@lssm/lib.contracts-integrations 9.0.1

package/dist/integrations/providers/payments/resources.d.ts

@@ -0,0 +1,97 @@
+import type { PaymentEnvironment } from './context.js';
+import type { MoneyAmount, PaymentEvidence, PaymentJsonValue, PaymentProviderReference, PaymentResource } from './shared.js';
+export interface PaymentCustomer extends PaymentResource {
+    email?: string;
+    name?: string;
+}
+export interface PaymentMethod extends PaymentResource {
+    type: string;
+    customerId?: string;
+    display?: string;
+    expiresAt?: string;
+}
+export interface PaymentCheckoutSession extends PaymentResource {
+    status: 'open' | 'complete' | 'expired';
+    amount: MoneyAmount;
+    checkoutUrl?: string;
+    customerId?: string;
+    paymentId?: string;
+}
+export interface Payment extends PaymentResource {
+    amount: MoneyAmount;
+    status: 'requires_payment_method' | 'requires_action' | 'authorized' | 'processing' | 'succeeded' | 'canceled' | 'failed';
+    capturedAmount?: MoneyAmount;
+    customerId?: string;
+    paymentMethodId?: string;
+}
+export interface PaymentRefund extends PaymentResource {
+    paymentId: string;
+    amount: MoneyAmount;
+    status: 'pending' | 'succeeded' | 'failed' | 'canceled';
+    reason?: string;
+}
+export interface PaymentSubscription extends PaymentResource {
+    status: 'incomplete' | 'active' | 'past_due' | 'paused' | 'canceled';
+    customerId: string;
+    priceRef: string;
+    quantity?: number;
+    currentPeriodEndsAt?: string;
+}
+export interface PaymentInvoice extends PaymentResource {
+    status: 'draft' | 'open' | 'paid' | 'uncollectible' | 'void';
+    amountDue: MoneyAmount;
+    amountPaid?: MoneyAmount;
+    customerId?: string;
+    dueAt?: string;
+    hostedUrl?: string;
+}
+export interface PaymentDispute extends PaymentResource {
+    paymentId: string;
+    amount: MoneyAmount;
+    status: 'needs_response' | 'under_review' | 'won' | 'lost' | 'closed';
+    reason?: string;
+    responseDueAt?: string;
+}
+export interface PaymentPayout extends PaymentResource {
+    amount: MoneyAmount;
+    status: 'pending' | 'processing' | 'paid' | 'failed' | 'canceled';
+    destinationRef?: string;
+    arrivalAt?: string;
+}
+export interface PaymentMarketplaceAccount extends PaymentResource {
+    status: 'pending' | 'active' | 'restricted' | 'disabled';
+    chargesEnabled: boolean;
+    payoutsEnabled: boolean;
+}
+export interface PaymentTransfer extends PaymentResource {
+    amount: MoneyAmount;
+    destinationAccountId: string;
+    status: 'pending' | 'succeeded' | 'failed' | 'reversed';
+}
+export interface PaymentWebhookRequest {
+    headers: Readonly<Record<string, string | readonly string[] | undefined>>;
+    rawBody: Uint8Array;
+    receivedAt: string;
+}
+export interface PaymentWebhookEvent {
+    id: string;
+    type: string;
+    createdAt: string;
+    providerKey: string;
+    environment: PaymentEnvironment;
+    mode: 'live' | 'replay';
+    dedupeKey: string;
+    accountId?: string;
+    merchantRef?: string;
+    resourceRef?: PaymentProviderReference;
+    data: PaymentJsonValue;
+    rawBody: Uint8Array;
+    replay: PaymentWebhookReplayMetadata;
+    evidence: readonly PaymentEvidence[];
+}
+export interface PaymentWebhookReplayMetadata {
+    isReplay: boolean;
+    replayId?: string;
+    originalReceivedAt?: string;
+    sequence?: number;
+}

package/dist/integrations/providers/payments/resources.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/payments/shared.d.ts

@@ -0,0 +1,61 @@
+export type PaymentJsonValue = boolean | number | string | null | readonly PaymentJsonValue[] | {
+    readonly [key: string]: PaymentJsonValue;
+};
+export interface MoneyAmount {
+    /** Integer amount denominated in the currency's smallest unit. */
+    amountMinor: number;
+    currency: string;
+}
+export interface PaymentProviderReference {
+    providerKey: string;
+    resourceType: string;
+    resourceId: string;
+    accountId?: string;
+}
+export type PaymentEvidenceKind = 'authorization' | 'provider-response' | 'provider-webhook' | 'operator-review' | 'policy-decision';
+export interface PaymentEvidence {
+    kind: PaymentEvidenceKind;
+    reference: string;
+    recordedAt: string;
+    digest?: string;
+    metadata?: Readonly<Record<string, PaymentJsonValue>>;
+}
+export interface PaymentResource {
+    id: string;
+    providerRef: PaymentProviderReference;
+    createdAt: string;
+    updatedAt?: string;
+    metadata?: Readonly<Record<string, string>>;
+    evidence?: readonly PaymentEvidence[];
+}
+export interface PaymentPage<T> {
+    items: readonly T[];
+    hasMore: boolean;
+    nextCursor?: string;
+}
+export interface PaymentListQuery {
+    cursor?: string;
+    limit?: number;
+}
+export type PaymentProviderErrorCode = 'authentication_failed' | 'authorization_denied' | 'conflict' | 'declined' | 'idempotency_conflict' | 'invalid_request' | 'not_found' | 'provider_unavailable' | 'rate_limited' | 'signature_invalid' | 'unsupported_operation';
+/** Normalized, serializable provider failure safe for host-side handling. */
+export interface PaymentProviderErrorDetails {
+    code: PaymentProviderErrorCode;
+    message: string;
+    providerRef?: PaymentProviderReference;
+    retryable: boolean;
+    retryAfterMs?: number;
+    evidence?: readonly PaymentEvidence[];
+    /** Sanitized provider cause; never include raw response bodies or credentials. */
+    cause?: string;
+}
+export declare class PaymentProviderError extends Error {
+    readonly code: PaymentProviderErrorCode;
+    readonly providerRef?: PaymentProviderReference;
+    readonly retryable: boolean;
+    readonly retryAfterMs?: number;
+    readonly evidence?: readonly PaymentEvidence[];
+    readonly cause?: string;
+    constructor(details: PaymentProviderErrorDetails);
+    toJSON(): PaymentProviderErrorDetails;
+}

