@opengeni/capabilities 0.1.1 → 0.3.0-canary.0

package/dist/index.js

@@ -397,13 +397,13 @@ function compileGraphqlRevision(introspection, options) {
   return {
     id,
     protocol: "graphql",
-    integrationId: options.integrationId,
+    definitionId: options.definitionId,
     contentSha256,
     source: {
       url: options.sourceUrl ?? endpoint,
       ...options.provider ? { provider: options.provider } : {}
     },
-    title: options.name?.trim() || options.integrationId,
+    title: options.name?.trim() || options.definitionId,
     tools,
     bindings
   };
@@ -463,7 +463,7 @@ async function fetchGraphqlIntrospection(options) {
 var GraphqlMcpServer = class {
   constructor(options) {
     this.options = options;
-    this.name = `graphql:${stableToolId(options.revision.integrationId)}`;
+    this.name = `graphql:${stableToolId(options.revision.definitionId)}`;
   }
   cacheToolsList = true;
   useStructuredContent = true;
@@ -534,7 +534,7 @@ async function invokeGraphqlOperation(options, toolId, args, signal) {
   const request = { query, variables, operationName: binding.operationName };
   const firstCredential = await resolveGraphqlCredential(
     options,
-    options.revision.integrationId,
+    options.revision.definitionId,
     options.revision.id,
     toolId,
     false
@@ -543,7 +543,7 @@ async function invokeGraphqlOperation(options, toolId, args, signal) {
   if (response.status === 401 && options.credentialResolver && options.authority.connectionRef) {
     const refreshed = await resolveGraphqlCredential(
       options,
-      options.revision.integrationId,
+      options.revision.definitionId,
       options.revision.id,
       toolId,
       true
@@ -592,12 +592,12 @@ async function invokeGraphqlOperation(options, toolId, args, signal) {
     errors: graph.errors ?? null
   };
 }
-async function resolveGraphqlCredential(options, integrationId, revisionId, operationKey, forceRefresh) {
+async function resolveGraphqlCredential(options, definitionId, revisionId, operationKey, forceRefresh) {
   if (!options.credentialResolver || !options.authority.connectionRef) return null;
   const credential = await options.credentialResolver.resolve({
     ...options.authority,
     protocol: "graphql",
-    integrationId,
+    definitionId,
     revisionId,
     operationKey,
     destinationUrl: graphqlEndpoint(options).toString(),
@@ -619,6 +619,22 @@ async function sendGraphqlRequest(options, request, credential, signal) {
   headers.set("accept", "application/json");
   headers.set("content-type", "application/json");
   if (credential) applyCredentialPlacements(endpoint, headers, credential);
+  if (credential?.authorizeProviderRequest) {
+    let authorized = false;
+    try {
+      authorized = await credential.authorizeProviderRequest();
+    } catch {
+      authorized = false;
+    }
+    if (!authorized) {
+      throw new IntegrationInvocationError(
+        "authorization_rejected",
+        "The connected account is no longer authorized for this operation",
+        "not_started",
+        false
+      );
+    }
+  }
   return await fetchWithDeadline(
     options.transport,
     endpoint,
@@ -830,6 +846,63 @@ function basename(value) {
   return value?.trim().split(/[\\/]/).pop() ?? "";
 }
 
+// src/mcp-bridge.ts
+var LOCAL_MCP_BRIDGE_CONTRACT_VERSION = 1;
+function defineLocalMcpBridgeDescriptor(input) {
+  const adapterId = boundedIdentity(input.adapterId, "adapterId");
+  const providerId = boundedIdentity(input.providerId, "providerId");
