@invect/core 0.0.1

package/dist/services/credentials/oauth2-providers.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-providers.cjs","names":[],"sources":["../../../src/services/credentials/oauth2-providers.ts"],"sourcesContent":["/**\n * OAuth2 Provider Definitions\n *\n * Registry of OAuth2 providers with their configuration.\n * Each provider defines the URLs, scopes, and parameters needed for OAuth2 flow.\n *\n * Scopes and configurations verified against FlowiseAI/Flowise repository:\n * https://github.com/FlowiseAI/Flowise/tree/main/packages/components/credentials\n */\n\nexport interface OAuth2ProviderDefinition {\n  /** Unique provider identifier */\n  id: string;\n  /** Human-readable name */\n  name: string;\n  /** Description of what this provider is for */\n  description: string;\n  /** Icon name (lucide icon) */\n  icon?: string;\n  /** OAuth2 authorization endpoint */\n  authorizationUrl: string;\n  /** OAuth2 token endpoint */\n  tokenUrl: string;\n  /** Default scopes for this provider */\n  defaultScopes: string[];\n  /** Additional query parameters for authorization request */\n  additionalAuthParams?: Record<string, string>;\n  /** Whether this provider supports refresh tokens */\n  supportsRefresh: boolean;\n  /** Separator for scopes in the authorization URL (default: \" \"). Linear uses \",\". */\n  scopeSeparator?: string;\n  /** Documentation URL for setup instructions */\n  docsUrl?: string;\n  /** Category for grouping in UI - based on product function, not company */\n  category:\n    | 'productivity' // Docs, spreadsheets, office suites\n    | 'storage' // Cloud file storage and sync\n    | 'communication' // Email, messaging, video conferencing\n    | 'development' // Code repos, version control, CI/CD\n    | 'project_management' // Task tracking, issue tracking, project tools\n    | 'crm_sales' // Customer relationship management, sales pipelines\n    | 'marketing' // Email marketing, social media, analytics\n    | 'payments' // Payment processing, billing\n    | 'support' // Customer support, helpdesk, ticketing\n    | 'design' // Design tools, creative software\n    | 'other';\n}\n\n/**\n * Built-in OAuth2 provider definitions\n * Verified against FlowiseAI credential definitions\n */\nexport const OAUTH2_PROVIDERS: Record<string, OAuth2ProviderDefinition> = {\n  // =============================================================================\n  // GOOGLE PROVIDERS\n  // =============================================================================\n\n  // Google Docs - Verified from FlowiseAI GoogleDocsOAuth2.credential.ts\n  google_docs: {\n    id: 'google_docs',\n    name: 'Google Docs',\n    description: 'Access Google Docs for document creation and editing',\n    icon: 'FileText',\n    authorizationUrl: 'https://accounts.google.com/o/oauth2/v2/auth',\n    tokenUrl: 'https://oauth2.googleapis.com/token',\n    defaultScopes: [\n      'https://www.googleapis.com/auth/documents',\n      'https://www.googleapis.com/auth/drive',\n      'https://www.googleapis.com/auth/drive.file',\n    ],\n    additionalAuthParams: {\n      access_type: 'offline',\n      prompt: 'consent',\n    },\n    supportsRefresh: true,\n    docsUrl: 'https://developers.google.com/docs/api/quickstart',\n    category: 'productivity',\n  },\n\n  // Google Sheets - Verified from FlowiseAI GoogleSheetsOAuth2.credential.ts\n  google_sheets: {\n    id: 'google_sheets',\n    name: 'Google Sheets',\n    description: 'Access Google Sheets for spreadsheet operations',\n    icon: 'Sheet',\n    authorizationUrl: 'https://accounts.google.com/o/oauth2/v2/auth',\n    tokenUrl: 'https://oauth2.googleapis.com/token',\n    defaultScopes: [\n      'https://www.googleapis.com/auth/drive.file',\n      'https://www.googleapis.com/auth/spreadsheets',\n      'https://www.googleapis.com/auth/drive.metadata',\n    ],\n    additionalAuthParams: {\n      access_type: 'offline',\n      prompt: 'consent',\n    },\n    supportsRefresh: true,\n    docsUrl: 'https://developers.google.com/sheets/api/quickstart',\n    category: 'productivity',\n  },\n\n  // Google Drive - Verified from FlowiseAI GoogleDriveOAuth2.credential.ts\n  google_drive: {\n    id: 'google_drive',\n    name: 'Google Drive',\n    description: 'Access Google Drive for file management',\n    icon: 'HardDrive',\n    authorizationUrl: 'https://accounts.google.com/o/oauth2/v2/auth',\n    tokenUrl: 'https://oauth2.googleapis.com/token',\n    defaultScopes: [\n      'https://www.googleapis.com/auth/drive',\n      'https://www.googleapis.com/auth/drive.appdata',\n      'https://www.googleapis.com/auth/drive.photos.readonly',\n    ],\n    additionalAuthParams: {\n      access_type: 'offline',\n      prompt: 'consent',\n    },\n    supportsRefresh: true,\n    docsUrl: 'https://developers.google.com/drive/api/quickstart',\n    