@lssm/lib.contracts-integrations 9.0.1

package/dist/integrations/providers/analytics-writer.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/analytics.d.ts

@@ -0,0 +1,47 @@
+import type { AnalyticsReader } from './analytics-reader.js';
+import type { AnalyticsWriter } from './analytics-writer.js';
+export type AnalyticsRequestMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+export interface AnalyticsRequest {
+    method: AnalyticsRequestMethod;
+    path: string;
+    query?: Record<string, string | number | boolean | undefined>;
+    body?: unknown;
+    headers?: Record<string, string>;
+}
+export interface AnalyticsResponse<T = unknown> {
+    status: number;
+    data: T;
+    headers?: Record<string, string>;
+}
+export interface AnalyticsEventInput {
+    distinctId: string;
+    event: string;
+    properties?: Record<string, unknown>;
+    timestamp?: Date;
+    groups?: Record<string, string>;
+}
+export interface AnalyticsIdentifyInput {
+    distinctId: string;
+    properties?: Record<string, unknown>;
+    setOnce?: Record<string, unknown>;
+}
+export interface AnalyticsQueryInput {
+    query: string;
+    values?: Record<string, unknown>;
+}
+export interface AnalyticsQueryResult {
+    results: unknown;
+    columns?: string[];
+    types?: string[];
+    hogql?: string;
+    timings?: unknown;
+}
+export interface AnalyticsMcpToolCall {
+    name: string;
+    arguments?: Record<string, unknown>;
+}
+export type AnalyticsProvider = AnalyticsWriter & AnalyticsReader & {
+    request<T = unknown>(request: AnalyticsRequest): Promise<AnalyticsResponse<T>>;
+};
+export * from './analytics-reader.js';
+export * from './analytics-writer.js';

package/dist/integrations/providers/analytics.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/apify.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const apifyIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerApifyIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/apify.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as l}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as c}from"@lssm/lib.contracts-spec/registry";var g=(e)=>`${e.key}.v${e.version}`;class d extends c{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function y(e){return g(e)}var o=(e)=>e;function a({unsupportedModeReason:e,configFields:t,secretFields:n,rotationSupported:p=!1,setupSteps:i}){let r={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:p}};if(t)r.configFields=t;if(n)r.secretFields=n;if(i)r.setupSteps=i;return{modes:{byok:r},exempt:!0,exemptionReason:e}}function s(e){return o({meta:{key:e.key,version:e.version??"1.0.0",category:"custom",title:e.title,description:e.description,domain:"knowledge",owners:["platform.ai"],tags:["web-access",...e.tags],stability:l.Experimental},supportedModes:["byok"],credentialManifest:a({unsupportedModeReason:"Managed credentials are not shipped; tenants must supply provider-owned credentials through a SecretProvider.",secretFields:e.secretFields.map((t)=>({key:t})),rotationSupported:!1}),transports:e.transports,preferredTransport:e.preferredTransport,supportedAuthMethods:e.auth,capabilities:{provides:e.capabilities.map((t)=>({key:t,version:"1.0.0"}))},configSchema:{schema:{type:"object",properties:{baseUrl:{type:"string"},policyMode:{type:"string",enum:["governed","provider-pass-through","public-only"]},...e.configProperties}}},secretSchema:{schema:{type:"object",properties:Object.fromEntries(e.secretFields.map((t)=>[t,{type:"string"}]))},example:Object.fromEntries(e.secretFields.map((t)=>[t,"***"]))},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:e.docsUrl,byokSetup:{setupInstructions:"Resolve provider credentials at execution time through SecretProvider; never persist credentials in integration config.",keyRotationSupported:!1,quotaTrackingSupported:!0}})}var m=s({key:"web-access.apify",title:"Apify Web Access",description:"Apify REST Actor runs, run status, cancellation, and datasets.",tags:["actors","scraping","datasets"],transports:[{type:"rest",baseUrl:"https://api.apify.com/v2"}],preferredTransport:"rest",auth:[{type:"bearer",tokenField:"apiToken"}],secretFields:["apiToken"],capabilities:["web.scrape","web.job","web.dataset.read"],docsUrl:"https://docs.apify.com/api/v2"});function C(e){return e.register(m)}export{m as apifyIntegrationSpec,C as registerApifyIntegration};

