@lssm/lib.contracts-integrations 9.0.1

package/dist/integrations/advertising/index.d.ts

@@ -0,0 +1,4 @@
+export * from './recipe.js';
+export * from './recipe-schema.js';
+export * from './specs.js';
+export * from './types.js';

package/dist/integrations/advertising/index.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as t}from"zod";import{z as i}from"zod";var p=i.enum(["meta","google","tiktok"]),g=i.enum(["campaign.create","campaign.update","campaign.status","campaign.list","campaign.read","adgroup.read","ad.read","assetgroup.read","adgroup.create","adgroup.update","adgroup.status","creative.create","ad.create","ad.update","ad.status","report.read","conversion.upload","conversion.adjust","google.mutate"]),s=i.string().trim().min(1).max(200),R=i.strictObject({platform:p,operation:g,tenantId:s,workspaceId:s,connectionRef:s,accountId:i.string().regex(/^\d{1,30}$/),apiVersion:i.string().regex(/^v\d+(?:\.\d+)?$/),resourceId:i.string().regex(/^\d{1,30}$/).optional(),idempotencyKey:s,planDigest:i.string().regex(/^sha256:[a-f0-9]{64}$/),payload:i.record(i.string(),i.json())}),h=["campaign.read","adgroup.read","ad.read","assetgroup.read","campaign.list","report.read"];var r=t.string().trim().min(1).max(200),c=t.string().regex(/^sha256:[a-f0-9]{64}$/),y=t.strictObject({id:r,tenantId:r,workspaceId:r,planDigest:c,idempotencyKey:t.string().min(1).max(140),platform:p,accountId:t.string().regex(/^\d{1,30}$/),connectionRef:r,apiVersion:t.string().regex(/^v\d+(?:\.\d+)?$/),steps:t.array(t.strictObject({id:t.string().min(1).max(50),operation:g,resourceId:t.union([t.string().regex(/^\d{1,30}$/),t.strictObject({$result:r,path:t.array(t.string().min(1)).min(1).max(10)})]).optional(),payload:t.record(t.string(),t.json())})).min(1).max(100)}),M=t.strictObject({recipe:y,recipeDigest:c,revision:t.number().int().positive(),steps:t.array(t.strictObject({id:r,state:t.enum(["pending","dispatching","accepted","unknown"]),response:t.strictObject({status:t.enum(["accepted","validated","read","unknown"]),requestDigest:c,data:t.json().nullable(),providerRequestRef:r.optional(),nextCursor:t.string().max(1e4).optional()}).optional()}))});function l({unsupportedModeReason:e,configFields:n,secretFields:d,rotationSupported:v=!1,setupSteps:m}){let o={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:v}};if(n)o.configFields=n;if(d)o.secretFields=d;if(m)o.setupSteps=m;return{modes:{byok:o},exempt:!0,exemptionReason:e}}import{SpecContractRegistry as f}from"@lssm/lib.contracts-spec/registry";var k=(e)=>`${e.key}.v${e.version}`;class I extends f{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((n)=>n.meta.category===e)}}function P(e){return k(e)}var u=(e)=>e;var a=[{key:"advertising.meta",title:"Meta Marketing API",url:"https://graph.facebook.com",docs:"https://developers.facebook.com/docs/marketing-api"},{key:"advertising.google",title:"Google Ads API",url:"https://googleads.googleapis.com",docs:"https://developers.google.com/google-ads/api/rest/examples"},{key:"advertising.tiktok",title:"TikTok Business API",url:"https://business-api.tiktok.com",docs:"https://business-api.tiktok.com/portal/docs"}].map((e)=>u({meta:{key:e.key,version:"1.0.0",title:e.title,description:"Scoped provider-native advertising mutations, reports and conversion delivery with exact authorization.",category:"analytics",domain:"marketing",owners:["@platform/marketing"],tags:["ads","marketing","conversions"],stability:"experimental"},supportedModes:["byok"],transports:[{type:"rest",baseUrl:e.url}],preferredTransport:"rest",supportedAuthMethods:e.key==="advertising.tiktok"?[{type:"header",headerName:"Access-Token"}]:[{type:"bearer",tokenField:"accessToken"}],credentialManifest:l({unsupportedModeReason:"Managed ad-account provisioning has not been qualified; ad accounts, API access, review and spend mandates are tenant-owned.",secretFields:[{key:"accessToken",required:!0},...e.key==="advertising.google"?[{key:"developerToken",required:!0}]:[]],rotationSupported:!1}),capabilities:{provides:[{key:"advertising.campaign.manage",version:"1.0.0"},{key:"advertising.reporting.read",version:"1.0.0"},{key:"advertising.conversion.upload",version:"1.0.0"},...e.key==="advertising.google"?[{key:"advertising.conversion.adjust",version:"1.0.0"}]:[]]},configSchema:{schema:{type:"object",properties:{accountId:{type:"string"},apiVersion:{type:"string"}},required:["accountId","apiVersion"]},example:{accountId:"123456789",apiVersion:e.key==="advertising.tiktok"?"v1.3":e.key==="advertising.google"?"v25":"v25.0"}},secretSchema:{schema:{type:"object",properties:{accessToken:{type:"string"},...e.key==="advertising.google"?{developerToken:{type:"string"}}:{}},required:["accessToken",...e.key==="advertising.google"?["developerToken"]:[]]},example:{accessToken:"example-token",...e.key==="advertising.google"?{developerToken:"example-developer-token"}:{}}},healthCheck:{method:"custom",timeoutMs:1e4},docsUrl:e.docs})),B=a[0],z=a[1],D=a[2];function V(e){for(let n of a)e.register(n);return e}export{g as AdvertisingOperationSchema,p as AdvertisingPlatformSchema,M as AdvertisingRecipeRecordSchema,y as AdvertisingRecipeSchema,R as AdvertisingRequestSchema,h as advertisingReadOperations,z as googleAdvertisingIntegrationSpec,B as metaAdvertisingIntegrationSpec,V as registerAdvertisingIntegrations,D as tiktokAdvertisingIntegrationSpec};

