managed-deepagents 0.5.0-dev.89 → 0.5.0-dev.90

package/dist/connectors/github/source-thread.js

@@ -1,54 +0,0 @@
-/**
- * Stable GitHub source-thread keys for trusted channel ingress.
- *
- * Prefer issue/PR scoped keys when a number is known:
- *   `github:<installationId>:<owner>/<repo>#<number>`
- * Otherwise fall back to delivery-scoped keys:
- *   `github:<installationId>:<owner>/<repo>:delivery:<deliveryId>`
- *   `github:<installationId>:delivery:<deliveryId>`
- */
-export function encodeGitHubSourceThreadKey(input) {
-    const install = input.installationId || "unknown";
-    if (input.owner &&
-        input.repo &&
-        typeof input.number === "number" &&
-        Number.isFinite(input.number)) {
-        return `github:${install}:${input.owner}/${input.repo}#${input.number}`;
-    }
-    if (input.owner && input.repo && input.deliveryId) {
-        return `github:${install}:${input.owner}/${input.repo}:delivery:${input.deliveryId}`;
-    }
-    if (input.deliveryId) {
-        return `github:${install}:delivery:${input.deliveryId}`;
-    }
-    return `github:${install}:delivery:unknown`;
-}
-export function decodeGitHubSourceThreadKey(key) {
-    const issue = /^github:([^:]+):([^/]+)\/([^#]+)#(\d+)$/.exec(key);
-    if (issue) {
-        return {
-            installationId: issue[1],
-            owner: issue[2],
-            repo: issue[3],
-            number: Number(issue[4]),
-        };
-    }
-    const repoDelivery = /^github:([^:]+):([^/]+)\/([^:]+):delivery:(.+)$/.exec(key);
-    if (repoDelivery) {
-        return {
-            installationId: repoDelivery[1],
-            owner: repoDelivery[2],
-            repo: repoDelivery[3],
-            deliveryId: repoDelivery[4],
-        };
-    }
-    const delivery = /^github:([^:]+):delivery:(.+)$/.exec(key);
-    if (delivery) {
-        return {
-            installationId: delivery[1],
-            deliveryId: delivery[2],
-        };
-    }
-    return null;
-}
-//# sourceMappingURL=source-thread.js.map

package/dist/connectors/github/source-thread.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"source-thread.js","sourceRoot":"","sources":["../../../src/connectors/github/source-thread.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,UAAU,2BAA2B,CAAC,KAM3C;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,IAAI,SAAS,CAAC;IAClD,IACE,KAAK,CAAC,KAAK;QACX,KAAK,CAAC,IAAI;QACV,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAC7B,CAAC;QACD,OAAO,UAAU,OAAO,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAClD,OAAO,UAAU,OAAO,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,aAAa,KAAK,CAAC,UAAU,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,UAAU,OAAO,aAAa,KAAK,CAAC,UAAU,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,UAAU,OAAO,mBAAmB,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAW;IAOrD,MAAM,KAAK,GAAG,yCAAyC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,cAAc,EAAE,KAAK,CAAC,CAAC,CAAE;YACzB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE;YAChB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE;YACf,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACzB,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,iDAAiD,CAAC,IAAI,CACzE,GAAG,CACJ,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO;YACL,cAAc,EAAE,YAAY,CAAC,CAAC,CAAE;YAChC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAE;YACvB,IAAI,EAAE,YAAY,CAAC,CAAC,CAAE;YACtB,UAAU,EAAE,YAAY,CAAC,CAAC,CAAE;SAC7B,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAE;YAC5B,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAE;SACzB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/connectors/github/transport.d.ts

@@ -1,25 +0,0 @@
-/**
- * GitHub App installation transport — PR/issue comments via the REST API.
