@agent-native/dispatch 0.15.2 → 0.15.3

package/dist/actions/provider-api-register.js

@@ -1,27 +1,7 @@
-import { defineAction } from "@agent-native/core";
 import { getDbExec } from "@agent-native/core/db";
-import { upsertCustomProvider, deleteCustomProvider, listCustomProviders, getCustomProvider, assertCanMutateCustomProviderScope, } from "@agent-native/core/provider-api";
+import { createCustomProviderRegistrationAction } from "@agent-native/core/provider-api/actions/custom-provider-registration";
 import { getCredentialContext } from "@agent-native/core/server";
-import { z } from "zod";
-/**
- * Resolve the caller's role in a specific org, straight from `org_members`.
- *
- * `getCredentialContext()` (from `@agent-native/core/server`) only exposes
- * `{ userEmail, orgId }` — no role. `getOrgContext()` (from
- * `@agent-native/core/org`) resolves role but requires an `H3Event`, which
- * `defineAction` handlers are not given. This mirrors the established
- * no-event role-lookup idiom already used for org-admin gating inside
- * agent-callable/background code (see `isCurrentUserOrgAdmin` in
- * `packages/core/src/jobs/tools.ts`, `getViewerOrgRole` in
- * `packages/dispatch/src/server/lib/usage-metrics-store.ts`, and the same
- * query in `packages/core/src/mcp/actions/service-token-access.ts`) — same
- * SQL, same fail-closed-to-null-on-error semantics. Returns null (never an
- * org role) on any lookup error or when the caller has no membership row in
- * this org.
- */
 async function resolveCallerOrgRole(orgId, email) {
-    if (!orgId)
-        return null;
     try {
         const client = getDbExec();
         const { rows } = await client.execute({
@@ -37,41 +17,7 @@ async function resolveCallerOrgRole(orgId, email) {
         return null;
     }
 }
-const AuthSchema = z.discriminatedUnion("type", [
-    z.object({
-        type: z.literal("none"),
-    }),
-    z.object({
-        type: z.literal("bearer"),
-        credentialKey: z
-            .string()
-            .min(1)
-            .describe("Name of the credential key (e.g. MY_API_TOKEN). Must already be saved via app secrets — this action never accepts secret values."),
-    }),
-    z.object({
-        type: z.literal("basic"),
-        usernameKey: z
-            .string()
-            .min(1)
-            .describe("Credential key name for the username/login."),
-        passwordKey: z
-            .string()
-            .min(1)
-            .describe("Credential key name for the password/secret."),
-    }),
-    z.object({
-        type: z.literal("api-key-header"),
-        credentialKey: z
-            .string()
-            .min(1)
-            .describe("Credential key name for the API key value."),
-        headerName: z
-            .string()
-            .min(1)
-            .describe("HTTP header name to send the key in (e.g. X-Api-Key)."),
-    }),
-]);
-export default defineAction({
+export default createCustomProviderRegistrationAction({
     description: `Register or update a custom API provider so the agent can call it via provider-api-request and look up its docs via provider-api-docs.
 
 IMPORTANT — credentials:
@@ -81,142 +27,7 @@ IMPORTANT — credentials:
   google-service-account and oauth-bearer are NOT supported for custom providers.
 
 After registration the provider appears in provider-api-catalog and can be used with provider-api-request.`,
-    schema: z.object({
-        operation: z
-            .enum(["upsert", "delete", "list", "get"])
-            .default("upsert")
-            .describe("Operation: upsert (create or update), delete (remove), list (all custom providers), get (single provider)."),
-        id: z
-            .string()
-            .min(1)
-            .max(64)
-            .optional()
-            .describe("Provider slug (e.g. my-api). Lowercase letters, digits, hyphens only. Required for upsert/delete/get."),
-        label: z
-            .string()
-            .min(1)
-            .max(200)
-            .optional()
-            .describe("Human-readable name (e.g. 'My Analytics API'). Required for upsert."),
-        baseUrl: z
-            .string()
-            .url()
-            .optional()
-            .describe("Base URL for the API (e.g. https://api.example.com/v1). Required for upsert. Must be a public https/http URL."),
-        auth: AuthSchema.optional().describe("Auth configuration. Required for upsert. Use type 'none' for public APIs."),
-        docsUrls: z
-            .array(z.string().url())
-            .optional()
-            .describe("Optional list of documentation URLs for this provider."),
-        allowedHostSuffixes: z
-            .array(z.string())
-            .optional()
-            .describe("Optional list of additional host suffixes requests may target beyond the base URL origin (e.g. ['example.com'])."),
-        defaultHeaders: z
-            .record(z.string(), z.string())
-            .optional()
-            .describe("Optional headers to include on every request (e.g. { 'Accept': 'application/json' })."),
-        notes: z
-            .string()
-            .max(1000)
-            .optional()
-            .describe("Optional notes about this provider shown in the catalog."),
-        scope: z
-            .enum(["user", "org"])
-            .default("org")
-            .describe("Whether to store the provider for the current user only ('user') or for the whole workspace ('org')."),
-    }),
-    http: false,
-    run: async ({ operation, id, label, baseUrl, auth, docsUrls, allowedHostSuffixes, defaultHeaders, notes, scope, }) => {
-        const ctx = getCredentialContext();
-        if (!ctx) {
-            throw new Error("provider-api-register requires an authenticated request context.");
-        }
-        const scopeId = scope === "org" ? (ctx.orgId ?? ctx.userEmail) : ctx.userEmail;
-        // Only upsert/delete mutate state; list/get remain readable by any org
-        // member (scoping org-scoped reads is left as a follow-up — see plan
-        // 014). Resolve the caller's role in the *target* org (`scopeId`, which
-        // for scope === "org" is exactly `ctx.orgId`) and enforce owner/admin
-        // before allowing an org-scoped write. `assertCanMutateCustomProviderScope`
-        // is the single source of truth for this check and is also enforced a
-        // second time inside `upsertCustomProvider`/`deleteCustomProvider`
-        // themselves (defense in depth) — calling it here too gives a clear,
-        // early error before any other work happens.