package/dist/integrations/advertising/recipe-schema.d.ts

@@ -0,0 +1,114 @@
+import { z } from 'zod';
+export declare const AdvertisingRecipeSchema: z.ZodObject<{
+    id: z.ZodString;
+    tenantId: z.ZodString;
+    workspaceId: z.ZodString;
+    planDigest: z.ZodString;
+    idempotencyKey: z.ZodString;
+    platform: z.ZodEnum<{
+        google: "google";
+        meta: "meta";
+        tiktok: "tiktok";
+    }>;
+    accountId: z.ZodString;
+    connectionRef: z.ZodString;
+    apiVersion: z.ZodString;
+    steps: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        operation: z.ZodEnum<{
+            "ad.create": "ad.create";
+            "ad.read": "ad.read";
+            "ad.status": "ad.status";
+            "ad.update": "ad.update";
+            "adgroup.create": "adgroup.create";
+            "adgroup.read": "adgroup.read";
+            "adgroup.status": "adgroup.status";
+            "adgroup.update": "adgroup.update";
+            "assetgroup.read": "assetgroup.read";
+            "campaign.create": "campaign.create";
+            "campaign.list": "campaign.list";
+            "campaign.read": "campaign.read";
+            "campaign.status": "campaign.status";
+            "campaign.update": "campaign.update";
+            "conversion.adjust": "conversion.adjust";
+            "conversion.upload": "conversion.upload";
+            "creative.create": "creative.create";
+            "google.mutate": "google.mutate";
+            "report.read": "report.read";
+        }>;
+        resourceId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            $result: z.ZodString;
+            path: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>]>>;
+        payload: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const AdvertisingRecipeRecordSchema: z.ZodObject<{
+    recipe: z.ZodObject<{
+        id: z.ZodString;
+        tenantId: z.ZodString;
+        workspaceId: z.ZodString;
+        planDigest: z.ZodString;
+        idempotencyKey: z.ZodString;
+        platform: z.ZodEnum<{
+            google: "google";
+            meta: "meta";
+            tiktok: "tiktok";
+        }>;
+        accountId: z.ZodString;
+        connectionRef: z.ZodString;
+        apiVersion: z.ZodString;
+        steps: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            operation: z.ZodEnum<{
+                "ad.create": "ad.create";
+                "ad.read": "ad.read";
+                "ad.status": "ad.status";
+                "ad.update": "ad.update";
+                "adgroup.create": "adgroup.create";
+                "adgroup.read": "adgroup.read";
+                "adgroup.status": "adgroup.status";
+                "adgroup.update": "adgroup.update";
+                "assetgroup.read": "assetgroup.read";
+                "campaign.create": "campaign.create";
+                "campaign.list": "campaign.list";
+                "campaign.read": "campaign.read";
+                "campaign.status": "campaign.status";
+                "campaign.update": "campaign.update";
+                "conversion.adjust": "conversion.adjust";
+                "conversion.upload": "conversion.upload";
+                "creative.create": "creative.create";
+                "google.mutate": "google.mutate";
+                "report.read": "report.read";
+            }>;
+            resourceId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                $result: z.ZodString;
+                path: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>]>>;
+            payload: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    recipeDigest: z.ZodString;
+    revision: z.ZodNumber;
+    steps: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        state: z.ZodEnum<{
+            accepted: "accepted";
+            dispatching: "dispatching";
+            pending: "pending";
+            unknown: "unknown";
+        }>;
+        response: z.ZodOptional<z.ZodObject<{
+            status: z.ZodEnum<{
+                accepted: "accepted";
+                read: "read";
+                unknown: "unknown";
+                validated: "validated";
+            }>;
+            requestDigest: z.ZodString;
+            data: z.ZodNullable<z.ZodJSONSchema>;
+            providerRequestRef: z.ZodOptional<z.ZodString>;
+            nextCursor: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;

package/dist/integrations/advertising/recipe-schema.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as e}from"zod";import{z as t}from"zod";var s=t.enum(["meta","google","tiktok"]),n=t.enum(["campaign.create","campaign.update","campaign.status","campaign.list","campaign.read","adgroup.read","ad.read","assetgroup.read","adgroup.create","adgroup.update","adgroup.status","creative.create","ad.create","ad.update","ad.status","report.read","conversion.upload","conversion.adjust","google.mutate"]),i=t.string().trim().min(1).max(200),p=t.strictObject({platform:s,operation:n,tenantId:i,workspaceId:i,connectionRef:i,accountId:t.string().regex(/^\d{1,30}$/),apiVersion:t.string().regex(/^v\d+(?:\.\d+)?$/),resourceId:t.string().regex(/^\d{1,30}$/).optional(),idempotencyKey:i,planDigest:t.string().regex(/^sha256:[a-f0-9]{64}$/),payload:t.record(t.string(),t.json())}),c=["campaign.read","adgroup.read","ad.read","assetgroup.read","campaign.list","report.read"];var r=e.string().trim().min(1).max(200),a=e.string().regex(/^sha256:[a-f0-9]{64}$/),o=e.strictObject({id:r,tenantId:r,workspaceId:r,planDigest:a,idempotencyKey:e.string().min(1).max(140),platform:s,accountId:e.string().regex(/^\d{1,30}$/),connectionRef:r,apiVersion:e.string().regex(/^v\d+(?:\.\d+)?$/),steps:e.array(e.strictObject({id:e.string().min(1).max(50),operation:n,resourceId:e.union([e.string().regex(/^\d{1,30}$/),e.strictObject({$result:r,path:e.array(e.string().min(1)).min(1).max(10)})]).optional(),payload:e.record(e.string(),e.json())})).min(1).max(100)}),v=e.strictObject({recipe:o,recipeDigest:a,revision:e.number().int().positive(),steps:e.array(e.strictObject({id:r,state:e.enum(["pending","dispatching","accepted","unknown"]),response:e.strictObject({status:e.enum(["accepted","validated","read","unknown"]),requestDigest:a,data:e.json().nullable(),providerRequestRef:r.optional(),nextCursor:e.string().max(1e4).optional()}).optional()}))});export{v as AdvertisingRecipeRecordSchema,o as AdvertisingRecipeSchema};

package/dist/integrations/advertising/recipe.d.ts

@@ -0,0 +1,53 @@
+import type { AdvertisingJson, AdvertisingProvider, AdvertisingRequest, AdvertisingResponse } from './types.js';
+export interface AdvertisingRecipe {
+    /** Compiled once by a trusted host from a reviewed MarketingExecutionPlan. */
+    id: string;
+    tenantId: string;
+    workspaceId: string;
+    planDigest: string;
+    idempotencyKey: string;
+    platform: AdvertisingRequest['platform'];
+    accountId: string;
+    connectionRef: string;
+    apiVersion: string;
+    /** Ordered steps can reference earlier responses using {$result: stepId, path: ['id']}. */
+    steps: {
+        id: string;
+        operation: AdvertisingRequest['operation'];
+        resourceId?: string | {
+            $result: string;
+            path: string[];
+        };
+        payload: Record<string, AdvertisingJson>;
+    }[];
+}
+export interface AdvertisingRecipeRecord {
+    recipe: AdvertisingRecipe;
+    recipeDigest: string;
+    revision: number;
+    steps: {
+        id: string;
+        state: 'pending' | 'dispatching' | 'accepted' | 'unknown';
+        response?: AdvertisingResponse;
+    }[];
+}
+export interface AdvertisingRecipeStore {
+    get(tenantId: string, workspaceId: string, idempotencyKey: string): Promise<AdvertisingRecipeRecord | undefined>;
+    reserve(record: AdvertisingRecipeRecord): Promise<AdvertisingRecipeRecord>;
+    /** Atomic CAS and immutable receipt history; only the winning worker may dispatch. */
+    save(record: AdvertisingRecipeRecord, expectedRevision: number): Promise<boolean>;
+}
+export interface AdvertisingRecipeAuthority {
+    /** Verify plan/recipe equivalence, native budget limits, all account/parent relationships and current rights. */
+    authorize(recipe: AdvertisingRecipe, recipeDigest: string): Promise<void>;
+}
+export interface AdvertisingRecipeReconciler {
+    /** Read-only provider lookup. Missing or ambiguous proof returns unknown, never permission to resubmit. */
+    reconcile(request: AdvertisingRequest, previous: AdvertisingResponse | undefined): Promise<AdvertisingResponse>;
+}
+export interface AdvertisingRecipeDependencies {
+    store: AdvertisingRecipeStore;
+    provider: AdvertisingProvider;
+    authority: AdvertisingRecipeAuthority;
+    reconciler: AdvertisingRecipeReconciler;
+}

package/dist/integrations/advertising/recipe.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/advertising/specs.d.ts

@@ -0,0 +1,5 @@
+import { type IntegrationSpecRegistry } from '../spec.js';
+export declare const metaAdvertisingIntegrationSpec: import("..").IntegrationSpec;
+export declare const googleAdvertisingIntegrationSpec: import("..").IntegrationSpec;
+export declare const tiktokAdvertisingIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerAdvertisingIntegrations(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/advertising/specs.js