package/dist/integrations/providers/payments/shared.js

@@ -0,0 +1,2 @@
+// @bun
+class r extends Error{code;providerRef;retryable;retryAfterMs;evidence;cause;constructor(e){super(e.message);this.name="PaymentProviderError",this.code=e.code,this.providerRef=e.providerRef,this.retryable=e.retryable,this.retryAfterMs=e.retryAfterMs,this.evidence=e.evidence,this.cause=e.cause}toJSON(){return{code:this.code,message:this.message,providerRef:this.providerRef,retryable:this.retryable,retryAfterMs:this.retryAfterMs,evidence:this.evidence,cause:this.cause}}}export{r as PaymentProviderError};

package/dist/integrations/providers/payments.d.ts

@@ -0,0 +1,5 @@
+export * from './payments/capabilities.js';
+export * from './payments/context.js';
+export * from './payments/provider.js';
+export * from './payments/resources.js';
+export * from './payments/shared.js';

package/dist/integrations/providers/payments.js

@@ -0,0 +1,2 @@
+// @bun
+class a extends Error{code;providerRef;retryable;retryAfterMs;evidence;cause;constructor(e){super(e.message);this.name="PaymentProviderError",this.code=e.code,this.providerRef=e.providerRef,this.retryable=e.retryable,this.retryAfterMs=e.retryAfterMs,this.evidence=e.evidence,this.cause=e.cause}toJSON(){return{code:this.code,message:this.message,providerRef:this.providerRef,retryable:this.retryable,retryAfterMs:this.retryAfterMs,evidence:this.evidence,cause:this.cause}}}function P(e,t,n){return{tenantId:e.tenantId,environment:e.environment,accountId:e.accountId,actorId:e.actor.id,idempotencyKey:e.idempotencyKey,operation:t.operation,amount:t.amount,resourceId:t.resourceId,expiresAt:n}}function l(e,t){let{authorization:n}=e,s=n.mode==="approval_required"&&n.evidence.length===0;if(n.decision!=="allow"||s)throw new a({code:"authorization_denied",message:n.reason??"Payment mutation requires an allowed authorization decision with evidence.",retryable:n.decision==="review",evidence:n.evidence});let{scope:o}=n,r=Date.parse(o.expiresAt),i=!Number.isFinite(r)||r<=Date.now(),m=o.tenantId!==e.tenantId||o.environment!==e.environment||o.accountId!==e.accountId||o.actorId!==e.actor.id||o.operation!==t.operation||o.idempotencyKey!==e.idempotencyKey||o.resourceId!==t.resourceId||!y(o.amount,t.amount);if(i||m)throw new a({code:"authorization_denied",message:i?"Payment authorization decision has expired.":"Payment authorization decision does not cover this mutation.",retryable:!1,evidence:n.evidence})}function y(e,t){if(!e||!t)return e===t;return e.currency===t.currency&&e.amountMinor===t.amountMinor}export{a as PaymentProviderError,l as assertPaymentMutationAuthorized,P as createPaymentAuthorizationScope};

package/dist/integrations/providers/payments.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/providers/paypal.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const paypalIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerPaypalIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/paypal.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as g}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as s}from"@lssm/lib.contracts-spec/registry";var c=(e)=>`${e.key}.v${e.version}`;class d extends s{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function m(e){return c(e)}var a=(e)=>e;function o({unsupportedModeReason:e,configFields:t,secretFields:r,rotationSupported:p=!1,setupSteps:i}){let n={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:p}};if(t)n.configFields=t;if(r)n.secretFields=r;if(i)n.setupSteps=i;return{modes:{byok:n},exempt:!0,exemptionReason:e}}var l=a({meta:{key:"payments.paypal",version:"1.0.0",category:"payments",title:"PayPal Payments",description:"PayPal integration for checkout, payments, subscriptions, payouts, marketplace, disputes, and webhooks.",domain:"payments",owners:["platform.payments"],tags:["payments","checkout","subscriptions","payouts","marketplace"],stability:g.Experimental},supportedModes:["byok"],credentialManifest:o({unsupportedModeReason:"Managed PayPal credentials are not declared because API access depends on a tenant-owned PayPal app and webhook configuration.",secretFields:[{key:"clientId",required:!0},{key:"clientSecret",required:!0},{key:"webhookId",required:!1},{key:"partnerId",required:!1},{key:"partnerAttributionId",required:!1}],rotationSupported:!0}),transports:[{type:"rest",baseUrl:"https://api-m.paypal.com"}],preferredTransport:"rest",supportedAuthMethods:[{type:"oauth2",grantType:"client_credentials",tokenUrl:"https://api-m.paypal.com/v1/oauth2/token",scopes:[]}],versionPolicy:{currentVersion:"v2",supportedVersions:[{version:"v2",status:"stable"}]},capabilities:{provides:[{key:"payments.psp",version:"1.0.0"},{key:"payments.customers",version:"1.0.0"},{key:"payments.payment-methods",version:"1.0.0"},{key:"payments.checkout",version:"1.0.0"},{key:"payments.subscriptions",version:"1.0.0"},{key:"payments.invoices",version:"1.0.0"},{key:"payments.disputes",version:"1.0.0"},{key:"payments.payouts",version:"1.0.0"},{key:"payments.marketplace",version:"1.0.0"},{key:"payments.webhooks",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{environment:{type:"string",enum:["sandbox","live"],description:"PayPal API environment."},merchantId:{type:"string",description:"Optional PayPal merchant account identifier."},partnerId:{type:"string",description:"Optional PayPal partner merchant identifier."},partnerAttributionId:{type:"string",description:"Optional PayPal BN attribution identifier."}},required:["environment"]},example:{environment:"sandbox",merchantId:"merchant_123",partnerId:"partner_123",partnerAttributionId:"PARTNER_BN_CODE"}},secretSchema:{schema:{type:"object",required:["clientId","clientSecret"],properties:{clientId:{type:"string",description:"PayPal app client ID."},clientSecret:{type:"string",description:"PayPal app client secret."},webhookId:{type:"string",description:"Webhook ID used for signature verification."},partnerId:{type:"string",description:"Optional PayPal partner merchant identifier."},partnerAttributionId:{type:"string",description:"Optional PayPal BN attribution identifier."}}},example:{clientId:"paypal-client-id",clientSecret:"***",webhookId:"WH-***"}},healthCheck:{method:"ping",timeoutMs:5000},docsUrl:"https://developer.paypal.com/api/rest/",byokSetup:{setupInstructions:"Create a PayPal REST app, store its client credentials, and configure a webhook when inbound events are required.",requiredScopes:[],keyRotationSupported:!0,quotaTrackingSupported:!1}});function S(e){return e.register(l)}export{l as paypalIntegrationSpec,S as registerPaypalIntegration};

