@anuma/sdk 6.26.2 → 6.27.1

package/dist/tools/index.mjs

@@ -1573,1306 +1573,1291 @@ function createDriveTools(getAccessToken, requestDriveAccess) {
   ];
 }
 
-// src/tools/notion.ts
-var MCP_HTTP_ENDPOINT = "https://mcp.notion.com/mcp";
-var MCP_SSE_ENDPOINT = "https://mcp.notion.com/sse";
-var MAX_CONTENT_LENGTH2 = 5e4;
-function truncateToolResult(result) {
-  if (result === void 0 || result === null) return result;
-  const stringified = typeof result === "string" ? result : JSON.stringify(result);
-  if (stringified.length <= MAX_CONTENT_LENGTH2) {
-    return result;
+// src/lib/connectors/agentres/errors.ts
+var AgentresError = class extends Error {
+  constructor(status, code, message, retryable, nextStep) {
+    super(message);
+    this.name = "AgentresError";
+    this.status = status;
+    this.code = code;
+    this.retryable = retryable;
+    this.nextStep = nextStep;
   }
-  return stringified.slice(0, MAX_CONTENT_LENGTH2) + `
-
-... (content truncated, showing first ${MAX_CONTENT_LENGTH2} characters of ${stringified.length})`;
+};
+var SiwxUnsupportedError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SiwxUnsupportedError";
+  }
+};
+var AgentresPathError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "AgentresPathError";
+  }
+};
+var SiwxChallengeError = class extends Error {
+  constructor(message, options) {
+    super(message);
+    this.name = "SiwxChallengeError";
+    this.cause = options?.cause;
+  }
+};
+function parseAgentresError(status, body) {
+  const stated = statedError(body);
+  if (!stated) {
+    return new AgentresError(
+      status,
+      `HTTP_${status}`,
+      body.trim() || `HTTP ${status}`,
+      status >= 500
+    );
+  }
+  const code = typeof stated.code === "string" ? stated.code : `HTTP_${status}`;
+  const message = typeof stated.message === "string" ? stated.message : `HTTP ${status}`;
+  const retryable = typeof stated.retryable === "boolean" ? stated.retryable : status >= 500;
+  const nextStep = typeof stated.next_step === "string" ? stated.next_step : void 0;
+  return new AgentresError(status, code, message, retryable, nextStep);
 }
-var requestIdCounter = Math.floor(Math.random() * 1e6);
-var sessionCache = /* @__PURE__ */ new Map();
-function generateRequestId() {
-  return ++requestIdCounter;
+function statedError(body) {
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return null;
+  }
+  const envelope = parsed;
+  const stated = typeof envelope?.error === "object" && envelope.error !== null ? envelope.error : null;
+  if (!stated) {
+    return null;
+  }
+  const fields = stated;
+  if (typeof fields.code !== "string" && typeof fields.message !== "string") {
+    return null;
+  }
+  return fields;
 }
-function parseSSEResponse(text) {
-  const events = text.split(/\n\n+/);
-  let lastEventData = "";
-  for (const event of events) {
-    const dataLines = [];
-    for (const line of event.split("\n")) {
-      if (line.startsWith("data: ")) {
-        dataLines.push(line.slice(6));
-      } else if (line.startsWith("data:")) {
-        dataLines.push(line.slice(5));
-      }
-    }
-    if (dataLines.length > 0) {
-      lastEventData = dataLines.join("\n");
-    }
+
+// src/lib/processors/encoding.ts
+var B64_ENCODE_CHUNK = 32768 * 3;
+function uint8ArrayToBase64(data) {
+  if (typeof Buffer !== "undefined") {
+    return Buffer.from(data).toString("base64");
   }
-  if (!lastEventData) {
-    throw new Error("No data found in SSE response");
+  let base64 = "";
+  for (let i = 0; i < data.length; i += B64_ENCODE_CHUNK) {
+    const slice = data.subarray(i, i + B64_ENCODE_CHUNK);
+    let binary = "";
+    for (let j = 0; j < slice.length; j++) {
+      binary += String.fromCharCode(slice[j]);
+    }
+    base64 += btoa(binary);
   }
-  return JSON.parse(lastEventData);
+  return base64;
 }
-async function parseResponseBody(response) {
-  const contentType = response.headers.get("Content-Type") || "";
-  const text = await response.text();
-  if (contentType.includes("text/event-stream") || text.startsWith("event:") || text.startsWith("data:")) {
-    return parseSSEResponse(text);
+function base64ToUint8Array(base64) {
+  if (typeof Buffer !== "undefined") {
+    const buf = Buffer.from(base64, "base64");
+    return new Uint8Array(buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength));
   }
-  return JSON.parse(text);
+  const binary = atob(base64);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return bytes;
 }
-async function initializeMCPSession(accessToken) {
-  const requestId = generateRequestId();
-  const initRequest = {
-    jsonrpc: "2.0",
-    id: requestId,
-    method: "initialize",
-    params: {
-      protocolVersion: "2024-11-05",
-      capabilities: {},
-      clientInfo: {
-        name: "Anuma",
-        version: "1.0.0"
-      }
-    }
+
+// src/lib/connectors/agentres/siwx.ts
+var PAYMENT_REQUIRED_HEADER = "PAYMENT-REQUIRED";
+var SIWX_HEADER = "SIGN-IN-WITH-X";
+var SIWX_EXTENSION = "sign-in-with-x";
+var SOLANA_NAMESPACE = "solana:";
+var ED25519_SIGNATURE_BYTES = 64;
+function parseChallenge(paymentRequiredHeader, expectedOrigin) {
+  const decoded = decodeHeader(paymentRequiredHeader);
+  const extensions = asRecord(decoded.extensions);
+  const extension = extensions ? asRecord(extensions[SIWX_EXTENSION]) : null;
+  if (!extension) {
+    throw new SiwxUnsupportedError(
+      "the 402 carries no sign-in-with-x extension, so this endpoint is paid rather than identity-only"
+    );
+  }
+  const info = asRecord(extension.info);
+  if (!info) {
+    throw new SiwxChallengeError("the sign-in-with-x extension has no info block");
+  }
+  const chain = solanaChain(extension.supportedChains);
+  const challenge = {
+    domain: requireString(info, "domain"),
+    uri: requireString(info, "uri"),
+    version: requireString(info, "version"),
+    statement: requireString(info, "statement"),
+    nonce: requireString(info, "nonce"),
+    issuedAt: requireString(info, "issuedAt"),
+    resources: requireResources(info),
+    chainId: chain.chainId,
+    signingType: chain.signingType
   };
-  const response = await fetch(MCP_HTTP_ENDPOINT, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      Accept: "application/json, text/event-stream",
-      Authorization: `Bearer ${accessToken}`
-    },
-    body: JSON.stringify(initRequest)
-  });
-  if (!response.ok) {
-    const errorBody = await response.text().catch(() => "");
-    throw new Error(
-      `MCP initialization failed: ${response.status} ${response.statusText}${errorBody ? ` - ${errorBody}` : ""}`
+  assertScopedTo(challenge, expectedOrigin);
+  return challenge;
+}
+function assertScopedTo(challenge, expectedOrigin) {
+  const expected = parseUrl(expectedOrigin, `the agentres base URL "${expectedOrigin}"`);
+  if (challenge.domain !== expected.host) {
+    throw new SiwxChallengeError(
+      `the challenge is scoped to "${challenge.domain}" but this client talks to "${expected.host}" \u2014 refusing to sign it`
     );
   }
-  const sessionId = response.headers.get("Mcp-Session-Id");
-  if (!sessionId) {
-    throw new Error("No Mcp-Session-Id returned from initialization");
+  const uri = parseUrl(challenge.uri, `the sign-in-with-x uri "${challenge.uri}"`);
+  if (uri.origin !== expected.origin) {
+    throw new SiwxChallengeError(
+      `the challenge addresses "${uri.origin}" but this client talks to "${expected.origin}" \u2014 refusing to sign it`
+    );
   }
-  const jsonRpcResponse = await parseResponseBody(response);
-  if (jsonRpcResponse.error) {
-    const err = jsonRpcResponse.error;
-    const errMsg = typeof err.message === "string" ? err.message : JSON.stringify(err);
-    throw new Error(`MCP initialization error: ${errMsg}`);
+}
+function parseUrl(value, description) {
+  try {
+    return new URL(value);
+  } catch (cause) {
+    throw new SiwxChallengeError(`${description} is not a URL`, { cause });
   }
-  await fetch(MCP_HTTP_ENDPOINT, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      Authorization: `Bearer ${accessToken}`,
-      "Mcp-Session-Id": sessionId
-    },
-    body: JSON.stringify({
-      jsonrpc: "2.0",
-      method: "notifications/initialized"
-    })
-  });
-  sessionCache.set(accessToken, sessionId);
-  return sessionId;
 }
-async function ensureMCPSession(accessToken) {
-  const cached = sessionCache.get(accessToken);
-  if (cached) {
-    return cached;
+function buildMessage(challenge, address) {
+  if (!challenge.chainId.startsWith(SOLANA_NAMESPACE)) {
+    throw new SiwxChallengeError(
+      `expected a solana: chain id for the message, got "${challenge.chainId}"`
+    );
   }
-  return initializeMCPSession(accessToken);
+  const reference = challenge.chainId.slice(SOLANA_NAMESPACE.length);
+  const resources = challenge.resources.map((resource) => `- ${resource}`).join("\n");
+  return `${challenge.domain} wants you to sign in with your Solana account:
+${address}
+
+${challenge.statement}
+
+URI: ${challenge.uri}
+Version: ${challenge.version}
+Chain ID: ${reference}
+Nonce: ${challenge.nonce}
+Issued At: ${challenge.issuedAt}
+Resources:
+${resources}`;
 }
-async function callMCPTool(accessToken, toolName, args) {
-  const sessionId = await ensureMCPSession(accessToken);
-  const requestId = generateRequestId();
-  const jsonRpcRequest = {
-    jsonrpc: "2.0",
-    id: requestId,
-    method: "tools/call",
-    params: {
-      name: toolName,
-      arguments: args
-    }
+function buildPayload(challenge, address, signature) {
+  if (signature.length !== ED25519_SIGNATURE_BYTES) {
+    throw new SiwxChallengeError(
+      `expected a ${ED25519_SIGNATURE_BYTES}-byte ed25519 signature, got ${signature.length} bytes`
+    );
+  }
+  const payload = {
+    domain: challenge.domain,
+    address,
+    statement: challenge.statement,
+    uri: challenge.uri,
+    version: challenge.version,
+    // Full CAIP-2 here, unlike the bare reference the message carries.
