veryfront 0.1.1284 → 0.1.1285

package/docs/README.md

@@ -1,6 +1,6 @@
 # Veryfront Code documentation
 
-These docs ship with veryfront 0.1.1284. Read the relevant guide before changing framework code in a consuming project. Start with [Local quickstart](./getting-started/quickstart.md), then use the task guides or generated API reference below.
+These docs ship with veryfront 0.1.1285. Read the relevant guide before changing framework code in a consuming project. Start with [Local quickstart](./getting-started/quickstart.md), then use the task guides or generated API reference below.
 
 Edit source comments and regenerate API reference; do not edit generated reference directly. Website docs may describe a newer version.
 

package/docs/config.json

@@ -10,7 +10,7 @@
         "concepts",
         "api-reference"
       ],
-      "version": "0.1.1284",
+      "version": "0.1.1285",
       "landing": "getting-started/overview.mdx"
     }
   ],

package/docs/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.1284",
+  "version": "0.1.1285",
   "pages": [
     {
       "path": "api-reference/index.md",
@@ -706,8 +706,8 @@
   "sources": [
     {
       "product": "code",
-      "version": "0.1.1284",
-      "revision": "ee34c936d96f979a54dc2f32def75772677f4cfd",
+      "version": "0.1.1285",
+      "revision": "2bac963100515224f14213021beb42e128b201ea",
       "dirty": false,
       "repository": "https://github.com/veryfront/veryfront-code"
     }
@@ -1003,7 +1003,7 @@
     },
     {
       "path": "config.json",
-      "sha256": "e475e8a1b22c6e1493ef0f123b7897009894e43290dc9f30c30711fd2347f010"
+      "sha256": "c8340919e0f05165648fc9e55a46e26621448066614bb7ceb9d822d5e40cdbc6"
     },
     {
       "path": "getting-started/add-to-existing-project.md",
@@ -1287,7 +1287,7 @@
     },
     {
       "path": "README.md",
-      "sha256": "0e726858a8f10ead03d3344ef0027fd04df15f26c63e1d4dd43fbfa576a18700"
+      "sha256": "bf757d6ced57221c80cdda7a85aa6845ea0b45cdddcae51c8c43d30775c76f58"
     }
   ]
 }

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.1284",
+    "version": "0.1.1285",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {
@@ -649,8 +649,8 @@ export default {
         },
         "test:all-runtimes": "deno task test:unit && deno task test:node && deno task test:bun",
         "test:e2e": "deno task test:e2e:playwright",
-        "test:e2e:playwright": "deno run -A npm:playwright@1.60.0 test --config=tests/e2e/playwright.config.cjs",
-        "test:e2e:playwright:install": "deno run -A npm:playwright@1.60.0 install --with-deps chromium",
+        "test:e2e:playwright": "deno run -A npm:playwright@1.61.1 test --config=tests/e2e/playwright.config.cjs",
+        "test:e2e:playwright:install": "deno run -A npm:playwright@1.61.1 install --with-deps chromium",
         "test:e2e:rsc-browser": "deno task generate && deno run --config=scripts/test.deno.json --allow-read --allow-run=deno --allow-env scripts/test/run-deno-suite.ts --suite=e2e:rsc-browser",
         "test:e2e:managed-broker": "deno run -A scripts/test/npm-install-smoke.ts --managed-broker-only",
         "test:e2e:binary": "deno task generate && deno run --config=scripts/test.deno.json --allow-read --allow-run=deno --allow-env scripts/test/run-deno-suite.ts --suite=e2e:binary",

package/esm/extensions/ext-schema-zod/src/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../src/extensions/ext-schema-zod/src/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,EAUV,eAAe,EAIhB,MAAM,yCAAyC,CAAC;AAqyBjD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,eAAe,CAiGlD"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../src/extensions/ext-schema-zod/src/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,EAUV,eAAe,EAIhB,MAAM,yCAAyC,CAAC;AAuzBjD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,eAAe,CAiGlD"}

