@everworker/oneringai 0.2.1 → 0.2.3

package/dist/index.js

@@ -1,7 +1,7 @@
 import * as crypto2 from 'crypto';
 import { randomUUID } from 'crypto';
 import { importPKCS8, SignJWT } from 'jose';
-import * as fs16 from 'fs';
+import * as fs17 from 'fs';
 import { promises, existsSync } from 'fs';
 import { EventEmitter } from 'eventemitter3';
 import * as path2 from 'path';
@@ -19,7 +19,7 @@ import * as z from 'zod/v4';
 import spawn$1 from 'cross-spawn';
 import process2 from 'process';
 import { PassThrough } from 'stream';
-import * as fs15 from 'fs/promises';
+import * as fs16 from 'fs/promises';
 import { stat, readFile, mkdir, writeFile, readdir } from 'fs/promises';
 import * as simpleIcons from 'simple-icons';
 import { exec, spawn } from 'child_process';
@@ -308,6 +308,10 @@ var init_pkce = __esm({
 });
 
 // src/connectors/oauth/flows/AuthCodePKCE.ts
+function isPublicClientError(responseBody) {
+  const lower = responseBody.toLowerCase();
+  return lower.includes("aadsts700025") || lower.includes("invalid_client") && lower.includes("public");
+}
 var AuthCodePKCEFlow;
 var init_AuthCodePKCE = __esm({
   "src/connectors/oauth/flows/AuthCodePKCE.ts"() {
@@ -403,14 +407,32 @@ var init_AuthCodePKCE = __esm({
         if (this.config.usePKCE !== false && verifierData) {
           params.append("code_verifier", verifierData.verifier);
         }
-        const response = await fetch(this.config.tokenUrl, {
+        let response = await fetch(this.config.tokenUrl, {
           method: "POST",
           headers: {
             "Content-Type": "application/x-www-form-urlencoded"
           },
           body: params
         });
-        if (!response.ok) {
+        if (!response.ok && this.config.clientSecret) {
+          const errorText = await response.text();
+          if (isPublicClientError(errorText)) {
+            params.delete("client_secret");
+            response = await fetch(this.config.tokenUrl, {
+              method: "POST",
+              headers: {
+                "Content-Type": "application/x-www-form-urlencoded"
+              },
+              body: params
+            });
+            if (!response.ok) {
+              const retryError = await response.text();
+              throw new Error(`Token exchange failed: ${response.status} ${response.statusText} - ${retryError}`);
+            }
+          } else {
+            throw new Error(`Token exchange failed: ${response.status} ${response.statusText} - ${errorText}`);
+          }
+        } else if (!response.ok) {
           const error = await response.text();
           throw new Error(`Token exchange failed: ${response.status} ${response.statusText} - ${error}`);
         }
@@ -456,14 +478,32 @@ var init_AuthCodePKCE = __esm({
         if (this.config.clientSecret) {
           params.append("client_secret", this.config.clientSecret);
         }
-        const response = await fetch(this.config.tokenUrl, {
+        let response = await fetch(this.config.tokenUrl, {
           method: "POST",
           headers: {
             "Content-Type": "application/x-www-form-urlencoded"
           },
           body: params
         });
-        if (!response.ok) {
+        if (!response.ok && this.config.clientSecret) {
+          const errorText = await response.text();
+          if (isPublicClientError(errorText)) {
+            params.delete("client_secret");
+            response = await fetch(this.config.tokenUrl, {
+              method: "POST",
+              headers: {
+                "Content-Type": "application/x-www-form-urlencoded"
+              },
+              body: params
+            });
+            if (!response.ok) {
+              const retryError = await response.text();
+              throw new Error(`Token refresh failed: ${response.status} ${response.statusText} - ${retryError}`);
+            }
+          } else {
+            throw new Error(`Token refresh failed: ${response.status} ${response.statusText} - ${errorText}`);
+          }
+        } else if (!response.ok) {
           const error = await response.text();
           throw new Error(`Token refresh failed: ${response.status} ${response.statusText} - ${error}`);
         }
@@ -601,7 +641,7 @@ var init_JWTBearer = __esm({
           this.privateKey = config.privateKey;
         } else if (config.privateKeyPath) {
           try {
-            this.privateKey = fs16.readFileSync(config.privateKeyPath, "utf8");
+            this.privateKey = fs17.readFileSync(config.privateKeyPath, "utf8");
           } catch (error) {
             throw new Error(`Failed to read private key from ${config.privateKeyPath}: ${error.message}`);
           }
@@ -1252,10 +1292,10 @@ var init_Logger = __esm({
       initFileStream(filePath) {
         try {
           const dir = path2.dirname(filePath);
-          if (!fs16.existsSync(dir)) {
-            fs16.mkdirSync(dir, { recursive: true });
+          if (!fs17.existsSync(dir)) {
+            fs17.mkdirSync(dir, { recursive: true });
           }
-          this.fileStream = fs16.createWriteStream(filePath, {
+          this.fileStream = fs17.createWriteStream(filePath, {
             flags: "a",
             // append mode
             encoding: "utf8"
@@ -14592,12 +14632,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list, fs17, exportName) {
+    function addFormats(ajv, list, fs18, exportName) {
       var _a;
       var _b;
       (_a = (_b = ajv.opts.code).formats) !== null && _a !== void 0 ? _a : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list)
-        ajv.addFormat(f, fs17[f]);
+        ajv.addFormat(f, fs18[f]);
     }
     module.exports = exports$1 = formatsPlugin;
     Object.defineProperty(exports$1, "__esModule", { value: true });
@@ -16651,6 +16691,9 @@ var ToolManager = class extends EventEmitter {
       if (options.priority !== void 0) existing.priority = options.priority;
       if (options.conditions !== void 0) existing.conditions = options.conditions;
       if (options.permission !== void 0) existing.permission = options.permission;
+      if (options.tags !== void 0) existing.tags = options.tags;
+      if (options.category !== void 0) existing.category = options.category;
+      if (options.source !== void 0) existing.source = options.source;
       return;
     }
     const namespace = options.namespace ?? "default";
@@ -16669,7 +16712,10 @@ var ToolManager = class extends EventEmitter {
         successCount: 0,
         failureCount: 0
       },
-      permission: effectivePermission
+      permission: effectivePermission,
+      tags: options.tags,
+      category: options.category,
+      source: options.source
     };
     this.registry.set(name, registration);
     this.addToNamespace(name, namespace);
@@ -17252,6 +17298,9 @@ var ToolManager = class extends EventEmitter {
     const namespaces = {};
     const priorities = {};
     const permissions = {};
+    const tags = {};
+    const categories = {};
+    const sources = {};
     for (const [name, reg] of this.registry) {
       enabled[name] = reg.enabled;
       namespaces[name] = reg.namespace;
@@ -17259,8 +17308,17 @@ var ToolManager = class extends EventEmitter {
       if (reg.permission) {
         permissions[name] = reg.permission;
       }
+      if (reg.tags) {
+        tags[name] = reg.tags;
+      }
+      if (reg.category) {
+        categories[name] = reg.category;
+      }
+      if (reg.source) {
+        sources[name] = reg.source;
+      }
     }
-    return { enabled, namespaces, priorities, permissions };
+    return { enabled, namespaces, priorities, permissions, tags, categories, sources };
   }
   /**
    * Load state (restores enabled/disabled, namespaces, priorities, permissions)
@@ -17284,6 +17342,24 @@ var ToolManager = class extends EventEmitter {
         this.setPermission(name, permission);
       }
     }
+    if (state.tags) {
+      for (const [name, toolTags] of Object.entries(state.tags)) {
+        const reg = this.registry.get(name);
+        if (reg) reg.tags = toolTags;
+      }
+    }
+    if (state.categories) {
+      for (const [name, category] of Object.entries(state.categories)) {
+        const reg = this.registry.get(name);
+        if (reg) reg.category = category;
+      }
+    }
+    if (state.sources) {
+      for (const [name, source] of Object.entries(state.sources)) {
+        const reg = this.registry.get(name);
+        if (reg) reg.source = source;
+      }
+    }
   }
   // ==========================================================================
   // Private Helpers
@@ -28277,8 +28353,8 @@ init_constants();
       throw new Error("Configuration file not found. Searched: " + this.DEFAULT_PATHS.join(", "));
     }
     try {
-      const fs17 = __require("fs");
-      const content = fs17.readFileSync(configPath, "utf-8");
+      const fs18 = __require("fs");
+      const content = fs18.readFileSync(configPath, "utf-8");
       let config = JSON.parse(content);
       config = this.interpolateEnvVars(config);
       this.validate(config);
@@ -28307,10 +28383,10 @@ init_constants();
    * Find configuration file synchronously
    */
   static findConfigSync() {
-    const fs17 = __require("fs");
+    const fs18 = __require("fs");
     for (const path6 of this.DEFAULT_PATHS) {
       try {
-        fs17.accessSync(resolve(path6));
+        fs18.accessSync(resolve(path6));
         return resolve(path6);
       } catch {
       }
@@ -34471,7 +34547,7 @@ var OpenAISTTProvider = class extends BaseMediaProvider {
     if (Buffer.isBuffer(audio)) {
       return new File([new Uint8Array(audio)], "audio.wav", { type: "audio/wav" });
     } else if (typeof audio === "string") {
-      return fs16.createReadStream(audio);
+      return fs17.createReadStream(audio);
     } else {
       throw new Error("Invalid audio input: must be Buffer or file path");
     }
@@ -35024,7 +35100,7 @@ var TextToSpeech = class _TextToSpeech {
    */
   async toFile(text, filePath, options) {
     const response = await this.synthesize(text, options);
-    await fs15.writeFile(filePath, response.audio);
+    await fs16.writeFile(filePath, response.audio);
   }
   // ======================== Introspection Methods ========================
   /**
@@ -35372,7 +35448,7 @@ var SpeechToText = class _SpeechToText {
    * @param options - Optional transcription parameters
    */
   async transcribeFile(filePath, options) {
-    const audio = await fs15.readFile(filePath);
+    const audio = await fs16.readFile(filePath);
     return this.transcribe(audio, options);
   }
   /**
@@ -35698,7 +35774,7 @@ var OpenAIImageProvider = class extends BaseMediaProvider {
     if (Buffer.isBuffer(image)) {
       return new File([new Uint8Array(image)], "image.png", { type: "image/png" });
     }
-    return fs16.createReadStream(image);
+    return fs17.createReadStream(image);
   }
   /**
    * Handle OpenAI API errors
@@ -35845,8 +35921,8 @@ var GoogleImageProvider = class extends BaseMediaProvider {
     if (Buffer.isBuffer(image)) {
       imageBytes = image.toString("base64");
     } else {
-      const fs17 = await import('fs');
-      const buffer = fs17.readFileSync(image);
+      const fs18 = await import('fs');
+      const buffer = fs18.readFileSync(image);
       imageBytes = buffer.toString("base64");
     }
     return {
@@ -36007,7 +36083,7 @@ var GrokImageProvider = class extends BaseMediaProvider {
     if (Buffer.isBuffer(image)) {
       return new File([new Uint8Array(image)], "image.png", { type: "image/png" });
