@mondaydotcomorg/atp-server 0.18.5-rc.0 → 0.19.1

package/dist/aggregator/index.d.ts

@@ -44,6 +44,20 @@ export declare class APIAggregator {
      * @returns TypeScript type string
      */
     private jsonSchemaTypeToTS;
+    /**
+     * Converts a full JSON Schema to TypeScript interface properties
+     * @param schema - JSON Schema object
+     * @param depth - Current recursion depth (prevents infinite recursion)
+     * @returns TypeScript interface properties string
+     */
+    private jsonSchemaToTSInterface;
+    /**
+     * Converts any JSON Schema to a TypeScript type expression
+     * @param schema - JSON Schema object
+     * @param depth - Current recursion depth
+     * @returns TypeScript type expression
+     */
+    private schemaToTSType;
     /**
      * Helper to check if a string is a valid JavaScript identifier
      */

package/dist/aggregator/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/aggregator/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAqB,MAAM,+BAA+B,CAAC;AAEvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE;;;GAGG;AACH,qBAAa,aAAa;IACzB,OAAO,CAAC,SAAS,CAAmB;IAEpC;;;OAGG;gBACS,SAAS,EAAE,cAAc,EAAE;IAIvC;;;;OAIG;IACG,kBAAkB,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBpE;;;;OAIG;IACI,oBAAoB,CAAC,OAAO,CAAC,EAAE;QACrC,cAAc,CAAC,EAAE;YAChB,MAAM,EAAE,OAAO,CAAC;YAChB,WAAW,EAAE,OAAO,CAAC;YACrB,YAAY,EAAE,OAAO,CAAC;YACtB,QAAQ,EAAE,OAAO,CAAC;SAClB,CAAC;QACF,aAAa,CAAC,EAAE,cAAc,EAAE,CAAC;KACjC,GAAG,MAAM;IAIV;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAwB7B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAkB1B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAO1B;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAoE5B;;;OAGG;IACH,YAAY,IAAI,MAAM,EAAE;CAGxB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/aggregator/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAqB,MAAM,+BAA+B,CAAC;AAEvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE;;;GAGG;AACH,qBAAa,aAAa;IACzB,OAAO,CAAC,SAAS,CAAmB;IAEpC;;;OAGG;gBACS,SAAS,EAAE,cAAc,EAAE;IAIvC;;;;OAIG;IACG,kBAAkB,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBpE;;;;OAIG;IACI,oBAAoB,CAAC,OAAO,CAAC,EAAE;QACrC,cAAc,CAAC,EAAE;YAChB,MAAM,EAAE,OAAO,CAAC;YAChB,WAAW,EAAE,OAAO,CAAC;YACrB,YAAY,EAAE,OAAO,CAAC;YACtB,QAAQ,EAAE,OAAO,CAAC;SAClB,CAAC;QACF,aAAa,CAAC,EAAE,cAAc,EAAE,CAAC;KACjC,GAAG,MAAM;IAIV;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IA+B7B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAkB1B;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAgC/B;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAgDtB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAO1B;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAoE5B;;;OAGG;IACH,YAAY,IAAI,MAAM,EAAE;CAGxB"}

package/dist/aggregator/index.js

@@ -64,7 +64,13 @@ export class APIAggregator {
         }
         typescript += `}\n`;
         typescript += `\ninterface ${outputTypeName} {\n`;
-        typescript += `  [key: string]: unknown;\n`;
+        if (func.outputSchema) {
+            const outputType = this.jsonSchemaToTSInterface(func.outputSchema);
+            typescript += outputType;
+        }
+        else {
+            typescript += `  [key: string]: unknown;\n`;
+        }
         typescript += `}\n`;
         return typescript;
     }
@@ -90,6 +96,84 @@ export class APIAggregator {
                 return 'unknown';
         }
     }
+    /**
+     * Converts a full JSON Schema to TypeScript interface properties
+     * @param schema - JSON Schema object
+     * @param depth - Current recursion depth (prevents infinite recursion)
+     * @returns TypeScript interface properties string
+     */
+    jsonSchemaToTSInterface(schema, depth = 0) {
+        // Prevent infinite recursion
+        if (depth > 3) {
+            return '  [key: string]: unknown;\n';
+        }
+        // Handle array types - for arrays, we treat the interface as array-indexable
+        if (schema.type === 'array' && schema.items) {
+            const itemType = this.schemaToTSType(schema.items, depth + 1);
+            // Generate array-like interface
+            return `  [index: number]: ${itemType};\n  length: number;\n`;
+        }
+        // Handle object types with properties
+        if (schema.type === 'object' && schema.properties) {
+            const required = schema.required || [];
+            let result = '';
+            for (const [key, value] of Object.entries(schema.properties)) {
+                const prop = value;
+                const optional = required.includes(key) ? '' : '?';