+    chainId: challenge.chainId,
+    type: challenge.signingType,
+    nonce: challenge.nonce,
+    issuedAt: challenge.issuedAt,
+    resources: challenge.resources,
+    signature: base58Encode(signature)
   };
-  const response = await fetch(MCP_HTTP_ENDPOINT, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      Accept: "application/json, text/event-stream",
-      Authorization: `Bearer ${accessToken}`,
-      "Mcp-Session-Id": sessionId
-    },
-    body: JSON.stringify(jsonRpcRequest)
-  });
-  if (!response.ok) {
-    if (response.status === 400 || response.status === 401) {
-      sessionCache.delete(accessToken);
-      const newSessionId = await initializeMCPSession(accessToken);
-      const retryResponse = await fetch(MCP_HTTP_ENDPOINT, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json, text/event-stream",
-          Authorization: `Bearer ${accessToken}`,
-          "Mcp-Session-Id": newSessionId
-        },
-        body: JSON.stringify(jsonRpcRequest)
-      });
-      if (!retryResponse.ok) {
-        const errorBody2 = await retryResponse.text().catch(() => "");
-        throw new Error(
-          `MCP request failed: ${retryResponse.status} ${retryResponse.statusText}${errorBody2 ? ` - ${errorBody2}` : ""}`
-        );
-      }
-      const retryJsonRpcResponse = await parseResponseBody(retryResponse);
-      if (retryJsonRpcResponse.error) {
-        const err = retryJsonRpcResponse.error;
-        const errMsg = typeof err.message === "string" ? err.message : JSON.stringify(err);
-        throw new Error(`MCP tool error: ${errMsg}`);
-      }
-      return truncateToolResult(retryJsonRpcResponse.result);
+  return uint8ArrayToBase64(new TextEncoder().encode(JSON.stringify(payload)));
+}
+var BASE58_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+function base58Encode(bytes) {
+  let zeros = 0;
+  while (zeros < bytes.length && bytes[zeros] === 0) {
+    zeros++;
+  }
+  const digits = [];
+  for (let i = zeros; i < bytes.length; i++) {
+    let carry = bytes[i];
+    for (let j = 0; j < digits.length; j++) {
+      carry += digits[j] * 256;
+      digits[j] = carry % 58;
+      carry = Math.floor(carry / 58);
+    }
+    while (carry > 0) {
+      digits.push(carry % 58);
+      carry = Math.floor(carry / 58);
     }
-    const errorBody = await response.text().catch(() => "");
-    throw new Error(
-      `MCP request failed: ${response.status} ${response.statusText}${errorBody ? ` - ${errorBody}` : ""}`
-    );
   }
-  const jsonRpcResponse = await parseResponseBody(response);
-  if (jsonRpcResponse.error) {
-    const err = jsonRpcResponse.error;
-    const errMsg = typeof err.message === "string" ? err.message : JSON.stringify(err);
-    throw new Error(`MCP tool error: ${errMsg}`);
+  let encoded = "1".repeat(zeros);
+  for (let i = digits.length - 1; i >= 0; i--) {
+    encoded += BASE58_ALPHABET[digits[i]];
   }
-  return truncateToolResult(jsonRpcResponse.result);
+  return encoded;
 }
-function createNotionSearchTool(getAccessToken, requestNotionAccess) {
+function decodeHeader(paymentRequiredHeader) {
+  let parsed;
+  try {
+    parsed = JSON.parse(new TextDecoder().decode(base64ToUint8Array(paymentRequiredHeader)));
+  } catch (cause) {
+    throw new SiwxChallengeError("the PAYMENT-REQUIRED header is not base64-encoded JSON", {
+      cause
+    });
+  }
+  const decoded = asRecord(parsed);
+  if (!decoded) {
+    throw new SiwxChallengeError("the PAYMENT-REQUIRED header did not decode to an object");
+  }
+  return decoded;
+}
+function solanaChain(supportedChains) {
+  if (!Array.isArray(supportedChains)) {
+    throw new SiwxChallengeError("the sign-in-with-x extension lists no supportedChains");
+  }
+  for (const entry of supportedChains) {
+    const chain = asRecord(entry);
+    const chainId = chain?.chainId;
+    if (typeof chainId !== "string" || !chainId.startsWith(SOLANA_NAMESPACE)) {
+      continue;
+    }
+    const signingType = chain?.type;
+    if (typeof signingType !== "string" || signingType === "") {
+      throw new SiwxChallengeError(`the ${chainId} entry declares no signing type`);
+    }
+    return { chainId, signingType };
+  }
+  throw new SiwxChallengeError("the sign-in-with-x extension offers no solana: chain");
+}
+function asRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+}
+function requireString(info, key) {
+  const value = info[key];
+  if (typeof value !== "string" || value === "") {
+    throw new SiwxChallengeError(`the sign-in-with-x info block has no ${key}`);
+  }
+  return value;
+}
+function requireResources(info) {
+  const resources = info.resources;
+  if (!Array.isArray(resources) || resources.length === 0) {
+    throw new SiwxChallengeError("the sign-in-with-x info block has no resources");
+  }
+  if (!resources.every((resource) => typeof resource === "string" && resource !== "")) {
+    throw new SiwxChallengeError("the sign-in-with-x resources are not all strings");
+  }
+  return resources;
+}
+
+// src/lib/connectors/agentres/client.ts
+var DEFAULT_BASE_URL = "https://agentres.dev";
+function createAgentresClient(options) {
+  const baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+  const fetchImpl = options.fetch ?? globalThis.fetch.bind(globalThis);
+  const { address, signMessage } = options;
+  async function withSiwx(request) {
+    const url = resolveUrl(baseUrl, request.path);
+    const init = requestInit(request);
+    const challenged = await fetchImpl(url, init);
+    if (challenged.status !== 402) {
+      return readBody(challenged);
+    }
+    await challenged.body?.cancel().catch(() => {
+    });
+    const header = challenged.headers.get(PAYMENT_REQUIRED_HEADER);
+    if (!header) {
+      throw new SiwxChallengeError(
+        `the 402 from ${request.path} carried no ${PAYMENT_REQUIRED_HEADER} header`
+      );
+    }
+    const challenge = parseChallenge(header, baseUrl);
+    const signature = await signMessage(new TextEncoder().encode(buildMessage(challenge, address)));
+    const authorized = await fetchImpl(url, {
+      ...init,
+      headers: { ...init.headers, [SIWX_HEADER]: buildPayload(challenge, address, signature) }
+    });
+    return readBody(authorized);
+  }
+  async function linkResy(body) {
+    const response = await withSiwx({ method: "POST", path: "/api/link-resy", body });
+    return { step: response.step, message: response.message, resyUserId: response.resy_user_id };
+  }
   return {
-    type: "function",
-    function: {
-      name: "notion-search",
-      description: "Semantic search over Notion workspace and connected sources (Slack, Google Drive, Github, Jira, etc). Can also search for users by name or email.",
-      arguments: {
-        type: "object",
-        properties: {
-          query: {
-            type: "string",
-            description: "Semantic search query over workspace and connected sources. For user search, a substring to match against name or email."
-          },
-          query_type: {
-            type: "string",
-            enum: ["internal", "user"],
-            description: "Type of search: 'internal' for workspace/content search, 'user' for user search"
-          },
-          content_search_mode: {
-            type: "string",
-            enum: ["workspace_search", "ai_search"],
-            description: "Override auto-selection of AI search vs workspace search"
-          },
-          data_source_url: {
-            type: "string",
-            description: "URL of a data source to search within"
-          },
-          page_url: {
-            type: "string",
-            description: "URL or ID of a page to search within"
-          },
-          teamspace_id: {
-            type: "string",
-            description: "ID of a teamspace to restrict search results to"
-          },
-          filters: {
-            type: "object",
-            description: "Filters for search results (only for query_type 'internal'). Supports created_date_range {start_date, end_date} and created_by_user_ids array."
-          }
-        },
-        required: ["query"]
-      }
+    withSiwx,
+    async ensureAccount(email) {
+      const body = await withSiwx({ method: "POST", path: "/api/account", body: { email } });
+      return {
+        accountId: body.account_id,
+        email: body.email,
+        credentialKind: body.credential_kind,
+        walletLinked: body.wallet_linked
+      };
     },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-search", args);
-      } catch (error) {
-        return `Error searching Notion: ${error instanceof Error ? error.message : String(error)}`;
-      }
+    requestCode(email) {
+      return linkResy({ em_address: email });
+    },
+    verifyCode(email, code) {
+      return linkResy({ em_address: email, code });
+    },
+    async getLinkStatus() {
+      const body = await withSiwx({ method: "GET", path: "/api/me" });
+      return {
+        accountId: body.account_id,
+        email: body.email,
+        resyLinked: body.resy_linked,
+        walletAddress: body.wallet_address,
+        resyLinkedAt: body.resy_linked_at ?? null
+      };
     }
   };
 }
-function createNotionFetchTool(getAccessToken, requestNotionAccess) {
-  return {
-    type: "function",
-    function: {
-      name: "notion-fetch",
-      description: "Retrieve a Notion page or database by URL or ID. Pages return enhanced Markdown. Databases return all data sources.",
-      arguments: {
-        type: "object",
-        properties: {
-          id: {
-            type: "string",
-            description: "The ID or URL of the Notion page/database. Supports notion.so URLs, Notion Sites URLs (*.notion.site), and raw UUIDs."
-          },
-          include_transcript: {
-            type: "boolean",
-            description: "Include transcript if available"
-          },
-          include_discussions: {
-            type: "boolean",
-            description: "Include discussion counts and inline discussion markers"
-          }
-        },
-        required: ["id"]
-      }
-    },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-fetch", args);
-      } catch (error) {
-        return `Error fetching Notion page: ${error instanceof Error ? error.message : String(error)}`;
-      }
-    }
-  };
-}
-function createNotionCreatePagesTool(getAccessToken, requestNotionAccess) {
-  return {
-    type: "function",
-    function: {
-      name: "notion-create-pages",
-      description: "Create one or more Notion pages. All pages in a single call share the same parent. Properties use simplified format: title is a string, dates use date:{prop}:start format, checkboxes use __YES__/__NO__. Content is Notion-flavored Markdown.",
-      arguments: {
-        type: "object",
-        properties: {
-          pages: {
-            type: "array",
-            description: "Array of page objects to create (max 100)",
-            items: {
-              type: "object",
-              properties: {
-                properties: {
-                  type: "object",
-                  description: "JSON map of property names to values. Title is a string, numbers are JS numbers, checkboxes use __YES__/__NO__, dates use date:{prop}:start/end/is_datetime format."
-                },
-                content: {
-                  type: "string",
-                  description: "Page content in Notion-flavored Markdown format"
-                }
-              },
-              required: ["properties", "content"]
-            }
-          },
-          parent: {
-            type: "object",
-            description: "Parent for all pages. Use {type:'page_id', page_id:'...'}, {type:'database_id', database_id:'...'}, or {type:'data_source_id', data_source_id:'...'}. Do NOT pass this field to create standalone private pages."
