@jami-studio/dispatch 0.13.14

package/dist/actions/provider-api-catalog.d.ts

@@ -0,0 +1,24 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    provider?: string | undefined;
+}, {
+    providers: unknown[] | {
+        id: "amplitude" | "apollo" | "bigquery" | "commonroom" | "dataforseo" | "figma" | "ga4" | "gcloud" | "github" | "gmail" | "gong" | "google_calendar" | "google_drive" | "grafana" | "granola" | "hubspot" | "jira" | "mixpanel" | "notion" | "posthog" | "prometheus" | "pylon" | "sentry" | "slack" | "stripe" | "twitter";
+        label: string;
+        defaultBaseUrl: string;
+        baseUrlCredentialKey: string;
+        auth: string;
+        credentialKeys: readonly string[];
+        docsUrls: readonly string[];
+        specUrls: readonly string[];
+        allowedHostSuffixes: readonly string[];
+        placeholders: readonly import("node_modules/@agent-native/core/dist/provider-api/index.js").ProviderApiPlaceholder[];
+        defaultHeaders: Record<string, string>;
+        examples: readonly import("node_modules/@agent-native/core/dist/provider-api/index.js").ProviderApiExample[];
+        notes: readonly string[];
+        corpusRecipes: readonly import("node_modules/@agent-native/core/dist/provider-api/index.js").ProviderApiCorpusRecipe[];
+        templateUses: readonly import("@agent-native/core").WorkspaceConnectionTemplateUse[];
+    }[];
+    guidance: string;
+}>;
+export default _default;
+//# sourceMappingURL=provider-api-catalog.d.ts.map

package/dist/actions/provider-api-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-api-catalog.d.ts","sourceRoot":"","sources":["../../src/actions/provider-api-catalog.ts"],"names":[],"mappings":""}

package/dist/actions/provider-api-catalog.js

@@ -0,0 +1,22 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { listProviderApiCatalog } from "../server/lib/provider-api.js";
+export default defineAction({
+    description: "List raw HTTP API capabilities for shared workspace integrations, configured providers, and custom registered providers. Use before provider-api-request when grant/setup metadata is not enough and the provider's actual API must be inspected. Returns base URLs, auth style, credential key names, docs/spec URLs, placeholders, and examples; never returns secret values. Custom providers registered via provider-api-register are included.",
+    schema: z.object({
+        provider: z
+            .string()
+            .optional()
+            .describe("Optional provider id to inspect (built-in or custom). Omit to list every available provider API."),
+    }),
+    http: { method: "GET" },
+    readOnly: true,
+    run: async ({ provider }) => {
+        const providers = await listProviderApiCatalog(provider);
+        return {
+            providers,
+            guidance: "Workspace integrations and grants are not capability limits. When a provider can answer a question through its HTTP API, inspect docs/spec URLs here and call provider-api-request with the exact provider API method/path/query/body instead of adding a rigid one-off action. For broad searches, joins, classification, or absence claims, stage or save the full bounded corpus and reduce it with query-staged-dataset or run-code. Custom providers registered via provider-api-register also appear here.",
+        };
+    },
+});
+//# sourceMappingURL=provider-api-catalog.js.map

package/dist/actions/provider-api-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-api-catalog.js","sourceRoot":"","sources":["../../src/actions/provider-api-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,qbAAqb;IACvb,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,kGAAkG,CACnG;KACJ,CAAC;IACF,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,GAAG,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC1B,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACzD,OAAO;YACL,SAAS;YACT,QAAQ,EACN,kfAAkf;SACrf,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { z } from \"zod\";\r\n\r\nimport { listProviderApiCatalog } from \"../server/lib/provider-api.js\";\r\n\r\nexport default defineAction({\r\n  description:\r\n    \"List raw HTTP API capabilities for shared workspace integrations, configured providers, and custom registered providers. Use before provider-api-request when grant/setup metadata is not enough and the provider's actual API must be inspected. Returns base URLs, auth style, credential key names, docs/spec URLs, placeholders, and examples; never returns secret values. Custom providers registered via provider-api-register are included.\",\r\n  schema: z.object({\r\n    provider: z\r\n      .string()\r\n      .optional()\r\n      .describe(\r\n        \"Optional provider id to inspect (built-in or custom). Omit to list every available provider API.\",\r\n      ),\r\n  }),\r\n  http: { method: \"GET\" },\r\n  readOnly: true,\r\n  run: async ({ provider }) => {\r\n    const providers = await listProviderApiCatalog(provider);\r\n    return {\r\n      providers,\r\n      guidance:\r\n        \"Workspace integrations and grants are not capability limits. When a provider can answer a question through its HTTP API, inspect docs/spec URLs here and call provider-api-request with the exact provider API method/path/query/body instead of adding a rigid one-off action. For broad searches, joins, classification, or absence claims, stage or save the full bounded corpus and reduce it with query-staged-dataset or run-code. Custom providers registered via provider-api-register also appear here.\",\r\n    };\r\n  },\r\n});\r\n"]}

