managed-deepagents 0.4.2 → 0.4.3-dev.95

package/dist/memory/types.d.ts

@@ -0,0 +1,71 @@
+/**
+ * The `defineMemory(...)` input and the resolved contract the runtime reads.
+ *
+ * Durable memory is opt-in and owned by one root declaration: a project with no
+ * `memory.ts` mounts nothing. The resolved form is a list of slices rather than a
+ * flag, so later slice kinds (a private user slice, a group mount keyed by a JWT
+ * claim) are data the runtime already knows how to carry — not a new shape.
+ */
+/**
+ * One enabled memory mount after normalize. Mounts are always read/write.
+ *
+ * One kind today. The resolved shape is a list so later kinds (a private user
+ * slice, a group mount keyed by a claim) are added here without changing what
+ * consumers read.
+ */
+export type ResolvedMemorySlice = {
+    kind: "agent";
+};
+/** Slice kinds the runtime can mount, authorable or not. */
+export type MemorySliceKind = ResolvedMemorySlice["kind"];
+/**
+ * Resolved durable memory: which slices are mounted.
+ *
+ * Empty array means no durable memory.
+ */
+export type MemoryScope = ResolvedMemorySlice[];
+/**
+ * Authoring form of a single memory slice.
+ *
+ * Deployment-shared agent memory is the whole launch surface. `"user"` and the
+ * object slice form (`{ kind, mount, access }`) are recognized and rejected with
+ * a "not implemented yet" error rather than being silently accepted.
+ */
+export type MemorySliceInput = "agent";
+/**
+ * Authoring form of `defineMemory({ scope })`.
+ *
+ * - `"none"` / `[]` / omitted — no durable memory
+ * - `"agent"` / `["agent"]` — deployment-shared memory at `/memories/agent/`
+ */
+export type MemoryScopeInput = "none" | MemorySliceInput | MemorySliceInput[];
+/** The memory declaration. Every key is optional. */
+export interface MemoryOptions {
+    /**
+     * Which memory slices runs of this deployment may use. Defaults to `"none"`,
+     * so a declaration that names no scope mounts nothing.
+     */
+    scope?: MemoryScopeInput;
+}
+/**
+ * The resolved memory contract the managed runtime reads.
+ *
+ * Versioned because the authoring surface will grow slice kinds and per-slice
+ * options: a consumer can branch on `version` instead of guessing from shape.
+ */
+export interface MemoryConfig {
+    readonly version: 1;
+    /** Enabled slices, agent first (empty = no durable memory). */
+    readonly slices: MemoryScope;
+}
+/**
+ * The pre-runtime spec returned by `defineMemory`.
+ *
+ * The CLI discovers the `memory` export from a root `memory.{ts,tsx,mts,cts}`
+ * and hands this config to the managed runtime, which mounts the named slices.
+ */
+export interface MemoryDefinition {
+    readonly kind: "memory";
+    readonly config: MemoryConfig;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/memory/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/memory/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEpD,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAE1D;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,gBAAgB,GAAG,gBAAgB,EAAE,CAAC;AAE9E,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B"}

package/dist/memory/types.js

@@ -0,0 +1,10 @@
+/**
+ * The `defineMemory(...)` input and the resolved contract the runtime reads.
+ *
+ * Durable memory is opt-in and owned by one root declaration: a project with no
+ * `memory.ts` mounts nothing. The resolved form is a list of slices rather than a
+ * flag, so later slice kinds (a private user slice, a group mount keyed by a JWT
+ * claim) are data the runtime already knows how to carry — not a new shape.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/memory/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/memory/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/namespaces.d.ts

@@ -0,0 +1,262 @@
+/**
+ * The first-party primitive namespaces.
