@tangle-network/agent-integrations 0.26.0 → 0.27.0

package/dist/connectors/index.js

@@ -1,12 +1,9 @@
 import "../chunk-376UBTNB.js";
 import {
-  CredentialsExpired,
   InMemoryOAuthFlowStore,
-  ResourceContention,
   _resetPendingFlowsForTests,
   airtableConnector,
   asanaConnector,
-  assertValidConnectorManifest,
   consumePendingFlow,
   declarativeRestConnector,
   docuseal,
@@ -28,9 +25,8 @@ import {
   stripePackConnector,
   stripeWebhookReceiverConnector,
   twilioSmsConnector,
-  validateConnectorManifest,
   webhookConnector
-} from "../chunk-GA4VTE3U.js";
+} from "../chunk-JU25UDN2.js";
 import {
   DEFAULT_SIGNATURE_TOLERANCE_SECONDS,
   firstHeader,
@@ -40,16 +36,33 @@ import {
   verifyStripeSignature,
   verifyTwilioSignature
 } from "../chunk-2TW2QKGZ.js";
+import {
+  CredentialsExpired,
+  DEFAULT_TANGLE_PLATFORM_URL,
+  ResourceContention,
+  TANGLE_API_KEY_PREFIX,
+  TANGLE_SERVICE_TOKEN_PREFIX,
+  TangleIdentityUnreachableError,
+  assertValidConnectorManifest,
+  createTangleIdentityClient,
+  tangleIdentity,
+  validateConnectorManifest
+} from "../chunk-ATYHZXLL.js";
 export {
   CredentialsExpired,
   DEFAULT_SIGNATURE_TOLERANCE_SECONDS,
+  DEFAULT_TANGLE_PLATFORM_URL,
   InMemoryOAuthFlowStore,
   ResourceContention,
+  TANGLE_API_KEY_PREFIX,
+  TANGLE_SERVICE_TOKEN_PREFIX,
+  TangleIdentityUnreachableError,
   _resetPendingFlowsForTests,
   airtableConnector,
   asanaConnector,
   assertValidConnectorManifest,
   consumePendingFlow,
+  createTangleIdentityClient,
   declarativeRestConnector,
   docuseal,
   exchangeAuthorizationCode,
@@ -71,6 +84,7 @@ export {
   startOAuthFlow,
   stripePackConnector,
   stripeWebhookReceiverConnector,
+  tangleIdentity,
   twilioSmsConnector,
   validateConnectorManifest,
   verifyHmacSignature,