package/dist/actions/provider-api-docs.d.ts

@@ -0,0 +1,22 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    provider: string;
+    url?: string | undefined;
+    maxBytes?: unknown;
+    maxChars?: unknown;
+    responseMode?: "auto" | "links" | "markdown" | "matches" | "metadata" | "raw" | "text" | undefined;
+    extract?: "all-visible" | "none" | "readability" | undefined;
+    includeLinks?: unknown;
+    search?: {
+        query?: string | string[] | undefined;
+        queries?: string[] | undefined;
+        terms?: string[] | undefined;
+        regex?: string | undefined;
+        regexFlags?: string | undefined;
+        source?: "extracted" | "raw" | undefined;
+        maxMatches?: unknown;
+        contextChars?: unknown;
+        caseSensitive?: unknown;
+    } | undefined;
+}, unknown>;
+export default _default;
+//# sourceMappingURL=provider-api-docs.d.ts.map

package/dist/actions/provider-api-docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-api-docs.d.ts","sourceRoot":"","sources":["../../src/actions/provider-api-docs.ts"],"names":[],"mappings":""}

package/dist/actions/provider-api-docs.js

@@ -0,0 +1,57 @@
+import { defineAction } from "@agent-native/core";
+import { z } from "zod";
+import { fetchProviderApiDocs } from "../server/lib/provider-api.js";
+const BooleanFromQuerySchema = z.preprocess((value) => (typeof value === "string" ? value === "true" : value), z.boolean());
+const WebContentSearchSchema = z.object({
+    query: z.union([z.string(), z.array(z.string())]).optional(),
+    queries: z.array(z.string()).optional(),
+    terms: z.array(z.string()).optional(),
+    regex: z.string().optional(),
+    regexFlags: z.string().optional(),
+    source: z.enum(["extracted", "raw"]).optional(),
+    maxMatches: z.coerce.number().int().min(1).max(500).optional(),
+    contextChars: z.coerce.number().int().min(0).max(1_000).optional(),
+    caseSensitive: BooleanFromQuerySchema.optional(),
+});
+export default defineAction({
+    description: "Inspect provider API docs/spec metadata, or fetch ANY public API documentation page, OpenAPI spec, changelog, or web page. Registered docs/spec URLs from provider-api-catalog are curated starting points, but any public https/http URL is allowed. Use web-search to find documentation URLs first when uncertain, then fetch them here. SSRF guard still applies — private/internal addresses are blocked.",
+    schema: z.object({
+        provider: z
+            .string()
+            .min(1)
+            .describe("Provider whose API docs/spec to inspect. Can be a built-in provider id or a custom provider id registered via provider-api-register."),
+        url: z
+            .string()
+            .url()
+            .optional()
+            .describe("Optional URL to fetch. Can be any public https/http URL — API documentation pages, OpenAPI specs, changelogs, README files, etc. Registered docs/spec URLs from provider-api-catalog are curated starting points."),
+        maxBytes: z.coerce
+            .number()
+            .int()
+            .min(1_000)
+            .max(4 * 1024 * 1024)
+            .optional()
+            .describe("Maximum response bytes to read. Default 1MB, max 4MB."),
+        maxChars: z.coerce
+            .number()
+            .int()
+            .min(1)
+            .max(200_000)
+            .optional()
+            .describe("Maximum extracted content characters to return."),
+        responseMode: z
+            .enum(["auto", "raw", "text", "markdown", "links", "metadata", "matches"])
+            .optional()
+            .describe("How to return fetched docs. Default auto extracts HTML to markdown; use matches with search for compact snippets."),
+        extract: z
+            .enum(["readability", "all-visible", "none"])
+            .optional()
+            .describe("HTML extraction strategy. Default readability."),
+        includeLinks: BooleanFromQuerySchema.optional().describe("Include compact links from extracted HTML. Default true."),
+        search: WebContentSearchSchema.optional().describe("Optional post-fetch search over extracted content by default. Supports query, queries, terms, regex, source, maxMatches, and contextChars."),
+    }),
+    http: { method: "GET" },
+    readOnly: true,
+    run: async (args) => fetchProviderApiDocs(args),
+});
+//# sourceMappingURL=provider-api-docs.js.map

