@tangle-network/agent-integrations 0.26.0 → 0.28.0

package/dist/connectors/index.js

@@ -1,12 +1,9 @@
 import "../chunk-376UBTNB.js";
 import {
-  CredentialsExpired,
   InMemoryOAuthFlowStore,
-  ResourceContention,
   _resetPendingFlowsForTests,
   airtableConnector,
   asanaConnector,
-  assertValidConnectorManifest,
   consumePendingFlow,
   declarativeRestConnector,
   docuseal,
@@ -28,9 +25,8 @@ import {
   stripePackConnector,
   stripeWebhookReceiverConnector,
   twilioSmsConnector,
-  validateConnectorManifest,
   webhookConnector
-} from "../chunk-GA4VTE3U.js";
+} from "../chunk-JU25UDN2.js";
 import {
   DEFAULT_SIGNATURE_TOLERANCE_SECONDS,
   firstHeader,
@@ -40,16 +36,33 @@ import {
   verifyStripeSignature,
   verifyTwilioSignature
 } from "../chunk-2TW2QKGZ.js";
+import {
+  CredentialsExpired,
+  DEFAULT_TANGLE_PLATFORM_URL,
+  ResourceContention,
+  TANGLE_API_KEY_PREFIX,
+  TANGLE_SERVICE_TOKEN_PREFIX,
+  TangleIdentityUnreachableError,
+  assertValidConnectorManifest,
+  createTangleIdentityClient,
+  tangleIdentity,
+  validateConnectorManifest
+} from "../chunk-ATYHZXLL.js";
 export {
   CredentialsExpired,
   DEFAULT_SIGNATURE_TOLERANCE_SECONDS,
+  DEFAULT_TANGLE_PLATFORM_URL,
   InMemoryOAuthFlowStore,
   ResourceContention,
+  TANGLE_API_KEY_PREFIX,
+  TANGLE_SERVICE_TOKEN_PREFIX,
+  TangleIdentityUnreachableError,
   _resetPendingFlowsForTests,
   airtableConnector,
   asanaConnector,
   assertValidConnectorManifest,
   consumePendingFlow,
+  createTangleIdentityClient,
   declarativeRestConnector,
   docuseal,
   exchangeAuthorizationCode,
@@ -71,6 +84,7 @@ export {
   startOAuthFlow,
   stripePackConnector,
   stripeWebhookReceiverConnector,
+  tangleIdentity,
   twilioSmsConnector,
   validateConnectorManifest,
   verifyHmacSignature,

package/dist/errors-Bg3_rxnQ.d.ts

@@ -0,0 +1,32 @@
+type IntegrationErrorCode = 'missing_connection' | 'missing_grant' | 'approval_required' | 'approval_denied' | 'connection_revoked' | 'connection_expired' | 'scope_missing' | 'action_denied' | 'action_not_found' | 'trigger_not_found' | 'provider_rate_limited' | 'provider_auth_failed' | 'provider_unavailable' | 'provider_error' | 'capability_expired' | 'capability_invalid' | 'manifest_invalid' | 'passthrough_disabled' | 'input_invalid' | 'unknown';
+interface IntegrationUserAction {
+    type: 'connect' | 'reconnect' | 'approve' | 'retry' | 'contact_support' | 'change_request';
+    label: string;
+    connectorId?: string;
+    approvalId?: string;
+}
+declare class IntegrationRuntimeError extends Error {
+    readonly code: IntegrationErrorCode;
+    readonly status: number;
+    readonly userAction?: IntegrationUserAction;
+    readonly metadata?: Record<string, unknown>;
+    constructor(input: {
+        code: IntegrationErrorCode;
+        message: string;
+        status?: number;
+        userAction?: IntegrationUserAction;
+        metadata?: Record<string, unknown>;
+    });
+}
+interface NormalizedIntegrationError {
+    ok: false;
+    code: IntegrationErrorCode;
+    message: string;
+    status: number;
+    userAction?: IntegrationUserAction;
+    metadata?: Record<string, unknown>;
+}
+declare function normalizeIntegrationError(error: unknown): NormalizedIntegrationError;
+declare function statusForCode(code: IntegrationErrorCode): number;
+
+export { IntegrationRuntimeError as I, type NormalizedIntegrationError as N, type IntegrationUserAction as a, type IntegrationErrorCode as b, normalizeIntegrationError as n, statusForCode as s };

