@agent-native/core 0.98.5 → 0.98.6

package/dist/integrations/types.d.ts

@@ -245,6 +245,12 @@ export interface PlatformAdapter {
      * metadata, and text only — never persist file bodies or credentials.
      */
     hydrateIncomingMessage?(incoming: IncomingMessage): Promise<IncomingMessage>;
+    /**
+     * Hydrate only verified sender identity before execution-context selection.
+     * This runs on the provider acknowledgement path and must avoid fetching
+     * conversation history or file bodies.
+     */
+    hydrateIncomingIdentity?(incoming: IncomingMessage): Promise<IncomingMessage>;
     /**
      * Provider-specific response returned only after a message is verified and
      * durably enqueued. Discord uses this to return a type-5 deferred response

package/dist/integrations/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/integrations/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAElC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,MAAM,2BAA2B,GACnC,SAAS,GACT,iBAAiB,GACjB,IAAI,GACJ,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,IAAI,GAAG,cAAc,CAAC;AAEvE,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,gBAAgB,EAAE,MAAM,CAAC;IACzB,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,2BAA2B,CAAC;IAC/C,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,yEAAyE;IACzE,eAAe,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC9C,wEAAwE;IACxE,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACnC,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iEAAiE;IACjE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,UAAU,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;4EAEwE;IACxE,eAAe,CAAC,EAAE,OAAO,4BAA4B,EAAE,YAAY,EAAE,CAAC;CACvE;AAED,MAAM,WAAW,2BAA2B;IAC1C,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;IACnB,4DAA4D;IAC5D,iBAAiB,EAAE,OAAO,CAAC;IAC3B,yEAAyE;IACzE,aAAa,EAAE,OAAO,CAAC;IACvB,iEAAiE;IACjE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,2EAA2E;IAC3E,uBAAuB,EAAE,OAAO,CAAC;IACjC,8EAA8E;IAC9E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,sEAAsE;IACtE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,GAAG,CAAC,EAAE,sBAAsB,CAAC;IAC7B,+EAA+E;IAC/E,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrD,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,iFAAiF;IACjF,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED,qBAAa,kCAAmC,SAAQ,KAAK;IAIzD,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,2BAA2B;IAJxD,QAAQ,CAAC,IAAI,qCAAqC;IAElD,YACW,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,2BAA2B,EAIvD;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAE7D,0DAA0D;IAC1D,kBAAkB,IAAI,YAAY,EAAE,CAAC;IAErC;;;;OAIG;IACH,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;QAC1C,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IAEH;;;OAGG;IACH,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhD;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEtE;;;;OAIG;IACH,sBAAsB,CAAC,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE7E;;;;OAIG;IACH,2BAA2B,CAAC,CAC1B,QAAQ,EAAE,eAAe,GACxB,wBAAwB,GAAG,IAAI,CAAC;IAEnC;;;;OAIG;IACH,0BAA0B,CAAC,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,EAAE,CAAC;IAEjE;;;;;;;OAOG;IACH,YAAY,CACV,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,eAAe,EACxB,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;;;;OASG;IACH,yBAAyB,CAAC,CACxB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAE9C,2EAA2E;IAC3E,gBAAgB,CAAC,CACf,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;;;OAKG;IACH,iBAAiB,CAAC,CAChB,QAAQ,EAAE,eAAe,EACzB,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;OAGG;IACH,mBAAmB,CAAC,CAClB,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;;;OAQG;IACH,mBAAmB,CACjB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,GACpC,eAAe,CAAC;IAEnB,0EAA0E;IAC1E,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACzD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,eAAe,EACxB,UAAU,EAAE,MAAM,2BAA2B,GAC5C,IAAI,CAIN;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,8BAA8B,EAAE,WAAW,CAAC,CAAC;IAC7E,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,MAAM,CAAC,EACH,OAAO,0BAA0B,EAAE,WAAW,GAC9C,MAAM,GACN;QACE,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACjC,CAAC;IACN;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,CACxB,QAAQ,EAAE,eAAe,KACtB,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxE;;;OAGG;IACH,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,eAAe,KACrB,OAAO,CACR;QACE,OAAO,EAAE,IAAI,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GACD;QAAE,OAAO,EAAE,KAAK,CAAA;KAAE,CACrB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/integrations/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAElC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,MAAM,2BAA2B,GACnC,SAAS,GACT,iBAAiB,GACjB,IAAI,GACJ,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,IAAI,GAAG,cAAc,CAAC;AAEvE,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,gBAAgB,EAAE,MAAM,CAAC;IACzB,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,2BAA2B,CAAC;IAC/C,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,yEAAyE;IACzE,eAAe,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC9C,wEAAwE;IACxE,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACnC,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iEAAiE;IACjE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,UAAU,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;4EAEwE;IACxE,eAAe,CAAC,EAAE,OAAO,4BAA4B,EAAE,YAAY,EAAE,CAAC;CACvE;AAED,MAAM,WAAW,2BAA2B;IAC1C,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;IACnB,4DAA4D;IAC5D,iBAAiB,EAAE,OAAO,CAAC;IAC3B,yEAAyE;IACzE,aAAa,EAAE,OAAO,CAAC;IACvB,iEAAiE;IACjE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,2EAA2E;IAC3E,uBAAuB,EAAE,OAAO,CAAC;IACjC,8EAA8E;IAC9E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,sEAAsE;IACtE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,GAAG,CAAC,EAAE,sBAAsB,CAAC;IAC7B,+EAA+E;IAC/E,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrD,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,iFAAiF;IACjF,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED,qBAAa,kCAAmC,SAAQ,KAAK;IAIzD,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,2BAA2B;IAJxD,QAAQ,CAAC,IAAI,qCAAqC;IAElD,YACW,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,2BAA2B,EAIvD;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAE7D,0DAA0D;IAC1D,kBAAkB,IAAI,YAAY,EAAE,CAAC;IAErC;;;;OAIG;IACH,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;QAC1C,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IAEH;;;OAGG;IACH,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhD;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEtE;;;;OAIG;IACH,sBAAsB,CAAC,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE7E;;;;OAIG;IACH,uBAAuB,CAAC,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE9E;;;;OAIG;IACH,2BAA2B,CAAC,CAC1B,QAAQ,EAAE,eAAe,GACxB,wBAAwB,GAAG,IAAI,CAAC;IAEnC;;;;OAIG;IACH,0BAA0B,CAAC,