -0
  221. package/dist/identity/microsoft/connect-http.js +42 -0
  222. package/dist/identity/microsoft/connect-http.js.map +1 -0
  223. package/dist/identity/microsoft/index.d.ts +7 -0
  224. package/dist/identity/microsoft/index.d.ts.map +1 -0
  225. package/dist/identity/microsoft/index.js +6 -0
  226. package/dist/identity/microsoft/index.js.map +1 -0
  227. package/dist/identity/microsoft/oauth.d.ts +24 -0
  228. package/dist/identity/microsoft/oauth.d.ts.map +1 -0
  229. package/dist/identity/microsoft/oauth.js +65 -0
  230. package/dist/identity/microsoft/oauth.js.map +1 -0
  231. package/dist/identity/oauth-env.d.ts +43 -0
  232. package/dist/identity/oauth-env.d.ts.map +1 -0
  233. package/dist/identity/oauth-env.js +66 -0
  234. package/dist/identity/oauth-env.js.map +1 -0
  235. package/dist/identity/oauth-tickets.d.ts +37 -0
  236. package/dist/identity/oauth-tickets.d.ts.map +1 -0
  237. package/dist/identity/oauth-tickets.js +114 -0
  238. package/dist/identity/oauth-tickets.js.map +1 -0
  239. package/dist/identity/options.d.ts +35 -0
  240. package/dist/identity/options.d.ts.map +1 -0
  241. package/dist/identity/options.js +80 -0
  242. package/dist/identity/options.js.map +1 -0
  243. package/dist/identity/slack/connect-http.d.ts +6 -4
  244. package/dist/identity/slack/connect-http.d.ts.map +1 -1
  245. package/dist/identity/slack/connect-http.js +27 -17
  246. package/dist/identity/slack/connect-http.js.map +1 -1
  247. package/dist/identity/slack/index.d.ts +1 -2
  248. package/dist/identity/slack/index.d.ts.map +1 -1
  249. package/dist/identity/slack/index.js +1 -2
  250. package/dist/identity/slack/index.js.map +1 -1
  251. package/dist/identity/slack/links.d.ts +18 -17
  252. package/dist/identity/slack/links.d.ts.map +1 -1
  253. package/dist/identity/slack/links.js +64 -61
  254. package/dist/identity/slack/links.js.map +1 -1
  255. package/dist/identity/slack/oauth.d.ts +3 -35
  256. package/dist/identity/slack/oauth.d.ts.map +1 -1
  257. package/dist/identity/slack/oauth.js +9 -115
  258. package/dist/identity/slack/oauth.js.map +1 -1
  259. package/dist/identity/supabase.js +9 -9
  260. package/dist/identity/supabase.js.map +1 -1
  261. package/dist/identity/types.d.ts +91 -54
  262. package/dist/identity/types.d.ts.map +1 -1
  263. package/dist/identity/x/connect-http.d.ts +38 -0
  264. package/dist/identity/x/connect-http.d.ts.map +1 -0
  265. package/dist/identity/x/connect-http.js +41 -0
  266. package/dist/identity/x/connect-http.js.map +1 -0
  267. package/dist/identity/x/index.d.ts +6 -0
  268. package/dist/identity/x/index.d.ts.map +1 -0
  269. package/dist/identity/x/index.js +5 -0
  270. package/dist/identity/x/index.js.map +1 -0
  271. package/dist/index.d.ts +9 -20
  272. package/dist/index.d.ts.map +1 -1
  273. package/dist/index.js +3 -11
  274. package/dist/index.js.map +1 -1
  275. package/dist/ingress/index.d.ts +52 -0
  276. package/dist/ingress/index.d.ts.map +1 -0
  277. package/dist/ingress/index.js +127 -0
  278. package/dist/ingress/index.js.map +1 -0
  279. package/dist/memory/define-memory.d.ts +39 -0
  280. package/dist/memory/define-memory.d.ts.map +1 -0
  281. package/dist/memory/define-memory.js +78 -0
  282. package/dist/memory/define-memory.js.map +1 -0
  283. package/dist/memory/index.d.ts +9 -0
  284. package/dist/memory/index.d.ts.map +1 -0
  285. package/dist/memory/index.js +8 -0
  286. package/dist/memory/index.js.map +1 -0
  287. package/dist/memory/instructions-middleware.d.ts +74 -0
  288. package/dist/memory/instructions-middleware.d.ts.map +1 -0
  289. package/dist/memory/instructions-middleware.js +115 -0
  290. package/dist/memory/instructions-middleware.js.map +1 -0
  291. package/dist/memory/slices.d.ts +21 -0
  292. package/dist/memory/slices.d.ts.map +1 -0
  293. package/dist/memory/slices.js +61 -0
  294. package/dist/memory/slices.js.map +1 -0
  295. package/dist/memory/types.d.ts +71 -0
  296. package/dist/memory/types.d.ts.map +1 -0
  297. package/dist/memory/types.js +10 -0
  298. package/dist/memory/types.js.map +1 -0
  299. package/dist/namespaces.d.ts +262 -0
  300. package/dist/namespaces.d.ts.map +1 -0
  301. package/dist/namespaces.js +101 -0
  302. package/dist/namespaces.js.map +1 -0
  303. package/dist/runtime/auth.d.ts +43 -32
  304. package/dist/runtime/auth.d.ts.map +1 -1
  305. package/dist/runtime/auth.js +225 -125
  306. package/dist/runtime/auth.js.map +1 -1
  307. package/dist/runtime/backend.d.ts +1 -1
  308. package/dist/runtime/backend.d.ts.map +1 -1
  309. package/dist/runtime/backend.js +26 -5
  310. package/dist/runtime/backend.js.map +1 -1
  311. package/dist/runtime/channel.d.ts +91 -0
  312. package/dist/runtime/channel.d.ts.map +1 -0
  313. package/dist/runtime/channel.js +98 -0
  314. package/dist/runtime/channel.js.map +1 -0
  315. package/dist/runtime/connector.d.ts +66 -22
  316. package/dist/runtime/connector.d.ts.map +1 -1
  317. package/dist/runtime/connector.js +68 -33
  318. package/dist/runtime/connector.js.map +1 -1
  319. package/dist/runtime/cors.d.ts +12 -3
  320. package/dist/runtime/cors.d.ts.map +1 -1
  321. package/dist/runtime/cors.js +23 -5
  322. package/dist/runtime/cors.js.map +1 -1
  323. package/dist/runtime/credentials.d.ts +8 -8
  324. package/dist/runtime/credentials.d.ts.map +1 -1
  325. package/dist/runtime/credentials.js +46 -23
  326. package/dist/runtime/credentials.js.map +1 -1
  327. package/dist/runtime/eval-filesystem.d.ts +7 -0
  328. package/dist/runtime/eval-filesystem.d.ts.map +1 -0
  329. package/dist/runtime/eval-filesystem.js +44 -0
  330. package/dist/runtime/eval-filesystem.js.map +1 -0
  331. package/dist/runtime/http.d.ts +46 -0
  332. package/dist/runtime/http.d.ts.map +1 -0
  333. package/dist/runtime/http.js +53 -0
  334. package/dist/runtime/http.js.map +1 -0
  335. package/dist/runtime/identity-http.d.ts +13 -20
  336. package/dist/runtime/identity-http.d.ts.map +1 -1
  337. package/dist/runtime/identity-http.js +158 -75
  338. package/dist/runtime/identity-http.js.map +1 -1
  339. package/dist/runtime/identity-runtime.d.ts +12 -28
  340. package/dist/runtime/identity-runtime.d.ts.map +1 -1
  341. package/dist/runtime/identity-runtime.js +35 -72
  342. package/dist/runtime/identity-runtime.js.map +1 -1
  343. package/dist/runtime/index.d.ts +97 -227
  344. package/dist/runtime/index.d.ts.map +1 -1
  345. package/dist/runtime/index.js +114 -64
  346. package/dist/runtime/index.js.map +1 -1
  347. package/dist/runtime/memory/index.d.ts +0 -2
  348. package/dist/runtime/memory/index.d.ts.map +1 -1
  349. package/dist/runtime/memory/index.js +0 -2
  350. package/dist/runtime/memory/index.js.map +1 -1
