@superglue/cli 1.1.13 → 1.1.15

package/dist/dist/cli.js

@@ -1925,7 +1925,9 @@ var require_types = __commonJS({
       RemoveScope2["ENTRY"] = "ENTRY";
     })(RemoveScope || (exports2.RemoveScope = RemoveScope = {}));
     function isRequestConfig(config) {
-      return config?.type === "request" || !config?.type;
+      if (!config || typeof config !== "object")
+        return false;
+      return config.type === "request" || !("type" in config) || config.type === void 0;
     }
     function isTransformConfig(config) {
       return config?.type === "transform";
@@ -2415,6 +2417,7 @@ Use parameterized queries with $1, $2, etc. placeholders:
               }
             }
           },
+          outputTransform: `(sourceData) => { const quote = sourceData.fetchStock?.data?.["Global Quote"] || {}; return { symbol: quote["01. symbol"] || sourceData.symbol || "AAPL", price: parseFloat(quote["05. price"] || "0").toFixed(2), change: quote["09. change"] || "0", changePercent: quote["10. change percent"] || "0%", volume: parseInt(quote["06. volume"] || "0").toLocaleString(), tradingDay: quote["07. latest trading day"] || "N/A", emailSent: sourceData.sendEmail?.success || false }; }`,
           instruction: "Fetches the current stock quote from Alpha Vantage and sends an email with the stock information to your registered email address."
         }
       ]
@@ -2454,6 +2457,25 @@ var require_templates = __commonJS({
         preferredAuthType: "apikey",
         keywords: ["database", "cache", "redis", "key-value", "nosql", "api key"]
       },
+      azure_sql: {
+        name: "azure_sql",
+        apiUrl: "sqlserver://<<host>>:1433;database=<<database>>",
+        regex: "^.*(azure.*sql|sql.*azure|database\\.windows\\.net).*$",
+        icon: "default",
+        docsUrl: "https://learn.microsoft.com/en-us/azure/azure-sql/",
+        preferredAuthType: "apikey",
+        keywords: [
+          "database",
+          "sql",
+          "azure",
+          "query",
+          "table",
+          "schema",
+          "connection",
+          "mssql",
+          "sqlserver"
+        ]
+      },
       stripe: {
         name: "stripe",
         apiUrl: "https://api.stripe.com",
@@ -2539,6 +2561,30 @@ var require_templates = __commonJS({
           "memberships"
         ]
       },
+      hrworks: {
+        name: "hrworks",
+        apiUrl: "https://api.hrworks.de/v2",
+        regex: "(^|.*\\b)(hr\\s?works|hrworks)(\\b.*|$)",
+        icon: "default",
+        docsUrl: "https://developers.hrworks.de/",
+        preferredAuthType: "apikey",
+        keywords: [
+          "hr",
+          "employee",
+          "absence",
+          "vacation",
+          "payroll",
+          "personnel",
+          "time_tracking",
+          "human_resources",
+          "working_time",
+          "attendance",
+          "onboarding",
+          "applicant_management",
+          "travel_expenses",
+          "sick_leave"
+        ]
+      },
       attio: {
         name: "attio",
         apiUrl: "https://api.attio.com/v2/",
@@ -2805,6 +2851,15 @@ var require_templates = __commonJS({
           "oauth"
         ]
       },
+      granola: {
+        name: "granola",
+        apiUrl: "https://public-api.granola.ai",
+        regex: "^.*granola.*$",
+        icon: "default",
+        docsUrl: "https://docs.granola.ai",
+        preferredAuthType: "apikey",
+        keywords: ["meeting", "notes", "transcript", "summary", "ai", "recording"]
+      },
       googleDrive: {
         name: "googleDrive",
         apiUrl: "https://www.googleapis.com/drive/v3",
@@ -4306,6 +4361,58 @@ HEADERS: { "Authorization": "Bearer <<token>>", "Content-Type": "application/jso
           "api key"
         ]
       },
+      creatio: {
+        name: "creatio",
+        apiUrl: "https://<<instance>>.creatio.com/0/odata",
+        regex: "^(.*\\.)?creatio\\.com(/.*)?$",
+        icon: "default",
+        docsUrl: "https://academy.creatio.com/docs/developer/integrations_and_api/data_services/odata/overview",
+        preferredAuthType: "oauth",
+        oauth: {
+          authUrl: "https://<<instance>>.creatio.com/0/connect/authorize",
+          tokenUrl: "https://<<instance>>.creatio.com/0/connect/token",
+          scopes: "offline_access",
+          grant_type: "authorization_code"
+        },
+        systemSpecificInstructions: `Creatio uses OIDC-compliant OAuth endpoints. The standard /ServiceModel/AuthService.svc/Authorize and /rest/oauth/token endpoints are behind IIS session auth and will NOT work for OAuth flows \u2014 you MUST use the /0/connect/* OIDC endpoints instead.
