@shipfox/api-integration-core 2.0.0

package/.turbo/turbo-build.log

@@ -0,0 +1,2 @@
+$ shipfox-swc
+Successfully compiled: 47 files with swc (105.03ms)

package/.turbo/turbo-type$colon$emit.log

@@ -0,0 +1 @@
+$ shipfox-tsc-emit

package/.turbo/turbo-type.log

@@ -0,0 +1 @@
+$ shipfox-tsc-check

package/CHANGELOG.md

@@ -0,0 +1,264 @@
+# @shipfox/api-integration-core
+
+## 2.0.0
+
+### Minor Changes
+
+- 0cd6dd4: Adds stoppable module workers and declarative module startup tasks for server composition.
+- 1b0d344: Publishes the complete API runtime closure with packed-consumer-safe internal imports and records its exact package set in application releases.
+
+### Patch Changes
+
+- Updated dependencies [0cd6dd4]
+- Updated dependencies [a68458a]
+- Updated dependencies [6eba800]
+- Updated dependencies [1b0d344]
+- Updated dependencies [521e006]
+  - @shipfox/node-module@0.2.0
+  - @shipfox/node-temporal@0.2.0
+  - @shipfox/api-agent-dto@2.0.0
+  - @shipfox/api-auth-context@2.0.0
+  - @shipfox/api-integration-core-dto@2.0.0
+  - @shipfox/api-integration-gitea@2.0.0
+  - @shipfox/api-integration-github@2.0.0
+  - @shipfox/api-integration-linear@2.0.0
+  - @shipfox/api-integration-sentry@2.0.0
+  - @shipfox/api-integration-webhook@2.0.0
+  - @shipfox/config@1.2.1
+  - @shipfox/node-drizzle@0.2.1
+  - @shipfox/node-fastify@0.2.1
+  - @shipfox/node-opentelemetry@0.5.0
+  - @shipfox/node-outbox@0.2.1
+  - @shipfox/node-postgres@0.4.1
+  - @shipfox/redact@0.2.1
+  - @shipfox/regex@0.2.1
+
+## 0.1.2
+
+### Patch Changes
+
+- Updated dependencies [705dd43]
+  - @shipfox/node-outbox@0.2.0
+  - @shipfox/node-module@0.1.2
+  - @shipfox/api-integration-linear@1.0.2
+  - @shipfox/api-integration-github@0.1.2
+  - @shipfox/api-integration-sentry@0.1.2
+
+## 0.1.1
+
+### Patch Changes
+
+- Updated dependencies [ec75cd5]
+- Updated dependencies [68b8d03]
+- Updated dependencies [6a1fb54]
+  - @shipfox/node-drizzle@0.2.0
+  - @shipfox/redact@0.2.0
+  - @shipfox/node-postgres@0.4.0
+  - @shipfox/api-integration-gitea@0.0.2
+  - @shipfox/api-integration-github@0.1.1
+  - @shipfox/api-integration-linear@1.0.1
+  - @shipfox/api-integration-sentry@0.1.1
+  - @shipfox/node-module@0.1.1
+  - @shipfox/node-outbox@0.1.1
+
+## 0.1.0
+
+### Minor Changes
+
+- 115655e: Moves source-event translation to the integration module: source-control providers emit a typed, provider-agnostic `INTEGRATION_SOURCE_COMMIT_PUSHED` event via one transactional publisher, projects subscribes to it instead of decoding GitHub payloads, and branch-deletion pushes are dropped at the source.
+- d245be8: [api/integrations] Make the signed Sentry installation webhook authoritative.
+  - `@shipfox/api-integration-sentry-dto`: reshape `sentryInstallationWebhookSchema`
+    to read `data.installation.{uuid, organization.slug, status, code}` plus an
+    optional top-level `actor`. Only consumed fields are validated and the raw
+    `code` is never logged.
+  - `@shipfox/api-integration-sentry`: the signed `installation.created` webhook now
+    exchanges the single-use code and persists a verified-but-unclaimed installation
+    (`connection_id IS NULL`, `code_hash = sha256(code)`). The browser flow narrows
+    to a claim that binds a verified install to a workspace under unified claim auth
+    (exchange-success, same-code hash match, or a retryable
+    `verification-in-progress` while a concurrent webhook is mid-exchange), with a
+    proof-mismatch 403 closing the bare-uuid IDOR. The exchange/verify run outside
+    the DB transaction; a short transaction wraps persist + delivery record. Adds
+    `connection_id` nullable + `code_hash` to the installations table and a daily TTL
+    cron that tombstones never-claimed installs.
+  - `@shipfox/api-integration-core`: inject the Sentry client into the webhook
+    context, resolve a null `connection_id` to "no connection" for pre-claim issue
+    deliveries, and register the unclaimed-installation cleanup cron when Sentry is
+    enabled.
+  - `@shipfox/client-integrations`: treat the retryable `verification-in-progress`
+    response as a backoff-eligible failure on the connect callback.
+
+- b8e49ff: Add the client-side Sentry install/connect flow and a workspace settings
+  integrations hub.
+  - `@shipfox/client-integrations`: shared `IntegrationGallerySection` (capability
+    filter, lifecycle pills, "Added" date, external link, connected-first
+    ordering, degraded status mode), shared `RedirectInstallPage` powering the
+    GitHub and new Sentry install pages, `SentryCallbackPage` with an explicit
+    workspace confirm (sessionStorage only pre-selects), two-tier retry, and the
+    Sentry hooks (`useCreateSentryInstallMutation`, `connectSentry`,
+    `useIntegrationConnectionsQuery`).
+  - `@shipfox/client-workspace-settings`: new `/workspaces/$wid/settings/integrations`
+    page and an Integrations entry in the settings nav.
+  - `@shipfox/client-router`: routes for the Sentry install page, the root-level
+    Sentry callback, and the settings integrations page.
+  - `@shipfox/react-ui`: `sentry` icon (monochrome, theme-aware).
+  - `@shipfox/api-integration-core-dto`: optional `external_url` on the connection
+    DTO and an optional `connectionExternalUrl` method on `IntegrationProvider`.
+  - `@shipfox/api-integration-core`: `GET /integration-connections` now returns
+    connections of every lifecycle status (the active-only filter prevented
+    clients from surfacing disabled/error state) and resolves `external_url`
+    per connection best-effort.
+  - `@shipfox/api-integration-sentry` / `@shipfox/api-integration-github`:
+    implement `connectionExternalUrl` (Sentry org URL via a new
+    by-connection-id installation lookup; GitHub installation settings URL).
+
+- d6d4862: Add a Sentry integration provider that ingests issue webhooks.
+  - New `@shipfox/api-integration-sentry` + `-sentry-dto` packages: a webhook
+    receiver that verifies the HMAC-SHA256 signature (keyed with the app client
+    secret), dedups on `Request-ID`, normalizes the issue payload, and publishes
+    `integrations.event.received` with `source: 'sentry'` and `event:
+issue.<action>`. A raw `ignored` action is normalized to `archived`. Malformed,
+    bad-JSON, unknown-action, and unknown-resource deliveries are recorded-and-dropped
+    with a 204 (deliberate deviation from GitHub's 400 to avoid Sentry disabling the
+    webhook).
+  - `@shipfox/api-integration-core-dto`: add the `SentryIssuePayload` contract.
+  - `@shipfox/api-integration-core`: register the Sentry provider behind
+    `INTEGRATIONS_ENABLE_SENTRY_PROVIDER`, add the
+    `updateIntegrationConnectionLifecycleStatus` helper, and pin stable
+    migration-tracking table names per provider database.
