@lanes-sh/link 0.6.10 → 0.7.0

package/src/providers/google/specs/people.v1.json

@@ -354,26 +354,6 @@
   },
   "components": {
     "parameters": {
-      "_.xgafv": {
-        "description": "V1 error format.",
-        "in": "query",
-        "name": "$.xgafv",
-        "schema": {
-          "enum": [
-            "1",
-            "2"
-          ],
-          "type": "string"
-        }
-      },
-      "access_token": {
-        "description": "OAuth access token.",
-        "in": "query",
-        "name": "access_token",
-        "schema": {
-          "type": "string"
-        }
-      },
       "alt": {
         "description": "Data format for response.",
         "in": "query",
@@ -387,14 +367,6 @@
           "type": "string"
         }
       },
-      "callback": {
-        "description": "JSONP",
-        "in": "query",
-        "name": "callback",
-        "schema": {
-          "type": "string"
-        }
-      },
       "fields": {
         "description": "Selector specifying which fields to include in a partial response.",
         "in": "query",
@@ -402,57 +374,8 @@
         "schema": {
           "type": "string"
         }
-      },
-      "key": {
-        "description": "API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token.",
-        "in": "query",
-        "name": "key",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "oauth_token": {
-        "description": "OAuth 2.0 token for the current user.",
-        "in": "query",
-        "name": "oauth_token",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "prettyPrint": {
-        "description": "Returns response with indentations and line breaks.",
-        "in": "query",
-        "name": "prettyPrint",
-        "schema": {
-          "type": "boolean"
-        }
-      },
-      "quotaUser": {
-        "description": "Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters.",
-        "in": "query",
-        "name": "quotaUser",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "uploadType": {
-        "description": "Legacy upload protocol for media (e.g. \"media\", \"multipart\").",
-        "in": "query",
-        "name": "uploadType",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "upload_protocol": {
-        "description": "Upload protocol for media (e.g. \"raw\", \"multipart\").",
-        "in": "query",
-        "name": "upload_protocol",
-        "schema": {
-          "type": "string"
-        }
       }
     },
-    "schemas": {},
     "securitySchemes": {
       "Oauth2": {
         "description": "Oauth 2.0 implicit authentication",

package/src/providers/google/specs/sheets.v4.json

@@ -999,26 +999,6 @@
   },
   "components": {
     "parameters": {
-      "_.xgafv": {
-        "description": "V1 error format.",
-        "in": "query",
-        "name": "$.xgafv",
-        "schema": {
-          "enum": [
-            "1",
-            "2"
-          ],
-          "type": "string"
-        }
-      },
-      "access_token": {
-        "description": "OAuth access token.",
-        "in": "query",
-        "name": "access_token",
-        "schema": {
-          "type": "string"
-        }
-      },
       "alt": {
         "description": "Data format for response.",
         "in": "query",
@@ -1032,14 +1012,6 @@
           "type": "string"
         }
       },
-      "callback": {
-        "description": "JSONP",
-        "in": "query",
-        "name": "callback",
-        "schema": {
-          "type": "string"
-        }
-      },
       "fields": {
         "description": "Selector specifying which fields to include in a partial response.",
         "in": "query",
@@ -1047,54 +1019,6 @@
         "schema": {
           "type": "string"
         }
-      },
-      "key": {
-        "description": "API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token.",
-        "in": "query",
-        "name": "key",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "oauth_token": {
-        "description": "OAuth 2.0 token for the current user.",
-        "in": "query",
-        "name": "oauth_token",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "prettyPrint": {
-        "description": "Returns response with indentations and line breaks.",
-        "in": "query",
-        "name": "prettyPrint",
-        "schema": {
-          "type": "boolean"
-        }
-      },
-      "quotaUser": {
-        "description": "Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters.",
-        "in": "query",
-        "name": "quotaUser",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "uploadType": {
-        "description": "Legacy upload protocol for media (e.g. \"media\", \"multipart\").",
-        "in": "query",
-        "name": "uploadType",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "upload_protocol": {
-        "description": "Upload protocol for media (e.g. \"raw\", \"multipart\").",
-        "in": "query",
-        "name": "upload_protocol",
-        "schema": {
-          "type": "string"
-        }
       }
     },
     "schemas": {