package/dist/index.d.ts

@@ -1,4 +1,7 @@
-export { aB as ACTIVEPIECES_OVERRIDES, aC as ACTIVEPIECES_PUBLIC_CATALOG_URL, aD as ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER, aE as ActivepiecesCatalogAuthField, aF as ActivepiecesCatalogEntry, aG as ActivepiecesExecutorInvocation, aH as ActivepiecesExecutorProviderOptions, aI as ActivepiecesHttpExecutorOptions, aJ as ActivepiecesPieceOverride, aK as ActivepiecesRuntimeRequest, U as ApiKeyAuthSpec, aL as ApprovalBackedPolicyEngine, aM as ApprovalBackedPolicyOptions, aN as CANONICAL_INTEGRATION_ACTIONS, aO as CanonicalIntegrationActionId, aP as CanonicalLaunchConnectorOptions, aQ as CatalogExecutorInvocation, aR as CatalogExecutorProviderOptions, aS as CompleteAuthRequest, ComposeIntegrationRegistryOptions, aT as ConnectionCredentialResolverOptions, aU as ConnectorAdapterProviderOptions, aV as ConsentSummary, V as ConsoleStep, W as CredentialFieldSpec, X as CredentialValidationInput, Y as CredentialValidationResult, Z as CustomAuthSpec, aW as DEFAULT_INTEGRATION_BRIDGE_ENV, aX as DefaultIntegrationActionGuard, aY as DiscoverWorkspaceCapabilitiesInput, aZ as GatewayCatalogAction, a_ as GatewayCatalogEntry, a$ as GatewayCatalogProviderOptions, b0 as GatewayCatalogTrigger, b1 as GraphqlOperationSpec, _ as HealthcheckPlan, $ as HealthcheckSpec, a0 as HmacAuthSpec, b2 as HttpIntegrationProviderOptions, a1 as INTEGRATION_FAMILIES, b3 as ImportCatalogOptions, b4 as InMemoryConnectionStore, b5 as InMemoryIntegrationApprovalStore, b6 as InMemoryIntegrationAuditStore, b7 as InMemoryIntegrationEventStore, f as InMemoryIntegrationGrantStore, b8 as InMemoryIntegrationHealthcheckStore, b9 as InMemoryIntegrationIdempotencyStore, ba as InMemoryIntegrationSecretStore, bb as InMemoryIntegrationWorkflowStore, bc as InferIntegrationRequirementsOptions, bd as InstalledIntegrationWorkflow, be as IntegrationActionGuard, bf as IntegrationActionPack, bg as IntegrationActionRequest, bh as IntegrationActionResult, bi as IntegrationActionRisk, bj as IntegrationActor, bk as IntegrationApprovalFilter, bl as IntegrationApprovalRecord, bm as IntegrationApprovalRequest, bn as IntegrationApprovalResolution, bo as IntegrationApprovalStatus, bp as IntegrationApprovalStore, bq as IntegrationAuditEvent, br as IntegrationAuditEventType, bs as IntegrationAuditFilter, bt as IntegrationAuditSink, bu as IntegrationAuditStore, a2 as IntegrationAuthMode, a3 as IntegrationAuthSpec, bv as IntegrationBridgePayload, bw as IntegrationBridgeToolBinding, bx as IntegrationCapability, g as IntegrationCapabilityBinding, by as IntegrationCatalogFreshnessOptions, bz as IntegrationCatalogFreshnessResult, IntegrationCatalogSource, I as IntegrationCatalogView, bA as IntegrationConnection, bB as IntegrationConnectionStore, bC as IntegrationConnector, bD as IntegrationConnectorAction, bE as IntegrationConnectorCategory, bF as IntegrationConnectorTrigger, bG as IntegrationCoveragePriority, bH as IntegrationCoverageSpec, bI as IntegrationDataClass, bJ as IntegrationError, bK as IntegrationErrorCode, bL as IntegrationEventStore, a4 as IntegrationFamilyId, a5 as IntegrationFamilySpec, h as IntegrationGrant, j as IntegrationGrantStore, bM as IntegrationGuardContext, bN as IntegrationHealthcheckCheck, bO as IntegrationHealthcheckResult, bP as IntegrationHealthcheckStatus, bQ as IntegrationHealthcheckStore, bR as IntegrationHub, bS as IntegrationHubOptions, bT as IntegrationIdempotencyRecord, bU as IntegrationIdempotencyStore, bV as IntegrationInvocationEnvelope, bW as IntegrationInvocationEnvelopeValidationOptions, a6 as IntegrationLifecycleSpec, k as IntegrationManifest, l as IntegrationManifestResolution, a7 as IntegrationPlannerHints, bX as IntegrationPolicyDecision, bY as IntegrationPolicyEffect, bZ as IntegrationPolicyEngine, b_ as IntegrationPolicyRule, b$ as IntegrationProvider, c0 as IntegrationProviderKind, c1 as IntegrationRateLimitDecision, c2 as IntegrationRateLimiter, IntegrationRegistry, IntegrationRegistryConflict, IntegrationRegistryEntry, IntegrationRegistrySourceRef, IntegrationRegistrySummary, m as IntegrationRequirement, n as IntegrationRequirementMode, o as IntegrationRequirementResolution, q as IntegrationRequirementStatus, r as IntegrationRuntime, c3 as IntegrationRuntimeError, u as IntegrationRuntimeHub, v as IntegrationRuntimeOptions, w as IntegrationSandboxBundle, c4 as IntegrationSandboxHost, c5 as IntegrationSandboxHostHub, c6 as IntegrationSandboxHostOptions, c7 as IntegrationSecretStore, a8 as IntegrationSetupSpec, a9 as IntegrationSpec, aa as IntegrationSpecStatus, ab as IntegrationSpecValidationIssue, ac as IntegrationSpecValidationResult, IntegrationSupportTier, a as IntegrationToolDefinition, b as IntegrationToolSearchFilters, c as IntegrationToolSearchResult, c8 as IntegrationTriggerEvent, c9 as IntegrationTriggerSubscription, ca as IntegrationUserAction, cb as IntegrationWebhookReceiverResult, cc as IntegrationWorkflowDefinition, cd as IntegrationWorkflowRuntime, ce as IntegrationWorkflowRuntimeHub, cf as IntegrationWorkflowRuntimeOptions, cg as IntegrationWorkflowStore, ch as InvokeWithCapabilityRequest, ci as IssueCapabilityRequest, cj as IssuedIntegrationCapability, ck as ManifestValidationIssue, cl as ManifestValidationResult, cm as McpCatalog, cn as McpCatalogTool, M as McpToolDefinition, co as MissingRequirementExplanation, ad as NoneAuthSpec, cp as NormalizedIntegrationError, cq as NormalizedIntegrationResult, ae as NormalizedPermission, af as OAuth2AuthSpec, cr as OpenApiDocument, cs as OpenApiOperation, ct as PROVIDER_PASSTHROUGH_ACTION, ag as PermissionDescriptor, cu as PlatformIntegrationPolicyPresetOptions, ah as PostSetupCheck, cv as ProviderHttpRequestInput, cw as ProviderPassthroughPolicy, ai as Quirk, cx as RenderConsentOptions, aj as RenderSpecOptions, ak as RenderedConsoleStep, al as ScopeDescriptor, cy as SecretRef, cz as StartAuthRequest, cA as StartAuthResult, cB as StartedTangleCatalogRuntimeNodeServer, cC as StaticIntegrationPolicyEngine, cD as StaticIntegrationPolicyOptions, cE as StoredIntegrationEvent, T as TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER, cF as TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID, cG as TANGLE_INTEGRATIONS_CATALOG_SOURCE, y as TangleCatalogAuthResolverOptions, cH as TangleCatalogExecutorInvocation, cI as TangleCatalogExecutorProviderOptions, z as TangleCatalogHttpAuthResolverOptions, A as TangleCatalogHttpAuthResolverRequest, cJ as TangleCatalogHttpExecutorInvocation, cK as TangleCatalogHttpExecutorOptions, B as TangleCatalogInstalledPackageExecutorOptions, cL as TangleCatalogRuntimeActionRequest, C as TangleCatalogRuntimeHandlerOptions, D as TangleCatalogRuntimeHttpRequest, E as TangleCatalogRuntimeHttpResponse, F as TangleCatalogRuntimeInvocation, G as TangleCatalogRuntimeModuleAction, cM as TangleCatalogRuntimeNodeServerOptions, H as TangleCatalogRuntimePackageCoverageOptions, J as TangleCatalogRuntimePackageCoverageRow, cN as TangleCatalogRuntimePackageManifest, cO as TangleCatalogRuntimePackageManifestOptions, cP as TangleCatalogRuntimePiece, cQ as TangleCatalogRuntimeRequest, cR as TangleCatalogTriggerInvocation, cS as TangleIntegrationCatalogEntry, cT as TangleIntegrationCatalogFreshnessOptions, cU as TangleIntegrationCatalogFreshnessResult, cV as TangleIntegrationContract, cW as TangleIntegrationContractStatus, cX as TangleIntegrationImplementationKind, cY as TangleIntegrationInvokeInput, cZ as TangleIntegrationInvokeResult, c_ as TangleIntegrationsClient, c$ as TangleIntegrationsClientOptions, d0 as WorkspaceCapability, d1 as WorkspaceCapabilityDiscovery, d2 as WorkspaceToolSchema, d3 as WorkspaceTrigger, d4 as adapterManifestsToConnectors, d5 as assertValidIntegrationManifest, am as assertValidIntegrationSpec, d6 as auditIntegrationCatalogFreshness, K as auditTangleCatalogRuntimePackages, d7 as auditTangleIntegrationCatalogFreshness, d8 as buildActivepiecesConnectors, d9 as buildActivepiecesRuntimeRequest, da as buildApprovalRequest, db as buildCanonicalLaunchConnectors, buildDefaultIntegrationRegistry, an as buildHealthcheckPlan, dc as buildIntegrationBridgeEnvironment, dd as buildIntegrationBridgePayload, d as buildIntegrationCatalogView, de as buildIntegrationCoverageConnectors, df as buildIntegrationInvocationEnvelope, e as buildIntegrationToolCatalog, dg as buildTangleCatalogRuntimePackageManifest, dh as buildTangleCatalogRuntimeRequest, di as buildTangleIntegrationCatalogConnectors, dj as calendarExercisePlannerManifest, dk as canonicalActionConnectorId, canonicalConnectorId, composeIntegrationRegistry, ao as consoleStepsToText, dl as createActivepiecesExecutorProvider, dm as createActivepiecesHttpExecutor, dn as createApprovalBackedPolicyEngine, dp as createAuditingActionGuard, dq as createCatalogExecutorProvider, dr as createConnectionCredentialResolver, ds as createConnectorAdapterCatalogSource, dt as createConnectorAdapterProvider, du as createCredentialBackedAdapterProvider, dv as createDefaultIntegrationActionGuard, dw as createDefaultIntegrationPolicyEngine, dx as createGatewayCatalogProvider, dy as createHttpIntegrationProvider, dz as createIntegrationAuditEvent, x as createIntegrationRuntime, dA as createIntegrationWorkflowRuntime, dB as createMockIntegrationProvider, dC as createPlatformIntegrationPolicyPreset, L as createTangleCatalogCredentialAuthResolver, dD as createTangleCatalogExecutorProvider, N as createTangleCatalogHttpAuthResolver, dE as createTangleCatalogHttpExecutor, O as createTangleCatalogInstalledPackageExecutor, P as createTangleCatalogRuntimeHandler, dF as createTangleCatalogRuntimeNodeRequestListener, dG as createTangleIntegrationsClient, dH as decodeIntegrationBridgePayload, dI as discoverWorkspaceCapabilities, dJ as dispatchIntegrationInvocation, dK as encodeIntegrationBridgePayload, dL as explainMissingRequirements, dM as extractActivepiecesPublicPieceCount, dN as extractExternalCatalogPublicCount, dO as getActivepiecesOverride, ap as getIntegrationFamily, aq as getIntegrationSpec, dP as healthcheckRequest, dQ as importGraphqlConnector, dR as importMcpConnector, dS as importOpenApiConnector, dT as inferIntegrationManifestFromTools, inferIntegrationSupportTier, dU as integrationCoverageChecklistMarkdown, ar as integrationSpecToConnector, i as integrationToolName, dV as invocationRequestFromEnvelope, dW as listActivepiecesCatalogEntries, as as listExecutableIntegrationSpecs, dX as listIntegrationCoverageSpecs, at as listIntegrationSpecs, dY as listTangleIntegrationCatalogEntries, dZ as listTangleIntegrationCatalogRuntimePackages, d_ as listTangleIntegrationContracts, d$ as manifestToConnector, e0 as normalizeGatewayCatalog, e1 as normalizeIntegrationError, e2 as normalizeIntegrationResult, e3 as parseIntegrationBridgeEnvironment, p as parseIntegrationToolName, e4 as receiveIntegrationWebhook, e5 as redactApprovalRequest, e6 as redactCapability, e7 as redactIntegrationBridgePayload, e8 as redactInvocationEnvelope, au as renderAgentToolDescription, e9 as renderApprovalCopy, ea as renderConsentSummary, av as renderConsoleSteps, aw as renderRunbookMarkdown, eb as renderTangleCatalogRuntimePnpmAddCommand, ec as resolveConnectionCredentials, ed as resolveIntegrationApproval, ee as revokeConnection, ef as runIntegrationHealthcheck, eg as runIntegrationHealthchecks, eh as sanitizeAuditConnection, ei as sanitizeConnection, s as searchIntegrationTools, ej as signActivepiecesRuntimeRequest, ek as signCapability, Q as signTangleCatalogRuntimeRequest, ax as specAuthToConnectorAuth, el as startTangleCatalogRuntimeNodeServer, em as statusForCode, en as storedEventToTriggerEvent, summarizeIntegrationRegistry, R as tangleCatalogAuthValue, t as toMcpTools, ay as validateCredentialFormat, az as validateCredentialSet, eo as validateIntegrationInvocationEnvelope, ep as validateIntegrationManifest, aA as validateIntegrationSpec, eq as validateProviderPassthroughRequest, er as verifyActivepiecesRuntimeSignature, es as verifyCapabilityToken, S as verifyTangleCatalogRuntimeSignature } from './registry.js';
-export { A as AuthSpec, b as CASStrategy, c as Capability, d as CapabilityClass, e as CapabilityMutation, f as CapabilityMutationResult, g as CapabilityParameterSchema, h as CapabilityRead, i as CapabilityReadResult, C as ConnectorAdapter, a as ConnectorCredentials, j as ConnectorInvocation, k as ConnectorManifest, l as ConnectorManifestValidationIssue, m as ConnectorManifestValidationResult, n as ConsistencyModel, o as CredentialsExpired, D as DataSourceMetadata, p as DocuSealOptions, E as EventHandlerResult, G as GmailOptions, q as GoogleCalendarOptions, r as GoogleDriveOptions, s as GoogleSheetsOptions, H as HubSpotOptions, I as InboundEvent, M as MicrosoftCalendarOptions, N as NotionDatabaseOptions, t as RateLimitSpec, R as ResolvedDataSource, u as ResourceContention, v as RestConnectorSpec, w as RestCredentialPlacement, x as RestOperationSpec, y as RestRequestSpec, S as SlackOptions, z as airtableConnector, B as asanaConnector, F as assertValidConnectorManifest, J as declarativeRestConnector, K as docuseal, L as githubConnector, O as gitlabConnector, P as gmail, Q as googleCalendar, T as googleDrive, U as googleSheets, V as hubspot, W as microsoftCalendar, X as notionDatabase, Y as salesforceConnector, Z as slack, _ as slackEventsConnector, $ as stripePackConnector, a0 as stripeWebhookReceiverConnector, a1 as twilioSmsConnector, a2 as validateConnectorManifest, a3 as webhookConnector } from './index-D4D4CEKX.js';
