@tangle-network/agent-integrations 0.17.0 → 0.19.0

package/dist/specs.d.ts

@@ -452,7 +452,7 @@ declare function renderApprovalCopy(input: {
  *
  *   IntegrationHub                                — vendor-neutral facade (../index.ts)
  *     ↓
- *   IntegrationProvider                           — one per vendor (Nango/Composio/first-party)
+ *   IntegrationProvider                           — one per gateway or first-party provider
  *     ↓
  *   ConnectorAdapter (this file)                  — one per integration (Google Calendar, ...)
  *     ↓
@@ -2040,6 +2040,114 @@ interface ActivepiecesExecutorProviderOptions {
 }
 declare function createActivepiecesExecutorProvider(options: ActivepiecesExecutorProviderOptions): IntegrationProvider;
 
+declare const ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER = "x-tangle-activepieces-signature";
+declare const TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER = "x-tangle-catalog-signature";
+interface ActivepiecesRuntimeRequest {
+    version: 1;
+    requestId: string;
+    providerId: string;
+    connection: IntegrationConnection;
+    connector: Pick<IntegrationConnector, 'id' | 'title' | 'auth' | 'scopes' | 'metadata'>;
+    piece: ActivepiecesExecutorInvocation['piece'];
+    action: {
+        id: string;
+        input: unknown;
+        idempotencyKey?: string;
+        dryRun?: boolean;
+        metadata?: Record<string, unknown>;
+    };
+}
+interface ActivepiecesHttpExecutorOptions {
+    endpoint: string;
+    path?: string;
+    signatureHeader?: string;
+    secret?: string;
+    fetchImpl?: typeof fetch;
+    headers?: Record<string, string>;
+    timeoutMs?: number;
+    requestId?: () => string;
+}
+declare function createActivepiecesHttpExecutor(options: ActivepiecesHttpExecutorOptions): ActivepiecesExecutorProviderOptions['executeAction'];
+declare function buildActivepiecesRuntimeRequest(invocation: ActivepiecesExecutorInvocation, requestId?: string): ActivepiecesRuntimeRequest;
+declare function signActivepiecesRuntimeRequest(serializedBody: string, secret: string): string;
+declare function verifyActivepiecesRuntimeSignature(serializedBody: string, signature: string | null | undefined, secret: string): boolean;
+type TangleCatalogRuntimeRequest = ActivepiecesRuntimeRequest;
+type TangleCatalogHttpExecutorOptions = ActivepiecesHttpExecutorOptions;
+declare function createTangleCatalogHttpExecutor(options: TangleCatalogHttpExecutorOptions): ActivepiecesExecutorProviderOptions['executeAction'];
+declare const buildTangleCatalogRuntimeRequest: typeof buildActivepiecesRuntimeRequest;
+declare const signTangleCatalogRuntimeRequest: typeof signActivepiecesRuntimeRequest;
+declare const verifyTangleCatalogRuntimeSignature: typeof verifyActivepiecesRuntimeSignature;
+
+interface IntegrationCatalogFreshnessOptions {
+    liveActivepieces?: boolean;
+    minActivepiecesConnectors?: number;
+    staleConnectorDelta?: number;
+    fetchImpl?: typeof fetch;
+}
+interface IntegrationCatalogFreshnessResult {
+    ok: boolean;
+    generatedAt: string;
+    local: {
+        activepiecesEntries: number;
+        activepiecesConnectors: number;
+        activepiecesActions: number;
+        activepiecesTriggers: number;
+        executableActivepiecesConnectors: number;
+        executableActivepiecesActions: number;
+        executableActivepiecesTriggers: number;
+        executableToolDefinitions: number;
+        unsupportedExecutableConnectorIds: string[];
+        registryEntries: number;
+        registrySummary: IntegrationRegistrySummary;
+        conflictSamples: IntegrationRegistryConflict[];
+    };
+    upstream?: {
+        activepiecesPieces?: number;
+        activepiecesDelta?: number;
+        checkedUrl: string;
+        warning?: string;
+    };
+    warnings: string[];
+}
+declare const ACTIVEPIECES_PUBLIC_CATALOG_URL = "https://www.activepieces.com/pieces";
+declare function extractActivepiecesPublicPieceCount(html: string): number | undefined;
+declare function auditIntegrationCatalogFreshness(options?: IntegrationCatalogFreshnessOptions): Promise<IntegrationCatalogFreshnessResult>;
+
+type TangleIntegrationCatalogEntry = ActivepiecesCatalogEntry;
+type TangleCatalogExecutorInvocation = ActivepiecesExecutorInvocation;
+type TangleCatalogExecutorProviderOptions = ActivepiecesExecutorProviderOptions;
+type TangleIntegrationCatalogFreshnessOptions = IntegrationCatalogFreshnessOptions;
+interface TangleIntegrationCatalogFreshnessResult {
+    ok: boolean;
+    generatedAt: string;
+    local: {
+        catalogEntries: number;
+        catalogConnectors: number;
+        catalogActions: number;
+        catalogTriggers: number;
+        executableCatalogConnectors: number;
+        executableCatalogActions: number;
+        executableCatalogTriggers: number;
+        executableToolDefinitions: number;
+        unsupportedExecutableConnectorIds: string[];
+        registryEntries: number;
+        registrySummary: Awaited<ReturnType<typeof auditIntegrationCatalogFreshness>>['local']['registrySummary'];
+        conflictSamples: Awaited<ReturnType<typeof auditIntegrationCatalogFreshness>>['local']['conflictSamples'];
+    };
+    upstream?: {
+        externalEntries?: number;
+        externalDelta?: number;
+        checkedUrl: string;
+        warning?: string;
+    };
+    warnings: string[];
+}
+declare const listTangleIntegrationCatalogEntries: typeof listActivepiecesCatalogEntries;
+declare const buildTangleIntegrationCatalogConnectors: typeof buildActivepiecesConnectors;
+declare const createTangleCatalogExecutorProvider: typeof createActivepiecesExecutorProvider;
+declare const extractExternalCatalogPublicCount: typeof extractActivepiecesPublicPieceCount;
+declare function auditTangleIntegrationCatalogFreshness(options?: TangleIntegrationCatalogFreshnessOptions): Promise<TangleIntegrationCatalogFreshnessResult>;
+
 type IntegrationCoveragePriority = 'tier_0' | 'tier_1' | 'tier_2' | 'long_tail';
 interface IntegrationCoverageSpec {
     id: string;
@@ -2412,8 +2520,7 @@ interface IssuedIntegrationCapability {
  * result directly) or pass through (call `proceed()` to invoke the provider).
  *
  * Why this hook exists: production deployments need conflict-resolution
- * guarantees that span every provider — first-party, Nango, Composio,
- * webhook receivers — and providers shouldn't re-implement them. The
+ * guarantees that span every provider, gateway, and webhook receiver. The
  * canonical implementation is a "MutationGuard" that:
  *   1. Short-circuits on a known idempotency key (returns recorded response).
  *   2. Refuses same-key-different-args (drift detection).
@@ -2543,4 +2650,4 @@ declare function createHttpIntegrationProvider(options: HttpIntegrationProviderO
 declare function signCapability(capability: IntegrationCapability, secret: string): string;
 declare function verifyCapabilityToken(token: string, secret: string): IntegrationCapability;
 