@@ -0,0 +1,2 @@
+// @bun
+function a({unsupportedModeReason:e,configFields:t,secretFields:o,rotationSupported:p=!1,setupSteps:r}){let n={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:p}};if(t)n.configFields=t;if(o)n.secretFields=o;if(r)n.setupSteps=r;return{modes:{byok:n},exempt:!0,exemptionReason:e}}import{SpecContractRegistry as g}from"@lssm/lib.contracts-spec/registry";var c=(e)=>`${e.key}.v${e.version}`;class d extends g{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function y(e){return c(e)}var s=(e)=>e;var i=[{key:"advertising.meta",title:"Meta Marketing API",url:"https://graph.facebook.com",docs:"https://developers.facebook.com/docs/marketing-api"},{key:"advertising.google",title:"Google Ads API",url:"https://googleads.googleapis.com",docs:"https://developers.google.com/google-ads/api/rest/examples"},{key:"advertising.tiktok",title:"TikTok Business API",url:"https://business-api.tiktok.com",docs:"https://business-api.tiktok.com/portal/docs"}].map((e)=>s({meta:{key:e.key,version:"1.0.0",title:e.title,description:"Scoped provider-native advertising mutations, reports and conversion delivery with exact authorization.",category:"analytics",domain:"marketing",owners:["@platform/marketing"],tags:["ads","marketing","conversions"],stability:"experimental"},supportedModes:["byok"],transports:[{type:"rest",baseUrl:e.url}],preferredTransport:"rest",supportedAuthMethods:e.key==="advertising.tiktok"?[{type:"header",headerName:"Access-Token"}]:[{type:"bearer",tokenField:"accessToken"}],credentialManifest:a({unsupportedModeReason:"Managed ad-account provisioning has not been qualified; ad accounts, API access, review and spend mandates are tenant-owned.",secretFields:[{key:"accessToken",required:!0},...e.key==="advertising.google"?[{key:"developerToken",required:!0}]:[]],rotationSupported:!1}),capabilities:{provides:[{key:"advertising.campaign.manage",version:"1.0.0"},{key:"advertising.reporting.read",version:"1.0.0"},{key:"advertising.conversion.upload",version:"1.0.0"},...e.key==="advertising.google"?[{key:"advertising.conversion.adjust",version:"1.0.0"}]:[]]},configSchema:{schema:{type:"object",properties:{accountId:{type:"string"},apiVersion:{type:"string"}},required:["accountId","apiVersion"]},example:{accountId:"123456789",apiVersion:e.key==="advertising.tiktok"?"v1.3":e.key==="advertising.google"?"v25":"v25.0"}},secretSchema:{schema:{type:"object",properties:{accessToken:{type:"string"},...e.key==="advertising.google"?{developerToken:{type:"string"}}:{}},required:["accessToken",...e.key==="advertising.google"?["developerToken"]:[]]},example:{accessToken:"example-token",...e.key==="advertising.google"?{developerToken:"example-developer-token"}:{}}},healthCheck:{method:"custom",timeoutMs:1e4},docsUrl:e.docs})),f=i[0],h=i[1],v=i[2];function b(e){for(let t of i)e.register(t);return e}export{h as googleAdvertisingIntegrationSpec,f as metaAdvertisingIntegrationSpec,b as registerAdvertisingIntegrations,v as tiktokAdvertisingIntegrationSpec};

package/dist/integrations/advertising/types.d.ts

@@ -0,0 +1,97 @@
+import { z } from 'zod';
+export declare const AdvertisingPlatformSchema: z.ZodEnum<{
+    google: "google";
+    meta: "meta";
+    tiktok: "tiktok";
+}>;
+export declare const AdvertisingOperationSchema: z.ZodEnum<{
+    "ad.create": "ad.create";
+    "ad.read": "ad.read";
+    "ad.status": "ad.status";
+    "ad.update": "ad.update";
+    "adgroup.create": "adgroup.create";
+    "adgroup.read": "adgroup.read";
+    "adgroup.status": "adgroup.status";
+    "adgroup.update": "adgroup.update";
+    "assetgroup.read": "assetgroup.read";
+    "campaign.create": "campaign.create";
+    "campaign.list": "campaign.list";
+    "campaign.read": "campaign.read";
+    "campaign.status": "campaign.status";
+    "campaign.update": "campaign.update";
+    "conversion.adjust": "conversion.adjust";
+    "conversion.upload": "conversion.upload";
+    "creative.create": "creative.create";
+    "google.mutate": "google.mutate";
+    "report.read": "report.read";
+}>;
+export declare const AdvertisingRequestSchema: z.ZodObject<{
+    platform: z.ZodEnum<{
+        google: "google";
+        meta: "meta";
+        tiktok: "tiktok";
+    }>;
+    operation: z.ZodEnum<{
+        "ad.create": "ad.create";
+        "ad.read": "ad.read";
+        "ad.status": "ad.status";
+        "ad.update": "ad.update";
+        "adgroup.create": "adgroup.create";
+        "adgroup.read": "adgroup.read";
+        "adgroup.status": "adgroup.status";
+        "adgroup.update": "adgroup.update";
+        "assetgroup.read": "assetgroup.read";
+        "campaign.create": "campaign.create";
+        "campaign.list": "campaign.list";
+        "campaign.read": "campaign.read";
+        "campaign.status": "campaign.status";
+        "campaign.update": "campaign.update";
+        "conversion.adjust": "conversion.adjust";
+        "conversion.upload": "conversion.upload";
+        "creative.create": "creative.create";
+        "google.mutate": "google.mutate";
+        "report.read": "report.read";
+    }>;
+    tenantId: z.ZodString;
+    workspaceId: z.ZodString;
+    connectionRef: z.ZodString;
+    accountId: z.ZodString;
+    apiVersion: z.ZodString;
+    resourceId: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodString;
+    planDigest: z.ZodString;
+    payload: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+}, z.core.$strict>;
+export type AdvertisingRequest = z.infer<typeof AdvertisingRequestSchema>;
+export type AdvertisingJson = z.infer<ReturnType<typeof z.json>>;
+export interface AdvertisingResponse {
+    status: 'accepted' | 'validated' | 'read' | 'unknown';
+    requestDigest: string;
+    /** Safe selected provider data; paging URLs and credential-shaped fields are removed. */
+    data: AdvertisingJson | null;
+    providerRequestRef?: string;
+    nextCursor?: string;
+}
+export interface AdvertisingAuthority {
+    /** Independently verify the exact compiled request, plan, account ownership, API version, rights and budget constraints. */
+    authorize(request: AdvertisingRequest, requestDigest: string): Promise<{
+        receiptRef: string;
+    }>;
+}
+export interface AdvertisingCredentials {
+    /** Resolve only after authorization; bind the connection to tenant/workspace/account. */
+    resolve(request: AdvertisingRequest): Promise<{
+        accessToken: string;
+        developerToken?: string;
+        loginCustomerId?: string;
+    }>;
+}
+export interface AdvertisingTransportRequest {
+    url: string;
+    method: 'GET' | 'POST';
+    body?: string;
+}
+export interface AdvertisingProvider {
+    request(request: AdvertisingRequest): Promise<AdvertisingResponse>;
+}
+export declare const advertisingReadOperations: readonly ['campaign.read', 'adgroup.read', 'ad.read', 'assetgroup.read', 'campaign.list', 'report.read'];