+export { aB as ACTIVEPIECES_OVERRIDES, aC as ACTIVEPIECES_PUBLIC_CATALOG_URL, aD as ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER, aE as ActivepiecesCatalogAuthField, aF as ActivepiecesCatalogEntry, aG as ActivepiecesExecutorInvocation, aH as ActivepiecesExecutorProviderOptions, aI as ActivepiecesHttpExecutorOptions, aJ as ActivepiecesPieceOverride, aK as ActivepiecesRuntimeRequest, U as ApiKeyAuthSpec, aL as ApprovalBackedPolicyEngine, aM as ApprovalBackedPolicyOptions, aN as CANONICAL_INTEGRATION_ACTIONS, aO as CanonicalIntegrationActionId, aP as CanonicalLaunchConnectorOptions, aQ as CatalogExecutorInvocation, aR as CatalogExecutorProviderOptions, aS as CompleteAuthRequest, ComposeIntegrationRegistryOptions, aT as ConnectionCredentialResolverOptions, aU as ConnectorAdapterProviderOptions, aV as ConsentSummary, V as ConsoleStep, W as CredentialFieldSpec, X as CredentialValidationInput, Y as CredentialValidationResult, Z as CustomAuthSpec, aW as DEFAULT_INTEGRATION_BRIDGE_ENV, aX as DefaultIntegrationActionGuard, aY as DiscoverWorkspaceCapabilitiesInput, aZ as GatewayCatalogAction, a_ as GatewayCatalogEntry, a$ as GatewayCatalogProviderOptions, b0 as GatewayCatalogTrigger, b1 as GraphqlOperationSpec, _ as HealthcheckPlan, $ as HealthcheckSpec, a0 as HmacAuthSpec, b2 as HttpIntegrationProviderOptions, a1 as INTEGRATION_FAMILIES, b3 as ImportCatalogOptions, b4 as InMemoryConnectionStore, b5 as InMemoryIntegrationApprovalStore, b6 as InMemoryIntegrationAuditStore, b7 as InMemoryIntegrationEventStore, f as InMemoryIntegrationGrantStore, b8 as InMemoryIntegrationHealthcheckStore, b9 as InMemoryIntegrationIdempotencyStore, ba as InMemoryIntegrationSecretStore, bb as InMemoryIntegrationWorkflowStore, bc as InferIntegrationRequirementsOptions, bd as InstalledIntegrationWorkflow, be as IntegrationActionGuard, bf as IntegrationActionPack, bg as IntegrationActionRequest, bh as IntegrationActionResult, bi as IntegrationActionRisk, bj as IntegrationActor, bk as IntegrationApprovalFilter, bl as IntegrationApprovalRecord, bm as IntegrationApprovalRequest, bn as IntegrationApprovalResolution, bo as IntegrationApprovalStatus, bp as IntegrationApprovalStore, bq as IntegrationAuditEvent, br as IntegrationAuditEventType, bs as IntegrationAuditFilter, bt as IntegrationAuditSink, bu as IntegrationAuditStore, a2 as IntegrationAuthMode, a3 as IntegrationAuthSpec, bv as IntegrationBridgePayload, bw as IntegrationBridgeToolBinding, bx as IntegrationCapability, g as IntegrationCapabilityBinding, by as IntegrationCatalogFreshnessOptions, bz as IntegrationCatalogFreshnessResult, IntegrationCatalogSource, I as IntegrationCatalogView, bA as IntegrationConnection, bB as IntegrationConnectionStore, bC as IntegrationConnector, bD as IntegrationConnectorAction, bE as IntegrationConnectorCategory, bF as IntegrationConnectorTrigger, bG as IntegrationCoveragePriority, bH as IntegrationCoverageSpec, bI as IntegrationDataClass, bJ as IntegrationError, bK as IntegrationErrorCode, bL as IntegrationEventStore, a4 as IntegrationFamilyId, a5 as IntegrationFamilySpec, h as IntegrationGrant, j as IntegrationGrantStore, bM as IntegrationGuardContext, bN as IntegrationHealthcheckCheck, bO as IntegrationHealthcheckResult, bP as IntegrationHealthcheckStatus, bQ as IntegrationHealthcheckStore, bR as IntegrationHub, bS as IntegrationHubOptions, bT as IntegrationIdempotencyRecord, bU as IntegrationIdempotencyStore, bV as IntegrationInvocationEnvelope, bW as IntegrationInvocationEnvelopeValidationOptions, a6 as IntegrationLifecycleSpec, k as IntegrationManifest, l as IntegrationManifestResolution, a7 as IntegrationPlannerHints, bX as IntegrationPolicyDecision, bY as IntegrationPolicyEffect, bZ as IntegrationPolicyEngine, b_ as IntegrationPolicyRule, b$ as IntegrationProvider, c0 as IntegrationProviderKind, c1 as IntegrationRateLimitDecision, c2 as IntegrationRateLimiter, IntegrationRegistry, IntegrationRegistryConflict, IntegrationRegistryEntry, IntegrationRegistrySourceRef, IntegrationRegistrySummary, m as IntegrationRequirement, n as IntegrationRequirementMode, o as IntegrationRequirementResolution, q as IntegrationRequirementStatus, r as IntegrationRuntime, c3 as IntegrationRuntimeError, u as IntegrationRuntimeHub, v as IntegrationRuntimeOptions, w as IntegrationSandboxBundle, c4 as IntegrationSandboxHost, c5 as IntegrationSandboxHostHub, c6 as IntegrationSandboxHostOptions, c7 as IntegrationSecretStore, a8 as IntegrationSetupSpec, a9 as IntegrationSpec, aa as IntegrationSpecStatus, ab as IntegrationSpecValidationIssue, ac as IntegrationSpecValidationResult, IntegrationSupportTier, a as IntegrationToolDefinition, b as IntegrationToolSearchFilters, c as IntegrationToolSearchResult, c8 as IntegrationTriggerEvent, c9 as IntegrationTriggerSubscription, ca as IntegrationUserAction, cb as IntegrationWebhookReceiverResult, cc as IntegrationWorkflowDefinition, cd as IntegrationWorkflowRuntime, ce as IntegrationWorkflowRuntimeHub, cf as IntegrationWorkflowRuntimeOptions, cg as IntegrationWorkflowStore, ch as InvokeWithCapabilityRequest, ci as IssueCapabilityRequest, cj as IssuedIntegrationCapability, ck as ManifestValidationIssue, cl as ManifestValidationResult, cm as McpCatalog, cn as McpCatalogTool, M as McpToolDefinition, co as MissingRequirementExplanation, ad as NoneAuthSpec, cp as NormalizedIntegrationError, cq as NormalizedIntegrationResult, ae as NormalizedPermission, af as OAuth2AuthSpec, cr as OpenApiDocument, cs as OpenApiOperation, ct as PROVIDER_PASSTHROUGH_ACTION, ag as PermissionDescriptor, cu as PlatformIntegrationPolicyPresetOptions, ah as PostSetupCheck, cv as ProviderHttpRequestInput, cw as ProviderPassthroughPolicy, ai as Quirk, cx as RenderConsentOptions, aj as RenderSpecOptions, ak as RenderedConsoleStep, al as ScopeDescriptor, cy as SecretRef, cz as StartAuthRequest, cA as StartAuthResult, cB as StartedTangleCatalogRuntimeNodeServer, cC as StaticIntegrationPolicyEngine, cD as StaticIntegrationPolicyOptions, cE as StoredIntegrationEvent, T as TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER, cF as TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID, cG as TANGLE_INTEGRATIONS_CATALOG_SOURCE, y as TangleCatalogAuthResolverOptions, cH as TangleCatalogExecutorInvocation, cI as TangleCatalogExecutorProviderOptions, z as TangleCatalogHttpAuthResolverOptions, A as TangleCatalogHttpAuthResolverRequest, cJ as TangleCatalogHttpExecutorInvocation, cK as TangleCatalogHttpExecutorOptions, B as TangleCatalogInstalledPackageExecutorOptions, cL as TangleCatalogRuntimeActionRequest, C as TangleCatalogRuntimeHandlerOptions, D as TangleCatalogRuntimeHttpRequest, E as TangleCatalogRuntimeHttpResponse, F as TangleCatalogRuntimeInvocation, G as TangleCatalogRuntimeModuleAction, cM as TangleCatalogRuntimeNodeServerOptions, H as TangleCatalogRuntimePackageCoverageOptions, J as TangleCatalogRuntimePackageCoverageRow, cN as TangleCatalogRuntimePackageManifest, cO as TangleCatalogRuntimePackageManifestOptions, cP as TangleCatalogRuntimePiece, cQ as TangleCatalogRuntimeRequest, cR as TangleCatalogTriggerInvocation, cS as TangleIntegrationCatalogEntry, cT as TangleIntegrationCatalogFreshnessOptions, cU as TangleIntegrationCatalogFreshnessResult, cV as TangleIntegrationContract, cW as TangleIntegrationContractStatus, cX as TangleIntegrationImplementationKind, cY as TangleIntegrationInvokeInput, cZ as TangleIntegrationInvokeResult, c_ as TangleIntegrationsClient, c$ as TangleIntegrationsClientOptions, d0 as WorkspaceCapability, d1 as WorkspaceCapabilityDiscovery, d2 as WorkspaceToolSchema, d3 as WorkspaceTrigger, d4 as adapterManifestsToConnectors, d5 as assertValidIntegrationManifest, am as assertValidIntegrationSpec, d6 as auditIntegrationCatalogFreshness, K as auditTangleCatalogRuntimePackages, d7 as auditTangleIntegrationCatalogFreshness, d8 as buildActivepiecesConnectors, d9 as buildActivepiecesRuntimeRequest, da as buildApprovalRequest, db as buildCanonicalLaunchConnectors, buildDefaultIntegrationRegistry, an as buildHealthcheckPlan, dc as buildIntegrationBridgeEnvironment, dd as buildIntegrationBridgePayload, d as buildIntegrationCatalogView, de as buildIntegrationCoverageConnectors, df as buildIntegrationInvocationEnvelope, e as buildIntegrationToolCatalog, dg as buildTangleCatalogRuntimePackageManifest, dh as buildTangleCatalogRuntimeRequest, di as buildTangleIntegrationCatalogConnectors, dj as calendarExercisePlannerManifest, dk as canonicalActionConnectorId, canonicalConnectorId, composeIntegrationRegistry, ao as consoleStepsToText, dl as createActivepiecesExecutorProvider, dm as createActivepiecesHttpExecutor, dn as createApprovalBackedPolicyEngine, dp as createAuditingActionGuard, dq as createCatalogExecutorProvider, dr as createConnectionCredentialResolver, ds as createConnectorAdapterCatalogSource, dt as createConnectorAdapterProvider, du as createCredentialBackedAdapterProvider, dv as createDefaultIntegrationActionGuard, dw as createDefaultIntegrationPolicyEngine, dx as createGatewayCatalogProvider, dy as createHttpIntegrationProvider, dz as createIntegrationAuditEvent, x as createIntegrationRuntime, dA as createIntegrationWorkflowRuntime, dB as createMockIntegrationProvider, dC as createPlatformIntegrationPolicyPreset, L as createTangleCatalogCredentialAuthResolver, dD as createTangleCatalogExecutorProvider, N as createTangleCatalogHttpAuthResolver, dE as createTangleCatalogHttpExecutor, O as createTangleCatalogInstalledPackageExecutor, P as createTangleCatalogRuntimeHandler, dF as createTangleCatalogRuntimeNodeRequestListener, dG as createTangleIntegrationsClient, dH as decodeIntegrationBridgePayload, dI as discoverWorkspaceCapabilities, dJ as dispatchIntegrationInvocation, dK as encodeIntegrationBridgePayload, dL as explainMissingRequirements, dM as extractActivepiecesPublicPieceCount, dN as extractExternalCatalogPublicCount, dO as filterDiscoveryByWorkspaceScopes, dP as getActivepiecesOverride, ap as getIntegrationFamily, aq as getIntegrationSpec, dQ as healthcheckRequest, dR as importGraphqlConnector, dS as importMcpConnector, dT as importOpenApiConnector, dU as inferIntegrationManifestFromTools, inferIntegrationSupportTier, dV as integrationCoverageChecklistMarkdown, ar as integrationSpecToConnector, i as integrationToolName, dW as invocationRequestFromEnvelope, dX as listActivepiecesCatalogEntries, as as listExecutableIntegrationSpecs, dY as listIntegrationCoverageSpecs, at as listIntegrationSpecs, dZ as listTangleIntegrationCatalogEntries, d_ as listTangleIntegrationCatalogRuntimePackages, d$ as listTangleIntegrationContracts, e0 as manifestToConnector, e1 as normalizeGatewayCatalog, e2 as normalizeIntegrationError, e3 as normalizeIntegrationResult, e4 as parseIntegrationBridgeEnvironment, p as parseIntegrationToolName, e5 as receiveIntegrationWebhook, e6 as redactApprovalRequest, e7 as redactCapability, e8 as redactIntegrationBridgePayload, e9 as redactInvocationEnvelope, au as renderAgentToolDescription, ea as renderApprovalCopy, eb as renderConsentSummary, av as renderConsoleSteps, aw as renderRunbookMarkdown, ec as renderTangleCatalogRuntimePnpmAddCommand, ed as resolveConnectionCredentials, ee as resolveIntegrationApproval, ef as revokeConnection, eg as runIntegrationHealthcheck, eh as runIntegrationHealthchecks, ei as sanitizeAuditConnection, ej as sanitizeConnection, s as searchIntegrationTools, ek as signActivepiecesRuntimeRequest, el as signCapability, Q as signTangleCatalogRuntimeRequest, ax as specAuthToConnectorAuth, em as startTangleCatalogRuntimeNodeServer, en as statusForCode, eo as storedEventToTriggerEvent, summarizeIntegrationRegistry, R as tangleCatalogAuthValue, t as toMcpTools, ay as validateCredentialFormat, az as validateCredentialSet, ep as validateIntegrationInvocationEnvelope, eq as validateIntegrationManifest, aA as validateIntegrationSpec, er as validateProviderPassthroughRequest, es as verifyActivepiecesRuntimeSignature, et as verifyCapabilityToken, S as verifyTangleCatalogRuntimeSignature } from './registry.js';
+export { ConnectFlowOptions, FinishConnectInput, FinishConnectOutput, InMemoryConnectStateStore, StartConnectInput, StartConnectOutput, finishConnectFlow, revokeConnectFlow, startConnectFlow } from './connect/index.js';
+export { ExpressLikeRequest, ExpressLikeResponse, HonoLikeContext, RequireTangleAuthOptions, TangleAuthContext, TangleAuthOutcome, TangleAuthReason, expressTangleAuthMiddleware, extractToken, honoTangleAuthMiddleware, requireTangleAuth } from './middleware/index.js';
+export { A as AuthSpec, e as CASStrategy, f as Capability, g as CapabilityClass, h as CapabilityMutation, i as CapabilityMutationResult, j as CapabilityParameterSchema, k as CapabilityRead, l as CapabilityReadResult, C as ConnectorAdapter, d as ConnectorCredentials, m as ConnectorInvocation, n as ConnectorManifest, o as ConnectorManifestValidationIssue, p as ConnectorManifestValidationResult, q as ConsistencyModel, r as CredentialsExpired, D as DEFAULT_TANGLE_PLATFORM_URL, s as DataSourceMetadata, E as EventHandlerResult, I as InboundEvent, t as RateLimitSpec, R as ResolvedDataSource, u as ResourceContention, v as TANGLE_API_KEY_PREFIX, w as TANGLE_SERVICE_TOKEN_PREFIX, b as TangleIdentityClient, T as TangleIdentityOptions, x as TangleIdentityUnreachableError, c as TangleTokenVerifyFailure, y as TangleTokenVerifyResult, a as TangleUserSummary, z as TangleWorkspaceSummary, B as assertValidConnectorManifest, F as createTangleIdentityClient, G as tangleIdentity, H as validateConnectorManifest } from './tangle-id-CTU4kGId.js';
 export { DEFAULT_SIGNATURE_TOLERANCE_SECONDS, ExchangeCodeInput, GenericHmacVerifyOptions, InMemoryOAuthFlowStore, OAuthFlowStore, OAuthTokens, ParsedStripeSignatureHeader, PendingOAuthFlow, RefreshInput, SlackVerifyOptions, StartOAuthInput, StartOAuthOutput, StripeVerifyOptions, TwilioVerifyOptions, _resetPendingFlowsForTests, consumePendingFlow, exchangeAuthorizationCode, firstHeader, parseStripeSignatureHeader, refreshAccessToken, startOAuthFlow, verifyHmacSignature, verifySlackSignature, verifyStripeSignature, verifyTwilioSignature } from './connectors/index.js';
+export { DocuSealOptions, GmailOptions, GoogleCalendarOptions, GoogleDriveOptions, GoogleSheetsOptions, HubSpotOptions, MicrosoftCalendarOptions, NotionDatabaseOptions, RestConnectorSpec, RestCredentialPlacement, RestOperationSpec, RestRequestSpec, SlackOptions, airtableConnector, asanaConnector, declarativeRestConnector, docuseal, githubConnector, gitlabConnector, gmail, googleCalendar, googleDrive, googleSheets, hubspot, microsoftCalendar, notionDatabase, salesforceConnector, slack, slackEventsConnector, stripePackConnector, stripeWebhookReceiverConnector, twilioSmsConnector, webhookConnector } from './connectors/adapters/index.js';
 import 'node:http';