package/dist/integrations/providers/peloton.d.ts

@@ -0,0 +1,3 @@
+import { type IntegrationSpecRegistry } from '../spec.js';
+export declare const pelotonIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerPelotonIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/peloton.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as g}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as s}from"@lssm/lib.contracts-spec/registry";var p=(e)=>`${e.key}.v${e.version}`;class c extends s{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function u(e){return p(e)}var i=(e)=>e;var o=["official-api","official-mcp","aggregator-api","aggregator-mcp","unofficial"],l=[{key:"health.activities.read",version:"1.0.0"},{key:"health.workouts.read",version:"1.0.0"},{key:"health.sleep.read",version:"1.0.0"},{key:"health.biometrics.read",version:"1.0.0"}],d=[{type:"rest"},{type:"mcp",transport:"http"},{type:"webhook",inbound:{signatureHeader:"x-webhook-signature",signingAlgorithm:"hmac-sha256"}}],n=[{type:"oauth2",grantType:"authorization_code",tokenUrl:"",scopes:[]},{type:"api-key"},{type:"bearer"},{type:"basic"}];function a(e){let t=e.supportedAuthMethods??f(e);return i({meta:{key:e.key,version:"1.0.0",category:"health",title:e.title,description:e.description,domain:"health",owners:["platform.integrations"],tags:["health","wearables",...e.tags],stability:e.stability??g.Experimental},supportedModes:e.supportedModes??["managed","byok"],transports:e.transports??d,preferredTransport:"rest",supportedAuthMethods:t,capabilities:{provides:e.capabilities??[...l]},configSchema:{schema:{type:"object",properties:{apiBaseUrl:{type:"string",description:"Optional API base URL override for provider-specific regional or partner endpoints."},mcpUrl:{type:"string",description:"Optional MCP endpoint URL for provider tool transport."},oauthTokenUrl:{type:"string",description:"Optional OAuth token endpoint override used for access-token refresh flows."},defaultTransport:{type:"string",enum:[...o],description:"Preferred transport strategy used before fallbacks are attempted."},strategyOrder:{type:"array",items:{type:"string",enum:[...o]},description:"Ordered transport fallback strategy. Defaults to official API -> official MCP -> aggregator API -> aggregator MCP -> unofficial."},allowUnofficial:{type:"boolean",description:"Must be true to allow unofficial/automation connectors as fallback."},unofficialAllowList:{type:"array",items:{type:"string"},description:"Optional allowlist of provider keys allowed to use unofficial connectors."}}},example:{defaultTransport:e.defaultTransport??"official-api",strategyOrder:[...o],allowUnofficial:!1,unofficialAllowList:[]}},secretSchema:{schema:{type:"object",properties:{apiKey:{type:"string"},accessToken:{type:"string"},refreshToken:{type:"string"},tokenExpiresAt:{type:"string"},clientId:{type:"string"},clientSecret:{type:"string"},mcpAccessToken:{type:"string"},username:{type:"string"},password:{type:"string"}}},example:{apiKey:"provider-api-key",accessToken:"oauth-access-token",refreshToken:"oauth-refresh-token"}},healthCheck:{method:"list",timeoutMs:1e4},docsUrl:e.docsUrl,byokSetup:{setupInstructions:e.byokSetupInstructions??"Create provider credentials, set allowed scopes, and store credentials in secret provider.",requiredScopes:e.byokScopes,keyRotationSupported:!1,quotaTrackingSupported:!1}})}function f(e){if(e.oauthTokenUrl){let t=e.oauthTokenUrl;return n.map((r)=>{if(r.type==="oauth2")return{...r,tokenUrl:t,scopes:e.byokScopes??[]};return r})}return[...n]}var y=a({key:"health.peloton",title:"Peloton",description:"Peloton integration for workout history and activity metrics using official, aggregator, or opt-in unofficial connectors.",docsUrl:"https://developers.onepeloton.com/",tags:["peloton","workouts","unofficial"],capabilities:[{key:"health.activities.read",version:"1.0.0"},{key:"health.workouts.read",version:"1.0.0"}],defaultTransport:"aggregator-api"});function T(e){return e.register(y)}export{y as pelotonIntegrationSpec,T as registerPelotonIntegration};

