@lssm/lib.contracts-integrations 9.0.1

package/dist/integrations/providers/mistral-conversational.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const mistralConversationalIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerMistralConversationalIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/mistral-conversational.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as a}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as n}from"@lssm/lib.contracts-spec/registry";var i=(e)=>`${e.key}.v${e.version}`;class o extends n{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((r)=>r.meta.category===e)}}function c(e){return i(e)}var t=(e)=>e;var s=t({meta:{key:"ai-voice-conv.mistral",version:"1.0.0",category:"ai-voice-conversational",title:"Mistral Conversational Voice",description:"Mistral conversational voice integration using conversation sessions and speech models for bidirectional interactions.",domain:"ai",owners:["platform.ai"],tags:["voice","conversational","mistral","agents","sessions"],stability:a.Experimental},supportedModes:["managed","byok"],transports:[{type:"rest",baseUrl:"https://api.mistral.ai"}],preferredTransport:"rest",supportedAuthMethods:[{type:"api-key",headerName:"Authorization",prefix:"Bearer "}],capabilities:{provides:[{key:"ai.voice.conversational",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{model:{type:"string",description:"Mistral model used for response generation in conversational sessions."},defaultVoice:{type:"string",description:"Default voice profile for agent responses."},turnDetection:{type:"string",enum:["server_vad","push_to_talk"],description:"Turn detection strategy used during live conversations."},maxSessionDurationSeconds:{type:"number",description:"Maximum allowed conversational session duration."}}},example:{model:"mistral-medium-latest",defaultVoice:"default",turnDetection:"server_vad",maxSessionDurationSeconds:600}},secretSchema:{schema:{type:"object",required:["apiKey"],properties:{apiKey:{type:"string",description:"Mistral API key with access to conversational and agent APIs."}}},example:{apiKey:"mistral-***"}},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:"https://docs.mistral.ai/agents/agents",byokSetup:{setupInstructions:"Create a Mistral API key, enable conversation-capable models for your account, and configure default turn detection settings.",keyRotationSupported:!0,quotaTrackingSupported:!0}});function u(e){return e.register(s)}export{s as mistralConversationalIntegrationSpec,u as registerMistralConversationalIntegration};

package/dist/integrations/providers/mistral-stt.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const mistralSttIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerMistralSttIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/mistral-stt.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as o}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as i}from"@lssm/lib.contracts-spec/registry";var n=(t)=>`${t.key}.v${t.version}`;class a extends i{constructor(t){super("integration",t)}getByCategory(t){return this.list().filter((r)=>r.meta.category===t)}}function g(t){return n(t)}var e=(t)=>t;var s=e({meta:{key:"ai-voice-stt.mistral",version:"1.0.0",category:"ai-voice-stt",title:"Mistral Speech-to-Text",description:"Mistral audio transcription integration for batch and streaming speech-to-text use cases.",domain:"ai",owners:["platform.ai"],tags:["voice","stt","transcription","mistral","voxtral"],stability:o.Experimental},supportedModes:["managed","byok"],transports:[{type:"rest",baseUrl:"https://api.mistral.ai"}],preferredTransport:"rest",supportedAuthMethods:[{type:"api-key",headerName:"Authorization",prefix:"Bearer "}],capabilities:{provides:[{key:"ai.voice.stt",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{model:{type:"string",description:"Mistral transcription model identifier (e.g. voxtral-mini-latest)."},language:{type:"string",description:"Default language code for transcription (e.g. en)."},diarize:{type:"boolean",description:"Enable speaker diarization when supported by the model."},wordTimestamps:{type:"boolean",description:"Include word-level timestamp metadata when available."}}},example:{model:"voxtral-mini-latest",language:"en",diarize:!0,wordTimestamps:!0}},secretSchema:{schema:{type:"object",required:["apiKey"],properties:{apiKey:{type:"string",description:"Mistral API key with access to audio transcription endpoints."}}},example:{apiKey:"mistral-***"}},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:"https://docs.mistral.ai/api/#tag/audio",byokSetup:{setupInstructions:"Generate a Mistral API key and ensure the project has access to Voxtral or another transcription-capable model.",keyRotationSupported:!0,quotaTrackingSupported:!0}});function u(t){return t.register(s)}export{s as mistralSttIntegrationSpec,u as registerMistralSttIntegration};

package/dist/integrations/providers/mistral.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const mistralIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerMistralIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/mistral.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as o}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as i}from"@lssm/lib.contracts-spec/registry";var n=(e)=>`${e.key}.v${e.version}`;class a extends i{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((r)=>r.meta.category===e)}}function g(e){return n(e)}var t=(e)=>e;var s=t({meta:{key:"ai-llm.mistral",version:"1.0.0",category:"ai-llm",title:"Mistral Large Language Model",description:"Mistral integration providing chat completions and embedding generation.",domain:"ai",owners:["platform.ai"],tags:["ai","llm","embeddings"],stability:o.Experimental},supportedModes:["managed","byok"],transports:[{type:"rest",baseUrl:"https://api.mistral.ai"},{type:"sdk",packageName:"@mistralai/mistralai"}],preferredTransport:"rest",supportedAuthMethods:[{type:"api-key",headerName:"Authorization",prefix:"Bearer "}],capabilities:{provides:[{key:"ai.chat",version:"1.0.0"},{key:"ai.embeddings",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{model:{type:"string",description:"Default chat completion model (e.g., mistral-large-latest)."},embeddingModel:{type:"string",description:"Embedding model identifier."}}},example:{model:"mistral-large-latest",embeddingModel:"mistral-embed"}},secretSchema:{schema:{type:"object",required:["apiKey"],properties:{apiKey:{type:"string",description:"Mistral API key with access to chat and embeddings endpoints."}}},example:{apiKey:"mistral-***"}},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:"https://docs.mistral.ai/platform/endpoints",constraints:{rateLimit:{rpm:600}},byokSetup:{setupInstructions:"Generate an API key within the Mistral console and ensure the selected models are enabled for the account.",keyRotationSupported:!0,quotaTrackingSupported:!0}});function y(e){return e.register(s)}export{s as mistralIntegrationSpec,y as registerMistralIntegration};