package/esm/extensions/ext-schema-zod/src/adapter.js

@@ -14,7 +14,9 @@ import { Ajv2019 } from "ajv/dist/2019.js";
 import { Ajv2020 } from "ajv/dist/2020.js";
 import addFormatsModule from "ajv-formats";
 import { z } from "zod";
-import { isOptionalSchema, recordStaticJsonSchemaDefault, zodToJsonSchema } from "./json-schema.js";
+import { isOptionalSchema, recordStaticJsonSchemaDefault, recordTransparentSchemaInput, zodToJsonSchema, } from "./json-schema.js";
+import { preserveDeclaredObjectDataProperty } from "./object-data-properties.js";
+import { preserveUnionCheckDiagnostics } from "./union-diagnostics.js";
 // Deno exposes the CommonJS default as a callable value at runtime while the
 // package declaration describes the imported value as a module namespace.
 const addFormats = addFormatsModule;
@@ -24,6 +26,8 @@ function toZod(schema) {
 }
 /** Wrap a zod schema as an opaque Schema<T> with chainables routed through zod. */
 function wrap(zs) {
+    preserveDeclaredObjectDataProperty(zs);
+    preserveUnionCheckDiagnostics(zs);
     // The wrapper fakes the full Schema<T> surface; unsupported chainables on
     // unsuitable kinds (e.g. calling `.email()` on a number) throw at runtime
     // just like zod would.
@@ -104,6 +108,14 @@ function wrap(zs) {
     s.__zod = zs;
     return s;
 }
+// An unconstrained input stage preserves omission for unknown/any/custom fields.
+// The actual validator stays outside optional(), so required refinements still
+// run. A validation pipeline also keeps opaque promises synchronous.
+function withMissingInputValidation(schema) {
+    const input = z.unknown().optional().pipe(schema);
+    recordTransparentSchemaInput(input, schema);
+    return input;
+}
 function toZodShape(shape) {
     const out = {};
     for (const [key, value] of Object.entries(shape)) {
@@ -678,10 +690,10 @@ export function createZodAdapter() {
         boolean: () => wrap(z.boolean()),
         date: () => wrap(z.date()),
         null: () => wrap(z.null()),
-        unknown: () => wrap(z.unknown()),
+        unknown: () => wrap(withMissingInputValidation(z.unknown())),
         bigint: () => wrap(z.bigint()),
         // deno-lint-ignore no-explicit-any -- contract mirrors zod's `any` constructor
-        any: () => wrap(z.any()),
+        any: () => wrap(withMissingInputValidation(z.any())),
         function: () => 
         // zod 4's z.function() is callable without args/returns and produces a
         // schema accepting any function. We wrap it as Schema<AnyFunction>.
@@ -709,7 +721,7 @@ export function createZodAdapter() {
         // contract uses a slimmer `new`-able shape; bridge with a single cast
         // through unknown.
         wrap(z.instanceof(ctor)),
-        custom: (check, message) => wrap(z.custom(check, message)),
+        custom: (check, message) => wrap(withMissingInputValidation(z.custom(check, message))),
         coerce,
         validate: (schema, data) => schema.safeParse(data),
         compileJsonSchema,

package/esm/extensions/ext-schema-zod/src/json-schema.d.ts

@@ -10,6 +10,8 @@
  */
 import type { z } from "zod";
 import type { JsonSchema } from "../../../src/extensions/schema/index.js";
+/** Identity input stages do not change the public schema's metadata. */
+export declare function recordTransparentSchemaInput(schema: z.ZodTypeAny, represented: z.ZodTypeAny): void;
 /** Record a literal default without evaluating Zod's possibly dynamic getter. */
 export declare function recordStaticJsonSchemaDefault(schema: z.ZodTypeAny, value: unknown): void;
 export declare function zodToJsonSchema(schema: z.ZodTypeAny): JsonSchema;

package/esm/extensions/ext-schema-zod/src/json-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json-schema.d.ts","sourceRoot":"","sources":["../../../../src/extensions/ext-schema-zod/src/json-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AAqO1E,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAOxF;AAmLD,wBAAgB,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,GAAG,UAAU,CAMhE;AAgBD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,GAAG,OAAO,CAE9D"}
+{"version":3,"file":"json-schema.d.ts","sourceRoot":"","sources":["../../../../src/extensions/ext-schema-zod/src/json-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AAwO1E,wEAAwE;AACxE,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,CAAC,CAAC,UAAU,EACpB,WAAW,EAAE,CAAC,CAAC,UAAU,GACxB,IAAI,CAON;AAMD,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAOxF;AAmLD,wBAAgB,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,GAAG,UAAU,CAMhE;AAgBD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,GAAG,OAAO,CAE9D"}

package/esm/extensions/ext-schema-zod/src/json-schema.js

@@ -16,6 +16,7 @@ function assertConversionDepth(depth) {
     }
 }
 const STATIC_DEFAULT_VALUE = Symbol("veryfront.staticJsonSchemaDefault");
+const TRANSPARENT_INPUT_SCHEMA = Symbol("veryfront.transparentInputSchema");
 const LITERAL_TYPE_MAP = {
     string: "string",
     number: "number",
@@ -138,7 +139,7 @@ function originatesFromCustomSchema(schema) {
         if (tag !== "pipe" && tag !== "ZodEffects")
             return false;
         const def = getDef(current);
-        const input = def.schema ?? def.in;
+        const input = getTransparentInputSchema(def) ?? def.schema ?? def.in;
         if (!input || input === current)
             return false;
         current = input;
@@ -147,9 +148,24 @@ function originatesFromCustomSchema(schema) {
     return false;
 }
 function representedPipeSchema(def) {
+    const transparent = getTransparentInputSchema(def);
+    if (transparent)
+        return transparent;
     const input = def.schema ?? def.in;
     return input && originatesFromCustomSchema(input) && def.out ? def.out : input;
 }
+/** Identity input stages do not change the public schema's metadata. */
+export function recordTransparentSchemaInput(schema, represented) {
+    Object.defineProperty(getDef(schema), TRANSPARENT_INPUT_SCHEMA, {
+        configurable: true,
+        enumerable: true,
+        value: represented,
+        writable: false,
+    });
+}
+function getTransparentInputSchema(def) {
+    return Object.getOwnPropertyDescriptor(def, TRANSPARENT_INPUT_SCHEMA)?.value;
+}
 /** Record a literal default without evaluating Zod's possibly dynamic getter. */
 export function recordStaticJsonSchemaDefault(schema, value) {
     Object.defineProperty(getDef(schema), STATIC_DEFAULT_VALUE, {
@@ -604,7 +620,7 @@ function hasDefaultSchema(schema) {
             case "optional":
             case "ZodEffects":
             case "pipe": {
-                const inner = def.innerType ?? def.schema ?? def.in;
+                const inner = getTransparentInputSchema(def) ?? def.innerType ?? def.schema ?? def.in;
                 if (!inner || inner === current)
                     return false;
                 current = inner;