category: 'storage',\n  },\n\n  // Gmail - Verified from FlowiseAI GmailOAuth2.credential.ts\n  // Updated scopes to match Flowise: gmail.readonly, gmail.compose, gmail.modify, gmail.labels\n  google_gmail: {\n    id: 'google_gmail',\n    name: 'Gmail',\n    description: 'Access Gmail for email operations',\n    icon: 'Mail',\n    authorizationUrl: 'https://accounts.google.com/o/oauth2/v2/auth',\n    tokenUrl: 'https://oauth2.googleapis.com/token',\n    defaultScopes: [\n      'https://www.googleapis.com/auth/gmail.readonly',\n      'https://www.googleapis.com/auth/gmail.compose',\n      'https://www.googleapis.com/auth/gmail.modify',\n      'https://www.googleapis.com/auth/gmail.labels',\n    ],\n    additionalAuthParams: {\n      access_type: 'offline',\n      prompt: 'consent',\n    },\n    supportsRefresh: true,\n    docsUrl: 'https://developers.google.com/gmail/api/quickstart',\n    category: 'communication',\n  },\n\n  // Google Calendar - Verified from FlowiseAI GoogleCalendarOAuth2.credential.ts\n  google_calendar: {\n    id: 'google_calendar',\n    name: 'Google Calendar',\n    description: 'Access Google Calendar for event management',\n    icon: 'Calendar',\n    authorizationUrl: 'https://accounts.google.com/o/oauth2/v2/auth',\n    tokenUrl: 'https://oauth2.googleapis.com/token',\n    defaultScopes: [\n      'https://www.googleapis.com/auth/calendar',\n      'https://www.googleapis.com/auth/calendar.events',\n    ],\n    additionalAuthParams: {\n      access_type: 'offline',\n      prompt: 'consent',\n    },\n    supportsRefresh: true,\n    docsUrl: 'https://developers.google.com/calendar/api/quickstart',\n    category: 'productivity',\n  },\n\n  // =============================================================================\n  // MICROSOFT PROVIDERS\n  // =============================================================================\n\n  // Microsoft 365 (General) - Base Microsoft OAuth2 / Graph API\n  microsoft: {\n    id: 'microsoft',\n    name: 'Microsoft 365',\n    description:\n      'Access Microsoft 365 services via Graph API — calendars, mail, meetings, and more',\n    icon: 'Cloud',\n    authorizationUrl: 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize',\n    tokenUrl: 'https://login.microsoftonline.com/common/oauth2/v2.0/token',\n    defaultScopes: [\n      'openid',\n      'profile',\n      'email',\n      'offline_access',\n      'User.Read',\n      'Calendars.Read',\n      'Mail.Read',\n      'Mail.ReadBasic',\n      'OnlineMeetings.Read',\n      'OnlineMeetingTranscript.Read.All',\n    ],\n    supportsRefresh: true,\n    docsUrl:\n      'https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow',\n    category: 'productivity',\n  },\n\n  // Microsoft Outlook - Verified from FlowiseAI MicrosoftOutlookOAuth2.credential.ts\n  microsoft_outlook: {\n    id: 'microsoft_outlook',\n    name: 'Microsoft Outlook',\n    description: 'Access Outlook for email, calendar, and contacts',\n    icon: 'Mail',\n    authorizationUrl: 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize',\n    tokenUrl: 'https://login.microsoftonline.com/common/oauth2/v2.0/token',\n    defaultScopes: [\n      'openid',\n      'offline_access',\n      'Contacts.Read',\n      'Contacts.ReadWrite',\n      'Calendars.Read',\n      'Calendars.Read.Shared',\n      'Calendars.ReadWrite',\n      'Mail.Read',\n      'Mail.ReadWrite',\n      'Mail.ReadWrite.Shared',\n      'Mail.Send',\n      'Mail.Send.Shared',\n      'MailboxSettings.Read',\n    ],\n    supportsRefresh: true,\n    docsUrl: 'https://docs.microsoft.com/en-us/graph/api/resources/mail-api-overview',\n    category: 'communication',\n  },\n\n  // Microsoft Teams - Verified from FlowiseAI MicrosoftTeamsOAuth2.credential.ts\n  microsoft_teams: {\n    id: 'microsoft_teams',\n    name: 'Microsoft Teams',\n    description: 'Access Microsoft Teams for messaging and collaboration',\n    icon: 'Users',\n    authorizationUrl: 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize',\n    tokenUrl: 'https://login.microsoftonline.com/common/oauth2/v2.0/token',\n    defaultScopes: [\n      // Basic authentication\n      'openid',\n      'offline_access',\n      // User permissions\n      'User.Read',\n      'User.ReadWrite.All',\n      // Teams and Groups\n      'Group.ReadWrite.All',\n      'Team.ReadBasic.All',\n      'Team.Create',\n      'TeamMember.ReadWrite.All',\n      // Channels\n      'Channel.ReadBasic.All',\n      'Channel.Create',\n      'Channel.Delete.All',\n      'ChannelMember.ReadWrite.All',\n      // Chat operations\n      'Chat.ReadWrite',\n      'Chat.Create',\n      'ChatMember.ReadWrite',\n      // Messages\n      'ChatMessage.Send',\n      'ChatMessage.Read',\n      'ChannelMessage.Send',\n      'ChannelMessage.Read.All',\n      // Reactions and