package/dist/integrations/providers/posthog-llm-telemetry.d.ts

@@ -0,0 +1,51 @@
+import type { TelemetrySpec } from '@lssm/lib.contracts-spec/telemetry/spec';
+/**
+ * PostHog LLM Analytics telemetry spec.
+ *
+ * Defines the telemetry events captured by the @posthog/ai integration
+ * for LLM observability. Events are captured via withTracing() model wrapping
+ * or the PostHogTelemetryCollector bridge.
+ *
+ * PostHog Evaluations (Relevance, Helpfulness, Hallucination, Toxicity,
+ * Jailbreak, and custom prompts) run server-side on these events.
+ * No client-side code is needed beyond capturing $ai_generation events.
+ */
+export declare const posthogLLMTelemetrySpec: TelemetrySpec;
+/**
+ * PostHog LLM Analytics PII fields that may appear in generation events.
+ * These should be redacted when privacyMode is enabled.
+ */
+export declare const POSTHOG_LLM_PII_FIELDS: readonly ['$ai_input', '$ai_output_choices'];
+/**
+ * PostHog LLM Analytics telemetry event name constants.
+ */
+export declare const POSTHOG_LLM_TELEMETRY_EVENTS: {
+    /** Captured for every LLM generation call */
+    readonly generation: '$ai_generation';
+    /** Captured for LLM trace spans */
+    readonly span: '$ai_span';
+    /** Captured for LLM evaluation results (server-side) */
+    readonly evaluation: '$ai_evaluation';
+};
+export type PostHogLLMTelemetryEvent = (typeof POSTHOG_LLM_TELEMETRY_EVENTS)[keyof typeof POSTHOG_LLM_TELEMETRY_EVENTS];
+/**
+ * Built-in PostHog evaluation templates.
+ * These are configured in PostHog UI under LLM Analytics > Evaluations.
+ */
+export declare const POSTHOG_EVALUATION_TEMPLATES: {
+    /** Whether the output addresses the user's input */
+    readonly relevance: 'relevance';
+    /** Whether the response is useful and actionable */
+    readonly helpfulness: 'helpfulness';
+    /** Attempts to bypass safety guardrails */
+    readonly jailbreak: 'jailbreak';
+    /** Made-up facts or unsupported claims */
+    readonly hallucination: 'hallucination';
+    /** Harmful, offensive, or inappropriate content */
+    readonly toxicity: 'toxicity';
+};
+export type PostHogEvaluationTemplate = (typeof POSTHOG_EVALUATION_TEMPLATES)[keyof typeof POSTHOG_EVALUATION_TEMPLATES];
+/**
+ * Redact PII fields from PostHog LLM telemetry payload.
+ */
+export declare function redactPostHogLLMTelemetryPayload<T extends Record<string, unknown>>(payload: T): T;

package/dist/integrations/providers/posthog-llm-telemetry.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as i}from"@lssm/lib.contracts-spec/ownership";var a={meta:{key:"analytics.posthog.llm",version:"1.0.0",title:"PostHog LLM Analytics Telemetry",description:"Telemetry events for PostHog LLM Analytics: generation tracing, token usage, and evaluation-ready metadata.",domain:"analytics",owners:["@platform.integrations"],tags:["analytics","posthog","llm","ai","telemetry"],stability:i.Beta},events:[{key:"posthog.llm.generation",version:"1.0.0",semantics:{who:"AI agent or LLM consumer",what:"Captures an LLM generation call with full observability metadata",why:"Enable LLM performance monitoring, cost tracking, and automated quality evaluations via PostHog"},properties:{$ai_model:{type:"string",required:!0,description:"The LLM model identifier (e.g., gpt-4o, claude-sonnet-4-20250514)"},$ai_provider:{type:"string",required:!0,description:"The LLM provider (e.g., openai, anthropic, contractspec)"},$ai_latency:{type:"number",required:!1,description:"LLM call latency in seconds"},$ai_input_tokens:{type:"number",required:!1,description:"Number of input/prompt tokens consumed"},$ai_output_tokens:{type:"number",required:!1,description:"Number of output/completion tokens generated"},$ai_total_cost_usd:{type:"number",required:!1,description:"Total cost in USD (input + output)"},$ai_is_error:{type:"boolean",required:!1,description:"Whether the generation resulted in an error"},$ai_trace_id:{type:"string",required:!1,description:"Trace ID for grouping related generations"},$ai_stream:{type:"boolean",required:!1,description:"Whether the response was streamed"},$ai_time_to_first_token:{type:"number",required:!1,description:"Time to first token in seconds (streaming only)"},$ai_tools:{type:"json",required:!1,description:"Tools/functions available to the LLM"},$ai_input:{type:"json",required:!1,pii:!0,redact:!0,description:"Messages sent to the LLM (may contain PII)"},$ai_output_choices:{type:"json",required:!1,pii:!0,redact:!0,description:"Response choices from the LLM (may contain PII)"},contractspec_operation:{type:"string",required:!1,description:"ContractSpec operation name"},contractspec_version:{type:"string",required:!1,description:"ContractSpec operation version"},contractspec_agent_id:{type:"string",required:!1,description:"ContractSpec agent identifier"},contractspec_finish_reason:{type:"string",required:!1,description:"AI SDK finish reason (stop, tool-calls, error, etc.)"},contractspec_tool_count:{type:"number",required:!1,description:"Number of tool calls made in this step"}},privacy:"internal",tags:["llm","generation","posthog"]}],config:{defaultRetentionDays:90,defaultSamplingRate:1,providers:[{type:"posthog",config:{eventName:"$ai_generation",enableEvaluations:!0,evaluationTemplates:["relevance","helpfulness","jailbreak","hallucination","toxicity"]}}]}},n=["$ai_input","$ai_output_choices"],s={generation:"$ai_generation",span:"$ai_span",evaluation:"$ai_evaluation"},c={relevance:"relevance",helpfulness:"helpfulness",jailbreak:"jailbreak",hallucination:"hallucination",toxicity:"toxicity"};function p(o){let e={...o};for(let t of n)if(t in e)e[t]="[REDACTED]";return e}export{c as POSTHOG_EVALUATION_TEMPLATES,n as POSTHOG_LLM_PII_FIELDS,s as POSTHOG_LLM_TELEMETRY_EVENTS,a as posthogLLMTelemetrySpec,p as redactPostHogLLMTelemetryPayload};