package/dist/actions/provider-api-docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-api-docs.js","sourceRoot":"","sources":["../../src/actions/provider-api-docs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE,MAAM,sBAAsB,GAAG,CAAC,CAAC,UAAU,CACzC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EACjE,CAAC,CAAC,OAAO,EAAE,CACZ,CAAC;AACF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC9D,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAClE,aAAa,EAAE,sBAAsB,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gZAAgZ;IAClZ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CACP,sIAAsI,CACvI;QACH,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CACP,mNAAmN,CACpN;QACH,QAAQ,EAAE,CAAC,CAAC,MAAM;aACf,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,KAAK,CAAC;aACV,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;aACpB,QAAQ,EAAE;aACV,QAAQ,CAAC,uDAAuD,CAAC;QACpE,QAAQ,EAAE,CAAC,CAAC,MAAM;aACf,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,OAAO,CAAC;aACZ,QAAQ,EAAE;aACV,QAAQ,CAAC,iDAAiD,CAAC;QAC9D,YAAY,EAAE,CAAC;aACZ,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;aACzE,QAAQ,EAAE;aACV,QAAQ,CACP,mHAAmH,CACpH;QACH,OAAO,EAAE,CAAC;aACP,IAAI,CAAC,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;aAC5C,QAAQ,EAAE;aACV,QAAQ,CAAC,gDAAgD,CAAC;QAC7D,YAAY,EAAE,sBAAsB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACtD,0DAA0D,CAC3D;QACD,MAAM,EAAE,sBAAsB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChD,4IAA4I,CAC7I;KACF,CAAC;IACF,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;CAChD,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport { z } from \"zod\";\r\n\r\nimport { fetchProviderApiDocs } from \"../server/lib/provider-api.js\";\r\n\r\nconst BooleanFromQuerySchema = z.preprocess(\r\n  (value) => (typeof value === \"string\" ? value === \"true\" : value),\r\n  z.boolean(),\r\n);\r\nconst WebContentSearchSchema = z.object({\r\n  query: z.union([z.string(), z.array(z.string())]).optional(),\r\n  queries: z.array(z.string()).optional(),\r\n  terms: z.array(z.string()).optional(),\r\n  regex: z.string().optional(),\r\n  regexFlags: z.string().optional(),\r\n  source: z.enum([\"extracted\", \"raw\"]).optional(),\r\n  maxMatches: z.coerce.number().int().min(1).max(500).optional(),\r\n  contextChars: z.coerce.number().int().min(0).max(1_000).optional(),\r\n  caseSensitive: BooleanFromQuerySchema.optional(),\r\n});\r\n\r\nexport default defineAction({\r\n  description:\r\n    \"Inspect provider API docs/spec metadata, or fetch ANY public API documentation page, OpenAPI spec, changelog, or web page. Registered docs/spec URLs from provider-api-catalog are curated starting points, but any public https/http URL is allowed. Use web-search to find documentation URLs first when uncertain, then fetch them here. SSRF guard still applies — private/internal addresses are blocked.\",\r\n  schema: z.object({\r\n    provider: z\r\n      .string()\r\n      .min(1)\r\n      .describe(\r\n        \"Provider whose API docs/spec to inspect. Can be a built-in provider id or a custom provider id registered via provider-api-register.\",\r\n      ),\r\n    url: z\r\n      .string()\r\n      .url()\r\n      .optional()\r\n      .describe(\r\n        \"Optional URL to fetch. Can be any public https/http URL — API documentation pages, OpenAPI specs, changelogs, README files, etc. Registered docs/spec URLs from provider-api-catalog are curated starting points.\",\r\n      ),\r\n    maxBytes: z.coerce\r\n      .number()\r\n      .int()\r\n      .min(1_000)\r\n      .max(4 * 1024 * 1024)\r\n      .optional()\r\n      .describe(\"Maximum response bytes to read. Default 1MB, max 4MB.\"),\r\n    maxChars: z.coerce\r\n      .number()\r\n      .int()\r\n      .min(1)\r\n      .max(200_000)\r\n      .optional()\r\n      .describe(\"Maximum extracted content characters to return.\"),\r\n    responseMode: z\r\n      .enum([\"auto\", \"raw\", \"text\", \"markdown\", \"links\", \"metadata\", \"matches\"])\r\n      .optional()\r\n      .describe(\r\n        \"How to return fetched docs. Default auto extracts HTML to markdown; use matches with search for compact snippets.\",\r\n      ),\r\n    extract: z\r\n      .enum([\"readability\", \"all-visible\", \"none\"])\r\n      .optional()\r\n      .describe(\"HTML extraction strategy. Default readability.\"),\r\n    includeLinks: BooleanFromQuerySchema.optional().describe(\r\n      \"Include compact links from extracted HTML. Default true.\",\r\n    ),\r\n    search: WebContentSearchSchema.optional().describe(\r\n      \"Optional post-fetch search over extracted content by default. Supports query, queries, terms, regex, source, maxMatches, and contextChars.\",\r\n    ),\r\n  }),\r\n  http: { method: \"GET\" },\r\n  readOnly: true,\r\n  run: async (args) => fetchProviderApiDocs(args),\r\n});\r\n"]}

package/dist/actions/provider-api-register.d.ts

@@ -0,0 +1,85 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    operation?: "delete" | "get" | "list" | "upsert" | undefined;
+    id?: string | undefined;
+    label?: string | undefined;
+    baseUrl?: string | undefined;
+    auth?: {
+        type: "none";
+    } | {
+        type: "bearer";
+        credentialKey: string;
+    } | {
+        type: "basic";
+        usernameKey: string;
+        passwordKey: string;
+    } | {
+        type: "api-key-header";
+        credentialKey: string;
+        headerName: string;
+    } | undefined;
+    docsUrls?: string[] | undefined;
+    allowedHostSuffixes?: string[] | undefined;
+    defaultHeaders?: Record<string, string> | undefined;
+    notes?: string | undefined;
+    scope?: "org" | "user" | undefined;
+}, {
+    providers: {
+        id: string;
+        label: string;
+        baseUrl: string;
+        authType: "api-key-header" | "basic" | "bearer" | "none";
+        docsUrls: string[];
+        notes: string;
+        updatedAt: number;
+    }[];
+    count: number;
+    found?: undefined;
+    provider?: undefined;
+    deleted?: undefined;
+    registered?: undefined;
+    id?: undefined;
+    label?: undefined;
+    message?: undefined;
+} | {
+    providers?: undefined;
+    count?: undefined;
+    found: boolean;
+    id: string;
+    provider?: undefined;
+    deleted?: undefined;
+    registered?: undefined;
+    label?: undefined;
+    message?: undefined;
+} | {
+    providers?: undefined;
+    count?: undefined;
+    found: boolean;
+    provider: import("@agent-native/core/provider-api").CustomProviderConfig;
+    deleted?: undefined;
+    registered?: undefined;
+    id?: undefined;
+    label?: undefined;
+    message?: undefined;
+} | {
+    providers?: undefined;
+    count?: undefined;
+    found?: undefined;
+    provider?: undefined;
+    deleted: boolean;
+    id: string;
+    registered?: undefined;
+    label?: undefined;
+    message?: undefined;
+} | {
+    providers?: undefined;
+    count?: undefined;
+    found?: undefined;
+    provider?: undefined;
+    deleted?: undefined;
+    registered: boolean;
+    id: string;
+    label: string;
+    message: string;
+}>;
+export default _default;
+//# sourceMappingURL=provider-api-register.d.ts.map