+ *
+ * Every provider an agent project can select is reached the same way —
+ * `<primitive>.<provider>(...)` — so the primitive is obvious at the call site
+ * and providers can be added without growing the barrel:
+ *
+ * ```ts
+ * channels.slack();
+ * connectors.slack({ includeTools: ["slack_list_channels"] });
+ * defineSandbox({ defaultTimeout: 600 });
+ * auth.supabase({ projectRef: "abc" });
+ * credentials.github({ read: ["user"] });
+ * connect.github();
+ * connect.google(); // usually inferred from Fleet integration connectors (gmail, …)
+ * connect.microsoft(); // usually inferred (outlook, teams, …)
+ * connect.linkedin(); // usually inferred (connectors.linkedin)
+ * connect.x(); // usually inferred (connectors.x)
+ * ```
+ *
+ * These are the only primitives the managed runtime will mount. A project
+ * cannot contribute its own — `defineExtension` stays internal.
+ */
+import { type MarketplaceConnectors } from "./connectors/marketplace/index.js";
+import { mcpConnector } from "./connectors/mcp/index.js";
+import { slackChannel } from "./channels/slack/index.js";
+import { slackConnector } from "./connectors/slack/index.js";
+import { type ToolServerConnectors } from "./connectors/toolserver/index.js";
+import { connect as githubConnect } from "./identity/github/connect-http.js";
+import { credentials as githubCredentials } from "./identity/github/credentials.js";
+import { connect as googleConnect } from "./identity/google/connect-http.js";
+import { type MarketplaceConnect } from "./identity/marketplace/index.js";
+import { connect as linkedinConnect } from "./identity/linkedin/connect-http.js";
+import { connect as microsoftConnect } from "./identity/microsoft/connect-http.js";
+import { connect as slackConnect } from "./identity/slack/connect-http.js";
+import { connect as xConnect } from "./identity/x/connect-http.js";
+export { auth } from "./identity/index.js";
+/**
+ * Integrations: tools, HTTP routes, sandbox provisioning, inbound events, and
+ * named messaging. Exported from `connectors/*`.
+ *
+ * Most entries are the LangSmith tool server's built-in integrations —
+ * `connectors.gmail`, `connectors.linear`, `connectors.googleSheets`, … — whose
+ * tools resolve against the connection the workspace already manages in
+ * LangSmith. They are spread from the catalog so adding an integration is one
+ * entry there rather than a line here as well. Marketplace bridges
+ * (`connectors.notion`, `connectors.cloudflare`, …) are spread the same way
+ * from the Fleet marketplace catalog. Slack tool-server tools live here;
+ * Slack Events ingress lives on {@link channels}.
+ *
+ * Docs live on this interface (not the value) so IDE hover on `connectors.<name>`
+ * stays useful — TypeScript surfaces property docs from the annotation.
+ */
+export interface Connectors extends ToolServerConnectors, MarketplaceConnectors {
+    /**
+     * Declare remote MCP servers (HTTP/SSE) whose tools load at agent-graph
+     * construction. Stdio servers are not supported.
+     *
+     * @example
+     * ```ts
+     * export const connector = connectors.mcp({
+     *   mcpServers: {
+     *     docs: { transport: "http", url: "https://docs.example.com/mcp" },
+     *   },
+     * });
+     * ```
+     *
+     * @see {@link mcpConnector}
+     */
+    mcp: typeof mcpConnector;
+    /**
+     * Slack tool-server tools (`includeTools` / `excludeTools`). Names are typed
+     * from the catalog's `slack` entry.
+     *
+     * For Slack Events ingress / messaging, use {@link channels.slack}.
+     *
+     * @example
+     * ```ts
+     * export const connector = connectors.slack({
+     *   includeTools: ["slack_list_channels"],
+     * });
+     * ```
+     *
+     * @see {@link slackConnector}
+     */
+    slack: typeof slackConnector;
+}
+/**
+ * Integrations: tools, HTTP routes, sandbox provisioning, inbound events, and
+ * named messaging. Exported from `connectors/*`.
+ *
+ * Factories are assigned by reference (same pattern as the Python namespace) so
+ * signatures stay in step with the connector modules. Hover docs come from
+ * {@link Connectors}.
+ */
+export declare const connectors: Connectors;
+/**
+ * Inbound messaging surfaces (Events ingress + outbound messaging). Exported
+ * from `channels/*`. Slack-only for now.
+ *
+ * Docs live on this interface so IDE hover on `channels.<name>` stays useful.
+ */
+export interface Channels {
+    /**
+     * Slack Events ingress, named messaging, and deploy requirements.