advanced features\n      'TeamsActivity.Send',\n    ],\n    supportsRefresh: true,\n    docsUrl: 'https://docs.microsoft.com/en-us/graph/api/resources/teams-api-overview',\n    category: 'communication',\n  },\n\n  // Microsoft OneDrive\n  microsoft_onedrive: {\n    id: 'microsoft_onedrive',\n    name: 'Microsoft OneDrive',\n    description: 'Access OneDrive for file storage and management',\n    icon: 'HardDrive',\n    authorizationUrl: 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize',\n    tokenUrl: 'https://login.microsoftonline.com/common/oauth2/v2.0/token',\n    defaultScopes: [\n      'openid',\n      'offline_access',\n      'Files.Read',\n      'Files.Read.All',\n      'Files.ReadWrite',\n      'Files.ReadWrite.All',\n    ],\n    supportsRefresh: true,\n    docsUrl: 'https://docs.microsoft.com/en-us/onedrive/developer/rest-api/',\n    category: 'storage',\n  },\n\n  // =============================================================================\n  // DEVELOPMENT\n  // =============================================================================\n\n  // GitHub - Verified from FlowiseAI (uses API tokens, not full OAuth2 in Flowise)\n  github: {\n    id: 'github',\n    name: 'GitHub',\n    description: 'Access GitHub repositories and issues',\n    icon: 'Github',\n    authorizationUrl: 'https://github.com/login/oauth/authorize',\n    tokenUrl: 'https://github.com/login/oauth/access_token',\n    defaultScopes: ['repo', 'read:user', 'user:email'],\n    supportsRefresh: false, // GitHub tokens don't expire by default\n    docsUrl: 'https://docs.github.com/en/apps/oauth-apps',\n    category: 'development',\n  },\n\n  // =============================================================================\n  // COMMUNICATION\n  // =============================================================================\n\n  // Slack - Based on FlowiseAI SlackApi.credential.ts (uses bot tokens)\n  slack: {\n    id: 'slack',\n    name: 'Slack',\n    description: 'Access Slack for messaging and channel operations',\n    icon: 'MessageSquare',\n    authorizationUrl: 'https://slack.com/oauth/v2/authorize',\n    tokenUrl: 'https://slack.com/api/oauth.v2.access',\n    defaultScopes: [\n      'channels:read',\n      'channels:write',\n      'chat:write',\n      'users:read',\n      'im:read',\n      'im:write',\n      'groups:read',\n    ],\n    supportsRefresh: true,\n    docsUrl: 'https://api.slack.com/authentication/oauth-v2',\n    category: 'communication',\n  },\n\n  // =============================================================================\n  // PROJECT MANAGEMENT\n  // =============================================================================\n\n  // Jira (Atlassian Cloud) - Verified from FlowiseAI JiraApi.credential.ts\n  jira: {\n    id: 'jira',\n    name: 'Jira',\n    description: 'Access Jira for issue tracking and project management',\n    icon: 'Bug',\n    authorizationUrl: 'https://auth.atlassian.com/authorize',\n    tokenUrl: 'https://auth.atlassian.com/oauth/token',\n    defaultScopes: ['read:jira-work', 'write:jira-work', 'read:jira-user', 'offline_access'],\n    additionalAuthParams: {\n      audience: 'api.atlassian.com',\n      prompt: 'consent',\n    },\n    supportsRefresh: true,\n    docsUrl: 'https://developer.atlassian.com/cloud/jira/platform/oauth-2-3lo-apps/',\n    category: 'project_management',\n  },\n\n  // Confluence Cloud - Based on FlowiseAI ConfluenceCloudApi.credential.ts\n  confluence: {\n    id: 'confluence',\n    name: 'Confluence',\n    description: 'Access Confluence for documentation and wiki pages',\n    icon: 'BookOpen',\n    authorizationUrl: 'https://auth.atlassian.com/authorize',\n    tokenUrl: 'https://auth.atlassian.com/oauth/token',\n    defaultScopes: [\n      'read:confluence-content.all',\n      'read:confluence-space.summary',\n      'write:confluence-content',\n      'offline_access',\n    ],\n    additionalAuthParams: {\n      audience: 'api.atlassian.com',\n      prompt: 'consent',\n    },\n    supportsRefresh: true,\n    docsUrl: 'https://developer.atlassian.com/cloud/confluence/oauth-2-3lo-apps/',\n    category: 'productivity',\n  },\n\n  // =============================================================================\n  // OTHER PROVIDERS\n  // =============================================================================\n\n  // Notion - Verified (Notion uses internal OAuth, no traditional scopes)\n  notion: {\n    id: 'notion',\n    name: 'Notion',\n    description: 'Access Notion workspaces and pages',\n    icon: 'FileText',\n    authorizationUrl: 'https://api.notion.com/v1/oauth/authorize',\n    tokenUrl: 'https://api.notion.com/v1/oauth/token',\n    defaultScopes: [], // Notion doesn't use scopes, permissions are set during integration setup\n    additionalAuthParams: {\n      owner: 