-          }
-        },
-        required: ["pages"]
-      }
-    },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-create-pages", args);
-      } catch (error) {
-        return `Error creating Notion page: ${error instanceof Error ? error.message : String(error)}`;
-      }
-    }
-  };
-}
-function createNotionUpdatePageTool(getAccessToken, requestNotionAccess) {
-  return {
-    type: "function",
-    function: {
-      name: "notion-update-page",
-      description: "Update a Notion page's properties or content. Uses command-based operations: 'update_properties' to change properties, 'replace_content' to replace all content, 'replace_content_range' to replace specific text, 'insert_content_after' to insert after text.",
-      arguments: {
-        type: "object",
-        properties: {
-          data: {
-            type: "object",
-            description: "Update data containing page_id and a command",
-            properties: {
-              page_id: {
-                type: "string",
-                description: "The ID of the page to update (with or without dashes)"
-              },
-              command: {
-                type: "string",
-                enum: [
-                  "update_properties",
-                  "replace_content",
-                  "replace_content_range",
-                  "insert_content_after"
-                ],
-                description: "The update command to execute"
-              },
-              properties: {
-                type: "object",
-                description: "For update_properties: JSON map of property names to values. Use null to remove a value."
-              },
-              new_str: {
-                type: "string",
-                description: "For replace_content/replace_content_range/insert_content_after: the new content string"
-              },
-              selection_with_ellipsis: {
-                type: "string",
-                description: "For replace_content_range/insert_content_after: unique start and end snippet (~10 chars each with ellipsis)"
-              },
-              allow_deleting_content: {
-                type: "boolean",
-                description: "For replace_content/replace_content_range: allow deletion of child pages/databases"
-              }
-            },
-            required: ["page_id", "command"]
-          }
-        },
-        required: ["data"]
-      }
-    },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-update-page", args);
-      } catch (error) {
-        return `Error updating Notion page: ${error instanceof Error ? error.message : String(error)}`;
-      }
-    }
-  };
+function resolveUrl(baseUrl, path) {
+  if (!path.startsWith("/") || path.startsWith("//")) {
+    throw new AgentresPathError(
+      `"${path}" is not a path on ${baseUrl} \u2014 it must start with a single "/"`
+    );
+  }
+  const base = new URL(baseUrl);
+  const resolved = new URL(path, base);
+  if (resolved.origin !== base.origin) {
+    throw new AgentresPathError(
+      `"${path}" resolves to ${resolved.origin} but this client talks to ${base.origin} \u2014 refusing to send it`
+    );
+  }
+  return resolved.toString();
 }
-function createNotionMovePagesTool(getAccessToken, requestNotionAccess) {
-  return {
-    type: "function",
-    function: {
-      name: "notion-move-pages",
-      description: "Move one or more Notion pages or databases to a new parent.",
-      arguments: {
-        type: "object",
-        properties: {
-          page_or_database_ids: {
-            type: "array",
-            description: "Array of page or database IDs to move (UUIDs, max 100)",
-            items: { type: "string" }
-          },
-          new_parent: {
-            type: "object",
-            description: "New parent: {type:'page_id', page_id:'...'}, {type:'database_id', database_id:'...'}, {type:'data_source_id', data_source_id:'...'}, or {type:'workspace'} for private pages."
-          }
-        },
-        required: ["page_or_database_ids", "new_parent"]
-      }
-    },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-move-pages", args);
-      } catch (error) {
-        return `Error moving Notion pages: ${error instanceof Error ? error.message : String(error)}`;
-      }
-    }
-  };
+function requestInit(request) {
+  const headers = { Accept: "application/json" };
+  if (request.body === void 0) {
+    return { method: request.method, headers };
+  }
+  headers["Content-Type"] = "application/json";
+  return { method: request.method, headers, body: JSON.stringify(request.body) };
 }
-function createNotionDuplicatePageTool(getAccessToken, requestNotionAccess) {
-  return {
-    type: "function",
-    function: {
-      name: "notion-duplicate-page",
-      description: "Duplicate a Notion page. The duplication completes asynchronously.",
-      arguments: {
-        type: "object",
-        properties: {
-          page_id: {
-            type: "string",
-            description: "The ID of the page to duplicate (UUID with or without dashes)"
-          }
-        },
-        required: ["page_id"]
-      }
-    },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-duplicate-page", args);
-      } catch (error) {
-        return `Error duplicating Notion page: ${error instanceof Error ? error.message : String(error)}`;
-      }
-    }
-  };
+async function readBody(response) {
+  const body = await response.text();
+  if (!response.ok) {
+    throw parseAgentresError(response.status, body);
+  }
+  try {
+    return JSON.parse(body);
+  } catch {
+    throw new AgentresError(
+      response.status,
+      "INVALID_JSON",
+      `agentres answered ${response.status} with a body that is not JSON`,
+      response.status >= 500
+    );
+  }
 }
-function createNotionCreateDatabaseTool(getAccessToken, requestNotionAccess) {
-  return {
-    type: "function",
-    function: {
-      name: "notion-create-database",
-      description: "Create a new Notion database with a properties schema. If no title property is provided, 'Name' is auto-added. Supports property types: title, rich_text, number, select, multi_select, date, people, checkbox, url, email, phone_number, formula, relation, rollup, status, unique_id, etc.",
-      arguments: {
-        type: "object",
-        properties: {
-          properties: {
-            type: "object",
-            description: "Property schema for the database. Each key is a property name, value defines the type."
-          },
-          parent: {
-            type: "object",
-            description: "Parent page: {type:'page_id', page_id:'...'}. Omit for private workspace-level database."
-          },
-          title: {
-            type: "array",
-            description: "Title of the database as rich text array (max 100)",
-            items: { type: "object" }
-          },
-          description: {
-            type: "array",
-            description: "Description of the database as rich text array (max 100)",
-            items: { type: "object" }
-          }
-        },
-        required: ["properties"]
-      }
-    },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-create-database", args);
-      } catch (error) {
-        return `Error creating Notion database: ${error instanceof Error ? error.message : String(error)}`;
-      }
+
+// src/lib/connectors/client.ts
+var DEFAULT_REFRESH_BEFORE_MS = 3e4;
+function createConnectorTokenGetter(client, provider, opts = {}) {
+  const refreshBeforeMs = opts.refreshBeforeMs ?? DEFAULT_REFRESH_BEFORE_MS;
+  const now = opts.now ?? Date.now;
+  let cached = null;
+  return async () => {
+    if (cached && cached.expiresAt - refreshBeforeMs > now()) {
+      return cached.accessToken;
     }
-  };
-}
-function createNotionUpdateDataSourceTool(getAccessToken, requestNotionAccess) {
-  return {
-    type: "function",
-    function: {
-      name: "notion-update-data-source",
-      description: "Update a Notion data source's title, description, property schema, or other attributes. Use null to remove a property. Provide only 'name' to rename a property.",
-      arguments: {
-        type: "object",
-        properties: {
-          data_source_id: {
-            type: "string",
-            description: "The ID of the data source to update (UUID). Can be a data source ID or database ID."
-          },
-          title: {
-            type: "array",
-            description: "New title as rich text array (max 100)",
-            items: { type: "object" }
-          },
-          description: {
-            type: "array",
-            description: "New description as rich text array (max 100)",
-            items: { type: "object" }
-          },
-          properties: {
-            type: "object",
-            description: "Property schema updates. Use null to remove, {name:'...'} to rename, or full definition to add/update."
-          },
-          is_inline: {
-            type: "boolean",
-            description: "Whether the database is inline"
-          },
-          in_trash: {
-            type: "boolean",
-            description: "Trash the data source (requires Notion UI to undo)"
-          }
-        },
-        required: ["data_source_id"]
-      }
-    },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-update-data-source", args);
-      } catch (error) {
-        return `Error updating Notion data source: ${error instanceof Error ? error.message : String(error)}`;
-      }
+    let result;
+    try {
+      result = await client.mintConnectorToken(provider);
+    } catch {
+      cached = null;
+      return null;
     }
-  };
-}
-function createNotionCreateCommentTool(getAccessToken, requestNotionAccess) {
-  return {
-    type: "function",
-    function: {
-      name: "notion-create-comment",
-      description: "Add a comment to a Notion page. Supports page-level comments, content-specific comments (using selection_with_ellipsis), or replies to existing discussions (using discussion_id).",
-      arguments: {
-        type: "object",
-        properties: {
-          page_id: {
-            type: "string",
-            description: "The ID of the page to comment on (with or without dashes)"
-          },
-          rich_text: {
-            type: "array",
-            description: "Comment content as rich text array (max 100). Objects can be text, mention, or equation.",
-            items: {
-              type: "object",
-              properties: {
-                text: {
-                  type: "object",
-                  properties: {
-                    content: { type: "string" }
-                  },
-                  required: ["content"]
-                }
-              },
-              required: ["text"]
-            }
-          },
-          discussion_id: {
-            type: "string",
-            description: "ID or URL of an existing discussion to reply to"
-          },
-          selection_with_ellipsis: {
-            type: "string",
-            description: "Unique start and end snippet (~10 chars each with ellipsis) of content to comment on"
-          }
-        },
-        required: ["page_id", "rich_text"]
-      }
-    },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-create-comment", args);
-      } catch (error) {
-        return `Error creating Notion comment: ${error instanceof Error ? error.message : String(error)}`;
-      }
+    if (result.ok) {
+      cached = { accessToken: result.accessToken, expiresAt: result.expiresAt };
+      return result.accessToken;
     }
-  };
-}
-function createNotionGetCommentsTool(getAccessToken, requestNotionAccess) {
-  return {
-    type: "function",
-    function: {
-      name: "notion-get-comments",
-      description: "Get comments and discussions from a Notion page. Returns discussions with full comment content.",
-      arguments: {
-        type: "object",
-        properties: {
-          page_id: {
-            type: "string",
-            description: "Identifier for the Notion page"
-          },
-          include_all_blocks: {
-            type: "boolean",
-            description: "Include discussions on child blocks (default: false)"
-          },
-          include_resolved: {
-            type: "boolean",
-            description: "Include resolved discussions (default: false)"
-          },
-          discussion_id: {
-            type: "string",
-            description: "Fetch a specific discussion by ID or URL (e.g., discussion://pageId/blockId/discussionId)"
-          }
-        },
-        required: ["page_id"]
-      }
-    },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-get-comments", args);
-      } catch (error) {
-        return `Error retrieving Notion comments: ${error instanceof Error ? error.message : String(error)}`;
-      }
+    cached = null;
+    if (opts.onNotConnected) {
+      return opts.onNotConnected(result.error);
     }
+    return null;
   };
 }
-function createNotionGetUsersTool(getAccessToken, requestNotionAccess) {
-  return {
-    type: "function",
-    function: {
-      name: "notion-get-users",
-      description: "List users in the Notion workspace. Supports filtering by name/email, pagination, fetching a specific user by ID, or fetching the current bot user (user_id: 'self').",
-      arguments: {
-        type: "object",
-        properties: {
-          query: {
-            type: "string",
-            description: "Search query to filter users by name or email (case-insensitive, max 100 chars)"
-          },
-          start_cursor: {
-            type: "string",
-            description: "Cursor for pagination from previous response"
-          },
-          page_size: {
-            type: "integer",
-            description: "Number of users per page (1-100, default 100)"
-          },
-          user_id: {
-            type: "string",
-            description: "Return only the user matching this ID. Pass 'self' to fetch the current bot user."