- */
-import type { ChannelTransport } from "../../channels/runtime.js";
-export declare const GITHUB_APP_ID_ENV = "GITHUB_APP_ID";
-export declare const GITHUB_APP_PRIVATE_KEY_ENV = "GITHUB_APP_PRIVATE_KEY";
-export declare const GITHUB_INSTALLATION_ID_ENV = "GITHUB_INSTALLATION_ID";
-export interface GitHubAppTransportOptions {
-    appId: string;
-    privateKey: string;
-    installationId: string;
-    /** Override fetch (tests). */
-    fetch?: typeof fetch;
-}
-/**
- * Build a GitHub App transport from env (`GITHUB_APP_ID`,
- * `GITHUB_APP_PRIVATE_KEY`, `GITHUB_INSTALLATION_ID`), or `undefined` when any
- * required value is missing.
- */
-export declare function transportFromEnv(env?: NodeJS.ProcessEnv): ChannelTransport | undefined;
-/**
- * Build a {@link ChannelTransport} that posts/edits issue comments as the App.
- */
-export declare function createGitHubAppTransport(options: GitHubAppTransportOptions): ChannelTransport;
-//# sourceMappingURL=transport.d.ts.map

package/dist/connectors/github/transport.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/transport.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAGlE,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AACjD,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AACnE,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAEnE,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,8BAA8B;IAC9B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,gBAAgB,GAAG,SAAS,CAM9B;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,yBAAyB,GACjC,gBAAgB,CAmElB"}

package/dist/connectors/github/transport.js

@@ -1,106 +0,0 @@
-/**
- * GitHub App installation transport — PR/issue comments via the REST API.
- */
-import { createPrivateKey } from "node:crypto";
-import { SignJWT } from "jose";
-import { fetchWithTimeout, PROVIDER_HTTP_TIMEOUT_MS, } from "../../runtime/http.js";
-export const GITHUB_APP_ID_ENV = "GITHUB_APP_ID";
-export const GITHUB_APP_PRIVATE_KEY_ENV = "GITHUB_APP_PRIVATE_KEY";
-export const GITHUB_INSTALLATION_ID_ENV = "GITHUB_INSTALLATION_ID";
-/**
- * Build a GitHub App transport from env (`GITHUB_APP_ID`,
- * `GITHUB_APP_PRIVATE_KEY`, `GITHUB_INSTALLATION_ID`), or `undefined` when any
- * required value is missing.
- */
-export function transportFromEnv(env = process.env) {
-    const appId = env[GITHUB_APP_ID_ENV] ?? "";
-    const privateKey = env[GITHUB_APP_PRIVATE_KEY_ENV] ?? "";
-    const installationId = env[GITHUB_INSTALLATION_ID_ENV] ?? "";
-    if (!appId || !privateKey || !installationId)
-        return undefined;
-    return createGitHubAppTransport({ appId, privateKey, installationId });
-}
-/**
- * Build a {@link ChannelTransport} that posts/edits issue comments as the App.