     }
-    return fs16.createReadStream(image);
+    return fs17.createReadStream(image);
   }
   /**
    * Handle API errors
@@ -37457,8 +37533,8 @@ var OpenAISoraProvider = class extends BaseMediaProvider {
       return new File([new Uint8Array(image)], "input.png", { type: "image/png" });
     }
     if (!image.startsWith("http")) {
-      const fs17 = await import('fs');
-      const data = fs17.readFileSync(image);
+      const fs18 = await import('fs');
+      const data = fs18.readFileSync(image);
       return new File([new Uint8Array(data)], "input.png", { type: "image/png" });
     }
     const response = await fetch(image);
@@ -37636,7 +37712,7 @@ var GoogleVeoProvider = class extends BaseMediaProvider {
           if (video.videoBytes) {
             buffer = Buffer.from(video.videoBytes, "base64");
           } else if (video.uri) {
-            const fs17 = await import('fs/promises');
+            const fs18 = await import('fs/promises');
             const os3 = await import('os');
             const path6 = await import('path');
             const tempDir = os3.tmpdir();
@@ -37647,11 +37723,11 @@ var GoogleVeoProvider = class extends BaseMediaProvider {
                 // Pass as GeneratedVideo
                 downloadPath: tempFile
               });
-              buffer = await fs17.readFile(tempFile);
-              await fs17.unlink(tempFile).catch(() => {
+              buffer = await fs18.readFile(tempFile);
+              await fs18.unlink(tempFile).catch(() => {
               });
             } catch (downloadError) {
-              await fs17.unlink(tempFile).catch(() => {
+              await fs18.unlink(tempFile).catch(() => {
               });
               throw new ProviderError(
                 "google",
@@ -37773,8 +37849,8 @@ var GoogleVeoProvider = class extends BaseMediaProvider {
     if (image.startsWith("http://") || image.startsWith("https://")) {
       return { imageUri: image };
     }
-    const fs17 = await import('fs/promises');
-    const data = await fs17.readFile(image);
+    const fs18 = await import('fs/promises');
+    const data = await fs18.readFile(image);
     return {
       imageBytes: data.toString("base64")
     };
@@ -38081,8 +38157,8 @@ var GrokImagineProvider = class extends BaseMediaProvider {
     if (image.startsWith("http") || image.startsWith("data:")) {
       return image;
     }
-    const fs17 = await import('fs');
-    const data = fs17.readFileSync(image);
+    const fs18 = await import('fs');
+    const data = fs18.readFileSync(image);
     const base64 = data.toString("base64");
     const ext = image.split(".").pop()?.toLowerCase() || "png";
     const mimeType = ext === "jpg" || ext === "jpeg" ? "image/jpeg" : `image/${ext}`;
@@ -42354,10 +42430,10 @@ var FileMediaStorage = class {
   }
   async save(data, metadata) {
     const dir = metadata.userId ? path2.join(this.outputDir, metadata.userId) : this.outputDir;
-    await fs15.mkdir(dir, { recursive: true });
+    await fs16.mkdir(dir, { recursive: true });
     const filename = metadata.suggestedFilename ?? this.generateFilename(metadata);
     const filePath = path2.join(dir, filename);
-    await fs15.writeFile(filePath, data);
+    await fs16.writeFile(filePath, data);
     const format = metadata.format.toLowerCase();
     const mimeType = MIME_TYPES2[format] ?? "application/octet-stream";
     return {
@@ -42368,7 +42444,7 @@ var FileMediaStorage = class {
   }
   async read(location) {
     try {
-      return await fs15.readFile(location);
+      return await fs16.readFile(location);
     } catch (err) {
       if (err.code === "ENOENT") {
         return null;
@@ -42378,7 +42454,7 @@ var FileMediaStorage = class {
   }
   async delete(location) {
     try {
-      await fs15.unlink(location);
+      await fs16.unlink(location);
     } catch (err) {
       if (err.code === "ENOENT") {
         return;
@@ -42388,7 +42464,7 @@ var FileMediaStorage = class {
   }
   async exists(location) {
     try {
-      await fs15.access(location);
+      await fs16.access(location);
       return true;
     } catch {
       return false;
@@ -42397,11 +42473,11 @@ var FileMediaStorage = class {
   async list(options) {
     await this.ensureDir();
     let entries = [];
-    const files = await fs15.readdir(this.outputDir);
+    const files = await fs16.readdir(this.outputDir);
     for (const file of files) {
       const filePath = path2.join(this.outputDir, file);
       try {
-        const stat6 = await fs15.stat(filePath);
+        const stat6 = await fs16.stat(filePath);
         if (!stat6.isFile()) continue;
         const ext = path2.extname(file).slice(1).toLowerCase();
         const mimeType = MIME_TYPES2[ext] ?? "application/octet-stream";
@@ -42441,7 +42517,7 @@ var FileMediaStorage = class {
   }
   async ensureDir() {
     if (!this.initialized) {
-      await fs15.mkdir(this.outputDir, { recursive: true });
+      await fs16.mkdir(this.outputDir, { recursive: true });
       this.initialized = true;
     }
   }
@@ -42449,6 +42525,230 @@ var FileMediaStorage = class {
 function createFileMediaStorage(config) {
   return new FileMediaStorage(config);
 }
+function getDefaultBaseDirectory4() {
+  const platform2 = process.platform;
+  if (platform2 === "win32") {
+    const appData = process.env.APPDATA || process.env.LOCALAPPDATA;
+    if (appData) {
+      return join(appData, "oneringai", "custom-tools");
+    }
+  }
+  return join(homedir(), ".oneringai", "custom-tools");
+}
+function sanitizeName(name) {
+  return name.replace(/[^a-zA-Z0-9_-]/g, "_").replace(/_+/g, "_").replace(/^_|_$/g, "").toLowerCase() || "default";
+}
+var FileCustomToolStorage = class {
+  baseDirectory;
+  indexPath;
+  prettyPrint;
+  index = null;
+  constructor(config = {}) {
+    this.baseDirectory = config.baseDirectory ?? getDefaultBaseDirectory4();
+    this.prettyPrint = config.prettyPrint ?? true;
+    this.indexPath = join(this.baseDirectory, "_index.json");
+  }
+  /**
+   * Save a custom tool definition
+   */
+  async save(definition) {
+    const sanitized = sanitizeName(definition.name);
+    const filePath = join(this.baseDirectory, `${sanitized}.json`);
+    await this.ensureDirectory(this.baseDirectory);
+    const data = this.prettyPrint ? JSON.stringify(definition, null, 2) : JSON.stringify(definition);
+    const tempPath = `${filePath}.tmp`;
+    try {
+      await promises.writeFile(tempPath, data, "utf-8");
+      await promises.rename(tempPath, filePath);
+    } catch (error) {
+      try {
+        await promises.unlink(tempPath);
+      } catch {
+      }
+      throw error;
+    }
+    await this.updateIndex(definition);
+  }
+  /**
+   * Load a custom tool definition by name
+   */
+  async load(name) {
+    const sanitized = sanitizeName(name);
+    const filePath = join(this.baseDirectory, `${sanitized}.json`);
+    try {
+      const data = await promises.readFile(filePath, "utf-8");
+      return JSON.parse(data);
+    } catch (error) {
+      if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+        return null;
+      }
+      if (error instanceof SyntaxError) {
+        return null;
+      }
+      throw error;
+    }
+  }
+  /**
+   * Delete a custom tool definition
+   */
+  async delete(name) {
+    const sanitized = sanitizeName(name);
+    const filePath = join(this.baseDirectory, `${sanitized}.json`);
+    try {
+      await promises.unlink(filePath);
+    } catch (error) {
+      if (error instanceof Error && "code" in error && error.code !== "ENOENT") {
+        throw error;
+      }
+    }
+    await this.removeFromIndex(name);
+  }
+  /**
+   * Check if a custom tool exists
+   */
+  async exists(name) {
+    const sanitized = sanitizeName(name);
+    const filePath = join(this.baseDirectory, `${sanitized}.json`);
+    try {
+      await promises.access(filePath);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  /**
+   * List custom tools (summaries only)
+   */
+  async list(options) {
+    const index = await this.loadIndex();
+    let entries = [...index.tools];
+    if (options?.tags && options.tags.length > 0) {
+      entries = entries.filter((e) => {
+        const entryTags = e.tags ?? [];
+        return options.tags.some((t) => entryTags.includes(t));
+      });
+    }
+    if (options?.category) {
+      entries = entries.filter((e) => e.category === options.category);
+    }
+    if (options?.search) {
+      const searchLower = options.search.toLowerCase();
+      entries = entries.filter(
+        (e) => e.name.toLowerCase().includes(searchLower) || e.description.toLowerCase().includes(searchLower)
+      );
+    }
+    entries.sort(
+      (a, b) => new Date(b.updatedAt).getTime() - new Date(a.updatedAt).getTime()
+    );
+    if (options?.offset) {
+      entries = entries.slice(options.offset);
+    }
+    if (options?.limit) {
+      entries = entries.slice(0, options.limit);
+    }
+    return entries.map((e) => ({
+      name: e.name,
+      displayName: e.displayName,
+      description: e.description,
+      createdAt: e.createdAt,
+      updatedAt: e.updatedAt,
+      metadata: {
+        tags: e.tags,
+        category: e.category
+      }
+    }));
+  }
+  /**
+   * Update metadata without loading full definition
+   */
+  async updateMetadata(name, metadata) {
+    const definition = await this.load(name);
+    if (!definition) {
+      throw new Error(`Custom tool '${name}' not found`);
+    }
+    definition.metadata = { ...definition.metadata, ...metadata };
+    definition.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+    await this.save(definition);
+  }
+  /**
+   * Get storage path
+   */
+  getPath() {
+    return this.baseDirectory;
+  }
+  // ==========================================================================
+  // Private Helpers
+  // ==========================================================================
+  async ensureDirectory(dir) {
+    try {
+      await promises.mkdir(dir, { recursive: true });
+    } catch (error) {
+      if (error instanceof Error && "code" in error && error.code !== "EEXIST") {
+        throw error;
+      }
+    }
+  }
+  async loadIndex() {
+    if (this.index) {
+      return this.index;
+    }
+    try {
+      const data = await promises.readFile(this.indexPath, "utf-8");
+      this.index = JSON.parse(data);
+      return this.index;
+    } catch (error) {
+      if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+        this.index = {
+          version: 1,
+          tools: [],
+          lastUpdated: (/* @__PURE__ */ new Date()).toISOString()
+        };
+        return this.index;
+      }
+      throw error;
+    }
+  }
+  async saveIndex() {
+    if (!this.index) return;
+    await this.ensureDirectory(this.baseDirectory);
+    this.index.lastUpdated = (/* @__PURE__ */ new Date()).toISOString();
+    const data = this.prettyPrint ? JSON.stringify(this.index, null, 2) : JSON.stringify(this.index);
+    await promises.writeFile(this.indexPath, data, "utf-8");
+  }
+  async updateIndex(definition) {
+    const index = await this.loadIndex();
+    const entry = this.definitionToIndexEntry(definition);
+    const existingIdx = index.tools.findIndex((e) => e.name === definition.name);
+    if (existingIdx >= 0) {
+      index.tools[existingIdx] = entry;
+    } else {
+      index.tools.push(entry);
+    }
+    await this.saveIndex();
+  }
+  async removeFromIndex(name) {
+    const index = await this.loadIndex();
+    index.tools = index.tools.filter((e) => e.name !== name);