  351. package/dist/runtime/memory/mounts.d.ts +4 -12
  352. package/dist/runtime/memory/mounts.d.ts.map +1 -1
  353. package/dist/runtime/memory/mounts.js +9 -20
  354. package/dist/runtime/memory/mounts.js.map +1 -1
  355. package/dist/runtime/recursion-limit.d.ts +22 -0
  356. package/dist/runtime/recursion-limit.d.ts.map +1 -0
  357. package/dist/runtime/recursion-limit.js +46 -0
  358. package/dist/runtime/recursion-limit.js.map +1 -0
  359. package/dist/runtime/sandbox-manager.d.ts +60 -3
  360. package/dist/runtime/sandbox-manager.d.ts.map +1 -1
  361. package/dist/runtime/sandbox-manager.js +326 -26
  362. package/dist/runtime/sandbox-manager.js.map +1 -1
  363. package/dist/runtime/sandbox-stream-retry.d.ts +18 -0
  364. package/dist/runtime/sandbox-stream-retry.d.ts.map +1 -0
  365. package/dist/runtime/sandbox-stream-retry.js +90 -0
  366. package/dist/runtime/sandbox-stream-retry.js.map +1 -0
  367. package/dist/runtime/setup-script.d.ts.map +1 -1
  368. package/dist/runtime/setup-script.js +16 -2
  369. package/dist/runtime/setup-script.js.map +1 -1
  370. package/dist/runtime/types.d.ts +22 -0
  371. package/dist/runtime/types.d.ts.map +1 -1
  372. package/dist/runtime/validated-token.d.ts +9 -14
  373. package/dist/runtime/validated-token.d.ts.map +1 -1
  374. package/dist/runtime/validated-token.js +79 -106
  375. package/dist/runtime/validated-token.js.map +1 -1
  376. package/dist/sandbox.d.ts +17 -42
  377. package/dist/sandbox.d.ts.map +1 -1
  378. package/dist/sandbox.js +11 -32
  379. package/dist/sandbox.js.map +1 -1
  380. package/dist/schedules.js +8 -9
  381. package/dist/schedules.js.map +1 -1
  382. package/dist/types.d.ts +4 -3
  383. package/dist/types.d.ts.map +1 -1
  384. package/dist/types.js.map +1 -1
  385. package/package.json +22 -29
  386. package/dist/channels/collect.d.ts +0 -23
  387. package/dist/channels/collect.d.ts.map +0 -1
  388. package/dist/channels/collect.js +0 -46
  389. package/dist/channels/collect.js.map +0 -1
  390. package/dist/channels/github/adapter-core.d.ts +0 -6
  391. package/dist/channels/github/adapter-core.d.ts.map +0 -1
  392. package/dist/channels/github/adapter-core.js +0 -27
  393. package/dist/channels/github/adapter-core.js.map +0 -1
  394. package/dist/channels/github/adapter.d.ts +0 -16
  395. package/dist/channels/github/adapter.d.ts.map +0 -1
  396. package/dist/channels/github/adapter.js +0 -52
  397. package/dist/channels/github/adapter.js.map +0 -1
  398. package/dist/channels/github/define.d.ts +0 -198
  399. package/dist/channels/github/define.d.ts.map +0 -1
  400. package/dist/channels/github/define.js +0 -166
  401. package/dist/channels/github/define.js.map +0 -1
  402. package/dist/channels/github/http.d.ts +0 -25
  403. package/dist/channels/github/http.d.ts.map +0 -1
  404. package/dist/channels/github/http.js +0 -147
  405. package/dist/channels/github/http.js.map +0 -1
  406. package/dist/channels/github/index.d.ts +0 -12
  407. package/dist/channels/github/index.d.ts.map +0 -1
  408. package/dist/channels/github/index.js +0 -10
  409. package/dist/channels/github/index.js.map +0 -1
  410. package/dist/channels/github/normalize.d.ts +0 -32
  411. package/dist/channels/github/normalize.d.ts.map +0 -1
  412. package/dist/channels/github/normalize.js +0 -152
  413. package/dist/channels/github/normalize.js.map +0 -1
  414. package/dist/channels/github/source-thread.d.ts +0 -24
  415. package/dist/channels/github/source-thread.d.ts.map +0 -1
  416. package/dist/channels/github/source-thread.js +0 -54
  417. package/dist/channels/github/source-thread.js.map +0 -1
  418. package/dist/channels/github/transport.d.ts +0 -19
  419. package/dist/channels/github/transport.d.ts.map +0 -1
  420. package/dist/channels/github/transport.js +0 -92
  421. package/dist/channels/github/transport.js.map +0 -1
  422. package/dist/channels/plugin.d.ts +0 -61
  423. package/dist/channels/plugin.d.ts.map +0 -1
  424. package/dist/channels/plugin.js +0 -80
  425. package/dist/channels/plugin.js.map +0 -1
  426. package/dist/channels/slack/define.d.ts +0 -74
  427. package/dist/channels/slack/define.d.ts.map +0 -1
  428. package/dist/channels/slack/define.js +0 -160
  429. package/dist/channels/slack/define.js.map +0 -1
  430. package/dist/connectors/github/index.d.ts +0 -80
  431. package/dist/connectors/github/index.d.ts.map +0 -1
  432. package/dist/connectors/github/index.js +0 -118
  433. package/dist/connectors/github/index.js.map +0 -1
  434. package/dist/connectors/github/sandbox.d.ts +0 -54
  435. package/dist/connectors/github/sandbox.d.ts.map +0 -1
  436. package/dist/connectors/github/sandbox.js +0 -519
  437. package/dist/connectors/github/sandbox.js.map +0 -1
  438. package/dist/connectors/langsmith/index.d.ts +0 -385
  439. package/dist/connectors/langsmith/index.d.ts.map +0 -1
  440. package/dist/connectors/langsmith/index.js +0 -431
  441. package/dist/connectors/langsmith/index.js.map +0 -1
  442. package/dist/connectors/langsmith/routes.d.ts +0 -247
  443. package/dist/connectors/langsmith/routes.d.ts.map +0 -1
  444. package/dist/connectors/langsmith/routes.js +0 -1182
  445. package/dist/connectors/langsmith/routes.js.map +0 -1
  446. package/dist/runtime/memory/seed.d.ts +0 -21
  447. package/dist/runtime/memory/seed.d.ts.map +0 -1
  448. package/dist/runtime/memory/seed.js +0 -160
  449. package/dist/runtime/memory/seed.js.map +0 -1
  450. package/dist/runtime/memory/user-repo.d.ts +0 -19
  451. package/dist/runtime/memory/user-repo.d.ts.map +0 -1
  452. package/dist/runtime/memory/user-repo.js +0 -57
  453. package/dist/runtime/memory/user-repo.js.map +0 -1
@@ -1,63 +1,71 @@
1
1
  import { Auth, HTTPException, isStudioUser, } from "@langchain/langgraph-sdk/auth";
2
+ import { trustedMessagingProviders } from "../channels/messaging-registry.js";
2
3
  import { trustedChannelSourceProviders } from "../channels/registry-store.js";
3
- import { buildRuntimeIdentity, memoryIdentitySegments, } from "./identity-runtime.js";
4
+ import {} from "../identity/index.js";
5
+ import { buildRuntimeIdentity } from "./identity-runtime.js";
4
6
  import { resolveValidatedTokenUser } from "./validated-token.js";
5
7
  /**
6
- * Reserved transport for the trusted-backend ingress mode. Actor/tenant travel
7
- * as reserved headers (mapped into `config.configurable` by the generated
8
+ * Reserved transport for the trusted-backend ingress mode. User identity
9
+ * travels as reserved headers (mapped into `config.configurable` by the generated
8
10
  * `langgraph.json` allowlist); the ingress secret is validated here and is
9
11
  * deliberately **not** allowlisted, so it never reaches `config.configurable`.