package/dist/index.js

@@ -82,6 +82,7 @@ import {
   explainMissingRequirements,
   extractActivepiecesPublicPieceCount,
   extractExternalCatalogPublicCount,
+  filterDiscoveryByWorkspaceScopes,
   getActivepiecesOverride,
   healthcheckRequest,
   importGraphqlConnector,
@@ -132,7 +133,13 @@ import {
   verifyActivepiecesRuntimeSignature,
   verifyCapabilityToken,
   verifyTangleCatalogRuntimeSignature
-} from "./chunk-ALCIWTIR.js";
+} from "./chunk-ICSBYCE2.js";
+import {
+  expressTangleAuthMiddleware,
+  extractToken,
+  honoTangleAuthMiddleware,
+  requireTangleAuth
+} from "./chunk-SVQ4PHDZ.js";
 import {
   INTEGRATION_FAMILIES,
   assertValidIntegrationSpec,
@@ -156,13 +163,10 @@ import {
 } from "./chunk-4JQ754PA.js";
 import "./chunk-376UBTNB.js";
 import {
-  CredentialsExpired,
   InMemoryOAuthFlowStore,
-  ResourceContention,
   _resetPendingFlowsForTests,
   airtableConnector,
   asanaConnector,
-  assertValidConnectorManifest,
   consumePendingFlow,
   declarativeRestConnector,
   docuseal,
@@ -184,9 +188,8 @@ import {
   stripePackConnector,
   stripeWebhookReceiverConnector,
   twilioSmsConnector,
-  validateConnectorManifest,
   webhookConnector
-} from "./chunk-GA4VTE3U.js";
+} from "./chunk-JU25UDN2.js";
 import {
   DEFAULT_SIGNATURE_TOLERANCE_SECONDS,
   firstHeader,
@@ -196,6 +199,24 @@ import {
   verifyStripeSignature,
   verifyTwilioSignature
 } from "./chunk-2TW2QKGZ.js";
+import {
+  InMemoryConnectStateStore,
+  finishConnectFlow,
+  revokeConnectFlow,
+  startConnectFlow
+} from "./chunk-P24T3MLM.js";
+import {
+  CredentialsExpired,
+  DEFAULT_TANGLE_PLATFORM_URL,
+  ResourceContention,
+  TANGLE_API_KEY_PREFIX,
+  TANGLE_SERVICE_TOKEN_PREFIX,
+  TangleIdentityUnreachableError,
+  assertValidConnectorManifest,
+  createTangleIdentityClient,
+  tangleIdentity,
+  validateConnectorManifest
+} from "./chunk-ATYHZXLL.js";
 export {
   ACTIVEPIECES_OVERRIDES,
   ACTIVEPIECES_PUBLIC_CATALOG_URL,
@@ -205,8 +226,10 @@ export {
   CredentialsExpired,
   DEFAULT_INTEGRATION_BRIDGE_ENV,
   DEFAULT_SIGNATURE_TOLERANCE_SECONDS,
+  DEFAULT_TANGLE_PLATFORM_URL,
   DefaultIntegrationActionGuard,
   INTEGRATION_FAMILIES,
+  InMemoryConnectStateStore,
   InMemoryConnectionStore,
   InMemoryIntegrationApprovalStore,
   InMemoryIntegrationAuditStore,
@@ -226,9 +249,12 @@ export {
   PROVIDER_PASSTHROUGH_ACTION,
   ResourceContention,
   StaticIntegrationPolicyEngine,
+  TANGLE_API_KEY_PREFIX,
   TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER,
   TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID,
   TANGLE_INTEGRATIONS_CATALOG_SOURCE,
+  TANGLE_SERVICE_TOKEN_PREFIX,
+  TangleIdentityUnreachableError,
   TangleIntegrationsClient,
   _resetPendingFlowsForTests,
   adapterManifestsToConnectors,
@@ -286,6 +312,7 @@ export {
   createTangleCatalogInstalledPackageExecutor,
   createTangleCatalogRuntimeHandler,
   createTangleCatalogRuntimeNodeRequestListener,
+  createTangleIdentityClient,
   createTangleIntegrationsClient,
   declarativeRestConnector,
   decodeIntegrationBridgePayload,
@@ -295,8 +322,12 @@ export {
   encodeIntegrationBridgePayload,
   exchangeAuthorizationCode,
   explainMissingRequirements,
+  expressTangleAuthMiddleware,
   extractActivepiecesPublicPieceCount,
   extractExternalCatalogPublicCount,
+  extractToken,
+  filterDiscoveryByWorkspaceScopes,
+  finishConnectFlow,
   firstHeader,
   getActivepiecesOverride,
   getIntegrationFamily,
@@ -308,6 +339,7 @@ export {
   googleDrive,
   googleSheets,
   healthcheckRequest,
+  honoTangleAuthMiddleware,
   hubspot,
   importGraphqlConnector,
   importMcpConnector,
@@ -346,8 +378,10 @@ export {
   renderConsoleSteps,
   renderRunbookMarkdown,
   renderTangleCatalogRuntimePnpmAddCommand,
+  requireTangleAuth,
   resolveConnectionCredentials,
   resolveIntegrationApproval,
+  revokeConnectFlow,
   revokeConnection,
   runIntegrationHealthcheck,
   runIntegrationHealthchecks,
@@ -361,6 +395,7 @@ export {
   slack,
   slackEventsConnector,
   specAuthToConnectorAuth,
+  startConnectFlow,
   startOAuthFlow,
   startTangleCatalogRuntimeNodeServer,
   statusForCode,
@@ -369,6 +404,7 @@ export {
   stripeWebhookReceiverConnector,
   summarizeIntegrationRegistry,
   tangleCatalogAuthValue,
+  tangleIdentity,
   toMcpTools,
   twilioSmsConnector,
   validateConnectorManifest,