package/dist/integrations/providers/posthog.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const posthogIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerPosthogIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/posthog.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as a}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as o}from"@lssm/lib.contracts-spec/registry";var n=(t)=>`${t.key}.v${t.version}`;class i extends o{constructor(t){super("integration",t)}getByCategory(t){return this.list().filter((r)=>r.meta.category===t)}}function g(t){return n(t)}var e=(t)=>t;var s=e({meta:{key:"analytics.posthog",version:"1.1.0",category:"analytics",title:"PostHog",description:"PostHog integration for product analytics, feature flags, HogQL queries, and LLM analytics with evaluations.",domain:"analytics",owners:["@platform.integrations"],tags:["analytics","posthog","llm","ai"],stability:a.Beta},supportedModes:["managed","byok"],transports:[{type:"rest"},{type:"mcp",transport:"http"},{type:"sdk",packageName:"posthog-node"}],preferredTransport:"rest",supportedAuthMethods:[{type:"api-key"}],capabilities:{provides:[{key:"analytics.events",version:"1.0.0"},{key:"analytics.feature-flags",version:"1.0.0"},{key:"analytics.query",version:"1.0.0"},{key:"analytics.events.read",version:"1.0.0"},{key:"analytics.persons",version:"1.0.0"},{key:"analytics.insights",version:"1.0.0"},{key:"analytics.cohorts",version:"1.0.0"},{key:"analytics.annotations",version:"1.0.0"},{key:"analytics.llm-tracing",version:"1.0.0"},{key:"analytics.llm-evaluations",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{host:{type:"string",description:"PostHog host (e.g., https://app.posthog.com or self-hosted URL)."},projectId:{type:"string",description:"PostHog project ID for API queries."},mcpUrl:{type:"string",description:"Optional MCP endpoint URL for PostHog tools."}}},example:{host:"https://app.posthog.com",projectId:"12345"}},secretSchema:{schema:{type:"object",required:["personalApiKey"],properties:{personalApiKey:{type:"string",description:"PostHog personal API key (required for API reads/writes)."},projectApiKey:{type:"string",description:"PostHog project API key (required for capture/ingest events)."}}},example:{personalApiKey:"phx_personal_api_key",projectApiKey:"phc_project_api_key"}},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:"https://posthog.com/docs",byokSetup:{setupInstructions:"Generate a PostHog personal API key for read/write operations and a project API key for event capture.",keyRotationSupported:!0,quotaTrackingSupported:!1}});function d(t){return t.register(s)}export{s as posthogIntegrationSpec,d as registerPosthogIntegration};

package/dist/integrations/providers/postmark.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const postmarkIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerPostmarkIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/postmark.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as a}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as n}from"@lssm/lib.contracts-spec/registry";var i=(e)=>`${e.key}.v${e.version}`;class o extends n{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((r)=>r.meta.category===e)}}function g(e){return i(e)}var t=(e)=>e;var s=t({meta:{key:"email.postmark",version:"1.0.0",category:"email",title:"Postmark Transactional Email",description:"Postmark integration for transactional email delivery.",domain:"communications",owners:["platform.messaging"],tags:["email","transactional"],stability:a.Stable},supportedModes:["managed","byok"],transports:[{type:"rest",baseUrl:"https://api.postmarkapp.com"},{type:"webhook",inbound:{signatureHeader:"x-postmark-signature",signingAlgorithm:"hmac-sha256"}}],preferredTransport:"rest",supportedAuthMethods:[{type:"header",headerName:"X-Postmark-Server-Token"}],capabilities:{provides:[{key:"email.transactional",version:"1.0.0"}],requires:[{key:"platform.webhooks",optional:!0,reason:"Optional for inbound bounce handling"}]},configSchema:{schema:{type:"object",properties:{messageStream:{type:"string",description:"Optional message stream identifier (e.g., transactional)."},fromEmail:{type:"string",description:"Default From address used for outbound messages."}}},example:{messageStream:"outbound",fromEmail:"notifications@example.com"}},secretSchema:{schema:{type:"object",required:["serverToken"],properties:{serverToken:{type:"string",description:"Server token for the Postmark account."}}},example:{serverToken:"server-***"}},healthCheck:{method:"ping",timeoutMs:3000},docsUrl:"https://postmarkapp.com/developer",constraints:{rateLimit:{rpm:500}},byokSetup:{setupInstructions:"Create a Postmark server token with outbound send permissions and configure allowed from addresses.",keyRotationSupported:!0,quotaTrackingSupported:!1}});function u(e){return e.register(s)}export{s as postmarkIntegrationSpec,u as registerPostmarkIntegration};

