@alfe.ai/integrations 0.6.4 → 0.6.5

package/dist/index.d.ts

@@ -450,6 +450,8 @@ declare class McpApplier {
    */
   applyForIntegration(integrationId: string, servers: McpServerDeclaration[], mergedConfig: Record<string, unknown>, opts?: {
     connectionId?: string;
+    connectionAuthorityVersion?: string;
+    strictReconcile?: boolean;
   }): Promise<string[]>;
   /**
    * Drop every entry owned by this integration. Store writes are
@@ -562,6 +564,8 @@ interface IntegrationInfo {
   version?: string;
   status: IntegrationStatus;
   installedAt?: string;
+  connectionAuthorityVersion?: string;
+  connectionAuthorityPendingVersion?: string;
   config?: Record<string, unknown>;
   error?: string;
 }
@@ -620,7 +624,12 @@ declare class IntegrationManager {
    */
   activate(integrationId: string, opts?: {
     forcePlugins?: boolean;
+    refresh?: boolean;
   }): Promise<ManagerResponse>;
+  /** Refresh only the consumers whose manifest depends on changed account authority. */
+  refreshConnections(integrationId: string, connectionAuthorityVersion: string, opts?: {
+    onBeforeRuntimeMutation?: () => Promise<void>;
+  }): Promise<void>;
   /**
    * Deactivate a running integration.
    *
@@ -1836,7 +1845,13 @@ interface IIntegrationManager {
     version: string;
     status: string;
     installedAt?: string;
+    connectionAuthorityVersion?: string;
+    connectionAuthorityPendingVersion?: string;
   }[]>;
+  /** Reconcile account-bearing MCP processes after their effective account set changes. */
+  refreshConnections(integrationId: string, connectionAuthorityVersion: string, opts?: {
+    onBeforeRuntimeMutation?: () => Promise<void>;
+  }): Promise<void>;
   /** Install an integration at a specific version with config */
   install(integrationId: string, version: string, config: unknown, customSource?: CustomInstallSource): Promise<void>;
   /** Activate an installed integration. `opts.forcePlugins` forces version-drift reinstall of already-installed plugins. */
@@ -1877,12 +1892,10 @@ interface IIntegrationManager {
 declare class IntegrationManagerAdapter implements IIntegrationManager {
   private readonly manager;
   constructor(manager: IntegrationManager);
-  getInstalledIntegrations(): Promise<{
-    id: string;
-    version: string;
-    status: string;
-    installedAt?: string;
-  }[]>;
+  getInstalledIntegrations(): ReturnType<IIntegrationManager['getInstalledIntegrations']>;
+  refreshConnections(integrationId: string, connectionAuthorityVersion: string, opts?: {
+    onBeforeRuntimeMutation?: () => Promise<void>;
+  }): Promise<void>;
   install(integrationId: string, version: string, config: unknown, customSource?: CustomInstallSource): Promise<void>;
   activate(integrationId: string, opts?: {
     forcePlugins?: boolean;

package/dist/index.js

@@ -907,7 +907,7 @@ function validateStateFile(value) {
 	const integrations = Object.create(null);
 	for (const [id, rawEntry] of Object.entries(value.integrations)) {
 		assertSafePathSegment(id, "Persisted integration id");
-		if (!isRecord$1(rawEntry) || typeof rawEntry.status !== "string" || !VALID_STATUSES.has(rawEntry.status) || typeof rawEntry.version !== "string" || typeof rawEntry.installedAt !== "string" || !isRecord$1(rawEntry.config) || rawEntry.error !== void 0 && typeof rawEntry.error !== "string" || rawEntry.reinstallAttempts !== void 0 && (typeof rawEntry.reinstallAttempts !== "number" || !Number.isSafeInteger(rawEntry.reinstallAttempts) || rawEntry.reinstallAttempts < 0) || rawEntry.customConnectionId !== void 0 && typeof rawEntry.customConnectionId !== "string") throw new Error(`Integration state entry "${id}" has an invalid shape`);