package/dist/integrations/providers/mode-exemptions.d.ts

@@ -0,0 +1,10 @@
+import type { IntegrationCredentialFieldRef, IntegrationCredentialManifest } from '../credentials.js';
+interface ByokOnlyManagedModeExemptionOptions {
+    unsupportedModeReason: string;
+    configFields?: IntegrationCredentialFieldRef[];
+    secretFields?: IntegrationCredentialFieldRef[];
+    rotationSupported?: boolean;
+    setupSteps?: string[];
+}
+export declare function byokOnlyManagedModeExemption({ unsupportedModeReason, configFields, secretFields, rotationSupported, setupSteps, }: ByokOnlyManagedModeExemptionOptions): IntegrationCredentialManifest;
+export {};

package/dist/integrations/providers/mode-exemptions.js

@@ -0,0 +1,2 @@
+// @bun
+function r({unsupportedModeReason:i,configFields:t,secretFields:n,rotationSupported:a=!1,setupSteps:o}){let e={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:a}};if(t)e.configFields=t;if(n)e.secretFields=n;if(o)e.setupSteps=o;return{modes:{byok:e},exempt:!0,exemptionReason:i}}export{r as byokOnlyManagedModeExemption};

package/dist/integrations/providers/myfitnesspal.d.ts

@@ -0,0 +1,3 @@
+import { type IntegrationSpecRegistry } from '../spec.js';
+export declare const myFitnessPalIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerMyFitnessPalIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/myfitnesspal.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as g}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as s}from"@lssm/lib.contracts-spec/registry";var p=(e)=>`${e.key}.v${e.version}`;class c extends s{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function u(e){return p(e)}var i=(e)=>e;var o=["official-api","official-mcp","aggregator-api","aggregator-mcp","unofficial"],l=[{key:"health.activities.read",version:"1.0.0"},{key:"health.workouts.read",version:"1.0.0"},{key:"health.sleep.read",version:"1.0.0"},{key:"health.biometrics.read",version:"1.0.0"}],d=[{type:"rest"},{type:"mcp",transport:"http"},{type:"webhook",inbound:{signatureHeader:"x-webhook-signature",signingAlgorithm:"hmac-sha256"}}],n=[{type:"oauth2",grantType:"authorization_code",tokenUrl:"",scopes:[]},{type:"api-key"},{type:"bearer"},{type:"basic"}];function a(e){let t=e.supportedAuthMethods??y(e);return i({meta:{key:e.key,version:"1.0.0",category:"health",title:e.title,description:e.description,domain:"health",owners:["platform.integrations"],tags:["health","wearables",...e.tags],stability:e.stability??g.Experimental},supportedModes:e.supportedModes??["managed","byok"],transports:e.transports??d,preferredTransport:"rest",supportedAuthMethods:t,capabilities:{provides:e.capabilities??[...l]},configSchema:{schema:{type:"object",properties:{apiBaseUrl:{type:"string",description:"Optional API base URL override for provider-specific regional or partner endpoints."},mcpUrl:{type:"string",description:"Optional MCP endpoint URL for provider tool transport."},oauthTokenUrl:{type:"string",description:"Optional OAuth token endpoint override used for access-token refresh flows."},defaultTransport:{type:"string",enum:[...o],description:"Preferred transport strategy used before fallbacks are attempted."},strategyOrder:{type:"array",items:{type:"string",enum:[...o]},description:"Ordered transport fallback strategy. Defaults to official API -> official MCP -> aggregator API -> aggregator MCP -> unofficial."},allowUnofficial:{type:"boolean",description:"Must be true to allow unofficial/automation connectors as fallback."},unofficialAllowList:{type:"array",items:{type:"string"},description:"Optional allowlist of provider keys allowed to use unofficial connectors."}}},example:{defaultTransport:e.defaultTransport??"official-api",strategyOrder:[...o],allowUnofficial:!1,unofficialAllowList:[]}},secretSchema:{schema:{type:"object",properties:{apiKey:{type:"string"},accessToken:{type:"string"},refreshToken:{type:"string"},tokenExpiresAt:{type:"string"},clientId:{type:"string"},clientSecret:{type:"string"},mcpAccessToken:{type:"string"},username:{type:"string"},password:{type:"string"}}},example:{apiKey:"provider-api-key",accessToken:"oauth-access-token",refreshToken:"oauth-refresh-token"}},healthCheck:{method:"list",timeoutMs:1e4},docsUrl:e.docsUrl,byokSetup:{setupInstructions:e.byokSetupInstructions??"Create provider credentials, set allowed scopes, and store credentials in secret provider.",requiredScopes:e.byokScopes,keyRotationSupported:!1,quotaTrackingSupported:!1}})}function y(e){if(e.oauthTokenUrl){let t=e.oauthTokenUrl;return n.map((r)=>{if(r.type==="oauth2")return{...r,tokenUrl:t,scopes:e.byokScopes??[]};return r})}return[...n]}var f=a({key:"health.myfitnesspal",title:"MyFitnessPal",description:"MyFitnessPal nutrition and activity integration through official, aggregator, or opt-in unofficial connectors.",docsUrl:"https://www.myfitnesspal.com/",tags:["myfitnesspal","nutrition","unofficial"],capabilities:[{key:"health.activities.read",version:"1.0.0"},{key:"health.nutrition.read",version:"1.0.0"}],defaultTransport:"aggregator-api"});function T(e){return e.register(f)}export{f as myFitnessPalIntegrationSpec,T as registerMyFitnessPalIntegration};