-          }
-        }
-      }
-    },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-get-users", args);
-      } catch (error) {
-        return `Error listing Notion users: ${error instanceof Error ? error.message : String(error)}`;
+
+// src/tools/notion.ts
+var MCP_HTTP_ENDPOINT = "https://mcp.notion.com/mcp";
+var MCP_SSE_ENDPOINT = "https://mcp.notion.com/sse";
+var MAX_CONTENT_LENGTH2 = 5e4;
+function truncateToolResult(result) {
+  if (result === void 0 || result === null) return result;
+  const stringified = typeof result === "string" ? result : JSON.stringify(result);
+  if (stringified.length <= MAX_CONTENT_LENGTH2) {
+    return result;
+  }
+  return stringified.slice(0, MAX_CONTENT_LENGTH2) + `
+
+... (content truncated, showing first ${MAX_CONTENT_LENGTH2} characters of ${stringified.length})`;
+}
+var requestIdCounter = Math.floor(Math.random() * 1e6);
+var sessionCache = /* @__PURE__ */ new Map();
+function generateRequestId() {
+  return ++requestIdCounter;
+}
+function parseSSEResponse(text) {
+  const events = text.split(/\n\n+/);
+  let lastEventData = "";
+  for (const event of events) {
+    const dataLines = [];
+    for (const line of event.split("\n")) {
+      if (line.startsWith("data: ")) {
+        dataLines.push(line.slice(6));
+      } else if (line.startsWith("data:")) {
+        dataLines.push(line.slice(5));
       }
     }
-  };
+    if (dataLines.length > 0) {
+      lastEventData = dataLines.join("\n");
+    }
+  }
+  if (!lastEventData) {
+    throw new Error("No data found in SSE response");
+  }
+  return JSON.parse(lastEventData);
 }
-function createNotionGetTeamsTool(getAccessToken, requestNotionAccess) {
-  return {
-    type: "function",
-    function: {
-      name: "notion-get-teams",
-      description: "Retrieve teams (teamspaces) in the Notion workspace. Shows team names, IDs, membership status, and roles.",
-      arguments: {
-        type: "object",
-        properties: {
-          query: {
-            type: "string",
-            description: "Search query to filter teams by name (case-insensitive, max 100 chars)"
-          }
-        }
-      }
-    },
-    executor: async (args) => {
-      let token = getAccessToken();
-      if (!token) {
-        token = await requestNotionAccess();
-      }
-      try {
-        return await callMCPTool(token, "notion-get-teams", args);
-      } catch (error) {
-        return `Error retrieving Notion teams: ${error instanceof Error ? error.message : String(error)}`;
+async function parseResponseBody(response) {
+  const contentType = response.headers.get("Content-Type") || "";
+  const text = await response.text();
+  if (contentType.includes("text/event-stream") || text.startsWith("event:") || text.startsWith("data:")) {
+    return parseSSEResponse(text);
+  }
+  return JSON.parse(text);
+}
+async function initializeMCPSession(accessToken) {
+  const requestId = generateRequestId();
+  const initRequest = {
+    jsonrpc: "2.0",
+    id: requestId,
+    method: "initialize",
+    params: {
+      protocolVersion: "2024-11-05",
+      capabilities: {},
+      clientInfo: {
+        name: "Anuma",
+        version: "1.0.0"
       }
     }
   };
+  const response = await fetch(MCP_HTTP_ENDPOINT, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Accept: "application/json, text/event-stream",
+      Authorization: `Bearer ${accessToken}`
+    },
+    body: JSON.stringify(initRequest)
+  });
+  if (!response.ok) {
+    const errorBody = await response.text().catch(() => "");
+    throw new Error(
+      `MCP initialization failed: ${response.status} ${response.statusText}${errorBody ? ` - ${errorBody}` : ""}`
+    );
+  }
+  const sessionId = response.headers.get("Mcp-Session-Id");
+  if (!sessionId) {
+    throw new Error("No Mcp-Session-Id returned from initialization");
+  }
+  const jsonRpcResponse = await parseResponseBody(response);
+  if (jsonRpcResponse.error) {
+    const err = jsonRpcResponse.error;
+    const errMsg = typeof err.message === "string" ? err.message : JSON.stringify(err);
+    throw new Error(`MCP initialization error: ${errMsg}`);
+  }
+  await fetch(MCP_HTTP_ENDPOINT, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${accessToken}`,
+      "Mcp-Session-Id": sessionId
+    },
+    body: JSON.stringify({
+      jsonrpc: "2.0",
+      method: "notifications/initialized"
+    })
+  });
+  sessionCache.set(accessToken, sessionId);
+  return sessionId;
 }
-function createNotionTools(getAccessToken, requestNotionAccess) {
-  return [
-    // Search
-    createNotionSearchTool(getAccessToken, requestNotionAccess),
-    // Pages
-    createNotionFetchTool(getAccessToken, requestNotionAccess),
-    createNotionCreatePagesTool(getAccessToken, requestNotionAccess),
-    createNotionUpdatePageTool(getAccessToken, requestNotionAccess),
-    createNotionMovePagesTool(getAccessToken, requestNotionAccess),
-    createNotionDuplicatePageTool(getAccessToken, requestNotionAccess),
-    // Data Sources (Databases)
-    createNotionCreateDatabaseTool(getAccessToken, requestNotionAccess),
-    createNotionUpdateDataSourceTool(getAccessToken, requestNotionAccess),
-    // Comments
-    createNotionCreateCommentTool(getAccessToken, requestNotionAccess),
-    createNotionGetCommentsTool(getAccessToken, requestNotionAccess),
-    // Users & Teams
-    createNotionGetUsersTool(getAccessToken, requestNotionAccess),
-    createNotionGetTeamsTool(getAccessToken, requestNotionAccess)
-  ];
+async function ensureMCPSession(accessToken) {
+  const cached = sessionCache.get(accessToken);
+  if (cached) {
+    return cached;
+  }
+  return initializeMCPSession(accessToken);
 }
-function getMCPEndpoints() {
-  return {
-    http: MCP_HTTP_ENDPOINT,
-    sse: MCP_SSE_ENDPOINT
+async function callMCPTool(accessToken, toolName, args) {
+  const sessionId = await ensureMCPSession(accessToken);
+  const requestId = generateRequestId();
+  const jsonRpcRequest = {
+    jsonrpc: "2.0",
+    id: requestId,
+    method: "tools/call",
+    params: {
+      name: toolName,
+      arguments: args
+    }
   };
-}
-async function callNotionMCPTool(accessToken, toolName, args) {
-  return callMCPTool(accessToken, toolName, args);
-}
-
-// src/tools/github.ts
-var GITHUB_API = "https://api.github.com";
-var FETCH_TIMEOUT_MS = 3e4;
-async function resolveToken(getAccessToken, requestGitHubAccess) {
-  let token = getAccessToken();
-  if (!token) {
-    try {
-      token = await requestGitHubAccess();
-    } catch (err) {
-      getLogger().error("Failed to resolve GitHub token", err);
-      return null;
+  const response = await fetch(MCP_HTTP_ENDPOINT, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Accept: "application/json, text/event-stream",
+      Authorization: `Bearer ${accessToken}`,
+      "Mcp-Session-Id": sessionId
+    },
+    body: JSON.stringify(jsonRpcRequest)
+  });
+  if (!response.ok) {
+    if (response.status === 400 || response.status === 401) {
+      sessionCache.delete(accessToken);
+      const newSessionId = await initializeMCPSession(accessToken);
+      const retryResponse = await fetch(MCP_HTTP_ENDPOINT, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Accept: "application/json, text/event-stream",
+          Authorization: `Bearer ${accessToken}`,
+          "Mcp-Session-Id": newSessionId
+        },
+        body: JSON.stringify(jsonRpcRequest)
+      });
+      if (!retryResponse.ok) {
+        const errorBody2 = await retryResponse.text().catch(() => "");
+        throw new Error(
+          `MCP request failed: ${retryResponse.status} ${retryResponse.statusText}${errorBody2 ? ` - ${errorBody2}` : ""}`
+        );
+      }
+      const retryJsonRpcResponse = await parseResponseBody(retryResponse);
+      if (retryJsonRpcResponse.error) {
+        const err = retryJsonRpcResponse.error;
+        const errMsg = typeof err.message === "string" ? err.message : JSON.stringify(err);
+        throw new Error(`MCP tool error: ${errMsg}`);
+      }
+      return truncateToolResult(retryJsonRpcResponse.result);
     }
+    const errorBody = await response.text().catch(() => "");
+    throw new Error(
+      `MCP request failed: ${response.status} ${response.statusText}${errorBody ? ` - ${errorBody}` : ""}`
+    );
   }
-  return token;
-}
-async function githubFetch(token, path, options = {}) {
-  if (!path.startsWith("http") && !path.startsWith("/")) {
-    throw new Error("githubFetch: relative path must start with /");
+  const jsonRpcResponse = await parseResponseBody(response);
+  if (jsonRpcResponse.error) {
+    const err = jsonRpcResponse.error;
+    const errMsg = typeof err.message === "string" ? err.message : JSON.stringify(err);
+    throw new Error(`MCP tool error: ${errMsg}`);
   }
-  const url = path.startsWith("http") ? path : `${GITHUB_API}${path}`;
-  if (!url.startsWith(`${GITHUB_API}/`)) {
-    throw new Error("githubFetch: URL must target GitHub API");
+  return truncateToolResult(jsonRpcResponse.result);
+}
+var NOTION_PROVIDER = "notion";
+function directRunner(getAccessToken, requestNotionAccess) {
+  return async (toolName, args) => {
+    let token = getAccessToken();
+    if (!token) {
+      token = await requestNotionAccess();
+    }
+    return callMCPTool(token, toolName, args);
+  };
+}
+function readField(json, key) {
+  return typeof json === "object" && json !== null ? json[key] : void 0;
+}
+function readString(json, key) {
+  const value = readField(json, key);
+  return typeof value === "string" ? value : void 0;
+}
+function notionConnectorError(status, json) {
+  const code = readField(json, "code");
+  if (status === 503) {
+    return code === "upstream_unavailable" ? buildConnectorErrorResult("upstream_unavailable", NOTION_PROVIDER) : null;
+  }
+  if (status !== 401 && status !== 403 && status !== 412) return null;
+  switch (code) {
+    case "scope_not_covered": {
+      const missingScopes = readField(json, "missing_scopes");
+      return buildConnectorErrorResult(
+        "scope_not_covered",
+        NOTION_PROVIDER,
+        readString(json, "connect_url"),
+        Array.isArray(missingScopes) ? { missingScopes } : void 0
+      );
+    }
+    case "insufficient_scope":
+      return buildConnectorErrorResult("insufficient_scope", NOTION_PROVIDER, void 0, {
+        required: readString(json, "required")
+      });
+    case "upstream_unavailable":
+      return buildConnectorErrorResult("upstream_unavailable", NOTION_PROVIDER);
+    default:
+      return buildConnectorErrorResult(
+        "connector_not_connected",
+        NOTION_PROVIDER,