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,EAAE,CAAC;IAEjE;;;;;;;OAOG;IACH,YAAY,CACV,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,eAAe,EACxB,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;;;;OASG;IACH,yBAAyB,CAAC,CACxB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAE9C,2EAA2E;IAC3E,gBAAgB,CAAC,CACf,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;;;OAKG;IACH,iBAAiB,CAAC,CAChB,QAAQ,EAAE,eAAe,EACzB,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;OAGG;IACH,mBAAmB,CAAC,CAClB,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;;;OAQG;IACH,mBAAmB,CACjB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,GACpC,eAAe,CAAC;IAEnB,0EAA0E;IAC1E,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACzD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,eAAe,EACxB,UAAU,EAAE,MAAM,2BAA2B,GAC5C,IAAI,CAIN;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,8BAA8B,EAAE,WAAW,CAAC,CAAC;IAC7E,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,MAAM,CAAC,EACH,OAAO,0BAA0B,EAAE,WAAW,GAC9C,MAAM,GACN;QACE,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACjC,CAAC;IACN;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,CACxB,QAAQ,EAAE,eAAe,KACtB,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxE;;;OAGG;IACH,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,eAAe,KACrB,OAAO,CACR;QACE,OAAO,EAAE,IAAI,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GACD;QAAE,OAAO,EAAE,KAAK,CAAA;KAAE,CACrB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/integrations/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/integrations/types.ts"],"names":[],"mappings":"AAuNA,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAIhD,QAAQ;IACR,UAAU;IAJZ,IAAI,GAAG,iCAAiC,CAAC;IAElD,YACW,QAAgB,EAChB,UAA6C;QAEtD,KAAK,CAAC,YAAY,QAAQ,qBAAqB,UAAU,EAAE,CAAC,CAAC;wBAHpD,QAAQ;0BACR,UAAU;QAGnB,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IACnD,CAAC;CACF;AA0ID,MAAM,UAAU,wBAAwB,CACtC,OAAwB,EACxB,UAA6C;IAE7C,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,kCAAkC,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC","sourcesContent":["import type { H3Event } from \"h3\";\n\nimport type { AgentChatEvent } from \"../agent/types.js\";\nimport type { EnvKeyConfig } from \"../server/create-server.js\";\n\nexport type IntegrationConversationType =\n  | \"channel\"\n  | \"private_channel\"\n  | \"dm\"\n  | \"group_dm\"\n  | \"unknown\";\n\nexport type IntegrationTriggerKind = \"mention\" | \"dm\" | \"thread_reply\";\n\nexport interface IntegrationActorTrust {\n  memberType: \"owner\" | \"admin\" | \"member\" | \"guest\" | \"external\" | \"unknown\";\n  verified: boolean;\n}\n\nexport interface IntegrationContextMessage {\n  senderId?: string;\n  senderName?: string;\n  text: string;\n  timestamp: number;\n  sourceUrl?: string;\n  reactions?: Array<{ name: string; count: number }>;\n  files?: IntegrationFileReference[];\n}\n\nexport interface IntegrationFileReference {\n  id: string;\n  name?: string;\n  mimetype?: string;\n  size?: number;\n  permalink?: string;\n  downloadUrl?: string;\n}\n\n/**\n * Normalized incoming message from any messaging platform.\n */\nexport interface IncomingMessage {\n  /** Platform identifier (e.g., \"slack\", \"telegram\", \"whatsapp\") */\n  platform: string;\n  /** Platform-specific thread/conversation identifier */\n  externalThreadId: string;\n  /** Message text content */\n  text: string;\n  /** Display name of the sender */\n  senderName?: string;\n  /** Verified sender email, when the platform can provide one */\n  senderEmail?: string;\n  /** Platform-specific sender ID */\n  senderId?: string;\n  /** How this message intentionally invoked an agent. */\n  triggerKind?: IntegrationTriggerKind;\n  /** Normalized provider conversation type for policy evaluation. */\n  conversationType?: IntegrationConversationType;\n  /** Provider tenant/workspace identifier. */\n  tenantId?: string;\n  /** Authorized integration scope resolved before execution. */\n  integrationScopeId?: string;\n  /** Normalized actor trust; unknown/unverified callers fail closed. */\n  actorTrust?: IntegrationActorTrust;\n  /** Bounded provider-native conversation context hydrated at run time. */\n  contextMessages?: IntegrationContextMessage[];\n  /** Provider file references only. Raw file bodies never belong here. */\n  files?: IntegrationFileReference[];\n  /** Server-verified approval grants carried by an interaction continuation. */\n  approvedToolCalls?: string[];\n  /**\n   * Whether the platform cryptographically authenticated that the message\n   * genuinely came from the claimed sender (e.g. inbound email that passed\n   * DKIM, or an aligned SPF pass, for the From domain). Defaults to\n   * undefined/false for platforms that don't provide sender authentication.\n   *\n   * Owner-resolution paths that grant a real user's identity/credentials\n   * MUST treat a missing/false value as \"unverified\" and fail closed —\n   * never derive a privileged acting identity from an unverified sender.\n   */\n  senderVerified?: boolean;\n  /** Raw platform-specific context needed for routing responses */\n  platformContext: Record<string, unknown>;\n  /**\n   * Short-lived delivery context needed only while the queued task is active.\n   * Secrets such as Discord interaction tokens belong here, never in\n   * `platformContext`, thread mappings, logs, or agent-visible context.\n   */\n  responseContext?: Record<string, unknown>;\n  /** Provider-native thread/topic reference, when one exists. */\n  threadRef?: string;\n  /**\n   * Canonical provider URL for the originating message thread, when the\n   * provider can resolve one. This is safe agent-visible provenance (not a\n   * credential) and should be preserved across A2A delegation so created\n   * artifacts can link back to their request source.\n   */\n  sourceUrl?: string;\n  /**\n   * Trusted app-side routing guidance added after provider parsing. Adapters\n   * should not copy this from user-controlled webhook payload fields.\n   */\n  routingHint?: {\n    targetAgent?: string;\n    instruction: string;\n  };\n  /** Provider-native message/activity reference for contextual replies. */\n  replyRef?: string;\n  /** Message timestamp (epoch ms) */\n  timestamp: number;\n}\n\n/**\n * Outgoing message to send back to a messaging platform.\n */\nexport interface OutgoingMessage {\n  /** Text content of the response */\n  text: string;\n  /** Platform-specific payload (e.g., Slack blocks, Telegram parse_mode) */\n  platformContext: Record<string, unknown>;\n}\n\n/**\n * Proactive outbound message target for a platform.\n * Used when the agent needs to send to a saved destination instead of replying\n * to the current inbound thread.