package/dist/integrations/providers/notion.d.ts

@@ -0,0 +1,9 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+/**
+ * Notion Integration Spec v2.0.0
+ *
+ * Production-grade Notion integration with full CRUD support,
+ * OAuth2 with PKCE, MCP exposure, and real-time sync capabilities.
+ */
+export declare const notionIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerNotionIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/notion.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as a}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as o}from"@lssm/lib.contracts-spec/registry";var n=(t)=>`${t.key}.v${t.version}`;class i extends o{constructor(t){super("integration",t)}getByCategory(t){return this.list().filter((r)=>r.meta.category===t)}}function g(t){return n(t)}var e=(t)=>t;var s=e({meta:{key:"project-management.notion",version:"2.0.0",category:"project-management",title:"Notion",description:"Full-featured Notion integration with CRUD operations for pages, databases, and blocks, OAuth2 authentication, MCP server support, and real-time synchronization.",domain:"productivity",owners:["@platform.integrations"],tags:["project-management","notion","oauth2","mcp","webhooks"],stability:a.Stable},supportedModes:["managed","byok"],transports:[{type:"rest",baseUrl:"https://api.notion.com",apiVersionHeader:"Notion-Version"},{type:"webhook",inbound:{signatureHeader:"x-notion-signature",signingAlgorithm:"hmac-sha256"}}],preferredTransport:"rest",supportedAuthMethods:[{type:"bearer"},{type:"oauth2",grantType:"authorization_code",authorizationUrl:"https://api.notion.com/v1/oauth/authorize",tokenUrl:"https://api.notion.com/v1/oauth/token",revocationUrl:"https://api.notion.com/v1/oauth/revoke",scopes:["read:user","read:pages","read:databases","write:pages","write:databases"],pkce:!0}],versionPolicy:{currentVersion:"2022-06-28",supportedVersions:[{version:"2022-06-28",status:"stable"}],versionHeader:"Notion-Version"},capabilities:{provides:[{key:"project-management.work-items",version:"1.0.0"},{key:"knowledge.ingestion.notion",version:"1.0.0"},{key:"provider.delta.notion",version:"1.0.0"},{key:"provider.mcp.notion",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{databaseId:{type:"string",description:"Optional Notion database ID to store tasks."},summaryParentPageId:{type:"string",description:"Optional parent page ID for summary pages."},titleProperty:{type:"string",description:'Database title property name (defaults to "Name").'},statusProperty:{type:"string",description:"Database status/select property name."},priorityProperty:{type:"string",description:"Database priority/select property name."},tagsProperty:{type:"string",description:"Database multi-select tags property name."},dueDateProperty:{type:"string",description:"Database date property name for due dates."},descriptionProperty:{type:"string",description:"Database rich-text property for descriptions."}}},example:{databaseId:"xxxxxxxxxxxxxxxx",summaryParentPageId:"yyyyyyyyyyyyyyyy",titleProperty:"Name",statusProperty:"Status"}},secretSchema:{schema:{type:"object",properties:{apiKey:{type:"string",description:"Notion integration secret token (for BYOK mode)."},oauth2AccessToken:{type:"string",description:"OAuth2 access token (for managed mode)."},oauth2RefreshToken:{type:"string",description:"OAuth2 refresh token."}}},example:{apiKey:"secret_notion_token",oauth2AccessToken:"ntn_abc123",oauth2RefreshToken:"ntn_refresh_xyz789"}},healthCheck:{method:"custom",timeoutMs:4000},docsUrl:"https://developers.notion.com",constraints:{},byokSetup:{setupInstructions:"For API key: Create a Notion internal integration, share the target database/page with it, and store the secret token. For OAuth2: Configure OAuth application in Notion and complete authorization flow.",keyRotationSupported:!0,quotaTrackingSupported:!0}});function u(t){return t.register(s)}export{s as notionIntegrationSpec,u as registerNotionIntegration};

package/dist/integrations/providers/openai-image.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const openaiImageIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerOpenaiImageIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/openai-image.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as o}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as i}from"@lssm/lib.contracts-spec/registry";var n=(e)=>`${e.key}.v${e.version}`;class a extends i{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((r)=>r.meta.category===e)}}function g(e){return n(e)}var t=(e)=>e;var p=t({meta:{key:"ai-image.openai",version:"1.0.0",category:"ai-image",title:"OpenAI Image Generation",description:"OpenAI integration for AI image generation using DALL-E and gpt-image models.",domain:"ai",owners:["platform.ai"],tags:["image","generation","dall-e","gpt-image"],stability:o.Experimental},supportedModes:["managed","byok"],transports:[{type:"rest",baseUrl:"https://api.openai.com"},{type:"sdk",packageName:"openai"}],preferredTransport:"rest",supportedAuthMethods:[{type:"api-key",headerName:"Authorization",prefix:"Bearer "}],capabilities:{provides:[{key:"ai.image.generation",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{model:{type:"string",description:"OpenAI image model identifier (e.g. dall-e-3, gpt-image-1)."},defaultSize:{type:"string",enum:["1024x1024","1024x1792","1792x1024"]},defaultQuality:{type:"string",enum:["standard","hd"]}}},example:{model:"dall-e-3",defaultSize:"1024x1024",defaultQuality:"standard"}},secretSchema:{schema:{type:"object",required:["apiKey"],properties:{apiKey:{type:"string",description:"OpenAI API key with image generation permissions."}}},example:{apiKey:"sk-***"}},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:"https://platform.openai.com/docs/guides/images",constraints:{rateLimit:{rpm:50}},byokSetup:{setupInstructions:"Create an OpenAI API key with image generation access enabled.",keyRotationSupported:!0,quotaTrackingSupported:!0}});function y(e){return e.register(p)}export{p as openaiImageIntegrationSpec,y as registerOpenaiImageIntegration};

package/dist/integrations/providers/openai-realtime.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const openaiRealtimeIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerOpenaiRealtimeIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/openai-realtime.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as d}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as p}from"@lssm/lib.contracts-spec/registry";var c=(e)=>`${e.key}.v${e.version}`;class g extends p{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function y(e){return c(e)}var o=(e)=>e;function a({unsupportedModeReason:e,configFields:t,secretFields:i,rotationSupported:s=!1,setupSteps:r}){let n={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:s}};if(t)n.configFields=t;if(i)n.secretFields=i;if(r)n.setupSteps=r;return{modes:{byok:n},exempt:!0,exemptionReason:e}}var l=o({meta:{key:"ai-voice-conv.openai",version:"1.0.0",category:"ai-voice-conversational",title:"OpenAI Realtime Voice",description:"OpenAI Realtime API integration for bidirectional conversational voice with GPT models.",domain:"ai",owners:["platform.ai"],tags:["voice","conversational","realtime","openai"],stability:d.Experimental},supportedModes:["byok"],credentialManifest:a({unsupportedModeReason:"Managed OpenAI Realtime credentials are not declared because realtime voice access depends on tenant-owned OpenAI API keys and project quotas.",secretFields:[{key:"apiKey",required:!0}],rotationSupported:!0}),transports:[{type:"rest",baseUrl:"https://api.openai.com"},{type:"sdk",packageName:"openai"}],preferredTransport:"sdk",supportedAuthMethods:[{type:"api-key",headerName:"Authorization",prefix:"Bearer "}],capabilities:{provides:[{key:"ai.voice.conversational",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{model:{type:"string",description:"OpenAI model for realtime conversations (e.g. gpt-4o-realtime-preview)."},defaultVoice:{type:"string",description:"Default voice for agent responses (e.g. alloy, echo, shimmer)."},turnDetection:{type:"string",enum:["server_vad","push_to_talk"],description:"Turn detection strategy."},maxSessionDurationSeconds:{type:"number",description:"Maximum session duration in seconds."}}},example:{model:"gpt-4o-realtime-preview",defaultVoice:"alloy",turnDetection:"server_vad",maxSessionDurationSeconds:600}},secretSchema:{schema:{type:"object",required:["apiKey"],properties:{apiKey:{type:"string",description:"OpenAI API key with realtime API access."}}},example:{apiKey:"sk-***"}},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:"https://platform.openai.com/docs/guides/realtime",byokSetup:{setupInstructions:"Create an OpenAI API key with Realtime API access enabled and store it in your secret provider.",keyRotationSupported:!0,quotaTrackingSupported:!0}});function M(e){return e.register(l)}export{l as openaiRealtimeIntegrationSpec,M as registerOpenaiRealtimeIntegration};

