@polpo-ai/connect 0.15.4

package/LICENSE

@@ -0,0 +1,13 @@
+Copyright 2026-present Lumea Labs
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/README.md

@@ -0,0 +1,15 @@
+# @polpo-ai/connect
+
+Shared contracts and client SDK for Polpo Connect.
+
+Polpo Connect models external service connections as scoped, revocable capabilities that can be assigned to agents without exposing raw access tokens to the model.
+
+This package contains:
+
+- connector provider definitions
+- connection and OAuth state types
+- scope normalization and validation helpers
+- connector registry helpers
+- a small HTTP client for Connect APIs
+
+Server-side OAuth/token lifecycle lives in `@polpo-ai/connect-server`.

package/dist/client/index.d.ts

@@ -0,0 +1,58 @@
+import type { ConnectSubject, ConnectionRecord, ConnectorProviderDefinition, RuntimeToken } from "../types.js";
+export interface PolpoConnectClientOptions {
+    baseUrl: string;
+    headers?: HeadersInit | (() => HeadersInit | Promise<HeadersInit>);
+    fetch?: typeof fetch;
+}
+export interface CreateApiKeyConnectionRequest {
+    providerId: string;
+    apiKey: string;
+    scopes?: string[];
+    subject?: ConnectSubject;
+    name?: string;
+    projectId?: string;
+    orgId?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface StartOAuthRequest {
+    providerId: string;
+    scopes?: string[];
+    subject?: ConnectSubject;
+    redirectUri: string;
+    projectId?: string;
+    orgId?: string;
+    connectionName?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface StartOAuthResponse {
+    authorizationUrl: string;
+    state: string;
+    expiresAt: string;
+}
+export interface CompleteOAuthRequest {
+    state: string;
+    code?: string;
+    error?: string;
+    errorDescription?: string;
+}
+export interface GetTokenRequest {
+    scopes?: string[];
+    subject?: ConnectSubject;
+    actionId?: string;
+    forceRefresh?: boolean;
+}
+export declare class PolpoConnectClient {
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    private readonly headers?;
+    constructor(options: PolpoConnectClientOptions);
+    listProviders(): Promise<ConnectorProviderDefinition[]>;
+    listConnections(): Promise<ConnectionRecord[]>;
+    createApiKeyConnection(input: CreateApiKeyConnectionRequest): Promise<ConnectionRecord>;
+    startOAuth(input: StartOAuthRequest): Promise<StartOAuthResponse>;
+    completeOAuth(input: CompleteOAuthRequest): Promise<ConnectionRecord>;
+    getToken(connectionId: string, input?: GetTokenRequest): Promise<RuntimeToken>;
+    revokeConnection(connectionId: string): Promise<ConnectionRecord>;
+    private request;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,2BAA2B,EAC3B,YAAY,EACb,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,WAAW,GAAG,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAuC;gBAEpD,OAAO,EAAE,yBAAyB;IAM9C,aAAa,IAAI,OAAO,CAAC,2BAA2B,EAAE,CAAC;IAIvD,eAAe,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAI9C,sBAAsB,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIvF,UAAU,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIjE,aAAa,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIrE,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,GAAE,eAAoB,GAAG,OAAO,CAAC,YAAY,CAAC;IAIlF,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAInD,OAAO;CAmBtB"}

