@tangle-network/agent-integrations 0.17.0 → 0.19.0

package/README.md

@@ -5,9 +5,9 @@ software that need user-authorized access to external systems.
 
 The package standardizes connector catalogs, user connections, scoped sandbox
 capabilities, action invocation, trigger events, provider adapters, and
-first-party connector adapters. Product code can route through Nango, Pipedream,
-Activepieces, a custom gateway, or first-party adapters without changing the
-agent-facing tool contract.
+first-party connector adapters. Product code can route through hosted gateways,
+custom runtimes, or first-party adapters without changing the agent-facing tool
+contract.
 
 ## Contents
 
@@ -32,8 +32,8 @@ agent-facing tool contract.
 - Policy checks for read/write/destructive actions.
 - Invocation-envelope validation before sandbox tool calls reach the hub.
 - A generic HTTP provider boundary for hosted integration gateways.
-- A gateway catalog provider for Nango, Pipedream, Activepieces, Zapier,
-  executor-style gateways, and internal connector registries.
+- A gateway catalog provider for hosted integration gateways, executor-style
+  runtimes, and internal connector registries.
 - A first-party `ConnectorAdapter` boundary for direct provider execution.
 - A declarative REST adapter factory for promoting REST APIs from reviewed specs.
 - A broad coverage catalog for planning hundreds of integrations without
@@ -108,6 +108,10 @@ pnpm add @tangle-network/agent-integrations
 | `buildDefaultIntegrationRegistry` | Composes setup specs and vendored catalog metadata into one deduplicated connector registry. |
 | `composeIntegrationRegistry` | Merges arbitrary catalog sources with explicit aliases, precedence, support tiers, and conflict diagnostics. |
 | `buildIntegrationCoverageConnectors` | Planning catalog for 100+ high-value integrations. |
+| `buildTangleIntegrationCatalogConnectors` | Broad normalized Tangle Integrations Catalog inventory for long-tail connection discovery. |
+| `createTangleCatalogExecutorProvider` | Promotes catalog entries to gateway-executable only when a runtime executor is explicitly supplied. |
+| `createTangleCatalogHttpExecutor` | Signed HTTP executor client for Tangle-hosted catalog runtimes. |
+| `auditTangleIntegrationCatalogFreshness` | Release gate for catalog breadth, executable promotion, registry conflicts, and stale external ingestion. |
 | `createGatewayCatalogProvider` | Normalizes 500+ gateway-backed connectors into the same provider contract. |
 | `buildIntegrationInvocationEnvelope` | Sandbox-safe action envelope. |
 | `validateIntegrationInvocationEnvelope` | Runtime validation for tool/action consistency and input limits. |
@@ -120,9 +124,9 @@ pnpm add @tangle-network/agent-integrations
 
 ## Catalog Registry
 
-Catalog breadth and runtime execution are separate. Activepieces metadata gives
-the package broad connector inventory; first-party adapters and gateways decide
-which connectors can actually run.
+Catalog breadth and runtime execution are separate. The Tangle Integrations
+Catalog gives the package broad connector inventory; first-party adapters and
+explicitly configured runtimes decide which connectors can actually run.
 
 Use `buildDefaultIntegrationRegistry()` before creating tool catalogs or
 connection pickers. It produces one canonical connector per integration,