+     *
+     * Mounts public Events at `/channels/{name}/events`. For Slack tool-server
+     * tools, use {@link connectors.slack}.
+     *
+     * @example
+     * ```ts
+     * export const channel = channels.slack();
+     * ```
+     *
+     * @see {@link slackChannel}
+     */
+    slack: typeof slackChannel;
+}
+/**
+ * Inbound messaging surfaces. Factories are assigned by reference so signatures
+ * stay in step with the channel modules. Hover docs come from {@link Channels}.
+ */
+export declare const channels: Channels;
+/** Third-party token resolvers. Composed into `defineIdentity({ credentials })`. */
+export declare const credentials: {
+    github: typeof githubCredentials;
+};
+/**
+ * First-party Connect-with-X providers for `defineIdentity({ connect })`.
+ *
+ * Docs live on this interface so IDE hover on `connect.<provider>` stays useful.
+ */
+export interface Connect extends MarketplaceConnect {
+    /**
+     * Connect-with-GitHub — link a caller's GitHub account for actor OAuth tokens
+     * used by GitHub credentials.
+     *
+     * Usually unnecessary: declaring `credentials.github(...)` on a user-scoped
+     * identity deployment mounts this automatically (same pattern as
+     * Google/Microsoft). Also mounts when a credential chain reads per-user
+     * GitHub tokens, or when listed on `identity.connect`.
+     *
+     * @example
+     * ```ts
+     * export const identity = defineIdentity({
+     *   connect: [connect.github()],
+     * });
+     * ```
+     *
+     * @see {@link githubConnect}
+     */
+    github: typeof githubConnect;
+    /**
+     * Connect-with-Google. Usually unnecessary: declaring Google toolserver
+     * connectors (`connectors.gmail`, `connectors.googleSheets`, …) on a
+     * user-scoped identity deployment mounts this automatically with unioned
+     * scopes.
+     *
+     * @example
+     * ```ts
+     * export const identity = defineIdentity({
+     *   connect: [connect.google()],
+     * });
+     * ```
+     *
+     * @see {@link googleConnect}
+     */
+    google: typeof googleConnect;
+    /**
+     * Connect-with-Microsoft. Usually unnecessary: declaring Microsoft toolserver
+     * connectors (`connectors.outlook`, `connectors.teams`, …) on a user-scoped
+     * identity deployment mounts this automatically with unioned scopes.
+     *
+     * @example
+     * ```ts
+     * export const identity = defineIdentity({
+     *   connect: [connect.microsoft()],
+     * });
+     * ```
+     *
+     * @see {@link microsoftConnect}
+     */
+    microsoft: typeof microsoftConnect;
+    /**
+     * Connect-with-LinkedIn. Usually unnecessary: declaring `connectors.linkedin`
+     * on a user-scoped identity deployment mounts this automatically with
+     * connector-derived scopes.
+     *
+     * @example
+     * ```ts
+     * export const identity = defineIdentity({
+     *   connect: [connect.linkedin()],
+     * });
+     * ```
+     *
+     * @see {@link linkedinConnect}
+     */
+    linkedin: typeof linkedinConnect;
+    /**
+     * Connect-with-X. Usually unnecessary: declaring `connectors.x` on a
+     * user-scoped identity deployment mounts this automatically with
+     * connector-derived scopes (Fleet `twitter-oauth-provider`).
+     *
+     * @example
+     * ```ts
+     * export const identity = defineIdentity({
+     *   connect: [connect.x()],
+     * });
+     * ```
+     *
+     * @see {@link xConnect}
+     */
+    x: typeof xConnect;
+    /**
+     * Connect-with-Slack — link a caller's Slack identity via OIDC for per-user
+     * Events remapping and credential resolution.
+     *
+     * Mounts under `/identity/slack/*` when listed on `identity.connect`, or when
+     * a Slack channel routes into a user-scoped / custom-credentials deployment.
+     *
+     * @example
+     * ```ts
+     * export const identity = defineIdentity({
+     *   connect: [connect.slack()],
+     * });
+     * ```
+     *
+     * @see {@link slackConnect}
+     */
+    slack: typeof slackConnect;
+}
+/**
+ * Connect-with-X — bind an MDA principal to an external account via OAuth.