+    await this.saveIndex();
+  }
+  definitionToIndexEntry(definition) {
+    return {
+      name: definition.name,
+      displayName: definition.displayName,
+      description: definition.description,
+      createdAt: definition.createdAt,
+      updatedAt: definition.updatedAt,
+      tags: definition.metadata?.tags,
+      category: definition.metadata?.category
+    };
+  }
+};
+function createFileCustomToolStorage(config) {
+  return new FileCustomToolStorage(config);
+}
+
+// src/domain/entities/CustomToolDefinition.ts
+var CUSTOM_TOOL_DEFINITION_VERSION = 1;
 
 // src/capabilities/agents/StreamHelpers.ts
 var StreamHelpers = class {
@@ -42896,6 +43196,23 @@ var SERVICE_DEFINITIONS = [
     baseURL: "https://api-m.paypal.com/v2",
     docsURL: "https://developer.paypal.com/docs/api/"
   },
+  {
+    id: "quickbooks",
+    name: "QuickBooks",
+    category: "payments",
+    urlPattern: /quickbooks\.api\.intuit\.com|intuit\.com.*quickbooks/i,
+    baseURL: "https://quickbooks.api.intuit.com/v3",
+    docsURL: "https://developer.intuit.com/app/developer/qbo/docs/api/accounting/all-entities/account",
+    commonScopes: ["com.intuit.quickbooks.accounting"]
+  },
+  {
+    id: "ramp",
+    name: "Ramp",
+    category: "payments",
+    urlPattern: /api\.ramp\.com/i,
+    baseURL: "https://api.ramp.com/developer/v1",
+    docsURL: "https://docs.ramp.com/reference"
+  },
   // ============ Cloud Providers ============
   {
     id: "aws",
@@ -43528,8 +43845,8 @@ var FileStorage = class {
   }
   async ensureDirectory() {
     try {
-      await fs15.mkdir(this.directory, { recursive: true });
-      await fs15.chmod(this.directory, 448);
+      await fs16.mkdir(this.directory, { recursive: true });
+      await fs16.chmod(this.directory, 448);
     } catch (error) {
     }
   }
@@ -43545,13 +43862,13 @@ var FileStorage = class {
     const filePath = this.getFilePath(key);
     const plaintext = JSON.stringify(token);
     const encrypted = encrypt(plaintext, this.encryptionKey);
-    await fs15.writeFile(filePath, encrypted, "utf8");
-    await fs15.chmod(filePath, 384);
+    await fs16.writeFile(filePath, encrypted, "utf8");
+    await fs16.chmod(filePath, 384);
   }
   async getToken(key) {
     const filePath = this.getFilePath(key);
     try {
-      const encrypted = await fs15.readFile(filePath, "utf8");
+      const encrypted = await fs16.readFile(filePath, "utf8");
       const decrypted = decrypt(encrypted, this.encryptionKey);
       return JSON.parse(decrypted);
     } catch (error) {
@@ -43560,7 +43877,7 @@ var FileStorage = class {
       }
       console.error("Failed to read/decrypt token file:", error);
       try {
-        await fs15.unlink(filePath);
+        await fs16.unlink(filePath);
       } catch {
       }
       return null;
@@ -43569,7 +43886,7 @@ var FileStorage = class {
   async deleteToken(key) {
     const filePath = this.getFilePath(key);
     try {
-      await fs15.unlink(filePath);
+      await fs16.unlink(filePath);
     } catch (error) {
       if (error.code !== "ENOENT") {
         throw error;
@@ -43579,7 +43896,7 @@ var FileStorage = class {
   async hasToken(key) {
     const filePath = this.getFilePath(key);
     try {
-      await fs15.access(filePath);
+      await fs16.access(filePath);
       return true;
     } catch {
       return false;
@@ -43590,7 +43907,7 @@ var FileStorage = class {
    */
   async listTokens() {
     try {
-      const files = await fs15.readdir(this.directory);
+      const files = await fs16.readdir(this.directory);
       return files.filter((f) => f.endsWith(".token")).map((f) => f.replace(".token", ""));
     } catch {
       return [];
@@ -43601,10 +43918,10 @@ var FileStorage = class {
    */
   async clearAll() {
     try {
-      const files = await fs15.readdir(this.directory);
+      const files = await fs16.readdir(this.directory);
       const tokenFiles = files.filter((f) => f.endsWith(".token"));
       await Promise.all(
-        tokenFiles.map((f) => fs15.unlink(path2.join(this.directory, f)).catch(() => {
+        tokenFiles.map((f) => fs16.unlink(path2.join(this.directory, f)).catch(() => {
         }))
       );
     } catch {
@@ -44031,14 +44348,14 @@ var FileConnectorStorage = class {
     await this.ensureDirectory();
     const filePath = this.getFilePath(name);
     const json = JSON.stringify(stored, null, 2);
-    await fs15.writeFile(filePath, json, "utf8");
-    await fs15.chmod(filePath, 384);
+    await fs16.writeFile(filePath, json, "utf8");
+    await fs16.chmod(filePath, 384);
     await this.updateIndex(name, "add");
   }
   async get(name) {
     const filePath = this.getFilePath(name);
     try {
-      const json = await fs15.readFile(filePath, "utf8");
+      const json = await fs16.readFile(filePath, "utf8");
       return JSON.parse(json);
     } catch (error) {
       const err = error;
@@ -44051,7 +44368,7 @@ var FileConnectorStorage = class {
   async delete(name) {
     const filePath = this.getFilePath(name);
     try {
-      await fs15.unlink(filePath);
+      await fs16.unlink(filePath);
       await this.updateIndex(name, "remove");
       return true;
     } catch (error) {
@@ -44065,7 +44382,7 @@ var FileConnectorStorage = class {
   async has(name) {
     const filePath = this.getFilePath(name);
     try {
-      await fs15.access(filePath);
+      await fs16.access(filePath);
       return true;
     } catch {
       return false;
@@ -44091,13 +44408,13 @@ var FileConnectorStorage = class {
    */
   async clear() {
     try {
-      const files = await fs15.readdir(this.directory);
+      const files = await fs16.readdir(this.directory);
       const connectorFiles = files.filter(
         (f) => f.endsWith(".connector.json") || f === "_index.json"
       );
       await Promise.all(
         connectorFiles.map(
-          (f) => fs15.unlink(path2.join(this.directory, f)).catch(() => {
+          (f) => fs16.unlink(path2.join(this.directory, f)).catch(() => {
           })
         )
       );
@@ -44124,8 +44441,8 @@ var FileConnectorStorage = class {
   async ensureDirectory() {
     if (this.initialized) return;
     try {
-      await fs15.mkdir(this.directory, { recursive: true });
-      await fs15.chmod(this.directory, 448);
+      await fs16.mkdir(this.directory, { recursive: true });
+      await fs16.chmod(this.directory, 448);
       this.initialized = true;
     } catch {
       this.initialized = true;
@@ -44136,7 +44453,7 @@ var FileConnectorStorage = class {
    */
   async loadIndex() {
     try {
-      const json = await fs15.readFile(this.indexPath, "utf8");
+      const json = await fs16.readFile(this.indexPath, "utf8");
       return JSON.parse(json);
     } catch {
       return { connectors: {} };
@@ -44154,8 +44471,8 @@ var FileConnectorStorage = class {
       delete index.connectors[hash];
     }
     const json = JSON.stringify(index, null, 2);
-    await fs15.writeFile(this.indexPath, json, "utf8");
-    await fs15.chmod(this.indexPath, 384);
+    await fs16.writeFile(this.indexPath, json, "utf8");
+    await fs16.chmod(this.indexPath, 384);
   }
 };
 
@@ -44321,7 +44638,9 @@ function getVendorInfo(vendorId) {
       name: a.name,
       type: a.type,
       description: a.description,
-      requiredFields: a.requiredFields
+      requiredFields: a.requiredFields,
+      scopes: a.scopes,
+      scopeDescriptions: a.scopeDescriptions
     }))
   };
 }
@@ -44337,7 +44656,9 @@ function listVendors() {
       name: a.name,
       type: a.type,
       description: a.description,
-      requiredFields: a.requiredFields
+      requiredFields: a.requiredFields,
+      scopes: a.scopes,
+      scopeDescriptions: a.scopeDescriptions
     }))
   }));
 }
@@ -44386,14 +44707,49 @@ var microsoftTemplate = {
       scopes: [
         "User.Read",
         "Mail.Read",
+        "Mail.ReadWrite",
         "Mail.Send",
-        "Files.ReadWrite",
         "Calendars.ReadWrite",
+        "Contacts.Read",
+        "Contacts.ReadWrite",
+        "Files.ReadWrite",
+        "Sites.Read.All",
+        "Sites.ReadWrite.All",
+        "Notes.Read",
+        "Notes.ReadWrite",
+        "Tasks.ReadWrite",
         "ChannelMessage.Send",
         "Team.ReadBasic.All",
         "Chat.ReadWrite",
+        "People.Read",
+        "Presence.Read",
+        "Directory.Read.All",
+        "BookingsAppointment.ReadWrite.All",
         "offline_access"
-      ]
+      ],
+      scopeDescriptions: {
+        "User.Read": "Read your profile",
+        "Mail.Read": "Read your email",
+        "Mail.ReadWrite": "Read and write your email",
+        "Mail.Send": "Send email on your behalf",
+        "Calendars.ReadWrite": "Read and write your calendar",
+        "Contacts.Read": "Read your contacts",
+        "Contacts.ReadWrite": "Read and write your contacts",
+        "Files.ReadWrite": "Read and write your files (OneDrive)",
+        "Sites.Read.All": "Read SharePoint sites",
+        "Sites.ReadWrite.All": "Read and write SharePoint sites",
+        "Notes.Read": "Read your OneNote notebooks",
+        "Notes.ReadWrite": "Read and write your OneNote notebooks",
+        "Tasks.ReadWrite": "Read and write your tasks (To Do / Planner)",
+        "ChannelMessage.Send": "Send messages in Teams channels",
+        "Team.ReadBasic.All": "Read Teams basic info",
+        "Chat.ReadWrite": "Read and write Teams chats",
+        "People.Read": "Read your relevant people list",
+        "Presence.Read": "Read user presence information",
+        "Directory.Read.All": "Read directory data (Azure AD)",
+        "BookingsAppointment.ReadWrite.All": "Manage Bookings appointments",
+        "offline_access": "Maintain access (refresh token)"
+      }
     },
     {
       id: "client-credentials",
@@ -44408,7 +44764,10 @@ var microsoftTemplate = {
         flow: "client_credentials",
         tokenUrl: "https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token"
       },
-      scopes: ["https://graph.microsoft.com/.default"]
+      scopes: ["https://graph.microsoft.com/.default"],
+      scopeDescriptions: {
+        "https://graph.microsoft.com/.default": "All permissions granted to the app registration"
+      }
     }
   ]
 };
@@ -44442,9 +44801,24 @@ var googleTemplate = {
         "https://www.googleapis.com/auth/drive",
         "https://www.googleapis.com/auth/calendar",
         "https://www.googleapis.com/auth/gmail.readonly",
+        "https://www.googleapis.com/auth/gmail.send",
         "https://www.googleapis.com/auth/spreadsheets",
-        "https://www.googleapis.com/auth/documents"
-      ]
+        "https://www.googleapis.com/auth/documents",
+        "https://www.googleapis.com/auth/contacts.readonly",
+        "https://www.googleapis.com/auth/tasks",
+        "https://www.googleapis.com/auth/admin.directory.user.readonly"
+      ],
+      scopeDescriptions: {
+        "https://www.googleapis.com/auth/drive": "Read and write Google Drive files",
+        "https://www.googleapis.com/auth/calendar": "Read and write Google Calendar",
+        "https://www.googleapis.com/auth/gmail.readonly": "Read Gmail messages",
+        "https://www.googleapis.com/auth/gmail.send": "Send Gmail messages",
+        "https://www.googleapis.com/auth/spreadsheets": "Read and write Google Sheets",
+        "https://www.googleapis.com/auth/documents": "Read and write Google Docs",
+        "https://www.googleapis.com/auth/contacts.readonly": "Read Google Contacts",
+        "https://www.googleapis.com/auth/tasks": "Read and write Google Tasks",
