@jskit-ai/connectors-catalog 0.1.39 → 0.1.41
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -2
- package/docs/ai.md +14 -4
- package/docs/amplitude.md +8 -9
- package/docs/apify.md +3 -3
- package/docs/apollo-io.md +3 -4
- package/docs/asana.md +3 -4
- package/docs/ashby.md +3 -3
- package/docs/atlassian.md +9 -9
- package/docs/attention.md +3 -3
- package/docs/aws-athena.md +1 -1
- package/docs/aws-s3.md +1 -1
- package/docs/brevo.md +3 -3
- package/docs/calendly.md +2 -2
- package/docs/canva.md +5 -5
- package/docs/chargebee.md +4 -4
- package/docs/clay.md +4 -4
- package/docs/clickhouse.md +2 -2
- package/docs/confidence-exp.md +2 -2
- package/docs/confidence-flags.md +2 -2
- package/docs/confidence-oauth.md +1 -2
- package/docs/contentful.md +1 -1
- package/docs/dbt-semantic-layer.md +4 -4
- package/docs/elevenlabs.md +2 -2
- package/docs/figma.md +4 -4
- package/docs/firebase-cloud-messaging.md +1 -1
- package/docs/fireflies.md +4 -4
- package/docs/gatewayapi.md +1 -1
- package/docs/gemini-enterprise.md +1 -1
- package/docs/github-api.md +1 -1
- package/docs/gmail.md +1 -1
- package/docs/google-docs.md +1 -1
- package/docs/google-drive.md +2 -2
- package/docs/google-maps-platform.md +3 -3
- package/docs/google-search-console.md +2 -2
- package/docs/granola.md +4 -4
- package/docs/hex.md +4 -4
- package/docs/hubspot.md +1 -1
- package/docs/incident-io.md +1 -1
- package/docs/inngest.md +1 -1
- package/docs/klipy.md +1 -1
- package/docs/lexware.md +2 -2
- package/docs/lightspeed.md +1 -1
- package/docs/linear.md +3 -4
- package/docs/linkedin.md +1 -1
- package/docs/logo-dev.md +1 -1
- package/docs/mapbox.md +2 -2
- package/docs/microsoft-fabric.md +1 -1
- package/docs/microsoft-powerpoint.md +1 -1
- package/docs/microsoft-word.md +1 -1
- package/docs/miro.md +2 -2
- package/docs/n8n.md +1 -1
- package/docs/posthog.md +5 -5
- package/docs/salesforce.md +2 -3
- package/docs/sanity.md +2 -2
- package/docs/semrush.md +4 -4
- package/docs/sentry.md +2 -2
- package/docs/sevdesk.md +2 -2
- package/docs/shopify.md +2 -2
- package/docs/slack.md +3 -3
- package/docs/telegram.md +1 -1
- package/docs/twilio.md +2 -2
- package/docs/wiz.md +3 -3
- package/docs/xero.md +2 -2
- package/docs/zoho-books.md +3 -4
- package/docs/zoho-crm.md +3 -3
- package/package.json +3 -3
- package/src/server/ai.js +1 -0
- package/src/shared/ai-models.json +1 -2
- package/src/shared/amplitude.js +1 -1
- package/src/shared/confidence.js +1 -1
- package/src/shared/dbt-semantic-layer.js +1 -1
- package/src/shared/definitions.js +1 -1
- package/src/shared/figma.js +2 -2
- package/src/shared/firebase-cloud-messaging.js +1 -1
- package/src/shared/linkedin.js +1 -1
- package/src/shared/mcp.js +3 -3
- package/src/shared/microsoft-fabric.js +1 -1
- package/src/shared/microsoft.js +5 -5
- package/src/shared/miro.js +1 -1
- package/src/shared/oura.js +2 -2
- package/src/shared/snowflake.js +1 -1
- package/src/shared/tokens.js +13 -13
- package/src/shared/wave.js +1 -1
- package/test/ai.test.js +17 -2
- package/test/microsoft-fabric.test.js +3 -1
package/docs/gatewayapi.md
CHANGED
|
@@ -17,7 +17,7 @@ Connection verification reads credit/currency without sending. Explicit applicat
|
|
|
17
17
|
`gatewayapi.com` and `gatewayapi.eu`. The EU platform uses a different host;
|
|
18
18
|
changing hosts requires verification again.
|
|
19
19
|
[Platform routing](https://gatewayapi.com/docs/apis/legacy/rest/).
|
|
20
|
-
4. In
|
|
20
|
+
4. In the connection editor enter `env:GATEWAYAPI_TOKEN` as **API key reference**, click
|
|
21
21
|
**Save configuration**, then **Set credential in Env**. Store the real token
|
|
22
22
|
as `GATEWAYAPI_TOKEN` and return to connect. CLI apps call `connectApiKey`.
|
|
23
23
|
Requests use `Authorization: Token <token>`.
|
|
@@ -80,7 +80,7 @@ Never accept a shared subject or application ID directly from an untrusted calle
|
|
|
80
80
|
**Create** and securely save the displayed client ID and secret. Enter only
|
|
81
81
|
the ID and secret reference in the integration file. Google documents this
|
|
82
82
|
confidential flow in its [web-server OAuth guide](https://developers.google.com/identity/protocols/oauth2/web-server).
|
|
83
|
-
7. In
|
|
83
|
+
7. In the connection editor, copy **Suggested callback URL** into the Google redirect URI
|
|
84
84
|
registration. **Save configuration**, then use the Env links for the secret
|
|
85
85
|
and callback references. For the example above, set `GEMINI_ENTERPRISE_SECRET`
|
|
86
86
|
and `GEMINI_ENTERPRISE_CALLBACK` in the
|
package/docs/github-api.md
CHANGED
|
@@ -52,7 +52,7 @@ headers, paging, restart, rotation, disconnect and owner isolation.