+ *
+ * Pass providers into `defineIdentity({ connect: […] })`. Each mounts HTTP
+ * routes under `/identity/{id}/{status,connect,callback,link}` so a caller can
+ * link (or unlink) their account. Outcomes depend on the provider:
+ *
+ * - **Identity link** (Slack) — maps an external person to an MDA user so
+ *   channel ingress can resolve `slack:T:U` → actor.
+ * - **Credential vault** (GitHub, Google, Microsoft, LinkedIn, X) — stores
+ *   per-actor tokens for tools, sandbox git/`gh`, or Fleet toolserver subjects.
+ *
+ * Authors rarely list providers by hand. Prefer inference: a user-scoped
+ * identity plus `credentials.github({ read: ["user"] })`, Slack Events,
+ * Google/Microsoft/LinkedIn/X toolserver connectors, or marketplace
+ * bridges (`connectors.notion`, `connectors.neon`, …) mounts the matching
+ * Connect flow automatically. Use this namespace when you need an explicit
+ * opt-in or a custom options bag.
+ *
+ * @example
+ * ```ts
+ * // Explicit (usually unnecessary — inference covers the common cases)
+ * export const identity = defineIdentity({
+ *   connect: [connect.github(), connect.slack()],
+ * });
+ * ```
+ *
+ * @see {@link Connect}
+ */
+export declare const connect: Connect;
+//# sourceMappingURL=namespaces.d.ts.map

package/dist/namespaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespaces.d.ts","sourceRoot":"","sources":["../src/namespaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE3C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,UACf,SAAQ,oBAAoB,EAAE,qBAAqB;IACnD;;;;;;;;;;;;;;OAcG;IACH,GAAG,EAAE,OAAO,YAAY,CAAC;IAEzB;;;;;;;;;;;;;;OAcG;IACH,KAAK,EAAE,OAAO,cAAc,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,EAAE,UAKxB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB;;;;;;;;;;;;OAYG;IACH,KAAK,EAAE,OAAO,YAAY,CAAC;CAC5B;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,QAEtB,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,WAAW;IACtB,MAAM;CACP,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,OAAQ,SAAQ,kBAAkB;IACjD;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,EAAE,OAAO,aAAa,CAAC;IAE7B;;;;;;;;;;;;;;OAcG;IACH,MAAM,EAAE,OAAO,aAAa,CAAC;IAE7B;;;;;;;;;;;;;OAaG;IACH,SAAS,EAAE,OAAO,gBAAgB,CAAC;IAEnC;;;;;;;;;;;;;OAaG;IACH,QAAQ,EAAE,OAAO,eAAe,CAAC;IAEjC;;;;;;;;;;;;;OAaG;IACH,CAAC,EAAE,OAAO,QAAQ,CAAC;IAEnB;;;;;;;;;;;;;;;OAeG;IACH,KAAK,EAAE,OAAO,YAAY,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,OAAO,EAAE,OAQrB,CAAC"}

package/dist/namespaces.js

@@ -0,0 +1,101 @@
+/**
+ * The first-party primitive namespaces.
+ *
+ * Every provider an agent project can select is reached the same way —
+ * `<primitive>.<provider>(...)` — so the primitive is obvious at the call site
+ * and providers can be added without growing the barrel:
+ *
+ * ```ts
+ * channels.slack();
+ * connectors.slack({ includeTools: ["slack_list_channels"] });
+ * defineSandbox({ defaultTimeout: 600 });
+ * auth.supabase({ projectRef: "abc" });
+ * credentials.github({ read: ["user"] });
+ * connect.github();
+ * connect.google(); // usually inferred from Fleet integration connectors (gmail, …)
+ * connect.microsoft(); // usually inferred (outlook, teams, …)
+ * connect.linkedin(); // usually inferred (connectors.linkedin)
+ * connect.x(); // usually inferred (connectors.x)
+ * ```
+ *
+ * These are the only primitives the managed runtime will mount. A project
+ * cannot contribute its own — `defineExtension` stays internal.