-        //
-        // When the caller has no active org (`ctx.orgId` is null — a solo user,
-        // or an app that hasn't wired `resolveOrgId` at all), `scopeId` above
-        // already collapsed to `ctx.userEmail`: there is no shared org resource
-        // to protect, and no *other* caller can ever address that same scopeId
-        // (every other request's fallback is scoped to *its own* email). Treat
-        // that case like sole ownership of a personal bucket — consistent with
-        // `org/context.ts`'s auto-created personal org, which also assigns the
-        // user role "owner" — rather than hard-rejecting scope: "org" (the
-        // action's own default) for every solo user or org-less app.
-        let orgRole = null;
-        if ((operation === "upsert" || operation === "delete") && scope === "org") {
-            orgRole = ctx.orgId
-                ? await resolveCallerOrgRole(ctx.orgId, ctx.userEmail)
-                : "owner";
-            assertCanMutateCustomProviderScope(scope, scopeId, orgRole);
-        }
-        if (operation === "list") {
-            const providers = await listCustomProviders(scope, scopeId);
-            return {
-                providers: providers.map((p) => ({
-                    id: p.id,
-                    label: p.label,
-                    baseUrl: p.baseUrl,
-                    authType: p.auth.type,
-                    docsUrls: p.docsUrls,
-                    notes: p.notes,
-                    updatedAt: p.updatedAt,
-                })),
-                count: providers.length,
-            };
-        }
-        if (operation === "get") {
-            if (!id)
-                throw new Error("id is required for get operation.");
-            const provider = await getCustomProvider(scope, scopeId, id);
-            if (!provider) {
-                return { found: false, id };
-            }
-            return { found: true, provider };
-        }
-        if (operation === "delete") {
-            if (!id)
-                throw new Error("id is required for delete operation.");
-            const deleted = await deleteCustomProvider(scope, scopeId, id, orgRole);
-            return { deleted, id };
-        }
-        // upsert
-        if (!id)
-            throw new Error("id is required for upsert operation.");
-        if (!label)
-            throw new Error("label is required for upsert operation.");
-        if (!baseUrl)
-            throw new Error("baseUrl is required for upsert operation.");
-        if (!auth)
-            throw new Error("auth is required for upsert operation.");
-        await upsertCustomProvider({
-            scope,
-            scopeId,
-            id,
-            label,
-            baseUrl,
-            auth,
-            docsUrls,
-            allowedHostSuffixes,
-            defaultHeaders,
-            notes,
-            orgRole,
-        });
-        return {
-            registered: true,
-            id,
-            label,
-            message: `Custom provider "${id}" registered. Use provider-api-catalog to inspect it and provider-api-request to call it.`,
-        };
-    },
+    getContext: getCredentialContext,
+    resolveOrgRole: resolveCallerOrgRole,
 });
 //# sourceMappingURL=provider-api-register.js.map

package/dist/actions/provider-api-register.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-api-register.js","sourceRoot":"","sources":["../../src/actions/provider-api-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,kCAAkC,GACnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,oBAAoB,CACjC,KAAoB,EACpB,KAAa;IAEb,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,4EAA4E;YACjF,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAI,IAAI,CAAC,CAAC,CAAwB,CAAC,IAAI,CAAC;QAClD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9C,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;KACxB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CACP,kIAAkI,CACnI;KACJ,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,8CAA8C,CAAC;KAC5D,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACjC,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,4CAA4C,CAAC;QACzD,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,uDAAuD,CAAC;KACrE,CAAC;CACH,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE;;;;;;;;2GAQ4F;IACzG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC;aACT,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;aACzC,OAAO,CAAC,QAAQ,CAAC;aACjB,QAAQ,CACP,4GAA4G,CAC7G;QACH,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,EAAE;aACV,QAAQ,CACP,uGAAuG,CACxG;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,qEAAqE,CACtE;QACH,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CACP,+GAA+G,CAChH;QACH,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAClC,2EAA2E,CAC5E;QACD,QAAQ,EAAE,CAAC;aACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;aACvB,QAAQ,EAAE;aACV,QAAQ,CAAC,wDAAwD,CAAC;QACrE,mBAAmB,EAAE,CAAC;aACnB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,kHAAkH,CACnH;QACH,cAAc,EAAE,CAAC;aACd,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,EAAE;aACV,QAAQ,CACP,uFAAuF,CACxF;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,IAAI,CAAC;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;aACrB,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CACP,sGAAsG,CACvG;KACJ,CAAC;IACF,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,KAAK,EAAE,EACV,SAAS,EACT,EAAE,EACF,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,mBAAmB,EACnB,cAAc,EACd,KAAK,EACL,KAAK,GACN,EAAE,EAAE;QACH,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GACX,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QAEjE,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,4EAA4E;QAC5E,sEAAsE;QACtE,mEAAmE;QACnE,qEAAqE;QACrE,6CAA6C;QAC7C,EAAE;QACF,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,6DAA6D;QAC7D,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ,CAAC,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YAC1E,OAAO,GAAG,GAAG,CAAC,KAAK;gBACjB,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC;gBACtD,CAAC,CAAC,OAAO,CAAC;YACZ,kCAAkC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC5D,OAAO;gBACL,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC/B,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;oBACrB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,SAAS,EAAE,CAAC,CAAC,SAAS;iBACvB,CAAC,CAAC;gBACH,KAAK,EAAE,SAAS,CAAC,MAAM;aACxB,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC9B,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnC,CAAC;QAED,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;YACxE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACzB,CAAC;QAED,SAAS;QACT,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAErE,MAAM,oBAAoB,CAAC;YACzB,KAAK;YACL,OAAO;YACP,EAAE;YACF,KAAK;YACL,OAAO;YACP,IAAI;YACJ,QAAQ;YACR,mBAAmB;YACnB,cAAc;YACd,KAAK;YACL,OAAO;SACR,CAAC,CAAC;QAEH,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,EAAE;YACF,KAAK;YACL,OAAO,EAAE,oBAAoB,EAAE,2FAA2F;SAC3H,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { getDbExec } from \"@agent-native/core/db\";\nimport {\n  upsertCustomProvider,\n  deleteCustomProvider,\n  listCustomProviders,\n  getCustomProvider,\n  assertCanMutateCustomProviderScope,\n} from \"@agent-native/core/provider-api\";\nimport { getCredentialContext } from \"@agent-native/core/server\";\nimport { z } from \"zod\";\n\n/**\n * Resolve the caller's role in a specific org, straight from `org_members`.