+                const tsType = this.schemaToTSType(prop, depth + 1);
+                result += `  ${key}${optional}: ${tsType};\n`;
+            }
+            return result || '  [key: string]: unknown;\n';
+        }
+        // Fallback for simple types or unknown structures
+        return '  [key: string]: unknown;\n';
+    }
+    /**
+     * Converts any JSON Schema to a TypeScript type expression
+     * @param schema - JSON Schema object
+     * @param depth - Current recursion depth
+     * @returns TypeScript type expression
+     */
+    schemaToTSType(schema, depth = 0) {
+        if (!schema)
+            return 'unknown';
+        // Prevent infinite recursion
+        if (depth > 3) {
+            return 'unknown';
+        }
+        // Handle array types
+        if (schema.type === 'array') {
+            if (schema.items) {
+                const itemType = this.schemaToTSType(schema.items, depth + 1);
+                return `${itemType}[]`;
+            }
+            return 'unknown[]';
+        }
+        // Handle enum types
+        if (schema.enum) {
+            return schema.enum.map((v) => `"${v}"`).join(' | ') || 'string';
+        }
+        // Handle object types with properties
+        if (schema.type === 'object' && schema.properties) {
+            const required = schema.required || [];
+            const props = [];
+            for (const [key, value] of Object.entries(schema.properties)) {
+                const prop = value;
+                const optional = required.includes(key) ? '' : '?';
+                const tsType = this.schemaToTSType(prop, depth + 1);
+                props.push(`${key}${optional}: ${tsType}`);
+            }
+            if (props.length > 0) {
+                return `{ ${props.join('; ')} }`;
+            }
+            return 'Record<string, unknown>';
+        }
+        // Handle simple types
+        if (schema.type) {
+            return this.jsonSchemaTypeToTS(schema.type);
+        }
+        return 'unknown';
+    }
     /**
      * Helper to check if a string is a valid JavaScript identifier
      */

package/dist/aggregator/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/aggregator/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGxF;;;GAGG;AACH,MAAM,OAAO,aAAa;IACjB,SAAS,CAAmB;IAEpC;;;OAGG;IACH,YAAY,SAA2B;QACtC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,cAAyB;QACjD,MAAM,MAAM,GAAG,cAAc;YAC5B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;QAElB,IAAI,UAAU,GAAG,+CAA+C,CAAC;QAEjE,UAAU,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,UAAU,IAAI,mBAAmB,KAAK,CAAC,IAAI,IAAI,CAAC;YAChD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBACpC,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5D,CAAC;YACF,CAAC;QACF,CAAC;QAED,UAAU,IAAI,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAEhD,OAAO,UAAU,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACI,oBAAoB,CAAC,OAQ3B;QACA,OAAO,oBAAoB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,IAAuB,EAAE,SAAiB;QACvE,MAAM,aAAa,GAAG,GAAG,IAAI,CAAC,IAAI,QAAQ,CAAC;QAC3C,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,IAAI,SAAS,CAAC;QAE7C,IAAI,UAAU,GAAG,eAAe,aAAa,MAAM,CAAC;QACpD,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE,CAAC;YACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,GAAG,KAAgD,CAAC;gBAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;gBACnD,UAAU,IAAI,KAAK,GAAG,GAAG,QAAQ,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC;YAC7D,CAAC;QACF,CAAC;QACD,UAAU,IAAI,KAAK,CAAC;QAEpB,UAAU,IAAI,eAAe,cAAc,MAAM,CAAC;QAClD,UAAU,IAAI,6BAA6B,CAAC;QAC5C,UAAU,IAAI,KAAK,CAAC;QAEpB,OAAO,UAAU,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACK,kBAAkB,CAAC,IAAY;QACtC,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,QAAQ;gBACZ,OAAO,QAAQ,CAAC;YACjB,KAAK,QAAQ,CAAC;YACd,KAAK,SAAS;gBACb,OAAO,QAAQ,CAAC;YACjB,KAAK,SAAS;gBACb,OAAO,SAAS,CAAC;YAClB,KAAK,OAAO;gBACX,OAAO,WAAW,CAAC;YACpB,KAAK,QAAQ;gBACZ,OAAO,yBAAyB,CAAC;YAClC;gBACC,OAAO,SAAS,CAAC;QACnB,CAAC;IACF,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,IAAY;QACrC,OAAO,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,IAAY;QACtC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,IAAI,GAAG,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACK,oBAAoB,CAAC,MAAwB;QAMpD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;QAElD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAE/D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,OAAO,GAAG,UAAU,CAAC;YAEzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBAEvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC5D,CAAC;gBAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;gBAEhC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;gBACzC,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,CAAC;QACF,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,MAAgC,EAAE,MAAc,EAAU,EAAE;YAClF,IAAI,EAAE,GAAG,EAAE,CAAC;YAEZ,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACpD,EAAE,IAAI,GAAG,MAAM,GAAG,aAAa,OAAO,CAAC;gBAEvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnC,IAAI,CAAC,IAAI,CAAC,IAAI;wBAAE,SAAS;oBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACpD,MAAM,WAAW,GAChB,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;wBACvD,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;wBACxD,CAAC,CAAC,EAAE,CAAC;oBACP,EAAE,IAAI,GAAG,MAAM,UAAU,MAAM,QAAQ,WAAW,KAAK,MAAM,SAAS,CAAC;oBACvE,EAAE,IAAI,GAAG,MAAM,KAAK,QAAQ,YAAY,IAAI,CAAC,IAAI,oBAAoB,IAAI,CAAC,IAAI,aAAa,CAAC;gBAC7F,CAAC;gBAED,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;oBAC7B,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;gBACpD,CAAC;gBAED,EAAE,IAAI,GAAG,MAAM,MAAM,CAAC;YACvB,CAAC;YAED,OAAO,EAAE,CAAC;QACX,CAAC,CAAC;QAEF,IAAI,UAAU,GAAG,0BAA0B,CAAC;QAC5C,UAAU,IAAI,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC9C,UAAU,IAAI,MAAM,CAAC;QACrB,UAAU,IAAI,qBAAqB,CAAC;QAEpC,OAAO,UAAU,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,YAAY;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;CACD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/aggregator/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGxF;;;GAGG;AACH,MAAM,OAAO,aAAa;IACjB,SAAS,CAAmB;IAEpC;;;OAGG;IACH,YAAY,SAA2B;QACtC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,cAAyB;QACjD,MAAM,MAAM,GAAG,cAAc;YAC5B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;QAElB,IAAI,UAAU,GAAG,+CAA+C,CAAC;QAEjE,UAAU,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,UAAU,IAAI,mBAAmB,KAAK,CAAC,IAAI,IAAI,CAAC;YAChD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBACpC,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5D,CAAC;YACF,CAAC;QACF,CAAC;QAED,UAAU,IAAI,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAEhD,OAAO,UAAU,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACI,oBAAoB,CAAC,OAQ3B;QACA,OAAO,oBAAoB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,IAAuB,EAAE,SAAiB;QACvE,MAAM,aAAa,GAAG,GAAG,IAAI,CAAC,IAAI,QAAQ,CAAC;QAC3C,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,IAAI,SAAS,CAAC;QAE7C,IAAI,UAAU,GAAG,eAAe,aAAa,MAAM,CAAC;QACpD,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE,CAAC;YACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,GAAG,KAAgD,CAAC;gBAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;gBACnD,UAAU,IAAI,KAAK,GAAG,GAAG,QAAQ,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC;YAC7D,CAAC;QACF,CAAC;QACD,UAAU,IAAI,KAAK,CAAC;QAEpB,UAAU,IAAI,eAAe,cAAc,MAAM,CAAC;QAElD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACnE,UAAU,IAAI,UAAU,CAAC;QAC1B,CAAC;aAAM,CAAC;YACR,UAAU,IAAI,6BAA6B,CAAC;QAC5C,CAAC;QAED,UAAU,IAAI,KAAK,CAAC;QAEpB,OAAO,UAAU,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACK,kBAAkB,CAAC,IAAY;QACtC,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,QAAQ;gBACZ,OAAO,QAAQ,CAAC;YACjB,KAAK,QAAQ,CAAC;YACd,KAAK,SAAS;gBACb,OAAO,QAAQ,CAAC;YACjB,KAAK,SAAS;gBACb,OAAO,SAAS,CAAC;YAClB,KAAK,OAAO;gBACX,OAAO,WAAW,CAAC;YACpB,KAAK,QAAQ;gBACZ,OAAO,yBAAyB,CAAC;YAClC;gBACC,OAAO,SAAS,CAAC;QACnB,CAAC;IACF,CAAC;IAED;;;;;OAKG;IACK,uBAAuB,CAAC,MAAW,EAAE,KAAK,GAAG,CAAC;QACrD,6BAA6B;QAC7B,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACf,OAAO,6BAA6B,CAAC;QACtC,CAAC;QAED,6EAA6E;QAC7E,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9D,gCAAgC;YAChC,OAAO,sBAAsB,QAAQ,wBAAwB,CAAC;QAC/D,CAAC;QAED,sCAAsC;QACtC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;YACvC,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,GAAG,KAAY,CAAC;gBAC1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;gBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACpD,MAAM,IAAI,KAAK,GAAG,GAAG,QAAQ,KAAK,MAAM,KAAK,CAAC;YAC/C,CAAC;YAED,OAAO,MAAM,IAAI,6BAA6B,CAAC;QAChD,CAAC;QAED,kDAAkD;QAClD,OAAO,6BAA6B,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACK,cAAc,CAAC,MAAW,EAAE,KAAK,GAAG,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAE9B,6BAA6B;QAC7B,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACf,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,qBAAqB;QACrB,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC9D,OAAO,GAAG,QAAQ,IAAI,CAAC;YACxB,CAAC;YACD,OAAO,WAAW,CAAC;QACpB,CAAC;QAED,oBAAoB;QACpB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC;QACtE,CAAC;QAED,sCAAsC;QACtC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;YACvC,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,GAAG,KAAY,CAAC;gBAC1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;gBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACpD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,QAAQ,KAAK,MAAM,EAAE,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,CAAC;YACD,OAAO,yBAAyB,CAAC;QAClC,CAAC;QAED,sBAAsB;QACtB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,IAAY;QACrC,OAAO,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,IAAY;QACtC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,IAAI,GAAG,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACK,oBAAoB,CAAC,MAAwB;QAMpD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;QAElD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAE/D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,OAAO,GAAG,UAAU,CAAC;YAEzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBAEvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC5D,CAAC;gBAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;gBAEhC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;gBACzC,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,CAAC;QACF,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,MAAgC,EAAE,MAAc,EAAU,EAAE;YAClF,IAAI,EAAE,GAAG,EAAE,CAAC;YAEZ,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACpD,EAAE,IAAI,GAAG,MAAM,GAAG,aAAa,OAAO,CAAC;gBAEvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnC,IAAI,CAAC,IAAI,CAAC,IAAI;wBAAE,SAAS;oBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACpD,MAAM,WAAW,GAChB,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;wBACvD,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;wBACxD,CAAC,CAAC,EAAE,CAAC;oBACP,EAAE,IAAI,GAAG,MAAM,UAAU,MAAM,QAAQ,WAAW,KAAK,MAAM,SAAS,CAAC;oBACvE,EAAE,IAAI,GAAG,MAAM,KAAK,QAAQ,YAAY,IAAI,CAAC,IAAI,oBAAoB,IAAI,CAAC,IAAI,aAAa,CAAC;gBAC7F,CAAC;gBAED,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;oBAC7B,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;gBACpD,CAAC;gBAED,EAAE,IAAI,GAAG,MAAM,MAAM,CAAC;YACvB,CAAC;YAED,OAAO,EAAE,CAAC;QACX,CAAC,CAAC;QAEF,IAAI,UAAU,GAAG,0BAA0B,CAAC;QAC5C,UAAU,IAAI,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC9C,UAAU,IAAI,MAAM,CAAC;QACrB,UAAU,IAAI,qBAAqB,CAAC;QAEpC,OAAO,UAAU,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,YAAY;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;CACD"}

package/dist/create-server.d.ts

@@ -1,6 +1,7 @@
 import { IncomingMessage, ServerResponse } from 'node:http';
 import type { CacheProvider, AuthProvider, AuditSink, APIGroupConfig, ToolMetadata } from '@mondaydotcomorg/atp-protocol';
 import type { ICompiler } from '@mondaydotcomorg/atp-compiler';
+import { type DeclarativePolicyConfig, type SecurityPolicy } from '@mondaydotcomorg/atp-provenance';
 import type { ServerConfig, Middleware, RequestContext } from './core/config.js';
 import { ClientSessionManager } from './client-sessions.js';
 import { SandboxExecutor } from './executor/index.js';
@@ -15,6 +16,8 @@ export declare class AgentToolProtocolServer {
     private httpServer;
     private responseHeaders;
     private isRunning;
+    private policyRegistry;
+    private initPromise;
     sessionManager?: ClientSessionManager;
     executor?: SandboxExecutor;
     validator?: CodeValidator;
@@ -34,10 +37,46 @@ export declare class AgentToolProtocolServer {
     compiler?: ICompiler;
     private customLogger?;
     constructor(config?: ServerConfig);
+    /**
+     * Add a security policy (programmatic SecurityPolicy object)
+     * @example
+     * server.addPolicy(preventDataExfiltration);
+     */
+    addPolicy(policy: SecurityPolicy): this;
+    /**
+     * Add multiple security policies
+     */
+    addPolicies(policies: SecurityPolicy[]): this;
+    /**
+     * Load declarative policies from JSON configuration
+     * @example
+     * server.loadPolicies([{
+     *   id: 'block-llm-payments',
+     *   scope: { toolName: 'payment.*' },
+     *   rules: [{ action: 'block', conditions: [...] }]
+     * }]);
+     */
+    loadPolicies(configs: DeclarativePolicyConfig[], replace?: boolean): this;
+    /**
+     * Remove a policy by name
+     */
+    removePolicy(name: string): this;
+    /**
+     * Clear all policies
+     */
+    clearPolicies(): this;
+    /**
+     * Get all active policies
+     */
+    getPolicies(): SecurityPolicy[];
     /**
      * Register middleware or API groups.
