@agent-native/core 0.92.12 → 0.94.0

package/dist/integrations/controls-store.js

@@ -0,0 +1,129 @@
+import { randomUUID } from "node:crypto";
+import { getDbExec, intType, isPostgres } from "../db/client.js";
+import { ensureColumnExists, ensureIndexExists, ensureTableExists, } from "../db/ddl-guard.js";
+import { isDuplicateColumnError } from "../db/migrations.js";
+let initPromise;
+async function ensureTable() {
+    if (!initPromise) {
+        initPromise = (async () => {
+            const sql = `CREATE TABLE IF NOT EXISTS integration_controls (
+        id TEXT PRIMARY KEY,
+        action TEXT NOT NULL,
+        owner_email TEXT NOT NULL,
+        org_id TEXT,
+        requester_id TEXT NOT NULL,
+        team_id TEXT NOT NULL,
+        api_app_id TEXT,
+        channel_id TEXT NOT NULL,
+        message_ts TEXT NOT NULL,
+        run_id TEXT,
+        approval_key TEXT,
+        incoming_json TEXT NOT NULL,
+        status TEXT NOT NULL DEFAULT 'pending',
+        expires_at ${intType()} NOT NULL,
+        created_at ${intType()} NOT NULL,
+        claimed_at ${intType()}
+      )`;
+            if (isPostgres()) {
+                await ensureTableExists("integration_controls", sql);
+                await ensureColumnExists("integration_controls", "api_app_id", "ALTER TABLE integration_controls ADD COLUMN IF NOT EXISTS api_app_id TEXT");
+                await ensureIndexExists("idx_integration_controls_expiry", "CREATE INDEX IF NOT EXISTS idx_integration_controls_expiry ON integration_controls(status, expires_at)");
+            }
+            else {
+                await getDbExec().execute(sql);
+                try {
+                    await getDbExec().execute("ALTER TABLE integration_controls ADD COLUMN api_app_id TEXT");
+                }
+                catch (error) {
+                    if (!isDuplicateColumnError(error))
+                        throw error;
+                }
+                await getDbExec().execute("CREATE INDEX IF NOT EXISTS idx_integration_controls_expiry ON integration_controls(status, expires_at)");
+            }
+        })().catch((error) => {
+            initPromise = undefined;
+            throw error;
+        });
+    }
+    return initPromise;
+}
+export function _resetIntegrationControlsStoreForTests() {
+    initPromise = undefined;
+}
+function rowToControl(row) {
+    return {
+        id: String(row.id),
+        action: row.action,
+        ownerEmail: String(row.owner_email),
+        orgId: row.org_id == null ? null : String(row.org_id),
+        requesterId: String(row.requester_id),
+        teamId: String(row.team_id),
+        apiAppId: row.api_app_id == null ? null : String(row.api_app_id),
+        channelId: String(row.channel_id),
+        messageTs: String(row.message_ts),
+        runId: row.run_id == null ? null : String(row.run_id),
+        approvalKey: row.approval_key == null ? null : String(row.approval_key),
+        incoming: JSON.parse(String(row.incoming_json)),
+        status: row.status,
+        expiresAt: Number(row.expires_at),
+    };
+}
+export async function createIntegrationControl(input) {
+    await ensureTable();
+    const id = `ctl_${randomUUID().replaceAll("-", "")}`;
+    const now = Date.now();
+    await getDbExec().execute({
+        sql: `INSERT INTO integration_controls
+      (id, action, owner_email, org_id, requester_id, team_id, api_app_id, channel_id,
+       message_ts, run_id, approval_key, incoming_json, status, expires_at, created_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'pending', ?, ?)`,
+        args: [
+            id,
+            input.action,
+            input.ownerEmail.toLowerCase(),
+            input.orgId ?? null,
+            input.requesterId,
+            input.teamId,
+            input.apiAppId ?? null,
+            input.channelId,
+            input.messageTs,
+            input.runId ?? null,
+            input.approvalKey ?? null,
+            JSON.stringify(input.incoming),
+            now + (input.ttlMs ?? 15 * 60_000),
+            now,
+        ],
+    });
+    return id;
+}
+/** Atomically bind a one-shot Slack button to its original requester/thread. */
+export async function claimIntegrationControl(input) {
+    await ensureTable();
+    const now = Date.now();
+    const result = await getDbExec().execute({
+        sql: `UPDATE integration_controls SET status = 'claimed', claimed_at = ?
+      WHERE id = ? AND action = ? AND requester_id = ? AND team_id = ?
+        AND (api_app_id IS NULL OR api_app_id = ?)