-export { InMemoryIntegrationAuditStore as $, ACTIVEPIECES_OVERRIDES as A, type ApiKeyAuthSpec, type ConnectorManifest as B, CANONICAL_INTEGRATION_ACTIONS as C, type ConsoleStep, type CredentialFieldSpec, type CredentialValidationInput, type CredentialValidationResult, type CustomAuthSpec, type ConnectorManifestValidationIssue as D, type ConnectorManifestValidationResult as E, type ConsentSummary as F, type ConsistencyModel as G, CredentialsExpired as H, type HealthcheckPlan, type HealthcheckSpec, type HmacAuthSpec, DEFAULT_INTEGRATION_BRIDGE_ENV as I, INTEGRATION_FAMILIES, type IntegrationAuthMode, type IntegrationAuthSpec, type IntegrationFamilyId, type IntegrationFamilySpec, type IntegrationLifecycleSpec, type IntegrationPlannerHints, type IntegrationSetupSpec, type IntegrationSpec, type IntegrationSpecStatus, type IntegrationSpecValidationIssue, type IntegrationSpecValidationResult, DEFAULT_SIGNATURE_TOLERANCE_SECONDS as J, type DataSourceMetadata as K, DefaultIntegrationActionGuard as L, type EventHandlerResult as M, type ExchangeCodeInput as N, type NoneAuthSpec, type NormalizedPermission, type GatewayCatalogAction as O, type OAuth2AuthSpec, type GatewayCatalogEntry as P, type PermissionDescriptor, type PostSetupCheck, type GatewayCatalogProviderOptions as Q, type Quirk, type GatewayCatalogTrigger as R, type RenderSpecOptions, type RenderedConsoleStep, type GenericHmacVerifyOptions as S, type ScopeDescriptor, type GoogleCalendarOptions as T, type GoogleSheetsOptions as U, type GraphqlOperationSpec as V, type HttpIntegrationProviderOptions as W, type HubSpotOptions as X, type ImportCatalogOptions as Y, InMemoryConnectionStore as Z, InMemoryIntegrationApprovalStore as _, type ActivepiecesCatalogEntry as a, type IntegrationProvider as a$, InMemoryIntegrationEventStore as a0, InMemoryIntegrationGrantStore as a1, InMemoryIntegrationHealthcheckStore as a2, InMemoryIntegrationIdempotencyStore as a3, InMemoryIntegrationSecretStore as a4, InMemoryIntegrationWorkflowStore as a5, InMemoryOAuthFlowStore as a6, type InboundEvent as a7, type InferIntegrationRequirementsOptions as a8, type InstalledIntegrationWorkflow as a9, type IntegrationConnectorCategory as aA, type IntegrationConnectorTrigger as aB, type IntegrationCoveragePriority as aC, type IntegrationCoverageSpec as aD, type IntegrationDataClass as aE, IntegrationError as aF, type IntegrationErrorCode as aG, type IntegrationEventStore as aH, type IntegrationGrant as aI, type IntegrationGrantStore as aJ, type IntegrationGuardContext as aK, type IntegrationHealthcheckCheck as aL, type IntegrationHealthcheckResult as aM, type IntegrationHealthcheckStatus as aN, type IntegrationHealthcheckStore as aO, IntegrationHub as aP, type IntegrationHubOptions as aQ, type IntegrationIdempotencyRecord as aR, type IntegrationIdempotencyStore as aS, type IntegrationInvocationEnvelope as aT, type IntegrationInvocationEnvelopeValidationOptions as aU, type IntegrationManifest as aV, type IntegrationManifestResolution as aW, type IntegrationPolicyDecision as aX, type IntegrationPolicyEffect as aY, type IntegrationPolicyEngine as aZ, type IntegrationPolicyRule as a_, type IntegrationActionGuard as aa, type IntegrationActionPack as ab, type IntegrationActionRequest as ac, type IntegrationActionResult as ad, type IntegrationActionRisk as ae, type IntegrationActor as af, type IntegrationApprovalFilter as ag, type IntegrationApprovalRecord as ah, type IntegrationApprovalRequest as ai, type IntegrationApprovalResolution as aj, type IntegrationApprovalStatus as ak, type IntegrationApprovalStore as al, type IntegrationAuditEvent as am, type IntegrationAuditEventType as an, type IntegrationAuditFilter as ao, type IntegrationAuditSink as ap, type IntegrationAuditStore as aq, type IntegrationBridgePayload as ar, type IntegrationBridgeToolBinding as as, assertValidIntegrationSpec, type IntegrationCapability as at, type IntegrationCapabilityBinding as au, type IntegrationCatalogSource as av, type IntegrationConnection as aw, type IntegrationConnectionStore as ax, type IntegrationConnector as ay, type IntegrationConnectorAction as az, type ActivepiecesExecutorInvocation as b, type RestCredentialPlacement as b$, type IntegrationProviderKind as b0, type IntegrationRateLimitDecision as b1, type IntegrationRateLimiter as b2, type IntegrationRegistry as b3, type IntegrationRegistryConflict as b4, type IntegrationRegistryEntry as b5, type IntegrationRegistrySourceRef as b6, type IntegrationRegistrySummary as b7, type IntegrationRequirement as b8, type IntegrationRequirementMode as b9, type IssuedIntegrationCapability as bA, type ManifestValidationIssue as bB, type ManifestValidationResult as bC, type McpCatalog as bD, type McpCatalogTool as bE, type McpToolDefinition as bF, type MicrosoftCalendarOptions as bG, type MissingRequirementExplanation as bH, type NormalizedIntegrationError as bI, type NormalizedIntegrationResult as bJ, type NotionDatabaseOptions