package/dist/actions/provider-api-register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-api-register.d.ts","sourceRoot":"","sources":["../../src/actions/provider-api-register.ts"],"names":[],"mappings":""}

package/dist/actions/provider-api-register.js

@@ -0,0 +1,160 @@
+import { defineAction } from "@agent-native/core";
+import { upsertCustomProvider, deleteCustomProvider, listCustomProviders, getCustomProvider, } from "@agent-native/core/provider-api";
+import { getCredentialContext } from "@agent-native/core/server";
+import { z } from "zod";
+const AuthSchema = z.discriminatedUnion("type", [
+    z.object({
+        type: z.literal("none"),
+    }),
+    z.object({
+        type: z.literal("bearer"),
+        credentialKey: z
+            .string()
+            .min(1)
+            .describe("Name of the credential key (e.g. MY_API_TOKEN). Must already be saved via app secrets — this action never accepts secret values."),
+    }),
+    z.object({
+        type: z.literal("basic"),
+        usernameKey: z
+            .string()
+            .min(1)
+            .describe("Credential key name for the username/login."),
+        passwordKey: z
+            .string()
+            .min(1)
+            .describe("Credential key name for the password/secret."),
+    }),
+    z.object({
+        type: z.literal("api-key-header"),
+        credentialKey: z
+            .string()
+            .min(1)
+            .describe("Credential key name for the API key value."),
+        headerName: z
+            .string()
+            .min(1)
+            .describe("HTTP header name to send the key in (e.g. X-Api-Key)."),
+    }),
+]);
+export default defineAction({
+    description: `Register or update a custom API provider so the agent can call it via provider-api-request and look up its docs via provider-api-docs.
+
+IMPORTANT — credentials:
+- This action stores only credential KEY NAMES, never secret values.
+- If the required API key is not yet saved, instruct the user to add it via app Settings → Keys, or use the create-vault-secret action, before calling this action.
+- Supported auth kinds: none, bearer, basic, api-key-header.
+  google-service-account and oauth-bearer are NOT supported for custom providers.
+
+After registration the provider appears in provider-api-catalog and can be used with provider-api-request.`,
+    schema: z.object({
+        operation: z
+            .enum(["upsert", "delete", "list", "get"])
+            .default("upsert")
+            .describe("Operation: upsert (create or update), delete (remove), list (all custom providers), get (single provider)."),
+        id: z
+            .string()
+            .min(1)
+            .max(64)
+            .optional()
+            .describe("Provider slug (e.g. my-api). Lowercase letters, digits, hyphens only. Required for upsert/delete/get."),
+        label: z
+            .string()
+            .min(1)
+            .max(200)
+            .optional()
+            .describe("Human-readable name (e.g. 'My Analytics API'). Required for upsert."),
+        baseUrl: z
+            .string()
+            .url()
+            .optional()
+            .describe("Base URL for the API (e.g. https://api.example.com/v1). Required for upsert. Must be a public https/http URL."),
+        auth: AuthSchema.optional().describe("Auth configuration. Required for upsert. Use type 'none' for public APIs."),
+        docsUrls: z
+            .array(z.string().url())
+            .optional()
+            .describe("Optional list of documentation URLs for this provider."),
+        allowedHostSuffixes: z
+            .array(z.string())
+            .optional()
+            .describe("Optional list of additional host suffixes requests may target beyond the base URL origin (e.g. ['example.com'])."),
+        defaultHeaders: z
+            .record(z.string(), z.string())
+            .optional()
+            .describe("Optional headers to include on every request (e.g. { 'Accept': 'application/json' })."),
+        notes: z
+            .string()
+            .max(1000)
+            .optional()
+            .describe("Optional notes about this provider shown in the catalog."),
+        scope: z
+            .enum(["user", "org"])
+            .default("org")
+            .describe("Whether to store the provider for the current user only ('user') or for the whole workspace ('org')."),
+    }),
+    http: false,
+    run: async ({ operation, id, label, baseUrl, auth, docsUrls, allowedHostSuffixes, defaultHeaders, notes, scope, }) => {
+        const ctx = getCredentialContext();
+        if (!ctx) {
+            throw new Error("provider-api-register requires an authenticated request context.");
+        }
+        const scopeId = scope === "org" ? (ctx.orgId ?? ctx.userEmail) : ctx.userEmail;
+        if (operation === "list") {
+            const providers = await listCustomProviders(scope, scopeId);
+            return {
+                providers: providers.map((p) => ({
+                    id: p.id,
+                    label: p.label,
+                    baseUrl: p.baseUrl,
+                    authType: p.auth.type,
+                    docsUrls: p.docsUrls,
+                    notes: p.notes,
+                    updatedAt: p.updatedAt,
+                })),
+                count: providers.length,
+            };
+        }
+        if (operation === "get") {
+            if (!id)
+                throw new Error("id is required for get operation.");
+            const provider = await getCustomProvider(scope, scopeId, id);
+            if (!provider) {
+                return { found: false, id };
+            }
+            return { found: true, provider };
+        }
+        if (operation === "delete") {
+            if (!id)
+                throw new Error("id is required for delete operation.");
+            const deleted = await deleteCustomProvider(scope, scopeId, id);
+            return { deleted, id };
+        }
+        // upsert
+        if (!id)
+            throw new Error("id is required for upsert operation.");
+        if (!label)
+            throw new Error("label is required for upsert operation.");
+        if (!baseUrl)
+            throw new Error("baseUrl is required for upsert operation.");
+        if (!auth)
+            throw new Error("auth is required for upsert operation.");
+        await upsertCustomProvider({
+            scope,
+            scopeId,
+            id,
+            label,
+            baseUrl,
+            auth,
+            docsUrls,
+            allowedHostSuffixes,
+            defaultHeaders,
+            notes,
+        });
+        return {
+            registered: true,
+            id,
+            label,
+            message: `Custom provider "${id}" registered. Use provider-api-catalog to inspect it and provider-api-request to call it.`,
+        };
+    },
+});
+//# sourceMappingURL=provider-api-register.js.map

