@assemblyline-agents/core 5.0.10 → 6.0.0

package/dist/plugin.js

@@ -1,1369 +1,3 @@
 export * from "./plugin-contract.js";
 export * from "./plugin-connection-factories.js";
-export function connectionPluginMetadata(kind) {
-    return CONNECTION_PLUGIN_CATALOG.find((entry) => entry.kind === kind);
-}
-export function connectionPluginMetadataForHelper(helper) {
-    return helper ? CONNECTION_PLUGIN_CATALOG.find((entry) => entry.helper === helper) : undefined;
-}
-export function allConnectionPluginMetadata() {
-    return CONNECTION_PLUGIN_CATALOG.map(cloneMetadata);
-}
-export function toolPackPluginMetadata(kind) {
-    const metadata = TOOL_PACK_PLUGIN_CATALOG.find((entry) => entry.kind === kind);
-    return metadata ? cloneToolPackMetadata(metadata) : undefined;
-}
-export function allToolPackPluginMetadata() {
-    return TOOL_PACK_PLUGIN_CATALOG.map(cloneToolPackMetadata);
-}
-const TOOL_PACK_PLUGIN_CATALOG = [
-    {
-        kind: "openui",
-        role: "tools",
-        packageName: "@assemblyline-agents/openui",
-        description: "Full OpenUI component packs with developer policy, immutable revisions, and storage-issued publication links.",
-        tools: [
-            {
-                name: "openui_create",
-                helper: "defineOpenUiCreateTool",
-                description: "Create an immutable artifact revision from developer-approved OpenUI components. Raw HTML is not accepted.",
-                needsApproval: false
-            },
-            {
-                name: "openui_update",
-                helper: "defineOpenUiUpdateTool",
-                description: "Create a new immutable revision of an existing OpenUI artifact. Raw HTML is not accepted.",
-                needsApproval: false
-            },
-            {
-                name: "openui_publish",
-                helper: "defineOpenUiPublishTool",
-                description: "Publish one OpenUI artifact revision to an unlisted, storage-issued HTTPS link.",
-                needsApproval: false
-            }
-        ],
-        config: {
-            path: "tool-config/openui.ts",
-            helper: "defineOpenUiConfig",
-            options: {}
-        },
-        skills: ["openui-artifacts"],
-        requiredConfig: [],
-        optionalConfig: ["R2_PUBLIC_BASE_URL", "S3_PUBLIC_BASE_URL"],
-        requiredCredentials: [],
-        optionalCredentials: [],
-        setup: [{
-                kind: "tools",
-                name: "openui-public-blob-origin",
-                required: true,
-                message: "Configure an HTTPS public base URL on the blob adapter, then review the generated OpenUI component and brand policy before publishing."
-            }]
-    }
-];
-const READ_PATTERNS = [
-    "regex:(^|[-_])(search|read|list|fetch|get|retrieve|query|lookup|find|describe|details?|discover)([-_]|$)"
-];
-const WRITE_PATTERNS = [
-    "regex:(^|[-_])(add|append|archive|assign|book|buy|cancel|checkout|close|complete|create|delete|draft|duplicate|edit|execute|insert|invite|kick|link|merge|modify|move|mutate|open|pay|post|publish|purchase|push|react|reaction|remove|rename|reply|reserve|resolve|reopen|run|schedule|send|set|share|submit|transfer|transition|unassign|unlink|update|upload|write)([-_]|$)"
-];
-function catalogEntry(input) {
-    const requiredConfig = [
-        ...(input.urlEnv && !input.defaultUrl ? [input.urlEnv] : []),
-    ];
-    const optionalConfig = [
-        ...(input.urlEnv && input.defaultUrl ? [input.urlEnv] : []),
-        ...(input.optionalConfig ?? [])
-    ];
-    const requiredCredentials = [
-        ...(input.tokenEnv && input.tokenRequired !== false ? [input.tokenEnv] : []),
-        ...(input.relayCredential ? [input.relayCredential] : [])
-    ];
-    const optionalCredentials = [
-        ...(input.tokenEnv && input.tokenRequired === false ? [input.tokenEnv] : [])
-    ];
-    return {
-        kind: input.kind,
-        role: "connection",
-        packageName: input.packageName ?? `@assemblyline-agents/${input.kind}`,
-        helper: input.helper,
-        protocol: input.protocol ?? "mcp",
-        ...(input.protocol === "sdk" ? {} : { transport: input.transport ?? "http" }),
-        provider: input.provider ?? input.kind,
-        description: input.description,
-        ...(input.defaultUrl ? { defaultUrl: input.defaultUrl } : {}),
-        ...(input.urlEnv ? { urlEnv: input.urlEnv } : {}),
-        ...(input.tokenEnv ? { tokenEnv: input.tokenEnv } : {}),
-        ...(input.tokenEnv ? { tokenRequired: input.tokenRequired !== false } : {}),
-        ...(input.tokenHeader ? { tokenHeader: input.tokenHeader } : {}),
-        ...(input.relayCredential ? { relayCredential: input.relayCredential } : {}),
-        requiredConfig,
-        optionalConfig,
-        requiredCredentials,
-        optionalCredentials,
-        capabilities: input.protocol === "sdk"
-            ? ["sdk", "live-tools", "host-execution", "private-assets"]
-            : ["mcp", "live-tools", input.transport === "stdio" ? "stdio" : input.transport === "relay" ? "e2ee-device-relay" : "streamable-http"],
-        scopes: [...(input.scopes ?? [])],
-        // Plugins with user-scoped grants declare subject: "user" explicitly; an
-        // unannotated plugin gets a deployment credential usable on every surface.
-        subject: input.subject ?? "workspace",
-        ...(input.tools ? { tools: cloneToolFilter(input.tools) } : {}),
-        ...(input.hostRequirements ? { hostRequirements: cloneHostRequirements(input.hostRequirements) } : {}),
-        readToolPatterns: input.readToolPatterns ?? READ_PATTERNS,
-        writeToolPatterns: input.writeToolPatterns ?? (input.write ? WRITE_PATTERNS : []),
-        ...(input.eventCatalog ? { eventCatalog: [...input.eventCatalog] } : {}),
-        ...(input.defaultEvents ? { defaultEvents: [...input.defaultEvents] } : {}),
-        ...(input.eventMode ? { eventMode: input.eventMode } : {}),
-        ...(input.eventScope ? { eventScope: input.eventScope } : {}),
-        ...(input.eventRequiredConfig ? { eventRequiredConfig: [...input.eventRequiredConfig] } : {}),
-        ...(input.eventRequiredCredentials ? { eventRequiredCredentials: [...input.eventRequiredCredentials] } : {}),
-        setup: [{
-                kind: "connection",
-                name: `${input.kind}-developer-configuration`,
-                required: true,
-                message: input.setupMessage ?? `Configure ${input.displayName} credentials, OAuth application, or MCP bridge for this deployment.`
-            }]
-    };
-}
-const HIGGSFIELD_PLUGIN = {
-    kind: "higgsfield",
-    role: "connection",
-    packageName: "@assemblyline-agents/higgsfield",
-    helper: "defineHiggsfieldConnection",
-    protocol: "cli",
-    transport: "sandbox",
-    provider: "higgsfield",
-    description: "Higgsfield creative media generation, analysis, and editing through the official CLI inside the agent sandbox.",
-    command: "higgsfield",
-    requiredConfig: [],
-    optionalConfig: [],
-    requiredCredentials: [],
-    optionalCredentials: [],
-    capabilities: ["sandbox-cli", "native-file-inputs", "media-generation", "video-analysis", "video-editing"],
-    scopes: [],
-    subject: "user",
-    readToolPatterns: ["read"],
-    writeToolPatterns: ["write"],
-    setup: [{
-            kind: "sandbox",
-            name: "higgsfield-cli",
-            required: true,
-            message: "Install the official Higgsfield CLI in the sandbox image with `curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh`, then run `higgsfield auth login` interactively inside each persistent, user-scoped sandbox. Do not bake account credentials into a shared image. Higgsfield generation and editing consume account credits."
-        }]
-};
-const REMOTION_PLUGIN = {
-    kind: "remotion",
-    role: "connection",
-    packageName: "@assemblyline-agents/remotion",
-    helper: "defineRemotionConnection",
-    protocol: "cli",
-    transport: "sandbox",
-    provider: "remotion",
-    description: "Remotion composition discovery and rendering through the project CLI inside the active agent sandbox.",
-    command: "npx",
-    requiredConfig: [],
-    optionalConfig: [],
-    requiredCredentials: [],
-    optionalCredentials: [],
-    capabilities: ["sandbox-cli", "media-rendering", "workspace-artifacts"],
-    scopes: [],
-    subject: "environment",
-    readToolPatterns: ["list_compositions", "check_versions"],
-    writeToolPatterns: ["render_video", "render_still"],
-    setup: [{
-            kind: "sandbox",
-            name: "remotion-cli",
-            required: true,
-            message: "Install Remotion and @remotion/cli in the sandbox project. Composition discovery and rendering execute inside the active run sandbox and write artifacts under /workspace."