as bK, type OAuthFlowStore as bL, type OAuthTokens as bM, type OpenApiDocument as bN, type OpenApiOperation as bO, PROVIDER_PASSTHROUGH_ACTION as bP, type ParsedStripeSignatureHeader as bQ, type PendingOAuthFlow as bR, type PlatformIntegrationPolicyPresetOptions as bS, type ProviderHttpRequestInput as bT, type ProviderPassthroughPolicy as bU, type RateLimitSpec as bV, type RefreshInput as bW, type RenderConsentOptions as bX, type ResolvedDataSource as bY, ResourceContention as bZ, type RestConnectorSpec as b_, type IntegrationRequirementResolution as ba, type IntegrationRequirementStatus as bb, IntegrationRuntime as bc, IntegrationRuntimeError as bd, type IntegrationRuntimeHub as be, type IntegrationRuntimeOptions as bf, type IntegrationSandboxBundle as bg, IntegrationSandboxHost as bh, type IntegrationSandboxHostHub as bi, type IntegrationSandboxHostOptions as bj, type IntegrationSecretStore as bk, type IntegrationSupportTier as bl, type IntegrationToolDefinition as bm, type IntegrationToolSearchFilters as bn, type IntegrationToolSearchResult as bo, type IntegrationTriggerEvent as bp, type IntegrationTriggerSubscription as bq, type IntegrationUserAction as br, type IntegrationWebhookReceiverResult as bs, type IntegrationWorkflowDefinition as bt, IntegrationWorkflowRuntime as bu, buildHealthcheckPlan, type IntegrationWorkflowRuntimeHub as bv, type IntegrationWorkflowRuntimeOptions as bw, type IntegrationWorkflowStore as bx, type InvokeWithCapabilityRequest as by, type IssueCapabilityRequest as bz, type ActivepiecesExecutorProviderOptions as c, getActivepiecesOverride as c$, type RestOperationSpec as c0, type RestRequestSpec as c1, type SecretRef as c2, type SlackOptions as c3, type SlackVerifyOptions as c4, type StartAuthRequest as c5, type StartAuthResult as c6, type StartOAuthInput as c7, type StartOAuthOutput as c8, StaticIntegrationPolicyEngine as c9, composeIntegrationRegistry as cA, consumePendingFlow as cB, createActivepiecesExecutorProvider as cC, createApprovalBackedPolicyEngine as cD, createAuditingActionGuard as cE, createCatalogExecutorProvider as cF, createConnectionCredentialResolver as cG, createConnectorAdapterCatalogSource as cH, createConnectorAdapterProvider as cI, createCredentialBackedAdapterProvider as cJ, createDefaultIntegrationActionGuard as cK, createDefaultIntegrationPolicyEngine as cL, createGatewayCatalogProvider as cM, createHttpIntegrationProvider as cN, createIntegrationAuditEvent as cO, createIntegrationRuntime as cP, createIntegrationWorkflowRuntime as cQ, createMockIntegrationProvider as cR, createPlatformIntegrationPolicyPreset as cS, createTangleIntegrationsClient as cT, declarativeRestConnector as cU, decodeIntegrationBridgePayload as cV, dispatchIntegrationInvocation as cW, encodeIntegrationBridgePayload as cX, exchangeAuthorizationCode as cY, explainMissingRequirements as cZ, firstHeader as c_, type StaticIntegrationPolicyOptions as ca, type StoredIntegrationEvent as cb, type StripeVerifyOptions as cc, type TangleIntegrationInvokeInput as cd, type TangleIntegrationInvokeResult as ce, TangleIntegrationsClient as cf, type TangleIntegrationsClientOptions as cg, type TwilioVerifyOptions as ch, _resetPendingFlowsForTests as ci, adapterManifestsToConnectors as cj, airtableConnector as ck, asanaConnector as cl, assertValidConnectorManifest as cm, assertValidIntegrationManifest as cn, buildActivepiecesConnectors as co, consoleStepsToText, buildApprovalRequest as cp, buildCanonicalLaunchConnectors as cq, buildDefaultIntegrationRegistry as cr, buildIntegrationBridgeEnvironment as cs, buildIntegrationBridgePayload as ct, buildIntegrationCoverageConnectors as cu, buildIntegrationInvocationEnvelope as cv, buildIntegrationToolCatalog as cw, calendarExercisePlannerManifest as cx, canonicalActionConnectorId as cy, canonicalConnectorId as cz, type ActivepiecesPieceOverride as d, webhookConnector as d$, githubConnector as d0, gitlabConnector as d1, googleCalendar as d2, googleSheets as d3, healthcheckRequest as d4, hubspot as d5, importGraphqlConnector as d6, importMcpConnector as d7, importOpenApiConnector as d8, inferIntegrationManifestFromTools as d9, revokeConnection as dA, runIntegrationHealthcheck as dB, runIntegrationHealthchecks as dC, salesforceConnector as dD, sanitizeAuditConnection as dE, sanitizeConnection as dF, searchIntegrationTools as dG, signCapability as dH, slack as dI, slackEventsConnector as dJ, startOAuthFlow as dK, statusForCode as dL, storedEventToTriggerEvent as dM, stripePackConnector as dN, stripeWebhookReceiverConnector as dO, summarizeIntegrationRegistry as dP, toMcpTools as dQ, twilioSmsConnector as dR, validateConnectorManifest as dS, validateIntegrationInvocationEnvelope as dT, validateIntegrationManifest as dU, validateProviderPassthroughRequest as dV, verifyCapabilityToken as dW, verifyHmacSignature as dX, verifySlackSignature as dY, verifyStripeSignature as dZ, verifyTwilioSignature as