+  - `@shipfox/node-fastify`: add the shared `rawBodyPlugin` and `WEBHOOK_BODY_LIMIT`
+    exports for webhook receivers.
+  - `@shipfox/node-module`: add an optional `migrationsTableName` to `ModuleDatabase`
+    so conditionally-composed databases get a position-independent migration table.
+  - `@shipfox/api-integration-github`: consume the shared `rawBodyPlugin` instead of
+    a local copy (internal refactor, no behavior change).
+
+  Deploy note: environments with GitHub enabled must rename the existing
+  `__drizzle_migrations_integrations_1` table to
+  `__drizzle_migrations_integrations_github` as part of this release, or GitHub
+  migrations re-run against existing tables.
+
+### Patch Changes
+
+- 0948b67: Scaffolds the Linear integration provider, package pair, config, and installation store behind the core provider flag.
+- a68ed61: Restructures the integrations composition root so each provider owns its loader, adapter wiring, and migrations-table name in one file under `src/providers/`, registered through a single list; no behavior change.
+- ce062a9: Validates authored agent step integrations against provider tool catalogs and workspace connection capabilities.
+- f3614ae: Add `createCheckoutSpec()` to the integration source-control service and the GitHub provider. GitHub mints a short-lived, repo-scoped installation access token and returns it as structured `CheckoutCredentials` alongside a clean `repositoryUrl`; the secret is never embedded in the URL. `ref` defaults to the repository default branch, providers without checkout support raise a typed `IntegrationCheckoutUnsupportedError`, and a `redactCheckoutSpec()` helper masks the token for logging. Dormant until the checkout-token endpoint and runner enrichment are wired in; no runtime behavior changes yet.
+- f98c2be: [api/workflows] Add the lease-authed `POST /runs/jobs/current/checkout-token` endpoint. The runner exchanges its job lease for short-lived, read-only repository checkout credentials. The job's checkout intent is resolved server-side from the authoritative `jobId` claim (`job -> run -> project` source metadata) and minted on demand via the integration service's `createCheckoutSpec()`; no credential material is ever stored on the job/run or queued. `checkoutTokenResponseSchema.auth` stays optional so credential-free providers can return a public clone URL with no token, and `integrationRouteErrorHandler` is exported from `@shipfox/api-integration-core` so the route reuses the shared provider-error mapping.
+- ae7a63c: Adds daily dispatched outbox row retention with bounded cleanup batches and retention indexes on module outbox tables.
+- f8f339a: Add the `@shipfox/redact` package with shared credential-redaction helpers: `redactUrlCredentials` (scheme-agnostic free-text scrubber), `stripUrlCredentials` (structured single-URL stripper), `redactSecrets` (literal-secret scrubber), and the `REDACTION_PLACEHOLDER` constant. Move `redactCheckoutSpec` from `@shipfox/api-integration-core-dto` into `@shipfox/api-integration-core` so it can reuse the shared `stripUrlCredentials` without breaking the dto-only-dependency rule; its public export path (`@shipfox/api-integration-core`) is unchanged. No behavior change.
+- 58f51bd: Scaffold an empty `gitea` integration provider that mirrors the `github` package structure, ahead of any behavior.
+  - New `@shipfox/api-integration-gitea` + `@shipfox/api-integration-gitea-dto` packages: `createGiteaIntegrationProvider()` returns an empty provider (`{provider: 'gitea', displayName: 'Gitea', adapters: {}, routes: []}`), plus a `src/config.ts` documenting the self-hoster variables (`GITEA_BASE_URL`, `GITEA_SERVICE_USERNAME`, `GITEA_SERVICE_TOKEN`, `GITEA_WEBHOOK_SECRET`, `GITEA_WEBHOOK_TARGET_URL`, `GITEA_CHECKOUT_TTL_SECONDS`) and an empty provider database wired with the stable migrations table `__drizzle_migrations_integrations_gitea`.
+  - `@shipfox/api-integration-core`: register the Gitea provider behind `INTEGRATIONS_ENABLE_GITEA_PROVIDER` (default false). With the flag enabled, `gitea` appears in `GET /integration-providers`. Dormant scaffold; no runtime behavior yet.
+
+- 570ac69: Add the Gitea connection flow so a workspace member can link a Gitea org with a single authenticated request (no OAuth, no redirect).
+  - `@shipfox/api-integration-gitea-dto`: `createGiteaConnectionBodySchema` (`{workspace_id, org}`); the response reuses the shared `integrationConnectionDtoSchema`.
+  - `@shipfox/api-integration-gitea`: `POST /integrations/gitea/connections` (`AUTH_USER`, workspace membership) canonicalizes the org to lower case (Gitea routes org names case-insensitively, so this keeps the case-sensitive ownership lookup and unique indexes from being bypassed by a case variant), validates the org via the API, rejects an org already linked to another workspace (409), registers an org-level push webhook (`POST /orgs/{org}/hooks` with `GITEA_WEBHOOK_SECRET`/`GITEA_WEBHOOK_TARGET_URL`), and in one transaction upserts the core connection (`provider: 'gitea'`, `externalAccountId: org`) and a new `integrations_gitea_connections` row (`connection_id`/`org` unique, stored `webhook_id`). Re-connecting an already-active org is idempotent and skips a second webhook. Webhook registration itself is idempotent (an existing org hook for the target URL is reused) and compensated (a hook created before a transaction that then rolls back is deleted), so concurrent or retried connects do not leave orphaned hooks. The `GiteaApiClient` gains `organizationExists`, `createOrgPushWebhook`, and `deleteOrgWebhook`, and the provider exposes `connectionExternalUrl` pointing at the org on the Gitea instance.
+  - `@shipfox/api-integration-core`: wire the Gitea connect closure (`connectGiteaConnection`) and the cross-tenant lookup (`getExistingGiteaConnection`) into the provider, mirroring `connectGithubInstallation`.
+
+  Connecting an org creates an active connection visible in `GET /integration-connections` and registers a Gitea webhook whose id is stored.
+
+- 857fd73: Receive Gitea push webhooks and trigger runs through the existing source-push pipeline.
+  - `@shipfox/api-integration-gitea-dto`: `giteaPushPayloadSchema` (`{ref, after, repository: {name, full_name, default_branch, owner: {username}}}`).
+  - `@shipfox/api-integration-gitea`: `POST /webhooks/integrations/gitea` (`auth: []`, `rawBodyPlugin`, standard webhook body limit). It verifies the `X-Gitea-Signature` header as hex HMAC-SHA256 of the raw body keyed by `GITEA_WEBHOOK_SECRET` (401 on mismatch), records non-`push` events for delivery dedup and returns 204, and on a `push` resolves the org (`repository.owner.username`, lower-cased to match the stored org) to its connection, drops branch deletions and unknown orgs, and publishes a normalized `SourcePushPayload` (`externalRepositoryId: gitea:<owner>/<repo>` built from `owner.username`/`repository.name` to match the source-control adapter, `refs/heads/` stripped, `headCommitSha: after`, `isDefaultBranch`). `getGiteaConnectionByOrg` gains an optional transaction executor so the lookup runs inside the publishing transaction. The webhook is registered out of band by the Gitea instance admin, so the connect flow registers nothing.