-        }]
-};
-const MIRROR_PLUGIN = {
-    kind: "mirror",
-    role: "connection",
-    packageName: "@assemblyline-agents/mirror",
-    helper: "defineMirrorConnection",
-    protocol: "mcp",
-    transport: "http",
-    provider: "mirror",
-    description: "User-scoped connected accounts, mirrored source records, live reads, and approval-gated actions through Mirror.",
-    defaultUrl: "https://mirror.artificialillumination.co/mcp",
-    urlEnv: "MIRROR_MCP_URL",
-    requiredConfig: ["MIRROR_OAUTH_CLIENT_ID"],
-    optionalConfig: ["MIRROR_MCP_URL", "MIRROR_OAUTH_ISSUER", "MIRROR_OAUTH_REDIRECT_URI"],
-    requiredCredentials: [],
-    optionalCredentials: [],
-    capabilities: ["mcp", "oauth", "pkce", "live-tools", "streamable-http", "connected-accounts", "approval-gated-writes"],
-    scopes: [],
-    subject: "user",
-    tools: {
-        allow: [
-            "mirror.connected_providers",
-            "mirror.connected_provider_call",
-            "mirror.create_connections_link",
-            "mirror.query_records",
-            "mirror.list_changes",
-            "mirror.get_source",
-            "mirror.live_read",
-            "mirror.sync_now",
-            "mirror.request_action",
-            "mirror.get_pending_approvals",
-            "mirror.get_skill",
-            "mirror.approve_code",
-            "mirror.agentcash_wallet_export",
-            "mirror.register_agent",
-            "mirror.whoami"
-        ]
-    },
-    readToolPatterns: [
-        "mirror.connected_providers",
-        "mirror.query_records",
-        "mirror.list_changes",
-        "mirror.get_source",
-        "mirror.live_read",
-        "mirror.get_pending_approvals",
-        "mirror.get_skill",
-        "mirror.whoami"
-    ],
-    writeToolPatterns: [
-        "mirror.connected_provider_call",
-        "mirror.create_connections_link",
-        "mirror.sync_now",
-        "mirror.request_action",
-        "mirror.approve_code",
-        "mirror.agentcash_wallet_export",
-        "mirror.register_agent"
-    ],
-    eventCatalog: ["source.changed"],
-    defaultEvents: ["source.changed"],
-    eventMode: "api",
-    eventScope: "principal",
-    setup: [{
-            kind: "connection",
-            name: "mirror-oauth-configuration",
-            required: true,
-            message: "Choose a stable public client id for this agent, set MIRROR_OAUTH_CLIENT_ID, and deploy with a reachable Assembly Line connection callback URL. Mirror uses OAuth Authorization Code + PKCE and stores provider credentials behind the user's Mirror account."
-        }]
-};
-const MARGINS_PLUGIN = {
-    kind: "margins",
-    role: "connection",
-    packageName: "@assemblyline-agents/margins",
-    helper: "defineMarginsConnection",
-    protocol: "mcp",
-    transport: "http",
-    provider: "margins",
-    description: "Resource-scoped collaborative Markdown pages, folders, comments, suggestions, and conflict-safe edits through Margins.",
-    defaultUrl: "https://margins.artificialillumination.co/mcp",
-    urlEnv: "MARGINS_MCP_URL",
-    requiredConfig: [],
-    optionalConfig: [
-        "MARGINS_MCP_URL",
-        "MARGINS_ISSUER",
-        "MARGINS_AGENT_ID",
-        "MARGINS_AGENT_NAME",
-        "MARGINS_AGENT_RUNTIME",
-        "MARGINS_AGENT_HARNESS"
-    ],
-    requiredCredentials: [],
-    optionalCredentials: [],
-    capabilities: [
-        "mcp",
-        "host-side-pairing",
-        "rotating-bearer-grants",
-        "streamable-http",
-        "resource-scoped",
-        "collaborative-markdown",
-        "conflict-safe-writes"
-    ],
-    scopes: ["margins"],
-    subject: "user",
-    tools: {
-        allow: [
-            "margins_status",
-            "margins_context",
-            "margins_review",
-            "margins_map",
-            "margins_graph",
-            "margins_create_file",
-            "margins_comment",
-            "margins_edit",
-            "margins_suggest",
-            "margins_history",
-            "margins_library"
-        ]
-    },
-    readToolPatterns: [
-        "margins_status",
-        "margins_context",
-        "margins_review",
-        "margins_map",
-        "margins_graph",
-        "margins_history",
-        "margins_library"
-    ],
-    writeToolPatterns: [
-        "margins_create_file",
-        "margins_comment",
-        "margins_edit",
-        "margins_suggest"
-    ],
-    setup: [{
-            kind: "connection",
-            name: "margins-binding-packet",
-            required: true,
-            message: "In Margins, create an agent invite for the exact page, folder, or workspace and paste its short-lived one-time binding packet into the agent chat. No developer OAuth registration or long-lived token environment variable is required."
-        }]
-};
-const PROVENANCE_PLUGIN = {
-    kind: "provenance",
-    role: "connection",
-    packageName: "@assemblyline-agents/provenance",
-    helper: "defineProvenanceConnection",
-    protocol: "mcp",
-    transport: "http",
-    provider: "provenance",
-    description: "User-scoped append-only agent evidence, session reconstruction, tool traces, handoff bundles, and artifacts through Provenance.",
-    defaultUrl: "https://provenance.artificialillumination.co/mcp",
-    urlEnv: "PROVENANCE_MCP_URL",
-    requiredConfig: ["PROVENANCE_OAUTH_CLIENT_ID"],
-    optionalConfig: [
-        "PROVENANCE_MCP_URL",
-        "PROVENANCE_OAUTH_ISSUER",
-        "PROVENANCE_OAUTH_REDIRECT_URI",
-        "PROVENANCE_AGENT_ID",
-        "PROVENANCE_AGENT_NAME",
-        "PROVENANCE_AGENT_RUNTIME"
-    ],
-    requiredCredentials: [],
-    optionalCredentials: [],
-    capabilities: ["mcp", "oauth", "pkce", "live-tools", "streamable-http", "append-only-ledger", "agent-handoffs"],
-    scopes: ["provenance:ledger"],
-    subject: "user",
-    tools: {
-        allow: [
-            "provenance.search_events",
-            "provenance.get_event",
-            "provenance.get_event_range",
-            "provenance.get_turn_trace",
-            "provenance.get_tool_trace",
-            "provenance.get_related_events",
-            "provenance.list_sessions",
-            "provenance.handoff_bundle",
-            "provenance.get_artifact",
-            "provenance.get_session_definition",
-            "provenance.register_agent",
-            "provenance.list_agents",
-            "provenance.agent_activity"
-        ]
-    },
-    readToolPatterns: [
-        "provenance.search_events",
-        "provenance.get_event",
-        "provenance.get_event_range",
-        "provenance.get_turn_trace",
-        "provenance.get_tool_trace",
-        "provenance.get_related_events",
-        "provenance.list_sessions",
-        "provenance.handoff_bundle",
-        "provenance.get_artifact",
-        "provenance.get_session_definition",
-        "provenance.list_agents",
-        "provenance.agent_activity"
-    ],
-    writeToolPatterns: ["provenance.register_agent"],
-    setup: [{
-            kind: "connection",
-            name: "provenance-oauth-configuration",
-            required: true,
-            message: "Register this Assembly Line deployment as a Provenance public OAuth client with its exact /assembly-line/connections/callback URI, then set PROVENANCE_OAUTH_CLIENT_ID. Provenance uses Authorization Code + PKCE and binds the issued token to the authenticated user and agent identity."
-        }]
-};
-const CONNECTION_PLUGIN_CATALOG = [
-    {
-        kind: "1password",
-        role: "connection",
-        packageName: "@assemblyline-agents/1password",
-        helper: "defineOnePasswordConnection",
-        protocol: "sdk",
-        provider: "1password",
-        description: "Metadata-only 1Password vault and item browsing plus host-only credential resolution through the official SDK.",
-        requiredConfig: [],
-        optionalConfig: [],
-        requiredCredentials: ["OP_SERVICE_ACCOUNT_TOKEN"],
-        optionalCredentials: [],
-        capabilities: ["sdk", "direct-api", "live-tools", "service-account", "vaults", "item-metadata", "credential-source"],
-        scopes: [],
-        subject: "environment",
-        tools: {
-            allow: ["list_vaults", "list_items", "search_items"]
-        },
-        readToolPatterns: ["list_vaults", "list_items", "search_items"],
-        writeToolPatterns: [],
-        setup: [{
-                kind: "connection",
-                name: "onepassword-service-account",
-                required: true,
-                message: "Create a dedicated 1Password service account, share only the intended vaults, and store its token as OP_SERVICE_ACCOUNT_TOKEN. Model-facing tools expose metadata only; concealed values remain host-side."