+        readString(json, "connect_url")
+      );
   }
-  const controller = new AbortController();
-  const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-  try {
-    return await fetch(url, {
-      ...options,
-      signal: controller.signal,
-      headers: {
-        Authorization: `Bearer ${token}`,
-        Accept: "application/vnd.github+json",
-        "Content-Type": "application/json",
-        "X-GitHub-Api-Version": "2022-11-28",
-        ...options.headers
+}
+function proxyRunner(callMcp) {
+  return async (toolName, args) => {
+    const { status, json } = await callMcp(toolName, args);
+    if (status >= 200 && status < 300) {
+      const result = readField(json, "result");
+      if (result === void 0) {
+        throw new Error(`Notion returned no result (${status})`);
       }
-    });
-  } finally {
-    clearTimeout(timeout);
-  }
+      return truncateToolResult(result);
+    }
+    const connectorError = notionConnectorError(status, json);
+    if (connectorError) return connectorError;
+    const message = readField(json, "error");
+    throw new Error(`${typeof message === "string" ? message : JSON.stringify(json)} (${status})`);
+  };
 }
-function createGetAuthenticatedUserTool(getAccessToken, requestAccess) {
+function withNotionExecutor(run, errorPrefix, tool) {
   return {
-    type: "function",
-    function: {
-      name: "github_get_authenticated_user",
-      description: "Get the authenticated GitHub user's profile including username and organizations. Call this first to discover the user's identity before making other GitHub API calls.",
-      parameters: {
-        type: "object",
-        properties: {}
-      }
-    },
-    executor: async () => {
-      const token = await resolveToken(getAccessToken, requestAccess);
-      if (!token) return "Error: GitHub not connected. Please connect your GitHub account first.";
+    ...tool,
+    executor: async (args) => {
       try {
-        const userResp = await githubFetch(token, "/user");
-        if (!userResp.ok) return `Error: Failed to get user (${userResp.status})`;
-        const user = await userResp.json();
-        const orgsResp = await githubFetch(token, "/user/orgs?per_page=100");
-        let orgs = [];
-        if (orgsResp.ok) {
-          const orgsData = await orgsResp.json();
-          orgs = orgsData.map((o) => o.login);
-        }
-        return {
-          login: user.login,
-          name: user.name,
-          email: user.email,
-          organizations: orgs,
-          public_repos: user.public_repos,
-          html_url: user.html_url
-        };
-      } catch (err) {
-        getLogger().error("github_get_authenticated_user error", err);
-        return "Error: Failed to get user profile.";
+        return await run(tool.function.name, args);
+      } catch (error) {
+        return `${errorPrefix}: ${error instanceof Error ? error.message : String(error)}`;
       }
     }
   };
 }
-var MAX_RESPONSE_SIZE = 1e5;
-function truncate(text, maxLen) {
-  if (text.length <= maxLen) return text;
-  return text.slice(0, maxLen) + `
-
-... (truncated, ${text.length - maxLen} characters omitted)`;
-}
-function createGitHubApiTool(getAccessToken, requestAccess) {
-  return {
+function notionSearchTool(run) {
+  return withNotionExecutor(run, "Error searching Notion", {
     type: "function",
     function: {
-      name: "github_api",
-      description: `Make an authenticated request to the GitHub REST API (https://api.github.com). You can call any endpoint documented at https://docs.github.com/en/rest.
-
-Examples:
-- List PRs: GET /repos/{owner}/{repo}/pulls?state=open
-- Get file: GET /repos/{owner}/{repo}/contents/{path}
-- Create issue: POST /repos/{owner}/{repo}/issues with body {"title": "...", "body": "..."}
-- Search repos: GET /search/repositories?q={query}
-
-IMPORTANT: For write operations (POST, PUT, PATCH, DELETE), always confirm with the user before executing. This includes creating issues, opening PRs, merging, committing files, and submitting reviews.`,
-      parameters: {
+      name: "notion-search",
+      description: "Semantic search over Notion workspace and connected sources (Slack, Google Drive, Github, Jira, etc). Can also search for users by name or email.",
+      arguments: {
         type: "object",
         properties: {
-          method: {
+          query: {
             type: "string",
-            enum: ["GET", "POST", "PUT", "PATCH", "DELETE"],
-            description: "HTTP method"
+            description: "Semantic search query over workspace and connected sources. For user search, a substring to match against name or email."
           },
-          path: {
+          query_type: {
             type: "string",
-            description: "API path (e.g., /repos/owner/repo/pulls) or full URL for pagination"
+            enum: ["internal", "user"],
+            description: "Type of search: 'internal' for workspace/content search, 'user' for user search"
           },
-          body: {
+          content_search_mode: {
+            type: "string",
+            enum: ["workspace_search", "ai_search"],
+            description: "Override auto-selection of AI search vs workspace search"
+          },
+          data_source_url: {
+            type: "string",
+            description: "URL of a data source to search within"
+          },
+          page_url: {
+            type: "string",
+            description: "URL or ID of a page to search within"
+          },
+          teamspace_id: {
+            type: "string",
+            description: "ID of a teamspace to restrict search results to"
+          },
+          filters: {
             type: "object",
-            description: "Request body for POST/PUT/PATCH requests",
-            additionalProperties: true
+            description: "Filters for search results (only for query_type 'internal'). Supports created_date_range {start_date, end_date} and created_by_user_ids array."
           }
         },
-        required: ["method", "path"]
-      }
-    },
-    executor: async (args) => {
-      const token = await resolveToken(getAccessToken, requestAccess);
-      if (!token) return "Error: GitHub not connected. Please connect your GitHub account first.";
-      const method = args.method;
-      const path = args.path;
-      const body = args.body;
-      try {
-        const resp = await githubFetch(token, path, {
-          method,
-          body: body ? JSON.stringify(body) : void 0
-        });
-        const text = await resp.text();
-        if (!resp.ok) {
-          return `Error: GitHub API ${method} ${path} returned ${resp.status}: ${truncate(text, 500)}`;
-        }
-        try {
-          const data = JSON.parse(text);
-          const json = JSON.stringify(data);
-          return truncate(json, MAX_RESPONSE_SIZE);
-        } catch {
-          return truncate(text, MAX_RESPONSE_SIZE);
-        }
-      } catch (err) {
-        if (err instanceof DOMException && err.name === "AbortError") {
-          return `Error: GitHub API request timed out after ${FETCH_TIMEOUT_MS / 1e3}s.`;
-        }
-        getLogger().error("github_api error", err);
-        return `Error: GitHub API request failed: ${err instanceof Error ? err.message : "unknown error"}`;
+        required: ["query"]
       }
     }
-  };
-}
-function createGitHubTools(getAccessToken, requestGitHubAccess) {
-  return [
-    createGetAuthenticatedUserTool(getAccessToken, requestGitHubAccess),
-    createGitHubApiTool(getAccessToken, requestGitHubAccess)
-  ];
-}
-
-// src/lib/connectors/agentres/errors.ts
-var AgentresError = class extends Error {
-  constructor(status, code, message, retryable, nextStep) {
-    super(message);
-    this.name = "AgentresError";
-    this.status = status;
-    this.code = code;
-    this.retryable = retryable;
-    this.nextStep = nextStep;
-  }
-};
-var SiwxUnsupportedError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "SiwxUnsupportedError";
-  }
-};
-var AgentresPathError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "AgentresPathError";
-  }
-};
-var SiwxChallengeError = class extends Error {
-  constructor(message, options) {
-    super(message);
-    this.name = "SiwxChallengeError";
-    this.cause = options?.cause;
-  }
-};
-function parseAgentresError(status, body) {
-  const stated = statedError(body);
-  if (!stated) {
-    return new AgentresError(
-      status,
-      `HTTP_${status}`,
-      body.trim() || `HTTP ${status}`,
-      status >= 500
-    );
-  }
-  const code = typeof stated.code === "string" ? stated.code : `HTTP_${status}`;
-  const message = typeof stated.message === "string" ? stated.message : `HTTP ${status}`;
-  const retryable = typeof stated.retryable === "boolean" ? stated.retryable : status >= 500;
-  const nextStep = typeof stated.next_step === "string" ? stated.next_step : void 0;
-  return new AgentresError(status, code, message, retryable, nextStep);
+  });
 }
-function statedError(body) {
-  let parsed;
-  try {
-    parsed = JSON.parse(body);
-  } catch {
-    return null;
-  }
-  const envelope = parsed;
-  const stated = typeof envelope?.error === "object" && envelope.error !== null ? envelope.error : null;
-  if (!stated) {
-    return null;
-  }
-  const fields = stated;
-  if (typeof fields.code !== "string" && typeof fields.message !== "string") {
-    return null;
-  }
-  return fields;
+function createNotionSearchTool(getAccessToken, requestNotionAccess) {
+  return notionSearchTool(directRunner(getAccessToken, requestNotionAccess));
 }
-
-// src/lib/processors/encoding.ts
-var B64_ENCODE_CHUNK = 32768 * 3;
-function uint8ArrayToBase64(data) {
-  if (typeof Buffer !== "undefined") {
-    return Buffer.from(data).toString("base64");
-  }
-  let base64 = "";
-  for (let i = 0; i < data.length; i += B64_ENCODE_CHUNK) {
-    const slice = data.subarray(i, i + B64_ENCODE_CHUNK);
-    let binary = "";
-    for (let j = 0; j < slice.length; j++) {
-      binary += String.fromCharCode(slice[j]);
+function notionFetchTool(run) {
+  return withNotionExecutor(run, "Error fetching Notion page", {
+    type: "function",
+    function: {
+      name: "notion-fetch",
+      description: "Retrieve a Notion page or database by URL or ID. Pages return enhanced Markdown. Databases return all data sources.",
+      arguments: {
+        type: "object",
+        properties: {
+          id: {
+            type: "string",
+            description: "The ID or URL of the Notion page/database. Supports notion.so URLs, Notion Sites URLs (*.notion.site), and raw UUIDs."