\n *\n * `getCredentialContext()` (from `@agent-native/core/server`) only exposes\n * `{ userEmail, orgId }` — no role. `getOrgContext()` (from\n * `@agent-native/core/org`) resolves role but requires an `H3Event`, which\n * `defineAction` handlers are not given. This mirrors the established\n * no-event role-lookup idiom already used for org-admin gating inside\n * agent-callable/background code (see `isCurrentUserOrgAdmin` in\n * `packages/core/src/jobs/tools.ts`, `getViewerOrgRole` in\n * `packages/dispatch/src/server/lib/usage-metrics-store.ts`, and the same\n * query in `packages/core/src/mcp/actions/service-token-access.ts`) — same\n * SQL, same fail-closed-to-null-on-error semantics. Returns null (never an\n * org role) on any lookup error or when the caller has no membership row in\n * this org.\n */\nasync function resolveCallerOrgRole(\n  orgId: string | null,\n  email: string,\n): Promise<string | null> {\n  if (!orgId) return null;\n  try {\n    const client = getDbExec();\n    const { rows } = await client.execute({\n      sql: `SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,\n      args: [orgId, email.toLowerCase()],\n    });\n    if (rows.length === 0) return null;\n    const role = (rows[0] as { role?: unknown }).role;\n    return typeof role === \"string\" && role ? role : null;\n  } catch {\n    return null;\n  }\n}\n\nconst AuthSchema = z.discriminatedUnion(\"type\", [\n  z.object({\n    type: z.literal(\"none\"),\n  }),\n  z.object({\n    type: z.literal(\"bearer\"),\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\n        \"Name of the credential key (e.g. MY_API_TOKEN). Must already be saved via app secrets — this action never accepts secret values.\",\n      ),\n  }),\n  z.object({\n    type: z.literal(\"basic\"),\n    usernameKey: z\n      .string()\n      .min(1)\n      .describe(\"Credential key name for the username/login.\"),\n    passwordKey: z\n      .string()\n      .min(1)\n      .describe(\"Credential key name for the password/secret.\"),\n  }),\n  z.object({\n    type: z.literal(\"api-key-header\"),\n    credentialKey: z\n      .string()\n      .min(1)\n      .describe(\"Credential key name for the API key value.\"),\n    headerName: z\n      .string()\n      .min(1)\n      .describe(\"HTTP header name to send the key in (e.g. X-Api-Key).\"),\n  }),\n]);\n\nexport default defineAction({\n  description: `Register or update a custom API provider so the agent can call it via provider-api-request and look up its docs via provider-api-docs.\n\nIMPORTANT — credentials:\n- This action stores only credential KEY NAMES, never secret values.\n- If the required API key is not yet saved, instruct the user to add it via app Settings → Keys, or use the create-vault-secret action, before calling this action.\n- Supported auth kinds: none, bearer, basic, api-key-header.\n  google-service-account and oauth-bearer are NOT supported for custom providers.\n\nAfter registration the provider appears in provider-api-catalog and can be used with provider-api-request.`,\n  schema: z.object({\n    operation: z\n      .enum([\"upsert\", \"delete\", \"list\", \"get\"])\n      .default(\"upsert\")\n      .describe(\n        \"Operation: upsert (create or update), delete (remove), list (all custom providers), get (single provider).\",\n      ),\n    id: z\n      .string()\n      .min(1)\n      .max(64)\n      .optional()\n      .describe(\n        \"Provider slug (e.g. my-api). Lowercase letters, digits, hyphens only. Required for upsert/delete/get.\",\n      ),\n    label: z\n      .string()\n      .min(1)\n      .max(200)\n      .optional()\n      .describe(\n        \"Human-readable name (e.g. 'My Analytics API'). Required for upsert.\",\n      ),\n    baseUrl: z\n      .string()\n      .url()\n      .optional()\n      .describe(\n        \"Base URL for the API (e.g. https://api.example.com/v1). Required for upsert. Must be a public https/http URL.\",\n      ),\n    auth: AuthSchema.optional().describe(\n      \"Auth configuration. Required for upsert. Use type 'none' for public APIs.\",\n    ),\n    docsUrls: z\n      .array(z.string().url())\n      .optional()\n      .describe(\"Optional list of documentation URLs for this provider.\"),\n    allowedHostSuffixes: z\n      .array(z.string())\n      .optional()\n      .describe(\n        \"Optional list of additional host suffixes requests may target beyond the base URL origin (e.g. ['example.com']).\",\n      ),\n    defaultHeaders: z\n      .record(z.string(), z.string())\n      .optional()\n      .describe(\n        \"Optional headers to include on every request (e.g. { 'Accept': 'application/json' }).\",\n      ),\n    notes: z\n      .string()\n      .max(1000)\n      .optional()\n      .describe(\"Optional notes about this provider shown in the catalog.\"),\n    scope: z\n      .enum([\"user\", \"org\"])\n      .default(\"org\")\n      .describe(\n        \"Whether to store the provider for the current user only ('user') or for the whole workspace ('org').\",\n      ),\n  }),\n  http: false,\n  run: async ({\n    operation,\n    id,\n    label,\n    baseUrl,\n    auth,\n    docsUrls,\n    allowedHostSuffixes,\n    defaultHeaders,\n    notes,\n    scope,\n  }) => {\n    const ctx = getCredentialContext();\n    if (!ctx) {\n      throw new Error(\n        \"provider-api-register requires an authenticated request context.