\n */\nexport interface OutboundTarget {\n  /** Canonical platform-specific destination id (channel, chat, thread, etc.) */\n  destination: string;\n  /** Optional thread reference when the destination supports threading */\n  threadRef?: string | null;\n  /** Optional fallback display label */\n  label?: string;\n  /** Provider tenant/workspace used to select an installation credential. */\n  tenantId?: string;\n  /** Managed installation id when the caller already resolved it. */\n  installationId?: string;\n}\n\n/**\n * Connection status for a platform integration.\n */\nexport interface IntegrationStatus {\n  platform: string;\n  /** Human-readable label (e.g., \"Slack\", \"Telegram\") */\n  label: string;\n  /** Whether the integration is explicitly enabled */\n  enabled: boolean;\n  /** Whether all required credentials are configured */\n  configured: boolean;\n  /** Platform-specific details (workspace name, bot username, etc.) */\n  details?: Record<string, unknown>;\n  /** Error message if something is wrong */\n  error?: string;\n  /** The webhook URL that should be configured in the platform */\n  webhookUrl?: string;\n  /** The full list of env keys (required + optional) the adapter recognizes,\n   *  including UI hints. Surfaced on the integrations status endpoint so the\n   *  frontend can render fields without hard-coding them per platform. */\n  requiredEnvKeys?: import(\"../server/create-server.js\").EnvKeyConfig[];\n}\n\nexport interface PlatformAdapterCapabilities {\n  /** The adapter can deliver a response to the current inbound event. */\n  replyText: boolean;\n  /** The adapter can send without an active inbound event. */\n  proactiveMessages: boolean;\n  /** The adapter preserves a provider-native thread or topic reference. */\n  nativeThreads: boolean;\n  /** The adapter can quote/reply to a specific inbound message. */\n  contextualReplies: boolean;\n  /** The provider requires an immediate deferred webhook acknowledgement. */\n  deferredWebhookResponse: boolean;\n  /** The adapter only receives explicit interactions, not ordinary messages. */\n  interactionOnly?: boolean;\n  /** The adapter can hydrate bounded native thread/file/reaction context. */\n  nativeContextHydration?: boolean;\n  /** The adapter can surface live agent progress in the provider UI. */\n  liveRunProgress?: boolean;\n}\n\nexport interface PlatformRunProgress {\n  /**\n   * Opaque, provider-owned reference for resuming this progress surface from a\n   * durable continuation. It deliberately contains no user content,\n   * credentials, or provider payload.\n   */\n  ref?: PlatformRunProgressRef;\n  /** Receive normalized agent events. Implementations should throttle writes. */\n  onEvent(event: AgentChatEvent): Promise<void> | void;\n  /** Finalize the provider-native progress surface with the answer. */\n  complete(message: OutgoingMessage): Promise<void>;\n  /** Mark the provider-native surface failed and leave a retryable explanation. */\n  fail?(message: string): Promise<void>;\n}\n\n/**\n * Safe, minimal reference to a provider-native run-progress surface.\n *\n * The field values are opaque to the framework. Adapters may use `kind` to\n * distinguish their own resume strategy and `streamTs` to identify the\n * provider-side stream. No incoming message text, platform payload, or\n * credential belongs here.\n */\nexport interface PlatformRunProgressRef {\n  kind: string;\n  streamTs: string;\n}\n\nexport interface ImmediateWebhookResponse {\n  status: number;\n  body: unknown;\n}\n\nexport class UnsupportedPlatformCapabilityError extends Error {\n  readonly code = \"UNSUPPORTED_PLATFORM_CAPABILITY\";\n\n  constructor(\n    readonly platform: string,\n    readonly capability: keyof PlatformAdapterCapabilities,\n  ) {\n    super(`Platform ${platform} does not support ${capability}`);\n    this.name = \"UnsupportedPlatformCapabilityError\";\n  }\n}\n\n/**\n * Platform adapter interface — implement this for each messaging platform.\n *\n * Each adapter handles the platform-specific concerns:\n * - Webhook verification (HMAC signatures, challenge responses)\n * - Message parsing (platform events → normalized IncomingMessage)\n * - Response formatting (agent text → platform-specific format)\n * - Response delivery (POST back to platform API)\n */\nexport interface PlatformAdapter {\n  /** Unique platform identifier */\n  readonly platform: string;\n  /** Human-readable label */\n  readonly label: string;\n  /** Explicit runtime behavior. Missing fields are treated as unsupported. */\n  readonly capabilities?: Partial<PlatformAdapterCapabilities>;\n\n  /** Env keys this adapter needs (tokens, secrets, etc.) */\n  getRequiredEnvKeys(): EnvKeyConfig[];\n\n  /**\n   * Handle platform-specific verification challenges.\n   * For example, Slack sends a `url_verification` event when setting up.\n   * Return `{ handled: true, response }` to short-circuit the webhook handler.\n   */\n  handleVerification(event: H3Event): Promise<{\n    handled: boolean;\n    response?: unknown;\n  }>;\n\n  /**\n   * Validate the webhook request signature.\n   * Returns true if the request is authentic.\n   */\n  verifyWebhook(event: H3Event): Promise<boolean>;\n\n  /**\n   * Parse the webhook payload into a normalized IncomingMessage.\n   * Return null to silently ignore the event (bot messages, edits, etc.).\n   */\n  parseIncomingMessage(event: H3Event): Promise<IncomingMessage | null>;\n\n  /**\n   * Hydrate bounded provider-native context after durable enqueue, outside the\n   * provider acknowledgement budget. Implementations must return references,\n   * metadata, and text only — never persist file bodies or credentials.\n   */\n  hydrateIncomingMessage?(incoming: IncomingMessage): Promise<IncomingMessage>;\n\n  /**\n   * Provider-specific response returned only after a message is verified and\n   * durably enqueued. Discord uses this to return a type-5 deferred response\n   * within its three-second interaction deadline.\n   */\n  getImmediateWebhookResponse?(\n    incoming: IncomingMessage,\n  ): ImmediateWebhookResponse | null;\n\n  /**\n   * Return pre-canonical thread ids used by older adapter versions. The\n   * integration handler checks these only when the canonical mapping is\n   * missing, then aliases a match to the canonical id without forking history.\n   */\n  getLegacyExternalThreadIds?(incoming: IncomingMessage): string[];\n\n  /**\n   * Send the agent's response back to the messaging platform.\n   *\n   * If `opts.placeholderRef` is provided (returned earlier by\n   * `postProcessingPlaceholder`), adapters that support in-place edits should\n   * update that placeholder message rather than posting a new one. Adapters\n   * without an \"update message\" API can ignore the ref and post fresh.\n   */\n  sendResponse(\n    message: OutgoingMessage,\n    context: IncomingMessage,\n    opts?: { placeholderRef?: string },\n  ): Promise<void>;\n\n  /**\n   * Optionally post a \"working on it…\" placeholder message immediately when a\n   * webhook arrives, before the agent loop runs. Adapters that support\n   * in-place message edits (Slack via `chat.update`, etc.) return an opaque\n   * `placeholderRef` that the webhook flow threads through to `sendResponse`\n   * so the same message is updated with the final answer once ready.