+          },
+          include_transcript: {
+            type: "boolean",
+            description: "Include transcript if available"
+          },
+          include_discussions: {
+            type: "boolean",
+            description: "Include discussion counts and inline discussion markers"
+          }
+        },
+        required: ["id"]
+      }
     }
-    base64 += btoa(binary);
-  }
-  return base64;
-}
-function base64ToUint8Array(base64) {
-  if (typeof Buffer !== "undefined") {
-    const buf = Buffer.from(base64, "base64");
-    return new Uint8Array(buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength));
-  }
-  const binary = atob(base64);
-  const bytes = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i++) {
-    bytes[i] = binary.charCodeAt(i);
-  }
-  return bytes;
+  });
 }
-
-// src/lib/connectors/agentres/siwx.ts
-var PAYMENT_REQUIRED_HEADER = "PAYMENT-REQUIRED";
-var SIWX_HEADER = "SIGN-IN-WITH-X";
-var SIWX_EXTENSION = "sign-in-with-x";
-var SOLANA_NAMESPACE = "solana:";
-var ED25519_SIGNATURE_BYTES = 64;
-function parseChallenge(paymentRequiredHeader, expectedOrigin) {
-  const decoded = decodeHeader(paymentRequiredHeader);
-  const extensions = asRecord(decoded.extensions);
-  const extension = extensions ? asRecord(extensions[SIWX_EXTENSION]) : null;
-  if (!extension) {
-    throw new SiwxUnsupportedError(
-      "the 402 carries no sign-in-with-x extension, so this endpoint is paid rather than identity-only"
-    );
-  }
-  const info = asRecord(extension.info);
-  if (!info) {
-    throw new SiwxChallengeError("the sign-in-with-x extension has no info block");
-  }
-  const chain = solanaChain(extension.supportedChains);
-  const challenge = {
-    domain: requireString(info, "domain"),
-    uri: requireString(info, "uri"),
-    version: requireString(info, "version"),
-    statement: requireString(info, "statement"),
-    nonce: requireString(info, "nonce"),
-    issuedAt: requireString(info, "issuedAt"),
-    resources: requireResources(info),
-    chainId: chain.chainId,
-    signingType: chain.signingType
-  };
-  assertScopedTo(challenge, expectedOrigin);
-  return challenge;
+function createNotionFetchTool(getAccessToken, requestNotionAccess) {
+  return notionFetchTool(directRunner(getAccessToken, requestNotionAccess));
 }
-function assertScopedTo(challenge, expectedOrigin) {
-  const expected = parseUrl(expectedOrigin, `the agentres base URL "${expectedOrigin}"`);
-  if (challenge.domain !== expected.host) {
-    throw new SiwxChallengeError(
-      `the challenge is scoped to "${challenge.domain}" but this client talks to "${expected.host}" \u2014 refusing to sign it`
-    );
-  }
-  const uri = parseUrl(challenge.uri, `the sign-in-with-x uri "${challenge.uri}"`);
-  if (uri.origin !== expected.origin) {
-    throw new SiwxChallengeError(
-      `the challenge addresses "${uri.origin}" but this client talks to "${expected.origin}" \u2014 refusing to sign it`
-    );
-  }
+function notionCreatePagesTool(run) {
+  return withNotionExecutor(run, "Error creating Notion page", {
+    type: "function",
+    function: {
+      name: "notion-create-pages",
+      description: "Create one or more Notion pages. All pages in a single call share the same parent. Properties use simplified format: title is a string, dates use date:{prop}:start format, checkboxes use __YES__/__NO__. Content is Notion-flavored Markdown.",
+      arguments: {
+        type: "object",
+        properties: {
+          pages: {
+            type: "array",
+            description: "Array of page objects to create (max 100)",
+            items: {
+              type: "object",
+              properties: {
+                properties: {
+                  type: "object",
+                  description: "JSON map of property names to values. Title is a string, numbers are JS numbers, checkboxes use __YES__/__NO__, dates use date:{prop}:start/end/is_datetime format."
+                },
+                content: {
+                  type: "string",
+                  description: "Page content in Notion-flavored Markdown format"
+                }
+              },
+              required: ["properties", "content"]
+            }
+          },
+          parent: {
+            type: "object",
+            description: "Parent for all pages. Use {type:'page_id', page_id:'...'}, {type:'database_id', database_id:'...'}, or {type:'data_source_id', data_source_id:'...'}. Do NOT pass this field to create standalone private pages."
+          }
+        },
+        required: ["pages"]
+      }
+    }
+  });
 }
-function parseUrl(value, description) {
-  try {
-    return new URL(value);
-  } catch (cause) {
-    throw new SiwxChallengeError(`${description} is not a URL`, { cause });
-  }
+function createNotionCreatePagesTool(getAccessToken, requestNotionAccess) {
+  return notionCreatePagesTool(directRunner(getAccessToken, requestNotionAccess));
 }
-function buildMessage(challenge, address) {
-  if (!challenge.chainId.startsWith(SOLANA_NAMESPACE)) {
-    throw new SiwxChallengeError(
-      `expected a solana: chain id for the message, got "${challenge.chainId}"`
-    );
-  }
-  const reference = challenge.chainId.slice(SOLANA_NAMESPACE.length);
-  const resources = challenge.resources.map((resource) => `- ${resource}`).join("\n");
-  return `${challenge.domain} wants you to sign in with your Solana account:
-${address}
-
-${challenge.statement}
-
-URI: ${challenge.uri}
-Version: ${challenge.version}
-Chain ID: ${reference}
-Nonce: ${challenge.nonce}
-Issued At: ${challenge.issuedAt}
-Resources:
-${resources}`;
+function notionUpdatePageTool(run) {
+  return withNotionExecutor(run, "Error updating Notion page", {
+    type: "function",
+    function: {
+      name: "notion-update-page",
+      description: "Update a Notion page's properties or content. Uses command-based operations: 'update_properties' to change properties, 'replace_content' to replace all content, 'replace_content_range' to replace specific text, 'insert_content_after' to insert after text.",
+      arguments: {
+        type: "object",
+        properties: {
+          data: {
+            type: "object",
+            description: "Update data containing page_id and a command",
+            properties: {
+              page_id: {
+                type: "string",
+                description: "The ID of the page to update (with or without dashes)"
+              },
+              command: {
+                type: "string",
+                enum: [
+                  "update_properties",
+                  "replace_content",
+                  "replace_content_range",
+                  "insert_content_after"
+                ],
+                description: "The update command to execute"
+              },
+              properties: {
+                type: "object",
+                description: "For update_properties: JSON map of property names to values. Use null to remove a value."
+              },
+              new_str: {
+                type: "string",
+                description: "For replace_content/replace_content_range/insert_content_after: the new content string"
+              },
+              selection_with_ellipsis: {
+                type: "string",
+                description: "For replace_content_range/insert_content_after: unique start and end snippet (~10 chars each with ellipsis)"
+              },
+              allow_deleting_content: {
+                type: "boolean",
+                description: "For replace_content/replace_content_range: allow deletion of child pages/databases"
+              }
+            },
+            required: ["page_id", "command"]
+          }
+        },
+        required: ["data"]
+      }
+    }
+  });
 }
-function buildPayload(challenge, address, signature) {
-  if (signature.length !== ED25519_SIGNATURE_BYTES) {
-    throw new SiwxChallengeError(
-      `expected a ${ED25519_SIGNATURE_BYTES}-byte ed25519 signature, got ${signature.length} bytes`
-    );
-  }
-  const payload = {
-    domain: challenge.domain,
-    address,
-    statement: challenge.statement,
-    uri: challenge.uri,
-    version: challenge.version,
-    // Full CAIP-2 here, unlike the bare reference the message carries.
-    chainId: challenge.chainId,
-    type: challenge.signingType,
-    nonce: challenge.nonce,
-    issuedAt: challenge.issuedAt,
-    resources: challenge.resources,
-    signature: base58Encode(signature)
-  };
-  return uint8ArrayToBase64(new TextEncoder().encode(JSON.stringify(payload)));
+function createNotionUpdatePageTool(getAccessToken, requestNotionAccess) {
+  return notionUpdatePageTool(directRunner(getAccessToken, requestNotionAccess));
 }
-var BASE58_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
-function base58Encode(bytes) {
-  let zeros = 0;
-  while (zeros < bytes.length && bytes[zeros] === 0) {
-    zeros++;
-  }
-  const digits = [];
-  for (let i = zeros; i < bytes.length; i++) {
-    let carry = bytes[i];
-    for (let j = 0; j < digits.length; j++) {
-      carry += digits[j] * 256;
-      digits[j] = carry % 58;
-      carry = Math.floor(carry / 58);
+function notionMovePagesTool(run) {
+  return withNotionExecutor(run, "Error moving Notion pages", {
+    type: "function",
+    function: {
+      name: "notion-move-pages",
+      description: "Move one or more Notion pages or databases to a new parent.",
+      arguments: {
+        type: "object",
+        properties: {
+          page_or_database_ids: {
+            type: "array",
+            description: "Array of page or database IDs to move (UUIDs, max 100)",
+            items: { type: "string" }
+          },
+          new_parent: {
+            type: "object",
+            description: "New parent: {type:'page_id', page_id:'...'}, {type:'database_id', database_id:'...'}, {type:'data_source_id', data_source_id:'...'}, or {type:'workspace'} for private pages."
+          }
+        },
+        required: ["page_or_database_ids", "new_parent"]
+      }
     }
-    while (carry > 0) {
-      digits.push(carry % 58);
-      carry = Math.floor(carry / 58);
+  });
+}
+function createNotionMovePagesTool(getAccessToken, requestNotionAccess) {
+  return notionMovePagesTool(directRunner(getAccessToken, requestNotionAccess));
+}
+function notionDuplicatePageTool(run) {
+  return withNotionExecutor(run, "Error duplicating Notion page", {
+    type: "function",
+    function: {
+      name: "notion-duplicate-page",
+      description: "Duplicate a Notion page. The duplication completes asynchronously.",
+      arguments: {
+        type: "object",
+        properties: {
+          page_id: {
+            type: "string",
+            description: "The ID of the page to duplicate (UUID with or without dashes)"
+          }
+        },
+        required: ["page_id"]
+      }
     }
-  }
-  let encoded = "1".repeat(zeros);
-  for (let i = digits.length - 1; i >= 0; i--) {
-    encoded += BASE58_ALPHABET[digits[i]];
-  }
-  return encoded;
+  });
 }
-function decodeHeader(paymentRequiredHeader) {
-  let parsed;
-  try {
-    parsed = JSON.parse(new TextDecoder().decode(base64ToUint8Array(paymentRequiredHeader)));
-  } catch (cause) {
-    throw new SiwxChallengeError("the PAYMENT-REQUIRED header is not base64-encoded JSON", {
-      cause
-    });
-  }
-  const decoded = asRecord(parsed);
-  if (!decoded) {
-    throw new SiwxChallengeError("the PAYMENT-REQUIRED header did not decode to an object");
-  }
-  return decoded;
+function createNotionDuplicatePageTool(getAccessToken, requestNotionAccess) {
+  return notionDuplicatePageTool(directRunner(getAccessToken, requestNotionAccess));
 }
-function solanaChain(supportedChains) {
-  if (!Array.isArray(supportedChains)) {
-    throw new SiwxChallengeError("the sign-in-with-x extension lists no supportedChains");
-  }
-  for (const entry of supportedChains) {
-    const chain = asRecord(entry);
-    const chainId = chain?.chainId;
-    if (typeof chainId !== "string" || !chainId.startsWith(SOLANA_NAMESPACE)) {
-      continue;
-    }
-    const signingType = chain?.type;
-    if (typeof signingType !== "string" || signingType === "") {
-      throw new SiwxChallengeError(`the ${chainId} entry declares no signing type`);
+function notionCreateDatabaseTool(run) {
+  return withNotionExecutor(run, "Error creating Notion database", {
+    type: "function",
+    function: {
+      name: "notion-create-database",
+      description: "Create a new Notion database with a properties schema. If no title property is provided, 'Name' is auto-added. Supports property types: title, rich_text, number, select, multi_select, date, people, checkbox, url, email, phone_number, formula, relation, rollup, status, unique_id, etc.",
+      arguments: {
+        type: "object",
+        properties: {
+          properties: {
+            type: "object",
+            description: "Property schema for the database. Each key is a property name, value defines the type."