- */
-export function createGitHubAppTransport(options) {
-    const fetchImpl = options.fetch ?? fetch;
-    let installationToken;
-    async function getInstallationToken() {
-        const now = Date.now();
-        if (installationToken && installationToken.expiresAt > now + 60_000) {
-            return installationToken.token;
-        }
-        const jwt = await appJwt(options.appId, options.privateKey);
-        const res = await fetchWithTimeout(`https://api.github.com/app/installations/${options.installationId}/access_tokens`, {
-            method: "POST",
-            headers: {
-                Authorization: `Bearer ${jwt}`,
-                Accept: "application/vnd.github+json",
-                "X-GitHub-Api-Version": "2022-11-28",
-            },
-        }, PROVIDER_HTTP_TIMEOUT_MS, fetchImpl);
-        if (!res.ok) {
-            throw new Error(`GitHub installation token failed: ${res.status} ${await res.text()}`);
-        }
-        const body = (await res.json());
-        installationToken = {
-            token: body.token,
-            expiresAt: Date.parse(body.expires_at),
-        };
-        return body.token;
-    }
-    return {
-        async post(input) {
-            const target = parseConversationId(input.conversationId);
-            const token = await getInstallationToken();
-            const res = await fetchWithTimeout(`https://api.github.com/repos/${target.owner}/${target.repo}/issues/${target.number}/comments`, {
-                method: "POST",
-                headers: {
-                    Authorization: `Bearer ${token}`,
-                    Accept: "application/vnd.github+json",
-                    "Content-Type": "application/json",
-                    "X-GitHub-Api-Version": "2022-11-28",
-                },
-                body: JSON.stringify({ body: input.text }),
-            }, PROVIDER_HTTP_TIMEOUT_MS, fetchImpl);
-            if (!res.ok) {
-                throw new Error(`GitHub create comment failed: ${res.status} ${await res.text()}`);
-            }
-            const body = (await res.json());
-            return {
-                id: `github-comment:${body.id}`,
-                providerMessageId: String(body.id),
-            };
-        },
-    };
-}
-function parseConversationId(conversationId) {
-    const match = /^([^/]+)\/([^#]+)#(\d+)$/.exec(conversationId);
-    if (!match) {
-        throw new Error(`GitHub transport cannot parse conversationId "${conversationId}"`);
-    }
-    return {
-        owner: match[1],
-        repo: match[2],
-        number: Number(match[3]),
-    };
-}
-/**
- * Sign an App JWT. Uses Node `createPrivateKey` so both PKCS#1
- * (`BEGIN RSA PRIVATE KEY`, GitHub's download format) and PKCS#8 PEMs work.
- */
-async function appJwt(appId, privateKeyPem) {
-    const key = createPrivateKey(normalizePem(privateKeyPem));
-    const now = Math.floor(Date.now() / 1000);
-    return new SignJWT({})
-        .setProtectedHeader({ alg: "RS256" })
-        .setIssuedAt(now - 60)
-        .setExpirationTime(now + 9 * 60)
-        .setIssuer(appId)
-        .sign(key);
-}
-function normalizePem(key) {
-    return key.includes("\\n") ? key.replace(/\\n/g, "\n") : key;
-}
-//# sourceMappingURL=transport.js.map

package/dist/connectors/github/transport.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../src/connectors/github/transport.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,OAAO,EACL,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AACjD,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AACnE,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAUnE;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,cAAc,GAAG,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IAC/D,OAAO,wBAAwB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAkC;IAElC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACzC,IAAI,iBAAmE,CAAC;IAExE,KAAK,UAAU,oBAAoB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,iBAAiB,IAAI,iBAAiB,CAAC,SAAS,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC;YACpE,OAAO,iBAAiB,CAAC,KAAK,CAAC;QACjC,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAChC,4CAA4C,OAAO,CAAC,cAAc,gBAAgB,EAClF;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,GAAG,EAAE;gBAC9B,MAAM,EAAE,6BAA6B;gBACrC,sBAAsB,EAAE,YAAY;aACrC;SACF,EACD,wBAAwB,EACxB,SAAS,CACV,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,qCAAqC,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0C,CAAC;QACzE,iBAAiB,GAAG;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;SACvC,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,MAAM,oBAAoB,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAChC,gCAAgC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,WAAW,EAC9F;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,MAAM,EAAE,6BAA6B;oBACrC,cAAc,EAAE,kBAAkB;oBAClC,sBAAsB,EAAE,YAAY;iBACrC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;aAC3C,EACD,wBAAwB,EACxB,SAAS,CACV,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,iCAAiC,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAClE,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;YAClD,OAAO;gBACL,EAAE,EAAE,kBAAkB,IAAI,CAAC,EAAE,EAAE;gBAC/B,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;aACnC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,cAAsB;IAKjD,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,iDAAiD,cAAc,GAAG,CACnE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE;QAChB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE;QACf,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACzB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,MAAM,CAAC,KAAa,EAAE,aAAqB;IACxD,MAAM,GAAG,GAAG,gBAAgB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;SACnB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,WAAW,CAAC,GAAG,GAAG,EAAE,CAAC;SACrB,iBAAiB,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;SAC/B,SAAS,CAAC,KAAK,CAAC;SAChB,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC/D,CAAC"}

package/dist/connectors/langsmith/index.d.ts

@@ -1,397 +0,0 @@
-/**
- * LangSmith connector — authoring surface.