-     * SECURITY: Cannot be called after server starts to prevent runtime injection attacks.
-     * @throws {Error} If called after listen() or handler()
+     * Can be called before OR after server starts.
+     * - Before start: Simply adds to configuration
+     * - After start: Dynamically updates running server components
+     *
+     * Note: Middleware can only be added before server starts.
+     * @throws {Error} If trying to add middleware after server has started
      */
     use(...items: (Middleware | APIGroupConfig | APIGroupConfig[])[]): this;
     /**
@@ -84,6 +123,11 @@ export declare class AgentToolProtocolServer {
         approved: boolean;
         data?: any;
     }>): this;
+    /**
+     * Initialize server components without starting HTTP server.
+     * Call this when using handler(), toExpress() or toFastify().
+     */
+    start(): Promise<void>;
     listen(port: number): Promise<void>;
     stop(): Promise<void>;
     getInfo(): unknown;
@@ -95,9 +139,29 @@ export declare class AgentToolProtocolServer {
     handleExplore(ctx: RequestContext): Promise<unknown>;
     handleExecute(ctx: RequestContext): Promise<unknown>;
     handleResume(ctx: RequestContext, executionId: string): Promise<unknown>;
+    /**
+     * Update server components with new API groups (internal method)
+     * @private
+     */
+    private updateComponentsWithNewGroups;
+    /**
+     * Load an OpenAPI spec and add it to the server
+     * Works both before and after server starts
+     * @param source - URL or file path to OpenAPI spec
+     * @param options - OpenAPI loading options
+     */
+    loadOpenAPI(source: string, options?: any): Promise<this>;
+    /**
+     * Load a GraphQL spec and add it to the server
+     * Works both before and after server starts
+     * @param source - URL or file path to GraphQL spec (SDL, introspection JSON, or endpoint URL)
+     * @param options - GraphQL loading options
+     */
+    loadGraphQL(source: string, options?: any): Promise<this>;
     /**
      * Get raw Node.js request handler for framework integration
      * Use this to integrate ATP with Express, Fastify, or any Node.js framework
+     * Components will be automatically initialized on first request if not already started.
      */
     handler(): (req: IncomingMessage, res: ServerResponse) => Promise<void>;
     /**

package/dist/create-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-server.d.ts","sourceRoot":"","sources":["../src/create-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC9F,OAAO,KAAK,EACX,aAAa,EACb,YAAY,EACZ,SAAS,EACT,cAAc,EAEd,YAAY,EACZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAK/D,OAAO,KAAK,EACX,YAAY,EACZ,UAAU,EACV,cAAc,EAEd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAkBtD,qBAAa,uBAAuB;IACnC,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,UAAU,CAAoB;IACtC,OAAO,CAAC,SAAS,CAAwB;IACzC,OAAO,CAAC,UAAU,CAAoD;IACtE,OAAO,CAAC,eAAe,CAAwD;IAC/E,OAAO,CAAC,SAAS,CAAkB;IACnC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE;QAC3B,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,GAAG,CAAC;KACd,KAAK,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC;IAEjD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,OAAO,CAAC,YAAY,CAAC,CAAM;gBAEf,MAAM,GAAE,YAAiB;IAkHrC;;;;OAIG;IACH,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,UAAU,GAAG,cAAc,GAAG,cAAc,EAAE,CAAC,EAAE,GAAG,IAAI;IAiBvE;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,IAAI,CACH,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,QAAQ,CAAC,EAAE,YAAY,CAAC;KACxB,GACC,IAAI;IAwBP;;;OAGG;IACH,UAAU,CACT,OAAO,EAAE,CAAC,OAAO,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,GAAG,CAAC;KACd,KAAK,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,GAC9C,IAAI;IAMD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsFnC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB3B,OAAO,IAAI,OAAO;IAQZ,cAAc,CAAC,GAAG,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBtD,qBAAqB,CAAC,GAAG,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IA8B5D,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAKjD,YAAY,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAKnD,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAKxD,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAKpD,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAcpD,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAc9E;;;OAGG;IACH,OAAO,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC;IAiCvE;;;;;OAKG;IACH,SAAS,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,KAAK,IAAI;IAOhF;;;;OAIG;IACH,SAAS,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC;IAShE;;;OAGG;IACH,OAAO,CAAC,gBAAgB;CAexB;AAED,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,uBAAuB,CAE3E"}
