@assemblyline-agents/core 1.0.0 → 3.0.0

package/dist/plugin.js

@@ -1,186 +1,5 @@
-import { PLUGIN_EXPORT_NAME } from "./brand.js";
-import { defineMcpClientConnection, defineMcpRelayConnection, defineMcpStdioConnection, defineOpenAPIConnection, defineSandboxCliConnection } from "./definitions.js";
-export function definePlugin(module) {
-    return module;
-}
-/** Reads the `assemblyLinePlugin` export from a dynamically imported module namespace. */
-export function pluginModuleFromImport(imported) {
-    const candidates = [imported, imported?.default];
-    for (const candidate of candidates) {
-        if (!candidate || typeof candidate !== "object")
-            continue;
-        const value = candidate[PLUGIN_EXPORT_NAME];
-        if (isPluginModule(value))
-            return value;
-    }
-    return undefined;
-}
-/**
- * Provider packages use this factory instead of implementing transport or
- * credential plumbing. The developer still owns the provider application,
- * token/OAuth grant, and any required MCP bridge.
- */
-export function defineMcpPluginConnection(plugin, options) {
-    if (plugin.protocol !== "mcp") {
-        throw new Error(`${plugin.helper}: ${plugin.provider} uses OpenAPI; call defineOpenAPIPluginConnection instead.`);
-    }
-    if ((plugin.transport ?? "http") !== "http") {
-        throw new Error(`${plugin.helper}: ${plugin.provider} uses stdio; call defineStdioMcpPluginConnection instead.`);
-    }
-    validatePluginAccess(plugin, options.access);
-    const url = options.url ?? environmentValue(plugin.urlEnv) ?? plugin.defaultUrl;
-    if (!url)
-        throw new Error(`${plugin.helper}: set ${plugin.urlEnv ?? "a connection URL"} or pass url.`);
-    const definition = {
-        transport: "http",
-        url,
-        description: options.description ?? plugin.description,
-        access: pluginAccessDefinition(plugin, options.access),
-        required: options.required ?? true,
-        subject: options.subject ?? plugin.subject ?? "user",
-        metadata: {
-            provider: plugin.provider,
-            plugin: plugin.packageName ?? plugin.provider,
-            ...(options.metadata ?? {})
-        }
-    };
-    const auth = options.auth === false || plugin.tokenHeader
-        ? (options.auth === false ? undefined : options.auth)
-        : options.auth ?? (plugin.tokenRequired === false ? undefined : tokenAuth(plugin.tokenEnv));
-    if (auth)
-        definition.auth = auth;
-    const tokenHeaders = options.auth === undefined && plugin.tokenHeader
-        ? tokenHeader(plugin.tokenHeader, plugin.tokenEnv)
-        : undefined;
-    const headers = mergeHeaders(tokenHeaders, options.headers);
-    if (headers)
-        definition.headers = headers;
-    const tools = options.tools ?? cloneToolFilter(plugin.tools);
-    if (tools)
-        definition.tools = tools;
-    return defineMcpClientConnection(definition);
-}
-export function defineStdioMcpPluginConnection(plugin, options) {
-    if (plugin.protocol !== "mcp" || plugin.transport !== "stdio") {
-        throw new Error(`${plugin.helper}: ${plugin.provider} uses HTTP; call defineMcpPluginConnection instead.`);
-    }
-    validatePluginAccess(plugin, options.access);
-    const definition = {
-        transport: "stdio",
-        command: options.command,
-        ...(options.args ? { args: [...options.args] } : {}),
-        ...(options.cwd ? { cwd: options.cwd } : {}),
-        ...(options.env ? { env: { ...options.env } } : {}),
-        description: options.description ?? plugin.description,
-        access: pluginAccessDefinition(plugin, options.access),
-        required: options.required ?? true,
-        subject: options.subject ?? plugin.subject ?? "environment",
-        metadata: {
-            provider: plugin.provider,
-            plugin: plugin.packageName ?? plugin.provider,
-            ...(options.metadata ?? {})
-        }
-    };
-    const tools = options.tools ?? cloneToolFilter(plugin.tools);
-    if (tools)
-        definition.tools = tools;
-    return defineMcpStdioConnection(definition);
-}
-export function defineRelayMcpPluginConnection(plugin, options) {
-    if (plugin.protocol !== "mcp" || plugin.transport !== "relay") {
-        throw new Error(`${plugin.helper}: ${plugin.provider} does not use the OpenEve relay transport.`);
-    }
-    validatePluginAccess(plugin, options.access);
-    const url = options.url ?? environmentValue(plugin.urlEnv) ?? plugin.defaultUrl;
-    if (!url)
-        throw new Error(`${plugin.helper}: set ${plugin.urlEnv ?? "a relay URL"} or pass url.`);
-    const credentialEnv = options.credentialEnv ?? plugin.credentialEnv;
-    if (!credentialEnv)
-        throw new Error(`${plugin.helper}: relay metadata must declare credentialEnv.`);
-    const definition = {
-        transport: "relay",
-        url,
-        credentialEnv,
-        ...(options.timeoutMs !== undefined ? { timeoutMs: options.timeoutMs } : {}),
-        description: options.description ?? plugin.description,
-        access: pluginAccessDefinition(plugin, options.access),
-        required: options.required ?? true,
-        subject: options.subject ?? plugin.subject ?? "environment",
-        metadata: {
-            provider: plugin.provider,
-            plugin: plugin.packageName ?? plugin.provider,
-            ...(options.metadata ?? {})
-        }
-    };
-    const tools = options.tools ?? cloneToolFilter(plugin.tools);
-    if (tools)
-        definition.tools = tools;
-    return defineMcpRelayConnection(definition);
-}
-/** Build a direct HTTP API connection from a provider's reviewed OpenAPI metadata. */
-export function defineOpenAPIPluginConnection(plugin, options) {
-    if (plugin.protocol !== "openapi") {
-        throw new Error(`${plugin.helper}: ${plugin.provider} uses MCP; call defineMcpPluginConnection instead.`);
-    }
-    validatePluginAccess(plugin, options.access);
-    const spec = options.spec ?? environmentValue(plugin.specEnv) ?? plugin.defaultSpec;
-    if (!spec)
-        throw new Error(`${plugin.helper}: set ${plugin.specEnv ?? "an OpenAPI specification"} or pass spec.`);
-    const baseUrl = options.baseUrl ?? environmentValue(plugin.baseUrlEnv) ?? plugin.defaultBaseUrl;
-    const definition = {
-        spec,
-        ...(baseUrl ? { baseUrl } : {}),
-        description: options.description ?? plugin.description,
-        access: pluginAccessDefinition(plugin, options.access),
-        required: options.required ?? true,
-        subject: options.subject ?? plugin.subject ?? "user",
-        metadata: {
-            provider: plugin.provider,
-            plugin: plugin.packageName ?? plugin.provider,
-            ...(options.metadata ?? {})
-        }
-    };
-    const auth = options.auth === false
-        ? undefined
-        : options.auth ?? (plugin.tokenRequired === false ? undefined : tokenAuth(plugin.tokenEnv));
-    if (auth)
-        definition.auth = auth;
-    if (options.headers)
-        definition.headers = options.headers;
-    const operations = options.operations ?? cloneToolFilter(plugin.tools);
-    if (operations)
-        definition.operations = operations;
-    return defineOpenAPIConnection(definition);
-}
-/**
- * Build a connection whose reviewed operations run through a provider CLI in
- * the agent sandbox rather than on the OpenEve gateway host.
- */
-export function defineSandboxCliPluginConnection(plugin, options) {
-    if (plugin.protocol !== "cli" || plugin.transport !== "sandbox") {
-        throw new Error(`${plugin.helper}: ${plugin.provider} does not use the sandbox CLI transport.`);
-    }
-    validatePluginAccess(plugin, options.access);
-    const command = options.command ?? plugin.command;
-    if (!command)
-        throw new Error(`${plugin.helper}: sandbox CLI metadata must declare command.`);
-    return defineSandboxCliConnection({
-        transport: "sandbox",
-        command,
-        description: options.description ?? plugin.description,
-        tools: options.tools,
-        access: pluginAccessDefinition(plugin, options.access),
-        ...(options.auth ? { auth: options.auth } : {}),
-        ...(options.maxOutputChars !== undefined ? { maxOutputChars: options.maxOutputChars } : {}),
-        required: options.required ?? true,
-        subject: options.subject ?? plugin.subject ?? "environment",
-        metadata: {
-            provider: plugin.provider,
-            plugin: plugin.packageName ?? plugin.provider,
-            ...(options.metadata ?? {})
-        }
-    });
-}
+export * from "./plugin-contract.js";
+export * from "./plugin-connection-factories.js";
 export function connectionPluginMetadata(kind) {
     return CONNECTION_PLUGIN_CATALOG.find((entry) => entry.kind === kind);
 }
@@ -190,6 +9,55 @@ export function connectionPluginMetadataForHelper(helper) {
 export function allConnectionPluginMetadata() {
     return CONNECTION_PLUGIN_CATALOG.map(cloneMetadata);
 }
+export function toolPackPluginMetadata(kind) {
+    const metadata = TOOL_PACK_PLUGIN_CATALOG.find((entry) => entry.kind === kind);
+    return metadata ? cloneToolPackMetadata(metadata) : undefined;
+}
+export function allToolPackPluginMetadata() {
+    return TOOL_PACK_PLUGIN_CATALOG.map(cloneToolPackMetadata);
+}
+const TOOL_PACK_PLUGIN_CATALOG = [
+    {
+        kind: "openui",
+        role: "tools",
+        packageName: "@assemblyline-agents/openui",
+        description: "Full OpenUI component packs with developer policy, immutable revisions, and storage-issued publication links.",
+        tools: [
+            {
+                name: "openui_create",
+                helper: "defineOpenUiCreateTool",
+                description: "Create an immutable artifact revision from developer-approved OpenUI components. Raw HTML is not accepted.",
+                needsApproval: false
+            },
+            {
+                name: "openui_update",
+                helper: "defineOpenUiUpdateTool",
+                description: "Create a new immutable revision of an existing OpenUI artifact. Raw HTML is not accepted.",
+                needsApproval: false
+            },
+            {
+                name: "openui_publish",
+                helper: "defineOpenUiPublishTool",
+                description: "Publish one OpenUI artifact revision to an unlisted, storage-issued HTTPS link.",
+                needsApproval: false
+            }
+        ],
+        config: {
+            path: "tool-config/openui.ts",
+            helper: "defineOpenUiConfig",
+            options: {}
+        },
+        skills: ["openui-artifacts"],
+        requiredEnv: [],
+        optionalEnv: ["R2_PUBLIC_BASE_URL", "S3_PUBLIC_BASE_URL"],
+        setup: [{
+                kind: "tools",
+                name: "openui-public-blob-origin",
+                required: true,
+                message: "Configure an HTTPS public base URL on the blob adapter, then review the generated OpenUI component and brand policy before publishing."