package/dist/integrations/providers/openbanking.d.ts

@@ -0,0 +1,125 @@
+export type OpenBankingAccountOwnership = 'individual' | 'joint' | 'business' | 'unknown';
+export interface OpenBankingAccountSummary {
+    id: string;
+    externalId: string;
+    tenantId: string;
+    connectionId: string;
+    userId?: string;
+    displayName: string;
+    institutionId: string;
+    institutionName: string;
+    institutionLogoUrl?: string;
+    accountType: string;
+    iban?: string;
+    bic?: string;
+    currency: string;
+    accountNumberMasked?: string;
+    ownership?: OpenBankingAccountOwnership;
+    status?: 'active' | 'inactive' | 'closed' | 'suspended';
+    lastSyncedAt?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface OpenBankingAccountDetails extends OpenBankingAccountSummary {
+    productCode?: string;
+    openedAt?: string;
+    closedAt?: string;
+    availableBalance?: number;
+    currentBalance?: number;
+    creditLimit?: number;
+    customFields?: Record<string, unknown>;
+}
+export interface OpenBankingTransaction {
+    id: string;
+    externalId: string;
+    tenantId: string;
+    accountId: string;
+    connectionId: string;
+    amount: number;
+    currency: string;
+    direction: 'debit' | 'credit';
+    description?: string;
+    bookingDate?: string;
+    valueDate?: string;
+    postedAt?: string;
+    category?: string;
+    rawCategory?: string;
+    merchantName?: string;
+    merchantCategoryCode?: string;
+    counterpartyName?: string;
+    counterpartyAccount?: string;
+    reference?: string;
+    status?: 'pending' | 'booked' | 'cancelled';
+    metadata?: Record<string, unknown>;
+}
+export type OpenBankingBalanceType = 'current' | 'available' | 'authorised' | 'uncleared' | 'credit' | (string & {});
+export interface OpenBankingAccountBalance {
+    accountId: string;
+    connectionId: string;
+    tenantId: string;
+    type: OpenBankingBalanceType;
+    currency: string;
+    amount: number;
+    lastUpdatedAt: string;
+    metadata?: Record<string, unknown>;
+}
+export interface OpenBankingConnectionStatus {
+    connectionId: string;
+    tenantId: string;
+    status: 'healthy' | 'degraded' | 'error' | 'disconnected';
+    lastCheckedAt?: string;
+    errorCode?: string;
+    errorMessage?: string;
+    details?: Record<string, unknown>;
+}
+export interface OpenBankingListAccountsParams {
+    tenantId: string;
+    connectionId: string;
+    userId?: string;
+    cursor?: string;
+    pageSize?: number;
+    includeBalances?: boolean;
+    institutionId?: string;
+}
+export interface OpenBankingListAccountsResult {
+    accounts: OpenBankingAccountSummary[];
+    nextCursor?: string;
+    hasMore?: boolean;
+}
+export interface OpenBankingGetAccountDetailsParams {
+    tenantId: string;
+    accountId: string;
+    connectionId: string;
+    includeBalances?: boolean;
+}
+export interface OpenBankingListTransactionsParams {
+    tenantId: string;
+    accountId: string;
+    connectionId: string;
+    from?: string;
+    to?: string;
+    cursor?: string;
+    pageSize?: number;
+    includePending?: boolean;
+}
+export interface OpenBankingListTransactionsResult {
+    transactions: OpenBankingTransaction[];
+    nextCursor?: string;
+    hasMore?: boolean;
+}
+export interface OpenBankingGetBalancesParams {
+    tenantId: string;
+    accountId: string;
+    connectionId: string;
+    balanceTypes?: OpenBankingBalanceType[];
+}
+export interface OpenBankingGetConnectionStatusParams {
+    tenantId: string;
+    connectionId: string;
+}
+export interface OpenBankingProvider {
+    listAccounts(params: OpenBankingListAccountsParams): Promise<OpenBankingListAccountsResult>;
+    getAccountDetails(params: OpenBankingGetAccountDetailsParams): Promise<OpenBankingAccountDetails>;
+    listTransactions(params: OpenBankingListTransactionsParams): Promise<OpenBankingListTransactionsResult>;
+    getBalances(params: OpenBankingGetBalancesParams): Promise<OpenBankingAccountBalance[]>;
+    getConnectionStatus(params: OpenBankingGetConnectionStatusParams): Promise<OpenBankingConnectionStatus>;
+}

package/dist/integrations/providers/openbanking.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/openwearables.d.ts