+  const catalogIdentity = boundedIdentity(input.catalogIdentity, "catalogIdentity", 512);
+  if (input.destinations.length === 0 || input.destinations.length > 32) {
+    throw new Error("Local MCP bridge must declare 1-32 provider destinations");
+  }
+  const destinations = input.destinations.map((destination) => {
+    const url = new URL(destination.origin);
+    if (url.protocol !== "https:" || url.origin !== destination.origin) {
+      throw new Error("Local MCP bridge destinations must be exact HTTPS origins");
+    }
+    if (!destination.pathPrefix.startsWith("/") || destination.pathPrefix.includes("\\") || destination.pathPrefix.includes("?") || destination.pathPrefix.includes("#") || new URL(destination.pathPrefix, url.origin).pathname !== destination.pathPrefix) {
+      throw new Error("Local MCP bridge destination pathPrefix must be an absolute URL path");
+    }
+    return Object.freeze({ origin: url.origin, pathPrefix: destination.pathPrefix });
+  });
+  return Object.freeze({
+    contractVersion: LOCAL_MCP_BRIDGE_CONTRACT_VERSION,
+    adapterId,
+    providerId,
+    catalogIdentity,
+    transport: "in_process",
+    authority: input.authority,
+    toolSurface: input.toolSurface,
+    mutationReplay: input.mutationReplay,
+    destinations: Object.freeze(destinations)
+  });
+}
+function isLocalMcpBridgeServer(server) {
+  const bridge = server.bridge;
+  return bridge?.contractVersion === LOCAL_MCP_BRIDGE_CONTRACT_VERSION && bridge.transport === "in_process";
+}
+function createLocalMcpBridgeFromAdapters(adapters, config, context) {
+  const matches = adapters.filter((adapter2) => adapter2.matches(config));
+  if (matches.length === 0) return null;
+  if (matches.length > 1) {
+    throw new Error(
+      `Multiple local MCP bridge adapters matched: ${matches.map((entry) => entry.adapterId).join(", ")}`
+    );
+  }
+  const adapter = matches[0];
+  const server = adapter.create(config, context);
+  if (server.bridge.adapterId !== adapter.adapterId) {
+    throw new Error(`Local MCP bridge adapter ${adapter.adapterId} returned mismatched metadata`);
+  }
+  return server;
+}
+function boundedIdentity(value, name, max = 128) {
+  if (value.length === 0 || value.length > max || /[\u0000-\u001f\u007f]/u.test(value)) {
+    throw new Error(`Local MCP bridge ${name} is invalid`);
+  }
+  return value;
+}
+
 // src/openapi.ts
 import { load as parseYaml } from "js-yaml";
 var methods = /* @__PURE__ */ new Set([
@@ -947,13 +1020,13 @@ function compileOpenApiRevision(source, options) {
   return {
     id: revisionId,
     protocol: "openapi",
-    integrationId: options.integrationId,
+    definitionId: options.definitionId,
     contentSha256,
     source: {
       ...options.sourceUrl ? { url: options.sourceUrl } : {},
       ...options.provider ? { provider: options.provider } : {}
     },
-    title: stringValue(info.title) ?? options.integrationId,
+    title: stringValue(info.title) ?? options.definitionId,
     ...stringValue(info.description) ? { description: stringValue(info.description) } : {},
     ...stringValue(info.version) ? { version: stringValue(info.version) } : {},
     tools,
@@ -986,7 +1059,7 @@ function discoverOpenApiAuth(document) {
 var OpenApiMcpServer = class {
   constructor(options) {
     this.options = options;
-    this.name = `openapi:${stableToolId(options.revision.integrationId)}`;
+    this.name = `openapi:${stableToolId(options.revision.definitionId)}`;
   }
   cacheToolsList = true;
   useStructuredContent = true;