+ */
+import { marketplaceConnectors, } from "./connectors/marketplace/index.js";
+import { mcpConnector } from "./connectors/mcp/index.js";
+import { slackChannel } from "./channels/slack/index.js";
+import { slackConnector } from "./connectors/slack/index.js";
+import { toolServerConnectors, } from "./connectors/toolserver/index.js";
+import { connect as githubConnect } from "./identity/github/connect-http.js";
+import { credentials as githubCredentials } from "./identity/github/credentials.js";
+import { connect as googleConnect } from "./identity/google/connect-http.js";
+import { marketplaceConnect, } from "./identity/marketplace/index.js";
+import { connect as linkedinConnect } from "./identity/linkedin/connect-http.js";
+import { connect as microsoftConnect } from "./identity/microsoft/connect-http.js";
+import { connect as slackConnect } from "./identity/slack/connect-http.js";
+import { connect as xConnect } from "./identity/x/connect-http.js";
+export { auth } from "./identity/index.js";
+/**
+ * Integrations: tools, HTTP routes, sandbox provisioning, inbound events, and
+ * named messaging. Exported from `connectors/*`.
+ *
+ * Factories are assigned by reference (same pattern as the Python namespace) so
+ * signatures stay in step with the connector modules. Hover docs come from
+ * {@link Connectors}.
+ */
+export const connectors = {
+    ...toolServerConnectors,
+    ...marketplaceConnectors,
+    mcp: mcpConnector,
+    slack: slackConnector,
+};
+/**
+ * Inbound messaging surfaces. Factories are assigned by reference so signatures
+ * stay in step with the channel modules. Hover docs come from {@link Channels}.
+ */
+export const channels = {
+    slack: slackChannel,
+};
+/** Third-party token resolvers. Composed into `defineIdentity({ credentials })`. */
+export const credentials = {
+    github: githubCredentials,
+};
+/**
+ * Connect-with-X — bind an MDA principal to an external account via OAuth.
+ *
+ * Pass providers into `defineIdentity({ connect: […] })`. Each mounts HTTP
+ * routes under `/identity/{id}/{status,connect,callback,link}` so a caller can
+ * link (or unlink) their account. Outcomes depend on the provider:
+ *
+ * - **Identity link** (Slack) — maps an external person to an MDA user so
+ *   channel ingress can resolve `slack:T:U` → actor.
+ * - **Credential vault** (GitHub, Google, Microsoft, LinkedIn, X) — stores
+ *   per-actor tokens for tools, sandbox git/`gh`, or Fleet toolserver subjects.
+ *
+ * Authors rarely list providers by hand. Prefer inference: a user-scoped
+ * identity plus `credentials.github({ read: ["user"] })`, Slack Events,
+ * Google/Microsoft/LinkedIn/X toolserver connectors, or marketplace
+ * bridges (`connectors.notion`, `connectors.neon`, …) mounts the matching
+ * Connect flow automatically. Use this namespace when you need an explicit
+ * opt-in or a custom options bag.
+ *
+ * @example
+ * ```ts
+ * // Explicit (usually unnecessary — inference covers the common cases)
+ * export const identity = defineIdentity({
+ *   connect: [connect.github(), connect.slack()],
+ * });
+ * ```
+ *
+ * @see {@link Connect}
+ */
+export const connect = {
+    ...marketplaceConnect,
+    github: githubConnect,
+    google: googleConnect,
+    microsoft: microsoftConnect,
+    linkedin: linkedinConnect,
+    x: xConnect,
+    slack: slackConnect,
+};
+//# sourceMappingURL=namespaces.js.map

package/dist/namespaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespaces.js","sourceRoot":"","sources":["../src/namespaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EACL,qBAAqB,GAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,oBAAoB,GAErB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EACL,kBAAkB,GAEnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAuD3C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAe;IACpC,GAAG,oBAAoB;IACvB,GAAG,qBAAqB;IACxB,GAAG,EAAE,YAAY;IACjB,KAAK,EAAE,cAAc;CACtB,CAAC;AAyBF;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAa;IAChC,KAAK,EAAE,YAAY;CACpB,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,iBAAiB;CAC1B,CAAC;AAgHF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,OAAO,GAAY;IAC9B,GAAG,kBAAkB;IACrB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,SAAS,EAAE,gBAAgB;IAC3B,QAAQ,EAAE,eAAe;IACzB,CAAC,EAAE,QAAQ;IACX,KAAK,EAAE,YAAY;CACpB,CAAC"}

package/dist/runtime/auth.d.ts

@@ -1,24 +1,31 @@
 import { Auth } from "@langchain/langgraph-sdk/auth";
-import type { IdentityConfig, IdentityDefinition, RuntimeIdentity } from "../identity/index.js";
+import { type IdentityConfig, type IdentityDefinition, type RuntimeIdentity } from "../identity/index.js";
 /**
- * Reserved transport for the trusted-backend ingress mode. Actor/tenant travel
- * as reserved headers (mapped into `config.configurable` by the generated
+ * Reserved transport for the trusted-backend ingress mode. User identity
+ * travels as reserved headers (mapped into `config.configurable` by the generated
  * `langgraph.json` allowlist); the ingress secret is validated here and is
  * deliberately **not** allowlisted, so it never reaches `config.configurable`.
