managed-deepagents 0.6.2-dev.2 → 0.6.2-dev.21

package/README.md

@@ -245,11 +245,12 @@ used only to reconcile the registry and never enters the build or snapshot.
 
 Add `connectors/mcp.ts` to attach MCP servers. The file must export a named
 `connector`. By default, MDA exposes every tool loaded from each declared
-server. Supply your own auth via static `headers` when the server requires
-credentials:
+server. In `mda dev`, an agent-owned connection reads from
+`MDA_DEV_<SLUG>` with the slug uppercased and hyphens changed to underscores.
+Hosted deployments resolve workspace connections from Agent Auth:
 
 ```ts
-import { connectors } from "managed-deepagents";
+import { connectors, connections } from "managed-deepagents";
 
 export const connector = connectors.mcp({
   mcpServers: {
@@ -257,11 +258,23 @@ export const connector = connectors.mcp({
       transport: "http",
       url: "https://docs.langchain.com/mcp",
       includeTools: ["search", "fetch"],
+      connection: connections.get("docs-token", { type: "agent" }),
     },
   },
 });
 ```
 
+For this example, set `MDA_DEV_DOCS_TOKEN`.
+
+A user-owned connection — `connections.get(slug, { type: "user" })` — resolves
+per caller (OAuth or opaque). The pre-run credential gate interrupts the run
+when a grant is missing. `mda dev` has no deployment to hold user grants, so
+a user-owned connection fails there with an actionable error; deploy the agent
+to exercise one.
+
+Provision workspace connections with `mda connection create` before deploy.
+`mda connection check` verifies manifest slugs exist in the workspace.
+
 Use `includeTools` or `excludeTools` inside a server config to select a subset.
 Tool names are raw MCP tool names before the managed `{server}__` prefix is
 applied, so `includeTools: ["search"]` on server `langchainDocs` exposes

package/dist/agent-auth.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Agent Auth client used by `credentials.get` and the pre-run credential gate.
+ *
+ * Talks to the shipped Agent Auth APIs (credentials + oauth-authorization-sessions),
+ * not the aspirational `credentials/mint` endpoint.
+ */
+export declare const AGENT_AUTH_TIMEOUT_MS = 10000;
+export declare const AGENT_AUTH_PROVIDER_PAGE_SIZE = 100;
+export declare const AGENT_AUTH_MAX_PROVIDER_PAGES = 20;
+export interface AgentAuthHttpConfig {
+    apiKey?: string;
+    workspaceId?: string;
+}
+/** Query string that addresses one credential by its natural key. */
+export declare function agentAuthCredentialQuery(options: {
+    ownerType: string;
+    ownerId: string;
+    kind: string;
+    slug: string;
+}): string;
+export declare function agentAuthHeaders(config: AgentAuthHttpConfig): Record<string, string>;
+/** One Agent Auth HTTP call: no redirects, bounded timeout, JSON body. */
+export declare function requestAgentAuthJson(options: {
+    url: string;
+    init?: Omit<RequestInit, "headers" | "signal">;
+    config: AgentAuthHttpConfig;
+    timeoutMs: number;
+    fetchImpl: typeof fetch;
+}): Promise<{
+    ok: boolean;
+    status: number;
+    body: Record<string, unknown>;
+}>;
+export interface AgentAuthContext {
+    baseUrl: string;
+    /** Deployment id, passed to oauth-authorization-sessions as `agent_id`. */
+    agentId: string;
+    /** Authenticated caller, used as `owner_id` for user credentials. */
+    principalId: string;
+    apiKey?: string;
+    workspaceId?: string;
+}
+/** One credential slug the caller has not granted, with its connect URL. */
+export interface PendingAuthorization {
+    slug: string;
+    connectUrl: string;
+    authId: string;
+}
+export declare class CredentialAuthorizationRequiredError extends Error {
+    readonly slugs: readonly string[];
+    readonly name = "CredentialAuthorizationRequiredError";
+    constructor(slugs: readonly string[]);
+}
+export declare class AgentAuthUnknownProviderError extends Error {
+    readonly slug: string;
+    readonly name = "AgentAuthUnknownProviderError";
+    constructor(slug: string);
+}
+/**
+ * Agent Auth could not answer. Callers pass a fixed message: a response body
+ * can quote secret material, so it never reaches this error.
+ */
+export declare class CredentialStoreError extends Error {
+    readonly status?: number | undefined;
+    readonly name = "CredentialStoreError";
+    constructor(message: string, status?: number | undefined);
+}
+export interface WorkspaceConnection {
+    connectionId: string;
+    kind: string;
+    ownerPolicy: string;
+}
+/**
+ * Bound Agent Auth HTTP client. One instance per caller/run; headers, origin,
+ * and the request timeout stay on the instance rather than each call site.
+ */
+export declare class AgentAuth {
+    #private;
+    readonly context: AgentAuthContext;
+    constructor(context: AgentAuthContext, fetchImpl?: typeof fetch, timeoutMs?: number);
+    /** List workspace connections and return the row for `slug`, if any. */
+    findWorkspaceConnection(slug: string): Promise<WorkspaceConnection | undefined>;
+    /** Read a caller-owned opaque secret grant for a workspace connection slug. */
+    readUserSecret(slug: string): Promise<string | undefined>;
+    /** Read an OAuth access token stored on a workspace connection row. */
+    readConnectionAccessToken(connectionId: string): Promise<string | undefined>;
+    /**
+     * Read the caller's OAuth access token for a slug without starting a session.
+     *
+     * Reads never mint, so a caller can be probed repeatedly — on every replay of
+     * an interrupted node, for instance — without leaving authorization sessions
+     * behind.
+     *
+     * @returns The access token, or `undefined` when the caller must connect.
+     */
+    readUserAccessToken(slug: string): Promise<string | undefined>;
+    /**
+     * Start an OAuth authorization session for a slug the caller has not granted.
+     *
+     * @returns The pending session, including the user-facing connect URL.
+     */
+    startAuthorizationSession(slug: string): Promise<PendingAuthorization>;
+    /** oauth-providers has no slug filter, so the match is made across pages. */
+    resolveOAuthProviderId(slug: string): Promise<string>;
+    /** The credential key is `credential_id`, never `id`. */
+    findCredentialId(options: {
+        ownerType: string;
+        ownerId: string;
+        kind: string;
+        slug: string;
+    }): Promise<string | undefined>;
+    /** @returns The secret, or `undefined` when Agent Auth has no value (404). */
+    readSecret(credentialId: string): Promise<string | undefined>;
+}
+//# sourceMappingURL=agent-auth.d.ts.map