-            }]
-    },
-    {
-        kind: "a2a",
-        role: "connection",
-        packageName: "@assemblyline-agents/a2a",
-        helper: "defineA2AConnection",
-        protocol: "a2a",
-        provider: "a2a",
-        description: "Discover and delegate work to an independently deployed agent through the A2A v1.0 protocol.",
-        requiredConfig: [],
-        optionalConfig: [],
-        requiredCredentials: [],
-        optionalCredentials: [],
-        capabilities: ["a2a", "agent-card-discovery", "remote-agent-tasks", "json-rpc"],
-        scopes: [],
-        subject: "environment",
-        readToolPatterns: ["regex:^(?!cancel_task$).+"],
-        writeToolPatterns: ["cancel_task"],
-        setup: [{
-                kind: "connection",
-                name: "a2a-peer-configuration",
-                required: true,
-                message: "Configure an allowlisted Agent Card URL and a peer-scoped service credential for the remote agent."
-            }]
-    },
-    HIGGSFIELD_PLUGIN,
-    MARGINS_PLUGIN,
-    MIRROR_PLUGIN,
-    PROVENANCE_PLUGIN,
-    {
-        kind: "arcads",
-        role: "connection",
-        packageName: "@assemblyline-agents/arcads",
-        helper: "defineArcadsConnection",
-        protocol: "mcp",
-        transport: "http",
-        provider: "arcads",
-        description: "Arcads media analysis, generation, and editing through the official hosted MCP server.",
-        defaultUrl: "https://mcp.arcads.ai",
-        requiredConfig: ["ARCADS_MCP_CLIENT_ID"],
-        optionalConfig: ["ARCADS_MCP_REDIRECT_URI"],
-        requiredCredentials: [],
-        optionalCredentials: [],
-        capabilities: ["mcp", "oauth", "live-tools", "streamable-http"],
-        scopes: ["mcp", "offline_access"],
-        subject: "user",
-        readToolPatterns: [
-            "regex:^arcads_(get_(?!upload_url$)|list|search|watch)"
-        ],
-        writeToolPatterns: [
-            "arcads_get_upload_url",
-            "regex:^arcads_(?!get_(?!upload_url$)|list|search|watch).+"
-        ],
-        setup: [{
-                kind: "connection",
-                name: "arcads-oauth-configuration",
-                required: true,
-                message: "Register an OAuth client with https://api.arcads.ai/oauth/register, set ARCADS_MCP_CLIENT_ID, and register the Assembly Line connection callback URL. Arcads generation and editing consume account credits."
-            }]
-    },
-    {
-        kind: "attio",
-        role: "connection",
-        packageName: "@assemblyline-agents/attio",
-        helper: "defineAttioConnection",
-        protocol: "mcp",
-        transport: "http",
-        provider: "attio",
-        description: "Attio CRM records, lists, notes, tasks, comments, email and meeting intelligence, and reporting through Attio's official hosted MCP server.",
-        defaultUrl: "https://mcp.attio.com/mcp",
-        urlEnv: "ATTIO_MCP_URL",
-        requiredConfig: ["ATTIO_MCP_CLIENT_ID"],
-        optionalConfig: ["ATTIO_MCP_URL", "ATTIO_MCP_REDIRECT_URI"],
-        requiredCredentials: [],
-        optionalCredentials: [],
-        capabilities: ["mcp", "oauth", "pkce", "refresh-token", "live-tools", "streamable-http", "crm", "semantic-search", "reporting"],
-        scopes: ["mcp", "offline_access", "openid"],
-        subject: "user",
-        tools: {
-            allow: [
-                "search-records",
-                "list-records",
-                "get-records-by-ids",
-                "create-record",
-                "upsert-record",
-                "update-record",
-                "merge-records",
-                "list-attribute-definitions",
-                "list-lists",
-                "list-list-attribute-definitions",
-                "list-records-in-list",
-                "add-record-to-list",
-                "update-list",
-                "update-list-entry-by-id",
-                "update-list-entry-by-record-id",
-                "create-comment",
-                "list-comments",
-                "list-comment-replies",
-                "delete-comment",
-                "create-note",
-                "search-notes-by-metadata",
-                "semantic-search-notes",
-                "get-note-body",
-                "update-note",
-                "list-tasks",
-                "create-task",
-                "update-task",
-                "search-meetings",
-                "search-call-recordings-by-metadata",
-                "semantic-search-call-recordings",
-                "get-call-recording",
-                "search-emails-by-metadata",
-                "semantic-search-emails",
-                "get-email-content",
-                "list-workspace-members",
-                "list-workspace-teams",
-                "whoami",
-                "run-basic-report",
-                "query-particle-sql"
-            ]
-        },
-        readToolPatterns: [
-            "search-records",
-            "list-records",
-            "get-records-by-ids",
-            "list-attribute-definitions",
-            "list-lists",
-            "list-list-attribute-definitions",
-            "list-records-in-list",
-            "list-comments",
-            "list-comment-replies",
-            "search-notes-by-metadata",
-            "semantic-search-notes",
-            "get-note-body",
-            "list-tasks",
-            "search-meetings",
-            "search-call-recordings-by-metadata",
-            "semantic-search-call-recordings",
-            "get-call-recording",
-            "search-emails-by-metadata",
-            "semantic-search-emails",
-            "get-email-content",
-            "list-workspace-members",
-            "list-workspace-teams",
-            "whoami",
-            "run-basic-report",
-            "query-particle-sql"
-        ],
-        writeToolPatterns: [
-            "create-record",
-            "upsert-record",
-            "update-record",
-            "merge-records",
-            "add-record-to-list",
-            "update-list",
-            "update-list-entry-by-id",
-            "update-list-entry-by-record-id",
-            "create-comment",
-            "delete-comment",
-            "create-note",
-            "update-note",
-            "create-task",
-            "update-task"
-        ],
-        setup: [{
-                kind: "connection",
-                name: "attio-mcp-oauth",
-                required: true,
-                message: "Register a public OAuth client at https://app.attio.com/oauth/register for the Assembly Line connection callback, set ATTIO_MCP_CLIENT_ID, then let each user authorize Attio. For a shared company agent, explicitly set subject: \"workspace\" and preauthorize a dedicated Attio member through the protected operator connection flow."
-            }]
-    },
-    {
-        kind: "gmail",
-        role: "connection",
-        packageName: "@assemblyline-agents/gmail",
-        helper: "defineGmailConnection",
-        protocol: "http",
-        provider: "gmail",
-        description: "Gmail threads, messages, attachments, drafts, and sends through the Gmail REST API.",
-        defaultBaseUrl: "https://gmail.googleapis.com/gmail/v1",
-        baseUrlEnv: "GMAIL_API_BASE_URL",
-        requiredConfig: ["GOOGLE_CLIENT_ID"],
-        optionalConfig: ["GOOGLE_REDIRECT_URI", "GMAIL_API_BASE_URL"],
-        requiredCredentials: ["GOOGLE_CLIENT_SECRET"],
-        optionalCredentials: [],
-        capabilities: ["http-api", "oauth", "pkce", "refresh-token", "live-tools"],
-        scopes: [
-            "https://www.googleapis.com/auth/gmail.readonly",
-            "https://www.googleapis.com/auth/gmail.compose",
-            "https://www.googleapis.com/auth/gmail.send"
-        ],
-        subject: "user",
-        tools: { allow: [
-                "gmail_get_profile", "gmail_list_messages", "gmail_get_message", "gmail_get_attachment",
-                "gmail_list_threads", "gmail_get_thread", "gmail_list_labels", "gmail_get_label",
-                "gmail_list_drafts", "gmail_get_draft", "gmail_create_draft", "gmail_update_draft",
-                "gmail_delete_draft", "gmail_send_draft", "gmail_send_message"
-            ] },
-        readToolPatterns: [
-            "gmail_get_profile", "gmail_list_messages", "gmail_get_message", "gmail_get_attachment",
-            "gmail_list_threads", "gmail_get_thread", "gmail_list_labels", "gmail_get_label",
-            "gmail_list_drafts", "gmail_get_draft"
-        ],
-        writeToolPatterns: ["gmail_create_draft", "gmail_update_draft", "gmail_delete_draft", "gmail_send_draft", "gmail_send_message"],
-        eventCatalog: ["email.received"],
-        defaultEvents: ["email.received"],
-        eventMode: "watch",
-        eventScope: "principal",
-        eventRequiredConfig: ["GOOGLE_CLOUD_PROJECT", "GMAIL_PUBSUB_TOPIC"],
-        eventRequiredCredentials: ["GMAIL_PUBSUB_VERIFICATION_TOKEN"],
-        setup: [{
-                kind: "connection",
-                name: "gmail-oauth-configuration",
-                required: true,
-                message: "Create a Google OAuth web client, enable the Gmail API, set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET, and register the Assembly Line connection callback URL. Gmail authorization is stored as its own connection grant."