\n   *\n   * Adapters without edit support should leave this undefined; the webhook\n   * handler will skip the placeholder step entirely.\n   */\n  postProcessingPlaceholder?(\n    incoming: IncomingMessage,\n  ): Promise<{ placeholderRef: string } | null>;\n\n  /** Start a provider-native progress/streaming surface for an agent run. */\n  startRunProgress?(\n    incoming: IncomingMessage,\n  ): Promise<PlatformRunProgress | null>;\n\n  /**\n   * Reattach a durable continuation to a provider-native progress surface\n   * previously started by this adapter. Adapters that cannot resume a native\n   * surface should omit this and the continuation will use its normal reply\n   * path instead.\n   */\n  resumeRunProgress?(\n    incoming: IncomingMessage,\n    ref: PlatformRunProgressRef,\n  ): Promise<PlatformRunProgress | null>;\n\n  /**\n   * Send a proactive outbound message to a platform destination. Adapters that\n   * only support direct replies can omit this.\n   */\n  sendMessageToTarget?(\n    message: OutgoingMessage,\n    target: OutboundTarget,\n  ): Promise<void>;\n\n  /**\n   * Format plain agent response text into a platform-appropriate message.\n   * Handles markdown conversion, message splitting for length limits, etc.\n   *\n   * `opts.threadDeepLinkUrl`, when present, is a URL back to the originating\n   * thread in the dispatch UI. Adapters that support rich blocks should\n   * render this as a button (Slack); adapters that don't may inline it as a\n   * link or simply omit it.\n   */\n  formatAgentResponse(\n    text: string,\n    opts?: { threadDeepLinkUrl?: string },\n  ): OutgoingMessage;\n\n  /** Return current connection/configuration status for the settings UI. */\n  getStatus(baseUrl?: string): Promise<IntegrationStatus>;\n}\n\nexport function assertPlatformCapability(\n  adapter: PlatformAdapter,\n  capability: keyof PlatformAdapterCapabilities,\n): void {\n  if (adapter.capabilities?.[capability] !== true) {\n    throw new UnsupportedPlatformCapabilityError(adapter.platform, capability);\n  }\n}\n\n/**\n * Options for the integrations plugin.\n */\nexport interface IntegrationsPluginOptions {\n  /** App identifier used by call-agent to prevent self-calls (e.g. \"dispatch\"). */\n  appId?: string;\n  /** Platform adapters to enable. Default: all built-in adapters with configured env keys. */\n  adapters?: PlatformAdapter[];\n  /** System prompt for the agent (same as agent-chat). Inherited from agent-chat plugin if not set. */\n  systemPrompt?: string;\n  /** Actions registry (same as agent-chat). */\n  actions?: Record<string, import(\"../agent/production-agent.js\").ActionEntry>;\n  /** Model to use. Defaults to the resolved engine's default model. */\n  model?: string;\n  /** Anthropic API key. Falls back to ANTHROPIC_API_KEY env var. */\n  apiKey?: string;\n  /** Agent engine to use. Defaults to the same engine resolver as web chat. */\n  engine?:\n    | import(\"../agent/engine/types.js\").AgentEngine\n    | string\n    | {\n        name: string;\n        config: Record<string, unknown>;\n      };\n  /**\n   * Resolve which owner should receive personal resource context and own the\n   * created chat thread for an incoming platform message.\n   */\n  resolveOwner?: (incoming: IncomingMessage) => string | Promise<string>;\n  /**\n   * Resolve the durable execution principal for an inbound provider message.\n   * Shared channels should use a service principal; DMs may use a verified\n   * linked user. When present this supersedes `resolveOwner`.\n   */\n  resolveExecutionContext?: (\n    incoming: IncomingMessage,\n  ) => IntegrationExecutionContext | Promise<IntegrationExecutionContext>;\n  /**\n   * Optional preprocessor for inbound platform messages. Can intercept special\n   * commands (such as `/link`) before the agent loop runs.\n   */\n  beforeProcess?: (\n    incoming: IncomingMessage,\n    adapter: PlatformAdapter,\n  ) => Promise<\n    | {\n        handled: true;\n        responseText?: string;\n      }\n    | { handled: false }\n  >;\n}\n\nexport interface IntegrationExecutionContext {\n  ownerEmail: string;\n  orgId: string | null;\n  principalType: \"user\" | \"service\";\n  installationId?: string;\n  scopeId?: string;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/integrations/types.ts"],"names":[],"mappings":"AAuNA,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAIhD,QAAQ;IACR,UAAU;IAJZ,IAAI,GAAG,iCAAiC,CAAC;IAElD,YACW,QAAgB,EAChB,UAA6C;QAEtD,KAAK,CAAC,YAAY,QAAQ,qBAAqB,UAAU,EAAE,CAAC,CAAC;wBAHpD,QAAQ;0BACR,UAAU;QAGnB,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IACnD,CAAC;CACF;AAiJD,MAAM,UAAU,wBAAwB,CACtC,OAAwB,EACxB,UAA6C;IAE7C,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,kCAAkC,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC","sourcesContent":["import type { H3Event } from \"h3\";\n\nimport type { AgentChatEvent } from \"../agent/types.js\";\nimport type { EnvKeyConfig } from \"../server/create-server.js\";\n\nexport type IntegrationConversationType =\n  | \"channel\"\n  | \"private_channel\"\n  | \"dm\"\n  | \"group_dm\"\n  | \"unknown\";\n\nexport type IntegrationTriggerKind = \"mention\" | \"dm\" | \"thread_reply\";\n\nexport interface IntegrationActorTrust {\n  memberType: \"owner\" | \"admin\" | \"member\" | \"guest\" | \"external\" | \"unknown\";\n  verified: boolean;\n}\n\nexport interface IntegrationContextMessage {\n  senderId?: string;\n  senderName?: string;\n  text: string;\n  timestamp: number;\n  sourceUrl?: string;\n  reactions?: Array<{ name: string; count: number }>;\n  files?: IntegrationFileReference[];\n}\n\nexport interface IntegrationFileReference {\n  id: string;\n  name?: string;\n  mimetype?: string;\n  size?: number;\n  permalink?: string;\n  downloadUrl?: string;\n}\n\n/**\n * Normalized incoming message from any messaging platform.