package/dist/agent-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-auth.d.ts","sourceRoot":"","sources":["../src/agent-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAC5C,eAAO,MAAM,6BAA6B,MAAM,CAAC;AACjD,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qEAAqE;AACrE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,MAAM,CAOT;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,mBAAmB,GAC1B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAexB;AAED,0EAA0E;AAC1E,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC;IAC/C,MAAM,EAAE,mBAAmB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,KAAK,CAAC;CACzB,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,CAAC,CAoBD;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,oCAAqC,SAAQ,KAAK;IAGjD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE;IAF7C,QAAQ,CAAC,IAAI,0CAA0C;IAEvD,YAAqB,KAAK,EAAE,SAAS,MAAM,EAAE,EAK5C;CACF;AAED,qBAAa,6BAA8B,SAAQ,KAAK;IAG1C,QAAQ,CAAC,IAAI,EAAE,MAAM;IAFjC,QAAQ,CAAC,IAAI,mCAAmC;IAEhD,YAAqB,IAAI,EAAE,MAAM,EAKhC;CACF;AAED;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAK3C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IAJ1B,QAAQ,CAAC,IAAI,0BAA0B;IAEvC,YACE,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA,EAGzB;CACF;AAOD,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,qBAAa,SAAS;;IACpB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAInC,YACE,OAAO,EAAE,gBAAgB,EACzB,SAAS,GAAE,OAAO,KAAa,EAC/B,SAAS,SAAwB,EAKlC;IAED,wEAAwE;IAClE,uBAAuB,CAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAwD1C;IAED,+EAA+E;IACzE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW9D;IAED,uEAAuE;IACjE,yBAAyB,CAC7B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE7B;IAED;;;;;;;;OAQG;IACG,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CASnE;IAED;;;;OAIG;IACG,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA2B3E;IAED,6EAA6E;IACvE,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoC1D;IAED,yDAAyD;IACnD,gBAAgB,CAAC,OAAO,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAc9B;IAED,8EAA8E;IACxE,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAalE;CAqCF"}