|
|
|
52
52
|
## OAuth setup
|
|
53
53
|
|
|
54
54
|
Open GitHub Settings > Developer settings > OAuth Apps > New OAuth App. Set the
|
|
55
|
-
name and application homepage, and copy
|
|
55
|
+
name and application homepage, and copy the application's Suggested callback URL into
|
|
56
56
|
Authorization callback URL. Register the app, copy Client ID, and generate a
|
|
57
57
|
client secret. Save configuration and follow the Env links for client secret
|
|
58
58
|
and callback references. The application owns the callback route and grants.
|
package/docs/gmail.md
CHANGED
|
@@ -126,7 +126,7 @@ Vibe64 running. There is no shared Vibe64 mailbox or Google registration.
|
|
|
126
126
|
|
|
127
127
|
**LIMITATIONS:** no background/history sync, push watch service, mail-client UI,
|
|
128
128
|
permanent message deletion or mailbox-settings administration. MIME composition
|
|
129
|
-
and rendering belong to the framework;
|
|
129
|
+
and rendering belong to the framework; assistant tool attachment requires explicit host integration.
|
|
130
130
|
Example: a booking app can read a customer's message, draft a reply, explicitly
|
|
131
131
|
send it and archive the thread's selected message; installing the connector does
|
|
132
132
|
not build the inbox UI or keep a local mailbox synchronized. Google approval,
|
package/docs/google-docs.md
CHANGED
|
@@ -73,7 +73,7 @@ native Google Docs client or HTTP. No JSKIT requirement or Vibe64 service applie
|
|
|
73
73
|
**Limitations:** no visual editor, Google Picker component, sharing/Drive exports,
|
|
74
74
|
comment/suggestion review UI, autonomous editing agent or editor chat attachment.
|
|
75
75
|
For example, an app can create a booking report and format its text, but saving
|
|
76
|
-
this connector does not
|
|
76
|
+
this connector does not authorize an assistant to edit the report. Fixtures
|
|
77
77
|
prove request flow, not Google's live document rendering or approval.
|
|
78
78
|
|
|
79
79
|
References: [create](https://developers.google.com/workspace/docs/api/reference/rest/v1/documents/create),
|
package/docs/google-drive.md
CHANGED
|
@@ -70,8 +70,8 @@ larger JSON/base64 payload. No Vibe64 gateway receives or stores the content.
|
|
|
70
70
|
sharing administration, permanent deletion, revision history or Workspace-format
|
|
71
71
|
conversion on upload. Activity and app-data scopes do not implement those APIs.
|
|
72
72
|
For example, a generated app can upload a booking report and offer a PDF export,
|
|
73
|
-
but it cannot mirror a whole shared drive automatically.
|
|
74
|
-
|
|
73
|
+
but it cannot mirror a whole shared drive automatically. Assistant tool access
|
|
74
|
+
requires explicit host integration. Controlled fixtures do not prove live Google sharing or file export.
|
|
75
75
|
|
|
76
76
|
References: [uploads](https://developers.google.com/workspace/drive/api/guides/manage-uploads),
|
|
77
77
|
[downloads and exports](https://developers.google.com/workspace/drive/api/guides/manage-downloads).
|
|
@@ -17,7 +17,7 @@ browser composition helper uses the Google Maps JavaScript SDK loaded by the app
|
|
|
17
17
|
**Geocoding API**, and configure suitable server IP restrictions. For the
|
|
18
18
|
additional operations, enable **Places API (New)** and **Routes API** in Library
|
|
19
19
|
and allow those APIs on this server key as well. Save.
|
|
20
|
-
4. Store that key as `GOOGLE_MAPS_SERVER_KEY`. In
|
|
20
|
+
4. Store that key as `GOOGLE_MAPS_SERVER_KEY`. In the connection editor, add Google Maps
|
|
21
21
|
Platform and enter `env:GOOGLE_MAPS_SERVER_KEY` in **Server API key reference**.
|
|
22
22
|
5. For browser maps, create a different key, enable only the browser APIs the
|
|
23
23
|
app uses, and apply **Websites** restrictions for the deployed and preview
|
|
@@ -200,8 +200,8 @@ Keep Google attribution and data-retention/display requirements intact.
|
|
|
200
200
|
**Limitations:** no embedded map designer, SDK loader, autocomplete/session-token
|
|
201
201
|
widget, Places photos/reviews, route optimization, transit or navigation product.
|
|
202
202
|
For example, a generated app can find a groomer and display its location and a
|
|
203
|
-
route, but cannot provide live voice navigation.
|
|
204
|
-
|
|
203
|
+
route, but cannot provide live voice navigation. Assistant tool attachment
|
|
204
|
+
requires explicit host integration. Controlled HTTP/SDK fixtures do not prove live tiles, routes or billing.
|
|
205
205
|
|
|
206
206
|
Sources: [Places Text Search](https://developers.google.com/maps/documentation/places/web-service/text-search),
|
|
207
207
|
[Routes reference](https://developers.google.com/maps/documentation/routes/reference/rest/v2/TopLevel/computeRoutes),
|
|
@@ -81,8 +81,8 @@ interpretation; no Vibe64 service receives search data.
|
|
|
81
81
|
indexing requests, sitemap generation, crawler or SEO dashboard. No fresh/hourly
|
|
82
82
|
performance mode or exhaustive traffic export. For example, an app can report
|
|
83
83
|
its popular queries and submit an existing sitemap, but cannot make an unverified
|
|
84
|
-
site appear in Google or guarantee rankings.
|
|
85
|
-
|
|
84
|
+
site appear in Google or guarantee rankings. Assistant tool attachment
|
|
85
|
+
requires explicit host integration. Fixtures do not prove live property access or indexing results.
|
|
86
86
|
|
|
87
87
|
Sources: [performance queries](https://developers.google.com/webmaster-tools/v1/searchanalytics/query),
|
|
88
88
|
[sitemap submission](https://developers.google.com/webmaster-tools/v1/sitemaps/submit),
|
package/docs/granola.md
CHANGED
|
@@ -12,7 +12,7 @@ For a personal key:
|
|
|
12
12
|
1. Open the Granola desktop app, then **Settings → Connectors → API keys**.
|
|
13
13
|
2. Choose **Create new key**. Select the note access scopes, then **Generate
|
|
14
14
|
API Key**. Store the returned `grn_` value in `GRANOLA_API_KEY` outside source.