package/dist/integrations/providers/powens.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const powensIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerPowensIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/powens.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as d}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as p}from"@lssm/lib.contracts-spec/registry";var c=(e)=>`${e.key}.v${e.version}`;class g extends p{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function m(e){return c(e)}var i=(e)=>e;function a({unsupportedModeReason:e,configFields:t,secretFields:r,rotationSupported:s=!1,setupSteps:o}){let n={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:s}};if(t)n.configFields=t;if(r)n.secretFields=r;if(o)n.setupSteps=o;return{modes:{byok:n},exempt:!0,exemptionReason:e}}var l=i({meta:{key:"openbanking.powens",version:"1.0.0",category:"open-banking",title:"Powens Open Banking (Read)",description:"Read-only Open Banking integration powered by Powens, exposing accounts, transactions, and balances.",domain:"finance",owners:["platform.finance"],tags:["open-banking","powens","finance"],stability:d.Experimental},supportedModes:["byok"],credentialManifest:a({unsupportedModeReason:"Managed Powens credentials are not declared because open-banking access requires tenant-owned regulated OAuth project credentials and consent boundaries.",configFields:[{key:"environment",required:!0}],secretFields:[{key:"clientId",required:!0},{key:"clientSecret",required:!0},{key:"apiKey"},{key:"webhookSecret"}],rotationSupported:!1}),transports:[{type:"rest",baseUrl:"https://api.powens.com"},{type:"webhook",inbound:{signatureHeader:"x-powens-signature",signingAlgorithm:"hmac-sha256"}}],preferredTransport:"rest",supportedAuthMethods:[{type:"oauth2",grantType:"authorization_code",authorizationUrl:"https://auth.powens.com/authorize",tokenUrl:"https://auth.powens.com/token",scopes:["accounts:read","transactions:read","balances:read"]}],capabilities:{provides:[{key:"openbanking.accounts.read",version:"1.0.0"},{key:"openbanking.transactions.read",version:"1.0.0"},{key:"openbanking.balances.read",version:"1.0.0"}]},configSchema:{schema:{type:"object",required:["environment"],properties:{environment:{type:"string",enum:["sandbox","production"],description:"Powens environment to target. Sandbox uses Powens test API base URL, production uses live endpoints."},baseUrl:{type:"string",description:"Optional override for the Powens API base URL. Defaults to Powens environment defaults."},region:{type:"string",description:"Optional Powens region identifier when targeting a specific data residency cluster."},pollingIntervalMs:{type:"number",description:"Optional custom polling interval in milliseconds for background sync jobs (defaults to platform standard)."}}},example:{environment:"sandbox",baseUrl:"https://api-sandbox.powens.com/v2",region:"eu-west-1",pollingIntervalMs:300000}},secretSchema:{schema:{type:"object",required:["clientId","clientSecret"],properties:{clientId:{type:"string",description:"Powens OAuth client identifier obtained from the Powens Console (BYOK project)."},clientSecret:{type:"string",description:"Powens OAuth client secret used to exchange for access tokens."},apiKey:{type:"string",description:"Optional Powens API key (if the tenant project exposes a dedicated API token)."},webhookSecret:{type:"string",description:"Optional webhook signing secret used to verify Powens webhook payloads."}}},example:{clientId:"powens-client-id",clientSecret:"powens-client-secret",apiKey:"powens-api-key",webhookSecret:"powens-webhook-secret"}},healthCheck:{method:"ping",timeoutMs:8000},docsUrl:"https://docs.powens.com/",constraints:{rateLimit:{rph:1e4,rpm:600}},byokSetup:{setupInstructions:"Create a Powens BYOK project, generate OAuth credentials, and optionally configure webhook delivery for account/transaction updates.",requiredScopes:["accounts:read","transactions:read","balances:read"],keyRotationSupported:!1,quotaTrackingSupported:!1}});function w(e){return e.register(l)}export{l as powensIntegrationSpec,w as registerPowensIntegration};

