managed-deepagents 0.5.0-dev.89 → 0.5.0-dev.90

package/dist/connectors/langsmith/index.js

@@ -1,436 +0,0 @@
-/**
- * LangSmith connector — authoring surface.
- *
- * A capability-delegation layer for *external / untrusted* callers (browsers,
- * channels, schedules). The deployment declares a small set of constrained
- * LangSmith capabilities; MDA performs them server-side with the workspace key
- * and returns allowlisted responses. The browser never receives
- * `LANGSMITH_API_KEY`.
- *
- * This module is authoring-only: typed per-resource builders + presets that
- * compile to grants, plus eager validation. The runtime enforcement engine lives
- * in `./routes.ts` and is mounted synchronously by the
- * connector's `http` hook so routes register before LangGraph captures the
- * custom HTTP app.
- */
-import { defineExtension } from "../../extension.js";
-import { mountLangSmithRoutes } from "./routes.js";
-/** Conservative default `include` allowlists per resource (browser-safe). */
-const DEFAULT_INCLUDE = {
-    runs: ["id", "status", "start_time", "end_time", "url", "metadata"],
-    feedback: ["id", "run_id", "key", "score", "created_at"],
-    examples: ["id", "dataset_id", "created_at"],
-    prompts: ["name", "commit_hash", "updated_at"],
-    threads: ["thread_id", "created_at", "metadata.title"],
-};
-/** Fields that can never reach a browser without an explicit `allowSensitive`. */
-const SENSITIVE_FIELDS = {
-    runs: ["inputs", "outputs", "events"],
-    prompts: ["content", "messages"],
-    threads: ["messages", "values"],
-};
-/** Constraint keys each resource understands. Unknown keys fail validation. */
-const ALLOWED_CONSTRAINT_KEYS = {
-    runs: [],
-    feedback: ["keys", "scores", "maxCommentChars", "onePerActor"],
-    examples: ["dataset", "allowedFields", "maxExamplesPerThread"],
-    annotation_queues: ["queue", "allowedPriorities", "maxNoteChars"],
-    prompts: [],
-    threads: ["metadataKeys", "maxTitleChars"],
-};
-function omitUndefined(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== undefined));
-}
-/**
- * Build a `runs` capability grant (`read` / `share`).
- *
- * Use for redacted trace summaries and share links. Prefer {@link traceViewer}
- * when the default browser surface is enough.
- *
- * @param options - Grant id, surfaces, actions, scope, and optional response shaping.
- * @returns A compiled {@link LangSmithCapability} for the `runs` resource.
- *
- * @example
- * ```ts
- * langsmith.runs({
- *   id: "app:run-summary",
- *   exposeTo: ["browser"],
- *   actions: ["read", "share"],
- *   scope: "thread",
- * })
- * ```
- */
-export function runs(options) {
-    return {
-        id: options.id,
-        exposeTo: options.exposeTo,
-        resource: "runs",
-        actions: options.actions,
-        scope: options.scope,
-        response: {
-            include: options.include ?? DEFAULT_INCLUDE.runs,
-            redact: options.redact ?? SENSITIVE_FIELDS.runs,
-        },
-        ...(options.allowSensitive
-            ? { allowSensitive: options.allowSensitive }
-            : {}),
-    };
-}
-/**
- * Build a `feedback` capability grant (`create` / `update` / `delete`).
- *
- * Constrains keys, optional categorical scores, comment length, and
- * per-actor uniqueness. Prefer {@link chatFeedback} for the common browser
- * thumbs-up/down + dataset capture surface.
- *
- * @param options - Grant id, surfaces, actions, key/score constraints, and shaping.
- * @returns A compiled {@link LangSmithCapability} for the `feedback` resource.