+        AND channel_id = ? AND message_ts = ? AND status = 'pending'
+        AND expires_at > ?`,
+        args: [
+            now,
+            input.id,
+            input.action,
+            input.requesterId,
+            input.teamId,
+            input.apiAppId ?? "",
+            input.channelId,
+            input.messageTs,
+            now,
+        ],
+    });
+    if (result.rowsAffected === 0)
+        return null;
+    const { rows } = await getDbExec().execute({
+        sql: "SELECT * FROM integration_controls WHERE id = ? LIMIT 1",
+        args: [input.id],
+    });
+    return rows[0] ? rowToControl(rows[0]) : null;
+}
+//# sourceMappingURL=controls-store.js.map

package/dist/integrations/controls-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controls-store.js","sourceRoot":"","sources":["../../src/integrations/controls-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAG7D,IAAI,WAAsC,CAAC;AAqB3C,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,GAAG,GAAG;;;;;;;;;;;;;;qBAcG,OAAO,EAAE;qBACT,OAAO,EAAE;qBACT,OAAO,EAAE;QACtB,CAAC;YACH,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,MAAM,iBAAiB,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;gBACrD,MAAM,kBAAkB,CACtB,sBAAsB,EACtB,YAAY,EACZ,2EAA2E,CAC5E,CAAC;gBACF,MAAM,iBAAiB,CACrB,iCAAiC,EACjC,wGAAwG,CACzG,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,SAAS,EAAE,CAAC,OAAO,CACvB,6DAA6D,CAC9D,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;wBAAE,MAAM,KAAK,CAAC;gBAClD,CAAC;gBACD,MAAM,SAAS,EAAE,CAAC,OAAO,CACvB,wGAAwG,CACzG,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACnB,WAAW,GAAG,SAAS,CAAC;YACxB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,sCAAsC;IACpD,WAAW,GAAG,SAAS,CAAC;AAC1B,CAAC;AAED,SAAS,YAAY,CAAC,GAA4B;IAChD,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,EAAE,GAAG,CAAC,MAAkC;QAC9C,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;QACnC,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QACrD,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;QACrC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;QAC3B,QAAQ,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QAChE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QACrD,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;QACvE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAoB;QAClE,MAAM,EAAE,GAAG,CAAC,MAAsC;QAClD,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAa9C;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,OAAO,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE;;;mEAG0D;QAC/D,IAAI,EAAE;YACJ,EAAE;YACF,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;YAC9B,KAAK,CAAC,KAAK,IAAI,IAAI;YACnB,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,QAAQ,IAAI,IAAI;YACtB,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,KAAK,IAAI,IAAI;YACnB,KAAK,CAAC,WAAW,IAAI,IAAI;YACzB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC9B,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,CAAC;YAClC,GAAG;SACJ;KACF,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAQ7C;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE;;;;2BAIkB;QACvB,IAAI,EAAE;YACJ,GAAG;YACH,KAAK,CAAC,EAAE;YACR,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,QAAQ,IAAI,EAAE;YACpB,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,SAAS;YACf,GAAG;SACJ;KACF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACzC,GAAG,EAAE,yDAAyD;QAC9D,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;KACjB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\n\nimport { getDbExec, intType, isPostgres } from \"../db/client.js\";\nimport {\n  ensureColumnExists,\n  ensureIndexExists,\n  ensureTableExists,\n} from \"../db/ddl-guard.js\";\nimport { isDuplicateColumnError } from \"../db/migrations.js\";\nimport type { IncomingMessage } from \"./types.js\";\n\nlet initPromise: Promise<void> | undefined;\n\nexport type IntegrationControlAction = \"approve\" | \"deny\" | \"cancel\";\n\nexport interface IntegrationControl {\n  id: string;\n  action: IntegrationControlAction;\n  ownerEmail: string;\n  orgId: string | null;\n  requesterId: string;\n  teamId: string;\n  apiAppId: string | null;\n  channelId: string;\n  messageTs: string;\n  runId: string | null;\n  approvalKey: string | null;\n  incoming: IncomingMessage;\n  status: \"pending\" | \"claimed\" | \"expired\";\n  expiresAt: number;\n}\n\nasync function ensureTable(): Promise<void> {\n  if (!initPromise) {\n    initPromise = (async () => {\n      const sql = `CREATE TABLE IF NOT EXISTS integration_controls (\n        id TEXT PRIMARY KEY,\n        action TEXT NOT NULL,\n        owner_email TEXT NOT NULL,\n        org_id TEXT,\n        requester_id TEXT NOT NULL,\n        team_id TEXT NOT NULL,\n        api_app_id TEXT,\n        channel_id TEXT NOT NULL,\n        message_ts TEXT NOT NULL,\n        run_id TEXT,\n        approval_key TEXT,\n        incoming_json TEXT NOT NULL,\n        status TEXT NOT NULL DEFAULT 'pending',\n        expires_at ${intType()} NOT NULL,\n        created_at ${intType()} NOT