@intentface/latch-openapi 0.9.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Intentface
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,29 @@
+# @intentface/latch-openapi
+
+Turn an **OpenAPI 3.x** document into agent tools — the "API without an MCP server" path. Each operation becomes a callable tool, no hand-written glue.
+
+## What it does
+
+- **`createOpenApiConnections` / `defineOpenApiConnection`** — fetch + dereference an OpenAPI spec and expose its operations as tools, scoped per connection. `operations.allow` restricts which operations are exposed.
+- **SSRF allowlist** (`allowedHosts`) — bounds which hosts a connection may call (derived from the spec/base URLs).
+- **Brokered auth** (`headers` / `apiKey` helpers) — inject the credential server-side (from the Vault); the token never reaches the model.
+
+## Usage
+
+```ts
+import { createOpenApiConnections, defineOpenApiConnection, apiKey } from "@intentface/latch-openapi";
+
+const openapi = createOpenApiConnections<Principal>({
+  allowedHosts: ["api.example.com"],
+  connections: {
+    example: defineOpenApiConnection<Principal>({
+      spec: "https://api.example.com/openapi.json",
+      auth: apiKey({ header: "X-Api-Key", getKey: (p) => vault.get(p, "example_key", "org") }),
+    }),
+  },
+});
+```
+
+## Where it fits
+
+A connection source for `@intentface/latch-core`'s registry, alongside `@intentface/latch-mcp`. Merge them with `mergeConnections(...)`.

package/dist/auth.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Auth for OpenAPI connections — an opaque header resolver.
+ *
+ * The connection's auth is `(principal) => headers`: it runs server-side at call
+ * time and returns the headers to attach to the outgoing request. Where the
+ * credential comes from — and at what scope (per-user vs org-shared) — is the
+ * caller's choice, expressed inside the resolver (e.g. reading the Vault at a
+ * user- or org-scoped principal). The framework never sees the secret in agent
+ * config, and it never reaches the model.
+ */
+export type OpenApiAuth<P> = (principal: P) => Record<string, string> | Promise<Record<string, string>>;
+/** Bearer token → `Authorization: Bearer <token>`. */
+export declare function bearer<P>(opts: {
+    getToken: (principal: P) => string | undefined | Promise<string | undefined>;
+}): OpenApiAuth<P>;
+/** API key in a named header (e.g. `X-Api-Key`). Missing key → no header (call likely 401s). */
+export declare function apiKey<P>(opts: {
+    header: string;
+    getKey: (principal: P) => string | undefined | Promise<string | undefined>;
+}): OpenApiAuth<P>;
+/** Static headers (no per-principal resolution). */
+export declare function headers<P = unknown>(h: Record<string, string>): OpenApiAuth<P>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,CAC3B,SAAS,EAAE,CAAC,KACT,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9D,sDAAsD;AACtD,wBAAgB,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE;IAC9B,QAAQ,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC9E,GAAG,WAAW,CAAC,CAAC,CAAC,CAOjB;AAED,gGAAgG;AAChG,wBAAgB,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC5E,GAAG,WAAW,CAAC,CAAC,CAAC,CAOjB;AAED,oDAAoD;AACpD,wBAAgB,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAE9E"}

package/dist/auth.js

@@ -0,0 +1,25 @@
+/** Bearer token → `Authorization: Bearer <token>`. */
+export function bearer(opts) {
+    return async (principal) => {
+        const token = await opts.getToken(principal);
+        const h = {};
+        if (token)
+            h.Authorization = `Bearer ${token}`;
+        return h;
+    };
+}
+/** API key in a named header (e.g. `X-Api-Key`). Missing key → no header (call likely 401s). */
+export function apiKey(opts) {
+    return async (principal) => {
+        const key = await opts.getKey(principal);
+        const h = {};
+        if (key)
+            h[opts.header] = key;
+        return h;
+    };
+}
+/** Static headers (no per-principal resolution). */
+export function headers(h) {
+    return () => ({ ...h });
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAcA,sDAAsD;AACtD,MAAM,UAAU,MAAM,CAAI,IAEzB;IACC,OAAO,KAAK,EAAE,SAAS,EAAE,EAAE;QACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,CAAC,GAA2B,EAAE,CAAC;QACrC,IAAI,KAAK;YAAE,CAAC,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,MAAM,CAAI,IAGzB;IACC,OAAO,KAAK,EAAE,SAAS,EAAE,EAAE;QACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,GAA2B,EAAE,CAAC;QACrC,IAAI,GAAG;YAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;QAC9B,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,OAAO,CAAc,CAAyB;IAC5D,OAAO,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC"}