|
|
15
|
-
3. In
|
|
15
|
+
3. In the connection editor select **Granola** and enter `env:GRANOLA_API_KEY` as the API key
|
|
16
16
|
reference. Choose the intended owner and **Save configuration**. Use
|
|
17
17
|
**Set credential in Env** to save the key as `GRANOLA_API_KEY`, then return
|
|
18
18
|
and choose **Connect account**. CLI users write the JSON below.
|
|
@@ -131,7 +131,7 @@ For the MCP assistant connection:
|
|
|
131
131
|
`offline_access` selected. Free accounts have limited personal-note access;
|
|
132
132
|
workspace settings and subscription determine the available tools.
|
|
133
133
|
2. Confirm the suggested callback is the exact route served by the assistant
|
|
134
|
-
host. In
|
|
134
|
+
host. In the connection editor choose **Register client and connect**: the existing project
|
|
135
135
|
registration action stores the client ID in configuration and secret, callback
|
|
136
136
|
and recovery ID in development Env, then invokes the app-owned setup command.
|
|
137
137
|
Existing Env values are not replaced; inspect Env after uncertain registration.
|
|
@@ -171,8 +171,8 @@ No live keys, meetings, provider registrations, generated apps or deployments ar
|
|
|
171
171
|
used. The MCP fixture covers PKCE, verification, restart/refresh, replay rejection and credential-mode isolation. The controlled dual-mode browser journey and rendered setup instructions passed review. No live OAuth client or provider account was used. Webhooks, REST mutations and enterprise-managed authorization are not implemented.
|
|
172
172
|
|
|
173
173
|
**LIMITATIONS:** The app/assistant host must authorize and attach MCP tools itself.
|
|
174
|
-
|
|
175
|
-
|
|
174
|
+
Configuring Granola alone does not authorize an assistant to answer questions
|
|
175
|
+
about meetings. For example a generated
|
|
176
176
|
app can read a processed meeting transcript with the API key, but this editor will
|
|
177
177
|
not automatically use it as chat context. No REST note creation, recording engine,
|
|
178
178
|
webhook receiver or enterprise-managed OAuth is installed.
|
package/docs/hex.md
CHANGED
|
@@ -151,10 +151,10 @@ reference persistence. Live registrations, consent, actual Hex tool calls,
|
|
|
151
151
|
single-tenant hosts, provider billing and real generated applications are not
|
|
152
152
|
part of that proof. The separate Hex REST API/token mode is not implemented.
|
|
153
153
|
|
|
154
|
-
**LIMITATIONS:**
|
|
155
|
-
are
|
|
156
|
-
tools after its own permission checks, but
|
|
157
|
-
|
|
154
|
+
**LIMITATIONS:** Assistant tool attachment requires explicit host integration;
|
|
155
|
+
notebook/Thread widgets are not supplied. For example an app-owned MCP host can
|
|
156
|
+
call Hex project or Thread tools after its own permission checks, but saving the
|
|
157
|
+
configuration alone does not authorize an assistant to analyze the workspace. The app owns tool discovery/schema use,
|
|
158
158
|
status polling, output rendering, sensitive data policy and credit approval.
|
|
159
159
|
Single-tenant custom hosts, REST/token mode and live Hex execution remain outside
|
|
160
160
|
this adapter. Other frameworks use their native MCP client and the same project
|
package/docs/hubspot.md
CHANGED
|
@@ -138,5 +138,5 @@ configuration and operation sequence. Keys and tokens stay server-side.
|
|
|
138
138
|
bulk import/sync, custom association labels, company/ticket API or archive/delete
|
|
139
139
|
operations. Example: a booking app can create a linked deal and advance its stage,
|
|
140
140
|
but it must supply the trigger and cannot import an entire CRM automatically.
|
|
141
|
-
|
|
141
|
+
Assistant tool attachment requires explicit host integration. Fixture success does not prove live CRM
|
|
142
142
|
installation, property availability, subscription features or generated-app use.
|
package/docs/incident-io.md
CHANGED
|
@@ -114,5 +114,5 @@ provisioning after an authorized bootstrap key; the owner supplies initial acces
|
|
|
114
114
|
workflow engine, webhook receiver, postmortem importer, custom-field/role editing,
|
|
115
115
|
catalogue schema editing or bulk synchronizer. Example: an app can show the next
|
|
116
116
|
shift and resolve an alert, but cannot generate a rota or start monitoring servers
|
|
117
|
-
just by connecting.
|
|
117
|
+
just by connecting. Assistant tool attachment requires explicit host integration. Fixture tests do not
|
|
118
118
|
prove live delivery, role entitlement or provider-side workflow effects.
|
package/docs/inngest.md
CHANGED
|
@@ -174,5 +174,5 @@ provider app sync, workflow dashboard, run cancellation or self-hosted endpoint
|
|
|
174
174
|
mode. Example: an app can submit a report event, but a report only runs after
|
|
175
175
|
its own SDK function is deployed and synced. Schedule execution and SDK business
|
|
176
176
|
functions are native application composition, not tested live or through a
|
|
177
|
-
generated app here.
|
|
177
|
+
generated app here. Assistant tool attachment requires explicit host integration. The connector's
|
|
178
178
|
metadata check does not prove the Event Key or function availability.
|
package/docs/klipy.md
CHANGED
|
@@ -10,7 +10,7 @@ emojis. It does not generate new emojis or implement managed billing.
|
|
|
10
10
|
2. Enter the platform name, contact email, company website and product
|
|
11
11
|
description; accept the API terms and submit.
|
|
12
12
|
3. Create a named API key. Supply its **App URL** when available.
|
|
13
|
-
4. Store the value as `KLIPY_APP_KEY` in the backend environment. In
|
|
13
|
+
4. Store the value as `KLIPY_APP_KEY` in the backend environment. In the connection editor,
|
|
14
14
|
add KLIPY, enter `env:KLIPY_APP_KEY` in **API key reference**, and choose
|
|
15
15
|
**Save configuration**. Choose **Set credential in Env**, save the real key
|
|
16
16
|
as `KLIPY_APP_KEY`, then return and choose **Connect account**. This reads
|
package/docs/lexware.md
CHANGED
|
@@ -14,7 +14,7 @@ its Public API; its bearer key is still a private backend credential.