package/dist/actions/provider-api-register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-api-register.js","sourceRoot":"","sources":["../../src/actions/provider-api-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,UAAU,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9C,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;KACxB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CACP,kIAAkI,CACnI;KACJ,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,6CAA6C,CAAC;QAC1D,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,8CAA8C,CAAC;KAC5D,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACjC,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,4CAA4C,CAAC;QACzD,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,uDAAuD,CAAC;KACrE,CAAC;CACH,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE;;;;;;;;2GAQ4F;IACzG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC;aACT,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;aACzC,OAAO,CAAC,QAAQ,CAAC;aACjB,QAAQ,CACP,4GAA4G,CAC7G;QACH,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,EAAE;aACV,QAAQ,CACP,uGAAuG,CACxG;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,qEAAqE,CACtE;QACH,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CACP,+GAA+G,CAChH;QACH,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAClC,2EAA2E,CAC5E;QACD,QAAQ,EAAE,CAAC;aACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;aACvB,QAAQ,EAAE;aACV,QAAQ,CAAC,wDAAwD,CAAC;QACrE,mBAAmB,EAAE,CAAC;aACnB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,kHAAkH,CACnH;QACH,cAAc,EAAE,CAAC;aACd,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,EAAE;aACV,QAAQ,CACP,uFAAuF,CACxF;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,IAAI,CAAC;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;aACrB,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CACP,sGAAsG,CACvG;KACJ,CAAC;IACF,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,KAAK,EAAE,EACV,SAAS,EACT,EAAE,EACF,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,mBAAmB,EACnB,cAAc,EACd,KAAK,EACL,KAAK,GACN,EAAE,EAAE;QACH,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GACX,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QAEjE,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC5D,OAAO;gBACL,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC/B,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;oBACrB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,SAAS,EAAE,CAAC,CAAC,SAAS;iBACvB,CAAC,CAAC;gBACH,KAAK,EAAE,SAAS,CAAC,MAAM;aACxB,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC9B,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnC,CAAC;QAED,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACzB,CAAC;QAED,SAAS;QACT,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAErE,MAAM,oBAAoB,CAAC;YACzB,KAAK;YACL,OAAO;YACP,EAAE;YACF,KAAK;YACL,OAAO;YACP,IAAI;YACJ,QAAQ;YACR,mBAAmB;YACnB,cAAc;YACd,KAAK;SACN,CAAC,CAAC;QAEH,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,EAAE;YACF,KAAK;YACL,OAAO,EAAE,oBAAoB,EAAE,2FAA2F;SAC3H,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { defineAction } from \"@agent-native/core\";\r\nimport {\r\n  upsertCustomProvider,\r\n  deleteCustomProvider,\r\n  listCustomProviders,\r\n  getCustomProvider,\r\n} from \"@agent-native/core/provider-api\";\r\nimport { getCredentialContext } from \"@agent-native/core/server\";\r\nimport { z } from \"zod\";\r\n\r\nconst AuthSchema = z.discriminatedUnion(\"type\", [\r\n  z.object({\r\n    type: z.literal(\"none\"),\r\n  }),\r\n  z.object({\r\n    type: z.literal(\"bearer\"),\r\n    credentialKey: z\r\n      .string()\r\n      .min(1)\r\n      .describe(\r\n        \"Name of the credential key (e.g. MY_API_TOKEN). Must already be saved via app secrets — this action never accepts secret values.\",\r\n      ),\r\n  }),\r\n  z.object({\r\n    type: z.literal(\"basic\"),\r\n    usernameKey: z\r\n      .string()\r\n      .min(1)\r\n      .describe(\"Credential key name for the username/login.\"),\r\n    passwordKey: z\r\n      .string()\r\n      .min(1)\r\n      .describe(\"Credential key name for the password/secret.\"),\r\n  }),\r\n  z.object({\r\n    type: z.literal(\"api-key-header\"),\r\n    credentialKey: z\r\n      .string()\r\n      .min(1)\r\n      .describe(\"Credential key name for the API key value.\"),\r\n    headerName: z\r\n      .string()\r\n      .min(1)\r\n      .describe(\"HTTP header name to send the key in (e.g. X-Api-Key).\"),\r\n  }),\r\n]);\r\n\r\nexport default defineAction({\r\n  description: `Register or update a custom API provider so the agent can call it via provider-api-request and look up its docs via provider-api-docs.\r\n\r\nIMPORTANT — credentials:\r\n- This action stores only credential KEY NAMES, never secret values.