\",\n      );\n    }\n    const scopeId =\n      scope === \"org\" ? (ctx.orgId ?? ctx.userEmail) : ctx.userEmail;\n\n    // Only upsert/delete mutate state; list/get remain readable by any org\n    // member (scoping org-scoped reads is left as a follow-up — see plan\n    // 014). Resolve the caller's role in the *target* org (`scopeId`, which\n    // for scope === \"org\" is exactly `ctx.orgId`) and enforce owner/admin\n    // before allowing an org-scoped write. `assertCanMutateCustomProviderScope`\n    // is the single source of truth for this check and is also enforced a\n    // second time inside `upsertCustomProvider`/`deleteCustomProvider`\n    // themselves (defense in depth) — calling it here too gives a clear,\n    // early error before any other work happens.\n    //\n    // When the caller has no active org (`ctx.orgId` is null — a solo user,\n    // or an app that hasn't wired `resolveOrgId` at all), `scopeId` above\n    // already collapsed to `ctx.userEmail`: there is no shared org resource\n    // to protect, and no *other* caller can ever address that same scopeId\n    // (every other request's fallback is scoped to *its own* email). Treat\n    // that case like sole ownership of a personal bucket — consistent with\n    // `org/context.ts`'s auto-created personal org, which also assigns the\n    // user role \"owner\" — rather than hard-rejecting scope: \"org\" (the\n    // action's own default) for every solo user or org-less app.\n    let orgRole: string | null = null;\n    if ((operation === \"upsert\" || operation === \"delete\") && scope === \"org\") {\n      orgRole = ctx.orgId\n        ? await resolveCallerOrgRole(ctx.orgId, ctx.userEmail)\n        : \"owner\";\n      assertCanMutateCustomProviderScope(scope, scopeId, orgRole);\n    }\n\n    if (operation === \"list\") {\n      const providers = await listCustomProviders(scope, scopeId);\n      return {\n        providers: providers.map((p) => ({\n          id: p.id,\n          label: p.label,\n          baseUrl: p.baseUrl,\n          authType: p.auth.type,\n          docsUrls: p.docsUrls,\n          notes: p.notes,\n          updatedAt: p.updatedAt,\n        })),\n        count: providers.length,\n      };\n    }\n\n    if (operation === \"get\") {\n      if (!id) throw new Error(\"id is required for get operation.\");\n      const provider = await getCustomProvider(scope, scopeId, id);\n      if (!provider) {\n        return { found: false, id };\n      }\n      return { found: true, provider };\n    }\n\n    if (operation === \"delete\") {\n      if (!id) throw new Error(\"id is required for delete operation.\");\n      const deleted = await deleteCustomProvider(scope, scopeId, id, orgRole);\n      return { deleted, id };\n    }\n\n    // upsert\n    if (!id) throw new Error(\"id is required for upsert operation.\");\n    if (!label) throw new Error(\"label is required for upsert operation.\");\n    if (!baseUrl) throw new Error(\"baseUrl is required for upsert operation.\");\n    if (!auth) throw new Error(\"auth is required for upsert operation.\");\n\n    await upsertCustomProvider({\n      scope,\n      scopeId,\n      id,\n      label,\n      baseUrl,\n      auth,\n      docsUrls,\n      allowedHostSuffixes,\n      defaultHeaders,\n      notes,\n      orgRole,\n    });\n\n    return {\n      registered: true,\n      id,\n      label,\n      message: `Custom provider \"${id}\" registered. Use provider-api-catalog to inspect it and provider-api-request to call it.`,\n    };\n  },\n});\n"]}
+{"version":3,"file":"provider-api-register.js","sourceRoot":"","sources":["../../src/actions/provider-api-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,sCAAsC,EAAE,MAAM,sEAAsE,CAAC;AAC9H,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,KAAK,UAAU,oBAAoB,CACjC,KAAa,EACb,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,4EAA4E;YACjF,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAI,IAAI,CAAC,CAAC,CAAwB,CAAC,IAAI,CAAC;QAClD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,eAAe,sCAAsC,CAAC;IACpD,WAAW,EAAE;;;;;;;;2GAQ4F;IACzG,UAAU,EAAE,oBAAoB;IAChC,cAAc,EAAE,oBAAoB;CACrC,CAAC,CAAC","sourcesContent":["import { getDbExec } from \"@agent-native/core/db\";\nimport { createCustomProviderRegistrationAction } from \"@agent-native/core/provider-api/actions/custom-provider-registration\";\nimport { getCredentialContext } from \"@agent-native/core/server\";\n\nasync function resolveCallerOrgRole(\n  orgId: string,\n  email: string,\n): Promise<string | null> {\n  try {\n    const client = getDbExec();\n    const { rows } = await client.execute({\n      sql: `SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,\n      args: [orgId, email.toLowerCase()],\n    });\n    if (rows.length === 0) return null;\n    const role = (rows[0] as { role?: unknown }).role;\n    return typeof role === \"string\" && role ? role : null;\n  } catch {\n    return null;\n  }\n}\n\nexport default createCustomProviderRegistrationAction({\n  description: `Register or update a custom API provider so the agent can call it via provider-api-request and look up its docs via provider-api-docs.\n\nIMPORTANT — credentials:\n- This action stores only credential KEY NAMES, never secret values.\n- If the required API key is not yet saved, instruct the user to add it via app Settings → Keys, or use the create-vault-secret action, before calling this action.\n- Supported auth kinds: none, bearer, basic, api-key-header.\n  google-service-account and oauth-bearer are NOT supported for custom providers.\n\nAfter registration the provider appears in provider-api-catalog and can be used with provider-api-request.`,\n  getContext: getCredentialContext,\n  resolveOrgRole: resolveCallerOrgRole,\n});\n"]}

package/dist/actions/provider-api-request.d.ts

@@ -1,5 +1,37 @@
-declare const _default: import("@agent-native/core").ActionDefinition<{
-    provider: string;
+declare const _default: import("node_modules/@agent-native/core/dist/action.js").ActionDefinition<{
+    provider: unknown;
+    method?: "DELETE" | "GET" | "HEAD" | "PATCH" | "POST" | "PUT" | undefined;
+    path: string;
+    query?: unknown;
+    headers?: Record<string, unknown> | undefined;
+    body?: unknown;
+    auth?: "default" | "none" | undefined;
+    connectionId?: string | undefined;
+    accountId?: string | undefined;
+    timeoutMs?: unknown;
+    maxBytes?: unknown;
+    saveToFile?: string | undefined;
+    stageAs?: string | undefined;
+    itemsPath?: string | undefined;
+    pagination?: {
+        nextCursorPath?: string | undefined;
+        cursorParam?: string | undefined;
+        cursorBodyPath?: string | undefined;
+        pageParam?: string | undefined;
+        startPage?: unknown;
+        offsetParam?: string | undefined;
+        pageSize?: unknown;
+        maxPages?: unknown;
+    } | undefined;
+    fetchAllPages?: {
+        cursorPath: string;
+        cursorParam?: string | undefined;
+        cursorBodyPath?: string | undefined;