package/dist/integrations/advertising/types.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as e}from"zod";var r=e.enum(["meta","google","tiktok"]),s=e.enum(["campaign.create","campaign.update","campaign.status","campaign.list","campaign.read","adgroup.read","ad.read","assetgroup.read","adgroup.create","adgroup.update","adgroup.status","creative.create","ad.create","ad.update","ad.status","report.read","conversion.upload","conversion.adjust","google.mutate"]),t=e.string().trim().min(1).max(200),a=e.strictObject({platform:r,operation:s,tenantId:t,workspaceId:t,connectionRef:t,accountId:e.string().regex(/^\d{1,30}$/),apiVersion:e.string().regex(/^v\d+(?:\.\d+)?$/),resourceId:e.string().regex(/^\d{1,30}$/).optional(),idempotencyKey:t,planDigest:e.string().regex(/^sha256:[a-f0-9]{64}$/),payload:e.record(e.string(),e.json())}),n=["campaign.read","adgroup.read","ad.read","assetgroup.read","campaign.list","report.read"];export{s as AdvertisingOperationSchema,r as AdvertisingPlatformSchema,a as AdvertisingRequestSchema,n as advertisingReadOperations};

package/dist/integrations/attio/events.d.ts

@@ -0,0 +1,4 @@
+import { type AnyEventSpec, EventRegistry } from '@lssm/lib.contracts-spec/events';
+export declare const attioWebhookEventNames: readonly ['call-recording.created', 'comment.created', 'comment.deleted', 'comment.resolved', 'comment.unresolved', 'list-attribute.created', 'list-attribute.updated', 'list-entry.created', 'list-entry.deleted', 'list-entry.updated', 'list.created', 'list.deleted', 'list.updated', 'note-content.updated', 'note.created', 'note.deleted', 'note.updated', 'object-attribute.created', 'object-attribute.updated', 'record.created', 'record.deleted', 'record.merged', 'record.updated', 'task.created', 'task.deleted', 'task.updated', 'workspace-member.created'];
+export declare const attioWebhookEvents: readonly AnyEventSpec[];
+export declare function registerAttioWebhookEvents(registry: EventRegistry): EventRegistry;

package/dist/integrations/attio/events.js

@@ -0,0 +1,2 @@
+// @bun
+import{defineEvent as i}from"@lssm/lib.contracts-spec/events";import{ScalarTypeEnum as r,SchemaModel as n}from"@lssm/lib.schema";var a=r.NonEmptyString(),s=r.JSONObject();function t(e,o){return new n({name:e,fields:{connectionId:{type:a,isOptional:!1},deliveryId:{type:a,isOptional:!1},eventId:{type:a,isOptional:!1},occurredAt:{type:r.DateTime(),isOptional:!1},...Object.fromEntries(o.map((d)=>[d,{type:a,isOptional:!1}])),payload:{type:s,isOptional:!1}}})}var c={"call-recording":t("AttioCallRecordingWebhookPayload",["callRecordingId"]),comment:t("AttioCommentWebhookPayload",["threadId","commentId"]),"list-attribute":t("AttioListAttributeWebhookPayload",["listId","attributeId"]),"list-entry":t("AttioListEntryWebhookPayload",["listId","entryId"]),list:t("AttioListWebhookPayload",["listId"]),"note-content":t("AttioNoteContentWebhookPayload",["noteId"]),note:t("AttioNoteWebhookPayload",["noteId"]),"object-attribute":t("AttioObjectAttributeWebhookPayload",["objectId","attributeId"]),record:t("AttioRecordWebhookPayload",["objectId","recordId"]),task:t("AttioTaskWebhookPayload",["taskId"]),"workspace-member":t("AttioWorkspaceMemberWebhookPayload",["workspaceMemberId"])},l=["call-recording.created","comment.created","comment.deleted","comment.resolved","comment.unresolved","list-attribute.created","list-attribute.updated","list-entry.created","list-entry.deleted","list-entry.updated","list.created","list.deleted","list.updated","note-content.updated","note.created","note.deleted","note.updated","object-attribute.created","object-attribute.updated","record.created","record.deleted","record.merged","record.updated","task.created","task.deleted","task.updated","workspace-member.created"];function m(e){let o=e.slice(0,e.lastIndexOf("."));return c[o]}var p=l.map((e)=>i({meta:{key:`gtm.attio.webhook.${e}`,version:"1.0.0",description:`Normalized Attio ${e} webhook delivery.`,stability:"stable",owners:["@platform.integrations"],tags:["crm","attio","webhook"]},pii:["payload"],payload:m(e)}));function u(e){return p.reduce((o,d)=>o.register(d),e)}export{l as attioWebhookEventNames,p as attioWebhookEvents,u as registerAttioWebhookEvents};

package/dist/integrations/attio/events.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/attio/index.d.ts

@@ -0,0 +1,2 @@
+export * from './events.js';
+export * from './operations.js';