@@ -0,0 +1,3 @@
+import { type IntegrationSpecRegistry } from '../spec.js';
+export declare const openWearablesIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerOpenWearablesIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/openwearables.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as h}from"@lssm/lib.contracts-spec/ownership";import{StabilityEnum as g}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as s}from"@lssm/lib.contracts-spec/registry";var p=(e)=>`${e.key}.v${e.version}`;class c extends s{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function m(e){return p(e)}var n=(e)=>e;var o=["official-api","official-mcp","aggregator-api","aggregator-mcp","unofficial"],l=[{key:"health.activities.read",version:"1.0.0"},{key:"health.workouts.read",version:"1.0.0"},{key:"health.sleep.read",version:"1.0.0"},{key:"health.biometrics.read",version:"1.0.0"}],d=[{type:"rest"},{type:"mcp",transport:"http"},{type:"webhook",inbound:{signatureHeader:"x-webhook-signature",signingAlgorithm:"hmac-sha256"}}],i=[{type:"oauth2",grantType:"authorization_code",tokenUrl:"",scopes:[]},{type:"api-key"},{type:"bearer"},{type:"basic"}];function a(e){let t=e.supportedAuthMethods??y(e);return n({meta:{key:e.key,version:"1.0.0",category:"health",title:e.title,description:e.description,domain:"health",owners:["platform.integrations"],tags:["health","wearables",...e.tags],stability:e.stability??g.Experimental},supportedModes:e.supportedModes??["managed","byok"],transports:e.transports??d,preferredTransport:"rest",supportedAuthMethods:t,capabilities:{provides:e.capabilities??[...l]},configSchema:{schema:{type:"object",properties:{apiBaseUrl:{type:"string",description:"Optional API base URL override for provider-specific regional or partner endpoints."},mcpUrl:{type:"string",description:"Optional MCP endpoint URL for provider tool transport."},oauthTokenUrl:{type:"string",description:"Optional OAuth token endpoint override used for access-token refresh flows."},defaultTransport:{type:"string",enum:[...o],description:"Preferred transport strategy used before fallbacks are attempted."},strategyOrder:{type:"array",items:{type:"string",enum:[...o]},description:"Ordered transport fallback strategy. Defaults to official API -> official MCP -> aggregator API -> aggregator MCP -> unofficial."},allowUnofficial:{type:"boolean",description:"Must be true to allow unofficial/automation connectors as fallback."},unofficialAllowList:{type:"array",items:{type:"string"},description:"Optional allowlist of provider keys allowed to use unofficial connectors."}}},example:{defaultTransport:e.defaultTransport??"official-api",strategyOrder:[...o],allowUnofficial:!1,unofficialAllowList:[]}},secretSchema:{schema:{type:"object",properties:{apiKey:{type:"string"},accessToken:{type:"string"},refreshToken:{type:"string"},tokenExpiresAt:{type:"string"},clientId:{type:"string"},clientSecret:{type:"string"},mcpAccessToken:{type:"string"},username:{type:"string"},password:{type:"string"}}},example:{apiKey:"provider-api-key",accessToken:"oauth-access-token",refreshToken:"oauth-refresh-token"}},healthCheck:{method:"list",timeoutMs:1e4},docsUrl:e.docsUrl,byokSetup:{setupInstructions:e.byokSetupInstructions??"Create provider credentials, set allowed scopes, and store credentials in secret provider.",requiredScopes:e.byokScopes,keyRotationSupported:!1,quotaTrackingSupported:!1}})}function y(e){if(e.oauthTokenUrl){let t=e.oauthTokenUrl;return i.map((r)=>{if(r.type==="oauth2")return{...r,tokenUrl:t,scopes:e.byokScopes??[]};return r})}return[...i]}var f=a({key:"health.openwearables",title:"Open Wearables",description:"Unified wearable and health data aggregation with API and MCP transports.",docsUrl:"https://www.openwearables.io/",tags:["openwearables","aggregator","mcp"],stability:h.Beta,capabilities:[{key:"health.activities.read",version:"1.0.0"},{key:"health.workouts.read",version:"1.0.0"},{key:"health.sleep.read",version:"1.0.0"},{key:"health.biometrics.read",version:"1.0.0"},{key:"health.nutrition.read",version:"1.0.0"},{key:"health.webhooks",version:"1.0.0"}],defaultTransport:"aggregator-api",byokSetupInstructions:"Create an Open Wearables account, generate API/MCP credentials, and connect desired upstream providers."});function C(e){return e.register(f)}export{f as openWearablesIntegrationSpec,C as registerOpenWearablesIntegration};

package/dist/integrations/providers/oura.d.ts

@@ -0,0 +1,3 @@
+import { type IntegrationSpecRegistry } from '../spec.js';
+export declare const ouraIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerOuraIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/oura.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as g}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as s}from"@lssm/lib.contracts-spec/registry";var p=(e)=>`${e.key}.v${e.version}`;class c extends s{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function h(e){return p(e)}var i=(e)=>e;var o=["official-api","official-mcp","aggregator-api","aggregator-mcp","unofficial"],l=[{key:"health.activities.read",version:"1.0.0"},{key:"health.workouts.read",version:"1.0.0"},{key:"health.sleep.read",version:"1.0.0"},{key:"health.biometrics.read",version:"1.0.0"}],d=[{type:"rest"},{type:"mcp",transport:"http"},{type:"webhook",inbound:{signatureHeader:"x-webhook-signature",signingAlgorithm:"hmac-sha256"}}],n=[{type:"oauth2",grantType:"authorization_code",tokenUrl:"",scopes:[]},{type:"api-key"},{type:"bearer"},{type:"basic"}];function a(e){let t=e.supportedAuthMethods??y(e);return i({meta:{key:e.key,version:"1.0.0",category:"health",title:e.title,description:e.description,domain:"health",owners:["platform.integrations"],tags:["health","wearables",...e.tags],stability:e.stability??g.Experimental},supportedModes:e.supportedModes??["managed","byok"],transports:e.transports??d,preferredTransport:"rest",supportedAuthMethods:t,capabilities:{provides:e.capabilities??[...l]},configSchema:{schema:{type:"object",properties:{apiBaseUrl:{type:"string",description:"Optional API base URL override for provider-specific regional or partner endpoints."},mcpUrl:{type:"string",description:"Optional MCP endpoint URL for provider tool transport."},oauthTokenUrl:{type:"string",description:"Optional OAuth token endpoint override used for access-token refresh flows."},defaultTransport:{type:"string",enum:[...o],description:"Preferred transport strategy used before fallbacks are attempted."},strategyOrder:{type:"array",items:{type:"string",enum:[...o]},description:"Ordered transport fallback strategy. Defaults to official API -> official MCP -> aggregator API -> aggregator MCP -> unofficial."},allowUnofficial:{type:"boolean",description:"Must be true to allow unofficial/automation connectors as fallback."},unofficialAllowList:{type:"array",items:{type:"string"},description:"Optional allowlist of provider keys allowed to use unofficial connectors."}}},example:{defaultTransport:e.defaultTransport??"official-api",strategyOrder:[...o],allowUnofficial:!1,unofficialAllowList:[]}},secretSchema:{schema:{type:"object",properties:{apiKey:{type:"string"},accessToken:{type:"string"},refreshToken:{type:"string"},tokenExpiresAt:{type:"string"},clientId:{type:"string"},clientSecret:{type:"string"},mcpAccessToken:{type:"string"},username:{type:"string"},password:{type:"string"}}},example:{apiKey:"provider-api-key",accessToken:"oauth-access-token",refreshToken:"oauth-refresh-token"}},healthCheck:{method:"list",timeoutMs:1e4},docsUrl:e.docsUrl,byokSetup:{setupInstructions:e.byokSetupInstructions??"Create provider credentials, set allowed scopes, and store credentials in secret provider.",requiredScopes:e.byokScopes,keyRotationSupported:!1,quotaTrackingSupported:!1}})}function y(e){if(e.oauthTokenUrl){let t=e.oauthTokenUrl;return n.map((r)=>{if(r.type==="oauth2")return{...r,tokenUrl:t,scopes:e.byokScopes??[]};return r})}return[...n]}var f=a({key:"health.oura",title:"Oura",description:"Oura integration for sleep, activity, readiness, and biometrics data.",docsUrl:"https://cloud.ouraring.com/docs/",tags:["oura","official-api"],byokScopes:["daily","personal","workout","sleep"]});function T(e){return e.register(f)}export{f as ouraIntegrationSpec,T as registerOuraIntegration};

