@rnsk/toolkits 0.0.4 → 0.0.6

package/README.md

@@ -14,9 +14,9 @@ Manifest-driven toolkit registry for AI agents — connector definitions you pub
 | `@rnsk/toolkits` | All toolkit manifests, `registerAllTools()`, `getAllTools()` |
 | `@rnsk/toolkits/core` | Types, `defineToolkit`, validation, schema helpers |
 
-## Seed toolkits (v0.0.4)
+## Seed toolkits (v0.0.6)
 
-**228 tools** across **8 toolkits**.
+**262 tools** across **12 toolkits**.
 
 | Toolkit | Tools | Auth |
 |---------|------:|------|
@@ -28,6 +28,10 @@ Manifest-driven toolkit registry for AI agents — connector definitions you pub
 | notion | 8 | OAuth2 |
 | google-calendar | 6 | OAuth2 |
 | google-sheets | 7 | OAuth2 |
+| google-drive | 10 | OAuth2 |
+| google-docs | 10 | OAuth2 |
+| aws | 8 | service account |
+| gcp | 6 | service account |
 
 ## Install
 
@@ -71,25 +75,26 @@ Each toolkit lives under `src/toolkits/<id>/`:
   tools/
     *.ts         # one tool per file (AI SDK tool() + execute)
     index.ts     # exports array
+    client.ts    # optional: shared credential/SDK client helper (e.g. aws, gcp)
+    <group>/*.ts # optional: tools grouped into subfolders by service (e.g. github, aws, gcp)
 ```
 
 After adding a toolkit, register it in `src/index.ts`, then run `npm run validate && npm run build`.
 
 ## Local testing
 
-The repo includes a **sandbox** (not published to npm) for exercising tools at runtime:
+The repo includes a **sandbox** (not published to npm). It runs this package's source directly, so you don't need to build first. Test it through the real `@rnsk/bot` chat or a direct Tool runner, scoped to one toolkit:
 
 ```bash
-cd ../../sandbox
-cp .env.local.example .env.local
-npm run dev
+# from the repo root
+npm run sandbox       # → http://localhost:5173
 ```
 
-Use `POST /api/tools/execute` to invoke a tool directly with the same credential-injection pattern Runstack uses. See the [repository README](../../README.md) for sandbox endpoints.
+See [sandbox/README.md](../../sandbox/README.md).
 
 ## Versioning
 
-Pre-1.0 (`0.0.x`): patch releases add toolkits and tools. Pin an exact version in production (`"0.0.4"`).
+Pre-1.0 (`0.0.x`): patch releases add toolkits and tools. Pin an exact version in production (`"0.0.6"`).
 
 ## Contributing
 

package/dist/core/index.d.ts

@@ -3,5 +3,5 @@ export { defineToolkit, defineTool, toolkitCamelId } from './define.js';
 export { inferToolScope } from './scope.js';
 export { validateManifests, getAuthType, } from './validate.js';
 export { TOOL_OUTPUT_JSON_SCHEMA, getToolInputZodSchema, resolveZodObjectShape, toolInputToJsonSchema, extractParameterInfo, coerceArguments, type ParameterInfo, } from './schema-helpers.js';
-export type { ToolkitManifest, ToolDefinition, ToolkitIcon, ToolkitAuthSpec, ToolkitAuthType, ToolScope, OAuthProviderSpec, EnvVarSpec, ToolkitAvailability, } from './types.js';
+export type { ToolkitManifest, ToolDefinition, ToolkitIcon, ToolkitAuthSpec, ToolkitAuthType, ToolScope, OAuthProviderSpec, ApiKeyProviderSpec, BasicAuthProviderSpec, BearerTokenProviderSpec, ServiceAccountProviderSpec, EnvVarSpec, ToolkitAvailability, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/types.d.ts

@@ -28,6 +28,26 @@ export interface OAuthProviderSpec {
     stateCookie?: string;
     tokenResponsePath?: string;
 }
+export interface ApiKeyProviderSpec {
+    /** Where the key is sent on outgoing requests; tool code attaches it itself. */
+    in: 'header' | 'query';
+    /** Header or query param name, e.g. 'X-API-Key' or 'api_key'. */
+    name: string;
+    /** Value prefix, e.g. 'Bearer' or 'Token'. Omit for a bare key. */
+    prefix?: string;
+    connectDescription: string;
+}
+export interface BasicAuthProviderSpec {
+    connectDescription: string;
+}
+export interface BearerTokenProviderSpec {