+
+To discover the correct endpoints for any Creatio instance, fetch: https://<instance>.creatio.com/0/.well-known/openid-configuration
+
+This returns authorization_endpoint, token_endpoint, and other OIDC URLs.
+
+IMPORTANT \u2014 Scopes:
+- "offline_access" gets you a refresh token but may not grant API access alone.
+- To get actual API access, the user needs the ApplicationAccess scope: "offline_access ApplicationAccess_<GUID>"
+- The GUID is found in Creatio: System Designer \u2192 Lookups \u2192 "OAuth resources" \u2192 Name column (strip dashes).
+- The OAuth app in Creatio must also have this resource added under its permitted resources.
+
+OAuth App Setup in Creatio:
+1. System Designer \u2192 "OAuth 2.0 integrated applications" \u2192 create app with grant type "On behalf of a user (authorization code)"
+2. Set redirect URI to the superglue callback URL
+3. Under the app's permitted resources, add the ApplicationAccess resource
+4. Note the Client ID and Client Secret
+
+API Base URLs:
+- OData 4: https://<instance>.creatio.com/0/odata/ (e.g., /0/odata/Contact)
+- OData 3: https://<instance>.creatio.com/0/ServiceModel/EntityDataService.svc/ (e.g., /EntityDataService.svc/ContactCollection)
+- Use Bearer token auth: Authorization: Bearer <access_token>`,
+        keywords: [
+          "contacts",
+          "accounts",
+          "leads",
+          "opportunities",
+          "activities",
+          "cases",
+          "orders",
+          "products",
+          "invoices",
+          "campaigns",
+          "crm",
+          "bpm",
+          "odata",
+          "oauth"
+        ]
+      },
       sanity: {
         name: "sanity",
         apiUrl: "https://api.sanity.io",
@@ -5365,7 +5472,7 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
       },
       googleAds: {
         name: "googleAds",
-        apiUrl: "https://googleads.googleapis.com/v20",
+        apiUrl: "https://googleads.googleapis.com/v23",
         regex: "^.*(googleads\\.googleapis|developers\\.google\\.com/google-ads|adwords\\.google).*$",
         icon: "googleads",
         docsUrl: "https://developers.google.com/google-ads/api/docs/concepts/overview",
@@ -5373,11 +5480,24 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
         oauth: {
           authUrl: "https://accounts.google.com/o/oauth2/v2/auth",
           tokenUrl: "https://oauth2.googleapis.com/token",
-          scopes: "https://www.googleapis.com/auth/adwords https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile openid"
+          scopes: "https://www.googleapis.com/auth/adwords"
         },
+        systemSpecificInstructions: `Google Ads API requires BOTH OAuth AND a developer token on every request.