package/dist/integrations/attio/index.js

@@ -0,0 +1,2 @@
+// @bun
+import{defineEvent as G}from"@lssm/lib.contracts-spec/events";import{ScalarTypeEnum as l,SchemaModel as T}from"@lssm/lib.schema";var d=l.NonEmptyString(),g=l.JSONObject();function a(e,o){return new T({name:e,fields:{connectionId:{type:d,isOptional:!1},deliveryId:{type:d,isOptional:!1},eventId:{type:d,isOptional:!1},occurredAt:{type:l.DateTime(),isOptional:!1},...Object.fromEntries(o.map((n)=>[n,{type:d,isOptional:!1}])),payload:{type:g,isOptional:!1}}})}var S={"call-recording":a("AttioCallRecordingWebhookPayload",["callRecordingId"]),comment:a("AttioCommentWebhookPayload",["threadId","commentId"]),"list-attribute":a("AttioListAttributeWebhookPayload",["listId","attributeId"]),"list-entry":a("AttioListEntryWebhookPayload",["listId","entryId"]),list:a("AttioListWebhookPayload",["listId"]),"note-content":a("AttioNoteContentWebhookPayload",["noteId"]),note:a("AttioNoteWebhookPayload",["noteId"]),"object-attribute":a("AttioObjectAttributeWebhookPayload",["objectId","attributeId"]),record:a("AttioRecordWebhookPayload",["objectId","recordId"]),task:a("AttioTaskWebhookPayload",["taskId"]),"workspace-member":a("AttioWorkspaceMemberWebhookPayload",["workspaceMemberId"])},E=["call-recording.created","comment.created","comment.deleted","comment.resolved","comment.unresolved","list-attribute.created","list-attribute.updated","list-entry.created","list-entry.deleted","list-entry.updated","list.created","list.deleted","list.updated","note-content.updated","note.created","note.deleted","note.updated","object-attribute.created","object-attribute.updated","record.created","record.deleted","record.merged","record.updated","task.created","task.deleted","task.updated","workspace-member.created"];function P(e){let o=e.slice(0,e.lastIndexOf("."));return S[o]}var w=E.map((e)=>G({meta:{key:`gtm.attio.webhook.${e}`,version:"1.0.0",description:`Normalized Attio ${e} webhook delivery.`,stability:"stable",owners:["@platform.integrations"],tags:["crm","attio","webhook"]},pii:["payload"],payload:P(e)}));function Q(e){return w.reduce((o,n)=>o.register(n),e)}import{defineCommand as q,defineQuery as C}from"@lssm/lib.contracts-spec/operations";import{ScalarTypeEnum as p,SchemaModel as i}from"@lssm/lib.schema";var s=p.JSONObject(),t=p.NonEmptyString(),c=new i({name:"GtmConnectionInput",fields:{connectionId:{type:t,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),_=new i({name:"GtmResourceInput",fields:{connectionId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!0},parentId:{type:t,isOptional:!0},cursor:{type:t,isOptional:!0},payload:{type:s,isOptional:!0},filters:{type:s,isOptional:!0},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),u=new i({name:"GtmCollectionInput",fields:{connectionId:{type:t,isOptional:!1},cursor:{type:t,isOptional:!0},filters:{type:s,isOptional:!0},correlationId:{type:t,isOptional:!0}}}),m=new i({name:"GtmResourceIdInput",fields:{connectionId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),f=new i({name:"GtmNestedResourceIdInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),y=new i({name:"GtmCreateInput",fields:{connectionId:{type:t,isOptional:!1},payload:{type:s,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),O=new i({name:"GtmNestedCreateInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},payload:{type:s,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),h=new i({name:"GtmUpdateInput",fields:{connectionId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},payload:{type:s,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),k=new i({name:"GtmNestedUpdateInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},payload:{type:s,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),I=new i({name:"GtmAttributeChildInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},childId:{type:t,isOptional:!0},payload:{type:s,isOptional:!0},correlationId:{type:t,isOptional:!0}}}),A=new i({name:"GtmNestedQueryInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},cursor:{type:t,isOptional:!0},filters:{type:s,isOptional:!0},correlationId:{type:t,isOptional:!0}}}),b=new i({name:"GtmResourceOutput",fields:{data:{type:s,isOptional:!1},nextCursor:{type:t,isOptional:!0},requestId:{type:t,isOptional:!0}}}),B=new i({name:"GtmWebhookInput",fields:{connectionId:{type:t,isOptional:!1},deliveryId:{type:t,isOptional:!0},headers:{type:s,isOptional:!1},payload:{type:s,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),F=new i({name:"GtmWebhookReceiptOutput",fields:{accepted:{type:p.Boolean(),isOptional:!1},duplicate:{type:p.Boolean(),isOptional:!1},receiptId:{type:t,isOptional:!1},verificationStatus:{type:t,isOptional:!1}}}),x=new i({name:"HostedMcpDescriptorOutput",fields:{descriptor:{type:s,isOptional:!1}}});var W="1.0.0",v=["@platform.integrations"],R=[{suffix:"objects.list",title:"List Attio objects",method:"GET",kind:"query"},{suffix:"objects.get",title:"Get an Attio object",method:"GET",kind:"query"},{suffix:"attributes.list",title:"List Attio attributes",method:"GET",kind:"query"},{suffix:"attributes.get",title:"Get an Attio attribute",method:"GET",kind:"query"},{suffix:"attributes.create",title:"Create an Attio attribute",method:"POST",kind:"command"},{suffix:"attributes.update",title:"Update an Attio attribute",method:"POST",kind:"command"},{suffix:"options.list",title:"List Attio select options",method:"GET",kind:"query"},{suffix:"options.create",title:"Create an Attio select option",method:"POST",kind:"command"},{suffix:"options.update",title:"Update an Attio select option",method:"POST",kind:"command"},{suffix:"options.delete",title:"Delete an Attio select option",method:"POST",kind:"command"},{suffix:"statuses.list",title:"List Attio statuses",method:"GET",kind:"query"},{suffix:"statuses.create",title:"Create an Attio status",method:"POST",kind:"command"},{suffix:"statuses.update",title:"Update an Attio status",method:"POST",kind:"command"},{suffix:"records.query",title:"Query Attio records",method:"POST",kind:"query"},{suffix:"records.get",title:"Get an Attio record",method:"GET",kind:"query"},{suffix:"records.create",title:"Create an Attio record",method:"POST",kind:"command"},{suffix:"records.update",title:"Update an Attio record",method:"POST",kind:"command"},{suffix:"records.delete",title:"Delete an Attio record",method:"POST",kind:"command"},{suffix:"records.assert",title:"Assert an Attio record",method:"POST",kind:"command"},{suffix:"lists.list",title:"List Attio lists",method:"GET",kind:"query"},{suffix:"lists.get",title:"Get an Attio list",method:"GET",kind:"query"},{suffix:"lists.create",title:"Create an Attio list",method:"POST",kind:"command"},{suffix:"lists.update",title:"Update an Attio list",method:"POST",kind:"command"},{suffix:"entries.query",title:"Query Attio list entries",method:"POST",kind:"query"},{suffix:"entries.get",title:"Get an Attio list entry",method:"GET",kind:"query"},{suffix:"entries.create",title:"Create an Attio list entry",method:"POST",kind:"command"},{suffix:"entries.update",title:"Update an Attio list entry",method:"POST",kind:"command"},{suffix:"entries.delete",title:"Delete an Attio list entry",method:"POST",kind:"command"},{suffix:"entries.assert",title:"Assert an Attio list entry",method:"POST",kind:"command"},{suffix:"workspace-members.list",title:"List Attio workspace members",method:"GET",kind:"query"},{suffix:"workspace-members.get",title:"Get an Attio workspace member",method:"GET",kind:"query"},{suffix:"notes.list",title:"List Attio notes",method:"GET",kind:"query"},{suffix:"notes.get",title:"Get an Attio note",method:"GET",kind:"query"},{suffix:"notes.create",title:"Create an Attio note",method:"POST",kind:"command"},{suffix:"notes.delete",title:"Delete an Attio note",method:"POST",kind:"command"},{suffix:"tasks.list",title:"List Attio tasks",method:"GET",kind:"query"},{suffix:"tasks.get",title:"Get an Attio task",method:"GET",kind:"query"},{suffix:"tasks.create",title:"Create an Attio task",method:"POST",kind:"command"},{suffix:"tasks.update",title:"Update an Attio task",method:"POST",kind:"command"},{suffix:"tasks.delete",title:"Delete an Attio task",method:"POST",kind:"command"},{suffix:"threads.list",title:"List Attio threads",method:"GET",kind:"query"},{suffix:"threads.get",title:"Get an Attio thread",method:"GET",kind:"query"},{suffix:"comments.create",title:"Create an Attio comment",method:"POST",kind:"command"},{suffix:"comments.delete",title:"Delete an Attio comment",method:"POST",kind:"command"},{suffix:"meetings.list",title:"List Attio meetings",method:"GET",kind:"query"},{suffix:"meetings.get",title:"Get an Attio meeting",method:"GET",kind:"query"},{suffix:"call-recordings.get",title:"Get an Attio call recording",method:"GET",kind:"query"},{suffix:"transcripts.get",title:"Get an Attio transcript",method:"GET",kind:"query"},{suffix:"files.get",title:"Get an Attio file",method:"GET",kind:"query"},{suffix:"webhooks.list",title:"List Attio webhooks",method:"GET",kind:"query"},{suffix:"webhooks.get",title:"Get an Attio webhook",method:"GET",kind:"query"},{suffix:"webhooks.create",title:"Create an Attio webhook",method:"POST",kind:"command"},{suffix:"webhooks.update",title:"Update an Attio webhook",method:"POST",kind:"command"},{suffix:"webhooks.delete",title:"Delete an Attio webhook",method:"POST",kind:"command"},{suffix:"meta.identify",title:"Identify the Attio token",method:"GET",kind:"query"},{suffix:"mcp.remote.describe",title:"Describe Attio hosted MCP",method:"GET",kind:"query",input:c,output:x}];function N(e){let o=`crm.attio.${e.suffix}`,n=e.kind==="query"?["read"]:e.suffix.endsWith(".delete")?["write","destructive","external-side-effect"]:["write","external-side-effect"],r={meta:{key:o,version:W,title:e.title,description:e.description??`${e.title} through the documented Attio public API.`,goal:e.title,context:"Uses a tenant-scoped Attio connection. Availability and scopes are checked through capability preflight.",owners:v,tags:["crm","attio","gtm"],stability:"experimental"},io:{input:e.input??D(e.suffix),output:e.output??b},policy:{auth:"user",policies:[],idempotent:e.kind==="query",escalate:e.kind==="command"?"human_review":null},execution:e.kind==="command"?{effects:n,approval:{required:!0,effects:n}}:{effects:n},transport:{rest:{method:e.method,path:`/api/contracts/${o}/v1.0.0`},mcp:{toolName:`${o.replaceAll(".","_")}-v1_0_0`}}};return e.kind==="command"?q(r):C(r)}function D(e){let o=e.split(".").at(-1)??"";if(e.startsWith("options.")||e.startsWith("statuses."))return I;let n=["attributes.","options.","statuses.","records.","entries.","comments.","call-recordings.","transcripts.","files."].some((r)=>e.startsWith(r));if(o==="list"||o==="query")return n?A:u;if(o==="get"||o==="delete")return n?f:m;if(o==="create"||o==="assert")return n?O:y;if(o==="update")return n?k:h;return c}var j=R.map(N);function X(e){return j.reduce((o,n)=>o.register(n),e)}export{j as attioOperations,E as attioWebhookEventNames,w as attioWebhookEvents,X as registerAttioOperations,Q as registerAttioWebhookEvents};