package/dist/build.d.ts

@@ -0,0 +1,73 @@
+import { isHostAllowed } from "@intentface/latch-net";
+import type { OpenApiAuth } from "./auth.js";
+/**
+ * A custom fetch. Input is `string | URL` only (all call sites pass strings)
+ * so that non-global fetch implementations — undici's own, the DNS-pinned
+ * `@intentface/latch-net/pinned` — are assignable: they reject foreign
+ * `Request` objects at runtime. `globalThis.fetch` still satisfies this.
+ */
+export type FetchFunction = (input: string | URL, init?: RequestInit) => Promise<Response>;
+/** Which operations require human approval. Default `"mutating"` (gate non-GET). */
+export type OpenApiApprovalPolicy = "mutating" | "all" | "none" | ((op: {
+    operationId: string;
+    method: string;
+}) => boolean);
+export { isHostAllowed };
+/** Minimal OpenAPI shapes we read (the doc is already dereferenced). */
+interface Oap {
+    servers?: {
+        url: string;
+    }[];
+    paths?: Record<string, Record<string, OapOperation>>;
+}
+interface OapParam {
+    name: string;
+    in: "path" | "query" | "header" | "cookie";
+    required?: boolean;
+    description?: string;
+    schema?: Record<string, unknown>;
+}
+interface OapOperation {
+    operationId?: string;
+    summary?: string;
+    description?: string;
+    parameters?: OapParam[];
+    requestBody?: {
+        required?: boolean;
+        content?: Record<string, {
+            schema?: Record<string, unknown>;
+        }>;
+    };
+}
+export interface BuiltTools {
+    tools: Record<string, unknown>;
+    toolApproval: Record<string, unknown>;
+}
+/**
+ * Turn a dereferenced OpenAPI 3.x document into one tool per operation. Tools
+ * are principal-independent (auth is resolved at call time from the tool
+ * context), so they can be built once and reused across turns/tenants.
+ */
+export declare function buildOpenApiTools<P>(args: {
+    name: string;
+    doc: Oap;
+    baseUrl: string;
+    auth?: OpenApiAuth<P>;
+    approval?: OpenApiApprovalPolicy;
+    operations?: {
+        allow?: string[];
+        block?: string[];
+    };
+    allowedHosts: string[];
+    fetchFn: FetchFunction;
+    /**
+     * Skip the private/internal-address SSRF backstop for this connection.
+     * Mirrors the MCP host's `allowPrivateHost`: set it only for a trusted
+     * local/internal API — the allowlist check still applies. This skips the
+     * PRE-CHECK only: if `fetchFn` is a DNS-pinned fetch (recommended —
+     * `@intentface/latch-net/pinned`), a private backend also needs
+     * `createPinnedFetch({ allowPrivate: true })` injected.
+     */
+    allowPrivateHost?: boolean;
+}): BuiltTools;
+//# sourceMappingURL=build.d.ts.map

package/dist/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,aAAa,EACd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,oFAAoF;AACpF,MAAM,MAAM,qBAAqB,GAC7B,UAAU,GACV,KAAK,GACL,MAAM,GACN,CAAC,CAAC,EAAE,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,CAAC;AAO/D,OAAO,EAAE,aAAa,EAAE,CAAC;AAiBzB,wEAAwE;AACxE,UAAU,GAAG;IACX,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;CACtD;AACD,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC3C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AACD,UAAU,YAAY;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE;QACZ,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,CAAC;KAChE,CAAC;CACH;AAoCD,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACtB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,UAAU,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACpD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,aAAa,CAAC;IACvB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,UAAU,CAsGb"}