package/dist/integrations/providers/oxylabs.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const oxylabsIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerOxylabsIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/oxylabs.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as l}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as c}from"@lssm/lib.contracts-spec/registry";var g=(e)=>`${e.key}.v${e.version}`;class d extends c{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function f(e){return g(e)}var i=(e)=>e;function a({unsupportedModeReason:e,configFields:t,secretFields:n,rotationSupported:p=!1,setupSteps:o}){let r={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:p}};if(t)r.configFields=t;if(n)r.secretFields=n;if(o)r.setupSteps=o;return{modes:{byok:r},exempt:!0,exemptionReason:e}}function s(e){return i({meta:{key:e.key,version:e.version??"1.0.0",category:"custom",title:e.title,description:e.description,domain:"knowledge",owners:["platform.ai"],tags:["web-access",...e.tags],stability:l.Experimental},supportedModes:["byok"],credentialManifest:a({unsupportedModeReason:"Managed credentials are not shipped; tenants must supply provider-owned credentials through a SecretProvider.",secretFields:e.secretFields.map((t)=>({key:t})),rotationSupported:!1}),transports:e.transports,preferredTransport:e.preferredTransport,supportedAuthMethods:e.auth,capabilities:{provides:e.capabilities.map((t)=>({key:t,version:"1.0.0"}))},configSchema:{schema:{type:"object",properties:{baseUrl:{type:"string"},policyMode:{type:"string",enum:["governed","provider-pass-through","public-only"]},...e.configProperties}}},secretSchema:{schema:{type:"object",properties:Object.fromEntries(e.secretFields.map((t)=>[t,{type:"string"}]))},example:Object.fromEntries(e.secretFields.map((t)=>[t,"***"]))},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:e.docsUrl,byokSetup:{setupInstructions:"Resolve provider credentials at execution time through SecretProvider; never persist credentials in integration config.",keyRotationSupported:!1,quotaTrackingSupported:!0}})}var m=s({key:"web-access.oxylabs",title:"Oxylabs Web Access",description:"Oxylabs Web Scraper API and governed residential proxy execution.",tags:["scraping","search","residential-proxy"],transports:[{type:"rest",baseUrl:"https://realtime.oxylabs.io/v1"},{type:"proxy",protocols:["http","https","socks5","socks5h"],host:"pr.oxylabs.io",ports:{http:7777,https:7777,socks5:7777,socks5h:7777},remoteDns:!0,geoTargeting:!0,stickySessions:!0}],preferredTransport:"rest",auth:[{type:"basic",usernameField:"username",passwordField:"password"}],secretFields:["username","password"],capabilities:["web.search","web.fetch","web.proxy"],docsUrl:"https://developers.oxylabs.io/scraper-apis/web-scraper-api"});function M(e){return e.register(m)}export{m as oxylabsIntegrationSpec,M as registerOxylabsIntegration};

package/dist/integrations/providers/payments/capabilities-billing.d.ts

@@ -0,0 +1,67 @@
+import type { PaymentMutationContext, PaymentRequestContext } from './context.js';
+import type { PaymentDispute, PaymentInvoice, PaymentMarketplaceAccount, PaymentPayout, PaymentSubscription, PaymentTransfer, PaymentWebhookEvent, PaymentWebhookRequest } from './resources.js';
+import type { MoneyAmount, PaymentJsonValue, PaymentListQuery, PaymentPage } from './shared.js';
+export interface CreateSubscriptionInput {
+    customerId: string;
+    priceRef: string;
+    quantity?: number;
+    metadata?: Readonly<Record<string, string>>;
+}
+export interface UpdateSubscriptionInput {
+    priceRef?: string;
+    quantity?: number;
+    metadata?: Readonly<Record<string, string>>;
+}
+export interface PaymentSubscriptionsCapability {
+    create(input: CreateSubscriptionInput, context: PaymentMutationContext): Promise<PaymentSubscription>;
+    get(subscriptionId: string, context: PaymentRequestContext): Promise<PaymentSubscription | null>;
+    update(subscriptionId: string, input: UpdateSubscriptionInput, context: PaymentMutationContext): Promise<PaymentSubscription>;
+    cancel(subscriptionId: string, context: PaymentMutationContext): Promise<PaymentSubscription>;
+    list(query: PaymentListQuery, context: PaymentRequestContext): Promise<PaymentPage<PaymentSubscription>>;
+}
+export interface CreateInvoiceInput {
+    customerId: string;
+    amount: MoneyAmount;
+    dueAt?: string;
+    metadata?: Readonly<Record<string, string>>;
+}
+export interface PaymentInvoicesCapability {
+    create(input: CreateInvoiceInput, context: PaymentMutationContext): Promise<PaymentInvoice>;
+    get(invoiceId: string, context: PaymentRequestContext): Promise<PaymentInvoice | null>;
+    finalize(invoiceId: string, context: PaymentMutationContext): Promise<PaymentInvoice>;
+    void(invoiceId: string, context: PaymentMutationContext): Promise<PaymentInvoice>;
+    pay(invoiceId: string, context: PaymentMutationContext): Promise<PaymentInvoice>;
+    list(query: PaymentListQuery, context: PaymentRequestContext): Promise<PaymentPage<PaymentInvoice>>;
+}
+export interface PaymentDisputesCapability {
+    get(disputeId: string, context: PaymentRequestContext): Promise<PaymentDispute | null>;
+    list(query: PaymentListQuery, context: PaymentRequestContext): Promise<PaymentPage<PaymentDispute>>;
+    submitEvidence(disputeId: string, evidence: Readonly<Record<string, PaymentJsonValue>>, context: PaymentMutationContext): Promise<PaymentDispute>;
+}
+export interface CreatePayoutInput {
+    amount: MoneyAmount;
+    destinationRef?: string;
+}
+export interface PaymentPayoutsCapability {
+    create(input: CreatePayoutInput, context: PaymentMutationContext): Promise<PaymentPayout>;
+    get(payoutId: string, context: PaymentRequestContext): Promise<PaymentPayout | null>;
+    list(query: PaymentListQuery, context: PaymentRequestContext): Promise<PaymentPage<PaymentPayout>>;
+}
+export interface CreateMarketplaceAccountInput {
+    email?: string;
+    country?: string;
+    metadata?: Readonly<Record<string, string>>;
+}
+export interface CreateTransferInput {
+    amount: MoneyAmount;
+    destinationAccountId: string;
+}
+export interface PaymentMarketplaceCapability {
+    createAccount(input: CreateMarketplaceAccountInput, context: PaymentMutationContext): Promise<PaymentMarketplaceAccount>;
+    getAccount(accountId: string, context: PaymentRequestContext): Promise<PaymentMarketplaceAccount | null>;
+    createTransfer(input: CreateTransferInput, context: PaymentMutationContext): Promise<PaymentTransfer>;
+}
+export interface PaymentWebhooksCapability {
+    verify(request: PaymentWebhookRequest, context: PaymentRequestContext): Promise<boolean>;
+    parse(request: PaymentWebhookRequest, context: PaymentRequestContext): Promise<PaymentWebhookEvent>;
+}