+
+REQUIRED HEADERS:
+- Authorization: Bearer <access_token>
+- developer-token: <22-char token from https://ads.google.com/aw/apicenter>
+- login-customer-id: <manager-account-id without hyphens> (only when calling through a manager account)
+
+SETUP: User needs a Google Ads Manager account, a Google Cloud project with OAuth credentials, and a developer token (applied for via the API Center). New tokens start as test-only; production access requires a follow-up application.
+
+QUERYING (GAQL): Use Google Ads Query Language via:
+- POST /v23/customers/{customerId}/googleAds:searchStream (streaming, recommended)
+- POST /v23/customers/{customerId}/googleAds:search (paginated)
+Example: SELECT campaign.name, metrics.impressions FROM campaign WHERE segments.date DURING LAST_30_DAYS`,
         keywords: [
           "campaigns",
-          "ad groups",
+          "ad_groups",
           "ads",
           "keywords",
           "GAQL",
@@ -5390,6 +5510,9 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
           "accounts",
           "billing",
           "targeting",
+          "search_terms",
+          "metrics",
+          "segments",
           "oauth"
         ]
       },
@@ -5446,6 +5569,33 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
           "api key"
         ]
       },
+      circleback: {
+        name: "circleback",
+        apiUrl: "https://app.circleback.ai",
+        regex: "^.*circleback.*$",
+        icon: "default",
+        docsUrl: "https://support.circleback.ai/en/articles/13249081-circleback-mcp",
+        preferredAuthType: "oauth",
+        systemSpecificInstructions: `Circleback has NO traditional REST API. Data access is exclusively via their MCP server.
+
+MCP ENDPOINT: https://app.circleback.ai/api/mcp
+PROTOCOL: JSON-RPC 2.0 over Streamable HTTP transport
+AUTH: OAuth 2.0 with dynamic client registration (no app registration needed).
+
+AVAILABLE DATA: meetings, transcripts, action items, calendar events, emails, people, companies.`,
+        keywords: [
+          "meetings",
+          "transcripts",
+          "notes",
+          "action_items",
+          "calendar_events",
+          "attendees",
+          "summaries",
+          "people",
+          "companies",
+          "emails"
+        ]
+      },
       firecrawl: {
         name: "firecrawl",
         apiUrl: "https://api.firecrawl.dev/v1",
@@ -5710,6 +5860,8 @@ var require_type_utils = __commonJS({
     exports2.PAGINATION_TYPE_MAP = void 0;
     exports2.mapPaginationType = mapPaginationType;
     exports2.mapFailureBehavior = mapFailureBehavior;
+    exports2.validateToolStructure = validateToolStructure;
+    var types_js_1 = require_types();
     exports2.PAGINATION_TYPE_MAP = {
       OFFSET_BASED: "offsetBased",
       PAGE_BASED: "pageBased",
@@ -5729,6 +5881,50 @@ var require_type_utils = __commonJS({
         return void 0;
       return internal.toLowerCase();
     }
+    function validateToolStructure(tool) {
+      if (!tool || typeof tool !== "object") {
+        return { valid: false, error: "Tool must be an object" };
+      }
+      const candidate = tool;
+      if (!candidate.id || typeof candidate.id !== "string") {
+        return { valid: false, error: "Tool must have a valid 'id' string" };
+      }
+      if (!Array.isArray(candidate.steps)) {
+        return { valid: false, error: "Tool must have a 'steps' array" };
+      }
+      if (candidate.steps.length === 0 && !candidate.outputTransform) {
+        return { valid: false, error: "Tool must have at least one step or an outputTransform" };
+      }
+      for (let i = 0; i < candidate.steps.length; i++) {
+        const step = candidate.steps[i];