package/dist/build.js

@@ -0,0 +1,145 @@
+import { tool, jsonSchema } from "ai";
+import { isBlockedHost, isBlockedResolved, isHostAllowed, } from "@intentface/latch-net";
+const HTTP_METHODS = ["get", "post", "put", "patch", "delete"];
+// Canonical implementation lives in @intentface/latch-net; re-exported here
+// for callers that historically imported it from this package.
+export { isHostAllowed };
+function needsApproval(policy, op) {
+    const p = policy ?? "mutating";
+    if (typeof p === "function")
+        return p(op);
+    if (p === "all")
+        return true;
+    if (p === "none")
+        return false;
+    return op.method.toLowerCase() !== "get"; // "mutating"
+}
+function sanitizeName(s) {
+    return s.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
+/** Build the `{ path?, query?, body? }` input schema for one operation. */
+function inputSchemaFor(op) {
+    const properties = {};
+    const required = [];
+    const group = (loc) => {
+        const params = (op.parameters ?? []).filter((p) => p.in === loc);
+        if (params.length === 0)
+            return undefined;
+        const props = {};
+        const req = [];
+        for (const p of params) {
+            props[p.name] = { ...(p.schema ?? { type: "string" }), description: p.description };
+            if (p.required)
+                req.push(p.name);
+        }
+        return { type: "object", properties: props, required: req, additionalProperties: false };
+    };
+    const path = group("path");
+    if (path) {
+        properties.path = path;
+        required.push("path");
+    }
+    const query = group("query");
+    if (query)
+        properties.query = query;
+    const bodySchema = op.requestBody?.content?.["application/json"]?.schema;
+    if (bodySchema) {
+        properties.body = bodySchema;
+        if (op.requestBody?.required)
+            required.push("body");
+    }
+    return { type: "object", properties, required, additionalProperties: false };
+}
+/**
+ * Turn a dereferenced OpenAPI 3.x document into one tool per operation. Tools
+ * are principal-independent (auth is resolved at call time from the tool
+ * context), so they can be built once and reused across turns/tenants.
+ */
+export function buildOpenApiTools(args) {
+    const { name, doc, baseUrl, auth, approval, operations, allowedHosts, fetchFn, allowPrivateHost, } = args;
+    const tools = {};
+    const toolApproval = {};
+    const base = baseUrl.replace(/\/$/, "");
+    const allowed = (opId) => {
+        if (operations?.block?.includes(opId))
+            return false;
+        if (operations?.allow && !operations.allow.includes(opId))
+            return false;
+        return true;
+    };
+    for (const [rawPath, methods] of Object.entries(doc.paths ?? {})) {
+        for (const method of HTTP_METHODS) {
+            const op = methods[method];
+            if (!op)
+                continue;
+            const operationId = op.operationId ?? `${method}_${rawPath.replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_|_$/g, "")}`;
+            if (!allowed(operationId))
+                continue;
+            const key = sanitizeName(`${name}_${operationId}`);
+            const opPath = rawPath;
+            tools[key] = tool({
+                description: op.summary ?? op.description ?? `${method.toUpperCase()} ${rawPath}`,
+                inputSchema: jsonSchema(inputSchemaFor(op)),
+                execute: async (input, options) => {
+                    const { path = {}, query = {}, body } = (input ?? {});
+                    // Template path params, then assemble the URL.
+                    let urlPath = opPath;
+                    for (const [k, v] of Object.entries(path)) {
+                        urlPath = urlPath.replace(`{${k}}`, encodeURIComponent(String(v)));
+                    }
+                    const url = new URL(base + urlPath);
+                    for (const [k, v] of Object.entries(query)) {
+                        if (v !== undefined && v !== null)
+                            url.searchParams.set(k, String(v));
+                    }
+                    // SSRF guard — the resolved host must be on the allowlist.
+                    if (!isHostAllowed(url.hostname, allowedHosts)) {
+                        return { error: `host not allowed: ${url.hostname}` };
+                    }
+                    // Defense-in-depth beyond the allowlist: reject private/internal
+                    // addresses and DNS rebinding (an allowlisted name that resolves to
+                    // a private/link-local IP — e.g. cloud metadata at 169.254.169.254).
+                    // Opt out per connection for a trusted local backend.
+                    if (!allowPrivateHost &&
+                        (isBlockedHost(url.hostname) || (await isBlockedResolved(url.hostname)))) {
+                        return {
+                            error: `host resolves to a private/internal address: ${url.hostname}`,
+                        };
+                    }
+                    const principal = options?.context?.principal;
+                    const authHeaders = auth ? await auth(principal) : {};
+                    const hasBody = body !== undefined && method !== "get";
+                    try {
+                        const res = await fetchFn(url.toString(), {
+                            method: method.toUpperCase(),
+                            headers: {
+                                accept: "application/json",
+                                ...(hasBody ? { "content-type": "application/json" } : {}),
+                                ...authHeaders,
+                            },
+                            body: hasBody ? JSON.stringify(body) : undefined,
+                            redirect: "error",
+                        });
+                        const text = await res.text();
+                        let data = text;
+                        try {
+                            data = text ? JSON.parse(text) : null;
+                        }
+                        catch {
+                            /* non-JSON — return as text */
+                        }
+                        return res.ok ? data : { error: `HTTP ${res.status}`, status: res.status, body: data };
+                    }
+                    catch (e) {
+                        return { error: e instanceof Error ? e.message : "request failed" };
+                    }
+                },
+            });
+            if (needsApproval(approval, { operationId, method })) {
+                toolApproval[key] = "user-approval";
+            }
+        }
+    }
+    return { tools, toolApproval };
+}
+//# sourceMappingURL=build.js.map