- *
- * @example
- * ```ts
- * langsmith.feedback({
- *   id: "app:user-score",
- *   exposeTo: ["browser"],
- *   actions: ["create", "update", "delete"],
- *   scope: "run",
- *   keys: ["user_score"],
- *   scores: ["positive", "negative"],
- *   onePerActor: true,
- * })
- * ```
- */
-export function feedback(options) {
-    return {
-        id: options.id,
-        exposeTo: options.exposeTo,
-        resource: "feedback",
-        actions: options.actions,
-        scope: options.scope ?? "run",
-        constraints: omitUndefined({
-            keys: options.keys,
-            scores: options.scores,
-            maxCommentChars: options.maxCommentChars,
-            onePerActor: options.onePerActor,
-        }),
-        response: { include: options.include ?? DEFAULT_INCLUDE.feedback },
-    };
-}
-/**
- * Build an `examples` capability grant (`create` into a fixed dataset).
- *
- * The dataset name is fixed in the grant so callers cannot write to arbitrary
- * datasets. Prefer {@link chatFeedback} when pairing with run feedback.
- *
- * @param options - Grant id, surfaces, dataset, and optional field/thread caps.
- * @returns A compiled {@link LangSmithCapability} for the `examples` resource.
- *
- * @example
- * ```ts
- * langsmith.examples({
- *   id: "app:capture-thread",
- *   exposeTo: ["browser"],
- *   actions: ["create"],
- *   scope: "thread",
- *   dataset: "public-feedback",
- *   allowedFields: ["messages", "answer", "feedback", "source"],
- * })
- * ```
- */
-export function examples(options) {
-    return {
-        id: options.id,
-        exposeTo: options.exposeTo,
-        resource: "examples",
-        actions: options.actions,
-        scope: options.scope ?? "thread",
-        constraints: omitUndefined({
-            dataset: options.dataset,
-            allowedFields: options.allowedFields,
-            maxExamplesPerThread: options.maxExamplesPerThread,
-        }),
-        response: { include: options.include ?? DEFAULT_INCLUDE.examples },
-    };
-}
-/**
- * Build an `annotation_queues` capability grant (`enqueue_run` into a fixed queue).
- *
- * The queue is fixed in the grant so callers cannot enqueue into arbitrary
- * queues.
- *
- * @param options - Grant id, surfaces, queue, and optional priority/note limits.
- * @returns A compiled {@link LangSmithCapability} for the `annotation_queues` resource.
- *
- * @example
- * ```ts
- * langsmith.annotationQueues({
- *   id: "app:enqueue-review",
- *   exposeTo: ["backend"],
- *   actions: ["enqueue_run"],
- *   scope: "run",
- *   queue: "human-review",
- * })
- * ```
- */
-export function annotationQueues(options) {
-    return {
-        id: options.id,
-        exposeTo: options.exposeTo,
-        resource: "annotation_queues",
-        actions: options.actions,
-        scope: options.scope ?? "run",
-        constraints: omitUndefined({
-            queue: options.queue,
-            allowedPriorities: options.allowedPriorities,
-            maxNoteChars: options.maxNoteChars,
-        }),
-        // Enqueue is a write with no readable body; include stays minimal.
-        response: { include: ["id"] },
-    };
-}
-/**
- * Build a `prompts` capability grant (`read_metadata`).
- *
- * Returns prompt metadata only by default; prompt body fields stay redacted.
- *
- * @param options - Grant id, surfaces, and optional response shaping.
- * @returns A compiled {@link LangSmithCapability} for the `prompts` resource.
- *
- * @example
- * ```ts
- * langsmith.prompts({
- *   id: "app:prompt-meta",
- *   exposeTo: ["browser"],
- *   actions: ["read_metadata"],
- *   scope: "agent",
- * })
- * ```
- */
-export function prompts(options) {
-    return {
-        id: options.id,
-        exposeTo: options.exposeTo,
-        resource: "prompts",
-        actions: options.actions,
-        scope: options.scope ?? "agent",
-        response: {
-            include: options.include ?? DEFAULT_INCLUDE.prompts,
-            redact: options.redact ?? SENSITIVE_FIELDS.prompts,
-        },
-    };
-}
-/**
- * Build a `threads` capability grant (`read` / `update_metadata`).