+  - `@shipfox/api-integration-core`: wire `publishSourcePush`, `recordDeliveryOnly`, `getIntegrationConnectionById`, and the core database into the Gitea provider, mirroring GitHub.
+  - `@shipfox/node-fastify`: add a shared `verifyHexHmacSignature` helper for hex HMAC-SHA256 webhook signatures.
+  - `@shipfox/api-integration-sentry`: `verifySentrySignature` now delegates to the shared helper.
+
+  A push to a connected org's repo creates a workflow run through the existing pipeline. Duplicate POSTs of the same delivery are deduped via `X-Gitea-Delivery`; note that a manual "Redeliver" in Gitea mints a new delivery id and intentionally produces a fresh run (unlike GitHub, whose redelivery reuses the original id and is suppressed).
+
+- 444ac89: Enables the generic webhook integration provider by default because it does not require provider setup.
+- 5b8ed32: Add the Sentry install/connect flow so a workspace member can link a Sentry
+  installation to a Shipfox workspace, writing the connection + installation rows
+  that the webhook receiver looks up.
+  - `@shipfox/api-integration-sentry`: add a stateless `SentryApiClient`
+    (authorization-code exchange, org-slug derivation, optional verify-install),
+    `handleSentryConnect`, and two authenticated routes —
+    `POST /integrations/sentry/install` (returns the external-install URL) and
+    `POST /integrations/sentry/connect` (links the installation). Sentry has no
+    `state` param, so the workspace is taken from the request body and authorized
+    against the live session; the org slug is derived from Sentry, never trusted
+    from the body. The verify-install side effect runs after the row is persisted,
+    and no Sentry token is stored. Provider HTTP errors map to a typed
+    `SentryIntegrationProviderError` and never carry the token, code, or client
+    secret.
+  - `@shipfox/api-integration-sentry-dto`: add the install/connect request and
+    response schemas.
+  - `@shipfox/api-integration-core`: wire the `getExistingSentryConnection` and
+    `connectSentryInstallation` closures into the Sentry provider (internal
+    wiring, no public API change).
+
+  A concurrent same-install connect race (shared with GitHub) is tracked
+  separately in ENG-409.
+
+- 417f128: Move the Sentry unclaimed-installation cleanup cron out of `@shipfox/api-integration-core` into `@shipfox/api-integration-sentry`, which now owns its own Temporal maintenance worker. `core` aggregates per-integration workers from enabled providers instead of special-casing Sentry, keeping the integration dependency graph a tree (providers depend only on `*-core-dto`, never on `core`). The unclaimed-installation retention window is now configurable via `SENTRY_UNCLAIMED_INSTALLATION_RETENTION_DAYS` (default 7, minimum 1; startup fails on a smaller value so a misconfiguration cannot tombstone freshly created installs).
+- 82d22e4: Make the workspace-membership gate stateless. `requireWorkspaceAccess` now lives in `@shipfox/api-auth-context` and authorizes a request purely from the verified session-token claims, replacing the `requireMembership` gate in `@shipfox/api-workspaces` that read the workspace row from the database on every workspace-scoped request. Membership and role already travel in the token, so the check needs no database access.
+
+  This removes the per-request database read and severs the runtime dependency on `@shipfox/api-workspaces` from feature modules that only needed the membership gate (integration providers, secrets, projects, agent, runners). Workspace existence and `active`-status enforcement, which no code path currently exercises, moves off the hot path; enforce it at token issuance when workspace suspension is introduced.
+
+- 8b9c3e0: Runs the API runners and integration core test suites without per-file Vitest module isolation, removing runner auth-helper mocks and cleaning up module-reset handling for shared test modules.
+- Updated dependencies [067a260]
+- Updated dependencies [43d7996]
+- Updated dependencies [0948b67]
+- Updated dependencies [34ba284]
+- Updated dependencies [5707d6d]
+- Updated dependencies [b9c3f32]
+- Updated dependencies [a81b68c]
+- Updated dependencies [115655e]
+- Updated dependencies [c0a883c]
+- Updated dependencies [72ce351]
+- Updated dependencies [e47f8da]
+- Updated dependencies [de54da2]
+- Updated dependencies [ce062a9]
+- Updated dependencies [8958753]
+- Updated dependencies [7b175f5]
+- Updated dependencies [7ca4c65]
+- Updated dependencies [5bcdbf4]
+- Updated dependencies [f3614ae]
+- Updated dependencies [9f1c0ef]
+- Updated dependencies [ae7a63c]
+- Updated dependencies [5729548]
+- Updated dependencies [d245be8]
+- Updated dependencies [f92122b]
+- Updated dependencies [360d06d]
+- Updated dependencies [f8f339a]
+- Updated dependencies [58f51bd]
+- Updated dependencies [75f2cc8]
+- Updated dependencies [570ac69]
+- Updated dependencies [857fd73]
+- Updated dependencies [0667cce]
+- Updated dependencies [aca162b]
+- Updated dependencies [75520ff]
+- Updated dependencies [b8e49ff]
+- Updated dependencies [5b8ed32]
+- Updated dependencies [417f128]
+- Updated dependencies [d6d4862]
+- Updated dependencies [c0a883c]
+- Updated dependencies [6077301]
+- Updated dependencies [3bea87f]
+- Updated dependencies [82d22e4]
+- Updated dependencies [6297b06]
+- Updated dependencies [01be723]
+- Updated dependencies [27770eb]
+- Updated dependencies [2933c33]
+- Updated dependencies [6181819]
+- Updated dependencies [282e66a]
+- Updated dependencies [9c149d1]
+  - @shipfox/api-agent-dto@0.1.0
+  - @shipfox/api-integration-linear@1.0.0
+  - @shipfox/node-fastify@0.2.0
+  - @shipfox/node-drizzle@0.1.0
+  - @shipfox/api-auth-context@0.1.0
+  - @shipfox/api-integration-core-dto@0.1.0
+  - @shipfox/api-integration-github@0.1.0
+  - @shipfox/node-opentelemetry@0.4.2
+  - @shipfox/node-postgres@0.3.2
+  - @shipfox/node-temporal@0.1.1
+  - @shipfox/regex@0.2.0
+  - @shipfox/api-integration-sentry@0.1.0
+  - @shipfox/node-module@0.1.0
+  - @shipfox/node-outbox@0.1.0
+  - @shipfox/redact@0.1.0
+  - @shipfox/api-integration-gitea@0.0.1
+  - @shipfox/api-integration-webhook@0.0.1
+  - @shipfox/config@1.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shipfox
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/config.d.ts