package/dist/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACtC,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAqB/B,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAGxE,4EAA4E;AAC5E,+DAA+D;AAC/D,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB,SAAS,aAAa,CACpB,MAAyC,EACzC,EAA2C;IAE3C,MAAM,CAAC,GAAG,MAAM,IAAI,UAAU,CAAC;IAC/B,IAAI,OAAO,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC,aAAa;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAyBD,2EAA2E;AAC3E,SAAS,cAAc,CAAC,EAAgB;IACtC,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,KAAK,GAAG,CAAC,GAAqB,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,CAAC,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACpF,IAAI,CAAC,CAAC,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;IAC3F,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,IAAI,EAAE,CAAC;QACT,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,KAAK;QAAE,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC;IAEpC,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACzE,IAAI,UAAU,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,GAAG,UAAU,CAAC;QAC7B,IAAI,EAAE,CAAC,WAAW,EAAE,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;AAC/E,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAI,IAkBpC;IACC,MAAM,EACJ,IAAI,EACJ,GAAG,EACH,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,OAAO,EACP,gBAAgB,GACjB,GAAG,IAAI,CAAC;IACT,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE;QAC/B,IAAI,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,UAAU,EAAE,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,MAAM,EAAE,GAAI,OAAwC,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,MAAM,WAAW,GACf,EAAE,CAAC,WAAW,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;YAChG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBAAE,SAAS;YAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,OAAO,CAAC;YAEvB,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;gBAChB,WAAW,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,WAAW,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,OAAO,EAAE;gBACjF,WAAW,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,CAAU,CAAC;gBACpD,OAAO,EAAE,KAAK,EAAE,KAAc,EAAE,OAAgB,EAAE,EAAE;oBAClD,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAInD,CAAC;oBACF,+CAA+C;oBAC/C,IAAI,OAAO,GAAG,MAAM,CAAC;oBACrB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC1C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACrE,CAAC;oBACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC;oBACpC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC3C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;4BAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBACxE,CAAC;oBACD,2DAA2D;oBAC3D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;wBAC/C,OAAO,EAAE,KAAK,EAAE,qBAAqB,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;oBACxD,CAAC;oBACD,iEAAiE;oBACjE,oEAAoE;oBACpE,qEAAqE;oBACrE,sDAAsD;oBACtD,IACE,CAAC,gBAAgB;wBACjB,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EACxE,CAAC;wBACD,OAAO;4BACL,KAAK,EAAE,gDAAgD,GAAG,CAAC,QAAQ,EAAE;yBACtE,CAAC;oBACJ,CAAC;oBACD,MAAM,SAAS,GAAI,OAA2C,EAAE,OAAO,EAAE,SAAc,CAAC;oBACxF,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC;oBACvD,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;4BACxC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;4BAC5B,OAAO,EAAE;gCACP,MAAM,EAAE,kBAAkB;gCAC1B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCAC1D,GAAG,WAAW;6BACf;4BACD,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;4BAChD,QAAQ,EAAE,OAAO;yBAClB,CAAC,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;wBAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;wBACzB,IAAI,CAAC;4BACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;wBACxC,CAAC;wBAAC,MAAM,CAAC;4BACP,+BAA+B;wBACjC,CAAC;wBACD,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;oBACzF,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,OAAO,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;oBACtE,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,aAAa,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;gBACrD,YAAY,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACjC,CAAC"}