\r\n- If the required API key is not yet saved, instruct the user to add it via app Settings → Keys, or use the create-vault-secret action, before calling this action.\r\n- Supported auth kinds: none, bearer, basic, api-key-header.\r\n  google-service-account and oauth-bearer are NOT supported for custom providers.\r\n\r\nAfter registration the provider appears in provider-api-catalog and can be used with provider-api-request.`,\r\n  schema: z.object({\r\n    operation: z\r\n      .enum([\"upsert\", \"delete\", \"list\", \"get\"])\r\n      .default(\"upsert\")\r\n      .describe(\r\n        \"Operation: upsert (create or update), delete (remove), list (all custom providers), get (single provider).\",\r\n      ),\r\n    id: z\r\n      .string()\r\n      .min(1)\r\n      .max(64)\r\n      .optional()\r\n      .describe(\r\n        \"Provider slug (e.g. my-api). Lowercase letters, digits, hyphens only. Required for upsert/delete/get.\",\r\n      ),\r\n    label: z\r\n      .string()\r\n      .min(1)\r\n      .max(200)\r\n      .optional()\r\n      .describe(\r\n        \"Human-readable name (e.g. 'My Analytics API'). Required for upsert.\",\r\n      ),\r\n    baseUrl: z\r\n      .string()\r\n      .url()\r\n      .optional()\r\n      .describe(\r\n        \"Base URL for the API (e.g. https://api.example.com/v1). Required for upsert. Must be a public https/http URL.\",\r\n      ),\r\n    auth: AuthSchema.optional().describe(\r\n      \"Auth configuration. Required for upsert. Use type 'none' for public APIs.\",\r\n    ),\r\n    docsUrls: z\r\n      .array(z.string().url())\r\n      .optional()\r\n      .describe(\"Optional list of documentation URLs for this provider.\"),\r\n    allowedHostSuffixes: z\r\n      .array(z.string())\r\n      .optional()\r\n      .describe(\r\n        \"Optional list of additional host suffixes requests may target beyond the base URL origin (e.g. ['example.com']).\",\r\n      ),\r\n    defaultHeaders: z\r\n      .record(z.string(), z.string())\r\n      .optional()\r\n      .describe(\r\n        \"Optional headers to include on every request (e.g. { 'Accept': 'application/json' }).\",\r\n      ),\r\n    notes: z\r\n      .string()\r\n      .max(1000)\r\n      .optional()\r\n      .describe(\"Optional notes about this provider shown in the catalog.\"),\r\n    scope: z\r\n      .enum([\"user\", \"org\"])\r\n      .default(\"org\")\r\n      .describe(\r\n        \"Whether to store the provider for the current user only ('user') or for the whole workspace ('org').\",\r\n      ),\r\n  }),\r\n  http: false,\r\n  run: async ({\r\n    operation,\r\n    id,\r\n    label,\r\n    baseUrl,\r\n    auth,\r\n    docsUrls,\r\n    allowedHostSuffixes,\r\n    defaultHeaders,\r\n    notes,\r\n    scope,\r\n  }) => {\r\n    const ctx = getCredentialContext();\r\n    if (!ctx) {\r\n      throw new Error(\r\n        \"provider-api-register requires an authenticated request context.\",\r\n      );\r\n    }\r\n    const scopeId =\r\n      scope === \"org\" ? (ctx.orgId ?? ctx.userEmail) : ctx.userEmail;\r\n\r\n    if (operation === \"list\") {\r\n      const providers = await listCustomProviders(scope, scopeId);\r\n      return {\r\n        providers: providers.map((p) => ({\r\n          id: p.id,\r\n          label: p.label,\r\n          baseUrl: p.baseUrl,\r\n          authType: p.auth.type,\r\n          docsUrls: p.docsUrls,\r\n          notes: p.notes,\r\n          updatedAt: p.updatedAt,\r\n        })),\r\n        count: providers.length,\r\n      };\r\n    }\r\n\r\n    if (operation === \"get\") {\r\n      if (!id) throw new Error(\"id is required for get operation.\");\r\n      const provider = await getCustomProvider(scope, scopeId, id);\r\n      if (!provider) {\r\n        return { found: false, id };\r\n      }\r\n      return { found: true, provider };\r\n    }\r\n\r\n    if (operation === \"delete\") {\r\n      if (!id) throw new Error(\"id is required for delete operation.\");\r\n      const deleted = await deleteCustomProvider(scope, scopeId, id);\r\n      return { deleted, id };\r\n    }\r\n\r\n    // upsert\r\n    if (!id) throw new Error(\"id is required for upsert operation.\");\r\n    if (!label) throw new Error(\"label is required for upsert operation.\");\r\n    if (!baseUrl) throw new Error(\"baseUrl is required for upsert operation.\");\r\n    if (!auth) throw new Error(\"auth is required for upsert operation.\");\r\n\r\n    await upsertCustomProvider({\r\n      scope,\r\n      scopeId,\r\n      id,\r\n      label,\r\n      baseUrl,\r\n      auth,\r\n      docsUrls,\r\n      allowedHostSuffixes,\r\n      defaultHeaders,\r\n      notes,\r\n    });\r\n\r\n    return {\r\n      registered: true,\r\n      id,\r\n      label,\r\n      message: `Custom provider \"${id}\" registered. Use provider-api-catalog to inspect it and provider-api-request to call it.`,\r\n    };\r\n  },\r\n});\r\n"]}

