@superglue/cli 1.1.14 → 1.1.16

package/dist/cli.js

@@ -1925,7 +1925,9 @@ var require_types = __commonJS({
       RemoveScope2["ENTRY"] = "ENTRY";
     })(RemoveScope || (exports2.RemoveScope = RemoveScope = {}));
     function isRequestConfig(config) {
-      return config?.type === "request" || !config?.type;
+      if (!config || typeof config !== "object")
+        return false;
+      return config.type === "request" || !("type" in config) || config.type === void 0;
     }
     function isTransformConfig(config) {
       return config?.type === "transform";
@@ -2389,7 +2391,7 @@ Use parameterized queries with $1, $2, etc. placeholders:
                     
                     <div style="margin-top: 24px; padding: 20px; background: #fefce8; border-radius: 12px; border: 1px solid #fef08a;">
                       <p style="margin: 0; color: #854d0e; font-size: 14px;">
-                        <strong>\u{1F4A1} This is a demo tool!</strong> You just ran your first superglue workflow. 
+                        <strong>\u{1F4A1} This is a demo tool!</strong> You just ran your first superglue tool. 
                         Edit this tool or create your own to automate any API integration.
                       </p>
                     </div>
@@ -2415,6 +2417,7 @@ Use parameterized queries with $1, $2, etc. placeholders:
               }
             }
           },
+          outputTransform: `(sourceData) => { const quote = sourceData.fetchStock?.data?.["Global Quote"] || {}; return { symbol: quote["01. symbol"] || sourceData.symbol || "AAPL", price: parseFloat(quote["05. price"] || "0").toFixed(2), change: quote["09. change"] || "0", changePercent: quote["10. change percent"] || "0%", volume: parseInt(quote["06. volume"] || "0").toLocaleString(), tradingDay: quote["07. latest trading day"] || "N/A", emailSent: sourceData.sendEmail?.success || false }; }`,
           instruction: "Fetches the current stock quote from Alpha Vantage and sends an email with the stock information to your registered email address."
         }
       ]
@@ -2454,6 +2457,25 @@ var require_templates = __commonJS({
         preferredAuthType: "apikey",
         keywords: ["database", "cache", "redis", "key-value", "nosql", "api key"]
       },
+      azure_sql: {
+        name: "azure_sql",
+        apiUrl: "sqlserver://<<host>>:1433;database=<<database>>",
+        regex: "^.*(azure.*sql|sql.*azure|database\\.windows\\.net).*$",
+        icon: "default",
+        docsUrl: "https://learn.microsoft.com/en-us/azure/azure-sql/",
+        preferredAuthType: "apikey",
+        keywords: [
+          "database",
+          "sql",
+          "azure",
+          "query",
+          "table",
+          "schema",
+          "connection",
+          "mssql",
+          "sqlserver"
+        ]
+      },
       stripe: {
         name: "stripe",
         apiUrl: "https://api.stripe.com",
@@ -2539,6 +2561,30 @@ var require_templates = __commonJS({
           "memberships"
         ]
       },
+      hrworks: {
+        name: "hrworks",
+        apiUrl: "https://api.hrworks.de/v2",
+        regex: "(^|.*\\b)(hr\\s?works|hrworks)(\\b.*|$)",
+        icon: "default",
+        docsUrl: "https://developers.hrworks.de/",
+        preferredAuthType: "apikey",
+        keywords: [
+          "hr",
+          "employee",
+          "absence",
+          "vacation",
+          "payroll",
+          "personnel",
+          "time_tracking",
+          "human_resources",
+          "working_time",
+          "attendance",
+          "onboarding",
+          "applicant_management",
+          "travel_expenses",
+          "sick_leave"
+        ]
+      },
       attio: {
         name: "attio",
         apiUrl: "https://api.attio.com/v2/",
@@ -2805,6 +2851,15 @@ var require_templates = __commonJS({
           "oauth"
         ]
       },
+      granola: {
+        name: "granola",
+        apiUrl: "https://public-api.granola.ai",
+        regex: "^.*granola.*$",
+        icon: "default",
+        docsUrl: "https://docs.granola.ai",
+        preferredAuthType: "apikey",
+        keywords: ["meeting", "notes", "transcript", "summary", "ai", "recording"]
+      },
       googleDrive: {
         name: "googleDrive",
         apiUrl: "https://www.googleapis.com/drive/v3",
@@ -4306,6 +4361,58 @@ HEADERS: { "Authorization": "Bearer <<token>>", "Content-Type": "application/jso
           "api key"
         ]
       },
+      creatio: {
+        name: "creatio",
+        apiUrl: "https://<<instance>>.creatio.com/0/odata",
+        regex: "^(.*\\.)?creatio\\.com(/.*)?$",
+        icon: "default",
+        docsUrl: "https://academy.creatio.com/docs/developer/integrations_and_api/data_services/odata/overview",
+        preferredAuthType: "oauth",
+        oauth: {
+          authUrl: "https://<<instance>>.creatio.com/0/connect/authorize",
+          tokenUrl: "https://<<instance>>.creatio.com/0/connect/token",
+          scopes: "offline_access",
+          grant_type: "authorization_code"
+        },
+        systemSpecificInstructions: `Creatio uses OIDC-compliant OAuth endpoints. The standard /ServiceModel/AuthService.svc/Authorize and /rest/oauth/token endpoints are behind IIS session auth and will NOT work for OAuth flows \u2014 you MUST use the /0/connect/* OIDC endpoints instead.