NULL,\n        claimed_at ${intType()}\n      )`;\n      if (isPostgres()) {\n        await ensureTableExists(\"integration_controls\", sql);\n        await ensureColumnExists(\n          \"integration_controls\",\n          \"api_app_id\",\n          \"ALTER TABLE integration_controls ADD COLUMN IF NOT EXISTS api_app_id TEXT\",\n        );\n        await ensureIndexExists(\n          \"idx_integration_controls_expiry\",\n          \"CREATE INDEX IF NOT EXISTS idx_integration_controls_expiry ON integration_controls(status, expires_at)\",\n        );\n      } else {\n        await getDbExec().execute(sql);\n        try {\n          await getDbExec().execute(\n            \"ALTER TABLE integration_controls ADD COLUMN api_app_id TEXT\",\n          );\n        } catch (error) {\n          if (!isDuplicateColumnError(error)) throw error;\n        }\n        await getDbExec().execute(\n          \"CREATE INDEX IF NOT EXISTS idx_integration_controls_expiry ON integration_controls(status, expires_at)\",\n        );\n      }\n    })().catch((error) => {\n      initPromise = undefined;\n      throw error;\n    });\n  }\n  return initPromise;\n}\n\nexport function _resetIntegrationControlsStoreForTests(): void {\n  initPromise = undefined;\n}\n\nfunction rowToControl(row: Record<string, unknown>): IntegrationControl {\n  return {\n    id: String(row.id),\n    action: row.action as IntegrationControlAction,\n    ownerEmail: String(row.owner_email),\n    orgId: row.org_id == null ? null : String(row.org_id),\n    requesterId: String(row.requester_id),\n    teamId: String(row.team_id),\n    apiAppId: row.api_app_id == null ? null : String(row.api_app_id),\n    channelId: String(row.channel_id),\n    messageTs: String(row.message_ts),\n    runId: row.run_id == null ? null : String(row.run_id),\n    approvalKey: row.approval_key == null ? null : String(row.approval_key),\n    incoming: JSON.parse(String(row.incoming_json)) as IncomingMessage,\n    status: row.status as IntegrationControl[\"status\"],\n    expiresAt: Number(row.expires_at),\n  };\n}\n\nexport async function createIntegrationControl(input: {\n  action: IntegrationControlAction;\n  ownerEmail: string;\n  orgId?: string | null;\n  requesterId: string;\n  teamId: string;\n  apiAppId?: string | null;\n  channelId: string;\n  messageTs: string;\n  runId?: string | null;\n  approvalKey?: string | null;\n  incoming: IncomingMessage;\n  ttlMs?: number;\n}): Promise<string> {\n  await ensureTable();\n  const id = `ctl_${randomUUID().replaceAll(\"-\", \"\")}`;\n  const now = Date.now();\n  await getDbExec().execute({\n    sql: `INSERT INTO integration_controls\n      (id, action, owner_email, org_id, requester_id, team_id, api_app_id, channel_id,\n       message_ts, run_id, approval_key, incoming_json, status, expires_at, created_at)\n      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'pending', ?, ?)`,\n    args: [\n      id,\n      input.action,\n      input.ownerEmail.toLowerCase(),\n      input.orgId ?? null,\n      input.requesterId,\n      input.teamId,\n      input.apiAppId ?? null,\n      input.channelId,\n      input.messageTs,\n      input.runId ?? null,\n      input.approvalKey ?? null,\n      JSON.stringify(input.incoming),\n      now + (input.ttlMs ?? 15 * 60_000),\n      now,\n    ],\n  });\n  return id;\n}\n\n/** Atomically bind a one-shot Slack button to its original requester/thread. */\nexport async function claimIntegrationControl(input: {\n  id: string;\n  action: IntegrationControlAction;\n  requesterId: string;\n  teamId: string;\n  apiAppId?: string;\n  channelId: string;\n  messageTs: string;\n}): Promise<IntegrationControl | null> {\n  await ensureTable();\n  const now = Date.now();\n  const result = await getDbExec().execute({\n    sql: `UPDATE integration_controls SET status = 'claimed', claimed_at = ?\n      WHERE id = ? AND action = ? AND requester_id = ? AND team_id = ?\n        AND (api_app_id IS NULL OR api_app_id = ?)\n        AND channel_id = ? AND message_ts = ? AND status = 'pending'\n        AND expires_at > ?`,\n    args: [\n      now,\n      input.id,\n      input.action,\n      input.requesterId,\n      input.teamId,\n      input.apiAppId ?? \"\",\n      input.channelId,\n      input.messageTs,\n      now,\n    ],\n  });\n  if (result.rowsAffected === 0) return null;\n  const { rows } = await getDbExec().execute({\n    sql: \"SELECT * FROM integration_controls WHERE id = ? LIMIT 1\",\n    args: [input.id],\n  });\n  return rows[0] ? rowToControl(rows[0] as Record<string, unknown>) : null;\n}\n"]}

package/dist/integrations/index.d.ts

@@ -1,15 +1,30 @@
-export type { PlatformAdapter, IncomingMessage, OutgoingMessage, IntegrationStatus, IntegrationsPluginOptions, } from "./types.js";
+export type { PlatformAdapter, IncomingMessage, OutgoingMessage, IntegrationStatus, IntegrationsPluginOptions, ImmediateWebhookResponse, PlatformAdapterCapabilities, UnsupportedPlatformCapabilityError, IntegrationExecutionContext, IntegrationActorTrust, IntegrationContextMessage, IntegrationFileReference, IntegrationConversationType, IntegrationTriggerKind, PlatformRunProgress, } from "./types.js";