\n */\nexport interface IncomingMessage {\n  /** Platform identifier (e.g., \"slack\", \"telegram\", \"whatsapp\") */\n  platform: string;\n  /** Platform-specific thread/conversation identifier */\n  externalThreadId: string;\n  /** Message text content */\n  text: string;\n  /** Display name of the sender */\n  senderName?: string;\n  /** Verified sender email, when the platform can provide one */\n  senderEmail?: string;\n  /** Platform-specific sender ID */\n  senderId?: string;\n  /** How this message intentionally invoked an agent. */\n  triggerKind?: IntegrationTriggerKind;\n  /** Normalized provider conversation type for policy evaluation. */\n  conversationType?: IntegrationConversationType;\n  /** Provider tenant/workspace identifier. */\n  tenantId?: string;\n  /** Authorized integration scope resolved before execution. */\n  integrationScopeId?: string;\n  /** Normalized actor trust; unknown/unverified callers fail closed. */\n  actorTrust?: IntegrationActorTrust;\n  /** Bounded provider-native conversation context hydrated at run time. */\n  contextMessages?: IntegrationContextMessage[];\n  /** Provider file references only. Raw file bodies never belong here. */\n  files?: IntegrationFileReference[];\n  /** Server-verified approval grants carried by an interaction continuation. */\n  approvedToolCalls?: string[];\n  /**\n   * Whether the platform cryptographically authenticated that the message\n   * genuinely came from the claimed sender (e.g. inbound email that passed\n   * DKIM, or an aligned SPF pass, for the From domain). Defaults to\n   * undefined/false for platforms that don't provide sender authentication.\n   *\n   * Owner-resolution paths that grant a real user's identity/credentials\n   * MUST treat a missing/false value as \"unverified\" and fail closed —\n   * never derive a privileged acting identity from an unverified sender.\n   */\n  senderVerified?: boolean;\n  /** Raw platform-specific context needed for routing responses */\n  platformContext: Record<string, unknown>;\n  /**\n   * Short-lived delivery context needed only while the queued task is active.\n   * Secrets such as Discord interaction tokens belong here, never in\n   * `platformContext`, thread mappings, logs, or agent-visible context.\n   */\n  responseContext?: Record<string, unknown>;\n  /** Provider-native thread/topic reference, when one exists. */\n  threadRef?: string;\n  /**\n   * Canonical provider URL for the originating message thread, when the\n   * provider can resolve one. This is safe agent-visible provenance (not a\n   * credential) and should be preserved across A2A delegation so created\n   * artifacts can link back to their request source.\n   */\n  sourceUrl?: string;\n  /**\n   * Trusted app-side routing guidance added after provider parsing. Adapters\n   * should not copy this from user-controlled webhook payload fields.\n   */\n  routingHint?: {\n    targetAgent?: string;\n    instruction: string;\n  };\n  /** Provider-native message/activity reference for contextual replies. */\n  replyRef?: string;\n  /** Message timestamp (epoch ms) */\n  timestamp: number;\n}\n\n/**\n * Outgoing message to send back to a messaging platform.\n */\nexport interface OutgoingMessage {\n  /** Text content of the response */\n  text: string;\n  /** Platform-specific payload (e.g., Slack blocks, Telegram parse_mode) */\n  platformContext: Record<string, unknown>;\n}\n\n/**\n * Proactive outbound message target for a platform.\n * Used when the agent needs to send to a saved destination instead of replying\n * to the current inbound thread.\n */\nexport interface OutboundTarget {\n  /** Canonical platform-specific destination id (channel, chat, thread, etc.) */\n  destination: string;\n  /** Optional thread reference when the destination supports threading */\n  threadRef?: string | null;\n  /** Optional fallback display label */\n  label?: string;\n  /** Provider tenant/workspace used to select an installation credential. */\n  tenantId?: string;\n  /** Managed installation id when the caller already resolved it. */\n  installationId?: string;\n}\n\n/**\n * Connection status for a platform integration.\n */\nexport interface IntegrationStatus {\n  platform: string;\n  /** Human-readable label (e.g., \"Slack\", \"Telegram\") */\n  label: string;\n  /** Whether the integration is explicitly enabled */\n  enabled: boolean;\n  /** Whether all required credentials are configured */\n  configured: boolean;\n  /** Platform-specific details (workspace name, bot username, etc.) */\n  details?: Record<string, unknown>;\n  /** Error message if something is wrong */\n  error?: string;\n  /** The webhook URL that should be configured in the platform */\n  webhookUrl?: string;\n  /** The full list of env keys (required + optional) the adapter recognizes,\n   *  including UI hints. Surfaced on the integrations status endpoint so the\n   *  frontend can render fields without hard-coding them per platform. */\n  requiredEnvKeys?: import(\"../server/create-server.js\").EnvKeyConfig[];\n}\n\nexport interface PlatformAdapterCapabilities {\n  /** The adapter can deliver a response to the current inbound event. */\n  replyText: boolean;\n  /** The adapter can send without an active inbound event. */\n  proactiveMessages: boolean;\n  /** The adapter preserves a provider-native thread or topic reference. */\n  nativeThreads: boolean;\n  /** The adapter can quote/reply to a specific inbound message. */\n  contextualReplies: boolean;\n  /** The provider requires an immediate deferred webhook acknowledgement. */\n  deferredWebhookResponse: boolean;\n  /** The adapter only receives explicit interactions, not ordinary messages. */\n  interactionOnly?: boolean;\n  /** The adapter can hydrate bounded native thread/file/reaction context. */\n  nativeContextHydration?: boolean;\n  /** The adapter can surface live agent progress in the provider UI. */\n  liveRunProgress?: boolean;\n}\n\nexport interface PlatformRunProgress {\n  /**\n   * Opaque, provider-owned reference for resuming this progress surface from a\n   * durable continuation. It deliberately contains no user content,\n   * credentials, or provider payload.\n   */\n  ref?: PlatformRunProgressRef;\n  /** Receive normalized agent events. Implementations should throttle writes. */\n  onEvent(event: AgentChatEvent): Promise<void> | void;\n  /** Finalize the provider-native progress surface with the answer. */\n  complete(message: OutgoingMessage): Promise<void>;\n  /** Mark the provider-native surface failed and leave a retryable explanation. */\n  fail?(message: string): Promise<void>;\n}\n\n/**\n * Safe, minimal reference to a provider-native run-progress surface.\n *\n * The field values are opaque to the framework. Adapters may use `kind` to\n * distinguish their own resume strategy and `streamTs` to identify the\n * provider-side stream. No incoming message text, platform payload, or\n * credential belongs here.\n */\nexport interface PlatformRunProgressRef {\n  kind: string;\n  streamTs: string;\n}\n\nexport interface ImmediateWebhookResponse {\n  status: number;\n  body: unknown;\n}\n\nexport class UnsupportedPlatformCapabilityError extends Error {\n  readonly code = \"UNSUPPORTED_PLATFORM_CAPABILITY\";\n\n  constructor(\n    readonly platform: string,\n    readonly capability: keyof PlatformAdapterCapabilities,\n  ) {\n    super(`Platform ${platform} does not support ${capability}`);\n    this.name = \"UnsupportedPlatformCapabilityError\";\n  }\n}\n\n/**\n * Platform adapter interface — implement this for each messaging platform.