10
12
  */
11
13
  /** Trusted-backend / channel-loopback identity headers (single source of truth). */
12
- export const ACTOR_HEADER = "x-mda-actor-id";
13
- export const TENANT_HEADER = "x-mda-tenant-id";
14
+ export const USER_HEADER = "x-mda-user-id";
14
15
  export const INGRESS_SECRET_HEADER = "x-mda-ingress-secret";
15
16
  /**
16
- * Internal channel handoff headers. Accepted only after the ingress secret
17
- * validates — never part of the public HTTP identity surface, and deliberately
18
- * not allowlisted into `config.configurable`.
17
+ * Internal channel handoff headers. Accepted only after a server API key or
18
+ * legacy ingress secret validates — never part of the public HTTP identity
19
+ * surface, and deliberately not allowlisted into `config.configurable`.
19
20
  */
20
21
  export const SOURCE_PROVIDER_HEADER = "x-mda-source-provider";
21
22
  export const SOURCE_THREAD_HEADER = "x-mda-source-thread-id";
22
23
  /** Deployment env var carrying the shared secret the trusted backend presents. */
23
24
  export const INGRESS_SECRET_ENV = "MDA_INGRESS_SECRET";
25
+ /** Platform-owned LangSmith auth configuration. */
26
+ export const LANGSMITH_AUTH_ENDPOINT_ENV = "LANGSMITH_AUTH_ENDPOINT";
27
+ export const LANGSMITH_TENANT_ID_ENV = "LANGSMITH_TENANT_ID";
28
+ export const LANGSMITH_API_KEY_HEADER = "x-api-key";
29
+ export const LANGSMITH_API_KEY_ENV = "LANGSMITH_API_KEY";
24
30
  /**
25
31
  * Set to `"1"` by `mda dev` so local Studio / API clients can exercise
26
32
  * `trusted_backend` identity without injecting ingress headers. Never set in
27
33
  * deploy.
28
34
  */
29
35
  const LOCAL_DEV_ENV = "MDA_LOCAL_DEV";
30
- /** Synthetic actor for local `mda dev` when ingress headers are absent. */
31
- const LOCAL_DEV_ACTOR = "mda:local-dev";
32
- /** Path MDA exposes for anonymous guest token issuance (must stay public). */
33
- const GUEST_ISSUANCE_PATH = "/identity/guest";
36
+ /** Synthetic user for local `mda dev` when ingress headers are absent. */
37
+ const LOCAL_DEV_USER = "mda:local-dev";
34
38
  /**
35
39
  * Provider OAuth/OIDC callbacks must stay public (IdP redirects the browser
36
40
  * here). Path shape: `/identity/{provider}/callback`.
37
41
  */
38
42
  const IDENTITY_PROVIDER_CALLBACK_PATH = /^\/identity\/[^/]+\/callback\/?$/;
39
43
  /**
40
- * Channel Events routes authenticate via provider signatures (Slack HMAC), not
41
- * MDA ingress. Path shape: `/channels/{name}/events`.
44
+ * Channel Events routes authenticate via provider signatures (Slack HMAC),
45
+ * not MDA ingress. Path shape: `/channels/{name}/events`.
42
46
  */
43
47
  const CHANNEL_EVENTS_PATH = /^\/channels\/[^/]+\/events\/?$/;
44
- /** First-party channel providers always allowed for loopback (registry may load later). */
48
+ /**
49
+ * Connector Events routes authenticate via provider signatures (GitHub HMAC),
50
+ * not MDA ingress. Path shape: `/connectors/{name}/events`.
51
+ */
52
+ const CONNECTOR_EVENTS_PATH = /^\/connectors\/[^/]+\/events\/?$/;
53
+ /** First-party ingress providers always allowed for loopback (registry may load later). */
45
54
  const BUILTIN_CHANNEL_SOURCE_PROVIDERS = new Set(["slack", "github"]);
46
55
  function isTrustedSourceProvider(provider) {
47
56
  return (BUILTIN_CHANNEL_SOURCE_PROVIDERS.has(provider) ||
57
+ trustedMessagingProviders().has(provider) ||
48
58
  trustedChannelSourceProviders().has(provider));
49
59
  }
50
- /** Synthetic actor used only to satisfy auth middleware on the issuance route. */
51
- const GUEST_ISSUER_ACTOR = "mda:guest-issuer";
52
- /** Synthetic actor so middleware_first allows unsigned Slack Events ingress. */
53
- const CHANNEL_EVENTS_ACTOR = "mda:channel-events";
60
+ /** Synthetic user used only to satisfy auth middleware on public routes. */
61
+ const PUBLIC_ROUTE_USER = "mda:public-route";
62
+ /** Synthetic user so middleware_first allows unsigned Slack Events ingress. */
63
+ const CHANNEL_EVENTS_USER = "mda:channel-events";
54
64
  /**
55
65
  * Build the managed LangGraph custom-auth handler from a declared identity.
56
66
  *
57
- * Handles both ingress modes: `trusted_backend` (reserved headers behind a
58
- * shared ingress secret) and `validated_token` (browser-direct IdP tokens
59
- * verified via JWKS / introspection / MDA-signed guest). Also registers thread
60
- * and store scoping with a studio bypass.