package/dist/index.d.ts

@@ -1,4 +1,8 @@
-export { aB as ACTIVEPIECES_OVERRIDES, aC as ACTIVEPIECES_PUBLIC_CATALOG_URL, aD as ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER, aE as ActivepiecesCatalogAuthField, aF as ActivepiecesCatalogEntry, aG as ActivepiecesExecutorInvocation, aH as ActivepiecesExecutorProviderOptions, aI as ActivepiecesHttpExecutorOptions, aJ as ActivepiecesPieceOverride, aK as ActivepiecesRuntimeRequest, U as ApiKeyAuthSpec, aL as ApprovalBackedPolicyEngine, aM as ApprovalBackedPolicyOptions, aN as CANONICAL_INTEGRATION_ACTIONS, aO as CanonicalIntegrationActionId, aP as CanonicalLaunchConnectorOptions, aQ as CatalogExecutorInvocation, aR as CatalogExecutorProviderOptions, aS as CompleteAuthRequest, ComposeIntegrationRegistryOptions, aT as ConnectionCredentialResolverOptions, aU as ConnectorAdapterProviderOptions, aV as ConsentSummary, V as ConsoleStep, W as CredentialFieldSpec, X as CredentialValidationInput, Y as CredentialValidationResult, Z as CustomAuthSpec, aW as DEFAULT_INTEGRATION_BRIDGE_ENV, aX as DefaultIntegrationActionGuard, aY as DiscoverWorkspaceCapabilitiesInput, aZ as GatewayCatalogAction, a_ as GatewayCatalogEntry, a$ as GatewayCatalogProviderOptions, b0 as GatewayCatalogTrigger, b1 as GraphqlOperationSpec, _ as HealthcheckPlan, $ as HealthcheckSpec, a0 as HmacAuthSpec, b2 as HttpIntegrationProviderOptions, a1 as INTEGRATION_FAMILIES, b3 as ImportCatalogOptions, b4 as InMemoryConnectionStore, b5 as InMemoryIntegrationApprovalStore, b6 as InMemoryIntegrationAuditStore, b7 as InMemoryIntegrationEventStore, f as InMemoryIntegrationGrantStore, b8 as InMemoryIntegrationHealthcheckStore, b9 as InMemoryIntegrationIdempotencyStore, ba as InMemoryIntegrationSecretStore, bb as InMemoryIntegrationWorkflowStore, bc as InferIntegrationRequirementsOptions, bd as InstalledIntegrationWorkflow, be as IntegrationActionGuard, bf as IntegrationActionPack, bg as IntegrationActionRequest, bh as IntegrationActionResult, bi as IntegrationActionRisk, bj as IntegrationActor, bk as IntegrationApprovalFilter, bl as IntegrationApprovalRecord, bm as IntegrationApprovalRequest, bn as IntegrationApprovalResolution, bo as IntegrationApprovalStatus, bp as IntegrationApprovalStore, bq as IntegrationAuditEvent, br as IntegrationAuditEventType, bs as IntegrationAuditFilter, bt as IntegrationAuditSink, bu as IntegrationAuditStore, a2 as IntegrationAuthMode, a3 as IntegrationAuthSpec, bv as IntegrationBridgePayload, bw as IntegrationBridgeToolBinding, bx as IntegrationCapability, g as IntegrationCapabilityBinding, by as IntegrationCatalogFreshnessOptions, bz as IntegrationCatalogFreshnessResult, IntegrationCatalogSource, I as IntegrationCatalogView, bA as IntegrationConnection, bB as IntegrationConnectionStore, bC as IntegrationConnector, bD as IntegrationConnectorAction, bE as IntegrationConnectorCategory, bF as IntegrationConnectorTrigger, bG as IntegrationCoveragePriority, bH as IntegrationCoverageSpec, bI as IntegrationDataClass, bJ as IntegrationError, bK as IntegrationErrorCode, bL as IntegrationEventStore, a4 as IntegrationFamilyId, a5 as IntegrationFamilySpec, h as IntegrationGrant, j as IntegrationGrantStore, bM as IntegrationGuardContext, bN as IntegrationHealthcheckCheck, bO as IntegrationHealthcheckResult, bP as IntegrationHealthcheckStatus, bQ as IntegrationHealthcheckStore, bR as IntegrationHub, bS as IntegrationHubOptions, bT as IntegrationIdempotencyRecord, bU as IntegrationIdempotencyStore, bV as IntegrationInvocationEnvelope, bW as IntegrationInvocationEnvelopeValidationOptions, a6 as IntegrationLifecycleSpec, k as IntegrationManifest, l as IntegrationManifestResolution, a7 as IntegrationPlannerHints, bX as IntegrationPolicyDecision, bY as IntegrationPolicyEffect, bZ as IntegrationPolicyEngine, b_ as IntegrationPolicyRule, b$ as IntegrationProvider, c0 as IntegrationProviderKind, c1 as IntegrationRateLimitDecision, c2 as IntegrationRateLimiter, IntegrationRegistry, IntegrationRegistryConflict, IntegrationRegistryEntry, IntegrationRegistrySourceRef, IntegrationRegistrySummary, m as IntegrationRequirement, n as IntegrationRequirementMode, o as IntegrationRequirementResolution, q as IntegrationRequirementStatus, r as IntegrationRuntime, c3 as IntegrationRuntimeError, u as IntegrationRuntimeHub, v as IntegrationRuntimeOptions, w as IntegrationSandboxBundle, c4 as IntegrationSandboxHost, c5 as IntegrationSandboxHostHub, c6 as IntegrationSandboxHostOptions, c7 as IntegrationSecretStore, a8 as IntegrationSetupSpec, a9 as IntegrationSpec, aa as IntegrationSpecStatus, ab as IntegrationSpecValidationIssue, ac as IntegrationSpecValidationResult, IntegrationSupportTier, a as IntegrationToolDefinition, b as IntegrationToolSearchFilters, c as IntegrationToolSearchResult, c8 as IntegrationTriggerEvent, c9 as IntegrationTriggerSubscription, ca as IntegrationUserAction, cb as IntegrationWebhookReceiverResult, cc as IntegrationWorkflowDefinition, cd as IntegrationWorkflowRuntime, ce as IntegrationWorkflowRuntimeHub, cf as IntegrationWorkflowRuntimeOptions, cg as IntegrationWorkflowStore, ch as InvokeWithCapabilityRequest, ci as IssueCapabilityRequest, cj as IssuedIntegrationCapability, ck as ManifestValidationIssue, cl as ManifestValidationResult, cm as McpCatalog, cn as McpCatalogTool, M as McpToolDefinition, co as MissingRequirementExplanation, ad as NoneAuthSpec, cp as NormalizedIntegrationError, cq as NormalizedIntegrationResult, ae as NormalizedPermission, af as OAuth2AuthSpec, cr as OpenApiDocument, cs as OpenApiOperation, ct as PROVIDER_PASSTHROUGH_ACTION, ag as PermissionDescriptor, cu as PlatformIntegrationPolicyPresetOptions, ah as PostSetupCheck, cv as ProviderHttpRequestInput, cw as ProviderPassthroughPolicy, ai as Quirk, cx as RenderConsentOptions, aj as RenderSpecOptions, ak as RenderedConsoleStep, al as ScopeDescriptor, cy as SecretRef, cz as StartAuthRequest, cA as StartAuthResult, cB as StartedTangleCatalogRuntimeNodeServer, cC as StaticIntegrationPolicyEngine, cD as StaticIntegrationPolicyOptions, cE as StoredIntegrationEvent, T as TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER, cF as TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID, cG as TANGLE_INTEGRATIONS_CATALOG_SOURCE, y as TangleCatalogAuthResolverOptions, cH as TangleCatalogExecutorInvocation, cI as TangleCatalogExecutorProviderOptions, z as TangleCatalogHttpAuthResolverOptions, A as TangleCatalogHttpAuthResolverRequest, cJ as TangleCatalogHttpExecutorInvocation, cK as TangleCatalogHttpExecutorOptions, B as TangleCatalogInstalledPackageExecutorOptions, cL as TangleCatalogRuntimeActionRequest, C as TangleCatalogRuntimeHandlerOptions, D as TangleCatalogRuntimeHttpRequest, E as TangleCatalogRuntimeHttpResponse, F as TangleCatalogRuntimeInvocation, G as TangleCatalogRuntimeModuleAction, cM as TangleCatalogRuntimeNodeServerOptions, H as TangleCatalogRuntimePackageCoverageOptions, J as TangleCatalogRuntimePackageCoverageRow, cN as TangleCatalogRuntimePackageManifest, cO as TangleCatalogRuntimePackageManifestOptions, cP as TangleCatalogRuntimePiece, cQ as TangleCatalogRuntimeRequest, cR as TangleCatalogTriggerInvocation, cS as TangleIntegrationCatalogEntry, cT as TangleIntegrationCatalogFreshnessOptions, cU as TangleIntegrationCatalogFreshnessResult, cV as TangleIntegrationContract, cW as TangleIntegrationContractStatus, cX as TangleIntegrationImplementationKind, cY as TangleIntegrationInvokeInput, cZ as TangleIntegrationInvokeResult, c_ as TangleIntegrationsClient, c$ as TangleIntegrationsClientOptions, d0 as WorkspaceCapability, d1 as WorkspaceCapabilityDiscovery, d2 as WorkspaceToolSchema, d3 as WorkspaceTrigger, d4 as adapterManifestsToConnectors, d5 as assertValidIntegrationManifest, am as assertValidIntegrationSpec, d6 as auditIntegrationCatalogFreshness, K as auditTangleCatalogRuntimePackages, d7 as auditTangleIntegrationCatalogFreshness, d8 as buildActivepiecesConnectors, d9 as buildActivepiecesRuntimeRequest, da as buildApprovalRequest, db as buildCanonicalLaunchConnectors, buildDefaultIntegrationRegistry, an as buildHealthcheckPlan, dc as buildIntegrationBridgeEnvironment, dd as buildIntegrationBridgePayload, d as buildIntegrationCatalogView, de as buildIntegrationCoverageConnectors, df as buildIntegrationInvocationEnvelope, e as buildIntegrationToolCatalog, dg as buildTangleCatalogRuntimePackageManifest, dh as buildTangleCatalogRuntimeRequest, di as buildTangleIntegrationCatalogConnectors, dj as calendarExercisePlannerManifest, dk as canonicalActionConnectorId, canonicalConnectorId, composeIntegrationRegistry, ao as consoleStepsToText, dl as createActivepiecesExecutorProvider, dm as createActivepiecesHttpExecutor, dn as createApprovalBackedPolicyEngine, dp as createAuditingActionGuard, dq as createCatalogExecutorProvider, dr as createConnectionCredentialResolver, ds as createConnectorAdapterCatalogSource, dt as createConnectorAdapterProvider, du as createCredentialBackedAdapterProvider, dv as createDefaultIntegrationActionGuard, dw as createDefaultIntegrationPolicyEngine, dx as createGatewayCatalogProvider, dy as createHttpIntegrationProvider, dz as createIntegrationAuditEvent, x as createIntegrationRuntime, dA as createIntegrationWorkflowRuntime, dB as createMockIntegrationProvider, dC as createPlatformIntegrationPolicyPreset, L as createTangleCatalogCredentialAuthResolver, dD as createTangleCatalogExecutorProvider, N as createTangleCatalogHttpAuthResolver, dE as createTangleCatalogHttpExecutor, O as createTangleCatalogInstalledPackageExecutor, P as createTangleCatalogRuntimeHandler, dF as createTangleCatalogRuntimeNodeRequestListener, dG as createTangleIntegrationsClient, dH as decodeIntegrationBridgePayload, dI as discoverWorkspaceCapabilities, dJ as dispatchIntegrationInvocation, dK as encodeIntegrationBridgePayload, dL as explainMissingRequirements, dM as extractActivepiecesPublicPieceCount, dN as extractExternalCatalogPublicCount, dO as getActivepiecesOverride, ap as getIntegrationFamily, aq as getIntegrationSpec, dP as healthcheckRequest, dQ as importGraphqlConnector, dR as importMcpConnector, dS as importOpenApiConnector, dT as inferIntegrationManifestFromTools, inferIntegrationSupportTier, dU as integrationCoverageChecklistMarkdown, ar as integrationSpecToConnector, i as integrationToolName, dV as invocationRequestFromEnvelope, dW as listActivepiecesCatalogEntries, as as listExecutableIntegrationSpecs, dX as listIntegrationCoverageSpecs, at as listIntegrationSpecs, dY as listTangleIntegrationCatalogEntries, dZ as listTangleIntegrationCatalogRuntimePackages, d_ as listTangleIntegrationContracts, d$ as manifestToConnector, e0 as normalizeGatewayCatalog, e1 as normalizeIntegrationError, e2 as normalizeIntegrationResult, e3 as parseIntegrationBridgeEnvironment, p as parseIntegrationToolName, e4 as receiveIntegrationWebhook, e5 as redactApprovalRequest, e6 as redactCapability, e7 as redactIntegrationBridgePayload, e8 as redactInvocationEnvelope, au as renderAgentToolDescription, e9 as renderApprovalCopy, ea as renderConsentSummary, av as renderConsoleSteps, aw as renderRunbookMarkdown, eb as renderTangleCatalogRuntimePnpmAddCommand, ec as resolveConnectionCredentials, ed as resolveIntegrationApproval, ee as revokeConnection, ef as runIntegrationHealthcheck, eg as runIntegrationHealthchecks, eh as sanitizeAuditConnection, ei as sanitizeConnection, s as searchIntegrationTools, ej as signActivepiecesRuntimeRequest, ek as signCapability, Q as signTangleCatalogRuntimeRequest, ax as specAuthToConnectorAuth, el as startTangleCatalogRuntimeNodeServer, em as statusForCode, en as storedEventToTriggerEvent, summarizeIntegrationRegistry, R as tangleCatalogAuthValue, t as toMcpTools, ay as validateCredentialFormat, az as validateCredentialSet, eo as validateIntegrationInvocationEnvelope, ep as validateIntegrationManifest, aA as validateIntegrationSpec, eq as validateProviderPassthroughRequest, er as verifyActivepiecesRuntimeSignature, es as verifyCapabilityToken, S as verifyTangleCatalogRuntimeSignature } from './registry.js';
-export { A as AuthSpec, b as CASStrategy, c as Capability, d as CapabilityClass, e as CapabilityMutation, f as CapabilityMutationResult, g as CapabilityParameterSchema, h as CapabilityRead, i as CapabilityReadResult, C as ConnectorAdapter, a as ConnectorCredentials, j as ConnectorInvocation, k as ConnectorManifest, l as ConnectorManifestValidationIssue, m as ConnectorManifestValidationResult, n as ConsistencyModel, o as CredentialsExpired, D as DataSourceMetadata, p as DocuSealOptions, E as EventHandlerResult, G as GmailOptions, q as GoogleCalendarOptions, r as GoogleDriveOptions, s as GoogleSheetsOptions, H as HubSpotOptions, I as InboundEvent, M as MicrosoftCalendarOptions, N as NotionDatabaseOptions, t as RateLimitSpec, R as ResolvedDataSource, u as ResourceContention, v as RestConnectorSpec, w as RestCredentialPlacement, x as RestOperationSpec, y as RestRequestSpec, S as SlackOptions, z as airtableConnector, B as asanaConnector, F as assertValidConnectorManifest, J as declarativeRestConnector, K as docuseal, L as githubConnector, O as gitlabConnector, P as gmail, Q as googleCalendar, T as googleDrive, U as googleSheets, V as hubspot, W as microsoftCalendar, X as notionDatabase, Y as salesforceConnector, Z as slack, _ as slackEventsConnector, $ as stripePackConnector, a0 as stripeWebhookReceiverConnector, a1 as twilioSmsConnector, a2 as validateConnectorManifest, a3 as webhookConnector } from './index-D4D4CEKX.js';