'user',\n    },\n    supportsRefresh: false,\n    docsUrl: 'https://developers.notion.com/docs/authorization',\n    category: 'productivity',\n  },\n\n  // Linear - Verified\n  linear: {\n    id: 'linear',\n    name: 'Linear',\n    description: 'Access Linear for issue tracking and project management',\n    icon: 'CheckSquare',\n    authorizationUrl: 'https://linear.app/oauth/authorize',\n    tokenUrl: 'https://api.linear.app/oauth/token',\n    defaultScopes: ['read', 'write', 'issues:create', 'comments:create'],\n    scopeSeparator: ',',\n    supportsRefresh: true,\n    docsUrl: 'https://developers.linear.app/docs/oauth/authentication',\n    category: 'project_management',\n  },\n\n  // Airtable - Verified\n  airtable: {\n    id: 'airtable',\n    name: 'Airtable',\n    description: 'Access Airtable bases and records',\n    icon: 'Table',\n    authorizationUrl: 'https://airtable.com/oauth2/v1/authorize',\n    tokenUrl: 'https://airtable.com/oauth2/v1/token',\n    defaultScopes: [\n      'data.records:read',\n      'data.records:write',\n      'schema.bases:read',\n      'schema.bases:write',\n    ],\n    supportsRefresh: true,\n    docsUrl: 'https://airtable.com/developers/web/api/oauth-reference',\n    category: 'productivity',\n  },\n\n  // Figma - Based on FlowiseAI FigmaApi.credential.ts\n  figma: {\n    id: 'figma',\n    name: 'Figma',\n    description: 'Access Figma for design files and collaboration',\n    icon: 'Figma',\n    authorizationUrl: 'https://www.figma.com/oauth',\n    tokenUrl: 'https://www.figma.com/api/oauth/token',\n    defaultScopes: ['files:read', 'file_comments:write'],\n    supportsRefresh: true,\n    docsUrl: 'https://www.figma.com/developers/api#authentication',\n    category: 'design',\n  },\n\n  // Dropbox\n  dropbox: {\n    id: 'dropbox',\n    name: 'Dropbox',\n    description: 'Access Dropbox for file storage and sharing',\n    icon: 'Cloud',\n    authorizationUrl: 'https://www.dropbox.com/oauth2/authorize',\n    tokenUrl: 'https://api.dropboxapi.com/oauth2/token',\n    defaultScopes: [\n      'account_info.read',\n      'files.content.read',\n      'files.content.write',\n      'files.metadata.read',\n      'files.metadata.write',\n    ],\n    additionalAuthParams: {\n      token_access_type: 'offline',\n    },\n    supportsRefresh: true,\n    docsUrl: 'https://www.dropbox.com/developers/documentation/http/documentation',\n    category: 'storage',\n  },\n\n  // HubSpot\n  hubspot: {\n    id: 'hubspot',\n    name: 'HubSpot',\n    description: 'Access HubSpot CRM for contacts, deals, and marketing',\n    icon: 'Users',\n    authorizationUrl: 'https://app.hubspot.com/oauth/authorize',\n    tokenUrl: 'https://api.hubapi.com/oauth/v1/token',\n    defaultScopes: [\n      'crm.objects.contacts.read',\n      'crm.objects.contacts.write',\n      'crm.objects.companies.read',\n      'crm.objects.deals.read',\n      'crm.objects.deals.write',\n    ],\n    supportsRefresh: true,\n    docsUrl: 'https://developers.hubspot.com/docs/api/oauth-quickstart-guide',\n    category: 'crm_sales',\n  },\n\n  // Salesforce\n  salesforce: {\n    id: 'salesforce',\n    name: 'Salesforce',\n    description: 'Access Salesforce CRM for sales and customer data',\n    icon: 'Cloud',\n    authorizationUrl: 'https://login.salesforce.com/services/oauth2/authorize',\n    tokenUrl: 'https://login.salesforce.com/services/oauth2/token',\n    defaultScopes: ['api', 'refresh_token', 'offline_access'],\n    supportsRefresh: true,\n    docsUrl:\n      'https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/intro_oauth_and_connected_apps.htm',\n    category: 'crm_sales',\n  },\n\n  // Asana\n  asana: {\n    id: 'asana',\n    name: 'Asana',\n    description: 'Access Asana for task and project management',\n    icon: 'CheckSquare',\n    authorizationUrl: 'https://app.asana.com/-/oauth_authorize',\n    tokenUrl: 'https://app.asana.com/-/oauth_token',\n    defaultScopes: ['default'], // Asana uses 'default' scope for full access\n    supportsRefresh: true,\n    docsUrl: 'https://developers.asana.com/docs/oauth',\n    category: 'project_management',\n  },\n\n  // Trello\n  trello: {\n    id: 'trello',\n    name: 'Trello',\n    description: 'Access Trello boards, cards, and lists',\n    icon: 'Layout',\n    authorizationUrl: 'https://trello.com/1/authorize',\n    tokenUrl: 'https://trello.com/1/OAuthGetAccessToken',\n    defaultScopes: ['read', 'write'],\n    additionalAuthParams: {\n      expiration: 'never',\n      name: 'Invect',\n    },\n    supportsRefresh: false, // Trello uses OAuth 1.0a style with non-expiring tokens\n    docsUrl: 'https://developer.atlassian.com/cloud/trello/guides/rest-api/authorization/',\n    category: 'project_management',\n  },\n\n  // Zoom\n  zoom: {\n    id: 'zoom',\n    name: 'Zoom',\n    description: 'Access Zoom for