package/dist/client/index.js

@@ -0,0 +1,59 @@
+import { ConnectError } from "../errors.js";
+export class PolpoConnectClient {
+    baseUrl;
+    fetchImpl;
+    headers;
+    constructor(options) {
+        this.baseUrl = options.baseUrl.replace(/\/+$/, "");
+        this.fetchImpl = options.fetch ?? fetch;
+        this.headers = options.headers;
+    }
+    listProviders() {
+        return this.request("GET", "/v1/connect/providers");
+    }
+    listConnections() {
+        return this.request("GET", "/v1/connect/connections");
+    }
+    createApiKeyConnection(input) {
+        return this.request("POST", "/v1/connect/connections/api-key", input);
+    }
+    startOAuth(input) {
+        return this.request("POST", "/v1/connect/oauth/start", input);
+    }
+    completeOAuth(input) {
+        return this.request("POST", "/v1/connect/oauth/callback", input);
+    }
+    getToken(connectionId, input = {}) {
+        return this.request("POST", `/v1/connect/connections/${encodeURIComponent(connectionId)}/token`, input);
+    }
+    revokeConnection(connectionId) {
+        return this.request("POST", `/v1/connect/connections/${encodeURIComponent(connectionId)}/revoke`);
+    }
+    async request(method, path, body) {
+        const dynamicHeaders = typeof this.headers === "function" ? await this.headers() : this.headers;
+        const headers = new Headers(dynamicHeaders);
+        if (body !== undefined)
+            headers.set("content-type", "application/json");
+        const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
+            method,
+            headers,
+            body: body === undefined ? undefined : JSON.stringify(body),
+        });
+        const text = await response.text();
+        const payload = text ? safeJson(text) : undefined;
+        if (!response.ok) {
+            const message = payload && typeof payload === "object" && "error" in payload ? String(payload.error) : response.statusText;
+            throw new ConnectError("http_error", message, { status: response.status, details: payload });
+        }
+        return payload;
+    }
+}
+function safeJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAwD5C,MAAM,OAAO,kBAAkB;IACZ,OAAO,CAAS;IAChB,SAAS,CAAe;IACxB,OAAO,CAAwC;IAEhE,YAAY,OAAkC;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACtD,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;IACxD,CAAC;IAED,sBAAsB,CAAC,KAAoC;QACzD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAC;IACxE,CAAC;IAED,UAAU,CAAC,KAAwB;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,aAAa,CAAC,KAA2B;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,4BAA4B,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;IAED,QAAQ,CAAC,YAAoB,EAAE,QAAyB,EAAE;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,2BAA2B,kBAAkB,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC1G,CAAC;IAED,gBAAgB,CAAC,YAAoB;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,2BAA2B,kBAAkB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACpG,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACnE,MAAM,cAAc,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAChG,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAC9D,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC5D,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC3H,MAAM,IAAI,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,OAAY,CAAC;IACtB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,12 @@
+export type ConnectErrorCode = "invalid_request" | "invalid_provider" | "invalid_scope" | "provider_not_found" | "unsupported_auth" | "connection_not_found" | "connection_revoked" | "secret_not_found" | "token_not_available" | "token_exchange_failed" | "oauth_state_not_found" | "oauth_state_expired" | "oauth_error" | "policy_denied" | "http_error";
+export declare class ConnectError extends Error {
+    readonly code: ConnectErrorCode;
+    readonly status: number;
+    readonly details?: unknown;
+    constructor(code: ConnectErrorCode, message: string, options?: {
+        status?: number;
+        details?: unknown;
+    });
+}
+export declare function isConnectError(error: unknown): error is ConnectError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACxB,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,oBAAoB,GACpB,kBAAkB,GAClB,sBAAsB,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,uBAAuB,GACvB,uBAAuB,GACvB,qBAAqB,GACrB,aAAa,GACb,eAAe,GACf,YAAY,CAAC;AAEjB,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEf,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO;CAO1G;AA4BD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE"}

package/dist/errors.js

@@ -0,0 +1,41 @@
+export class ConnectError extends Error {
+    code;
+    status;
+    details;
+    constructor(code, message, options = {}) {
+        super(message);
+        this.name = "ConnectError";
+        this.code = code;
+        this.status = options.status ?? defaultStatus(code);
+        this.details = options.details;
+    }
+}
+function defaultStatus(code) {
+    switch (code) {
+        case "invalid_request":
+        case "invalid_provider":
+        case "invalid_scope":
+        case "unsupported_auth":
+        case "oauth_error":
+            return 400;
+        case "connection_not_found":
+        case "provider_not_found":
+        case "oauth_state_not_found":
+        case "secret_not_found":
+            return 404;
+        case "connection_revoked":
+        case "oauth_state_expired":
+        case "policy_denied":
+            return 403;
+        case "token_exchange_failed":
+        case "token_not_available":
+        case "http_error":
+            return 502;
+        default:
+            return 500;
+    }
+}
+export function isConnectError(error) {
+    return error instanceof ConnectError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAiBA,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IACvB,MAAM,CAAS;IACf,OAAO,CAAW;IAE3B,YAAY,IAAsB,EAAE,OAAe,EAAE,UAAkD,EAAE;QACvG,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;CACF;AAED,SAAS,aAAa,CAAC,IAAsB;IAC3C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB,CAAC;QACvB,KAAK,kBAAkB,CAAC;QACxB,KAAK,eAAe,CAAC;QACrB,KAAK,kBAAkB,CAAC;QACxB,KAAK,aAAa;YAChB,OAAO,GAAG,CAAC;QACb,KAAK,sBAAsB,CAAC;QAC5B,KAAK,oBAAoB,CAAC;QAC1B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;QACb,KAAK,oBAAoB,CAAC;QAC1B,KAAK,qBAAqB,CAAC;QAC3B,KAAK,eAAe;YAClB,OAAO,GAAG,CAAC;QACb,KAAK,uBAAuB,CAAC;QAC7B,KAAK,qBAAqB,CAAC;QAC3B,KAAK,YAAY;YACf,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,YAAY,CAAC;AACvC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./errors.js";
+export * from "./registry.js";
+export * from "./scopes.js";
+export * from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export * from "./errors.js";
+export * from "./registry.js";
+export * from "./scopes.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/registry.d.ts