package/dist/index.d.ts

@@ -1 +1 @@
-export { A as ACTIVEPIECES_OVERRIDES, a as ActivepiecesCatalogEntry, b as ActivepiecesExecutorInvocation, c as ActivepiecesExecutorProviderOptions, d as ActivepiecesPieceOverride, ApiKeyAuthSpec, e as ApprovalBackedPolicyEngine, f as ApprovalBackedPolicyOptions, g as AuthSpec, C as CANONICAL_INTEGRATION_ACTIONS, h as CASStrategy, i as CanonicalIntegrationActionId, j as CanonicalLaunchConnectorOptions, k as Capability, l as CapabilityClass, m as CapabilityMutation, n as CapabilityMutationResult, o as CapabilityParameterSchema, p as CapabilityRead, q as CapabilityReadResult, r as CatalogExecutorInvocation, s as CatalogExecutorProviderOptions, t as CompleteAuthRequest, u as ComposeIntegrationRegistryOptions, v as ConnectionCredentialResolverOptions, w as ConnectorAdapter, x as ConnectorAdapterProviderOptions, y as ConnectorCredentials, z as ConnectorInvocation, B as ConnectorManifest, D as ConnectorManifestValidationIssue, E as ConnectorManifestValidationResult, F as ConsentSummary, G as ConsistencyModel, ConsoleStep, CredentialFieldSpec, CredentialValidationInput, CredentialValidationResult, H as CredentialsExpired, CustomAuthSpec, I as DEFAULT_INTEGRATION_BRIDGE_ENV, J as DEFAULT_SIGNATURE_TOLERANCE_SECONDS, K as DataSourceMetadata, L as DefaultIntegrationActionGuard, M as EventHandlerResult, N as ExchangeCodeInput, O as GatewayCatalogAction, P as GatewayCatalogEntry, Q as GatewayCatalogProviderOptions, R as GatewayCatalogTrigger, S as GenericHmacVerifyOptions, T as GoogleCalendarOptions, U as GoogleSheetsOptions, V as GraphqlOperationSpec, HealthcheckPlan, HealthcheckSpec, HmacAuthSpec, W as HttpIntegrationProviderOptions, X as HubSpotOptions, INTEGRATION_FAMILIES, Y as ImportCatalogOptions, Z as InMemoryConnectionStore, _ as InMemoryIntegrationApprovalStore, $ as InMemoryIntegrationAuditStore, a0 as InMemoryIntegrationEventStore, a1 as InMemoryIntegrationGrantStore, a2 as InMemoryIntegrationHealthcheckStore, a3 as InMemoryIntegrationIdempotencyStore, a4 as InMemoryIntegrationSecretStore, a5 as InMemoryIntegrationWorkflowStore, a6 as InMemoryOAuthFlowStore, a7 as InboundEvent, a8 as InferIntegrationRequirementsOptions, a9 as InstalledIntegrationWorkflow, aa as IntegrationActionGuard, ab as IntegrationActionPack, ac as IntegrationActionRequest, ad as IntegrationActionResult, ae as IntegrationActionRisk, af as IntegrationActor, ag as IntegrationApprovalFilter, ah as IntegrationApprovalRecord, ai as IntegrationApprovalRequest, aj as IntegrationApprovalResolution, ak as IntegrationApprovalStatus, al as IntegrationApprovalStore, am as IntegrationAuditEvent, an as IntegrationAuditEventType, ao as IntegrationAuditFilter, ap as IntegrationAuditSink, aq as IntegrationAuditStore, IntegrationAuthMode, IntegrationAuthSpec, ar as IntegrationBridgePayload, as as IntegrationBridgeToolBinding, at as IntegrationCapability, au as IntegrationCapabilityBinding, av as IntegrationCatalogSource, aw as IntegrationConnection, ax as IntegrationConnectionStore, ay as IntegrationConnector, az as IntegrationConnectorAction, aA as IntegrationConnectorCategory, aB as IntegrationConnectorTrigger, aC as IntegrationCoveragePriority, aD as IntegrationCoverageSpec, aE as IntegrationDataClass, aF as IntegrationError, aG as IntegrationErrorCode, aH as IntegrationEventStore, IntegrationFamilyId, IntegrationFamilySpec, aI as IntegrationGrant, aJ as IntegrationGrantStore, aK as IntegrationGuardContext, aL as IntegrationHealthcheckCheck, aM as IntegrationHealthcheckResult, aN as IntegrationHealthcheckStatus, aO as IntegrationHealthcheckStore, aP as IntegrationHub, aQ as IntegrationHubOptions, aR as IntegrationIdempotencyRecord, aS as IntegrationIdempotencyStore, aT as IntegrationInvocationEnvelope, aU as IntegrationInvocationEnvelopeValidationOptions, IntegrationLifecycleSpec, aV as IntegrationManifest, aW as IntegrationManifestResolution, IntegrationPlannerHints, aX as IntegrationPolicyDecision, aY as IntegrationPolicyEffect, aZ as IntegrationPolicyEngine, a_ as IntegrationPolicyRule, a$ as IntegrationProvider, b0 as IntegrationProviderKind, b1 as IntegrationRateLimitDecision, b2 as IntegrationRateLimiter, b3 as IntegrationRegistry, b4 as IntegrationRegistryConflict, b5 as IntegrationRegistryEntry, b6 as IntegrationRegistrySourceRef, b7 as IntegrationRegistrySummary, b8 as IntegrationRequirement, b9 as IntegrationRequirementMode, ba as IntegrationRequirementResolution, bb as IntegrationRequirementStatus, bc as IntegrationRuntime, bd as IntegrationRuntimeError, be as IntegrationRuntimeHub, bf as IntegrationRuntimeOptions, bg as IntegrationSandboxBundle, bh as IntegrationSandboxHost, bi as IntegrationSandboxHostHub, bj as IntegrationSandboxHostOptions, bk as IntegrationSecretStore, IntegrationSetupSpec, IntegrationSpec, IntegrationSpecStatus, IntegrationSpecValidationIssue, IntegrationSpecValidationResult, bl as IntegrationSupportTier, bm as IntegrationToolDefinition, bn as IntegrationToolSearchFilters, bo as IntegrationToolSearchResult, bp as IntegrationTriggerEvent, bq as IntegrationTriggerSubscription, br as IntegrationUserAction, bs as IntegrationWebhookReceiverResult, bt as IntegrationWorkflowDefinition, bu as IntegrationWorkflowRuntime, bv as IntegrationWorkflowRuntimeHub, bw as IntegrationWorkflowRuntimeOptions, bx as IntegrationWorkflowStore, by as InvokeWithCapabilityRequest, bz as IssueCapabilityRequest, bA as IssuedIntegrationCapability, bB as ManifestValidationIssue, bC as ManifestValidationResult, bD as McpCatalog, bE as McpCatalogTool, bF as McpToolDefinition, bG as MicrosoftCalendarOptions, bH as MissingRequirementExplanation, NoneAuthSpec, bI as NormalizedIntegrationError, bJ as NormalizedIntegrationResult, NormalizedPermission, bK as NotionDatabaseOptions, OAuth2AuthSpec, bL as OAuthFlowStore, bM as OAuthTokens, bN as OpenApiDocument, bO as OpenApiOperation, bP as PROVIDER_PASSTHROUGH_ACTION, bQ as ParsedStripeSignatureHeader, bR as PendingOAuthFlow, PermissionDescriptor, bS as PlatformIntegrationPolicyPresetOptions, PostSetupCheck, bT as ProviderHttpRequestInput, bU as ProviderPassthroughPolicy, Quirk, bV as RateLimitSpec, bW as RefreshInput, bX as RenderConsentOptions, RenderSpecOptions, RenderedConsoleStep, bY as ResolvedDataSource, bZ as ResourceContention, b_ as RestConnectorSpec, b$ as RestCredentialPlacement, c0 as RestOperationSpec, c1 as RestRequestSpec, ScopeDescriptor, c2 as SecretRef, c3 as SlackOptions, c4 as SlackVerifyOptions, c5 as StartAuthRequest, c6 as StartAuthResult, c7 as StartOAuthInput, c8 as StartOAuthOutput, c9 as StaticIntegrationPolicyEngine, ca as StaticIntegrationPolicyOptions, cb as StoredIntegrationEvent, cc as StripeVerifyOptions, cd as TangleIntegrationInvokeInput, ce as TangleIntegrationInvokeResult, cf as TangleIntegrationsClient, cg as TangleIntegrationsClientOptions, ch as TwilioVerifyOptions, ci as _resetPendingFlowsForTests, cj as adapterManifestsToConnectors, ck as airtableConnector, cl as asanaConnector, cm as assertValidConnectorManifest, cn as assertValidIntegrationManifest, assertValidIntegrationSpec, co as buildActivepiecesConnectors, cp as buildApprovalRequest, cq as buildCanonicalLaunchConnectors, cr as buildDefaultIntegrationRegistry, buildHealthcheckPlan, cs as buildIntegrationBridgeEnvironment, ct as buildIntegrationBridgePayload, cu as buildIntegrationCoverageConnectors, cv as buildIntegrationInvocationEnvelope, cw as buildIntegrationToolCatalog, cx as calendarExercisePlannerManifest, cy as canonicalActionConnectorId, cz as canonicalConnectorId, cA as composeIntegrationRegistry, consoleStepsToText, cB as consumePendingFlow, cC as createActivepiecesExecutorProvider, cD as createApprovalBackedPolicyEngine, cE as createAuditingActionGuard, cF as createCatalogExecutorProvider, cG as createConnectionCredentialResolver, cH as createConnectorAdapterCatalogSource, cI as createConnectorAdapterProvider, cJ as createCredentialBackedAdapterProvider, cK as createDefaultIntegrationActionGuard, cL as createDefaultIntegrationPolicyEngine, cM as createGatewayCatalogProvider, cN as createHttpIntegrationProvider, cO as createIntegrationAuditEvent, cP as createIntegrationRuntime, cQ as createIntegrationWorkflowRuntime, cR as createMockIntegrationProvider, cS as createPlatformIntegrationPolicyPreset, cT as createTangleIntegrationsClient, cU as declarativeRestConnector, cV as decodeIntegrationBridgePayload, cW as dispatchIntegrationInvocation, cX as encodeIntegrationBridgePayload, cY as exchangeAuthorizationCode, cZ as explainMissingRequirements, c_ as firstHeader, c$ as getActivepiecesOverride, getIntegrationFamily, getIntegrationSpec, d0 as githubConnector, d1 as gitlabConnector, d2 as googleCalendar, d3 as googleSheets, d4 as healthcheckRequest, d5 as hubspot, d6 as importGraphqlConnector, d7 as importMcpConnector, d8 as importOpenApiConnector, d9 as inferIntegrationManifestFromTools, da as inferIntegrationSupportTier, db as integrationCoverageChecklistMarkdown, integrationSpecToConnector, dc as integrationToolName, dd as invocationRequestFromEnvelope, de as listActivepiecesCatalogEntries, listExecutableIntegrationSpecs, df as listIntegrationCoverageSpecs, listIntegrationSpecs, dg as manifestToConnector, dh as microsoftCalendar, di as normalizeGatewayCatalog, dj as normalizeIntegrationError, dk as normalizeIntegrationResult, dl as notionDatabase, dm as parseIntegrationBridgeEnvironment, dn as parseIntegrationToolName, dp as parseStripeSignatureHeader, dq as receiveIntegrationWebhook, dr as redactApprovalRequest, ds as redactCapability, dt as redactIntegrationBridgePayload, du as redactInvocationEnvelope, dv as refreshAccessToken, renderAgentToolDescription, dw as renderApprovalCopy, dx as renderConsentSummary, renderConsoleSteps, renderRunbookMarkdown, dy as resolveConnectionCredentials, dz as resolveIntegrationApproval, dA as revokeConnection, dB as runIntegrationHealthcheck, dC as runIntegrationHealthchecks, dD as salesforceConnector, dE as sanitizeAuditConnection, dF as sanitizeConnection, dG as searchIntegrationTools, dH as signCapability, dI as slack, dJ as slackEventsConnector, specAuthToConnectorAuth, dK as startOAuthFlow, dL as statusForCode, dM as storedEventToTriggerEvent, dN as stripePackConnector, dO as stripeWebhookReceiverConnector, dP as summarizeIntegrationRegistry, dQ as toMcpTools, dR as twilioSmsConnector, dS as validateConnectorManifest, validateCredentialFormat, validateCredentialSet, dT as validateIntegrationInvocationEnvelope, dU as validateIntegrationManifest, validateIntegrationSpec, dV as validateProviderPassthroughRequest, dW as verifyCapabilityToken, dX as verifyHmacSignature, dY as verifySlackSignature, dZ as verifyStripeSignature, d_ as verifyTwilioSignature, d$ as webhookConnector } from './specs.js';