67
+ * Handles trusted-backend, LangSmith API-key, and validated-token ingress.
68
+ * Also registers thread and store scoping with a studio bypass.
61
69
  */
62
70
  export function buildManagedAuth(identity) {
63
71
  const cfg = identity.config;
@@ -69,27 +77,34 @@ export function buildManagedAuth(identity) {
69
77
  if (isChannelEventsRequest(request)) {
70
78
  return channelEventsBypassUser();
71
79
  }
80
+ // Provider OAuth/OIDC callback requests bypass auth (the IdP redirects the
81
+ // browser here with no MDA token to present).
72
82
  if (isIdentityProviderCallbackRequest(request)) {
73
- return guestIssuanceBypassUser();
83
+ return publicRouteBypassUser();
74
84
  }
75
- if (isGuestIssuanceRequest(request, cfg)) {
76
- return guestIssuanceBypassUser();
85
+ // Prefer the server-only LangSmith key for managed loopback handoffs. The
86
+ // legacy ingress secret remains valid for trusted-backend compatibility.
87
+ const serverHandoff = await resolveServerApiKeyHandoffUser(request);
88
+ if (serverHandoff) {
89
+ return serverHandoff;
77
90
  }
78
- // Channel loopback (and other trusted handoffs) stamp the ingress secret
79
- // even when public HTTP ingress is validated_token (e.g. Supabase web).
80
- if (http === "trusted_backend" || hasValidIngressSecret(request)) {
91
+ if (http === "backend" || hasValidIngressSecret(request)) {
81
92
  return resolveTrustedBackendUser(cfg, request);
82
93
  }
94
+ rejectUntrustedHandoffHeaders(request);
95
+ if (isLangSmithApiKeyAuth(http)) {
96
+ return resolveLangSmithApiKeyUser(request);
97
+ }
83
98
  return resolveValidatedTokenUser(cfg, http, request);
84
99
  });
85
100
  auth.on("threads", ({ user, value }) => {
86
101
  if (isStudioUser(user) || isLocalDevUnscopedUser(user)) {
87
102
  return true;
88
103
  }
89
- const key = threadOwnerKey(cfg, user);
104
+ const key = threadOwnerKey(user);
90
105
  if (value && typeof value === "object") {
91
106
  const container = value;
92
- container.metadata = { ...(container.metadata ?? {}), owner: key };
107
+ container.metadata = { ...container.metadata, owner: key };
93
108
  }
94
109
  return { owner: key };
95
110
  });
@@ -99,7 +114,7 @@ export function buildManagedAuth(identity) {
99
114
  if (isStudioUser(user) || isLocalDevUnscopedUser(user)) {
100
115
  return true;
101
116
  }
102
- assertStoreAccess(cfg, user, value);
117
+ assertStoreAccess(user, value);
103
118
  return true;
104
119
  });
105
120
  return auth;
@@ -115,12 +130,20 @@ export function buildManagedAuth(identity) {
115
130
  */
116
131
  export async function resolveRequestIdentity(cfg, request) {
117
132
  const http = cfg.ingress.http;
118
- const user = http === "trusted_backend" || hasValidIngressSecret(request)
119
- ? resolveTrustedBackendUser(cfg, request)
120
- : await resolveValidatedTokenUser(cfg, http, request);
133
+ const serverHandoff = await resolveServerApiKeyHandoffUser(request);
134
+ const trustedHandoff = serverHandoff !== null || hasValidIngressSecret(request);
135
+ if (!serverHandoff && http !== "backend" && !trustedHandoff) {
136
+ rejectUntrustedHandoffHeaders(request);
137
+ }
138
+ const user = serverHandoff
139
+ ? serverHandoff
140
+ : http === "backend" || trustedHandoff
141
+ ? resolveTrustedBackendUser(cfg, request)
142
+ : isLangSmithApiKeyAuth(http)
143
+ ? await resolveLangSmithApiKeyUser(request)
144
+ : await resolveValidatedTokenUser(cfg, http, request);
121
145
  // Preserve trusted channel source stamps; default public HTTP to "http".
122
- const sourceProvider = user.mda_source_provider ??
123
- (hasValidIngressSecret(request) ? undefined : "http");
146
+ const sourceProvider = user.mda_source_provider ?? (trustedHandoff ? undefined : "http");
124
147
  const identity = buildRuntimeIdentity({
125
148
  langgraph_auth_user: {
126
149
  ...user,
@@ -132,11 +155,11 @@ export async function resolveRequestIdentity(cfg, request) {
132
155
  }
133
156
  return identity;
134
157
  }
135
- /** LangGraph Store namespace prefix for Slack ↔ actor account links. */
158
+ /** LangGraph Store namespace prefix for Slack ↔ user account links. */
136
159
  export const IDENTITY_LINKS_STORE_PREFIX = "mda_identity_links";
137
160
  /**
138
161
  * LangGraph Store namespace prefix for Connect-with-GitHub OAuth tokens.
139
- * Deployment-wide (keyed by actor id inside the namespace); only the trusted
162
+ * Deployment-wide (keyed by user id inside the namespace); only the trusted
140
163
  * identity-links service principal may read/write it.
141
164
  */
142
165
  export const GITHUB_CREDENTIALS_STORE_PREFIX = "mda_github_credentials";
@@ -144,17 +167,21 @@ export const GITHUB_CREDENTIALS_STORE_PREFIX = "mda_github_credentials";
144
167
  * Trusted service principal for {@link IDENTITY_LINKS_STORE_PREFIX} Store ops.
145
168
  * Stamped by the managed link client together with the ingress secret.
146
169
  */
147
- export const IDENTITY_LINKS_SERVICE_ACTOR = "mda:identity-links";
170
+ export const IDENTITY_LINKS_SERVICE_USER = "mda:identity-links";
148
171
  /**
149
- * Fail-closed (403) unless the store `namespace` contains the identity segments
150
- * the memory scope requires as a contiguous ordered prefix (typically after the
151
- * deployment id). `agent`/`none` scopes carry no per-identity restriction.
172
+ * Fail-closed (403) on the managed reserved namespaces.
173
+ *
174
+ * `mda_identity_links` and `mda_github_credentials` are deployment-wide managed
175
+ * tables — account links and OAuth tokens for every caller — so only the trusted
176
+ * identity-links service principal may touch them. This check deliberately does
177
+ * not consult memory: it used to sit behind a per-caller memory check, which left
178
+ * the tables open to any authenticated caller on deployments without a user
179
+ * slice.
180
+ *
181
+ * There is no per-caller store partition to enforce beyond that, because no
182
+ * declaration mounts per-caller state in this release.
152
183
  */
153
- export function assertStoreAccess(cfg, user, value) {
154
- const required = memoryIdentitySegments(cfg.scoping.memory, cfg.tenancy, user.mda_actor_id ? String(user.mda_actor_id) : undefined, user.mda_tenant_id ? String(user.mda_tenant_id) : undefined);
155
- if (required.length === 0) {
156
- return;
157
- }
184
+ export function assertStoreAccess(user, value) {
158
185
  const namespace = value &&
159
186
  typeof value === "object" &&
160
187
  Array.isArray(value.namespace)
@@ -165,18 +192,13 @@ export function assertStoreAccess(cfg, user, value) {
165
192
  // may read/write them — not ordinary authenticated users via the Store API.