package/dist/agent-auth.js

@@ -0,0 +1,282 @@
+/**
+ * Agent Auth client used by `credentials.get` and the pre-run credential gate.
+ *
+ * Talks to the shipped Agent Auth APIs (credentials + oauth-authorization-sessions),
+ * not the aspirational `credentials/mint` endpoint.
+ */
+import { fetchWithTimeout } from "./runtime/http.js";
+export const AGENT_AUTH_TIMEOUT_MS = 10_000;
+export const AGENT_AUTH_PROVIDER_PAGE_SIZE = 100;
+export const AGENT_AUTH_MAX_PROVIDER_PAGES = 20;
+/** Query string that addresses one credential by its natural key. */
+export function agentAuthCredentialQuery(options) {
+    return new URLSearchParams({
+        owner_type: options.ownerType,
+        owner_id: options.ownerId,
+        kind: options.kind,
+        slug: options.slug,
+    }).toString();
+}
+export function agentAuthHeaders(config) {
+    const headers = {
+        accept: "application/json",
+        "content-type": "application/json",
+        "x-langsmith-product": "mda",
+    };
+    const apiKey = config.apiKey?.trim();
+    if (apiKey) {
+        headers["x-api-key"] = apiKey;
+    }
+    const workspaceId = config.workspaceId?.trim();
+    if (workspaceId) {
+        headers["x-tenant-id"] = workspaceId;
+    }
+    return headers;
+}
+/** One Agent Auth HTTP call: no redirects, bounded timeout, JSON body. */
+export async function requestAgentAuthJson(options) {
+    const response = await fetchWithTimeout(options.url, {
+        ...options.init,
+        redirect: "error",
+        headers: agentAuthHeaders(options.config),
+    }, options.timeoutMs, options.fetchImpl);
+    const decoded = await response.json().catch(() => ({}));
+    return {
+        ok: response.ok,
+        status: response.status,
+        body: decoded && typeof decoded === "object"
+            ? decoded
+            : {},
+    };
+}
+export class CredentialAuthorizationRequiredError extends Error {
+    slugs;
+    name = "CredentialAuthorizationRequiredError";
+    constructor(slugs) {
+        super(`the caller has not connected: ${slugs.join(", ")}. ` +
+            "Declare the credential on a connector so the pre-run gate can request it.");
+        this.slugs = slugs;
+    }
+}
+export class AgentAuthUnknownProviderError extends Error {
+    slug;
+    name = "AgentAuthUnknownProviderError";
+    constructor(slug) {
+        super(`Agent Auth has no OAuth provider registered for slug "${slug}". ` +
+            "Register the provider or fix the credential slug.");
+        this.slug = slug;
+    }
+}
+/**
+ * Agent Auth could not answer. Callers pass a fixed message: a response body
+ * can quote secret material, so it never reaches this error.
+ */
+export class CredentialStoreError extends Error {
+    status;
+    name = "CredentialStoreError";
+    constructor(message, status) {
+        super(status === undefined ? message : `${message} (status ${status})`);
+        this.status = status;
+    }
+}
+/**
+ * Bound Agent Auth HTTP client. One instance per caller/run; headers, origin,
+ * and the request timeout stay on the instance rather than each call site.
+ */
+export class AgentAuth {
+    context;
+    #fetchImpl;
+    #timeoutMs;
+    constructor(context, fetchImpl = fetch, timeoutMs = AGENT_AUTH_TIMEOUT_MS) {
+        this.context = context;
+        this.#fetchImpl = fetchImpl;
+        this.#timeoutMs = timeoutMs;
+    }
+    /** List workspace connections and return the row for `slug`, if any. */
+    async findWorkspaceConnection(slug) {
+        const workspaceId = this.context.workspaceId?.trim();
+        if (!workspaceId) {
+            throw new CredentialStoreError("connections are not configured: LANGSMITH_WORKSPACE_ID is not set");
+        }
+        let cursor;
+        for (let page = 0; page < AGENT_AUTH_MAX_PROVIDER_PAGES; page += 1) {
+            const params = new URLSearchParams({
+                owner_type: "workspace",
+                owner_id: workspaceId,
+                page_size: String(AGENT_AUTH_PROVIDER_PAGE_SIZE),
+            });
+            if (cursor) {
+                params.set("cursor", cursor);
+            }
+            const { ok, status, body } = await this.#request(`/v1/agent-auth/credentials?${params.toString()}`, { method: "GET" });
+            if (!ok) {
+                throw new CredentialStoreError("Agent Auth list connections failed", status);
+            }
+            const items = Array.isArray(body.items) ? body.items : [];
+            const match = items.find((item) => !!item &&
+                typeof item === "object" &&
+                String(item.slug) === slug);
+            if (match) {
+                const connectionId = String(match.credential_id ?? match.connection_id ?? match.id ?? "");
+                const kind = String(match.kind ?? "");
+                const ownerPolicy = String(match.owner_policy ?? "agent");
+                if (!connectionId || !kind) {
+                    throw new CredentialStoreError("Agent Auth connection row missing id or kind");
+                }
+                return { connectionId, kind, ownerPolicy };
+            }
+            const next = body.next_cursor;
+            if (typeof next !== "string" || !next || next === cursor) {
+                return undefined;
+            }
+            cursor = next;
+        }
+        throw new CredentialStoreError("Agent Auth connection list returned too many pages");
+    }
+    /** Read a caller-owned opaque secret grant for a workspace connection slug. */
+    async readUserSecret(slug) {
+        const credentialId = await this.findCredentialId({
+            ownerType: "user",
+            ownerId: this.context.principalId,
+            kind: "secret",
+            slug,
+        });
+        if (!credentialId) {
+            return undefined;
+        }
+        return await this.readSecret(credentialId);
+    }
+    /** Read an OAuth access token stored on a workspace connection row. */