package/dist/integrations/attio/operations.d.ts

@@ -0,0 +1,4 @@
+import { type AnyOperationSpec } from '@lssm/lib.contracts-spec/operations';
+import type { OperationSpecRegistry } from '@lssm/lib.contracts-spec/operations/registry';
+export declare const attioOperations: readonly AnyOperationSpec[];
+export declare function registerAttioOperations(registry: OperationSpecRegistry): OperationSpecRegistry;

package/dist/integrations/attio/operations.js

@@ -0,0 +1,2 @@
+// @bun
+import{defineCommand as G,defineQuery as x}from"@lssm/lib.contracts-spec/operations";import{ScalarTypeEnum as r,SchemaModel as i}from"@lssm/lib.schema";var n=r.JSONObject(),t=r.NonEmptyString(),p=new i({name:"GtmConnectionInput",fields:{connectionId:{type:t,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),P=new i({name:"GtmResourceInput",fields:{connectionId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!0},parentId:{type:t,isOptional:!0},cursor:{type:t,isOptional:!0},payload:{type:n,isOptional:!0},filters:{type:n,isOptional:!0},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),d=new i({name:"GtmCollectionInput",fields:{connectionId:{type:t,isOptional:!1},cursor:{type:t,isOptional:!0},filters:{type:n,isOptional:!0},correlationId:{type:t,isOptional:!0}}}),l=new i({name:"GtmResourceIdInput",fields:{connectionId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),u=new i({name:"GtmNestedResourceIdInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),c=new i({name:"GtmCreateInput",fields:{connectionId:{type:t,isOptional:!1},payload:{type:n,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),m=new i({name:"GtmNestedCreateInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},payload:{type:n,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),f=new i({name:"GtmUpdateInput",fields:{connectionId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},payload:{type:n,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),y=new i({name:"GtmNestedUpdateInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},payload:{type:n,isOptional:!1},correlationId:{type:t,isOptional:!0},idempotencyKey:{type:t,isOptional:!0}}}),O=new i({name:"GtmAttributeChildInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},resourceId:{type:t,isOptional:!1},childId:{type:t,isOptional:!0},payload:{type:n,isOptional:!0},correlationId:{type:t,isOptional:!0}}}),h=new i({name:"GtmNestedQueryInput",fields:{connectionId:{type:t,isOptional:!1},parentId:{type:t,isOptional:!1},cursor:{type:t,isOptional:!0},filters:{type:n,isOptional:!0},correlationId:{type:t,isOptional:!0}}}),k=new i({name:"GtmResourceOutput",fields:{data:{type:n,isOptional:!1},nextCursor:{type:t,isOptional:!0},requestId:{type:t,isOptional:!0}}}),E=new i({name:"GtmWebhookInput",fields:{connectionId:{type:t,isOptional:!1},deliveryId:{type:t,isOptional:!0},headers:{type:n,isOptional:!1},payload:{type:n,isOptional:!1},correlationId:{type:t,isOptional:!0}}}),C=new i({name:"GtmWebhookReceiptOutput",fields:{accepted:{type:r.Boolean(),isOptional:!1},duplicate:{type:r.Boolean(),isOptional:!1},receiptId:{type:t,isOptional:!1},verificationStatus:{type:t,isOptional:!1}}}),I=new i({name:"HostedMcpDescriptorOutput",fields:{descriptor:{type:n,isOptional:!1}}});var A="1.0.0",T=["@platform.integrations"],S=[{suffix:"objects.list",title:"List Attio objects",method:"GET",kind:"query"},{suffix:"objects.get",title:"Get an Attio object",method:"GET",kind:"query"},{suffix:"attributes.list",title:"List Attio attributes",method:"GET",kind:"query"},{suffix:"attributes.get",title:"Get an Attio attribute",method:"GET",kind:"query"},{suffix:"attributes.create",title:"Create an Attio attribute",method:"POST",kind:"command"},{suffix:"attributes.update",title:"Update an Attio attribute",method:"POST",kind:"command"},{suffix:"options.list",title:"List Attio select options",method:"GET",kind:"query"},{suffix:"options.create",title:"Create an Attio select option",method:"POST",kind:"command"},{suffix:"options.update",title:"Update an Attio select option",method:"POST",kind:"command"},{suffix:"options.delete",title:"Delete an Attio select option",method:"POST",kind:"command"},{suffix:"statuses.list",title:"List Attio statuses",method:"GET",kind:"query"},{suffix:"statuses.create",title:"Create an Attio status",method:"POST",kind:"command"},{suffix:"statuses.update",title:"Update an Attio status",method:"POST",kind:"command"},{suffix:"records.query",title:"Query Attio records",method:"POST",kind:"query"},{suffix:"records.get",title:"Get an Attio record",method:"GET",kind:"query"},{suffix:"records.create",title:"Create an Attio record",method:"POST",kind:"command"},{suffix:"records.update",title:"Update an Attio record",method:"POST",kind:"command"},{suffix:"records.delete",title:"Delete an Attio record",method:"POST",kind:"command"},{suffix:"records.assert",title:"Assert an Attio record",method:"POST",kind:"command"},{suffix:"lists.list",title:"List Attio lists",method:"GET",kind:"query"},{suffix:"lists.get",title:"Get an Attio list",method:"GET",kind:"query"},{suffix:"lists.create",title:"Create an Attio list",method:"POST",kind:"command"},{suffix:"lists.update",title:"Update an Attio list",method:"POST",kind:"command"},{suffix:"entries.query",title:"Query Attio list entries",method:"POST",kind:"query"},{suffix:"entries.get",title:"Get an Attio list entry",method:"GET",kind:"query"},{suffix:"entries.create",title:"Create an Attio list entry",method:"POST",kind:"command"},{suffix:"entries.update",title:"Update an Attio list entry",method:"POST",kind:"command"},{suffix:"entries.delete",title:"Delete an Attio list entry",method:"POST",kind:"command"},{suffix:"entries.assert",title:"Assert an Attio list entry",method:"POST",kind:"command"},{suffix:"workspace-members.list",title:"List Attio workspace members",method:"GET",kind:"query"},{suffix:"workspace-members.get",title:"Get an Attio workspace member",method:"GET",kind:"query"},{suffix:"notes.list",title:"List Attio notes",method:"GET",kind:"query"},{suffix:"notes.get",title:"Get an Attio note",method:"GET",kind:"query"},{suffix:"notes.create",title:"Create an Attio note",method:"POST",kind:"command"},{suffix:"notes.delete",title:"Delete an Attio note",method:"POST",kind:"command"},{suffix:"tasks.list",title:"List Attio tasks",method:"GET",kind:"query"},{suffix:"tasks.get",title:"Get an Attio task",method:"GET",kind:"query"},{suffix:"tasks.create",title:"Create an Attio task",method:"POST",kind:"command"},{suffix:"tasks.update",title:"Update an Attio task",method:"POST",kind:"command"},{suffix:"tasks.delete",title:"Delete an Attio task",method:"POST",kind:"command"},{suffix:"threads.list",title:"List Attio threads",method:"GET",kind:"query"},{suffix:"threads.get",title:"Get an Attio thread",method:"GET",kind:"query"},{suffix:"comments.create",title:"Create an Attio comment",method:"POST",kind:"command"},{suffix:"comments.delete",title:"Delete an Attio comment",method:"POST",kind:"command"},{suffix:"meetings.list",title:"List Attio meetings",method:"GET",kind:"query"},{suffix:"meetings.get",title:"Get an Attio meeting",method:"GET",kind:"query"},{suffix:"call-recordings.get",title:"Get an Attio call recording",method:"GET",kind:"query"},{suffix:"transcripts.get",title:"Get an Attio transcript",method:"GET",kind:"query"},{suffix:"files.get",title:"Get an Attio file",method:"GET",kind:"query"},{suffix:"webhooks.list",title:"List Attio webhooks",method:"GET",kind:"query"},{suffix:"webhooks.get",title:"Get an Attio webhook",method:"GET",kind:"query"},{suffix:"webhooks.create",title:"Create an Attio webhook",method:"POST",kind:"command"},{suffix:"webhooks.update",title:"Update an Attio webhook",method:"POST",kind:"command"},{suffix:"webhooks.delete",title:"Delete an Attio webhook",method:"POST",kind:"command"},{suffix:"meta.identify",title:"Identify the Attio token",method:"GET",kind:"query"},{suffix:"mcp.remote.describe",title:"Describe Attio hosted MCP",method:"GET",kind:"query",input:p,output:I}];function b(e){let o=`crm.attio.${e.suffix}`,s=e.kind==="query"?["read"]:e.suffix.endsWith(".delete")?["write","destructive","external-side-effect"]:["write","external-side-effect"],a={meta:{key:o,version:A,title:e.title,description:e.description??`${e.title} through the documented Attio public API.`,goal:e.title,context:"Uses a tenant-scoped Attio connection. Availability and scopes are checked through capability preflight.",owners:T,tags:["crm","attio","gtm"],stability:"experimental"},io:{input:e.input??g(e.suffix),output:e.output??k},policy:{auth:"user",policies:[],idempotent:e.kind==="query",escalate:e.kind==="command"?"human_review":null},execution:e.kind==="command"?{effects:s,approval:{required:!0,effects:s}}:{effects:s},transport:{rest:{method:e.method,path:`/api/contracts/${o}/v1.0.0`},mcp:{toolName:`${o.replaceAll(".","_")}-v1_0_0`}}};return e.kind==="command"?G(a):x(a)}function g(e){let o=e.split(".").at(-1)??"";if(e.startsWith("options.")||e.startsWith("statuses."))return O;let s=["attributes.","options.","statuses.","records.","entries.","comments.","call-recordings.","transcripts.","files."].some((a)=>e.startsWith(a));if(o==="list"||o==="query")return s?h:d;if(o==="get"||o==="delete")return s?u:l;if(o==="create"||o==="assert")return s?m:c;if(o==="update")return s?y:f;return p}var q=S.map(b);function U(e){return q.reduce((o,s)=>o.register(s),e)}export{q as attioOperations,U as registerAttioOperations};