  */
 /** Trusted-backend / channel-loopback identity headers (single source of truth). */
-export declare const ACTOR_HEADER = "x-mda-actor-id";
-export declare const TENANT_HEADER = "x-mda-tenant-id";
+export declare const USER_HEADER = "x-mda-user-id";
 export declare const INGRESS_SECRET_HEADER = "x-mda-ingress-secret";
 /**
- * Internal channel handoff headers. Accepted only after the ingress secret
- * validates — never part of the public HTTP identity surface, and deliberately
- * not allowlisted into `config.configurable`.
+ * Internal channel handoff headers. Accepted only after a server API key or
+ * legacy ingress secret validates — never part of the public HTTP identity
+ * surface, and deliberately not allowlisted into `config.configurable`.
  */
 export declare const SOURCE_PROVIDER_HEADER = "x-mda-source-provider";
 export declare const SOURCE_THREAD_HEADER = "x-mda-source-thread-id";
 /** Deployment env var carrying the shared secret the trusted backend presents. */
 export declare const INGRESS_SECRET_ENV = "MDA_INGRESS_SECRET";
+/** Deploy/dev-owned credential used only for internal identity handoffs. */
+export declare const HANDOFF_SECRET_ENV = "MDA_HANDOFF_SECRET";
+export declare const HANDOFF_SECRET_HEADER = "x-mda-handoff-secret";
+/** Platform-owned LangSmith auth configuration. */
+export declare const LANGSMITH_AUTH_ENDPOINT_ENV = "LANGSMITH_AUTH_ENDPOINT";
+export declare const LANGSMITH_TENANT_ID_ENV = "LANGSMITH_TENANT_ID";
+export declare const LANGSMITH_API_KEY_HEADER = "x-api-key";
+export declare const LANGSMITH_API_KEY_ENV = "LANGSMITH_API_KEY";
 /**
  * The user object `@auth.authenticate` returns. `identity`/`permissions` satisfy
  * the LangGraph base shape; the `mda_*` fields carry the identity envelope into
@@ -27,9 +34,10 @@ export declare const INGRESS_SECRET_ENV = "MDA_INGRESS_SECRET";
 export interface ManagedUser {
     identity: string;
     permissions: string[];
-    mda_actor_id: string;
-    mda_tenant_id?: string;
-    mda_actor_email?: string;
+    mda_user_id: string;
+    mda_user_email?: string;
+    /** Resolved group memberships; read-only, never an isolation key. */
+    mda_groups?: string[];
     mda_claims?: Record<string, unknown>;
     /** Trusted source provider stamped by managed ingress (never client-supplied). */
     mda_source_provider?: string;
@@ -40,10 +48,8 @@ export interface ManagedUser {
 /**
  * Build the managed LangGraph custom-auth handler from a declared identity.
  *
- * Handles both ingress modes: `trusted_backend` (reserved headers behind a
- * shared ingress secret) and `validated_token` (browser-direct IdP tokens
- * verified via JWKS / introspection / MDA-signed guest). Also registers thread
- * and store scoping with a studio bypass.