package/dist/actions/provider-api-request.d.ts

@@ -0,0 +1,35 @@
+declare const _default: import("@agent-native/core").ActionDefinition<{
+    provider: string;
+    method?: "DELETE" | "GET" | "HEAD" | "PATCH" | "POST" | "PUT" | undefined;
+    path: string;
+    query?: unknown;
+    headers?: Record<string, unknown> | undefined;
+    body?: unknown;
+    auth?: "default" | "none" | undefined;
+    connectionId?: string | undefined;
+    accountId?: string | undefined;
+    timeoutMs?: unknown;
+    maxBytes?: unknown;
+    saveToFile?: string | undefined;
+    stageAs?: string | undefined;
+    itemsPath?: string | undefined;
+    pagination?: {
+        nextCursorPath?: string | undefined;
+        cursorParam?: string | undefined;
+        cursorBodyPath?: string | undefined;
+        pageParam?: string | undefined;
+        startPage?: unknown;
+        offsetParam?: string | undefined;
+        pageSize?: unknown;
+        maxPages?: unknown;
+    } | undefined;
+    fetchAllPages?: {
+        cursorPath: string;
+        cursorParam?: string | undefined;
+        cursorBodyPath?: string | undefined;
+        itemsPath?: string | undefined;
+        maxPages?: unknown;
+    } | undefined;
+}, unknown>;
+export default _default;
+//# sourceMappingURL=provider-api-request.d.ts.map

package/dist/actions/provider-api-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-api-request.d.ts","sourceRoot":"","sources":["../../src/actions/provider-api-request.ts"],"names":[],"mappings":""}