+        "https://www.googleapis.com/auth/admin.directory.user.readonly": "Read user directory (Admin)"
+      }
     },
     {
       id: "service-account",
@@ -44463,7 +44837,11 @@ var googleTemplate = {
       scopes: [
         "https://www.googleapis.com/auth/cloud-platform",
         "https://www.googleapis.com/auth/drive"
-      ]
+      ],
+      scopeDescriptions: {
+        "https://www.googleapis.com/auth/cloud-platform": "Full access to Google Cloud Platform",
+        "https://www.googleapis.com/auth/drive": "Read and write Google Drive files"
+      }
     }
   ]
 };
@@ -44505,7 +44883,19 @@ var slackTemplate = {
         authorizationUrl: "https://slack.com/oauth/v2/authorize",
         tokenUrl: "https://slack.com/api/oauth.v2.access"
       },
-      scopes: ["chat:write", "channels:read", "users:read", "im:write", "groups:read"]
+      scopes: ["chat:write", "channels:read", "users:read", "im:write", "groups:read", "files:read", "files:write", "reactions:read", "reactions:write", "team:read"],
+      scopeDescriptions: {
+        "chat:write": "Send messages as the app",
+        "channels:read": "View basic channel info",
+        "users:read": "View people in the workspace",
+        "im:write": "Send direct messages",
+        "groups:read": "View basic private channel info",
+        "files:read": "View files shared in channels",
+        "files:write": "Upload and manage files",
+        "reactions:read": "View emoji reactions",
+        "reactions:write": "Add and remove emoji reactions",
+        "team:read": "View workspace info"
+      }
     }
   ]
 };
@@ -44546,7 +44936,16 @@ var discordTemplate = {
         authorizationUrl: "https://discord.com/api/oauth2/authorize",
         tokenUrl: "https://discord.com/api/oauth2/token"
       },
-      scopes: ["identify", "guilds", "guilds.members.read", "messages.read"]
+      scopes: ["identify", "email", "guilds", "guilds.members.read", "messages.read", "bot", "connections"],
+      scopeDescriptions: {
+        "identify": "Access your username and avatar",
+        "email": "Access your email address",
+        "guilds": "View your server list",
+        "guilds.members.read": "Read server member info",
+        "messages.read": "Read messages in accessible channels",
+        "bot": "Add a bot to your servers",
+        "connections": "View your connected accounts"
+      }
     }
   ]
 };
@@ -44613,7 +45012,18 @@ var githubTemplate = {
         authorizationUrl: "https://github.com/login/oauth/authorize",
         tokenUrl: "https://github.com/login/oauth/access_token"
       },
-      scopes: ["repo", "read:user", "read:org", "workflow", "gist"]
+      scopes: ["repo", "read:user", "user:email", "read:org", "workflow", "gist", "notifications", "delete_repo", "admin:org"],
+      scopeDescriptions: {
+        "repo": "Full control of private repositories",
+        "read:user": "Read user profile data",
+        "user:email": "Access user email addresses",
+        "read:org": "Read org and team membership",
+        "workflow": "Update GitHub Actions workflows",
+        "gist": "Create and manage gists",
+        "notifications": "Access notifications",
+        "delete_repo": "Delete repositories",
+        "admin:org": "Full control of orgs and teams"
+      }
     },
     {
       id: "github-app",
@@ -44668,7 +45078,13 @@ var gitlabTemplate = {
         authorizationUrl: "https://gitlab.com/oauth/authorize",
         tokenUrl: "https://gitlab.com/oauth/token"
       },
-      scopes: ["api", "read_user", "read_repository", "write_repository"]
+      scopes: ["api", "read_user", "read_repository", "write_repository"],
+      scopeDescriptions: {
+        "api": "Full API access",
+        "read_user": "Read user profile",
+        "read_repository": "Read repository contents",
+        "write_repository": "Write to repositories"
+      }
     }
   ]
 };
@@ -44710,7 +45126,14 @@ var jiraTemplate = {
         authorizationUrl: "https://auth.atlassian.com/authorize",
         tokenUrl: "https://auth.atlassian.com/oauth/token"
       },
-      scopes: ["read:jira-work", "write:jira-work", "read:jira-user"]
+      scopes: ["read:jira-work", "write:jira-work", "read:jira-user", "manage:jira-project", "manage:jira-configuration"],
+      scopeDescriptions: {
+        "read:jira-work": "Read issues, projects, boards",
+        "write:jira-work": "Create and update issues",
+        "read:jira-user": "Read user information",
+        "manage:jira-project": "Manage projects and components",
+        "manage:jira-configuration": "Manage Jira settings"
+      }
     }
   ]
 };
@@ -44750,7 +45173,14 @@ var confluenceTemplate = {
         authorizationUrl: "https://auth.atlassian.com/authorize",
         tokenUrl: "https://auth.atlassian.com/oauth/token"
       },
-      scopes: ["read:confluence-content.all", "write:confluence-content", "read:confluence-space.summary"]
+      scopes: ["read:confluence-content.all", "write:confluence-content", "read:confluence-space.summary", "write:confluence-space", "read:confluence-user"],
+      scopeDescriptions: {
+        "read:confluence-content.all": "Read all pages and blog posts",
+        "write:confluence-content": "Create and update pages",
+        "read:confluence-space.summary": "Read space summaries",
+        "write:confluence-space": "Create and manage spaces",
+        "read:confluence-user": "Read user information"
+      }
     }
   ]
 };
@@ -44789,7 +45219,16 @@ var bitbucketTemplate = {
         authorizationUrl: "https://bitbucket.org/site/oauth2/authorize",
         tokenUrl: "https://bitbucket.org/site/oauth2/access_token"
       },
-      scopes: ["repository", "pullrequest", "account"]
+      scopes: ["repository", "repository:write", "pullrequest", "pullrequest:write", "account", "pipeline", "wiki"],
+      scopeDescriptions: {
+        "repository": "Read repositories",
+        "repository:write": "Write to repositories",
+        "pullrequest": "Read pull requests",
+        "pullrequest:write": "Create and update pull requests",
+        "account": "Read account information",
+        "pipeline": "Access Pipelines (CI/CD)",
+        "wiki": "Access repository wiki"
+      }
     }
   ]
 };
@@ -44829,7 +45268,12 @@ var trelloTemplate = {
         authorizationUrl: "https://trello.com/1/authorize",
         tokenUrl: "https://trello.com/1/OAuthGetAccessToken"
       },
-      scopes: ["read", "write", "account"]
+      scopes: ["read", "write", "account"],
+      scopeDescriptions: {
+        "read": "Read boards, lists, and cards",
+        "write": "Create and update boards, lists, and cards",
+        "account": "Read member information"
+      }
     }
   ]
 };
@@ -45024,7 +45468,15 @@ var salesforceTemplate = {
         authorizationUrl: "https://login.salesforce.com/services/oauth2/authorize",
         tokenUrl: "https://login.salesforce.com/services/oauth2/token"
       },
-      scopes: ["api", "refresh_token", "offline_access"]
+      scopes: ["api", "refresh_token", "offline_access", "chatter_api", "wave_api", "full"],
+      scopeDescriptions: {
+        "api": "Access and manage your data",
+        "refresh_token": "Maintain access with refresh tokens",
+        "offline_access": "Access data while you are offline",
+        "chatter_api": "Access Chatter feeds and posts",
+        "wave_api": "Access Analytics (Wave) API",
+        "full": "Full access to all data"
+      }
     },
     {
       id: "jwt-bearer",
@@ -45079,7 +45531,26 @@ var hubspotTemplate = {
         authorizationUrl: "https://app.hubspot.com/oauth/authorize",
         tokenUrl: "https://api.hubapi.com/oauth/v1/token"
       },
-      scopes: ["crm.objects.contacts.read", "crm.objects.contacts.write", "crm.objects.companies.read"]
+      scopes: [
+        "crm.objects.contacts.read",
+        "crm.objects.contacts.write",
+        "crm.objects.companies.read",
+        "crm.objects.companies.write",
+        "crm.objects.deals.read",
+        "crm.objects.deals.write",
+        "tickets",
+        "e-commerce"
+      ],
+      scopeDescriptions: {
+        "crm.objects.contacts.read": "Read contacts",
+        "crm.objects.contacts.write": "Create and update contacts",
+        "crm.objects.companies.read": "Read companies",
+        "crm.objects.companies.write": "Create and update companies",
+        "crm.objects.deals.read": "Read deals",
+        "crm.objects.deals.write": "Create and update deals",
+        "tickets": "Read and write support tickets",
+        "e-commerce": "Access e-commerce data (products, line items)"
+      }
     }
   ]
 };
@@ -45192,6 +45663,86 @@ var paypalTemplate = {
   ]
 };
 
+// src/connectors/vendors/templates/quickbooks.ts
+var quickbooksTemplate = {
+  id: "quickbooks",
+  name: "QuickBooks",
+  serviceType: "quickbooks",
+  baseURL: "https://quickbooks.api.intuit.com/v3",
+  docsURL: "https://developer.intuit.com/app/developer/qbo/docs/api/accounting/all-entities/account",
+  credentialsSetupURL: "https://developer.intuit.com/app/developer/dashboard",
+  category: "payments",
+  notes: "Use sandbox URL (sandbox-quickbooks.api.intuit.com) for testing. Requires company/realm ID in API paths.",
+  authTemplates: [
+    {
+      id: "oauth-user",
+      name: "OAuth (User Authorization)",
+      type: "oauth",
+      flow: "authorization_code",
+      description: "Standard OAuth 2.0 flow for accessing QuickBooks on behalf of a user. Create an app at developer.intuit.com",
+      requiredFields: ["clientId", "clientSecret", "redirectUri"],
+      optionalFields: ["scope"],
+      defaults: {
+        type: "oauth",
+        flow: "authorization_code",
+        authorizationUrl: "https://appcenter.intuit.com/connect/oauth2",
+        tokenUrl: "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer"
+      },
+      scopes: ["com.intuit.quickbooks.accounting", "com.intuit.quickbooks.payment"]
+    }
+  ]
+};
+
+// src/connectors/vendors/templates/ramp.ts
+var rampTemplate = {
+  id: "ramp",
+  name: "Ramp",
+  serviceType: "ramp",
+  baseURL: "https://api.ramp.com/developer/v1",
+  docsURL: "https://docs.ramp.com",
+  credentialsSetupURL: "https://app.ramp.com/settings/developer",
+  category: "payments",
+  authTemplates: [
+    {
+      id: "oauth-client-credentials",
+      name: "OAuth (Client Credentials)",
+      type: "oauth",
+      flow: "client_credentials",
+      description: "App-level authentication using client credentials. Create an API application in Ramp developer settings",
+      requiredFields: ["clientId", "clientSecret"],
+      defaults: {
+        type: "oauth",
+        flow: "client_credentials",
+        tokenUrl: "https://api.ramp.com/developer/v1/token"
+      }
+    },
+    {
+      id: "oauth-user",
+      name: "OAuth (User Authorization)",
+      type: "oauth",
+      flow: "authorization_code",
+      description: "OAuth 2.0 authorization code flow for accessing Ramp on behalf of a user",
+      requiredFields: ["clientId", "clientSecret", "redirectUri"],
+      optionalFields: ["scope"],
+      defaults: {
+        type: "oauth",
+        flow: "authorization_code",
+        authorizationUrl: "https://app.ramp.com/v1/authorize",
+        tokenUrl: "https://api.ramp.com/developer/v1/token"
+      },
+      scopes: [
+        "transactions:read",
+        "users:read",
+        "users:write",
+        "cards:read",
+        "cards:write",
+        "departments:read",
+        "reimbursements:read"
+      ]
+    }
+  ]
+};
+