package/dist/connections.d.ts

@@ -0,0 +1,50 @@
+import type { ConnectionRegistry, ToolSource } from "@intentface/latch-core";
+import type { OpenApiAuth } from "./auth.js";
+import { type FetchFunction, type OpenApiApprovalPolicy } from "./build.js";
+/**
+ * Declarative OpenAPI connection — turns an OpenAPI 3.x document into agent
+ * tools, one per operation. A second connection *kind* next to MCP: it produces
+ * a `ToolSource<P>` that slots into the same per-agent `connections: [...]` and
+ * registry, reusing the SSRF allowlist, brokered auth, and approval gating.
+ */
+export interface OpenApiConnectionDef<P> {
+    /** HTTPS URL of the spec (fetched once) or an inline parsed 3.x object. */
+    spec: string | Record<string, unknown>;
+    /** Human-readable purpose — helps the model choose the connection. */
+    description?: string;
+    /** Base URL operation paths resolve against. Defaults to the spec's first `servers[]`. */
+    baseUrl?: string;
+    /** Filter operations by `operationId` (allow/block). Essential for large specs. */
+    operations?: {
+        allow?: string[];
+        block?: string[];
+    };
+    /** Which operations require approval. Default `"mutating"` (gate non-GET). */
+    approval?: OpenApiApprovalPolicy;
+    /** Header resolver (where credential scope lives). See `apiKey`/`bearer`/`headers`. */
+    auth?: OpenApiAuth<P>;
+    /**
+     * Skip the private/internal-address SSRF backstop for this connection.
+     * Mirrors the MCP host's `allowPrivateHost`: set it only for a trusted
+     * local/internal API — the allowlist check still applies. This skips the
+     * PRE-CHECK only: if the registry's `fetch` is a DNS-pinned fetch
+     * (recommended — `@intentface/latch-net/pinned`), a private backend also
+     * needs `createPinnedFetch({ allowPrivate: true })` injected.
+     */
+    allowPrivateHost?: boolean;
+}
+export declare function defineOpenApiConnection<P = unknown>(def: OpenApiConnectionDef<P>): OpenApiConnectionDef<P>;
+export interface OpenApiConnectionsConfig<P> {
+    connections: Record<string, OpenApiConnectionDef<P>>;
+    /** SSRF allowlist of permitted hostnames (covers BOTH the spec host and the API host). */
+    allowedHosts: string[];
+    /** Custom fetch for spec download + tool calls. Default `globalThis.fetch`. */
+    fetch?: FetchFunction;
+    /** Observe a connection that failed to build (it's skipped, not fatal). */
+    onConnectionError?: (name: string, error: unknown) => void;
+}
+export declare function createOpenApiConnections<P>(config: OpenApiConnectionsConfig<P>): ConnectionRegistry<P> & {
+    names: string[];
+    host: ToolSource<P>;
+};
+//# sourceMappingURL=connections.d.ts.map

package/dist/connections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.d.ts","sourceRoot":"","sources":["../src/connections.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,kBAAkB,EAElB,UAAU,EACX,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC3B,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACrC,2EAA2E;IAC3E,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,UAAU,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACpD,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,uFAAuF;IACvF,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACtB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,uBAAuB,CAAC,CAAC,GAAG,OAAO,EACjD,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAC3B,oBAAoB,CAAC,CAAC,CAAC,CAEzB;AAED,MAAM,WAAW,wBAAwB,CAAC,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,0FAA0F;IAC1F,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC5D;AAED,wBAAgB,wBAAwB,CAAC,CAAC,EACxC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,GAClC,kBAAkB,CAAC,CAAC,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;CAAE,CA2FlE"}