\n *\n * Each adapter handles the platform-specific concerns:\n * - Webhook verification (HMAC signatures, challenge responses)\n * - Message parsing (platform events → normalized IncomingMessage)\n * - Response formatting (agent text → platform-specific format)\n * - Response delivery (POST back to platform API)\n */\nexport interface PlatformAdapter {\n  /** Unique platform identifier */\n  readonly platform: string;\n  /** Human-readable label */\n  readonly label: string;\n  /** Explicit runtime behavior. Missing fields are treated as unsupported. */\n  readonly capabilities?: Partial<PlatformAdapterCapabilities>;\n\n  /** Env keys this adapter needs (tokens, secrets, etc.) */\n  getRequiredEnvKeys(): EnvKeyConfig[];\n\n  /**\n   * Handle platform-specific verification challenges.\n   * For example, Slack sends a `url_verification` event when setting up.\n   * Return `{ handled: true, response }` to short-circuit the webhook handler.\n   */\n  handleVerification(event: H3Event): Promise<{\n    handled: boolean;\n    response?: unknown;\n  }>;\n\n  /**\n   * Validate the webhook request signature.\n   * Returns true if the request is authentic.\n   */\n  verifyWebhook(event: H3Event): Promise<boolean>;\n\n  /**\n   * Parse the webhook payload into a normalized IncomingMessage.\n   * Return null to silently ignore the event (bot messages, edits, etc.).\n   */\n  parseIncomingMessage(event: H3Event): Promise<IncomingMessage | null>;\n\n  /**\n   * Hydrate bounded provider-native context after durable enqueue, outside the\n   * provider acknowledgement budget. Implementations must return references,\n   * metadata, and text only — never persist file bodies or credentials.\n   */\n  hydrateIncomingMessage?(incoming: IncomingMessage): Promise<IncomingMessage>;\n\n  /**\n   * Hydrate only verified sender identity before execution-context selection.\n   * This runs on the provider acknowledgement path and must avoid fetching\n   * conversation history or file bodies.\n   */\n  hydrateIncomingIdentity?(incoming: IncomingMessage): Promise<IncomingMessage>;\n\n  /**\n   * Provider-specific response returned only after a message is verified and\n   * durably enqueued. Discord uses this to return a type-5 deferred response\n   * within its three-second interaction deadline.\n   */\n  getImmediateWebhookResponse?(\n    incoming: IncomingMessage,\n  ): ImmediateWebhookResponse | null;\n\n  /**\n   * Return pre-canonical thread ids used by older adapter versions. The\n   * integration handler checks these only when the canonical mapping is\n   * missing, then aliases a match to the canonical id without forking history.\n   */\n  getLegacyExternalThreadIds?(incoming: IncomingMessage): string[];\n\n  /**\n   * Send the agent's response back to the messaging platform.\n   *\n   * If `opts.placeholderRef` is provided (returned earlier by\n   * `postProcessingPlaceholder`), adapters that support in-place edits should\n   * update that placeholder message rather than posting a new one. Adapters\n   * without an \"update message\" API can ignore the ref and post fresh.\n   */\n  sendResponse(\n    message: OutgoingMessage,\n    context: IncomingMessage,\n    opts?: { placeholderRef?: string },\n  ): Promise<void>;\n\n  /**\n   * Optionally post a \"working on it…\" placeholder message immediately when a\n   * webhook arrives, before the agent loop runs. Adapters that support\n   * in-place message edits (Slack via `chat.update`, etc.) return an opaque\n   * `placeholderRef` that the webhook flow threads through to `sendResponse`\n   * so the same message is updated with the final answer once ready.\n   *\n   * Adapters without edit support should leave this undefined; the webhook\n   * handler will skip the placeholder step entirely.\n   */\n  postProcessingPlaceholder?(\n    incoming: IncomingMessage,\n  ): Promise<{ placeholderRef: string } | null>;\n\n  /** Start a provider-native progress/streaming surface for an agent run. */\n  startRunProgress?(\n    incoming: IncomingMessage,\n  ): Promise<PlatformRunProgress | null>;\n\n  /**\n   * Reattach a durable continuation to a provider-native progress surface\n   * previously started by this adapter. Adapters that cannot resume a native\n   * surface should omit this and the continuation will use its normal reply\n   * path instead.\n   */\n  resumeRunProgress?(\n    incoming: IncomingMessage,\n    ref: PlatformRunProgressRef,\n  ): Promise<PlatformRunProgress | null>;\n\n  /**\n   * Send a proactive outbound message to a platform destination. Adapters that\n   * only support direct replies can omit this.\n   */\n  sendMessageToTarget?(\n    message: OutgoingMessage,\n    target: OutboundTarget,\n  ): Promise<void>;\n\n  /**\n   * Format plain agent response text into a platform-appropriate message.\n   * Handles markdown conversion, message splitting for length limits, etc.\n   *\n   * `opts.threadDeepLinkUrl`, when present, is a URL back to the originating\n   * thread in the dispatch UI. Adapters that support rich blocks should\n   * render this as a button (Slack); adapters that don't may inline it as a\n   * link or simply omit it.\n   */\n  formatAgentResponse(\n    text: string,\n    opts?: { threadDeepLinkUrl?: string },\n  ): OutgoingMessage;\n\n  /** Return current connection/configuration status for the settings UI. */\n  getStatus(baseUrl?: string): Promise<IntegrationStatus>;\n}\n\nexport function assertPlatformCapability(\n  adapter: PlatformAdapter,\n  capability: keyof PlatformAdapterCapabilities,\n): void {\n  if (adapter.capabilities?.[capability] !== true) {\n    throw new UnsupportedPlatformCapabilityError(adapter.platform, capability);\n  }\n}\n\n/**\n * Options for the integrations plugin.\n */\nexport interface IntegrationsPluginOptions {\n  /** App identifier used by call-agent to prevent self-calls (e.g. \"dispatch\"). */\n  appId?: string;\n  /** Platform adapters to enable. Default: all built-in adapters with configured env keys. */\n  adapters?: PlatformAdapter[];\n  /** System prompt for the agent (same as agent-chat). Inherited from agent-chat plugin if not set. */\n  systemPrompt?: string;\n  /** Actions registry (same as agent-chat). */\n  actions?: Record<string, import(\"../agent/production-agent.js\").ActionEntry>;\n  /** Model to use. Defaults to the resolved engine's default model. */\n  model?: string;\n  /** Anthropic API key. Falls back to ANTHROPIC_API_KEY env var. */\n  apiKey?: string;\n  /** Agent engine to use. Defaults to the same engine resolver as web chat. */\n  engine?:\n    | import(\"../agent/engine/types.js\").AgentEngine\n    | string\n    | {\n        name: string;\n        config: Record<string, unknown>;\n      };\n  /**\n   * Resolve which owner should receive personal resource context and own the\n   * created chat thread for an incoming platform message.\n   */\n  resolveOwner?: (incoming: IncomingMessage) => string | Promise<string>;\n  /**\n   * Resolve the durable execution principal for an inbound provider message.\n   * Shared channels should use a service principal; DMs may use a verified\n   * linked user. When present this supersedes `resolveOwner`.\n   */\n  resolveExecutionContext?: (\n    incoming: IncomingMessage,\n  ) => IntegrationExecutionContext | Promise<IntegrationExecutionContext>;\n  /**\n   * Optional preprocessor for inbound platform messages. Can intercept special\n   * commands (such as `/link`) before the agent loop runs.\n   */\n  beforeProcess?: (\n    incoming: IncomingMessage,\n    adapter: PlatformAdapter,\n  ) => Promise<\n    | {\n        handled: true;\n        responseText?: string;\n      }\n    | { handled: false }\n  >;\n}\n\nexport interface IntegrationExecutionContext {\n  ownerEmail: string;\n  orgId: string | null;\n  principalType: \"user\" | \"service\";\n  installationId?: string;\n  scopeId?: string;\n}\n"]}