package/esm/extensions/ext-schema-zod/src/object-data-properties.d.ts

@@ -0,0 +1,4 @@
+import type { z } from "zod";
+/** Preserve declared data without restoring unsafe unknown-key assignment. */
+export declare function preserveDeclaredObjectDataProperty(schema: z.ZodType): void;
+//# sourceMappingURL=object-data-properties.d.ts.map

package/esm/extensions/ext-schema-zod/src/object-data-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-data-properties.d.ts","sourceRoot":"","sources":["../../../../src/extensions/ext-schema-zod/src/object-data-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA+E7B,8EAA8E;AAC9E,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAsC1E"}

package/esm/extensions/ext-schema-zod/src/object-data-properties.js

@@ -0,0 +1,98 @@
+const DATA_KEY = "__proto__";
+const patched = new WeakSet();
+const HasOwn = Object.hasOwn;
+const DefineProperty = Object.defineProperty;
+const Get = Reflect.get;
+const Apply = Reflect.apply;
+const IsArray = Array.isArray;
+const NativePromise = Promise;
+const PromiseThen = Promise.prototype.then;
+function isSchemaObjectData(value) {
+    return value !== null && typeof value === "object" && !IsArray(value);
+}
+function continueParse(result, next) {
+    return result instanceof NativePromise
+        ? Apply(PromiseThen, result, [next])
+        : next(result);
+}
+function mergeDeclaredData(parent, child, field, present, output) {
+    for (let index = 0; index < child.issues.length; index++) {
+        const issue = child.issues[index];
+        parent.issues[parent.issues.length] = {
+            ...issue,
+            path: [DATA_KEY, ...(issue.path ?? [])],
+        };
+    }
+    // Ordinary fields retain values for non-aborting refinements; their issues
+    // still make validation fail. Defining data never calls the prototype setter.
+    if (present || child.value !== undefined ||
+        field._zod.optin === "defaulted" && field._zod.optout !== "optional") {
+        const descriptor = {
+            __proto__: null,
+            configurable: true,
+            enumerable: true,
+            writable: true,
+            value: child.value,
+        };
+        DefineProperty(output, DATA_KEY, descriptor);
+    }
+    return parent;
+}
+function parseDeclaredData(parent, input, field, context) {
+    const output = parent.value;
+    if (!isSchemaObjectData(output)) {
+        throw new TypeError("Object schema parser returned an invalid output");
+    }
+    const present = HasOwn(input, DATA_KEY);
+    const parsed = field._zod.run({
+        value: present ? Get(input, DATA_KEY, input) : undefined,
+        issues: [],
+    }, context);
+    return continueParse(parsed, (child) => mergeDeclaredData(parent, child, field, present, output));
+}
+/** Preserve declared data without restoring unsafe unknown-key assignment. */
+export function preserveDeclaredObjectDataProperty(schema) {
+    if (schema._zod.def.type !== "object" || patched.has(schema))
+        return;
+    const object = schema;
+    const shape = object._zod.def.shape;
+    if (!HasOwn(shape, DATA_KEY))
+        return;
+    const field = shape[DATA_KEY];
+    let delegate = object._zod.parse;
+    const directRun = object._zod.run === delegate;
+    // Zod4.6 skips this name even in a declared shape. Validate it through its
+    // actual field parser, then define an own data property before object checks.
+    // No shared prototype or global parser changes; wrap() patches each clone.
+    const parse = (payload, context) => {
+        const input = payload.value;
+        const issueCount = payload.issues.length;
+        const result = delegate(payload, context);
+        if (!isSchemaObjectData(input))
+            return result;
+        return continueParse(result, (parent) => {
+            if (parent.memo || context.abortEarly && parent.issues.length > issueCount)
+                return parent;
+            return parseDeclaredData(parent, input, field, context);
+        });
+    };
+    // The memoizer replaces its parser from inside the first call. Keep this
+    // instance's augmentation installed even during reentrant validation, while
+    // allowing that replacement to become the delegate for subsequent calls.
+    const descriptor = {
+        __proto__: null,
+        configurable: true,
+        enumerable: true,
+        get: () => parse,
+        set(next) {
+            if (typeof next !== "function")
+                throw new TypeError("Object schema parser is unavailable");
+            if (next !== parse)
+                delegate = next;
+        },
+    };
+    DefineProperty(object._zod, "parse", descriptor);
+    if (directRun)
+        object._zod.run = parse;
+    patched.add(schema);
+}

package/esm/extensions/ext-schema-zod/src/union-diagnostics.d.ts

@@ -0,0 +1,4 @@
+import { z } from "zod";
+/** Adapt upstream #6662 for eager collection bounds without changing custom type errors. */
+export declare function preserveUnionCheckDiagnostics(schema: z.ZodType): void;
+//# sourceMappingURL=union-diagnostics.d.ts.map

package/esm/extensions/ext-schema-zod/src/union-diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"union-diagnostics.d.ts","sourceRoot":"","sources":["../../../../src/extensions/ext-schema-zod/src/union-diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmDxB,4FAA4F;AAC5F,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CA4BrE"}