+{"version":3,"file":"create-server.d.ts","sourceRoot":"","sources":["../src/create-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC9F,OAAO,KAAK,EACX,aAAa,EACb,YAAY,EACZ,SAAS,EACT,cAAc,EAEd,YAAY,EACZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAK/D,OAAO,EAEN,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EACX,YAAY,EACZ,UAAU,EACV,cAAc,EAEd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAmBtD,qBAAa,uBAAuB;IACnC,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,UAAU,CAAoB;IACtC,OAAO,CAAC,SAAS,CAAwB;IACzC,OAAO,CAAC,UAAU,CAAoD;IACtE,OAAO,CAAC,eAAe,CAAwD;IAC/E,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,WAAW,CAA8B;IAEjD,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE;QAC3B,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,GAAG,CAAC;KACd,KAAK,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC;IAEjD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,OAAO,CAAC,YAAY,CAAC,CAAM;gBAEf,MAAM,GAAE,YAAiB;IAuHrC;;;;OAIG;IACH,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAMvC;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,IAAI;IAQ7C;;;;;;;;OAQG;IACH,YAAY,CAAC,OAAO,EAAE,uBAAuB,EAAE,EAAE,OAAO,UAAQ,GAAG,IAAI;IAMvE;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAMhC;;OAEG;IACH,aAAa,IAAI,IAAI;IAMrB;;OAEG;IACH,WAAW,IAAI,cAAc,EAAE;IAI/B;;;;;;;;OAQG;IACH,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,UAAU,GAAG,cAAc,GAAG,cAAc,EAAE,CAAC,EAAE,GAAG,IAAI;IAuCvE;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,IAAI,CACH,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,QAAQ,CAAC,EAAE,YAAY,CAAC;KACxB,GACC,IAAI;IAwBP;;;OAGG;IACH,UAAU,CACT,OAAO,EAAE,CAAC,OAAO,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,GAAG,CAAC;KACd,KAAK,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,GAC9C,IAAI;IAMP;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAyCtB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkDnC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB3B,OAAO,IAAI,OAAO;IAQZ,cAAc,CAAC,GAAG,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBtD,qBAAqB,CAAC,GAAG,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IA8B5D,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAKjD,YAAY,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAKnD,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAKxD,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAKpD,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAcpD,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAc9E;;;OAGG;IACH,OAAO,CAAC,6BAA6B;IAuCrC;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,GAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAcnE;;;;;OAKG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,GAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAWnE;;;;OAIG;IACH,OAAO,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC;IA2BvE;;;;;OAKG;IACH,SAAS,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,KAAK,IAAI;IAUhF;;;;OAIG;IACH,SAAS,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC;IAehE;;;OAGG;IACH,OAAO,CAAC,gBAAgB;CAexB;AAED,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,uBAAuB,CAE3E"}

package/dist/create-server.js

@@ -2,6 +2,7 @@ import { createServer as createHTTPServer } from 'node:http';
 import { ProvenanceMode } from '@mondaydotcomorg/atp-protocol';
 import { log, initializeLogger } from '@mondaydotcomorg/atp-runtime';
 import { shutdownLogger } from '@mondaydotcomorg/atp-runtime';
+import { DynamicPolicyRegistry, } from '@mondaydotcomorg/atp-provenance';
 import { MB, HOUR, MINUTE } from './core/config.js';
 import { ClientSessionManager } from './client-sessions.js';
 import { SandboxExecutor } from './executor/index.js';
@@ -21,6 +22,7 @@ import { getDefinitions } from './handlers/definitions.handler.js';
 import { shutdownAudit } from './middleware/audit.js';
 import { EnvAuthProvider, MemoryCache, OpenTelemetryAuditSink, } from '@mondaydotcomorg/atp-providers';
 import { APIAggregator } from './aggregator/index.js';
+import { loadGraphQL } from './graphql-loader.js';
 export class AgentToolProtocolServer {
     config;
     middleware = [];
@@ -28,6 +30,8 @@ export class AgentToolProtocolServer {
     httpServer = null;
     responseHeaders = new Map();
     isRunning = false;
+    policyRegistry;
+    initPromise = null;
     sessionManager;
     executor;
     validator;
@@ -41,13 +45,17 @@ export class AgentToolProtocolServer {
     compiler;
     customLogger;
     constructor(config = {}) {
+        // Initialize DynamicPolicyRegistry with policies from config
+        const initialPolicies = config.execution?.securityPolicies ?? [];
+        this.policyRegistry = new DynamicPolicyRegistry(initialPolicies);
         this.config = {
             execution: {
                 timeout: config.execution?.timeout ?? 30000,
                 memory: config.execution?.memory ?? 128 * MB,
                 llmCalls: config.execution?.llmCalls ?? 10,