-            }]
-    },
-    {
-        kind: "google-calendar",
-        role: "connection",
-        packageName: "@assemblyline-agents/google-calendar",
-        helper: "defineGoogleCalendarConnection",
-        protocol: "http",
-        provider: "google_calendar",
-        description: "Google Calendar lists, events, availability, and scheduling through the Google Calendar REST API.",
-        defaultBaseUrl: "https://www.googleapis.com/calendar/v3",
-        baseUrlEnv: "GOOGLE_CALENDAR_API_BASE_URL",
-        requiredConfig: ["GOOGLE_CLIENT_ID"],
-        optionalConfig: ["GOOGLE_REDIRECT_URI", "GOOGLE_CALENDAR_API_BASE_URL"],
-        requiredCredentials: ["GOOGLE_CLIENT_SECRET"],
-        optionalCredentials: [],
-        capabilities: ["http-api", "oauth", "pkce", "refresh-token", "live-tools"],
-        scopes: [
-            "https://www.googleapis.com/auth/calendar.readonly",
-            "https://www.googleapis.com/auth/calendar.events"
-        ],
-        subject: "user",
-        tools: { allow: [
-                "google_calendar_list_calendars", "google_calendar_get_calendar", "google_calendar_list_events",
-                "google_calendar_get_event", "google_calendar_list_instances", "google_calendar_query_freebusy",
-                "google_calendar_create_event", "google_calendar_update_event", "google_calendar_delete_event", "google_calendar_move_event"
-            ] },
-        readToolPatterns: [
-            "google_calendar_list_calendars", "google_calendar_get_calendar", "google_calendar_list_events",
-            "google_calendar_get_event", "google_calendar_list_instances", "google_calendar_query_freebusy"
-        ],
-        writeToolPatterns: ["google_calendar_create_event", "google_calendar_update_event", "google_calendar_delete_event", "google_calendar_move_event"],
-        eventCatalog: ["calendar.changed"],
-        defaultEvents: ["calendar.changed"],
-        eventMode: "watch",
-        eventScope: "principal",
-        setup: [{
-                kind: "connection",
-                name: "google-calendar-oauth-configuration",
-                required: true,
-                message: "Create a Google OAuth web client, enable the Google Calendar API, set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET, and register the Assembly Line connection callback URL. Calendar authorization is stored as its own connection grant."
-            }]
-    },
-    {
-        kind: "google-drive",
-        role: "connection",
-        packageName: "@assemblyline-agents/google-drive",
-        helper: "defineGoogleDriveConnection",
-        protocol: "http",
-        provider: "google_drive",
-        description: "Google Drive file search, downloads, uploads, organization, and sharing through the Google Drive REST API.",
-        defaultBaseUrl: "https://www.googleapis.com",
-        baseUrlEnv: "GOOGLE_DRIVE_API_BASE_URL",
-        requiredConfig: ["GOOGLE_CLIENT_ID"],
-        optionalConfig: ["GOOGLE_REDIRECT_URI", "GOOGLE_DRIVE_API_BASE_URL"],
-        requiredCredentials: ["GOOGLE_CLIENT_SECRET"],
-        optionalCredentials: [],
-        capabilities: ["http-api", "oauth", "pkce", "refresh-token", "binary-transfer", "live-tools"],
-        scopes: [
-            "https://www.googleapis.com/auth/drive.readonly",
-            "https://www.googleapis.com/auth/drive"
-        ],
-        subject: "user",
-        tools: { allow: [
-                "google_drive_get_about", "google_drive_list_shared_drives", "google_drive_get_shared_drive",
-                "google_drive_list_files", "google_drive_get_file", "google_drive_download_file", "google_drive_export_file",
-                "google_drive_list_permissions", "google_drive_get_permission", "google_drive_create_file",
-                "google_drive_update_file", "google_drive_upload_file_content", "google_drive_copy_file", "google_drive_delete_file",
-                "google_drive_create_permission", "google_drive_update_permission", "google_drive_delete_permission"
-            ] },
-        readToolPatterns: [
-            "google_drive_get_about", "google_drive_list_shared_drives", "google_drive_get_shared_drive",
-            "google_drive_list_files", "google_drive_get_file", "google_drive_download_file", "google_drive_export_file",
-            "google_drive_list_permissions", "google_drive_get_permission"
-        ],
-        writeToolPatterns: [
-            "google_drive_create_file", "google_drive_update_file", "google_drive_upload_file_content", "google_drive_copy_file",
-            "google_drive_delete_file", "google_drive_create_permission", "google_drive_update_permission", "google_drive_delete_permission"
-        ],
-        eventCatalog: ["drive.changed"],
-        defaultEvents: ["drive.changed"],
-        eventMode: "watch",
-        eventScope: "principal",
-        setup: [{
-                kind: "connection",
-                name: "google-drive-oauth-configuration",
-                required: true,
-                message: "Create a Google OAuth web client, enable the Google Drive API, set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET, and register the Assembly Line connection callback URL. Drive authorization is stored as its own connection grant."
-            }]
-    },
-    catalogEntry({ kind: "github", displayName: "GitHub", helper: "defineGitHubMcpConnection", packageName: "@assemblyline-agents/github", description: "GitHub repositories, issues, pull requests, and Actions through GitHub MCP.", defaultUrl: "https://api.githubcopilot.com/mcp/", urlEnv: "GITHUB_MCP_URL", tokenEnv: "GITHUB_MCP_TOKEN", write: true }),
-    {
-        kind: "github-app",
-        role: "connection",
-        packageName: "@assemblyline-agents/github",
-        helper: "defineGitHubAppConnection",
-        protocol: "credential",
-        provider: "github",
-        description: "Host-only GitHub App installation credentials for Git and the GitHub CLI inside an agent sandbox.",
-        requiredConfig: ["GITHUB_APP_ID"],
-        optionalConfig: [
-            "GITHUB_APP_INSTALLATION_ID",
-            "GITHUB_APP_SLUG",
-            "GITHUB_APP_CLIENT_ID",
-            "GITHUB_API_URL",
-            "GITHUB_OAUTH_URL"
-        ],
-        requiredCredentials: ["GITHUB_APP_PRIVATE_KEY"],
-        optionalCredentials: ["GITHUB_APP_CLIENT_SECRET", "GITHUB_APP_WEBHOOK_SECRET"],
-        capabilities: ["sandbox-credentials", "github-app", "git", "github-cli"],
-        scopes: [],
-        subject: "user",
-        readToolPatterns: [],
-        writeToolPatterns: [],
-        eventCatalog: [
-            "issues.opened", "issues.edited", "issues.closed", "issue_comment.created",
-            "pull_request.opened", "pull_request.synchronize", "pull_request.closed",
-            "pull_request_review.submitted", "push", "workflow_run.completed",
-            "installation.created", "installation.deleted", "installation_repositories.added",
-            "installation_repositories.removed"
-        ],
-        defaultEvents: ["issues.opened", "issue_comment.created", "pull_request.opened", "pull_request_review.submitted", "push", "workflow_run.completed"],
-        eventMode: "manual",
-        eventScope: "connection",
-        eventRequiredCredentials: ["GITHUB_APP_WEBHOOK_SECRET"],
-        setup: [{
-                kind: "connection",
-                name: "github-app-developer-configuration",
-                required: true,
-                message: "Create and install a GitHub App, choose its repository access and permissions in GitHub, then store its credentials in the Assembly Line host secret store."