166
193
  if (namespace[0] === IDENTITY_LINKS_STORE_PREFIX ||
167
194
  namespace[0] === GITHUB_CREDENTIALS_STORE_PREFIX) {
168
- if (user.mda_actor_id === IDENTITY_LINKS_SERVICE_ACTOR) {
195
+ if (user.mda_user_id === IDENTITY_LINKS_SERVICE_USER) {
169
196
  return;
170
197
  }
171
198
  throw new HTTPException(403, {
172
199
  message: "store namespace is outside the caller's identity boundary",
173
200
  });
174
201
  }
175
- if (!namespaceHasOrderedSegments(namespace, required)) {
176
- throw new HTTPException(403, {
177
- message: "store namespace is outside the caller's identity boundary",
178
- });
179
- }
180
202
  }
181
203
  /** True when `required` appears as a contiguous ordered subsequence of `namespace`. */
182
204
  export function namespaceHasOrderedSegments(namespace, required) {
@@ -195,8 +217,8 @@ export function namespaceHasOrderedSegments(namespace, required) {
195
217
  }
196
218
  /**
197
219
  * Resolve the caller identity for `trusted_backend`: validate the shared ingress
198
- * secret, then trust the reserved actor/tenant headers. Fail-closed (401) on a
199
- * missing/invalid secret, a missing actor, or a missing tenant under multi.
220
+ * secret, then trust the reserved user headers. Fail-closed (401) on a
221
+ * missing/invalid secret or a missing user.
200
222
  *
201
223
  * Under `mda dev` (`MDA_LOCAL_DEV=1`), requests without a valid ingress secret
202
224
  * resolve to a synthetic local service principal so LangGraph Studio can talk
@@ -212,12 +234,14 @@ export function resolveTrustedBackendUser(cfg, request) {
212
234
  return local;
213
235
  }
214
236
  requireIngressSecret(request);
215
- const actor = request.headers.get(ACTOR_HEADER);
216
- if (!actor) {
217
- throw new HTTPException(401, { message: `missing ${ACTOR_HEADER}` });
237
+ return trustedHeadersUser(request);
238
+ }
239
+ /** Resolve headers only after the caller has established a trusted credential. */
240
+ function trustedHeadersUser(request) {
241
+ const userId = trustedUserId(request);
242
+ if (!userId) {
243
+ throw new HTTPException(401, { message: `missing ${USER_HEADER}` });
218
244
  }
219
- const tenant = request.headers.get(TENANT_HEADER) ?? undefined;
220
- assertTenantPresentIfMulti(cfg, tenant);
221
245
  const sourceProvider = request.headers.get(SOURCE_PROVIDER_HEADER) ?? undefined;
222
246
  const sourceThread = request.headers.get(SOURCE_THREAD_HEADER) ?? undefined;
223
247
  if (sourceProvider !== undefined) {
@@ -237,11 +261,15 @@ export function resolveTrustedBackendUser(cfg, request) {
237
261
  message: `missing ${SOURCE_PROVIDER_HEADER}`,
238
262
  });
239
263
  }
264
+ // Only the fixed Slack agent principal is a service. Connected Slack Events
265
+ // loopback as the linked person (`sourceProvider: "slack"`) and must stay
266
+ // kind=person so credentials/memory follow the caller.
267
+ const isService = userId === "mda:slack";
240
268
  return {
241
- identity: actor,
269
+ identity: userId,
242
270
  permissions: [],
243
- mda_actor_id: actor,
244
- ...(tenant ? { mda_tenant_id: tenant } : {}),
271
+ mda_user_id: userId,
272
+ ...(isService ? { mda_user_kind: "service" } : {}),
245
273
  ...(sourceProvider
246
274
  ? {
247
275
  mda_source_provider: sourceProvider,
@@ -250,6 +278,115 @@ export function resolveTrustedBackendUser(cfg, request) {
250
278
  : {}),
251
279
  };
252
280
  }
281
+ /** Resolve a managed handoff authenticated by the deployment's server-only API key. */
282
+ async function resolveServerApiKeyHandoffUser(request) {
283
+ if (!hasHandoffHeaders(request) || !hasServerApiKey(request)) {
284
+ return null;
285
+ }
286
+ return trustedHeadersUser(request);
287
+ }
288
+ function hasHandoffHeaders(request) {
289
+ return (request.headers.has(USER_HEADER) ||
290
+ request.headers.has(SOURCE_PROVIDER_HEADER) ||
291
+ request.headers.has(SOURCE_THREAD_HEADER));
292
+ }
293
+ function rejectUntrustedHandoffHeaders(request) {
294
+ if (hasHandoffHeaders(request)) {
295
+ throw new HTTPException(401, {
296
+ message: "reserved MDA identity headers require a trusted server credential",
297
+ });
298
+ }
299
+ }
300
+ function hasServerApiKey(request) {
301
+ const expected = process.env[LANGSMITH_API_KEY_ENV]?.trim();
302
+ const provided = request.headers.get(LANGSMITH_API_KEY_HEADER)?.trim();
303
+ return Boolean(expected && provided && constantTimeEquals(expected, provided));
304
+ }
305
+ /** Verify a LangSmith API key without replacing MDA's authorization hooks. */
306
+ export async function resolveLangSmithApiKeyUser(request) {
307
+ const apiKey = request.headers.get(LANGSMITH_API_KEY_HEADER)?.trim();
308
+ const endpoint = process.env[LANGSMITH_AUTH_ENDPOINT_ENV]?.trim();
309
+ const expectedTenant = process.env[LANGSMITH_TENANT_ID_ENV]?.trim();
310
+ if (process.env[LOCAL_DEV_ENV] === "1" && (!endpoint || !expectedTenant)) {
311
+ return localDevServiceUser(request);
312
+ }
313
+ if (!apiKey) {
314
+ throw new HTTPException(401, { message: "missing x-api-key" });
315
+ }
316
+ if (!endpoint || !expectedTenant) {
317
+ throw new HTTPException(500, {
318