+export { assertPlatformCapability } from "./types.js";
+export { BUILT_IN_INTEGRATION_CATALOG, INTEGRATION_CATEGORIES, getIntegrationCatalogEntry, listBuiltInChannelIntegrations, listIntegrationCatalog, type BuiltInChannelId, type AutomationCapabilities, type ChannelCapabilities, type IntegrationAvailability, type IntegrationCatalogEntry, type IntegrationCategory, type IntegrationCredentialRequirement, type IntegrationIconKey, type IntegrationSupportMaturity, } from "./catalog.js";
 export { createIntegrationsPlugin, defaultIntegrationsPlugin, enqueueRemoteCommand, } from "./plugin.js";
-export { listRemoteDevicesForOwner, revokeRemoteDeviceForOwner, unregisterRemoteDevice, } from "./remote-devices-store.js";
-export { listRemoteCommandsForOwner } from "./remote-commands-store.js";
+export { getRemoteComputerCapabilities, listRemoteDevicesForOwner, revokeRemoteDeviceForOwner, unregisterRemoteDevice, } from "./remote-devices-store.js";
+export { claimNextComputerCommand, enqueueComputerCommand, listRemoteCommandsForOwner, } from "./remote-commands-store.js";
+export { assertValidComputerCommandEnvelope, computeComputerActionHash, computerOperationRequiresApproval, ComputerSupervisionError, } from "./computer-supervision.js";
+export { authorizeComputerOperation, createComputerApprovalRequest, decideComputerApproval, getComputerApprovalForOwner, listComputerApprovalsForOwner, type ComputerApprovalRecord, type ComputerApprovalStatus, } from "./computer-supervision-store.js";
+export { insertRemoteLiveViewEvents } from "./remote-run-events-store.js";
 export { listRemotePushNotificationsForOwner, listRemotePushRegistrationsForOwner, queueRemotePushNotifications, toPublicRemotePushRegistration, unregisterRemotePushRegistrationForOwner, upsertRemotePushRegistration, } from "./remote-push-store.js";
-export type { PublicRemotePushRegistration, PublicRemoteDevice, RemoteCommand, RemoteDevice, RemotePushNotification, RemotePushRegistration, RemoteRunEvent, } from "./remote-types.js";
+export type { ComputerApprovalScope, ComputerCommandAction, ComputerCommandEnvelope, ComputerOperationClass, PublicRemotePushRegistration, PublicRemoteDevice, RemoteComputerCapabilities, RemoteCommand, RemoteDevice, RemoteDeviceMetadata, RemoteLiveViewEvent, RemotePushNotification, RemotePushRegistration, RemoteRunEvent, } from "./remote-types.js";
 export { slackAdapter } from "./adapters/slack.js";
 export { telegramAdapter } from "./adapters/telegram.js";
 export { whatsappAdapter } from "./adapters/whatsapp.js";
+export { discordAdapter } from "./adapters/discord.js";
+export { clearMicrosoftTeamsAccessTokenCache, getMicrosoftTeamsAccessToken, microsoftTeamsAdapter, } from "./adapters/microsoft-teams.js";
 export { googleDocsAdapter } from "./adapters/google-docs.js";
 export { emailAdapter } from "./adapters/email.js";
 export { startGoogleDocsPoller, stopGoogleDocsPoller, handlePushNotification, } from "./google-docs-poller.js";
 export { getIntegrationConfig, saveIntegrationConfig, deleteIntegrationConfig, listIntegrationConfigs, type IntegrationConfig, } from "./config-store.js";
+export { disconnectIntegrationInstallation, getActiveIntegrationInstallationByKey, getActiveIntegrationInstallationForTenant, getIntegrationInstallation, listIntegrationInstallations, resolveIntegrationTokenBundle, updateIntegrationInstallation, upsertIntegrationInstallation, } from "./installations-store.js";
+export type { InstallationActor, IntegrationInstallation, IntegrationInstallationHealth, IntegrationInstallationStatus, IntegrationTokenBundle, } from "./installations-store.js";
+export { assertSlackInstallAccess, buildSlackAuthorizeUrl, exchangeSlackOAuthCode, refreshSlackOAuthToken, slackInstallationKey, slackOAuthResponseToInstallation, testSlackAuth, } from "./slack-oauth.js";
+export { SLACK_AGENT_BOT_EVENTS, buildSlackAgentManifest, type SlackAgentManifestUrls, } from "./slack-manifest.js";
+export { DEFAULT_INTEGRATION_SCOPE_POLICY, deleteIntegrationScope, evaluateIntegrationScopePolicy, getIntegrationScope, integrationScopeSubjectKey, listIntegrationScopes, saveIntegrationScope, } from "./scope-store.js";
+export type { IntegrationConversationTrust, IntegrationScope, IntegrationScopeAccess, IntegrationScopePolicy, } from "./scope-store.js";
+export { getIntegrationBudgetSnapshot, getIntegrationUsageBudget, listIntegrationUsageBudgets, listIntegrationBudgetThresholdEvents, releaseIntegrationUsageBudget, reserveIntegrationUsageBudget, saveIntegrationUsageBudget, settleIntegrationUsageBudget, } from "./usage-budget-store.js";
+export type { IntegrationBudgetPeriod, IntegrationBudgetSubject, IntegrationUsageBudget, } from "./usage-budget-store.js";