|
|
|
14
14
|
read access and invoice creation only for the operations needed. Choose **WEITER**,
|
|
15
15
|
give the key a name, then choose **API-Schlüssel erstellen**.
|
|
16
16
|
3. Copy the key before closing the dialog; it is not displayed again. Store it
|
|
17
|
-
as `LEXWARE_API_KEY` in the backend environment. Add Lexware in
|
|
17
|
+
as `LEXWARE_API_KEY` in the backend environment. Add Lexware in the connection editor and
|
|
18
18
|
enter `env:LEXWARE_API_KEY` in **API key reference**.
|
|
19
19
|
4. Record the expiry for operations: keys may be valid for up to 24 months.
|
|
20
20
|
Use the provider's renewal controls before expiry. Changed permissions
|
|
@@ -139,6 +139,6 @@ quotation workflows, gross/tax-free invoice creation, finalization or event
|
|
|
139
139
|
subscription receiver. Example: a booking can prepare a draft for an existing
|
|
140
140
|
customer, but cannot ingest an expense receipt or deliver an invoice PDF with
|
|
141
141
|
this adapter. Native app code must cover those features separately. Editor
|
|
142
|
-
assistant attachment
|
|
142
|
+
assistant tool attachment requires explicit host integration. No live financial action or generated app was
|
|
143
143
|
executed. Failed/uncertain creation is never automatically repeated: inspect
|
|
144
144
|
vouchers first. Provider validation remains authoritative.
|
package/docs/lightspeed.md
CHANGED
|
@@ -51,7 +51,7 @@ configuration contract. Saving the file does not connect a store.
|
|
|
51
51
|
}
|
|
52
52
|
```
|
|
53
53
|
|
|
54
|
-
|
|
54
|
+
Add a Lightspeed connection, choose the account mode, and
|
|
55
55
|
enter **Client ID**, **Client secret reference**, **Callback URL reference** and
|
|
56
56
|
**Domain prefix**. Edit permissions, then **Save configuration**. The client
|
|
57
57
|
authentication method defaults to `client_secret_post`. Use reference values,
|
package/docs/linear.md
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
# Linear
|
|
2
2
|
|
|
3
3
|
Import `linearProvider` from `@jskit-ai/connectors-catalog/server/linear`.
|
|
4
|
-
This adapter supports a personal API key or project-owned OAuth, with GraphQL reads and Linear MCP tools.
|
|
4
|
+
This adapter supports a personal API key or project-owned OAuth, with GraphQL reads and Linear MCP tools. The connection editor edits the project configuration; the generated application owns its runtime and credentials.
|
|
5
5
|
|
|
6
6
|
## Configure access
|
|
7
7
|
|
|
@@ -130,8 +130,7 @@ retry an uncertain create. CLI apps use the same library/configuration/Env; othe
|
|
|
130
130
|
frameworks compose their native MCP client and authorization with those values.
|
|
131
131
|
|
|
132
132
|
**LIMITATIONS:** No maintained tool catalogue, project-management UI or automatic
|
|
133
|
-
|
|
134
|
-
issue update, but saving a Linear connection alone does not
|
|
135
|
-
chat to update that issue. Provider permissions and available tools determine what
|
|
133
|
+
assistant tool attachment. Example: an app can explicitly run an approved
|
|
134
|
+
issue update, but saving a Linear connection alone does not authorize assistant chat to update that issue. Provider permissions and available tools determine what
|
|
136
135
|
can run. Fixture workflows prove argument/result transport and local denial, not
|
|
137
136
|
actual Linear tool schemas or live execution.
|
package/docs/linkedin.md
CHANGED
|
@@ -22,7 +22,7 @@ Only OpenID and profile are required and selected by default. Publishing require
|
|
|
22
22
|
4. For text publishing, request **Share on LinkedIn** under Products and
|
|
23
23
|
confirm `w_member_social` is provisioned in Auth before selecting it.
|
|
24
24
|
[Share product](https://learn.microsoft.com/en-us/linkedin/consumer/integrations/self-serve/share-on-linkedin).
|
|
25
|
-
5. In
|
|
25
|
+
5. In the connection editor choose **Add LinkedIn**, enter display name, ownership, Client ID
|
|
26
26
|
and the two Env references. Open **Permissions** for optional email/publishing.
|
|
27
27
|
Choose **Save configuration**, then **Set credential in Env** to store the
|
|
28
28
|
Client Secret. Use **Open Env** to set the same registered callback. Return
|
package/docs/logo-dev.md
CHANGED
|
@@ -9,7 +9,7 @@ exports `logoDevDefinition` for configuration and UI metadata.
|
|
|
9
9
|
|
|
10
10
|
1. Sign into [Logo.dev API Keys](https://www.logo.dev/dashboard/api-keys).
|
|
11
11
|
Copy the publishable `pk_` key.
|
|
12
|
-
2. In
|
|
12
|
+
2. In the connection editor, add Logo.dev and enter `env:LOGO_DEV_PUBLISHABLE_KEY` in
|
|
13
13
|
**Publishable key reference**. Choose **Save configuration**, then **Set
|
|
14
14
|
credential in Env**, and store the actual `pk_` value as
|
|
15
15
|
`LOGO_DEV_PUBLISHABLE_KEY`. Return after saving Env. The application resolves
|
package/docs/mapbox.md
CHANGED
|
@@ -11,7 +11,7 @@ Browser maps may use a separate public-token reference in the same configuration
|
|
|
11
11
|
Copy a secret token immediately: Mapbox shows it only once.
|
|
12
12
|
Select only the scopes needed by the intended APIs. Geocoding accepts a
|
|
13
13
|
public token; secret scopes produce a private token that stays on the server.