- *
- * A capability-delegation layer for *external / untrusted* callers (browsers,
- * channels, schedules). The deployment declares a small set of constrained
- * LangSmith capabilities; MDA performs them server-side with the workspace key
- * and returns allowlisted responses. The browser never receives
- * `LANGSMITH_API_KEY`.
- *
- * This module is authoring-only: typed per-resource builders + presets that
- * compile to grants, plus eager validation. The runtime enforcement engine lives
- * in `./routes.ts` and is mounted synchronously by the
- * connector's `http` hook so routes register before LangGraph captures the
- * custom HTTP app.
- */
-import type { Connector } from "../../runtime/connector.js";
-/** External caller surfaces, mapped onto identity ingress / `source.provider`. */
-export type LangSmithCallerSurface = "browser" | "backend" | "channel" | "schedule";
-/** Ownership scope MDA proves from `runtime.identity` before the operation. */
-export type LangSmithCapabilityScope = "agent" | "user" | "thread" | "run";
-/** LangSmith resource families the connector can delegate in v0. */
-export type LangSmithResource = "runs" | "threads" | "feedback" | "examples" | "annotation_queues" | "prompts";
-/** Response shaping for a capability (allowlist first, redact as backstop). */
-export interface LangSmithResponseShape {
-    include?: string[];
-    redact?: string[];
-}
-/** A compiled capability grant. Builders and presets produce these. */
-export interface LangSmithCapability {
-    id: string;
-    exposeTo: LangSmithCallerSurface[];
-    resource: LangSmithResource;
-    actions: string[];
-    scope: LangSmithCapabilityScope;
-    constraints?: Record<string, unknown>;
-    response?: LangSmithResponseShape;
-    /** Explicit acknowledgement required to include per-resource sensitive fields. */
-    allowSensitive?: string[];
-}
-/** Configuration accepted by `connectors.langsmith`. */
-export interface LangSmithConnectorConfig {
-    /** Capability grants. Presets return arrays, so nesting is flattened. */
-    capabilities: Array<LangSmithCapability | LangSmithCapability[]>;
-}
-/**
- * Options for a {@link runs} capability grant.
- *
- * Default response shaping (when `include` / `redact` are omitted):
- * include `id`, `status`, `start_time`, `end_time`, `url`, `metadata`;
- * redact `inputs`, `outputs`, `events`.
- */
-export interface RunsCapabilityOptions {
-    /** Stable capability id used in `POST .../capabilities/{id}`. */
-    id: string;
-    /** Caller surfaces allowed to invoke this grant. */
-    exposeTo: LangSmithCallerSurface[];
-    /** Allowed run operations. */
-    actions: Array<"read" | "share">;
-    /** Ownership boundary proven from `runtime.identity` before the call. */
-    scope: LangSmithCapabilityScope;
-    /** Response field allowlist (defaults to the browser-safe runs profile). */
-    include?: string[];
-    /** Fields stripped even if listed in `include` (defaults to sensitive runs fields). */
-    redact?: string[];
-    /**
-     * Explicit opt-in required to include sensitive run fields (`inputs`,
-     * `outputs`, `events`) when `exposeTo` includes `browser`.
-     */
-    allowSensitive?: string[];
-}
-/**
- * Build a `runs` capability grant (`read` / `share`).
- *
- * Use for redacted trace summaries and share links. Prefer {@link traceViewer}
- * when the default browser surface is enough.
- *
- * @param options - Grant id, surfaces, actions, scope, and optional response shaping.
- * @returns A compiled {@link LangSmithCapability} for the `runs` resource.