@@ -0,0 +1,9 @@
+export declare const config: Readonly<{
+    INTEGRATIONS_ENABLE_CRON_PROVIDER: boolean;
+    INTEGRATIONS_ENABLE_GITEA_PROVIDER: boolean;
+    INTEGRATIONS_ENABLE_GITHUB_PROVIDER: boolean;
+    INTEGRATIONS_ENABLE_LINEAR_PROVIDER: boolean;
+    INTEGRATIONS_ENABLE_SENTRY_PROVIDER: boolean;
+    INTEGRATIONS_ENABLE_WEBHOOK_PROVIDER: boolean;
+} & import("@shipfox/config").CleanedEnvAccessors>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,MAAM;;;;;;;kDAyBjB,CAAC"}

package/dist/config.js

@@ -0,0 +1,29 @@
+import { bool, createConfig } from '@shipfox/config';
+export const config = createConfig({
+    INTEGRATIONS_ENABLE_CRON_PROVIDER: bool({
+        desc: 'Enables the cron integration provider so workflow schedules can use the built-in cron source. It is enabled by default because it does not require provider setup.',
+        default: true
+    }),
+    INTEGRATIONS_ENABLE_GITEA_PROVIDER: bool({
+        desc: 'Enables the Gitea integration provider so users can connect a Gitea instance.',
+        default: false
+    }),
+    INTEGRATIONS_ENABLE_GITHUB_PROVIDER: bool({
+        desc: 'Enables the GitHub integration provider so users can connect GitHub.',
+        default: false
+    }),
+    INTEGRATIONS_ENABLE_LINEAR_PROVIDER: bool({
+        desc: 'Enables the Linear integration provider so users can connect Linear workspaces.',
+        default: false
+    }),
+    INTEGRATIONS_ENABLE_SENTRY_PROVIDER: bool({
+        desc: 'Enables the Sentry integration provider so users can connect Sentry.',
+        default: false
+    }),
+    INTEGRATIONS_ENABLE_WEBHOOK_PROVIDER: bool({
+        desc: 'Enables the generic webhook integration provider so users can create inbound webhook URLs. It is enabled by default because it does not require provider setup.',
+        default: true
+    })
+});
+
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config.ts"],"sourcesContent":["import {bool, createConfig} from '@shipfox/config';\n\nexport const config = createConfig({\n  INTEGRATIONS_ENABLE_CRON_PROVIDER: bool({\n    desc: 'Enables the cron integration provider so workflow schedules can use the built-in cron source. It is enabled by default because it does not require provider setup.',\n    default: true,\n  }),\n  INTEGRATIONS_ENABLE_GITEA_PROVIDER: bool({\n    desc: 'Enables the Gitea integration provider so users can connect a Gitea instance.',\n    default: false,\n  }),\n  INTEGRATIONS_ENABLE_GITHUB_PROVIDER: bool({\n    desc: 'Enables the GitHub integration provider so users can connect GitHub.',\n    default: false,\n  }),\n  INTEGRATIONS_ENABLE_LINEAR_PROVIDER: bool({\n    desc: 'Enables the Linear integration provider so users can connect Linear workspaces.',\n    default: false,\n  }),\n  INTEGRATIONS_ENABLE_SENTRY_PROVIDER: bool({\n    desc: 'Enables the Sentry integration provider so users can connect Sentry.',\n    default: false,\n  }),\n  INTEGRATIONS_ENABLE_WEBHOOK_PROVIDER: bool({\n    desc: 'Enables the generic webhook integration provider so users can create inbound webhook URLs. It is enabled by default because it does not require provider setup.',\n    default: true,\n  }),\n});\n"],"names":["bool","createConfig","config","INTEGRATIONS_ENABLE_CRON_PROVIDER","desc","default","INTEGRATIONS_ENABLE_GITEA_PROVIDER","INTEGRATIONS_ENABLE_GITHUB_PROVIDER","INTEGRATIONS_ENABLE_LINEAR_PROVIDER","INTEGRATIONS_ENABLE_SENTRY_PROVIDER","INTEGRATIONS_ENABLE_WEBHOOK_PROVIDER"],"mappings":"AAAA,SAAQA,IAAI,EAAEC,YAAY,QAAO,kBAAkB;AAEnD,OAAO,MAAMC,SAASD,aAAa;IACjCE,mCAAmCH,KAAK;QACtCI,MAAM;QACNC,SAAS;IACX;IACAC,oCAAoCN,KAAK;QACvCI,MAAM;QACNC,SAAS;IACX;IACAE,qCAAqCP,KAAK;QACxCI,MAAM;QACNC,SAAS;IACX;IACAG,qCAAqCR,KAAK;QACxCI,MAAM;QACNC,SAAS;IACX;IACAI,qCAAqCT,KAAK;QACxCI,MAAM;QACNC,SAAS;IACX;IACAK,sCAAsCV,KAAK;QACzCI,MAAM;QACNC,SAAS;IACX;AACF,GAAG"}

package/dist/core/agent-tool-selection.d.ts

@@ -0,0 +1,15 @@
+import type { AgentToolCatalogEntry, AgentToolSelectionCatalog, IntegrationCapability, IntegrationProviderKind } from '@shipfox/api-integration-core-dto';
+import type { IntegrationProviderRegistry } from '#core/providers/registry.js';
+export type AgentToolSelectionCatalogs = ReadonlyMap<IntegrationProviderKind, AgentToolSelectionCatalog>;
+export type AgentToolCatalogs = ReadonlyMap<IntegrationProviderKind, readonly AgentToolCatalogEntry[]>;
+export interface WorkspaceConnectionSnapshotEntry {
+    readonly id: string;
+    readonly provider: IntegrationProviderKind;
+    readonly capabilities: readonly IntegrationCapability[];
+}
+export type WorkspaceConnectionSnapshot = ReadonlyMap<string, WorkspaceConnectionSnapshotEntry>;
+export type LoadWorkspaceConnectionSnapshot = (workspaceId: string) => Promise<WorkspaceConnectionSnapshot>;
+export declare function buildAgentToolSelectionCatalogs(registry: IntegrationProviderRegistry): Promise<AgentToolSelectionCatalogs>;
+export declare function buildAgentToolCatalogs(registry: IntegrationProviderRegistry): Promise<AgentToolCatalogs>;
+export declare function createWorkspaceConnectionSnapshotLoader(registry: IntegrationProviderRegistry): LoadWorkspaceConnectionSnapshot;
+//# sourceMappingURL=agent-tool-selection.d.ts.map