+          },
+          parent: {
+            type: "object",
+            description: "Parent page: {type:'page_id', page_id:'...'}. Omit for private workspace-level database."
+          },
+          title: {
+            type: "array",
+            description: "Title of the database as rich text array (max 100)",
+            items: { type: "object" }
+          },
+          description: {
+            type: "array",
+            description: "Description of the database as rich text array (max 100)",
+            items: { type: "object" }
+          }
+        },
+        required: ["properties"]
+      }
     }
-    return { chainId, signingType };
-  }
-  throw new SiwxChallengeError("the sign-in-with-x extension offers no solana: chain");
+  });
 }
-function asRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+function createNotionCreateDatabaseTool(getAccessToken, requestNotionAccess) {
+  return notionCreateDatabaseTool(directRunner(getAccessToken, requestNotionAccess));
 }
-function requireString(info, key) {
-  const value = info[key];
-  if (typeof value !== "string" || value === "") {
-    throw new SiwxChallengeError(`the sign-in-with-x info block has no ${key}`);
-  }
-  return value;
+function notionUpdateDataSourceTool(run) {
+  return withNotionExecutor(run, "Error updating Notion data source", {
+    type: "function",
+    function: {
+      name: "notion-update-data-source",
+      description: "Update a Notion data source's title, description, property schema, or other attributes. Use null to remove a property. Provide only 'name' to rename a property.",
+      arguments: {
+        type: "object",
+        properties: {
+          data_source_id: {
+            type: "string",
+            description: "The ID of the data source to update (UUID). Can be a data source ID or database ID."
+          },
+          title: {
+            type: "array",
+            description: "New title as rich text array (max 100)",
+            items: { type: "object" }
+          },
+          description: {
+            type: "array",
+            description: "New description as rich text array (max 100)",
+            items: { type: "object" }
+          },
+          properties: {
+            type: "object",
+            description: "Property schema updates. Use null to remove, {name:'...'} to rename, or full definition to add/update."
+          },
+          is_inline: {
+            type: "boolean",
+            description: "Whether the database is inline"
+          },
+          in_trash: {
+            type: "boolean",
+            description: "Trash the data source (requires Notion UI to undo)"
+          }
+        },
+        required: ["data_source_id"]
+      }
+    }
+  });
 }
-function requireResources(info) {
-  const resources = info.resources;
-  if (!Array.isArray(resources) || resources.length === 0) {
-    throw new SiwxChallengeError("the sign-in-with-x info block has no resources");
-  }
-  if (!resources.every((resource) => typeof resource === "string" && resource !== "")) {
-    throw new SiwxChallengeError("the sign-in-with-x resources are not all strings");
-  }
-  return resources;
+function createNotionUpdateDataSourceTool(getAccessToken, requestNotionAccess) {
+  return notionUpdateDataSourceTool(directRunner(getAccessToken, requestNotionAccess));
 }
-
-// src/lib/connectors/agentres/client.ts
-var DEFAULT_BASE_URL = "https://agentres.dev";
-function createAgentresClient(options) {
-  const baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
-  const fetchImpl = options.fetch ?? globalThis.fetch.bind(globalThis);
-  const { address, signMessage } = options;
-  async function withSiwx(request) {
-    const url = resolveUrl(baseUrl, request.path);
-    const init = requestInit(request);
-    const challenged = await fetchImpl(url, init);
-    if (challenged.status !== 402) {
-      return readBody(challenged);
+function notionCreateCommentTool(run) {
+  return withNotionExecutor(run, "Error creating Notion comment", {
+    type: "function",
+    function: {
+      name: "notion-create-comment",
+      description: "Add a comment to a Notion page. Supports page-level comments, content-specific comments (using selection_with_ellipsis), or replies to existing discussions (using discussion_id).",
+      arguments: {
+        type: "object",
+        properties: {
+          page_id: {
+            type: "string",
+            description: "The ID of the page to comment on (with or without dashes)"
+          },
+          rich_text: {
+            type: "array",
+            description: "Comment content as rich text array (max 100). Objects can be text, mention, or equation.",
+            items: {
+              type: "object",
+              properties: {
+                text: {
+                  type: "object",
+                  properties: {
+                    content: { type: "string" }
+                  },
+                  required: ["content"]
+                }
+              },
+              required: ["text"]
+            }
+          },
+          discussion_id: {
+            type: "string",
+            description: "ID or URL of an existing discussion to reply to"
+          },
+          selection_with_ellipsis: {
+            type: "string",
+            description: "Unique start and end snippet (~10 chars each with ellipsis) of content to comment on"
+          }
+        },
+        required: ["page_id", "rich_text"]
+      }
     }
-    await challenged.body?.cancel().catch(() => {
-    });
-    const header = challenged.headers.get(PAYMENT_REQUIRED_HEADER);
-    if (!header) {
-      throw new SiwxChallengeError(
-        `the 402 from ${request.path} carried no ${PAYMENT_REQUIRED_HEADER} header`
-      );
+  });
+}
+function createNotionCreateCommentTool(getAccessToken, requestNotionAccess) {
+  return notionCreateCommentTool(directRunner(getAccessToken, requestNotionAccess));
+}
+function notionGetCommentsTool(run) {
+  return withNotionExecutor(run, "Error retrieving Notion comments", {
+    type: "function",
+    function: {
+      name: "notion-get-comments",
+      description: "Get comments and discussions from a Notion page. Returns discussions with full comment content.",
+      arguments: {
+        type: "object",
+        properties: {
+          page_id: {
+            type: "string",
+            description: "Identifier for the Notion page"
+          },
+          include_all_blocks: {
+            type: "boolean",
+            description: "Include discussions on child blocks (default: false)"
+          },
+          include_resolved: {
+            type: "boolean",
+            description: "Include resolved discussions (default: false)"
+          },
+          discussion_id: {
+            type: "string",
+            description: "Fetch a specific discussion by ID or URL (e.g., discussion://pageId/blockId/discussionId)"
+          }
+        },
+        required: ["page_id"]
+      }
     }
-    const challenge = parseChallenge(header, baseUrl);
-    const signature = await signMessage(new TextEncoder().encode(buildMessage(challenge, address)));
-    const authorized = await fetchImpl(url, {
-      ...init,
-      headers: { ...init.headers, [SIWX_HEADER]: buildPayload(challenge, address, signature) }
-    });
-    return readBody(authorized);
-  }
-  async function linkResy(body) {
-    const response = await withSiwx({ method: "POST", path: "/api/link-resy", body });
-    return { step: response.step, message: response.message, resyUserId: response.resy_user_id };
-  }
-  return {
-    withSiwx,
-    async ensureAccount(email) {
-      const body = await withSiwx({ method: "POST", path: "/api/account", body: { email } });
-      return {
-        accountId: body.account_id,
-        email: body.email,
-        credentialKind: body.credential_kind,
-        walletLinked: body.wallet_linked
-      };
-    },
-    requestCode(email) {
-      return linkResy({ em_address: email });
-    },
-    verifyCode(email, code) {
-      return linkResy({ em_address: email, code });
-    },
-    async getLinkStatus() {
-      const body = await withSiwx({ method: "GET", path: "/api/me" });
-      return {
-        accountId: body.account_id,
-        email: body.email,
-        resyLinked: body.resy_linked,
-        walletAddress: body.wallet_address,
-        resyLinkedAt: body.resy_linked_at ?? null
-      };
+  });
+}
+function createNotionGetCommentsTool(getAccessToken, requestNotionAccess) {
+  return notionGetCommentsTool(directRunner(getAccessToken, requestNotionAccess));
+}
+function notionGetUsersTool(run) {
+  return withNotionExecutor(run, "Error listing Notion users", {
+    type: "function",
+    function: {
+      name: "notion-get-users",
+      description: "List users in the Notion workspace. Supports filtering by name/email, pagination, fetching a specific user by ID, or fetching the current bot user (user_id: 'self').",
+      arguments: {
+        type: "object",
+        properties: {
+          query: {
+            type: "string",
+            description: "Search query to filter users by name or email (case-insensitive, max 100 chars)"
+          },
+          start_cursor: {
+            type: "string",
+            description: "Cursor for pagination from previous response"
+          },
+          page_size: {
+            type: "integer",
+            description: "Number of users per page (1-100, default 100)"
+          },
+          user_id: {
+            type: "string",
+            description: "Return only the user matching this ID. Pass 'self' to fetch the current bot user."