+export { A as ACTIVEPIECES_OVERRIDES, a as ACTIVEPIECES_PUBLIC_CATALOG_URL, b as ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER, c as ActivepiecesCatalogEntry, d as ActivepiecesExecutorInvocation, e as ActivepiecesExecutorProviderOptions, f as ActivepiecesHttpExecutorOptions, g as ActivepiecesPieceOverride, h as ActivepiecesRuntimeRequest, ApiKeyAuthSpec, i as ApprovalBackedPolicyEngine, j as ApprovalBackedPolicyOptions, k as AuthSpec, C as CANONICAL_INTEGRATION_ACTIONS, l as CASStrategy, m as CanonicalIntegrationActionId, n as CanonicalLaunchConnectorOptions, o as Capability, p as CapabilityClass, q as CapabilityMutation, r as CapabilityMutationResult, s as CapabilityParameterSchema, t as CapabilityRead, u as CapabilityReadResult, v as CatalogExecutorInvocation, w as CatalogExecutorProviderOptions, x as CompleteAuthRequest, y as ComposeIntegrationRegistryOptions, z as ConnectionCredentialResolverOptions, B as ConnectorAdapter, D as ConnectorAdapterProviderOptions, E as ConnectorCredentials, F as ConnectorInvocation, G as ConnectorManifest, H as ConnectorManifestValidationIssue, I as ConnectorManifestValidationResult, J as ConsentSummary, K as ConsistencyModel, ConsoleStep, CredentialFieldSpec, CredentialValidationInput, CredentialValidationResult, L as CredentialsExpired, CustomAuthSpec, M as DEFAULT_INTEGRATION_BRIDGE_ENV, N as DEFAULT_SIGNATURE_TOLERANCE_SECONDS, O as DataSourceMetadata, P as DefaultIntegrationActionGuard, Q as EventHandlerResult, R as ExchangeCodeInput, S as GatewayCatalogAction, T as GatewayCatalogEntry, U as GatewayCatalogProviderOptions, V as GatewayCatalogTrigger, W as GenericHmacVerifyOptions, X as GoogleCalendarOptions, Y as GoogleSheetsOptions, Z as GraphqlOperationSpec, HealthcheckPlan, HealthcheckSpec, HmacAuthSpec, _ as HttpIntegrationProviderOptions, $ as HubSpotOptions, INTEGRATION_FAMILIES, a0 as ImportCatalogOptions, a1 as InMemoryConnectionStore, a2 as InMemoryIntegrationApprovalStore, a3 as InMemoryIntegrationAuditStore, a4 as InMemoryIntegrationEventStore, a5 as InMemoryIntegrationGrantStore, a6 as InMemoryIntegrationHealthcheckStore, a7 as InMemoryIntegrationIdempotencyStore, a8 as InMemoryIntegrationSecretStore, a9 as InMemoryIntegrationWorkflowStore, aa as InMemoryOAuthFlowStore, ab as InboundEvent, ac as InferIntegrationRequirementsOptions, ad as InstalledIntegrationWorkflow, ae as IntegrationActionGuard, af as IntegrationActionPack, ag as IntegrationActionRequest, ah as IntegrationActionResult, ai as IntegrationActionRisk, aj as IntegrationActor, ak as IntegrationApprovalFilter, al as IntegrationApprovalRecord, am as IntegrationApprovalRequest, an as IntegrationApprovalResolution, ao as IntegrationApprovalStatus, ap as IntegrationApprovalStore, aq as IntegrationAuditEvent, ar as IntegrationAuditEventType, as as IntegrationAuditFilter, at as IntegrationAuditSink, au as IntegrationAuditStore, IntegrationAuthMode, IntegrationAuthSpec, av as IntegrationBridgePayload, aw as IntegrationBridgeToolBinding, ax as IntegrationCapability, ay as IntegrationCapabilityBinding, az as IntegrationCatalogFreshnessOptions, aA as IntegrationCatalogFreshnessResult, aB as IntegrationCatalogSource, aC as IntegrationConnection, aD as IntegrationConnectionStore, aE as IntegrationConnector, aF as IntegrationConnectorAction, aG as IntegrationConnectorCategory, aH as IntegrationConnectorTrigger, aI as IntegrationCoveragePriority, aJ as IntegrationCoverageSpec, aK as IntegrationDataClass, aL as IntegrationError, aM as IntegrationErrorCode, aN as IntegrationEventStore, IntegrationFamilyId, IntegrationFamilySpec, aO as IntegrationGrant, aP as IntegrationGrantStore, aQ as IntegrationGuardContext, aR as IntegrationHealthcheckCheck, aS as IntegrationHealthcheckResult, aT as IntegrationHealthcheckStatus, aU as IntegrationHealthcheckStore, aV as IntegrationHub, aW as IntegrationHubOptions, aX as IntegrationIdempotencyRecord, aY as IntegrationIdempotencyStore, aZ as IntegrationInvocationEnvelope, a_ as IntegrationInvocationEnvelopeValidationOptions, IntegrationLifecycleSpec, a$ as IntegrationManifest, b0 as IntegrationManifestResolution, IntegrationPlannerHints, b1 as IntegrationPolicyDecision, b2 as IntegrationPolicyEffect, b3 as IntegrationPolicyEngine, b4 as IntegrationPolicyRule, b5 as IntegrationProvider, b6 as IntegrationProviderKind, b7 as IntegrationRateLimitDecision, b8 as IntegrationRateLimiter, b9 as IntegrationRegistry, ba as IntegrationRegistryConflict, bb as IntegrationRegistryEntry, bc as IntegrationRegistrySourceRef, bd as IntegrationRegistrySummary, be as IntegrationRequirement, bf as IntegrationRequirementMode, bg as IntegrationRequirementResolution, bh as IntegrationRequirementStatus, bi as IntegrationRuntime, bj as IntegrationRuntimeError, bk as IntegrationRuntimeHub, bl as IntegrationRuntimeOptions, bm as IntegrationSandboxBundle, bn as IntegrationSandboxHost, bo as IntegrationSandboxHostHub, bp as IntegrationSandboxHostOptions, bq as IntegrationSecretStore, IntegrationSetupSpec, IntegrationSpec, IntegrationSpecStatus, IntegrationSpecValidationIssue, IntegrationSpecValidationResult, br as IntegrationSupportTier, bs as IntegrationToolDefinition, bt as IntegrationToolSearchFilters, bu as IntegrationToolSearchResult, bv as IntegrationTriggerEvent, bw as IntegrationTriggerSubscription, bx as IntegrationUserAction, by as IntegrationWebhookReceiverResult, bz as IntegrationWorkflowDefinition, bA as IntegrationWorkflowRuntime, bB as IntegrationWorkflowRuntimeHub, bC as IntegrationWorkflowRuntimeOptions, bD as IntegrationWorkflowStore, bE as InvokeWithCapabilityRequest, bF as IssueCapabilityRequest, bG as IssuedIntegrationCapability, bH as ManifestValidationIssue, bI as ManifestValidationResult, bJ as McpCatalog, bK as McpCatalogTool, bL as McpToolDefinition, bM as MicrosoftCalendarOptions, bN as MissingRequirementExplanation, NoneAuthSpec, bO as NormalizedIntegrationError, bP as NormalizedIntegrationResult, NormalizedPermission, bQ as NotionDatabaseOptions, OAuth2AuthSpec, bR as OAuthFlowStore, bS as OAuthTokens, bT as OpenApiDocument, bU as OpenApiOperation, bV as PROVIDER_PASSTHROUGH_ACTION, bW as ParsedStripeSignatureHeader, bX as PendingOAuthFlow, PermissionDescriptor, bY as PlatformIntegrationPolicyPresetOptions, PostSetupCheck, bZ as