@assemblyline-agents/arcads 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OpenEve contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,52 @@
+# @assemblyline-agents/arcads
+
+Official Assembly Line connection plugin for the Arcads hosted Streamable HTTP MCP
+server at `https://mcp.arcads.ai`.
+
+## Setup
+
+Arcads uses OAuth 2.0 Authorization Code + PKCE and dynamic client
+registration. Register one client for the Assembly Line deployment:
+
+```sh
+curl -X POST https://api.arcads.ai/oauth/register \
+  -H 'content-type: application/json' \
+  -d '{
+    "client_name": "Assembly Line",
+    "redirect_uris": ["https://YOUR-AGENT-HOST/openeve/connections/callback"],
+    "grant_types": ["authorization_code", "refresh_token"],
+    "response_types": ["code"],
+    "token_endpoint_auth_method": "none"
+  }'
+```
+
+The registered redirect URI uses the legacy `/openeve/...` path because
+callback-URL construction still emits it during the rename compatibility
+window; the runtime also serves `/assembly-line/connections/callback`.
+
+Store the returned `client_id` as `ARCADS_MCP_CLIENT_ID`. Set
+`ARCADS_MCP_REDIRECT_URI` only when the registered callback differs from
+Assembly Line's normal connection callback URL.
+
+```sh
+assembly-line add arcads agent
+```
+
+The generated connection starts read-only. Most Arcads tools create or edit
+media and can consume account credits, so enable writes with an explicit
+approval policy:
+
+```ts
+import { defineArcadsConnection } from "@assemblyline-agents/arcads";
+
+export default defineArcadsConnection({
+  access: {
+    read: true,
+    write: { approval: "always" }
+  }
+});
+```
+
+The deployment owner supplies the Arcads account, subscription, OAuth client,
+credit policy, and callback URL. OAuth tokens stay in Assembly Line's connection
+grant store.

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+import { type ConnectionAuthDefinition, type McpPluginConnectionOptions } from "@assemblyline-agents/core";
+export interface ArcadsConnectionOptions extends Omit<McpPluginConnectionOptions, "auth"> {
+    auth?: ConnectionAuthDefinition | false;
+}
+export declare function defineArcadsConnection(options: ArcadsConnectionOptions): import("@assemblyline-agents/core").McpHttpClientConnectionDefinition;
+export declare const openevePlugin: import("@assemblyline-agents/core").PluginModule;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAChC,MAAM,2BAA2B,CAAC;AAInC,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,0BAA0B,EAAE,MAAM,CAAC;IACvF,IAAI,CAAC,EAAE,wBAAwB,GAAG,KAAK,CAAC;CACzC;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,yEAMtE;AAED,eAAO,MAAM,aAAa,kDAA0C,CAAC"}

package/dist/index.js

@@ -0,0 +1,31 @@
+import { connectionPluginMetadata, defineMcpPluginConnection, defineOAuthAuthorization, definePlugin } from "@assemblyline-agents/core";
+const PLUGIN = connectionPluginMetadata("arcads");
+export function defineArcadsConnection(options) {
+    const { auth, ...connection } = options;
+    return defineMcpPluginConnection(PLUGIN, {
+        ...connection,
+        auth: auth === false ? false : auth ?? arcadsOAuth()
+    });
+}
+export const openevePlugin = definePlugin({ connections: [PLUGIN] });
+function arcadsOAuth() {
+    return ({ env }) => {
+        const clientId = env.ARCADS_MCP_CLIENT_ID?.trim();
+        const redirectUri = env.ARCADS_MCP_REDIRECT_URI?.trim();
+        if (!clientId) {
+            throw new Error("Arcads OAuth requires ARCADS_MCP_CLIENT_ID.");
+        }
+        return defineOAuthAuthorization({
+            displayName: "Arcads",
+            authorizeUrl: "https://api.arcads.ai/oauth/authorize",
+            tokenUrl: "https://api.arcads.ai/oauth/token",
+            clientId,
+            scopes: ["mcp", "offline_access"],
+            ...(redirectUri ? { redirectUri } : {}),
+            authorizationParams: { resource: "https://mcp.arcads.ai" },
+            tokenParams: { resource: "https://mcp.arcads.ai" },
+            pkce: true
+        });
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,YAAY,EAGb,MAAM,2BAA2B,CAAC;AAEnC,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,CAAE,CAAC;AAMnD,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC;IACxC,OAAO,yBAAyB,CAAC,MAAM,EAAE;QACvC,GAAG,UAAU;QACb,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,WAAW,EAAE;KACrD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAErE,SAAS,WAAW;IAClB,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QACjB,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;QAClD,MAAM,WAAW,GAAG,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,wBAAwB,CAAC;YAC9B,WAAW,EAAE,QAAQ;YACrB,YAAY,EAAE,uCAAuC;YACrD,QAAQ,EAAE,mCAAmC;YAC7C,QAAQ;YACR,MAAM,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC;YACjC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE;YAC1D,WAAW,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE;YAClD,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@assemblyline-agents/arcads",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@assemblyline-agents/core": "0.1.0"
+  },
+  "description": "Official OpenEve connection plugin for the Arcads hosted MCP server.",
+  "files": [
+    "dist",
+    "skills"
+  ],
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jasonbadeaux/openeve.git",
+    "directory": "packages/arcads"
+  },
+  "bugs": {
+    "url": "https://github.com/jasonbadeaux/openeve/issues"
+  },
+  "homepage": "https://github.com/jasonbadeaux/openeve#readme",
+  "author": "OpenEve contributors",
+  "keywords": [
+    "openeve",
+    "ai",
+    "agents",
+    "arcads",
+    "mcp",
+    "video-ads",
+    "plugin"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "check": "tsc -p tsconfig.json --noEmit"
+  }
+}

package/skills/arcads/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: arcads
+description: Analyze, generate, and edit social media ads through the connected Arcads MCP server.
+---
+# Arcads
+
+Use the live Arcads tool catalog instead of assuming a fixed model or operation
+name. Arcads evolves its media models and edit tools; select the tool whose
+current description and schema match the requested input and output modality.
+
+Read operations can inspect asset state and retrieve generated results. Upload
+URL creation, analysis, generation, and editing are write operations because
+they can create remote assets or consume credits. Do not start them unless the
+connection exposes write authority and the configured approval gate permits the
+call.
+
+For a local image, audio file, or video:
+
+1. Confirm that the user owns or is authorized to transform the source.
+2. Request an upload URL with the file's exact MIME type.
+3. Upload the bytes with a host-side HTTP tool; never paste binary data,
+   credentials, presigned URLs, or OAuth tokens into a model prompt.
+4. Pass the returned remote file path to the selected Arcads tool.
+5. Poll the asset status at a reasonable interval, then retrieve the completed
+   result.
+
+For social video, preserve the user's requested aspect ratio and duration.
+Default to `9:16` only when the request is clearly for TikTok, Reels, or Shorts.
+Do not generate fake product imagery or logos when the user expects a real
+brand asset. Prefer two or more creative variants only after making the added
+credit cost clear.