package/dist/connections.js

@@ -0,0 +1,89 @@
+import SwaggerParser from "@apidevtools/swagger-parser";
+import { isBlockedHost, isBlockedResolved } from "@intentface/latch-net";
+import { buildOpenApiTools, isHostAllowed, } from "./build.js";
+export function defineOpenApiConnection(def) {
+    return def;
+}
+export function createOpenApiConnections(config) {
+    const fetchFn = config.fetch ?? globalThis.fetch;
+    const entries = Object.entries(config.connections);
+    // Build each connection's tools once (the spec is static; auth is resolved
+    // per-call from the tool context). Memoized as a promise per connection.
+    const built = new Map();
+    async function buildOne(name, def) {
+        let raw;
+        if (typeof def.spec === "string") {
+            const host = new URL(def.spec).hostname;
+            if (!isHostAllowed(host, config.allowedHosts)) {
+                throw new Error(`OpenAPI spec host not allowed: ${host} (connection "${name}")`);
+            }
+            // Same private/internal-address backstop as operation requests: an
+            // allowlisted spec hostname must not resolve to a private/link-local IP.
+            if (!def.allowPrivateHost &&
+                (isBlockedHost(host) || (await isBlockedResolved(host)))) {
+                throw new Error(`OpenAPI spec host resolves to a private/internal address: ${host} (connection "${name}")`);
+            }
+            const res = await fetchFn(def.spec, { redirect: "error" });
+            if (!res.ok)
+                throw new Error(`spec fetch failed: HTTP ${res.status}`);
+            raw = (await res.json());
+        }
+        else {
+            raw = def.spec;
+        }
+        // Resolve $ref/allOf so each operation has a concrete schema.
+        const doc = (await SwaggerParser.dereference(raw));
+        const baseUrl = def.baseUrl ?? doc.servers?.[0]?.url;
+        if (!baseUrl) {
+            throw new Error(`OpenAPI connection "${name}" has no baseUrl and the spec lists no servers`);
+        }
+        return buildOpenApiTools({
+            name,
+            doc: doc,
+            baseUrl,
+            auth: def.auth,
+            approval: def.approval,
+            operations: def.operations,
+            allowedHosts: config.allowedHosts,
+            fetchFn,
+            allowPrivateHost: def.allowPrivateHost,
+        });
+    }
+    function ensure(name, def) {
+        let p = built.get(name);
+        if (!p) {
+            p = buildOne(name, def).catch((err) => {
+                built.delete(name); // allow a retry on the next turn
+                throw err;
+            });
+            built.set(name, p);
+        }
+        return p;
+    }
+    function makeHost(only) {
+        const inScope = entries.filter(([name]) => !only || only.has(name));
+        return {
+            async open() {
+                const tools = {};
+                const toolApproval = {};
+                for (const [name, def] of inScope) {
+                    try {
+                        const b = await ensure(name, def);
+                        Object.assign(tools, b.tools);
+                        Object.assign(toolApproval, b.toolApproval);
+                    }
+                    catch (error) {
+                        config.onConnectionError?.(name, error); // skip a broken connection
+                    }
+                }
+                return { tools, toolApproval, close: async () => { } };
+            },
+        };
+    }
+    return {
+        host: makeHost(),
+        hostFor: (names) => makeHost(new Set(names)),
+        names: entries.map(([name]) => name),
+    };
+}
+//# sourceMappingURL=connections.js.map