ProviderHttpRequestInput, b_ as ProviderPassthroughPolicy, Quirk, b$ as RateLimitSpec, c0 as RefreshInput, c1 as RenderConsentOptions, RenderSpecOptions, RenderedConsoleStep, c2 as ResolvedDataSource, c3 as ResourceContention, c4 as RestConnectorSpec, c5 as RestCredentialPlacement, c6 as RestOperationSpec, c7 as RestRequestSpec, ScopeDescriptor, c8 as SecretRef, c9 as SlackOptions, ca as SlackVerifyOptions, cb as StartAuthRequest, cc as StartAuthResult, cd as StartOAuthInput, ce as StartOAuthOutput, cf as StaticIntegrationPolicyEngine, cg as StaticIntegrationPolicyOptions, ch as StoredIntegrationEvent, ci as StripeVerifyOptions, cj as TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER, ck as TangleCatalogExecutorInvocation, cl as TangleCatalogExecutorProviderOptions, cm as TangleCatalogHttpExecutorOptions, cn as TangleCatalogRuntimeRequest, co as TangleIntegrationCatalogEntry, cp as TangleIntegrationCatalogFreshnessOptions, cq as TangleIntegrationCatalogFreshnessResult, cr as TangleIntegrationInvokeInput, cs as TangleIntegrationInvokeResult, ct as TangleIntegrationsClient, cu as TangleIntegrationsClientOptions, cv as TwilioVerifyOptions, cw as _resetPendingFlowsForTests, cx as adapterManifestsToConnectors, cy as airtableConnector, cz as asanaConnector, cA as assertValidConnectorManifest, cB as assertValidIntegrationManifest, assertValidIntegrationSpec, cC as auditIntegrationCatalogFreshness, cD as auditTangleIntegrationCatalogFreshness, cE as buildActivepiecesConnectors, cF as buildActivepiecesRuntimeRequest, cG as buildApprovalRequest, cH as buildCanonicalLaunchConnectors, cI as buildDefaultIntegrationRegistry, buildHealthcheckPlan, cJ as buildIntegrationBridgeEnvironment, cK as buildIntegrationBridgePayload, cL as buildIntegrationCoverageConnectors, cM as buildIntegrationInvocationEnvelope, cN as buildIntegrationToolCatalog, cO as buildTangleCatalogRuntimeRequest, cP as buildTangleIntegrationCatalogConnectors, cQ as calendarExercisePlannerManifest, cR as canonicalActionConnectorId, cS as canonicalConnectorId, cT as composeIntegrationRegistry, consoleStepsToText, cU as consumePendingFlow, cV as createActivepiecesExecutorProvider, cW as createActivepiecesHttpExecutor, cX as createApprovalBackedPolicyEngine, cY as createAuditingActionGuard, cZ as createCatalogExecutorProvider, c_ as createConnectionCredentialResolver, c$ as createConnectorAdapterCatalogSource, d0 as createConnectorAdapterProvider, d1 as createCredentialBackedAdapterProvider, d2 as createDefaultIntegrationActionGuard, d3 as createDefaultIntegrationPolicyEngine, d4 as createGatewayCatalogProvider, d5 as createHttpIntegrationProvider, d6 as createIntegrationAuditEvent, d7 as createIntegrationRuntime, d8 as createIntegrationWorkflowRuntime, d9 as createMockIntegrationProvider, da as createPlatformIntegrationPolicyPreset, db as createTangleCatalogExecutorProvider, dc as createTangleCatalogHttpExecutor, dd as createTangleIntegrationsClient, de as declarativeRestConnector, df as decodeIntegrationBridgePayload, dg as dispatchIntegrationInvocation, dh as encodeIntegrationBridgePayload, di as exchangeAuthorizationCode, dj as explainMissingRequirements, dk as extractActivepiecesPublicPieceCount, dl as extractExternalCatalogPublicCount, dm as firstHeader, dn as getActivepiecesOverride, getIntegrationFamily, getIntegrationSpec, dp as githubConnector, dq as gitlabConnector, dr as googleCalendar, ds as googleSheets, dt as healthcheckRequest, du as hubspot, dv as importGraphqlConnector, dw as importMcpConnector, dx as importOpenApiConnector, dy as inferIntegrationManifestFromTools, dz as inferIntegrationSupportTier, dA as integrationCoverageChecklistMarkdown, integrationSpecToConnector, dB as integrationToolName, dC as invocationRequestFromEnvelope, dD as listActivepiecesCatalogEntries, listExecutableIntegrationSpecs, dE as listIntegrationCoverageSpecs, listIntegrationSpecs, dF as listTangleIntegrationCatalogEntries, dG as manifestToConnector, dH as microsoftCalendar, dI as normalizeGatewayCatalog, dJ as normalizeIntegrationError, dK as normalizeIntegrationResult, dL as notionDatabase, dM as parseIntegrationBridgeEnvironment, dN as parseIntegrationToolName, dO as parseStripeSignatureHeader, dP as receiveIntegrationWebhook, dQ as redactApprovalRequest, dR as redactCapability, dS as redactIntegrationBridgePayload, dT as redactInvocationEnvelope, dU as refreshAccessToken, renderAgentToolDescription, dV as renderApprovalCopy, dW as renderConsentSummary, renderConsoleSteps, renderRunbookMarkdown, dX as resolveConnectionCredentials, dY as resolveIntegrationApproval, dZ as revokeConnection, d_ as runIntegrationHealthcheck, d$ as runIntegrationHealthchecks, e0 as salesforceConnector, e1 as sanitizeAuditConnection, e2 as sanitizeConnection, e3 as searchIntegrationTools, e4 as signActivepiecesRuntimeRequest, e5 as signCapability, e6 as signTangleCatalogRuntimeRequest, e7 as slack, e8 as slackEventsConnector, specAuthToConnectorAuth, e9 as startOAuthFlow, ea as statusForCode, eb as storedEventToTriggerEvent, ec as stripePackConnector, ed as stripeWebhookReceiverConnector, ee as summarizeIntegrationRegistry, ef as toMcpTools, eg as twilioSmsConnector, eh as validateConnectorManifest, validateCredentialFormat, validateCredentialSet, ei as validateIntegrationInvocationEnvelope, ej as validateIntegrationManifest, validateIntegrationSpec, ek as validateProviderPassthroughRequest, el as verifyActivepiecesRuntimeSignature, em as verifyCapabilityToken, en as verifyHmacSignature, eo as verifySlackSignature, ep as verifyStripeSignature, eq as verifyTangleCatalogRuntimeSignature, er as verifyTwilioSignature, es as webhookConnector } from './specs.js';