package/dist/core/agent-tool-selection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tool-selection.d.ts","sourceRoot":"","sources":["../../src/core/agent-tool-selection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,6BAA6B,CAAC;AAG7E,MAAM,MAAM,0BAA0B,GAAG,WAAW,CAClD,uBAAuB,EACvB,yBAAyB,CAC1B,CAAC;AACF,MAAM,MAAM,iBAAiB,GAAG,WAAW,CACzC,uBAAuB,EACvB,SAAS,qBAAqB,EAAE,CACjC,CAAC;AAEF,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACzD;AAED,MAAM,MAAM,2BAA2B,GAAG,WAAW,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;AAChG,MAAM,MAAM,+BAA+B,GAAG,CAC5C,WAAW,EAAE,MAAM,KAChB,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAE1C,wBAAsB,+BAA+B,CACnD,QAAQ,EAAE,2BAA2B,GACpC,OAAO,CAAC,0BAA0B,CAAC,CAWrC;AAED,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,2BAA2B,GACpC,OAAO,CAAC,iBAAiB,CAAC,CAW5B;AAED,wBAAgB,uCAAuC,CACrD,QAAQ,EAAE,2BAA2B,GACpC,+BAA+B,CAkBjC"}

package/dist/core/agent-tool-selection.js

@@ -0,0 +1,48 @@
+import { listIntegrationConnections } from '#db/connections.js';
+export async function buildAgentToolSelectionCatalogs(registry) {
+    const entries = await Promise.all(registry.list('agent_tools').map(async (provider)=>{
+        const adapter = provider.adapters.agent_tools;
+        if (adapter === undefined) {
+            throw new Error(`Integration provider "${provider.provider}" has no agent tools adapter`);
+        }
+        return [
+            provider.provider,
+            await adapter.selectionCatalog()
+        ];
+    }));
+    return new Map(entries);
+}
+export async function buildAgentToolCatalogs(registry) {
+    const entries = await Promise.all(registry.list('agent_tools').map(async (provider)=>{
+        const adapter = provider.adapters.agent_tools;
+        if (adapter === undefined) {
+            throw new Error(`Integration provider "${provider.provider}" has no agent tools adapter`);
+        }
+        return [
+            provider.provider,
+            await adapter.catalog()
+        ];
+    }));
+    return new Map(entries);
+}
+export function createWorkspaceConnectionSnapshotLoader(registry) {
+    const capabilitiesByProvider = new Map(registry.list().map((provider)=>[
+            provider.provider,
+            provider.capabilities
+        ]));
+    return async (workspaceId)=>{
+        const connections = await listIntegrationConnections({
+            workspaceId
+        });
+        return new Map(connections.map((connection)=>[
+                connection.slug,
+                {
+                    id: connection.id,
+                    provider: connection.provider,
+                    capabilities: capabilitiesByProvider.get(connection.provider) ?? []
+                }
+            ]));
+    };
+}
+
+//# sourceMappingURL=agent-tool-selection.js.map

package/dist/core/agent-tool-selection.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/agent-tool-selection.ts"],"sourcesContent":["import type {\n  AgentToolCatalogEntry,\n  AgentToolSelectionCatalog,\n  IntegrationCapability,\n  IntegrationProviderKind,\n} from '@shipfox/api-integration-core-dto';\nimport type {IntegrationProviderRegistry} from '#core/providers/registry.js';\nimport {listIntegrationConnections} from '#db/connections.js';\n\nexport type AgentToolSelectionCatalogs = ReadonlyMap<\n  IntegrationProviderKind,\n  AgentToolSelectionCatalog\n>;\nexport type AgentToolCatalogs = ReadonlyMap<\n  IntegrationProviderKind,\n  readonly AgentToolCatalogEntry[]\n>;\n\nexport interface WorkspaceConnectionSnapshotEntry {\n  readonly id: string;\n  readonly provider: IntegrationProviderKind;\n  readonly capabilities: readonly IntegrationCapability[];\n}\n\nexport type WorkspaceConnectionSnapshot = ReadonlyMap<string, WorkspaceConnectionSnapshotEntry>;\nexport type LoadWorkspaceConnectionSnapshot = (\n  workspaceId: string,\n) => Promise<WorkspaceConnectionSnapshot>;\n\nexport async function buildAgentToolSelectionCatalogs(\n  registry: IntegrationProviderRegistry,\n): Promise<AgentToolSelectionCatalogs> {\n  const entries = await Promise.all(\n    registry.list('agent_tools').map(async (provider) => {\n      const adapter = provider.adapters.agent_tools;\n      if (adapter === undefined) {\n        throw new Error(`Integration provider \"${provider.provider}\" has no agent tools adapter`);\n      }\n      return [provider.provider, await adapter.selectionCatalog()] as const;\n    }),\n  );\n  return new Map(entries);\n}\n\nexport async function buildAgentToolCatalogs(\n  registry: IntegrationProviderRegistry,\n): Promise<AgentToolCatalogs> {\n  const entries = await Promise.all(\n    registry.list('agent_tools').map(async (provider) => {\n      const adapter = provider.adapters.agent_tools;\n      if (adapter === undefined) {\n        throw new Error(`Integration provider \"${provider.provider}\" has no agent tools adapter`);\n      }\n      return [provider.provider, await adapter.catalog()] as const;\n    }),\n  );\n  return new Map(entries);\n}\n\nexport function createWorkspaceConnectionSnapshotLoader(\n  registry: IntegrationProviderRegistry,\n): LoadWorkspaceConnectionSnapshot {\n  const capabilitiesByProvider = new Map(\n    registry.list().map((provider) => [provider.provider, provider.capabilities]),\n  );\n\n  return async (workspaceId) => {\n    const connections = await listIntegrationConnections({workspaceId});\n    return new Map(\n      connections.map((connection) => [\n        connection.slug,\n        {\n          id: connection.id,\n          provider: connection.provider,\n          capabilities: capabilitiesByProvider.get(connection.provider) ?? [],\n        },\n      ]),\n    );\n  };\n}\n"],"names":["listIntegrationConnections","buildAgentToolSelectionCatalogs","registry","entries","Promise","all","list","map","provider","adapter","adapters","agent_tools","undefined","Error","selectionCatalog","Map","buildAgentToolCatalogs","catalog","createWorkspaceConnectionSnapshotLoader","capabilitiesByProvider","capabilities","workspaceId","connections","connection","slug","id","get"],"mappings":"AAOA,SAAQA,0BAA0B,QAAO,qBAAqB;AAsB9D,OAAO,eAAeC,gCACpBC,QAAqC;IAErC,MAAMC,UAAU,MAAMC,QAAQC,GAAG,CAC/BH,SAASI,IAAI,CAAC,eAAeC,GAAG,CAAC,OAAOC;QACtC,MAAMC,UAAUD,SAASE,QAAQ,CAACC,WAAW;QAC7C,IAAIF,YAAYG,WAAW;YACzB,MAAM,IAAIC,MAAM,CAAC,sBAAsB,EAAEL,SAASA,QAAQ,CAAC,4BAA4B,CAAC;QAC1F;QACA,OAAO;YAACA,SAASA,QAAQ;YAAE,MAAMC,QAAQK,gBAAgB;SAAG;IAC9D;IAEF,OAAO,IAAIC,IAAIZ;AACjB;AAEA,OAAO,eAAea,uBACpBd,QAAqC;IAErC,MAAMC,UAAU,MAAMC,QAAQC,GAAG,CAC/BH,SAASI,IAAI,CAAC,eAAeC,GAAG,CAAC,OAAOC;QACtC,MAAMC,UAAUD,SAASE,QAAQ,CAACC,WAAW;QAC7C,IAAIF,YAAYG,WAAW;YACzB,MAAM,IAAIC,MAAM,CAAC,sBAAsB,EAAEL,SAASA,QAAQ,CAAC,4BAA4B,CAAC;QAC1F;QACA,OAAO;YAACA,SAASA,QAAQ;YAAE,MAAMC,QAAQQ,OAAO;SAAG;IACrD;IAEF,OAAO,IAAIF,IAAIZ;AACjB;AAEA,OAAO,SAASe,wCACdhB,QAAqC;IAErC,MAAMiB,yBAAyB,IAAIJ,IACjCb,SAASI,IAAI,GAAGC,GAAG,CAAC,CAACC,WAAa;YAACA,SAASA,QAAQ;YAAEA,SAASY,YAAY;SAAC;IAG9E,OAAO,OAAOC;QACZ,MAAMC,cAAc,MAAMtB,2BAA2B;YAACqB;QAAW;QACjE,OAAO,IAAIN,IACTO,YAAYf,GAAG,CAAC,CAACgB,aAAe;gBAC9BA,WAAWC,IAAI;gBACf;oBACEC,IAAIF,WAAWE,EAAE;oBACjBjB,UAAUe,WAAWf,QAAQ;oBAC7BY,cAAcD,uBAAuBO,GAAG,CAACH,WAAWf,QAAQ,KAAK,EAAE;gBACrE;aACD;IAEL;AACF"}