- *
- * Thread message bodies stay redacted unless `allowSensitive` acknowledges
- * them for a browser surface.
- *
- * @param options - Grant id, surfaces, actions, metadata constraints, and shaping.
- * @returns A compiled {@link LangSmithCapability} for the `threads` resource.
- *
- * @example
- * ```ts
- * langsmith.threads({
- *   id: "app:thread-title",
- *   exposeTo: ["browser"],
- *   actions: ["read", "update_metadata"],
- *   scope: "user",
- *   metadataKeys: ["title"],
- *   maxTitleChars: 120,
- * })
- * ```
- */
-export function threads(options) {
-    return {
-        id: options.id,
-        exposeTo: options.exposeTo,
-        resource: "threads",
-        actions: options.actions,
-        scope: options.scope ?? "user",
-        constraints: omitUndefined({
-            metadataKeys: options.metadataKeys,
-            maxTitleChars: options.maxTitleChars,
-        }),
-        response: {
-            include: options.include ?? DEFAULT_INCLUDE.threads,
-            redact: SENSITIVE_FIELDS.threads,
-        },
-        ...(options.allowSensitive
-            ? { allowSensitive: options.allowSensitive }
-            : {}),
-    };
-}
-// --- Presets ---------------------------------------------------------------
-/**
- * Browser chat feedback preset: thumbs up/down on a run, plus optional dataset
- * capture of the conversation.
- *
- * Expands to two grants with stable capability ids (safe to hard-code in
- * clients):
- *
- * - `langsmith:chat-feedback` — run-scoped {@link feedback} for browsers.
- *   Key `user_score`, scores `positive`/`negative`, comments ≤ 2000 chars,
- *   `onePerActor: true`.
- * - `langsmith:chat-feedback-examples` — thread-scoped {@link examples} create
- *   into `dataset`, allowing fields `messages`, `answer`, `feedback`, `source`.
- *
- * Pass the returned array in `capabilities`.
- *
- * @param options.dataset - LangSmith dataset name for the examples capability.
- * @returns Capability grants for feedback + example capture.
- *
- * @example
- * ```ts
- * export const connector = connectors.langsmith({
- *   capabilities: [connectors.langsmith.chatFeedback({ dataset: "public-feedback" })],
- * });
- * // POST /connectors/langsmith/capabilities/langsmith:chat-feedback
- * ```
- */
-export function chatFeedback(options) {
-    return [
-        feedback({
-            id: "langsmith:chat-feedback",
-            exposeTo: ["browser"],
-            actions: ["create", "update", "delete"],
-            scope: "run",
-            keys: ["user_score"],
-            scores: ["positive", "negative"],
-            maxCommentChars: 2000,
-            onePerActor: true,
-        }),
-        examples({
-            id: "langsmith:chat-feedback-examples",
-            exposeTo: ["browser"],
-            actions: ["create"],
-            scope: "thread",
-            dataset: options.dataset,
-            allowedFields: ["messages", "answer", "feedback", "source"],
-        }),
-    ];
-}
-/**
- * Browser trace viewer preset: read a redacted run summary and create a share
- * link for the caller's thread.
- *
- * Expands to one grant with a stable capability id:
- *
- * - `langsmith:trace-viewer` — thread-scoped {@link runs} with actions
- *   `read` and `share`, exposed to `browser`. Responses include
- *   `id` / `status` / `start_time` / `end_time` / `url` / `metadata` and redact
- *   `inputs` / `outputs` / `events` by default.
- *
- * Pass the returned array in `capabilities`.
- *
- * @returns Capability grant for redacted run read/share.
- *
- * @example
- * ```ts
- * export const connector = connectors.langsmith({
- *   capabilities: [connectors.langsmith.traceViewer()],
- * });
- * // POST /connectors/langsmith/capabilities/langsmith:trace-viewer
- * ```
- */
-export function traceViewer() {
-    return [
-        runs({
-            id: "langsmith:trace-viewer",
-            exposeTo: ["browser"],
-            actions: ["read", "share"],
-            scope: "thread",
-        }),
-    ];
-}
-// --- Validation ------------------------------------------------------------
-/**
- * Fail-closed authoring checks that do not require the identity config. The
- * identity-dependent checks (scope/ingress sanity, tenancy) run when the
- * connector's `http` hook is mounted, where the resolved identity is available.