 // src/connectors/vendors/templates/aws.ts
 var awsTemplate = {
   id: "aws",
@@ -45244,7 +45795,16 @@ var dropboxTemplate = {
         tokenUrl: "https://api.dropboxapi.com/oauth2/token",
         usePKCE: true
       },
-      scopes: ["files.content.read", "files.content.write", "files.metadata.read"]
+      scopes: ["files.content.read", "files.content.write", "files.metadata.read", "files.metadata.write", "sharing.read", "sharing.write", "account_info.read"],
+      scopeDescriptions: {
+        "files.content.read": "Read file contents",
+        "files.content.write": "Upload and modify files",
+        "files.metadata.read": "Read file and folder metadata",
+        "files.metadata.write": "Modify file and folder metadata",
+        "sharing.read": "View sharing settings",
+        "sharing.write": "Manage sharing settings",
+        "account_info.read": "Read account information"
+      }
     }
   ]
 };
@@ -45272,6 +45832,13 @@ var boxTemplate = {
         flow: "authorization_code",
         authorizationUrl: "https://account.box.com/api/oauth2/authorize",
         tokenUrl: "https://api.box.com/oauth2/token"
+      },
+      scopes: ["root_readwrite", "manage_users", "manage_groups", "manage_enterprise"],
+      scopeDescriptions: {
+        "root_readwrite": "Read and write all files and folders",
+        "manage_users": "Manage enterprise users",
+        "manage_groups": "Manage enterprise groups",
+        "manage_enterprise": "Manage enterprise settings"
       }
     },
     {
@@ -45448,6 +46015,11 @@ var pagerdutyTemplate = {
         flow: "authorization_code",
         authorizationUrl: "https://app.pagerduty.com/oauth/authorize",
         tokenUrl: "https://app.pagerduty.com/oauth/token"
+      },
+      scopes: ["read", "write"],
+      scopeDescriptions: {
+        "read": "Read incidents, services, and schedules",
+        "write": "Create and update incidents and services"
       }
     }
   ]
@@ -45486,6 +46058,14 @@ var sentryTemplate = {
         flow: "authorization_code",
         authorizationUrl: "https://sentry.io/oauth/authorize/",
         tokenUrl: "https://sentry.io/oauth/token/"
+      },
+      scopes: ["project:read", "project:write", "event:read", "org:read", "member:read"],
+      scopeDescriptions: {
+        "project:read": "Read project settings",
+        "project:write": "Manage project settings",
+        "event:read": "Read error events and issues",
+        "org:read": "Read organization info",
+        "member:read": "Read org member info"
       }
     }
   ]
@@ -45683,7 +46263,13 @@ var zendeskTemplate = {
         authorizationUrl: "https://{subdomain}.zendesk.com/oauth/authorizations/new",
         tokenUrl: "https://{subdomain}.zendesk.com/oauth/tokens"
       },
-      scopes: ["read", "write", "tickets:read", "tickets:write"]
+      scopes: ["read", "write", "tickets:read", "tickets:write"],
+      scopeDescriptions: {
+        "read": "Read all resources",
+        "write": "Create and update resources",
+        "tickets:read": "Read support tickets",
+        "tickets:write": "Create and update tickets"
+      }
     }
   ]
 };
@@ -45761,7 +46347,19 @@ var shopifyTemplate = {
         authorizationUrl: "https://{subdomain}.myshopify.com/admin/oauth/authorize",
         tokenUrl: "https://{subdomain}.myshopify.com/admin/oauth/access_token"
       },
-      scopes: ["read_products", "write_products", "read_orders", "write_orders"]
+      scopes: ["read_products", "write_products", "read_orders", "write_orders", "read_customers", "write_customers", "read_inventory", "write_inventory", "read_fulfillments", "write_fulfillments"],
+      scopeDescriptions: {
+        "read_products": "Read products and collections",
+        "write_products": "Create and update products",
+        "read_orders": "Read orders and transactions",
+        "write_orders": "Create and update orders",
+        "read_customers": "Read customer information",
+        "write_customers": "Create and update customers",
+        "read_inventory": "Read inventory levels",
+        "write_inventory": "Update inventory levels",
+        "read_fulfillments": "Read fulfillment data",
+        "write_fulfillments": "Create and update fulfillments"
+      }
     }
   ]
 };
@@ -45794,6 +46392,8 @@ var allVendorTemplates = [
   // Payments
   stripeTemplate,
   paypalTemplate,
+  quickbooksTemplate,
+  rampTemplate,
   // Cloud
   awsTemplate,
   // Storage
@@ -45856,6 +46456,9 @@ var VENDOR_ICON_MAP = {
   // Payments
   stripe: "stripe",
   paypal: "paypal",
+  quickbooks: "quickbooks",
+  ramp: null,
+  // No Simple Icon available
   // Email
   sendgrid: "sendgrid",
   mailchimp: "mailchimp",
@@ -45902,6 +46505,8 @@ var FALLBACK_PLACEHOLDERS = {
   // Email (trademark removed)
   sendgrid: { color: "#1A82E2", letter: "S" },
   postmark: { color: "#FFDE00", letter: "P" },
+  // Payments (no Simple Icon available)
+  ramp: { color: "#F2C94C", letter: "R" },
   // Search (no Simple Icon available)
   serper: { color: "#4A90A4", letter: "S" },
   tavily: { color: "#7C3AED", letter: "T" },
@@ -46322,8 +46927,8 @@ function createMessageWithImages(text, imageUrls, role = "user" /* USER */) {
 var execAsync = promisify(exec);
 function cleanupTempFile(filePath) {
   try {
-    if (fs16.existsSync(filePath)) {
-      fs16.unlinkSync(filePath);
+    if (fs17.existsSync(filePath)) {
+      fs17.unlinkSync(filePath);
     }
   } catch {
   }
@@ -46374,7 +46979,7 @@ async function readClipboardImageMac() {
         end try
       `;
       const { stdout } = await execAsync(`osascript -e '${script}'`);
-      if (stdout.includes("success") || fs16.existsSync(tempFile)) {
+      if (stdout.includes("success") || fs17.existsSync(tempFile)) {
         return await convertFileToDataUri(tempFile);
       }
       return {
@@ -46391,14 +46996,14 @@ async function readClipboardImageLinux() {
   try {
     try {
       await execAsync(`xclip -selection clipboard -t image/png -o > "${tempFile}"`);
-      if (fs16.existsSync(tempFile) && fs16.statSync(tempFile).size > 0) {
+      if (fs17.existsSync(tempFile) && fs17.statSync(tempFile).size > 0) {
         return await convertFileToDataUri(tempFile);
       }
     } catch {
     }
     try {
       await execAsync(`wl-paste -t image/png > "${tempFile}"`);
-      if (fs16.existsSync(tempFile) && fs16.statSync(tempFile).size > 0) {
+      if (fs17.existsSync(tempFile) && fs17.statSync(tempFile).size > 0) {
         return await convertFileToDataUri(tempFile);
       }
     } catch {
@@ -46425,7 +47030,7 @@ async function readClipboardImageWindows() {
       }
     `;
     await execAsync(`powershell -Command "${psScript}"`);
-    if (fs16.existsSync(tempFile) && fs16.statSync(tempFile).size > 0) {
+    if (fs17.existsSync(tempFile) && fs17.statSync(tempFile).size > 0) {
       return await convertFileToDataUri(tempFile);
     }
     return {
@@ -46438,7 +47043,7 @@ async function readClipboardImageWindows() {
 }
 async function convertFileToDataUri(filePath) {
   try {
-    const imageBuffer = fs16.readFileSync(filePath);
+    const imageBuffer = fs17.readFileSync(filePath);
     const base64Image = imageBuffer.toString("base64");
     const magic = imageBuffer.slice(0, 4).toString("hex");
     let mimeType = "image/png";
@@ -46694,6 +47299,13 @@ __export(tools_exports, {
   bash: () => bash,
   createBashTool: () => createBashTool,
   createCreatePRTool: () => createCreatePRTool,
+  createCustomToolDelete: () => createCustomToolDelete,
+  createCustomToolDraft: () => createCustomToolDraft,
+  createCustomToolList: () => createCustomToolList,
+  createCustomToolLoad: () => createCustomToolLoad,
+  createCustomToolMetaTools: () => createCustomToolMetaTools,
+  createCustomToolSave: () => createCustomToolSave,
+  createCustomToolTest: () => createCustomToolTest,
   createDesktopGetCursorTool: () => createDesktopGetCursorTool,
   createDesktopGetScreenSizeTool: () => createDesktopGetScreenSizeTool,
   createDesktopKeyboardKeyTool: () => createDesktopKeyboardKeyTool,
@@ -46724,6 +47336,12 @@ __export(tools_exports, {
   createWebScrapeTool: () => createWebScrapeTool,
   createWebSearchTool: () => createWebSearchTool,
   createWriteFileTool: () => createWriteFileTool,
+  customToolDelete: () => customToolDelete,
+  customToolDraft: () => customToolDraft,
+  customToolList: () => customToolList,
+  customToolLoad: () => customToolLoad,
+  customToolSave: () => customToolSave,
+  customToolTest: () => customToolTest,
   desktopGetCursor: () => desktopGetCursor,
   desktopGetScreenSize: () => desktopGetScreenSize,
   desktopKeyboardKey: () => desktopKeyboardKey,
@@ -46738,6 +47356,7 @@ __export(tools_exports, {
   desktopWindowList: () => desktopWindowList,
   developerTools: () => developerTools,
   editFile: () => editFile,
+  executeInVM: () => executeInVM,
   executeJavaScript: () => executeJavaScript,
   expandTilde: () => expandTilde,
   getAllBuiltInTools: () => getAllBuiltInTools,
@@ -46752,6 +47371,7 @@ __export(tools_exports, {
   getToolsRequiringConnector: () => getToolsRequiringConnector,
   glob: () => glob,
   grep: () => grep,
+  hydrateCustomTool: () => hydrateCustomTool,
   isBlockedCommand: () => isBlockedCommand,
   isExcludedExtension: () => isExcludedExtension,
   jsonManipulator: () => jsonManipulator,
@@ -51659,6 +52279,498 @@ var desktopTools = [
   desktopWindowFocus
 ];
 
+// src/tools/custom-tools/customToolDelete.ts
+function createCustomToolDelete(storage) {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "custom_tool_delete",
+        description: "Delete a custom tool from persistent storage.",
+        parameters: {
+          type: "object",
+          properties: {
+            name: {
+              type: "string",
+              description: "Name of the tool to delete"
+            }
+          },
+          required: ["name"]
+        }
+      }
+    },
+    permission: { scope: "session", riskLevel: "medium" },
+    execute: async (args) => {
+      try {
+        const exists = await storage.exists(args.name);
+        if (!exists) {
+          return { success: false, name: args.name, error: `Custom tool '${args.name}' not found` };
+        }
+        await storage.delete(args.name);
+        return { success: true, name: args.name };
+      } catch (error) {
+        return { success: false, name: args.name, error: error.message };
+      }
+    },
+    describeCall: (args) => args.name
+  };
+}
+var customToolDelete = createCustomToolDelete(new FileCustomToolStorage());
+
+// src/tools/custom-tools/sandboxDescription.ts
+init_Connector();
+function formatConnectorEntry2(c) {
+  const parts = [];
+  const serviceOrVendor = c.serviceType ?? c.vendor ?? void 0;
+  if (serviceOrVendor) parts.push(`Service: ${serviceOrVendor}`);
+  if (c.config.description) parts.push(c.config.description);
+  if (c.baseURL) parts.push(`URL: ${c.baseURL}`);
+  const details = parts.map((p) => `     ${p}`).join("\n");
+  return `   \u2022 "${c.name}" (${c.displayName})
+${details}`;
+}
+function buildConnectorList(context) {
+  const registry = context?.connectorRegistry ?? Connector.asRegistry();
+  const connectors = registry.listAll();
+  if (connectors.length === 0) {
+    return "   No connectors registered.";
+  }
+  return connectors.map(formatConnectorEntry2).join("\n\n");
+}
+var SANDBOX_API_REFERENCE = `SANDBOX API (available inside custom tool code):
+
+1. authenticatedFetch(url, options, connectorName)
+   Makes authenticated HTTP requests using the connector's credentials.