package/dist/index.js

@@ -21,7 +21,7 @@ import {
 } from "./chunk-DIJ3I66K.js";
 
 // src/index.ts
-import { createHmac as createHmac3, randomUUID as randomUUID3, timingSafeEqual as timingSafeEqual2 } from "crypto";
+import { createHmac as createHmac4, randomUUID as randomUUID4, timingSafeEqual as timingSafeEqual3 } from "crypto";
 
 // src/activepieces-catalog.ts
 import { readFileSync } from "fs";
@@ -223,7 +223,7 @@ function defaultActions(id, scopes, dataClass) {
       dataClass,
       approvalRequired: true,
       inputSchema: { type: "object", additionalProperties: true, properties: {} },
-      description: `Create or update a ${id} record through an Activepieces-backed connector.`
+      description: `Create or update a ${id} record through a catalog-backed connector.`
     }
   ];
 }
@@ -5817,6 +5817,253 @@ function createActivepiecesExecutorProvider(options) {
   });
 }
 
+// src/activepieces-runtime.ts
+import { createHmac as createHmac3, randomUUID as randomUUID3, timingSafeEqual as timingSafeEqual2 } from "crypto";
+var ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER = "x-tangle-activepieces-signature";
+var TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER = "x-tangle-catalog-signature";
+function createActivepiecesHttpExecutor(options) {
+  const endpoint = options.endpoint.replace(/\/$/, "");
+  const path = options.path ?? "/v1/activepieces/actions/invoke";
+  const normalizedPath = path.startsWith("/") ? path : `/${path}`;
+  const signatureHeader = options.signatureHeader ?? ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER;
+  const fetchImpl = options.fetchImpl ?? fetch;
+  const requestId = options.requestId ?? (() => `apexec_${randomUUID3()}`);
+  return async (invocation) => {
+    const body = buildActivepiecesRuntimeRequest(invocation, requestId());
+    const serialized = JSON.stringify(body);
+    const response = await fetchImpl(`${endpoint}${normalizedPath}`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        ...options.headers,
+        ...options.secret ? { [signatureHeader]: signActivepiecesRuntimeRequest(serialized, options.secret) } : {}
+      },
+      body: serialized,
+      signal: AbortSignal.timeout(options.timeoutMs ?? 3e4)
+    });
+    const parsed = await response.json().catch(() => void 0);
+    if (!response.ok) {
+      return parsed ?? {
+        ok: false,
+        action: invocation.request.action,
+        output: { message: `Activepieces runtime returned HTTP ${response.status}.` }
+      };
+    }
+    return parsed ?? {
+      ok: false,
+      action: invocation.request.action,
+      output: { message: "Activepieces runtime returned an empty response." }
+    };
+  };
+}
+function buildActivepiecesRuntimeRequest(invocation, requestId = `apexec_${randomUUID3()}`) {
+  return {
+    version: 1,
+    requestId,
+    providerId: invocation.connection.providerId,
+    connection: invocation.connection,
+    connector: {
+      id: invocation.connector.id,
+      title: invocation.connector.title,
+      auth: invocation.connector.auth,
+      scopes: invocation.connector.scopes,
+      metadata: invocation.connector.metadata
+    },
+    piece: invocation.piece,
+    action: {
+      id: invocation.request.action,
+      input: invocation.request.input,
+      idempotencyKey: invocation.request.idempotencyKey,
+      dryRun: invocation.request.dryRun,
+      metadata: invocation.request.metadata
+    }
+  };
+}
+function signActivepiecesRuntimeRequest(serializedBody, secret) {
+  return `sha256=${createHmac3("sha256", secret).update(serializedBody).digest("hex")}`;
+}
+function verifyActivepiecesRuntimeSignature(serializedBody, signature, secret) {
+  if (!signature) return false;
+  const expected = signActivepiecesRuntimeRequest(serializedBody, secret);
+  const left = Buffer.from(signature);
+  const right = Buffer.from(expected);
+  return left.length === right.length && timingSafeEqual2(left, right);
+}
+function createTangleCatalogHttpExecutor(options) {
+  return createActivepiecesHttpExecutor({
+    ...options,
+    path: options.path ?? "/v1/integration-catalog/actions/invoke",
+    signatureHeader: options.signatureHeader ?? TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER
+  });
+}
+var buildTangleCatalogRuntimeRequest = buildActivepiecesRuntimeRequest;
+var signTangleCatalogRuntimeRequest = signActivepiecesRuntimeRequest;
+var verifyTangleCatalogRuntimeSignature = verifyActivepiecesRuntimeSignature;
+
+// src/catalog-freshness.ts
+var ACTIVEPIECES_PUBLIC_CATALOG_URL = "https://www.activepieces.com/pieces";
+function parseCount(value) {
+  if (!value) return void 0;
+  const parsed = Number.parseInt(value.replace(/,/g, ""), 10);
+  return Number.isFinite(parsed) ? parsed : void 0;
+}
+function extractActivepiecesPublicPieceCount(html) {
+  const showingMatch = html.match(/Showing\s+([0-9,]+)\s+pieces/i);
+  const integrationMatch = html.match(/([0-9,]+)\+?\s+Integrations/i);
+  return parseCount(showingMatch?.[1]) ?? parseCount(integrationMatch?.[1]);
+}
+async function auditIntegrationCatalogFreshness(options = {}) {
+  const minActivepiecesConnectors = options.minActivepiecesConnectors ?? 600;
+  const staleConnectorDelta = options.staleConnectorDelta ?? 25;