+        const stepLabel = step?.id ? `Step ${i + 1} (${step.id})` : `Step ${i + 1}`;
+        if (!step?.id) {
+          return { valid: false, error: `Step ${i + 1}: missing 'id'` };
+        }
+        if (!step.config) {
+          return { valid: false, error: `${stepLabel}: missing 'config'` };
+        }
+        if ((0, types_js_1.isTransformConfig)(step.config)) {
+          if (!step.config.transformCode) {
+            return {
+              valid: false,
+              error: `${stepLabel}: transform step missing 'transformCode'`
+            };
+          }
+          continue;
+        }
+        if (!(0, types_js_1.isRequestConfig)(step.config)) {
+          return {
+            valid: false,
+            error: `${stepLabel}: unknown step config type`
+          };
+        }
+        if (typeof step.config.url !== "string" || step.config.url.trim().length === 0) {
+          return { valid: false, error: `${stepLabel}: request step missing 'url'` };
+        }
+      }
+      return { valid: true };
+    }
   }
 });
 
@@ -9077,8 +9273,8 @@ var require_luxon = __commonJS({
         let current = null, currentFull = "", bracketed = false;
         const splits = [];
         for (let i = 0; i < fmt.length; i++) {
-          const c3 = fmt.charAt(i);
-          if (c3 === "'") {
+          const c2 = fmt.charAt(i);
+          if (c2 === "'") {
             if (currentFull.length > 0 || bracketed) {
               splits.push({
                 literal: bracketed || /^\s+$/.test(currentFull),
@@ -9089,9 +9285,9 @@ var require_luxon = __commonJS({
             currentFull = "";
             bracketed = !bracketed;
           } else if (bracketed) {
-            currentFull += c3;
-          } else if (c3 === current) {
-            currentFull += c3;
+            currentFull += c2;
+          } else if (c2 === current) {
+            currentFull += c2;
           } else {
             if (currentFull.length > 0) {
               splits.push({
@@ -9099,8 +9295,8 @@ var require_luxon = __commonJS({
                 val: currentFull
               });
             }
-            currentFull = c3;
-            current = c3;
+            currentFull = c2;
+            current = c2;
           }
         }
         if (currentFull.length > 0) {
@@ -11782,7 +11978,7 @@ var require_luxon = __commonJS({
       return fixOffset(objToLocalTS(obj), offset2, zone);
     }
     function adjustTime(inst, dur) {
-      const oPre = inst.o, year = inst.c.year + Math.trunc(dur.years), month = inst.c.month + Math.trunc(dur.months) + Math.trunc(dur.quarters) * 3, c3 = {
+      const oPre = inst.o, year = inst.c.year + Math.trunc(dur.years), month = inst.c.month + Math.trunc(dur.months) + Math.trunc(dur.quarters) * 3, c2 = {
         ...inst.c,
         year,
         month,
@@ -11797,7 +11993,7 @@ var require_luxon = __commonJS({
         minutes: dur.minutes,
         seconds: dur.seconds,
         milliseconds: dur.milliseconds
-      }).as("milliseconds"), localTS = objToLocalTS(c3);
+      }).as("milliseconds"), localTS = objToLocalTS(c2);
       let [ts, o] = fixOffset(localTS, oPre, inst.zone);
       if (millisToAdd !== 0) {
         ts += millisToAdd;
@@ -11832,72 +12028,72 @@ var require_luxon = __commonJS({
     }
     function toISODate(o, extended, precision) {
       const longFormat = o.c.year > 9999 || o.c.year < 0;
-      let c3 = "";
-      if (longFormat && o.c.year >= 0) c3 += "+";
-      c3 += padStart(o.c.year, longFormat ? 6 : 4);
-      if (precision === "year") return c3;
+      let c2 = "";
+      if (longFormat && o.c.year >= 0) c2 += "+";
+      c2 += padStart(o.c.year, longFormat ? 6 : 4);