meetings and webinars',\n    icon: 'Video',\n    authorizationUrl: 'https://zoom.us/oauth/authorize',\n    tokenUrl: 'https://zoom.us/oauth/token',\n    defaultScopes: ['meeting:read', 'meeting:write', 'user:read', 'webinar:read', 'webinar:write'],\n    supportsRefresh: true,\n    docsUrl: 'https://developers.zoom.us/docs/integrations/oauth/',\n    category: 'communication',\n  },\n\n  // Discord\n  discord: {\n    id: 'discord',\n    name: 'Discord',\n    description: 'Access Discord for messaging and server management',\n    icon: 'MessageSquare',\n    authorizationUrl: 'https://discord.com/api/oauth2/authorize',\n    tokenUrl: 'https://discord.com/api/oauth2/token',\n    defaultScopes: ['identify', 'email', 'guilds', 'guilds.members.read', 'bot', 'messages.read'],\n    supportsRefresh: true,\n    docsUrl: 'https://discord.com/developers/docs/topics/oauth2',\n    category: 'communication',\n  },\n\n  // Twitter/X\n  twitter: {\n    id: 'twitter',\n    name: 'Twitter / X',\n    description: 'Access Twitter/X for tweets and user data',\n    icon: 'Twitter',\n    authorizationUrl: 'https://twitter.com/i/oauth2/authorize',\n    tokenUrl: 'https://api.twitter.com/2/oauth2/token',\n    defaultScopes: ['tweet.read', 'tweet.write', 'users.read', 'offline.access'],\n    additionalAuthParams: {\n      code_challenge_method: 'S256',\n    },\n    supportsRefresh: true,\n    docsUrl: 'https://developer.twitter.com/en/docs/authentication/oauth-2-0',\n    category: 'marketing',\n  },\n\n  // Spotify\n  spotify: {\n    id: 'spotify',\n    name: 'Spotify',\n    description: 'Access Spotify for music and playlist management',\n    icon: 'Music',\n    authorizationUrl: 'https://accounts.spotify.com/authorize',\n    tokenUrl: 'https://accounts.spotify.com/api/token',\n    defaultScopes: [\n      'user-read-email',\n      'user-read-private',\n      'playlist-read-private',\n      'playlist-modify-public',\n      'playlist-modify-private',\n    ],\n    supportsRefresh: true,\n    docsUrl: 'https://developer.spotify.com/documentation/web-api/tutorials/code-flow',\n    category: 'other',\n  },\n\n  // Shopify\n  shopify: {\n    id: 'shopify',\n    name: 'Shopify',\n    description: 'Access Shopify for e-commerce store management',\n    icon: 'ShoppingBag',\n    authorizationUrl: 'https://{shop}.myshopify.com/admin/oauth/authorize',\n    tokenUrl: 'https://{shop}.myshopify.com/admin/oauth/access_token',\n    defaultScopes: [\n      'read_products',\n      'write_products',\n      'read_orders',\n      'write_orders',\n      'read_customers',\n    ],\n    supportsRefresh: false, // Shopify tokens don't expire\n    docsUrl: 'https://shopify.dev/docs/apps/auth/oauth',\n    category: 'other', // ecommerce\n  },\n\n  // Intercom\n  intercom: {\n    id: 'intercom',\n    name: 'Intercom',\n    description: 'Access Intercom for customer messaging and support',\n    icon: 'MessageCircle',\n    authorizationUrl: 'https://app.intercom.com/oauth',\n    tokenUrl: 'https://api.intercom.io/auth/eagle/token',\n    defaultScopes: [], // Intercom doesn't use scopes in OAuth flow\n    supportsRefresh: false,\n    docsUrl: 'https://developers.intercom.com/building-apps/docs/setting-up-oauth',\n    category: 'support',\n  },\n\n  // Zendesk\n  zendesk: {\n    id: 'zendesk',\n    name: 'Zendesk',\n    description: 'Access Zendesk for customer support and ticketing',\n    icon: 'Headphones',\n    authorizationUrl: 'https://{subdomain}.zendesk.com/oauth/authorizations/new',\n    tokenUrl: 'https://{subdomain}.zendesk.com/oauth/tokens',\n    defaultScopes: ['read', 'write'],\n    supportsRefresh: true,\n    docsUrl: 'https://developer.zendesk.com/documentation/live-chat/getting-started/auth/',\n    category: 'support',\n  },\n\n  // Box\n  box: {\n    id: 'box',\n    name: 'Box',\n    description: 'Access Box for file storage and collaboration',\n    icon: 'Box',\n    authorizationUrl: 'https://account.box.com/api/oauth2/authorize',\n    tokenUrl: 'https://api.box.com/oauth2/token',\n    defaultScopes: [], // Box doesn't use scopes in authorization\n    supportsRefresh: true,\n    docsUrl: 'https://developer.box.com/guides/authentication/oauth2/',\n    category: 'storage',\n  },\n\n  // Pipedrive\n  pipedrive: {\n    id: 'pipedrive',\n    name: 'Pipedrive',\n    description: 'Access Pipedrive CRM for sales pipeline management',\n    icon: 'TrendingUp',\n    authorizationUrl: 'https://oauth.pipedrive.com/oauth/authorize',\n    tokenUrl: 'https://oauth.pipedrive.com/oauth/token',\n    defaultScopes: [], // Pipedrive uses app-level permissions, not OAuth scopes\n    supportsRefresh: true,\n    docsUrl: 'https://pipedrive.readme.io/docs/marketplace-oauth-authorization',\n    category: 'crm_sales',\n  },\n\n  // Monday.com\n  monday: {\n    id: 'monday',\n    name: 'Monday.com',\n    description: 