package/dist/middleware/index.d.ts

@@ -0,0 +1,137 @@
+import { T as TangleIdentityOptions, b as TangleIdentityClient, c as TangleTokenVerifyFailure } from '../tangle-id-CTU4kGId.js';
+
+/**
+ * @stable Drop-in request middleware that verifies id.tangle.tools
+ * credentials and attaches `{ userId, workspaceId, scopes, kind }` to the
+ * request.
+ *
+ * The middleware is framework-agnostic. Instead of binding to express /
+ * hono / itty-router specifically (each has its own request typings and
+ * lifecycle), the helper accepts either a `Request` (web standard) or a
+ * `{ headers }`-shaped object and returns a typed result the caller wires
+ * into its own context. Concrete adapters for hono / express / fetch live
+ * one call below in the same module so a product can pick the shape it
+ * uses without dragging in framework types from the rest.
+ *
+ * Why this matters: legal-agent runs on Bun + Hono. tax-agent runs on
+ * CF Workers + itty-router. gtm-agent runs on Node + Express. Wiring an
+ * identical "is this caller authed" check across all three is what
+ * unblocks shipping product apps in parallel.
+ *
+ * Token sources (checked in order):
+ *
+ *   1. `Authorization: Bearer <token>` — handles both sk-tan-* API keys
+ *      and Better Auth-issued session bearers.
+ *   2. `Cookie: better-auth.session_token=<jwt>` — the canonical browser
+ *      flow. We forward the cookie value as a Bearer to the platform's
+ *      `/api/auth/get-session` endpoint.
+ *
+ * On success the middleware returns:
+ *
+ *   { ok: true, auth: { userId, workspaceId, scopes, kind, expiresAt? } }
+ *
+ * On failure:
+ *
+ *   { ok: false, status: 401|403, reason: '<stable-code>' }
+ *
+ * The caller decides whether to short-circuit the request (production) or
+ * downgrade to anonymous (read-only public endpoints). The middleware
+ * NEVER throws on bad-token; only true platform unreachability bubbles up
+ * as a `TangleIdentityUnreachableError`.
+ */
+
+/** Auth context the middleware attaches to the request on success. */
+interface TangleAuthContext {
+    userId: string;
+    workspaceId: string;
+    scopes: string[];
+    kind: 'api_key' | 'session';
+    /** Wall-clock ms epoch when the credential expires, when known. */
+    expiresAt?: number;
+    /** Stable credential id (key id for API keys, session id for sessions). */
+    credentialId?: string;
+    /** Owner-shape on the platform side. */
+    ownerType: 'user' | 'team';
+    /** Product the credential is scoped to, when known. */
+    product?: string;
+}
+type TangleAuthOutcome = {
+    ok: true;
+    auth: TangleAuthContext;
+} | {
+    ok: false;
+    status: 401 | 403 | 503;
+    reason: TangleAuthReason;
+};
+/** Stable failure reasons surfaced to the caller. */
+type TangleAuthReason = 'missing_credential' | 'malformed_credential' | 'service_token_refused' | TangleTokenVerifyFailure | 'platform_unreachable';
+interface RequireTangleAuthOptions extends TangleIdentityOptions {
+    /** Pre-built client. When supplied, all `TangleIdentityOptions` fields
+     *  are ignored. Tests pass a stub here; production code typically
+     *  constructs the client once at boot and passes it in. */
+    client?: TangleIdentityClient;
+    /** Override the cookie name where the session bearer lives. Defaults
+     *  to `better-auth.session_token` — matches the platform's Better Auth
+     *  configuration. */
+    sessionCookieName?: string;
+    /** If true, missing-credential returns `ok: false, status: 401`
+     *  (default). If false, the middleware returns `ok: true` with a
+     *  synthetic anonymous context — useful for public endpoints that want
+     *  to opportunistically hydrate identity. */
+    requireCredential?: boolean;
+}
+/**
+ * Verify the credential on `request` against id.tangle.tools and resolve
+ * to a typed {@link TangleAuthContext}. Request type is the web-standard
+ * `Request` shape — works in Bun, Workers, Deno, Node 20+, Hono context's
+ * `c.req.raw`, and Express adapters that surface `req` via `webRequest()`.
+ */
+declare function requireTangleAuth(request: Pick<Request, 'headers'>, opts?: RequireTangleAuthOptions): Promise<TangleAuthOutcome>;
+/**
+ * Extract the bearer credential from a request. Public so callers that
+ * want to reuse the same token-discovery logic outside the middleware
+ * (e.g. to attribute audit log entries) don't have to re-implement it.
+ *
+ * Order: Authorization header first (canonical), session cookie second.
+ * Service tokens (`svc_*`) are explicitly dropped — the platform's
+ * middleware refuses to map them to a user, so accepting them here
+ * would invite the exact "service-as-user" privilege escalation the
+ * platform's `resolveServiceIdentity` already guards against.
+ */
+declare function extractToken(request: Pick<Request, 'headers'>, sessionCookieName?: string): string | undefined;
+/**
+ * Hono-flavored convenience wrapper. Returns a hono middleware factory
+ * that calls {@link requireTangleAuth} and stashes the result on the
+ * Hono context under `c.set('tangleAuth', auth)`. On failure short-
+ * circuits with the canonical {success:false} envelope the platform uses.
+ *
+ * Kept typed against a structural `Context`-like shape so this module
+ * does NOT take a hono peerDep. Consumers pass `c` directly.
+ */
+declare function honoTangleAuthMiddleware(opts?: RequireTangleAuthOptions): (c: HonoLikeContext, next: () => Promise<void>) => Promise<Response | void>;
+/** Minimal Hono Context-shaped surface. Avoids the hono peerDep. */
+interface HonoLikeContext {
+    req: {
+        raw: Request;
+    };
+    set(key: 'tangleAuth', value: TangleAuthContext): void;
+}
+/**
+ * Express-flavored convenience wrapper. Same outcome shape as the Hono
+ * helper, expressed via the Node `req` / `res` / `next` triple. Consumers
+ * pass the triple as positional args. Returns a function compatible with
+ * any express-like `app.use(fn)`.
+ */
+declare function expressTangleAuthMiddleware(opts?: RequireTangleAuthOptions): (req: ExpressLikeRequest, res: ExpressLikeResponse, next: (err?: unknown) => void) => Promise<void>;
+/** Minimal Express-shaped surfaces. Avoids the express peerDep. */
+interface ExpressLikeRequest {
+    headers: Record<string, string | string[] | undefined>;
+    tangleAuth?: TangleAuthContext;
+}
+interface ExpressLikeResponse {
+    status(code: number): unknown;
+    setHeader?(name: string, value: string): unknown;
+    end(body: string): unknown;
+}
+
+export { type ExpressLikeRequest, type ExpressLikeResponse, type HonoLikeContext, type RequireTangleAuthOptions, type TangleAuthContext, type TangleAuthOutcome, type TangleAuthReason, expressTangleAuthMiddleware, extractToken, honoTangleAuthMiddleware, requireTangleAuth };

package/dist/middleware/index.js

@@ -0,0 +1,14 @@
+import {
+  expressTangleAuthMiddleware,
+  extractToken,
+  honoTangleAuthMiddleware,
+  requireTangleAuth
+} from "../chunk-SVQ4PHDZ.js";
+import "../chunk-ATYHZXLL.js";
+export {
+  expressTangleAuthMiddleware,
+  extractToken,
+  honoTangleAuthMiddleware,
+  requireTangleAuth
+};
+//# sourceMappingURL=index.js.map

package/dist/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/registry.d.ts

@@ -1,5 +1,8 @@
-import { C as ConnectorAdapter, R as ResolvedDataSource, a as ConnectorCredentials } from './index-D4D4CEKX.js';
+import { C as ConnectorAdapter, R as ResolvedDataSource, d as ConnectorCredentials } from './tangle-id-CTU4kGId.js';
+import './connect/index.js';
+import './middleware/index.js';
 import './connectors/index.js';
+import './connectors/adapters/index.js';
 import { Server, IncomingMessage, ServerResponse } from 'node:http';
 
 type IntegrationSupportTier = 'catalogOnly' | 'setupReady' | 'gatewayExecutable' | 'firstPartyExecutable' | 'sandboxExecutable';
@@ -648,6 +651,29 @@ interface WorkspaceCapabilityDiscovery {
  *  to the inputs — caller decides whether to back `connections` and
  *  `connectors` with persistent state or static fixtures. */
 declare function discoverWorkspaceCapabilities(input: DiscoverWorkspaceCapabilitiesInput): Promise<WorkspaceCapabilityDiscovery>;
+/**
+ * Filter a {@link WorkspaceCapabilityDiscovery} result by the calling
+ * user's effective id.tangle.tools workspace scopes. Pair with the
+ * `tangleIdentity()` adapter's `list_workspaces` / `switch_workspace`
+ * output to keep what the agent runtime sees aligned with what the
+ * workspace's plan actually permits.
+ *
+ * Semantics:
+ *   - Every workspace scope is matched against every capability's
+ *     `scopes` list. Wildcard scopes (`tangle:*`, `<connectorId>:*`) are
+ *     respected — a workspace with `tangle:*` sees everything; a
+ *     workspace with `gmail:*` sees every gmail capability regardless of
+ *     the upstream OAuth scope.
+ *   - When `workspaceScopes` is empty, returns the discovery as-is (no
+ *     workspace gate). Pass an explicit `denyByDefault: true` to flip
+ *     that to "empty workspace sees nothing" — matches the platform's
+ *     fail-closed posture for production tenants.
+ *
+ * Pure with respect to the inputs — no side effects.
+ */
+declare function filterDiscoveryByWorkspaceScopes(discovery: WorkspaceCapabilityDiscovery, workspaceScopes: string[], opts?: {
+    denyByDefault?: boolean;
+}): WorkspaceCapabilityDiscovery;
 
 type IntegrationErrorCode = 'missing_connection' | 'missing_grant' | 'approval_required' | 'approval_denied' | 'connection_revoked' | 'connection_expired' | 'scope_missing' | 'action_denied' | 'action_not_found' | 'trigger_not_found' | 'provider_rate_limited' | 'provider_auth_failed' | 'provider_unavailable' | 'provider_error' | 'capability_expired' | 'capability_invalid' | 'manifest_invalid' | 'passthrough_disabled' | 'input_invalid' | 'unknown';
 interface IntegrationUserAction {
@@ -2136,4 +2162,4 @@ declare function createHttpIntegrationProvider(options: HttpIntegrationProviderO
 declare function signCapability(capability: IntegrationCapability, secret: string): string;
 declare function verifyCapabilityToken(token: string, secret: string): IntegrationCapability;
 