- *
- * @example
- * ```ts
- * langsmith.runs({
- *   id: "app:run-summary",
- *   exposeTo: ["browser"],
- *   actions: ["read", "share"],
- *   scope: "thread",
- * })
- * ```
- */
-export declare function runs(options: RunsCapabilityOptions): LangSmithCapability;
-/**
- * Options for a {@link feedback} capability grant.
- *
- * Default response include (when omitted): `id`, `run_id`, `key`, `score`,
- * `created_at`. Default scope: `run`.
- */
-export interface FeedbackCapabilityOptions {
-    /** Stable capability id used in `POST .../capabilities/{id}`. */
-    id: string;
-    /** Caller surfaces allowed to invoke this grant. */
-    exposeTo: LangSmithCallerSurface[];
-    /** Allowed feedback operations. */
-    actions: Array<"create" | "update" | "delete">;
-    /** Ownership boundary; defaults to `run`. */
-    scope?: LangSmithCapabilityScope;
-    /** Allowlisted feedback keys (e.g. `user_score`). Required. */
-    keys: string[];
-    /** Allowlisted score/value labels when feedback is categorical. */
-    scores?: string[];
-    /** Maximum comment length in characters. */
-    maxCommentChars?: number;
-    /** When true, each user may submit at most one feedback row per run. */
-    onePerActor?: boolean;
-    /** Response field allowlist (defaults to the browser-safe feedback profile). */
-    include?: string[];
-}
-/**
- * Build a `feedback` capability grant (`create` / `update` / `delete`).
- *
- * Constrains keys, optional categorical scores, comment length, and
- * per-actor uniqueness. Prefer {@link chatFeedback} for the common browser
- * thumbs-up/down + dataset capture surface.
- *
- * @param options - Grant id, surfaces, actions, key/score constraints, and shaping.
- * @returns A compiled {@link LangSmithCapability} for the `feedback` resource.
- *
- * @example
- * ```ts
- * langsmith.feedback({
- *   id: "app:user-score",
- *   exposeTo: ["browser"],
- *   actions: ["create", "update", "delete"],
- *   scope: "run",
- *   keys: ["user_score"],
- *   scores: ["positive", "negative"],
- *   onePerActor: true,
- * })
- * ```
- */
-export declare function feedback(options: FeedbackCapabilityOptions): LangSmithCapability;
-/**
- * Options for an {@link examples} capability grant.
- *
- * Default response include (when omitted): `id`, `dataset_id`, `created_at`.
- * Default scope: `thread`.
- */
-export interface ExamplesCapabilityOptions {
-    /** Stable capability id used in `POST .../capabilities/{id}`. */
-    id: string;
-    /** Caller surfaces allowed to invoke this grant. */
-    exposeTo: LangSmithCallerSurface[];
-    /** Allowed example operations (currently `create` only). */
-    actions: Array<"create">;
-    /** Ownership boundary; defaults to `thread`. */
-    scope?: LangSmithCapabilityScope;
-    /** Target LangSmith dataset name (server-side; not chosen by the client). */
-    dataset: string;
-    /** Allowlisted top-level fields the client may send on create. */
-    allowedFields?: string[];
-    /** Cap on examples created per thread for this grant. */
-    maxExamplesPerThread?: number;
-    /** Response field allowlist (defaults to the browser-safe examples profile). */
-    include?: string[];
-}
-/**
- * Build an `examples` capability grant (`create` into a fixed dataset).
- *
- * The dataset name is fixed in the grant so callers cannot write to arbitrary
- * datasets. Prefer {@link chatFeedback} when pairing with run feedback.
- *
- * @param options - Grant id, surfaces, dataset, and optional field/thread caps.
- * @returns A compiled {@link LangSmithCapability} for the `examples` resource.