package/dist/connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.js","sourceRoot":"","sources":["../src/connections.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAOzE,OAAO,EACL,iBAAiB,EACjB,aAAa,GAId,MAAM,YAAY,CAAC;AAgCpB,MAAM,UAAU,uBAAuB,CACrC,GAA4B;IAE5B,OAAO,GAAG,CAAC;AACb,CAAC;AAYD,MAAM,UAAU,wBAAwB,CACtC,MAAmC;IAEnC,MAAM,OAAO,GACX,MAAM,CAAC,KAAK,IAAK,UAAU,CAAC,KAAuB,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEnD,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAA+B,CAAC;IAErD,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,GAA4B;QAChE,IAAI,GAA4B,CAAC;QACjC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,iBAAiB,IAAI,IAAI,CAAC,CAAC;YACnF,CAAC;YACD,mEAAmE;YACnE,yEAAyE;YACzE,IACE,CAAC,GAAG,CAAC,gBAAgB;gBACrB,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EACxD,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,6DAA6D,IAAI,iBAAiB,IAAI,IAAI,CAC3F,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACtE,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;QACjB,CAAC;QACD,8DAA8D;QAC9D,MAAM,GAAG,GAAG,CAAC,MAAM,aAAa,CAAC,WAAW,CAAC,GAAY,CAAC,CAGzD,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,gDAAgD,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,iBAAiB,CAAI;YAC1B,IAAI;YACJ,GAAG,EAAE,GAAY;YACjB,OAAO;YACP,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,OAAO;YACP,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;SACvC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,MAAM,CAAC,IAAY,EAAE,GAA4B;QACxD,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACpC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iCAAiC;gBACrD,MAAM,GAAG,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,SAAS,QAAQ,CAAC,IAAkB;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,OAAO;YACL,KAAK,CAAC,IAAI;gBACR,MAAM,KAAK,GAA4B,EAAE,CAAC;gBAC1C,MAAM,YAAY,GAA4B,EAAE,CAAC;gBACjD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;wBAClC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;wBAC9B,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;oBAC9C,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,iBAAiB,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,2BAA2B;oBACtE,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,CAAC;YACxD,CAAC;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ,EAAE;QAChB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;KACrC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @intentface/latch-openapi
+ *
+ * OpenAPI connections for Latch: turn an OpenAPI 3.x document into agent tools
+ * (one per operation), behind a per-tenant SSRF allowlist and brokered auth.
+ * A second connection kind alongside MCP — the resulting `ConnectionRegistry`
+ * merges with the MCP one (`mergeConnections` in core), so an agent's
+ * `connections: [...]` resolves across both.
+ */
+export { defineOpenApiConnection, createOpenApiConnections, } from "./connections.js";
+export type { OpenApiConnectionDef, OpenApiConnectionsConfig, } from "./connections.js";
+export { bearer, apiKey, headers } from "./auth.js";
+export type { OpenApiAuth } from "./auth.js";
+export { isHostAllowed } from "./build.js";
+export type { OpenApiApprovalPolicy, FetchFunction } from "./build.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,YAAY,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+/**
+ * @intentface/latch-openapi
+ *
+ * OpenAPI connections for Latch: turn an OpenAPI 3.x document into agent tools
+ * (one per operation), behind a per-tenant SSRF allowlist and brokered auth.
+ * A second connection kind alongside MCP — the resulting `ConnectionRegistry`
+ * merges with the MCP one (`mergeConnections` in core), so an agent's
+ * `connections: [...]` resolves across both.
+ */
+export { defineOpenApiConnection, createOpenApiConnections, } from "./connections.js";
+export { bearer, apiKey, headers } from "./auth.js";
+export { isHostAllowed } from "./build.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@intentface/latch-openapi",
+  "version": "0.9.1",
+  "description": "Latch OpenAPI connections — turn an OpenAPI 3.x doc into agent tools, with a per-tenant SSRF allowlist and brokered auth.",
+  "keywords": [
+    "ai",
+    "ai-sdk",
+    "agents",
+    "llm",
+    "openapi",
+    "tools"
+  ],
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "dependencies": {
+    "@apidevtools/swagger-parser": "^10.1.1",
+    "@intentface/latch-core": "^0.9.1",
+    "@intentface/latch-net": "^0.9.1"
+  },
+  "peerDependencies": {
+    "ai": ">=7.0.0"
+  },
+  "devDependencies": {
+    "ai": "^7.0.2",
+    "typescript": "^5.7.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Intentface/intentface-latch.git",
+    "directory": "packages/openapi"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}