+
+To discover the correct endpoints for any Creatio instance, fetch: https://<instance>.creatio.com/0/.well-known/openid-configuration
+
+This returns authorization_endpoint, token_endpoint, and other OIDC URLs.
+
+IMPORTANT \u2014 Scopes:
+- "offline_access" gets you a refresh token but may not grant API access alone.
+- To get actual API access, the user needs the ApplicationAccess scope: "offline_access ApplicationAccess_<GUID>"
+- The GUID is found in Creatio: System Designer \u2192 Lookups \u2192 "OAuth resources" \u2192 Name column (strip dashes).
+- The OAuth app in Creatio must also have this resource added under its permitted resources.
+
+OAuth App Setup in Creatio:
+1. System Designer \u2192 "OAuth 2.0 integrated applications" \u2192 create app with grant type "On behalf of a user (authorization code)"
+2. Set redirect URI to the superglue callback URL
+3. Under the app's permitted resources, add the ApplicationAccess resource
+4. Note the Client ID and Client Secret
+
+API Base URLs:
+- OData 4: https://<instance>.creatio.com/0/odata/ (e.g., /0/odata/Contact)
+- OData 3: https://<instance>.creatio.com/0/ServiceModel/EntityDataService.svc/ (e.g., /EntityDataService.svc/ContactCollection)
+- Use Bearer token auth: Authorization: Bearer <access_token>`,
+        keywords: [
+          "contacts",
+          "accounts",
+          "leads",
+          "opportunities",
+          "activities",
+          "cases",
+          "orders",
+          "products",
+          "invoices",
+          "campaigns",
+          "crm",
+          "bpm",
+          "odata",
+          "oauth"
+        ]
+      },
       sanity: {
         name: "sanity",
         apiUrl: "https://api.sanity.io",
@@ -4554,6 +4661,54 @@ HEADERS: { "Authorization": "Bearer <<token>>", "Content-Type": "application/jso
           "api key"
         ]
       },
+      datahub: {
+        name: "datahub",
+        apiUrl: "https://{your-datahub-host}",
+        regex: "^.*(datahub|acryl\\.datahub|datahubproject|datahub-gms|acryl\\.io).*$",
+        icon: "lucide:library-big",
+        docsUrl: "https://docs.datahub.com/docs/api/openapi/openapi-usage-guide",
+        preferredAuthType: "apikey",
+        keywords: [
+          "metadata",
+          "catalog",
+          "data discovery",
+          "lineage",
+          "dataset",
+          "dashboard",
+          "ml model",
+          "governance",
+          "entities",
+          "aspects",
+          "urn",
+          "relationships",
+          "schema",
+          "openapi",
+          "gms",
+          "ingestion",
+          "acryl",
+          "oidc",
+          "api key"
+        ],
+        systemSpecificInstructions: `DataHub is a metadata catalog (discovery, lineage, governance, quality, contracts). Programmatic access for REST-first workflows is the OpenAPI surface on the Metadata Service (GMS), not the marketing or docs site.
+
+OSS vs Cloud (brief): Self-hosted (open-source) means you run DataHub in your environment (Docker/K8s/Helm, etc.) and own URLs, upgrades, and networking. DataHub Cloud (Acryl) is a managed instance: you typically get https://<your-domain>.acryl.io, onboarding from the integrations team, optional AWS PrivateLink into your VPC, and UI login via admin invite or OIDC \u2014 same metadata model and APIs in principle, different hostname, auth onboarding, and who operates the plane. Always use the base URL you were given, not generic doc sites.