+      if (precision === "year") return c2;
       if (extended) {
-        c3 += "-";
-        c3 += padStart(o.c.month);
-        if (precision === "month") return c3;
-        c3 += "-";
+        c2 += "-";
+        c2 += padStart(o.c.month);
+        if (precision === "month") return c2;
+        c2 += "-";
       } else {
-        c3 += padStart(o.c.month);
-        if (precision === "month") return c3;
+        c2 += padStart(o.c.month);
+        if (precision === "month") return c2;
       }
-      c3 += padStart(o.c.day);
-      return c3;
+      c2 += padStart(o.c.day);
+      return c2;
     }
     function toISOTime(o, extended, suppressSeconds, suppressMilliseconds, includeOffset, extendedZone, precision) {
-      let showSeconds = !suppressSeconds || o.c.millisecond !== 0 || o.c.second !== 0, c3 = "";
+      let showSeconds = !suppressSeconds || o.c.millisecond !== 0 || o.c.second !== 0, c2 = "";
       switch (precision) {
         case "day":
         case "month":
         case "year":
           break;
         default:
-          c3 += padStart(o.c.hour);
+          c2 += padStart(o.c.hour);
           if (precision === "hour") break;
           if (extended) {
-            c3 += ":";
-            c3 += padStart(o.c.minute);
+            c2 += ":";
+            c2 += padStart(o.c.minute);
             if (precision === "minute") break;
             if (showSeconds) {
-              c3 += ":";
-              c3 += padStart(o.c.second);
+              c2 += ":";
+              c2 += padStart(o.c.second);
             }
           } else {
-            c3 += padStart(o.c.minute);
+            c2 += padStart(o.c.minute);
             if (precision === "minute") break;
             if (showSeconds) {
-              c3 += padStart(o.c.second);
+              c2 += padStart(o.c.second);
             }
           }
           if (precision === "second") break;
           if (showSeconds && (!suppressMilliseconds || o.c.millisecond !== 0)) {
-            c3 += ".";
-            c3 += padStart(o.c.millisecond, 3);
+            c2 += ".";
+            c2 += padStart(o.c.millisecond, 3);
           }
       }
       if (includeOffset) {
         if (o.isOffsetFixed && o.offset === 0 && !extendedZone) {
-          c3 += "Z";
+          c2 += "Z";
         } else if (o.o < 0) {
-          c3 += "-";
-          c3 += padStart(Math.trunc(-o.o / 60));
-          c3 += ":";
-          c3 += padStart(Math.trunc(-o.o % 60));
+          c2 += "-";
+          c2 += padStart(Math.trunc(-o.o / 60));
+          c2 += ":";
+          c2 += padStart(Math.trunc(-o.o % 60));
         } else {
-          c3 += "+";
-          c3 += padStart(Math.trunc(o.o / 60));
-          c3 += ":";
-          c3 += padStart(Math.trunc(o.o % 60));
+          c2 += "+";
+          c2 += padStart(Math.trunc(o.o / 60));
+          c2 += ":";
+          c2 += padStart(Math.trunc(o.o % 60));
         }
       }
       if (extendedZone) {
-        c3 += "[" + o.zone.ianaName + "]";
+        c2 += "[" + o.zone.ianaName + "]";
       }
-      return c3;
+      return c2;
     }
     var defaultUnitValues = {
       month: 1,
@@ -12015,10 +12211,10 @@ var require_luxon = __commonJS({
       });
     }
     function diffRelative(start, end, opts) {
-      const round = isUndefined(opts.round) ? true : opts.round, rounding = isUndefined(opts.rounding) ? "trunc" : opts.rounding, format = (c3, unit) => {
-        c3 = roundTo(c3, round || opts.calendary ? 0 : 2, opts.calendary ? "round" : rounding);
+      const round = isUndefined(opts.round) ? true : opts.round, rounding = isUndefined(opts.rounding) ? "trunc" : opts.rounding, format = (c2, unit) => {