+ * Handles trusted-backend, LangSmith API-key, and validated-token ingress.
+ * Also registers thread and store scoping with a studio bypass.
  */
 export declare function buildManagedAuth(identity: IdentityDefinition): Auth;
 /**
@@ -56,11 +62,11 @@ export declare function buildManagedAuth(identity: IdentityDefinition): Auth;
  * connector route runs behind identity by default, and this is what enforces it.
  */
 export declare function resolveRequestIdentity(cfg: IdentityConfig, request: Request): Promise<RuntimeIdentity>;
-/** LangGraph Store namespace prefix for Slack ↔ actor account links. */
+/** LangGraph Store namespace prefix for Slack ↔ user account links. */
 export declare const IDENTITY_LINKS_STORE_PREFIX = "mda_identity_links";
 /**
  * LangGraph Store namespace prefix for Connect-with-GitHub OAuth tokens.
- * Deployment-wide (keyed by actor id inside the namespace); only the trusted
+ * Deployment-wide (keyed by user id inside the namespace); only the trusted
  * identity-links service principal may read/write it.
  */
 export declare const GITHUB_CREDENTIALS_STORE_PREFIX = "mda_github_credentials";
@@ -68,19 +74,27 @@ export declare const GITHUB_CREDENTIALS_STORE_PREFIX = "mda_github_credentials";
  * Trusted service principal for {@link IDENTITY_LINKS_STORE_PREFIX} Store ops.
  * Stamped by the managed link client together with the ingress secret.
  */
-export declare const IDENTITY_LINKS_SERVICE_ACTOR = "mda:identity-links";
+export declare const IDENTITY_LINKS_SERVICE_USER = "mda:identity-links";
 /**
- * Fail-closed (403) unless the store `namespace` contains the identity segments
- * the memory scope requires as a contiguous ordered prefix (typically after the
- * deployment id). `agent`/`none` scopes carry no per-identity restriction.
+ * Fail-closed (403) on the managed reserved namespaces.
+ *
+ * `mda_identity_links` and `mda_github_credentials` are deployment-wide managed
+ * tables — account links and OAuth tokens for every caller — so only the trusted
+ * identity-links service principal may touch them. This check deliberately does
+ * not consult memory: it used to sit behind a per-caller memory check, which left
+ * the tables open to any authenticated caller on deployments without a user
+ * slice.
+ *
+ * There is no per-caller store partition to enforce beyond that, because no
+ * declaration mounts per-caller state in this release.
  */
-export declare function assertStoreAccess(cfg: IdentityConfig, user: ManagedUser, value: unknown): void;
+export declare function assertStoreAccess(user: ManagedUser, value: unknown): void;
 /** True when `required` appears as a contiguous ordered subsequence of `namespace`. */
 export declare function namespaceHasOrderedSegments(namespace: string[], required: string[]): boolean;
 /**
  * Resolve the caller identity for `trusted_backend`: validate the shared ingress
- * secret, then trust the reserved actor/tenant headers. Fail-closed (401) on a
- * missing/invalid secret, a missing actor, or a missing tenant under multi.
+ * secret, then trust the reserved user headers. Fail-closed (401) on a
+ * missing/invalid secret or a missing user.
  *
  * Under `mda dev` (`MDA_LOCAL_DEV=1`), requests without a valid ingress secret
  * resolve to a synthetic local service principal so LangGraph Studio can talk
@@ -91,6 +105,8 @@ export declare function namespaceHasOrderedSegments(namespace: string[], require
  * loopback handoff — ordinary clients without the secret cannot stamp them.
  */
 export declare function resolveTrustedBackendUser(cfg: IdentityConfig, request: Request): ManagedUser;
+/** Verify a LangSmith API key without replacing MDA's authorization hooks. */
+export declare function resolveLangSmithApiKeyUser(request: Request): Promise<ManagedUser>;
 /**
  * Under `mda dev`, synthetic local/Companion service principals are unscoped
  * for thread search + store so authors can see Studio-created Local threads.