-            }]
-    },
-    catalogEntry({ kind: "slack", displayName: "Slack", helper: "defineSlackConnection", packageName: "@assemblyline-agents/slack", description: "Slack workspace search, channels, messages, files, and users through Slack MCP.", defaultUrl: "https://mcp.slack.com/mcp", urlEnv: "SLACK_MCP_URL", tokenEnv: "SLACK_MCP_TOKEN", write: true }),
-    catalogEntry({ kind: "telegram", displayName: "Telegram", helper: "defineTelegramConnection", packageName: "@assemblyline-agents/telegram", description: "Telegram account tools through a developer-operated MCP bridge.", urlEnv: "TELEGRAM_MCP_URL", tokenEnv: "TELEGRAM_MCP_TOKEN" }),
-    catalogEntry({
-        kind: "strava", displayName: "Strava", helper: "defineStravaConnection",
-        description: "Strava profile and fitness activity tools through a developer-configured MCP server.", urlEnv: "STRAVA_MCP_URL", tokenEnv: "STRAVA_MCP_TOKEN",
-        eventCatalog: ["activity.create", "activity.update", "activity.delete", "athlete.update"],
-        defaultEvents: ["activity.create", "activity.update", "activity.delete", "athlete.update"], eventMode: "api", eventScope: "connection",
-        eventRequiredConfig: ["STRAVA_CLIENT_ID"],
-        eventRequiredCredentials: ["STRAVA_CLIENT_SECRET", "STRAVA_WEBHOOK_SIGNING_SECRET"]
-    }),
-    catalogEntry({
-        kind: "polar", displayName: "Polar", helper: "definePolarConnection",
-        description: "Polar workout and heart-rate tools through a developer-configured MCP server.", urlEnv: "POLAR_MCP_URL", tokenEnv: "POLAR_MCP_TOKEN",
-        eventCatalog: ["EXERCISE", "SLEEP", "CONTINUOUS_HEART_RATE", "SLEEP_WISE_CIRCADIAN_BEDTIME", "SLEEP_WISE_ALERTNESS", "ACTIVITY_SUMMARY", "PHYSICAL_INFORMATION"],
-        defaultEvents: ["EXERCISE", "SLEEP", "CONTINUOUS_HEART_RATE"], eventMode: "api", eventScope: "connection",
-        eventRequiredConfig: ["POLAR_CLIENT_ID"],
-        eventRequiredCredentials: ["POLAR_CLIENT_SECRET"]
-    }),
-    catalogEntry({ kind: "spotify", displayName: "Spotify", helper: "defineSpotifyConnection", description: "Spotify library, playlist, and playback tools through a developer-configured MCP server.", urlEnv: "SPOTIFY_MCP_URL", tokenEnv: "SPOTIFY_MCP_TOKEN", write: true }),
-    catalogEntry({ kind: "xai", displayName: "xAI", helper: "defineXaiConnection", description: "xAI and X search tools through a developer-configured MCP server.", urlEnv: "XAI_MCP_URL", tokenEnv: "XAI_MCP_TOKEN" }),
-    catalogEntry({
-        kind: "exa",
-        displayName: "Exa",
-        helper: "defineExaConnection",
-        description: "Current web search, page retrieval, and advanced filtered search through Exa's official hosted MCP server.",
-        defaultUrl: "https://mcp.exa.ai/mcp",
-        urlEnv: "EXA_MCP_URL",
-        tokenEnv: "EXA_API_KEY",
-        tokenRequired: false,
-        subject: "environment",
-        tools: {
-            allow: [
-                "web_search_exa",
-                "web_fetch_exa",
-                "web_search_advanced_exa"
-            ]
-        },
-        readToolPatterns: [
-            "web_search_exa",
-            "web_fetch_exa",
-            "web_search_advanced_exa"
-        ],
-        setupMessage: "Exa's hosted MCP works without credentials. Optionally set EXA_API_KEY to raise production rate limits; Assembly Line sends it only as the x-api-key header."
-    }),
-    catalogEntry({
-        kind: "plaid", displayName: "Plaid", helper: "definePlaidConnection",
-        description: "Read-only Plaid financial tools through a developer-configured MCP bridge.", urlEnv: "PLAID_MCP_URL", tokenEnv: "PLAID_MCP_TOKEN",
-        eventCatalog: ["transactions.changed", "item.changed", "auth.changed", "identity.changed", "assets.changed", "holdings.changed", "investments.changed", "liabilities.changed", "payment.changed", "transfer.changed", "income.changed"],
-        defaultEvents: ["transactions.changed", "item.changed"], eventMode: "api", eventScope: "connection",
-        eventRequiredConfig: ["PLAID_CLIENT_ID"],
-        eventRequiredCredentials: ["PLAID_SECRET"]
-    }),
-    catalogEntry({ kind: "granola", displayName: "Granola", helper: "defineGranolaConnection", description: "Granola meeting notes, transcripts, and action items through Granola MCP.", defaultUrl: "https://mcp.granola.ai/mcp", urlEnv: "GRANOLA_MCP_URL", tokenEnv: "GRANOLA_MCP_TOKEN" }),
-    {
-        kind: "grata",
-        role: "connection",
-        packageName: "@assemblyline-agents/grata",
-        helper: "defineGrataConnection",
-        protocol: "mcp",
-        transport: "http",
-        provider: "grata",
-        description: "Private-company, ownership, funding, transaction, filing, contact, conference, and deal intelligence through Grata's official hosted MCP server.",
-        defaultUrl: "https://mcp.grata.com",
-        urlEnv: "GRATA_MCP_URL",
-        requiredConfig: ["GRATA_MCP_CLIENT_ID"],
-        optionalConfig: ["GRATA_MCP_URL", "GRATA_MCP_REDIRECT_URI"],
-        requiredCredentials: ["GRATA_MCP_CLIENT_SECRET"],
-        optionalCredentials: [],
-        capabilities: ["mcp", "oauth", "pkce", "refresh-token", "live-tools", "streamable-http", "private-market-intelligence"],
-        scopes: ["openid", "profile", "email", "offline_access"],
-        subject: "user",
-        readToolPatterns: READ_PATTERNS,
-        writeToolPatterns: [
-            ...WRITE_PATTERNS,
-            "regex:(^|[-_])export([-_]|$)"
-        ],
-        setup: [{
-                kind: "connection",
-                name: "grata-mcp-oauth",
-                required: true,
-                message: "Register an OAuth client using client_secret_post with the selected Grata MCP region's /register endpoint for the Assembly Line connection callback, set GRATA_MCP_CLIENT_ID and GRATA_MCP_CLIENT_SECRET, then let each user authorize their Grata seat. Set GRATA_MCP_URL=https://eu-mcp.grata.com/ for European users."
-            }]
-    },
-    catalogEntry({
-        kind: "linear", displayName: "Linear", helper: "defineLinearConnection",
-        description: "Linear issues, projects, cycles, and teams through Linear MCP.", defaultUrl: "https://mcp.linear.app/mcp", urlEnv: "LINEAR_MCP_URL", tokenEnv: "LINEAR_MCP_TOKEN", write: true,
-        eventCatalog: ["issue.create", "issue.update", "issue.remove", "comment.create", "comment.update", "comment.remove", "project.create", "project.update", "project.remove", "cycle.create", "cycle.update", "cycle.remove", "document.create", "document.update", "document.remove", "customer.create", "customer.update", "customer.remove", "user.create", "user.update", "user.remove", "agentSessionEvent.created", "agentSessionEvent.prompted", "linear.changed"],
-        defaultEvents: ["issue.create", "issue.update", "comment.create", "comment.update", "project.update", "agentSessionEvent.created", "agentSessionEvent.prompted", "linear.changed"],
-        eventMode: "manual", eventScope: "principal", eventRequiredCredentials: ["LINEAR_WEBHOOK_SECRET"]
-    }),
-    catalogEntry({
-        kind: "notion", displayName: "Notion", helper: "defineNotionConnection",
-        description: "Notion pages, databases, comments, and workspace search through Notion MCP.", defaultUrl: "https://mcp.notion.com/mcp", urlEnv: "NOTION_MCP_URL", tokenEnv: "NOTION_MCP_TOKEN", write: true,
-        eventCatalog: [
-            "page.content_updated", "page.created", "page.deleted", "page.locked", "page.moved", "page.properties_updated", "page.undeleted", "page.unlocked",
-            "database.content_updated", "database.created", "database.deleted", "database.moved", "database.schema_updated", "database.undeleted",
-            "data_source.content_updated", "data_source.created", "data_source.deleted", "data_source.moved", "data_source.schema_updated", "data_source.undeleted",
-            "comment.created", "comment.deleted", "comment.updated"
-        ],
-        defaultEvents: ["page.content_updated", "page.created", "page.deleted", "page.properties_updated", "data_source.schema_updated", "comment.created"],
-        eventMode: "manual", eventScope: "principal"
-    }),
-    catalogEntry({
-        kind: "monday", displayName: "monday.com", helper: "defineMondayConnection",
-        description: "monday.com boards, items, workspaces, and docs through Platform MCP.", defaultUrl: "https://mcp.monday.com/mcp", urlEnv: "MONDAY_MCP_URL", tokenEnv: "MONDAY_MCP_TOKEN", write: true,
-        eventCatalog: ["create_item", "change_column_value", "change_status_column_value", "change_name", "item_moved_to_any_group", "item_deleted", "item_archived", "create_update"],
-        defaultEvents: ["create_item", "change_column_value", "change_status_column_value", "item_deleted", "create_update"], eventMode: "api", eventScope: "principal",