+    async readConnectionAccessToken(connectionId) {
+        return await this.#fetchAccessToken(connectionId);
+    }
+    /**
+     * Read the caller's OAuth access token for a slug without starting a session.
+     *
+     * Reads never mint, so a caller can be probed repeatedly — on every replay of
+     * an interrupted node, for instance — without leaving authorization sessions
+     * behind.
+     *
+     * @returns The access token, or `undefined` when the caller must connect.
+     */
+    async readUserAccessToken(slug) {
+        const credentialId = await this.findCredentialId({
+            ownerType: "user",
+            ownerId: this.context.principalId,
+            kind: "oauth2",
+            slug,
+        });
+        if (!credentialId)
+            return undefined;
+        return await this.#fetchAccessToken(credentialId);
+    }
+    /**
+     * Start an OAuth authorization session for a slug the caller has not granted.
+     *
+     * @returns The pending session, including the user-facing connect URL.
+     */
+    async startAuthorizationSession(slug) {
+        const providerId = await this.resolveOAuthProviderId(slug);
+        const { ok, status, body } = await this.#request("/v1/agent-auth/oauth-authorization-sessions", {
+            method: "POST",
+            body: JSON.stringify({
+                provider_id: providerId,
+                principal_id: this.context.principalId,
+                agent_id: this.context.agentId,
+            }),
+        });
+        if (!ok) {
+            throw new CredentialStoreError("Agent Auth create oauth-authorization-session failed", status);
+        }
+        const authId = String(body.id ?? "");
+        const connectUrl = String(body.verification_url ?? "");
+        if (!authId || !connectUrl) {
+            throw new CredentialStoreError("Agent Auth oauth-authorization-session missing id or verification_url");
+        }
+        return { slug, connectUrl, authId };
+    }
+    /** oauth-providers has no slug filter, so the match is made across pages. */
+    async resolveOAuthProviderId(slug) {
+        let cursor;
+        for (let page = 0; page < AGENT_AUTH_MAX_PROVIDER_PAGES; page += 1) {
+            const params = new URLSearchParams({
+                page_size: String(AGENT_AUTH_PROVIDER_PAGE_SIZE),
+            });
+            if (cursor)
+                params.set("cursor", cursor);
+            const { ok, status, body } = await this.#request(`/v1/agent-auth/oauth-providers?${params.toString()}`, { method: "GET" });
+            if (!ok) {
+                throw new CredentialStoreError("Agent Auth list oauth-providers failed", status);
+            }
+            const items = Array.isArray(body.items) ? body.items : [];
+            const match = items.find((item) => !!item &&
+                typeof item === "object" &&
+                String(item.slug) === slug);
+            if (match?.id) {
+                return String(match.id);
+            }
+            const next = body.next_cursor;
+            if (typeof next !== "string" || !next || next === cursor) {
+                throw new AgentAuthUnknownProviderError(slug);
+            }
+            cursor = next;
+        }
+        throw new CredentialStoreError("Agent Auth oauth-provider list returned too many pages");
+    }
+    /** The credential key is `credential_id`, never `id`. */
+    async findCredentialId(options) {
+        const { ok, status, body } = await this.#request(`/v1/agent-auth/credentials?${agentAuthCredentialQuery(options)}`, { method: "GET" });
+        if (!ok) {
+            throw new CredentialStoreError("Agent Auth list credentials failed", status);
+        }
+        const [row] = Array.isArray(body.items) ? body.items : [];
+        const id = row?.credential_id;
+        return typeof id === "string" ? id : undefined;
+    }
+    /** @returns The secret, or `undefined` when Agent Auth has no value (404). */
+    async readSecret(credentialId) {
+        const { ok, status, body } = await this.#request(`/v1/agent-auth/credentials/${encodeURIComponent(credentialId)}/secret`, { method: "GET" });
+        if (status === 404) {
+            return undefined;
+        }
+        if (!ok) {
+            throw new CredentialStoreError("Agent Auth get secret failed", status);
+        }
+        const secret = body.secret;
+        return typeof secret === "string" && secret.length > 0 ? secret : undefined;
+    }
+    async #fetchAccessToken(credentialId) {
+        const { ok, status, body } = await this.#request(`/v1/agent-auth/credentials/${encodeURIComponent(credentialId)}/oauth2`, { method: "GET" });
+        if (isAuthorizationRequired(status, body)) {
+            return undefined;
+        }
+        if (!ok) {
+            throw new CredentialStoreError("Agent Auth get oauth2 failed", status);
+        }
+        const oauth2 = body.oauth2 && typeof body.oauth2 === "object"
+            ? body.oauth2
+            : body;
+        const token = oauth2.access_token;
+        return typeof token === "string" && token ? token : undefined;
+    }
+    async #request(path, init = {}) {
+        return await requestAgentAuthJson({
+            url: `${this.context.baseUrl}${path}`,
+            init,
+            config: this.context,
+            timeoutMs: this.#timeoutMs,
+            fetchImpl: this.#fetchImpl,
+        });
+    }
+}
+/** Agent Auth answers 409 when a stored grant has lapsed and needs re-auth. */
+function isAuthorizationRequired(status, body) {
+    if (status !== 409) {
+        return false;
+    }
+    const detail = String(body.detail ?? body.title ?? body.error ?? "").toLowerCase();
+    return (body.error === "authorization_required" ||
+        detail.includes("authorization is required") ||
+        detail.includes("oauth authorization"));
+}
+//# sourceMappingURL=agent-auth.js.map