+          }
+        }
+      }
+    }
+  });
+}
+function createNotionGetUsersTool(getAccessToken, requestNotionAccess) {
+  return notionGetUsersTool(directRunner(getAccessToken, requestNotionAccess));
+}
+function notionGetTeamsTool(run) {
+  return withNotionExecutor(run, "Error retrieving Notion teams", {
+    type: "function",
+    function: {
+      name: "notion-get-teams",
+      description: "Retrieve teams (teamspaces) in the Notion workspace. Shows team names, IDs, membership status, and roles.",
+      arguments: {
+        type: "object",
+        properties: {
+          query: {
+            type: "string",
+            description: "Search query to filter teams by name (case-insensitive, max 100 chars)"
+          }
+        }
+      }
     }
+  });
+}
+function createNotionGetTeamsTool(getAccessToken, requestNotionAccess) {
+  return notionGetTeamsTool(directRunner(getAccessToken, requestNotionAccess));
+}
+var NOTION_TOOLS = [
+  // Search
+  notionSearchTool,
+  // Pages
+  notionFetchTool,
+  notionCreatePagesTool,
+  notionUpdatePageTool,
+  notionMovePagesTool,
+  notionDuplicatePageTool,
+  // Data Sources (Databases)
+  notionCreateDatabaseTool,
+  notionUpdateDataSourceTool,
+  // Comments
+  notionCreateCommentTool,
+  notionGetCommentsTool,
+  // Users & Teams
+  notionGetUsersTool,
+  notionGetTeamsTool
+];
+function createNotionTools(getAccessToken, requestNotionAccess) {
+  const run = directRunner(getAccessToken, requestNotionAccess);
+  return NOTION_TOOLS.map((tool) => tool(run));
+}
+function createNotionProxyTools(callMcp) {
+  const run = proxyRunner(callMcp);
+  return NOTION_TOOLS.map((tool) => tool(run));
+}
+function getMCPEndpoints() {
+  return {
+    http: MCP_HTTP_ENDPOINT,
+    sse: MCP_SSE_ENDPOINT
   };
 }
-function resolveUrl(baseUrl, path) {
-  if (!path.startsWith("/") || path.startsWith("//")) {
-    throw new AgentresPathError(
-      `"${path}" is not a path on ${baseUrl} \u2014 it must start with a single "/"`
-    );
-  }
-  const base = new URL(baseUrl);
-  const resolved = new URL(path, base);
-  if (resolved.origin !== base.origin) {
-    throw new AgentresPathError(
-      `"${path}" resolves to ${resolved.origin} but this client talks to ${base.origin} \u2014 refusing to send it`
-    );
-  }
-  return resolved.toString();
+async function callNotionMCPTool(accessToken, toolName, args) {
+  return callMCPTool(accessToken, toolName, args);
 }
-function requestInit(request) {
-  const headers = { Accept: "application/json" };
-  if (request.body === void 0) {
-    return { method: request.method, headers };
+
+// src/tools/github.ts
+var GITHUB_API = "https://api.github.com";
+var FETCH_TIMEOUT_MS = 3e4;
+async function resolveToken(getAccessToken, requestGitHubAccess) {
+  let token = getAccessToken();
+  if (!token) {
+    try {
+      token = await requestGitHubAccess();
+    } catch (err) {
+      getLogger().error("Failed to resolve GitHub token", err);
+      return null;
+    }
   }
-  headers["Content-Type"] = "application/json";
-  return { method: request.method, headers, body: JSON.stringify(request.body) };
+  return token;
 }
-async function readBody(response) {
-  const body = await response.text();
-  if (!response.ok) {
-    throw parseAgentresError(response.status, body);
+async function githubFetch(token, path, options = {}) {
+  if (!path.startsWith("http") && !path.startsWith("/")) {
+    throw new Error("githubFetch: relative path must start with /");
+  }
+  const url = path.startsWith("http") ? path : `${GITHUB_API}${path}`;
+  if (!url.startsWith(`${GITHUB_API}/`)) {
+    throw new Error("githubFetch: URL must target GitHub API");
   }
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
   try {
-    return JSON.parse(body);
-  } catch {
-    throw new AgentresError(
-      response.status,
-      "INVALID_JSON",
-      `agentres answered ${response.status} with a body that is not JSON`,
-      response.status >= 500
-    );
+    return await fetch(url, {
+      ...options,
+      signal: controller.signal,
+      headers: {
+        Authorization: `Bearer ${token}`,
+        Accept: "application/vnd.github+json",
+        "Content-Type": "application/json",
+        "X-GitHub-Api-Version": "2022-11-28",
+        ...options.headers
+      }
+    });
+  } finally {
+    clearTimeout(timeout);
   }
 }
-
-// src/lib/connectors/client.ts
-var DEFAULT_REFRESH_BEFORE_MS = 3e4;
-function createConnectorTokenGetter(client, provider, opts = {}) {
-  const refreshBeforeMs = opts.refreshBeforeMs ?? DEFAULT_REFRESH_BEFORE_MS;
-  const now = opts.now ?? Date.now;
-  let cached = null;
-  return async () => {
-    if (cached && cached.expiresAt - refreshBeforeMs > now()) {
-      return cached.accessToken;
-    }
-    let result;
-    try {
-      result = await client.mintConnectorToken(provider);
-    } catch {
-      cached = null;
-      return null;
-    }
-    if (result.ok) {
-      cached = { accessToken: result.accessToken, expiresAt: result.expiresAt };
-      return result.accessToken;
+function createGetAuthenticatedUserTool(getAccessToken, requestAccess) {
+  return {
+    type: "function",
+    function: {
+      name: "github_get_authenticated_user",
+      description: "Get the authenticated GitHub user's profile including username and organizations. Call this first to discover the user's identity before making other GitHub API calls.",
+      parameters: {
+        type: "object",
+        properties: {}
+      }
+    },
+    executor: async () => {
+      const token = await resolveToken(getAccessToken, requestAccess);
+      if (!token) return "Error: GitHub not connected. Please connect your GitHub account first.";
+      try {
+        const userResp = await githubFetch(token, "/user");
+        if (!userResp.ok) return `Error: Failed to get user (${userResp.status})`;
+        const user = await userResp.json();
+        const orgsResp = await githubFetch(token, "/user/orgs?per_page=100");
+        let orgs = [];
+        if (orgsResp.ok) {
+          const orgsData = await orgsResp.json();
+          orgs = orgsData.map((o) => o.login);
+        }
+        return {
+          login: user.login,
+          name: user.name,
+          email: user.email,
+          organizations: orgs,
+          public_repos: user.public_repos,
+          html_url: user.html_url
+        };
+      } catch (err) {
+        getLogger().error("github_get_authenticated_user error", err);
+        return "Error: Failed to get user profile.";
+      }
     }
-    cached = null;
-    if (opts.onNotConnected) {
-      return opts.onNotConnected(result.error);
+  };
+}
+var MAX_RESPONSE_SIZE = 1e5;
+function truncate(text, maxLen) {
+  if (text.length <= maxLen) return text;
+  return text.slice(0, maxLen) + `
+
+... (truncated, ${text.length - maxLen} characters omitted)`;
+}
+function createGitHubApiTool(getAccessToken, requestAccess) {
+  return {
+    type: "function",
+    function: {
+      name: "github_api",
+      description: `Make an authenticated request to the GitHub REST API (https://api.github.com). You can call any endpoint documented at https://docs.github.com/en/rest.
+
+Examples:
+- List PRs: GET /repos/{owner}/{repo}/pulls?state=open
+- Get file: GET /repos/{owner}/{repo}/contents/{path}
+- Create issue: POST /repos/{owner}/{repo}/issues with body {"title": "...", "body": "..."}
+- Search repos: GET /search/repositories?q={query}
+
+IMPORTANT: For write operations (POST, PUT, PATCH, DELETE), always confirm with the user before executing. This includes creating issues, opening PRs, merging, committing files, and submitting reviews.`,
+      parameters: {
+        type: "object",
+        properties: {
+          method: {
+            type: "string",
+            enum: ["GET", "POST", "PUT", "PATCH", "DELETE"],
+            description: "HTTP method"
+          },
+          path: {
+            type: "string",
+            description: "API path (e.g., /repos/owner/repo/pulls) or full URL for pagination"
+          },
+          body: {
+            type: "object",
+            description: "Request body for POST/PUT/PATCH requests",
+            additionalProperties: true
+          }
+        },
+        required: ["method", "path"]
+      }
+    },
+    executor: async (args) => {
+      const token = await resolveToken(getAccessToken, requestAccess);
+      if (!token) return "Error: GitHub not connected. Please connect your GitHub account first.";
+      const method = args.method;
+      const path = args.path;
+      const body = args.body;
+      try {
+        const resp = await githubFetch(token, path, {
+          method,
+          body: body ? JSON.stringify(body) : void 0
+        });
+        const text = await resp.text();
+        if (!resp.ok) {
+          return `Error: GitHub API ${method} ${path} returned ${resp.status}: ${truncate(text, 500)}`;
+        }
+        try {
+          const data = JSON.parse(text);
+          const json = JSON.stringify(data);
+          return truncate(json, MAX_RESPONSE_SIZE);
+        } catch {
+          return truncate(text, MAX_RESPONSE_SIZE);
+        }
+      } catch (err) {
+        if (err instanceof DOMException && err.name === "AbortError") {
+          return `Error: GitHub API request timed out after ${FETCH_TIMEOUT_MS / 1e3}s.`;
+        }
+        getLogger().error("github_api error", err);
+        return `Error: GitHub API request failed: ${err instanceof Error ? err.message : "unknown error"}`;
+      }
     }
-    return null;
   };
 }
+function createGitHubTools(getAccessToken, requestGitHubAccess) {
+  return [
+    createGetAuthenticatedUserTool(getAccessToken, requestGitHubAccess),
+    createGitHubApiTool(getAccessToken, requestGitHubAccess)
+  ];
+}
 
 // src/tools/gmail.ts
 var GMAIL_PROVIDER = "gmail";
@@ -3735,7 +3720,7 @@ async function callSlack(callProxy, path, query, requestBody) {
   const { status, json } = await callProxy(path, query, requestBody);
   return interpretSlackResult(path, status, json);
 }
-function readString(raw) {
+function readString2(raw) {
   return typeof raw === "string" ? raw : "";
 }
 function clampLimit(raw, fallback, min, max) {
@@ -4297,7 +4282,7 @@ function createSlackSearchMessagesTool(callProxy) {
       }
     },
     executor: async (args) => searchSlackMessages(callProxy, {
-      query: readString(args.query),
+      query: readString2(args.query),
       count: args.count,
       channel: typeof args.channel === "string" ? args.channel : void 0,
       from_user: typeof args.from_user === "string" ? args.from_user : void 0,
@@ -4374,7 +4359,7 @@ function createSlackGetChannelHistoryTool(callProxy) {
       }
     },
     executor: async (args) => getSlackChannelHistory(callProxy, {
-      channel: readString(args.channel),
+      channel: readString2(args.channel),
       limit: args.limit
     })
   };
@@ -4405,8 +4390,8 @@ function createSlackGetThreadRepliesTool(callProxy) {
       }
     },
     executor: async (args) => getSlackThreadReplies(callProxy, {
-      channel: readString(args.channel),
-      ts: readString(args.ts),
+      channel: readString2(args.channel),
+      ts: readString2(args.ts),
       limit: args.limit
     })
   };
@@ -4437,8 +4422,8 @@ function createSlackPostMessageTool(callProxy) {
       }
     },
     executor: async (args) => postSlackMessage(callProxy, {
-      channel: readString(args.channel),
-      text: readString(args.text),
+      channel: readString2(args.channel),
+      text: readString2(args.text),
       thread_ts: typeof args.thread_ts === "string" ? args.thread_ts : void 0
     })
   };
@@ -14050,6 +14035,7 @@ export {
   createNotionGetTeamsTool,
   createNotionGetUsersTool,
   createNotionMovePagesTool,
+  createNotionProxyTools,
   createNotionSearchTool,
   createNotionTools,
   createNotionUpdateDataSourceTool,