+   Auth headers are added automatically \u2014 DO NOT set Authorization header manually.
+
+   Parameters:
+     \u2022 url: Full URL or path relative to the connector's base URL
+       - Full: "https://api.github.com/user/repos"
+       - Relative: "/user/repos" (resolved against connector's base URL)
+     \u2022 options: Standard fetch options { method, headers, body }
+       - For POST/PUT: set body to JSON.stringify(data) and headers to { 'Content-Type': 'application/json' }
+     \u2022 connectorName: Name of a registered connector (see REGISTERED CONNECTORS below)
+
+   Returns: Promise<Response>
+     \u2022 response.ok \u2014 true if status 200-299
+     \u2022 response.status \u2014 HTTP status code
+     \u2022 await response.json() \u2014 parse JSON body
+     \u2022 await response.text() \u2014 get text body
+
+2. fetch(url, options) \u2014 Standard fetch without authentication
+
+3. connectors.list() \u2014 Array of available connector names
+4. connectors.get(name) \u2014 Connector info: { displayName, description, baseURL, serviceType }
+
+VARIABLES:
+   \u2022 input \u2014 the tool's input arguments (matches inputSchema)
+   \u2022 output \u2014 SET THIS to return the tool's result to the caller
+
+GLOBALS: console.log/error/warn, JSON, Math, Date, Buffer, Promise, Array, Object, String, Number, Boolean, setTimeout, setInterval, URL, URLSearchParams, RegExp, Map, Set, Error, TextEncoder, TextDecoder
+
+LIMITS: No file system access, no require/import. Code runs in async context (await is available).`;
+function buildDraftDescription(context) {
+  const connectorList = buildConnectorList(context);
+  return `Validate a draft custom tool definition. Checks name format, schema structure, and code syntax.
+
+When writing the "code" field, you have access to the full VM sandbox:
+
+${SANDBOX_API_REFERENCE}
+
+REGISTERED CONNECTORS:
+${connectorList}
+
+CODE EXAMPLES:
+
+// Simple data processing tool
+const items = input.data;
+output = items.filter(i => i.score > 0.8).sort((a, b) => b.score - a.score);
+
+// API tool using a connector
+const resp = await authenticatedFetch('/user/repos', { method: 'GET' }, 'github');
+const repos = await resp.json();
+output = repos.map(r => ({ name: r.full_name, stars: r.stargazers_count }));
+
+// Tool that chains multiple API calls
+const users = await (await authenticatedFetch('/users', {}, 'my-api')).json();
+const enriched = await Promise.all(users.map(async u => {
+  const details = await (await authenticatedFetch(\`/users/\${u.id}\`, {}, 'my-api')).json();
+  return { ...u, ...details };
+}));
+output = enriched;`;
+}
+function buildTestDescription(context) {
+  const connectorList = buildConnectorList(context);
+  return `Test custom tool code by executing it in the VM sandbox with provided test input. Returns execution result, captured logs, and timing.
+
+The code runs in the same sandbox as execute_javascript:
+
+${SANDBOX_API_REFERENCE}
+
+REGISTERED CONNECTORS:
+${connectorList}
+
+The testInput you provide will be available as the \`input\` variable in the code.
+Set \`output\` to the value you want returned.`;
+}
+
+// src/tools/custom-tools/customToolDraft.ts
+var NAME_PATTERN = /^[a-z][a-z0-9_]*$/;
+function createCustomToolDraft() {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "custom_tool_draft",
+        description: "Validate a draft custom tool definition. Checks name format, schema structure, and code syntax.",
+        parameters: {
+          type: "object",
+          properties: {
+            name: {
+              type: "string",
+              description: 'Tool name (lowercase, underscores, must start with letter). Example: "fetch_weather"'
+            },
+            description: {
+              type: "string",
+              description: "What the tool does"
+            },
+            inputSchema: {
+              type: "object",
+              description: 'JSON Schema for the tool input (must have type: "object")'
+            },
+            outputSchema: {
+              type: "object",
+              description: "Optional JSON Schema for the tool output (documentation only)"
+            },
+            code: {
+              type: "string",
+              description: "JavaScript code that reads `input` and sets `output`. Runs in the same sandbox as execute_javascript. See tool description for full API reference."
+            },
+            tags: {
+              type: "array",
+              description: "Optional tags for categorization",
+              items: { type: "string" }
+            },
+            connectorName: {
+              type: "string",
+              description: "Optional connector name if the tool requires API access"
+            }
+          },
+          required: ["name", "description", "inputSchema", "code"]
+        }
+      }
+    },
+    descriptionFactory: (context) => buildDraftDescription(context),
+    permission: { scope: "always", riskLevel: "low" },
+    execute: async (args) => {
+      const errors = [];
+      if (!args.name || typeof args.name !== "string") {
+        errors.push("name is required and must be a string");
+      } else if (!NAME_PATTERN.test(args.name)) {
+        errors.push(
+          `name "${args.name}" is invalid. Must match /^[a-z][a-z0-9_]*$/ (lowercase, underscores, start with letter)`
+        );
+      }
+      if (!args.description || typeof args.description !== "string" || args.description.trim().length === 0) {
+        errors.push("description is required and must be a non-empty string");
+      }
+      if (!args.inputSchema || typeof args.inputSchema !== "object") {
+        errors.push("inputSchema is required and must be an object");
+      } else if (args.inputSchema.type !== "object") {
+        errors.push('inputSchema.type must be "object"');
+      }
+      if (!args.code || typeof args.code !== "string" || args.code.trim().length === 0) {
+        errors.push("code is required and must be a non-empty string");
+      } else {
+        try {
+          new Function(args.code);
+        } catch (e) {
+          errors.push(`code has syntax error: ${e.message}`);
+        }
+      }
+      if (errors.length > 0) {
+        return { success: false, errors };
+      }
+      return {
+        success: true,
+        validated: {
+          name: args.name,
+          description: args.description,
+          inputSchema: args.inputSchema,
+          outputSchema: args.outputSchema,
+          code: args.code,
+          tags: args.tags,
+          connectorName: args.connectorName
+        }
+      };
+    },
+    describeCall: (args) => args.name ?? "unknown"
+  };
+}
+var customToolDraft = createCustomToolDraft();
+
+// src/tools/custom-tools/customToolList.ts
+function createCustomToolList(storage) {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "custom_tool_list",
+        description: "List saved custom tools from persistent storage. Supports filtering by search text, tags, and category.",
+        parameters: {
+          type: "object",
+          properties: {
+            search: {
+              type: "string",
+              description: "Search text (case-insensitive substring match on name + description)"
+            },
+            tags: {
+              type: "array",
+              description: "Filter by tags (any match)",
+              items: { type: "string" }
+            },
+            category: {
+              type: "string",
+              description: "Filter by category"
+            },
+            limit: {
+              type: "number",
+              description: "Maximum number of results"
+            },
+            offset: {
+              type: "number",
+              description: "Offset for pagination"
+            }
+          }
+        }
+      }
+    },
+    permission: { scope: "always", riskLevel: "low" },
+    execute: async (args) => {
+      const tools = await storage.list({
+        search: args.search,
+        tags: args.tags,
+        category: args.category,
+        limit: args.limit,
+        offset: args.offset
+      });
+      return { tools, total: tools.length };
+    },
+    describeCall: (args) => args.search ?? "all tools"
+  };
+}
+var customToolList = createCustomToolList(new FileCustomToolStorage());
+
+// src/tools/custom-tools/customToolLoad.ts
+function createCustomToolLoad(storage) {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "custom_tool_load",
+        description: "Load a full custom tool definition from storage (including code). Use this to inspect, modify, or hydrate a saved tool.",
+        parameters: {
+          type: "object",
+          properties: {
+            name: {
+              type: "string",
+              description: "Name of the tool to load"
+            }
+          },
+          required: ["name"]
+        }
+      }
+    },
+    permission: { scope: "always", riskLevel: "low" },
+    execute: async (args) => {
+      const tool = await storage.load(args.name);
+      if (!tool) {
+        return { success: false, error: `Custom tool '${args.name}' not found` };
+      }
+      return { success: true, tool };
+    },
+    describeCall: (args) => args.name
+  };
+}
+var customToolLoad = createCustomToolLoad(new FileCustomToolStorage());
+
+// src/tools/custom-tools/customToolSave.ts
+function createCustomToolSave(storage) {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "custom_tool_save",
+        description: "Save a custom tool definition to persistent storage. The tool can later be loaded, hydrated, and registered on any agent.",
+        parameters: {
+          type: "object",
+          properties: {
+            name: {
+              type: "string",
+              description: "Tool name (must match /^[a-z][a-z0-9_]*$/)"
+            },
+            description: {
+              type: "string",
+              description: "What the tool does"
+            },
+            displayName: {
+              type: "string",
+              description: "Optional human-readable display name"
+            },
+            inputSchema: {
+              type: "object",
+              description: "JSON Schema for input parameters"
+            },
+            outputSchema: {
+              type: "object",
+              description: "Optional JSON Schema for output"
+            },
+            code: {
+              type: "string",
+              description: "JavaScript code (same sandbox as execute_javascript)"
+            },
+            tags: {
+              type: "array",
+              description: "Tags for categorization",
+              items: { type: "string" }
+            },
+            category: {
+              type: "string",
+              description: "Category grouping"
+            },
+            generationPrompt: {
+              type: "string",
+              description: "The prompt that was used to generate this tool (for reference)"
+            },
+            connectorNames: {
+              type: "array",
+              description: "Connector names this tool uses",
+              items: { type: "string" }
+            }
+          },
+          required: ["name", "description", "inputSchema", "code"]
+        }
+      }
+    },
+    permission: { scope: "session", riskLevel: "medium" },
+    execute: async (args) => {
+      try {
+        const now = (/* @__PURE__ */ new Date()).toISOString();
+        const existing = await storage.load(args.name);
+        const definition = {
+          version: CUSTOM_TOOL_DEFINITION_VERSION,
+          name: args.name,
+          displayName: args.displayName,
+          description: args.description,
+          inputSchema: args.inputSchema,
+          outputSchema: args.outputSchema,
+          code: args.code,
+          createdAt: existing?.createdAt ?? now,
+          updatedAt: now,
+          metadata: {
+            tags: args.tags,
+            category: args.category,
+            generationPrompt: args.generationPrompt,
+            connectorNames: args.connectorNames,
+            requiresConnector: (args.connectorNames?.length ?? 0) > 0
+          }
+        };
+        await storage.save(definition);
+        return {
+          success: true,
+          name: args.name,
+          storagePath: storage.getPath()
+        };
+      } catch (error) {
+        return {
+          success: false,
+          name: args.name,
+          storagePath: storage.getPath(),
+          error: error.message
+        };
+      }
+    },
+    describeCall: (args) => args.name
+  };
+}
+var customToolSave = createCustomToolSave(new FileCustomToolStorage());
+
+// src/tools/custom-tools/customToolTest.ts
+init_Connector();
+var DEFAULT_TEST_TIMEOUT = 1e4;
+var MAX_TEST_TIMEOUT = 3e4;
+function createCustomToolTest() {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "custom_tool_test",
+        description: "Test custom tool code by executing it in the VM sandbox with provided test input.",
+        parameters: {
+          type: "object",
+          properties: {
+            code: {
+              type: "string",
+              description: "JavaScript code to test. See tool description for full sandbox API reference."
