@tangle-network/agent-integrations 0.27.0 → 0.29.0

package/dist/registry.d.ts

@@ -1,4 +1,5 @@
 import { C as ConnectorAdapter, R as ResolvedDataSource, d as ConnectorCredentials } from './tangle-id-CTU4kGId.js';
+import './errors-Bg3_rxnQ.js';
 import './connect/index.js';
 import './middleware/index.js';
 import './connectors/index.js';
@@ -450,6 +451,245 @@ declare class TangleIntegrationsClient {
 }
 declare function createTangleIntegrationsClient(options: TangleIntegrationsClientOptions): TangleIntegrationsClient;
 
+type IntegrationHealthcheckStatus = 'healthy' | 'degraded' | 'unhealthy' | 'unknown';
+interface IntegrationHealthcheckCheck {
+    id: string;
+    status: IntegrationHealthcheckStatus;
+    message: string;
+    metadata?: Record<string, unknown>;
+}
+interface IntegrationHealthcheckResult {
+    connectionId: string;
+    providerId: string;
+    connectorId: string;
+    status: IntegrationHealthcheckStatus;
+    checkedAt: string;
+    checks: IntegrationHealthcheckCheck[];
+    metadata?: Record<string, unknown>;
+}
+interface IntegrationHealthcheckStore {
+    put(result: IntegrationHealthcheckResult): Promise<void> | void;
+    get(connectionId: string): Promise<IntegrationHealthcheckResult | undefined> | IntegrationHealthcheckResult | undefined;
+    list(): Promise<IntegrationHealthcheckResult[]> | IntegrationHealthcheckResult[];
+}
+declare class InMemoryIntegrationHealthcheckStore implements IntegrationHealthcheckStore {
+    private readonly results;
+    put(result: IntegrationHealthcheckResult): void;
+    get(connectionId: string): IntegrationHealthcheckResult | undefined;
+    list(): IntegrationHealthcheckResult[];
+}
+declare function runIntegrationHealthcheck(input: {
+    connection: IntegrationConnection;
+    connector?: IntegrationConnector;
+    registry?: IntegrationRegistry;
+    test?: (connection: IntegrationConnection, connector: IntegrationConnector) => Promise<IntegrationActionResult | boolean> | IntegrationActionResult | boolean;
+    audit?: IntegrationAuditSink;
+    now?: () => Date;
+}): Promise<IntegrationHealthcheckResult>;
+declare function runIntegrationHealthchecks(input: {
+    connections: IntegrationConnection[];
+    registry?: IntegrationRegistry;
+    store?: IntegrationHealthcheckStore;
+    audit?: IntegrationAuditSink;
+    now?: () => Date;
+    test?: (connection: IntegrationConnection, connector: IntegrationConnector) => Promise<IntegrationActionResult | boolean> | IntegrationActionResult | boolean;
+}): Promise<IntegrationHealthcheckResult[]>;
+declare function healthcheckRequest(action?: string): IntegrationActionRequest;
+
+/**
+ * @stable Integration Hub consumer client.
+ *
+ * The third client-shaped surface a product needs, alongside the two that
+ * already ship:
+ *
+ *   - `createTangleIntegrationsClient` (`client.ts`) — the *invoke* client.
+ *     Capability-token auth, runs INSIDE a sandbox / generated app, single
+ *     endpoint `/v1/integrations/invoke`.
+ *   - `startConnectFlow` / `finishConnectFlow` (`connect/index.ts`) — the
+ *     *user-consent* flow, mirrors `/cross-site/*`.
+ *   - **this** — the S2S *management* client. A product BACKEND (blueprint-
+ *     agent, sandbox, gtm-agent, tax-agent, legal-agent, evals, …) drives the
+ *     `/v1/integrations/{resolve-manifest,grants,capabilities/bundle,
+ *     healthchecks/run}` management surface on `id.tangle.tools` on behalf of
+ *     an identified user.
+ *
+ * Every consumer needs the identical client — the wire protocol, the
+ * `{ success, data }` envelope, the auth header shape are all platform-owned.
+ * Re-implementing a bespoke fetch loop per product forks the protocol and the
+ * copies drift. This module is that shared implementation. It mirrors the
+ * `connect/index.ts` design rule one-for-one: DO NOT invent the wire protocol
+ * — speak exactly what `products/platform/api/src/routes/integrations.ts`
+ * serves.