package/dist/core/entities/connection.d.ts

@@ -0,0 +1,2 @@
+export type { IntegrationConnection, IntegrationConnectionLifecycleStatus, } from '@shipfox/api-integration-core-dto';
+//# sourceMappingURL=connection.d.ts.map

package/dist/core/entities/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../../src/core/entities/connection.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,qBAAqB,EACrB,oCAAoC,GACrC,MAAM,mCAAmC,CAAC"}

package/dist/core/entities/connection.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=connection.js.map

package/dist/core/entities/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/entities/connection.ts"],"sourcesContent":["export type {\n  IntegrationConnection,\n  IntegrationConnectionLifecycleStatus,\n} from '@shipfox/api-integration-core-dto';\n"],"names":[],"mappings":"AAAA,WAG2C"}

package/dist/core/entities/provider.d.ts

@@ -0,0 +1,6 @@
+import type { IntegrationProvider as CoreIntegrationProvider, RegisteredIntegrationProvider as CoreRegisteredIntegrationProvider } from '@shipfox/api-integration-core-dto';
+import type { RouteExport } from '@shipfox/node-fastify';
+export type { AgentToolCallInput, AgentToolCatalogEntry, AgentToolJsonSchema, AgentToolSensitivity, AgentToolSession, AgentToolsProvider, IntegrationCapability, IntegrationProviderAdapters, IntegrationProviderKind, OpenAgentToolsSessionInput, } from '@shipfox/api-integration-core-dto';
+export type IntegrationProvider = CoreIntegrationProvider<string, RouteExport>;
+export type RegisteredIntegrationProvider = CoreRegisteredIntegrationProvider<string, RouteExport>;
+//# sourceMappingURL=provider.d.ts.map

package/dist/core/entities/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/core/entities/provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,IAAI,uBAAuB,EAC9C,6BAA6B,IAAI,iCAAiC,EACnE,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,uBAAuB,CAAC;AAEvD,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,mCAAmC,CAAC;AAE3C,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAC/E,MAAM,MAAM,6BAA6B,GAAG,iCAAiC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC"}

package/dist/core/entities/provider.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=provider.js.map

package/dist/core/entities/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/entities/provider.ts"],"sourcesContent":["import type {\n  IntegrationProvider as CoreIntegrationProvider,\n  RegisteredIntegrationProvider as CoreRegisteredIntegrationProvider,\n} from '@shipfox/api-integration-core-dto';\nimport type {RouteExport} from '@shipfox/node-fastify';\n\nexport type {\n  AgentToolCallInput,\n  AgentToolCatalogEntry,\n  AgentToolJsonSchema,\n  AgentToolSensitivity,\n  AgentToolSession,\n  AgentToolsProvider,\n  IntegrationCapability,\n  IntegrationProviderAdapters,\n  IntegrationProviderKind,\n  OpenAgentToolsSessionInput,\n} from '@shipfox/api-integration-core-dto';\n\nexport type IntegrationProvider = CoreIntegrationProvider<string, RouteExport>;\nexport type RegisteredIntegrationProvider = CoreRegisteredIntegrationProvider<string, RouteExport>;\n"],"names":[],"mappings":"AAoBA,WAAmG"}