d_, inferIntegrationSupportTier as da, integrationCoverageChecklistMarkdown as db, integrationToolName as dc, invocationRequestFromEnvelope as dd, listActivepiecesCatalogEntries as de, listIntegrationCoverageSpecs as df, manifestToConnector as dg, microsoftCalendar as dh, normalizeGatewayCatalog as di, normalizeIntegrationError as dj, normalizeIntegrationResult as dk, notionDatabase as dl, parseIntegrationBridgeEnvironment as dm, parseIntegrationToolName as dn, parseStripeSignatureHeader as dp, receiveIntegrationWebhook as dq, redactApprovalRequest as dr, redactCapability as ds, redactIntegrationBridgePayload as dt, redactInvocationEnvelope as du, refreshAccessToken as dv, renderApprovalCopy as dw, renderConsentSummary as dx, resolveConnectionCredentials as dy, resolveIntegrationApproval as dz, ApprovalBackedPolicyEngine as e, type ApprovalBackedPolicyOptions as f, type AuthSpec as g, getIntegrationFamily, getIntegrationSpec, type CASStrategy as h, type CanonicalIntegrationActionId as i, integrationSpecToConnector, type CanonicalLaunchConnectorOptions as j, type Capability as k, type CapabilityClass as l, listExecutableIntegrationSpecs, listIntegrationSpecs, type CapabilityMutation as m, type CapabilityMutationResult as n, type CapabilityParameterSchema as o, type CapabilityRead as p, type CapabilityReadResult as q, type CatalogExecutorInvocation as r, renderAgentToolDescription, renderConsoleSteps, renderRunbookMarkdown, type CatalogExecutorProviderOptions as s, specAuthToConnectorAuth, type CompleteAuthRequest as t, type ComposeIntegrationRegistryOptions as u, type ConnectionCredentialResolverOptions as v, validateCredentialFormat, validateCredentialSet, validateIntegrationSpec, type ConnectorAdapter as w, type ConnectorAdapterProviderOptions as x, type ConnectorCredentials as y, type ConnectorInvocation as z };
+export { type HubSpotOptions as $, ACTIVEPIECES_OVERRIDES as A, type ApiKeyAuthSpec, type ConnectorAdapter as B, CANONICAL_INTEGRATION_ACTIONS as C, type ConsoleStep, type CredentialFieldSpec, type CredentialValidationInput, type CredentialValidationResult, type CustomAuthSpec, type ConnectorAdapterProviderOptions as D, type ConnectorCredentials as E, type ConnectorInvocation as F, type ConnectorManifest as G, type ConnectorManifestValidationIssue as H, type HealthcheckPlan, type HealthcheckSpec, type HmacAuthSpec, type ConnectorManifestValidationResult as I, INTEGRATION_FAMILIES, type IntegrationAuthMode, type IntegrationAuthSpec, type IntegrationFamilyId, type IntegrationFamilySpec, type IntegrationLifecycleSpec, type IntegrationPlannerHints, type IntegrationSetupSpec, type IntegrationSpec, type IntegrationSpecStatus, type IntegrationSpecValidationIssue, type IntegrationSpecValidationResult, type ConsentSummary as J, type ConsistencyModel as K, CredentialsExpired as L, DEFAULT_INTEGRATION_BRIDGE_ENV as M, DEFAULT_SIGNATURE_TOLERANCE_SECONDS as N, type NoneAuthSpec, type NormalizedPermission, type DataSourceMetadata as O, type OAuth2AuthSpec, DefaultIntegrationActionGuard as P, type PermissionDescriptor, type PostSetupCheck, type EventHandlerResult as Q, type Quirk, type ExchangeCodeInput as R, type RenderSpecOptions, type RenderedConsoleStep, type GatewayCatalogAction as S, type ScopeDescriptor, type GatewayCatalogEntry as T, type GatewayCatalogProviderOptions as U, type GatewayCatalogTrigger as V, type GenericHmacVerifyOptions as W, type GoogleCalendarOptions as X, type GoogleSheetsOptions as Y, type GraphqlOperationSpec as Z, type HttpIntegrationProviderOptions as _, ACTIVEPIECES_PUBLIC_CATALOG_URL as a, type IntegrationManifest as a$, type ImportCatalogOptions as a0, InMemoryConnectionStore as a1, InMemoryIntegrationApprovalStore as a2, InMemoryIntegrationAuditStore as a3, InMemoryIntegrationEventStore as a4, InMemoryIntegrationGrantStore as a5, InMemoryIntegrationHealthcheckStore as a6, InMemoryIntegrationIdempotencyStore as a7, InMemoryIntegrationSecretStore as a8, InMemoryIntegrationWorkflowStore as a9, type IntegrationCatalogFreshnessResult as aA, type IntegrationCatalogSource as aB, type IntegrationConnection as aC, type IntegrationConnectionStore as aD, type IntegrationConnector as aE, type IntegrationConnectorAction as aF, type IntegrationConnectorCategory as aG, type IntegrationConnectorTrigger as aH, type IntegrationCoveragePriority as aI, type IntegrationCoverageSpec as aJ, type IntegrationDataClass as aK, IntegrationError as aL, type IntegrationErrorCode as aM, type IntegrationEventStore as aN, type IntegrationGrant as aO, type IntegrationGrantStore as aP, type IntegrationGuardContext as aQ, type IntegrationHealthcheckCheck as aR, type IntegrationHealthcheckResult as aS, type IntegrationHealthcheckStatus as aT, type IntegrationHealthcheckStore as aU, IntegrationHub as aV, type IntegrationHubOptions as aW, type IntegrationIdempotencyRecord as aX, type IntegrationIdempotencyStore as aY, type IntegrationInvocationEnvelope as aZ, type