@@ -0,0 +1,10 @@
+import type { ConnectorProviderDefinition } from "./types.js";
+export interface ConnectorRegistry {
+    list(): ConnectorProviderDefinition[];
+    get(providerId: string): ConnectorProviderDefinition | undefined;
+    require(providerId: string): ConnectorProviderDefinition;
+    validateScopes(providerId: string, scopes?: readonly string[]): string[];
+}
+export declare function createConnectorRegistry(providers: readonly ConnectorProviderDefinition[]): ConnectorRegistry;
+export declare function validateProviderId(providerId: string): void;
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,IAAI,IAAI,2BAA2B,EAAE,CAAC;IACtC,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,2BAA2B,GAAG,SAAS,CAAC;IACjE,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,2BAA2B,CAAC;IACzD,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;CAC1E;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,SAAS,2BAA2B,EAAE,GAAG,iBAAiB,CA4B5G;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAI3D"}

package/dist/registry.js

@@ -0,0 +1,36 @@
+import { ConnectError } from "./errors.js";
+import { assertAllowedScopes } from "./scopes.js";
+export function createConnectorRegistry(providers) {
+    const byId = new Map();
+    for (const provider of providers) {
+        validateProviderId(provider.id);
+        if (byId.has(provider.id)) {
+            throw new ConnectError("invalid_provider", `Duplicate connector provider id: ${provider.id}`);
+        }
+        byId.set(provider.id, Object.freeze({ ...provider }));
+    }
+    return {
+        list() {
+            return [...byId.values()];
+        },
+        get(providerId) {
+            return byId.get(providerId);
+        },
+        require(providerId) {
+            const provider = byId.get(providerId);
+            if (!provider) {
+                throw new ConnectError("provider_not_found", `Unknown connector provider: ${providerId}`);
+            }
+            return provider;
+        },
+        validateScopes(providerId, scopes) {
+            return assertAllowedScopes(this.require(providerId), scopes);
+        },
+    };
+}
+export function validateProviderId(providerId) {
+    if (!/^[a-z0-9][a-z0-9_-]{1,63}$/.test(providerId)) {
+        throw new ConnectError("invalid_provider", `Invalid connector provider id: ${providerId}`);
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAUlD,MAAM,UAAU,uBAAuB,CAAC,SAAiD;IACvF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuC,CAAC;IAC5D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,oCAAoC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO;QACL,IAAI;YACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC;QACD,GAAG,CAAC,UAAU;YACZ,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,CAAC,UAAU;YAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,+BAA+B,UAAU,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,cAAc,CAAC,UAAU,EAAE,MAAM;YAC/B,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,kCAAkC,UAAU,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC"}

package/dist/scopes.d.ts

@@ -0,0 +1,6 @@
+import type { ConnectorProviderDefinition } from "./types.js";
+export declare function normalizeScopes(scopes: readonly string[] | undefined): string[];
+export declare function hasScopes(grantedScopes: readonly string[], requestedScopes: readonly string[]): boolean;
+export declare function assertAllowedScopes(provider: ConnectorProviderDefinition, scopes: readonly string[] | undefined): string[];
+export declare function assertGrantedScopes(grantedScopes: readonly string[], requestedScopes: readonly string[]): string[];
+//# sourceMappingURL=scopes.d.ts.map

package/dist/scopes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../src/scopes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAE9D,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAI/E;AAED,wBAAgB,SAAS,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,EAAE,eAAe,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAGvG;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,2BAA2B,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAa1H;AAED,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,EAAE,eAAe,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAUlH"}