+    connectDescription: string;
+}
+export interface ServiceAccountProviderSpec {
+    /** Field names the connecting user must supply, e.g. ['accessKeyId', 'secretAccessKey']. */
+    fields: string[];
+    connectDescription: string;
+}
 export type ToolkitAuthSpec = {
     type: 'none';
 } | {
@@ -37,8 +57,30 @@ export type ToolkitAuthSpec = {
     type: 'oauth2';
     tokenField: string;
     provider: OAuthProviderSpec;
+} | {
+    type: 'api_key';
+    tokenField: string;
+    provider: ApiKeyProviderSpec;
+}
+/** Credential stored under tokenField as a raw 'username:password' string. */
+ | {
+    type: 'basic_auth';
+    tokenField: string;
+    provider: BasicAuthProviderSpec;
+}
+/** Always sent as 'Authorization: Bearer <token>'; tool code attaches it. */
+ | {
+    type: 'bearer_token';
+    tokenField: string;
+    provider: BearerTokenProviderSpec;
+}
+/** Credential stored under tokenField as a JSON object keyed by provider.fields. */
+ | {
+    type: 'service_account';
+    tokenField: string;
+    provider: ServiceAccountProviderSpec;
 };
-export type ToolkitAuthType = 'none' | 'oauth2' | 'service_env';
+export type ToolkitAuthType = 'none' | 'oauth2' | 'service_env' | 'api_key' | 'basic_auth' | 'bearer_token' | 'service_account';
 export interface ToolDefinition {
     name: string;
     description?: string;

package/dist/core/validate.d.ts

@@ -1,4 +1,4 @@
 import type { ToolkitManifest } from './types.js';
 export declare function validateManifests(manifests: ToolkitManifest[]): string[];
-export declare function getAuthType(manifest: ToolkitManifest): 'OAUTH2' | 'None' | 'SERVICE_ENV';
+export declare function getAuthType(manifest: ToolkitManifest): 'OAUTH2' | 'None' | 'SERVICE_ENV' | 'API_KEY' | 'BASIC_AUTH' | 'BEARER_TOKEN' | 'SERVICE_ACCOUNT';
 //# sourceMappingURL=validate.d.ts.map

package/dist/core/validate.js

@@ -17,10 +17,14 @@ export function validateManifests(manifests) {
         }
         const camelId = toolkitCamelId(manifest.id);
         const prefix = `${camelId[0].toUpperCase()}${camelId.slice(1)}`;
-        if (manifest.auth.type === 'oauth2') {
+        if (manifest.auth.type === 'oauth2' ||
+            manifest.auth.type === 'api_key' ||
+            manifest.auth.type === 'basic_auth' ||
+            manifest.auth.type === 'bearer_token' ||
+            manifest.auth.type === 'service_account') {
             const authedTools = manifest.tools.filter((t) => t.requiredAuth);
             if (authedTools.length === 0) {
-                errors.push(`OAuth toolkit "${manifest.id}" has no tools with requiredAuth`);
+                errors.push(`${manifest.auth.type} toolkit "${manifest.id}" has no tools with requiredAuth`);
             }
             for (const tool of manifest.tools) {
                 if (tool.requiredAuth && tool.requiredAuth !== manifest.auth.tokenField) {
@@ -52,6 +56,14 @@ export function getAuthType(manifest) {
             return 'OAUTH2';
         case 'service_env':
             return 'SERVICE_ENV';
+        case 'api_key':
+            return 'API_KEY';
+        case 'basic_auth':
+            return 'BASIC_AUTH';
+        case 'bearer_token':
+            return 'BEARER_TOKEN';
+        case 'service_account':
+            return 'SERVICE_ACCOUNT';
         default:
             return 'None';
     }

package/dist/index.d.ts

@@ -6,9 +6,13 @@ import github from './toolkits/github/manifest.js';
 import notion from './toolkits/notion/manifest.js';
 import googleCalendar from './toolkits/google-calendar/manifest.js';
 import googleSheets from './toolkits/google-sheets/manifest.js';
+import googleDrive from './toolkits/google-drive/manifest.js';
+import googleDocs from './toolkits/google-docs/manifest.js';