package/dist/integrations/providers/apple-health.d.ts

@@ -0,0 +1,3 @@
+import { type IntegrationSpecRegistry } from '../spec.js';
+export declare const appleHealthIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerAppleHealthIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/apple-health.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as c}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as s}from"@lssm/lib.contracts-spec/registry";var p=(e)=>`${e.key}.v${e.version}`;class g extends s{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function u(e){return p(e)}var i=(e)=>e;var o=["official-api","official-mcp","aggregator-api","aggregator-mcp","unofficial"],l=[{key:"health.activities.read",version:"1.0.0"},{key:"health.workouts.read",version:"1.0.0"},{key:"health.sleep.read",version:"1.0.0"},{key:"health.biometrics.read",version:"1.0.0"}],d=[{type:"rest"},{type:"mcp",transport:"http"},{type:"webhook",inbound:{signatureHeader:"x-webhook-signature",signingAlgorithm:"hmac-sha256"}}],n=[{type:"oauth2",grantType:"authorization_code",tokenUrl:"",scopes:[]},{type:"api-key"},{type:"bearer"},{type:"basic"}];function a(e){let t=e.supportedAuthMethods??h(e);return i({meta:{key:e.key,version:"1.0.0",category:"health",title:e.title,description:e.description,domain:"health",owners:["platform.integrations"],tags:["health","wearables",...e.tags],stability:e.stability??c.Experimental},supportedModes:e.supportedModes??["managed","byok"],transports:e.transports??d,preferredTransport:"rest",supportedAuthMethods:t,capabilities:{provides:e.capabilities??[...l]},configSchema:{schema:{type:"object",properties:{apiBaseUrl:{type:"string",description:"Optional API base URL override for provider-specific regional or partner endpoints."},mcpUrl:{type:"string",description:"Optional MCP endpoint URL for provider tool transport."},oauthTokenUrl:{type:"string",description:"Optional OAuth token endpoint override used for access-token refresh flows."},defaultTransport:{type:"string",enum:[...o],description:"Preferred transport strategy used before fallbacks are attempted."},strategyOrder:{type:"array",items:{type:"string",enum:[...o]},description:"Ordered transport fallback strategy. Defaults to official API -> official MCP -> aggregator API -> aggregator MCP -> unofficial."},allowUnofficial:{type:"boolean",description:"Must be true to allow unofficial/automation connectors as fallback."},unofficialAllowList:{type:"array",items:{type:"string"},description:"Optional allowlist of provider keys allowed to use unofficial connectors."}}},example:{defaultTransport:e.defaultTransport??"official-api",strategyOrder:[...o],allowUnofficial:!1,unofficialAllowList:[]}},secretSchema:{schema:{type:"object",properties:{apiKey:{type:"string"},accessToken:{type:"string"},refreshToken:{type:"string"},tokenExpiresAt:{type:"string"},clientId:{type:"string"},clientSecret:{type:"string"},mcpAccessToken:{type:"string"},username:{type:"string"},password:{type:"string"}}},example:{apiKey:"provider-api-key",accessToken:"oauth-access-token",refreshToken:"oauth-refresh-token"}},healthCheck:{method:"list",timeoutMs:1e4},docsUrl:e.docsUrl,byokSetup:{setupInstructions:e.byokSetupInstructions??"Create provider credentials, set allowed scopes, and store credentials in secret provider.",requiredScopes:e.byokScopes,keyRotationSupported:!1,quotaTrackingSupported:!1}})}function h(e){if(e.oauthTokenUrl){let t=e.oauthTokenUrl;return n.map((r)=>{if(r.type==="oauth2")return{...r,tokenUrl:t,scopes:e.byokScopes??[]};return r})}return[...n]}var f=a({key:"health.apple-health",title:"Apple Health Bridge",description:"Apple Health ingestion bridge for HealthKit-exported or aggregator-routed data.",docsUrl:"https://developer.apple.com/health-fitness/",tags:["apple","healthkit","bridge"],defaultTransport:"aggregator-api",byokSetupInstructions:"Use on-device HealthKit authorization and route data through approved bridge endpoints or aggregator connectors."});function T(e){return e.register(f)}export{f as appleHealthIntegrationSpec,T as registerAppleHealthIntegration};

package/dist/integrations/providers/async-media-record.d.ts

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+export declare const AsyncMediaGenerationSchema: z.ZodObject<{
+    id: z.ZodString;
+    tenantId: z.ZodString;
+    workspaceId: z.ZodString;
+    connectionRef: z.ZodString;
+    idempotencyKey: z.ZodString;
+    requestDigest: z.ZodString;
+    revision: z.ZodNumber;
+    state: z.ZodEnum<{
+        blocked: "blocked";
+        failed: "failed";
+        queued: "queued";
+        reserved: "reserved";
+        running: "running";
+        submitting: "submitting";
+        succeeded: "succeeded";
+        unknown: "unknown";
+    }>;
+    providerJobRef: z.ZodOptional<z.ZodString>;
+    artifactRefs: z.ZodArray<z.ZodString>;
+    expectedOutputCount: z.ZodOptional<z.ZodNumber>;
+    authorityReceiptRef: z.ZodString;
+    costReservationRef: z.ZodString;
+    updatedAt: z.ZodISODateTime;
+}, z.core.$strict>;