+        c2 = roundTo(c2, round || opts.calendary ? 0 : 2, opts.calendary ? "round" : rounding);
         const formatter = end.loc.clone(opts).relFormatter(opts);
-        return formatter.format(c3, unit);
+        return formatter.format(c2, unit);
       }, differ = (unit) => {
         if (opts.calendary) {
           if (!end.hasSame(start, unit)) {
@@ -12059,16 +12255,16 @@ var require_luxon = __commonJS({
         const zone = config.zone || Settings.defaultZone;
         let invalid = config.invalid || (Number.isNaN(config.ts) ? new Invalid("invalid input") : null) || (!zone.isValid ? unsupportedZone(zone) : null);
         this.ts = isUndefined(config.ts) ? Settings.now() : config.ts;
-        let c3 = null, o = null;
+        let c2 = null, o = null;
         if (!invalid) {
           const unchanged = config.old && config.old.ts === this.ts && config.old.zone.equals(zone);
           if (unchanged) {
-            [c3, o] = [config.old.c, config.old.o];
+            [c2, o] = [config.old.c, config.old.o];
           } else {
             const ot = isNumber(config.o) && !config.old ? config.o : zone.offset(this.ts);
-            c3 = tsToObj(this.ts, ot);
-            invalid = Number.isNaN(c3.year) ? new Invalid("invalid input") : null;
-            c3 = invalid ? null : c3;
+            c2 = tsToObj(this.ts, ot);
+            invalid = Number.isNaN(c2.year) ? new Invalid("invalid input") : null;
+            c2 = invalid ? null : c2;
             o = invalid ? null : ot;
           }
         }
@@ -12077,7 +12273,7 @@ var require_luxon = __commonJS({
         this.invalid = invalid;
         this.weekData = null;
         this.localWeekData = null;
-        this.c = c3;
+        this.c = c2;
         this.o = o;
         this.isLuxonDateTime = true;
       }
@@ -12836,8 +13032,8 @@ var require_luxon = __commonJS({
         const ts1 = localTS - o1 * minuteMs;
         const ts2 = localTS - o2 * minuteMs;
         const c1 = tsToObj(ts1, o1);
-        const c22 = tsToObj(ts2, o2);
-        if (c1.hour === c22.hour && c1.minute === c22.minute && c1.second === c22.second && c1.millisecond === c22.millisecond) {
+        const c2 = tsToObj(ts2, o2);
+        if (c1.hour === c2.hour && c1.minute === c2.minute && c1.second === c2.second && c1.millisecond === c2.millisecond) {
           return [clone2(this, {
             ts: ts1
           }), clone2(this, {
@@ -13235,10 +13431,10 @@ var require_luxon = __commonJS({
         }
         precision = normalizeUnit(precision);
         const ext = format === "extended";
-        let c3 = toISODate(this, ext, precision);
-        if (orderedUnits.indexOf(precision) >= 3) c3 += "T";
-        c3 += toISOTime(this, ext, suppressSeconds, suppressMilliseconds, includeOffset, extendedZone, precision);
-        return c3;
+        let c2 = toISODate(this, ext, precision);
+        if (orderedUnits.indexOf(precision) >= 3) c2 += "T";
+        c2 += toISOTime(this, ext, suppressSeconds, suppressMilliseconds, includeOffset, extendedZone, precision);
+        return c2;
       }
       /**
        * Returns an ISO 8601-compliant string representation of this DateTime's date component
@@ -13297,8 +13493,8 @@ var require_luxon = __commonJS({
           return null;
         }
         precision = normalizeUnit(precision);
-        let c3 = includePrefix && orderedUnits.indexOf(precision) >= 3 ? "T" : "";
-        return c3 + toISOTime(this, format === "extended", suppressSeconds, suppressMilliseconds, includeOffset, extendedZone, precision);
+        let c2 = includePrefix && orderedUnits.indexOf(precision) >= 3 ? "T" : "";
+        return c2 + toISOTime(this, format === "extended", suppressSeconds, suppressMilliseconds, includeOffset, extendedZone, precision);