+import aws from './toolkits/aws/manifest.js';
+import gcp from './toolkits/gcp/manifest.js';
 import type { ToolkitManifest } from './core/types.js';
 export declare const toolkits: ToolkitManifest[];
-export { mathematics, linear, gmail, webSearch, github, notion, googleCalendar, googleSheets, };
+export { mathematics, linear, gmail, webSearch, github, notion, googleCalendar, googleSheets, googleDrive, googleDocs, aws, gcp, };
 export * from './core/index.js';
 export declare function getAllTools(): {
     name: string;

package/dist/index.js

@@ -6,6 +6,10 @@ import github from './toolkits/github/manifest.js';
 import notion from './toolkits/notion/manifest.js';
 import googleCalendar from './toolkits/google-calendar/manifest.js';
 import googleSheets from './toolkits/google-sheets/manifest.js';
+import googleDrive from './toolkits/google-drive/manifest.js';
+import googleDocs from './toolkits/google-docs/manifest.js';
+import aws from './toolkits/aws/manifest.js';
+import gcp from './toolkits/gcp/manifest.js';
 export const toolkits = [
     mathematics,
     linear,
@@ -15,8 +19,12 @@ export const toolkits = [
     notion,
     googleCalendar,
     googleSheets,
+    googleDrive,
+    googleDocs,
+    aws,
+    gcp,
 ];
-export { mathematics, linear, gmail, webSearch, github, notion, googleCalendar, googleSheets, };
+export { mathematics, linear, gmail, webSearch, github, notion, googleCalendar, googleSheets, googleDrive, googleDocs, aws, gcp, };
 export * from './core/index.js';
 export function getAllTools() {
     return toolkits.flatMap((t) => t.tools.map((toolDef) => ({

package/dist/toolkits/aws/icon.d.ts

@@ -0,0 +1,5 @@
+export declare const AWS_ICON: {
+    kind: "svg";
+    dataUri: string;
+};
+//# sourceMappingURL=icon.d.ts.map

package/dist/toolkits/aws/icon.js

@@ -0,0 +1,41 @@
+const SVG = `<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"
+	 viewBox="0 0 304 182" style="enable-background:new 0 0 304 182;" xml:space="preserve">
+<style type="text/css">
+	.st0{fill:#252F3E;}
+	.st1{fill-rule:evenodd;clip-rule:evenodd;fill:#FF9900;}
+</style>
+<g>
+	<path class="st0" d="M86.4,66.4c0,3.7,0.4,6.7,1.1,8.9c0.8,2.2,1.8,4.6,3.2,7.2c0.5,0.8,0.7,1.6,0.7,2.3c0,1-0.6,2-1.9,3l-6.3,4.2
+		c-0.9,0.6-1.8,0.9-2.6,0.9c-1,0-2-0.5-3-1.4C76.2,90,75,88.4,74,86.8c-1-1.7-2-3.6-3.1-5.9c-7.8,9.2-17.6,13.8-29.4,13.8
+		c-8.4,0-15.1-2.4-20-7.2c-4.9-4.8-7.4-11.2-7.4-19.2c0-8.5,3-15.4,9.1-20.6c6.1-5.2,14.2-7.8,24.5-7.8c3.4,0,6.9,0.3,10.6,0.8
+		c3.7,0.5,7.5,1.3,11.5,2.2v-7.3c0-7.6-1.6-12.9-4.7-16c-3.2-3.1-8.6-4.6-16.3-4.6c-3.5,0-7.1,0.4-10.8,1.3c-3.7,0.9-7.3,2-10.8,3.4
+		c-1.6,0.7-2.8,1.1-3.5,1.3c-0.7,0.2-1.2,0.3-1.6,0.3c-1.4,0-2.1-1-2.1-3.1v-4.9c0-1.6,0.2-2.8,0.7-3.5c0.5-0.7,1.4-1.4,2.8-2.1
+		c3.5-1.8,7.7-3.3,12.6-4.5c4.9-1.3,10.1-1.9,15.6-1.9c11.9,0,20.6,2.7,26.2,8.1c5.5,5.4,8.3,13.6,8.3,24.6V66.4z M45.8,81.6
+		c3.3,0,6.7-0.6,10.3-1.8c3.6-1.2,6.8-3.4,9.5-6.4c1.6-1.9,2.8-4,3.4-6.4c0.6-2.4,1-5.3,1-8.7v-4.2c-2.9-0.7-6-1.3-9.2-1.7
+		c-3.2-0.4-6.3-0.6-9.4-0.6c-6.7,0-11.6,1.3-14.9,4c-3.3,2.7-4.9,6.5-4.9,11.5c0,4.7,1.2,8.2,3.7,10.6
+		C37.7,80.4,41.2,81.6,45.8,81.6z M126.1,92.4c-1.8,0-3-0.3-3.8-1c-0.8-0.6-1.5-2-2.1-3.9L96.7,10.2c-0.6-2-0.9-3.3-0.9-4
+		c0-1.6,0.8-2.5,2.4-2.5h9.8c1.9,0,3.2,0.3,3.9,1c0.8,0.6,1.4,2,2,3.9l16.8,66.2l15.6-66.2c0.5-2,1.1-3.3,1.9-3.9c0.8-0.6,2.2-1,4-1
+		h8c1.9,0,3.2,0.3,4,1c0.8,0.6,1.5,2,1.9,3.9l15.8,67l17.3-67c0.6-2,1.3-3.3,2-3.9c0.8-0.6,2.1-1,3.9-1h9.3c1.6,0,2.5,0.8,2.5,2.5
+		c0,0.5-0.1,1-0.2,1.6c-0.1,0.6-0.3,1.4-0.7,2.5l-24.1,77.3c-0.6,2-1.3,3.3-2.1,3.9c-0.8,0.6-2.1,1-3.8,1h-8.6c-1.9,0-3.2-0.3-4-1
+		c-0.8-0.7-1.5-2-1.9-4L156,23l-15.4,64.4c-0.5,2-1.1,3.3-1.9,4c-0.8,0.7-2.2,1-4,1H126.1z M254.6,95.1c-5.2,0-10.4-0.6-15.4-1.8
+		c-5-1.2-8.9-2.5-11.5-4c-1.6-0.9-2.7-1.9-3.1-2.8c-0.4-0.9-0.6-1.9-0.6-2.8v-5.1c0-2.1,0.8-3.1,2.3-3.1c0.6,0,1.2,0.1,1.8,0.3