package/dist/integrations/providers/async-media-record.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as t}from"zod";var e=t.string().trim().min(1).max(200),n=t.strictObject({id:e,tenantId:e,workspaceId:e,connectionRef:e,idempotencyKey:e,requestDigest:t.string().regex(/^sha256:[a-f0-9]{64}$/),revision:t.number().int().positive(),state:t.enum(["reserved","submitting","unknown","queued","running","succeeded","failed","blocked"]),providerJobRef:e.optional(),artifactRefs:t.array(e).max(100),expectedOutputCount:t.number().int().min(1).max(100).optional(),authorityReceiptRef:e,costReservationRef:e,updatedAt:t.iso.datetime()});export{n as AsyncMediaGenerationSchema};

package/dist/integrations/providers/async-media.d.ts

@@ -0,0 +1,112 @@
+/** Provider-neutral asynchronous media boundary. Durable orchestration owns retries and costs. */
+export interface AsyncMediaContext {
+    tenantId: string;
+    workspaceId: string;
+    connectionRef: string;
+    idempotencyKey: string;
+    authorityReceiptRef: string;
+}
+interface MediaRequestBase {
+    prompt: string;
+    seed?: number;
+    rightsGrantRefs: readonly string[];
+}
+export type AsyncMediaRequest = (MediaRequestBase & {
+    kind: 'image';
+    width: number;
+    height: number;
+    quality: 'standard' | 'high';
+    variants: 1 | 4;
+}) | (MediaRequestBase & {
+    kind: 'image_to_video';
+    imageUrl: string;
+    model: 'fast' | 'standard' | 'quality';
+}) | (MediaRequestBase & {
+    kind: 'talking_presenter';
+    imageUrl: string;
+    audioUrl: string;
+    quality: 'standard' | 'high';
+    durationSeconds: 5 | 10 | 15;
+});
+export interface AsyncMediaJob {
+    /** Missing after an ambiguous submission; callers must not blindly submit again. */
+    providerJobRef?: string;
+    status: 'queued' | 'running' | 'succeeded' | 'failed' | 'blocked' | 'unknown';
+    /** Transient download locations, not durable asset IDs or public publication grants. */
+    outputs: readonly {
+        kind: 'image' | 'video';
+        url: string;
+    }[];
+    cancellation: 'unsupported' | 'available';
+}
+export interface AsyncMediaProvider {
+    submit(request: AsyncMediaRequest, context: AsyncMediaContext): Promise<AsyncMediaJob>;
+    status(providerJobRef: string, context: AsyncMediaContext): Promise<AsyncMediaJob>;
+}
+export interface AsyncMediaAuthorityPort {
+    /** Must verify the stored request/job binding, exact connection, rights, and reserved cost. */
+    authorize(input: {
+        context: AsyncMediaContext;
+        action: 'submit' | 'status';
+        request?: AsyncMediaRequest;
+        providerJobRef?: string;
+    }): Promise<void>;
+}
+/** Durable orchestration stores artifact IDs, never transient output download URLs. */
+export interface AsyncMediaGeneration {
+    id: string;
+    tenantId: string;
+    workspaceId: string;
+    connectionRef: string;
+    idempotencyKey: string;
+    requestDigest: string;
+    revision: number;
+    state: 'reserved' | 'submitting' | 'unknown' | 'queued' | 'running' | 'succeeded' | 'failed' | 'blocked';
+    providerJobRef?: string;
+    /** Durable ordered prefix of imported outputs; may be partial while running. Existing entries never change. */
+    artifactRefs: readonly string[];
+    /** Frozen output cardinality once provider completion is observed. */
+    expectedOutputCount?: number;
+    authorityReceiptRef: string;
+    costReservationRef: string;
+    updatedAt: string;
+}
+export interface AsyncMediaGenerationStore {
+    get(context: AsyncMediaContext): Promise<AsyncMediaGeneration | undefined>;
+    /** Insert-or-return with an exact scope/key/request/connection binding; immutable collision is an error. */
+    reserve(record: AsyncMediaGeneration): Promise<AsyncMediaGeneration>;
+    /** Atomically advance exactly one revision with immutable history. */
+    save(record: AsyncMediaGeneration, expectedRevision: number): Promise<boolean>;
+}
+export interface AsyncMediaGenerationAuthority {
+    /** Authorize and reserve cost idempotently for this key/digest; tokens are references only. */
+    authorize(input: {
+        request: AsyncMediaRequest;
+        context: AsyncMediaContext;
+        requestDigest: string;
+        action: 'generate';
+    }): Promise<{
+        receiptRef: string;
+        costReservationRef: string;
+    }>;
+    /** Read/reconcile authority remains available after a generation mandate expires. */
+    authorizeRead(input: {
+        context: AsyncMediaContext;
+        generation: AsyncMediaGeneration;
+    }): Promise<void>;
+}
+export interface AsyncMediaArtifactIngestor {
+    /** Idempotent by generation/output index; validate host, bytes, media type and rights before import. */
+    ingest(input: {
+        generation: AsyncMediaGeneration;
+        output: AsyncMediaJob['outputs'][number];
+        outputIndex: number;
+    }): Promise<{
+        artifactRef: string;
+    }>;
+}
+/** Authorized durable-state inspection. Implementations must not poll or submit provider jobs. */
+export interface AsyncMediaGenerationReader {
+    get(context: AsyncMediaContext): Promise<AsyncMediaGeneration>;
+}
+export {};