+  const activepiecesEntries = listActivepiecesCatalogEntries();
+  const activepiecesConnectors = buildActivepiecesConnectors({
+    includeCatalogActions: true
+  });
+  const executableActivepiecesProvider = createActivepiecesExecutorProvider({
+    executeAction: () => ({ ok: true, action: "audit.noop" })
+  });
+  const executableActivepiecesConnectors = await executableActivepiecesProvider.listConnectors();
+  const executableRegistry = composeIntegrationRegistry([
+    {
+      id: executableActivepiecesProvider.id,
+      connectors: executableActivepiecesConnectors
+    }
+  ]);
+  const executableTools = buildIntegrationToolCatalog(executableRegistry.connectors);
+  const unsupportedExecutableConnectorIds = executableActivepiecesConnectors.filter((connector) => connector.actions.length === 0).map((connector) => connector.id);
+  const registry = buildDefaultIntegrationRegistry({
+    includeSpecs: true,
+    includeActivepieces: true
+  });
+  const warnings = [];
+  if (activepiecesConnectors.length < minActivepiecesConnectors) {
+    warnings.push(
+      `Activepieces catalog has ${activepiecesConnectors.length} connectors, below floor ${minActivepiecesConnectors}.`
+    );
+  }
+  if (unsupportedExecutableConnectorIds.length > 0) {
+    warnings.push(
+      `Activepieces executable provider has ${unsupportedExecutableConnectorIds.length} connectors without actions.`
+    );
+  }
+  if (executableTools.length < activepiecesEntries.length) {
+    warnings.push(
+      `Activepieces executable provider produced only ${executableTools.length} tool definitions for ${activepiecesEntries.length} entries.`
+    );
+  }
+  let upstream;
+  if (options.liveActivepieces) {
+    upstream = await checkActivepiecesPublicCatalog({
+      localConnectorCount: activepiecesConnectors.length,
+      staleConnectorDelta,
+      fetchImpl: options.fetchImpl,
+      warnings
+    });
+  }
+  return {
+    ok: warnings.length === 0,
+    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    local: {
+      activepiecesEntries: activepiecesEntries.length,
+      activepiecesConnectors: activepiecesConnectors.length,
+      activepiecesActions: activepiecesConnectors.reduce(
+        (sum, connector) => sum + connector.actions.length,
+        0
+      ),
+      activepiecesTriggers: activepiecesConnectors.reduce(
+        (sum, connector) => sum + (connector.triggers?.length ?? 0),
+        0
+      ),
+      executableActivepiecesConnectors: executableActivepiecesConnectors.length,
+      executableActivepiecesActions: executableActivepiecesConnectors.reduce(
+        (sum, connector) => sum + connector.actions.length,
+        0
+      ),
+      executableActivepiecesTriggers: executableActivepiecesConnectors.reduce(
+        (sum, connector) => sum + (connector.triggers?.length ?? 0),
+        0
+      ),
+      executableToolDefinitions: executableTools.length,
+      unsupportedExecutableConnectorIds,
+      registryEntries: registry.entries.length,
+      registrySummary: summarizeIntegrationRegistry(registry),
+      conflictSamples: registry.entries.flatMap((entry) => entry.conflicts).slice(0, 10)
+    },
+    upstream,
+    warnings
+  };
+}
+async function checkActivepiecesPublicCatalog(input) {
+  try {
+    const res = await (input.fetchImpl ?? fetch)(ACTIVEPIECES_PUBLIC_CATALOG_URL, {
+      headers: { accept: "text/html" },
+      signal: AbortSignal.timeout(15e3)
+    });
+    if (!res.ok) {
+      const warning = `Activepieces freshness request failed with HTTP ${res.status}.`;
+      input.warnings.push(warning);
+      return {
+        checkedUrl: ACTIVEPIECES_PUBLIC_CATALOG_URL,
+        warning
+      };
+    }
+    const activepiecesPieces = extractActivepiecesPublicPieceCount(await res.text());
+    const activepiecesDelta = activepiecesPieces === void 0 ? void 0 : activepiecesPieces - input.localConnectorCount;
+    if (activepiecesDelta !== void 0 && activepiecesDelta > input.staleConnectorDelta) {
+      input.warnings.push(
+        `Activepieces upstream appears ${activepiecesDelta} connectors ahead of the vendored package catalog.`
+      );
+    }
+    return {
+      activepiecesPieces,
+      activepiecesDelta,
+      checkedUrl: ACTIVEPIECES_PUBLIC_CATALOG_URL,
+      warning: activepiecesPieces === void 0 ? "Could not parse upstream piece count." : void 0
+    };
+  } catch (error) {
+    const warning = error instanceof Error ? error.message : "Activepieces freshness request failed.";
+    input.warnings.push(warning);
+    return {
+      checkedUrl: ACTIVEPIECES_PUBLIC_CATALOG_URL,
+      warning
+    };
+  }
+}
+
+// src/tangle-catalog.ts
+var listTangleIntegrationCatalogEntries = listActivepiecesCatalogEntries;
+var buildTangleIntegrationCatalogConnectors = buildActivepiecesConnectors;
+var createTangleCatalogExecutorProvider = createActivepiecesExecutorProvider;
+var extractExternalCatalogPublicCount = extractActivepiecesPublicPieceCount;
+async function auditTangleIntegrationCatalogFreshness(options = {}) {
+  const result = await auditIntegrationCatalogFreshness(options);
+  return {
+    ok: result.ok,
+    generatedAt: result.generatedAt,
+    local: {
+      catalogEntries: result.local.activepiecesEntries,