package/dist/core/errors.d.ts

@@ -0,0 +1,29 @@
+import { ConnectionSlugConflictError, IntegrationProviderError, type IntegrationProviderErrorReason } from '@shipfox/api-integration-core-dto';
+import type { IntegrationCapability, IntegrationProviderKind } from '#core/entities/provider.js';
+export declare class IntegrationConnectionNotFoundError extends Error {
+    constructor(connectionId: string);
+}
+export declare class IntegrationConnectionInactiveError extends Error {
+    constructor(connectionId: string);
+}
+export declare class IntegrationConnectionWorkspaceMismatchError extends Error {
+    constructor(connectionId: string);
+}
+export declare class IntegrationConnectionAlreadyExistsError extends Error {
+    readonly workspaceId: string;
+    readonly provider: IntegrationProviderKind;
+    readonly externalAccountId: string;
+    constructor(workspaceId: string, provider: IntegrationProviderKind, externalAccountId: string);
+}
+export declare class IntegrationCapabilityUnavailableError extends Error {
+    constructor(capability: IntegrationCapability, provider: IntegrationProviderKind);
+}
+export declare class IntegrationCheckoutUnsupportedError extends Error {
+    readonly provider: IntegrationProviderKind;
+    constructor(provider: IntegrationProviderKind);
+}
+export declare class IntegrationProviderUnavailableError extends Error {
+    constructor(provider: IntegrationProviderKind);
+}
+export { ConnectionSlugConflictError, IntegrationProviderError, type IntegrationProviderErrorReason };
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,KAAK,8BAA8B,EACpC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAC,qBAAqB,EAAE,uBAAuB,EAAC,MAAM,4BAA4B,CAAC;AAE/F,qBAAa,kCAAmC,SAAQ,KAAK;gBAC/C,YAAY,EAAE,MAAM;CAGjC;AAED,qBAAa,kCAAmC,SAAQ,KAAK;gBAC/C,YAAY,EAAE,MAAM;CAGjC;AAED,qBAAa,2CAA4C,SAAQ,KAAK;gBACxD,YAAY,EAAE,MAAM;CAGjC;AAED,qBAAa,uCAAwC,SAAQ,KAAK;aAE9C,WAAW,EAAE,MAAM;aACnB,QAAQ,EAAE,uBAAuB;aACjC,iBAAiB,EAAE,MAAM;gBAFzB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,uBAAuB,EACjC,iBAAiB,EAAE,MAAM;CAK5C;AAED,qBAAa,qCAAsC,SAAQ,KAAK;gBAClD,UAAU,EAAE,qBAAqB,EAAE,QAAQ,EAAE,uBAAuB;CAGjF;AAED,qBAAa,mCAAoC,SAAQ,KAAK;aAChC,QAAQ,EAAE,uBAAuB;gBAAjC,QAAQ,EAAE,uBAAuB;CAG9D;AAED,qBAAa,mCAAoC,SAAQ,KAAK;gBAChD,QAAQ,EAAE,uBAAuB;CAG9C;AAED,OAAO,EAAC,2BAA2B,EAAE,wBAAwB,EAAE,KAAK,8BAA8B,EAAC,CAAC"}

package/dist/core/errors.js

@@ -0,0 +1,40 @@
+import { ConnectionSlugConflictError, IntegrationProviderError } from '@shipfox/api-integration-core-dto';
+export class IntegrationConnectionNotFoundError extends Error {
+    constructor(connectionId){
+        super(`Integration connection not found: ${connectionId}`);
+    }
+}
+export class IntegrationConnectionInactiveError extends Error {
+    constructor(connectionId){
+        super(`Integration connection is not active: ${connectionId}`);
+    }
+}
+export class IntegrationConnectionWorkspaceMismatchError extends Error {
+    constructor(connectionId){
+        super(`Integration connection does not belong to the requested workspace: ${connectionId}`);
+    }
+}
+export class IntegrationConnectionAlreadyExistsError extends Error {
+    constructor(workspaceId, provider, externalAccountId){
+        super(`Integration connection already exists: ${workspaceId}/${provider}/${externalAccountId}`), this.workspaceId = workspaceId, this.provider = provider, this.externalAccountId = externalAccountId;
+        this.name = 'IntegrationConnectionAlreadyExistsError';
+    }
+}
+export class IntegrationCapabilityUnavailableError extends Error {
+    constructor(capability, provider){
+        super(`Integration provider ${provider} does not expose ${capability}`);
+    }
+}
+export class IntegrationCheckoutUnsupportedError extends Error {
+    constructor(provider){
+        super(`Integration provider ${provider} cannot create a checkout spec`), this.provider = provider;
+    }
+}
+export class IntegrationProviderUnavailableError extends Error {
+    constructor(provider){
+        super(`No integration provider registered for ${provider}`);
+    }
+}
+export { ConnectionSlugConflictError, IntegrationProviderError };
+
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/errors.ts"],"sourcesContent":["import {\n  ConnectionSlugConflictError,\n  IntegrationProviderError,\n  type IntegrationProviderErrorReason,\n} from '@shipfox/api-integration-core-dto';\nimport type {IntegrationCapability, IntegrationProviderKind} from '#core/entities/provider.js';\n\nexport class IntegrationConnectionNotFoundError extends Error {\n  constructor(connectionId: string) {\n    super(`Integration connection not found: ${connectionId}`);\n  }\n}\n\nexport class IntegrationConnectionInactiveError extends Error {\n  constructor(connectionId: string) {\n    super(`Integration connection is not active: ${connectionId}`);\n  }\n}\n\nexport class IntegrationConnectionWorkspaceMismatchError extends Error {\n  constructor(connectionId: string) {\n    super(`Integration connection does not belong to the requested workspace: ${connectionId}`);\n  }\n}\n\nexport class IntegrationConnectionAlreadyExistsError extends Error {\n  constructor(\n    public readonly workspaceId: string,\n    public readonly provider: IntegrationProviderKind,\n    public readonly externalAccountId: string,\n  ) {\n    super(`Integration connection already exists: ${workspaceId}/${provider}/${externalAccountId}`);\n    this.name = 'IntegrationConnectionAlreadyExistsError';\n  }\n}\n\nexport class IntegrationCapabilityUnavailableError extends Error {\n  constructor(capability: IntegrationCapability, provider: IntegrationProviderKind) {\n    super(`Integration provider ${provider} does not expose ${capability}`);\n  }\n}\n\nexport class IntegrationCheckoutUnsupportedError extends Error {\n  constructor(public readonly provider: IntegrationProviderKind) {\n    super(`Integration provider ${provider} cannot create a checkout spec`);\n  }\n}\n\nexport class IntegrationProviderUnavailableError extends Error {\n  constructor(provider: IntegrationProviderKind) {\n    super(`No integration provider registered for ${provider}`);\n  }\n}\n\nexport {ConnectionSlugConflictError, IntegrationProviderError, type IntegrationProviderErrorReason};\n"],"names":["ConnectionSlugConflictError","IntegrationProviderError","IntegrationConnectionNotFoundError","Error","connectionId","IntegrationConnectionInactiveError","IntegrationConnectionWorkspaceMismatchError","IntegrationConnectionAlreadyExistsError","workspaceId","provider","externalAccountId","name","IntegrationCapabilityUnavailableError","capability","IntegrationCheckoutUnsupportedError","IntegrationProviderUnavailableError"],"mappings":"AAAA,SACEA,2BAA2B,EAC3BC,wBAAwB,QAEnB,oCAAoC;AAG3C,OAAO,MAAMC,2CAA2CC;IACtD,YAAYC,YAAoB,CAAE;QAChC,KAAK,CAAC,CAAC,kCAAkC,EAAEA,cAAc;IAC3D;AACF;AAEA,OAAO,MAAMC,2CAA2CF;IACtD,YAAYC,YAAoB,CAAE;QAChC,KAAK,CAAC,CAAC,sCAAsC,EAAEA,cAAc;IAC/D;AACF;AAEA,OAAO,MAAME,oDAAoDH;IAC/D,YAAYC,YAAoB,CAAE;QAChC,KAAK,CAAC,CAAC,mEAAmE,EAAEA,cAAc;IAC5F;AACF;AAEA,OAAO,MAAMG,gDAAgDJ;IAC3D,YACE,AAAgBK,WAAmB,EACnC,AAAgBC,QAAiC,EACjD,AAAgBC,iBAAyB,CACzC;QACA,KAAK,CAAC,CAAC,uCAAuC,EAAEF,YAAY,CAAC,EAAEC,SAAS,CAAC,EAAEC,mBAAmB,QAJ9EF,cAAAA,kBACAC,WAAAA,eACAC,oBAAAA;QAGhB,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,8CAA8CT;IACzD,YAAYU,UAAiC,EAAEJ,QAAiC,CAAE;QAChF,KAAK,CAAC,CAAC,qBAAqB,EAAEA,SAAS,iBAAiB,EAAEI,YAAY;IACxE;AACF;AAEA,OAAO,MAAMC,4CAA4CX;IACvD,YAAY,AAAgBM,QAAiC,CAAE;QAC7D,KAAK,CAAC,CAAC,qBAAqB,EAAEA,SAAS,8BAA8B,CAAC,QAD5CA,WAAAA;IAE5B;AACF;AAEA,OAAO,MAAMM,4CAA4CZ;IACvD,YAAYM,QAAiC,CAAE;QAC7C,KAAK,CAAC,CAAC,uCAAuC,EAAEA,UAAU;IAC5D;AACF;AAEA,SAAQT,2BAA2B,EAAEC,wBAAwB,GAAuC"}