package/dist/integrations/attio/operations.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/auth-helpers.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Pure-function helpers for auth operations:
+ * - OAuth2 token refresh
+ * - Auth header construction
+ * - Webhook signature verification
+ */
+import type { IntegrationAuthConfig, OAuth2AuthConfig, OAuth2TokenState, WebhookSigningAuthConfig } from './auth.js';
+/**
+ * Refresh an OAuth2 access token using the refresh_token grant.
+ *
+ * @returns Updated token state with the new access (and optionally refresh) token.
+ * @throws When the token endpoint returns an error response.
+ */
+export declare function refreshOAuth2Token(config: OAuth2AuthConfig, currentState: OAuth2TokenState, clientCredentials: {
+    clientId: string;
+    clientSecret: string;
+}, fetchFn?: typeof globalThis.fetch): Promise<OAuth2TokenState>;
+/**
+ * Build an OAuth2 authorization URL for the authorization_code flow.
+ */
+export declare function buildOAuth2AuthorizationUrl(config: OAuth2AuthConfig, params: {
+    clientId: string;
+    redirectUri: string;
+    state: string;
+    codeChallenge?: string;
+    codeChallengeMethod?: string;
+}): string;
+/**
+ * Exchange an authorization code for tokens.
+ */
+export declare function exchangeOAuth2Code(config: OAuth2AuthConfig, params: {
+    code: string;
+    redirectUri: string;
+    clientId: string;
+    clientSecret: string;
+    codeVerifier?: string;
+}, fetchFn?: typeof globalThis.fetch): Promise<OAuth2TokenState>;
+/**
+ * Check whether an OAuth2 token state has expired (or will within bufferMs).
+ */
+export declare function isOAuth2TokenExpired(state: OAuth2TokenState, bufferMs?: number): boolean;
+/**
+ * Build HTTP headers for a given auth config + resolved secrets.
+ *
+ * @param method  The auth config from the spec/connection
+ * @param secrets Key-value secrets resolved from the secret store
+ */
+export declare function buildAuthHeaders(method: IntegrationAuthConfig, secrets: Record<string, string>): Record<string, string>;
+/**
+ * Verify an inbound webhook signature (HMAC-based).
+ *
+ * @returns true when the computed signature matches.
+ */
+export declare function verifyWebhookSignature(config: WebhookSigningAuthConfig, secret: string, payload: string | Uint8Array, receivedSignature: string): boolean;
+/**
+ * Validate an inbound webhook timestamp for replay protection.
+ */
+export declare function isWebhookTimestampValid(timestampHeader: string | undefined, toleranceMs?: number): boolean;