package/dist/agent-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-auth.js","sourceRoot":"","sources":["../src/agent-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AACjD,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAOhD,qEAAqE;AACrE,MAAM,UAAU,wBAAwB,CAAC,OAKxC;IACC,OAAO,IAAI,eAAe,CAAC;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAC,QAAQ,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAA2B;IAE3B,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE,kBAAkB;QAClC,qBAAqB,EAAE,KAAK;KAC7B,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC;IAChC,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,aAAa,CAAC,GAAG,WAAW,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAM1C;IAKC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,OAAO,CAAC,GAAG,EACX;QACE,GAAG,OAAO,CAAC,IAAI;QACf,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC1C,EACD,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,CAClB,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EACF,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YACpC,CAAC,CAAE,OAAmC;YACtC,CAAC,CAAC,EAAE;KACT,CAAC;AACJ,CAAC;AAmBD,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IAGxC,KAAK;IAFjB,IAAI,GAAG,sCAAsC,CAAC;IAEvD,YAAqB,KAAwB;QAC3C,KAAK,CACH,iCAAiC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACnD,2EAA2E,CAC9E,CAAC;qBAJiB,KAAK;IAK1B,CAAC;CACF;AAED,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAGjC,IAAI;IAFhB,IAAI,GAAG,+BAA+B,CAAC;IAEhD,YAAqB,IAAY;QAC/B,KAAK,CACH,yDAAyD,IAAI,KAAK;YAChE,mDAAmD,CACtD,CAAC;oBAJiB,IAAI;IAKzB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAKlC,MAAM;IAJR,IAAI,GAAG,sBAAsB,CAAC;IAEvC,YACE,OAAe,EACN,MAAe;QAExB,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,YAAY,MAAM,GAAG,CAAC,CAAC;sBAF/D,MAAM;IAGjB,CAAC;CACF;AAaD;;;GAGG;AACH,MAAM,OAAO,SAAS;IACX,OAAO,CAAmB;IAC1B,UAAU,CAAe;IACzB,UAAU,CAAS;IAE5B,YACE,OAAyB,EACzB,SAAS,GAAiB,KAAK,EAC/B,SAAS,GAAG,qBAAqB;QAEjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,uBAAuB,CAC3B,IAAY;QAEZ,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAC5B,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,MAA0B,CAAC;QAC/B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,6BAA6B,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;gBACjC,UAAU,EAAE,WAAW;gBACvB,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,MAAM,CAAC,6BAA6B,CAAC;aACjD,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC9C,8BAA8B,MAAM,CAAC,QAAQ,EAAE,EAAE,EACjD,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,oBAAoB,CAC5B,oCAAoC,EACpC,MAAM,CACP,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CACtB,CAAC,IAAI,EAAmC,EAAE,CACxC,CAAC,CAAC,IAAI;gBACN,OAAO,IAAI,KAAK,QAAQ;gBACxB,MAAM,CAAE,IAAgC,CAAC,IAAI,CAAC,KAAK,IAAI,CAC1D,CAAC;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,MAAM,CACzB,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,CAC7D,CAAC;gBACF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACtC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC;gBAC1D,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC3B,MAAM,IAAI,oBAAoB,CAC5B,8CAA8C,CAC/C,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAC7C,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;YAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,oBAAoB,CAC5B,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC/C,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACjC,IAAI,EAAE,QAAQ;YACd,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,yBAAyB,CAC7B,YAAoB;QAEpB,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,mBAAmB,CAAC,IAAY;QACpC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC/C,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACjC,IAAI,EAAE,QAAQ;YACd,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,YAAY;YAAE,OAAO,SAAS,CAAC;QACpC,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,yBAAyB,CAAC,IAAY;QAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC9C,6CAA6C,EAC7C;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW,EAAE,UAAU;gBACvB,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;gBACtC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;aAC/B,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,oBAAoB,CAC5B,sDAAsD,EACtD,MAAM,CACP,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,IAAI,oBAAoB,CAC5B,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,sBAAsB,CAAC,IAAY;QACvC,IAAI,MAA0B,CAAC;QAC/B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,6BAA6B,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;gBACjC,SAAS,EAAE,MAAM,CAAC,6BAA6B,CAAC;aACjD,CAAC,CAAC;YACH,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACzC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC9C,kCAAkC,MAAM,CAAC,QAAQ,EAAE,EAAE,EACrD,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,oBAAoB,CAC5B,wCAAwC,EACxC,MAAM,CACP,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CACtB,CAAC,IAAI,EAAyB,EAAE,CAC9B,CAAC,CAAC,IAAI;gBACN,OAAO,IAAI,KAAK,QAAQ;gBACxB,MAAM,CAAE,IAAsB,CAAC,IAAI,CAAC,KAAK,IAAI,CAChD,CAAC;YACF,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC;gBACd,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;YAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzD,MAAM,IAAI,6BAA6B,CAAC,IAAI,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,oBAAoB,CAC5B,wDAAwD,CACzD,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,gBAAgB,CAAC,OAKtB;QACC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC9C,8BAA8B,wBAAwB,CAAC,OAAO,CAAC,EAAE,EACjE,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,oBAAoB,CAC5B,oCAAoC,EACpC,MAAM,CACP,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAI,GAA2C,EAAE,aAAa,CAAC;QACvE,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,UAAU,CAAC,YAAoB;QACnC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC9C,8BAA8B,kBAAkB,CAAC,YAAY,CAAC,SAAS,EACvE,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;QACF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,oBAAoB,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAC1C,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC9C,8BAA8B,kBAAkB,CAAC,YAAY,CAAC,SAAS,EACvE,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;QACF,IAAI,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAC1C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,oBAAoB,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC5C,CAAC,CAAE,IAAI,CAAC,MAAkC;YAC1C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;QAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,IAAI,GAA4C,EAAE;QAMlD,OAAO,MAAM,oBAAoB,CAAC;YAChC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI,EAAE;YACrC,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC,CAAC;IACL,CAAC;CACF;AAED,+EAA+E;AAC/E,SAAS,uBAAuB,CAC9B,MAAc,EACd,IAA6B;IAE7B,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CACnB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAC9C,CAAC,WAAW,EAAE,CAAC;IAChB,OAAO,CACL,IAAI,CAAC,KAAK,KAAK,wBAAwB;QACvC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CACvC,CAAC;AACJ,CAAC"}