package/dist/integrations/providers/project-management.d.ts

@@ -0,0 +1,196 @@
+import type { WorkCapabilityManifest, WorkExternalBinding, WorkFieldGroup, WorkMutationEnvelope, WorkObjectKind, WorkObjectRef, WorkStatusCategory, WorkSyncConflict, WorkSyncMode } from '@lssm/lib.work-spec';
+import type { ProviderDeltaEnvelope, ProviderDeltaSyncState } from './provider-delta.js';
+export type ProjectManagementWorkKind = Extract<WorkObjectKind, 'project' | 'milestone' | 'task' | 'issue' | 'bug' | 'story' | 'epic' | 'subtask' | 'document_reference'>;
+export interface ProjectManagementWorkDraft {
+    title: string;
+    kind?: ProjectManagementWorkKind;
+    description?: string;
+    statusCategory?: WorkStatusCategory;
+    priority?: number;
+    tags?: string[];
+    assigneeRefs?: WorkObjectRef[];
+    ownerRefs?: WorkObjectRef[];
+    projectId?: string;
+    parentId?: string;
+    parentRef?: WorkObjectRef;
+    dueAt?: string;
+    desiredStartAt?: string;
+    completedAt?: string;
+    estimateMinutes?: number;
+    externalId?: string;
+    metadata?: Record<string, string>;
+    providerMetadata?: Record<string, string>;
+}
+export interface ProjectManagementRemoteRecord {
+    id: string;
+    title: string;
+    kind?: ProjectManagementWorkKind;
+    url?: string;
+    statusCategory?: WorkStatusCategory;
+    statusLabel?: string;
+    priority?: number;
+    tags?: string[];
+    projectId?: string;
+    parentId?: string;
+    externalId?: string;
+    metadata?: Record<string, string>;
+    providerMetadata?: Record<string, string>;
+    workRef?: WorkObjectRef;
+    binding?: WorkExternalBinding;
+    remoteRevision?: string;
+    delta?: ProviderDeltaSyncState;
+    archived?: boolean;
+}
+export type ProjectManagementProviderCapability = 'read' | 'import' | 'delta' | 'webhook' | 'create' | 'update' | 'archive' | 'restore' | 'delete' | 'batch' | 'sync' | 'conflict_resolution';
+export interface ProjectManagementProviderCapabilities {
+    contractVersion: '2.0.0';
+    providerCapabilities: readonly ProjectManagementProviderCapability[];
+    workCapabilities: WorkCapabilityManifest;
+    supportedObjectKinds: readonly ProjectManagementWorkKind[];
+    supportedSyncModes: readonly WorkSyncMode[];
+    supportedAuthorityGroups?: readonly WorkFieldGroup[];
+}
+export interface ProjectManagementRecordLookup {
+    id?: string;
+    externalId?: string;
+    projectId?: string;
+    workRef?: WorkObjectRef;
+    bindingId?: string;
+}
+export interface ProjectManagementListQuery extends ProjectManagementRecordLookup {
+    limit?: number;
+    cursor?: string;
+    includeArchived?: boolean;
+}
+export interface ProjectManagementSyncConflict {
+    conflict: WorkSyncConflict;
+    local?: ProjectManagementWorkDraft;
+    remote?: ProjectManagementRemoteRecord;
+}
+export interface ProjectManagementImportInput extends Omit<ProjectManagementListQuery, 'id' | 'bindingId' | 'workRef'> {
+    mode?: WorkSyncMode;
+    updatedAfter?: string;
+    delta?: ProviderDeltaSyncState;
+}
+export interface ProjectManagementImportPage {
+    records: ProjectManagementRemoteRecord[];
+    nextCursor?: string;
+    delta?: ProviderDeltaSyncState;
+    conflicts: ProjectManagementSyncConflict[];
+}
+export interface ProjectManagementCreateInput {
+    draft: ProjectManagementWorkDraft;
+    mutation?: WorkMutationEnvelope;
+}
+export interface ProjectManagementUpdateInput {
+    id: string;
+    patch: Partial<ProjectManagementWorkDraft>;
+    mutation?: WorkMutationEnvelope;
+}
+export interface ProjectManagementArchiveInput {
+    id: string;
+    mutation?: WorkMutationEnvelope;
+}
+export interface ProjectManagementRestoreInput {
+    id: string;
+    mutation?: WorkMutationEnvelope;
+}
+export interface ProjectManagementDeleteInput {
+    id: string;
+    mutation?: WorkMutationEnvelope;
+}
+export interface ProjectManagementMutationResult {
+    status: 'created' | 'updated' | 'archived' | 'restored' | 'deleted' | 'noop' | 'conflict';
+    record?: ProjectManagementRemoteRecord;
+    conflict?: ProjectManagementSyncConflict;
+    delta?: ProviderDeltaSyncState;
+}
+export interface ProjectManagementBatchMutationInput {
+    create?: ProjectManagementCreateInput[];
+    update?: ProjectManagementUpdateInput[];
+    archive?: ProjectManagementArchiveInput[];
+    restore?: ProjectManagementRestoreInput[];
+    delete?: ProjectManagementDeleteInput[];
+}
+export interface ProjectManagementBatchMutationResult {
+    results: ProjectManagementMutationResult[];
+    conflicts: ProjectManagementSyncConflict[];
+}
+export interface ProjectManagementDeltaPullInput {
+    cursor?: string;
+    limit?: number;
+    delta?: ProviderDeltaSyncState;
+}
+export interface ProjectManagementWebhookEvent {
+    eventId: string;
+    eventType: string;
+    remoteObjectType: string;
+    remoteObjectId: string;
+    remoteRevision?: string;
+    occurredAt?: string;
+    payload: unknown;
+}
+export type ProjectManagementDeltaEntry = ProviderDeltaEnvelope<ProjectManagementRemoteRecord | ProjectManagementWebhookEvent>;
+export interface ProjectManagementDeltaPage {
+    entries: ProjectManagementDeltaEntry[];
+    nextCursor?: string;
+    delta?: ProviderDeltaSyncState;
+    conflicts: ProjectManagementSyncConflict[];
+}
+export interface ProjectManagementWebhookIngestInput {
+    headers: Record<string, string | string[]>;
+    rawBody: string | Uint8Array;
+    receivedAt?: string;
+}
+export interface ProjectManagementWebhookIngestResult extends ProjectManagementDeltaPage {
+    acceptedEventIds: string[];
+}
+export type ProjectManagementConflictResolution = 'resolved_native' | 'resolved_remote' | 'resolved_merge';
+export interface ProjectManagementConflictQuery {
+    workRef?: WorkObjectRef;
+    limit?: number;
+    cursor?: string;
+}
+export interface ProjectManagementResolveConflictInput {
+    conflictId: string;
+    resolution: ProjectManagementConflictResolution;
+    mergedDraft?: ProjectManagementWorkDraft;
+    mutation?: WorkMutationEnvelope;
+}
+export interface ProjectManagementSyncInput {
+    mode: WorkSyncMode;
+    import?: ProjectManagementImportInput;
+    delta?: ProjectManagementDeltaPullInput;
+    webhook?: ProjectManagementWebhookIngestInput;
+    create?: ProjectManagementCreateInput[];
+    update?: ProjectManagementUpdateInput[];
+    archive?: ProjectManagementArchiveInput[];
+    restore?: ProjectManagementRestoreInput[];
+    delete?: ProjectManagementDeleteInput[];
+}
+export interface ProjectManagementSyncResult {
+    imported: ProjectManagementRemoteRecord[];
+    deltas: ProjectManagementDeltaEntry[];
+    mutations: ProjectManagementMutationResult[];
+    conflicts: ProjectManagementSyncConflict[];
+    checkpoint?: ProviderDeltaSyncState;
+}
+export interface ProjectManagementProvider {
+    getCapabilities(): ProjectManagementProviderCapabilities;
+    getRecord(lookup: ProjectManagementRecordLookup): Promise<ProjectManagementRemoteRecord | null>;
+    listRecords(query?: ProjectManagementListQuery): Promise<ProjectManagementImportPage>;
+    importRecords(input?: ProjectManagementImportInput): Promise<ProjectManagementImportPage>;
+    pullDeltas(input?: ProjectManagementDeltaPullInput): Promise<ProjectManagementDeltaPage>;
+    ingestWebhook(input: ProjectManagementWebhookIngestInput): Promise<ProjectManagementWebhookIngestResult>;
+    createRecord(input: ProjectManagementCreateInput): Promise<ProjectManagementMutationResult>;
+    updateRecord(input: ProjectManagementUpdateInput): Promise<ProjectManagementMutationResult>;
+    archiveRecord(input: ProjectManagementArchiveInput): Promise<ProjectManagementMutationResult>;
+    restoreRecord(input: ProjectManagementRestoreInput): Promise<ProjectManagementMutationResult>;
+    deleteRecord(input: ProjectManagementDeleteInput): Promise<ProjectManagementMutationResult>;
+    batchMutateRecords(input: ProjectManagementBatchMutationInput): Promise<ProjectManagementBatchMutationResult>;
+    listConflicts(query?: ProjectManagementConflictQuery): Promise<ProjectManagementSyncConflict[]>;
+    resolveConflict(input: ProjectManagementResolveConflictInput): Promise<ProjectManagementSyncConflict>;
+    syncRecords(input: ProjectManagementSyncInput): Promise<ProjectManagementSyncResult>;
+}
+export declare function unsupportedProjectManagementCapability(providerName: string, capability: ProjectManagementProviderCapability): Error;
+export declare function requireProjectManagementMutationRecord(result: ProjectManagementMutationResult, context: string): ProjectManagementRemoteRecord;