-export { type HealthcheckSpec as $, type TangleCatalogHttpAuthResolverRequest as A, type TangleCatalogInstalledPackageExecutorOptions as B, type TangleCatalogRuntimeHandlerOptions as C, type ComposeIntegrationRegistryOptions, type TangleCatalogRuntimeHttpRequest as D, type TangleCatalogRuntimeHttpResponse as E, type TangleCatalogRuntimeInvocation as F, type TangleCatalogRuntimeModuleAction as G, type TangleCatalogRuntimePackageCoverageOptions as H, type IntegrationCatalogView as I, type IntegrationCatalogSource, type IntegrationRegistry, type IntegrationRegistryConflict, type IntegrationRegistryEntry, type IntegrationRegistrySourceRef, type IntegrationRegistrySummary, type IntegrationSupportTier, type TangleCatalogRuntimePackageCoverageRow as J, auditTangleCatalogRuntimePackages as K, createTangleCatalogCredentialAuthResolver as L, type McpToolDefinition as M, createTangleCatalogHttpAuthResolver as N, createTangleCatalogInstalledPackageExecutor as O, createTangleCatalogRuntimeHandler as P, signTangleCatalogRuntimeRequest as Q, tangleCatalogAuthValue as R, verifyTangleCatalogRuntimeSignature as S, TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER as T, type ApiKeyAuthSpec as U, type ConsoleStep as V, type CredentialFieldSpec as W, type CredentialValidationInput as X, type CredentialValidationResult as Y, type CustomAuthSpec as Z, type HealthcheckPlan as _, type IntegrationToolDefinition as a, type GatewayCatalogProviderOptions as a$, type HmacAuthSpec as a0, INTEGRATION_FAMILIES as a1, type IntegrationAuthMode as a2, type IntegrationAuthSpec as a3, type IntegrationFamilyId as a4, type IntegrationFamilySpec as a5, type IntegrationLifecycleSpec as a6, type IntegrationPlannerHints as a7, type IntegrationSetupSpec as a8, type IntegrationSpec as a9, validateIntegrationSpec as aA, ACTIVEPIECES_OVERRIDES as aB, ACTIVEPIECES_PUBLIC_CATALOG_URL as aC, ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER as aD, type ActivepiecesCatalogAuthField as aE, type ActivepiecesCatalogEntry as aF, type ActivepiecesExecutorInvocation as aG, type ActivepiecesExecutorProviderOptions as aH, type ActivepiecesHttpExecutorOptions as aI, type ActivepiecesPieceOverride as aJ, type ActivepiecesRuntimeRequest as aK, ApprovalBackedPolicyEngine as aL, type ApprovalBackedPolicyOptions as aM, CANONICAL_INTEGRATION_ACTIONS as aN, type CanonicalIntegrationActionId as aO, type CanonicalLaunchConnectorOptions as aP, type CatalogExecutorInvocation as aQ, type CatalogExecutorProviderOptions as aR, type CompleteAuthRequest as aS, type ConnectionCredentialResolverOptions as aT, type ConnectorAdapterProviderOptions as aU, type ConsentSummary as aV, DEFAULT_INTEGRATION_BRIDGE_ENV as aW, DefaultIntegrationActionGuard as aX, type DiscoverWorkspaceCapabilitiesInput as aY, type GatewayCatalogAction as aZ, type GatewayCatalogEntry as a_, type IntegrationSpecStatus as aa, type IntegrationSpecValidationIssue as ab, type IntegrationSpecValidationResult as ac, type NoneAuthSpec as ad, type NormalizedPermission as ae, type OAuth2AuthSpec as af, type PermissionDescriptor as ag, type PostSetupCheck as ah, type Quirk as ai, type RenderSpecOptions as aj, type RenderedConsoleStep as ak, type ScopeDescriptor as al, assertValidIntegrationSpec as am, buildHealthcheckPlan as an, consoleStepsToText as ao, getIntegrationFamily as ap, getIntegrationSpec as aq, integrationSpecToConnector as ar, listExecutableIntegrationSpecs as as, listIntegrationSpecs as at, renderAgentToolDescription as au, renderConsoleSteps as av, renderRunbookMarkdown as aw, specAuthToConnectorAuth as ax, validateCredentialFormat as ay, validateCredentialSet as az, type IntegrationToolSearchFilters as b, type IntegrationProvider as b$, type GatewayCatalogTrigger as b0, type GraphqlOperationSpec as b1, type HttpIntegrationProviderOptions as b2, type ImportCatalogOptions as b3, InMemoryConnectionStore as b4, InMemoryIntegrationApprovalStore as b5, InMemoryIntegrationAuditStore as b6, InMemoryIntegrationEventStore as b7, InMemoryIntegrationHealthcheckStore as b8, InMemoryIntegrationIdempotencyStore as b9, type IntegrationConnection as bA, type IntegrationConnectionStore as bB, type IntegrationConnector as bC, type IntegrationConnectorAction as bD, type IntegrationConnectorCategory as bE, type IntegrationConnectorTrigger as bF, type IntegrationCoveragePriority as bG, type IntegrationCoverageSpec as bH, type IntegrationDataClass as bI, IntegrationError as bJ, type IntegrationErrorCode as bK, type IntegrationEventStore as bL, type IntegrationGuardContext as bM, type IntegrationHealthcheckCheck as bN, type IntegrationHealthcheckResult as bO, type IntegrationHealthcheckStatus as bP, type IntegrationHealthcheckStore as bQ, IntegrationHub as bR, type IntegrationHubOptions as bS, type IntegrationIdempotencyRecord as bT, type IntegrationIdempotencyStore as bU, type IntegrationInvocationEnvelope as bV, type IntegrationInvocationEnvelopeValidationOptions as bW, type IntegrationPolicyDecision as bX, type IntegrationPolicyEffect as bY, type IntegrationPolicyEngine as bZ, type IntegrationPolicyRule as b_, InMemoryIntegrationSecretStore as ba, InMemoryIntegrationWorkflowStore as bb, type InferIntegrationRequirementsOptions as bc, type InstalledIntegrationWorkflow as bd, type IntegrationActionGuard as be, type IntegrationActionPack as bf, type IntegrationActionRequest as bg, type IntegrationActionResult as bh, type IntegrationActionRisk as bi, type IntegrationActor as bj, type IntegrationApprovalFilter as bk, type IntegrationApprovalRecord as bl, type IntegrationApprovalRequest as bm, type IntegrationApprovalResolution as bn, type IntegrationApprovalStatus as bo, type IntegrationApprovalStore as bp, type IntegrationAuditEvent as bq, type IntegrationAuditEventType as br, type IntegrationAuditFilter as bs, type IntegrationAuditSink as bt, type IntegrationAuditStore as bu, buildDefaultIntegrationRegistry, type IntegrationBridgePayload as bv, type IntegrationBridgeToolBinding as bw, type IntegrationCapability as bx, type IntegrationCatalogFreshnessOptions as by, type IntegrationCatalogFreshnessResult as bz, type IntegrationToolSearchResult as c, type TangleIntegrationsClientOptions as c$, type IntegrationProviderKind as c0, type IntegrationRateLimitDecision as c1, type IntegrationRateLimiter as c2, IntegrationRuntimeError as c3, IntegrationSandboxHost as c4, type IntegrationSandboxHostHub as c5, type IntegrationSandboxHostOptions as c6, type IntegrationSecretStore as c7, type IntegrationTriggerEvent as c8, type IntegrationTriggerSubscription as c9, type StartAuthResult as cA, type StartedTangleCatalogRuntimeNodeServer as cB, StaticIntegrationPolicyEngine as cC, type StaticIntegrationPolicyOptions as cD, type StoredIntegrationEvent as cE, TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID as cF, TANGLE_INTEGRATIONS_CATALOG_SOURCE as cG, type TangleCatalogExecutorInvocation as cH, type TangleCatalogExecutorProviderOptions as cI, type TangleCatalogHttpExecutorInvocation as cJ, type TangleCatalogHttpExecutorOptions as cK, type TangleCatalogRuntimeActionRequest as cL, type TangleCatalogRuntimeNodeServerOptions as cM, type TangleCatalogRuntimePackageManifest as cN, type TangleCatalogRuntimePackageManifestOptions as cO, type TangleCatalogRuntimePiece as cP, type TangleCatalogRuntimeRequest as cQ, type TangleCatalogTriggerInvocation as cR, type TangleIntegrationCatalogEntry as cS, type TangleIntegrationCatalogFreshnessOptions as cT, type TangleIntegrationCatalogFreshnessResult as cU, type TangleIntegrationContract as cV, type TangleIntegrationContractStatus as cW, type TangleIntegrationImplementationKind as cX, type TangleIntegrationInvokeInput as cY, type TangleIntegrationInvokeResult as cZ, TangleIntegrationsClient as c_, type IntegrationUserAction as ca, canonicalConnectorId, type IntegrationWebhookReceiverResult as cb, type IntegrationWorkflowDefinition as cc, IntegrationWorkflowRuntime as cd, type IntegrationWorkflowRuntimeHub as ce, type IntegrationWorkflowRuntimeOptions as cf, type IntegrationWorkflowStore as cg, type InvokeWithCapabilityRequest as ch, type IssueCapabilityRequest as ci, type IssuedIntegrationCapability as cj, type ManifestValidationIssue as ck, type ManifestValidationResult as cl, type McpCatalog as cm, type McpCatalogTool as cn, type MissingRequirementExplanation as co, composeIntegrationRegistry, type NormalizedIntegrationError as cp, type NormalizedIntegrationResult as cq, type OpenApiDocument as cr, type OpenApiOperation as cs, PROVIDER_PASSTHROUGH_ACTION as ct, type PlatformIntegrationPolicyPresetOptions as cu, type ProviderHttpRequestInput as cv, type ProviderPassthroughPolicy as cw, type RenderConsentOptions as cx, type SecretRef as cy, type StartAuthRequest as cz, buildIntegrationCatalogView as d, manifestToConnector as d$, type WorkspaceCapability as d0, type WorkspaceCapabilityDiscovery as d1, type WorkspaceToolSchema as d2, type WorkspaceTrigger as d3, adapterManifestsToConnectors as d4, assertValidIntegrationManifest as d5, auditIntegrationCatalogFreshness as d6, auditTangleIntegrationCatalogFreshness as d7, buildActivepiecesConnectors as d8, buildActivepiecesRuntimeRequest as d9, createIntegrationWorkflowRuntime as dA, createMockIntegrationProvider as dB, createPlatformIntegrationPolicyPreset as dC, createTangleCatalogExecutorProvider as dD, createTangleCatalogHttpExecutor as dE, createTangleCatalogRuntimeNodeRequestListener as dF, createTangleIntegrationsClient as dG, decodeIntegrationBridgePayload as dH, discoverWorkspaceCapabilities as dI, dispatchIntegrationInvocation as dJ, encodeIntegrationBridgePayload as dK, explainMissingRequirements as dL, extractActivepiecesPublicPieceCount as dM, extractExternalCatalogPublicCount as dN, getActivepiecesOverride as dO, healthcheckRequest as dP, importGraphqlConnector as dQ, importMcpConnector as dR, importOpenApiConnector as dS, inferIntegrationManifestFromTools as dT, integrationCoverageChecklistMarkdown as dU, invocationRequestFromEnvelope as dV, listActivepiecesCatalogEntries as dW, listIntegrationCoverageSpecs as dX, listTangleIntegrationCatalogEntries as dY, listTangleIntegrationCatalogRuntimePackages as dZ, listTangleIntegrationContracts as d_, buildApprovalRequest as da, buildCanonicalLaunchConnectors as db, buildIntegrationBridgeEnvironment as dc, buildIntegrationBridgePayload as dd, buildIntegrationCoverageConnectors as de, buildIntegrationInvocationEnvelope as df, buildTangleCatalogRuntimePackageManifest as dg, buildTangleCatalogRuntimeRequest as dh, buildTangleIntegrationCatalogConnectors as di, calendarExercisePlannerManifest as dj, canonicalActionConnectorId as dk, createActivepiecesExecutorProvider as dl, createActivepiecesHttpExecutor as dm, createApprovalBackedPolicyEngine as dn, createAuditingActionGuard as dp, createCatalogExecutorProvider as dq, createConnectionCredentialResolver as dr, createConnectorAdapterCatalogSource as ds, createConnectorAdapterProvider as dt, createCredentialBackedAdapterProvider as du, createDefaultIntegrationActionGuard as dv, createDefaultIntegrationPolicyEngine as dw, createGatewayCatalogProvider as dx, createHttpIntegrationProvider as dy, createIntegrationAuditEvent as dz, buildIntegrationToolCatalog as e, normalizeGatewayCatalog as e0, normalizeIntegrationError as e1, normalizeIntegrationResult as e2, parseIntegrationBridgeEnvironment as e3, receiveIntegrationWebhook as e4, redactApprovalRequest as e5, redactCapability as e6, redactIntegrationBridgePayload as e7, redactInvocationEnvelope as e8, renderApprovalCopy as e9, renderConsentSummary as ea, renderTangleCatalogRuntimePnpmAddCommand as eb, resolveConnectionCredentials as ec, resolveIntegrationApproval as ed, revokeConnection as ee, runIntegrationHealthcheck as ef, runIntegrationHealthchecks as eg, sanitizeAuditConnection as eh, sanitizeConnection as ei, signActivepiecesRuntimeRequest as ej, signCapability as ek, startTangleCatalogRuntimeNodeServer as el, statusForCode as em, storedEventToTriggerEvent as en, validateIntegrationInvocationEnvelope as eo, validateIntegrationManifest as ep, validateProviderPassthroughRequest as eq, verifyActivepiecesRuntimeSignature as er, verifyCapabilityToken as es, InMemoryIntegrationGrantStore as f, type IntegrationCapabilityBinding as g, type IntegrationGrant as h, integrationToolName as i, inferIntegrationSupportTier, type IntegrationGrantStore as j, type IntegrationManifest as k, type IntegrationManifestResolution as l, type IntegrationRequirement as m, type IntegrationRequirementMode as n, type IntegrationRequirementResolution as o, parseIntegrationToolName as p, type IntegrationRequirementStatus as q, IntegrationRuntime as r, searchIntegrationTools as s, summarizeIntegrationRegistry, toMcpTools as t, type IntegrationRuntimeHub as u, type IntegrationRuntimeOptions as v, type IntegrationSandboxBundle as w, createIntegrationRuntime as x, type TangleCatalogAuthResolverOptions as y, type TangleCatalogHttpAuthResolverOptions as z };