+        itemsPath?: string | undefined;
+        maxPages?: unknown;
+    } | undefined;
+} | {
+    provider: unknown;
     method?: "DELETE" | "GET" | "HEAD" | "PATCH" | "POST" | "PUT" | undefined;
     path: string;
     query?: unknown;

package/dist/actions/provider-api-request.js

@@ -1,178 +1,13 @@
-import { defineAction } from "@agent-native/core";
-import { stagingExecuteRequest } from "@agent-native/core/provider-api/staging";
-import { getCredentialContext } from "@agent-native/core/server/request-context";
+import { createProviderApiRequestAction, createProviderApiRequestSchema, } from "@agent-native/core/provider-api/actions/provider-api";
 import { z } from "zod";
 import { DISPATCH_APP_ID, executeProviderApiRequest, } from "../server/lib/provider-api.js";
-import { buildProviderApiAuditSummary } from "./provider-api-audit.js";
-const MethodSchema = z.enum(["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD"]);
-const PaginationSchema = z
-    .object({
-    nextCursorPath: z
-        .string()
-        .optional()
-        .describe("Dot-path in the response JSON where the next cursor/token lives, e.g. 'next_cursor', 'meta.next', or 'nextPageToken'."),
-    cursorParam: z
-        .string()
-        .optional()
-        .describe("Query parameter name to inject the cursor into the next request. Use cursorBodyPath for APIs that page through POST bodies."),
-    cursorBodyPath: z
-        .string()
-        .optional()
-        .describe("Dot-path in the JSON request body to set to the next cursor. Use this for POST-body pagination."),
-    pageParam: z
-        .string()
-        .optional()
-        .describe("Use page-number mode: this query param is incremented on each page."),
-    startPage: z.coerce
-        .number()
-        .int()
-        .optional()
-        .describe("Starting page number for pageParam mode (default 1)."),
-    offsetParam: z
+export default createProviderApiRequestAction({ executeRequest: executeProviderApiRequest }, {
+    appId: DISPATCH_APP_ID,
+    description: "Make an arbitrary authenticated HTTP request to a shared workspace integration, configured provider API, or custom provider registered via provider-api-register. Use this as the flexible escape hatch when Dispatch needs a provider endpoint, filter, pagination mode, payload, or API version that no canned action models. The request is constrained to the provider host, uses configured credentials automatically, blocks private/internal URLs, and redacts secrets from responses.",
+    schema: createProviderApiRequestSchema(z
         .string()
-        .optional()
-        .describe("Use offset mode: this query param is incremented by pageSize on each request."),
-    pageSize: z.coerce
-        .number()
-        .int()
-        .min(1)
-        .optional()
-        .describe("Expected page size for offset increments. Defaults to the actual item count of the first page."),
-    maxPages: z.coerce
-        .number()
-        .int()
         .min(1)
-        .max(200)
-        .optional()
-        .describe("Maximum pages to fetch server-side (default 50, max 200)."),
-})
-    .optional();
-export default defineAction({
-    description: "Make an arbitrary authenticated HTTP request to a shared workspace integration, configured provider API, or custom provider registered via provider-api-register. Use this as the flexible escape hatch when Dispatch needs a provider endpoint, filter, pagination mode, payload, or API version that no canned action models. The request is constrained to the provider host, uses configured credentials automatically, blocks private/internal URLs, and redacts secrets from responses.",
-    schema: z.object({
-        provider: z
-            .string()
-            .min(1)
-            .describe("Provider id to call — built-in (e.g. slack, github, notion, hubspot, gmail, google_drive, google_calendar, granola, stripe, jira) or a custom provider id registered via provider-api-register. Use provider-api-catalog to list available providers."),
-        method: MethodSchema.default("GET").describe("HTTP method to use."),
-        path: z
-            .string()
-            .min(1)
-            .describe("Provider API path such as /search.messages, /repos/org/repo/issues, /crm/v3/objects/deals/search, or a full URL on an allowed provider host. Use placeholders from provider-api-catalog when provided."),
-        query: z
-            .unknown()
-            .optional()
-            .describe("Optional query params as a JSON object/string. Array values produce repeated query params."),
-        headers: z
-            .record(z.string(), z.unknown())
-            .optional()
-            .describe("Optional extra headers. Unsafe hop-by-hop headers are ignored. Auth headers are injected from stored credentials."),
-        body: z
-            .unknown()
-            .optional()
-            .describe("Optional request body. Objects/arrays are JSON encoded; strings are sent as-is."),
-        auth: z
-            .enum(["default", "none"])
-            .default("default")
-            .describe("Use default to inject configured provider auth. Use none only for public provider endpoints that intentionally require no auth."),
-        connectionId: z
-            .string()
-            .optional()
-            .describe("Optional shared workspace connection id to use when the provider has multiple granted connections."),
-        accountId: z
-            .string()
-            .optional()
-            .describe("Optional OAuth account id to use for OAuth-backed providers such as Gmail, Google Calendar, or Google Drive."),
-        timeoutMs: z.coerce
-            .number()
-            .int()
-            .min(1_000)
-            .max(120_000)
-            .optional()
-            .describe("Request timeout in milliseconds. Default 30000, max 120000."),
-        maxBytes: z.coerce
-            .number()
-            .int()
-            .min(1_000)
-            .max(4 * 1024 * 1024)
-            .optional()
-            .describe("Maximum response bytes to read. Default 1MB, max 4MB. Ignored when saveToFile is set (allows up to 20MB)."),
-        saveToFile: z
-            .string()
-            .optional()
-            .describe("Workspace file path to save the full response body to instead of returning it in context (e.g. 'analysis/provider-response.json'). When set, returns only a compact summary {savedTo, status, bytes, preview} and allows up to 20MB response. Useful for large datasets that would overflow context."),
-        stageAs: z
-            .string()
-            .min(1)
-            .optional()