+
+DataHub Cloud UI access: Admin users receive an invite link; OIDC uses your IdP\u2019s Client ID, Client Secret, and Discovery URL (must resolve to \u2026/.well-known/openid-configuration). Register redirect/callback https://<your-acryl-domain>.acryl.io/callback/oidc in the IdP. As of current Cloud docs, LDAP/SAML are not supported for that login path \u2014 confirm with Acryl if your requirements differ. Support: http://support.datahub.com/
+
+Ingestion & discovery: Cloud uses push-based ingestion \u2014 run DataHub\u2019s agent inside your network so secrets stay local, with scheduled Python ingestion jobs pushing metadata to your instance. Day-to-day discovery is search and browse in the UI; OpenAPI/GraphQL/Rest.li read and write the same underlying graph.
+
+Base URL (critical): OpenAPI is under /openapi/ on the GMS origin (or the UI origin if it proxies /openapi). Local quickstart: http://localhost:8080/openapi/swagger-ui/index.html \u2014 API base is scheme+host+port only (e.g. https://gms.yourcompany.com, your Cloud hostname, or a frontend that proxies GMS).
+
+Verify the base: {base}/openapi/v3/api-docs or {base}/openapi/v3/api-docs.yaml. No global openApiUrl \u2014 in superglue, import from your instance\u2019s /openapi/v3/api-docs (or .yaml).
+
+Authentication: REST examples use Authorization: Bearer <token>. Token issuance depends on edition (PATs, OIDC/session, etc.); follow DataHub\u2019s authentication and access-token docs for your deployment.
+
+Main OpenAPI groups (paths under /openapi/): entities/v1 \u2014 upsert/read/delete entity+aspect (POST; ?createEntityIfNotExists=true for create-only; GET \u2026/latest?urns&aspectNames; DELETE ?urns&soft=). relationships/v1 \u2014 graph navigation. timeline \u2014 aspect history. platform \u2014 metadata events. v3 adds batch get (/v3/entity/{entityName}/batchGet), conditional writes, JSON Patch-style updates (see OpenAPI guide).
+
+Identifiers are URN-centric (e.g. urn:li:dataset:(...)). Also GraphQL and Rest.li \u2014 see the official API overview to pick an interface.
+
+References: https://docs.datahub.com/docs/features \u2014 product context; https://docs.datahub.com/docs/api/openapi/openapi-usage-guide \u2014 OpenAPI usage; https://docs.datahub.com/docs/managed-datahub/welcome-acryl \u2014 DataHub Cloud getting started (URL pattern, OIDC callback, ingestion); https://docs.datahub.com/docs/managed-datahub/managed-datahub-overview \u2014 OSS vs Cloud feature comparison.`
+      },
       looker: {
         name: "looker",
         apiUrl: "https://{your-domain}.looker.com/api",
@@ -5365,7 +5520,7 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
       },
       googleAds: {
         name: "googleAds",
-        apiUrl: "https://googleads.googleapis.com/v20",
+        apiUrl: "https://googleads.googleapis.com/v23",
         regex: "^.*(googleads\\.googleapis|developers\\.google\\.com/google-ads|adwords\\.google).*$",
         icon: "googleads",
         docsUrl: "https://developers.google.com/google-ads/api/docs/concepts/overview",
@@ -5373,11 +5528,24 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
         oauth: {
           authUrl: "https://accounts.google.com/o/oauth2/v2/auth",
           tokenUrl: "https://oauth2.googleapis.com/token",
-          scopes: "https://www.googleapis.com/auth/adwords https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile openid"
+          scopes: "https://www.googleapis.com/auth/adwords"
         },
+        systemSpecificInstructions: `Google Ads API requires BOTH OAuth AND a developer token on every request.
+
+REQUIRED HEADERS:
+- Authorization: Bearer <access_token>
+- developer-token: <22-char token from https://ads.google.com/aw/apicenter>
+- login-customer-id: <manager-account-id without hyphens> (only when calling through a manager account)
+
+SETUP: User needs a Google Ads Manager account, a Google Cloud project with OAuth credentials, and a developer token (applied for via the API Center). New tokens start as test-only; production access requires a follow-up application.
+
+QUERYING (GAQL): Use Google Ads Query Language via:
+- POST /v23/customers/{customerId}/googleAds:searchStream (streaming, recommended)
+- POST /v23/customers/{customerId}/googleAds:search (paginated)
+Example: SELECT campaign.name, metrics.impressions FROM campaign WHERE segments.date DURING LAST_30_DAYS`,
         keywords: [
           "campaigns",
-          "ad groups",
+          "ad_groups",
           "ads",
           "keywords",
           "GAQL",
@@ -5390,6 +5558,9 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
           "accounts",
           "billing",
           "targeting",
+          "search_terms",
+          "metrics",
+          "segments",
           "oauth"
         ]
       },
@@ -5446,6 +5617,33 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
           "api key"
         ]
       },
+      circleback: {
+        name: "circleback",
+        apiUrl: "https://app.circleback.ai",
+        regex: "^.*circleback.*$",
+        icon: "default",
+        docsUrl: "https://support.circleback.ai/en/articles/13249081-circleback-mcp",
+        preferredAuthType: "oauth",
+        systemSpecificInstructions: `Circleback has NO traditional REST API. Data access is exclusively via their MCP server.