package/src/providers/google/specs/tasks.v1.json

@@ -596,26 +596,6 @@
   },
   "components": {
     "parameters": {
-      "_.xgafv": {
-        "description": "V1 error format.",
-        "in": "query",
-        "name": "$.xgafv",
-        "schema": {
-          "enum": [
-            "1",
-            "2"
-          ],
-          "type": "string"
-        }
-      },
-      "access_token": {
-        "description": "OAuth access token.",
-        "in": "query",
-        "name": "access_token",
-        "schema": {
-          "type": "string"
-        }
-      },
       "alt": {
         "description": "Data format for response.",
         "in": "query",
@@ -629,14 +609,6 @@
           "type": "string"
         }
       },
-      "callback": {
-        "description": "JSONP",
-        "in": "query",
-        "name": "callback",
-        "schema": {
-          "type": "string"
-        }
-      },
       "fields": {
         "description": "Selector specifying which fields to include in a partial response.",
         "in": "query",
@@ -644,54 +616,6 @@
         "schema": {
           "type": "string"
         }
-      },
-      "key": {
-        "description": "API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token.",
-        "in": "query",
-        "name": "key",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "oauth_token": {
-        "description": "OAuth 2.0 token for the current user.",
-        "in": "query",
-        "name": "oauth_token",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "prettyPrint": {
-        "description": "Returns response with indentations and line breaks.",
-        "in": "query",
-        "name": "prettyPrint",
-        "schema": {
-          "type": "boolean"
-        }
-      },
-      "quotaUser": {
-        "description": "Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters.",
-        "in": "query",
-        "name": "quotaUser",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "uploadType": {
-        "description": "Legacy upload protocol for media (e.g. \"media\", \"multipart\").",
-        "in": "query",
-        "name": "uploadType",
-        "schema": {
-          "type": "string"
-        }
-      },
-      "upload_protocol": {
-        "description": "Upload protocol for media (e.g. \"raw\", \"multipart\").",
-        "in": "query",
-        "name": "upload_protocol",
-        "schema": {
-          "type": "string"
-        }
       }
     },
     "schemas": {

package/src/providers/grafana/index.ts

@@ -0,0 +1,10 @@
+import { defineProvider } from '#connectivity';
+
+/** Grafana registers us at connect time — nothing for an operator to set up. */
+export const grafana = defineProvider({
+  id: 'grafana',
+  name: 'Grafana',
+  description: 'Dashboards, datasources, queries, and alert rules, via Grafana\'s official MCP server.',
+  connector: { kind: 'mcp', endpoint: 'https://mcp.grafana.com/mcp' },
+  auth: { kind: 'oauth', registration: 'dynamic' },
+});

package/src/providers/heroku/index.ts

@@ -0,0 +1,10 @@
+import { defineProvider } from '#connectivity';
+
+/** Heroku registers us at connect time — nothing for an operator to set up. */
+export const heroku = defineProvider({
+  id: 'heroku',
+  name: 'Heroku',
+  description: 'Apps, dynos, add-ons, releases, and logs, via Heroku\'s official MCP server.',
+  connector: { kind: 'mcp', endpoint: 'https://mcp.heroku.com/mcp' },
+  auth: { kind: 'oauth', registration: 'dynamic' },
+});