package/dist/scopes.js

@@ -0,0 +1,36 @@
+import { ConnectError } from "./errors.js";
+export function normalizeScopes(scopes) {
+    if (!scopes?.length)
+        return [];
+    const normalized = scopes.map((scope) => scope.trim()).filter(Boolean);
+    return [...new Set(normalized)].sort((a, b) => a.localeCompare(b));
+}
+export function hasScopes(grantedScopes, requestedScopes) {
+    const granted = new Set(normalizeScopes(grantedScopes));
+    return normalizeScopes(requestedScopes).every((scope) => granted.has(scope));
+}
+export function assertAllowedScopes(provider, scopes) {
+    const normalized = normalizeScopes(scopes);
+    if (provider.allowCustomScopes)
+        return normalized;
+    const allowed = new Set((provider.scopes ?? []).map((scope) => scope.id));
+    const invalid = normalized.filter((scope) => !allowed.has(scope));
+    if (invalid.length > 0) {
+        throw new ConnectError("invalid_scope", `Provider "${provider.id}" does not allow scopes: ${invalid.join(", ")}`, {
+            details: { providerId: provider.id, invalidScopes: invalid },
+        });
+    }
+    return normalized;
+}
+export function assertGrantedScopes(grantedScopes, requestedScopes) {
+    const normalized = normalizeScopes(requestedScopes);
+    if (!hasScopes(grantedScopes, normalized)) {
+        const granted = new Set(normalizeScopes(grantedScopes));
+        const missing = normalized.filter((scope) => !granted.has(scope));
+        throw new ConnectError("invalid_scope", `Connection is missing required scopes: ${missing.join(", ")}`, {
+            details: { missingScopes: missing },
+        });
+    }
+    return normalized;
+}
+//# sourceMappingURL=scopes.js.map