@@ -1103,7 +1176,7 @@ async function resolveOpenApiCredential(options, binding, toolId, args, forceRef
   const credential = await options.credentialResolver.resolve({
     ...options.authority,
     protocol: "openapi",
-    integrationId: options.revision.integrationId,
+    definitionId: options.revision.definitionId,
     revisionId: options.revision.id,
     operationKey: toolId,
     destinationUrl,
@@ -1125,6 +1198,22 @@ async function sendOpenApiRequest(options, binding, args, credential, signal) {
   const headers = buildOperationHeaders(binding, args);
   const body = buildOperationBody(binding, args, headers);
   if (credential) applyCredentialPlacements(url, headers, credential);
+  if (credential?.authorizeProviderRequest) {
+    let authorized = false;
+    try {
+      authorized = await credential.authorizeProviderRequest();
+    } catch {
+      authorized = false;
+    }
+    if (!authorized) {
+      throw new IntegrationInvocationError(
+        "authorization_rejected",
+        "The connected account is no longer authorized for this operation",
+        "not_started",
+        false
+      );
+    }
+  }
   return await fetchWithDeadline(
     options.transport,
     url,
@@ -1435,9 +1524,9 @@ function isRecord2(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 
-// src/providers.ts
-var accountIdentityFeature = (provider) => ({
-  featureKey: "account-identity",
+// src/integration-definitions.ts
+var accountIdentityFacet = (provider) => ({
+  facetKey: "account-identity",
   kind: "identity_link",
   configSchema: { type: "object", properties: {}, additionalProperties: false },
   capabilities: {
@@ -1446,8 +1535,8 @@ var accountIdentityFeature = (provider) => ({
     identity: "connected_account"
   }
 });
-var driveKnowledgeFeature = (provider) => ({
-  featureKey: "drive-content",
+var driveKnowledgeFacet = (provider) => ({
+  facetKey: "drive-content",
   kind: "knowledge_source",
   configSchema: {
     type: "object",
@@ -1501,9 +1590,9 @@ var driveKnowledgeFeature = (provider) => ({
     cursor: provider === "google-drive" ? "page_token" : "delta_link"
   }
 });
-var mailboxFeatures = (provider) => [
+var mailboxFacets = (provider) => [
   {
-    featureKey: "mail-inbox",
+    facetKey: "mail-inbox",
     kind: "inbound_trigger",
     configSchema: {
       type: "object",
@@ -1517,11 +1606,11 @@ var mailboxFeatures = (provider) => [
       provider,
       connectionRequired: true,
       delivery: "poll",
-      cursor: provider === "google-gmail" ? "history_id" : "delta_link"
+      cursor: "delta_link"
     }
   },
   {
-    featureKey: "mail-delivery",
+    facetKey: "mail-delivery",
     kind: "delivery_destination",
     configSchema: {
       type: "object",
@@ -1537,90 +1626,89 @@ var mailboxFeatures = (provider) => [
       delivery: "email"
     }
   },
-  accountIdentityFeature(provider === "google-gmail" ? "google" : "microsoft")
+  accountIdentityFacet("microsoft")
 ];
 var googleDiscoveryUrl = (service, version) => `https://www.googleapis.com/discovery/v1/apis/${service}/${version}/rest`;
 var googleOAuth = (scopes) => ({
+  kind: "oauth2",
+  provider: "google",
   authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
   tokenUrl: "https://oauth2.googleapis.com/token",
   scopes: ["openid", "email", "profile", ...scopes],
   tokenPlacement: { carrier: "header", name: "Authorization", prefix: "Bearer " }
 });
-var GOOGLE_DRIVE_PRESET = {
+var GOOGLE_DRIVE_INTEGRATION_DEFINITION = {
   id: "google-drive",
   name: "Google Drive",
   summary: "Files, folders, permissions, and shared drives.",