package/esm/extensions/ext-schema-zod/src/union-diagnostics.js

@@ -0,0 +1,63 @@
+import { z } from "zod";
+const patched = new WeakSet();
+function isCollectionSizeRefusal(issue) {
+    return issue.code === "too_big" &&
+        (issue.origin === "array" || issue.origin === "set" || issue.origin === "map");
+}
+function selectUnionResult(results, final, union, context) {
+    for (const result of results) {
+        if (result.issues.length === 0) {
+            final.value = result.value;
+            return final;
+        }
+    }
+    let matched = results.filter((result) => !z.core.util.aborted(result));
+    if (matched.length === 0) {
+        // Only eager collection caps need the fallback. A failed custom type
+        // predicate must retain its enclosing union's original error boundary.
+        matched = results.filter((result) => !result.aborted &&
+            result.issues.every((issue) => issue.continue === true || issue.continue === false && isCollectionSizeRefusal(issue)) && result.issues.some(isCollectionSizeRefusal));
+    }
+    if (matched.length === 1) {
+        final.value = matched[0].value;
+        return matched[0];
+    }
+    final.issues.push({
+        code: "invalid_union",
+        input: final.value,
+        inst: union,
+        errors: results.map((result) => result.issues.map((issue) => z.core.util.finalizeIssue(issue, context, z.core.config()))),
+    });
+    return final;
+}
+/** Adapt upstream #6662 for eager collection bounds without changing custom type errors. */
+export function preserveUnionCheckDiagnostics(schema) {
+    const def = schema._zod.def;
+    if (def.type !== "union" || "discriminator" in def || "exclusive" in def || patched.has(schema))
+        return;
+    const union = schema;
+    const options = union._zod.def.options;
+    const previous = union._zod.parse;
+    const directRun = union._zod.run === previous;
+    const parse = (payload, context) => {
+        if (options.length === 1)
+            return options[0]._zod.run(payload, context);
+        const results = [];
+        let asynchronous = false;
+        for (const option of options) {
+            const result = option._zod.run({ value: payload.value, issues: [] }, context);
+            if (result instanceof Promise)
+                asynchronous = true;
+            else if (result.issues.length === 0)
+                return result;
+            results.push(result);
+        }
+        return asynchronous
+            ? Promise.all(results).then((resolved) => selectUnionResult(resolved, payload, union, context))
+            : selectUnionResult(results, payload, union, context);
+    };
+    union._zod.parse = parse;
+    if (directRun)
+        union._zod.run = parse;
+    patched.add(schema);
+}

package/esm/src/agent/service/application-request-credentials.d.ts

@@ -0,0 +1,3 @@
+/** Keep delegated application credentials while omitting host-private invocation authority. */
+export declare function withoutPrivateInvocationCredentials(credentials: Record<string, unknown>): Record<string, unknown>;
+//# sourceMappingURL=application-request-credentials.d.ts.map

package/esm/src/agent/service/application-request-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-request-credentials.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/service/application-request-credentials.ts"],"names":[],"mappings":"AAIA,+FAA+F;AAC/F,wBAAgB,mCAAmC,CACjD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUzB"}

package/esm/src/agent/service/application-request-credentials.js

@@ -0,0 +1,15 @@
+const IntrinsicReflectApply = Reflect.apply;
+const ObjectCreate = Object.create;
+const ObjectKeys = Object.keys;
+/** Keep delegated application credentials while omitting host-private invocation authority. */
+export function withoutPrivateInvocationCredentials(credentials) {
+    const keys = IntrinsicReflectApply(ObjectKeys, Object, [credentials]);
+    const retained = ObjectCreate(null);
+    for (let index = 0; index < keys.length; index++) {
+        const key = keys[index];
+        if (key !== "inferenceAuthToken" && key !== "sourceAuthToken") {
+            retained[key] = credentials[key];
+        }
+    }
+    return retained;
+}