- *
- * @example
- * ```ts
- * langsmith.examples({
- *   id: "app:capture-thread",
- *   exposeTo: ["browser"],
- *   actions: ["create"],
- *   scope: "thread",
- *   dataset: "public-feedback",
- *   allowedFields: ["messages", "answer", "feedback", "source"],
- * })
- * ```
- */
-export declare function examples(options: ExamplesCapabilityOptions): LangSmithCapability;
-/**
- * Options for an {@link annotationQueues} capability grant.
- *
- * Enqueue is a write with no readable body; the response include is fixed to
- * `["id"]`. Default scope: `run`.
- */
-export interface AnnotationQueuesCapabilityOptions {
-    /** Stable capability id used in `POST .../capabilities/{id}`. */
-    id: string;
-    /** Caller surfaces allowed to invoke this grant. */
-    exposeTo: LangSmithCallerSurface[];
-    /** Allowed queue operations (currently `enqueue_run` only). */
-    actions: Array<"enqueue_run">;
-    /** Ownership boundary; defaults to `run`. */
-    scope?: LangSmithCapabilityScope;
-    /** Target annotation queue id/name (server-side; not chosen by the client). */
-    queue: string;
-    /** Allowlisted priority labels when the client may set priority. */
-    allowedPriorities?: string[];
-    /** Maximum note length in characters. */
-    maxNoteChars?: number;
-}
-/**
- * Build an `annotation_queues` capability grant (`enqueue_run` into a fixed queue).
- *
- * The queue is fixed in the grant so callers cannot enqueue into arbitrary
- * queues.
- *
- * @param options - Grant id, surfaces, queue, and optional priority/note limits.
- * @returns A compiled {@link LangSmithCapability} for the `annotation_queues` resource.
- *
- * @example
- * ```ts
- * langsmith.annotationQueues({
- *   id: "app:enqueue-review",
- *   exposeTo: ["backend"],
- *   actions: ["enqueue_run"],
- *   scope: "run",
- *   queue: "human-review",
- * })
- * ```
- */
-export declare function annotationQueues(options: AnnotationQueuesCapabilityOptions): LangSmithCapability;
-/**
- * Options for a {@link prompts} capability grant.
- *
- * Default response shaping (when omitted): include `name`, `commit_hash`,
- * `updated_at`; redact `content`, `messages`. Default scope: `agent`.
- */
-export interface PromptsCapabilityOptions {
-    /** Stable capability id used in `POST .../capabilities/{id}`. */
-    id: string;
-    /** Caller surfaces allowed to invoke this grant. */
-    exposeTo: LangSmithCallerSurface[];
-    /** Allowed prompt operations (currently `read_metadata` only). */
-    actions: Array<"read_metadata">;
-    /** Ownership boundary; defaults to `agent`. */
-    scope?: LangSmithCapabilityScope;
-    /** Response field allowlist (defaults to the browser-safe prompts profile). */
-    include?: string[];
-    /** Fields stripped even if listed in `include` (defaults to prompt content). */
-    redact?: string[];
-}
-/**
- * Build a `prompts` capability grant (`read_metadata`).
- *
- * Returns prompt metadata only by default; prompt body fields stay redacted.
- *
- * @param options - Grant id, surfaces, and optional response shaping.
- * @returns A compiled {@link LangSmithCapability} for the `prompts` resource.
- *
- * @example
- * ```ts
- * langsmith.prompts({
- *   id: "app:prompt-meta",
- *   exposeTo: ["browser"],
- *   actions: ["read_metadata"],
- *   scope: "agent",
- * })
- * ```
- */
-export declare function prompts(options: PromptsCapabilityOptions): LangSmithCapability;
-/**
- * Options for a {@link threads} capability grant.
- *
- * Default response shaping (when omitted): include `thread_id`, `created_at`,
- * `metadata.title`; redact `messages`, `values`. Default scope: `user`.