+export { aB as ACTIVEPIECES_OVERRIDES, aC as ACTIVEPIECES_PUBLIC_CATALOG_URL, aD as ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER, aE as ActivepiecesCatalogAuthField, aF as ActivepiecesCatalogEntry, aG as ActivepiecesExecutorInvocation, aH as ActivepiecesExecutorProviderOptions, aI as ActivepiecesHttpExecutorOptions, aJ as ActivepiecesPieceOverride, aK as ActivepiecesRuntimeRequest, U as ApiKeyAuthSpec, aL as ApprovalBackedPolicyEngine, aM as ApprovalBackedPolicyOptions, aN as CANONICAL_INTEGRATION_ACTIONS, aO as CanonicalIntegrationActionId, aP as CanonicalLaunchConnectorOptions, aQ as CatalogExecutorInvocation, aR as CatalogExecutorProviderOptions, aS as CompleteAuthRequest, ComposeIntegrationRegistryOptions, aT as ConnectionCredentialResolverOptions, aU as ConnectorAdapterProviderOptions, aV as ConsentSummary, V as ConsoleStep, W as CredentialFieldSpec, X as CredentialValidationInput, Y as CredentialValidationResult, Z as CustomAuthSpec, aW as DEFAULT_INTEGRATION_BRIDGE_ENV, aX as DefaultIntegrationActionGuard, aY as DiscoverWorkspaceCapabilitiesInput, aZ as GatewayCatalogAction, a_ as GatewayCatalogEntry, a$ as GatewayCatalogProviderOptions, b0 as GatewayCatalogTrigger, b1 as GraphqlOperationSpec, _ as HealthcheckPlan, $ as HealthcheckSpec, a0 as HmacAuthSpec, b2 as HttpIntegrationProviderOptions, a1 as INTEGRATION_FAMILIES, b3 as ImportCatalogOptions, b4 as InMemoryConnectionStore, b5 as InMemoryIntegrationApprovalStore, b6 as InMemoryIntegrationAuditStore, b7 as InMemoryIntegrationEventStore, f as InMemoryIntegrationGrantStore, b8 as InMemoryIntegrationHealthcheckStore, b9 as InMemoryIntegrationIdempotencyStore, ba as InMemoryIntegrationSecretStore, bb as InMemoryIntegrationWorkflowStore, bc as InferIntegrationRequirementsOptions, bd as InstalledIntegrationWorkflow, be as IntegrationActionGuard, bf as IntegrationActionPack, bg as IntegrationActionRequest, bh as IntegrationActionResult, bi as IntegrationActionRisk, bj as IntegrationActor, bk as IntegrationApprovalFilter, bl as IntegrationApprovalRecord, bm as IntegrationApprovalRequest, bn as IntegrationApprovalResolution, bo as IntegrationApprovalStatus, bp as IntegrationApprovalStore, bq as IntegrationAuditEvent, br as IntegrationAuditEventType, bs as IntegrationAuditFilter, bt as IntegrationAuditSink, bu as IntegrationAuditStore, a2 as IntegrationAuthMode, a3 as IntegrationAuthSpec, bv as IntegrationBridgePayload, bw as IntegrationBridgeToolBinding, bx as IntegrationCapability, g as IntegrationCapabilityBinding, by as IntegrationCatalogFreshnessOptions, bz as IntegrationCatalogFreshnessResult, IntegrationCatalogSource, I as IntegrationCatalogView, bA as IntegrationConnection, bB as IntegrationConnectionStore, bC as IntegrationConnector, bD as IntegrationConnectorAction, bE as IntegrationConnectorCategory, bF as IntegrationConnectorTrigger, bG as IntegrationCoveragePriority, bH as IntegrationCoverageSpec, bI as IntegrationDataClass, bJ as IntegrationError, bK as IntegrationEventStore, a4 as IntegrationFamilyId, a5 as IntegrationFamilySpec, h as IntegrationGrant, j as IntegrationGrantStore, bL as IntegrationGuardContext, bM as IntegrationHealthcheckCheck, bN as IntegrationHealthcheckResult, bO as IntegrationHealthcheckStatus, bP as IntegrationHealthcheckStore, bQ as IntegrationHub, bR as IntegrationHubOptions, bS as IntegrationIdempotencyRecord, bT as IntegrationIdempotencyStore, bU as IntegrationInvocationEnvelope, bV as IntegrationInvocationEnvelopeValidationOptions, a6 as IntegrationLifecycleSpec, k as IntegrationManifest, l as IntegrationManifestResolution, a7 as IntegrationPlannerHints, bW as IntegrationPolicyDecision, bX as IntegrationPolicyEffect, bY as IntegrationPolicyEngine, bZ as IntegrationPolicyRule, b_ as IntegrationProvider, b$ as IntegrationProviderKind, c0 as IntegrationRateLimitDecision, c1 as IntegrationRateLimiter, IntegrationRegistry, IntegrationRegistryConflict, IntegrationRegistryEntry, IntegrationRegistrySourceRef, IntegrationRegistrySummary, m as IntegrationRequirement, n as IntegrationRequirementMode, o as IntegrationRequirementResolution, q as IntegrationRequirementStatus, r as IntegrationRuntime, u as IntegrationRuntimeHub, v as IntegrationRuntimeOptions, w as IntegrationSandboxBundle, c2 as IntegrationSandboxHost, c3 as IntegrationSandboxHostHub, c4 as IntegrationSandboxHostOptions, c5 as IntegrationSecretStore, a8 as IntegrationSetupSpec, a9 as IntegrationSpec, aa as IntegrationSpecStatus, ab as IntegrationSpecValidationIssue, ac as IntegrationSpecValidationResult, IntegrationSupportTier, a as IntegrationToolDefinition, b as IntegrationToolSearchFilters, c as IntegrationToolSearchResult, c6 as IntegrationTriggerEvent, c7 as IntegrationTriggerSubscription, c8 as IntegrationWebhookReceiverResult, c9 as IntegrationWorkflowDefinition, ca as IntegrationWorkflowRuntime, cb as IntegrationWorkflowRuntimeHub, cc as IntegrationWorkflowRuntimeOptions, cd as IntegrationWorkflowStore, ce as InvokeWithCapabilityRequest, cf as IssueCapabilityRequest, cg as IssuedIntegrationCapability, ch as ManifestValidationIssue, ci as ManifestValidationResult, cj as McpCatalog, ck as McpCatalogTool, M as McpToolDefinition, cl as MissingRequirementExplanation, ad as NoneAuthSpec, cm as NormalizedIntegrationResult, ae as NormalizedPermission, af as OAuth2AuthSpec, cn as OpenApiDocument, co as OpenApiOperation, cp as PROVIDER_PASSTHROUGH_ACTION, ag as PermissionDescriptor, cq as PlatformIntegrationPolicyPresetOptions, ah as PostSetupCheck, cr as ProviderHttpRequestInput, cs as ProviderPassthroughPolicy, ai as Quirk, ct as RenderConsentOptions, aj as RenderSpecOptions, ak as RenderedConsoleStep, al as ScopeDescriptor, cu as SecretRef, cv as StartAuthRequest, cw as StartAuthResult, cx as StartedTangleCatalogRuntimeNodeServer, cy as StaticIntegrationPolicyEngine, cz as StaticIntegrationPolicyOptions, cA as StoredIntegrationEvent, T as TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER, cB as TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID, cC as TANGLE_INTEGRATIONS_CATALOG_SOURCE, y as TangleCatalogAuthResolverOptions, cD as TangleCatalogExecutorInvocation, cE as TangleCatalogExecutorProviderOptions, z as TangleCatalogHttpAuthResolverOptions, A as TangleCatalogHttpAuthResolverRequest, cF as TangleCatalogHttpExecutorInvocation, cG as TangleCatalogHttpExecutorOptions, B as TangleCatalogInstalledPackageExecutorOptions, cH as TangleCatalogRuntimeActionRequest, C as TangleCatalogRuntimeHandlerOptions, D as TangleCatalogRuntimeHttpRequest, E as TangleCatalogRuntimeHttpResponse, F as TangleCatalogRuntimeInvocation, G as TangleCatalogRuntimeModuleAction, cI as TangleCatalogRuntimeNodeServerOptions, H as TangleCatalogRuntimePackageCoverageOptions, J as TangleCatalogRuntimePackageCoverageRow, cJ as TangleCatalogRuntimePackageManifest, cK as TangleCatalogRuntimePackageManifestOptions, cL as TangleCatalogRuntimePiece, cM as TangleCatalogRuntimeRequest, cN as TangleCatalogTriggerInvocation, cO as TangleIntegrationCatalogEntry, cP as TangleIntegrationCatalogFreshnessOptions, cQ as TangleIntegrationCatalogFreshnessResult, cR as TangleIntegrationContract, cS as TangleIntegrationContractStatus, cT as TangleIntegrationImplementationKind, cU as TangleIntegrationInvokeInput, cV as TangleIntegrationInvokeResult, cW as TangleIntegrationsClient, cX as TangleIntegrationsClientOptions, cY as WorkspaceCapability, cZ as WorkspaceCapabilityDiscovery, c_ as WorkspaceToolSchema, c$ as WorkspaceTrigger, d0 as adapterManifestsToConnectors, d1 as assertValidIntegrationManifest, am as assertValidIntegrationSpec, d2 as auditIntegrationCatalogFreshness, K as auditTangleCatalogRuntimePackages, d3 as auditTangleIntegrationCatalogFreshness, d4 as buildActivepiecesConnectors, d5 as buildActivepiecesRuntimeRequest, d6 as buildApprovalRequest, d7 as buildCanonicalLaunchConnectors, buildDefaultIntegrationRegistry, an as buildHealthcheckPlan, d8 as buildIntegrationBridgeEnvironment, d9 as buildIntegrationBridgePayload, d as buildIntegrationCatalogView, da as buildIntegrationCoverageConnectors, db as buildIntegrationInvocationEnvelope, e as buildIntegrationToolCatalog, dc as buildTangleCatalogRuntimePackageManifest, dd as buildTangleCatalogRuntimeRequest, de as buildTangleIntegrationCatalogConnectors, df as calendarExercisePlannerManifest, dg as canonicalActionConnectorId, canonicalConnectorId, composeIntegrationRegistry, ao as consoleStepsToText, dh as createActivepiecesExecutorProvider, di as createActivepiecesHttpExecutor, dj as createApprovalBackedPolicyEngine, dk as createAuditingActionGuard, dl as createCatalogExecutorProvider, dm as createConnectionCredentialResolver, dn as createConnectorAdapterCatalogSource, dp as createConnectorAdapterProvider, dq as createCredentialBackedAdapterProvider, dr as createDefaultIntegrationActionGuard, ds as createDefaultIntegrationPolicyEngine, dt as createGatewayCatalogProvider, du as createHttpIntegrationProvider, dv as createIntegrationAuditEvent, x as createIntegrationRuntime, dw as createIntegrationWorkflowRuntime, dx as createMockIntegrationProvider, dy as createPlatformIntegrationPolicyPreset, L as createTangleCatalogCredentialAuthResolver, dz as createTangleCatalogExecutorProvider, N as createTangleCatalogHttpAuthResolver, dA as createTangleCatalogHttpExecutor, O as createTangleCatalogInstalledPackageExecutor, P as createTangleCatalogRuntimeHandler, dB as createTangleCatalogRuntimeNodeRequestListener, dC as createTangleIntegrationsClient, dD as decodeIntegrationBridgePayload, dE as discoverWorkspaceCapabilities, dF as dispatchIntegrationInvocation, dG as encodeIntegrationBridgePayload, dH as explainMissingRequirements, dI as extractActivepiecesPublicPieceCount, dJ as extractExternalCatalogPublicCount, dK as filterDiscoveryByWorkspaceScopes, dL as getActivepiecesOverride, ap as getIntegrationFamily, aq as getIntegrationSpec, dM as healthcheckRequest, dN as importGraphqlConnector, dO as importMcpConnector, dP as importOpenApiConnector, dQ as inferIntegrationManifestFromTools, inferIntegrationSupportTier, dR as integrationCoverageChecklistMarkdown, ar as integrationSpecToConnector, i as integrationToolName, dS as invocationRequestFromEnvelope, dT as listActivepiecesCatalogEntries, as as listExecutableIntegrationSpecs, dU as listIntegrationCoverageSpecs, at as listIntegrationSpecs, dV as listTangleIntegrationCatalogEntries, dW as listTangleIntegrationCatalogRuntimePackages, dX as listTangleIntegrationContracts, dY as manifestToConnector, dZ as normalizeGatewayCatalog, d_ as normalizeIntegrationResult, d$ as parseIntegrationBridgeEnvironment, p as parseIntegrationToolName, e0 as receiveIntegrationWebhook, e1 as redactApprovalRequest, e2 as redactCapability, e3 as redactIntegrationBridgePayload, e4 as redactInvocationEnvelope, au as renderAgentToolDescription, e5 as renderApprovalCopy, e6 as renderConsentSummary, av as renderConsoleSteps, aw as renderRunbookMarkdown, e7 as renderTangleCatalogRuntimePnpmAddCommand, e8 as resolveConnectionCredentials, e9 as resolveIntegrationApproval, ea as revokeConnection, eb as runIntegrationHealthcheck, ec as runIntegrationHealthchecks, ed as sanitizeAuditConnection, ee as sanitizeConnection, s as searchIntegrationTools, ef as signActivepiecesRuntimeRequest, eg as signCapability, Q as signTangleCatalogRuntimeRequest, ax as specAuthToConnectorAuth, eh as startTangleCatalogRuntimeNodeServer, ei as storedEventToTriggerEvent, summarizeIntegrationRegistry, R as tangleCatalogAuthValue, t as toMcpTools, ay as validateCredentialFormat, az as validateCredentialSet, ej as validateIntegrationInvocationEnvelope, ek as validateIntegrationManifest, aA as validateIntegrationSpec, el as validateProviderPassthroughRequest, em as verifyActivepiecesRuntimeSignature, en as verifyCapabilityToken, S as verifyTangleCatalogRuntimeSignature } from './registry.js';
+export { b as IntegrationErrorCode, I as IntegrationRuntimeError, a as IntegrationUserAction, N as NormalizedIntegrationError, n as normalizeIntegrationError, s as statusForCode } from './errors-Bg3_rxnQ.js';
+export { ConnectFlowOptions, FinishConnectInput, FinishConnectOutput, InMemoryConnectStateStore, StartConnectInput, StartConnectOutput, finishConnectFlow, revokeConnectFlow, startConnectFlow } from './connect/index.js';
+export { ExpressLikeRequest, ExpressLikeResponse, HonoLikeContext, RequireTangleAuthOptions, TangleAuthContext, TangleAuthOutcome, TangleAuthReason, expressTangleAuthMiddleware, extractToken, honoTangleAuthMiddleware, requireTangleAuth } from './middleware/index.js';
+export { A as AuthSpec, e as CASStrategy, f as Capability, g as CapabilityClass, h as CapabilityMutation, i as CapabilityMutationResult, j as CapabilityParameterSchema, k as CapabilityRead, l as CapabilityReadResult, C as ConnectorAdapter, d as ConnectorCredentials, m as ConnectorInvocation, n as ConnectorManifest, o as ConnectorManifestValidationIssue, p as ConnectorManifestValidationResult, q as ConsistencyModel, r as CredentialsExpired, D as DEFAULT_TANGLE_PLATFORM_URL, s as DataSourceMetadata, E as EventHandlerResult, I as InboundEvent, t as RateLimitSpec, R as ResolvedDataSource, u as ResourceContention, v as TANGLE_API_KEY_PREFIX, w as TANGLE_SERVICE_TOKEN_PREFIX, b as TangleIdentityClient, T as TangleIdentityOptions, x as TangleIdentityUnreachableError, c as TangleTokenVerifyFailure, y as TangleTokenVerifyResult, a as TangleUserSummary, z as TangleWorkspaceSummary, B as assertValidConnectorManifest, F as createTangleIdentityClient, G as tangleIdentity, H as validateConnectorManifest } from './tangle-id-CTU4kGId.js';
 export { DEFAULT_SIGNATURE_TOLERANCE_SECONDS, ExchangeCodeInput, GenericHmacVerifyOptions, InMemoryOAuthFlowStore, OAuthFlowStore, OAuthTokens, ParsedStripeSignatureHeader, PendingOAuthFlow, RefreshInput, SlackVerifyOptions, StartOAuthInput, StartOAuthOutput, StripeVerifyOptions, TwilioVerifyOptions, _resetPendingFlowsForTests, consumePendingFlow, exchangeAuthorizationCode, firstHeader, parseStripeSignatureHeader, refreshAccessToken, startOAuthFlow, verifyHmacSignature, verifySlackSignature, verifyStripeSignature, verifyTwilioSignature } from './connectors/index.js';
+export { DocuSealOptions, GmailOptions, GoogleCalendarOptions, GoogleDriveOptions, GoogleSheetsOptions, HubSpotOptions, MicrosoftCalendarOptions, NotionDatabaseOptions, RestConnectorSpec, RestCredentialPlacement, RestOperationSpec, RestRequestSpec, SlackOptions, airtableConnector, asanaConnector, declarativeRestConnector, docuseal, githubConnector, gitlabConnector, gmail, googleCalendar, googleDrive, googleSheets, hubspot, microsoftCalendar, notionDatabase, salesforceConnector, slack, slackEventsConnector, stripePackConnector, stripeWebhookReceiverConnector, twilioSmsConnector, webhookConnector } from './connectors/adapters/index.js';
 import 'node:http';