 export { getThreadMapping, saveThreadMapping, deleteThreadMapping, listThreadMappings, type ThreadMapping, } from "./thread-mapping-store.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/integrations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,eAAe,EACf,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EACL,mCAAmC,EACnC,mCAAmC,EACnC,4BAA4B,EAC5B,8BAA8B,EAC9B,wCAAwC,EACxC,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,4BAA4B,EAC5B,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGnD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,iBAAiB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,KAAK,aAAa,GACnB,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,eAAe,EACf,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,kCAAkC,EAClC,2BAA2B,EAC3B,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEtD,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,8BAA8B,EAC9B,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,GAChC,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kCAAkC,EAClC,yBAAyB,EACzB,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAC7B,sBAAsB,EACtB,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EACL,mCAAmC,EACnC,mCAAmC,EACnC,4BAA4B,EAC5B,8BAA8B,EAC9B,wCAAwC,EACxC,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,EAC5B,kBAAkB,EAClB,0BAA0B,EAC1B,aAAa,EACb,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGnD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,iBAAiB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iCAAiC,EACjC,qCAAqC,EACrC,yCAAyC,EACzC,0BAA0B,EAC1B,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,6BAA6B,EAC7B,6BAA6B,EAC7B,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,gCAAgC,EAChC,aAAa,GACd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,gCAAgC,EAChC,sBAAsB,EACtB,8BAA8B,EAC9B,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,4BAA4B,EAC5B,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,2BAA2B,EAC3B,oCAAoC,EACpC,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,KAAK,aAAa,GACnB,MAAM,2BAA2B,CAAC"}

package/dist/integrations/index.js

@@ -1,17 +1,29 @@
+export { assertPlatformCapability } from "./types.js";
+export { BUILT_IN_INTEGRATION_CATALOG, INTEGRATION_CATEGORIES, getIntegrationCatalogEntry, listBuiltInChannelIntegrations, listIntegrationCatalog, } from "./catalog.js";
 // Plugin
 export { createIntegrationsPlugin, defaultIntegrationsPlugin, enqueueRemoteCommand, } from "./plugin.js";
-export { listRemoteDevicesForOwner, revokeRemoteDeviceForOwner, unregisterRemoteDevice, } from "./remote-devices-store.js";
-export { listRemoteCommandsForOwner } from "./remote-commands-store.js";
+export { getRemoteComputerCapabilities, listRemoteDevicesForOwner, revokeRemoteDeviceForOwner, unregisterRemoteDevice, } from "./remote-devices-store.js";
+export { claimNextComputerCommand, enqueueComputerCommand, listRemoteCommandsForOwner, } from "./remote-commands-store.js";
+export { assertValidComputerCommandEnvelope, computeComputerActionHash, computerOperationRequiresApproval, ComputerSupervisionError, } from "./computer-supervision.js";
+export { authorizeComputerOperation, createComputerApprovalRequest, decideComputerApproval, getComputerApprovalForOwner, listComputerApprovalsForOwner, } from "./computer-supervision-store.js";
+export { insertRemoteLiveViewEvents } from "./remote-run-events-store.js";
 export { listRemotePushNotificationsForOwner, listRemotePushRegistrationsForOwner, queueRemotePushNotifications, toPublicRemotePushRegistration, unregisterRemotePushRegistrationForOwner, upsertRemotePushRegistration, } from "./remote-push-store.js";
 // Adapters
 export { slackAdapter } from "./adapters/slack.js";
 export { telegramAdapter } from "./adapters/telegram.js";
 export { whatsappAdapter } from "./adapters/whatsapp.js";
+export { discordAdapter } from "./adapters/discord.js";
+export { clearMicrosoftTeamsAccessTokenCache, getMicrosoftTeamsAccessToken, microsoftTeamsAdapter, } from "./adapters/microsoft-teams.js";
 export { googleDocsAdapter } from "./adapters/google-docs.js";
 export { emailAdapter } from "./adapters/email.js";
 // Google Docs integration
 export { startGoogleDocsPoller, stopGoogleDocsPoller, handlePushNotification, } from "./google-docs-poller.js";
 // Stores
 export { getIntegrationConfig, saveIntegrationConfig, deleteIntegrationConfig, listIntegrationConfigs, } from "./config-store.js";
+export { disconnectIntegrationInstallation, getActiveIntegrationInstallationByKey, getActiveIntegrationInstallationForTenant, getIntegrationInstallation, listIntegrationInstallations, resolveIntegrationTokenBundle, updateIntegrationInstallation, upsertIntegrationInstallation, } from "./installations-store.js";
+export { assertSlackInstallAccess, buildSlackAuthorizeUrl, exchangeSlackOAuthCode, refreshSlackOAuthToken, slackInstallationKey, slackOAuthResponseToInstallation, testSlackAuth, } from "./slack-oauth.js";
+export { SLACK_AGENT_BOT_EVENTS, buildSlackAgentManifest, } from "./slack-manifest.js";
+export { DEFAULT_INTEGRATION_SCOPE_POLICY, deleteIntegrationScope, evaluateIntegrationScopePolicy, getIntegrationScope, integrationScopeSubjectKey, listIntegrationScopes, saveIntegrationScope, } from "./scope-store.js";