package/src/providers/hubspot/index.ts

@@ -0,0 +1,75 @@
+import { defineProvider } from '#connectivity';
+
+/** Where the client the operator registers is kept. */
+export const HUBSPOT_APP = 'hubspot';
+
+/**
+ * The loopback redirect HubSpot is told about, verbatim.
+ *
+ * HubSpot matches the whole redirect URL rather than accepting any loopback
+ * port, so the port cannot be one the kernel picked at run time — the console
+ * was told a number months earlier and the grant is refused with
+ * `redirect_uri_mismatch` otherwise. Same arrangement as Reddit's, and the
+ * reason `auth.redirect_uri` exists (ADR-045).
+ */
+const HUBSPOT_REDIRECT_URI = 'http://127.0.0.1:8771/callback';
+
+/**
+ * HubSpot, through the server HubSpot runs.
+ *
+ * No dynamic client registration, so a client has to exist before the browser
+ * opens — and HubSpot's is a purpose-built one rather than an ordinary developer
+ * app: an "MCP auth app", created inside the account it will read. Until Lanes
+ * operates one, that client is the operator's, which is the `reddit` shape.
+ *
+ * Declaring both endpoints is what takes this off the SDK's flow and onto the
+ * one this repository drives, which is what makes the fixed redirect above
+ * possible. See ADR-040.
+ */
+export const hubspot = defineProvider({
+  id: 'hubspot',
+  name: 'HubSpot',
+  description: 'CRM contacts, companies, deals, and engagements, via HubSpot\'s official MCP server.',
+  connector: { kind: 'mcp', endpoint: 'https://mcp.hubspot.com' },
+  auth: {
+    kind: 'oauth',
+    registration: 'manual',
+    app: HUBSPOT_APP,
+    authorize_url: 'https://mcp.hubspot.com/oauth/authorize/user',
+    token_url: 'https://mcp.hubspot.com/oauth/v3/token',
+    redirect_uri: HUBSPOT_REDIRECT_URI,
+  },
+  setup: {
+    summary:
+      'HubSpot needs an "MCP auth app" of your own, created inside the HubSpot account you want to ' +
+      'reach. It is free, it is not the same thing as a public developer app, and it takes a couple ' +
+      'of minutes.',
+    docs_url: 'https://developers.hubspot.com/docs/apps/developer-platform/build-apps/integrate-with-the-remote-hubspot-mcp-server',
+    steps: [
+      'Sign in to HubSpot and open Development → MCP Auth Apps in the left sidebar, then "Create MCP auth app" at the top right.',
+      'Name it "Lanes Link". A description is optional.',
+      `For the redirect URL, enter exactly: ${HUBSPOT_REDIRECT_URI} — the whole URL, including the port. HubSpot matches it literally, so a different port here means every sign-in is refused.`,
+      'Create the app. You are taken to its details page, which shows the client ID and client secret.',
+      'Copy both. They are asked for below, and they are stored encrypted rather than in any config file.',
+    ],
+    troubleshooting:
+      'redirect_uri_mismatch means the URL registered on the app is not the one above — check the port, and that it is 127.0.0.1 rather than localhost, which HubSpot treats as a different string. ' +
+      'If the app was created under the wrong HubSpot account, the sign-in succeeds and the tool list is empty: create the MCP auth app inside the account whose CRM you want to reach.',
+    prompts: [
+      {
+        key: 'client_id',
+        label: 'HubSpot MCP auth app client ID',
+        secret: false,
+        scope: 'shared' as const,
+        credential_ref: `${HUBSPOT_APP}/client_id`,
+      },
+      {
+        key: 'client_secret',
+        label: 'HubSpot MCP auth app client secret',
+        secret: true,
+        scope: 'shared' as const,
+        credential_ref: `${HUBSPOT_APP}/client_secret`,
+      },
+    ],
+  },
+});

package/src/providers/hygraph/index.ts

@@ -0,0 +1,10 @@
+import { defineProvider } from '#connectivity';
+
+/** Hygraph registers us at connect time — nothing for an operator to set up. */
+export const hygraph = defineProvider({
+  id: 'hygraph',
+  name: 'Hygraph',
+  description: 'Content entries, models, and schema, via Hygraph\'s official MCP server.',
+  connector: { kind: 'mcp', endpoint: 'https://mcp.hygraph.com/mcp' },
+  auth: { kind: 'oauth', registration: 'dynamic' },
+});

package/src/providers/icloud/mail/index.ts

@@ -19,6 +19,11 @@ export const icloudMail = defineProvider({
     // the search terms — a query is content, and "who did I email about the
     // diagnosis" is the whole message.
     search_messages: ['mailbox', 'limit', 'unseen', 'flagged'],
+    // Identifiers only, and all of them: which mailbox, which message, which
+    // attachment. What the file turned out to be — name, size, type, digest —
+    // is recorded by the handler through `audit.annotate`, the same way the send
+    // path records what it attached.
+    get_attachment: ['mailbox', 'uid', 'message_id', 'attachment_id'],
     get_message: ['mailbox', 'uid', 'include_body'],
     mark_messages: ['mailbox', 'add_flags', 'remove_flags'],
     // `destination_flag` alongside `destination`: they are two spellings of the

package/src/providers/icloud/shared/setup.ts

@@ -28,7 +28,7 @@ export const icloudSetup = (product: string) => ({
     `${product} uses an app-specific password. Your Apple Account password will not work — Apple refuses it ` +
     `for third-party clients — and Lanes Link never sees it. You are asked once: the same password covers ` +
     `Mail, Calendar, and Contacts, because Apple issues it per account rather than per service.`,
-  docs: 'docs/detailed/setup/icloud.md',
+  docs: 'https://lanes.sh/docs/link/icloud',
   docs_url: 'https://support.apple.com/en-us/102654',
   steps: [
     'Sign in at https://account.apple.com and open "Sign-In and Security".',