-            .describe("When set, parse the response as an array of records and write them into a staged dataset with this name. Returns a compact summary instead of the raw body. Re-staging the same name replaces the previous dataset."),
-        itemsPath: z
-            .string()
-            .optional()
-            .describe("Dot-path to the items array in the response JSON, e.g. 'items', 'results', or 'data'. Omit for auto-detection."),
-        pagination: PaginationSchema.describe("Pagination config for server-side fetchAll when stageAs is set. Supports cursor (nextCursorPath + cursorParam or cursorBodyPath), page, and offset modes."),
-        fetchAllPages: z
-            .object({
-            cursorPath: z
-                .string()
-                .describe("Dot-path in the JSON response body where the next-page cursor lives, e.g. 'meta.next_cursor' or 'pagination.next_page_token'."),
-            cursorParam: z
-                .string()
-                .optional()
-                .describe("Query parameter name to pass the cursor on subsequent pages, e.g. 'cursor' or 'page_token'. Use cursorBodyPath instead for APIs that put cursors in POST bodies."),
-            cursorBodyPath: z
-                .string()
-                .optional()
-                .describe("Dot-path in the JSON request body to set to the next cursor. Use for POST-body pagination."),
-            itemsPath: z
-                .string()
-                .optional()
-                .describe("Dot-path to the items array in each response, e.g. 'results' or 'data.items'. When omitted, the whole response body is appended per page."),
-            maxPages: z.coerce
-                .number()
-                .int()
-                .min(1)
-                .max(50)
-                .optional()
-                .describe("Maximum pages to fetch. Default 10, max 50. Stops early when the cursor is empty."),
-        })
-            .optional()
-            .describe("Enable cursor-based pagination. After each response, reads cursorPath from the JSON body and re-issues the request with cursorParam or cursorBodyPath set, accumulating items from itemsPath (or whole bodies) until cursor is empty or maxPages is reached. Combine with saveToFile to write the full dataset to a workspace file."),
-    }),
+        .describe("Provider id to call — built-in (e.g. slack, github, notion, hubspot, gmail, google_drive, google_calendar, granola, stripe, jira) or a custom provider id registered via provider-api-register. Use provider-api-catalog to list available providers.")),
     http: false,
-    audit: {
-        recordInputs: false,
-        target: (args) => ({
-            type: "provider-api",
-            id: String(args.provider),
-            visibility: "private",
-        }),
-        summary: (args) => buildProviderApiAuditSummary(args),
-    },
-    run: async (args) => {
-        if (args.stageAs) {
-            const ctx = getCredentialContext();
-            if (!ctx) {
-                throw new Error("No authenticated context for provider API staging.");
-            }
-            return stagingExecuteRequest({
-                provider: args.provider,
-                method: args.method,
-                path: args.path,
-                query: args.query,
-                headers: args.headers,
-                body: args.body,
-                auth: args.auth,
-                connectionId: args.connectionId,
-                accountId: args.accountId,
-                timeoutMs: args.timeoutMs,
-                maxBytes: args.maxBytes,
-                stageAs: args.stageAs,
-                itemsPath: args.itemsPath,
-                pagination: args.pagination,
-            }, (reqArgs) => executeProviderApiRequest(reqArgs), { appId: DISPATCH_APP_ID, ownerEmail: ctx.userEmail });
-        }
-        return executeProviderApiRequest(args);
-    },
 });
 //# sourceMappingURL=provider-api-request.js.map

package/dist/actions/provider-api-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-api-request.js","sourceRoot":"","sources":["../../src/actions/provider-api-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,eAAe,EACf,yBAAyB,GAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEvE,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/E,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,uHAAuH,CACxH;IACH,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,6HAA6H,CAC9H;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,iGAAiG,CAClG;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,qEAAqE,CACtE;IACH,SAAS,EAAE,CAAC,CAAC,MAAM;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,sDAAsD,CAAC;IACnE,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+EAA+E,CAChF;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,gGAAgG,CACjG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2DAA2D,CAAC;CACzE,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,+dAA+d;IACje,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CACP,uPAAuP,CACxP;QACH,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACnE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CACP,wMAAwM,CACzM;QACH,KAAK,EAAE,CAAC;aACL,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CACP,4FAA4F,CAC7F;QACH,OAAO,EAAE,CAAC;aACP,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/B,QAAQ,EAAE;aACV,QAAQ,CACP,mHAAmH,CACpH;QACH,IAAI,EAAE,CAAC;aACJ,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CACP,iFAAiF,CAClF;QACH,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;aACzB,OAAO,CAAC,SAAS,CAAC;aAClB,QAAQ,CACP,iIAAiI,CAClI;QACH,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,oGAAoG,CACrG;QACH,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,8GAA8G,CAC/G;QACH,SAAS,EAAE,CAAC,CAAC,MAAM;aAChB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,KAAK,CAAC;aACV,GAAG,CAAC,OAAO,CAAC;aACZ,QAAQ,EAAE;aACV,QAAQ,CAAC,6DAA6D,CAAC;QAC1E,QAAQ,EAAE,CAAC,CAAC,MAAM;aACf,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,KAAK,CAAC;aACV,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;aACpB,QAAQ,EAAE;aACV,QAAQ,CACP,2GAA2G,CAC5G;QACH,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,sSAAsS,CACvS;QACH,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CACP,qNAAqN,CACtN;QACH,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,gHAAgH,CACjH;QACH,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CACnC,2JAA2J,CAC5J;QACD,aAAa,EAAE,CAAC;aACb,MAAM,CAAC;YACN,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,CACP,+HAA+H,CAChI;YACH,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,kKAAkK,CACnK;YACH,cAAc,EAAE,CAAC;iBACd,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,4FAA4F,CAC7F;YACH,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,2IAA2I,CAC5I;YACH,QAAQ,EAAE,CAAC,CAAC,MAAM;iBACf,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,EAAE,CAAC;iBACP,QAAQ,EAAE;iBACV,QAAQ,CACP,mFAAmF,CACpF;SACJ,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,CACP,qUAAqU,CACtU;KACJ,CAAC;IACF,IAAI,EAAE,KAAK;IACX,KAAK,EAAE;QACL,YAAY,EAAE,KAAK;QACnB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjB,IAAI,EAAE,cAAc;YACpB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;YACzB,UAAU,EAAE,SAAS;SACtB,CAAC;QACF,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC;KACtD;IACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,qBAAqB,CAC1B;gBACE,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAC/C,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,yBAAyB,CAC9B,IAAkE,CACnE,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\nimport { stagingExecuteRequest } from \"@agent-native/core/provider-api/staging\";\nimport { getCredentialContext } from \"@agent-native/core/server/request-context\";\nimport { z } from \"zod\";\n\nimport {\n  DISPATCH_APP_ID,\n  executeProviderApiRequest,\n} from \"../server/lib/provider-api.js\";\nimport { buildProviderApiAuditSummary } from \"./provider-api-audit.js\";\n\nconst MethodSchema = z.enum([\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"HEAD\"]);\n\nconst PaginationSchema = z\n  .object({\n    nextCursorPath: z\n      .string()\n      .optional()\n      .describe(\n        \"Dot-path in the response JSON where the next cursor/token lives, e.g. 'next_cursor', 'meta.next', or 'nextPageToken'.\",\n      ),\n    cursorParam: z\n      .string()\n      .optional()\n      .describe(\n        \"Query parameter name to inject the cursor into the next request. Use cursorBodyPath for APIs that page through POST bodies.\",\n      ),\n    cursorBodyPath: z\n      .string()\n      .optional()\n      .describe(\n        \"Dot-path in the JSON request body to set to the next cursor. Use this for POST-body pagination.\",\n      ),\n    pageParam: z\n      .string()\n      .optional()\n      .describe(\n        \"Use page-number mode: this query param is incremented on each page.\",\n      ),\n    startPage: z.coerce\n      .number()\n      .int()\n      .optional()\n      .describe(\"Starting page number for pageParam mode (default 1).\"),\n    offsetParam: z\n      .string()\n      .optional()\n      .describe(\n        \"Use offset mode: this query param is incremented by pageSize on each request.\",\n      ),\n    pageSize: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .optional()\n      .describe(\n        \"Expected page size for offset increments. Defaults to the actual item count of the first page.\",\n      ),\n    maxPages: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(200)\n      .optional()\n      .describe(\"Maximum pages to fetch server-side (default 50, max 200).\"),\n  })\n  .optional();\n\nexport default defineAction({\n  description:\n    \"Make an arbitrary authenticated HTTP request to a shared workspace integration, configured provider API, or custom provider registered via provider-api-register. Use this as the flexible escape hatch when Dispatch needs a provider endpoint, filter, pagination mode, payload, or API version that no canned action models. The request is constrained to the provider host, uses configured credentials automatically, blocks private/internal URLs, and redacts secrets from responses.\",\n  schema: z.object({\n    provider: z\n      .string()\n      .min(1)\n      .describe(\n        \"Provider id to call — built-in (e.g. slack, github, notion, hubspot, gmail, google_drive, google_calendar, granola, stripe, jira) or a custom provider id registered via provider-api-register. Use provider-api-catalog to list available providers.\",\n      ),\n    method: MethodSchema.default(\"GET\").describe(\"HTTP method to use.\"),\n    path: z\n      .string()\n      .min(1)\n      .describe(\n        \"Provider API path such as /search.messages, /repos/org/repo/issues, /crm/v3/objects/deals/search, or a full URL on an allowed provider host. Use placeholders from provider-api-catalog when provided.\",\n      ),\n    query: z\n      .unknown()\n      .optional()\n      .describe(\n        \"Optional query params as a JSON object/string. Array values produce repeated query params.\",\n      ),\n    headers: z\n      .record(z.string(), z.unknown())\n      .optional()\n      .describe(\n        \"Optional extra headers. Unsafe hop-by-hop headers are ignored. Auth headers are injected from stored credentials.\",\n      ),\n    body: z\n      .unknown()\n      .optional()\n      .describe(\n        \"Optional request body. Objects/arrays are JSON encoded; strings are sent as-is.\",\n      ),\n    auth: z\n      .enum([\"default\", \"none\"])\n      .default(\"default\")\n      .describe(\n        \"Use default to inject configured provider auth. Use none only for public provider endpoints that intentionally require no auth.\",\n      ),\n    connectionId: z\n      .string()\n      .optional()\n      .describe(\n        \"Optional shared workspace connection id to use when the provider has multiple granted connections.\",\n      ),\n    accountId: z\n      .string()\n      .optional()\n      .describe(\n        \"Optional OAuth account id to use for OAuth-backed providers such as Gmail, Google Calendar, or Google Drive.\",\n      ),\n    timeoutMs: z.coerce\n      .number()\n      .int()\n      .min(1_000)\n      .max(120_000)\n      .optional()\n      .describe(\"Request timeout in milliseconds. Default 30000, max 120000.\"),\n    maxBytes: z.coerce\n      .number()\n      .int()\n      .min(1_000)\n      .max(4 * 1024 * 1024)\n      .optional()\n      .describe(\n        \"Maximum response bytes to read. Default 1MB, max 4MB. Ignored when saveToFile is set (allows up to 20MB).\",\n      ),\n    saveToFile: z\n      .string()\n      .optional()\n      .describe(\n        \"Workspace file path to save the full response body to instead of returning it in context (e.g. 'analysis/provider-response.json'). When set, returns only a compact summary {savedTo, status, bytes, preview} and allows up to 20MB response. Useful for large datasets that would overflow context.\",\n      ),\n    stageAs: z\n      .string()\n      .min(1)\n      .optional()\n      .describe(\n        \"When set, parse the response as an array of records and write them into a staged dataset with this name. Returns a compact summary instead of the raw body. Re-staging the same name replaces the previous dataset.