+            }]
+    }
+];
 const READ_PATTERNS = [
     "regex:(^|[-_])(search|read|list|fetch|get|retrieve|query|lookup|find|describe|details?|discover)([-_]|$)"
 ];
@@ -226,12 +94,18 @@ function catalogEntry(input) {
         optionalEnv,
         capabilities: ["mcp", "live-tools", input.transport === "stdio" ? "stdio" : input.transport === "relay" ? "e2ee-device-relay" : "streamable-http"],
         scopes: [...(input.scopes ?? [])],
-        subject: input.subject ?? "user",
+        // Plugins with user-scoped grants declare subject: "user" explicitly; an
+        // unannotated plugin gets a deployment credential usable on every surface.
+        subject: input.subject ?? "workspace",
         ...(input.tools ? { tools: cloneToolFilter(input.tools) } : {}),
         ...(input.hostRequirements ? { hostRequirements: cloneHostRequirements(input.hostRequirements) } : {}),
         readToolPatterns: input.readToolPatterns ?? READ_PATTERNS,
         writeToolPatterns: input.writeToolPatterns ?? (input.write ? WRITE_PATTERNS : []),
-        skill: input.kind,
+        ...(input.eventCatalog ? { eventCatalog: [...input.eventCatalog] } : {}),
+        ...(input.defaultEvents ? { defaultEvents: [...input.defaultEvents] } : {}),
+        ...(input.eventMode ? { eventMode: input.eventMode } : {}),
+        ...(input.eventScope ? { eventScope: input.eventScope } : {}),
+        ...(input.eventRequiredEnv ? { eventRequiredEnv: [...input.eventRequiredEnv] } : {}),
         setup: [{
                 kind: "connection",
                 name: `${input.kind}-developer-configuration`,
@@ -257,11 +131,6 @@ const HIGGSFIELD_PLUGIN = {
     subject: "user",
     readToolPatterns: ["read"],
     writeToolPatterns: ["write"],
-    skills: [
-        "higgsfield-generate",
-        "higgsfield-soul-id",
-        "higgsfield-product-photoshoot"
-    ],
     setup: [{
             kind: "sandbox",
             name: "higgsfield-cli",
@@ -269,6 +138,30 @@ const HIGGSFIELD_PLUGIN = {
             message: "Install the official Higgsfield CLI in the sandbox image with `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh`, then run `higgsfield auth login` interactively inside each persistent, user-scoped sandbox. Do not bake account credentials into a shared image. Higgsfield generation and editing consume account credits."
         }]
 };
+const REMOTION_PLUGIN = {
+    kind: "remotion",
+    role: "connection",
+    packageName: "@assemblyline-agents/remotion",
+    helper: "defineRemotionConnection",
+    protocol: "cli",
+    transport: "sandbox",
+    provider: "remotion",
+    description: "Remotion composition discovery and rendering through the project CLI inside the active agent sandbox.",
+    command: "npx",
+    requiredEnv: [],
+    optionalEnv: [],
+    capabilities: ["sandbox-cli", "media-rendering", "workspace-artifacts"],
+    scopes: [],
+    subject: "environment",
+    readToolPatterns: ["list_compositions", "check_versions"],
+    writeToolPatterns: ["render_video", "render_still"],
+    setup: [{
+            kind: "sandbox",
+            name: "remotion-cli",
+            required: true,
+            message: "Install Remotion and @remotion/cli in the sandbox project. Composition discovery and rendering execute inside the active run sandbox and write artifacts under /workspace."
+        }]
+};
 const MIRROR_PLUGIN = {
     kind: "mirror",
     role: "connection",
@@ -291,11 +184,13 @@ const MIRROR_PLUGIN = {
             "mirror.connected_provider_call",
             "mirror.create_connections_link",
             "mirror.query_records",
+            "mirror.list_changes",
             "mirror.get_source",
             "mirror.live_read",
             "mirror.sync_now",
             "mirror.request_action",
             "mirror.get_pending_approvals",
+            "mirror.get_skill",
             "mirror.approve_code",
             "mirror.agentcash_wallet_export",
             "mirror.register_agent",
@@ -305,9 +200,11 @@ const MIRROR_PLUGIN = {
     readToolPatterns: [
         "mirror.connected_providers",
         "mirror.query_records",
+        "mirror.list_changes",
         "mirror.get_source",
         "mirror.live_read",
         "mirror.get_pending_approvals",
+        "mirror.get_skill",
         "mirror.whoami"
     ],
     writeToolPatterns: [
@@ -319,12 +216,83 @@ const MIRROR_PLUGIN = {
         "mirror.agentcash_wallet_export",
         "mirror.register_agent"
     ],
-    skill: "mirror",
+    eventCatalog: ["source.changed"],
+    defaultEvents: ["source.changed"],
+    eventMode: "api",
+    eventScope: "principal",
     setup: [{
             kind: "connection",
             name: "mirror-oauth-configuration",
             required: true,
-            message: "Choose a stable public client id for this agent, set MIRROR_OAUTH_CLIENT_ID, and deploy with a reachable OpenEve connection callback URL. Mirror uses OAuth Authorization Code + PKCE and stores provider credentials behind the user's Mirror account."
+            message: "Choose a stable public client id for this agent, set MIRROR_OAUTH_CLIENT_ID, and deploy with a reachable Assembly Line connection callback URL. Mirror uses OAuth Authorization Code + PKCE and stores provider credentials behind the user's Mirror account."
+        }]
+};
+const MARGINS_PLUGIN = {
+    kind: "margins",
+    role: "connection",
+    packageName: "@assemblyline-agents/margins",
+    helper: "defineMarginsConnection",
+    protocol: "mcp",
+    transport: "http",
+    provider: "margins",
+    description: "Resource-scoped collaborative Markdown pages, folders, comments, suggestions, and conflict-safe edits through Margins.",
+    defaultUrl: "https://margins.artificialillumination.co/mcp",
+    urlEnv: "MARGINS_MCP_URL",
+    requiredEnv: [],
+    optionalEnv: [
+        "MARGINS_MCP_URL",
+        "MARGINS_ISSUER",
+        "MARGINS_AGENT_ID",
+        "MARGINS_AGENT_NAME",
+        "MARGINS_AGENT_RUNTIME",
+        "MARGINS_AGENT_HARNESS"
+    ],
+    capabilities: [
+        "mcp",
+        "host-side-pairing",
+        "rotating-bearer-grants",
+        "streamable-http",
+        "resource-scoped",
+        "collaborative-markdown",
+        "conflict-safe-writes"
+    ],
+    scopes: ["margins"],
+    subject: "user",
+    tools: {
+        allow: [
+            "margins_status",
+            "margins_context",
+            "margins_review",
+            "margins_map",
+            "margins_graph",
+            "margins_create_file",
+            "margins_comment",
+            "margins_edit",
+            "margins_suggest",
+            "margins_history",
+            "margins_library"
+        ]
+    },
+    readToolPatterns: [
+        "margins_status",
+        "margins_context",
+        "margins_review",
+        "margins_map",
+        "margins_graph",
+        "margins_history",
+        "margins_library"
+    ],
+    writeToolPatterns: [
+        "margins_create_file",
+        "margins_comment",
+        "margins_edit",
+        "margins_suggest"
+    ],
+    setup: [{
+            kind: "connection",
+            name: "margins-binding-packet",
+            required: true,
+            message: "In Margins, create an agent invite for the exact page, folder, or workspace and paste its short-lived one-time binding packet into the agent chat. No developer OAuth registration or long-lived token environment variable is required."
         }]
 };
 const PROVENANCE_PLUGIN = {
@@ -382,11 +350,6 @@ const PROVENANCE_PLUGIN = {
         "provenance.agent_activity"
     ],
     writeToolPatterns: ["provenance.register_agent"],
-    skills: [
-        "provenance-reconstruction",
-        "provenance-handoff-bundle",
-        "provenance-ambient-capture"
-    ],
     setup: [{
             kind: "connection",
             name: "provenance-oauth-configuration",
@@ -395,7 +358,55 @@ const PROVENANCE_PLUGIN = {
         }]
 };
 const CONNECTION_PLUGIN_CATALOG = [
+    {
+        kind: "1password",
+        role: "connection",
+        packageName: "@assemblyline-agents/1password",
+        helper: "defineOnePasswordConnection",
+        protocol: "sdk",
+        provider: "1password",
+        description: "1Password vault discovery, item search and retrieval, and secret resolution through the official SDK.",
+        requiredEnv: ["OP_SERVICE_ACCOUNT_TOKEN"],
+        optionalEnv: [],
+        capabilities: ["sdk", "direct-api", "live-tools", "service-account", "vaults", "items", "secrets"],
+        scopes: [],
+        subject: "environment",
+        tools: {
+            allow: ["list_vaults", "list_items", "search_items", "get_item", "resolve_secret"]
+        },
+        readToolPatterns: ["list_vaults", "list_items", "search_items", "get_item", "resolve_secret"],
+        writeToolPatterns: [],
+        setup: [{
+                kind: "connection",
+                name: "onepassword-service-account",
+                required: true,
+                message: "Create a 1Password service account for this agent, share only the vaults the agent should be able to use, and set its token in OP_SERVICE_ACCOUNT_TOKEN. Every readable item and concealed field in those vaults is available to the agent."