package/dist/channels/errors.d.ts

@@ -2,7 +2,6 @@
  * Shared channel error codes and a typed error class.
  */
 import type { ChannelErrorCode } from "./types.js";
-export declare const CHANNEL_ERROR_CODES: readonly ChannelErrorCode[];
 /** Typed channel failure with a stable machine-readable code. */
 export declare class ChannelError extends Error {
     readonly code: ChannelErrorCode;

package/dist/channels/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/channels/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAWjD,CAAC;AAEX,iEAAiE;AACjE,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAEhC,YAAY,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAIlD;CACF"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/channels/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,iEAAiE;AACjE,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAEhC,YAAY,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAIlD;CACF"}

package/dist/channels/errors.js

@@ -1,18 +1,6 @@
 /**
  * Shared channel error codes and a typed error class.
  */
-export const CHANNEL_ERROR_CODES = [
-    "channel_invalid_signature",
-    "channel_replay_rejected",
-    "channel_installation_not_found",
-    "channel_event_filtered",
-    "channel_identity_unresolvable",
-    "channel_destination_forbidden",
-    "channel_invocation_rate_limited",
-    "channel_run_failed",
-    "channel_provider_rate_limited",
-    "channel_provider_rejected",
-];
 /** Typed channel failure with a stable machine-readable code. */
 export class ChannelError extends Error {
     code;