package/dist/integrations/providers/payments/capabilities-billing.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/payments/capabilities-payments.d.ts

@@ -0,0 +1,57 @@
+import type { PaymentMutationContext, PaymentRequestContext } from './context.js';
+import type { Payment, PaymentCheckoutSession, PaymentCustomer, PaymentMethod, PaymentRefund } from './resources.js';
+import type { MoneyAmount, PaymentListQuery, PaymentPage } from './shared.js';
+export interface PaymentCustomerInput {
+    email?: string;
+    name?: string;
+    metadata?: Readonly<Record<string, string>>;
+}
+export interface PaymentCustomersCapability {
+    create(input: PaymentCustomerInput, context: PaymentMutationContext): Promise<PaymentCustomer>;
+    get(customerId: string, context: PaymentRequestContext): Promise<PaymentCustomer | null>;
+    update(customerId: string, input: PaymentCustomerInput, context: PaymentMutationContext): Promise<PaymentCustomer>;
+    list(query: PaymentListQuery, context: PaymentRequestContext): Promise<PaymentPage<PaymentCustomer>>;
+}
+export interface AttachPaymentMethodInput {
+    customerId: string;
+    providerToken: string;
+}
+export interface PaymentMethodsCapability {
+    attach(input: AttachPaymentMethodInput, context: PaymentMutationContext): Promise<PaymentMethod>;
+    detach(paymentMethodId: string, context: PaymentMutationContext): Promise<PaymentMethod>;
+    list(customerId: string, query: PaymentListQuery, context: PaymentRequestContext): Promise<PaymentPage<PaymentMethod>>;
+}
+export interface CreateCheckoutSessionInput {
+    amount: MoneyAmount;
+    successUrl: string;
+    cancelUrl: string;
+    customerId?: string;
+    metadata?: Readonly<Record<string, string>>;
+}
+export interface PaymentCheckoutCapability {
+    create(input: CreateCheckoutSessionInput, context: PaymentMutationContext): Promise<PaymentCheckoutSession>;
+    get(sessionId: string, context: PaymentRequestContext): Promise<PaymentCheckoutSession | null>;
+    expire(sessionId: string, context: PaymentMutationContext): Promise<PaymentCheckoutSession>;
+}
+export interface CreatePaymentInput {
+    amount: MoneyAmount;
+    customerId?: string;
+    paymentMethodId?: string;
+    captureMode?: 'automatic' | 'manual';
+    returnUrl?: string;
+    metadata?: Readonly<Record<string, string>>;
+}
+export interface RefundPaymentInput {
+    paymentId: string;
+    amount?: MoneyAmount;
+    reason?: string;
+}
+export interface PaymentProcessingCapability {
+    create(input: CreatePaymentInput, context: PaymentMutationContext): Promise<Payment>;
+    get(paymentId: string, context: PaymentRequestContext): Promise<Payment | null>;
+    authorize(paymentId: string, context: PaymentMutationContext): Promise<Payment>;
+    capture(paymentId: string, amount: MoneyAmount | undefined, context: PaymentMutationContext): Promise<Payment>;
+    cancel(paymentId: string, context: PaymentMutationContext): Promise<Payment>;
+    refund(input: RefundPaymentInput, context: PaymentMutationContext): Promise<PaymentRefund>;
+    list(query: PaymentListQuery, context: PaymentRequestContext): Promise<PaymentPage<Payment>>;
+}

package/dist/integrations/providers/payments/capabilities-payments.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/payments/capabilities.d.ts

@@ -0,0 +1,2 @@
+export * from './capabilities-billing.js';
+export * from './capabilities-payments.js';

package/dist/integrations/providers/payments/capabilities.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/payments/context.d.ts