package/dist/core/providers/agent-tools.d.ts

@@ -0,0 +1,2 @@
+export type { AgentToolCallInput, AgentToolCatalogEntry, AgentToolCatalogMethod, AgentToolJsonSchema, AgentToolSensitivity, AgentToolSession, AgentToolsProvider, OpenAgentToolsSessionInput, } from '@shipfox/api-integration-core-dto';
+//# sourceMappingURL=agent-tools.d.ts.map

package/dist/core/providers/agent-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.d.ts","sourceRoot":"","sources":["../../../src/core/providers/agent-tools.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,mCAAmC,CAAC"}

package/dist/core/providers/agent-tools.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=agent-tools.js.map

package/dist/core/providers/agent-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/providers/agent-tools.ts"],"sourcesContent":["export type {\n  AgentToolCallInput,\n  AgentToolCatalogEntry,\n  AgentToolCatalogMethod,\n  AgentToolJsonSchema,\n  AgentToolSensitivity,\n  AgentToolSession,\n  AgentToolsProvider,\n  OpenAgentToolsSessionInput,\n} from '@shipfox/api-integration-core-dto';\n"],"names":[],"mappings":"AAAA,WAS2C"}

package/dist/core/providers/redact-checkout-spec.d.ts

@@ -0,0 +1,9 @@
+import type { CheckoutSpec } from '@shipfox/api-integration-core-dto';
+/**
+ * Returns a copy of `spec` that is safe to log: the credential token is masked
+ * and any userinfo a provider mistakenly left in `repositoryUrl` is stripped.
+ * Returns the original spec unchanged when it has no credentials and the URL is
+ * already clean.
+ */
+export declare function redactCheckoutSpec(spec: CheckoutSpec): CheckoutSpec;
+//# sourceMappingURL=redact-checkout-spec.d.ts.map

package/dist/core/providers/redact-checkout-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-checkout-spec.d.ts","sourceRoot":"","sources":["../../../src/core/providers/redact-checkout-spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,mCAAmC,CAAC;AAGpE;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,YAAY,CAUnE"}

package/dist/core/providers/redact-checkout-spec.js

@@ -0,0 +1,25 @@
+import { REDACTION_PLACEHOLDER, stripUrlCredentials } from '@shipfox/redact';
+/**
+ * Returns a copy of `spec` that is safe to log: the credential token is masked
+ * and any userinfo a provider mistakenly left in `repositoryUrl` is stripped.
+ * Returns the original spec unchanged when it has no credentials and the URL is
+ * already clean.
+ */ export function redactCheckoutSpec(spec) {
+    const repositoryUrl = stripUrlCredentials(spec.repositoryUrl);
+    if (!spec.credentials) {
+        return repositoryUrl === spec.repositoryUrl ? spec : {
+            ...spec,
+            repositoryUrl
+        };
+    }
+    return {
+        ...spec,
+        repositoryUrl,
+        credentials: {
+            ...spec.credentials,
+            token: REDACTION_PLACEHOLDER
+        }
+    };
+}
+
+//# sourceMappingURL=redact-checkout-spec.js.map

package/dist/core/providers/redact-checkout-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/providers/redact-checkout-spec.ts"],"sourcesContent":["import type {CheckoutSpec} from '@shipfox/api-integration-core-dto';\nimport {REDACTION_PLACEHOLDER, stripUrlCredentials} from '@shipfox/redact';\n\n/**\n * Returns a copy of `spec` that is safe to log: the credential token is masked\n * and any userinfo a provider mistakenly left in `repositoryUrl` is stripped.\n * Returns the original spec unchanged when it has no credentials and the URL is\n * already clean.\n */\nexport function redactCheckoutSpec(spec: CheckoutSpec): CheckoutSpec {\n  const repositoryUrl = stripUrlCredentials(spec.repositoryUrl);\n  if (!spec.credentials) {\n    return repositoryUrl === spec.repositoryUrl ? spec : {...spec, repositoryUrl};\n  }\n  return {\n    ...spec,\n    repositoryUrl,\n    credentials: {...spec.credentials, token: REDACTION_PLACEHOLDER},\n  };\n}\n"],"names":["REDACTION_PLACEHOLDER","stripUrlCredentials","redactCheckoutSpec","spec","repositoryUrl","credentials","token"],"mappings":"AACA,SAAQA,qBAAqB,EAAEC,mBAAmB,QAAO,kBAAkB;AAE3E;;;;;CAKC,GACD,OAAO,SAASC,mBAAmBC,IAAkB;IACnD,MAAMC,gBAAgBH,oBAAoBE,KAAKC,aAAa;IAC5D,IAAI,CAACD,KAAKE,WAAW,EAAE;QACrB,OAAOD,kBAAkBD,KAAKC,aAAa,GAAGD,OAAO;YAAC,GAAGA,IAAI;YAAEC;QAAa;IAC9E;IACA,OAAO;QACL,GAAGD,IAAI;QACPC;QACAC,aAAa;YAAC,GAAGF,KAAKE,WAAW;YAAEC,OAAON;QAAqB;IACjE;AACF"}