+		if (!isRecord$1(rawEntry) || typeof rawEntry.status !== "string" || !VALID_STATUSES.has(rawEntry.status) || typeof rawEntry.version !== "string" || typeof rawEntry.installedAt !== "string" || !isRecord$1(rawEntry.config) || rawEntry.error !== void 0 && typeof rawEntry.error !== "string" || rawEntry.reinstallAttempts !== void 0 && (typeof rawEntry.reinstallAttempts !== "number" || !Number.isSafeInteger(rawEntry.reinstallAttempts) || rawEntry.reinstallAttempts < 0) || rawEntry.customConnectionId !== void 0 && typeof rawEntry.customConnectionId !== "string" || rawEntry.connectionAuthorityVersion !== void 0 && (typeof rawEntry.connectionAuthorityVersion !== "string" || !/^[a-f0-9]{64}$/.test(rawEntry.connectionAuthorityVersion)) || rawEntry.connectionAuthorityPendingVersion !== void 0 && (typeof rawEntry.connectionAuthorityPendingVersion !== "string" || !/^[a-f0-9]{64}$/.test(rawEntry.connectionAuthorityPendingVersion))) throw new Error(`Integration state entry "${id}" has an invalid shape`);
 		integrations[id] = rawEntry;
 	}
 	return {
@@ -1697,7 +1697,7 @@ var IntegrationManager = class {
 	async activate(integrationId, opts) {
 		const entry = this.state.get(integrationId);
 		if (!entry) return this.err("NOT_FOUND", `Integration "${integrationId}" is not installed`);
-		if (entry.status === "active") return {
+		if (entry.status === "active" && !opts?.refresh) return {
 			ok: true,
 			payload: {
 				name: integrationId,
@@ -1705,7 +1705,7 @@ var IntegrationManager = class {
 				message: "Already active"
 			}
 		};
-		if (entry.status !== "configured" && entry.status !== "installed" && entry.status !== "error") return this.err("INVALID_STATE", `Cannot activate integration in "${entry.status}" state`);
+		if (entry.status !== "configured" && entry.status !== "installed" && entry.status !== "error" && !(entry.status === "active" && opts?.refresh)) return this.err("INVALID_STATE", `Cannot activate integration in "${entry.status}" state`);
 		this.log.info(`Activating integration: ${integrationId}`);
 		try {
 			const installPath = this.installer.getInstallPath(integrationId);
@@ -1844,6 +1844,41 @@ var IntegrationManager = class {
 			return this.err("ACTIVATE_FAILED", message);
 		}
 	}
+	/** Refresh only the consumers whose manifest depends on changed account authority. */
+	async refreshConnections(integrationId, connectionAuthorityVersion, opts) {
+		if (!/^[a-f0-9]{64}$/.test(connectionAuthorityVersion)) throw new Error("Invalid connection authority version");
+		const entry = this.state.get(integrationId);
+		if (!entry || entry.status !== "active" && !(entry.status === "error" && entry.connectionAuthorityPendingVersion)) throw new Error("Connection refresh requires an active integration or a pending authority retry");
+		if (entry.connectionAuthorityVersion === connectionAuthorityVersion && !entry.connectionAuthorityPendingVersion) return;
+		const manifest = parseManifestFile(join(this.installer.getInstallPath(integrationId), "alfe-integration.yaml"));
+		this.state.update(integrationId, { connectionAuthorityPendingVersion: connectionAuthorityVersion });
+		const supported = this.manifestSupportsRegisteredRuntime(manifest);
+		if (supported && (Boolean(manifest.hooks.post_activate) || [...this.runtimeAppliers.keys()].some((runtime) => {
+			if (manifest.supported_agents?.length && !manifest.supported_agents.includes(runtime)) return false;
+			const installs = resolveInstallsForRuntime(manifest, runtime);
+			return installs.plugins.length > 0 || installs.skills.length > 0 || Object.keys(installs.config ?? {}).length > 0;
+		}))) {
+			await opts?.onBeforeRuntimeMutation?.();
+			const refreshed = await this.activate(integrationId, { refresh: true });
+			if (!refreshed.ok) throw new Error(refreshed.error?.message ?? "Connection consumer refresh failed");
+		}
+		if (supported && manifest.mcp_servers.length > 0) {
+			if (!this.mcpApplier) throw new Error("Connection refresh requires an MCP applier");
+			const secretEntries = this.secrets.get(integrationId);
+			if ((await this.mcpApplier.applyForIntegration(integrationId, manifest.mcp_servers, {
+				...entry.config,
+				...secretEntries ? Object.fromEntries(secretEntries) : {}
+			}, {
+				connectionId: entry.customConnectionId,
+				connectionAuthorityVersion,
+				strictReconcile: true
+			})).length !== manifest.mcp_servers.length) throw new Error("Connection refresh could not resolve every MCP credential");
+		}
+		this.state.update(integrationId, {
+			connectionAuthorityVersion,
+			connectionAuthorityPendingVersion: void 0
+		});
+	}
 	/**
 	* Deactivate a running integration.