+export { getIntegrationBudgetSnapshot, getIntegrationUsageBudget, listIntegrationUsageBudgets, listIntegrationBudgetThresholdEvents, releaseIntegrationUsageBudget, reserveIntegrationUsageBudget, saveIntegrationUsageBudget, settleIntegrationUsageBudget, } from "./usage-budget-store.js";
 export { getThreadMapping, saveThreadMapping, deleteThreadMapping, listThreadMappings, } from "./thread-mapping-store.js";
 //# sourceMappingURL=index.js.map

package/dist/integrations/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":"AASA,SAAS;AACT,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EACL,mCAAmC,EACnC,mCAAmC,EACnC,4BAA4B,EAC5B,8BAA8B,EAC9B,wCAAwC,EACxC,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAWhC,WAAW;AACX,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,0BAA0B;AAC1B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAEjC,SAAS;AACT,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,GAEvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,2BAA2B,CAAC","sourcesContent":["// Types\nexport type {\n  PlatformAdapter,\n  IncomingMessage,\n  OutgoingMessage,\n  IntegrationStatus,\n  IntegrationsPluginOptions,\n} from \"./types.js\";\n\n// Plugin\nexport {\n  createIntegrationsPlugin,\n  defaultIntegrationsPlugin,\n  enqueueRemoteCommand,\n} from \"./plugin.js\";\n\nexport {\n  listRemoteDevicesForOwner,\n  revokeRemoteDeviceForOwner,\n  unregisterRemoteDevice,\n} from \"./remote-devices-store.js\";\nexport { listRemoteCommandsForOwner } from \"./remote-commands-store.js\";\nexport {\n  listRemotePushNotificationsForOwner,\n  listRemotePushRegistrationsForOwner,\n  queueRemotePushNotifications,\n  toPublicRemotePushRegistration,\n  unregisterRemotePushRegistrationForOwner,\n  upsertRemotePushRegistration,\n} from \"./remote-push-store.js\";\nexport type {\n  PublicRemotePushRegistration,\n  PublicRemoteDevice,\n  RemoteCommand,\n  RemoteDevice,\n  RemotePushNotification,\n  RemotePushRegistration,\n  RemoteRunEvent,\n} from \"./remote-types.js\";\n\n// Adapters\nexport { slackAdapter } from \"./adapters/slack.js\";\nexport { telegramAdapter } from \"./adapters/telegram.js\";\nexport { whatsappAdapter } from \"./adapters/whatsapp.js\";\nexport { googleDocsAdapter } from \"./adapters/google-docs.js\";\nexport { emailAdapter } from \"./adapters/email.js\";\n\n// Google Docs integration\nexport {\n  startGoogleDocsPoller,\n  stopGoogleDocsPoller,\n  handlePushNotification,\n} from \"./google-docs-poller.js\";\n\n// Stores\nexport {\n  getIntegrationConfig,\n  saveIntegrationConfig,\n  deleteIntegrationConfig,\n  listIntegrationConfigs,\n  type IntegrationConfig,\n} from \"./config-store.js\";\n\nexport {\n  getThreadMapping,\n  saveThreadMapping,\n  deleteThreadMapping,\n  listThreadMappings,\n  type ThreadMapping,\n} from \"./thread-mapping-store.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEtD,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,8BAA8B,EAC9B,sBAAsB,GAUvB,MAAM,cAAc,CAAC;AAEtB,SAAS;AACT,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kCAAkC,EAClC,yBAAyB,EACzB,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAC7B,sBAAsB,EACtB,2BAA2B,EAC3B,6BAA6B,GAG9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EACL,mCAAmC,EACnC,mCAAmC,EACnC,4BAA4B,EAC5B,8BAA8B,EAC9B,wCAAwC,EACxC,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAkBhC,WAAW;AACX,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,0BAA0B;AAC1B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAEjC,SAAS;AACT,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,GAEvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iCAAiC,EACjC,qCAAqC,EACrC,yCAAyC,EACzC,0BAA0B,EAC1B,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AASlC,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,gCAAgC,EAChC,aAAa,GACd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,gCAAgC,EAChC,sBAAsB,EACtB,8BAA8B,EAC9B,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,2BAA2B,EAC3B,oCAAoC,EACpC,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAOjC,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,2BAA2B,CAAC","sourcesContent":["// Types\nexport type {\n  PlatformAdapter,\n  IncomingMessage,\n  OutgoingMessage,\n  IntegrationStatus,\n  IntegrationsPluginOptions,\n  ImmediateWebhookResponse,\n  PlatformAdapterCapabilities,\n  UnsupportedPlatformCapabilityError,\n  IntegrationExecutionContext,\n  IntegrationActorTrust,\n  IntegrationContextMessage,\n  IntegrationFileReference,\n  IntegrationConversationType,\n  IntegrationTriggerKind,\n  PlatformRunProgress,\n} from \"./types.js\";\nexport { assertPlatformCapability } from \"./types.js\";\n\nexport {\n  BUILT_IN_INTEGRATION_CATALOG,\n  INTEGRATION_CATEGORIES,\n  getIntegrationCatalogEntry,\n  listBuiltInChannelIntegrations,\n  listIntegrationCatalog,\n  type BuiltInChannelId,\n  type AutomationCapabilities,\n  type ChannelCapabilities,\n  type IntegrationAvailability,\n  type IntegrationCatalogEntry,\n  type IntegrationCategory,\n  type