'Access Monday.com for work management',\n    icon: 'Calendar',\n    authorizationUrl: 'https://auth.monday.com/oauth2/authorize',\n    tokenUrl: 'https://auth.monday.com/oauth2/token',\n    defaultScopes: ['me:read', 'boards:read', 'boards:write'],\n    supportsRefresh: true,\n    docsUrl: 'https://developer.monday.com/apps/docs/oauth',\n    category: 'project_management',\n  },\n\n  // ClickUp\n  clickup: {\n    id: 'clickup',\n    name: 'ClickUp',\n    description: 'Access ClickUp for project and task management',\n    icon: 'CheckCircle',\n    authorizationUrl: 'https://app.clickup.com/api',\n    tokenUrl: 'https://api.clickup.com/api/v2/oauth/token',\n    defaultScopes: [], // ClickUp doesn't use OAuth scopes\n    supportsRefresh: true,\n    docsUrl: 'https://clickup.com/api/developer-portal/authentication/',\n    category: 'project_management',\n  },\n\n  // Freshdesk\n  freshdesk: {\n    id: 'freshdesk',\n    name: 'Freshdesk',\n    description: 'Access Freshdesk for customer support ticketing',\n    icon: 'Headphones',\n    authorizationUrl: 'https://{domain}.freshdesk.com/oauth/authorize',\n    tokenUrl: 'https://{domain}.freshdesk.com/oauth/token',\n    defaultScopes: [], // Freshdesk uses API key or OAuth without scopes\n    supportsRefresh: true,\n    docsUrl: 'https://developers.freshdesk.com/api/#authentication',\n    category: 'support',\n  },\n\n  // QuickBooks\n  quickbooks: {\n    id: 'quickbooks',\n    name: 'QuickBooks',\n    description: 'Access QuickBooks for accounting and financial data',\n    icon: 'DollarSign',\n    authorizationUrl: 'https://appcenter.intuit.com/connect/oauth2',\n    tokenUrl: 'https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer',\n    defaultScopes: ['com.intuit.quickbooks.accounting'],\n    supportsRefresh: true,\n    docsUrl:\n      'https://developer.intuit.com/app/developer/qbo/docs/develop/authentication-and-authorization/oauth-2.0',\n    category: 'payments', // accounting/finance\n  },\n\n  // Mailchimp\n  mailchimp: {\n    id: 'mailchimp',\n    name: 'Mailchimp',\n    description: 'Access Mailchimp for email marketing and audiences',\n    icon: 'Mail',\n    authorizationUrl: 'https://login.mailchimp.com/oauth2/authorize',\n    tokenUrl: 'https://login.mailchimp.com/oauth2/token',\n    defaultScopes: [], // Mailchimp doesn't use OAuth scopes\n    supportsRefresh: false, // Mailchimp tokens don't expire\n    docsUrl: 'https://mailchimp.com/developer/marketing/guides/access-user-data-oauth-2/',\n    category: 'marketing',\n  },\n\n  // Stripe\n  stripe: {\n    id: 'stripe',\n    name: 'Stripe',\n    description: 'Access Stripe for payment processing',\n    icon: 'CreditCard',\n    authorizationUrl: 'https://connect.stripe.com/oauth/authorize',\n    tokenUrl: 'https://connect.stripe.com/oauth/token',\n    defaultScopes: ['read_write'],\n    supportsRefresh: true,\n    docsUrl: 'https://stripe.com/docs/connect/oauth-reference',\n    category: 'payments',\n  },\n\n  // PayPal\n  paypal: {\n    id: 'paypal',\n    name: 'PayPal',\n    description: 'Access PayPal for payment processing',\n    icon: 'DollarSign',\n    authorizationUrl: 'https://www.paypal.com/signin/authorize',\n    tokenUrl: 'https://api.paypal.com/v1/oauth2/token',\n    defaultScopes: ['openid', 'email'],\n    supportsRefresh: true,\n    docsUrl: 'https://developer.paypal.com/docs/log-in-with-paypal/integrate/',\n    category: 'payments',\n  },\n};\n\n/**\n * Get a provider definition by ID\n */\nexport function getOAuth2Provider(providerId: string): OAuth2ProviderDefinition | undefined {\n  return OAUTH2_PROVIDERS[providerId];\n}\n\n/**\n * Get all provider definitions\n */\nexport function getAllOAuth2Providers(): OAuth2ProviderDefinition[] {\n  return Object.values(OAUTH2_PROVIDERS);\n}\n\n/**\n * Get providers by category\n */\nexport function getOAuth2ProvidersByCategory(\n  category: OAuth2ProviderDefinition['category'],\n): OAuth2ProviderDefinition[] {\n  return Object.values(OAUTH2_PROVIDERS).filter((p) => p.category === category);\n}\n"],"mappings":";;;;;AAoDA,MAAa,mBAA6D;CAMxE,aAAa;EACX,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACD;EACD,sBAAsB;GACpB,aAAa;GACb,QAAQ;GACT;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,eAAe;EACb,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACD;EACD,sBAAsB;GACpB,aAAa;GACb,QAAQ;GACT;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,cAAc;EACZ,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACD;EACD,sBAAsB;GACpB,aAAa;GACb,QAAQ;GACT;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAID,cAAc;EACZ,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACA;GACD;EACD,sBAAsB;GACpB,aAAa;GACb,QAAQ;GACT;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,iBAAiB;EACf,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,CACb,4CACA,kDACD;EACD,sBAAsB;GACpB,aAAa;GACb,QAAQ;GACT;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAOD,WAAW;EACT,IAAI;EACJ,MAAM;EACN,aACE;EACF,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,SACE;EACF,UAAU;EACX;CAGD,mBAAmB;EACjB,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,iBAAiB;EACf,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GAEb;GACA;GAEA;GACA;GAEA;GACA;GACA;GACA;GAEA;GACA;GACA;GACA;GAEA;GACA;GACA;GAEA;GACA;GACA;GACA;GAEA;GACD;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,oBAAoB;EAClB,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAOD,QAAQ;EACN,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GAAC;GAAQ;GAAa;GAAa;EAClD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAOD,OAAO;EACL,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACA;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAOD,MAAM;EACJ,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GAAC;GAAkB;GAAmB;GAAkB;GAAiB;EACxF,sBAAsB;GACpB,UAAU;GACV,QAAQ;GACT;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,YAAY;EACV,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACA;GACD;EACD,sBAAsB;GACpB,UAAU;GACV,QAAQ;GACT;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAOD,QAAQ;EACN,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,EAAE;EACjB,sBAAsB,EACpB,OAAO,QACR;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,QAAQ;EACN,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GAAC;GAAQ;GAAS;GAAiB;GAAkB;EACpE,gBAAgB;EAChB,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,UAAU;EACR,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,OAAO;EACL,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,CAAC,cAAc,sBAAsB;EACpD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,SAAS;EACP,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACA;GACA;GACD;EACD,sBAAsB,EACpB,mBAAmB,WACpB;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,SAAS;EACP,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,YAAY;EACV,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GAAC;GAAO;GAAiB;GAAiB;EACzD,iBAAiB;EACjB,SACE;EACF,UAAU;EACX;CAGD,OAAO;EACL,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,CAAC,UAAU;EAC1B,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,QAAQ;EACN,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,CAAC,QAAQ,QAAQ;EAChC,sBAAsB;GACpB,YAAY;GACZ,MAAM;GACP;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,MAAM;EACJ,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GAAC;GAAgB;GAAiB;GAAa;GAAgB;GAAgB;EAC9F,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,SAAS;EACP,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GAAC;GAAY;GAAS;GAAU;GAAuB;GAAO;GAAgB;EAC7F,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,SAAS;EACP,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GAAC;GAAc;GAAe;GAAc;GAAiB;EAC5E,sBAAsB,EACpB,uBAAuB,QACxB;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,SAAS;EACP,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,SAAS;EACP,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GACb;GACA;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,UAAU;EACR,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,EAAE;EACjB,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,SAAS;EACP,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,CAAC,QAAQ,QAAQ;EAChC,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,KAAK;EACH,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,EAAE;EACjB,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,WAAW;EACT,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,EAAE;EACjB,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,QAAQ;EACN,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe;GAAC;GAAW;GAAe;GAAe;EACzD,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,SAAS;EACP,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,EAAE;EACjB,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,WAAW;EACT,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,EAAE;EACjB,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,YAAY;EACV,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,CAAC,mCAAmC;EACnD,iBAAiB;EACjB,SACE;EACF,UAAU;EACX;CAGD,WAAW;EACT,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,EAAE;EACjB,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,QAAQ;EACN,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,CAAC,aAAa;EAC7B,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CAGD,QAAQ;EACN,IAAI;EACJ,MAAM;EACN,aAAa;EACb,MAAM;EACN,kBAAkB;EAClB,UAAU;EACV,eAAe,CAAC,UAAU,QAAQ;EAClC,iBAAiB;EACjB,SAAS;EACT,UAAU;EACX;CACF;;;;AAKD,SAAgB,kBAAkB,YAA0D;AAC1F,QAAO,iBAAiB;;;;;AAM1B,SAAgB,wBAAoD;AAClE,QAAO,OAAO,OAAO,iBAAiB"}

package/dist/services/credentials/oauth2-providers.d.cts

@@ -0,0 +1,39 @@
+//#region src/services/credentials/oauth2-providers.d.ts
+/**
+ * OAuth2 Provider Definitions
+ *
+ * Registry of OAuth2 providers with their configuration.