+            }]
+    },
+    {
+        kind: "a2a",
+        role: "connection",
+        packageName: "@assemblyline-agents/a2a",
+        helper: "defineA2AConnection",
+        protocol: "a2a",
+        provider: "a2a",
+        description: "Discover and delegate work to an independently deployed agent through the A2A v1.0 protocol.",
+        requiredEnv: [],
+        optionalEnv: [],
+        capabilities: ["a2a", "agent-card-discovery", "remote-agent-tasks", "json-rpc"],
+        scopes: [],
+        subject: "environment",
+        readToolPatterns: ["regex:^(?!cancel_task$).+"],
+        writeToolPatterns: ["cancel_task"],
+        setup: [{
+                kind: "connection",
+                name: "a2a-peer-configuration",
+                required: true,
+                message: "Configure an allowlisted Agent Card URL and a peer-scoped service credential for the remote agent."
+            }]
+    },
     HIGGSFIELD_PLUGIN,
+    MARGINS_PLUGIN,
     MIRROR_PLUGIN,
     PROVENANCE_PLUGIN,
     {
@@ -420,78 +431,310 @@ const CONNECTION_PLUGIN_CATALOG = [
             "arcads_get_upload_url",
             "regex:^arcads_(?!get_(?!upload_url$)|list|search|watch).+"
         ],
-        skill: "arcads",
         setup: [{
                 kind: "connection",
                 name: "arcads-oauth-configuration",
                 required: true,
-                message: "Register an OAuth client with https://api.arcads.ai/oauth/register, set ARCADS_MCP_CLIENT_ID, and register the OpenEve connection callback URL. Arcads generation and editing consume account credits."
+                message: "Register an OAuth client with https://api.arcads.ai/oauth/register, set ARCADS_MCP_CLIENT_ID, and register the Assembly Line connection callback URL. Arcads generation and editing consume account credits."
             }]
     },
-    catalogEntry({
+    {
+        kind: "attio",
+        role: "connection",
+        packageName: "@assemblyline-agents/attio",
+        helper: "defineAttioConnection",
+        protocol: "mcp",
+        transport: "http",
+        provider: "attio",
+        description: "Attio CRM records, lists, notes, tasks, comments, email and meeting intelligence, and reporting through Attio's official hosted MCP server.",
+        defaultUrl: "https://mcp.attio.com/mcp",
+        urlEnv: "ATTIO_MCP_URL",
+        requiredEnv: ["ATTIO_MCP_CLIENT_ID"],
+        optionalEnv: ["ATTIO_MCP_URL", "ATTIO_MCP_REDIRECT_URI"],
+        capabilities: ["mcp", "oauth", "pkce", "refresh-token", "live-tools", "streamable-http", "crm", "semantic-search", "reporting"],
+        scopes: ["mcp", "offline_access", "openid"],
+        subject: "user",
+        tools: {
+            allow: [
+                "search-records",
+                "list-records",
+                "get-records-by-ids",
+                "create-record",
+                "upsert-record",
+                "update-record",
+                "merge-records",
+                "list-attribute-definitions",
+                "list-lists",
+                "list-list-attribute-definitions",
+                "list-records-in-list",
+                "add-record-to-list",
+                "update-list",
+                "update-list-entry-by-id",
+                "update-list-entry-by-record-id",
+                "create-comment",
+                "list-comments",
+                "list-comment-replies",
+                "delete-comment",
+                "create-note",
+                "search-notes-by-metadata",
+                "semantic-search-notes",
+                "get-note-body",
+                "update-note",
+                "list-tasks",
+                "create-task",
+                "update-task",
+                "search-meetings",
+                "search-call-recordings-by-metadata",
+                "semantic-search-call-recordings",
+                "get-call-recording",
+                "search-emails-by-metadata",
+                "semantic-search-emails",
+                "get-email-content",
+                "list-workspace-members",
+                "list-workspace-teams",
+                "whoami",
+                "run-basic-report",
+                "query-particle-sql"
+            ]
+        },
+        readToolPatterns: [
+            "search-records",
+            "list-records",
+            "get-records-by-ids",
+            "list-attribute-definitions",
+            "list-lists",
+            "list-list-attribute-definitions",
+            "list-records-in-list",
+            "list-comments",
+            "list-comment-replies",
+            "search-notes-by-metadata",
+            "semantic-search-notes",
+            "get-note-body",
+            "list-tasks",
+            "search-meetings",
+            "search-call-recordings-by-metadata",
+            "semantic-search-call-recordings",
+            "get-call-recording",
+            "search-emails-by-metadata",
+            "semantic-search-emails",
+            "get-email-content",
+            "list-workspace-members",
+            "list-workspace-teams",
+            "whoami",
+            "run-basic-report",
+            "query-particle-sql"
+        ],
+        writeToolPatterns: [
+            "create-record",
+            "upsert-record",
+            "update-record",
+            "merge-records",
+            "add-record-to-list",
+            "update-list",
+            "update-list-entry-by-id",
+            "update-list-entry-by-record-id",
+            "create-comment",
+            "delete-comment",
+            "create-note",
+            "update-note",
+            "create-task",
+            "update-task"
+        ],
+        setup: [{
+                kind: "connection",
+                name: "attio-mcp-oauth",
+                required: true,
+                message: "Register a public OAuth client at https://app.attio.com/oauth/register for the Assembly Line connection callback, set ATTIO_MCP_CLIENT_ID, then let each user authorize Attio. For a shared company agent, explicitly set subject: \"workspace\" and preauthorize a dedicated Attio member through the protected operator connection flow."
+            }]
+    },
+    {
         kind: "gmail",
-        displayName: "Gmail",
+        role: "connection",
+        packageName: "@assemblyline-agents/gmail",
         helper: "defineGmailConnection",
-        description: "Gmail threads, messages, attachments, drafts, and sends through an independently authorized MCP connection.",
-        urlEnv: "GMAIL_MCP_URL",
-        tokenEnv: "GMAIL_MCP_TOKEN",
+        protocol: "http",
+        provider: "gmail",
+        description: "Gmail threads, messages, attachments, drafts, and sends through the Gmail REST API.",
+        defaultBaseUrl: "https://gmail.googleapis.com/gmail/v1",
+        baseUrlEnv: "GMAIL_API_BASE_URL",
+        requiredEnv: ["GOOGLE_CLIENT_ID", "GOOGLE_CLIENT_SECRET"],
+        optionalEnv: ["GOOGLE_REDIRECT_URI", "GMAIL_API_BASE_URL"],
+        capabilities: ["http-api", "oauth", "pkce", "refresh-token", "live-tools"],
         scopes: [
-            "openid",
-            "email",
-            "profile",
             "https://www.googleapis.com/auth/gmail.readonly",
             "https://www.googleapis.com/auth/gmail.compose",
             "https://www.googleapis.com/auth/gmail.send"
         ],
-        readToolPatterns: ["rest_get", ...READ_PATTERNS],
-        writeToolPatterns: ["rest_request", ...WRITE_PATTERNS],
-        write: true,
-        setupMessage: "Configure a Gmail-only OAuth grant or MCP bridge for this deployment. Do not reuse an umbrella Google grant that also exposes Calendar or Drive."
-    }),
-    catalogEntry({
+        subject: "user",
+        tools: { allow: [
+                "gmail_get_profile", "gmail_list_messages", "gmail_get_message", "gmail_get_attachment",
+                "gmail_list_threads", "gmail_get_thread", "gmail_list_labels", "gmail_get_label",
+                "gmail_list_drafts", "gmail_get_draft", "gmail_create_draft", "gmail_update_draft",
+                "gmail_delete_draft", "gmail_send_draft", "gmail_send_message"
+            ] },
+        readToolPatterns: [
+            "gmail_get_profile", "gmail_list_messages", "gmail_get_message", "gmail_get_attachment",
+            "gmail_list_threads", "gmail_get_thread", "gmail_list_labels", "gmail_get_label",
+            "gmail_list_drafts", "gmail_get_draft"
+        ],
+        writeToolPatterns: ["gmail_create_draft", "gmail_update_draft", "gmail_delete_draft", "gmail_send_draft", "gmail_send_message"],
+        eventCatalog: ["email.received"],
+        defaultEvents: ["email.received"],
+        eventMode: "watch",
+        eventScope: "principal",
+        eventRequiredEnv: ["GOOGLE_CLOUD_PROJECT", "GMAIL_PUBSUB_TOPIC", "GMAIL_PUBSUB_VERIFICATION_TOKEN"],
+        setup: [{
+                kind: "connection",
+                name: "gmail-oauth-configuration",
+                required: true,
+                message: "Create a Google OAuth web client, enable the Gmail API, set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET, and register the Assembly Line connection callback URL. Gmail authorization is stored as its own connection grant."
+            }]
+    },
+    {
         kind: "google-calendar",
-        displayName: "Google Calendar",
+        role: "connection",
+        packageName: "@assemblyline-agents/google-calendar",
         helper: "defineGoogleCalendarConnection",
+        protocol: "http",
         provider: "google_calendar",
-        description: "Google Calendar events, availability, and event changes through an independently authorized MCP connection.",
-        urlEnv: "GOOGLE_CALENDAR_MCP_URL",
-        tokenEnv: "GOOGLE_CALENDAR_MCP_TOKEN",
+        description: "Google Calendar lists, events, availability, and scheduling through the Google Calendar REST API.",
+        defaultBaseUrl: "https://www.googleapis.com/calendar/v3",
+        baseUrlEnv: "GOOGLE_CALENDAR_API_BASE_URL",
+        requiredEnv: ["GOOGLE_CLIENT_ID", "GOOGLE_CLIENT_SECRET"],
+        optionalEnv: ["GOOGLE_REDIRECT_URI", "GOOGLE_CALENDAR_API_BASE_URL"],
+        capabilities: ["http-api", "oauth", "pkce", "refresh-token", "live-tools"],
         scopes: [
-            "openid",
-            "email",
-            "profile",
             "https://www.googleapis.com/auth/calendar.readonly",
             "https://www.googleapis.com/auth/calendar.events"
         ],
-        readToolPatterns: ["rest_get", ...READ_PATTERNS],
-        writeToolPatterns: ["rest_request", ...WRITE_PATTERNS],
-        write: true,
-        setupMessage: "Configure a Google Calendar-only OAuth grant or MCP bridge for this deployment. Do not reuse an umbrella Google grant that also exposes Gmail or Drive."