+            },
+            inputSchema: {
+              type: "object",
+              description: "The input schema (for documentation, not enforced at test time)"
+            },
+            testInput: {
+              description: "Test input data \u2014 available as `input` in the code"
+            },
+            connectorName: {
+              type: "string",
+              description: "Optional connector name for authenticated API access"
+            },
+            timeout: {
+              type: "number",
+              description: `Execution timeout in ms. Default: ${DEFAULT_TEST_TIMEOUT}, max: ${MAX_TEST_TIMEOUT}`
+            }
+          },
+          required: ["code", "inputSchema", "testInput"]
+        }
+      },
+      timeout: MAX_TEST_TIMEOUT + 5e3
+    },
+    descriptionFactory: (context) => buildTestDescription(context),
+    permission: { scope: "session", riskLevel: "medium" },
+    execute: async (args, context) => {
+      const logs = [];
+      const startTime = Date.now();
+      const timeout = Math.min(Math.max(args.timeout || DEFAULT_TEST_TIMEOUT, 0), MAX_TEST_TIMEOUT);
+      try {
+        const registry = context?.connectorRegistry ?? Connector.asRegistry();
+        const result = await executeInVM(
+          args.code,
+          args.testInput,
+          timeout,
+          logs,
+          context?.userId,
+          registry
+        );
+        return {
+          success: true,
+          result,
+          logs,
+          executionTime: Date.now() - startTime
+        };
+      } catch (error) {
+        return {
+          success: false,
+          result: null,
+          logs,
+          error: error.message,
+          executionTime: Date.now() - startTime
+        };
+      }
+    },
+    describeCall: (args) => `testing code (${args.code.length} chars)`
+  };
+}
+var customToolTest = createCustomToolTest();
+
 // src/tools/registry.generated.ts
 var toolRegistry = [
   {
@@ -51670,6 +52782,60 @@ var toolRegistry = [
     tool: executeJavaScript,
     safeByDefault: false
   },
+  {
+    name: "custom_tool_delete",
+    exportName: "customToolDelete",
+    displayName: "Custom Tool Delete",
+    category: "custom-tools",
+    description: "Delete a custom tool from persistent storage.",
+    tool: customToolDelete,
+    safeByDefault: false
+  },
+  {
+    name: "custom_tool_draft",
+    exportName: "customToolDraft",
+    displayName: "Custom Tool Draft",
+    category: "custom-tools",
+    description: "Validate a draft custom tool definition. Checks name format, schema structure, and code syntax.",
+    tool: customToolDraft,
+    safeByDefault: true
+  },
+  {
+    name: "custom_tool_list",
+    exportName: "customToolList",
+    displayName: "Custom Tool List",
+    category: "custom-tools",
+    description: "List saved custom tools from persistent storage. Supports filtering by search text, tags, and category.",
+    tool: customToolList,
+    safeByDefault: true
+  },
+  {
+    name: "custom_tool_load",
+    exportName: "customToolLoad",
+    displayName: "Custom Tool Load",
+    category: "custom-tools",
+    description: "Load a full custom tool definition from storage (including code).",
+    tool: customToolLoad,
+    safeByDefault: true
+  },
+  {
+    name: "custom_tool_save",
+    exportName: "customToolSave",
+    displayName: "Custom Tool Save",
+    category: "custom-tools",
+    description: "Save a custom tool definition to persistent storage.",
+    tool: customToolSave,
+    safeByDefault: false
+  },
+  {
+    name: "custom_tool_test",
+    exportName: "customToolTest",
+    displayName: "Custom Tool Test",
+    category: "custom-tools",
+    description: "Test custom tool code by executing it in the VM sandbox with provided test input.",
+    tool: customToolTest,
+    safeByDefault: false
+  },
   {
     name: "desktop_get_cursor",
     exportName: "desktopGetCursor",
@@ -51870,6 +53036,61 @@ function getToolCategories() {
   return [...new Set(toolRegistry.map((entry) => entry.category))];
 }
 
+// src/tools/custom-tools/factories.ts
+function createCustomToolMetaTools(options) {
+  const storage = options?.storage ?? new FileCustomToolStorage();
+  return [
+    createCustomToolDraft(),
+    createCustomToolTest(),
+    createCustomToolSave(storage),
+    createCustomToolList(storage),
+    createCustomToolLoad(storage),
+    createCustomToolDelete(storage)
+  ];
+}
+
+// src/tools/custom-tools/hydrate.ts
+init_Connector();
+var DEFAULT_TIMEOUT2 = 1e4;
+var MAX_TIMEOUT = 3e4;
+function hydrateCustomTool(definition, options) {
+  const defaultTimeout = options?.defaultTimeout ?? DEFAULT_TIMEOUT2;
+  const maxTimeout = options?.maxTimeout ?? MAX_TIMEOUT;
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: definition.name,
+        description: definition.description,
+        parameters: definition.inputSchema
+      },
+      timeout: maxTimeout + 5e3
+    },
+    permission: { scope: "session", riskLevel: "medium" },
+    execute: async (args, context) => {
+      const logs = [];
+      const registry = context?.connectorRegistry ?? Connector.asRegistry();
+      const result = await executeInVM(
+        definition.code,
+        args,
+        defaultTimeout,
+        logs,
+        context?.userId,
+        registry
+      );
+      return result;
+    },
+    describeCall: (args) => {
+      if (!args || typeof args !== "object") return definition.name;
+      const firstKey = Object.keys(args)[0];
+      if (!firstKey) return definition.name;
+      const val = args[firstKey];
+      const str = typeof val === "string" ? val : JSON.stringify(val);
+      return str.length > 50 ? str.slice(0, 47) + "..." : str;
+    }
+  };
+}
+
 // src/tools/ToolRegistry.ts
 init_Connector();
 var ToolRegistry = class {
@@ -52206,6 +53427,6 @@ REMEMBER: Keep it conversational, ask one question at a time, and only output th
   }
 };
 
-export { AGENT_DEFINITION_FORMAT_VERSION, AIError, APPROVAL_STATE_VERSION, Agent, AgentContextNextGen, ApproximateTokenEstimator, BaseMediaProvider, BasePluginNextGen, BaseProvider, BaseTextProvider, BraveProvider, CONNECTOR_CONFIG_VERSION, CONTEXT_SESSION_FORMAT_VERSION, CheckpointManager, CircuitBreaker, CircuitOpenError, Connector, ConnectorConfigStore, ConnectorTools, ConsoleMetrics, ContentType, ContextOverflowError, DEFAULT_ALLOWLIST, DEFAULT_BACKOFF_CONFIG, DEFAULT_BASE_DELAY_MS, DEFAULT_CHECKPOINT_STRATEGY, DEFAULT_CIRCUIT_BREAKER_CONFIG, DEFAULT_CONFIG2 as DEFAULT_CONFIG, DEFAULT_CONNECTOR_TIMEOUT, DEFAULT_CONTEXT_CONFIG, DEFAULT_DESKTOP_CONFIG, DEFAULT_FEATURES, DEFAULT_FILESYSTEM_CONFIG, DEFAULT_HISTORY_MANAGER_CONFIG, DEFAULT_MAX_DELAY_MS, DEFAULT_MAX_RETRIES, DEFAULT_MEMORY_CONFIG, DEFAULT_PERMISSION_CONFIG, DEFAULT_RATE_LIMITER_CONFIG, DEFAULT_RETRYABLE_STATUSES, DEFAULT_SHELL_CONFIG, DESKTOP_TOOL_NAMES, DefaultCompactionStrategy, DependencyCycleError, DocumentReader, ErrorHandler, ExecutionContext, ExternalDependencyHandler, FileAgentDefinitionStorage, FileConnectorStorage, FileContextStorage, FileMediaStorage as FileMediaOutputHandler, FileMediaStorage, FilePersistentInstructionsStorage, FileStorage, FormatDetector, FrameworkLogger, HookManager, IMAGE_MODELS, IMAGE_MODEL_REGISTRY, ImageGeneration, InContextMemoryPluginNextGen, InMemoryAgentStateStorage, InMemoryHistoryStorage, InMemoryMetrics, InMemoryPlanStorage, InMemoryStorage, InvalidConfigError, InvalidToolArgumentsError, LLM_MODELS, LoggingPlugin, MCPClient, MCPConnectionError, MCPError, MCPProtocolError, MCPRegistry, MCPResourceError, MCPTimeoutError, MCPToolError, MEMORY_PRIORITY_VALUES, MODEL_REGISTRY, MemoryConnectorStorage, MemoryEvictionCompactor, MemoryStorage, MessageBuilder, MessageRole, ModelNotSupportedError, NoOpMetrics, NutTreeDriver, OAuthManager, ParallelTasksError, PersistentInstructionsPluginNextGen, PlanningAgent, ProviderAuthError, ProviderConfigAgent, ProviderContextLengthError, ProviderError, ProviderErrorMapper, ProviderNotFoundError, ProviderRateLimitError, RapidAPIProvider, RateLimitError, SERVICE_DEFINITIONS, SERVICE_INFO, SERVICE_URL_PATTERNS, SIMPLE_ICONS_CDN, STT_MODELS, STT_MODEL_REGISTRY, ScopedConnectorRegistry, ScrapeProvider, SearchProvider, SerperProvider, Services, SpeechToText, StrategyRegistry, StreamEventType, StreamHelpers, StreamState, SummarizeCompactor, TERMINAL_TASK_STATUSES, TTS_MODELS, TTS_MODEL_REGISTRY, TaskTimeoutError, TaskValidationError, TavilyProvider, TextToSpeech, TokenBucketRateLimiter, ToolCallState, ToolExecutionError, ToolExecutionPipeline, ToolManager, ToolNotFoundError, ToolPermissionManager, ToolRegistry, ToolTimeoutError, TruncateCompactor, VENDORS, VENDOR_ICON_MAP, VIDEO_MODELS, VIDEO_MODEL_REGISTRY, Vendor, VideoGeneration, WorkingMemory, WorkingMemoryPluginNextGen, addJitter, allVendorTemplates, assertNotDestroyed, authenticatedFetch, backoffSequence, backoffWait, bash, buildAuthConfig, buildEndpointWithQuery, buildQueryString, calculateBackoff, calculateCost, calculateEntrySize, calculateImageCost, calculateSTTCost, calculateTTSCost, calculateVideoCost, canTaskExecute, createAgentStorage, createAuthenticatedFetch, createBashTool, createConnectorFromTemplate, createCreatePRTool, createDesktopGetCursorTool, createDesktopGetScreenSizeTool, createDesktopKeyboardKeyTool, createDesktopKeyboardTypeTool, createDesktopMouseClickTool, createDesktopMouseDragTool, createDesktopMouseMoveTool, createDesktopMouseScrollTool, createDesktopScreenshotTool, createDesktopWindowFocusTool, createDesktopWindowListTool, createEditFileTool, createEstimator, createExecuteJavaScriptTool, createFileAgentDefinitionStorage, createFileContextStorage, createFileMediaStorage, createGetPRTool, createGitHubReadFileTool, createGlobTool, createGrepTool, createImageGenerationTool, createImageProvider, createListDirectoryTool, createMessageWithImages, createMetricsCollector, createPRCommentsTool, createPRFilesTool, createPlan, createProvider, createReadFileTool