package/dist/actions/provider-api-request.js

@@ -0,0 +1,168 @@
+import { defineAction } from "@agent-native/core";
+import { stagingExecuteRequest } from "@agent-native/core/provider-api/staging";
+import { getCredentialContext } from "@agent-native/core/server/request-context";
+import { z } from "zod";
+import { DISPATCH_APP_ID, executeProviderApiRequest, } from "../server/lib/provider-api.js";
+const MethodSchema = z.enum(["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD"]);
+const PaginationSchema = z
+    .object({
+    nextCursorPath: z
+        .string()
+        .optional()
+        .describe("Dot-path in the response JSON where the next cursor/token lives, e.g. 'next_cursor', 'meta.next', or 'nextPageToken'."),
+    cursorParam: z
+        .string()
+        .optional()
+        .describe("Query parameter name to inject the cursor into the next request. Use cursorBodyPath for APIs that page through POST bodies."),
+    cursorBodyPath: z
+        .string()
+        .optional()
+        .describe("Dot-path in the JSON request body to set to the next cursor. Use this for POST-body pagination."),
+    pageParam: z
+        .string()
+        .optional()
+        .describe("Use page-number mode: this query param is incremented on each page."),
+    startPage: z.coerce
+        .number()
+        .int()
+        .optional()
+        .describe("Starting page number for pageParam mode (default 1)."),
+    offsetParam: z
+        .string()
+        .optional()
+        .describe("Use offset mode: this query param is incremented by pageSize on each request."),
+    pageSize: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .optional()
+        .describe("Expected page size for offset increments. Defaults to the actual item count of the first page."),
+    maxPages: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(200)
+        .optional()
+        .describe("Maximum pages to fetch server-side (default 50, max 200)."),
+})
+    .optional();
+export default defineAction({
+    description: "Make an arbitrary authenticated HTTP request to a shared workspace integration, configured provider API, or custom provider registered via provider-api-register. Use this as the flexible escape hatch when Dispatch needs a provider endpoint, filter, pagination mode, payload, or API version that no canned action models. The request is constrained to the provider host, uses configured credentials automatically, blocks private/internal URLs, and redacts secrets from responses.",
+    schema: z.object({
+        provider: z
+            .string()
+            .min(1)
+            .describe("Provider id to call — built-in (e.g. slack, github, notion, hubspot, gmail, google_drive, google_calendar, granola, stripe, jira) or a custom provider id registered via provider-api-register. Use provider-api-catalog to list available providers."),
+        method: MethodSchema.default("GET").describe("HTTP method to use."),
+        path: z
+            .string()
+            .min(1)
+            .describe("Provider API path such as /search.messages, /repos/org/repo/issues, /crm/v3/objects/deals/search, or a full URL on an allowed provider host. Use placeholders from provider-api-catalog when provided."),
+        query: z
+            .unknown()
+            .optional()
+            .describe("Optional query params as a JSON object/string. Array values produce repeated query params."),
+        headers: z
+            .record(z.string(), z.unknown())
+            .optional()
+            .describe("Optional extra headers. Unsafe hop-by-hop headers are ignored. Auth headers are injected from stored credentials."),
+        body: z
+            .unknown()
+            .optional()
+            .describe("Optional request body. Objects/arrays are JSON encoded; strings are sent as-is."),
+        auth: z
+            .enum(["default", "none"])
+            .default("default")
+            .describe("Use default to inject configured provider auth. Use none only for public provider endpoints that intentionally require no auth."),
+        connectionId: z
+            .string()
+            .optional()
+            .describe("Optional shared workspace connection id to use when the provider has multiple granted connections."),
+        accountId: z
+            .string()
+            .optional()
+            .describe("Optional OAuth account id to use for OAuth-backed providers such as Gmail, Google Calendar, or Google Drive."),
+        timeoutMs: z.coerce
+            .number()
+            .int()
+            .min(1_000)
+            .max(120_000)
+            .optional()
+            .describe("Request timeout in milliseconds. Default 30000, max 120000."),
+        maxBytes: z.coerce
+            .number()
+            .int()
+            .min(1_000)
+            .max(4 * 1024 * 1024)
+            .optional()
+            .describe("Maximum response bytes to read. Default 1MB, max 4MB. Ignored when saveToFile is set (allows up to 20MB)."),
+        saveToFile: z
+            .string()
+            .optional()
+            .describe("Workspace file path to save the full response body to instead of returning it in context (e.g. 'analysis/provider-response.json'). When set, returns only a compact summary {savedTo, status, bytes, preview} and allows up to 20MB response. Useful for large datasets that would overflow context."),
+        stageAs: z
+            .string()
+            .min(1)
+            .optional()
+            .describe("When set, parse the response as an array of records and write them into a staged dataset with this name. Returns a compact summary instead of the raw body. Re-staging the same name replaces the previous dataset."),
+        itemsPath: z
+            .string()
+            .optional()
+            .describe("Dot-path to the items array in the response JSON, e.g. 'items', 'results', or 'data'. Omit for auto-detection."),
+        pagination: PaginationSchema.describe("Pagination config for server-side fetchAll when stageAs is set. Supports cursor (nextCursorPath + cursorParam or cursorBodyPath), page, and offset modes."),
+        fetchAllPages: z
+            .object({
+            cursorPath: z
+                .string()
+                .describe("Dot-path in the JSON response body where the next-page cursor lives, e.g. 'meta.next_cursor' or 'pagination.next_page_token'."),
+            cursorParam: z
+                .string()
+                .optional()
+                .describe("Query parameter name to pass the cursor on subsequent pages, e.g. 'cursor' or 'page_token'. Use cursorBodyPath instead for APIs that put cursors in POST bodies."),
+            cursorBodyPath: z
+                .string()
+                .optional()
+                .describe("Dot-path in the JSON request body to set to the next cursor. Use for POST-body pagination."),
+            itemsPath: z
+                .string()
+                .optional()
+                .describe("Dot-path to the items array in each response, e.g. 'results' or 'data.items'. When omitted, the whole response body is appended per page."),
+            maxPages: z.coerce
+                .number()
+                .int()
+                .min(1)
+                .max(50)
+                .optional()
+                .describe("Maximum pages to fetch. Default 10, max 50. Stops early when the cursor is empty."),
+        })
+            .optional()
+            .describe("Enable cursor-based pagination. After each response, reads cursorPath from the JSON body and re-issues the request with cursorParam or cursorBodyPath set, accumulating items from itemsPath (or whole bodies) until cursor is empty or maxPages is reached. Combine with saveToFile to write the full dataset to a workspace file."),
+    }),
+    http: false,
+    run: async (args) => {
+        if (args.stageAs) {
+            const ctx = getCredentialContext();
+            if (!ctx) {
+                throw new Error("No authenticated context for provider API staging.");
+            }
+            return stagingExecuteRequest({
+                provider: args.provider,
+                method: args.method,
+                path: args.path,
+                query: args.query,
+                headers: args.headers,
+                body: args.body,
+                auth: args.auth,
+                connectionId: args.connectionId,
+                accountId: args.accountId,
+                timeoutMs: args.timeoutMs,
+                maxBytes: args.maxBytes,
+                stageAs: args.stageAs,
+                itemsPath: args.itemsPath,
+                pagination: args.pagination,
+            }, (reqArgs) => executeProviderApiRequest(reqArgs), { appId: DISPATCH_APP_ID, ownerEmail: ctx.userEmail });
+        }
+        return executeProviderApiRequest(args);
+    },
+});
+//# sourceMappingURL=provider-api-request.js.map