package/dist/index.js

@@ -18,7 +18,6 @@ import {
   IntegrationError,
   IntegrationHub,
   IntegrationRuntime,
-  IntegrationRuntimeError,
   IntegrationSandboxHost,
   IntegrationWorkflowRuntime,
   PROVIDER_PASSTHROUGH_ACTION,
@@ -82,6 +81,7 @@ import {
   explainMissingRequirements,
   extractActivepiecesPublicPieceCount,
   extractExternalCatalogPublicCount,
+  filterDiscoveryByWorkspaceScopes,
   getActivepiecesOverride,
   healthcheckRequest,
   importGraphqlConnector,
@@ -97,7 +97,6 @@ import {
   listTangleIntegrationContracts,
   manifestToConnector,
   normalizeGatewayCatalog,
-  normalizeIntegrationError,
   normalizeIntegrationResult,
   parseIntegrationBridgeEnvironment,
   parseIntegrationToolName,
@@ -121,7 +120,6 @@ import {
   signCapability,
   signTangleCatalogRuntimeRequest,
   startTangleCatalogRuntimeNodeServer,
-  statusForCode,
   storedEventToTriggerEvent,
   summarizeIntegrationRegistry,
   tangleCatalogAuthValue,
@@ -132,7 +130,18 @@ import {
   verifyActivepiecesRuntimeSignature,
   verifyCapabilityToken,
   verifyTangleCatalogRuntimeSignature
-} from "./chunk-ALCIWTIR.js";
+} from "./chunk-UWRYFPJW.js";
+import {
+  expressTangleAuthMiddleware,
+  extractToken,
+  honoTangleAuthMiddleware,
+  requireTangleAuth
+} from "./chunk-SVQ4PHDZ.js";
+import {
+  IntegrationRuntimeError,
+  normalizeIntegrationError,
+  statusForCode
+} from "./chunk-H4XYLS7T.js";
 import {
   INTEGRATION_FAMILIES,
   assertValidIntegrationSpec,
@@ -156,13 +165,10 @@ import {
 } from "./chunk-4JQ754PA.js";
 import "./chunk-376UBTNB.js";
 import {
-  CredentialsExpired,
   InMemoryOAuthFlowStore,
-  ResourceContention,
   _resetPendingFlowsForTests,
   airtableConnector,
   asanaConnector,
-  assertValidConnectorManifest,
   consumePendingFlow,
   declarativeRestConnector,
   docuseal,
@@ -184,9 +190,8 @@ import {
   stripePackConnector,
   stripeWebhookReceiverConnector,
   twilioSmsConnector,
-  validateConnectorManifest,
   webhookConnector
-} from "./chunk-GA4VTE3U.js";
+} from "./chunk-JU25UDN2.js";
 import {
   DEFAULT_SIGNATURE_TOLERANCE_SECONDS,
   firstHeader,
@@ -196,6 +201,24 @@ import {
   verifyStripeSignature,
   verifyTwilioSignature
 } from "./chunk-2TW2QKGZ.js";
+import {
+  InMemoryConnectStateStore,
+  finishConnectFlow,
+  revokeConnectFlow,
+  startConnectFlow
+} from "./chunk-P24T3MLM.js";
+import {
+  CredentialsExpired,
+  DEFAULT_TANGLE_PLATFORM_URL,
+  ResourceContention,
+  TANGLE_API_KEY_PREFIX,
+  TANGLE_SERVICE_TOKEN_PREFIX,
+  TangleIdentityUnreachableError,
+  assertValidConnectorManifest,
+  createTangleIdentityClient,
+  tangleIdentity,
+  validateConnectorManifest
+} from "./chunk-ATYHZXLL.js";
 export {
   ACTIVEPIECES_OVERRIDES,
   ACTIVEPIECES_PUBLIC_CATALOG_URL,
@@ -205,8 +228,10 @@ export {
   CredentialsExpired,
   DEFAULT_INTEGRATION_BRIDGE_ENV,
   DEFAULT_SIGNATURE_TOLERANCE_SECONDS,
+  DEFAULT_TANGLE_PLATFORM_URL,
   DefaultIntegrationActionGuard,
   INTEGRATION_FAMILIES,
+  InMemoryConnectStateStore,
   InMemoryConnectionStore,
   InMemoryIntegrationApprovalStore,
   InMemoryIntegrationAuditStore,
@@ -226,9 +251,12 @@ export {
   PROVIDER_PASSTHROUGH_ACTION,
   ResourceContention,
   StaticIntegrationPolicyEngine,
+  TANGLE_API_KEY_PREFIX,
   TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER,
   TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID,
   TANGLE_INTEGRATIONS_CATALOG_SOURCE,
+  TANGLE_SERVICE_TOKEN_PREFIX,
+  TangleIdentityUnreachableError,
   TangleIntegrationsClient,
   _resetPendingFlowsForTests,
   adapterManifestsToConnectors,
@@ -286,6 +314,7 @@ export {
   createTangleCatalogInstalledPackageExecutor,
   createTangleCatalogRuntimeHandler,
   createTangleCatalogRuntimeNodeRequestListener,
+  createTangleIdentityClient,
   createTangleIntegrationsClient,
   declarativeRestConnector,
   decodeIntegrationBridgePayload,
@@ -295,8 +324,12 @@ export {
   encodeIntegrationBridgePayload,
   exchangeAuthorizationCode,
   explainMissingRequirements,
+  expressTangleAuthMiddleware,
   extractActivepiecesPublicPieceCount,
   extractExternalCatalogPublicCount,
+  extractToken,
+  filterDiscoveryByWorkspaceScopes,
+  finishConnectFlow,
   firstHeader,
   getActivepiecesOverride,
   getIntegrationFamily,
@@ -308,6 +341,7 @@ export {
   googleDrive,
   googleSheets,
   healthcheckRequest,
+  honoTangleAuthMiddleware,
   hubspot,
   importGraphqlConnector,
   importMcpConnector,
@@ -346,8 +380,10 @@ export {
   renderConsoleSteps,
   renderRunbookMarkdown,
   renderTangleCatalogRuntimePnpmAddCommand,
+  requireTangleAuth,
   resolveConnectionCredentials,
   resolveIntegrationApproval,
+  revokeConnectFlow,
   revokeConnection,
   runIntegrationHealthcheck,
   runIntegrationHealthchecks,
@@ -361,6 +397,7 @@ export {
   slack,
   slackEventsConnector,
   specAuthToConnectorAuth,
+  startConnectFlow,
   startOAuthFlow,
   startTangleCatalogRuntimeNodeServer,
   statusForCode,
@@ -369,6 +406,7 @@ export {
   stripeWebhookReceiverConnector,
   summarizeIntegrationRegistry,
   tangleCatalogAuthValue,
+  tangleIdentity,
   toMcpTools,
   twilioSmsConnector,
   validateConnectorManifest,