- */
-export interface ThreadsCapabilityOptions {
-    /** Stable capability id used in `POST .../capabilities/{id}`. */
-    id: string;
-    /** Caller surfaces allowed to invoke this grant. */
-    exposeTo: LangSmithCallerSurface[];
-    /** Allowed thread operations. */
-    actions: Array<"read" | "update_metadata">;
-    /** Ownership boundary; defaults to `user`. */
-    scope?: LangSmithCapabilityScope;
-    /** Allowlisted metadata keys the client may read or update. */
-    metadataKeys?: string[];
-    /** Maximum title length when updating thread metadata. */
-    maxTitleChars?: number;
-    /** Response field allowlist (defaults to the browser-safe threads profile). */
-    include?: string[];
-    /**
-     * Explicit opt-in required to include sensitive thread fields (`messages`,
-     * `values`) when `exposeTo` includes `browser`.
-     */
-    allowSensitive?: string[];
-}
-/**
- * Build a `threads` capability grant (`read` / `update_metadata`).
- *
- * Thread message bodies stay redacted unless `allowSensitive` acknowledges
- * them for a browser surface.
- *
- * @param options - Grant id, surfaces, actions, metadata constraints, and shaping.
- * @returns A compiled {@link LangSmithCapability} for the `threads` resource.
- *
- * @example
- * ```ts
- * langsmith.threads({
- *   id: "app:thread-title",
- *   exposeTo: ["browser"],
- *   actions: ["read", "update_metadata"],
- *   scope: "user",
- *   metadataKeys: ["title"],
- *   maxTitleChars: 120,
- * })
- * ```
- */
-export declare function threads(options: ThreadsCapabilityOptions): LangSmithCapability;
-/**
- * Browser chat feedback preset: thumbs up/down on a run, plus optional dataset
- * capture of the conversation.
- *
- * Expands to two grants with stable capability ids (safe to hard-code in
- * clients):
- *
- * - `langsmith:chat-feedback` — run-scoped {@link feedback} for browsers.
- *   Key `user_score`, scores `positive`/`negative`, comments ≤ 2000 chars,
- *   `onePerActor: true`.
- * - `langsmith:chat-feedback-examples` — thread-scoped {@link examples} create
- *   into `dataset`, allowing fields `messages`, `answer`, `feedback`, `source`.
- *
- * Pass the returned array in `capabilities`.
- *
- * @param options.dataset - LangSmith dataset name for the examples capability.
- * @returns Capability grants for feedback + example capture.
- *
- * @example
- * ```ts
- * export const connector = connectors.langsmith({
- *   capabilities: [connectors.langsmith.chatFeedback({ dataset: "public-feedback" })],
- * });
- * // POST /connectors/langsmith/capabilities/langsmith:chat-feedback
- * ```
- */
-export declare function chatFeedback(options: {
-    dataset: string;
-}): LangSmithCapability[];
-/**
- * Browser trace viewer preset: read a redacted run summary and create a share
- * link for the caller's thread.
- *
- * Expands to one grant with a stable capability id:
- *
- * - `langsmith:trace-viewer` — thread-scoped {@link runs} with actions
- *   `read` and `share`, exposed to `browser`. Responses include
- *   `id` / `status` / `start_time` / `end_time` / `url` / `metadata` and redact
- *   `inputs` / `outputs` / `events` by default.
- *
- * Pass the returned array in `capabilities`.
- *
- * @returns Capability grant for redacted run read/share.
- *
- * @example
- * ```ts
- * export const connector = connectors.langsmith({
- *   capabilities: [connectors.langsmith.traceViewer()],
- * });
- * // POST /connectors/langsmith/capabilities/langsmith:trace-viewer
- * ```
- */
-export declare function traceViewer(): LangSmithCapability[];
-/**
- * Fail-closed authoring checks that do not require the identity config. The
- * identity-dependent checks (scope/ingress sanity, tenancy) run when the
- * connector's `http` hook is mounted, where the resolved identity is available.