- */
-export function validateLangSmithConnector(capabilities) {
-    if (capabilities.length === 0) {
-        throw new Error("connectors.langsmith(...) requires at least one capability.");
-    }
-    const seen = new Set();
-    for (const capability of capabilities) {
-        validateCapability(capability, seen);
-    }
-}
-function validateCapability(capability, seen) {
-    if (!capability.id) {
-        throw new Error("Every LangSmith capability requires an `id`.");
-    }
-    if (seen.has(capability.id)) {
-        throw new Error(`Duplicate LangSmith capability id: "${capability.id}".`);
-    }
-    seen.add(capability.id);
-    if (capability.exposeTo.length === 0) {
-        throw new Error(`LangSmith capability "${capability.id}" must declare at least one exposeTo surface.`);
-    }
-    if (capability.actions.length === 0) {
-        throw new Error(`LangSmith capability "${capability.id}" must declare at least one action.`);
-    }
-    // Every external-surface grant needs an explicit include allowlist.
-    const include = capability.response?.include;
-    if (!include || include.length === 0) {
-        throw new Error(`LangSmith capability "${capability.id}" must set response.include ` +
-            `(fail-closed: unknown fields are dropped).`);
-    }
-    assertSensitiveOptIn(capability, include);
-    assertKnownConstraintKeys(capability);
-}
-function assertSensitiveOptIn(capability, include) {
-    const sensitive = SENSITIVE_FIELDS[capability.resource] ?? [];
-    const acknowledged = new Set(capability.allowSensitive ?? []);
-    const browserExposed = capability.exposeTo.includes("browser");
-    if (!browserExposed) {
-        return;
-    }
-    for (const field of include) {
-        const root = field.split(".")[0] ?? field;
-        if (sensitive.includes(root) && !acknowledged.has(root)) {
-            throw new Error(`LangSmith capability "${capability.id}" includes sensitive field ` +
-                `"${root}" for a browser surface. Add allowSensitive: ["${root}"] to ` +
-                `acknowledge exposing it.`);
-        }
-    }
-}
-function assertKnownConstraintKeys(capability) {
-    const allowed = ALLOWED_CONSTRAINT_KEYS[capability.resource];
-    if (!capability.constraints || allowed === undefined) {
-        return;
-    }
-    for (const key of Object.keys(capability.constraints)) {
-        if (!allowed.includes(key)) {
-            throw new Error(`LangSmith capability "${capability.id}" has unknown constraint ` +
-                `"${key}" for resource "${capability.resource}".`);
-        }
-    }
-}
-/**
- * Build a branded LangSmith connector from capabilities (or preset-produced
- * capability arrays). Runs {@link validateLangSmithConnector} eagerly, then
- * returns a connector whose `http` hook mounts the enforcement engine.
- *
- * Mounting must be synchronous: `buildManagedHttpApp` does not await hooks, and
- * LangGraph captures custom routes at import time. A dynamic `import()` here
- * would race that capture and leave connector paths as platform 404s.
- *
- * `args` is a function rather than a schema: capabilities come from the
- * builders above, already typed, and what is left to check is policy that spans
- * fields — a browser-exposed grant acknowledging its sensitive fields,
- * constraint keys that depend on the resource. Those read better as code.