+ *
+ * Two auth modes — the route layer (`authMiddleware`) accepts either:
+ *
+ *   - `service`  — a `svc_*` service token + `X-Service-Name`. The acting
+ *     user travels in `X-Platform-User-Id`. The platform honors that header
+ *     only for service tokens whose `SERVICE_SCOPES` set contains
+ *     `impersonate:user`; a token without it is rejected (403). Reaches the
+ *     four management paths the platform allowlists for service tokens.
+ *   - `user-key` — a per-user `sk-tan-*` API key (minted via the connect
+ *     flow). The key identifies the user; no impersonation header. Reaches
+ *     every route the user themselves can.
+ *
+ * The capability-token `invoke` endpoint is intentionally NOT exposed here —
+ * that is `createTangleIntegrationsClient`'s job and uses a different auth.
+ */
+
+type IntegrationHubAuth = {
+    mode: 'service';
+    /** The `svc_*` token issued to this product. */
+    serviceToken: string;
+    /** Registered service name — sent as `X-Service-Name`. Required
+     *  because one token may be shared across services, in which case the
+     *  platform demands the header to disambiguate. */
+    serviceName: string;
+} | {
+    mode: 'user-key';
+    /** A per-user `sk-tan-*` key bound to the acting user. */
+    apiKey: string;
+};
+interface IntegrationHubClientOptions {
+    /** The product / consumer identifier (e.g. `blueprint-agent`). Sent as the
+     *  `product` field of resolve-manifest calls; recorded platform-side. */
+    product: string;
+    /** Service-token or per-user-key auth. */
+    auth: IntegrationHubAuth;
+    /** Platform base URL. Defaults to `https://id.tangle.tools`. */
+    endpoint?: string;
+    /** Injected for tests. Defaults to the global `fetch`. */
+    fetchImpl?: typeof fetch;
+    /** Per-request timeout in ms. Default 10_000. */
+    timeoutMs?: number;
+    /** Max attempts on transient (network / 502 / 503 / 504) failures.
+     *  Default 2 — i.e. one retry. */
+    maxAttempts?: number;
+}
+/** Thrown for every non-2xx response and every transport failure. Carries the
+ *  HTTP status and the platform error code so callers can branch precisely
+ *  (`403` + `impersonate` → the service token lacks the scope; `409` /
+ *  `missing_connection` → prompt the user to connect). */
+declare class IntegrationHubRequestError extends Error {
+    readonly name = "IntegrationHubRequestError";
+    /** HTTP status, or 0 for a network-level failure. */
+    readonly status: number;
+    /** Platform error code (`VALIDATION_ERROR`, `scope_missing`, …) or
+     *  `network_error` / `http_error` when no structured code was returned. */
+    readonly code: string;
+    /** `METHOD /path` the request targeted. */
+    readonly endpoint: string;
+    /** True when the failure class is transient and a retry could succeed. */
+    readonly retryable: boolean;
+    constructor(input: {
+        status: number;
+        code: string;
+        message: string;
+        endpoint: string;
+        retryable: boolean;
+    });
+}
+interface ResolveManifestInput {
+    /** The acting user — the connection owner. */
+    userId: string;
+    manifest: IntegrationManifest;
+    /** Overrides the client-level `product` for this call. */
+    product?: string;
+}
+interface CreateGrantsInput {
+    /** The acting user — the connection owner. */
+    userId: string;
+    /** Who the grant is FOR (the sandbox / agent / app that will invoke). */
+    grantee: IntegrationActor;
+    manifest: IntegrationManifest;
+    metadata?: Record<string, unknown>;
+}
+interface ListGrantsInput {
+    /** The acting user — the connection owner. */
+    userId: string;
+    /** Optional grantee filter; both fields travel together as query params. */
+    grantee?: IntegrationActor;
+}
+interface MintCapabilityBundleInput {
+    /** The acting user — must own every connection behind the grants. */
+    userId: string;
+    /** Who the capability bundle is issued TO (the sandbox / agent process). */
+    subject: IntegrationActor;
+    /** Mint from every grant of a manifest … */
+    manifestId?: string;
+    /** … or from an explicit grant id list. Exactly one of the two is required. */
+    grantIds?: string[];
+    grantee?: IntegrationActor;
+    /** Bundle TTL in ms. Platform clamps to [1s, 60m]; default 15m. */
+    ttlMs?: number;
+}
+interface CapabilityBundleResult {
+    bundle: IntegrationSandboxBundle;
+    /** Bridge environment variables to inject into the sandbox process —
+     *  `buildIntegrationBridgeEnvironment(bundle)`, computed platform-side. */
+    env: Record<string, string>;
+}
+interface CheckConnectorInput {
+    /** The acting user. */
+    userId: string;
+    /** Connector to probe — `github`, `google-calendar`, `tangle-id`, … */
+    connectorId: string;
+    /** Defaults to `read`. */
+    mode?: IntegrationRequirementMode;
+    requiredScopes?: string[];
+    requiredActions?: string[];
+}
+interface CheckConnectorResult {
+    /** True when the user has an active connection satisfying the requirement. */
+    connected: boolean;
+    /** The satisfying connection, present iff `connected`. */
+    connection?: IntegrationConnection;
+    /** The full requirement resolution — status, missing scopes/actions, message. */
+    resolution: IntegrationRequirementResolution;
+}
+/**
+ * S2S management client for the `id.tangle.tools` integration hub. One per
+ * product; methods are stateless and safe to call concurrently.