+ message: "LangSmith API-key authentication is not configured",
319
+ });
320
+ }
321
+ const headers = new Headers({ "x-api-key": apiKey });
322
+ const tenantHeader = request.headers.get("x-tenant-id");
323
+ if (tenantHeader) {
324
+ headers.set("x-tenant-id", tenantHeader);
325
+ }
326
+ let response;
327
+ try {
328
+ response = await fetch(new URL("/auth/public", endpoint), {
329
+ headers,
330
+ signal: AbortSignal.timeout(2_000),
331
+ });
332
+ }
333
+ catch {
334
+ throw new HTTPException(503, {
335
+ message: "LangSmith API-key verification unavailable",
336
+ });
337
+ }
338
+ if (response.status === 401) {
339
+ throw new HTTPException(401, { message: "invalid API key" });
340
+ }
341
+ if (response.status === 403) {
342
+ throw new HTTPException(403, { message: "API key is forbidden" });
343
+ }
344
+ if (!response.ok) {
345
+ throw new HTTPException(503, {
346
+ message: "LangSmith API-key verification unavailable",
347
+ });
348
+ }
349
+ let verified;
350
+ try {
351
+ verified = await response.json();
352
+ }
353
+ catch {
354
+ throw new HTTPException(503, {
355
+ message: "LangSmith API-key verification returned an invalid response",
356
+ });
357
+ }
358
+ if (!isJsonObject(verified)) {
359
+ throw new HTTPException(503, {
360
+ message: "LangSmith API-key verification returned an invalid response",
361
+ });
362
+ }
363
+ if (typeof verified.tenant_id !== "string" ||
364
+ verified.tenant_id !== expectedTenant) {
365
+ throw new HTTPException(403, { message: "API key tenant mismatch" });
366
+ }
367
+ const userId = typeof verified.user_id === "string" && verified.user_id.trim()
368
+ ? `langsmith:user:${verified.user_id.trim()}`
369
+ : `langsmith:tenant:${verified.tenant_id}`;
370
+ return {
371
+ identity: userId,
372
+ permissions: [],
373
+ mda_user_id: userId,
374
+ mda_user_kind: "service",
375
+ ...(typeof verified.user_email === "string" && verified.user_email.trim()
376
+ ? { mda_user_email: verified.user_email.trim() }
377
+ : {}),
378
+ };
379
+ }
380
+ function isJsonObject(value) {
381
+ return typeof value === "object" && value !== null && !Array.isArray(value);
382
+ }
383
+ function isLangSmithApiKeyAuth(http) {
384
+ return typeof http === "object" && http.mode === "langsmith_api_key";
385
+ }
386
+ /** Caller id from the trusted headers. */
387
+ function trustedUserId(request) {
388
+ return request.headers.get(USER_HEADER) ?? undefined;
389
+ }
253
390
  /**
254
391
  * Under `mda dev`, synthetic local/Companion service principals are unscoped
255
392
  * for thread search + store so authors can see Studio-created Local threads.
@@ -262,13 +399,13 @@ export function isLocalDevUnscopedUser(user) {
262
399
  if (!user || typeof user !== "object") {
263
400
  return false;
264
401
  }
265
- const actor = user.mda_actor_id;
266
- if (typeof actor !== "string" || !actor) {
402
+ const userId = user.mda_user_id;
403
+ if (typeof userId !== "string" || !userId) {
267
404
  return false;
268
405
  }
269
- return (actor === LOCAL_DEV_ACTOR ||
270
- actor === "mda:companion" ||
271
- user.mda_actor_type === "service");
406
+ return (userId === LOCAL_DEV_USER ||
407
+ userId === "mda:companion" ||
408
+ user.mda_user_kind === "service");
272
409
  }
273
410
  /**
274
411
  * When `MDA_LOCAL_DEV=1` and the request does not present a valid ingress
@@ -276,42 +413,27 @@ export function isLocalDevUnscopedUser(user) {
276
413
  * Returns `null` when local-dev mode is off or real ingress credentials are
277
414
  * present (so the normal trusted-backend path runs).
278
415
  */
279
- export function tryLocalDevTrustedUser(cfg, request) {
416
+ export function tryLocalDevTrustedUser(_cfg, request) {
280
417
  if (process.env[LOCAL_DEV_ENV] !== "1") {
281
418
  return null;
282
419
  }
283
420
  if (hasValidIngressSecret(request)) {
284
421
  return null;
285
422
  }
286
- const actor = request.headers.get(ACTOR_HEADER) ?? LOCAL_DEV_ACTOR;
287
- const tenant = request.headers.get(TENANT_HEADER) ??
288
- (cfg.tenancy === "multi" ? "mda:local-dev-tenant" : undefined);
423
+ return localDevServiceUser(request);
424
+ }
425
+ function localDevServiceUser(request) {
426
+ const userId = trustedUserId(request) ?? LOCAL_DEV_USER;
289
427
  return {
290
- identity: actor,
428
+ identity: userId,
291
429
  permissions: [],
292
- mda_actor_id: actor,
293
- mda_actor_type: "service",
294
- ...(tenant ? { mda_tenant_id: tenant } : {}),
430
+ mda_user_id: userId,
431
+ mda_user_kind: "service",
295
432
  };
296
433
  }
297
- /** Derive the owner value `@auth.on.threads` filters on, per the `threads` axis. */
298
- export function threadOwnerKey(cfg, user) {
299
- const scope = cfg.scoping.threads ?? "actor";
300
- const actor = String(user.mda_actor_id ?? "");
301
- const tenant = user.mda_tenant_id ? String(user.mda_tenant_id) : undefined;
302
- if (scope === "tenant") {
303
- return tenant ?? actor;
304
- }
305
- if (scope === "channel") {
306
- const channel = user.mda_source_thread_id;
307
- // Slack (and other channel sources) own by source thread; web callers
308
- // without a source stamp fall back to actor-owned threads.