, createSearchCodeTool, createSearchFilesTool, createSpeechToTextTool, createTask, createTextMessage, createTextToSpeechTool, createVideoProvider, createVideoTools, createWriteFileTool, defaultDescribeCall, desktopGetCursor, desktopGetScreenSize, desktopKeyboardKey, desktopKeyboardType, desktopMouseClick, desktopMouseDrag, desktopMouseMove, desktopMouseScroll, desktopScreenshot, desktopTools, desktopWindowFocus, desktopWindowList, detectDependencyCycle, detectServiceFromURL, developerTools, documentToContent, editFile, evaluateCondition, extractJSON, extractJSONField, extractNumber, findConnectorByServiceTypes, forPlan, forTasks, generateEncryptionKey, generateSimplePlan, generateWebAPITool, getActiveImageModels, getActiveModels, getActiveSTTModels, getActiveTTSModels, getActiveVideoModels, getAllBuiltInTools, getAllServiceIds, getAllVendorLogos, getAllVendorTemplates, getBackgroundOutput, getConnectorTools, getCredentialsSetupURL, getDesktopDriver, getDocsURL, getImageModelInfo, getImageModelsByVendor, getImageModelsWithFeature, getMediaOutputHandler, getMediaStorage, getModelInfo, getModelsByVendor, getNextExecutableTasks, getRegisteredScrapeProviders, getSTTModelInfo, getSTTModelsByVendor, getSTTModelsWithFeature, getServiceDefinition, getServiceInfo, getServicesByCategory, getTTSModelInfo, getTTSModelsByVendor, getTTSModelsWithFeature, getTaskDependencies, getToolByName, getToolCallDescription, getToolCategories, getToolRegistry, getToolsByCategory, getToolsRequiringConnector, getVendorAuthTemplate, getVendorColor, getVendorDefaultBaseURL, getVendorInfo, getVendorLogo, getVendorLogoCdnUrl, getVendorLogoSvg, getVendorTemplate, getVideoModelInfo, getVideoModelsByVendor, getVideoModelsWithAudio, getVideoModelsWithFeature, glob, globalErrorHandler, grep, hasClipboardImage, hasVendorLogo, isBlockedCommand, isErrorEvent, isExcludedExtension, isKnownService, isOutputTextDelta, isResponseComplete, isSimpleScope, isStreamEvent, isTaskAwareScope, isTaskBlocked, isTerminalMemoryStatus, isTerminalStatus, isToolCallArgumentsDelta, isToolCallArgumentsDone, isToolCallStart, isVendor, killBackgroundProcess, listConnectorsByServiceTypes, listDirectory, listVendorIds, listVendors, listVendorsByAuthType, listVendorsByCategory, listVendorsWithLogos, logger, mergeTextPieces, metrics, parseKeyCombo, parseRepository, readClipboardImage, readDocumentAsContent, readFile5 as readFile, registerScrapeProvider, resetDefaultDriver, resolveConnector, resolveDependencies, resolveRepository, retryWithBackoff, scopeEquals, scopeMatches, setMediaOutputHandler, setMediaStorage, setMetricsCollector, simpleTokenEstimator, toConnectorOptions, toolRegistry, tools_exports as tools, updateTaskStatus, validatePath, writeFile5 as writeFile };
+export { AGENT_DEFINITION_FORMAT_VERSION, AIError, APPROVAL_STATE_VERSION, Agent, AgentContextNextGen, ApproximateTokenEstimator, BaseMediaProvider, BasePluginNextGen, BaseProvider, BaseTextProvider, BraveProvider, CONNECTOR_CONFIG_VERSION, CONTEXT_SESSION_FORMAT_VERSION, CUSTOM_TOOL_DEFINITION_VERSION, CheckpointManager, CircuitBreaker, CircuitOpenError, Connector, ConnectorConfigStore, ConnectorTools, ConsoleMetrics, ContentType, ContextOverflowError, DEFAULT_ALLOWLIST, DEFAULT_BACKOFF_CONFIG, DEFAULT_BASE_DELAY_MS, DEFAULT_CHECKPOINT_STRATEGY, DEFAULT_CIRCUIT_BREAKER_CONFIG, DEFAULT_CONFIG2 as DEFAULT_CONFIG, DEFAULT_CONNECTOR_TIMEOUT, DEFAULT_CONTEXT_CONFIG, DEFAULT_DESKTOP_CONFIG, DEFAULT_FEATURES, DEFAULT_FILESYSTEM_CONFIG, DEFAULT_HISTORY_MANAGER_CONFIG, DEFAULT_MAX_DELAY_MS, DEFAULT_MAX_RETRIES, DEFAULT_MEMORY_CONFIG, DEFAULT_PERMISSION_CONFIG, DEFAULT_RATE_LIMITER_CONFIG, DEFAULT_RETRYABLE_STATUSES, DEFAULT_SHELL_CONFIG, DESKTOP_TOOL_NAMES, DefaultCompactionStrategy, DependencyCycleError, DocumentReader, ErrorHandler, ExecutionContext, ExternalDependencyHandler, FileAgentDefinitionStorage, FileConnectorStorage, FileContextStorage, FileCustomToolStorage, FileMediaStorage as FileMediaOutputHandler, FileMediaStorage, FilePersistentInstructionsStorage, FileStorage, FormatDetector, FrameworkLogger, HookManager, IMAGE_MODELS, IMAGE_MODEL_REGISTRY, ImageGeneration, InContextMemoryPluginNextGen, InMemoryAgentStateStorage, InMemoryHistoryStorage, InMemoryMetrics, InMemoryPlanStorage, InMemoryStorage, InvalidConfigError, InvalidToolArgumentsError, LLM_MODELS, LoggingPlugin, MCPClient, MCPConnectionError, MCPError, MCPProtocolError, MCPRegistry, MCPResourceError, MCPTimeoutError, MCPToolError, MEMORY_PRIORITY_VALUES, MODEL_REGISTRY, MemoryConnectorStorage, MemoryEvictionCompactor, MemoryStorage, MessageBuilder, MessageRole, ModelNotSupportedError, NoOpMetrics, NutTreeDriver, OAuthManager, ParallelTasksError, PersistentInstructionsPluginNextGen, PlanningAgent, ProviderAuthError, ProviderConfigAgent, ProviderContextLengthError, ProviderError, ProviderErrorMapper, ProviderNotFoundError, ProviderRateLimitError, RapidAPIProvider, RateLimitError, SERVICE_DEFINITIONS, SERVICE_INFO, SERVICE_URL_PATTERNS, SIMPLE_ICONS_CDN, STT_MODELS, STT_MODEL_REGISTRY, ScopedConnectorRegistry, ScrapeProvider, SearchProvider, SerperProvider, Services, SpeechToText, StrategyRegistry, StreamEventType, StreamHelpers, StreamState, SummarizeCompactor, TERMINAL_TASK_STATUSES, TTS_MODELS, TTS_MODEL_REGISTRY, TaskTimeoutError, TaskValidationError, TavilyProvider, TextToSpeech, TokenBucketRateLimiter, ToolCallState, ToolExecutionError, ToolExecutionPipeline, ToolManager, ToolNotFoundError, ToolPermissionManager, ToolRegistry, ToolTimeoutError, TruncateCompactor, VENDORS, VENDOR_ICON_MAP, VIDEO_MODELS, VIDEO_MODEL_REGISTRY, Vendor, VideoGeneration, WorkingMemory, WorkingMemoryPluginNextGen, addJitter, allVendorTemplates, assertNotDestroyed, authenticatedFetch, backoffSequence, backoffWait, bash, buildAuthConfig, buildEndpointWithQuery, buildQueryString, calculateBackoff, calculateCost, calculateEntrySize, calculateImageCost, calculateSTTCost, calculateTTSCost, calculateVideoCost, canTaskExecute, createAgentStorage, createAuthenticatedFetch, createBashTool, createConnectorFromTemplate, createCreatePRTool, createCustomToolDelete, createCustomToolDraft, createCustomToolList, createCustomToolLoad, createCustomToolMetaTools, createCustomToolSave, createCustomToolTest, createDesktopGetCursorTool, createDesktopGetScreenSizeTool, createDesktopKeyboardKeyTool, createDesktopKeyboardTypeTool, createDesktopMouseClickTool, createDesktopMouseDragTool, createDesktopMouseMoveTool, createDesktopMouseScrollTool, createDesktopScreenshotTool, createDesktopWindowFocusTool, createDesktopWindowListTool, createEditFileTool, createEstimator, createExecuteJavaScriptTool, createFileAgentDefinitionStorage, createFileContextStorage, createFileCustomToolStorage, createFileMediaStorage, createGetPRTool, createGitHubReadFileTool, createGlobTool, createGrepTool, createImageGenerationTool, createImageProvider, createListDirectoryTool, createMessageWithImages, createMetricsCollector, createPRCommentsTool, createPRFilesTool, createPlan, createProvider, createReadFileTool, createSearchCodeTool, createSearchFilesTool, createSpeechToTextTool, createTask, createTextMessage, createTextToSpeechTool, createVideoProvider, createVideoTools, createWriteFileTool, customToolDelete, customToolDraft, customToolList, customToolLoad, customToolSave, customToolTest, defaultDescribeCall, desktopGetCursor, desktopGetScreenSize, desktopKeyboardKey, desktopKeyboardType, desktopMouseClick, desktopMouseDrag, desktopMouseMove, desktopMouseScroll, desktopScreenshot, desktopTools, desktopWindowFocus, desktopWindowList, detectDependencyCycle, detectServiceFromURL, developerTools, documentToContent, editFile, evaluateCondition, extractJSON, extractJSONField, extractNumber, findConnectorByServiceTypes, forPlan, forTasks, generateEncryptionKey, generateSimplePlan, generateWebAPITool, getActiveImageModels, getActiveModels, getActiveSTTModels, getActiveTTSModels, getActiveVideoModels, getAllBuiltInTools, getAllServiceIds, getAllVendorLogos, getAllVendorTemplates, getBackgroundOutput, getConnectorTools, getCredentialsSetupURL, getDesktopDriver, getDocsURL, getImageModelInfo, getImageModelsByVendor, getImageModelsWithFeature, getMediaOutputHandler, getMediaStorage, getModelInfo, getModelsByVendor, getNextExecutableTasks, getRegisteredScrapeProviders, getSTTModelInfo, getSTTModelsByVendor, getSTTModelsWithFeature, getServiceDefinition, getServiceInfo, getServicesByCategory, getTTSModelInfo, getTTSModelsByVendor, getTTSModelsWithFeature, getTaskDependencies, getToolByName, getToolCallDescription, getToolCategories, getToolRegistry, getToolsByCategory, getToolsRequiringConnector, getVendorAuthTemplate, getVendorColor, getVendorDefaultBaseURL, getVendorInfo, getVendorLogo, getVendorLogoCdnUrl, getVendorLogoSvg, getVendorTemplate, getVideoModelInfo, getVideoModelsByVendor, getVideoModelsWithAudio, getVideoModelsWithFeature, glob, globalErrorHandler, grep, hasClipboardImage, hasVendorLogo, hydrateCustomTool, isBlockedCommand, isErrorEvent, isExcludedExtension, isKnownService, isOutputTextDelta, isResponseComplete, isSimpleScope, isStreamEvent, isTaskAwareScope, isTaskBlocked, isTerminalMemoryStatus, isTerminalStatus, isToolCallArgumentsDelta, isToolCallArgumentsDone, isToolCallStart, isVendor, killBackgroundProcess, listConnectorsByServiceTypes, listDirectory, listVendorIds, listVendors, listVendorsByAuthType, listVendorsByCategory, listVendorsWithLogos, logger, mergeTextPieces, metrics, parseKeyCombo, parseRepository, readClipboardImage, readDocumentAsContent, readFile5 as readFile, registerScrapeProvider, resetDefaultDriver, resolveConnector, resolveDependencies, resolveRepository, retryWithBackoff, scopeEquals, scopeMatches, setMediaOutputHandler, setMediaStorage, setMetricsCollector, simpleTokenEstimator, toConnectorOptions, toolRegistry, tools_exports as tools, updateTaskStatus, validatePath, writeFile5 as writeFile };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map