       }
       /**
        * Returns an RFC 2822-compatible string representation of this DateTime
@@ -17883,7 +18079,7 @@ attempted value: ${formattedValue}
           type: next.type,
           oneOf: next._whitelist.describe(),
           notOneOf: next._blacklist.describe(),
-          tests: next.tests.filter((n, idx, list) => list.findIndex((c3) => c3.OPTIONS.name === n.OPTIONS.name) === idx).map((fn) => {
+          tests: next.tests.filter((n, idx, list) => list.findIndex((c2) => c2.OPTIONS.name === n.OPTIONS.name) === idx).map((fn) => {
             const params = fn.OPTIONS.params && options ? resolveParams(Object.assign({}, fn.OPTIONS.params), options) : fn.OPTIONS.params;
             return {
               name: fn.OPTIONS.name,
@@ -20164,6 +20360,8 @@ var require_utils = __commonJS({
     var getConnectionProtocol2 = (url) => {
       if (url.startsWith("postgres://") || url.startsWith("postgresql://"))
         return "postgres";
+      if (url.startsWith("mssql://") || url.startsWith("sqlserver://"))
+        return "mssql";
       if (url.startsWith("redis://") || url.startsWith("rediss://"))
         return "redis";
       if (url.startsWith("ftp://") || url.startsWith("ftps://") || url.startsWith("sftp://"))
@@ -21499,17 +21697,18 @@ var require_superglue_client = __commonJS({
           options: params.options,
           runId: params.runId
         }, params.traceId ? { "X-Trace-Id": params.traceId } : void 0);
+        const success3 = response.status ? response.status === "success" : response.success ?? false;
         return {
-          success: response.success,
+          success: success3,
           data: response.data,
           error: response.error,
-          tool: response.tool,
+          tool: response.tool || params.tool,
           stepResults: response.stepResults?.map((sr) => ({
             stepId: sr.stepId,
             success: sr.success,
             data: sr.data,
             error: sr.error
-          }))
+          })) || []
         };
       }
       async abortToolExecution(runId) {
@@ -21694,12 +21893,18 @@ var require_superglue_client = __commonJS({
         const response = await this.restRequest("GET", `/v1/tools?limit=${limit}&page=${page}${archiveParam}`);
         return { items: response.data, total: response.total };
       }
+      async createWorkflow(id, input) {
+        return this.restRequest("POST", "/v1/tools", { ...input, id });
+      }
+      async updateWorkflow(id, input) {
+        return this.restRequest("PUT", `/v1/tools/${encodeURIComponent(id)}`, input);
+      }
       async upsertWorkflow(id, input) {
         const existing = await this.getWorkflow(id);
         if (existing) {
-          return this.restRequest("PUT", `/v1/tools/${encodeURIComponent(id)}`, input);
+          return this.updateWorkflow(id, input);
         } else {
-          return this.restRequest("POST", "/v1/tools", { id, ...input });
+          return this.createWorkflow(id, input);
         }
       }
       async deleteWorkflow(id) {
@@ -22014,14 +22219,14 @@ var package_default = {
     "LICENSE"
   ],
   dependencies: {
-    commander: "^13.0.0",
-    "fast-json-patch": "^3.1.1"
+    commander: "15.0.0-0",
+    "fast-json-patch": "3.1.1"
   },
   devDependencies: {
     "@superglue/shared": "file:../shared",
-    "@types/node": "^20.0.0",
-    tsup: "^8.0.0",
-    typescript: "^5.0.0"
+    "@types/node": "25.5.0",
+    tsup: "8.5.1",
+    typescript: "5.8.3"
   },
   scripts: {
     build: "tsup && (cp -r skills dist/ 2>/dev/null || true)",
@@ -23432,13 +23637,18 @@ function registerFindCommand2(parent, getContext2) {