+ */
+declare class IntegrationHubClient {
+    private readonly endpoint;
+    private readonly product;
+    private readonly auth;
+    private readonly fetchImpl;
+    private readonly timeoutMs;
+    private readonly maxAttempts;
+    constructor(options: IntegrationHubClientOptions);
+    /**
+     * Resolve a manifest against a user's connections. The returned
+     * `ready` / `missing` split is the canonical way to ask "does this user
+     * have the connections this work needs" — the raw connection list is not
+     * reachable by a service token by design.
+     */
+    resolveManifest(input: ResolveManifestInput): Promise<IntegrationManifestResolution>;
+    /**
+     * Convenience over {@link resolveManifest} — probe a single connector and
+     * get back a boolean plus the satisfying connection. The Surface-A quest
+     * primitive ("is the user's GitHub linked?").
+     */
+    checkConnector(input: CheckConnectorInput): Promise<CheckConnectorResult>;
+    /** Create grants for every satisfiable requirement of a manifest. The
+     *  platform rejects the call if any non-optional requirement is missing a
+     *  connection. */
+    createGrants(input: CreateGrantsInput): Promise<IntegrationGrant[]>;
+    /** List the acting user's grants, optionally filtered to one grantee. */
+    listGrants(input: ListGrantsInput): Promise<IntegrationGrant[]>;
+    /** Mint a short-lived capability bundle for a sandbox / agent process.
+     *  Provider credentials never leave the platform — the bundle carries only
+     *  scoped, expiring capability tokens. */
+    mintCapabilityBundle(input: MintCapabilityBundleInput): Promise<CapabilityBundleResult>;
+    /** Run live healthchecks across all of the acting user's connections. */
+    runHealthchecks(input: {
+        userId: string;
+    }): Promise<IntegrationHealthcheckResult[]>;
+    private buildHeaders;
+    private request;
+}
+declare function createIntegrationHubClient(options: IntegrationHubClientOptions): IntegrationHubClient;
+
 interface ConsentSummary {
     title: string;
     body: string;
@@ -675,37 +915,6 @@ declare function filterDiscoveryByWorkspaceScopes(discovery: WorkspaceCapability
     denyByDefault?: boolean;
 }): WorkspaceCapabilityDiscovery;
 
-type IntegrationErrorCode = 'missing_connection' | 'missing_grant' | 'approval_required' | 'approval_denied' | 'connection_revoked' | 'connection_expired' | 'scope_missing' | 'action_denied' | 'action_not_found' | 'trigger_not_found' | 'provider_rate_limited' | 'provider_auth_failed' | 'provider_unavailable' | 'provider_error' | 'capability_expired' | 'capability_invalid' | 'manifest_invalid' | 'passthrough_disabled' | 'input_invalid' | 'unknown';
-interface IntegrationUserAction {
-    type: 'connect' | 'reconnect' | 'approve' | 'retry' | 'contact_support' | 'change_request';
-    label: string;
-    connectorId?: string;
-    approvalId?: string;
-}
-declare class IntegrationRuntimeError extends Error {
-    readonly code: IntegrationErrorCode;
-    readonly status: number;
-    readonly userAction?: IntegrationUserAction;
-    readonly metadata?: Record<string, unknown>;
-    constructor(input: {
-        code: IntegrationErrorCode;
-        message: string;
-        status?: number;
-        userAction?: IntegrationUserAction;
-        metadata?: Record<string, unknown>;
-    });
-}
-interface NormalizedIntegrationError {
-    ok: false;
-    code: IntegrationErrorCode;
-    message: string;
-    status: number;
-    userAction?: IntegrationUserAction;