-        eventRequiredCredentials: ["MONDAY_SIGNING_SECRET"]
-    }),
-    catalogEntry({
-        kind: "jira", displayName: "Jira", helper: "defineJiraConnection",
-        description: "Jira issues, projects, transitions, and JQL search through Atlassian MCP.", defaultUrl: "https://mcp.atlassian.com/v1/mcp/authv2", urlEnv: "JIRA_MCP_URL", tokenEnv: "JIRA_MCP_TOKEN", write: true,
-        eventCatalog: ["jira:issue_created", "jira:issue_updated", "jira:issue_deleted", "comment_created", "comment_updated", "comment_deleted", "issue_property_set", "issue_property_deleted"],
-        defaultEvents: ["jira:issue_created", "jira:issue_updated", "comment_created", "comment_updated"], eventMode: "api", eventScope: "principal"
-    }),
-    catalogEntry({
-        kind: "hubspot", displayName: "HubSpot", helper: "defineHubSpotConnection",
-        description: "HubSpot CRM records and associations through HubSpot MCP.", defaultUrl: "https://mcp.hubspot.com", urlEnv: "HUBSPOT_MCP_URL", tokenEnv: "HUBSPOT_MCP_TOKEN",
-        eventCatalog: ["contact.creation", "contact.deletion", "contact.propertyChange", "company.creation", "company.deletion", "company.propertyChange", "deal.creation", "deal.deletion", "deal.propertyChange", "ticket.creation", "ticket.deletion", "ticket.propertyChange"],
-        defaultEvents: ["contact.creation", "contact.deletion", "company.creation", "company.deletion", "deal.creation", "deal.deletion", "ticket.creation", "ticket.deletion"],
-        eventMode: "api", eventScope: "connection", eventRequiredConfig: ["HUBSPOT_APP_ID"], eventRequiredCredentials: ["HUBSPOT_DEVELOPER_API_KEY", "HUBSPOT_CLIENT_SECRET"]
-    }),
-    catalogEntry({
-        kind: "figma", displayName: "Figma", helper: "defineFigmaConnection",
-        description: "Figma design, FigJam, Slides, and Dev Mode context through Figma MCP.",
-        defaultUrl: "https://mcp.figma.com/mcp", urlEnv: "FIGMA_MCP_URL", tokenEnv: "FIGMA_MCP_TOKEN", write: true,
-        eventCatalog: ["FILE_UPDATE", "FILE_DELETE", "FILE_VERSION_UPDATE", "LIBRARY_PUBLISH"],
-        defaultEvents: ["FILE_UPDATE", "FILE_DELETE"], eventMode: "api", eventScope: "principal"
-    }),
-    catalogEntry({ kind: "paper", displayName: "Paper", helper: "definePaperConnection", description: "Paper design tools through a developer-exposed local MCP bridge.", urlEnv: "PAPER_MCP_URL", tokenEnv: "PAPER_MCP_TOKEN", tokenRequired: false, write: true }),
-    catalogEntry({
-        kind: "sentry", displayName: "Sentry", helper: "defineSentryConnection",
-        description: "Sentry issues, events, projects, and teams through Sentry MCP.", defaultUrl: "https://mcp.sentry.dev/mcp", urlEnv: "SENTRY_MCP_URL", tokenEnv: "SENTRY_MCP_TOKEN", write: true,
-        eventCatalog: ["event.created", "event.alert"], defaultEvents: ["event.created", "event.alert"], eventMode: "api", eventScope: "principal"
-    }),
-    catalogEntry({
-        kind: "supabase", displayName: "Supabase", helper: "defineSupabaseConnection",
-        description: "Supabase projects, databases, docs, and Edge Functions through Supabase MCP.", defaultUrl: "https://mcp.supabase.com/mcp", urlEnv: "SUPABASE_MCP_URL", tokenEnv: "SUPABASE_MCP_TOKEN", write: true,
-        eventCatalog: ["row.inserted", "row.updated", "row.deleted"], defaultEvents: ["row.inserted", "row.updated", "row.deleted"], eventMode: "api", eventScope: "principal",
-        eventRequiredCredentials: ["SUPABASE_WEBHOOK_SECRET"]
-    }),
-    catalogEntry({
-        kind: "metabase", displayName: "Metabase", helper: "defineMetabaseConnection",
-        description: "Metabase semantic-layer queries, questions, and dashboards through an instance MCP endpoint.", urlEnv: "METABASE_MCP_URL", tokenEnv: "METABASE_MCP_TOKEN", tokenRequired: false, write: true,
-        eventCatalog: ["alert.triggered"], defaultEvents: ["alert.triggered"], eventMode: "manual", eventScope: "connection",
-        eventRequiredCredentials: ["METABASE_WEBHOOK_SECRET"]
-    }),
-    catalogEntry({
-        kind: "cloudflare", displayName: "Cloudflare", helper: "defineCloudflareConnection",
-        description: "Cloudflare API and account tools through Cloudflare MCP.", defaultUrl: "https://mcp.cloudflare.com/mcp", urlEnv: "CLOUDFLARE_MCP_URL", tokenEnv: "CLOUDFLARE_MCP_TOKEN", write: true,
-        eventCatalog: ["notification.received"], defaultEvents: ["notification.received"], eventMode: "api", eventScope: "principal",
-        eventRequiredCredentials: ["CLOUDFLARE_WEBHOOK_SECRET"]
-    }),
-    catalogEntry({
-        kind: "vercel", displayName: "Vercel", helper: "defineVercelConnection",
-        description: "Vercel projects, deployments, logs, and teams through Vercel MCP.", defaultUrl: "https://mcp.vercel.com", urlEnv: "VERCEL_MCP_URL", tokenEnv: "VERCEL_MCP_TOKEN", write: true,
-        eventCatalog: ["deployment.created", "deployment.succeeded", "deployment.promoted", "deployment.error", "deployment.cancelled", "project.created", "project.removed", "project.renamed", "project.env.created", "project.env.updated", "project.env.deleted", "firewall.attack.detected"],
-        defaultEvents: ["deployment.created", "deployment.succeeded", "deployment.error", "deployment.cancelled"], eventMode: "api", eventScope: "principal"
-    }),
-    catalogEntry({
-        kind: "railway", displayName: "Railway", helper: "defineRailwayConnection", packageName: "@assemblyline-agents/railway",
-        description: "Railway projects, services, variables, and deployments through Railway MCP.", defaultUrl: "https://mcp.railway.com", urlEnv: "RAILWAY_MCP_URL", tokenEnv: "RAILWAY_MCP_TOKEN", write: true,
-        eventCatalog: ["deployment.changed", "alert.triggered"], defaultEvents: ["deployment.changed", "alert.triggered"], eventMode: "manual", eventScope: "connection"
-    }),
-    catalogEntry({ kind: "refero", displayName: "Refero", helper: "defineReferoConnection", description: "Refero design references, screens, and product flows through Refero MCP.", defaultUrl: "https://api.refero.design/mcp", urlEnv: "REFERO_MCP_URL", tokenEnv: "REFERO_MCP_BEARER_TOKEN" }),
-    catalogEntry({
-        kind: "agentmail",
-        displayName: "AgentMail",
-        helper: "defineAgentMailConnection",
-        description: "AgentMail inboxes, threads, messages, drafts, and attachments through the official hosted MCP server.",
-        defaultUrl: "https://mcp.agentmail.to/mcp",
-        urlEnv: "AGENTMAIL_MCP_URL",
-        tokenEnv: "AGENTMAIL_API_KEY",
-        tokenHeader: "x-api-key",
-        subject: "environment",
-        tools: {
-            allow: [
-                "list_inboxes",
-                "get_inbox",
-                "create_inbox",
-                "update_inbox",
-                "delete_inbox",
-                "list_threads",
-                "search_threads",
-                "get_thread",
-                "update_thread",
-                "delete_thread",
-                "list_messages",
-                "search_messages",
-                "send_message",
-                "reply_to_message",
-                "forward_message",
-                "update_message",
-                "create_draft",
-                "list_drafts",
-                "get_draft",
-                "update_draft",
-                "send_draft",
-                "delete_draft",
-                "get_attachment",
-                "auth_me"
-            ]
-        },
-        readToolPatterns: [
-            "list_inboxes",
-            "get_inbox",
-            "list_threads",
-            "search_threads",
-            "get_thread",
-            "list_messages",
-            "search_messages",
-            "list_drafts",
-            "get_draft",
-            "get_attachment",
-            "auth_me"
-        ],
-        writeToolPatterns: [
-            "create_inbox",
-            "update_inbox",
-            "delete_inbox",
-            "update_thread",
-            "delete_thread",
-            "send_message",
-            "reply_to_message",
-            "forward_message",
-            "update_message",
-            "create_draft",
-            "update_draft",
-            "send_draft",
-            "delete_draft"
-        ],
-        write: true,
-        eventCatalog: [
-            "message.received", "message.received.spam", "message.received.blocked",
-            "message.received.unauthenticated", "message.sent", "message.delivered",
-            "message.bounced", "message.complained", "message.rejected", "domain.verified"
-        ],
-        defaultEvents: ["message.received"],
-        eventMode: "api",
-        eventScope: "connection",
-        setupMessage: "Create an AgentMail API key, set AGENTMAIL_API_KEY on the Assembly Line runtime host, and keep inbox and sender scope owned by the provider account."