package/dist/middleware/index.d.ts

@@ -0,0 +1,137 @@
+import { T as TangleIdentityOptions, b as TangleIdentityClient, c as TangleTokenVerifyFailure } from '../tangle-id-CTU4kGId.js';
+
+/**
+ * @stable Drop-in request middleware that verifies id.tangle.tools
+ * credentials and attaches `{ userId, workspaceId, scopes, kind }` to the
+ * request.
+ *
+ * The middleware is framework-agnostic. Instead of binding to express /
+ * hono / itty-router specifically (each has its own request typings and
+ * lifecycle), the helper accepts either a `Request` (web standard) or a
+ * `{ headers }`-shaped object and returns a typed result the caller wires
+ * into its own context. Concrete adapters for hono / express / fetch live
+ * one call below in the same module so a product can pick the shape it
+ * uses without dragging in framework types from the rest.
+ *
+ * Why this matters: legal-agent runs on Bun + Hono. tax-agent runs on
+ * CF Workers + itty-router. gtm-agent runs on Node + Express. Wiring an
+ * identical "is this caller authed" check across all three is what
+ * unblocks shipping product apps in parallel.
+ *
+ * Token sources (checked in order):
+ *
+ *   1. `Authorization: Bearer <token>` — handles both sk-tan-* API keys
+ *      and Better Auth-issued session bearers.
+ *   2. `Cookie: better-auth.session_token=<jwt>` — the canonical browser
+ *      flow. We forward the cookie value as a Bearer to the platform's
+ *      `/api/auth/get-session` endpoint.
+ *
+ * On success the middleware returns:
+ *
+ *   { ok: true, auth: { userId, workspaceId, scopes, kind, expiresAt? } }
+ *
+ * On failure:
+ *
+ *   { ok: false, status: 401|403, reason: '<stable-code>' }
+ *
+ * The caller decides whether to short-circuit the request (production) or
+ * downgrade to anonymous (read-only public endpoints). The middleware
+ * NEVER throws on bad-token; only true platform unreachability bubbles up
+ * as a `TangleIdentityUnreachableError`.
+ */
+
+/** Auth context the middleware attaches to the request on success. */
+interface TangleAuthContext {
+    userId: string;
+    workspaceId: string;
+    scopes: string[];
+    kind: 'api_key' | 'session';
+    /** Wall-clock ms epoch when the credential expires, when known. */
+    expiresAt?: number;
+    /** Stable credential id (key id for API keys, session id for sessions). */
+    credentialId?: string;
+    /** Owner-shape on the platform side. */
+    ownerType: 'user' | 'team';
+    /** Product the credential is scoped to, when known. */
+    product?: string;
+}
+type TangleAuthOutcome = {
+    ok: true;
+    auth: TangleAuthContext;
+} | {
+    ok: false;
+    status: 401 | 403 | 503;
+    reason: TangleAuthReason;
+};
+/** Stable failure reasons surfaced to the caller. */
+type TangleAuthReason = 'missing_credential' | 'malformed_credential' | 'service_token_refused' | TangleTokenVerifyFailure | 'platform_unreachable';
+interface RequireTangleAuthOptions extends TangleIdentityOptions {
+    /** Pre-built client. When supplied, all `TangleIdentityOptions` fields
+     *  are ignored. Tests pass a stub here; production code typically
+     *  constructs the client once at boot and passes it in. */
+    client?: TangleIdentityClient;
+    /** Override the cookie name where the session bearer lives. Defaults
+     *  to `better-auth.session_token` — matches the platform's Better Auth
+     *  configuration. */
+    sessionCookieName?: string;
+    /** If true, missing-credential returns `ok: false, status: 401`
+     *  (default). If false, the middleware returns `ok: true` with a
+     *  synthetic anonymous context — useful for public endpoints that want
+     *  to opportunistically hydrate identity. */
+    requireCredential?: boolean;
+}
+/**
+ * Verify the credential on `request` against id.tangle.tools and resolve
+ * to a typed {@link TangleAuthContext}. Request type is the web-standard
+ * `Request` shape — works in Bun, Workers, Deno, Node 20+, Hono context's
+ * `c.req.raw`, and Express adapters that surface `req` via `webRequest()`.
+ */
+declare function requireTangleAuth(request: Pick<Request, 'headers'>, opts?: RequireTangleAuthOptions): Promise<TangleAuthOutcome>;
+/**
+ * Extract the bearer credential from a request. Public so callers that
+ * want to reuse the same token-discovery logic outside the middleware
+ * (e.g. to attribute audit log entries) don't have to re-implement it.
+ *
+ * Order: Authorization header first (canonical), session cookie second.
+ * Service tokens (`svc_*`) are explicitly dropped — the platform's
+ * middleware refuses to map them to a user, so accepting them here
+ * would invite the exact "service-as-user" privilege escalation the
+ * platform's `resolveServiceIdentity` already guards against.
+ */
+declare function extractToken(request: Pick<Request, 'headers'>, sessionCookieName?: string): string | undefined;
+/**
+ * Hono-flavored convenience wrapper. Returns a hono middleware factory
+ * that calls {@link requireTangleAuth} and stashes the result on the
+ * Hono context under `c.set('tangleAuth', auth)`. On failure short-
+ * circuits with the canonical {success:false} envelope the platform uses.
+ *
+ * Kept typed against a structural `Context`-like shape so this module
+ * does NOT take a hono peerDep. Consumers pass `c` directly.
+ */
+declare function honoTangleAuthMiddleware(opts?: RequireTangleAuthOptions): (c: HonoLikeContext, next: () => Promise<void>) => Promise<Response | void>;
+/** Minimal Hono Context-shaped surface. Avoids the hono peerDep. */
+interface HonoLikeContext {
+    req: {
+        raw: Request;
+    };
+    set(key: 'tangleAuth', value: TangleAuthContext): void;
+}
+/**
+ * Express-flavored convenience wrapper. Same outcome shape as the Hono
+ * helper, expressed via the Node `req` / `res` / `next` triple. Consumers
+ * pass the triple as positional args. Returns a function compatible with
+ * any express-like `app.use(fn)`.
+ */
+declare function expressTangleAuthMiddleware(opts?: RequireTangleAuthOptions): (req: ExpressLikeRequest, res: ExpressLikeResponse, next: (err?: unknown) => void) => Promise<void>;
+/** Minimal Express-shaped surfaces. Avoids the express peerDep. */
+interface ExpressLikeRequest {
+    headers: Record<string, string | string[] | undefined>;
+    tangleAuth?: TangleAuthContext;
+}
+interface ExpressLikeResponse {
+    status(code: number): unknown;
+    setHeader?(name: string, value: string): unknown;
+    end(body: string): unknown;
+}
+
+export { type ExpressLikeRequest, type ExpressLikeResponse, type HonoLikeContext, type RequireTangleAuthOptions, type TangleAuthContext, type TangleAuthOutcome, type TangleAuthReason, expressTangleAuthMiddleware, extractToken, honoTangleAuthMiddleware, requireTangleAuth };

package/dist/middleware/index.js

@@ -0,0 +1,14 @@
+import {
+  expressTangleAuthMiddleware,
+  extractToken,
+  honoTangleAuthMiddleware,
+  requireTangleAuth
+} from "../chunk-SVQ4PHDZ.js";
+import "../chunk-ATYHZXLL.js";
+export {
+  expressTangleAuthMiddleware,
+  extractToken,
+  honoTangleAuthMiddleware,
+  requireTangleAuth
+};
+//# sourceMappingURL=index.js.map

package/dist/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/registry.d.ts

@@ -1,5 +1,9 @@
-import { C as ConnectorAdapter, R as ResolvedDataSource, a as ConnectorCredentials } from './index-D4D4CEKX.js';
+import { C as ConnectorAdapter, R as ResolvedDataSource, d as ConnectorCredentials } from './tangle-id-CTU4kGId.js';
+import './errors-Bg3_rxnQ.js';
+import './connect/index.js';
+import './middleware/index.js';
 import './connectors/index.js';
+import './connectors/adapters/index.js';
 import { Server, IncomingMessage, ServerResponse } from 'node:http';
 