-    metadata?: Record<string, unknown>;
-}
-declare function normalizeIntegrationError(error: unknown): NormalizedIntegrationError;
-declare function statusForCode(code: IntegrationErrorCode): number;
-
 interface IntegrationWorkflowDefinition {
     id: string;
     title?: string;
@@ -858,51 +1067,6 @@ declare class DefaultIntegrationActionGuard implements IntegrationActionGuard {
 }
 declare function createDefaultIntegrationActionGuard(options?: ConstructorParameters<typeof DefaultIntegrationActionGuard>[0]): DefaultIntegrationActionGuard;
 
-type IntegrationHealthcheckStatus = 'healthy' | 'degraded' | 'unhealthy' | 'unknown';
-interface IntegrationHealthcheckCheck {
-    id: string;
-    status: IntegrationHealthcheckStatus;
-    message: string;
-    metadata?: Record<string, unknown>;
-}
-interface IntegrationHealthcheckResult {
-    connectionId: string;
-    providerId: string;
-    connectorId: string;
-    status: IntegrationHealthcheckStatus;
-    checkedAt: string;
-    checks: IntegrationHealthcheckCheck[];
-    metadata?: Record<string, unknown>;
-}
-interface IntegrationHealthcheckStore {
-    put(result: IntegrationHealthcheckResult): Promise<void> | void;
-    get(connectionId: string): Promise<IntegrationHealthcheckResult | undefined> | IntegrationHealthcheckResult | undefined;
-    list(): Promise<IntegrationHealthcheckResult[]> | IntegrationHealthcheckResult[];
-}
-declare class InMemoryIntegrationHealthcheckStore implements IntegrationHealthcheckStore {
-    private readonly results;
-    put(result: IntegrationHealthcheckResult): void;
-    get(connectionId: string): IntegrationHealthcheckResult | undefined;
-    list(): IntegrationHealthcheckResult[];
-}
-declare function runIntegrationHealthcheck(input: {
-    connection: IntegrationConnection;
-    connector?: IntegrationConnector;
-    registry?: IntegrationRegistry;
-    test?: (connection: IntegrationConnection, connector: IntegrationConnector) => Promise<IntegrationActionResult | boolean> | IntegrationActionResult | boolean;
-    audit?: IntegrationAuditSink;
-    now?: () => Date;
-}): Promise<IntegrationHealthcheckResult>;
-declare function runIntegrationHealthchecks(input: {
-    connections: IntegrationConnection[];
-    registry?: IntegrationRegistry;
-    store?: IntegrationHealthcheckStore;
-    audit?: IntegrationAuditSink;
-    now?: () => Date;
-    test?: (connection: IntegrationConnection, connector: IntegrationConnector) => Promise<IntegrationActionResult | boolean> | IntegrationActionResult | boolean;
-}): Promise<IntegrationHealthcheckResult[]>;
-declare function healthcheckRequest(action?: string): IntegrationActionRequest;
-
 interface ManifestValidationIssue {
     path: string;
     message: string;
@@ -2162,4 +2326,4 @@ declare function createHttpIntegrationProvider(options: HttpIntegrationProviderO
 declare function signCapability(capability: IntegrationCapability, secret: string): string;
 declare function verifyCapabilityToken(token: string, secret: string): IntegrationCapability;
 