-    }),
-    catalogEntry({
-        kind: "resend",
-        displayName: "Resend",
-        helper: "defineResendConnection",
-        description: "Transactional email, broadcasts, contacts, domains, templates, automations, and delivery data through Resend's official hosted MCP server.",
-        defaultUrl: "https://mcp.resend.com/mcp",
-        urlEnv: "RESEND_MCP_URL",
-        tokenEnv: "RESEND_API_KEY",
-        subject: "environment",
-        tools: {
-            block: [
-                "connect-to-editor",
-                "create-api-key",
-                "create-webhook",
-                "get-webhook"
-            ]
-        },
-        readToolPatterns: ["regex:^(get|list)-"],
-        writeToolPatterns: [
-            "get-tiptap-json-content",
-            "regex:^(add|batch-add|batch-remove|cancel|compose|create|disconnect|duplicate|manage|publish|remove|revoke|send|update|verify)-"
-        ],
-        write: true,
-        eventCatalog: [
-            "email.sent", "email.delivered", "email.delivery_delayed", "email.failed",
-            "email.opened", "email.clicked", "email.bounced", "email.complained",
-            "email.received", "email.scheduled", "email.suppressed",
-            "domain.created", "domain.updated", "domain.deleted",
-            "contact.created", "contact.updated", "contact.deleted"
-        ],
-        defaultEvents: ["email.received", "email.delivered", "email.failed", "email.bounced"],
-        eventMode: "api",
-        eventScope: "connection",
-        setupMessage: "Create a team-scoped Resend API key, set RESEND_API_KEY on the Assembly Line runtime host, and verify the sending domain. Full-platform reads require a full_access key; restrict the connection's visible tools when using a sending_access key."
-    }),
-    catalogEntry({ kind: "agentcash", displayName: "AgentCash", helper: "defineAgentCashConnection", description: "Paid API discovery, schema, balance, and request tools through an AgentCash MCP bridge.", urlEnv: "AGENTCASH_MCP_URL", tokenEnv: "AGENTCASH_MCP_BRIDGE_TOKEN", write: true }),
-    catalogEntry({
-        kind: "treg",
-        displayName: "Treg",
-        helper: "defineTregConnection",
-        description: "External API discovery, pricing, balance, team inventory, and credential-injected calls through Treg's hosted tool catalog.",
-        defaultUrl: "https://treg.to/mcp/",
-        urlEnv: "TREG_MCP_URL",
-        tokenEnv: "TREG_TOKEN",
-        tools: {
-            allow: [
-                "catalog_search",
-                "catalog_get",
-                "catalog_request",
-                "call",
-                "balance",
-                "my_tools"
-            ]
-        },
-        readToolPatterns: ["catalog_search", "catalog_get", "balance", "my_tools"],
-        writeToolPatterns: ["catalog_request", "call"],
-        write: true,
-        setupMessage: "Create an organization-scoped or agent token in Treg, set TREG_TOKEN on the Assembly Line runtime, and review whether Treg writes require approval. The call tool can spend prepaid balance or mutate an upstream service."
-    }),
-    {
-        kind: "x",
-        role: "connection",
-        packageName: "@assemblyline-agents/x",
-        helper: "defineXConnection",
-        protocol: "http",
-        provider: "x",
-        description: "Connected X account identity, private bookmarks, and reviewed post or reply publishing through X API v2.",
-        defaultBaseUrl: "https://api.x.com/2",
-        baseUrlEnv: "X_API_BASE_URL",
-        requiredConfig: ["X_API_CLIENT_ID"],
-        optionalConfig: ["X_API_REDIRECT_URI", "X_API_BASE_URL"],
-        requiredCredentials: ["X_API_CLIENT_SECRET"],
-        optionalCredentials: [],
-        capabilities: ["http-api", "oauth", "pkce", "refresh-token", "live-tools", "bookmarks", "publishing"],
-        scopes: ["bookmark.read", "tweet.read", "tweet.write", "users.read", "offline.access"],
-        subject: "user",
-        tools: {
-            allow: ["x_get_authenticated_user", "x_list_bookmarks", "x_create_post"]
-        },
-        readToolPatterns: ["x_get_authenticated_user", "x_list_bookmarks"],
-        writeToolPatterns: ["x_create_post"],
-        setup: [{
-                kind: "connection",
-                name: "x-developer-configuration",
-                required: true,
-                message: "Create a confidential X OAuth 2.0 App, enable the reviewed bookmark and post scopes, set X_API_CLIENT_ID and X_API_CLIENT_SECRET, and register the Assembly Line connection callback URL. Authorization Code + PKCE stores a refreshable per-user grant; X API usage and costs remain developer-owned."
-            }]
-    },
-    {
-        kind: "dropbox",
-        role: "connection",
-        packageName: "@assemblyline-agents/dropbox",
-        helper: "defineDropboxConnection",
-        protocol: "http",
-        provider: "dropbox",
-        description: "Dropbox account, file and folder metadata, search, temporary content links, and reviewed file operations through the Dropbox API.",
-        defaultBaseUrl: "https://api.dropboxapi.com/2",
-        baseUrlEnv: "DROPBOX_API_BASE_URL",
-        requiredConfig: ["DROPBOX_APP_KEY"],
-        optionalConfig: ["DROPBOX_REDIRECT_URI", "DROPBOX_API_BASE_URL"],
-        requiredCredentials: ["DROPBOX_APP_SECRET"],
-        optionalCredentials: [],
-        capabilities: ["http-api", "oauth", "pkce", "refresh-token", "live-tools"],
-        scopes: [
-            "account_info.read",
-            "files.metadata.read",
-            "files.content.read",
-            "files.content.write",
-            "sharing.read",
-            "sharing.write"
-        ],
-        subject: "user",
-        tools: {
-            allow: [
-                "users_get_current_account",
-                "users_get_space_usage",
-                "files_get_metadata",
-                "files_list_folder",
-                "files_list_folder_continue",
-                "files_search_v2",
-                "files_search_continue_v2",
-                "files_get_temporary_link",
-                "sharing_list_shared_links",
-                "files_create_folder_v2",
-                "files_copy_v2",
-                "files_move_v2",
-                "files_delete_v2",
-                "sharing_create_shared_link_with_settings"
-            ]
-        },
-        readToolPatterns: [
-            "users_get_current_account",
-            "users_get_space_usage",
-            "files_get_metadata",
-            "files_list_folder",
-            "files_list_folder_continue",
-            "files_search_v2",
-            "files_search_continue_v2",
-            "files_get_temporary_link",
-            "sharing_list_shared_links"
-        ],
-        writeToolPatterns: [
-            "files_create_folder_v2",
-            "files_copy_v2",
-            "files_move_v2",
-            "files_delete_v2",
-            "sharing_create_shared_link_with_settings"
-        ],
-        setup: [{
-                kind: "connection",
-                name: "dropbox-developer-configuration",
-                required: true,
-                message: "Register one Dropbox API app, enable the scopes required by this connection, set DROPBOX_APP_KEY and DROPBOX_APP_SECRET, and register the Assembly Line connection callback URL. OAuth Authorization Code + PKCE requests offline access for refreshable user grants."
-            }]
-    },
-    {
-        kind: "soundcloud",
-        role: "connection",
-        packageName: "@assemblyline-agents/soundcloud",
-        helper: "defineSoundCloudConnection",
-        protocol: "openapi",
-        provider: "soundcloud",
-        description: "SoundCloud tracks, playlists, users, likes, follows, reposts, and comments through the official API.",
-        defaultSpec: "https://developers.soundcloud.com/docs/api/explorer/api.json",
-        defaultBaseUrl: "https://api.soundcloud.com",
-        requiredConfig: ["SOUNDCLOUD_CLIENT_ID"],
-        optionalConfig: ["SOUNDCLOUD_REDIRECT_URI"],
-        requiredCredentials: ["SOUNDCLOUD_CLIENT_SECRET"],
-        optionalCredentials: [],
-        capabilities: ["openapi", "oauth", "live-tools"],
-        scopes: [],
-        subject: "user",
-        tools: { block: ["post_tracks"] },
-        readToolPatterns: ["regex:^get_"],
-        writeToolPatterns: ["regex:^(post|put|patch|delete)_"],
-        setup: [{
-                kind: "connection",
-                name: "soundcloud-developer-configuration",
-                required: true,
-                message: "Register a SoundCloud application and set SOUNDCLOUD_CLIENT_ID and SOUNDCLOUD_CLIENT_SECRET. Assembly Line handles OAuth 2.1 PKCE; the developer owns the app and redirect URI."