-    }),
-    catalogEntry({
+        subject: "user",
+        tools: { allow: [
+                "google_calendar_list_calendars", "google_calendar_get_calendar", "google_calendar_list_events",
+                "google_calendar_get_event", "google_calendar_list_instances", "google_calendar_query_freebusy",
+                "google_calendar_create_event", "google_calendar_update_event", "google_calendar_delete_event", "google_calendar_move_event"
+            ] },
+        readToolPatterns: [
+            "google_calendar_list_calendars", "google_calendar_get_calendar", "google_calendar_list_events",
+            "google_calendar_get_event", "google_calendar_list_instances", "google_calendar_query_freebusy"
+        ],
+        writeToolPatterns: ["google_calendar_create_event", "google_calendar_update_event", "google_calendar_delete_event", "google_calendar_move_event"],
+        eventCatalog: ["calendar.changed"],
+        defaultEvents: ["calendar.changed"],
+        eventMode: "watch",
+        eventScope: "principal",
+        setup: [{
+                kind: "connection",
+                name: "google-calendar-oauth-configuration",
+                required: true,
+                message: "Create a Google OAuth web client, enable the Google Calendar API, set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET, and register the Assembly Line connection callback URL. Calendar authorization is stored as its own connection grant."
+            }]
+    },
+    {
         kind: "google-drive",
-        displayName: "Google Drive",
+        role: "connection",
+        packageName: "@assemblyline-agents/google-drive",
         helper: "defineGoogleDriveConnection",
+        protocol: "http",
         provider: "google_drive",
-        description: "Google Drive file search, downloads, uploads, organization, and sharing through an independently authorized MCP connection.",
-        urlEnv: "GOOGLE_DRIVE_MCP_URL",
-        tokenEnv: "GOOGLE_DRIVE_MCP_TOKEN",
+        description: "Google Drive file search, downloads, uploads, organization, and sharing through the Google Drive REST API.",
+        defaultBaseUrl: "https://www.googleapis.com",
+        baseUrlEnv: "GOOGLE_DRIVE_API_BASE_URL",
+        requiredEnv: ["GOOGLE_CLIENT_ID", "GOOGLE_CLIENT_SECRET"],
+        optionalEnv: ["GOOGLE_REDIRECT_URI", "GOOGLE_DRIVE_API_BASE_URL"],
+        capabilities: ["http-api", "oauth", "pkce", "refresh-token", "binary-transfer", "live-tools"],
         scopes: [
-            "openid",
-            "email",
-            "profile",
+            "https://www.googleapis.com/auth/drive.readonly",
             "https://www.googleapis.com/auth/drive"
         ],
-        readToolPatterns: ["rest_get", ...READ_PATTERNS],
-        writeToolPatterns: ["rest_request", ...WRITE_PATTERNS],
-        write: true,
-        setupMessage: "Configure a Google Drive-only OAuth grant or MCP bridge for this deployment. Do not reuse an umbrella Google grant that also exposes Gmail or Calendar."
-    }),
+        subject: "user",
+        tools: { allow: [
+                "google_drive_get_about", "google_drive_list_shared_drives", "google_drive_get_shared_drive",
+                "google_drive_list_files", "google_drive_get_file", "google_drive_download_file", "google_drive_export_file",
+                "google_drive_list_permissions", "google_drive_get_permission", "google_drive_create_file",
+                "google_drive_update_file", "google_drive_upload_file_content", "google_drive_copy_file", "google_drive_delete_file",
+                "google_drive_create_permission", "google_drive_update_permission", "google_drive_delete_permission"
+            ] },
+        readToolPatterns: [
+            "google_drive_get_about", "google_drive_list_shared_drives", "google_drive_get_shared_drive",
+            "google_drive_list_files", "google_drive_get_file", "google_drive_download_file", "google_drive_export_file",
+            "google_drive_list_permissions", "google_drive_get_permission"
+        ],
+        writeToolPatterns: [
+            "google_drive_create_file", "google_drive_update_file", "google_drive_upload_file_content", "google_drive_copy_file",
+            "google_drive_delete_file", "google_drive_create_permission", "google_drive_update_permission", "google_drive_delete_permission"
+        ],
+        eventCatalog: ["drive.changed"],
+        defaultEvents: ["drive.changed"],
+        eventMode: "watch",
+        eventScope: "principal",
+        setup: [{
+                kind: "connection",
+                name: "google-drive-oauth-configuration",
+                required: true,
+                message: "Create a Google OAuth web client, enable the Google Drive API, set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET, and register the Assembly Line connection callback URL. Drive authorization is stored as its own connection grant."
+            }]
+    },
     catalogEntry({ kind: "github", displayName: "GitHub", helper: "defineGitHubMcpConnection", packageName: "@assemblyline-agents/github", description: "GitHub repositories, issues, pull requests, and Actions through GitHub MCP.", defaultUrl: "https://api.githubcopilot.com/mcp/", urlEnv: "GITHUB_MCP_URL", tokenEnv: "GITHUB_MCP_TOKEN", write: true }),
+    {
+        kind: "github-app",
+        role: "connection",
+        packageName: "@assemblyline-agents/github",
+        helper: "defineGitHubAppConnection",
+        protocol: "credential",
+        provider: "github",
+        description: "Host-only GitHub App installation credentials for Git and the GitHub CLI inside an agent sandbox.",
+        requiredEnv: [
+            "GITHUB_APP_ID",
+            "GITHUB_APP_PRIVATE_KEY"
+        ],
+        optionalEnv: [
+            "GITHUB_APP_INSTALLATION_ID",
+            "GITHUB_APP_SLUG",
+            "GITHUB_APP_CLIENT_ID",
+            "GITHUB_APP_CLIENT_SECRET",
+            "GITHUB_APP_WEBHOOK_SECRET",
+            "GITHUB_API_URL",
+            "GITHUB_OAUTH_URL"
+        ],
+        capabilities: ["sandbox-credentials", "github-app", "git", "github-cli"],
+        scopes: [],
+        subject: "user",
+        readToolPatterns: [],
+        writeToolPatterns: [],
+        eventCatalog: [
+            "issues.opened", "issues.edited", "issues.closed", "issue_comment.created",
+            "pull_request.opened", "pull_request.synchronize", "pull_request.closed",
+            "pull_request_review.submitted", "push", "workflow_run.completed",
+            "installation.created", "installation.deleted", "installation_repositories.added",
+            "installation_repositories.removed"
+        ],
+        defaultEvents: ["issues.opened", "issue_comment.created", "pull_request.opened", "pull_request_review.submitted", "push", "workflow_run.completed"],
+        eventMode: "manual",
+        eventScope: "connection",
+        eventRequiredEnv: ["GITHUB_APP_WEBHOOK_SECRET"],
+        setup: [{
+                kind: "connection",
+                name: "github-app-developer-configuration",
+                required: true,
+                message: "Create and install a GitHub App, choose its repository access and permissions in GitHub, then store its credentials in the Assembly Line host secret store."
+            }]
+    },
     catalogEntry({ kind: "slack", displayName: "Slack", helper: "defineSlackConnection", packageName: "@assemblyline-agents/slack", description: "Slack workspace search, channels, messages, files, and users through Slack MCP.", defaultUrl: "https://mcp.slack.com/mcp", urlEnv: "SLACK_MCP_URL", tokenEnv: "SLACK_MCP_TOKEN", write: true }),
     catalogEntry({ kind: "telegram", displayName: "Telegram", helper: "defineTelegramConnection", packageName: "@assemblyline-agents/telegram", description: "Telegram account tools through a developer-operated MCP bridge.", urlEnv: "TELEGRAM_MCP_URL", tokenEnv: "TELEGRAM_MCP_TOKEN" }),
-    catalogEntry({ kind: "strava", displayName: "Strava", helper: "defineStravaConnection", description: "Strava profile and fitness activity tools through a developer-configured MCP server.", urlEnv: "STRAVA_MCP_URL", tokenEnv: "STRAVA_MCP_TOKEN" }),
-    catalogEntry({ kind: "polar", displayName: "Polar", helper: "definePolarConnection", description: "Polar workout and heart-rate tools through a developer-configured MCP server.", urlEnv: "POLAR_MCP_URL", tokenEnv: "POLAR_MCP_TOKEN" }),
+    catalogEntry({
+        kind: "strava", displayName: "Strava", helper: "defineStravaConnection",
+        description: "Strava profile and fitness activity tools through a developer-configured MCP server.", urlEnv: "STRAVA_MCP_URL", tokenEnv: "STRAVA_MCP_TOKEN",
+        eventCatalog: ["activity.create", "activity.update", "activity.delete", "athlete.update"],
+        defaultEvents: ["activity.create", "activity.update", "activity.delete", "athlete.update"], eventMode: "api", eventScope: "connection",
+        eventRequiredEnv: ["STRAVA_CLIENT_ID", "STRAVA_CLIENT_SECRET", "STRAVA_WEBHOOK_SIGNING_SECRET"]
+    }),
+    catalogEntry({
+        kind: "polar", displayName: "Polar", helper: "definePolarConnection",
+        description: "Polar workout and heart-rate tools through a developer-configured MCP server.", urlEnv: "POLAR_MCP_URL", tokenEnv: "POLAR_MCP_TOKEN",
+        eventCatalog: ["EXERCISE", "SLEEP", "CONTINUOUS_HEART_RATE", "SLEEP_WISE_CIRCADIAN_BEDTIME", "SLEEP_WISE_ALERTNESS", "ACTIVITY_SUMMARY", "PHYSICAL_INFORMATION"],
+        defaultEvents: ["EXERCISE", "SLEEP", "CONTINUOUS_HEART_RATE"], eventMode: "api", eventScope: "connection",
+        eventRequiredEnv: ["POLAR_CLIENT_ID", "POLAR_CLIENT_SECRET"]
+    }),
     catalogEntry({ kind: "spotify", displayName: "Spotify", helper: "defineSpotifyConnection", description: "Spotify library, playlist, and playback tools through a developer-configured MCP server.", urlEnv: "SPOTIFY_MCP_URL", tokenEnv: "SPOTIFY_MCP_TOKEN", write: true }),
     catalogEntry({ kind: "xai", displayName: "xAI", helper: "defineXaiConnection", description: "xAI and X search tools through a developer-configured MCP server.", urlEnv: "XAI_MCP_URL", tokenEnv: "XAI_MCP_TOKEN" }),
     catalogEntry({
@@ -516,25 +759,354 @@ const CONNECTION_PLUGIN_CATALOG = [
             "web_fetch_exa",
             "web_search_advanced_exa"
         ],
-        setupMessage: "Exa's hosted MCP works without credentials. Optionally set EXA_API_KEY to raise production rate limits; OpenEve sends it only as the x-api-key header."