+
+MCP ENDPOINT: https://app.circleback.ai/api/mcp
+PROTOCOL: JSON-RPC 2.0 over Streamable HTTP transport
+AUTH: OAuth 2.0 with dynamic client registration (no app registration needed).
+
+AVAILABLE DATA: meetings, transcripts, action items, calendar events, emails, people, companies.`,
+        keywords: [
+          "meetings",
+          "transcripts",
+          "notes",
+          "action_items",
+          "calendar_events",
+          "attendees",
+          "summaries",
+          "people",
+          "companies",
+          "emails"
+        ]
+      },
       firecrawl: {
         name: "firecrawl",
         apiUrl: "https://api.firecrawl.dev/v1",
@@ -5710,6 +5908,8 @@ var require_type_utils = __commonJS({
     exports2.PAGINATION_TYPE_MAP = void 0;
     exports2.mapPaginationType = mapPaginationType;
     exports2.mapFailureBehavior = mapFailureBehavior;
+    exports2.validateToolStructure = validateToolStructure;
+    var types_js_1 = require_types();
     exports2.PAGINATION_TYPE_MAP = {
       OFFSET_BASED: "offsetBased",
       PAGE_BASED: "pageBased",
@@ -5729,6 +5929,50 @@ var require_type_utils = __commonJS({
         return void 0;
       return internal.toLowerCase();
     }
+    function validateToolStructure(tool) {
+      if (!tool || typeof tool !== "object") {
+        return { valid: false, error: "Tool must be an object" };
+      }
+      const candidate = tool;
+      if (!candidate.id || typeof candidate.id !== "string") {
+        return { valid: false, error: "Tool must have a valid 'id' string" };
+      }
+      if (!Array.isArray(candidate.steps)) {
+        return { valid: false, error: "Tool must have a 'steps' array" };
+      }
+      if (candidate.steps.length === 0 && !candidate.outputTransform) {
+        return { valid: false, error: "Tool must have at least one step or an outputTransform" };
+      }
+      for (let i = 0; i < candidate.steps.length; i++) {
+        const step = candidate.steps[i];
+        const stepLabel = step?.id ? `Step ${i + 1} (${step.id})` : `Step ${i + 1}`;
+        if (!step?.id) {
+          return { valid: false, error: `Step ${i + 1}: missing 'id'` };
+        }
+        if (!step.config) {
+          return { valid: false, error: `${stepLabel}: missing 'config'` };
+        }
+        if ((0, types_js_1.isTransformConfig)(step.config)) {
+          if (!step.config.transformCode) {
+            return {
+              valid: false,
+              error: `${stepLabel}: transform step missing 'transformCode'`
+            };
+          }
+          continue;
+        }
+        if (!(0, types_js_1.isRequestConfig)(step.config)) {
+          return {
+            valid: false,
+            error: `${stepLabel}: unknown step config type`
+          };
+        }
+        if (typeof step.config.url !== "string" || step.config.url.trim().length === 0) {
+          return { valid: false, error: `${stepLabel}: request step missing 'url'` };
+        }
+      }
+      return { valid: true };
+    }
   }
 });
 
@@ -21697,12 +21941,18 @@ var require_superglue_client = __commonJS({
         const response = await this.restRequest("GET", `/v1/tools?limit=${limit}&page=${page}${archiveParam}`);
         return { items: response.data, total: response.total };
       }
+      async createWorkflow(id, input) {
+        return this.restRequest("POST", "/v1/tools", { ...input, id });
+      }
+      async updateWorkflow(id, input) {
+        return this.restRequest("PUT", `/v1/tools/${encodeURIComponent(id)}`, input);
+      }
       async upsertWorkflow(id, input) {
         const existing = await this.getWorkflow(id);
         if (existing) {
-          return this.restRequest("PUT", `/v1/tools/${encodeURIComponent(id)}`, input);
+          return this.updateWorkflow(id, input);
         } else {
-          return this.restRequest("POST", "/v1/tools", { id, ...input });
+          return this.createWorkflow(id, input);
         }
       }
       async deleteWorkflow(id) {

package/dist/dist/cli.js

@@ -1925,7 +1925,9 @@ var require_types = __commonJS({
       RemoveScope2["ENTRY"] = "ENTRY";
     })(RemoveScope || (exports2.RemoveScope = RemoveScope = {}));
     function isRequestConfig(config) {
-      return config?.type === "request" || !config?.type;
+      if (!config || typeof config !== "object")
+        return false;
+      return config.type === "request" || !("type" in config) || config.type === void 0;
     }
     function isTransformConfig(config) {
       return config?.type === "transform";
@@ -2389,7 +2391,7 @@ Use parameterized queries with $1, $2, etc. placeholders:
                     
                     <div style="margin-top: 24px; padding: 20px; background: #fefce8; border-radius: 12px; border: 1px solid #fef08a;">
                       <p style="margin: 0; color: #854d0e; font-size: 14px;">
-                        <strong>\u{1F4A1} This is a demo tool!</strong> You just ran your first superglue workflow. 