- */
-export const langsmithConnector = defineExtension("connector", {
-    kind: "langsmith",
-    label: "connectors.langsmith",
-    args: (config) => {
-        const capabilities = (config?.capabilities ?? []).flat();
-        validateLangSmithConnector(capabilities);
-        return { capabilities };
-    },
-    http(ctx, self) {
-        mountLangSmithRoutes(ctx, self.capabilities);
-    },
-});
-//# sourceMappingURL=index.js.map

package/dist/connectors/langsmith/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/connectors/langsmith/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AA8CnD,6EAA6E;AAC7E,MAAM,eAAe,GAAiD;IACpE,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC;IACnE,QAAQ,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC;IACxD,QAAQ,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC;IAC5C,OAAO,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,CAAC;IAC9C,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,gBAAgB,CAAC;CACvD,CAAC;AAEF,kFAAkF;AAClF,MAAM,gBAAgB,GAAiD;IACrE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;IACrC,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;IAChC,OAAO,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;CAChC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,uBAAuB,GAAiD;IAC5E,IAAI,EAAE,EAAE;IACR,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,aAAa,CAAC;IAC9D,QAAQ,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,sBAAsB,CAAC;IAC9D,iBAAiB,EAAE,CAAC,OAAO,EAAE,mBAAmB,EAAE,cAAc,CAAC;IACjE,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;CAC3C,CAAC;AAEF,SAAS,aAAa,CAAoC,KAAQ;IAChE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CACpD,CAAC;AACT,CAAC;AA+BD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,IAAI,CAAC,OAA8B;IACjD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE;YACR,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,IAAI;YAChD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,IAAI;SAChD;QACD,GAAG,CAAC,OAAO,CAAC,cAAc;YACxB,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AA6BD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,QAAQ,CACtB,OAAkC;IAElC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;QAC7B,WAAW,EAAE,aAAa,CAAC;YACzB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC;QACF,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,QAAQ,EAAE;KACnE,CAAC;AACJ,CAAC;AA2BD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,QAAQ,CACtB,OAAkC;IAElC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ;QAChC,WAAW,EAAE,aAAa,CAAC;YACzB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;SACnD,CAAC;QACF,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,QAAQ,EAAE;KACnE,CAAC;AACJ,CAAC;AAyBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA0C;IAE1C,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,mBAAmB;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;QAC7B,WAAW,EAAE,aAAa,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC;QACF,mEAAmE;QACnE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE;KAC9B,CAAC;AACJ,CAAC;AAuBD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,OAAO,CACrB,OAAiC;IAEjC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO;QAC/B,QAAQ,EAAE;YACR,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO;YACnD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,OAAO;SACnD;KACF,CAAC;AACJ,CAAC;AA8BD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,OAAO,CACrB,OAAiC;IAEjC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM;QAC9B,WAAW,EAAE,aAAa,CAAC;YACzB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC;QACF,QAAQ,EAAE;YACR,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO;YACnD,MAAM,EAAE,gBAAgB,CAAC,OAAO;SACjC;QACD,GAAG,CAAC,OAAO,CAAC,cAAc;YACxB,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,YAAY,CAAC,OAE5B;IACC,OAAO;QACL,QAAQ,CAAC;YACP,EAAE,EAAE,yBAAyB;YAC7B,QAAQ,EAAE,CAAC,SAAS,CAAC;YACrB,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;YACvC,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,MAAM,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;YAChC,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;SAClB,CAAC;QACF,QAAQ,CAAC;YACP,EAAE,EAAE,kCAAkC;YACtC,QAAQ,EAAE,CAAC,SAAS,CAAC;YACrB,OAAO,EAAE,CAAC,QAAQ,CAAC;YACnB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC;SAC5D,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO;QACL,IAAI,CAAC;YACH,EAAE,EAAE,wBAAwB;YAC5B,QAAQ,EAAE,CAAC,SAAS,CAAC;YACrB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YAC1B,KAAK,EAAE,QAAQ;SAChB,CAAC;KACH,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAmC;IAEnC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACtC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,UAA+B,EAC/B,IAAiB;IAEjB,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,uCAAuC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAExB,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,yBAAyB,UAAU,CAAC,EAAE,+CAA+C,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,yBAAyB,UAAU,CAAC,EAAE,qCAAqC,CAC5E,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,yBAAyB,UAAU,CAAC,EAAE,8BAA8B;YAClE,4CAA4C,CAC/C,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1C,yBAAyB,CAAC,UAAU,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAA+B,EAC/B,OAAiB;IAEjB,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QAC1C,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CACb,yBAAyB,UAAU,CAAC,EAAE,6BAA6B;gBACjE,IAAI,IAAI,kDAAkD,IAAI,QAAQ;gBACtE,0BAA0B,CAC7B,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,UAA+B;IAChE,MAAM,OAAO,GAAG,uBAAuB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,yBAAyB,UAAU,CAAC,EAAE,2BAA2B;gBAC/D,IAAI,GAAG,mBAAmB,UAAU,CAAC,QAAQ,IAAI,CACpD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAUD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAEL,eAAe,CAAC,WAAW,EAAE;IACrD,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,sBAAsB;IAC7B,IAAI,EAAE,CAAC,MAAgC,EAAE,EAAE;QACzC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,0BAA0B,CAAC,YAAY,CAAC,CAAC;QACzC,OAAO,EAAE,YAAY,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,IAAI;QACZ,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC;CACF,CAAC,CAAC"}

package/dist/connectors/langsmith/routes.d.ts

@@ -1,236 +0,0 @@
-/**
- * LangSmith connector — runtime enforcement engine.