 type IntegrationSupportTier = 'catalogOnly' | 'setupReady' | 'gatewayExecutable' | 'firstPartyExecutable' | 'sandboxExecutable';
@@ -648,37 +652,29 @@ interface WorkspaceCapabilityDiscovery {
  *  to the inputs — caller decides whether to back `connections` and
  *  `connectors` with persistent state or static fixtures. */
 declare function discoverWorkspaceCapabilities(input: DiscoverWorkspaceCapabilitiesInput): Promise<WorkspaceCapabilityDiscovery>;
-
-type IntegrationErrorCode = 'missing_connection' | 'missing_grant' | 'approval_required' | 'approval_denied' | 'connection_revoked' | 'connection_expired' | 'scope_missing' | 'action_denied' | 'action_not_found' | 'trigger_not_found' | 'provider_rate_limited' | 'provider_auth_failed' | 'provider_unavailable' | 'provider_error' | 'capability_expired' | 'capability_invalid' | 'manifest_invalid' | 'passthrough_disabled' | 'input_invalid' | 'unknown';
-interface IntegrationUserAction {
-    type: 'connect' | 'reconnect' | 'approve' | 'retry' | 'contact_support' | 'change_request';
-    label: string;
-    connectorId?: string;
-    approvalId?: string;
-}
-declare class IntegrationRuntimeError extends Error {
-    readonly code: IntegrationErrorCode;
-    readonly status: number;
-    readonly userAction?: IntegrationUserAction;
-    readonly metadata?: Record<string, unknown>;
-    constructor(input: {
-        code: IntegrationErrorCode;
-        message: string;
-        status?: number;
-        userAction?: IntegrationUserAction;
-        metadata?: Record<string, unknown>;
-    });
-}
-interface NormalizedIntegrationError {
-    ok: false;
-    code: IntegrationErrorCode;
-    message: string;
-    status: number;
-    userAction?: IntegrationUserAction;
-    metadata?: Record<string, unknown>;
-}
-declare function normalizeIntegrationError(error: unknown): NormalizedIntegrationError;
-declare function statusForCode(code: IntegrationErrorCode): number;
+/**
+ * Filter a {@link WorkspaceCapabilityDiscovery} result by the calling
+ * user's effective id.tangle.tools workspace scopes. Pair with the
+ * `tangleIdentity()` adapter's `list_workspaces` / `switch_workspace`
+ * output to keep what the agent runtime sees aligned with what the
+ * workspace's plan actually permits.
+ *
+ * Semantics:
+ *   - Every workspace scope is matched against every capability's
+ *     `scopes` list. Wildcard scopes (`tangle:*`, `<connectorId>:*`) are
+ *     respected — a workspace with `tangle:*` sees everything; a
+ *     workspace with `gmail:*` sees every gmail capability regardless of
+ *     the upstream OAuth scope.
+ *   - When `workspaceScopes` is empty, returns the discovery as-is (no
+ *     workspace gate). Pass an explicit `denyByDefault: true` to flip
+ *     that to "empty workspace sees nothing" — matches the platform's
+ *     fail-closed posture for production tenants.
+ *
+ * Pure with respect to the inputs — no side effects.
+ */
+declare function filterDiscoveryByWorkspaceScopes(discovery: WorkspaceCapabilityDiscovery, workspaceScopes: string[], opts?: {
+    denyByDefault?: boolean;
+}): WorkspaceCapabilityDiscovery;
 
 interface IntegrationWorkflowDefinition {
     id: string;
@@ -2136,4 +2132,4 @@ declare function createHttpIntegrationProvider(options: HttpIntegrationProviderO
 declare function signCapability(capability: IntegrationCapability, secret: string): string;
 declare function verifyCapabilityToken(token: string, secret: string): IntegrationCapability;
 