+                        <strong>\u{1F4A1} This is a demo tool!</strong> You just ran your first superglue tool. 
                         Edit this tool or create your own to automate any API integration.
                       </p>
                     </div>
@@ -2415,6 +2417,7 @@ Use parameterized queries with $1, $2, etc. placeholders:
               }
             }
           },
+          outputTransform: `(sourceData) => { const quote = sourceData.fetchStock?.data?.["Global Quote"] || {}; return { symbol: quote["01. symbol"] || sourceData.symbol || "AAPL", price: parseFloat(quote["05. price"] || "0").toFixed(2), change: quote["09. change"] || "0", changePercent: quote["10. change percent"] || "0%", volume: parseInt(quote["06. volume"] || "0").toLocaleString(), tradingDay: quote["07. latest trading day"] || "N/A", emailSent: sourceData.sendEmail?.success || false }; }`,
           instruction: "Fetches the current stock quote from Alpha Vantage and sends an email with the stock information to your registered email address."
         }
       ]
@@ -2454,6 +2457,25 @@ var require_templates = __commonJS({
         preferredAuthType: "apikey",
         keywords: ["database", "cache", "redis", "key-value", "nosql", "api key"]
       },
+      azure_sql: {
+        name: "azure_sql",
+        apiUrl: "sqlserver://<<host>>:1433;database=<<database>>",
+        regex: "^.*(azure.*sql|sql.*azure|database\\.windows\\.net).*$",
+        icon: "default",
+        docsUrl: "https://learn.microsoft.com/en-us/azure/azure-sql/",
+        preferredAuthType: "apikey",
+        keywords: [
+          "database",
+          "sql",
+          "azure",
+          "query",
+          "table",
+          "schema",
+          "connection",
+          "mssql",
+          "sqlserver"
+        ]
+      },
       stripe: {
         name: "stripe",
         apiUrl: "https://api.stripe.com",
@@ -2539,6 +2561,30 @@ var require_templates = __commonJS({
           "memberships"
         ]
       },
+      hrworks: {
+        name: "hrworks",
+        apiUrl: "https://api.hrworks.de/v2",
+        regex: "(^|.*\\b)(hr\\s?works|hrworks)(\\b.*|$)",
+        icon: "default",
+        docsUrl: "https://developers.hrworks.de/",
+        preferredAuthType: "apikey",
+        keywords: [
+          "hr",
+          "employee",
+          "absence",
+          "vacation",
+          "payroll",
+          "personnel",
+          "time_tracking",
+          "human_resources",
+          "working_time",
+          "attendance",
+          "onboarding",
+          "applicant_management",
+          "travel_expenses",
+          "sick_leave"
+        ]
+      },
       attio: {
         name: "attio",
         apiUrl: "https://api.attio.com/v2/",
@@ -2805,6 +2851,15 @@ var require_templates = __commonJS({
           "oauth"
         ]
       },
+      granola: {
+        name: "granola",
+        apiUrl: "https://public-api.granola.ai",
+        regex: "^.*granola.*$",
+        icon: "default",
+        docsUrl: "https://docs.granola.ai",
+        preferredAuthType: "apikey",
+        keywords: ["meeting", "notes", "transcript", "summary", "ai", "recording"]
+      },
       googleDrive: {
         name: "googleDrive",
         apiUrl: "https://www.googleapis.com/drive/v3",
@@ -4306,6 +4361,58 @@ HEADERS: { "Authorization": "Bearer <<token>>", "Content-Type": "application/jso
           "api key"
         ]
       },
+      creatio: {
+        name: "creatio",
+        apiUrl: "https://<<instance>>.creatio.com/0/odata",
+        regex: "^(.*\\.)?creatio\\.com(/.*)?$",
+        icon: "default",
+        docsUrl: "https://academy.creatio.com/docs/developer/integrations_and_api/data_services/odata/overview",
+        preferredAuthType: "oauth",
+        oauth: {
+          authUrl: "https://<<instance>>.creatio.com/0/connect/authorize",
+          tokenUrl: "https://<<instance>>.creatio.com/0/connect/token",
+          scopes: "offline_access",
+          grant_type: "authorization_code"
+        },
+        systemSpecificInstructions: `Creatio uses OIDC-compliant OAuth endpoints. The standard /ServiceModel/AuthService.svc/Authorize and /rest/oauth/token endpoints are behind IIS session auth and will NOT work for OAuth flows \u2014 you MUST use the /0/connect/* OIDC endpoints instead.