package/esm/src/agent/service/broker-ingress.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"broker-ingress.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/service/broker-ingress.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAK/F,OAAO,EAGL,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAE/B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAEL,KAAK,oBAAoB,EAE1B,MAAM,iCAAiC,CAAC;AAOzC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,KAAK,2BAA2B,EAEjC,MAAM,qCAAqC,CAAC;AAgB7C,0DAA0D;AAC1D,MAAM,MAAM,sBAAsB,GAC9B,6BAA6B,GAC7B,+BAA+B,GAC/B,wBAAwB,GACxB,wBAAwB,GACxB,8BAA8B,GAC9B,6BAA6B,GAC7B,6BAA6B,GAC7B,6BAA6B,GAC7B,gCAAgC,GAChC,+BAA+B,GAC/B,oCAAoC,GACpC,wCAAwC,GACxC,qCAAqC,CAAC;AAE1C;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,SAAS,EAAE,sBAAsB;gBAA1D,MAAM,EAAE,MAAM,EAAW,SAAS,EAAE,sBAAsB;CAIhF;AAED,sEAAsE;AACtE,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,GAAG;QAC9D,eAAe,CAAC,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;KAC7D,CAAC;IACF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC,aAAa,CAAC,CAAC;IAC/D,QAAQ,CAAC,WAAW,CAAC,EAAE,yBAAyB,CAAC,aAAa,CAAC,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;CACtC;AAED,kFAAkF;AAClF,MAAM,WAAW,kCAAkC,CAAC,cAAc;IAChE,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC9C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,wEAAwE;AACxE,MAAM,WAAW,gCAAgC,CAAC,cAAc;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,mBAAmB,CAAC;IACrC,WAAW,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACrD,aAAa,EAAE,mBAAmB,CAAC;IACnC,cAAc,CACZ,KAAK,EAAE,uBAAuB,GAC7B,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,oEAAoE;AACpE,MAAM,WAAW,yBAAyB,CAAC,cAAc;IACvD,gBAAgB,EAAE,kCAAkC,CAAC,cAAc,CAAC,CAAC;IACrE,QAAQ,EAAE,+BAA+B,CAAC;CAC3C;AAED,uFAAuF;AACvF,wBAAsB,8BAA8B,CAAC,cAAc,EACjE,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,gCAAgC,CAAC,cAAc,CAAC,GACxD,OAAO,CAAC,yBAAyB,CAAC,cAAc,CAAC,CAAC,CAyKpD"}
+{"version":3,"file":"broker-ingress.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/service/broker-ingress.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAK/F,OAAO,EAGL,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAE/B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAEL,KAAK,oBAAoB,EAE1B,MAAM,iCAAiC,CAAC;AAOzC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,KAAK,2BAA2B,EAEjC,MAAM,qCAAqC,CAAC;AAiB7C,0DAA0D;AAC1D,MAAM,MAAM,sBAAsB,GAC9B,6BAA6B,GAC7B,+BAA+B,GAC/B,wBAAwB,GACxB,wBAAwB,GACxB,8BAA8B,GAC9B,6BAA6B,GAC7B,6BAA6B,GAC7B,6BAA6B,GAC7B,gCAAgC,GAChC,+BAA+B,GAC/B,oCAAoC,GACpC,wCAAwC,GACxC,qCAAqC,CAAC;AAE1C;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,SAAS,EAAE,sBAAsB;gBAA1D,MAAM,EAAE,MAAM,EAAW,SAAS,EAAE,sBAAsB;CAIhF;AAED,sEAAsE;AACtE,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,GAAG;QAC9D,eAAe,CAAC,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;KAC7D,CAAC;IACF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC,aAAa,CAAC,CAAC;IAC/D,QAAQ,CAAC,WAAW,CAAC,EAAE,yBAAyB,CAAC,aAAa,CAAC,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;CACtC;AAED,kFAAkF;AAClF,MAAM,WAAW,kCAAkC,CAAC,cAAc;IAChE,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC9C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,wEAAwE;AACxE,MAAM,WAAW,gCAAgC,CAAC,cAAc;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,mBAAmB,CAAC;IACrC,WAAW,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACrD,aAAa,EAAE,mBAAmB,CAAC;IACnC,cAAc,CACZ,KAAK,EAAE,uBAAuB,GAC7B,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,oEAAoE;AACpE,MAAM,WAAW,yBAAyB,CAAC,cAAc;IACvD,gBAAgB,EAAE,kCAAkC,CAAC,cAAc,CAAC,CAAC;IACrE,QAAQ,EAAE,+BAA+B,CAAC;CAC3C;AAED,uFAAuF;AACvF,wBAAsB,8BAA8B,CAAC,cAAc,EACjE,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,gCAAgC,CAAC,cAAc,CAAC,GACxD,OAAO,CAAC,yBAAyB,CAAC,cAAc,CAAC,CAAC,CA0KpD"}

package/esm/src/agent/service/broker-ingress.js

@@ -21,6 +21,7 @@ const forbiddenForwardedAuthorityFields = new Set([
     "authorization",
     "authtoken",
     "inferenceauthtoken",
+    "sourceauthtoken",
     "credential",
     "credentials",
     "runeventtoken",
@@ -169,6 +170,7 @@ export async function parseBrokerRuntimeAgentIngress(request, options) {
         apiAuthToken,
         runEventToken,
         invocation.credentials?.inferenceAuthToken,
+        invocation.credentials?.sourceAuthToken,
         stopToken,
     ])) {
         throw new BrokerIngressError(403, "BROKER_INGRESS_SCOPE_DENIED");