- *
- * Mounted by the connector's `http(ctx)` hook on its namespaced sub-router.
- * Exposes one uniform endpoint per capability:
- *
- *   POST /connectors/langsmith/capabilities/{capability_id}
- *
- * with a JSON body naming the `action` and its parameters. Per request the
- * engine resolves identity (resolve-or-401), checks the caller surface, checks
- * the action, proves capability ownership from `runtime.identity`, validates typed
- * constraints, performs the LangSmith operation server-side with the workspace
- * key, and returns an allowlisted response.
- *
- * v0 has no rate limiting, audit, or multi-workspace fan-out.
- */
-import type { Example, Feedback, KVMap, Prompt, Run, ScoreType, ValueType } from "langsmith/schemas";
-import type { IdentityConfig, RuntimeIdentity } from "../../identity/index.js";
-import type { HttpContext } from "../../runtime/connector.js";
-import type { LangSmithCapability, LangSmithCallerSurface } from "./index.js";
-/**
- * The thin LangSmith operations the engine needs, typed against the `langsmith`
- * SDK's own schemas. {@link defaultClient} wraps a real {@link Client}; tests
- * inject a fake so the enforcement logic is verified without network or SDK
- * specifics.
- *
- * A connector "score" is a categorical value (e.g. `"positive"`), so it maps to
- * a LangSmith `score` when numeric/boolean and to a feedback `value` otherwise —
- * hence the `ScoreType | ValueType` inputs.
- */
-export interface LangSmithClient {
-    createFeedback(input: {
-        runId: string;
-        key: string;
-        score?: ScoreType | ValueType;
-        comment?: string;
-        feedbackId?: string;
-        metadata?: KVMap;
-    }): Promise<Feedback>;
-    updateFeedback(input: {
-        feedbackId: string;
-        score?: ScoreType | ValueType;
-        comment?: string;
-    }): Promise<void>;
-    deleteFeedback(input: {
-        feedbackId: string;
-    }): Promise<void>;
-    listFeedbackForRun(input: {
-        runId: string;
-    }): Promise<Feedback[]>;
-    readFeedback(input: {
-        feedbackId: string;
-    }): Promise<Feedback>;
-    readRun(input: {
-        runId: string;
-    }): Promise<Run>;
-    shareRun(input: {
-        runId: string;
-    }): Promise<{
-        url: string;
-    }>;
-    createExample(input: {
-        dataset: string;
-        inputs: KVMap;
-        outputs?: KVMap;
-        metadata?: KVMap;
-    }): Promise<Example>;
-    listExamples(input: {
-        dataset: string;
-        metadata?: KVMap;
-    }): Promise<Example[]>;
-    enqueueRun(input: {
-        queue: string;
-        runId: string;
-        priority?: string;
-        note?: string;
-    }): Promise<void>;
-    readPrompt(input: {
-        name: string;
-    }): Promise<Prompt | null>;
-    readThread(input: {
-        threadId: string;
-    }): Promise<Run>;
-    updateThreadMetadata(input: {
-        threadId: string;
-        metadata: KVMap;
-    }): Promise<void>;
-}
-/** An error carrying an HTTP status the engine surfaces to the caller. */
-export declare class EnforcementError extends Error {
-    readonly status: number;
-    /**
-     * @param status - HTTP status code returned to the caller.