+        setupMessage: "Exa's hosted MCP works without credentials. Optionally set EXA_API_KEY to raise production rate limits; Assembly Line sends it only as the x-api-key header."
+    }),
+    catalogEntry({
+        kind: "plaid", displayName: "Plaid", helper: "definePlaidConnection",
+        description: "Read-only Plaid financial tools through a developer-configured MCP bridge.", urlEnv: "PLAID_MCP_URL", tokenEnv: "PLAID_MCP_TOKEN",
+        eventCatalog: ["transactions.changed", "item.changed", "auth.changed", "identity.changed", "assets.changed", "holdings.changed", "investments.changed", "liabilities.changed", "payment.changed", "transfer.changed", "income.changed"],
+        defaultEvents: ["transactions.changed", "item.changed"], eventMode: "api", eventScope: "connection",
+        eventRequiredEnv: ["PLAID_CLIENT_ID", "PLAID_SECRET"]
     }),
-    catalogEntry({ kind: "plaid", displayName: "Plaid", helper: "definePlaidConnection", description: "Read-only Plaid financial tools through a developer-configured MCP bridge.", urlEnv: "PLAID_MCP_URL", tokenEnv: "PLAID_MCP_TOKEN" }),
     catalogEntry({ kind: "granola", displayName: "Granola", helper: "defineGranolaConnection", description: "Granola meeting notes, transcripts, and action items through Granola MCP.", defaultUrl: "https://mcp.granola.ai/mcp", urlEnv: "GRANOLA_MCP_URL", tokenEnv: "GRANOLA_MCP_TOKEN" }),
-    catalogEntry({ kind: "linear", displayName: "Linear", helper: "defineLinearConnection", description: "Linear issues, projects, cycles, and teams through Linear MCP.", defaultUrl: "https://mcp.linear.app/mcp", urlEnv: "LINEAR_MCP_URL", tokenEnv: "LINEAR_MCP_TOKEN", write: true }),
-    catalogEntry({ kind: "notion", displayName: "Notion", helper: "defineNotionConnection", description: "Notion pages, databases, comments, and workspace search through Notion MCP.", defaultUrl: "https://mcp.notion.com/mcp", urlEnv: "NOTION_MCP_URL", tokenEnv: "NOTION_MCP_TOKEN", write: true }),
-    catalogEntry({ kind: "monday", displayName: "monday.com", helper: "defineMondayConnection", description: "monday.com boards, items, workspaces, and docs through Platform MCP.", defaultUrl: "https://mcp.monday.com/mcp", urlEnv: "MONDAY_MCP_URL", tokenEnv: "MONDAY_MCP_TOKEN", write: true }),
-    catalogEntry({ kind: "jira", displayName: "Jira", helper: "defineJiraConnection", description: "Jira issues, projects, transitions, and JQL search through Atlassian MCP.", defaultUrl: "https://mcp.atlassian.com/v1/mcp/authv2", urlEnv: "JIRA_MCP_URL", tokenEnv: "JIRA_MCP_TOKEN", write: true }),
-    catalogEntry({ kind: "hubspot", displayName: "HubSpot", helper: "defineHubSpotConnection", description: "HubSpot CRM records and associations through HubSpot MCP.", defaultUrl: "https://mcp.hubspot.com", urlEnv: "HUBSPOT_MCP_URL", tokenEnv: "HUBSPOT_MCP_TOKEN" }),
-    catalogEntry({ kind: "figma", displayName: "Figma", helper: "defineFigmaConnection", description: "Figma design, FigJam, Slides, and Dev Mode context through Figma MCP.", defaultUrl: "https://mcp.figma.com/mcp", urlEnv: "FIGMA_MCP_URL", tokenEnv: "FIGMA_MCP_TOKEN", write: true }),
+    {
+        kind: "grata",
+        role: "connection",
+        packageName: "@assemblyline-agents/grata",
+        helper: "defineGrataConnection",
+        protocol: "mcp",
+        transport: "http",
+        provider: "grata",
+        description: "Private-company, ownership, funding, transaction, filing, contact, conference, and deal intelligence through Grata's official hosted MCP server.",
+        defaultUrl: "https://mcp.grata.com",
+        urlEnv: "GRATA_MCP_URL",
+        requiredEnv: ["GRATA_MCP_CLIENT_ID", "GRATA_MCP_CLIENT_SECRET"],
+        optionalEnv: ["GRATA_MCP_URL", "GRATA_MCP_REDIRECT_URI"],
+        capabilities: ["mcp", "oauth", "pkce", "refresh-token", "live-tools", "streamable-http", "private-market-intelligence"],
+        scopes: ["openid", "profile", "email", "offline_access"],
+        subject: "user",
+        readToolPatterns: READ_PATTERNS,
+        writeToolPatterns: [
+            ...WRITE_PATTERNS,
+            "regex:(^|[-_])export([-_]|$)"
+        ],
+        setup: [{
+                kind: "connection",
+                name: "grata-mcp-oauth",
+                required: true,
+                message: "Register an OAuth client using client_secret_post with the selected Grata MCP region's /register endpoint for the Assembly Line connection callback, set GRATA_MCP_CLIENT_ID and GRATA_MCP_CLIENT_SECRET, then let each user authorize their Grata seat. Set GRATA_MCP_URL=https://eu-mcp.grata.com/ for European users."
+            }]
+    },
+    catalogEntry({
+        kind: "linear", displayName: "Linear", helper: "defineLinearConnection",
+        description: "Linear issues, projects, cycles, and teams through Linear MCP.", defaultUrl: "https://mcp.linear.app/mcp", urlEnv: "LINEAR_MCP_URL", tokenEnv: "LINEAR_MCP_TOKEN", write: true,
+        eventCatalog: ["issue.create", "issue.update", "issue.remove", "comment.create", "comment.update", "comment.remove", "project.create", "project.update", "project.remove", "cycle.create", "cycle.update", "cycle.remove", "document.create", "document.update", "document.remove", "customer.create", "customer.update", "customer.remove", "user.create", "user.update", "user.remove", "agentSessionEvent.created", "agentSessionEvent.prompted", "linear.changed"],
+        defaultEvents: ["issue.create", "issue.update", "comment.create", "comment.update", "project.update", "agentSessionEvent.created", "agentSessionEvent.prompted", "linear.changed"],
+        eventMode: "manual", eventScope: "principal", eventRequiredEnv: ["LINEAR_WEBHOOK_SECRET"]
+    }),
+    catalogEntry({
+        kind: "notion", displayName: "Notion", helper: "defineNotionConnection",
+        description: "Notion pages, databases, comments, and workspace search through Notion MCP.", defaultUrl: "https://mcp.notion.com/mcp", urlEnv: "NOTION_MCP_URL", tokenEnv: "NOTION_MCP_TOKEN", write: true,
+        eventCatalog: [
+            "page.content_updated", "page.created", "page.deleted", "page.locked", "page.moved", "page.properties_updated", "page.undeleted", "page.unlocked",
+            "database.content_updated", "database.created", "database.deleted", "database.moved", "database.schema_updated", "database.undeleted",
+            "data_source.content_updated", "data_source.created", "data_source.deleted", "data_source.moved", "data_source.schema_updated", "data_source.undeleted",
+            "comment.created", "comment.deleted", "comment.updated"
+        ],
+        defaultEvents: ["page.content_updated", "page.created", "page.deleted", "page.properties_updated", "data_source.schema_updated", "comment.created"],
+        eventMode: "manual", eventScope: "principal"
+    }),
+    catalogEntry({
+        kind: "monday", displayName: "monday.com", helper: "defineMondayConnection",
+        description: "monday.com boards, items, workspaces, and docs through Platform MCP.", defaultUrl: "https://mcp.monday.com/mcp", urlEnv: "MONDAY_MCP_URL", tokenEnv: "MONDAY_MCP_TOKEN", write: true,
+        eventCatalog: ["create_item", "change_column_value", "change_status_column_value", "change_name", "item_moved_to_any_group", "item_deleted", "item_archived", "create_update"],
+        defaultEvents: ["create_item", "change_column_value", "change_status_column_value", "item_deleted", "create_update"], eventMode: "api", eventScope: "principal",
+        eventRequiredEnv: ["MONDAY_SIGNING_SECRET"]
+    }),
+    catalogEntry({
+        kind: "jira", displayName: "Jira", helper: "defineJiraConnection",
+        description: "Jira issues, projects, transitions, and JQL search through Atlassian MCP.", defaultUrl: "https://mcp.atlassian.com/v1/mcp/authv2", urlEnv: "JIRA_MCP_URL", tokenEnv: "JIRA_MCP_TOKEN", write: true,
+        eventCatalog: ["jira:issue_created", "jira:issue_updated", "jira:issue_deleted", "comment_created", "comment_updated", "comment_deleted", "issue_property_set", "issue_property_deleted"],
+        defaultEvents: ["jira:issue_created", "jira:issue_updated", "comment_created", "comment_updated"], eventMode: "api", eventScope: "principal"
+    }),
+    catalogEntry({
+        kind: "hubspot", displayName: "HubSpot", helper: "defineHubSpotConnection",
+        description: "HubSpot CRM records and associations through HubSpot MCP.", defaultUrl: "https://mcp.hubspot.com", urlEnv: "HUBSPOT_MCP_URL", tokenEnv: "HUBSPOT_MCP_TOKEN",
+        eventCatalog: ["contact.creation", "contact.deletion", "contact.propertyChange", "company.creation", "company.deletion", "company.propertyChange", "deal.creation", "deal.deletion", "deal.propertyChange", "ticket.creation", "ticket.deletion", "ticket.propertyChange"],
+        defaultEvents: ["contact.creation", "contact.deletion", "company.creation", "company.deletion", "deal.creation", "deal.deletion", "ticket.creation", "ticket.deletion"],
+        eventMode: "api", eventScope: "connection", eventRequiredEnv: ["HUBSPOT_APP_ID", "HUBSPOT_DEVELOPER_API_KEY", "HUBSPOT_CLIENT_SECRET"]