+		c0.6,0.2,1.5,0.6,2.5,1c3.4,1.5,7.1,2.7,11,3.5c4,0.8,7.9,1.2,11.9,1.2c6.3,0,11.2-1.1,14.6-3.3c3.4-2.2,5.2-5.4,5.2-9.5
+		c0-2.8-0.9-5.1-2.7-7c-1.8-1.9-5.2-3.6-10.1-5.2L246,52c-7.3-2.3-12.7-5.7-16-10.2c-3.3-4.4-5-9.3-5-14.5c0-4.2,0.9-7.9,2.7-11.1
+		c1.8-3.2,4.2-6,7.2-8.2c3-2.3,6.4-4,10.4-5.2c4-1.2,8.2-1.7,12.6-1.7c2.2,0,4.5,0.1,6.7,0.4c2.3,0.3,4.4,0.7,6.5,1.1
+		c2,0.5,3.9,1,5.7,1.6c1.8,0.6,3.2,1.2,4.2,1.8c1.4,0.8,2.4,1.6,3,2.5c0.6,0.8,0.9,1.9,0.9,3.3v4.7c0,2.1-0.8,3.2-2.3,3.2
+		c-0.8,0-2.1-0.4-3.8-1.2c-5.7-2.6-12.1-3.9-19.2-3.9c-5.7,0-10.2,0.9-13.3,2.8c-3.1,1.9-4.7,4.8-4.7,8.9c0,2.8,1,5.2,3,7.1
+		c2,1.9,5.7,3.8,11,5.5l14.2,4.5c7.2,2.3,12.4,5.5,15.5,9.6c3.1,4.1,4.6,8.8,4.6,14c0,4.3-0.9,8.2-2.6,11.6
+		c-1.8,3.4-4.2,6.4-7.3,8.8c-3.1,2.5-6.8,4.3-11.1,5.6C264.4,94.4,259.7,95.1,254.6,95.1z"/>
+	<g>
+		<path class="st1" d="M273.5,143.7c-32.9,24.3-80.7,37.2-121.8,37.2c-57.6,0-109.5-21.3-148.7-56.7c-3.1-2.8-0.3-6.6,3.4-4.4
+			c42.4,24.6,94.7,39.5,148.8,39.5c36.5,0,76.6-7.6,113.5-23.2C274.2,133.6,278.9,139.7,273.5,143.7z"/>
+		<path class="st1" d="M287.2,128.1c-4.2-5.4-27.8-2.6-38.5-1.3c-3.2,0.4-3.7-2.4-0.8-4.5c18.8-13.2,49.7-9.4,53.3-5
+			c3.6,4.5-1,35.4-18.6,50.2c-2.7,2.3-5.3,1.1-4.1-1.9C282.5,155.7,291.4,133.4,287.2,128.1z"/>
+	</g>
+</g>
+</svg>`;
+export const AWS_ICON = {
+    kind: 'svg',
+    dataUri: `data:image/svg+xml;base64,${Buffer.from(SVG).toString('base64')}`,
+};
+//# sourceMappingURL=icon.js.map

package/dist/toolkits/aws/manifest.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("../../index.js").ToolkitManifest;
+export default _default;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/toolkits/aws/manifest.js

@@ -0,0 +1,27 @@
+import { defineToolkit, defineTool } from '../../core/define.js';
+import { AWS_ICON } from './icon.js';
+import { awsTools } from './tools/index.js';
+export default defineToolkit({
+    id: 'aws',
+    displayName: 'AWS',
+    shortDescription: 'Manage EC2 instances and monitor CloudWatch metrics, alarms, and logs.',
+    category: 'Developer Tools & DevOps',
+    icon: AWS_ICON,
+    auth: {
+        type: 'service_account',
+        tokenField: 'awsCredentials',
+        provider: {
+            fields: ['accessKeyId', 'secretAccessKey'],
+            connectDescription: 'Connect an AWS IAM access key with EC2 and CloudWatch read (and, for start/stop, write) permissions.',
+        },
+    },
+    tools: awsTools.map((entry) => defineTool({
+        name: entry.name,
+        description: entry.description,
+        tool: entry.tool,
+        requiredAuth: entry.requiredAuth,
+        scope: entry.scope,
+    })),
+    meta: { since: '0.0.6', homepage: 'https://aws.amazon.com' },
+});
+//# sourceMappingURL=manifest.js.map

package/dist/toolkits/aws/tools/client.d.ts

@@ -0,0 +1,13 @@
+import { EC2Client } from '@aws-sdk/client-ec2';
+import { CloudWatchClient } from '@aws-sdk/client-cloudwatch';
+import { CloudWatchLogsClient } from '@aws-sdk/client-cloudwatch-logs';
+export interface AwsCredentials {
+    accessKeyId: string;
+    secretAccessKey: string;
+}
+/** awsCredentials is the JSON blob injected by the framework under the manifest's tokenField. */
+export declare function parseAwsCredentials(awsCredentials: string): AwsCredentials;
+export declare function createEc2Client(awsCredentials: string, region?: string): EC2Client;
+export declare function createCloudWatchClient(awsCredentials: string, region?: string): CloudWatchClient;
+export declare function createCloudWatchLogsClient(awsCredentials: string, region?: string): CloudWatchLogsClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/toolkits/aws/tools/client.js

@@ -0,0 +1,25 @@
+import { EC2Client } from '@aws-sdk/client-ec2';
+import { CloudWatchClient } from '@aws-sdk/client-cloudwatch';