- */
-export declare function validateLangSmithConnector(capabilities: LangSmithCapability[]): void;
-/** The branded LangSmith connector (implements only the `http` hook). */
-export interface LangSmithConnector extends Connector {
-    readonly kind: "langsmith";
-    readonly capabilities: LangSmithCapability[];
-}
-/**
- * Build a branded LangSmith connector from capabilities (or preset-produced
- * capability arrays). Runs {@link validateLangSmithConnector} eagerly, then
- * returns a connector whose `http` hook mounts the enforcement engine.
- *
- * Mounting must be synchronous: `buildManagedHttpApp` does not await hooks, and
- * LangGraph captures custom routes at import time. A dynamic `import()` here
- * would race that capture and leave connector paths as platform 404s.
- *
- * `args` is a function rather than a schema: capabilities come from the
- * builders above, already typed, and what is left to check is policy that spans
- * fields — a browser-exposed grant acknowledging its sensitive fields,
- * constraint keys that depend on the resource. Those read better as code.
- */
-export declare const langsmithConnector: (config: LangSmithConnectorConfig) => LangSmithConnector;
-//# sourceMappingURL=index.d.ts.map

package/dist/connectors/langsmith/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/langsmith/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAG5D,kFAAkF;AAClF,MAAM,MAAM,sBAAsB,GAC9B,SAAS,GACT,SAAS,GACT,SAAS,GACT,UAAU,CAAC;AAEf,+EAA+E;AAC/E,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE3E,oEAAoE;AACpE,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,SAAS,GACT,UAAU,GACV,UAAU,GACV,mBAAmB,GACnB,SAAS,CAAC;AAEd,+EAA+E;AAC/E,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,uEAAuE;AACvE,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,wBAAwB,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,wDAAwD;AACxD,MAAM,WAAW,wBAAwB;IACvC,yEAAyE;IACzE,YAAY,EAAE,KAAK,CAAC,mBAAmB,GAAG,mBAAmB,EAAE,CAAC,CAAC;CAClE;AAoCD;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,oDAAoD;IACpD,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,8BAA8B;IAC9B,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;IACjC,yEAAyE;IACzE,KAAK,EAAE,wBAAwB,CAAC;IAChC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,IAAI,CAAC,OAAO,EAAE,qBAAqB,GAAG,mBAAmB,CAexE;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,oDAAoD;IACpD,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,mCAAmC;IACnC,OAAO,EAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAC;IAC/C,6CAA6C;IAC7C,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,+DAA+D;IAC/D,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,4CAA4C;IAC5C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,QAAQ,CACtB,OAAO,EAAE,yBAAyB,GACjC,mBAAmB,CAerB;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,oDAAoD;IACpD,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,4DAA4D;IAC5D,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzB,gDAAgD;IAChD,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,yDAAyD;IACzD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,QAAQ,CACtB,OAAO,EAAE,yBAAyB,GACjC,mBAAmB,CAcrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iCAAiC;IAChD,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,oDAAoD;IACpD,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,+DAA+D;IAC/D,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9B,6CAA6C;IAC7C,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,iCAAiC,GACzC,mBAAmB,CAerB;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,oDAAoD;IACpD,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,kEAAkE;IAClE,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAChC,+CAA+C;IAC/C,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,OAAO,CACrB,OAAO,EAAE,wBAAwB,GAChC,mBAAmB,CAYrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,oDAAoD;IACpD,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,iCAAiC;IACjC,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC;IAC3C,8CAA8C;IAC9C,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,OAAO,CACrB,OAAO,EAAE,wBAAwB,GAChC,mBAAmB,CAmBrB;AAID;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE;IACpC,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,mBAAmB,EAAE,CAqBxB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,WAAW,IAAI,mBAAmB,EAAE,CASnD;AAID;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,mBAAmB,EAAE,GAClC,IAAI,CAWN;AA6ED,yEAAyE;AACzE,MAAM,WAAW,kBAAmB,SAAQ,SAAS;IACnD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,mBAAmB,EAAE,CAAC;CAC9C;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,EAAE,CAC/B,MAAM,EAAE,wBAAwB,KAC7B,kBAWH,CAAC"}