+    }),
+    catalogEntry({
+        kind: "figma", displayName: "Figma", helper: "defineFigmaConnection",
+        description: "Figma design, FigJam, Slides, and Dev Mode context through Figma MCP.",
+        defaultUrl: "https://mcp.figma.com/mcp", urlEnv: "FIGMA_MCP_URL", tokenEnv: "FIGMA_MCP_TOKEN", write: true,
+        eventCatalog: ["FILE_UPDATE", "FILE_DELETE", "FILE_VERSION_UPDATE", "LIBRARY_PUBLISH"],
+        defaultEvents: ["FILE_UPDATE", "FILE_DELETE"], eventMode: "api", eventScope: "principal"
+    }),
     catalogEntry({ kind: "paper", displayName: "Paper", helper: "definePaperConnection", description: "Paper design tools through a developer-exposed local MCP bridge.", urlEnv: "PAPER_MCP_URL", tokenEnv: "PAPER_MCP_TOKEN", tokenRequired: false, write: true }),
-    catalogEntry({ kind: "sentry", displayName: "Sentry", helper: "defineSentryConnection", description: "Sentry issues, events, projects, and teams through Sentry MCP.", defaultUrl: "https://mcp.sentry.dev/mcp", urlEnv: "SENTRY_MCP_URL", tokenEnv: "SENTRY_MCP_TOKEN", write: true }),
-    catalogEntry({ kind: "supabase", displayName: "Supabase", helper: "defineSupabaseConnection", description: "Supabase projects, databases, docs, and Edge Functions through Supabase MCP.", defaultUrl: "https://mcp.supabase.com/mcp", urlEnv: "SUPABASE_MCP_URL", tokenEnv: "SUPABASE_MCP_TOKEN", write: true }),
-    catalogEntry({ kind: "metabase", displayName: "Metabase", helper: "defineMetabaseConnection", description: "Metabase semantic-layer queries, questions, and dashboards through an instance MCP endpoint.", urlEnv: "METABASE_MCP_URL", tokenEnv: "METABASE_MCP_TOKEN", tokenRequired: false, write: true }),
-    catalogEntry({ kind: "cloudflare", displayName: "Cloudflare", helper: "defineCloudflareConnection", description: "Cloudflare API and account tools through Cloudflare MCP.", defaultUrl: "https://mcp.cloudflare.com/mcp", urlEnv: "CLOUDFLARE_MCP_URL", tokenEnv: "CLOUDFLARE_MCP_TOKEN", write: true }),
-    catalogEntry({ kind: "vercel", displayName: "Vercel", helper: "defineVercelConnection", description: "Vercel projects, deployments, logs, and teams through Vercel MCP.", defaultUrl: "https://mcp.vercel.com", urlEnv: "VERCEL_MCP_URL", tokenEnv: "VERCEL_MCP_TOKEN", write: true }),
-    catalogEntry({ kind: "railway", displayName: "Railway", helper: "defineRailwayConnection", packageName: "@assemblyline-agents/railway", description: "Railway projects, services, variables, and deployments through Railway MCP.", defaultUrl: "https://mcp.railway.com", urlEnv: "RAILWAY_MCP_URL", tokenEnv: "RAILWAY_MCP_TOKEN", write: true }),
+    catalogEntry({
+        kind: "sentry", displayName: "Sentry", helper: "defineSentryConnection",
+        description: "Sentry issues, events, projects, and teams through Sentry MCP.", defaultUrl: "https://mcp.sentry.dev/mcp", urlEnv: "SENTRY_MCP_URL", tokenEnv: "SENTRY_MCP_TOKEN", write: true,
+        eventCatalog: ["event.created", "event.alert"], defaultEvents: ["event.created", "event.alert"], eventMode: "api", eventScope: "principal"
+    }),
+    catalogEntry({
+        kind: "supabase", displayName: "Supabase", helper: "defineSupabaseConnection",
+        description: "Supabase projects, databases, docs, and Edge Functions through Supabase MCP.", defaultUrl: "https://mcp.supabase.com/mcp", urlEnv: "SUPABASE_MCP_URL", tokenEnv: "SUPABASE_MCP_TOKEN", write: true,
+        eventCatalog: ["row.inserted", "row.updated", "row.deleted"], defaultEvents: ["row.inserted", "row.updated", "row.deleted"], eventMode: "api", eventScope: "principal",
+        eventRequiredEnv: ["SUPABASE_WEBHOOK_SECRET"]
+    }),
+    catalogEntry({
+        kind: "metabase", displayName: "Metabase", helper: "defineMetabaseConnection",
+        description: "Metabase semantic-layer queries, questions, and dashboards through an instance MCP endpoint.", urlEnv: "METABASE_MCP_URL", tokenEnv: "METABASE_MCP_TOKEN", tokenRequired: false, write: true,
+        eventCatalog: ["alert.triggered"], defaultEvents: ["alert.triggered"], eventMode: "manual", eventScope: "connection",
+        eventRequiredEnv: ["METABASE_WEBHOOK_SECRET"]
+    }),
+    catalogEntry({
+        kind: "cloudflare", displayName: "Cloudflare", helper: "defineCloudflareConnection",
+        description: "Cloudflare API and account tools through Cloudflare MCP.", defaultUrl: "https://mcp.cloudflare.com/mcp", urlEnv: "CLOUDFLARE_MCP_URL", tokenEnv: "CLOUDFLARE_MCP_TOKEN", write: true,
+        eventCatalog: ["notification.received"], defaultEvents: ["notification.received"], eventMode: "api", eventScope: "principal",
+        eventRequiredEnv: ["CLOUDFLARE_WEBHOOK_SECRET"]
+    }),
+    catalogEntry({
+        kind: "vercel", displayName: "Vercel", helper: "defineVercelConnection",
+        description: "Vercel projects, deployments, logs, and teams through Vercel MCP.", defaultUrl: "https://mcp.vercel.com", urlEnv: "VERCEL_MCP_URL", tokenEnv: "VERCEL_MCP_TOKEN", write: true,
+        eventCatalog: ["deployment.created", "deployment.succeeded", "deployment.promoted", "deployment.error", "deployment.cancelled", "project.created", "project.removed", "project.renamed", "project.env.created", "project.env.updated", "project.env.deleted", "firewall.attack.detected"],
+        defaultEvents: ["deployment.created", "deployment.succeeded", "deployment.error", "deployment.cancelled"], eventMode: "api", eventScope: "principal"
+    }),
+    catalogEntry({
+        kind: "railway", displayName: "Railway", helper: "defineRailwayConnection", packageName: "@assemblyline-agents/railway",
+        description: "Railway projects, services, variables, and deployments through Railway MCP.", defaultUrl: "https://mcp.railway.com", urlEnv: "RAILWAY_MCP_URL", tokenEnv: "RAILWAY_MCP_TOKEN", write: true,
+        eventCatalog: ["deployment.changed", "alert.triggered"], defaultEvents: ["deployment.changed", "alert.triggered"], eventMode: "manual", eventScope: "connection"
+    }),
     catalogEntry({ kind: "refero", displayName: "Refero", helper: "defineReferoConnection", description: "Refero design references, screens, and product flows through Refero MCP.", defaultUrl: "https://api.refero.design/mcp", urlEnv: "REFERO_MCP_URL", tokenEnv: "REFERO_MCP_BEARER_TOKEN" }),
+    catalogEntry({
+        kind: "agentmail",
+        displayName: "AgentMail",
+        helper: "defineAgentMailConnection",
+        description: "AgentMail inboxes, threads, messages, drafts, and attachments through the official hosted MCP server.",
+        defaultUrl: "https://mcp.agentmail.to/mcp",
+        urlEnv: "AGENTMAIL_MCP_URL",
+        tokenEnv: "AGENTMAIL_API_KEY",
+        tokenHeader: "x-api-key",
+        subject: "environment",
+        tools: {
+            allow: [
+                "list_inboxes",
+                "get_inbox",
+                "create_inbox",
+                "update_inbox",
+                "delete_inbox",
+                "list_threads",
+                "search_threads",
+                "get_thread",
+                "update_thread",
+                "delete_thread",
+                "list_messages",
+                "search_messages",
+                "send_message",
+                "reply_to_message",
+                "forward_message",
+                "update_message",
+                "create_draft",
+                "list_drafts",
+                "get_draft",
+                "update_draft",
+                "send_draft",
+                "delete_draft",
+                "get_attachment",
+                "auth_me"
+            ]
+        },
+        readToolPatterns: [
+            "list_inboxes",
+            "get_inbox",
+            "list_threads",
+            "search_threads",
+            "get_thread",
+            "list_messages",
+            "search_messages",
+            "list_drafts",
+            "get_draft",
+            "get_attachment",
+            "auth_me"
+        ],
+        writeToolPatterns: [
+            "create_inbox",
+            "update_inbox",
+            "delete_inbox",
+            "update_thread",
+            "delete_thread",
+            "send_message",
+            "reply_to_message",
+            "forward_message",
+            "update_message",
+            "create_draft",
+            "update_draft",
+            "send_draft",
+            "delete_draft"
+        ],
+        write: true,
+        eventCatalog: [
+            "message.received", "message.received.spam", "message.received.blocked",
+            "message.received.unauthenticated", "message.sent", "message.delivered",
+            "message.bounced", "message.complained", "message.rejected", "domain.verified"
+        ],
+        defaultEvents: ["message.received"],
+        eventMode: "api",
+        eventScope: "connection",
+        setupMessage: "Create an AgentMail API key, set AGENTMAIL_API_KEY on the Assembly Line runtime host, and keep inbox and sender scope owned by the provider account."