309
- if (channel && String(channel).length > 0) {
310
- return String(channel);
311
- }
312
- return actor;
313
- }
314
- return actor;
434
+ /** Derive the owner value `@auth.on.threads` filters on (the caller user id). */
435
+ export function threadOwnerKey(user) {
436
+ return String(user.mda_user_id ?? "");
315
437
  }
316
438
  function requireIngressSecret(request) {
317
439
  if (!hasValidIngressSecret(request)) {
@@ -325,35 +447,13 @@ function hasValidIngressSecret(request) {
325
447
  const provided = request.headers.get(INGRESS_SECRET_HEADER);
326
448
  return Boolean(expected && provided && constantTimeEquals(expected, provided));
327
449
  }
328
- function assertTenantPresentIfMulti(cfg, tenant) {
329
- if (cfg.tenancy === "multi" && !tenant) {
330
- throw new HTTPException(401, {
331
- message: "missing tenant for multi-tenant deployment",
332
- });
333
- }
334
- }
335
- /** True when this deployment exposes guest issuance and the request targets it. */
336
- export function isGuestIssuanceRequest(request, cfg) {
337
- if (request.method !== "POST") {
338
- return false;
339
- }
340
- const { pathname } = new URL(request.url);
341
- if (pathname !== GUEST_ISSUANCE_PATH) {
342
- return false;
343
- }
344
- const http = cfg.ingress.http;
345
- if (http === "trusted_backend") {
346
- return false;
347
- }
348
- return http.providers.some((provider) => provider.guest?.issue);
349
- }
350
- /** True when the request targets a public channel Events ingress route. */
450
+ /** True when the request targets a public channel/connector Events ingress route. */
351
451
  export function isChannelEventsRequest(request) {
352
452
  if (request.method !== "POST") {
353
453
  return false;
354
454
  }
355
455
  const { pathname } = new URL(request.url);
356
- return CHANNEL_EVENTS_PATH.test(pathname);
456
+ return (CHANNEL_EVENTS_PATH.test(pathname) || CONNECTOR_EVENTS_PATH.test(pathname));
357
457
  }
358
458
  /** True when the request is a public identity-provider OAuth/OIDC callback. */
359
459
  export function isIdentityProviderCallbackRequest(request) {
@@ -363,20 +463,20 @@ export function isIdentityProviderCallbackRequest(request) {
363
463
  const { pathname } = new URL(request.url);
364
464
  return IDENTITY_PROVIDER_CALLBACK_PATH.test(pathname);
365
465
  }
366
- /** Placeholder identity so LangGraph auth middleware allows tokenless issuance. */
367
- export function guestIssuanceBypassUser() {
466
+ /** Placeholder identity so LangGraph auth middleware allows public routes. */
467
+ export function publicRouteBypassUser() {
368
468
  return {
369
- identity: GUEST_ISSUER_ACTOR,
469
+ identity: PUBLIC_ROUTE_USER,
370
470
  permissions: [],
371
- mda_actor_id: GUEST_ISSUER_ACTOR,
471
+ mda_user_id: PUBLIC_ROUTE_USER,
372
472
  };
373
473
  }
374
474
  /** Placeholder identity so middleware allows provider-signed channel Events. */
375
475
  export function channelEventsBypassUser() {
376
476
  return {
377
- identity: CHANNEL_EVENTS_ACTOR,
477
+ identity: CHANNEL_EVENTS_USER,
378
478
  permissions: [],
379
- mda_actor_id: CHANNEL_EVENTS_ACTOR,
479
+ mda_user_id: CHANNEL_EVENTS_USER,
380
480
  };
381
481
  }
382
482
  function constantTimeEquals(a, b) {
@@ -1 +1 @@
1
- {"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,aAAa,EACb,YAAY,GACb,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAM9E,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE;;;;;GAKG;AACH,oFAAoF;AACpF,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAC5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAE7D,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,2EAA2E;AAC3E,MAAM,eAAe,GAAG,eAAe,CAAC;AAExC,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAE9C;;;GAGG;AACH,MAAM,+BAA+B,GAAG,kCAAkC,CAAC;AAE3E;;;GAGG;AACH,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AAE7D,2FAA2F;AAC3F,MAAM,gCAAgC,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEtE,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,CACL,gCAAgC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9C,6BAA6B,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAE9C,gFAAgF;AAChF,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAqBlD;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA4B;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAExB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAgB,EAAwB,EAAE;QACjE,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,uBAAuB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,iCAAiC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,OAAO,uBAAuB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,uBAAuB,EAAE,CAAC;QACnC,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,IAAI,KAAK,iBAAiB,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,OAAO,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,IAA8B,CAAC,CAAC;QAChE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,KAA+C,CAAC;YAClE,SAAS,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,+BAA+B;IAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACnC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iBAAiB,CAAC,GAAG,EAAE,IAA8B,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAmB,EACnB,OAAgB;IAEhB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GACR,IAAI,KAAK,iBAAiB,IAAI,qBAAqB,CAAC,OAAO,CAAC;QAC1D,CAAC,CAAC,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC;QACzC,CAAC,CAAC,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1D,yEAAyE;IACzE,MAAM,cAAc,GAClB,IAAI,CAAC,mBAAmB;QACxB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,mBAAmB,EAAE;YACnB,GAAG,IAAI;YACP,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAAoB,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAmB,EACnB,IAAiB,EACjB,KAAc;IAEd,MAAM,QAAQ,GAAG,sBAAsB,CACrC,GAAG,CAAC,OAAO,CAAC,MAAM,EAClB,GAAG,CAAC,OAAO,EACX,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EACzD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAC5D,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GACb,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,SAAS,CAAC;QACzD,CAAC,CAAE,KAAkC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IACT,4EAA4E;IAC5E,gFAAgF;IAChF,4EAA4E;IAC5E,IACE,SAAS,CAAC,CAAC,CAAC,KAAK,2BAA2B;QAC5C,SAAS,CAAC,CAAC,CAAC,KAAK,+BAA+B,EAChD,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,4BAA4B,EAAE,CAAC;YACvD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,2DAA2D;SACrE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,2DAA2D;SACrE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,2BAA2B,CACzC,SAAmB,EACnB,QAAkB;IAElB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5E,IACE,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,OAAO,CAAC,EACxE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAmB,EACnB,OAAgB;IAEhB,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,YAAY,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;IAC/D,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAExC,MAAM,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,SAAS,CAAC;IAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,SAAS,CAAC;IAC5E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,eAAe,sBAAsB,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,WAAW,oBAAoB,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,WAAW,sBAAsB,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,KAAK;QACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,cAAc;YAChB,CAAC,CAAC;gBACE,mBAAmB,EAAE,cAAc;gBACnC,oBAAoB,EAAE,YAAY;aACnC;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAI,IAAoB,CAAC,YAAY,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,KAAK,KAAK,eAAe;QACzB,KAAK,KAAK,eAAe;QACxB,IAAoB,CAAC,cAAc,KAAK,SAAS,CACnD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAmB,EACnB,OAAgB;IAEhB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,eAAe,CAAC;IACnE,MAAM,MAAM,GACV,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAClC,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjE,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,KAAK;QACnB,cAAc,EAAE,SAAS;QACzB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,GAAmB,EAAE,IAAiB;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,MAAM,IAAI,KAAK,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC;QAC1C,sEAAsE;QACtE,2DAA2D;QAC3D,IAAI,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgB;IAC5C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgB;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC5D,OAAO,OAAO,CACZ,QAAQ,IAAI,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,GAAmB,EACnB,MAA0B;IAE1B,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CACpC,OAAgB,EAChB,GAAmB;IAEnB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iCAAiC,CAAC,OAAgB;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAC5B,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,kBAAkB;KACjC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,QAAQ,EAAE,oBAAoB;QAC9B,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,oBAAoB;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC"}
1