+import { CloudWatchLogsClient } from '@aws-sdk/client-cloudwatch-logs';
+const DEFAULT_REGION = 'us-east-1';
+/** awsCredentials is the JSON blob injected by the framework under the manifest's tokenField. */
+export function parseAwsCredentials(awsCredentials) {
+    const parsed = JSON.parse(awsCredentials);
+    if (!parsed.accessKeyId || !parsed.secretAccessKey) {
+        throw new Error('AWS credentials must include accessKeyId and secretAccessKey');
+    }
+    return { accessKeyId: parsed.accessKeyId, secretAccessKey: parsed.secretAccessKey };
+}
+export function createEc2Client(awsCredentials, region) {
+    return new EC2Client({ region: region || DEFAULT_REGION, credentials: parseAwsCredentials(awsCredentials) });
+}
+export function createCloudWatchClient(awsCredentials, region) {
+    return new CloudWatchClient({ region: region || DEFAULT_REGION, credentials: parseAwsCredentials(awsCredentials) });
+}
+export function createCloudWatchLogsClient(awsCredentials, region) {
+    return new CloudWatchLogsClient({
+        region: region || DEFAULT_REGION,
+        credentials: parseAwsCredentials(awsCredentials),
+    });
+}
+//# sourceMappingURL=client.js.map

package/dist/toolkits/aws/tools/cloudwatch/filter-log-events.d.ts

@@ -0,0 +1,26 @@
+export declare const awsFilterCloudwatchLogEvents: import("ai").Tool<{
+    logGroupName: string;
+    limit?: number | undefined;
+    region?: string | undefined;
+    awsCredentials?: string | undefined;
+    startTime?: number | undefined;
+    endTime?: number | undefined;
+    filterPattern?: string | undefined;
+}, {
+    error: string;
+    events?: undefined;
+    message?: undefined;
+} | {
+    events: {
+        logStreamName: string | undefined;
+        timestamp: number | undefined;
+        message: string | undefined;
+    }[];
+    error?: undefined;
+    message?: undefined;
+} | {
+    error: string;
+    message: string;
+    events?: undefined;
+}>;
+//# sourceMappingURL=filter-log-events.d.ts.map

package/dist/toolkits/aws/tools/cloudwatch/filter-log-events.js

@@ -0,0 +1,45 @@
+import { tool } from 'ai';
+import { z } from 'zod';
+import { FilterLogEventsCommand } from '@aws-sdk/client-cloudwatch-logs';
+import { createCloudWatchLogsClient } from '../client.js';
+export const awsFilterCloudwatchLogEvents = tool({
+    description: 'Search log events in a CloudWatch log group using an optional filter pattern and time range. Useful for finding errors or specific messages in logs.',
+    inputSchema: z.object({
+        awsCredentials: z.string().optional().describe('Injected by system; do not provide'),
+        region: z.string().optional().describe('AWS region to query (default: us-east-1)'),
+        logGroupName: z.string().describe('The name of the CloudWatch log group to search'),
+        filterPattern: z.string().optional().describe('Filter pattern, e.g. "ERROR" or "?ERROR ?Exception"'),
+        startTime: z.number().optional().describe('Start time as a Unix timestamp in milliseconds'),
+        endTime: z.number().optional().describe('End time as a Unix timestamp in milliseconds'),
+        limit: z.number().min(1).max(200).optional().describe('Maximum number of log events to return (default 50)'),
+    }),
+    execute: async ({ awsCredentials, region, logGroupName, filterPattern, startTime, endTime, limit }) => {
+        if (!awsCredentials) {
+            return { error: 'AWS credentials are required. Connect AWS first.' };
+        }
+        try {
+            const client = createCloudWatchLogsClient(awsCredentials, region);
+            const response = await client.send(new FilterLogEventsCommand({
+                logGroupName,
+                filterPattern,
+                startTime,
+                endTime,