IntegrationInvocationEnvelopeValidationOptions as a_, InMemoryOAuthFlowStore as aa, type InboundEvent as ab, type InferIntegrationRequirementsOptions as ac, type InstalledIntegrationWorkflow as ad, type IntegrationActionGuard as ae, type IntegrationActionPack as af, type IntegrationActionRequest as ag, type IntegrationActionResult as ah, type IntegrationActionRisk as ai, type IntegrationActor as aj, type IntegrationApprovalFilter as ak, type IntegrationApprovalRecord as al, type IntegrationApprovalRequest as am, type IntegrationApprovalResolution as an, type IntegrationApprovalStatus as ao, type IntegrationApprovalStore as ap, type IntegrationAuditEvent as aq, type IntegrationAuditEventType as ar, type IntegrationAuditFilter as as, assertValidIntegrationSpec, type IntegrationAuditSink as at, type IntegrationAuditStore as au, type IntegrationBridgePayload as av, type IntegrationBridgeToolBinding as aw, type IntegrationCapability as ax, type IntegrationCapabilityBinding as ay, type IntegrationCatalogFreshnessOptions as az, ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER as b, type RateLimitSpec as b$, type IntegrationManifestResolution as b0, type IntegrationPolicyDecision as b1, type IntegrationPolicyEffect as b2, type IntegrationPolicyEngine as b3, type IntegrationPolicyRule as b4, type IntegrationProvider as b5, type IntegrationProviderKind as b6, type IntegrationRateLimitDecision as b7, type IntegrationRateLimiter as b8, type IntegrationRegistry as b9, IntegrationWorkflowRuntime as bA, type IntegrationWorkflowRuntimeHub as bB, type IntegrationWorkflowRuntimeOptions as bC, type IntegrationWorkflowStore as bD, type InvokeWithCapabilityRequest as bE, type IssueCapabilityRequest as bF, type IssuedIntegrationCapability as bG, type ManifestValidationIssue as bH, type ManifestValidationResult as bI, type McpCatalog as bJ, type McpCatalogTool as bK, type McpToolDefinition as bL, type MicrosoftCalendarOptions as bM, type MissingRequirementExplanation as bN, type NormalizedIntegrationError as bO, type NormalizedIntegrationResult as bP, type NotionDatabaseOptions as bQ, type OAuthFlowStore as bR, type OAuthTokens as bS, type OpenApiDocument as bT, type OpenApiOperation as bU, PROVIDER_PASSTHROUGH_ACTION as bV, type ParsedStripeSignatureHeader as bW, type PendingOAuthFlow as bX, type PlatformIntegrationPolicyPresetOptions as bY, type ProviderHttpRequestInput as bZ, type ProviderPassthroughPolicy as b_, type IntegrationRegistryConflict as ba, type IntegrationRegistryEntry as bb, type IntegrationRegistrySourceRef as bc, type IntegrationRegistrySummary as bd, type IntegrationRequirement as be, type IntegrationRequirementMode as bf, type IntegrationRequirementResolution as bg, type IntegrationRequirementStatus as bh, IntegrationRuntime as bi, IntegrationRuntimeError as bj, type IntegrationRuntimeHub as bk, type IntegrationRuntimeOptions as bl, type IntegrationSandboxBundle as bm, IntegrationSandboxHost as bn, type IntegrationSandboxHostHub as bo, type IntegrationSandboxHostOptions as bp, type IntegrationSecretStore as bq, type IntegrationSupportTier as br, type IntegrationToolDefinition as bs, type IntegrationToolSearchFilters as bt, type IntegrationToolSearchResult as bu, buildHealthcheckPlan, type IntegrationTriggerEvent as bv, type IntegrationTriggerSubscription as bw, type IntegrationUserAction as bx, type IntegrationWebhookReceiverResult as by, type IntegrationWorkflowDefinition as bz, type ActivepiecesCatalogEntry as c, createConnectorAdapterCatalogSource as c$, type RefreshInput as c0, type RenderConsentOptions as c1, type ResolvedDataSource as c2, ResourceContention as c3, type RestConnectorSpec as c4, type RestCredentialPlacement as c5, type RestOperationSpec as c6, type RestRequestSpec as c7, type SecretRef as c8, type SlackOptions as c9, assertValidConnectorManifest as cA, assertValidIntegrationManifest as cB, auditIntegrationCatalogFreshness as cC, auditTangleIntegrationCatalogFreshness as cD, buildActivepiecesConnectors as cE, buildActivepiecesRuntimeRequest as cF, buildApprovalRequest as cG, buildCanonicalLaunchConnectors as cH, buildDefaultIntegrationRegistry as cI, buildIntegrationBridgeEnvironment as cJ, buildIntegrationBridgePayload as cK, buildIntegrationCoverageConnectors as cL, buildIntegrationInvocationEnvelope as cM, buildIntegrationToolCatalog as cN, buildTangleCatalogRuntimeRequest as cO, buildTangleIntegrationCatalogConnectors as cP, calendarExercisePlannerManifest as cQ, canonicalActionConnectorId as cR, canonicalConnectorId as cS, composeIntegrationRegistry as cT, consumePendingFlow as cU, createActivepiecesExecutorProvider as cV, createActivepiecesHttpExecutor as cW, createApprovalBackedPolicyEngine as cX, createAuditingActionGuard as cY, createCatalogExecutorProvider as cZ, createConnectionCredentialResolver as c_, type SlackVerifyOptions as ca, type StartAuthRequest as cb, type StartAuthResult as cc, type StartOAuthInput as cd, type StartOAuthOutput as