package/dist/integrations/providers/async-media.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/attio.d.ts

@@ -0,0 +1,4 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const attioHostedMcp: import("..").VendorHostedMcpDescriptor;
+export declare const attioIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerAttioIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/attio.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as A}from"@lssm/lib.contracts-spec/ownership";var v=["endpoint","webhook-event","oauth-scope","hosted-mcp-tool","hosted-mcp-category"],O=["implemented","deferred","not-applicable"],k=["public","plan-gated","account-gated","vendor-unsupported"],C=["stable","beta","alpha","deprecated"],S=["supported","unsupported","discovered-at-connect","not-applicable"],m=["api","localMcp","hostedMcp","inboundWebhook","outboundWebhook"];function d(e,r,i){if(!r.includes(String(e)))throw Error(`${i} must be one of ${r.join(", ")}`)}function g(e,r){if(typeof e!=="string"||e.trim().length===0)throw Error(`${r} must be a non-empty string`)}function x(e,r){let i=`rows[${r}].evidence`;if(g(e.evidence?.sourceUrl,`${i}.sourceUrl`),new URL(e.evidence.sourceUrl).protocol!=="https:")throw Error(`${i}.sourceUrl must use HTTPS`);if(!/^[a-f0-9]{64}$/.test(e.evidence.sha256))throw Error(`${i}.sha256 must be a lowercase SHA-256 digest`);if(!/^\d{4}-\d{2}-\d{2}$/.test(e.evidence.retrievedAt))throw Error(`${i}.retrievedAt must be YYYY-MM-DD`)}function B(e,r={}){let i=new Set,l=new Set,c=new Set;for(let[n,f]of e.entries()){if(!f||typeof f!=="object")throw Error(`rows[${n}] must be an object`);let o=f;if(g(o.upstreamCapabilityId,`rows[${n}].upstreamCapabilityId`),i.has(o.upstreamCapabilityId))throw Error(`duplicate upstream capability ${o.upstreamCapabilityId}`);i.add(o.upstreamCapabilityId),d(o.granularity,v,`rows[${n}].granularity`),d(o.implementationState,O,`rows[${n}].implementationState`),d(o.availability,k,`rows[${n}].availability`),d(o.stability,C,`rows[${n}].stability`);for(let a of m){let u=o.surfaces?.[a];if(!u)throw Error(`rows[${n}].surfaces.${a} is required`);if(d(u.state,S,`rows[${n}].surfaces.${a}.state`),["unsupported","not-applicable"].includes(u.state)&&!u.reason)throw Error(`rows[${n}].surfaces.${a}.reason is required`)}if(x(o,n),!Array.isArray(o.testIds)||o.testIds.length===0)throw Error(`rows[${n}].testIds must not be empty`);if(o.availability==="vendor-unsupported"&&o.implementationState==="implemented")throw Error(`${o.upstreamCapabilityId} is vendor-unsupported`);let w=m.map((a)=>o.surfaces[a].state);if(o.implementationState==="implemented"&&!w.some((a)=>a==="supported"))throw Error(`${o.upstreamCapabilityId} has no supported surface`);if(o.surfaces.localMcp.state==="supported"&&o.contract.operationKeys.length===0)throw Error(`${o.upstreamCapabilityId} local MCP requires an operation`);if(o.surfaces.inboundWebhook.state==="supported"&&o.contract.eventKeys.length===0)throw Error(`${o.upstreamCapabilityId} inbound webhook requires an event`);if(r.release&&o.implementationState==="deferred"&&!o.waiverArtifact)throw Error(`${o.upstreamCapabilityId} is deferred without a waiver`);for(let a of o.contract.operationKeys){if(l.has(a))throw Error(`operation ${a} maps to multiple capability units`);l.add(a)}for(let a of o.contract.eventKeys){if(c.has(a))throw Error(`event ${a} maps to multiple capability units`);c.add(a)}}}function P(e,r){if(e.sha256!==r)throw Error(`${e.provider} capability evidence drift requires evidence review`)}function b(e){return Object.freeze({...e})}function q(e){let r=[],{row:i}=e,l=i.effects.some((n)=>["write","destructive","cost-bearing","external-side-effect"].includes(n));if(i.implementationState!=="implemented")r.push(`implementation:${i.implementationState}`);if(!e.connectionReady)r.push("connection:not-ready");if(i.availability==="plan-gated"&&!e.entitlements.includes(i.upstreamCapabilityId))r.push("entitlement:missing");if(i.availability==="account-gated")r.push("availability:discover-at-connect");if(i.availability==="vendor-unsupported")r.push("availability:vendor-unsupported");if(i.stability==="beta"&&!e.allowBeta)r.push("stability:beta-opt-in-required");if(i.stability==="alpha"&&!e.allowAlpha)r.push("stability:alpha-opt-in-required");let c=i.auth.scopes.filter((n)=>!e.grantedScopes.includes(n));if(c.length>0)r.push(`scopes:missing:${c.join(",")}`);if(i.surfaces[e.surface].state!=="supported")r.push(`surface:${i.surfaces[e.surface].state}`);if((e.surface==="inboundWebhook"||e.surface==="outboundWebhook")&&!e.webhookConfigured)r.push("webhook:not-configured");if(l&&!e.approvalAvailable)r.push("approval:required");return{ready:r.length===0,operationKeys:i.contract.operationKeys,eventKeys:i.contract.eventKeys,blockers:r,requiresApproval:l}}import{ScalarTypeEnum as y,SchemaModel as s}from"@lssm/lib.schema";var p=y.JSONObject(),t=y.NonEmptyString(),D=new s({name:"GtmConnectionInput",fields:{connectionId:{type:t,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),V=new s({name:"GtmResourceInput",fields:{connectionId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!0},parentId:{type:t,isOptional:!0},cursor:{type:t,isOptional:!0},payload:{type:p,isOptional:!0},filters:{type:p,isOptional:!0},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),j=new s({name:"GtmCollectionInput",fields:{connectionId:{type:t,isOptional:!1},cursor:{type:t,isOptional:!0},filters:{type:p,isOptional:!0},correlationId:{type:t,isOptional:!0}}}),N=new s({name:"GtmResourceIdInput",fields:{connectionId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),L=new s({name:"GtmNestedResourceIdInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),_=new