+export { type HealthcheckSpec as $, type TangleCatalogHttpAuthResolverRequest as A, type TangleCatalogInstalledPackageExecutorOptions as B, type TangleCatalogRuntimeHandlerOptions as C, type ComposeIntegrationRegistryOptions, type TangleCatalogRuntimeHttpRequest as D, type TangleCatalogRuntimeHttpResponse as E, type TangleCatalogRuntimeInvocation as F, type TangleCatalogRuntimeModuleAction as G, type TangleCatalogRuntimePackageCoverageOptions as H, type IntegrationCatalogView as I, type IntegrationCatalogSource, type IntegrationRegistry, type IntegrationRegistryConflict, type IntegrationRegistryEntry, type IntegrationRegistrySourceRef, type IntegrationRegistrySummary, type IntegrationSupportTier, type TangleCatalogRuntimePackageCoverageRow as J, auditTangleCatalogRuntimePackages as K, createTangleCatalogCredentialAuthResolver as L, type McpToolDefinition as M, createTangleCatalogHttpAuthResolver as N, createTangleCatalogInstalledPackageExecutor as O, createTangleCatalogRuntimeHandler as P, signTangleCatalogRuntimeRequest as Q, tangleCatalogAuthValue as R, verifyTangleCatalogRuntimeSignature as S, TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER as T, type ApiKeyAuthSpec as U, type ConsoleStep as V, type CredentialFieldSpec as W, type CredentialValidationInput as X, type CredentialValidationResult as Y, type CustomAuthSpec as Z, type HealthcheckPlan as _, type IntegrationToolDefinition as a, type GatewayCatalogProviderOptions as a$, type HmacAuthSpec as a0, INTEGRATION_FAMILIES as a1, type IntegrationAuthMode as a2, type IntegrationAuthSpec as a3, type IntegrationFamilyId as a4, type IntegrationFamilySpec as a5, type IntegrationLifecycleSpec as a6, type IntegrationPlannerHints as a7, type IntegrationSetupSpec as a8, type IntegrationSpec as a9, validateIntegrationSpec as aA, ACTIVEPIECES_OVERRIDES as aB, ACTIVEPIECES_PUBLIC_CATALOG_URL as aC, ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER as aD, type ActivepiecesCatalogAuthField as aE, type ActivepiecesCatalogEntry as aF, type ActivepiecesExecutorInvocation as aG, type ActivepiecesExecutorProviderOptions as aH, type ActivepiecesHttpExecutorOptions as aI, type ActivepiecesPieceOverride as aJ, type ActivepiecesRuntimeRequest as aK, ApprovalBackedPolicyEngine as aL, type ApprovalBackedPolicyOptions as aM, CANONICAL_INTEGRATION_ACTIONS as aN, type CanonicalIntegrationActionId as aO, type CanonicalLaunchConnectorOptions as aP, type CatalogExecutorInvocation as aQ, type CatalogExecutorProviderOptions as aR, type CompleteAuthRequest as aS, type ConnectionCredentialResolverOptions as aT, type ConnectorAdapterProviderOptions as aU, type ConsentSummary as aV, DEFAULT_INTEGRATION_BRIDGE_ENV as aW, DefaultIntegrationActionGuard as aX, type DiscoverWorkspaceCapabilitiesInput as aY, type GatewayCatalogAction as aZ, type GatewayCatalogEntry as a_, type IntegrationSpecStatus as aa, type IntegrationSpecValidationIssue as ab, type IntegrationSpecValidationResult as ac, type NoneAuthSpec as ad, type NormalizedPermission as ae, type OAuth2AuthSpec as af, type PermissionDescriptor as ag, type PostSetupCheck as ah, type Quirk as ai, type RenderSpecOptions as aj, type RenderedConsoleStep as ak, type ScopeDescriptor as al, assertValidIntegrationSpec as am, buildHealthcheckPlan as an, consoleStepsToText as ao, getIntegrationFamily as ap, getIntegrationSpec as aq, integrationSpecToConnector as ar, listExecutableIntegrationSpecs as as, listIntegrationSpecs as at, renderAgentToolDescription as au, renderConsoleSteps as av, renderRunbookMarkdown as aw, specAuthToConnectorAuth as ax, validateCredentialFormat as ay, validateCredentialSet as az, type IntegrationToolSearchFilters as b, type IntegrationProvider as b$, type GatewayCatalogTrigger as b0, type GraphqlOperationSpec as b1, type HttpIntegrationProviderOptions as b2, type ImportCatalogOptions as b3, InMemoryConnectionStore as b4, InMemoryIntegrationApprovalStore as b5, InMemoryIntegrationAuditStore as b6, InMemoryIntegrationEventStore as b7, InMemoryIntegrationHealthcheckStore as b8, InMemoryIntegrationIdempotencyStore as b9, type IntegrationConnection as bA, type IntegrationConnectionStore as bB, type IntegrationConnector as bC, type IntegrationConnectorAction as bD, type IntegrationConnectorCategory as bE, type IntegrationConnectorTrigger as bF, type IntegrationCoveragePriority as bG, type IntegrationCoverageSpec as bH, type IntegrationDataClass as bI, IntegrationError as bJ, type IntegrationErrorCode as bK, type IntegrationEventStore as bL, type IntegrationGuardContext as bM, type IntegrationHealthcheckCheck as bN, type IntegrationHealthcheckResult as bO, type IntegrationHealthcheckStatus as bP, type IntegrationHealthcheckStore as bQ, IntegrationHub as bR, type IntegrationHubOptions as bS, type IntegrationIdempotencyRecord as bT, type IntegrationIdempotencyStore as bU, type IntegrationInvocationEnvelope as bV, type IntegrationInvocationEnvelopeValidationOptions as bW, type IntegrationPolicyDecision as bX, type IntegrationPolicyEffect as bY, type IntegrationPolicyEngine as bZ, type IntegrationPolicyRule as b_, InMemoryIntegrationSecretStore as ba, InMemoryIntegrationWorkflowStore as bb, type InferIntegrationRequirementsOptions as bc, type InstalledIntegrationWorkflow as bd, type IntegrationActionGuard as be, type IntegrationActionPack as bf, type IntegrationActionRequest as bg, type IntegrationActionResult as bh, type IntegrationActionRisk as bi, type IntegrationActor as bj, type IntegrationApprovalFilter as bk, type IntegrationApprovalRecord as bl, type IntegrationApprovalRequest as bm, type IntegrationApprovalResolution as bn, type IntegrationApprovalStatus as bo, type IntegrationApprovalStore as bp, type IntegrationAuditEvent as bq, type IntegrationAuditEventType as br, type IntegrationAuditFilter as bs, type IntegrationAuditSink as bt, type IntegrationAuditStore as bu, buildDefaultIntegrationRegistry, type IntegrationBridgePayload as bv, type IntegrationBridgeToolBinding as bw, type IntegrationCapability as bx, type IntegrationCatalogFreshnessOptions as by, type IntegrationCatalogFreshnessResult as bz, type IntegrationToolSearchResult as c, type TangleIntegrationsClientOptions as c$, type IntegrationProviderKind as c0, type IntegrationRateLimitDecision as c1, type IntegrationRateLimiter as c2, IntegrationRuntimeError as c3, IntegrationSandboxHost as c4, type IntegrationSandboxHostHub as c5, type IntegrationSandboxHostOptions as c6, type IntegrationSecretStore as c7, type IntegrationTriggerEvent as c8, type IntegrationTriggerSubscription as c9, type StartAuthResult as cA, type StartedTangleCatalogRuntimeNodeServer as cB, StaticIntegrationPolicyEngine as cC, type StaticIntegrationPolicyOptions as cD, type StoredIntegrationEvent as cE, TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID as cF, TANGLE_INTEGRATIONS_CATALOG_SOURCE as cG, type TangleCatalogExecutorInvocation as cH, type TangleCatalogExecutorProviderOptions as cI, type TangleCatalogHttpExecutorInvocation as cJ, type TangleCatalogHttpExecutorOptions as cK, type TangleCatalogRuntimeActionRequest as cL, type TangleCatalogRuntimeNodeServerOptions as cM, type TangleCatalogRuntimePackageManifest as cN, type TangleCatalogRuntimePackageManifestOptions as cO, type TangleCatalogRuntimePiece as cP, type TangleCatalogRuntimeRequest as cQ, type TangleCatalogTriggerInvocation as cR, type TangleIntegrationCatalogEntry as cS, type TangleIntegrationCatalogFreshnessOptions as cT, type TangleIntegrationCatalogFreshnessResult as cU, type TangleIntegrationContract as cV, type TangleIntegrationContractStatus as cW, type TangleIntegrationImplementationKind as cX, type TangleIntegrationInvokeInput as cY, type TangleIntegrationInvokeResult as cZ, TangleIntegrationsClient as c_, type IntegrationUserAction as ca, canonicalConnectorId, type IntegrationWebhookReceiverResult as cb, type IntegrationWorkflowDefinition as cc, IntegrationWorkflowRuntime as cd, type IntegrationWorkflowRuntimeHub as ce, type IntegrationWorkflowRuntimeOptions as cf, type IntegrationWorkflowStore as cg, type InvokeWithCapabilityRequest as ch, type IssueCapabilityRequest as ci, type IssuedIntegrationCapability as cj, type ManifestValidationIssue as ck, type ManifestValidationResult as cl, type McpCatalog as cm, type McpCatalogTool as cn, type MissingRequirementExplanation as co, composeIntegrationRegistry, type NormalizedIntegrationError as cp, type NormalizedIntegrationResult as cq, type OpenApiDocument as cr, type OpenApiOperation as cs, PROVIDER_PASSTHROUGH_ACTION as ct, type PlatformIntegrationPolicyPresetOptions as cu, type ProviderHttpRequestInput as cv, type ProviderPassthroughPolicy as cw, type RenderConsentOptions as cx, type SecretRef as cy, type StartAuthRequest as cz, buildIntegrationCatalogView as d, listTangleIntegrationContracts as d$, type WorkspaceCapability as d0, type WorkspaceCapabilityDiscovery as d1, type WorkspaceToolSchema as d2, type WorkspaceTrigger as d3, adapterManifestsToConnectors as d4, assertValidIntegrationManifest as d5, auditIntegrationCatalogFreshness as d6, auditTangleIntegrationCatalogFreshness as d7, buildActivepiecesConnectors as d8, buildActivepiecesRuntimeRequest as d9, createIntegrationWorkflowRuntime as dA, createMockIntegrationProvider as dB, createPlatformIntegrationPolicyPreset as dC, createTangleCatalogExecutorProvider as dD, createTangleCatalogHttpExecutor as dE, createTangleCatalogRuntimeNodeRequestListener as dF, createTangleIntegrationsClient as dG, decodeIntegrationBridgePayload as dH, discoverWorkspaceCapabilities as dI, dispatchIntegrationInvocation as dJ, encodeIntegrationBridgePayload as dK, explainMissingRequirements as dL, extractActivepiecesPublicPieceCount as dM, extractExternalCatalogPublicCount as dN, filterDiscoveryByWorkspaceScopes as dO, getActivepiecesOverride as dP, healthcheckRequest as dQ, importGraphqlConnector as dR, importMcpConnector as dS, importOpenApiConnector as dT, inferIntegrationManifestFromTools as dU, integrationCoverageChecklistMarkdown as dV, invocationRequestFromEnvelope as dW, listActivepiecesCatalogEntries as dX, listIntegrationCoverageSpecs as dY, listTangleIntegrationCatalogEntries as dZ, listTangleIntegrationCatalogRuntimePackages as d_, buildApprovalRequest as da, buildCanonicalLaunchConnectors as db, buildIntegrationBridgeEnvironment as dc, buildIntegrationBridgePayload as dd, buildIntegrationCoverageConnectors as de, buildIntegrationInvocationEnvelope as df, buildTangleCatalogRuntimePackageManifest as dg, buildTangleCatalogRuntimeRequest as dh, buildTangleIntegrationCatalogConnectors as di, calendarExercisePlannerManifest as dj, canonicalActionConnectorId as dk, createActivepiecesExecutorProvider as dl, createActivepiecesHttpExecutor as dm, createApprovalBackedPolicyEngine as dn, createAuditingActionGuard as dp, createCatalogExecutorProvider as dq, createConnectionCredentialResolver as dr, createConnectorAdapterCatalogSource as ds, createConnectorAdapterProvider as dt, createCredentialBackedAdapterProvider as du, createDefaultIntegrationActionGuard as dv, createDefaultIntegrationPolicyEngine as dw, createGatewayCatalogProvider as dx, createHttpIntegrationProvider as dy, createIntegrationAuditEvent as dz, buildIntegrationToolCatalog as e, manifestToConnector as e0, normalizeGatewayCatalog as e1, normalizeIntegrationError as e2, normalizeIntegrationResult as e3, parseIntegrationBridgeEnvironment as e4, receiveIntegrationWebhook as e5, redactApprovalRequest as e6, redactCapability as e7, redactIntegrationBridgePayload as e8, redactInvocationEnvelope as e9, renderApprovalCopy as ea, renderConsentSummary as eb, renderTangleCatalogRuntimePnpmAddCommand as ec, resolveConnectionCredentials as ed, resolveIntegrationApproval as ee, revokeConnection as ef, runIntegrationHealthcheck as eg, runIntegrationHealthchecks as eh, sanitizeAuditConnection as ei, sanitizeConnection as ej, signActivepiecesRuntimeRequest as ek, signCapability as el, startTangleCatalogRuntimeNodeServer as em, statusForCode as en, storedEventToTriggerEvent as eo, validateIntegrationInvocationEnvelope as ep, validateIntegrationManifest as eq, validateProviderPassthroughRequest as er, verifyActivepiecesRuntimeSignature as es, verifyCapabilityToken as et, InMemoryIntegrationGrantStore as f, type IntegrationCapabilityBinding as g, type IntegrationGrant as h, integrationToolName as i, inferIntegrationSupportTier, type IntegrationGrantStore as j, type IntegrationManifest as k, type IntegrationManifestResolution as l, type IntegrationRequirement as m, type IntegrationRequirementMode as n, type IntegrationRequirementResolution as o, parseIntegrationToolName as p, type IntegrationRequirementStatus as q, IntegrationRuntime as r, searchIntegrationTools as s, summarizeIntegrationRegistry, toMcpTools as t, type IntegrationRuntimeHub as u, type IntegrationRuntimeOptions as v, type IntegrationSandboxBundle as w, createIntegrationRuntime as x, type TangleCatalogAuthResolverOptions as y, type TangleCatalogHttpAuthResolverOptions as z };