ce, StaticIntegrationPolicyEngine as cf, type StaticIntegrationPolicyOptions as cg, type StoredIntegrationEvent as ch, type StripeVerifyOptions as ci, TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER as cj, type TangleCatalogExecutorInvocation as ck, type TangleCatalogExecutorProviderOptions as cl, type TangleCatalogHttpExecutorOptions as cm, type TangleCatalogRuntimeRequest as cn, type TangleIntegrationCatalogEntry as co, consoleStepsToText, type TangleIntegrationCatalogFreshnessOptions as cp, type TangleIntegrationCatalogFreshnessResult as cq, type TangleIntegrationInvokeInput as cr, type TangleIntegrationInvokeResult as cs, TangleIntegrationsClient as ct, type TangleIntegrationsClientOptions as cu, type TwilioVerifyOptions as cv, _resetPendingFlowsForTests as cw, adapterManifestsToConnectors as cx, airtableConnector as cy, asanaConnector as cz, type ActivepiecesExecutorInvocation as d, runIntegrationHealthchecks as d$, createConnectorAdapterProvider as d0, createCredentialBackedAdapterProvider as d1, createDefaultIntegrationActionGuard as d2, createDefaultIntegrationPolicyEngine as d3, createGatewayCatalogProvider as d4, createHttpIntegrationProvider as d5, createIntegrationAuditEvent as d6, createIntegrationRuntime as d7, createIntegrationWorkflowRuntime as d8, createMockIntegrationProvider as d9, integrationCoverageChecklistMarkdown as dA, integrationToolName as dB, invocationRequestFromEnvelope as dC, listActivepiecesCatalogEntries as dD, listIntegrationCoverageSpecs as dE, listTangleIntegrationCatalogEntries as dF, manifestToConnector as dG, microsoftCalendar as dH, normalizeGatewayCatalog as dI, normalizeIntegrationError as dJ, normalizeIntegrationResult as dK, notionDatabase as dL, parseIntegrationBridgeEnvironment as dM, parseIntegrationToolName as dN, parseStripeSignatureHeader as dO, receiveIntegrationWebhook as dP, redactApprovalRequest as dQ, redactCapability as dR, redactIntegrationBridgePayload as dS, redactInvocationEnvelope as dT, refreshAccessToken as dU, renderApprovalCopy as dV, renderConsentSummary as dW, resolveConnectionCredentials as dX, resolveIntegrationApproval as dY, revokeConnection as dZ, runIntegrationHealthcheck as d_, createPlatformIntegrationPolicyPreset as da, createTangleCatalogExecutorProvider as db, createTangleCatalogHttpExecutor as dc, createTangleIntegrationsClient as dd, declarativeRestConnector as de, decodeIntegrationBridgePayload as df, dispatchIntegrationInvocation as dg, encodeIntegrationBridgePayload as dh, exchangeAuthorizationCode as di, explainMissingRequirements as dj, extractActivepiecesPublicPieceCount as dk, extractExternalCatalogPublicCount as dl, firstHeader as dm, getActivepiecesOverride as dn, githubConnector as dp, gitlabConnector as dq, googleCalendar as dr, googleSheets as ds, healthcheckRequest as dt, hubspot as du, importGraphqlConnector as dv, importMcpConnector as dw, importOpenApiConnector as dx, inferIntegrationManifestFromTools as dy, inferIntegrationSupportTier as dz, type ActivepiecesExecutorProviderOptions as e, salesforceConnector as e0, sanitizeAuditConnection as e1, sanitizeConnection as e2, searchIntegrationTools as e3, signActivepiecesRuntimeRequest as e4, signCapability as e5, signTangleCatalogRuntimeRequest as e6, slack as e7, slackEventsConnector as e8, startOAuthFlow as e9, statusForCode as ea, storedEventToTriggerEvent as eb, stripePackConnector as ec, stripeWebhookReceiverConnector as ed, summarizeIntegrationRegistry as ee, toMcpTools as ef, twilioSmsConnector as eg, validateConnectorManifest as eh, validateIntegrationInvocationEnvelope as ei, validateIntegrationManifest as ej, validateProviderPassthroughRequest as ek, verifyActivepiecesRuntimeSignature as el, verifyCapabilityToken as em, verifyHmacSignature as en, verifySlackSignature as eo, verifyStripeSignature as ep, verifyTangleCatalogRuntimeSignature as eq, verifyTwilioSignature as er, webhookConnector as es, type ActivepiecesHttpExecutorOptions as f, type ActivepiecesPieceOverride as g, getIntegrationFamily, getIntegrationSpec, type ActivepiecesRuntimeRequest as h, ApprovalBackedPolicyEngine as i, integrationSpecToConnector, type ApprovalBackedPolicyOptions as j, type AuthSpec as k, type CASStrategy as l, listExecutableIntegrationSpecs, listIntegrationSpecs, type CanonicalIntegrationActionId as m, type CanonicalLaunchConnectorOptions as n, type Capability as o, type CapabilityClass as p, type CapabilityMutation as q, type CapabilityMutationResult as r, renderAgentToolDescription, renderConsoleSteps, renderRunbookMarkdown, type CapabilityParameterSchema as s, specAuthToConnectorAuth, type CapabilityRead as t, type CapabilityReadResult as u, type CatalogExecutorInvocation as v, validateCredentialFormat, validateCredentialSet, validateIntegrationSpec, type CatalogExecutorProviderOptions as w, type CompleteAuthRequest as x, type ComposeIntegrationRegistryOptions as y, type ConnectionCredentialResolverOptions as z };