|
|
14
|
-
3. Store the backend token as `MAPBOX_BACKEND_TOKEN`. In
|
|
14
|
+
3. Store the backend token as `MAPBOX_BACKEND_TOKEN`. In the connection editor, enter
|
|
15
15
|
`env:MAPBOX_BACKEND_TOKEN` in **Backend access token reference**.
|
|
16
16
|
4. For browser maps, create a separate public token with the map scopes the
|
|
17
17
|
chosen SDK requires, including `styles:read` and `fonts:read` for styled maps. Add its allowed application URLs and store it as
|
|
@@ -143,7 +143,7 @@ expose it as deliberate browser configuration. Do not copy all Env values.
|
|
|
143
143
|
|
|
144
144
|
The app installs Mapbox GL JS using its framework package workflow, imports
|
|
145
145
|
`mapbox-gl/dist/mapbox-gl.css`, and supplies a visible container with a height.
|
|
146
|
-
The following goes in its existing mount/unmount lifecycle, not in
|
|
146
|
+
The following goes in its existing mount/unmount lifecycle, not in the connection editor:
|
|
147
147
|
|
|
148
148
|
```js
|
|
149
149
|
const map = new mapboxgl.Map({ container: mapElement,
|
package/docs/microsoft-fabric.md
CHANGED
|
@@ -246,4 +246,4 @@ service credentials connect without a browser. Per-user mode requires individual
|
|
|
246
246
|
connections inside the application. Saving alone grants neither API nor source
|
|
247
247
|
access. Both methods use app-owned credentials and persistent grants.
|
|
248
248
|
|
|
249
|
-
**LIMITATIONS (acceptance review):** No automatic table browser, schema-specific client, subscriptions, automatic pagination or
|
|
249
|
+
**LIMITATIONS (acceptance review):** No automatic table browser, schema-specific client, subscriptions, automatic pagination or automatic assistant tool attachment. Example: the app can execute an inventory query using its real schema; this does not provide an inventory dashboard. Both authentication modes and operation/error handling have fixture proof, not live Fabric resource proof.
|
|
@@ -49,7 +49,7 @@ Env variable. Use an account with an existing drive; JSKIT does not provision it
|
|
|
49
49
|
}
|
|
50
50
|
```
|
|
51
51
|
|
|
52
|
-
The same values are editable in
|
|
52
|
+
The same values are editable in the connection editor: display name, account ownership, tenant,
|
|
53
53
|
Client ID, secret/callback references and the two permission choices. Saving the
|
|
54
54
|
file does not open provider consent. The [OAuth composition pattern](../patterns/oauth-connection/PATTERN.md)
|
|
55
55
|
uses the library for consent, private encrypted text storage and runtime access.
|
package/docs/microsoft-word.md
CHANGED
|
@@ -49,7 +49,7 @@ Env variable. Use an account with an existing drive; JSKIT does not provision it
|
|
|
49
49
|
}
|
|
50
50
|
```
|
|
51
51
|
|
|
52
|
-
The same values are editable in
|
|
52
|
+
The same values are editable in the connection editor: display name, account ownership, tenant,
|
|
53
53
|
Client ID, secret/callback references and the two permission choices. Saving the
|
|
54
54
|
file does not open provider consent. The [OAuth composition pattern](../patterns/oauth-connection/PATTERN.md)
|
|
55
55
|
uses the library for consent, private encrypted text storage and runtime access.
|
package/docs/miro.md
CHANGED
|
@@ -21,7 +21,7 @@ tools and calls explicitly authorized tools. Its fixed HTTP endpoint is
|
|
|
21
21
|
4. Store the secret in the host's secret/environment facilities. Write the client
|
|
22
22
|
ID, secret reference and callback reference into the portable registration.
|
|
23
23
|
Never put the secret value in the configuration JSON.
|
|
24
|
-
5.
|
|
24
|
+
5. Add a Miro connection. Enter **Client ID**, **Client
|
|
25
25
|
secret reference** and **Callback URL reference**. Keep **Assistant access**.
|
|
26
26
|
**Read boards** starts selected; enable other permissions only as needed.
|
|
27
27
|
The **OAuth client registration** panel supplies the endpoint and raw JSON
|
|
@@ -114,4 +114,4 @@ consent, board read/write or sample application was exercised. Managed
|
|
|
114
114
|
assignments, automatic assistant attachment and application login remain
|
|
115
115
|
outside this fragment.
|
|
116
116
|
|
|
117
|
-
**LIMITATIONS
|
|
117
|
+
**LIMITATIONS:** Assistant tool attachment requires explicit host integration. Example: a wired CLI/assistant host may discover and authorize a board read or diagram tool, but connecting here does not make the board available in assistant chat. No embedded board editor. Fixture board/diagram names are controlled test inputs, not claims about current remote tool names. Live board access remains unproven.
|
package/docs/n8n.md
CHANGED
|
@@ -166,4 +166,4 @@ Save configuration, and it neither reads nor writes Env.
|
|
|
166
166
|
|
|
167
167
|
## Accepted limitations
|
|
168
168
|
|
|
169
|
-
LIMITATIONS:
|
|
169
|
+
LIMITATIONS: Assistant tool attachment requires explicit host integration. A separately wired CLI or assistant host can discover and invoke exposed workflows through MCP after approving the exact tool and arguments; connecting alone does not attach chat tools. This connector is not the n8n REST API or a workflow designer. Example: an approved host can start an exposed report workflow and receive its result, but saving this connection alone does not let assistant chat start that report. Workflow tools and schemas come from discovery, not a fixed catalogue. Fixture execution is not proof of a live workflow run.
|
package/docs/posthog.md
CHANGED
|
@@ -14,7 +14,7 @@ session replay and automatic event batching are not implemented here.
|
|
|
14
14
|
creation controls shown for your organization.
|
|
15
15
|
2. Open that project's settings from the switcher or sidebar. Copy its numeric
|
|
16
16
|
**Project ID** and public **Project token** beginning with `phc_`.
|
|
17
|
-
3. In
|
|
17
|
+
3. In the connection editor, add PostHog. Set the display name, select **Region**, and paste the
|
|
18
18
|
ID into **Project ID**. The form defaults to Europe; choose United States
|
|
19
19
|
for a US project.