package/dist/registry.js

@@ -4,11 +4,14 @@ import {
   composeIntegrationRegistry,
   inferIntegrationSupportTier,
   summarizeIntegrationRegistry
-} from "./chunk-ALCIWTIR.js";
+} from "./chunk-ICSBYCE2.js";
+import "./chunk-SVQ4PHDZ.js";
 import "./chunk-4JQ754PA.js";
 import "./chunk-376UBTNB.js";
-import "./chunk-GA4VTE3U.js";
+import "./chunk-JU25UDN2.js";
 import "./chunk-2TW2QKGZ.js";
+import "./chunk-P24T3MLM.js";
+import "./chunk-ATYHZXLL.js";
 export {
   buildDefaultIntegrationRegistry,
   canonicalConnectorId,

package/dist/runtime.d.ts

@@ -1,4 +1,7 @@
 export { f as InMemoryIntegrationGrantStore, g as IntegrationCapabilityBinding, h as IntegrationGrant, j as IntegrationGrantStore, k as IntegrationManifest, l as IntegrationManifestResolution, m as IntegrationRequirement, n as IntegrationRequirementMode, o as IntegrationRequirementResolution, q as IntegrationRequirementStatus, r as IntegrationRuntime, u as IntegrationRuntimeHub, v as IntegrationRuntimeOptions, w as IntegrationSandboxBundle, x as createIntegrationRuntime } from './registry.js';
-import './index-D4D4CEKX.js';
+import './tangle-id-CTU4kGId.js';
+import './connect/index.js';
+import './middleware/index.js';
 import './connectors/index.js';
+import './connectors/adapters/index.js';
 import 'node:http';

package/dist/runtime.js

@@ -2,11 +2,14 @@ import {
   InMemoryIntegrationGrantStore,
   IntegrationRuntime,
   createIntegrationRuntime
-} from "./chunk-ALCIWTIR.js";
+} from "./chunk-ICSBYCE2.js";
+import "./chunk-SVQ4PHDZ.js";
 import "./chunk-4JQ754PA.js";
 import "./chunk-376UBTNB.js";
-import "./chunk-GA4VTE3U.js";
+import "./chunk-JU25UDN2.js";
 import "./chunk-2TW2QKGZ.js";
+import "./chunk-P24T3MLM.js";
+import "./chunk-ATYHZXLL.js";
 export {
   InMemoryIntegrationGrantStore,
   IntegrationRuntime,

package/dist/specs.d.ts

@@ -1,4 +1,7 @@
 export { U as ApiKeyAuthSpec, V as ConsoleStep, W as CredentialFieldSpec, X as CredentialValidationInput, Y as CredentialValidationResult, Z as CustomAuthSpec, _ as HealthcheckPlan, $ as HealthcheckSpec, a0 as HmacAuthSpec, a1 as INTEGRATION_FAMILIES, a2 as IntegrationAuthMode, a3 as IntegrationAuthSpec, a4 as IntegrationFamilyId, a5 as IntegrationFamilySpec, a6 as IntegrationLifecycleSpec, a7 as IntegrationPlannerHints, a8 as IntegrationSetupSpec, a9 as IntegrationSpec, aa as IntegrationSpecStatus, ab as IntegrationSpecValidationIssue, ac as IntegrationSpecValidationResult, ad as NoneAuthSpec, ae as NormalizedPermission, af as OAuth2AuthSpec, ag as PermissionDescriptor, ah as PostSetupCheck, ai as Quirk, aj as RenderSpecOptions, ak as RenderedConsoleStep, al as ScopeDescriptor, am as assertValidIntegrationSpec, an as buildHealthcheckPlan, ao as consoleStepsToText, ap as getIntegrationFamily, aq as getIntegrationSpec, ar as integrationSpecToConnector, as as listExecutableIntegrationSpecs, at as listIntegrationSpecs, au as renderAgentToolDescription, av as renderConsoleSteps, aw as renderRunbookMarkdown, ax as specAuthToConnectorAuth, ay as validateCredentialFormat, az as validateCredentialSet, aA as validateIntegrationSpec } from './registry.js';
-import './index-D4D4CEKX.js';
+import './tangle-id-CTU4kGId.js';
+import './connect/index.js';
+import './middleware/index.js';
 import './connectors/index.js';
+import './connectors/adapters/index.js';
 import 'node:http';

package/dist/tangle-catalog-runtime.d.ts

@@ -1,4 +1,7 @@
 export { T as TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER, y as TangleCatalogAuthResolverOptions, z as TangleCatalogHttpAuthResolverOptions, A as TangleCatalogHttpAuthResolverRequest, B as TangleCatalogInstalledPackageExecutorOptions, C as TangleCatalogRuntimeHandlerOptions, D as TangleCatalogRuntimeHttpRequest, E as TangleCatalogRuntimeHttpResponse, F as TangleCatalogRuntimeInvocation, G as TangleCatalogRuntimeModuleAction, H as TangleCatalogRuntimePackageCoverageOptions, J as TangleCatalogRuntimePackageCoverageRow, K as auditTangleCatalogRuntimePackages, L as createTangleCatalogCredentialAuthResolver, N as createTangleCatalogHttpAuthResolver, O as createTangleCatalogInstalledPackageExecutor, P as createTangleCatalogRuntimeHandler, Q as signTangleCatalogRuntimeRequest, R as tangleCatalogAuthValue, S as verifyTangleCatalogRuntimeSignature } from './registry.js';
-import './index-D4D4CEKX.js';
+import './tangle-id-CTU4kGId.js';
+import './connect/index.js';
+import './middleware/index.js';
 import './connectors/index.js';
+import './connectors/adapters/index.js';
 import 'node:http';

package/dist/tangle-catalog-runtime.js

@@ -8,11 +8,14 @@ import {
   signTangleCatalogRuntimeRequest,
   tangleCatalogAuthValue,
   verifyTangleCatalogRuntimeSignature
-} from "./chunk-ALCIWTIR.js";
+} from "./chunk-ICSBYCE2.js";
+import "./chunk-SVQ4PHDZ.js";
 import "./chunk-4JQ754PA.js";
 import "./chunk-376UBTNB.js";
-import "./chunk-GA4VTE3U.js";
+import "./chunk-JU25UDN2.js";
 import "./chunk-2TW2QKGZ.js";
+import "./chunk-P24T3MLM.js";
+import "./chunk-ATYHZXLL.js";
 export {
   TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER,
   auditTangleCatalogRuntimePackages,