package/dist/channels/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/channels/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAgC;IAC9D,2BAA2B;IAC3B,yBAAyB;IACzB,gCAAgC;IAChC,wBAAwB;IACxB,+BAA+B;IAC/B,+BAA+B;IAC/B,iCAAiC;IACjC,oBAAoB;IACpB,+BAA+B;IAC/B,2BAA2B;CACnB,CAAC;AAEX,iEAAiE;AACjE,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IAEhC,YAAY,IAAsB,EAAE,OAAe;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/channels/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,iEAAiE;AACjE,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IAEhC,YAAY,IAAsB,EAAE,OAAe;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/channels/manifest.d.ts

@@ -31,6 +31,12 @@ export interface ChannelManifest {
     requiredPermissions: readonly string[];
     /** Env vars deploy must ensure when this channel is present. */
     requiredEnv: readonly string[];
+    /** User-owned connection slugs that must exist in the workspace vault. */
+    userConnections?: readonly string[];
+    /** Agent-owned connection slugs referenced by this connector. */
+    agentConnections?: readonly string[];
+    /** @deprecated Use {@link userConnections}. */
+    userCredentials?: readonly string[];
     /** Opaque-to-core provider config (Slack filters/conversation, …). */
     providerConfig: JsonObject;
 }

package/dist/channels/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/channels/manifest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,2EAA2E;AAC3E,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IACtC,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,gEAAgE;IAChE,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,sEAAsE;IACtE,cAAc,EAAE,UAAU,CAAC;CAC5B"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/channels/manifest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,2EAA2E;AAC3E,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IACtC,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,gEAAgE;IAChE,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,0EAA0E;IAC1E,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,iEAAiE;IACjE,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,+CAA+C;IAC/C,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,sEAAsE;IACtE,cAAc,EAAE,UAAU,CAAC;CAC5B"}

package/dist/channels/messaging-registry.d.ts

@@ -12,8 +12,6 @@ import type { Connector } from "../runtime/connector.js";
 export declare function registerChannelMessaging(channels: readonly Channel[]): void;
 /** Register messaging factories from collected connectors (e.g. GitHub). */
 export declare function registerConnectorMessaging(connectors: readonly Connector[]): void;
-/** Clear the registry (tests). */
-export declare function clearMessagingRegistry(): void;
 /** Build a transport for a channel/connector file-stem name. */
 export declare function messagingTransportForName(name: string, env?: NodeJS.ProcessEnv): ChannelTransport | undefined;
 /** Providers allowed as trusted source-provider stamps. */

package/dist/channels/messaging-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messaging-registry.d.ts","sourceRoot":"","sources":["../../src/channels/messaging-registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAoCzD,4DAA4D;AAC5D,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,CAE3E;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,SAAS,SAAS,EAAE,GAC/B,IAAI,CAEN;AAED,kCAAkC;AAClC,wBAAgB,sBAAsB,IAAI,IAAI,CAI7C;AAED,gEAAgE;AAChE,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,gBAAgB,GAAG,SAAS,CAE9B;AAED,2DAA2D;AAC3D,wBAAgB,yBAAyB,IAAI,WAAW,CAAC,MAAM,CAAC,CAE/D"}
+{"version":3,"file":"messaging-registry.d.ts","sourceRoot":"","sources":["../../src/channels/messaging-registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAoCzD,4DAA4D;AAC5D,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,CAE3E;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,SAAS,SAAS,EAAE,GAC/B,IAAI,CAEN;AAED,gEAAgE;AAChE,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,gBAAgB,GAAG,SAAS,CAE9B;AAED,2DAA2D;AAC3D,wBAAgB,yBAAyB,IAAI,WAAW,CAAC,MAAM,CAAC,CAE/D"}

package/dist/channels/messaging-registry.js

@@ -33,12 +33,6 @@ export function registerChannelMessaging(channels) {
 export function registerConnectorMessaging(connectors) {
     registerMessagingSources(connectors);
 }
-/** Clear the registry (tests). */
-export function clearMessagingRegistry() {
-    byName.clear();
-    trustedProviders.clear();
-    trustedProviders.add("slack");
-}
 /** Build a transport for a channel/connector file-stem name. */
 export function messagingTransportForName(name, env = process.env) {
     return byName.get(name)?.(env);