IntegrationCredentialRequirement,\n  type IntegrationIconKey,\n  type IntegrationSupportMaturity,\n} from \"./catalog.js\";\n\n// Plugin\nexport {\n  createIntegrationsPlugin,\n  defaultIntegrationsPlugin,\n  enqueueRemoteCommand,\n} from \"./plugin.js\";\n\nexport {\n  getRemoteComputerCapabilities,\n  listRemoteDevicesForOwner,\n  revokeRemoteDeviceForOwner,\n  unregisterRemoteDevice,\n} from \"./remote-devices-store.js\";\nexport {\n  claimNextComputerCommand,\n  enqueueComputerCommand,\n  listRemoteCommandsForOwner,\n} from \"./remote-commands-store.js\";\nexport {\n  assertValidComputerCommandEnvelope,\n  computeComputerActionHash,\n  computerOperationRequiresApproval,\n  ComputerSupervisionError,\n} from \"./computer-supervision.js\";\nexport {\n  authorizeComputerOperation,\n  createComputerApprovalRequest,\n  decideComputerApproval,\n  getComputerApprovalForOwner,\n  listComputerApprovalsForOwner,\n  type ComputerApprovalRecord,\n  type ComputerApprovalStatus,\n} from \"./computer-supervision-store.js\";\nexport { insertRemoteLiveViewEvents } from \"./remote-run-events-store.js\";\nexport {\n  listRemotePushNotificationsForOwner,\n  listRemotePushRegistrationsForOwner,\n  queueRemotePushNotifications,\n  toPublicRemotePushRegistration,\n  unregisterRemotePushRegistrationForOwner,\n  upsertRemotePushRegistration,\n} from \"./remote-push-store.js\";\nexport type {\n  ComputerApprovalScope,\n  ComputerCommandAction,\n  ComputerCommandEnvelope,\n  ComputerOperationClass,\n  PublicRemotePushRegistration,\n  PublicRemoteDevice,\n  RemoteComputerCapabilities,\n  RemoteCommand,\n  RemoteDevice,\n  RemoteDeviceMetadata,\n  RemoteLiveViewEvent,\n  RemotePushNotification,\n  RemotePushRegistration,\n  RemoteRunEvent,\n} from \"./remote-types.js\";\n\n// Adapters\nexport { slackAdapter } from \"./adapters/slack.js\";\nexport { telegramAdapter } from \"./adapters/telegram.js\";\nexport { whatsappAdapter } from \"./adapters/whatsapp.js\";\nexport { discordAdapter } from \"./adapters/discord.js\";\nexport {\n  clearMicrosoftTeamsAccessTokenCache,\n  getMicrosoftTeamsAccessToken,\n  microsoftTeamsAdapter,\n} from \"./adapters/microsoft-teams.js\";\nexport { googleDocsAdapter } from \"./adapters/google-docs.js\";\nexport { emailAdapter } from \"./adapters/email.js\";\n\n// Google Docs integration\nexport {\n  startGoogleDocsPoller,\n  stopGoogleDocsPoller,\n  handlePushNotification,\n} from \"./google-docs-poller.js\";\n\n// Stores\nexport {\n  getIntegrationConfig,\n  saveIntegrationConfig,\n  deleteIntegrationConfig,\n  listIntegrationConfigs,\n  type IntegrationConfig,\n} from \"./config-store.js\";\n\nexport {\n  disconnectIntegrationInstallation,\n  getActiveIntegrationInstallationByKey,\n  getActiveIntegrationInstallationForTenant,\n  getIntegrationInstallation,\n  listIntegrationInstallations,\n  resolveIntegrationTokenBundle,\n  updateIntegrationInstallation,\n  upsertIntegrationInstallation,\n} from \"./installations-store.js\";\nexport type {\n  InstallationActor,\n  IntegrationInstallation,\n  IntegrationInstallationHealth,\n  IntegrationInstallationStatus,\n  IntegrationTokenBundle,\n} from \"./installations-store.js\";\n\nexport {\n  assertSlackInstallAccess,\n  buildSlackAuthorizeUrl,\n  exchangeSlackOAuthCode,\n  refreshSlackOAuthToken,\n  slackInstallationKey,\n  slackOAuthResponseToInstallation,\n  testSlackAuth,\n} from \"./slack-oauth.js\";\n\nexport {\n  SLACK_AGENT_BOT_EVENTS,\n  buildSlackAgentManifest,\n  type SlackAgentManifestUrls,\n} from \"./slack-manifest.js\";\n\nexport {\n  DEFAULT_INTEGRATION_SCOPE_POLICY,\n  deleteIntegrationScope,\n  evaluateIntegrationScopePolicy,\n  getIntegrationScope,\n  integrationScopeSubjectKey,\n  listIntegrationScopes,\n  saveIntegrationScope,\n} from \"./scope-store.js\";\nexport type {\n  IntegrationConversationTrust,\n  IntegrationScope,\n  IntegrationScopeAccess,\n  IntegrationScopePolicy,\n} from \"./scope-store.js\";\n\nexport {\n  getIntegrationBudgetSnapshot,\n  getIntegrationUsageBudget,\n  listIntegrationUsageBudgets,\n  listIntegrationBudgetThresholdEvents,\n  releaseIntegrationUsageBudget,\n  reserveIntegrationUsageBudget,\n  saveIntegrationUsageBudget,\n  settleIntegrationUsageBudget,\n} from \"./usage-budget-store.js\";\nexport type {\n  IntegrationBudgetPeriod,\n  IntegrationBudgetSubject,\n  IntegrationUsageBudget,\n} from \"./usage-budget-store.js\";\n\nexport {\n  getThreadMapping,\n  saveThreadMapping,\n  deleteThreadMapping,\n  listThreadMappings,\n  type ThreadMapping,\n} from \"./thread-mapping-store.js\";\n"]}

package/dist/integrations/installations-store.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Durable metadata and encrypted credentials for managed messaging installs.
+ *
+ * The installation row deliberately contains only provider metadata and an
+ * opaque `app_secrets` key. OAuth access and refresh tokens are serialized as
+ * one bundle and encrypted by the framework secrets vault. List/read helpers
+ * never expose the secret key or token values.