package/dist/mcp/build-server.d.ts

@@ -18,6 +18,7 @@
  * — it can be bundled into the serverless function alongside `mountMCP`.
  */
 import type { ActionEntry } from "../agent/production-agent.js";
+import type { ExternalAgentPolicy } from "./external-agent-policy.js";
 export interface MCPConfig {
     /** App name shown in MCP server info */
     name: string;
@@ -85,8 +86,9 @@ export interface MCPConfig {
      * from connectors. It is no longer gated behind an environment variable, and
      * the catalog is never inferred from the client name/user-agent.
      *
-     * `tool-search` stays available in the compact catalog so any trimmed tool is
-     * reachable on demand. Callers who need the full surface up front opt in
+     * `tool-search` stays available in the compact catalog for discovery. A
+     * searched action still needs the connector catalog or authenticated-read
+     * policy before `tools/call`; callers who need the full surface up front opt in
      * explicitly with `agent-native connect --full-catalog` (embeds a
      * `catalog_scope: "full"` claim in the connect-minted JWT) or the
      * deployment-wide `AGENT_NATIVE_MCP_FULL_CATALOG=1` env override.
@@ -95,6 +97,11 @@ export interface MCPConfig {
      * setting it on `MCPConfig` directly; the plugin copies it through.
      */
     connectorCatalog?: string[];
+    /**
+     * Optional policy for automatically exposing explicitly annotated,
+     * authenticated read actions to external MCP callers.
+     */
+    externalAgents?: ExternalAgentPolicy;
 }
 /**
  * Identity extracted from a verified MCP bearer token / JWT. Used to wrap

package/dist/mcp/build-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-server.d.ts","sourceRoot":"","sources":["../../src/mcp/build-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AASH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAgChE,MAAM,WAAW,SAAS;IACxB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;KAC1B,CAAC,CAAC;IACH,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChD,qEAAqE;IACrE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;kEAGkE;AAClE,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IAC5C;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GACtC,OAAO,CAgBT;AA0ZD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,cAAc,GAAG,SAAS,GAC/B;IACD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CA2BA;AA+hBD;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,iBAAiB,GAAG,SAAS,EACvC,WAAW,CAAC,EAAE,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAof7B;AAOD,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAc1C;AAyCD,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,GAAG,SAAS,CAIpB;AA+FD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,gBAAgB,CAAC,EAAE,MAAM,EACzB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAAO,GACxE,OAAO,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC,CA4ID;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAS7B;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GACtC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAc7B"}
+{"version":3,"file":"build-server.d.ts","sourceRoot":"","sources":["../../src/mcp/build-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AASH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA0BhE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAOtE,MAAM,WAAW,SAAS;IACxB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;KAC1B,CAAC,CAAC;IACH,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChD,qEAAqE;IACrE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;CACtC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;kEAGkE;AAClE,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IAC5C;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GACtC,OAAO,CAgBT;AA8eD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,cAAc,GAAG,SAAS,GAC/B;IACD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CA2BA;AA+hBD;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,iBAAiB,GAAG,SAAS,EACvC,WAAW,CAAC,EAAE,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAkgB7B;AAOD,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAc1C;AAyCD,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,GAAG,SAAS,CAIpB;AA+FD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,gBAAgB,CAAC,EAAE,MAAM,EACzB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAAO,GACxE,OAAO,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC,CA4ID;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAS7B;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GACtC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAc7B"}

package/dist/mcp/build-server.js

@@ -93,7 +93,7 @@ function explicitlyRequestsFullMcpCatalog(requestMeta) {
     // (100k+ tokens) into a context window just because a client called itself
     // "code"/"cursor"/"codex" was a recurring footgun. Everything else gets the
     // connector/compact catalog plus `tool-search`, which keeps every tool
-    // reachable on demand.
+    // discoverable; only permitted actions are callable without full opt-in.
     if (process.env.AGENT_NATIVE_MCP_FULL_CATALOG === "1")
         return true;
     return requestMeta?.fullCatalog === true;
@@ -117,19 +117,80 @@ function warnFullCatalogServed(toolCount) {
         `This is a large context payload meant to be a rare, explicit opt-in — most ` +
         `clients should use the default compact/connector catalog + tool-search instead.`);
 }
+function isAuthenticatedReadAction(entry) {
+    return (entry.http !== false &&
+        entry.http?.method === "GET" &&
+        entry.readOnly === true &&
+        entry.publicAgent?.expose === true &&
+        entry.publicAgent.readOnly === true &&
+        entry.publicAgent.requiresAuth === true);
+}
 /**
- * Returns true when the given action name is in the template's connector
- * catalog, OR is a builtin cross-app tool that is always included for
- * external connector clients. Builtin tool names from
- * `COMPACT_MCP_APP_CATALOG_BUILTINS` are always allowed since they are the
- * stable external-agent verb set.