+ * Each provider defines the URLs, scopes, and parameters needed for OAuth2 flow.
+ *
+ * Scopes and configurations verified against FlowiseAI/Flowise repository:
+ * https://github.com/FlowiseAI/Flowise/tree/main/packages/components/credentials
+ */
+interface OAuth2ProviderDefinition {
+  /** Unique provider identifier */
+  id: string;
+  /** Human-readable name */
+  name: string;
+  /** Description of what this provider is for */
+  description: string;
+  /** Icon name (lucide icon) */
+  icon?: string;
+  /** OAuth2 authorization endpoint */
+  authorizationUrl: string;
+  /** OAuth2 token endpoint */
+  tokenUrl: string;
+  /** Default scopes for this provider */
+  defaultScopes: string[];
+  /** Additional query parameters for authorization request */
+  additionalAuthParams?: Record<string, string>;
+  /** Whether this provider supports refresh tokens */
+  supportsRefresh: boolean;
+  /** Separator for scopes in the authorization URL (default: " "). Linear uses ",". */
+  scopeSeparator?: string;
+  /** Documentation URL for setup instructions */
+  docsUrl?: string;
+  /** Category for grouping in UI - based on product function, not company */
+  category: 'productivity' | 'storage' | 'communication' | 'development' | 'project_management' | 'crm_sales' | 'marketing' | 'payments' | 'support' | 'design' | 'other';
+}
+//#endregion
+export { OAuth2ProviderDefinition };
+//# sourceMappingURL=oauth2-providers.d.cts.map

package/dist/services/credentials/oauth2-providers.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-providers.d.cts","names":[],"sources":["../../../src/services/credentials/oauth2-providers.ts"],"mappings":";;AAUA;;;;;;;;UAAiB,wBAAA;EAYf;EAVA,EAAA;EAcA;EAZA,IAAA;EAcA;EAZA,WAAA;EAgBA;EAdA,IAAA;EAgBQ;EAdR,gBAAA;;EAEA,QAAA;;EAEA,aAAA;;EAEA,oBAAA,GAAuB,MAAA;;EAEvB,eAAA;;EAEA,cAAA;;EAEA,OAAA;;EAEA,QAAA;AAAA"}

package/dist/services/credentials/oauth2-providers.d.ts

@@ -0,0 +1,39 @@
+//#region src/services/credentials/oauth2-providers.d.ts
+/**
+ * OAuth2 Provider Definitions
+ *
+ * Registry of OAuth2 providers with their configuration.
+ * Each provider defines the URLs, scopes, and parameters needed for OAuth2 flow.
+ *
+ * Scopes and configurations verified against FlowiseAI/Flowise repository:
+ * https://github.com/FlowiseAI/Flowise/tree/main/packages/components/credentials
+ */
+interface OAuth2ProviderDefinition {
+  /** Unique provider identifier */
+  id: string;
+  /** Human-readable name */
+  name: string;
+  /** Description of what this provider is for */
+  description: string;
+  /** Icon name (lucide icon) */
+  icon?: string;
+  /** OAuth2 authorization endpoint */
+  authorizationUrl: string;
+  /** OAuth2 token endpoint */
+  tokenUrl: string;
+  /** Default scopes for this provider */
+  defaultScopes: string[];
+  /** Additional query parameters for authorization request */
+  additionalAuthParams?: Record<string, string>;
+  /** Whether this provider supports refresh tokens */
+  supportsRefresh: boolean;
+  /** Separator for scopes in the authorization URL (default: " "). Linear uses ",". */
+  scopeSeparator?: string;
+  /** Documentation URL for setup instructions */
+  docsUrl?: string;
+  /** Category for grouping in UI - based on product function, not company */
+  category: 'productivity' | 'storage' | 'communication' | 'development' | 'project_management' | 'crm_sales' | 'marketing' | 'payments' | 'support' | 'design' | 'other';
+}
+//#endregion
+export { OAuth2ProviderDefinition };
+//# sourceMappingURL=oauth2-providers.d.ts.map

package/dist/services/credentials/oauth2-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-providers.d.ts","names":[],"sources":["../../../src/services/credentials/oauth2-providers.ts"],"mappings":";;AAUA;;;;;;;;UAAiB,wBAAA;EAYf;EAVA,EAAA;EAcA;EAZA,IAAA;EAcA;EAZA,WAAA;EAgBA;EAdA,IAAA;EAgBQ;EAdR,gBAAA;;EAEA,QAAA;;EAEA,aAAA;;EAEA,oBAAA,GAAuB,MAAA;;EAEvB,eAAA;;EAEA,cAAA;;EAEA,OAAA;;EAEA,QAAA;AAAA"}