package/dist/integrations/auth-helpers.js

@@ -0,0 +1,2 @@
+// @bun
+import{hmacDigest as c}from"@lssm/lib.crypto-utils";async function k(t,e,r,n=globalThis.fetch){if(!e.refreshToken)throw Error("Cannot refresh: no refresh_token available.");let s=new URLSearchParams({grant_type:"refresh_token",refresh_token:e.refreshToken,client_id:r.clientId,client_secret:r.clientSecret});if(e.scope)s.set("scope",e.scope);let o=await n(t.tokenUrl,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:s.toString()});if(!o.ok){let a=await o.text().catch(()=>"");throw Error(`OAuth2 token refresh failed (${o.status}): ${a}`)}let i=await o.json();return{accessToken:String(i.access_token??""),refreshToken:typeof i.refresh_token==="string"?i.refresh_token:e.refreshToken,tokenType:String(i.token_type??"Bearer"),expiresAt:typeof i.expires_in==="number"?new Date(Date.now()+i.expires_in*1000).toISOString():void 0,scope:typeof i.scope==="string"?i.scope:e.scope,extra:i}}function A(t,e){if(!t.authorizationUrl)throw Error("OAuth2 config missing authorizationUrl.");let r=new URL(t.authorizationUrl);if(r.searchParams.set("response_type","code"),r.searchParams.set("client_id",e.clientId),r.searchParams.set("redirect_uri",e.redirectUri),r.searchParams.set("state",e.state),t.scopes.length>0)r.searchParams.set("scope",t.scopes.join(" "));if(e.codeChallenge)r.searchParams.set("code_challenge",e.codeChallenge),r.searchParams.set("code_challenge_method",e.codeChallengeMethod??"S256");return r.toString()}async function y(t,e,r=globalThis.fetch){let n=new URLSearchParams({grant_type:"authorization_code",code:e.code,redirect_uri:e.redirectUri,client_id:e.clientId,client_secret:e.clientSecret});if(e.codeVerifier)n.set("code_verifier",e.codeVerifier);let s=await r(t.tokenUrl,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:n.toString()});if(!s.ok){let i=await s.text().catch(()=>"");throw Error(`OAuth2 code exchange failed (${s.status}): ${i}`)}let o=await s.json();return{accessToken:String(o.access_token??""),refreshToken:typeof o.refresh_token==="string"?o.refresh_token:void 0,tokenType:String(o.token_type??"Bearer"),expiresAt:typeof o.expires_in==="number"?new Date(Date.now()+o.expires_in*1000).toISOString():void 0,scope:typeof o.scope==="string"?o.scope:void 0,extra:o}}function w(t,e=60000){if(!t.expiresAt)return!1;return new Date(t.expiresAt).getTime()-e<=Date.now()}function _(t,e){switch(t.type){case"api-key":return h(t,e);case"bearer":return u(t,e);case"header":return d(t,e);case"basic":return g(t,e);case"oauth2":return f(e);case"service-account":case"webhook-signing":case"x402":return{};default:return t}}function h(t,e){let r=e.apiKey??e.api_key??"";if(!r)return{};let n=t.headerName??"Authorization",s=t.prefix??"Bearer ";return{[n]:`${s}${r}`}}function u(t,e){let r=t.tokenField??"accessToken",n=e[r]??e.access_token??"";if(!n)return{};return{Authorization:`Bearer ${n}`}}function d(t,e){let r=e[t.headerName]??e.apiKey??"";if(!r)return{};let n=t.valuePrefix??"";return{[t.headerName]:`${n}${r}`}}function g(t,e){let r=e[t.usernameField??"username"]??"",n=e[t.passwordField??"password"]??"";if(!r)return{};return{Authorization:`Basic ${Buffer.from(`${r}:${n}`).toString("base64")}`}}function f(t){let e=t.accessToken??t.access_token??"";if(!e)return{};return{Authorization:`Bearer ${e}`}}function b(t,e,r,n){if(t.algorithm==="ed25519")throw Error("Ed25519 verification requires the `crypto.verify` API \u2014 use verifyEd25519WebhookSignature instead.");let s=t.algorithm==="hmac-sha256"?"sha256":"sha1",o=c(s,e,r,"hex"),i=n.includes("=")?n.split("=").pop()??n:n;return l(o,i)}function x(t,e=300000){if(!t)return!0;let r=Number(t);if(Number.isNaN(r))return!1;let n=r<1000000000000?r*1000:r;return Math.abs(Date.now()-n)<=e}function l(t,e){if(t.length!==e.length||t.length===0)return!1;let r=0;for(let n=0;n<t.length;n+=1)r|=t.charCodeAt(n)^e.charCodeAt(n);return r===0}export{_ as buildAuthHeaders,A as buildOAuth2AuthorizationUrl,y as exchangeOAuth2Code,w as isOAuth2TokenExpired,x as isWebhookTimestampValid,k as refreshOAuth2Token,b as verifyWebhookSignature};

package/dist/integrations/auth-helpers.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/auth.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Generic authentication abstraction for integration providers.
+ *
+ * Each IntegrationSpec declares which auth methods it supports
+ * and each IntegrationConnection stores the active auth method
+ * along with any runtime state (e.g. OAuth2 tokens).
+ */
+export type IntegrationAuthType = 'api-key' | 'oauth2' | 'bearer' | 'header' | 'basic' | 'webhook-signing' | 'service-account' | 'x402';
+export interface ApiKeyAuthConfig {
+    type: 'api-key';
+    /** HTTP header name to carry the key (default: Authorization). */
+    headerName?: string;
+    /** Query-parameter name when using URL-based key passing. */
+    queryParam?: string;
+    /** Value prefix (e.g. "Bearer ", "Api-Key "). */
+    prefix?: string;
+}
+export interface OAuth2AuthConfig {
+    type: 'oauth2';
+    grantType: 'authorization_code' | 'client_credentials' | 'refresh_token' | 'device_code';
+    /** Provider authorization endpoint (authorization_code flow). */
+    authorizationUrl?: string;
+    /** Provider token endpoint. */
+    tokenUrl: string;
+    /** Required OAuth scopes. */
+    scopes: string[];
+    /** Whether PKCE is required for the authorization_code flow. */
+    pkce?: boolean;
+    /** Token revocation endpoint. */
+    revocationUrl?: string;
+}
+export interface BearerAuthConfig {
+    type: 'bearer';
+    /** Secret-schema field name containing the token (default: accessToken). */
+    tokenField?: string;
+}
+export interface HeaderAuthConfig {
+    type: 'header';
+    /** Custom header name (e.g. X-Custom-Token). */
+    headerName: string;
+    /** Optional value prefix added before the secret value. */
+    valuePrefix?: string;
+}
+export interface BasicAuthConfig {
+    type: 'basic';
+    /** Secret-schema field name for the username (default: username). */
+    usernameField?: string;
+    /** Secret-schema field name for the password (default: password). */
+    passwordField?: string;
+}
+export interface WebhookSigningAuthConfig {
+    type: 'webhook-signing';
+    algorithm: 'hmac-sha256' | 'hmac-sha1' | 'ed25519';
+    /** Header carrying the inbound signature. */
+    signatureHeader: string;
+    /** Optional timestamp header for replay-attack protection. */
+    timestampHeader?: string;
+    /** Max age (ms) for timestamp tolerance (default: 300000). */
+    toleranceMs?: number;
+}
+export interface ServiceAccountAuthConfig {
+    type: 'service-account';
+    credentialFormat: 'json-key' | 'pem' | 'p12';
+    /** Secret-schema field name containing the credential payload. */
+    credentialField?: string;
+}
+export interface X402AuthConfig {
+    type: 'x402';
+    /** Chain/network identifiers accepted by the provider. */
+    networks?: string[];
+    /** Payment authorization is supplied by an injected authority port. */
+    authority: 'injected-payment-port';
+}
+export type IntegrationAuthConfig = ApiKeyAuthConfig | OAuth2AuthConfig | BearerAuthConfig | HeaderAuthConfig | BasicAuthConfig | WebhookSigningAuthConfig | ServiceAccountAuthConfig | X402AuthConfig;
+/**
+ * Runtime OAuth2 token state persisted alongside a connection.
+ */
+export interface OAuth2TokenState {
+    accessToken: string;
+    refreshToken?: string;
+    tokenType: string;
+    expiresAt?: string;
+    scope?: string;
+    /** Provider-specific extra fields returned alongside tokens. */
+    extra?: Record<string, unknown>;
+}
+/**
+ * Find a specific auth config from a list by type.
+ */
+export declare function findAuthConfig<T extends IntegrationAuthType>(methods: IntegrationAuthConfig[], type: T): Extract<IntegrationAuthConfig, {
+    type: T;
+}> | undefined;
+/**
+ * Check whether a given auth type is supported.
+ */
+export declare function supportsAuthMethod(methods: IntegrationAuthConfig[], type: IntegrationAuthType): boolean;

package/dist/integrations/auth.js

@@ -0,0 +1,2 @@
+// @bun
+function r(e,t){return e.find((n)=>n.type===t)}function i(e,t){return e.some((n)=>n.type===t)}export{r as findAuthConfig,i as supportsAuthMethod};

package/dist/integrations/auth.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/binding.d.ts

@@ -0,0 +1 @@
+export type { AppIntegrationBinding } from '@lssm/lib.contracts-spec/app-config';

package/dist/integrations/binding.js

@@ -0,0 +1 @@
+// @bun