                 provenanceMode: config.execution?.provenanceMode ?? ProvenanceMode.NONE,
-                securityPolicies: config.execution?.securityPolicies ?? [],
+                // Override policies to use the dynamic registry as the single entry point
+                securityPolicies: [this.policyRegistry],
             },
             clientInit: {
                 tokenTTL: config.clientInit?.tokenTTL ?? HOUR,
@@ -143,24 +151,102 @@ export class AgentToolProtocolServer {
             log.info('Custom compiler configured', { type: config.compiler.getType() });
         }
     }
+    /**
+     * Add a security policy (programmatic SecurityPolicy object)
+     * @example
+     * server.addPolicy(preventDataExfiltration);
+     */
+    addPolicy(policy) {
+        this.policyRegistry.addPolicy(policy);
+        log.info('Security policy added', { name: policy.name });
+        return this;
+    }
+    /**
+     * Add multiple security policies
+     */
+    addPolicies(policies) {
+        for (const policy of policies) {
+            this.policyRegistry.addPolicy(policy);
+        }
+        log.info('Security policies added', { count: policies.length });
+        return this;
+    }
+    /**
+     * Load declarative policies from JSON configuration
+     * @example
+     * server.loadPolicies([{
+     *   id: 'block-llm-payments',
+     *   scope: { toolName: 'payment.*' },
+     *   rules: [{ action: 'block', conditions: [...] }]
+     * }]);
+     */
+    loadPolicies(configs, replace = false) {
+        this.policyRegistry.loadFromConfigs(configs, replace);
+        log.info('Declarative policies loaded', { count: configs.length, replace });
+        return this;
+    }
+    /**
+     * Remove a policy by name
+     */
+    removePolicy(name) {
+        this.policyRegistry.removePolicy(name);
+        log.info('Security policy removed', { name });
+        return this;
+    }
+    /**
+     * Clear all policies
+     */
+    clearPolicies() {
+        this.policyRegistry.clear();
+        log.info('All security policies cleared');
+        return this;
+    }
+    /**
+     * Get all active policies
+     */
+    getPolicies() {
+        return this.policyRegistry.getPolicies();
+    }
     /**
      * Register middleware or API groups.
-     * SECURITY: Cannot be called after server starts to prevent runtime injection attacks.
-     * @throws {Error} If called after listen() or handler()
+     * Can be called before OR after server starts.
+     * - Before start: Simply adds to configuration
+     * - After start: Dynamically updates running server components
+     *
+     * Note: Middleware can only be added before server starts.
+     * @throws {Error} If trying to add middleware after server has started
      */
     use(...items) {
-        if (this.isRunning) {
-            throw new Error('Cannot add middleware or API groups after server has started. ');
-        }
+        const middlewareItems = [];
+        const apiGroupItems = [];
+        // Separate middleware from API groups
         for (const item of items) {
             if (Array.isArray(item)) {
-                this.apiGroups.push(...item);
+                apiGroupItems.push(...item);
             }
             else if (typeof item === 'function') {
-                this.middleware.push(item);
+                middlewareItems.push(item);
             }
             else if ('name' in item && 'type' in item) {
-                this.apiGroups.push(item);
+                apiGroupItems.push(item);
+            }
+        }
+        // Middleware can only be added before server starts
+        if (middlewareItems.length > 0) {
+            if (this.isRunning) {
+                throw new Error('Cannot add middleware after server has started. Add middleware before calling listen().');
+            }
+            this.middleware.push(...middlewareItems);
+        }
+        // API groups can be added anytime
+        if (apiGroupItems.length > 0) {
+            if (this.isRunning) {
+                // Server is running - update components dynamically
+                this.updateComponentsWithNewGroups(apiGroupItems);
+            }
+            else {
+                // Server not started yet - just add to array
+                this.apiGroups.push(...apiGroupItems);
             }
         }
         return this;
@@ -220,11 +306,13 @@ export class AgentToolProtocolServer {
         log.info('Approval handler configured');
         return this;
     }
-    async listen(port) {
-        if (this.httpServer) {
-            throw new Error('Server is already running');
-        }
-        this.isRunning = true;
+    /**
+     * Initialize server components without starting HTTP server.
+     * Call this when using handler(), toExpress() or toFastify().