+
+To discover the correct endpoints for any Creatio instance, fetch: https://<instance>.creatio.com/0/.well-known/openid-configuration
+
+This returns authorization_endpoint, token_endpoint, and other OIDC URLs.
+
+IMPORTANT \u2014 Scopes:
+- "offline_access" gets you a refresh token but may not grant API access alone.
+- To get actual API access, the user needs the ApplicationAccess scope: "offline_access ApplicationAccess_<GUID>"
+- The GUID is found in Creatio: System Designer \u2192 Lookups \u2192 "OAuth resources" \u2192 Name column (strip dashes).
+- The OAuth app in Creatio must also have this resource added under its permitted resources.
+
+OAuth App Setup in Creatio:
+1. System Designer \u2192 "OAuth 2.0 integrated applications" \u2192 create app with grant type "On behalf of a user (authorization code)"
+2. Set redirect URI to the superglue callback URL
+3. Under the app's permitted resources, add the ApplicationAccess resource
+4. Note the Client ID and Client Secret
+
+API Base URLs:
+- OData 4: https://<instance>.creatio.com/0/odata/ (e.g., /0/odata/Contact)
+- OData 3: https://<instance>.creatio.com/0/ServiceModel/EntityDataService.svc/ (e.g., /EntityDataService.svc/ContactCollection)
+- Use Bearer token auth: Authorization: Bearer <access_token>`,
+        keywords: [
+          "contacts",
+          "accounts",
+          "leads",
+          "opportunities",
+          "activities",
+          "cases",
+          "orders",
+          "products",
+          "invoices",
+          "campaigns",
+          "crm",
+          "bpm",
+          "odata",
+          "oauth"
+        ]
+      },
       sanity: {
         name: "sanity",
         apiUrl: "https://api.sanity.io",
@@ -4554,6 +4661,54 @@ HEADERS: { "Authorization": "Bearer <<token>>", "Content-Type": "application/jso
           "api key"
         ]
       },
+      datahub: {
+        name: "datahub",
+        apiUrl: "https://{your-datahub-host}",
+        regex: "^.*(datahub|acryl\\.datahub|datahubproject|datahub-gms|acryl\\.io).*$",
+        icon: "lucide:library-big",
+        docsUrl: "https://docs.datahub.com/docs/api/openapi/openapi-usage-guide",
+        preferredAuthType: "apikey",
+        keywords: [
+          "metadata",
+          "catalog",
+          "data discovery",
+          "lineage",
+          "dataset",
+          "dashboard",
+          "ml model",
+          "governance",
+          "entities",
+          "aspects",
+          "urn",
+          "relationships",
+          "schema",
+          "openapi",
+          "gms",
+          "ingestion",
+          "acryl",
+          "oidc",
+          "api key"
+        ],
+        systemSpecificInstructions: `DataHub is a metadata catalog (discovery, lineage, governance, quality, contracts). Programmatic access for REST-first workflows is the OpenAPI surface on the Metadata Service (GMS), not the marketing or docs site.
+
+OSS vs Cloud (brief): Self-hosted (open-source) means you run DataHub in your environment (Docker/K8s/Helm, etc.) and own URLs, upgrades, and networking. DataHub Cloud (Acryl) is a managed instance: you typically get https://<your-domain>.acryl.io, onboarding from the integrations team, optional AWS PrivateLink into your VPC, and UI login via admin invite or OIDC \u2014 same metadata model and APIs in principle, different hostname, auth onboarding, and who operates the plane. Always use the base URL you were given, not generic doc sites.