-     * @param message - Human-readable error detail.
-     */
-    constructor(status: number, message: string);
-}
-/** Options the engine handler closes over. */
-export interface HandlerDeps {
-    capabilitiesById: Map<string, LangSmithCapability>;
-    client: LangSmithClient;
-    identityConfig?: IdentityConfig;
-    /**
-     * Prove the caller may access a LangGraph thread. Required when binding a
-     * client-supplied thread id (browser connector path). Injected in tests;
-     * production defaults to a same-origin `GET /threads/{id}` ownership check.
-     */
-    assertThreadAccess?: AssertThreadAccess;
-}
-/**
- * Fail closed unless the authenticated caller may access `threadId`.
- *
- * @param threadId - LangGraph thread id to authorize.
- * @returns Resolves when access is allowed; rejects with `EnforcementError` on denial.
- */
-export type AssertThreadAccess = (threadId: string) => Promise<void>;
-/**
- * Mount the capability route on the connector's namespaced sub-router. Runs the
- * identity-dependent authoring checks at mount time (fails startup on an illegal
- * scope/ingress combination), then registers the uniform POST endpoint.
- *
- * @param ctx - HTTP mount context with the namespaced router and identity config.
- * @param capabilities - Declared LangSmith capabilities to expose.
- * @param client - LangSmith client used for server-side operations; defaults to {@link defaultClient}.
- */
-export declare function mountLangSmithRoutes(ctx: HttpContext, capabilities: LangSmithCapability[], client?: LangSmithClient): void;
-/**
- * Identity-aware authoring validation, run when the app is constructed.
- * Rejects illegal scope/ingress combinations before any request is served.
- *
- * @param capabilities - Declared LangSmith capabilities to validate.
- * @param identity - Deployment identity config, or `undefined` when identity is not configured.
- * @throws {Error} When a capability's scope or exposure is illegal for this deployment.
- */
-export declare function validateAgainstIdentity(capabilities: LangSmithCapability[], identity: IdentityConfig | undefined): void;
-/**
- * Per-request enforcement pipeline for a capability POST.
- * Resolves the capability, checks surface/action, proves thread ownership when
- * needed, enforces scope, performs the LangSmith call, and shapes the response.
- *
- * @param request - Incoming HTTP request for `/capabilities/:id`.
- * @param identity - Frozen runtime identity resolved by the secure router.
- * @param deps - Closed-over capabilities map, LangSmith client, and optional access prover.
- * @returns JSON `Response` with `{ data }` on success or `{ error }` on failure.
- */
-export declare function handleCapabilityRequest(request: Request, identity: RuntimeIdentity, deps: HandlerDeps): Promise<Response>;
-/**
- * Map the resolved identity + ingress mode to a caller surface.
- *
- * @param identity - Frozen runtime identity for this request.
- * @param identityConfig - Deployment identity config (ingress mode).
- * @returns The surface used for `exposeTo` checks (`browser`, `backend`, `channel`, or `schedule`).
- */
-export declare function callerSurface(identity: RuntimeIdentity, identityConfig: IdentityConfig | undefined): LangSmithCallerSurface;
-/**
- * Attach a proven thread id onto a copy of the identity envelope.
- * Returns the same object when the identity already carries that thread id.
- *
- * @param identity - Frozen runtime identity to copy.
- * @param threadId - Proven thread id to bind onto `source.threadId`.
- * @returns Identity with `source.threadId` set to `threadId`.
- */
-export declare function withIdentityThread(identity: RuntimeIdentity, threadId: string): RuntimeIdentity;
-/**
- * Resolve the thread id for a thread/run-scoped capability and prove access
- * when it did not come from the trusted identity envelope.