-export { type HealthcheckSpec as $, type TangleCatalogHttpAuthResolverRequest as A, type TangleCatalogInstalledPackageExecutorOptions as B, type TangleCatalogRuntimeHandlerOptions as C, type ComposeIntegrationRegistryOptions, type TangleCatalogRuntimeHttpRequest as D, type TangleCatalogRuntimeHttpResponse as E, type TangleCatalogRuntimeInvocation as F, type TangleCatalogRuntimeModuleAction as G, type TangleCatalogRuntimePackageCoverageOptions as H, type IntegrationCatalogView as I, type IntegrationCatalogSource, type IntegrationRegistry, type IntegrationRegistryConflict, type IntegrationRegistryEntry, type IntegrationRegistrySourceRef, type IntegrationRegistrySummary, type IntegrationSupportTier, type TangleCatalogRuntimePackageCoverageRow as J, auditTangleCatalogRuntimePackages as K, createTangleCatalogCredentialAuthResolver as L, type McpToolDefinition as M, createTangleCatalogHttpAuthResolver as N, createTangleCatalogInstalledPackageExecutor as O, createTangleCatalogRuntimeHandler as P, signTangleCatalogRuntimeRequest as Q, tangleCatalogAuthValue as R, verifyTangleCatalogRuntimeSignature as S, TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER as T, type ApiKeyAuthSpec as U, type ConsoleStep as V, type CredentialFieldSpec as W, type CredentialValidationInput as X, type CredentialValidationResult as Y, type CustomAuthSpec as Z, type HealthcheckPlan as _, type IntegrationToolDefinition as a, type GatewayCatalogProviderOptions as a$, type HmacAuthSpec as a0, INTEGRATION_FAMILIES as a1, type IntegrationAuthMode as a2, type IntegrationAuthSpec as a3, type IntegrationFamilyId as a4, type IntegrationFamilySpec as a5, type IntegrationLifecycleSpec as a6, type IntegrationPlannerHints as a7, type IntegrationSetupSpec as a8, type IntegrationSpec as a9, validateIntegrationSpec as aA, ACTIVEPIECES_OVERRIDES as aB, ACTIVEPIECES_PUBLIC_CATALOG_URL as aC, ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER as aD, type ActivepiecesCatalogAuthField as aE, type ActivepiecesCatalogEntry as aF, type ActivepiecesExecutorInvocation as aG, type ActivepiecesExecutorProviderOptions as aH, type ActivepiecesHttpExecutorOptions as aI, type ActivepiecesPieceOverride as aJ, type ActivepiecesRuntimeRequest as aK, ApprovalBackedPolicyEngine as aL, type ApprovalBackedPolicyOptions as aM, CANONICAL_INTEGRATION_ACTIONS as aN, type CanonicalIntegrationActionId as aO, type CanonicalLaunchConnectorOptions as aP, type CatalogExecutorInvocation as aQ, type CatalogExecutorProviderOptions as aR, type CompleteAuthRequest as aS, type ConnectionCredentialResolverOptions as aT, type ConnectorAdapterProviderOptions as aU, type ConsentSummary as aV, DEFAULT_INTEGRATION_BRIDGE_ENV as aW, DefaultIntegrationActionGuard as aX, type DiscoverWorkspaceCapabilitiesInput as aY, type GatewayCatalogAction as aZ, type GatewayCatalogEntry as a_, type IntegrationSpecStatus as aa, type IntegrationSpecValidationIssue as ab, type IntegrationSpecValidationResult as ac, type NoneAuthSpec as ad, type NormalizedPermission as ae, type OAuth2AuthSpec as af, type PermissionDescriptor as ag, type PostSetupCheck as ah, type Quirk as ai, type RenderSpecOptions as aj, type RenderedConsoleStep as ak, type ScopeDescriptor as al, assertValidIntegrationSpec as am, buildHealthcheckPlan as an, consoleStepsToText as ao, getIntegrationFamily as ap, getIntegrationSpec as aq, integrationSpecToConnector as ar, listExecutableIntegrationSpecs as as, listIntegrationSpecs as at, renderAgentToolDescription as au, renderConsoleSteps as av, renderRunbookMarkdown as aw, specAuthToConnectorAuth as ax, validateCredentialFormat as ay, validateCredentialSet as az, type IntegrationToolSearchFilters as b, type IntegrationProvider as b$, type GatewayCatalogTrigger as b0, type GraphqlOperationSpec as b1, type HttpIntegrationProviderOptions as b2, type ImportCatalogOptions as b3, InMemoryConnectionStore as b4, InMemoryIntegrationApprovalStore as b5, InMemoryIntegrationAuditStore as b6, InMemoryIntegrationEventStore as b7, InMemoryIntegrationHealthcheckStore as b8, InMemoryIntegrationIdempotencyStore as b9, type IntegrationConnection as bA, type IntegrationConnectionStore as bB, type IntegrationConnector as bC, type IntegrationConnectorAction as bD, type IntegrationConnectorCategory as bE, type IntegrationConnectorTrigger as bF, type IntegrationCoveragePriority as bG, type IntegrationCoverageSpec as bH, type IntegrationDataClass as bI, IntegrationError as bJ, type IntegrationErrorCode as bK, type IntegrationEventStore as bL, type IntegrationGuardContext as bM, type IntegrationHealthcheckCheck as bN, type IntegrationHealthcheckResult as bO, type IntegrationHealthcheckStatus as bP, type IntegrationHealthcheckStore as bQ, IntegrationHub as bR, type IntegrationHubOptions as bS, type IntegrationIdempotencyRecord as bT, type IntegrationIdempotencyStore as bU, type IntegrationInvocationEnvelope as bV, type IntegrationInvocationEnvelopeValidationOptions as bW, type IntegrationPolicyDecision as bX, type IntegrationPolicyEffect as bY, type IntegrationPolicyEngine as bZ, type IntegrationPolicyRule as b_, InMemoryIntegrationSecretStore as ba, InMemoryIntegrationWorkflowStore as bb, type InferIntegrationRequirementsOptions as bc, type InstalledIntegrationWorkflow as bd, type IntegrationActionGuard as be, type IntegrationActionPack as bf, type IntegrationActionRequest as bg, type IntegrationActionResult as bh, type IntegrationActionRisk as bi, type IntegrationActor as bj, type IntegrationApprovalFilter as bk, type IntegrationApprovalRecord as bl, type IntegrationApprovalRequest as bm, type IntegrationApprovalResolution as bn, type IntegrationApprovalStatus as bo, type IntegrationApprovalStore as bp, type IntegrationAuditEvent as bq, type IntegrationAuditEventType as br, type IntegrationAuditFilter as bs, type IntegrationAuditSink as bt, type IntegrationAuditStore as bu, buildDefaultIntegrationRegistry, type IntegrationBridgePayload as bv, type IntegrationBridgeToolBinding as bw, type IntegrationCapability as bx, type IntegrationCatalogFreshnessOptions as by, type IntegrationCatalogFreshnessResult as bz, type IntegrationToolSearchResult as c, type TangleIntegrationsClientOptions as c$, type IntegrationProviderKind as c0, type IntegrationRateLimitDecision as c1, type IntegrationRateLimiter as c2, IntegrationRuntimeError as c3, IntegrationSandboxHost as c4, type IntegrationSandboxHostHub as c5, type IntegrationSandboxHostOptions as c6, type IntegrationSecretStore as c7, type IntegrationTriggerEvent as c8, type IntegrationTriggerSubscription as c9, type StartAuthResult as cA, type StartedTangleCatalogRuntimeNodeServer as cB, StaticIntegrationPolicyEngine as cC, type StaticIntegrationPolicyOptions as cD, type StoredIntegrationEvent as cE, TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID as cF, TANGLE_INTEGRATIONS_CATALOG_SOURCE as cG, type TangleCatalogExecutorInvocation as cH, type TangleCatalogExecutorProviderOptions as cI, type TangleCatalogHttpExecutorInvocation as cJ, type TangleCatalogHttpExecutorOptions as cK, type TangleCatalogRuntimeActionRequest as cL, type TangleCatalogRuntimeNodeServerOptions as cM, type TangleCatalogRuntimePackageManifest as cN, type TangleCatalogRuntimePackageManifestOptions as cO, type TangleCatalogRuntimePiece as cP, type TangleCatalogRuntimeRequest as cQ, type TangleCatalogTriggerInvocation as cR, type TangleIntegrationCatalogEntry as cS, type TangleIntegrationCatalogFreshnessOptions as cT, type TangleIntegrationCatalogFreshnessResult as cU, type TangleIntegrationContract as cV, type TangleIntegrationContractStatus as cW, type TangleIntegrationImplementationKind as cX, type TangleIntegrationInvokeInput as cY, type TangleIntegrationInvokeResult as cZ, TangleIntegrationsClient as c_, type IntegrationUserAction as ca, canonicalConnectorId, type IntegrationWebhookReceiverResult as cb, type IntegrationWorkflowDefinition as cc, IntegrationWorkflowRuntime as cd, type IntegrationWorkflowRuntimeHub as ce, type IntegrationWorkflowRuntimeOptions as cf, type IntegrationWorkflowStore as cg, type InvokeWithCapabilityRequest as ch, type IssueCapabilityRequest as ci, type IssuedIntegrationCapability as cj, type ManifestValidationIssue as ck, type ManifestValidationResult as cl, type McpCatalog as cm, type McpCatalogTool as cn, type MissingRequirementExplanation as co, composeIntegrationRegistry, type NormalizedIntegrationError as cp, type NormalizedIntegrationResult as cq, type OpenApiDocument as cr, type OpenApiOperation as cs, PROVIDER_PASSTHROUGH_ACTION as ct, type PlatformIntegrationPolicyPresetOptions as cu, type ProviderHttpRequestInput as cv, type ProviderPassthroughPolicy as cw, type RenderConsentOptions as cx, type SecretRef as cy, type StartAuthRequest as cz, buildIntegrationCatalogView as d, manifestToConnector as d$, type WorkspaceCapability as d0, type WorkspaceCapabilityDiscovery as d1, type WorkspaceToolSchema as d2, type WorkspaceTrigger as d3, adapterManifestsToConnectors as d4, assertValidIntegrationManifest as d5, auditIntegrationCatalogFreshness as d6, auditTangleIntegrationCatalogFreshness as d7, buildActivepiecesConnectors as d8, buildActivepiecesRuntimeRequest as d9, createIntegrationWorkflowRuntime as dA, createMockIntegrationProvider as dB, createPlatformIntegrationPolicyPreset as dC, createTangleCatalogExecutorProvider as dD, createTangleCatalogHttpExecutor as dE, createTangleCatalogRuntimeNodeRequestListener as dF, createTangleIntegrationsClient as dG, decodeIntegrationBridgePayload as dH, discoverWorkspaceCapabilities as dI, dispatchIntegrationInvocation as dJ, encodeIntegrationBridgePayload as dK, explainMissingRequirements as dL, extractActivepiecesPublicPieceCount as dM, extractExternalCatalogPublicCount as dN, getActivepiecesOverride as dO, healthcheckRequest as dP, importGraphqlConnector as dQ, importMcpConnector as dR, importOpenApiConnector as dS, inferIntegrationManifestFromTools as dT, integrationCoverageChecklistMarkdown as dU, invocationRequestFromEnvelope as dV, listActivepiecesCatalogEntries as dW, listIntegrationCoverageSpecs as dX, listTangleIntegrationCatalogEntries as dY, listTangleIntegrationCatalogRuntimePackages as dZ, listTangleIntegrationContracts as d_, buildApprovalRequest as da, buildCanonicalLaunchConnectors as db, buildIntegrationBridgeEnvironment as dc, buildIntegrationBridgePayload as dd, buildIntegrationCoverageConnectors as de, buildIntegrationInvocationEnvelope as df, buildTangleCatalogRuntimePackageManifest as dg, buildTangleCatalogRuntimeRequest as dh, buildTangleIntegrationCatalogConnectors as di, calendarExercisePlannerManifest as dj, canonicalActionConnectorId as dk, createActivepiecesExecutorProvider as dl, createActivepiecesHttpExecutor as dm, createApprovalBackedPolicyEngine as dn, createAuditingActionGuard as dp, createCatalogExecutorProvider as dq, createConnectionCredentialResolver as dr, createConnectorAdapterCatalogSource as ds, createConnectorAdapterProvider as dt, createCredentialBackedAdapterProvider as du, createDefaultIntegrationActionGuard as dv, createDefaultIntegrationPolicyEngine as dw, createGatewayCatalogProvider as dx, createHttpIntegrationProvider as dy, createIntegrationAuditEvent as dz, buildIntegrationToolCatalog as e, normalizeGatewayCatalog as e0, normalizeIntegrationError as e1, normalizeIntegrationResult as e2, parseIntegrationBridgeEnvironment as e3, receiveIntegrationWebhook as e4, redactApprovalRequest as e5, redactCapability as e6, redactIntegrationBridgePayload as e7, redactInvocationEnvelope as e8, renderApprovalCopy as e9, renderConsentSummary as ea, renderTangleCatalogRuntimePnpmAddCommand as eb, resolveConnectionCredentials as ec, resolveIntegrationApproval as ed, revokeConnection as ee, runIntegrationHealthcheck as ef, runIntegrationHealthchecks as eg, sanitizeAuditConnection as eh, sanitizeConnection as ei, signActivepiecesRuntimeRequest as ej, signCapability as ek, startTangleCatalogRuntimeNodeServer as el, statusForCode as em, storedEventToTriggerEvent as en, validateIntegrationInvocationEnvelope as eo, validateIntegrationManifest as ep, validateProviderPassthroughRequest as eq, verifyActivepiecesRuntimeSignature as er, verifyCapabilityToken as es, InMemoryIntegrationGrantStore as f, type IntegrationCapabilityBinding as g, type IntegrationGrant as h, integrationToolName as i, inferIntegrationSupportTier, type IntegrationGrantStore as j, type IntegrationManifest as k, type IntegrationManifestResolution as l, type IntegrationRequirement as m, type IntegrationRequirementMode as n, type IntegrationRequirementResolution as o, parseIntegrationToolName as p, type IntegrationRequirementStatus as q, IntegrationRuntime as r, searchIntegrationTools as s, summarizeIntegrationRegistry, toMcpTools as t, type IntegrationRuntimeHub as u, type IntegrationRuntimeOptions as v, type IntegrationSandboxBundle as w, createIntegrationRuntime as x, type TangleCatalogAuthResolverOptions as y, type TangleCatalogHttpAuthResolverOptions as z };