\",\n      ),\n    itemsPath: z\n      .string()\n      .optional()\n      .describe(\n        \"Dot-path to the items array in the response JSON, e.g. 'items', 'results', or 'data'. Omit for auto-detection.\",\n      ),\n    pagination: PaginationSchema.describe(\n      \"Pagination config for server-side fetchAll when stageAs is set. Supports cursor (nextCursorPath + cursorParam or cursorBodyPath), page, and offset modes.\",\n    ),\n    fetchAllPages: z\n      .object({\n        cursorPath: z\n          .string()\n          .describe(\n            \"Dot-path in the JSON response body where the next-page cursor lives, e.g. 'meta.next_cursor' or 'pagination.next_page_token'.\",\n          ),\n        cursorParam: z\n          .string()\n          .optional()\n          .describe(\n            \"Query parameter name to pass the cursor on subsequent pages, e.g. 'cursor' or 'page_token'. Use cursorBodyPath instead for APIs that put cursors in POST bodies.\",\n          ),\n        cursorBodyPath: z\n          .string()\n          .optional()\n          .describe(\n            \"Dot-path in the JSON request body to set to the next cursor. Use for POST-body pagination.\",\n          ),\n        itemsPath: z\n          .string()\n          .optional()\n          .describe(\n            \"Dot-path to the items array in each response, e.g. 'results' or 'data.items'. When omitted, the whole response body is appended per page.\",\n          ),\n        maxPages: z.coerce\n          .number()\n          .int()\n          .min(1)\n          .max(50)\n          .optional()\n          .describe(\n            \"Maximum pages to fetch. Default 10, max 50. Stops early when the cursor is empty.\",\n          ),\n      })\n      .optional()\n      .describe(\n        \"Enable cursor-based pagination. After each response, reads cursorPath from the JSON body and re-issues the request with cursorParam or cursorBodyPath set, accumulating items from itemsPath (or whole bodies) until cursor is empty or maxPages is reached. Combine with saveToFile to write the full dataset to a workspace file.\",\n      ),\n  }),\n  http: false,\n  audit: {\n    recordInputs: false,\n    target: (args) => ({\n      type: \"provider-api\",\n      id: String(args.provider),\n      visibility: \"private\",\n    }),\n    summary: (args) => buildProviderApiAuditSummary(args),\n  },\n  run: async (args) => {\n    if (args.stageAs) {\n      const ctx = getCredentialContext();\n      if (!ctx) {\n        throw new Error(\"No authenticated context for provider API staging.\");\n      }\n      return stagingExecuteRequest(\n        {\n          provider: args.provider,\n          method: args.method,\n          path: args.path,\n          query: args.query,\n          headers: args.headers,\n          body: args.body,\n          auth: args.auth,\n          connectionId: args.connectionId,\n          accountId: args.accountId,\n          timeoutMs: args.timeoutMs,\n          maxBytes: args.maxBytes,\n          stageAs: args.stageAs,\n          itemsPath: args.itemsPath,\n          pagination: args.pagination,\n        },\n        (reqArgs) => executeProviderApiRequest(reqArgs),\n        { appId: DISPATCH_APP_ID, ownerEmail: ctx.userEmail },\n      );\n    }\n    return executeProviderApiRequest(\n      args as unknown as Parameters<typeof executeProviderApiRequest>[0],\n    );\n  },\n});\n"]}
+{"version":3,"file":"provider-api-request.js","sourceRoot":"","sources":["../../src/actions/provider-api-request.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,GAC/B,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,eAAe,EACf,yBAAyB,GAC1B,MAAM,+BAA+B,CAAC;AAEvC,eAAe,8BAA8B,CAC3C,EAAE,cAAc,EAAE,yBAAyB,EAAE,EAC7C;IACE,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,+dAA+d;IACje,MAAM,EAAE,8BAA8B,CACpC,CAAC;SACE,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,uPAAuP,CACxP,CACJ;IACD,IAAI,EAAE,KAAK;CACZ,CACF,CAAC","sourcesContent":["import {\n  createProviderApiRequestAction,\n  createProviderApiRequestSchema,\n} from \"@agent-native/core/provider-api/actions/provider-api\";\nimport { z } from \"zod\";\n\nimport {\n  DISPATCH_APP_ID,\n  executeProviderApiRequest,\n} from \"../server/lib/provider-api.js\";\n\nexport default createProviderApiRequestAction(\n  { executeRequest: executeProviderApiRequest },\n  {\n    appId: DISPATCH_APP_ID,\n    description:\n      \"Make an arbitrary authenticated HTTP request to a shared workspace integration, configured provider API, or custom provider registered via provider-api-register. Use this as the flexible escape hatch when Dispatch needs a provider endpoint, filter, pagination mode, payload, or API version that no canned action models. The request is constrained to the provider host, uses configured credentials automatically, blocks private/internal URLs, and redacts secrets from responses.\",\n    schema: createProviderApiRequestSchema(\n      z\n        .string()\n        .min(1)\n        .describe(\n          \"Provider id to call — built-in (e.g. slack, github, notion, hubspot, gmail, google_drive, google_calendar, granola, stripe, jira) or a custom provider id registered via provider-api-register. Use provider-api-catalog to list available providers.\",\n        ),\n    ),\n    http: false,\n  },\n);\n"]}

package/dist/actions/query-staged-dataset.d.ts

@@ -1,4 +1,21 @@
-declare const _default: import("@agent-native/core").ActionDefinition<{
+declare const _default: import("node_modules/@agent-native/core/dist/action.js").ActionDefinition<{
+    datasetId: string;
+    where?: {
+        column: string;
+        op: "contains" | "equals" | "exists" | "gt" | "gte" | "lt" | "lte" | "not_contains" | "not_equals" | "not_exists";
+        value?: unknown;
+    }[] | undefined;
+    groupBy?: string[] | undefined;
+    aggregate?: {
+        column: string;
+        op: "avg" | "count" | "count_distinct" | "max" | "min" | "sum";
+        as?: string | undefined;
+    }[] | undefined;
+    select?: string[] | undefined;
+    orderBy?: string | undefined;
+    orderDir?: "asc" | "desc" | undefined;
+    limit?: unknown;
+} | {
     datasetId: string;
     where?: {
         column: string;

package/dist/actions/query-staged-dataset.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"query-staged-dataset.d.ts","sourceRoot":"","sources":["../../src/actions/query-staged-dataset.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;QAwHiB,EAAE;QAAW,IAAI;QAAa,SAAS"}
+{"version":3,"file":"query-staged-dataset.d.ts","sourceRoot":"","sources":["../../src/actions/query-staged-dataset.ts"],"names":[],"mappings":""}