s({name:"GtmCreateInput",fields:{connectionId:{type:t,isOptional:!1},payload:{type:p,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),z=new s({name:"GtmNestedCreateInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},payload:{type:p,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),F=new s({name:"GtmUpdateInput",fields:{connectionId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},payload:{type:p,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),Y=new s({name:"GtmNestedUpdateInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},payload:{type:p,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),Q=new s({name:"GtmAttributeChildInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},childId:{type:t,isOptional:!0},payload:{type:p,isOptional:!0},correlationId:{type:t,isOptional:!0}}}),J=new s({name:"GtmNestedQueryInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},cursor:{type:t,isOptional:!0},filters:{type:p,isOptional:!0},correlationId:{type:t,isOptional:!0}}}),X=new s({name:"GtmResourceOutput",fields:{data:{type:p,isOptional:!1},nextCursor:{type:t,isOptional:!0},requestId:{type:t,isOptional:!0}}}),Z=new s({name:"GtmWebhookInput",fields:{connectionId:{type:t,isOptional:!1},deliveryId:{type:t,isOptional:!0},headers:{type:p,isOptional:!1},payload:{type:p,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),ee=new s({name:"GtmWebhookReceiptOutput",fields:{accepted:{type:y.Boolean(),isOptional:!1},duplicate:{type:y.Boolean(),isOptional:!1},receiptId:{type:t,isOptional:!1},verificationStatus:{type:t,isOptional:!1}}}),te=new s({name:"HostedMcpDescriptorOutput",fields:{descriptor:{type:p,isOptional:!1}}});async function ie(e){if(e.rawBody.byteLength>e.maxBytes)return await e.store.quarantine(e.deliveryId,"payload-too-large"),{accepted:!1,duplicate:!1};if(!e.verify(e.rawBody))return await e.store.quarantine(e.deliveryId,"verification-failed"),{accepted:!1,duplicate:!1};let r=await e.store.claim(e.deliveryId,e.leaseMs??30000);if(!r.claimed||!r.leaseId)return{accepted:!0,duplicate:r.duplicate??!0};try{let i=e.normalize(e.rawBody,e.deliveryId),l=await e.handoff.persist({provider:e.provider,deliveryId:e.deliveryId,events:i,receivedAt:(e.now??(()=>new Date))().toISOString()});return await e.store.complete(e.deliveryId,r.leaseId),{accepted:!0,duplicate:!1,handoffReceiptId:l}}catch(i){let l=i instanceof Error?i.name:"unknown";throw await e.store.release(e.deliveryId,r.leaseId,l),i}}import{SpecContractRegistry as M}from"@lssm/lib.contracts-spec/registry";var R=(e)=>`${e.key}.v${e.version}`;class E extends M{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((r)=>r.meta.category===e)}}function ue(e){return R(e)}var h=(e)=>e;function I({unsupportedModeReason:e,configFields:r,secretFields:i,rotationSupported:l=!1,setupSteps:c}){let n={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:l}};if(r)n.configFields=r;if(i)n.secretFields=i;if(c)n.setupSteps=c;return{modes:{byok:n},exempt:!0,exemptionReason:e}}var G=b({ownership:"vendor-hosted",execution:"external-session",proxyability:"never",endpoint:"https://mcp.attio.com/mcp",discovery:"oauth-protected",accountDependentCatalog:!0,knownCategories:["crm-read","crm-write","tasks","notes","lists"],confirmationAuthority:"vendor-client",tokenHandling:"client-held"}),T=h({meta:{key:"crm.attio",version:"1.0.0",category:"crm",title:"Attio CRM",description:"Attio objects, records, lists, tasks, notes, meetings, webhooks, OAuth, and hosted MCP.",domain:"crm",owners:["platform.integrations"],tags:["crm","attio","webhook","mcp","oauth"],stability:A.Experimental},supportedModes:["byok"],credentialManifest:I({unsupportedModeReason:"Managed Attio access is unsupported; credentials are tenant-owned through an access token or OAuth application.",secretFields:[{key:"accessToken"},{key:"oauthClientSecret"}],rotationSupported:!0,setupSteps:["Create an Attio integration or OAuth application.","Store access tokens and client secrets through an integration.runtime secret provider.","Run capability preflight before registering operations."]}),transports:[{type:"rest",baseUrl:"https://api.attio.com/v2"},{type:"webhook"},{type:"mcp",transport:"http",url:G.endpoint}],preferredTransport:"rest",supportedAuthMethods:[{type:"bearer",tokenField:"accessToken"},{type:"oauth2",grantType:"authorization_code",tokenUrl:"https://app.attio.com/authorize/token",authorizationUrl:"https://app.attio.com/authorize",scopes:["record_permission:read","record_permission:read-write","object_configuration:read","object_configuration:read-write","list_configuration:read","list_configuration:read-write","user_management:read","webhook:read-write"],pkce:!0}],capabilities:{provides:[{key:"crm.objects",version:"1.0.0"},{key:"crm.records",version:"1.0.0"},{key:"crm.lists",version:"1.0.0"},{key:"crm.activities",version:"1.0.0"},{key:"provider.webhook.attio",version:"1.0.0"},{key:"provider.mcp.attio",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{baseUrl:{type:"string"},webhookPath:{type:"string"}}},example:{baseUrl:"https://api.attio.com/v2",webhookPath:"/webhooks/attio"}},secretSchema:{schema:{type:"object",properties:{accessToken:{type:"string"},oauthClientSecret:{type:"string"},webhookSigningSecret:{type:"string"}}},example:{accessToken:"attio_***",oauthClientSecret:"***",webhookSigningSecret:"***"}},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:"https://docs.attio.com/",byokSetup:{setupInstructions:"Use an access token for a single workspace or OAuth authorization code with least-privilege scopes for multi-workspace applications.",validationEndpoint:"https://api.attio.com/v2/self",keyRotationSupported:!0,quotaTrackingSupported:!0}});function we(e){return e.register(T)}export{G as attioHostedMcp,T as attioIntegrationSpec,we as registerAttioIntegration};