package/docs/adapter-triage.md

@@ -48,34 +48,29 @@ Aliases matter when comparing coverage:
 - `stripe` maps to `stripe-pack` for outbound payment actions.
 - `twilio` maps to `twilio-sms`.
 
-## 600+ Catalog Execution Path
+## Tangle Catalog Execution Path
 
-The repo does not need 600 hand-written adapter files. Long-tail execution uses
-one strict catalog executor:
+The repo does not need hundreds of hand-written adapter files. Long-tail
+execution uses one strict catalog executor:
 
 ```ts
 import {
-  createActivepiecesExecutorProvider,
+  createTangleCatalogExecutorProvider,
+  createTangleCatalogHttpExecutor,
   IntegrationHub,
 } from '@tangle-network/agent-integrations'
 
-const provider = createActivepiecesExecutorProvider({
-  async executeAction({ piece, request, connection }) {
-    return runInHardenedExecutor({
-      packageName: piece.npmPackage,
-      version: piece.version,
-      actionId: piece.actionId,
-      upstreamActionName: piece.upstreamActionName,
-      input: request.input,
-      connection,
-    })
-  },
+const provider = createTangleCatalogExecutorProvider({
+  executeAction: createTangleCatalogHttpExecutor({
+    endpoint: 'https://id.tangle.tools/integration-runtime',
+    secret: process.env.TANGLE_CATALOG_RUNTIME_SECRET,
+  }),
 })
 
 const hub = new IntegrationHub({ providers: [provider], store, capabilitySecret })
 ```
 
-This promotes all vendored Activepieces community entries to
+This promotes normalized Tangle Integrations Catalog entries to
 `gatewayExecutable` only when a caller supplies an executor. The default catalog
 remains `catalogOnly`, so generated apps cannot accidentally call metadata.
 
@@ -201,6 +196,6 @@ Before any product says an integration is “supported” for real users:
 - Include first-party adapter catalogs in registry composition when a consumer
   provides adapter instances.
 - Add a generated triage command that compares coverage specs, setup specs,
-  active catalog entries, and adapter manifests.
+  imported catalog entries, and adapter manifests.
 - Promote Gmail, Drive, Outlook Mail, Linear, Jira, Zendesk, Intercom, Shopify,
   QuickBooks, S3, and Postgres first.

package/docs/catalog-registry.md

@@ -5,7 +5,7 @@
 - first-party adapters
 - generated setup specs
 - gateway catalogs
-- vendored Activepieces metadata
+- imported Tangle Integrations Catalog metadata
 - planning coverage stubs
 
 Those sources intentionally overlap. The public product surface should not.

package/docs/generated-integration-coverage-checklist.md

@@ -135,9 +135,9 @@ Generated from `listIntegrationCoverageSpecs()`. Catalog presence means the prod
 - [ ] tier_1 / database / Qdrant (qdrant) - vector, database, ai
 - [ ] tier_1 / workflow / Zapier (zapier) - automation, workflow
 - [ ] tier_1 / workflow / Make (make) - automation, workflow
-- [ ] tier_1 / workflow / Nango (nango) - integration-platform, oauth
-- [ ] tier_1 / workflow / Pipedream (pipedream) - integration-platform, workflow
-- [ ] tier_1 / workflow / Activepieces (activepieces) - automation, workflow, open-source
+- [ ] tier_1 / workflow / Hosted Integration Gateway (hosted-integration-gateway) - integration-platform, oauth
+- [ ] tier_1 / workflow / Workflow Runtime Gateway (workflow-runtime-gateway) - integration-platform, workflow
+- [ ] tier_1 / workflow / Open Automation Catalog (open-automation-catalog) - automation, workflow, open-source
 - [ ] tier_0 / webhook / Generic Webhook (webhook) - webhook, http, events
 - [ ] tier_0 / workflow / HTTP Request (http) - http, api, webhook
 - [ ] tier_1 / webhook / RSS (rss) - feeds, content

package/docs/integration-coverage-checklist.md

@@ -5,7 +5,7 @@ Goal: cover the integrations that make agents useful for 99% of practical produc
 ## Strategy
 
 - Use `buildIntegrationCoverageConnectors()` for broad planning/catalog coverage.
-- Use vendor gateways such as Nango, Pipedream, Activepieces, and custom HTTP providers for long-tail OAuth/API coverage.
+- Use hosted gateways, imported connector catalogs, and custom HTTP providers for long-tail OAuth/API coverage.
 - Promote high-volume, sensitive, or moat-critical connectors into first-party `ConnectorAdapter`s.
 - Do not claim a connector is executable until it has auth, scope, action, error, rate-limit, idempotency, and approval-path tests.
 - Keep every connector behind `IntegrationHub`, capability tokens, policy checks, and sandbox invocation envelopes.
@@ -17,15 +17,16 @@ Goal: cover the integrations that make agents useful for 99% of practical produc
 - [x] Coverage catalog for 100+ high-value integrations.
 - [x] Builder API consumes the coverage catalog for app planning.
 - [x] Declarative REST adapter factory for fast first-party promotion of REST-shaped APIs.
-- [x] Provider gateway catalog adapter can normalize 500+ Nango/Pipedream/Activepieces-style connectors.
+- [x] Provider gateway catalog adapter can normalize 500+ external catalog connectors.
 - [x] Canonical registry dedupes overlapping catalogs, aliases, support tiers, and conflict diagnostics.
 - [ ] Generated sandbox apps can request missing connections from the catalog.
 - [ ] Live smoke credentials exist for Tier 0 connectors.
 - [ ] Tier 0 connector failures are classified by auth, scope, rate-limit, provider outage, validation, approval, and conflict.
 - [ ] Tier 0 write actions have idempotency and approval tests.
-- [x] Provider gateway adapters can import/sync catalog metadata from Nango/Pipedream/Activepieces registries.
+- [x] Provider gateway adapters can import/sync catalog metadata from external registries.
 - [x] Adapter execution triage is documented in [`adapter-triage.md`](./adapter-triage.md).
-- [x] Activepieces community catalog can be promoted to executable actions through `createActivepiecesExecutorProvider`.
+- [x] Tangle Integrations Catalog entries can be promoted to executable actions through `createTangleCatalogExecutorProvider`.
+- [x] Tangle Integrations Catalog executable actions can dispatch through a signed HTTP runtime executor protocol.
 