+ {"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,aAAa,EACb,YAAY,GACb,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAKN,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE;;;;;GAKG;AACH,oFAAoF;AACpF,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;AAC3C,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAC5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAE7D,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,mDAAmD;AACnD,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AACrE,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CAAC;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,0EAA0E;AAC1E,MAAM,cAAc,GAAG,eAAe,CAAC;AAEvC;;;GAGG;AACH,MAAM,+BAA+B,GAAG,kCAAkC,CAAC;AAE3E;;;GAGG;AACH,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AAE7D;;;GAGG;AACH,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AAEjE,2FAA2F;AAC3F,MAAM,gCAAgC,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEtE,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,CACL,gCAAgC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9C,yBAAyB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzC,6BAA6B,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAsBjD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA4B;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAExB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAgB,EAAwB,EAAE;QACjE,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,uBAAuB,EAAE,CAAC;QACnC,CAAC;QACD,2EAA2E;QAC3E,8CAA8C;QAC9C,IAAI,iCAAiC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,OAAO,qBAAqB,EAAE,CAAC;QACjC,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,aAAa,GAAG,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,OAAO,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,6BAA6B,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,IAA8B,CAAC,CAAC;QAC3D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,KAA+C,CAAC;YAClE,SAAS,CAAC,QAAQ,GAAG,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,+BAA+B;IAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACnC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iBAAiB,CAAC,IAA8B,EAAE,KAAK,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAmB,EACnB,OAAgB;IAEhB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,aAAa,GAAG,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,cAAc,GAClB,aAAa,KAAK,IAAI,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5D,6BAA6B,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,GAAG,aAAa;QACxB,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,cAAc;YACpC,CAAC,CAAC,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC;YACzC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC;gBAC3B,CAAC,CAAC,MAAM,0BAA0B,CAAC,OAAO,CAAC;gBAC3C,CAAC,CAAC,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5D,yEAAyE;IACzE,MAAM,cAAc,GAClB,IAAI,CAAC,mBAAmB,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,mBAAmB,EAAE;YACnB,GAAG,IAAI;YACP,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAiB,EAAE,KAAc;IACjE,MAAM,SAAS,GACb,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,SAAS,CAAC;QACzD,CAAC,CAAE,KAAkC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IACT,4EAA4E;IAC5E,gFAAgF;IAChF,4EAA4E;IAC5E,IACE,SAAS,CAAC,CAAC,CAAC,KAAK,2BAA2B;QAC5C,SAAS,CAAC,CAAC,CAAC,KAAK,+BAA+B,EAChD,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,2BAA2B,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,2DAA2D;SACrE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,2BAA2B,CACzC,SAAmB,EACnB,QAAkB;IAElB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5E,IACE,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,OAAO,CAAC,EACxE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAmB,EACnB,OAAgB;IAEhB,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,kFAAkF;AAClF,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,WAAW,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,SAAS,CAAC;IAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,SAAS,CAAC;IAC5E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,eAAe,sBAAsB,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,WAAW,oBAAoB,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,WAAW,sBAAsB,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,0EAA0E;IAC1E,uDAAuD;IACvD,MAAM,SAAS,GAAG,MAAM,KAAK,WAAW,CAAC;IAEzC,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,MAAM;QACnB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,cAAc;YAChB,CAAC,CAAC;gBACE,mBAAmB,EAAE,cAAc;gBACnC,oBAAoB,EAAE,YAAY;aACnC;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,8BAA8B,CAC3C,OAAgB;IAEhB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgB;IACzC,OAAO,CACL,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QAChC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC3C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAgB;IACrD,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EACL,mEAAmE;SACtE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,CAAC;IACvE,OAAO,OAAO,CACZ,QAAQ,IAAI,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,CAAC;IAClE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC;IAEpE,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,oDAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE;YACxD,OAAO;YACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QACtC,QAAQ,CAAC,SAAS,KAAK,cAAc,EACrC,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GACV,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QAC7D,CAAC,CAAC,kBAAkB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE;QAC7C,CAAC,CAAC,oBAAoB,QAAQ,CAAC,SAAS,EAAE,CAAC;IAC/C,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,SAAS;QACxB,GAAG,CAAC,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE;YACvE,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAuC;IAEvC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,CAAC;AACvE,CAAC;AAED,0CAA0C;AAC1C,SAAS,aAAa,CAAC,OAAgB;IACrC,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAI,IAAoB,CAAC,WAAW,CAAC;IACjD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,MAAM,KAAK,cAAc;QACzB,MAAM,KAAK,eAAe;QACzB,IAAoB,CAAC,aAAa,KAAK,SAAS,CAClD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAoB,EACpB,OAAgB;IAEhB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC;IACxD,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgB;IAC5C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgB;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC5D,OAAO,OAAO,CACZ,QAAQ,IAAI,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iCAAiC,CAAC,OAAgB;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,iBAAiB;KAC/B,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,QAAQ,EAAE,mBAAmB;QAC7B,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,mBAAmB;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC"}
@@ -40,7 +40,7 @@ export declare class LazyManagedSandboxBackend {
40
40
  glob(pattern: string, path?: string): Promise<import("deepagents").GlobResult>;
41
41
  write(filePath: string, content: string): Promise<import("deepagents").WriteResult>;
42
42
  edit(filePath: string, oldString: string, newString: string, replaceAll?: boolean): Promise<import("deepagents").EditResult>;
43
- delete(filePath: string): Promise<unknown>;
43
+ delete(filePath: string): Promise<import("deepagents").DeleteResult | undefined>;
44
44
  uploadFiles(files: Array<[string, Uint8Array]>): Promise<import("deepagents").FileUploadResponse[] | undefined>;
45
45
  downloadFiles(paths: string[]): Promise<import("deepagents").FileDownloadResponse[] | undefined>;
46
46
  execute(command: string): Promise<import("deepagents").ExecuteResponse>;
@@ -1 +1 @@
1
- {"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/runtime/backend.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAQhD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAMnD,KAAK,kBAAkB,GAAG;IACxB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACxC,UAAU,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;IAC7C,QAAQ,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAC1C,CAAC;AA+EF;;;GAGG;AACH,qBAAa,yBAAyB;IAElC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAHpC,OAAO,eAIH;IAEJ,gEAAgE;IAChE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,yBAAyB,CAMjE;IAED;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,yBAAyB,CAWtD;IAED,IAAI,EAAE,IAAI,MAAM,CAgBf;IAEK,EAAE,CAAC,IAAI,SAAM,0CAElB;IAEK,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,4CAE3D;IAEK,OAAO,CAAC,QAAQ,EAAE,MAAM,+CAE7B;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,4CAErE;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,4CAExC;IAEK,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,6CAE5C;IAEK,IAAI,CACR,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,UAAQ,4CAKnB;IAEK,MAAM,CAAC,QAAQ,EAAE,MAAM,oBAE5B;IAEK,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,kEAEnD;IAEK,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,oEAElC;IAEK,OAAO,CAAC,OAAO,EAAE,MAAM,iDAE5B;IAED,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,SAAS;CAsBlB"}
1
+ {"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/runtime/backend.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAShD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAMnD,KAAK,kBAAkB,GAAG;IACxB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACxC,UAAU,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;IAC7C,QAAQ,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAC1C,CAAC;AAuGF;;;GAGG;AACH,qBAAa,yBAAyB;IAElC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAHpC,OAAO,eAIH;IAEJ,gEAAgE;IAChE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,yBAAyB,CAMjE;IAED;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,yBAAyB,CAWtD;IAED,IAAI,EAAE,IAAI,MAAM,CAgBf;IAEK,EAAE,CAAC,IAAI,SAAM,0CAElB;IAEK,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,4CAE3D;IAEK,OAAO,CAAC,QAAQ,EAAE,MAAM,+CAE7B;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,4CAErE;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,4CAExC;IAEK,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,6CAE5C;IAEK,IAAI,CACR,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,UAAQ,4CAKnB;IAEK,MAAM,CAAC,QAAQ,EAAE,MAAM,0DAE5B;IAEK,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,kEAEnD;IAEK,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,oEAElC;IAEK,OAAO,CAAC,OAAO,EAAE,MAAM,iDAE5B;IAED,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,SAAS;CAsBlB"}