package/esm/src/agent/service/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/service/routes.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAKzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,KAAK,uBAAuB,EAG7B,MAAM,kCAAkC,CAAC;AAK1C,OAAO,EACL,KAAK,iCAAiC,EAEtC,KAAK,4CAA4C,EAClD,MAAM,WAAW,CAAC;AAcnB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EACL,KAAK,2BAA2B,EAEjC,MAAM,qCAAqC,CAAC;AA2E7C,kEAAkE;AAClE,MAAM,MAAM,8BAA8B,GAAG;IAC3C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACrE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAClE,CAAC;AAEF,2DAA2D;AAC3D,MAAM,MAAM,wBAAwB,GAAG,8BAA8B,CAAC;AAEtE,iEAAiE;AACjE,MAAM,MAAM,6BAA6B,GAAG,CAAC,OAAO,EAClD,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,KAC9B,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,0DAA0D;AAC1D,MAAM,MAAM,uBAAuB,GAAG,6BAA6B,CAAC;AAEpE,2EAA2E;AAC3E,MAAM,MAAM,sCAAsC,GAAG,MAAM,CACzD,MAAM,EACN,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,SAAS,CACtF,CAAC;AAEF,oEAAoE;AACpE,MAAM,MAAM,gCAAgC,GAAG,sCAAsC,CAAC;AAEtF,+DAA+D;AAC/D,MAAM,MAAM,sCAAsC,CAAC,UAAU,SAAS,MAAM,IAAI,UAAU,GAAG;IAC3F,kBAAkB,EAAE,WAAW,CAAC;IAChC,SAAS,EAAE,kBAAkB,CAAC;CAC/B,CAAC;AAEF,wDAAwD;AACxD,MAAM,MAAM,gCAAgC,CAAC,UAAU,SAAS,MAAM,IACpE,sCAAsC,CAAC,UAAU,CAAC,CAAC;AAErD,6EAA6E;AAC7E,MAAM,MAAM,wCAAwC,CAAC,UAAU,SAAS,MAAM,IAAI;IAChF,SAAS,EAAE,UAAU,CAAC;IACtB,WAAW,EAAE,WAAW,CAAC;IACzB,uFAAuF;IACvF,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,0DAA0D;AAC1D,MAAM,MAAM,kCAAkC,CAAC,UAAU,SAAS,MAAM,IACtE,wCAAwC,CAAC,UAAU,CAAC,CAAC;AAEvD,+DAA+D;AAC/D,MAAM,MAAM,sCAAsC,CAAC,UAAU,SAAS,MAAM,IAAI;IAC9E,SAAS,EAAE,UAAU,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,wDAAwD;AACxD,MAAM,MAAM,gCAAgC,CAAC,UAAU,SAAS,MAAM,IACpE,sCAAsC,CAAC,UAAU,CAAC,CAAC;AAErD,0DAA0D;AAC1D,MAAM,MAAM,iCAAiC,CAAC,UAAU,SAAS,MAAM,IAAI;IACzE,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sEAAsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,mFAAmF;IACnF,aAAa,CAAC,EAAE,2BAA2B,CAAC;IAC5C,mBAAmB,EAAE,CACnB,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,iCAAiC,GAAG,QAAQ,CAAC,CAAC;IAC3D,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CACpE;QACE,OAAO,EAAE,IAAI,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG;QACF,OAAO,EAAE,KAAK,CAAC;QACf,KAAK,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;KACnE,CACF,CAAC;IACF,0EAA0E;IAC1E,sBAAsB,CAAC,EAAE,CACvB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KACvD,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,yBAAyB,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;KACf,KAAK,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAC5D,0FAA0F;IAC1F,0BAA0B,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3F,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAC7C,gBAAgB,EAAE,CAAC,GAAG,EAAE,uBAAuB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACxE,6BAA6B,EAAE,CAC7B,KAAK,EAAE,sCAAsC,CAAC,UAAU,CAAC,KACtD,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;IAClC,sBAAsB,EAAE,CACtB,KAAK,EAAE,wCAAwC,CAAC,UAAU,CAAC,KACxD,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,gBAAgB,CAAC,EAAE,CACjB,KAAK,EAAE,sCAAsC,CAAC,UAAU,CAAC,KACtD,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,uBAAuB,CAAC,EAAE,CAAC,UAAU,EAAE,sCAAsC,KAAK,IAAI,CAAC;IACvF,KAAK,CAAC,EAAE,6BAA6B,CAAC;IACtC,MAAM,CAAC,EAAE,8BAA8B,CAAC;IACxC;;;;;;OAMG;IACH,4BAA4B,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC7E,CAAC;AAEF,MAAM,MAAM,2BAA2B,CAAC,UAAU,SAAS,MAAM,IAC/D,iCAAiC,CAAC,UAAU,CAAC,CAAC;AAEhD,8DAA8D;AAC9D,MAAM,MAAM,0BAA0B,CAAC,UAAU,SAAS,MAAM,IAAI;IAClE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,uBAAuB,EAAE,CACvB,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,iCAAiC,GAAG,QAAQ,CAAC,CAAC;IAC3D,iCAAiC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7E,sBAAsB,EAAE,CAAC,KAAK,EAAE;QAC9B,SAAS,EAAE,kBAAkB,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,uBAAuB,GAAG,QAAQ,CAAC,CAAC;IAClD,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3D,kCAAkC,EAAE,CAAC,KAAK,EAAE;QAC1C,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxB,6CAA6C,EAAE,CAAC,KAAK,EAAE;QACrD,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxB,iCAAiC,EAAE,CAAC,KAAK,EAAE;QACzC,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;KAC3B,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,UAAU,SAAS,MAAM,IAAI,0BAA0B,CACtF,UAAU,CACX,CAAC;AAmFF,6CAA6C;AAC7C,wBAAgB,gCAAgC,CAAC,UAAU,SAAS,MAAM,EACxE,OAAO,EAAE,iCAAiC,CAAC,UAAU,CAAC,GACrD,0BAA0B,CAAC,UAAU,CAAC,CA4YxC;AAED,eAAO,MAAM,0BAA0B,yCAAmC,CAAC"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/service/routes.