|
|
20
20
|
4. Store the token under `POSTHOG_PROJECT_TOKEN` in the application environment.
|
|
@@ -204,7 +204,7 @@ Nine controlled source tests and nine installed-package tests pass. Existing
|
|
|
204
204
|
phone/desktop configuration evidence is retained; no new browser run was made
|
|
205
205
|
for this closeout and no runtime/form behavior changed.
|
|
206
206
|
|
|
207
|
-
Limitations
|
|
207
|
+
Limitations:
|
|
208
208
|
|
|
209
209
|
- No private analytics querying, dashboards, project provisioning, personal API
|
|
210
210
|
credentials, OAuth, MCP or self-hosted/custom ingestion domains.
|
|
@@ -220,8 +220,8 @@ Limitations and deferred work:
|
|
|
220
220
|
- Flag quota or partial-evaluation failures are errors, with no automatic
|
|
221
221
|
fallback value. The backend supplies no visitor IP forwarding.
|
|
222
222
|
- Disconnect removes local state only; rotate the token in PostHog when needed.
|
|
223
|
-
|
|
223
|
+
Assistant tool attachment requires explicit host integration. No live token, tracking,
|
|
224
224
|
ingestion, provider quota behavior or generated application was exercised.
|
|
225
225
|
|
|
226
|
-
The
|
|
227
|
-
|
|
226
|
+
The application must compose the browser lifecycle and analytics features
|
|
227
|
+
it needs; this connector does not supply a complete analytics product.
|
package/docs/salesforce.md
CHANGED
|
@@ -229,6 +229,5 @@ does not establish access to a particular object or field. A missing token expir
|
|
|
229
229
|
uses a five-minute local renewal policy, not a provider lifetime guarantee.
|
|
230
230
|
Disconnect removes local grants only; provider revocation remains an org/admin
|
|
231
231
|
action. Native framework routes, business UI, app sessions and access policy are
|
|
232
|
-
application-owned.
|
|
233
|
-
and generated-app execution remain
|
|
234
|
-
CRM checklist stays backlog; this is not full Lovable parity.
|
|
232
|
+
application-owned. Assistant tool attachment requires explicit host integration. Live
|
|
233
|
+
org/consent/data outcomes and generated-app execution remain unverified.
|
package/docs/sanity.md
CHANGED
|
@@ -14,7 +14,7 @@ S256 and the single `global` scope. Keep the resource value exact even though
|
|
|
14
14
|
MCP transport uses the root URL. Metadata was read without authentication;
|
|
15
15
|
no client or provider account was created during implementation.
|
|
16
16
|
|
|
17
|
-
In
|
|
17
|
+
In the connection editor, choose **Register client and connect** after
|
|
18
18
|
setting the suggested callback. The existing owner-authorized action saves the
|
|
19
19
|
client ID in configuration, saves secret/callback/recovery ID in Env and starts
|
|
20
20
|
the application's setup command. It refuses occupied Env keys and stale source.
|
|
@@ -94,7 +94,7 @@ run JSKIT or call an editor server for content. The generated application can us
|
|
|
94
94
|
its own Sanity SDK for runtime content; this builder-context connection does not
|
|
95
95
|
automatically become a public site's credential. CLI composition uses the same
|
|
96
96
|
configuration and runtime API without Vibe64. Neither path automatically attaches
|
|
97
|
-
these tools to
|
|
97
|
+
these tools to an assistant.
|
|
98
98
|
|
|
99
99
|
## Automation and application ownership
|
|
100
100
|
|
package/docs/semrush.md
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
Import `semrushProvider` from `@jskit-ai/connectors-catalog/server/semrush`.
|
|
4
4
|
This adapter manages Projects API V4 records and reads keyword/backlink reports using an application-owned V4 API key.
|
|
5
5
|
It works with the shared CLI/server connection service and encrypted file store;
|
|
6
|
-
|
|
6
|
+
The connection editor edits the same portable configuration. Saving fields does not verify a key.
|
|
7
7
|
|
|
8
8
|
## Create and configure a key
|
|
9
9
|
|
|
@@ -16,7 +16,7 @@ Vibe64 edits the same portable configuration. Saving fields does not verify a ke
|
|
|
16
16
|
renaming or deleting projects, and choose an expiry appropriate for the host.
|
|
17
17
|
4. Copy the value when shown. Store it in the runtime's environment or secret
|
|
18
18
|
store; configure only its reference below. The full value is shown once.
|
|
19
|
-
5. Save the JSON through the CLI or
|
|
19
|
+
5. Save the JSON through the CLI or connection editor. Explicitly call `connectApiKey` to
|
|
20
20
|
verify accessible projects. Empty project lists are valid.
|
|
21
21
|
6. For rotation, create a replacement V4 key, update the same binding, verify
|
|
22
22
|
access, then revoke the old key in the provider portal. Changing just the
|
|
@@ -198,7 +198,7 @@ unexpected columns, malformed rows and decoded reports over 2 MB are rejected.
|
|
|
198
198
|
In **My profile > API Keys**, locate the autogenerated **Version 3** key and put
|
|
199
199
|
it in the project's private Env as `SEMRUSH_V3_KEY`. Add
|
|
200
200
|
`settings: { "v3ApiKeyRef": "env:SEMRUSH_V3_KEY" }` to the integration JSON or
|
|
201
|
-
fill **V3 API key reference (optional)** in
|
|
201
|
+
fill **V3 API key reference (optional)** in the connection editor and use **Set credential in Env**.
|
|
202
202
|
The normal authentication reference still points to the separate V4 key.
|
|
203
203
|
Leave the V3 field empty when using only V4 reports and projects.
|
|
204
204
|
|
|
@@ -240,7 +240,7 @@ Results use `{ columns, rows }` with Keyword, Position, Search Volume, CPC,
|
|
|
240
240
|
Competition, Traffic (%) and Number of Results. Values remain strings, including
|
|
241
241
|
large counts, decimals and escaped keyword text. No-data responses return an
|
|
242
242
|
empty row list. The application owns cost approval, pagination, presentation and
|
|
243
|
-
additional storage.