+     */
+    async start() {
+        if (this.isRunning)
+            return;
         this.sessionManager = new ClientSessionManager({
             cache: this.cacheProvider,
             tokenTTL: this.config.clientInit.tokenTTL,
@@ -250,6 +338,13 @@ export class AgentToolProtocolServer {
             maxPauseDuration: this.config.executionState.maxPauseDuration,
             keyPrefix: this.config.executionState.keyPrefix,
         });
+        this.isRunning = true;
+    }
+    async listen(port) {
+        if (this.httpServer) {
+            throw new Error('Server is already running');
+        }
+        await this.start();
         this.httpServer = createHTTPServer((req, res) => {
             handleHTTPRequest(req, res, {
                 cacheProvider: this.cacheProvider,
@@ -381,29 +476,97 @@ export class AgentToolProtocolServer {
         }
         return await handleResume(ctx, executionId, this.executor, this.stateManager, this.config, this.sessionManager);
     }
+    /**
+     * Update server components with new API groups (internal method)
+     * @private
+     */
+    updateComponentsWithNewGroups(groups) {
+        // Add to apiGroups array
+        this.apiGroups.push(...groups);
+        // Update search engine with new groups
+        if (this.searchEngine) {
+            this.searchEngine = new SearchEngine(this.apiGroups);
+        }
+        // Update explorer service with new groups
+        if (this.explorerService) {
+            this.explorerService = new ExplorerService(this.apiGroups);
+        }
+        // Update executor with new groups
+        if (this.executor) {
+            this.executor = new SandboxExecutor({
+                defaultTimeout: this.config.execution.timeout,
+                maxTimeout: this.config.execution.timeout * 2,
+                defaultMemoryLimit: this.config.execution.memory,
+                maxMemoryLimit: this.config.execution.memory * 2,
+                defaultLLMCallLimit: this.config.execution.llmCalls,
+                maxLLMCallLimit: this.config.execution.llmCalls * 2,
+                cacheProvider: this.cacheProvider,
+            }, this.apiGroups, this.approvalHandler, this.sessionManager);
+        }
+        for (const group of groups) {
+            log.info(`  ✅ Dynamically loaded: ${group.name} (${group.functions?.length || 0} functions)`);
+        }
+    }
+    /**
+     * Load an OpenAPI spec and add it to the server
+     * Works both before and after server starts
+     * @param source - URL or file path to OpenAPI spec
+     * @param options - OpenAPI loading options
+     */
+    async loadOpenAPI(source, options = {}) {
+        const { loadOpenAPI: loadSpec } = await import('./openapi-loader.js');
+        log.info(`📚 Loading OpenAPI spec: ${options.name || 'API'} from ${source}`);
+        try {
+            const apiGroup = await loadSpec(source, options);
+            this.use(apiGroup);
+            return this;
+        }
+        catch (error) {
+            log.error(`❌ Failed to load OpenAPI spec: ${error.message}`);
+            throw error;
+        }
+    }
+    /**
+     * Load a GraphQL spec and add it to the server
+     * Works both before and after server starts
+     * @param source - URL or file path to GraphQL spec (SDL, introspection JSON, or endpoint URL)
+     * @param options - GraphQL loading options
+     */
+    async loadGraphQL(source, options = {}) {
+        try {
+            const apiGroup = await loadGraphQL(source, options);
+            this.use(apiGroup);
+            return this;
+        }
+        catch (error) {
+            log.error(`Failed to load GraphQL spec: ${error.message}`);
+            throw error;
+        }
+    }
     /**
      * Get raw Node.js request handler for framework integration
      * Use this to integrate ATP with Express, Fastify, or any Node.js framework
+     * Components will be automatically initialized on first request if not already started.
      */
     handler() {
-        if (!this.executor ||
-            !this.validator ||
-            !this.stateManager ||
-            !this.sessionManager ||
-            !this.searchEngine ||
-            !this.explorerService) {
-            throw new Error('Server not initialized. Call listen() first or initialize components manually.');
-        }
-        this.isRunning = true;
-        return (req, res) => handleHTTPRequest(req, res, {
-            cacheProvider: this.cacheProvider,
-            authProvider: this.authProvider,
-            auditSink: this.auditSink,
-            customLogger: this.customLogger,
-            middleware: this.middleware,
-            routeHandler: (ctx) => handleRoute(ctx, this),
-            sessionManager: this.sessionManager,
-        }, this.responseHeaders);
+        return async (req, res) => {
+            if (!this.isRunning && !this.initPromise) {
+                this.initPromise = this.start();
+            }
+            if (this.initPromise) {
+                await this.initPromise;
+                this.initPromise = null;
+            }
+            return handleHTTPRequest(req, res, {
+                cacheProvider: this.cacheProvider,
+                authProvider: this.authProvider,
+                auditSink: this.auditSink,
+                customLogger: this.customLogger,
+                middleware: this.middleware,
+                routeHandler: (ctx) => handleRoute(ctx, this),
+                sessionManager: this.sessionManager,
+            }, this.responseHeaders);
+        };
     }
     /**
      * Get Express middleware
@@ -414,7 +577,10 @@ export class AgentToolProtocolServer {
     toExpress() {
         const requestHandler = this.handler();
         return (req, res, next) => {
-            requestHandler(req, res).catch(next);
+            requestHandler(req, res).catch((error) => {
+                log.error('Express handler error:', error);
+                next(error);
+            });
         };
     }
     /**
@@ -427,6 +593,10 @@ export class AgentToolProtocolServer {
         return async (request, reply) => {
             const req = request.raw;
             const res = reply.raw;
+            const fastifyReq = request;
+            if (fastifyReq.body !== undefined) {
+                req.body = fastifyReq.body;
+            }
             await requestHandler(req, res);
         };
     }