package/dist/scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../src/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,MAAM,UAAU,eAAe,CAAC,MAAqC;IACnE,IAAI,CAAC,MAAM,EAAE,MAAM;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,aAAgC,EAAE,eAAkC;IAC5F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,OAAO,eAAe,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAqC,EAAE,MAAqC;IAC9G,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,iBAAiB;QAAE,OAAO,UAAU,CAAC;IAElD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,aAAa,QAAQ,CAAC,EAAE,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YAChH,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,aAAgC,EAAE,eAAkC;IACtG,MAAM,UAAU,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,0CAA0C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACtG,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,148 @@
+export type ConnectorAuthType = "api_key" | "oauth2" | "mcp";
+export type ConnectSubjectType = "user" | "project" | "org" | "agent" | "service";
+export interface ConnectSubject {
+    type: ConnectSubjectType;
+    id: string;
+}
+export interface ConnectorScopeDefinition {
+    id: string;
+    label?: string;
+    description?: string;
+    required?: boolean;
+    dangerous?: boolean;
+}
+export type ConnectorActionRisk = "read" | "write" | "admin";
+export interface ConnectorActionDefinition {
+    id: string;
+    label?: string;
+    description?: string;
+    scopes?: string[];
+    risk?: ConnectorActionRisk;
+    inputSchema?: unknown;
+    outputSchema?: unknown;
+    metadata?: Record<string, unknown>;
+}
+export interface ConnectorTriggerDefinition {
+    id: string;
+    label?: string;
+    description?: string;
+    scopes?: string[];
+    metadata?: Record<string, unknown>;
+}
+export interface ApiKeyAuthConfig {
+    type: "api_key";
+    headerName?: string;
+    queryParam?: string;
+    instructions?: string;
+    defaultScopes?: string[];
+}
+export interface OAuth2AuthConfig {
+    type: "oauth2";
+    authorizationUrl: string;
+    tokenUrl: string;
+    revokeUrl?: string;
+    clientId?: string;
+    clientSecret?: string;
+    defaultScopes?: string[];
+    supportsPkce?: boolean;
+    extraAuthorizeParams?: Record<string, string>;
+    extraTokenParams?: Record<string, string>;
+}
+export interface McpAuthConfig {
+    type: "mcp";
+    auth?: "none" | "bearer" | "oauth2";
+    defaultScopes?: string[];
+}
+export type ConnectorAuthConfig = ApiKeyAuthConfig | OAuth2AuthConfig | McpAuthConfig;
+export interface ConnectorProviderDefinition {
+    id: string;
+    name: string;
+    description?: string;
+    auth: ConnectorAuthConfig;
+    scopes?: ConnectorScopeDefinition[];
+    actions?: ConnectorActionDefinition[];
+    triggers?: ConnectorTriggerDefinition[];
+    allowCustomScopes?: boolean;
+    icon?: string;
+    metadata?: Record<string, unknown>;
+}
+export type ConnectionStatus = "active" | "pending" | "revoked" | "error";
+export interface ConnectionRecord {
+    id: string;
+    providerId: string;
+    name?: string;
+    projectId?: string;
+    orgId?: string;
+    owner?: ConnectSubject;
+    authType: ConnectorAuthType;
+    status: ConnectionStatus;
+    grantedScopes: string[];
+    secretRef?: string;
+    tokenExpiresAt?: string;
+    createdAt: string;
+    updatedAt: string;
+    metadata?: Record<string, unknown>;
+}
+export interface OAuthStateRecord {
+    state: string;
+    providerId: string;
+    subject?: ConnectSubject;
+    requestedScopes: string[];
+    redirectUri: string;
+    codeVerifier?: string;
+    codeChallenge?: string;
+    projectId?: string;
+    orgId?: string;
+    connectionName?: string;
+    expiresAt: string;
+    createdAt: string;
+    metadata?: Record<string, unknown>;
+}
+export interface TokenSet {
+    accessToken: string;
+    refreshToken?: string;
+    tokenType?: string;
+    expiresAt?: string;
+    scopes?: string[];
+    raw?: unknown;
+}
+export interface RuntimeToken {
+    accessToken: string;
+    tokenType: string;
+    expiresAt?: string;
+    scopes: string[];
+    connectionId: string;
+    providerId: string;
+}
+export interface StoredConnectionSecret {
+    kind: "api_key" | "oauth2" | "mcp";
+    apiKey?: string;
+    tokens?: TokenSet;
+    metadata?: Record<string, unknown>;
+}
+export interface ConnectionListFilter {
+    providerId?: string;
+    projectId?: string;
+    orgId?: string;
+    owner?: ConnectSubject;
+    status?: ConnectionStatus;
+}
+export interface ConnectStore {
+    listConnections(filter?: ConnectionListFilter): Promise<ConnectionRecord[]>;
+    getConnection(id: string): Promise<ConnectionRecord | null>;
+    upsertConnection(record: ConnectionRecord): Promise<ConnectionRecord>;
+    updateConnection(id: string, patch: Partial<Omit<ConnectionRecord, "id" | "createdAt">>): Promise<ConnectionRecord>;
+    deleteConnection(id: string): Promise<void>;
+    saveOAuthState(record: OAuthStateRecord): Promise<void>;
+    consumeOAuthState(state: string): Promise<OAuthStateRecord | null>;
+}
+export interface ConnectPolicyDecisionInput {
+    connection: ConnectionRecord;
+    subject?: ConnectSubject;
+    scopes: string[];
+    actionId?: string;
+}
+export interface ConnectPolicy {
+    canUseConnection(input: ConnectPolicyDecisionInput): Promise<boolean> | boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE7D,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,OAAO,GAAG,SAAS,CAAC;AAElF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAE7D,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAEtF,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACpC,OAAO,CAAC,EAAE,yBAAyB,EAAE,CAAC;IACtC,QAAQ,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACxC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE1E,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,gBAAgB,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5E,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAC5D,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtE,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACpH,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACjF"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@polpo-ai/connect",
+  "version": "0.15.4",
+  "description": "Polpo Connect contracts and client SDK for OAuth, API-key, and MCP connections",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client/index.d.ts",
+      "import": "./dist/client/index.js"
+    }
+  },
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "license": "Apache-2.0",
+  "keywords": [
+    "polpo",
+    "agents",
+    "oauth",
+    "connections",
+    "connectors",
+    "mcp"
+  ],
+  "author": "OpenPolpo Contributors",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/lumea-labs/polpo.git",
+    "directory": "packages/connect"
+  },
+  "homepage": "https://github.com/lumea-labs/polpo/tree/main/packages/connect",
+  "bugs": {
+    "url": "https://github.com/lumea-labs/polpo/issues"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.3",
+    "vitest": "^3.0.4"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run"
+  }
+}