|
|
243
|
+
additional storage. The connection editor does not execute keyword reports during connection.
|
|
244
244
|
Other provider columns are not currently exposed by these focused operations.
|
|
245
245
|
|
|
246
246
|
Sources: [domain keyword reports](https://developer.semrush.com/api/v3/seo/domain-reports/),
|
package/docs/sentry.md
CHANGED
|
@@ -5,7 +5,7 @@ Import `sentryProvider` and `registerSentryClient` from
|
|
|
5
5
|
|
|
6
6
|
The connector uses Sentry's hosted MCP service for an explicitly composed
|
|
7
7
|
assistant. It does not configure SDK event ingestion, a DSN or application login.
|
|
8
|
-
|
|
8
|
+
Assistant tool attachment requires explicit host integration. Saving this configuration
|
|
9
9
|
alone does not give editor chat access to Sentry.
|
|
10
10
|
|
|
11
11
|
## Configure access
|
|
@@ -14,7 +14,7 @@ alone does not give editor chat access to Sentry.
|
|
|
14
14
|
open Project Settings and copy the project slug if restricting to one project.
|
|
15
15
|
Use slugs, not display names or numeric IDs. Organization selection is required;
|
|
16
16
|
project selection is recommended.
|
|
17
|
-
2. Make the assistant host serve its own HTTPS OAuth callback. In
|
|
17
|
+
2. Make the assistant host serve its own HTTPS OAuth callback. In the connection editor, enter
|
|
18
18
|
it in **Suggested callback URL**, then choose **Register client and connect**.
|
|
19
19
|
From a trusted backend or CLI instead, call `registerSentryClient` with `clientName`, `callbackUrl`
|
|
20
20
|
and `scopes` (start with `org:read`). It registers at
|
package/docs/sevdesk.md
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
Import `sevdeskProvider` from `@jskit-ai/connectors-catalog/server/sevdesk`.
|
|
4
4
|
This fragment verifies an account API token and lists contacts, including people
|
|
5
|
-
by default.
|
|
5
|
+
by default. The connection editor labels its credential field **API token reference**.
|
|
6
6
|
|
|
7
7
|
## Provider setup
|
|
8
8
|
|
|
@@ -12,7 +12,7 @@ by default. Vibe64 labels its credential field **API token reference**.
|
|
|
12
12
|
enter your password, then copy the revealed token. Some plans also expose
|
|
13
13
|
**Erweiterungen → API**, with the same reveal/password step.
|
|
14
14
|
3. Store the value as `SEVDESK_API_TOKEN` in the backend environment. Add
|
|
15
|
-
Sevdesk in
|
|
15
|
+
Sevdesk in the connection editor and enter `env:SEVDESK_API_TOKEN` in **API token reference**.
|
|
16
16
|
The portable file contains that reference, never the revealed token.
|
|
17
17
|
|
|
18
18
|
This retrieves an existing credential; it is not a new OAuth-app registration.
|
package/docs/shopify.md
CHANGED
|
@@ -134,8 +134,8 @@ This is a distinct host lifecycle, not a GraphQL product mutation. Shopify place
|
|
|
134
134
|
installation restrictions on client transfer stores; dev stores cannot be
|
|
135
135
|
transferred. A transfer also moves the store out of the original organization,
|
|
136
136
|
so organization-only client credentials cannot be assumed to remain usable.
|
|
137
|
-
|
|
138
|
-
|
|
137
|
+
Automatic store creation/claim workflows and commercial Shopify arrangements
|
|
138
|
+
remain application responsibilities. Do not promise Lovable's trial terms.
|
|
139
139
|
See [client transfer stores](https://shopify.dev/docs/apps/build/stores/client-transfer-stores).
|
|
140
140
|
|
|
141
141
|
## Runtime and assistant authorization
|
package/docs/slack.md
CHANGED
|
@@ -61,7 +61,7 @@ and [app credential details](https://docs.slack.dev/authentication/using-token-r
|
|
|
61
61
|
|
|
62
62
|
## Portable configuration
|
|
63
63
|
|
|
64
|
-
The same `integrations.json` is usable by CLI code and
|
|
64
|
+
The same `integrations.json` is usable by CLI code and the connection editor. Replace
|
|
65
65
|
the Client ID placeholder and supply the two referenced environment values.
|
|
66
66
|
No client secret, access token or refresh token belongs in this file.
|
|
67
67
|
|
|
@@ -193,8 +193,8 @@ part of this proof. Current controlled source and installed-package suites each
|
|
|
193
193
|
Current-source compact and expanded editor cases pass separately, including
|
|
194
194
|
actor/scope persistence, signing-secret reference, inline guidance, per-user
|
|
195
195
|
connection instructions and shared connect/cancel/disconnect controls. Registration
|
|
196
|
-
provisioning remains an operator action;
|
|
197
|
-
|
|
196
|
+
provisioning remains an operator action; assistant tool attachment requires
|
|
197
|
+
explicit host integration.
|
|
198
198
|
|
|
199
199
|
|
|
200
200
|
## Message operations
|
package/docs/telegram.md
CHANGED
|
@@ -11,7 +11,7 @@ webhooks or authenticate application users.
|
|
|
11
11
|
2. Send `/newbot`, supply a display name, then choose an available username
|
|
12
12
|
ending in `bot`. Keep the returned token private.
|
|
13
13
|
3. Store the token in your backend environment as `TELEGRAM_BOT_TOKEN`.
|
|
14
|
-
4. Add Telegram in
|
|
14
|
+
4. Add Telegram in the connection editor. Enter `env:TELEGRAM_BOT_TOKEN` in **Bot token
|
|
15
15
|
reference** and save. The CLI uses exactly the same JSON below.
|
|
16
16
|
5. Run the application's connection verification. Saving an editor form alone
|
|
17
17
|
does not contact Telegram or prove that the token works.