+    }),
+    catalogEntry({
+        kind: "resend",
+        displayName: "Resend",
+        helper: "defineResendConnection",
+        description: "Transactional email, broadcasts, contacts, domains, templates, automations, and delivery data through Resend's official hosted MCP server.",
+        defaultUrl: "https://mcp.resend.com/mcp",
+        urlEnv: "RESEND_MCP_URL",
+        tokenEnv: "RESEND_API_KEY",
+        subject: "environment",
+        tools: {
+            block: [
+                "connect-to-editor",
+                "create-api-key",
+                "create-webhook",
+                "get-webhook"
+            ]
+        },
+        readToolPatterns: ["regex:^(get|list)-"],
+        writeToolPatterns: [
+            "get-tiptap-json-content",
+            "regex:^(add|batch-add|batch-remove|cancel|compose|create|disconnect|duplicate|manage|publish|remove|revoke|send|update|verify)-"
+        ],
+        write: true,
+        eventCatalog: [
+            "email.sent", "email.delivered", "email.delivery_delayed", "email.failed",
+            "email.opened", "email.clicked", "email.bounced", "email.complained",
+            "email.received", "email.scheduled", "email.suppressed",
+            "domain.created", "domain.updated", "domain.deleted",
+            "contact.created", "contact.updated", "contact.deleted"
+        ],
+        defaultEvents: ["email.received", "email.delivered", "email.failed", "email.bounced"],
+        eventMode: "api",
+        eventScope: "connection",
+        setupMessage: "Create a team-scoped Resend API key, set RESEND_API_KEY on the Assembly Line runtime host, and verify the sending domain. Full-platform reads require a full_access key; restrict the connection's visible tools when using a sending_access key."
+    }),
     catalogEntry({ kind: "agentcash", displayName: "AgentCash", helper: "defineAgentCashConnection", description: "Paid API discovery, schema, balance, and request tools through an AgentCash MCP bridge.", urlEnv: "AGENTCASH_MCP_URL", tokenEnv: "AGENTCASH_MCP_BRIDGE_TOKEN", write: true }),
+    catalogEntry({
+        kind: "treg",
+        displayName: "Treg",
+        helper: "defineTregConnection",
+        description: "External API discovery, pricing, balance, team inventory, and credential-injected calls through Treg's hosted tool catalog.",
+        defaultUrl: "https://treg.to/mcp/",
+        urlEnv: "TREG_MCP_URL",
+        tokenEnv: "TREG_TOKEN",
+        tools: {
+            allow: [
+                "catalog_search",
+                "catalog_get",
+                "catalog_request",
+                "call",
+                "balance",
+                "my_tools"
+            ]
+        },
+        readToolPatterns: ["catalog_search", "catalog_get", "balance", "my_tools"],
+        writeToolPatterns: ["catalog_request", "call"],
+        write: true,
+        setupMessage: "Create an organization-scoped or agent token in Treg, set TREG_TOKEN on the Assembly Line runtime, and review whether Treg writes require approval. The call tool can spend prepaid balance or mutate an upstream service."
+    }),
+    {
+        kind: "x",
+        role: "connection",
+        packageName: "@assemblyline-agents/x",
+        helper: "defineXConnection",
+        protocol: "http",
+        provider: "x",
+        description: "Connected X account identity, private bookmarks, and reviewed post or reply publishing through X API v2.",
+        defaultBaseUrl: "https://api.x.com/2",
+        baseUrlEnv: "X_API_BASE_URL",
+        requiredEnv: ["X_API_CLIENT_ID", "X_API_CLIENT_SECRET"],
+        optionalEnv: ["X_API_REDIRECT_URI", "X_API_BASE_URL"],
+        capabilities: ["http-api", "oauth", "pkce", "refresh-token", "live-tools", "bookmarks", "publishing"],
+        scopes: ["bookmark.read", "tweet.read", "tweet.write", "users.read", "offline.access"],
+        subject: "user",
+        tools: {
+            allow: ["x_get_authenticated_user", "x_list_bookmarks", "x_create_post"]
+        },
+        readToolPatterns: ["x_get_authenticated_user", "x_list_bookmarks"],
+        writeToolPatterns: ["x_create_post"],
+        setup: [{
+                kind: "connection",
+                name: "x-developer-configuration",
+                required: true,
+                message: "Create a confidential X OAuth 2.0 App, enable the reviewed bookmark and post scopes, set X_API_CLIENT_ID and X_API_CLIENT_SECRET, and register the Assembly Line connection callback URL. Authorization Code + PKCE stores a refreshable per-user grant; X API usage and costs remain developer-owned."
+            }]
+    },
+    {
+        kind: "dropbox",
+        role: "connection",
+        packageName: "@assemblyline-agents/dropbox",
+        helper: "defineDropboxConnection",
+        protocol: "http",
+        provider: "dropbox",
+        description: "Dropbox account, file and folder metadata, search, temporary content links, and reviewed file operations through the Dropbox API.",
+        defaultBaseUrl: "https://api.dropboxapi.com/2",
+        baseUrlEnv: "DROPBOX_API_BASE_URL",
+        requiredEnv: ["DROPBOX_APP_KEY", "DROPBOX_APP_SECRET"],
+        optionalEnv: ["DROPBOX_REDIRECT_URI", "DROPBOX_API_BASE_URL"],
+        capabilities: ["http-api", "oauth", "pkce", "refresh-token", "live-tools"],
+        scopes: [
+            "account_info.read",
+            "files.metadata.read",
+            "files.content.read",
+            "files.content.write",
+            "sharing.read",
+            "sharing.write"
+        ],
+        subject: "user",
+        tools: {
+            allow: [
+                "users_get_current_account",
+                "users_get_space_usage",
+                "files_get_metadata",
+                "files_list_folder",
+                "files_list_folder_continue",
+                "files_search_v2",
+                "files_search_continue_v2",
+                "files_get_temporary_link",
+                "sharing_list_shared_links",
+                "files_create_folder_v2",
+                "files_copy_v2",
+                "files_move_v2",
+                "files_delete_v2",
+                "sharing_create_shared_link_with_settings"
+            ]
+        },
+        readToolPatterns: [
+            "users_get_current_account",
+            "users_get_space_usage",
+            "files_get_metadata",
+            "files_list_folder",
+            "files_list_folder_continue",
+            "files_search_v2",
+            "files_search_continue_v2",
+            "files_get_temporary_link",
+            "sharing_list_shared_links"
+        ],
+        writeToolPatterns: [
+            "files_create_folder_v2",
+            "files_copy_v2",
+            "files_move_v2",
+            "files_delete_v2",
+            "sharing_create_shared_link_with_settings"
+        ],
+        setup: [{
+                kind: "connection",
+                name: "dropbox-developer-configuration",
+                required: true,
+                message: "Register one Dropbox API app, enable the scopes required by this connection, set DROPBOX_APP_KEY and DROPBOX_APP_SECRET, and register the Assembly Line connection callback URL. OAuth Authorization Code + PKCE requests offline access for refreshable user grants."
+            }]
+    },
     {
         kind: "soundcloud",
         role: "connection",
@@ -553,12 +1125,11 @@ const CONNECTION_PLUGIN_CATALOG = [
         tools: { block: ["post_tracks"] },
         readToolPatterns: ["regex:^get_"],
         writeToolPatterns: ["regex:^(post|put|patch|delete)_"],
-        skill: "soundcloud",
         setup: [{
                 kind: "connection",
                 name: "soundcloud-developer-configuration",
                 required: true,
-                message: "Register a SoundCloud application and set SOUNDCLOUD_CLIENT_ID and SOUNDCLOUD_CLIENT_SECRET. OpenEve handles OAuth 2.1 PKCE; the developer owns the app and redirect URI."
+                message: "Register a SoundCloud application and set SOUNDCLOUD_CLIENT_ID and SOUNDCLOUD_CLIENT_SECRET. Assembly Line handles OAuth 2.1 PKCE; the developer owns the app and redirect URI."
             }]
     },
     catalogEntry({
@@ -573,7 +1144,12 @@ const CONNECTION_PLUGIN_CATALOG = [
         tools: { allow: ["get_session", "get_session_messages", "list_sessions", "list_browser_profiles", "run_session", "send_task", "stop_session"] },
         readToolPatterns: ["get_session", "get_session_messages", "list_sessions", "list_browser_profiles"],
         writeToolPatterns: ["run_session", "send_task", "stop_session"],
-        setupMessage: "Set BROWSER_USE_API_KEY for the OpenEve host. Browser profiles, cost limits, and write authority remain developer-controlled."
+        eventCatalog: ["agent.task.status_update"],
+        defaultEvents: ["agent.task.status_update"],
+        eventMode: "manual",
+        eventScope: "connection",
+        eventRequiredEnv: ["BROWSER_USE_WEBHOOK_SECRET"],
+        setupMessage: "Set BROWSER_USE_API_KEY for the Assembly Line host. Browser profiles, cost limits, and write authority remain developer-controlled."