@@ -103,17 +119,15 @@ export declare function isLocalDevUnscopedUser(user: unknown): boolean;
  * Returns `null` when local-dev mode is off or real ingress credentials are
  * present (so the normal trusted-backend path runs).
  */
-export declare function tryLocalDevTrustedUser(cfg: IdentityConfig, request: Request): ManagedUser | null;
-/** Derive the owner value `@auth.on.threads` filters on, per the `threads` axis. */
-export declare function threadOwnerKey(cfg: IdentityConfig, user: ManagedUser): string;
-/** True when this deployment exposes guest issuance and the request targets it. */
-export declare function isGuestIssuanceRequest(request: Request, cfg: IdentityConfig): boolean;
-/** True when the request targets a public channel Events ingress route. */
+export declare function tryLocalDevTrustedUser(_cfg: IdentityConfig, request: Request): ManagedUser | null;
+/** Derive the owner value `@auth.on.threads` filters on (the caller user id). */
+export declare function threadOwnerKey(user: ManagedUser): string;
+/** True when the request targets a public channel/connector Events ingress route. */
 export declare function isChannelEventsRequest(request: Request): boolean;
 /** True when the request is a public identity-provider OAuth/OIDC callback. */
 export declare function isIdentityProviderCallbackRequest(request: Request): boolean;
-/** Placeholder identity so LangGraph auth middleware allows tokenless issuance. */
-export declare function guestIssuanceBypassUser(): ManagedUser;
+/** Placeholder identity so LangGraph auth middleware allows public routes. */
+export declare function publicRouteBypassUser(): ManagedUser;
 /** Placeholder identity so middleware allows provider-signed channel Events. */
 export declare function channelEventsBypassUser(): ManagedUser;
 //# sourceMappingURL=auth.d.ts.map

package/dist/runtime/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EAGL,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EACV,cAAc,EACd,kBAAkB,EAClB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAO9B;;;;;GAKG;AACH,oFAAoF;AACpF,eAAO,MAAM,YAAY,mBAAmB,CAAC;AAC7C,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAC/C,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAC5D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,0BAA0B,CAAC;AAC9D,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAE7D,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AA2CvD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,kFAAkF;IAClF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAgDnE;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,eAAe,CAAC,CAoB1B;AAED,wEAAwE;AACxE,eAAO,MAAM,2BAA2B,uBAAuB,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AAEjE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,OAAO,GACb,IAAI,CAmCN;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EAAE,EACnB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAeT;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,WAAW,CA+Cb;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAgB7D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,WAAW,GAAG,IAAI,CAoBpB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,CAiB7E;AA6BD,mFAAmF;AACnF,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,cAAc,GAClB,OAAO,CAaT;AAED,2EAA2E;AAC3E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAMhE;AAED,+EAA+E;AAC/E,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAM3E;AAED,mFAAmF;AACnF,wBAAgB,uBAAuB,IAAI,WAAW,CAMrD;AAED,gFAAgF;AAChF,wBAAgB,uBAAuB,IAAI,WAAW,CAMrD"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EAGL,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,kBAAkB,EAEvB,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAI9B;;;;;GAKG;AACH,oFAAoF;AACpF,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAC3C,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAC5D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,0BAA0B,CAAC;AAC9D,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAE7D,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAE5D,mDAAmD;AACnD,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AACrE,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,eAAO,MAAM,wBAAwB,cAAc,CAAC;AACpD,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AA+CzD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,kFAAkF;IAClF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAuDnE;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,eAAe,CAAC,CA4B1B;AAED,uEAAuE;AACvE,eAAO,MAAM,2BAA2B,uBAAuB,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,2BAA2B,uBAAuB,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAqBzE;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EAAE,EACnB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAeT;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,WAAW,CASb;AA4FD,8EAA8E;AAC9E,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,WAAW,CAAC,CA+EtB;AAiBD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAgB7D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,OAAO,GACf,WAAW,GAAG,IAAI,CASpB;AAYD,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAExD;AAkBD,qFAAqF;AACrF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAQhE;AAED,+EAA+E;AAC/E,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAM3E;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,IAAI,WAAW,CAMnD;AAED,gFAAgF;AAChF,wBAAgB,uBAAuB,IAAI,WAAW,CAMrD"}