|
package/docs/twilio.md
CHANGED
|
@@ -263,8 +263,8 @@ the same application-owned credentials.
|
|
|
263
263
|
There is no OAuth callback in this API-key flow, so editor VM URLs and custom
|
|
264
264
|
application domains do not add OAuth redirect registrations. Twilio Verify and
|
|
265
265
|
SMS login are separate products and are outside this adapter. The application
|
|
266
|
-
owns access policy; connections are project-owned.
|
|
267
|
-
|
|
266
|
+
owns access policy; connections are project-owned. Assistant tool attachment
|
|
267
|
+
requires explicit host integration and is not enabled by saving this connector.
|
|
268
268
|
|
|
269
269
|
## Proof
|
|
270
270
|
|
package/docs/wiz.md
CHANGED
|
@@ -152,9 +152,9 @@ custom domain does not alter that account or the worker's stable application ID.
|
|
|
152
152
|
|
|
153
153
|
Workspace connection availability and granting access to everyone are host-owned
|
|
154
154
|
policies. A project-local JSON slot does not automatically confer workspace-wide
|
|
155
|
-
access.
|
|
156
|
-
|
|
157
|
-
|
|
155
|
+
access. Workspace scanner orchestration, automatic scan inclusion, findings
|
|
156
|
+
display/aggregation, stale-result UI and connection removal propagation belong
|
|
157
|
+
to the host. The connection editor edits the configuration only.
|
|
158
158
|
|
|
159
159
|
## Automation feasibility and proof
|
|
160
160
|
|
package/docs/xero.md
CHANGED
|
@@ -418,8 +418,8 @@ that surface:
|
|
|
418
418
|
invoice sharing. Larger files and other record types need native integration.
|
|
419
419
|
- Native application composition: the framework owns routes, UI, authorization,
|
|
420
420
|
business validations and operation calls. Installing the provider or saving the
|
|
421
|
-
editor form does not generate an accounting application.
|
|
422
|
-
|
|
421
|
+
editor form does not generate an accounting application. Assistant tool
|
|
422
|
+
attachment requires explicit host integration.
|
|
423
423
|
- Verification: controlled fixtures establish request/response and local lifecycle
|
|
424
424
|
behavior. Live OAuth, actual Xero organisations, provider tiers, production
|
|
425
425
|
permissions, accounting outcomes and generated-app execution are unverified.
|
package/docs/zoho-books.md
CHANGED
|
@@ -16,7 +16,7 @@ Saving configuration does not connect an account.
|
|
|
16
16
|
3. Open the client's **Client Secret** section. Copy its **Client ID** into
|
|
17
17
|
the registration. Store its secret in `ZOHO_BOOKS_CLIENT_SECRET`, and the
|
|
18
18
|
registered callback URL in `ZOHO_BOOKS_CALLBACK_URL`.
|
|
19
|
-
4. Select the matching **Data center** in
|
|
19
|
+
4. Select the matching **Data center** in the connection editor or `settings.region` in JSON.
|
|
20
20
|
For accounts in other regions, open the client's **Settings**, enable
|
|
21
21
|
**Multi DC**, and enable each required region. Use that region's secret;
|
|
22
22
|
do not assume all enabled regions share one secret.
|
|
@@ -209,6 +209,5 @@ Organisation discovery does not prove contact/invoice permissions; an unconfigur
|
|
|
209
209
|
integration requires an explicit organisation per operation. The host must enforce
|
|
210
210
|
its own organisation/user policy in addition to provider permissions. Callback
|
|
211
211
|
routes, business/end-user connection UI and native framework wiring belong to the
|
|
212
|
-
application. Disconnect is local.
|
|
213
|
-
consent/permissions/accounting outcomes and generated-app execution remain
|
|
214
|
-
or unverified. The original broader accounting packet remains backlog.
|
|
212
|
+
application. Disconnect is local. Assistant tool attachment requires explicit host integration. Live regional
|
|
213
|
+
consent/permissions/accounting outcomes and generated-app execution remain unverified.
|
package/docs/zoho-crm.md
CHANGED
|
@@ -187,6 +187,6 @@ No native/self/client-credentials grants, additional regions beyond the configur
|
|
|
187
187
|
seven, region auto-discovery or provider-side revocation. Current-user verification
|
|
188
188
|
does not prove module/field permissions. The application supplies callbacks,
|
|
189
189
|
organisation/user policy, end-user connection screens and native framework wiring;
|
|
190
|
-
connecting CRM is not app sign-in. Disconnect is local.
|
|
191
|
-
|
|
192
|
-
|
|
190
|
+
connecting CRM is not app sign-in. Disconnect is local. Assistant tool attachment
|
|
191
|
+
requires explicit host integration. Live regional OAuth/permissions/data and
|
|
192
|
+
generated-app execution remain unverified.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@jskit-ai/connectors-catalog",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.41",
|
|
4
4
|
"description": "Provider definitions and focused API operations for JSKIT connectors.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"exports": {
|
|
@@ -123,14 +123,14 @@
|
|
|
123
123
|
"@aws-sdk/client-redshift-data": "3.1128.0",
|
|
124
124
|
"@aws-sdk/client-s3": "3.1128.0",
|
|
125
125
|
"@aws-sdk/s3-request-presigner": "3.1128.0",
|
|
126
|
-
"@jskit-ai/connectors-core": "0.1.
|
|
126
|
+
"@jskit-ai/connectors-core": "0.1.41",
|
|
127
127
|
"@modelcontextprotocol/sdk": "1.30.0",
|
|
128
128
|
"@smithy/fetch-http-handler": "5.8.0",
|
|
129
129
|
"json-rest-schema": "^1.0.17",
|
|
130
130
|
"jose": "^6.1.3"
|
|
131
131
|
},
|
|
132
132
|
"peerDependencies": {
|
|
133
|
-
"@jskit-ai/kernel": "0.1.
|
|
133
|
+
"@jskit-ai/kernel": "0.1.224"
|
|
134
134
|
},
|
|
135
135
|
"jskit": {
|
|
136
136
|
"kind": "runtime",
|