+      catalogConnectors: result.local.activepiecesConnectors,
+      catalogActions: result.local.activepiecesActions,
+      catalogTriggers: result.local.activepiecesTriggers,
+      executableCatalogConnectors: result.local.executableActivepiecesConnectors,
+      executableCatalogActions: result.local.executableActivepiecesActions,
+      executableCatalogTriggers: result.local.executableActivepiecesTriggers,
+      executableToolDefinitions: result.local.executableToolDefinitions,
+      unsupportedExecutableConnectorIds: result.local.unsupportedExecutableConnectorIds,
+      registryEntries: result.local.registryEntries,
+      registrySummary: result.local.registrySummary,
+      conflictSamples: result.local.conflictSamples
+    },
+    upstream: result.upstream ? {
+      externalEntries: result.upstream.activepiecesPieces,
+      externalDelta: result.upstream.activepiecesDelta,
+      checkedUrl: result.upstream.checkedUrl,
+      warning: result.upstream.warning
+    } : void 0,
+    warnings: result.warnings.map((warning) => warning.replaceAll("Activepieces", "Tangle Integrations Catalog"))
+  };
+}
+
 // src/runtime.ts
 var InMemoryIntegrationGrantStore = class {
   grants = /* @__PURE__ */ new Map();
@@ -6187,7 +6434,7 @@ var IntegrationHub = class {
     assertScopes(connection, request.scopes);
     const now = this.now();
     const capability = {
-      id: `cap_${randomUUID3()}`,
+      id: `cap_${randomUUID4()}`,
       subject: request.subject,
       connectionId: request.connectionId,
       scopes: unique8(request.scopes),
@@ -6424,12 +6671,12 @@ function assertScopes(connection, requiredScopes2) {
   if (missing2.length > 0) throw new IntegrationError(`Missing integration scopes: ${missing2.join(", ")}`, "scope_denied");
 }
 function hmac(payload, secret) {
-  return createHmac3("sha256", secret).update(payload).digest("base64url");
+  return createHmac4("sha256", secret).update(payload).digest("base64url");
 }
 function constantTimeEqual(a, b) {
   const left = Buffer.from(a);
   const right = Buffer.from(b);
-  return left.length === right.length && timingSafeEqual2(left, right);
+  return left.length === right.length && timingSafeEqual3(left, right);
 }
 function base64UrlEncode(value) {
   return Buffer.from(value, "utf8").toString("base64url");
@@ -6442,6 +6689,8 @@ function unique8(values) {
 }
 export {
   ACTIVEPIECES_OVERRIDES,
+  ACTIVEPIECES_PUBLIC_CATALOG_URL,
+  ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER,
   ApprovalBackedPolicyEngine,
   CANONICAL_INTEGRATION_ACTIONS,
   CredentialsExpired,
@@ -6468,6 +6717,7 @@ export {
   PROVIDER_PASSTHROUGH_ACTION,
   ResourceContention,
   StaticIntegrationPolicyEngine,
+  TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER,
   TangleIntegrationsClient,
   _resetPendingFlowsForTests,
   adapterManifestsToConnectors,
@@ -6476,7 +6726,10 @@ export {
   assertValidConnectorManifest,
   assertValidIntegrationManifest,
   assertValidIntegrationSpec,
+  auditIntegrationCatalogFreshness,
+  auditTangleIntegrationCatalogFreshness,
   buildActivepiecesConnectors,
+  buildActivepiecesRuntimeRequest,
   buildApprovalRequest,
   buildCanonicalLaunchConnectors,
   buildDefaultIntegrationRegistry,
@@ -6486,6 +6739,8 @@ export {
   buildIntegrationCoverageConnectors,
   buildIntegrationInvocationEnvelope,
   buildIntegrationToolCatalog,
+  buildTangleCatalogRuntimeRequest,
+  buildTangleIntegrationCatalogConnectors,
   calendarExercisePlannerManifest,
   canonicalActionConnectorId,
   canonicalConnectorId,
@@ -6493,6 +6748,7 @@ export {
   consoleStepsToText,
   consumePendingFlow,
   createActivepiecesExecutorProvider,
+  createActivepiecesHttpExecutor,
   createApprovalBackedPolicyEngine,
   createAuditingActionGuard,
   createCatalogExecutorProvider,
@@ -6509,6 +6765,8 @@ export {
   createIntegrationWorkflowRuntime,
   createMockIntegrationProvider,
   createPlatformIntegrationPolicyPreset,
+  createTangleCatalogExecutorProvider,
+  createTangleCatalogHttpExecutor,
   createTangleIntegrationsClient,
   declarativeRestConnector,
   decodeIntegrationBridgePayload,
@@ -6516,6 +6774,8 @@ export {
   encodeIntegrationBridgePayload,
   exchangeAuthorizationCode,
   explainMissingRequirements,
+  extractActivepiecesPublicPieceCount,
+  extractExternalCatalogPublicCount,
   firstHeader,
   getActivepiecesOverride,
   getIntegrationFamily,
@@ -6539,6 +6799,7 @@ export {
   listExecutableIntegrationSpecs,
   listIntegrationCoverageSpecs,
   listIntegrationSpecs,
+  listTangleIntegrationCatalogEntries,
   manifestToConnector,
   microsoftCalendar,
   normalizeGatewayCatalog,
@@ -6568,7 +6829,9 @@ export {
   sanitizeAuditConnection,
   sanitizeConnection,
   searchIntegrationTools,
+  signActivepiecesRuntimeRequest,
   signCapability,
+  signTangleCatalogRuntimeRequest,
   slack,
   slackEventsConnector,
   specAuthToConnectorAuth,
@@ -6587,10 +6850,12 @@ export {
   validateIntegrationManifest,
   validateIntegrationSpec,
   validateProviderPassthroughRequest,
+  verifyActivepiecesRuntimeSignature,
   verifyCapabilityToken,
   verifyHmacSignature,
   verifySlackSignature,
   verifyStripeSignature,
+  verifyTangleCatalogRuntimeSignature,
   verifyTwilioSignature,
   webhookConnector
 };