+                limit: limit ?? 50,
+            }));
+            return {
+                events: (response.events ?? []).map((event) => ({
+                    logStreamName: event.logStreamName,
+                    timestamp: event.timestamp,
+                    message: event.message,
+                })),
+            };
+        }
+        catch (err) {
+            return {
+                error: 'Failed to filter CloudWatch log events',
+                message: err instanceof Error ? err.message : 'Unknown error',
+            };
+        }
+    },
+});
+//# sourceMappingURL=filter-log-events.js.map

package/dist/toolkits/aws/tools/cloudwatch/get-metric-data.d.ts

@@ -0,0 +1,35 @@
+export declare const awsGetCloudwatchMetricData: import("ai").Tool<{
+    namespace: string;
+    metricName: string;
+    region?: string | undefined;
+    awsCredentials?: string | undefined;
+    dimensions?: Record<string, string> | undefined;
+    startTime?: string | undefined;
+    endTime?: string | undefined;
+    period?: number | undefined;
+    statistic?: "Average" | "Sum" | "Minimum" | "Maximum" | "SampleCount" | undefined;
+}, {
+    error: string;
+    label?: undefined;
+    datapoints?: undefined;
+    message?: undefined;
+} | {
+    label: string | undefined;
+    datapoints: {
+        timestamp: Date | undefined;
+        average: number | undefined;
+        sum: number | undefined;
+        minimum: number | undefined;
+        maximum: number | undefined;
+        sampleCount: number | undefined;
+        unit: import("@aws-sdk/client-cloudwatch").StandardUnit | undefined;
+    }[];
+    error?: undefined;
+    message?: undefined;
+} | {
+    error: string;
+    message: string;
+    label?: undefined;
+    datapoints?: undefined;
+}>;
+//# sourceMappingURL=get-metric-data.d.ts.map

package/dist/toolkits/aws/tools/cloudwatch/get-metric-data.js

@@ -0,0 +1,62 @@
+import { tool } from 'ai';
+import { z } from 'zod';
+import { GetMetricStatisticsCommand } from '@aws-sdk/client-cloudwatch';
+import { createCloudWatchClient } from '../client.js';
+export const awsGetCloudwatchMetricData = tool({
+    description: 'Retrieve CloudWatch metric statistics for a namespace and metric name (e.g. AWS/EC2 CPUUtilization). Use this to check resource health or usage trends.',
+    inputSchema: z.object({
+        awsCredentials: z.string().optional().describe('Injected by system; do not provide'),
+        region: z.string().optional().describe('AWS region to query (default: us-east-1)'),
+        namespace: z.string().describe('The metric namespace, e.g. "AWS/EC2"'),
+        metricName: z.string().describe('The metric name, e.g. "CPUUtilization"'),
+        dimensions: z
+            .record(z.string(), z.string())
+            .optional()
+            .describe('Metric dimensions as key-value pairs, e.g. {"InstanceId": "i-0123456789abcdef0"}'),
+        startTime: z.string().optional().describe('Start time in ISO 8601 format (default: 1 hour ago)'),
+        endTime: z.string().optional().describe('End time in ISO 8601 format (default: now)'),
+        period: z.number().optional().describe('Period in seconds (default: 300)'),
+        statistic: z
+            .enum(['Average', 'Sum', 'Minimum', 'Maximum', 'SampleCount'])
+            .optional()
+            .describe('Statistic to retrieve (default: Average)'),
+    }),
+    execute: async ({ awsCredentials, region, namespace, metricName, dimensions, startTime, endTime, period, statistic }) => {
+        if (!awsCredentials) {
+            return { error: 'AWS credentials are required. Connect AWS first.' };
+        }
+        try {
+            const client = createCloudWatchClient(awsCredentials, region);
+            const response = await client.send(new GetMetricStatisticsCommand({