package/dist/channels/messaging-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"messaging-registry.js","sourceRoot":"","sources":["../../src/channels/messaging-registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiBH,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;AACnD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AAEpD,SAAS,wBAAwB,CAAC,OAAmC;IACnE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1D,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,YAAY,GAChB,OAAO,MAAM,CAAC,YAAY,KAAK,UAAU;YACvC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;YAClC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,YAAY,EAAE,QAAQ,EAAE,CAAC;YAC3B,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,wBAAwB,CAAC,QAA4B;IACnE,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,0BAA0B,CACxC,UAAgC;IAEhC,wBAAwB,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,yBAAyB,CACvC,IAAY,EACZ,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,yBAAyB;IACvC,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"messaging-registry.js","sourceRoot":"","sources":["../../src/channels/messaging-registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiBH,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;AACnD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AAEpD,SAAS,wBAAwB,CAAC,OAAmC;IACnE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1D,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,YAAY,GAChB,OAAO,MAAM,CAAC,YAAY,KAAK,UAAU;YACvC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;YAClC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,YAAY,EAAE,QAAQ,EAAE,CAAC;YAC3B,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,wBAAwB,CAAC,QAA4B;IACnE,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,0BAA0B,CACxC,UAAgC;IAEhC,wBAAwB,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,yBAAyB,CACvC,IAAY,EACZ,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,yBAAyB;IACvC,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}

package/dist/channels/registry-types.d.ts

@@ -16,7 +16,7 @@ export interface ChannelHttpContext {
     definition?: unknown;
     /**
      * Pre-read raw body when the HTTP framework may have consumed `request`
-     * (Hono mount passes `await c.req.text()`).
+     * (the managed mount caps Events bodies at 1 MiB).
      */
     rawBody?: string | Uint8Array;
 }

package/dist/channels/schedule-delivery.d.ts

@@ -11,7 +11,7 @@
  */
 import type { ManagedMiddleware } from "../runtime/managed-middleware.js";
 import type { ChannelAddress } from "./types.js";
-/** Override LangGraph run metadata resolution. Test-only. */
+/** Override LangGraph run metadata resolution. @internal Test-only. */
 export declare function setScheduleMetadataForTests(loader?: () => {
     mda_managed?: unknown;
     mda_schedule?: unknown;
@@ -48,6 +48,8 @@ export interface DeliverScheduleResultInput {
         threadId?: string;
     }) => Promise<unknown>;
 }
+/** Return the deployment ID supplied by the managed runtime. */
+export declare function getDeploymentId(env?: NodeJS.ProcessEnv): string | undefined;
 /**
  * Post schedule result text to the configured channel. Soft-fails (logs) on
  * missing token / provider errors so cron runs are not marked failed.

package/dist/channels/schedule-delivery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schedule-delivery.d.ts","sourceRoot":"","sources":["../../src/channels/schedule-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAK1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAMjD,6DAA6D;AAC7D,wBAAgB,2BAA2B,CACzC,MAAM,CAAC,EAAE,MAAM;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,GAC3E,IAAI,CAEN;AAED,uDAAuD;AACvD,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EACE;QAAE,IAAI,EAAE,uBAAuB,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GACzD;QAAE,IAAI,EAAE,iBAAiB,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAChD,2BAA2B,GAAG,SAAS,CAoDzC;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,2BAA2B,CAAC,IAAI,CAAC,GACpC,cAAc,CAKhB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,2BAA2B,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC,CAgD1C;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAChD,OAAO,CAcT;AAmBD;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,CAAC,EAAE;IACzD,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,OAAO,qBAAqB,CAAC;CACzC,GAAG,iBAAiB,CAyBpB"}
+{"version":3,"file":"schedule-delivery.d.ts","sourceRoot":"","sources":["../../src/channels/schedule-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAO1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAMjD,uEAAuE;AACvE,wBAAgB,2BAA2B,CACzC,MAAM,CAAC,EAAE,MAAM;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,GAC3E,IAAI,CAEN;AAED,uDAAuD;AACvD,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EACE;QAAE,IAAI,EAAE,uBAAuB,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GACzD;QAAE,IAAI,EAAE,iBAAiB,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAChD,2BAA2B,GAAG,SAAS,CAoDzC;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,2BAA2B,CAAC,IAAI,CAAC,GACpC,cAAc,CAKhB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,2BAA2B,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxB;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAC7B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAMpB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC,CAoF1C;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAChD,OAAO,CAcT;AAmBD;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,CAAC,EAAE;IACzD,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,OAAO,qBAAqB,CAAC;CACzC,GAAG,iBAAiB,CAyBpB"}