package/dist/integrations/providers/bright-data.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const brightDataIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerBrightDataIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/bright-data.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as l}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as c}from"@lssm/lib.contracts-spec/registry";var g=(e)=>`${e.key}.v${e.version}`;class d extends c{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function h(e){return g(e)}var i=(e)=>e;function a({unsupportedModeReason:e,configFields:t,secretFields:o,rotationSupported:p=!1,setupSteps:n}){let r={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:p}};if(t)r.configFields=t;if(o)r.secretFields=o;if(n)r.setupSteps=n;return{modes:{byok:r},exempt:!0,exemptionReason:e}}function s(e){return i({meta:{key:e.key,version:e.version??"1.0.0",category:"custom",title:e.title,description:e.description,domain:"knowledge",owners:["platform.ai"],tags:["web-access",...e.tags],stability:l.Experimental},supportedModes:["byok"],credentialManifest:a({unsupportedModeReason:"Managed credentials are not shipped; tenants must supply provider-owned credentials through a SecretProvider.",secretFields:e.secretFields.map((t)=>({key:t})),rotationSupported:!1}),transports:e.transports,preferredTransport:e.preferredTransport,supportedAuthMethods:e.auth,capabilities:{provides:e.capabilities.map((t)=>({key:t,version:"1.0.0"}))},configSchema:{schema:{type:"object",properties:{baseUrl:{type:"string"},policyMode:{type:"string",enum:["governed","provider-pass-through","public-only"]},...e.configProperties}}},secretSchema:{schema:{type:"object",properties:Object.fromEntries(e.secretFields.map((t)=>[t,{type:"string"}]))},example:Object.fromEntries(e.secretFields.map((t)=>[t,"***"]))},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:e.docsUrl,byokSetup:{setupInstructions:"Resolve provider credentials at execution time through SecretProvider; never persist credentials in integration config.",keyRotationSupported:!1,quotaTrackingSupported:!0}})}var m=s({key:"web-access.bright-data",title:"Bright Data Web Access",description:"Bright Data search, scraping, datasets, browser automation, asynchronous delivery, MCP, and residential proxy access.",tags:["scraping","browser","residential-proxy","mcp"],transports:[{type:"sdk",packageName:"@brightdata/sdk",minVersion:"1.2.0",runtime:"node"},{type:"rest",baseUrl:"https://api.brightdata.com"},{type:"webhook",inbound:{verification:"network-allowlist",allowlistDocsUrl:"https://docs.brightdata.com/datasets/scrapers/chatgpt/data-delivery/webhooks",registrationSupported:!0}},{type:"websocket",url:"wss://brd.superproxy.io:9222",protocol:"cdp",discoveryOperationKey:"web-access.bright-data.browser.connection.describe"},{type:"mcp",transport:"http",url:"https://mcp.brightdata.com/mcp",toolPrefix:"bright_data"},{type:"mcp",transport:"stdio",command:"npx",args:["-y","@brightdata/mcp"],toolPrefix:"bright_data"},{type:"proxy",protocols:["http","https","socks5","socks5h"],host:"brd.superproxy.io",ports:{http:33335,https:33335,socks5:22228,socks5h:22228},remoteDns:!0,geoTargeting:!0,stickySessions:!0}],preferredTransport:"sdk",auth:[{type:"bearer",tokenField:"apiToken"},{type:"basic",usernameField:"proxyUsername",passwordField:"proxyPassword"}],secretFields:["apiToken","proxyUsername","proxyPassword","mcpToken"],capabilities:["web.search","web.fetch","web.extract","web.scrape","web.browser","web.proxy","provider.mcp.bright-data"],docsUrl:"https://docs.brightdata.com/introduction",configProperties:{zone:{type:"string"},country:{type:"string"}}});function M(e){return e.register(m)}export{m as brightDataIntegrationSpec,M as registerBrightDataIntegration};