package/dist/integrations/providers/project-management.js

@@ -0,0 +1,2 @@
+// @bun
+function n(e,t){return Error(`${e} does not support project-management capability "${t}" on the Work Sync v2 contract.`)}function r(e,t){if(e.record)return e.record;throw Error(`${t} expected a ProjectManagementRemoteRecord but received mutation status "${e.status}".`)}export{r as requireProjectManagementMutationRecord,n as unsupportedProjectManagementCapability};

package/dist/integrations/providers/provider-delta.d.ts

@@ -0,0 +1,45 @@
+export interface ProviderDeltaLease {
+    holder: string;
+    acquiredAt?: string | Date;
+    expiresAt: string | Date;
+    renewalWindowMs: number;
+}
+export interface ProviderDeltaCursor {
+    cursorId?: string;
+    cursor?: string;
+    watermark?: string;
+    watermarkVersion?: string;
+}
+export interface ProviderDeltaWebhookChannel {
+    channelId: string;
+    resourceId?: string;
+    resourceUri?: string;
+    expiresAt: string | Date;
+}
+export interface ProviderDeltaReplayCheckpoint {
+    checkpointId: string;
+    sequence?: string | number;
+    createdAt?: string | Date;
+}
+export interface ProviderDeltaTombstone {
+    deletedAt: string | Date;
+    reason?: string;
+    providerRevision?: string;
+}
+export interface ProviderDeltaSyncState {
+    lease?: ProviderDeltaLease;
+    cursor?: ProviderDeltaCursor;
+    webhookChannel?: ProviderDeltaWebhookChannel;
+    providerEventId?: string;
+    dedupeKey?: string;
+    idempotencyKey?: string;
+    replayCheckpoint?: ProviderDeltaReplayCheckpoint;
+    tombstone?: ProviderDeltaTombstone;
+}
+export interface ProviderDeltaEnvelope<TPayload = unknown> {
+    providerKey: string;
+    sourceId: string;
+    payload: TPayload;
+    delta: ProviderDeltaSyncState;
+}
+export declare function isProviderDeltaTombstoned(delta: ProviderDeltaSyncState | undefined): boolean;

package/dist/integrations/providers/provider-delta.js

@@ -0,0 +1,2 @@
+// @bun
+function r(e){return Boolean(e?.tombstone)}export{r as isProviderDeltaTombstoned};

package/dist/integrations/providers/provider-delta.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/providers/provider-modes-coverage.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/providers/providers.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/providers/qdrant.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const qdrantIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerQdrantIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/qdrant.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as o}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as n}from"@lssm/lib.contracts-spec/registry";var i=(e)=>`${e.key}.v${e.version}`;class a extends n{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((r)=>r.meta.category===e)}}function c(e){return i(e)}var t=(e)=>e;var s=t({meta:{key:"vectordb.qdrant",version:"1.0.0",category:"vector-db",title:"Qdrant Vector Database",description:"Qdrant integration for vector search and embeddings storage.",domain:"ai",owners:["platform.ai"],tags:["vector-db","search"],stability:o.Experimental},supportedModes:["managed","byok"],transports:[{type:"rest"},{type:"sdk",packageName:"@qdrant/js-client-rest"}],preferredTransport:"rest",supportedAuthMethods:[{type:"api-key"},{type:"bearer"}],capabilities:{provides:[{key:"vector-db.search",version:"1.0.0"},{key:"vector-db.storage",version:"1.0.0"}],requires:[{key:"ai.embeddings",optional:!0,reason:"Required if vectors are generated via hosted embedding services"}]},configSchema:{schema:{type:"object",properties:{apiUrl:{type:"string",description:"Base URL for the Qdrant instance (e.g., https://qdrant.example.com)."},collectionPrefix:{type:"string",description:"Prefix applied to all collection names for this tenant."}}},example:{apiUrl:"https://qdrant.example.com",collectionPrefix:"tenant_"}},secretSchema:{schema:{type:"object",properties:{apiKey:{type:"string",description:"API key or token when authentication is enabled."}}},example:{apiKey:"qdrant-api-key"}},healthCheck:{method:"ping",timeoutMs:4000},docsUrl:"https://qdrant.tech/documentation/quick-start/",constraints:{quotas:{collections:100,pointsPerCollection:1e6}},byokSetup:{setupInstructions:"Provide the HTTPS endpoint of your Qdrant cluster and generate an API key with read/write access to the collections that will be managed.",keyRotationSupported:!0,quotaTrackingSupported:!0}});function y(e){return e.register(s)}export{s as qdrantIntegrationSpec,y as registerQdrantIntegration};

package/dist/integrations/providers/registry.d.ts

@@ -0,0 +1,24 @@
+import type { IntegrationAuthType } from '../auth.js';
+import { type IntegrationSpec, IntegrationSpecRegistry } from '../spec.js';
+import type { IntegrationTransportType } from '../transport.js';
+/**
+ * Creates a registry containing all IntegrationSpec providers shipped by
+ * `@lssm/lib.contracts-integrations`.
+ */
+export declare function createDefaultIntegrationSpecRegistry(): IntegrationSpecRegistry;
+/**
+ * Filter specs that support a given transport type.
+ */
+export declare function filterByTransport(specs: IntegrationSpec[], transport: IntegrationTransportType): IntegrationSpec[];
+/**
+ * Filter specs that support a given auth method.
+ */
+export declare function filterByAuthMethod(specs: IntegrationSpec[], method: IntegrationAuthType): IntegrationSpec[];
+/**
+ * Filter specs that have a version policy (API versioning support).
+ */
+export declare function filterVersioned(specs: IntegrationSpec[]): IntegrationSpec[];
+/**
+ * Filter specs that support BYOK with key rotation.
+ */
+export declare function filterByokRotatable(specs: IntegrationSpec[]): IntegrationSpec[];