-  family: "google",
-  sourceFormat: "google-discovery",
-  sourceUrl: googleDiscoveryUrl("drive", "v3"),
+  protocol: "openapi",
+  provider: { id: "google", domain: "www.googleapis.com" },
+  source: { kind: "google_discovery", url: googleDiscoveryUrl("drive", "v3") },
   baseUrl: "https://www.googleapis.com/drive/v3/",
-  oauth: googleOAuth(["https://www.googleapis.com/auth/drive"]),
-  healthOperation: "drive.about.get",
-  healthArgs: { query: { fields: "user" } },
-  features: [driveKnowledgeFeature("google-drive"), accountIdentityFeature("google")]
-};
-var GOOGLE_GMAIL_PRESET = {
-  id: "google-gmail",
-  name: "Gmail",
-  summary: "Messages, threads, labels, drafts, and sending mail.",
-  family: "google",
-  sourceFormat: "google-discovery",
-  sourceUrl: googleDiscoveryUrl("gmail", "v1"),
-  baseUrl: "https://gmail.googleapis.com/",
-  oauth: googleOAuth(["https://mail.google.com/"]),
-  healthOperation: "gmail.users.labels.list",
-  healthArgs: { path: { userId: "me" } },
-  features: mailboxFeatures("google-gmail")
+  authentication: googleOAuth(["https://www.googleapis.com/auth/drive"]),
+  healthCheck: {
+    operationKey: "drive.about.get",
+    arguments: { query: { fields: "user" } }
+  },
+  facets: [driveKnowledgeFacet("google-drive"), accountIdentityFacet("google")]
 };
 var MICROSOFT_GRAPH_OPENAPI_URL = "https://raw.githubusercontent.com/microsoftgraph/msgraph-metadata/master/openapi/v1.0/openapi.yaml";
 var MICROSOFT_GRAPH_BASE_URL = "https://graph.microsoft.com/v1.0";
 var microsoftOAuth = (scopes) => ({
+  kind: "oauth2",
+  provider: "microsoft",
   authorizationUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
   tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
   scopes: ["offline_access", "User.Read", ...scopes],
   tokenPlacement: { carrier: "header", name: "Authorization", prefix: "Bearer " }
 });
-var MICROSOFT_OUTLOOK_MAIL_PRESET = {
+var MICROSOFT_OUTLOOK_MAIL_INTEGRATION_DEFINITION = {
   id: "microsoft-outlook-mail",
   name: "Outlook Mail",
   summary: "Messages, folders, attachments, settings, and sending mail.",
-  family: "microsoft",
-  sourceFormat: "openapi",
-  sourceUrl: MICROSOFT_GRAPH_OPENAPI_URL,
+  protocol: "openapi",
+  provider: { id: "microsoft", domain: "graph.microsoft.com" },
+  source: {
+    kind: "openapi",
+    url: MICROSOFT_GRAPH_OPENAPI_URL,
+    operationPathPrefixes: [
+      "/me/messages",
+      "/me/mailFolders",
+      "/me/sendMail",
+      "/me/getMailTips",
+      "/me/inferenceClassification",
+      "/me/mailboxSettings",
+      "/me/outlook"
+    ]
+  },
   baseUrl: MICROSOFT_GRAPH_BASE_URL,
-  oauth: microsoftOAuth(["Mail.ReadWrite", "Mail.Send", "MailboxSettings.ReadWrite"]),
-  pathPrefixes: [
-    "/me/messages",
-    "/me/mailFolders",
-    "/me/sendMail",
-    "/me/getMailTips",
-    "/me/inferenceClassification",
-    "/me/mailboxSettings",
-    "/me/outlook"
-  ],
-  features: mailboxFeatures("microsoft-outlook-mail")
+  authentication: microsoftOAuth(["Mail.ReadWrite", "Mail.Send", "MailboxSettings.ReadWrite"]),
+  facets: mailboxFacets("microsoft-outlook-mail")
 };
-var MICROSOFT_OUTLOOK_CALENDAR_PRESET = {
+var MICROSOFT_OUTLOOK_CALENDAR_INTEGRATION_DEFINITION = {
   id: "microsoft-outlook-calendar",
   name: "Outlook Calendar",
   summary: "Calendars, events, availability, and scheduling.",
-  family: "microsoft",
-  sourceFormat: "openapi",
-  sourceUrl: MICROSOFT_GRAPH_OPENAPI_URL,
+  protocol: "openapi",
+  provider: { id: "microsoft", domain: "graph.microsoft.com" },
+  source: {
+    kind: "openapi",
+    url: MICROSOFT_GRAPH_OPENAPI_URL,
+    operationPathPrefixes: [
+      "/me/calendar",
+      "/me/calendars",
+      "/me/calendarGroups",
+      "/me/calendarView",
+      "/me/events",
+      "/me/findMeetingTimes",
+      "/me/reminderView"
+    ]
+  },
   baseUrl: MICROSOFT_GRAPH_BASE_URL,
-  oauth: microsoftOAuth(["Calendars.ReadWrite"]),
-  pathPrefixes: [
-    "/me/calendar",
-    "/me/calendars",
-    "/me/calendarGroups",
-    "/me/calendarView",
-    "/me/events",
-    "/me/findMeetingTimes",
-    "/me/reminderView"
-  ],
-  features: [
+  authentication: microsoftOAuth(["Calendars.ReadWrite"]),
+  facets: [
     {
-      featureKey: "calendar-events",
+      facetKey: "calendar-events",
       kind: "inbound_trigger",
       configSchema: {
         type: "object",
@@ -1638,7 +1726,7 @@ var MICROSOFT_OUTLOOK_CALENDAR_PRESET = {
       }
     },
     {
-      featureKey: "calendar-delivery",
+      facetKey: "calendar-delivery",
       kind: "delivery_destination",
       configSchema: {
         type: "object",
@@ -1653,70 +1741,78 @@ var MICROSOFT_OUTLOOK_CALENDAR_PRESET = {
         delivery: "calendar_event"
       }
     },
-    accountIdentityFeature("microsoft")
+    accountIdentityFacet("microsoft")
   ]
 };
-var MICROSOFT_OUTLOOK_CONTACTS_PRESET = {
+var MICROSOFT_OUTLOOK_CONTACTS_INTEGRATION_DEFINITION = {
   id: "microsoft-outlook-contacts",
   name: "Outlook Contacts",
   summary: "Contacts, contact folders, and people suggestions.",
-  family: "microsoft",
-  sourceFormat: "openapi",
-  sourceUrl: MICROSOFT_GRAPH_OPENAPI_URL,
+  protocol: "openapi",
+  provider: { id: "microsoft", domain: "graph.microsoft.com" },
+  source: {
+    kind: "openapi",
+    url: MICROSOFT_GRAPH_OPENAPI_URL,
+    operationPathPrefixes: ["/me/contacts", "/me/contactFolders", "/me/people"]
+  },
   baseUrl: MICROSOFT_GRAPH_BASE_URL,
-  oauth: microsoftOAuth(["Contacts.ReadWrite", "People.Read.All"]),
-  pathPrefixes: ["/me/contacts", "/me/contactFolders", "/me/people"],
-  features: [accountIdentityFeature("microsoft")]
+  authentication: microsoftOAuth(["Contacts.ReadWrite", "People.Read.All"]),
+  facets: [accountIdentityFacet("microsoft")]
 };
-var MICROSOFT_ONEDRIVE_PRESET = {
+var MICROSOFT_ONEDRIVE_INTEGRATION_DEFINITION = {
   id: "microsoft-onedrive",
   name: "OneDrive",
   summary: "Drives, files, folders, sharing links, and permissions.",
-  family: "microsoft",
-  sourceFormat: "openapi",
-  sourceUrl: MICROSOFT_GRAPH_OPENAPI_URL,
+  protocol: "openapi",
+  provider: { id: "microsoft", domain: "graph.microsoft.com" },
+  source: {
+    kind: "openapi",
+    url: MICROSOFT_GRAPH_OPENAPI_URL,
+    operationPathPrefixes: ["/me/drive", "/me/drives", "/me/followedSites", "/drives", "/shares"]
+  },
   baseUrl: MICROSOFT_GRAPH_BASE_URL,
-  oauth: microsoftOAuth(["Files.ReadWrite.All", "Sites.ReadWrite.All"]),
-  pathPrefixes: ["/me/drive", "/me/drives", "/me/followedSites", "/drives", "/shares"],
-  features: [driveKnowledgeFeature("microsoft-onedrive"), accountIdentityFeature("microsoft")]
+  authentication: microsoftOAuth(["Files.ReadWrite.All", "Sites.ReadWrite.All"]),
+  facets: [driveKnowledgeFacet("microsoft-onedrive"), accountIdentityFacet("microsoft")]
 };
-var CORE_PROVIDER_PRESETS = [
-  GOOGLE_DRIVE_PRESET,
-  GOOGLE_GMAIL_PRESET,
-  MICROSOFT_OUTLOOK_MAIL_PRESET,
-  MICROSOFT_OUTLOOK_CALENDAR_PRESET,
-  MICROSOFT_OUTLOOK_CONTACTS_PRESET,
-  MICROSOFT_ONEDRIVE_PRESET
+var CORE_INTEGRATION_DEFINITIONS = [
+  GOOGLE_DRIVE_INTEGRATION_DEFINITION,