package/dist/integrations/providers/browserbase.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const browserbaseIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerBrowserbaseIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/browserbase.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as m}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as c}from"@lssm/lib.contracts-spec/registry";var g=(e)=>`${e.key}.v${e.version}`;class d extends c{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function b(e){return g(e)}var i=(e)=>e;function a({unsupportedModeReason:e,configFields:t,secretFields:o,rotationSupported:p=!1,setupSteps:n}){let r={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:p}};if(t)r.configFields=t;if(o)r.secretFields=o;if(n)r.setupSteps=n;return{modes:{byok:r},exempt:!0,exemptionReason:e}}function s(e){return i({meta:{key:e.key,version:e.version??"1.0.0",category:"custom",title:e.title,description:e.description,domain:"knowledge",owners:["platform.ai"],tags:["web-access",...e.tags],stability:m.Experimental},supportedModes:["byok"],credentialManifest:a({unsupportedModeReason:"Managed credentials are not shipped; tenants must supply provider-owned credentials through a SecretProvider.",secretFields:e.secretFields.map((t)=>({key:t})),rotationSupported:!1}),transports:e.transports,preferredTransport:e.preferredTransport,supportedAuthMethods:e.auth,capabilities:{provides:e.capabilities.map((t)=>({key:t,version:"1.0.0"}))},configSchema:{schema:{type:"object",properties:{baseUrl:{type:"string"},policyMode:{type:"string",enum:["governed","provider-pass-through","public-only"]},...e.configProperties}}},secretSchema:{schema:{type:"object",properties:Object.fromEntries(e.secretFields.map((t)=>[t,{type:"string"}]))},example:Object.fromEntries(e.secretFields.map((t)=>[t,"***"]))},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:e.docsUrl,byokSetup:{setupInstructions:"Resolve provider credentials at execution time through SecretProvider; never persist credentials in integration config.",keyRotationSupported:!1,quotaTrackingSupported:!0}})}var l=s({key:"web-access.browserbase",title:"Browserbase Web Access",description:"Browserbase Search, Fetch, browser sessions, contexts, CDP, managed residential proxy configuration, and MCP.",tags:["browser","cdp","search","mcp"],transports:[{type:"sdk",packageName:"@browserbasehq/sdk",minVersion:"2.16.0",runtime:"node"},{type:"rest",baseUrl:"https://api.browserbase.com/v1"},{type:"websocket",url:"wss://connect.browserbase.com",protocol:"cdp",discoveryOperationKey:"web-access.browserbase.connection.describe"},{type:"mcp",transport:"http",url:"https://mcp.browserbase.com/mcp",toolPrefix:"browserbase"},{type:"mcp",transport:"stdio",command:"npx",args:["-y","@browserbasehq/mcp"],toolPrefix:"browserbase"},{type:"proxy",protocols:["http","https"],geoTargeting:!0,stickySessions:!0}],preferredTransport:"sdk",auth:[{type:"header",headerName:"X-BB-API-Key"},{type:"x402",authority:"injected-payment-port"}],secretFields:["apiKey","mcpToken","customProxyUrl"],capabilities:["web.search","web.fetch","web.browser","web.proxy.session","provider.mcp.browserbase"],docsUrl:"https://docs.browserbase.com/reference/introduction",configProperties:{projectId:{type:"string"}}});function M(e){return e.register(l)}export{l as browserbaseIntegrationSpec,M as registerBrowserbaseIntegration};