+ * Hard exclusion list for the `authenticatedReads: "auto"` derivation ONLY
+ * (see `autoAuthenticatedReadNames` below). Explicit `connectorCatalog`
+ * entries are a deliberate, reviewed choice made by the app and are NOT
+ * affected by this list — an app can still list any of these names in
+ * `connectorCatalog` on purpose.
+ *
+ * These are the footgun families this file's other comments already call
+ * out ("removes footguns (db-exec, seed-*, extension tools, browser-session
+ * tools, etc.)" above, and "keeps db-exec / seed-* / extension /
+ * browser-session footguns off the external surface" near the connector
+ * tier below): generic core SQL access, template demo/seed data, the
+ * extension-management suite, live browser-session control, and Context
+ * X-Ray internals. `isAuthenticatedReadAction` only inspects action
+ * metadata (http/readOnly/publicAgent flags) — nothing stops a future
+ * change from mis-annotating one of these with that exact flag set again,
+ * the way `db-query`/`db-schema` were briefly (and accidentally) annotated
+ * before it was caught in review. These names can never be auto-derived
+ * from metadata alone; exposing one to external callers requires an
+ * explicit `connectorCatalog` entry.
  */
-function isActionInConnectorCatalog(name, config) {
-    if (COMPACT_MCP_APP_CATALOG_BUILTINS.has(name))
-        return true;
-    if (!Array.isArray(config.connectorCatalog))
-        return false;
-    return config.connectorCatalog.includes(name);
+const AUTO_READ_EXCLUDED_ACTION_NAMES = new Set([
+    "db-query",
+    "db-schema",
+    "db-exec",
+    "db-patch",
+    "context-manifest-get",
+    "context-pin",
+    "context-evict",
+    "context-restore",
+    "context-report",
+]);
+/**
+ * Substring/prefix patterns for excluded name *families* that aren't a
+ * fixed, enumerable set: `seed-*` varies per app/template, and the
+ * extension-management and browser-session tool suites use varying verb
+ * prefixes around a shared noun (e.g. `list-extensions`, `create-extension`,
+ * `hide-extension`; `list-browser-sessions`, `run-browser-session-action`) —
+ * so a leading-prefix match alone would miss most of them.
+ */
+const AUTO_READ_EXCLUDED_ACTION_PATTERNS = [
+    /^seed-/,
+    /extension/,
+    /browser-session/,
+];
+function isAutoReadExcludedActionName(name) {
+    return (AUTO_READ_EXCLUDED_ACTION_NAMES.has(name) ||
+        AUTO_READ_EXCLUDED_ACTION_PATTERNS.some((pattern) => pattern.test(name)));
+}
+function autoAuthenticatedReadNames(actions, config) {
+    if (config.externalAgents?.authenticatedReads !== "auto")
+        return new Set();
+    return new Set(Object.entries(actions)
+        .filter(([name, entry]) => isAuthenticatedReadAction(entry) &&
+        !isAutoReadExcludedActionName(name))
+        .map(([name]) => name));
+}
+function externalAgentDenySet(config) {
+    return new Set((config.externalAgents?.denyActions ?? [])
+        .map((name) => name.trim())
+        .filter(Boolean));
+}
+function externalAgentWritesAreAskAppOnly(config) {
+    return (config.externalAgents?.writes === "ask_app_only" ||
+        (config.externalAgents?.authenticatedReads === "auto" &&
+            config.externalAgents?.writes !== "allowlisted"));
 }
 function metadataObject(value) {
     return value && typeof value === "object" && !Array.isArray(value)
@@ -926,15 +987,19 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
     const advertisedActionsBeforeConnector = compactMcpAppCatalog
         ? Object.fromEntries(Object.entries(visibleActions).filter(([name, entry]) => isActionAdvertisedInCompactMcpAppCatalog(name, entry, config)))
         : visibleActions;
+    const autoReadNames = autoAuthenticatedReadNames(visibleActions, config);
+    const connectorNames = new Set([
+        ...(config.connectorCatalog ?? []),
+        ...autoReadNames,
+    ]);
+    const denyNames = externalAgentDenySet(config);
+    const automaticConnectorPolicyActive = config.externalAgents?.authenticatedReads === "auto";
     // Connector-catalog tier: when a template declares a connector allow-list,
-    // serve exactly that curated surface (+ cross-app builtins + tool-search) to
-    // external callers unless they explicitly opted into the full catalog. This
-    // is active by default whenever a catalog is declared — no env flag required —
-    // so the ~105-tool full catalog can never leak just because a deployment
-    // forgot to set one. It also keeps db-exec / seed-* / extension /
+    // serve exactly that curated surface plus any explicitly annotated
+    // authenticated reads from `externalAgents.authenticatedReads: "auto"`.
+    // This stays compact by default and keeps db-exec / seed-* / extension /
     // browser-session footguns off the external surface.
-    const connectorCatalogActive = Array.isArray(config.connectorCatalog) &&
-        config.connectorCatalog.length > 0 &&
+    const connectorCatalogActive = (connectorNames.size > 0 || automaticConnectorPolicyActive) &&
         !fullCatalogRequested;
     // When the connector catalog is active, filter directly from visibleActions
     // rather than advertisedActionsBeforeConnector. This ensures the connector
@@ -942,7 +1007,19 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
     // narrow to just the compact-catalog builtins when shouldUseCompactMcpCatalogByDefault
     // would have activated the compact catalog for the same caller.
     const advertisedActions = connectorCatalogActive
-        ? Object.fromEntries(Object.entries(visibleActions).filter(([name]) => isActionInConnectorCatalog(name, config)))
+        ? Object.fromEntries(Object.entries(visibleActions).filter(([name, entry]) => {
+            if (denyNames.has(name))
+                return false;
+            if (COMPACT_MCP_APP_CATALOG_BUILTINS.has(name))
+                return true;
+            if (!connectorNames.has(name))
+                return false;
+            if (externalAgentWritesAreAskAppOnly(config) &&
+                entry.readOnly !== true) {
+                return false;
+            }
+            return true;
+        }))
         : advertisedActionsBeforeConnector;
     if (fullCatalogRequested) {
         warnFullCatalogServed(Object.keys(advertisedActions).length);