-            }]
-    },
-    catalogEntry({
-        kind: "browser-use",
-        displayName: "Browser Use Cloud",
-        helper: "defineBrowserUseConnection",
-        description: "Hosted browser automation sessions through Browser Use Cloud MCP.",
-        defaultUrl: "https://api.browser-use.com/v3/mcp",
-        tokenEnv: "BROWSER_USE_API_KEY",
-        tokenHeader: "x-browser-use-api-key",
-        subject: "environment",
-        tools: { allow: ["get_session", "get_session_messages", "list_sessions", "list_browser_profiles", "run_session", "send_task", "stop_session"] },
-        readToolPatterns: ["get_session", "get_session_messages", "list_sessions", "list_browser_profiles"],
-        writeToolPatterns: ["run_session", "send_task", "stop_session"],
-        eventCatalog: ["agent.task.status_update"],
-        defaultEvents: ["agent.task.status_update"],
-        eventMode: "manual",
-        eventScope: "connection",
-        eventRequiredCredentials: ["BROWSER_USE_WEBHOOK_SECRET"],
-        setupMessage: "Set BROWSER_USE_API_KEY for the Assembly Line host. Browser profiles, cost limits, and write authority remain developer-controlled."
-    }),
-    catalogEntry({
-        kind: "orgo",
-        displayName: "Orgo",
-        helper: "defineOrgoConnection",
-        description: "Persistent Orgo cloud desktops controlled through a packaged, credential-scrubbing REST bridge.",
-        protocol: "sdk",
-        tokenEnv: "ORGO_API_KEY",
-        subject: "environment",
-        tools: {
-            allow: [
-                "list_workspaces",
-                "create_workspace",
-                "list_computers",
-                "get_computer",
-                "create_computer",
-                "delete_computer",
-                "start_computer",
-                "stop_computer",
-                "restart_computer",
-                "screenshot",
-                "click",
-                "drag",
-                "type_text",
-                "press_key",
-                "scroll",
-                "wait",
-                "execute_bash",
-                "execute_python",
-                "capture_file",
-                "credential_fill"
-            ]
-        },
-        readToolPatterns: [
-            "list_workspaces",
-            "list_computers",
-            "get_computer",
-            "screenshot",
-            "capture_file"
-        ],
-        writeToolPatterns: [
-            "create_workspace",
-            "create_computer",
-            "delete_computer",
-            "start_computer",
-            "stop_computer",
-            "restart_computer",
-            "click",
-            "drag",
-            "type_text",
-            "press_key",
-            "scroll",
-            "wait",
-            "execute_bash",
-            "execute_python",
-            "credential_fill"
-        ],
-        optionalConfig: ["ORGO_API_BASE_URL"],
-        setupMessage: "Set ORGO_API_KEY on the Assembly Line runtime host. The developer owns Orgo workspaces, account limits, auto-stop policy, login state, and billing; the packaged bridge strips VNC credentials from results."
-    }),
-    catalogEntry({
-        kind: "peekaboo",
-        displayName: "Peekaboo",
-        helper: "definePeekabooConnection",
-        description: "Same-host macOS accessibility and input automation through Peekaboo's stdio MCP server.",
-        transport: "stdio",
-        subject: "environment",
-        tools: { allow: ["inspect_ui", "list", "permissions", "click", "type", "hotkey", "scroll", "drag", "swipe", "move", "set_value", "perform_action", "app", "window", "menu", "dock", "dialog", "space"] },
-        hostRequirements: {
-            deployTargets: ["local"],
-            platforms: ["darwin"],
-            message: "Peekaboo is a same-host macOS connection. Run this agent with the local deploy target on the Mac being controlled; hosted Railway, Docker, Fly, and VPS deployments cannot reach back to that Mac."
-        },
-        readToolPatterns: ["inspect_ui", "list", "permissions"],
-        writeToolPatterns: ["click", "type", "hotkey", "scroll", "drag", "swipe", "move", "set_value", "perform_action", "app", "window", "menu", "dock", "dialog", "space"],
-        setupMessage: "Local deployment only: install Peekaboo on the Assembly Line Mac (macOS 15+), grant that host process Accessibility and Screen Recording permissions, and use the local deploy target. Hosted targets are rejected."
-    }),
-    catalogEntry({
-        kind: "computer-use",
-        displayName: "Assembly Line Computer Use",
-        helper: "defineComputerUseConnection",
-        description: "End-to-end encrypted accessibility and input automation on a paired Mac through the Assembly Line device relay.",
-        transport: "relay",
-        defaultUrl: "https://computer-use.artificialillumination.co/v1",
-        urlEnv: "ASSEMBLY_LINE_COMPUTER_USE_RELAY_URL",
-        relayCredential: "ASSEMBLY_LINE_COMPUTER_USE_BINDING",
-        subject: "environment",
-        tools: { allow: ["inspect_ui", "list", "permissions", "click", "type", "hotkey", "scroll", "drag", "swipe", "move", "set_value", "perform_action", "app", "window", "menu", "dock", "dialog", "space"] },
-        readToolPatterns: ["inspect_ui", "list", "permissions"],
-        writeToolPatterns: ["click", "type", "hotkey", "scroll", "drag", "swipe", "move", "set_value", "perform_action", "app", "window", "menu", "dock", "dialog", "space"],
-        setupMessage: "Install Assembly Line Agent Builder on the Mac, enable Computer Host, pair this deployment, and set the generated ASSEMBLY_LINE_COMPUTER_USE_BINDING secret on the remote runtime. The binding is device-scoped and must not be placed in prompts or source control."
-    }),
-    catalogEntry({
-        kind: "ffmpeg",
-        displayName: "FFmpeg",
-        helper: "defineFfmpegConnection",
-        description: "Workspace-scoped media inspection, trimming, transcoding, stitching, audio replacement, frame extraction, and vertical reframing through FFmpeg.",
-        transport: "stdio",
-        subject: "environment",
-        tools: {
-            allow: [
-                "probe_media",
-                "trim_media",
-                "transcode_media",
-                "concat_media",
-                "replace_audio",
-                "extract_frames",
-                "reframe_vertical"
-            ]
-        },
-        readToolPatterns: ["probe_media"],
-        writeToolPatterns: [
-            "trim_media",
-            "transcode_media",
-            "concat_media",
-            "replace_audio",
-            "extract_frames",
-            "reframe_vertical"
-        ],
-        setupMessage: "Install ffmpeg and ffprobe on the Assembly Line runtime host. The plugin keeps all media paths inside its configured workspace root and exposes typed operations instead of arbitrary FFmpeg flags."
-    }),
-    REMOTION_PLUGIN
-];
-function cloneToolFilter(filter) {
-    if (!filter)
-        return undefined;
-    if ("allow" in filter)
-        return { allow: [...filter.allow] };
-    if ("block" in filter)
-        return { block: [...filter.block] };
-    return { allOf: filter.allOf.map((child) => cloneToolFilter(child)) };
-}
-function cloneHostRequirements(requirements) {
-    return {
-        ...requirements,
-        ...(requirements.deployTargets ? { deployTargets: [...requirements.deployTargets] } : {}),
-        ...(requirements.platforms ? { platforms: [...requirements.platforms] } : {})
-    };
-}
-function cloneMetadata(entry) {
-    return {
-        ...entry,
-        requiredConfig: [...entry.requiredConfig],
-        optionalConfig: [...entry.optionalConfig],
-        requiredCredentials: [...entry.requiredCredentials],
-        optionalCredentials: [...entry.optionalCredentials],
-        capabilities: [...(entry.capabilities ?? [])],
-        scopes: [...(entry.scopes ?? [])],
-        readToolPatterns: [...entry.readToolPatterns],
-        writeToolPatterns: [...entry.writeToolPatterns],
-        ...(entry.tools ? { tools: cloneToolFilter(entry.tools) } : {}),
-        ...(entry.hostRequirements ? { hostRequirements: cloneHostRequirements(entry.hostRequirements) } : {})
-    };
-}
-function cloneToolPackMetadata(entry) {
-    return {
-        ...entry,
-        tools: entry.tools.map((tool) => ({ ...tool })),
-        ...(entry.config ? {
-            config: {
-                ...entry.config,
-                ...(entry.config.options ? { options: structuredClone(entry.config.options) } : {})
-            }
-        } : {}),
-        ...(entry.skills ? { skills: [...entry.skills] } : {}),
-        ...(entry.requiredConfig ? { requiredConfig: [...entry.requiredConfig] } : {}),
-        ...(entry.optionalConfig ? { optionalConfig: [...entry.optionalConfig] } : {}),
-        ...(entry.requiredCredentials ? { requiredCredentials: [...entry.requiredCredentials] } : {}),
-        ...(entry.optionalCredentials ? { optionalCredentials: [...entry.optionalCredentials] } : {}),
-        ...(entry.setup ? { setup: entry.setup.map((step) => ({ ...step })) } : {})
-    };
-}
 //# sourceMappingURL=plugin.js.map