+
+DataHub Cloud UI access: Admin users receive an invite link; OIDC uses your IdP\u2019s Client ID, Client Secret, and Discovery URL (must resolve to \u2026/.well-known/openid-configuration). Register redirect/callback https://<your-acryl-domain>.acryl.io/callback/oidc in the IdP. As of current Cloud docs, LDAP/SAML are not supported for that login path \u2014 confirm with Acryl if your requirements differ. Support: http://support.datahub.com/
+
+Ingestion & discovery: Cloud uses push-based ingestion \u2014 run DataHub\u2019s agent inside your network so secrets stay local, with scheduled Python ingestion jobs pushing metadata to your instance. Day-to-day discovery is search and browse in the UI; OpenAPI/GraphQL/Rest.li read and write the same underlying graph.
+
+Base URL (critical): OpenAPI is under /openapi/ on the GMS origin (or the UI origin if it proxies /openapi). Local quickstart: http://localhost:8080/openapi/swagger-ui/index.html \u2014 API base is scheme+host+port only (e.g. https://gms.yourcompany.com, your Cloud hostname, or a frontend that proxies GMS).
+
+Verify the base: {base}/openapi/v3/api-docs or {base}/openapi/v3/api-docs.yaml. No global openApiUrl \u2014 in superglue, import from your instance\u2019s /openapi/v3/api-docs (or .yaml).
+
+Authentication: REST examples use Authorization: Bearer <token>. Token issuance depends on edition (PATs, OIDC/session, etc.); follow DataHub\u2019s authentication and access-token docs for your deployment.
+
+Main OpenAPI groups (paths under /openapi/): entities/v1 \u2014 upsert/read/delete entity+aspect (POST; ?createEntityIfNotExists=true for create-only; GET \u2026/latest?urns&aspectNames; DELETE ?urns&soft=). relationships/v1 \u2014 graph navigation. timeline \u2014 aspect history. platform \u2014 metadata events. v3 adds batch get (/v3/entity/{entityName}/batchGet), conditional writes, JSON Patch-style updates (see OpenAPI guide).
+
+Identifiers are URN-centric (e.g. urn:li:dataset:(...)). Also GraphQL and Rest.li \u2014 see the official API overview to pick an interface.
+
+References: https://docs.datahub.com/docs/features \u2014 product context; https://docs.datahub.com/docs/api/openapi/openapi-usage-guide \u2014 OpenAPI usage; https://docs.datahub.com/docs/managed-datahub/welcome-acryl \u2014 DataHub Cloud getting started (URL pattern, OIDC callback, ingestion); https://docs.datahub.com/docs/managed-datahub/managed-datahub-overview \u2014 OSS vs Cloud feature comparison.`
+      },
       looker: {
         name: "looker",
         apiUrl: "https://{your-domain}.looker.com/api",
@@ -5365,7 +5520,7 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
       },
       googleAds: {
         name: "googleAds",
-        apiUrl: "https://googleads.googleapis.com/v20",
+        apiUrl: "https://googleads.googleapis.com/v23",
         regex: "^.*(googleads\\.googleapis|developers\\.google\\.com/google-ads|adwords\\.google).*$",
         icon: "googleads",
         docsUrl: "https://developers.google.com/google-ads/api/docs/concepts/overview",
@@ -5373,11 +5528,24 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
         oauth: {
           authUrl: "https://accounts.google.com/o/oauth2/v2/auth",
           tokenUrl: "https://oauth2.googleapis.com/token",
-          scopes: "https://www.googleapis.com/auth/adwords https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile openid"
+          scopes: "https://www.googleapis.com/auth/adwords"
         },
+        systemSpecificInstructions: `Google Ads API requires BOTH OAuth AND a developer token on every request.
+
+REQUIRED HEADERS:
+- Authorization: Bearer <access_token>
+- developer-token: <22-char token from https://ads.google.com/aw/apicenter>
+- login-customer-id: <manager-account-id without hyphens> (only when calling through a manager account)
+
+SETUP: User needs a Google Ads Manager account, a Google Cloud project with OAuth credentials, and a developer token (applied for via the API Center). New tokens start as test-only; production access requires a follow-up application.
+
+QUERYING (GAQL): Use Google Ads Query Language via:
+- POST /v23/customers/{customerId}/googleAds:searchStream (streaming, recommended)
+- POST /v23/customers/{customerId}/googleAds:search (paginated)
+Example: SELECT campaign.name, metrics.impressions FROM campaign WHERE segments.date DURING LAST_30_DAYS`,
         keywords: [
           "campaigns",
-          "ad groups",
+          "ad_groups",
           "ads",
           "keywords",
           "GAQL",
@@ -5390,6 +5558,9 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
           "accounts",
           "billing",
           "targeting",
+          "search_terms",
+          "metrics",
+          "segments",
           "oauth"
         ]
       },
@@ -5446,6 +5617,33 @@ CUSTOM APIs: Publishers expose custom API pages at /api/{publisher}/{group}/{ver
           "api key"
         ]
       },
+      circleback: {
+        name: "circleback",
+        apiUrl: "https://app.circleback.ai",
+        regex: "^.*circleback.*$",
+        icon: "default",
+        docsUrl: "https://support.circleback.ai/en/articles/13249081-circleback-mcp",
+        preferredAuthType: "oauth",
+        systemSpecificInstructions: `Circleback has NO traditional REST API. Data access is exclusively via their MCP server.