- *
- * - identity `source.threadId` (server-derived from agent runs) is trusted
- * - LangSmith run session/thread (when `run_id` is present) is authoritative
- * - bare body `threadId`/`thread_id` (no identity thread, no run) requires
- *   {@link AssertThreadAccess}
- *
- * @param capability - Capability whose `scope` drives whether a thread id is required.
- * @param identity - Frozen runtime identity for this request.
- * @param body - Parsed JSON request body.
- * @param client - LangSmith client used to load a run when `run_id` is present.
- * @param assertThreadAccess - Ownership prover for bare body thread ids.
- * @returns Proven thread id, or the identity thread id for non-thread/run scopes.
- * @throws {EnforcementError} On missing/mismatched thread ids or failed ownership proof.
- */
-export declare function resolveProvenThreadId(capability: LangSmithCapability, identity: RuntimeIdentity, body: Record<string, unknown>, client: LangSmithClient, assertThreadAccess: AssertThreadAccess): Promise<string | undefined>;
-/**
- * Build the default ownership proof: `GET /threads/{id}` with the caller's
- * credentials and require `metadata.owner` to match the identity's thread-owner key.
- *
- * @param request - Incoming request whose auth headers are forwarded to the thread GET.
- * @param identity - Frozen runtime identity used to derive the expected owner key.
- * @param _identityConfig - Unused; retained for call-site compatibility.
- * @returns An `AssertThreadAccess` function closed over the request and expected owner.
- */
-export declare function defaultAssertThreadAccess(request: Request, identity: RuntimeIdentity, _identityConfig: IdentityConfig | undefined): AssertThreadAccess;
-/**
- * Prove the capability's ownership scope from `runtime.identity` before the
- * LangSmith call. Thread id must already be present on identity when required
- * (see {@link resolveProvenThreadId}).
- *
- * @param capability - Capability whose `scope` is enforced.
- * @param identity - Identity with any proven thread id already bound.
- * @param body - Parsed JSON request body (used for run-scoped `run_id` checks).
- * @param client - LangSmith client used to load runs for run-scope verification.
- * @throws {EnforcementError} When the identity lacks the required scope fields or the run is foreign.
- */
-export declare function assertCapabilityScope(capability: LangSmithCapability, identity: RuntimeIdentity, body: Record<string, unknown>, client: LangSmithClient): Promise<void>;
-/**
- * Apply the capability's `include` allowlist, then drop any `redact` roots.
- *
- * @param raw - Full LangSmith result coerced to a plain record.
- * @param capability - Capability whose `response.include` / `response.redact` apply.
- * @returns Allowlisted (and redacted) response object returned to the caller.
- */
-export declare function shapeResponse(raw: Record<string, unknown>, capability: LangSmithCapability): Record<string, unknown>;
-/**
- * Read a required string from the body, accepting either camelCase or snake_case.
- *
- * @param body - Parsed JSON request body.
- * @param camel - Preferred camelCase field name (used in error messages).
- * @param snake - Alternate snake_case field name.
- * @returns Non-empty string from either key.
- * @throws {EnforcementError} When neither key yields a non-empty string.
- */
-export declare function bodyString(body: Record<string, unknown>, camel: string, snake: string): string;
-/**
- * Default client backed by the `langsmith` SDK {@link Client}. The underlying
- * client is created on first use so building the engine (e.g. for an app with no
- * requests yet) never requires `LANGSMITH_API_KEY`.
- *
- * Passes `LANGSMITH_WORKSPACE_ID` when deploy (or local `.env`) provided it so
- * run/feedback calls target that workspace rather than the API key default.
- *
- * A connector "score" is numeric/boolean → LangSmith `score`, or categorical
- * (string/object) → LangSmith feedback `value`.
- *
- * @returns `LangSmithClient` adapter over the official SDK.
- */
-export declare function defaultClient(): LangSmithClient;
-//# sourceMappingURL=routes.d.ts.map