+  MICROSOFT_OUTLOOK_MAIL_INTEGRATION_DEFINITION,
+  MICROSOFT_OUTLOOK_CALENDAR_INTEGRATION_DEFINITION,
+  MICROSOFT_OUTLOOK_CONTACTS_INTEGRATION_DEFINITION,
+  MICROSOFT_ONEDRIVE_INTEGRATION_DEFINITION
 ];
-function providerPresetById(id) {
-  return CORE_PROVIDER_PRESETS.find((preset) => preset.id === id);
+function integrationDefinitionById(id) {
+  return CORE_INTEGRATION_DEFINITIONS.find((definition) => definition.id === id);
 }
-function providerDomainForPreset(preset) {
-  return new URL(preset.baseUrl).hostname.toLowerCase();
+function integrationDefinitionProviderDomain(definition) {
+  return definition.provider.domain;
 }
-function integrationFeaturesForPreset(presetId) {
-  return presetId ? providerPresetById(presetId)?.features ?? [] : [];
+function integrationFacetDefinitions(definitionId) {
+  return definitionId ? integrationDefinitionById(definitionId)?.facets ?? [] : [];
 }
-function filterOpenApiDocumentForPreset(document, preset) {
-  if (!preset.pathPrefixes?.length) return document;
+function filterOpenApiDocumentForDefinition(document, definition) {
+  if (definition.source.kind !== "openapi" || !definition.source.operationPathPrefixes?.length) {
+    return document;
+  }
+  const operationPathPrefixes = definition.source.operationPathPrefixes;
   if (!isRecord3(document.paths)) {
     throw new IntegrationProtocolError("openapi_paths", "OpenAPI document has no paths object");
   }
   const paths = Object.fromEntries(
     Object.entries(document.paths).filter(
-      ([path]) => preset.pathPrefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`))
+      ([path]) => operationPathPrefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`))
     )
   );
   if (Object.keys(paths).length === 0) {
     throw new IntegrationProtocolError(
-      "provider_preset_empty",
-      `${preset.name} did not match any operations in the supplied OpenAPI document`
+      "integration_definition_empty",
+      `${definition.name} did not match any operations in the supplied OpenAPI document`
     );
   }
   return {
     ...document,
     paths,
-    ...preset.baseUrl ? { servers: [{ url: preset.baseUrl }] } : {}
+    servers: [{ url: definition.baseUrl }]
   };
 }
 function googleDiscoveryToOpenApi(discovery) {
@@ -1796,9 +1892,7 @@ function collectGoogleMethods(document, value, paths) {
     const path = stringValue2(rawMethod.path);
     const httpMethod = stringValue2(rawMethod.httpMethod)?.toLowerCase();
     if (!path || !httpMethod) continue;
-    const parameters = Object.entries(
-      isRecord3(rawMethod.parameters) ? rawMethod.parameters : {}
-    ).flatMap(([name, rawParameter]) => {
+    const parameters = Object.entries(isRecord3(rawMethod.parameters) ? rawMethod.parameters : {}).sort(([left], [right]) => left.localeCompare(right)).flatMap(([name, rawParameter]) => {
       if (!isRecord3(rawParameter)) return [];
       const location = rawParameter.location === "path" ? "path" : "query";
       return [
@@ -1815,7 +1909,10 @@ function collectGoogleMethods(document, value, paths) {
     const responseRef = isRecord3(rawMethod.response) ? stringValue2(rawMethod.response.$ref) : void 0;
     const operation = {
       operationId: stringValue2(rawMethod.id) ?? fallbackId,
-      summary: stringValue2(rawMethod.description) ?? stringValue2(rawMethod.id) ?? fallbackId,
+      // Discovery descriptions are often full documentation paragraphs. Keep
+      // them as descriptions and use the stable method identity for the short
+      // OpenGeni tool display name.