     }),
     catalogEntry({
         kind: "orgo",
@@ -628,7 +1204,7 @@ const CONNECTION_PLUGIN_CATALOG = [
             "execute_python"
         ],
         optionalEnv: ["ORGO_API_BASE_URL"],
-        setupMessage: "Set ORGO_API_KEY on the OpenEve runtime host. The developer owns Orgo workspaces, account limits, auto-stop policy, login state, and billing; the packaged bridge strips VNC credentials from results."
+        setupMessage: "Set ORGO_API_KEY on the Assembly Line runtime host. The developer owns Orgo workspaces, account limits, auto-stop policy, login state, and billing; the packaged bridge strips VNC credentials from results."
     }),
     catalogEntry({
         kind: "peekaboo",
@@ -645,22 +1221,22 @@ const CONNECTION_PLUGIN_CATALOG = [
         },
         readToolPatterns: ["inspect_ui", "list", "permissions"],
         writeToolPatterns: ["click", "type", "hotkey", "scroll", "drag", "swipe", "move", "set_value", "perform_action", "app", "window", "menu", "dock", "dialog", "space"],
-        setupMessage: "Local deployment only: install Peekaboo on the OpenEve Mac (macOS 15+), grant that host process Accessibility and Screen Recording permissions, and use the local deploy target. Hosted targets are rejected."
+        setupMessage: "Local deployment only: install Peekaboo on the Assembly Line Mac (macOS 15+), grant that host process Accessibility and Screen Recording permissions, and use the local deploy target. Hosted targets are rejected."
     }),
     catalogEntry({
         kind: "computer-use",
-        displayName: "OpenEve Computer Use",
+        displayName: "Assembly Line Computer Use",
         helper: "defineComputerUseConnection",
-        description: "End-to-end encrypted accessibility and input automation on a paired Mac through the OpenEve device relay.",
+        description: "End-to-end encrypted accessibility and input automation on a paired Mac through the Assembly Line device relay.",
         transport: "relay",
-        defaultUrl: "https://computer-use.openeve.dev/v1",
-        urlEnv: "OPENEVE_COMPUTER_USE_RELAY_URL",
-        credentialEnv: "OPENEVE_COMPUTER_USE_BINDING",
+        defaultUrl: "https://computer-use.artificialillumination.co/v1",
+        urlEnv: "ASSEMBLY_LINE_COMPUTER_USE_RELAY_URL",
+        credentialEnv: "ASSEMBLY_LINE_COMPUTER_USE_BINDING",
         subject: "environment",
         tools: { allow: ["inspect_ui", "list", "permissions", "click", "type", "hotkey", "scroll", "drag", "swipe", "move", "set_value", "perform_action", "app", "window", "menu", "dock", "dialog", "space"] },
         readToolPatterns: ["inspect_ui", "list", "permissions"],
         writeToolPatterns: ["click", "type", "hotkey", "scroll", "drag", "swipe", "move", "set_value", "perform_action", "app", "window", "menu", "dock", "dialog", "space"],
-        setupMessage: "Install OpenEve Agent Builder on the Mac, enable Computer Host, pair this deployment, and set the generated OPENEVE_COMPUTER_USE_BINDING secret on the remote runtime. The binding is device-scoped and must not be placed in prompts or source control."
+        setupMessage: "Install Assembly Line Agent Builder on the Mac, enable Computer Host, pair this deployment, and set the generated ASSEMBLY_LINE_COMPUTER_USE_BINDING secret on the remote runtime. The binding is device-scoped and must not be placed in prompts or source control."
     }),
     catalogEntry({
         kind: "ffmpeg",
@@ -689,101 +1265,18 @@ const CONNECTION_PLUGIN_CATALOG = [
             "extract_frames",
             "reframe_vertical"
         ],
-        setupMessage: "Install ffmpeg and ffprobe on the OpenEve runtime host. The plugin keeps all media paths inside its configured workspace root and exposes typed operations instead of arbitrary FFmpeg flags."
+        setupMessage: "Install ffmpeg and ffprobe on the Assembly Line runtime host. The plugin keeps all media paths inside its configured workspace root and exposes typed operations instead of arbitrary FFmpeg flags."
     }),
-    catalogEntry({
-        kind: "remotion",
-        displayName: "Remotion",
-        helper: "defineRemotionConnection",
-        description: "Workspace-scoped Remotion composition discovery, version checks, video renders, and still renders through the project CLI.",
-        transport: "stdio",
-        subject: "environment",
-        tools: {
-            allow: [
-                "list_compositions",
-                "check_versions",
-                "render_video",
-                "render_still"
-            ]
-        },
-        readToolPatterns: ["list_compositions", "check_versions"],
-        writeToolPatterns: ["render_video", "render_still"],
-        setupMessage: "Install Remotion and @remotion/cli in the configured project. OpenEve uses Remotion's supported CLI and Agent Skills workflow; it does not depend on Remotion's deprecated hosted MCP server."
-    })
+    REMOTION_PLUGIN
 ];
-function validatePluginAccess(plugin, access) {
-    if (!access)
-        throw new Error(`${plugin.helper}: access must explicitly select read and write authority.`);
-    if (access.write !== false && plugin.writeToolPatterns.length === 0) {
-        throw new Error(`${plugin.helper}: ${plugin.provider} is a read-only plugin and cannot enable writes.`);
-    }
-}
-function pluginAccessDefinition(plugin, access) {
-    return {
-        read: { tools: [...plugin.readToolPatterns] },
-        write: access.write === false
-            ? false
-            : {
-                tools: [...plugin.writeToolPatterns],
-                approval: normalizePluginApproval(access.write.approval)
-            }
-    };
-}
-function tokenAuth(tokenEnv) {
-    if (!tokenEnv)
-        return undefined;
-    return ({ env }) => ({
-        principalType: "user",
-        displayName: `${tokenEnv} bearer token`,
-        getToken: async () => {
-            const token = env[tokenEnv]?.trim();
-            if (!token)
-                throw new Error(`Missing ${tokenEnv}. Configure the provider credential or pass a custom auth definition.`);
-            return { token };
-        }
-    });
-}
-function environmentValue(name) {
-    if (!name || typeof process === "undefined")
-        return undefined;
-    return process.env[name]?.trim() || undefined;
-}
-function tokenHeader(name, tokenEnv) {
-    if (!tokenEnv)
-        return undefined;
-    return ({ env }) => {
-        const token = env[tokenEnv]?.trim();
-        if (!token)
-            throw new Error(`Missing ${tokenEnv}. Configure the provider credential or pass custom headers.`);
-        return { [name]: token };
-    };
-}
-function mergeHeaders(first, second) {
-    if (!first)
-        return second;
-    if (!second)
-        return first;
-    return async (context) => ({
-        ...(await resolveHeaders(first, context)),
-        ...(await resolveHeaders(second, context))
-    });
-}
-async function resolveHeaders(definition, context) {
-    if (typeof definition === "function")
-        return definition(context);
-    const resolved = {};
-    for (const [name, value] of Object.entries(definition)) {
-        resolved[name] = await resolveHeaderValue(value, context);
-    }
-    return resolved;
-}
-async function resolveHeaderValue(value, context) {
-    return typeof value === "function" ? value(context) : value;
-}
 function cloneToolFilter(filter) {
     if (!filter)
         return undefined;
-    return "allow" in filter ? { allow: [...filter.allow] } : { block: [...filter.block] };
+    if ("allow" in filter)
+        return { allow: [...filter.allow] };
+    if ("block" in filter)
+        return { block: [...filter.block] };
+    return { allOf: filter.allOf.map((child) => cloneToolFilter(child)) };
 }
 function cloneHostRequirements(requirements) {
     return {
@@ -792,11 +1285,6 @@ function cloneHostRequirements(requirements) {
         ...(requirements.platforms ? { platforms: [...requirements.platforms] } : {})
     };
 }
-function normalizePluginApproval(approval) {
-    if (approval === "always" || approval === "once" || approval === "never")
-        return { mode: approval };
-    return approval;
-}
 function cloneMetadata(entry) {
     return {
         ...entry,
@@ -806,18 +1294,24 @@ function cloneMetadata(entry) {
         scopes: [...(entry.scopes ?? [])],
         readToolPatterns: [...entry.readToolPatterns],
         writeToolPatterns: [...entry.writeToolPatterns],
-        ...(entry.skills ? { skills: [...entry.skills] } : {}),
         ...(entry.tools ? { tools: cloneToolFilter(entry.tools) } : {}),
         ...(entry.hostRequirements ? { hostRequirements: cloneHostRequirements(entry.hostRequirements) } : {})
     };
 }
-function isPluginModule(value) {
-    if (!value || typeof value !== "object")
-        return false;
-    const connections = value.connections;
-    return connections === undefined || (Array.isArray(connections) && connections.every((entry) => Boolean(entry) && entry.role === "connection" && typeof entry.kind === "string" && typeof entry.helper === "string"));
-}
-export function connectionPluginBinding(metadata) {
-    return { kind: metadata.kind };
+function cloneToolPackMetadata(entry) {
+    return {
+        ...entry,
+        tools: entry.tools.map((tool) => ({ ...tool })),
+        ...(entry.config ? {
+            config: {
+                ...entry.config,
+                ...(entry.config.options ? { options: structuredClone(entry.config.options) } : {})
+            }
+        } : {}),
+        ...(entry.skills ? { skills: [...entry.skills] } : {}),
+        ...(entry.requiredEnv ? { requiredEnv: [...entry.requiredEnv] } : {}),
+        ...(entry.optionalEnv ? { optionalEnv: [...entry.optionalEnv] } : {}),
+        ...(entry.setup ? { setup: entry.setup.map((step) => ({ ...step })) } : {})
+    };
 }
 //# sourceMappingURL=plugin.js.map