 	*
@@ -1982,7 +2017,7 @@ var IntegrationManager = class {
 					secrets: this.secrets.get(name),
 					runtimes: [...this.runtimeAppliers.keys()]
 				}, INSTALL_HOOK_TIMEOUT_MS);
-				if (hookResult.exitCode !== 0) this.log.warn(this.hookFailureMessage("pre_uninstall hook failed (continuing)", hookResult));
+				if (hookResult.exitCode !== 0) throw new Error(this.hookFailureMessage("pre_uninstall hook failed", hookResult));
 			}
 			if (uninstallHooksSupported && manifest?.hooks.post_uninstall) {
 				this.log.info(`Running post_uninstall hook: ${manifest.hooks.post_uninstall}`);
@@ -1992,7 +2027,7 @@ var IntegrationManager = class {
 					secrets: this.secrets.get(name),
 					runtimes: [...this.runtimeAppliers.keys()]
 				}, INSTALL_HOOK_TIMEOUT_MS);
-				if (hookResult.exitCode !== 0) this.log.warn(this.hookFailureMessage("post_uninstall hook failed (non-fatal)", hookResult));
+				if (hookResult.exitCode !== 0) throw new Error(this.hookFailureMessage("post_uninstall hook failed", hookResult));
 			}
 			if (this.installer.isInstalled(name)) {
 				await this.installer.remove(name);
@@ -2238,6 +2273,8 @@ var IntegrationManager = class {
 			version: entry.version,
 			status: entry.status,
 			installedAt: entry.installedAt,
+			connectionAuthorityVersion: entry.connectionAuthorityVersion,
+			connectionAuthorityPendingVersion: entry.connectionAuthorityPendingVersion,
 			config: entry.config,
 			error: entry.error
 		}));
@@ -2278,6 +2315,8 @@ var IntegrationManager = class {
 			version: entry.version,
 			status: entry.status,
 			installedAt: entry.installedAt,
+			connectionAuthorityVersion: entry.connectionAuthorityVersion,
+			connectionAuthorityPendingVersion: entry.connectionAuthorityPendingVersion,
 			config: entry.config,
 			error: entry.error
 		};
@@ -4771,7 +4810,10 @@ var McpApplier = class {
 			const id = `${integrationId}-${server.id}`;
 			const envResolved = await this.resolveEnv(server, mergedConfig, opts?.connectionId);
 			if (envResolved == null) {
-				await this.manager.removeServer(id, { expectedOwner: owner });
+				await this.manager.removeServer(id, {
+					expectedOwner: owner,
+					...opts?.strictReconcile ? { strictReconcile: true } : {}
+				});
 				log.info({
 					integrationId,
 					server: server.id,
@@ -4779,13 +4821,20 @@ var McpApplier = class {
 				}, "Skipping MCP server registration — required credentials missing or fetch failed");
 				continue;
 			}
-			await this.manager.addServer(toBundlerConfig(server, envResolved), {
+			await this.manager.addServer(toBundlerConfig(server, {
+				...envResolved,
+				...opts?.connectionAuthorityVersion ? { ALFE_CONNECTION_AUTHORITY_VERSION: opts.connectionAuthorityVersion } : {}
+			}), {
 				id,
-				owner
+				owner,
+				...opts?.strictReconcile ? { strictReconcile: true } : {}
 			});
 			applied.push(id);
 		}
-		for (const { id, entry } of this.manager.listServers()) if (entry.owner === owner && !declaredIds.has(id)) await this.manager.removeServer(id, { expectedOwner: owner });
+		for (const { id, entry } of this.manager.listServers()) if (entry.owner === owner && !declaredIds.has(id)) await this.manager.removeServer(id, {
+			expectedOwner: owner,
+			...opts?.strictReconcile ? { strictReconcile: true } : {}
+		});
 		for (const id of applied) this.manager.warmServer(id, MCP_ACTIVATION_WARM_TIMEOUT_MS).then((status) => {
 			if (!status) return;
 			if (status.connected) log.info({
@@ -4919,9 +4968,14 @@ var IntegrationManagerAdapter = class {
 			id: i.id,
 			version: i.version ?? "unknown",
 			status: i.status,
-			installedAt: i.installedAt
+			installedAt: i.installedAt,
+			connectionAuthorityVersion: i.connectionAuthorityVersion,
+			connectionAuthorityPendingVersion: i.connectionAuthorityPendingVersion
 		})));
 	}
+	async refreshConnections(integrationId, connectionAuthorityVersion, opts) {
+		await this.manager.refreshConnections(integrationId, connectionAuthorityVersion, opts);
+	}
 	async install(integrationId, version, config, customSource) {
 		const result = await this.manager.install({
 			name: integrationId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/integrations",
-  "version": "0.6.4",
+  "version": "0.6.5",
   "description": "Integration lifecycle management for Alfe — registry, resolution, installation, and state",
   "type": "module",
   "main": "./dist/index.js",
@@ -14,8 +14,8 @@
   "dependencies": {
     "@auriclabs/logger": "^0.1.1",
     "yaml": ">=2.8.3",
-    "@alfe.ai/integration-manifest": "^0.4.0",
-    "@alfe.ai/mcp-bundler": "^0.4.1"
+    "@alfe.ai/integration-manifest": "^0.4.1",
+    "@alfe.ai/mcp-bundler": "^0.4.2"
   },
   "files": [
     "dist"