@@ -0,0 +1,75 @@
+import { type MoneyAmount, type PaymentEvidence, type PaymentJsonValue } from './shared.js';
+export type PaymentEnvironment = 'sandbox' | 'live';
+export interface PaymentActor {
+    type: 'service' | 'user' | 'operator';
+    id: string;
+    roles?: readonly string[];
+}
+export interface PaymentRequestContext {
+    tenantId: string;
+    environment: PaymentEnvironment;
+    accountId?: string;
+    correlationId?: string;
+}
+interface PaymentAuthorizationDecisionBase {
+    decision: 'allow' | 'deny' | 'review';
+    decisionId: string;
+    decidedAt: string;
+    scope: PaymentAuthorizationScope;
+    policyKey?: string;
+    reason?: string;
+}
+/** Exact mutation boundary covered by a payment authorization decision. */
+export interface PaymentAuthorizationScope {
+    tenantId: string;
+    environment: PaymentEnvironment;
+    accountId?: string;
+    actorId: string;
+    operation: PaymentOperation;
+    idempotencyKey: string;
+    amount?: MoneyAmount;
+    resourceId?: string;
+    expiresAt: string;
+}
+export interface AutonomousPaymentAuthorizationDecision extends PaymentAuthorizationDecisionBase {
+    mode: 'autonomous';
+    evidence?: readonly PaymentEvidence[];
+}
+export interface ApprovalRequiredPaymentAuthorizationDecision extends PaymentAuthorizationDecisionBase {
+    mode: 'approval_required';
+    evidence: readonly [PaymentEvidence, ...PaymentEvidence[]];
+}
+export type PaymentAuthorizationDecision = AutonomousPaymentAuthorizationDecision | ApprovalRequiredPaymentAuthorizationDecision;
+export interface PaymentMutationContext extends PaymentRequestContext {
+    actor: PaymentActor;
+    idempotencyKey: string;
+    authorization: PaymentAuthorizationDecision;
+}
+export interface PaymentAuthorizationRequest {
+    operation: PaymentOperation;
+    context: Omit<PaymentMutationContext, 'authorization'>;
+    amount?: MoneyAmount;
+    resourceId?: string;
+    attributes?: Readonly<Record<string, PaymentJsonValue>>;
+}
+export interface PaymentAuthorizer {
+    authorize(request: PaymentAuthorizationRequest): Promise<PaymentAuthorizationDecision>;
+}
+/** Builds the exact scope a host authorizer must bind into its decision. */
+export declare function createPaymentAuthorizationScope(context: Omit<PaymentMutationContext, 'authorization'>, request: Pick<PaymentAuthorizationRequest, 'operation' | 'amount' | 'resourceId'>, expiresAt: string): PaymentAuthorizationScope;
+/** Enforces the authorization evidence every payment adapter mutation needs. */
+export declare function assertPaymentMutationAuthorized(context: PaymentMutationContext, request: Pick<PaymentAuthorizationRequest, 'operation' | 'amount' | 'resourceId'>): void;
+export type PaymentOperation = 'customers.create' | 'customers.get' | 'customers.list' | 'customers.update' | 'payment-methods.attach' | 'payment-methods.detach' | 'payment-methods.list' | 'checkout.create' | 'checkout.expire' | 'checkout.get' | 'payments.cancel' | 'payments.capture' | 'payments.authorize' | 'payments.create' | 'payments.get' | 'payments.list' | 'payments.refund' | 'subscriptions.cancel' | 'subscriptions.create' | 'subscriptions.get' | 'subscriptions.list' | 'subscriptions.update' | 'invoices.create' | 'invoices.finalize' | 'invoices.get' | 'invoices.list' | 'invoices.pay' | 'invoices.void' | 'disputes.get' | 'disputes.list' | 'disputes.submit-evidence' | 'payouts.create' | 'payouts.get' | 'payouts.list' | 'marketplace.create-account' | 'marketplace.create-transfer' | 'marketplace.get-account' | 'webhooks.parse' | 'webhooks.verify';
+export interface PaymentOperationCapability {
+    operation: PaymentOperation;
+    availability: 'supported' | 'conditional' | 'unsupported';
+    requiresAuthorization?: boolean;
+    constraints?: Readonly<Record<string, PaymentJsonValue>>;
+    evidence?: readonly PaymentEvidence[];
+}
+export interface PaymentCapabilityDiscovery {
+    providerKey: string;
+    discoveredAt: string;
+    operations: readonly PaymentOperationCapability[];
+}
+export {};

package/dist/integrations/providers/payments/context.js

@@ -0,0 +1,2 @@
+// @bun
+class o extends Error{code;providerRef;retryable;retryAfterMs;evidence;cause;constructor(e){super(e.message);this.name="PaymentProviderError",this.code=e.code,this.providerRef=e.providerRef,this.retryable=e.retryable,this.retryAfterMs=e.retryAfterMs,this.evidence=e.evidence,this.cause=e.cause}toJSON(){return{code:this.code,message:this.message,providerRef:this.providerRef,retryable:this.retryable,retryAfterMs:this.retryAfterMs,evidence:this.evidence,cause:this.cause}}}function m(e,t,n){return{tenantId:e.tenantId,environment:e.environment,accountId:e.accountId,actorId:e.actor.id,idempotencyKey:e.idempotencyKey,operation:t.operation,amount:t.amount,resourceId:t.resourceId,expiresAt:n}}function p(e,t){let{authorization:n}=e,s=n.mode==="approval_required"&&n.evidence.length===0;if(n.decision!=="allow"||s)throw new o({code:"authorization_denied",message:n.reason??"Payment mutation requires an allowed authorization decision with evidence.",retryable:n.decision==="review",evidence:n.evidence});let{scope:r}=n,i=Date.parse(r.expiresAt),a=!Number.isFinite(i)||i<=Date.now(),c=r.tenantId!==e.tenantId||r.environment!==e.environment||r.accountId!==e.accountId||r.actorId!==e.actor.id||r.operation!==t.operation||r.idempotencyKey!==e.idempotencyKey||r.resourceId!==t.resourceId||!d(r.amount,t.amount);if(a||c)throw new o({code:"authorization_denied",message:a?"Payment authorization decision has expired.":"Payment authorization decision does not cover this mutation.",retryable:!1,evidence:n.evidence})}function d(e,t){if(!e||!t)return e===t;return e.currency===t.currency&&e.amountMinor===t.amountMinor}export{p as assertPaymentMutationAuthorized,m as createPaymentAuthorizationScope};

package/dist/integrations/providers/payments/provider.d.ts

@@ -0,0 +1,22 @@
+import type { PaymentCheckoutCapability, PaymentCustomersCapability, PaymentDisputesCapability, PaymentInvoicesCapability, PaymentMarketplaceCapability, PaymentMethodsCapability, PaymentPayoutsCapability, PaymentProcessingCapability, PaymentSubscriptionsCapability, PaymentWebhooksCapability } from './capabilities.js';
+import type { PaymentAuthorizer, PaymentCapabilityDiscovery, PaymentRequestContext } from './context.js';
+export interface PaymentProviderDescriptor {
+    key: string;
+    displayName: string;
+    version: string;
+}
+export interface PaymentPlatformProvider {
+    readonly provider: PaymentProviderDescriptor;
+    readonly authorizer?: PaymentAuthorizer;
+    discoverCapabilities(context: PaymentRequestContext): Promise<PaymentCapabilityDiscovery>;
+    readonly customers?: PaymentCustomersCapability;
+    readonly paymentMethods?: PaymentMethodsCapability;
+    readonly checkout?: PaymentCheckoutCapability;
+    readonly payments?: PaymentProcessingCapability;
+    readonly subscriptions?: PaymentSubscriptionsCapability;
+    readonly invoices?: PaymentInvoicesCapability;
+    readonly disputes?: PaymentDisputesCapability;
+    readonly payouts?: PaymentPayoutsCapability;
+    readonly marketplace?: PaymentMarketplaceCapability;
+    readonly webhooks?: PaymentWebhooksCapability;
+}

package/dist/integrations/providers/payments/provider.js

@@ -0,0 +1 @@
+// @bun