+                Namespace: namespace,
+                MetricName: metricName,
+                Dimensions: dimensions ? Object.entries(dimensions).map(([Name, Value]) => ({ Name, Value })) : undefined,
+                StartTime: startTime ? new Date(startTime) : new Date(Date.now() - 3600_000),
+                EndTime: endTime ? new Date(endTime) : new Date(),
+                Period: period ?? 300,
+                Statistics: [statistic ?? 'Average'],
+            }));
+            return {
+                label: response.Label,
+                datapoints: (response.Datapoints ?? [])
+                    .sort((a, b) => (a.Timestamp?.getTime() ?? 0) - (b.Timestamp?.getTime() ?? 0))
+                    .map((point) => ({
+                    timestamp: point.Timestamp,
+                    average: point.Average,
+                    sum: point.Sum,
+                    minimum: point.Minimum,
+                    maximum: point.Maximum,
+                    sampleCount: point.SampleCount,
+                    unit: point.Unit,
+                })),
+            };
+        }
+        catch (err) {
+            return {
+                error: 'Failed to get CloudWatch metric data',
+                message: err instanceof Error ? err.message : 'Unknown error',
+            };
+        }
+    },
+});
+//# sourceMappingURL=get-metric-data.js.map

package/dist/toolkits/aws/tools/cloudwatch/list-alarms.d.ts

@@ -0,0 +1,29 @@
+export declare const awsListCloudwatchAlarms: import("ai").Tool<{
+    region?: string | undefined;
+    awsCredentials?: string | undefined;
+    alarmNamePrefix?: string | undefined;
+    stateValue?: "OK" | "ALARM" | "INSUFFICIENT_DATA" | undefined;
+    maxRecords?: number | undefined;
+}, {
+    error: string;
+    alarms?: undefined;
+    message?: undefined;
+} | {
+    alarms: {
+        alarmName: string | undefined;
+        alarmArn: string | undefined;
+        stateValue: import("@aws-sdk/client-cloudwatch").StateValue | undefined;
+        stateReason: string | undefined;
+        metricName: string | undefined;
+        namespace: string | undefined;
+        threshold: number | undefined;
+        comparisonOperator: import("@aws-sdk/client-cloudwatch").ComparisonOperator | undefined;
+    }[];
+    error?: undefined;
+    message?: undefined;
+} | {
+    error: string;
+    message: string;
+    alarms?: undefined;
+}>;
+//# sourceMappingURL=list-alarms.d.ts.map

package/dist/toolkits/aws/tools/cloudwatch/list-alarms.js

@@ -0,0 +1,46 @@
+import { tool } from 'ai';
+import { z } from 'zod';
+import { DescribeAlarmsCommand } from '@aws-sdk/client-cloudwatch';
+import { createCloudWatchClient } from '../client.js';
+export const awsListCloudwatchAlarms = tool({
+    description: 'List CloudWatch alarms, optionally filtered by name prefix or state.',
+    inputSchema: z.object({
+        awsCredentials: z.string().optional().describe('Injected by system; do not provide'),
+        region: z.string().optional().describe('AWS region to query (default: us-east-1)'),
+        alarmNamePrefix: z.string().optional().describe('Only return alarms whose name starts with this prefix'),
+        stateValue: z.enum(['OK', 'ALARM', 'INSUFFICIENT_DATA']).optional().describe('Only return alarms in this state'),
+        maxRecords: z.number().min(1).max(100).optional().describe('Maximum number of alarms to return'),
+    }),
+    execute: async ({ awsCredentials, region, alarmNamePrefix, stateValue, maxRecords }) => {
+        if (!awsCredentials) {
+            return { error: 'AWS credentials are required. Connect AWS first.' };
+        }
+        try {
+            const client = createCloudWatchClient(awsCredentials, region);