+ */
+import type { SecretScope } from "../secrets/register.js";
+export type IntegrationInstallationStatus = "connected" | "disconnected" | "revoked" | "error";
+export type IntegrationInstallationHealth = "unknown" | "healthy" | "degraded" | "revoked";
+export interface IntegrationTokenBundle {
+    accessToken: string;
+    refreshToken?: string;
+    tokenType?: string;
+    expiresAt?: number;
+}
+/** Safe-to-return installation metadata. No secret reference or token value. */
+export interface IntegrationInstallation {
+    id: string;
+    platform: string;
+    installationKey: string;
+    teamId: string | null;
+    teamName: string | null;
+    enterpriseId: string | null;
+    enterpriseName: string | null;
+    isEnterpriseInstall: boolean;
+    apiAppId: string | null;
+    botUserId: string | null;
+    scopes: string[];
+    installedByExternalUserId: string | null;
+    ownerEmail: string;
+    orgId: string | null;
+    status: IntegrationInstallationStatus;
+    health: IntegrationInstallationHealth;
+    lastError: string | null;
+    healthCheckedAt: number | null;
+    lastHealthyAt: number | null;
+    tokenExpiresAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+    disconnectedAt: number | null;
+}
+export interface InstallationActor {
+    userEmail: string;
+    orgId?: string | null;
+    /** Must come from a verified active organization membership. */
+    isOrgAdmin?: boolean;
+}
+export interface UpsertIntegrationInstallationInput {
+    platform: string;
+    installationKey: string;
+    teamId?: string | null;
+    teamName?: string | null;
+    enterpriseId?: string | null;
+    enterpriseName?: string | null;
+    isEnterpriseInstall?: boolean;
+    apiAppId?: string | null;
+    botUserId?: string | null;
+    scopes?: readonly string[];
+    installedByExternalUserId?: string | null;
+    ownerEmail: string;
+    orgId?: string | null;
+    secretScope: SecretScope;
+    secretScopeId: string;
+    tokenBundle: IntegrationTokenBundle;
+    status?: IntegrationInstallationStatus;
+    health?: IntegrationInstallationHealth;
+    lastError?: string | null;
+    healthCheckedAt?: number | null;
+    lastHealthyAt?: number | null;
+    tokenExpiresAt?: number | null;
+}
+export interface IntegrationInstallationUpdate {
+    teamName?: string | null;
+    enterpriseName?: string | null;
+    botUserId?: string | null;
+    scopes?: readonly string[];
+    status?: IntegrationInstallationStatus;
+    health?: IntegrationInstallationHealth;
+    lastError?: string | null;
+    healthCheckedAt?: number | null;
+    lastHealthyAt?: number | null;
+    tokenExpiresAt?: number | null;
+}
+/**
+ * Create or refresh a managed install. Re-installs may rotate tokens inside
+ * the same owner/org scope, but cannot silently move an existing provider
+ * installation into another Agent Native tenant.
+ */
+export declare function upsertIntegrationInstallation(input: UpsertIntegrationInstallationInput): Promise<IntegrationInstallation>;
+/** List installations visible to the owner or active organization member. */
+export declare function listIntegrationInstallations(actor: InstallationActor, platform?: string): Promise<IntegrationInstallation[]>;
+/** Read one installation through owner/org visibility scoping. */
+export declare function getIntegrationInstallation(id: string, actor: InstallationActor): Promise<IntegrationInstallation | null>;
+/** Update non-secret installation metadata after an owner/admin access check. */
+export declare function updateIntegrationInstallation(id: string, actor: InstallationActor, patch: IntegrationInstallationUpdate): Promise<IntegrationInstallation | null>;
+/** Delete the encrypted token bundle and retain disconnected audit metadata. */
+export declare function disconnectIntegrationInstallation(id: string, actor: InstallationActor): Promise<IntegrationInstallation | null>;
+/**
+ * Resolve credentials for a verified provider webhook/runtime path.
+ *
+ * This is intentionally separate from every user-facing list/read helper.
+ * Callers must first authenticate the provider webhook (or run inside a
+ * trusted OAuth callback) and must never log or return the result.
+ */
+export declare function resolveIntegrationTokenBundle(platform: string, installationKey: string): Promise<IntegrationTokenBundle | null>;
+/** Safe metadata lookup for a verified provider event. */
+export declare function getActiveIntegrationInstallationByKey(platform: string, installationKey: string): Promise<IntegrationInstallation | null>;
+/** Resolve a connected installation by workspace or enterprise tenant id. */
+export declare function getActiveIntegrationInstallationForTenant(platform: string, tenantId: string): Promise<IntegrationInstallation | null>;
+//# sourceMappingURL=installations-store.d.ts.map

package/dist/integrations/installations-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installations-store.d.ts","sourceRoot":"","sources":["../../src/integrations/installations-store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAU1D,MAAM,MAAM,6BAA6B,GACrC,WAAW,GACX,cAAc,GACd,SAAS,GACT,OAAO,CAAC;AAEZ,MAAM,MAAM,6BAA6B,GACrC,SAAS,GACT,SAAS,GACT,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,6BAA6B,CAAC;IACtC,MAAM,EAAE,6BAA6B,CAAC;IACtC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAQD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gEAAgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,WAAW,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,sBAAsB,CAAC;IACpC,MAAM,CAAC,EAAE,6BAA6B,CAAC;IACvC,MAAM,CAAC,EAAE,6BAA6B,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,6BAA6B,CAAC;IACvC,MAAM,CAAC,EAAE,6BAA6B,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AA0ND;;;;GAIG;AACH,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,uBAAuB,CAAC,CAyIlC;AAED,6EAA6E;AAC7E,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iBAAiB,EACxB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAqBpC;AAED,kEAAkE;AAClE,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAUzC;AAED,iFAAiF;AACjF,wBAAsB,6BAA6B,CACjD,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,iBAAiB,EACxB,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAoDzC;AAED,gFAAgF;AAChF,wBAAsB,iCAAiC,CACrD,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAoBzC;AAED;;;;;;GAMG;AACH,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAkBxC;AAED,0DAA0D;AAC1D,wBAAsB,qCAAqC,CACzD,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAIzC;AAED,6EAA6E;AAC7E,wBAAsB,yCAAyC,CAC7D,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAgBzC"}