       const mode = opts.mode === "dev" || opts.mode === "prod" ? opts.mode : "all";
       const { items } = await client.listSystems(100, 1, { mode });
       table(
-        items.map((s) => ({
-          id: s.id,
-          name: s.name || "",
-          env: s.environment || "prod",
-          url: (s.url || "").slice(0, 50)
-        })),
-        ["id", "name", "env", "url"]
+        items.map((s) => {
+          const credentialKeys = Object.keys(s.credentials || {});
+          const credPlaceholders = credentialKeys.map((k) => `<<${s.id}_${k}>>`).join(", ");
+          return {
+            id: s.id,
+            name: s.name || "",
+            env: s.environment || "prod",
+            url: (s.url || "").slice(0, 40),
+            credentials: credPlaceholders || "(none)"
+          };
+        }),
+        ["id", "name", "env", "url", "credentials"]
       );
     } catch (err) {
       error(err.message);
@@ -23471,7 +23681,7 @@ function registerFindCommand2(parent, getContext2) {
       if (rawQuery === "*") {
         output({
           success: true,
-          systems: items.map((s) => ({ id: s.id, name: s.name, url: s.url }))
+          systems: items.map((s) => filterSystemFields(s))
         });
         return;
       }
@@ -23482,7 +23692,7 @@ function registerFindCommand2(parent, getContext2) {
       });
       output({
         success: true,
-        systems: filtered.map((s) => ({ id: s.id, name: s.name, url: s.url }))
+        systems: filtered.map((s) => filterSystemFields(s))
       });
     } catch (err) {
       error(err.message);
@@ -23505,6 +23715,46 @@ function registerCallCommand(parent, getContext2) {
     []
   ).addOption(
     new import_commander5.Option("--env <environment>", "Environment: dev or prod").choices(["dev", "prod"])
+  ).addHelpText(
+    "after",
+    `
+${c.bold}Discovering Credential Placeholders:${c.reset}
+  Use 'sg system find <system-id>' to see available credential placeholders:
+
+    ${c.dim}$${c.reset} sg system find my_postgres
+    ${c.green}\u2192 credentialPlaceholders:${c.reset} ["<<my_postgres_username>>", "<<my_postgres_password>>"]
+
+  Or use 'sg system list' to see credentials for all systems at once.
+
+${c.bold}Examples:${c.reset}
+  ${c.dim}# HTTP API with API key${c.reset}
+  sg system call --system-id stripe \\
+    --url "https://api.stripe.com/v1/customers" \\
+    --headers '{"Authorization": "Bearer <<stripe_api_key>>"}'
+
+  ${c.dim}# PostgreSQL database query${c.reset}
+  sg system call --system-id my_postgres \\
+    --url "postgres://<<my_postgres_username>>:<<my_postgres_password>>@localhost:5432/mydb" \\
+    --body '{"query": "SELECT * FROM users WHERE id = $1", "params": [123]}'
+
+  ${c.dim}# Microsoft SQL Server with parameterized query${c.reset}
+  sg system call --system-id azure_sql \\
+    --url "mssql://<<azure_sql_username>>:<<azure_sql_password>>@server.database.windows.net:1433/mydb" \\
+    --body '{"query": "SELECT * FROM orders WHERE status = @param1", "params": ["pending"]}'
+
+  ${c.dim}# Redis command${c.reset}
+  sg system call --system-id my_redis \\
+    --url "redis://<<my_redis_password>>@localhost:6379" \\
+    --body '{"command": "GET", "args": ["user:123"]}'
+
+  ${c.dim}# SFTP list files${c.reset}
+  sg system call --system-id sftp_server \\
+    --url "sftp://<<sftp_server_username>>:<<sftp_server_password>>@files.example.com:22" \\
+    --body '{"operation": "list", "path": "/uploads"}'
+
+${c.bold}Supported Protocols:${c.reset}
+  HTTP/HTTPS, PostgreSQL, MSSQL/SQL Server, Redis, SFTP/FTP/FTPS, SMB
+`
   ).action(async (opts) => {
     const { client } = getContext2();
     const method = opts.method || "GET";