+      summary: stringValue2(rawMethod.id) ?? fallbackId,
       description: stringValue2(rawMethod.description),
       parameters,
       responses: {
@@ -1894,23 +1991,174 @@ function stringValue2(value) {
 function isRecord3(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
+
+// src/integration-presentations.ts
+var INTEGRATION_DEFINITION_PRESENTATIONS = {
+  "google-drive": {
+    providerName: "Google",
+    icon: "files",
+    introduction: "Let agents work with files in the Google Drive account you choose.",
+    capabilities: [
+      {
+        title: "Find files and folders",
+        description: "Browse and search content in My Drive and shared drives."
+      },
+      {
+        title: "Create and update content",
+        description: "Work with files and folders through the reviewed Drive tools."
+      },
+      {
+        title: "Manage sharing",
+        description: "Review and update links, permissions, and shared-drive content."
+      }
+    ],
+    permissionSummary: "Google asks for access to the Drive account you approve, including files shared with that account.",
+    scopeLabels: {
+      "https://www.googleapis.com/auth/drive": {
+        label: "Work with Google Drive files",
+        description: "See, create, edit, organize, and share files available to this account."
+      }
+    }
+  },
+  "microsoft-outlook-mail": {
+    providerName: "Microsoft",
+    icon: "mail",
+    introduction: "Let agents work with mail in the Microsoft account you choose.",
+    capabilities: [
+      {
+        title: "Find and understand mail",
+        description: "Search messages, folders, and attachments for useful context."
+      },
+      {
+        title: "Draft and send messages",
+        description: "Prepare, update, and send mail through the reviewed Outlook tools."
+      },
+      {
+        title: "Manage mailbox settings",
+        description: "Work with supported folders, classifications, and mailbox preferences."
+      }
+    ],
+    permissionSummary: "Microsoft asks for mail and mailbox-setting access for the account you approve.",
+    scopeLabels: {
+      "Mail.ReadWrite": {
+        label: "Read and update mail",
+        description: "Work with messages, folders, and attachments in this mailbox."
+      },
+      "Mail.Send": {
+        label: "Send mail",
+        description: "Send messages as the connected Microsoft account."
+      },
+      "MailboxSettings.ReadWrite": {
+        label: "Manage mailbox settings",
+        description: "Read and update supported Outlook mailbox preferences."
+      }
+    }
+  },
+  "microsoft-outlook-calendar": {
+    providerName: "Microsoft",
+    icon: "calendar",
+    introduction: "Let agents help coordinate the calendars in your Microsoft account.",
+    capabilities: [
+      {
+        title: "Understand your schedule",
+        description: "Review calendars, events, availability, and reminders."
+      },
+      {
+        title: "Plan meetings",
+        description: "Find suitable times and coordinate calendar activity."
+      },
+      {
+        title: "Manage events",
+        description: "Create and update events through the reviewed calendar tools."
+      }
+    ],
+    permissionSummary: "Microsoft asks for permission to view and manage calendars for the account you approve.",
+    scopeLabels: {
+      "Calendars.ReadWrite": {
+        label: "View and manage calendars",
+        description: "Read, create, update, and organize calendar events."
+      }
+    }
+  },
+  "microsoft-outlook-contacts": {
+    providerName: "Microsoft",
+    icon: "contacts",
+    introduction: "Let agents work with contacts in your Microsoft account.",
+    capabilities: [
+      {
+        title: "Find people",
+        description: "Look up contacts and relevant people suggestions."
+      },
+      {
+        title: "Organize contacts",
+        description: "Work with contacts and contact folders."
+      },
+      {
+        title: "Keep details current",
+        description: "Create or update contact information through reviewed tools."
+      }
+    ],
+    permissionSummary: "Microsoft asks for contact access and people suggestions for the account you approve.",
+    scopeLabels: {
+      "Contacts.ReadWrite": {
+        label: "View and manage contacts",
+        description: "Read, create, update, and organize contacts and contact folders."