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAKzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,KAAK,uBAAuB,EAG7B,MAAM,kCAAkC,CAAC;AAK1C,OAAO,EACL,KAAK,iCAAiC,EAEtC,KAAK,4CAA4C,EAClD,MAAM,WAAW,CAAC;AAenB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EACL,KAAK,2BAA2B,EAEjC,MAAM,qCAAqC,CAAC;AA+D7C,kEAAkE;AAClE,MAAM,MAAM,8BAA8B,GAAG;IAC3C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACrE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAClE,CAAC;AAEF,2DAA2D;AAC3D,MAAM,MAAM,wBAAwB,GAAG,8BAA8B,CAAC;AAEtE,iEAAiE;AACjE,MAAM,MAAM,6BAA6B,GAAG,CAAC,OAAO,EAClD,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,KAC9B,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,0DAA0D;AAC1D,MAAM,MAAM,uBAAuB,GAAG,6BAA6B,CAAC;AAEpE,2EAA2E;AAC3E,MAAM,MAAM,sCAAsC,GAAG,MAAM,CACzD,MAAM,EACN,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,SAAS,CACtF,CAAC;AAEF,oEAAoE;AACpE,MAAM,MAAM,gCAAgC,GAAG,sCAAsC,CAAC;AAEtF,+DAA+D;AAC/D,MAAM,MAAM,sCAAsC,CAAC,UAAU,SAAS,MAAM,IAAI,UAAU,GAAG;IAC3F,kBAAkB,EAAE,WAAW,CAAC;IAChC,SAAS,EAAE,kBAAkB,CAAC;CAC/B,CAAC;AAEF,wDAAwD;AACxD,MAAM,MAAM,gCAAgC,CAAC,UAAU,SAAS,MAAM,IACpE,sCAAsC,CAAC,UAAU,CAAC,CAAC;AAErD,6EAA6E;AAC7E,MAAM,MAAM,wCAAwC,CAAC,UAAU,SAAS,MAAM,IAAI;IAChF,SAAS,EAAE,UAAU,CAAC;IACtB,WAAW,EAAE,WAAW,CAAC;IACzB,uFAAuF;IACvF,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,0DAA0D;AAC1D,MAAM,MAAM,kCAAkC,CAAC,UAAU,SAAS,MAAM,IACtE,wCAAwC,CAAC,UAAU,CAAC,CAAC;AAEvD,+DAA+D;AAC/D,MAAM,MAAM,sCAAsC,CAAC,UAAU,SAAS,MAAM,IAAI;IAC9E,SAAS,EAAE,UAAU,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,wDAAwD;AACxD,MAAM,MAAM,gCAAgC,CAAC,UAAU,SAAS,MAAM,IACpE,sCAAsC,CAAC,UAAU,CAAC,CAAC;AAErD,0DAA0D;AAC1D,MAAM,MAAM,iCAAiC,CAAC,UAAU,SAAS,MAAM,IAAI;IACzE,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sEAAsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,mFAAmF;IACnF,aAAa,CAAC,EAAE,2BAA2B,CAAC;IAC5C,mBAAmB,EAAE,CACnB,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,iCAAiC,GAAG,QAAQ,CAAC,CAAC;IAC3D,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CACpE;QACE,OAAO,EAAE,IAAI,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG;QACF,OAAO,EAAE,KAAK,CAAC;QACf,KAAK,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;KACnE,CACF,CAAC;IACF,0EAA0E;IAC1E,sBAAsB,CAAC,EAAE,CACvB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KACvD,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,yBAAyB,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;KACf,KAAK,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAC5D,0FAA0F;IAC1F,0BAA0B,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3F,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,OAAO,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAC7C,gBAAgB,EAAE,CAAC,GAAG,EAAE,uBAAuB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACxE,6BAA6B,EAAE,CAC7B,KAAK,EAAE,sCAAsC,CAAC,UAAU,CAAC,KACtD,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;IAClC,sBAAsB,EAAE,CACtB,KAAK,EAAE,wCAAwC,CAAC,UAAU,CAAC,KACxD,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,gBAAgB,CAAC,EAAE,CACjB,KAAK,EAAE,sCAAsC,CAAC,UAAU,CAAC,KACtD,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,uBAAuB,CAAC,EAAE,CAAC,UAAU,EAAE,sCAAsC,KAAK,IAAI,CAAC;IACvF,KAAK,CAAC,EAAE,6BAA6B,CAAC;IACtC,MAAM,CAAC,EAAE,8BAA8B,CAAC;IACxC;;;;;;OAMG;IACH,4BAA4B,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC7E,CAAC;AAEF,MAAM,MAAM,2BAA2B,CAAC,UAAU,SAAS,MAAM,IAC/D,iCAAiC,CAAC,UAAU,CAAC,CAAC;AAEhD,8DAA8D;AAC9D,MAAM,MAAM,0BAA0B,CAAC,UAAU,SAAS,MAAM,IAAI;IAClE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,uBAAuB,EAAE,CACvB,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,iCAAiC,GAAG,QAAQ,CAAC,CAAC;IAC3D,iCAAiC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7E,sBAAsB,EAAE,CAAC,KAAK,EAAE;QAC9B,SAAS,EAAE,kBAAkB,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,uBAAuB,GAAG,QAAQ,CAAC,CAAC;IAClD,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3D,kCAAkC,EAAE,CAAC,KAAK,EAAE;QAC1C,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxB,6CAA6C,EAAE,CAAC,KAAK,EAAE;QACrD,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxB,iCAAiC,EAAE,CAAC,KAAK,EAAE;QACzC,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;KAC3B,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,UAAU,SAAS,MAAM,IAAI,0BAA0B,CACtF,UAAU,CACX,CAAC;AAmFF,6CAA6C;AAC7C,wBAAgB,gCAAgC,CAAC,UAAU,SAAS,MAAM,EACxE,OAAO,EAAE,iCAAiC,CAAC,UAAU,CAAC,GACrD,0BAA0B,CAAC,UAAU,CAAC,CA4YxC;AAED,eAAO,MAAM,0BAA0B,yCAAmC,CAAC"}