+            const response = await client.send(new DescribeAlarmsCommand({
+                AlarmNamePrefix: alarmNamePrefix,
+                StateValue: stateValue,
+                MaxRecords: maxRecords,
+            }));
+            return {
+                alarms: (response.MetricAlarms ?? []).map((alarm) => ({
+                    alarmName: alarm.AlarmName,
+                    alarmArn: alarm.AlarmArn,
+                    stateValue: alarm.StateValue,
+                    stateReason: alarm.StateReason,
+                    metricName: alarm.MetricName,
+                    namespace: alarm.Namespace,
+                    threshold: alarm.Threshold,
+                    comparisonOperator: alarm.ComparisonOperator,
+                })),
+            };
+        }
+        catch (err) {
+            return {
+                error: 'Failed to list CloudWatch alarms',
+                message: err instanceof Error ? err.message : 'Unknown error',
+            };
+        }
+    },
+});
+//# sourceMappingURL=list-alarms.js.map

package/dist/toolkits/aws/tools/cloudwatch/list-log-groups.d.ts

@@ -0,0 +1,25 @@
+export declare const awsListCloudwatchLogGroups: import("ai").Tool<{
+    limit?: number | undefined;
+    region?: string | undefined;
+    awsCredentials?: string | undefined;
+    logGroupNamePrefix?: string | undefined;
+}, {
+    error: string;
+    logGroups?: undefined;
+    message?: undefined;
+} | {
+    logGroups: {
+        logGroupName: string | undefined;
+        creationTime: number | undefined;
+        retentionInDays: number | undefined;
+        storedBytes: number | undefined;
+        arn: string | undefined;
+    }[];
+    error?: undefined;
+    message?: undefined;
+} | {
+    error: string;
+    message: string;
+    logGroups?: undefined;
+}>;
+//# sourceMappingURL=list-log-groups.d.ts.map

package/dist/toolkits/aws/tools/cloudwatch/list-log-groups.js

@@ -0,0 +1,38 @@
+import { tool } from 'ai';
+import { z } from 'zod';
+import { DescribeLogGroupsCommand } from '@aws-sdk/client-cloudwatch-logs';
+import { createCloudWatchLogsClient } from '../client.js';
+export const awsListCloudwatchLogGroups = tool({
+    description: 'List CloudWatch log groups, optionally filtered by name prefix.',
+    inputSchema: z.object({
+        awsCredentials: z.string().optional().describe('Injected by system; do not provide'),
+        region: z.string().optional().describe('AWS region to query (default: us-east-1)'),
+        logGroupNamePrefix: z.string().optional().describe('Only return log groups whose name starts with this prefix'),
+        limit: z.number().min(1).max(50).optional().describe('Maximum number of log groups to return'),
+    }),
+    execute: async ({ awsCredentials, region, logGroupNamePrefix, limit }) => {
+        if (!awsCredentials) {
+            return { error: 'AWS credentials are required. Connect AWS first.' };
+        }
+        try {
+            const client = createCloudWatchLogsClient(awsCredentials, region);
+            const response = await client.send(new DescribeLogGroupsCommand({ logGroupNamePrefix, limit }));
+            return {
+                logGroups: (response.logGroups ?? []).map((group) => ({
+                    logGroupName: group.logGroupName,
+                    creationTime: group.creationTime,
+                    retentionInDays: group.retentionInDays,
+                    storedBytes: group.storedBytes,
+                    arn: group.arn,
+                })),
+            };
+        }
+        catch (err) {
+            return {
+                error: 'Failed to list CloudWatch log groups',
+                message: err instanceof Error ? err.message : 'Unknown error',
+            };
+        }
+    },
+});
+//# sourceMappingURL=list-log-groups.js.map