package/dist/integrations/providers/calendar.d.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/calendar.d.ts

@@ -0,0 +1,81 @@
+export interface CalendarAttendee {
+    email: string;
+    name?: string;
+    optional?: boolean;
+    responseStatus?: 'needsAction' | 'declined' | 'tentative' | 'accepted';
+}
+export interface CalendarReminder {
+    method: 'email' | 'popup';
+    minutesBeforeStart: number;
+}
+export interface CalendarEvent {
+    /** Provider cancellation state; absent means the provider did not supply it. */
+    cancelled?: boolean;
+    /** Response of the connected calendar owner, not another attendee. */
+    responseStatus?: CalendarAttendee['responseStatus'];
+    id: string;
+    calendarId: string;
+    title: string;
+    description?: string;
+    location?: string;
+    start: Date;
+    end: Date;
+    allDay?: boolean;
+    attendees?: CalendarAttendee[];
+    reminders?: CalendarReminder[];
+    conferenceLink?: string;
+    metadata?: Record<string, string>;
+    createdAt?: Date;
+    updatedAt?: Date;
+}
+export interface CalendarEventInput {
+    /** Stable host-persisted create identity; supporting providers reuse it on retries. */
+    requestId?: string;
+    calendarId: string;
+    title: string;
+    description?: string;
+    location?: string;
+    start: Date;
+    end: Date;
+    allDay?: boolean;
+    attendees?: CalendarAttendee[];
+    reminders?: CalendarReminder[];
+    conference?: {
+        create: boolean;
+        type?: 'google_meet' | 'microsoft_teams' | 'zoom' | 'custom';
+    };
+    metadata?: Record<string, string>;
+}
+export interface CalendarEventUpdateInput {
+    title?: string;
+    description?: string;
+    location?: string;
+    start?: Date;
+    end?: Date;
+    allDay?: boolean;
+    attendees?: CalendarAttendee[];
+    reminders?: CalendarReminder[];
+    conference?: {
+        create?: boolean;
+        type?: 'google_meet' | 'microsoft_teams' | 'zoom' | 'custom';
+    };
+    metadata?: Record<string, string>;
+}
+export interface CalendarListEventsQuery {
+    calendarId: string;
+    timeMin?: Date;
+    timeMax?: Date;
+    maxResults?: number;
+    pageToken?: string;
+    includeCancelled?: boolean;
+}
+export interface CalendarListEventsResult {
+    events: CalendarEvent[];
+    nextPageToken?: string;
+}
+export interface CalendarProvider {
+    listEvents(query: CalendarListEventsQuery): Promise<CalendarListEventsResult>;
+    createEvent(input: CalendarEventInput): Promise<CalendarEvent>;
+    updateEvent(calendarId: string, eventId: string, input: CalendarEventUpdateInput): Promise<CalendarEvent>;
+    deleteEvent(calendarId: string, eventId: string): Promise<void>;
+}

package/dist/integrations/providers/calendar.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/catalog.d.ts

@@ -0,0 +1,2 @@
+import { type IntegrationCatalogDefinition } from '../catalog.js';
+export declare function createContractsIntegrationCatalogDefinitions(): readonly IntegrationCatalogDefinition[];