 ## Tier 0 First-Party Promotion Queue
 
@@ -79,7 +80,7 @@ The exhaustive checklist is generated from `integrationCoverageChecklistMarkdown
 - Marketing and social: Mailchimp, Klaviyo, Marketo, Braze, Facebook Pages, Instagram Business, LinkedIn, X, YouTube.
 - Data and infra: Snowflake, BigQuery, Redshift, Postgres, MySQL, MongoDB, Supabase, Firebase, S3, Cloudflare.
 - HR/legal/signature: Workday, BambooHR, Greenhouse, Lever, Gusto, Rippling, DocuSign, Ironclad, Clio.
-- AI/vector/workflow: OpenAI, Anthropic, Gemini, Hugging Face, Pinecone, Weaviate, Qdrant, Zapier, Make, Nango, Pipedream, Activepieces.
+- AI/vector/workflow: OpenAI, Anthropic, Gemini, Hugging Face, Pinecone, Weaviate, Qdrant, Zapier, Make, hosted gateways, and imported automation catalogs.
 
 ## Remaining Work
 
@@ -91,4 +92,4 @@ The exhaustive checklist is generated from `integrationCoverageChecklistMarkdown
 - [x] Add Airtable, GitLab, and Asana via declarative REST.
 - [x] Add generated integration setup specs, renderers, validation, and healthcheck plans.
 - [ ] Add live smoke-test harness that skips only when explicit credentials are absent.
-- [ ] Add gateway sync job for Nango/Pipedream/Activepieces metadata.
+- [ ] Add gateway sync job for external catalog metadata.

package/docs/provider-decision-matrix.md

@@ -2,11 +2,11 @@
 
 Status date: 2026-05-04
 
-`agent-integrations` should keep product code independent from Nango,
-Pipedream, Zapier, Activepieces, Composio, executor-style services, and our own
-first-party connectors. The strategic goal is not to outsource integrations
-forever. The goal is to get broad connector coverage quickly while preserving a
-clean path to bring important connectors in-house.
+`agent-integrations` should keep product code independent from any hosted
+integration gateway, imported catalog source, executor-style service, or
+first-party connector implementation. The strategic goal is not to outsource
+integrations forever. The goal is to get broad connector coverage quickly while
+preserving a clean path to bring important connectors in-house.
 
 ## Default Strategy
 

package/docs/repo-structure.md

@@ -22,13 +22,13 @@ This repo intentionally separates catalog breadth from executable runtime code.
 - `src/connectors/` contains first-party adapter contracts and implementations.
 - `src/specs/` is the structured OAuth/setup/runbook source of truth.
 - `src/registry.ts`, `src/gateway-catalog.ts`, `src/coverage-catalog.ts`, and
-  `src/activepieces-catalog.ts` compose broad connector catalogs without
-  pretending catalog-only entries are executable.
+  `src/tangle-catalog.ts` compose broad connector catalogs without pretending
+  catalog-only entries are executable.
 
 ## Data
 
-- `data/activepieces-catalog.json` is large by design. It is lazy-loaded and
-  keeps long-tail discovery out of TypeScript source so `tsc --watch` does not
+- Imported catalog JSON is large by design. It is lazy-loaded and keeps
+  long-tail discovery out of TypeScript source so `tsc --watch` does not
   re-check a generated 40k-line module. It is catalog metadata, not executable
   support.
 

package/docs/third-party/activepieces.md

@@ -1,7 +1,7 @@
 # Activepieces Community Catalog Attribution
 
-`src/activepieces-catalog.generated.ts` is generated from the Activepieces
-Community pieces catalog:
+`data/activepieces-catalog.json` is generated from the Activepieces Community
+pieces catalog:
 
 - Source repository: https://github.com/activepieces/activepieces
 - Source path: `packages/pieces/community`
@@ -10,11 +10,11 @@ Community pieces catalog:
   versions, high-level action names, trigger names, auth shape hints, and
   category/domain metadata.
 
-The generated catalog is connector metadata for `agent-integrations`; it does
-not vendor the Activepieces runtime or execute Activepieces piece code directly.
-Consumers can run these connectors through an Activepieces-backed provider,
-promote selected entries to first-party adapters, or use the metadata for
-planning and connection setup.
+The generated file is ingestion/provenance data for the Tangle Integrations
+Catalog. It does not vendor the Activepieces runtime or execute Activepieces
+piece code directly. Consumers should use the Tangle-named catalog APIs and can
+promote selected entries to first-party adapters or route them through a signed
+Tangle catalog runtime.
 
 Regenerate after checking out Activepieces:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-integrations",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "description": "Vendor-neutral integration contracts and runtime helpers for sandbox and agent apps.",
   "homepage": "https://github.com/tangle-network/agent-integrations#readme",
   "repository": {