+
+MCP ENDPOINT: https://app.circleback.ai/api/mcp
+PROTOCOL: JSON-RPC 2.0 over Streamable HTTP transport
+AUTH: OAuth 2.0 with dynamic client registration (no app registration needed).
+
+AVAILABLE DATA: meetings, transcripts, action items, calendar events, emails, people, companies.`,
+        keywords: [
+          "meetings",
+          "transcripts",
+          "notes",
+          "action_items",
+          "calendar_events",
+          "attendees",
+          "summaries",
+          "people",
+          "companies",
+          "emails"
+        ]
+      },
       firecrawl: {
         name: "firecrawl",
         apiUrl: "https://api.firecrawl.dev/v1",
@@ -5710,6 +5908,8 @@ var require_type_utils = __commonJS({
     exports2.PAGINATION_TYPE_MAP = void 0;
     exports2.mapPaginationType = mapPaginationType;
     exports2.mapFailureBehavior = mapFailureBehavior;
+    exports2.validateToolStructure = validateToolStructure;
+    var types_js_1 = require_types();
     exports2.PAGINATION_TYPE_MAP = {
       OFFSET_BASED: "offsetBased",
       PAGE_BASED: "pageBased",
@@ -5729,6 +5929,50 @@ var require_type_utils = __commonJS({
         return void 0;
       return internal.toLowerCase();
     }
+    function validateToolStructure(tool) {
+      if (!tool || typeof tool !== "object") {
+        return { valid: false, error: "Tool must be an object" };
+      }
+      const candidate = tool;
+      if (!candidate.id || typeof candidate.id !== "string") {
+        return { valid: false, error: "Tool must have a valid 'id' string" };
+      }
+      if (!Array.isArray(candidate.steps)) {
+        return { valid: false, error: "Tool must have a 'steps' array" };
+      }
+      if (candidate.steps.length === 0 && !candidate.outputTransform) {
+        return { valid: false, error: "Tool must have at least one step or an outputTransform" };
+      }
+      for (let i = 0; i < candidate.steps.length; i++) {
+        const step = candidate.steps[i];
+        const stepLabel = step?.id ? `Step ${i + 1} (${step.id})` : `Step ${i + 1}`;
+        if (!step?.id) {
+          return { valid: false, error: `Step ${i + 1}: missing 'id'` };
+        }
+        if (!step.config) {
+          return { valid: false, error: `${stepLabel}: missing 'config'` };
+        }
+        if ((0, types_js_1.isTransformConfig)(step.config)) {
+          if (!step.config.transformCode) {
+            return {
+              valid: false,
+              error: `${stepLabel}: transform step missing 'transformCode'`
+            };
+          }
+          continue;
+        }
+        if (!(0, types_js_1.isRequestConfig)(step.config)) {
+          return {
+            valid: false,
+            error: `${stepLabel}: unknown step config type`
+          };
+        }
+        if (typeof step.config.url !== "string" || step.config.url.trim().length === 0) {
+          return { valid: false, error: `${stepLabel}: request step missing 'url'` };
+        }
+      }
+      return { valid: true };
+    }
   }
 });
 
@@ -21697,12 +21941,18 @@ var require_superglue_client = __commonJS({
         const response = await this.restRequest("GET", `/v1/tools?limit=${limit}&page=${page}${archiveParam}`);
         return { items: response.data, total: response.total };
       }
+      async createWorkflow(id, input) {
+        return this.restRequest("POST", "/v1/tools", { ...input, id });
+      }
+      async updateWorkflow(id, input) {
+        return this.restRequest("PUT", `/v1/tools/${encodeURIComponent(id)}`, input);
+      }
       async upsertWorkflow(id, input) {
         const existing = await this.getWorkflow(id);
         if (existing) {
-          return this.restRequest("PUT", `/v1/tools/${encodeURIComponent(id)}`, input);
+          return this.updateWorkflow(id, input);
         } else {
-          return this.restRequest("POST", "/v1/tools", { id, ...input });
+          return this.createWorkflow(id, input);
         }
       }
       async deleteWorkflow(id) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@superglue/cli",
-  "version": "1.1.14",
+  "version": "1.1.16",
   "bin": {
     "sg": "./dist/cli.js"
   },