package/esm/src/agent/service/routes.js

@@ -10,6 +10,7 @@ import { parseHostedChatRequestFromRequest, parseRuntimeAgentRunInvocationHosted
 import { classifyHostedChatSetupError, executeHostedDurableChatRun, } from "../hosted/durable-chat-run-start.js";
 import { HostedServiceAuthError, } from "./auth.js";
 import { createRequestAuthCache } from "./request-auth-cache.js";
+import { withoutPrivateInvocationCredentials } from "./application-request-credentials.js";
 import { cancelUnusedRequestBody, createApplicationRequest, createApplicationRequestHeaders, } from "../../security/http/application-request.js";
 import { assertNativeBodyProcessing } from "../../security/http/native-body-processing.js";
 import { assertNativeHeaderProcessing } from "../../security/http/native-header-processing.js";
@@ -45,8 +46,6 @@ const ResponseHeadersGet = Object.getOwnPropertyDescriptor(NativeResponse.protot
     ?.get;
 const ResponseStatusGet = Object.getOwnPropertyDescriptor(NativeResponse.prototype, "status")?.get;
 const ResponseStatusTextGet = Object.getOwnPropertyDescriptor(NativeResponse.prototype, "statusText")?.get;
-const ObjectCreate = Object.create;
-const ObjectKeys = Object.keys;
 const ArrayIsArray = Array.isArray;
 const JsonParse = JSON.parse;
 const JsonStringify = JSON.stringify;
@@ -66,16 +65,6 @@ function isCredentialRecord(value) {
     return typeof value === "object" && value !== null &&
         !IntrinsicReflectApply(ArrayIsArray, Array, [value]);
 }
-function withoutInferenceCredential(credentials) {
-    const keys = IntrinsicReflectApply(ObjectKeys, Object, [credentials]);
-    const retained = ObjectCreate(null);
-    for (let index = 0; index < keys.length; index++) {
-        const key = keys[index];
-        if (key !== "inferenceAuthToken")
-            retained[key] = credentials[key];
-    }
-    return retained;
-}
 function defaultTrace(_operationName, operation) {
     return operation();
 }
@@ -91,7 +80,7 @@ async function createRuntimeInvocationApplicationRequest(request) {
     const sanitizedPayload = isCredentialRecord(credentials)
         ? {
             ...payload,
-            credentials: withoutInferenceCredential(credentials),
+            credentials: withoutPrivateInvocationCredentials(credentials),
         }
         : payload;
     assertNativeHeaderProcessing();

package/esm/src/discovery/embedded-npm-packages.generated.js

@@ -537,8 +537,8 @@ export const EMBEDDED_NPM_PACKAGES = {
     "pg-protocol": ["1.16.1"],
     "pg-types": ["2.2.0"],
     "picocolors": ["1.1.1"],
-    "playwright": ["1.60.0"],
-    "playwright-core": ["1.60.0"],
+    "playwright": ["1.61.1"],
+    "playwright-core": ["1.61.1"],
     "postcss": ["8.5.29"],
     "postcss-selector-parser": ["7.1.6"],
     "postgres-array": ["2.0.0"],
@@ -640,7 +640,7 @@ export const EMBEDDED_NPM_PACKAGES = {
     "yaml": ["2.9.0"],
     "yargs": ["17.7.3"],
     "yargs-parser": ["21.1.1"],
-    "zod": ["4.3.6"],
+    "zod": ["4.6.7"],
     "zwitch": ["2.0.4"],
 };
 /**
@@ -859,7 +859,7 @@ export const PROXY_EMBEDDED_NPM_PACKAGES = {
     "yaml": ["2.9.1"],
     "yargs": ["17.7.3"],
     "yargs-parser": ["21.1.1"],
-    "zod": ["4.3.6"],
+    "zod": ["4.6.7"],
 };
 /**
  * Every `npm:` import constraint the FULL binary can resolve, by package name
@@ -934,7 +934,7 @@ export const EMBEDDED_NPM_CONSTRAINTS = {
     "micromark-util-types": ["2.0.2"],
     "parse5": ["7.3.0"],
     "pdf-lib": ["1.17.1"],
-    "playwright": ["1.60.0"],
+    "playwright": ["1.61.1"],
     "postcss": ["8.5.29"],
     "postcss-selector-parser": ["7.1.6"],
     "protobufjs": ["7.6.5"],
@@ -962,7 +962,7 @@ export const EMBEDDED_NPM_CONSTRAINTS = {
     "vfile": ["6.0.3"],
     "ws": ["8.21.1"],
     "yaml": ["2.9.0"],
-    "zod": ["4.3.6"],
+    "zod": ["4.6.7"],
 };
 /** The same, for the PROXY binary. */
 // deno-fmt-ignore -- one package per line keeps the generated diff readable.
@@ -988,5 +988,5 @@ export const PROXY_EMBEDDED_NPM_CONSTRAINTS = {
     "ajv-formats": ["3.0.1"],
     "jose": ["5.9.6"],
     "redis": ["5.11.0"],
-    "zod": ["4.3.6"],
+    "zod": ["4.6.7"],
 };