+export { type HealthcheckSpec as $, type TangleCatalogHttpAuthResolverRequest as A, type TangleCatalogInstalledPackageExecutorOptions as B, type TangleCatalogRuntimeHandlerOptions as C, type ComposeIntegrationRegistryOptions, type TangleCatalogRuntimeHttpRequest as D, type TangleCatalogRuntimeHttpResponse as E, type TangleCatalogRuntimeInvocation as F, type TangleCatalogRuntimeModuleAction as G, type TangleCatalogRuntimePackageCoverageOptions as H, type IntegrationCatalogView as I, type IntegrationCatalogSource, type IntegrationRegistry, type IntegrationRegistryConflict, type IntegrationRegistryEntry, type IntegrationRegistrySourceRef, type IntegrationRegistrySummary, type IntegrationSupportTier, type TangleCatalogRuntimePackageCoverageRow as J, auditTangleCatalogRuntimePackages as K, createTangleCatalogCredentialAuthResolver as L, type McpToolDefinition as M, createTangleCatalogHttpAuthResolver as N, createTangleCatalogInstalledPackageExecutor as O, createTangleCatalogRuntimeHandler as P, signTangleCatalogRuntimeRequest as Q, tangleCatalogAuthValue as R, verifyTangleCatalogRuntimeSignature as S, TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER as T, type ApiKeyAuthSpec as U, type ConsoleStep as V, type CredentialFieldSpec as W, type CredentialValidationInput as X, type CredentialValidationResult as Y, type CustomAuthSpec as Z, type HealthcheckPlan as _, type IntegrationToolDefinition as a, type GatewayCatalogProviderOptions as a$, type HmacAuthSpec as a0, INTEGRATION_FAMILIES as a1, type IntegrationAuthMode as a2, type IntegrationAuthSpec as a3, type IntegrationFamilyId as a4, type IntegrationFamilySpec as a5, type IntegrationLifecycleSpec as a6, type IntegrationPlannerHints as a7, type IntegrationSetupSpec as a8, type IntegrationSpec as a9, validateIntegrationSpec as aA, ACTIVEPIECES_OVERRIDES as aB, ACTIVEPIECES_PUBLIC_CATALOG_URL as aC, ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER as aD, type ActivepiecesCatalogAuthField as aE, type ActivepiecesCatalogEntry as aF, type ActivepiecesExecutorInvocation as aG, type ActivepiecesExecutorProviderOptions as aH, type ActivepiecesHttpExecutorOptions as aI, type ActivepiecesPieceOverride as aJ, type ActivepiecesRuntimeRequest as aK, ApprovalBackedPolicyEngine as aL, type ApprovalBackedPolicyOptions as aM, CANONICAL_INTEGRATION_ACTIONS as aN, type CanonicalIntegrationActionId as aO, type CanonicalLaunchConnectorOptions as aP, type CatalogExecutorInvocation as aQ, type CatalogExecutorProviderOptions as aR, type CompleteAuthRequest as aS, type ConnectionCredentialResolverOptions as aT, type ConnectorAdapterProviderOptions as aU, type ConsentSummary as aV, DEFAULT_INTEGRATION_BRIDGE_ENV as aW, DefaultIntegrationActionGuard as aX, type DiscoverWorkspaceCapabilitiesInput as aY, type GatewayCatalogAction as aZ, type GatewayCatalogEntry as a_, type IntegrationSpecStatus as aa, type IntegrationSpecValidationIssue as ab, type IntegrationSpecValidationResult as ac, type NoneAuthSpec as ad, type NormalizedPermission as ae, type OAuth2AuthSpec as af, type PermissionDescriptor as ag, type PostSetupCheck as ah, type Quirk as ai, type RenderSpecOptions as aj, type RenderedConsoleStep as ak, type ScopeDescriptor as al, assertValidIntegrationSpec as am, buildHealthcheckPlan as an, consoleStepsToText as ao, getIntegrationFamily as ap, getIntegrationSpec as aq, integrationSpecToConnector as ar, listExecutableIntegrationSpecs as as, listIntegrationSpecs as at, renderAgentToolDescription as au, renderConsoleSteps as av, renderRunbookMarkdown as aw, specAuthToConnectorAuth as ax, validateCredentialFormat as ay, validateCredentialSet as az, type IntegrationToolSearchFilters as b, type IntegrationProviderKind as b$, type GatewayCatalogTrigger as b0, type GraphqlOperationSpec as b1, type HttpIntegrationProviderOptions as b2, type ImportCatalogOptions as b3, InMemoryConnectionStore as b4, InMemoryIntegrationApprovalStore as b5, InMemoryIntegrationAuditStore as b6, InMemoryIntegrationEventStore as b7, InMemoryIntegrationHealthcheckStore as b8, InMemoryIntegrationIdempotencyStore as b9, type IntegrationConnection as bA, type IntegrationConnectionStore as bB, type IntegrationConnector as bC, type IntegrationConnectorAction as bD, type IntegrationConnectorCategory as bE, type IntegrationConnectorTrigger as bF, type IntegrationCoveragePriority as bG, type IntegrationCoverageSpec as bH, type IntegrationDataClass as bI, IntegrationError as bJ, type IntegrationEventStore as bK, type IntegrationGuardContext as bL, type IntegrationHealthcheckCheck as bM, type IntegrationHealthcheckResult as bN, type IntegrationHealthcheckStatus as bO, type IntegrationHealthcheckStore as bP, IntegrationHub as bQ, type IntegrationHubOptions as bR, type IntegrationIdempotencyRecord as bS, type IntegrationIdempotencyStore as bT, type IntegrationInvocationEnvelope as bU, type IntegrationInvocationEnvelopeValidationOptions as bV, type IntegrationPolicyDecision as bW, type IntegrationPolicyEffect as bX, type IntegrationPolicyEngine as bY, type IntegrationPolicyRule as bZ, type IntegrationProvider as b_, InMemoryIntegrationSecretStore as ba, InMemoryIntegrationWorkflowStore as bb, type InferIntegrationRequirementsOptions as bc, type InstalledIntegrationWorkflow as bd, type IntegrationActionGuard as be, type IntegrationActionPack as bf, type IntegrationActionRequest as bg, type IntegrationActionResult as bh, type IntegrationActionRisk as bi, type IntegrationActor as bj, type IntegrationApprovalFilter as bk, type IntegrationApprovalRecord as bl, type IntegrationApprovalRequest as bm, type IntegrationApprovalResolution as bn, type IntegrationApprovalStatus as bo, type IntegrationApprovalStore as bp, type IntegrationAuditEvent as bq, type IntegrationAuditEventType as br, type IntegrationAuditFilter as bs, type IntegrationAuditSink as bt, type IntegrationAuditStore as bu, buildDefaultIntegrationRegistry, type IntegrationBridgePayload as bv, type IntegrationBridgeToolBinding as bw, type IntegrationCapability as bx, type IntegrationCatalogFreshnessOptions as by, type IntegrationCatalogFreshnessResult as bz, type IntegrationToolSearchResult as c, type WorkspaceTrigger as c$, type IntegrationRateLimitDecision as c0, type IntegrationRateLimiter as c1, IntegrationSandboxHost as c2, type IntegrationSandboxHostHub as c3, type IntegrationSandboxHostOptions as c4, type IntegrationSecretStore as c5, type IntegrationTriggerEvent as c6, type IntegrationTriggerSubscription as c7, type IntegrationWebhookReceiverResult as c8, type IntegrationWorkflowDefinition as c9, type StoredIntegrationEvent as cA, TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID as cB, TANGLE_INTEGRATIONS_CATALOG_SOURCE as cC, type TangleCatalogExecutorInvocation as cD, type TangleCatalogExecutorProviderOptions as cE, type TangleCatalogHttpExecutorInvocation as cF, type TangleCatalogHttpExecutorOptions as cG, type TangleCatalogRuntimeActionRequest as cH, type TangleCatalogRuntimeNodeServerOptions as cI, type TangleCatalogRuntimePackageManifest as cJ, type TangleCatalogRuntimePackageManifestOptions as cK, type TangleCatalogRuntimePiece as cL, type TangleCatalogRuntimeRequest as cM, type TangleCatalogTriggerInvocation as cN, type TangleIntegrationCatalogEntry as cO, type TangleIntegrationCatalogFreshnessOptions as cP, type TangleIntegrationCatalogFreshnessResult as cQ, type TangleIntegrationContract as cR, type TangleIntegrationContractStatus as cS, type TangleIntegrationImplementationKind as cT, type TangleIntegrationInvokeInput as cU, type TangleIntegrationInvokeResult as cV, TangleIntegrationsClient as cW, type TangleIntegrationsClientOptions as cX, type WorkspaceCapability as cY, type WorkspaceCapabilityDiscovery as cZ, type WorkspaceToolSchema as c_, IntegrationWorkflowRuntime as ca, canonicalConnectorId, type IntegrationWorkflowRuntimeHub as cb, type IntegrationWorkflowRuntimeOptions as cc, type IntegrationWorkflowStore as cd, type InvokeWithCapabilityRequest as ce, type IssueCapabilityRequest as cf, type IssuedIntegrationCapability as cg, type ManifestValidationIssue as ch, type ManifestValidationResult as ci, type McpCatalog as cj, type McpCatalogTool as ck, type MissingRequirementExplanation as cl, type NormalizedIntegrationResult as cm, type OpenApiDocument as cn, type OpenApiOperation as co, composeIntegrationRegistry, PROVIDER_PASSTHROUGH_ACTION as cp, type PlatformIntegrationPolicyPresetOptions as cq, type ProviderHttpRequestInput as cr, type ProviderPassthroughPolicy as cs, type RenderConsentOptions as ct, type SecretRef as cu, type StartAuthRequest as cv, type StartAuthResult as cw, type StartedTangleCatalogRuntimeNodeServer as cx, StaticIntegrationPolicyEngine as cy, type StaticIntegrationPolicyOptions as cz, buildIntegrationCatalogView as d, parseIntegrationBridgeEnvironment as d$, adapterManifestsToConnectors as d0, assertValidIntegrationManifest as d1, auditIntegrationCatalogFreshness as d2, auditTangleIntegrationCatalogFreshness as d3, buildActivepiecesConnectors as d4, buildActivepiecesRuntimeRequest as d5, buildApprovalRequest as d6, buildCanonicalLaunchConnectors as d7, buildIntegrationBridgeEnvironment as d8, buildIntegrationBridgePayload as d9, createTangleCatalogHttpExecutor as dA, createTangleCatalogRuntimeNodeRequestListener as dB, createTangleIntegrationsClient as dC, decodeIntegrationBridgePayload as dD, discoverWorkspaceCapabilities as dE, dispatchIntegrationInvocation as dF, encodeIntegrationBridgePayload as dG, explainMissingRequirements as dH, extractActivepiecesPublicPieceCount as dI, extractExternalCatalogPublicCount as dJ, filterDiscoveryByWorkspaceScopes as dK, getActivepiecesOverride as dL, healthcheckRequest as dM, importGraphqlConnector as dN, importMcpConnector as dO, importOpenApiConnector as dP, inferIntegrationManifestFromTools as dQ, integrationCoverageChecklistMarkdown as dR, invocationRequestFromEnvelope as dS, listActivepiecesCatalogEntries as dT, listIntegrationCoverageSpecs as dU, listTangleIntegrationCatalogEntries as dV, listTangleIntegrationCatalogRuntimePackages as dW, listTangleIntegrationContracts as dX, manifestToConnector as dY, normalizeGatewayCatalog as dZ, normalizeIntegrationResult as d_, buildIntegrationCoverageConnectors as da, buildIntegrationInvocationEnvelope as db, buildTangleCatalogRuntimePackageManifest as dc, buildTangleCatalogRuntimeRequest as dd, buildTangleIntegrationCatalogConnectors as de, calendarExercisePlannerManifest as df, canonicalActionConnectorId as dg, createActivepiecesExecutorProvider as dh, createActivepiecesHttpExecutor as di, createApprovalBackedPolicyEngine as dj, createAuditingActionGuard as dk, createCatalogExecutorProvider as dl, createConnectionCredentialResolver as dm, createConnectorAdapterCatalogSource as dn, createConnectorAdapterProvider as dp, createCredentialBackedAdapterProvider as dq, createDefaultIntegrationActionGuard as dr, createDefaultIntegrationPolicyEngine as ds, createGatewayCatalogProvider as dt, createHttpIntegrationProvider as du, createIntegrationAuditEvent as dv, createIntegrationWorkflowRuntime as dw, createMockIntegrationProvider as dx, createPlatformIntegrationPolicyPreset as dy, createTangleCatalogExecutorProvider as dz, buildIntegrationToolCatalog as e, receiveIntegrationWebhook as e0, redactApprovalRequest as e1, redactCapability as e2, redactIntegrationBridgePayload as e3, redactInvocationEnvelope as e4, renderApprovalCopy as e5, renderConsentSummary as e6, renderTangleCatalogRuntimePnpmAddCommand as e7, resolveConnectionCredentials as e8, resolveIntegrationApproval as e9, revokeConnection as ea, runIntegrationHealthcheck as eb, runIntegrationHealthchecks as ec, sanitizeAuditConnection as ed, sanitizeConnection as ee, signActivepiecesRuntimeRequest as ef, signCapability as eg, startTangleCatalogRuntimeNodeServer as eh, storedEventToTriggerEvent as ei, validateIntegrationInvocationEnvelope as ej, validateIntegrationManifest as ek, validateProviderPassthroughRequest as el, verifyActivepiecesRuntimeSignature as em, verifyCapabilityToken as en, InMemoryIntegrationGrantStore as f, type IntegrationCapabilityBinding as g, type IntegrationGrant as h, integrationToolName as i, inferIntegrationSupportTier, type IntegrationGrantStore as j, type IntegrationManifest as k, type IntegrationManifestResolution as l, type IntegrationRequirement as m, type IntegrationRequirementMode as n, type IntegrationRequirementResolution as o, parseIntegrationToolName as p, type IntegrationRequirementStatus as q, IntegrationRuntime as r, searchIntegrationTools as s, summarizeIntegrationRegistry, toMcpTools as t, type IntegrationRuntimeHub as u, type IntegrationRuntimeOptions as v, type IntegrationSandboxBundle as w, createIntegrationRuntime as x, type TangleCatalogAuthResolverOptions as y, type TangleCatalogHttpAuthResolverOptions as z };

package/dist/registry.js

@@ -4,11 +4,15 @@ import {
   composeIntegrationRegistry,
   inferIntegrationSupportTier,
   summarizeIntegrationRegistry
-} from "./chunk-ALCIWTIR.js";
+} from "./chunk-UWRYFPJW.js";
+import "./chunk-SVQ4PHDZ.js";
+import "./chunk-H4XYLS7T.js";
 import "./chunk-4JQ754PA.js";
 import "./chunk-376UBTNB.js";
-import "./chunk-GA4VTE3U.js";
+import "./chunk-JU25UDN2.js";
 import "./chunk-2TW2QKGZ.js";
+import "./chunk-P24T3MLM.js";
+import "./chunk-ATYHZXLL.js";
 export {
   buildDefaultIntegrationRegistry,
   canonicalConnectorId,