+      },
+      "People.Read.All": {
+        label: "Find relevant people",
+        description: "Use people suggestions available to the connected account."
+      }
+    }
+  },
+  "microsoft-onedrive": {
+    providerName: "Microsoft",
+    icon: "cloud",
+    introduction: "Let agents work with files in the Microsoft account you choose.",
+    capabilities: [
+      {
+        title: "Find files and folders",
+        description: "Browse drives, folders, shared items, and sites available to the account."
+      },
+      {
+        title: "Create and update content",
+        description: "Work with OneDrive and SharePoint files through reviewed tools."
+      },
+      {
+        title: "Manage sharing",
+        description: "Review and update sharing links and permissions."
+      }
+    ],
+    permissionSummary: "Microsoft asks for file and site access anywhere the connected account already has access.",
+    scopeLabels: {
+      "Files.ReadWrite.All": {
+        label: "Work with accessible files",
+        description: "Read, create, update, and organize files available to this account."
+      },
+      "Sites.ReadWrite.All": {
+        label: "Work with accessible sites",
+        description: "Read and update files in SharePoint sites available to this account."
+      }
+    }
+  }
+};
 export {
-  CORE_PROVIDER_PRESETS,
+  CORE_INTEGRATION_DEFINITIONS,
   DEFAULT_INTEGRATION_RESPONSE_BYTES,
   DEFAULT_INTEGRATION_TIMEOUT_MS,
-  GOOGLE_DRIVE_PRESET,
-  GOOGLE_GMAIL_PRESET,
+  GOOGLE_DRIVE_INTEGRATION_DEFINITION,
   GraphqlMcpServer,
+  INTEGRATION_DEFINITION_PRESENTATIONS,
   IntegrationInvocationError,
   IntegrationProtocolError,
+  LOCAL_MCP_BRIDGE_CONTRACT_VERSION,
   MAX_INTEGRATION_SPEC_BYTES,
   MAX_INTEGRATION_TOOLS,
   MICROSOFT_GRAPH_BASE_URL,
   MICROSOFT_GRAPH_OPENAPI_URL,
-  MICROSOFT_ONEDRIVE_PRESET,
-  MICROSOFT_OUTLOOK_CALENDAR_PRESET,
-  MICROSOFT_OUTLOOK_CONTACTS_PRESET,
-  MICROSOFT_OUTLOOK_MAIL_PRESET,
+  MICROSOFT_ONEDRIVE_INTEGRATION_DEFINITION,
+  MICROSOFT_OUTLOOK_CALENDAR_INTEGRATION_DEFINITION,
+  MICROSOFT_OUTLOOK_CONTACTS_INTEGRATION_DEFINITION,
+  MICROSOFT_OUTLOOK_MAIL_INTEGRATION_DEFINITION,
   OpenApiMcpServer,
   applyCredentialPlacements,
   assertCredentialAudience,
@@ -1918,8 +2166,10 @@ export {
   compileGraphqlRevision,
   compileOpenApiRevision,
   createGraphqlMcpServer,
+  createLocalMcpBridgeFromAdapters,
   createOpenApiMcpServer,
   createPinnedIntegrationTransport,
+  defineLocalMcpBridgeDescriptor,
   deriveMcpNamespace,
   directIntegrationTransport,
   discoverOpenApiAuth,
@@ -1927,15 +2177,16 @@ export {
   fetchGraphqlIntrospection,
   fetchIntegrationSourceDocument,
   fetchWithDeadline,
-  filterOpenApiDocumentForPreset,
+  filterOpenApiDocumentForDefinition,
   googleDiscoveryToOpenApi,
   immutableRevisionId,
-  integrationFeaturesForPreset,
+  integrationDefinitionById,
+  integrationDefinitionProviderDomain,
+  integrationFacetDefinitions,
   invokeGraphqlOperation,
   invokeOpenApiOperation,
+  isLocalMcpBridgeServer,
   parseOpenApiDocument,
-  providerDomainForPreset,
-  providerPresetById,
   readIntegrationResponse,
   sha256Hex,
   stableToolId,