-export { type HealthcheckSpec as $, type TangleCatalogHttpAuthResolverRequest as A, type TangleCatalogInstalledPackageExecutorOptions as B, type TangleCatalogRuntimeHandlerOptions as C, type ComposeIntegrationRegistryOptions, type TangleCatalogRuntimeHttpRequest as D, type TangleCatalogRuntimeHttpResponse as E, type TangleCatalogRuntimeInvocation as F, type TangleCatalogRuntimeModuleAction as G, type TangleCatalogRuntimePackageCoverageOptions as H, type IntegrationCatalogView as I, type IntegrationCatalogSource, type IntegrationRegistry, type IntegrationRegistryConflict, type IntegrationRegistryEntry, type IntegrationRegistrySourceRef, type IntegrationRegistrySummary, type IntegrationSupportTier, type TangleCatalogRuntimePackageCoverageRow as J, auditTangleCatalogRuntimePackages as K, createTangleCatalogCredentialAuthResolver as L, type McpToolDefinition as M, createTangleCatalogHttpAuthResolver as N, createTangleCatalogInstalledPackageExecutor as O, createTangleCatalogRuntimeHandler as P, signTangleCatalogRuntimeRequest as Q, tangleCatalogAuthValue as R, verifyTangleCatalogRuntimeSignature as S, TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER as T, type ApiKeyAuthSpec as U, type ConsoleStep as V, type CredentialFieldSpec as W, type CredentialValidationInput as X, type CredentialValidationResult as Y, type CustomAuthSpec as Z, type HealthcheckPlan as _, type IntegrationToolDefinition as a, type GatewayCatalogProviderOptions as a$, type HmacAuthSpec as a0, INTEGRATION_FAMILIES as a1, type IntegrationAuthMode as a2, type IntegrationAuthSpec as a3, type IntegrationFamilyId as a4, type IntegrationFamilySpec as a5, type IntegrationLifecycleSpec as a6, type IntegrationPlannerHints as a7, type IntegrationSetupSpec as a8, type IntegrationSpec as a9, validateIntegrationSpec as aA, ACTIVEPIECES_OVERRIDES as aB, ACTIVEPIECES_PUBLIC_CATALOG_URL as aC, ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER as aD, type ActivepiecesCatalogAuthField as aE, type ActivepiecesCatalogEntry as aF, type ActivepiecesExecutorInvocation as aG, type ActivepiecesExecutorProviderOptions as aH, type ActivepiecesHttpExecutorOptions as aI, type ActivepiecesPieceOverride as aJ, type ActivepiecesRuntimeRequest as aK, ApprovalBackedPolicyEngine as aL, type ApprovalBackedPolicyOptions as aM, CANONICAL_INTEGRATION_ACTIONS as aN, type CanonicalIntegrationActionId as aO, type CanonicalLaunchConnectorOptions as aP, type CatalogExecutorInvocation as aQ, type CatalogExecutorProviderOptions as aR, type CompleteAuthRequest as aS, type ConnectionCredentialResolverOptions as aT, type ConnectorAdapterProviderOptions as aU, type ConsentSummary as aV, DEFAULT_INTEGRATION_BRIDGE_ENV as aW, DefaultIntegrationActionGuard as aX, type DiscoverWorkspaceCapabilitiesInput as aY, type GatewayCatalogAction as aZ, type GatewayCatalogEntry as a_, type IntegrationSpecStatus as aa, type IntegrationSpecValidationIssue as ab, type IntegrationSpecValidationResult as ac, type NoneAuthSpec as ad, type NormalizedPermission as ae, type OAuth2AuthSpec as af, type PermissionDescriptor as ag, type PostSetupCheck as ah, type Quirk as ai, type RenderSpecOptions as aj, type RenderedConsoleStep as ak, type ScopeDescriptor as al, assertValidIntegrationSpec as am, buildHealthcheckPlan as an, consoleStepsToText as ao, getIntegrationFamily as ap, getIntegrationSpec as aq, integrationSpecToConnector as ar, listExecutableIntegrationSpecs as as, listIntegrationSpecs as at, renderAgentToolDescription as au, renderConsoleSteps as av, renderRunbookMarkdown as aw, specAuthToConnectorAuth as ax, validateCredentialFormat as ay, validateCredentialSet as az, type IntegrationToolSearchFilters as b, type IntegrationProvider as b$, type GatewayCatalogTrigger as b0, type GraphqlOperationSpec as b1, type HttpIntegrationProviderOptions as b2, type ImportCatalogOptions as b3, InMemoryConnectionStore as b4, InMemoryIntegrationApprovalStore as b5, InMemoryIntegrationAuditStore as b6, InMemoryIntegrationEventStore as b7, InMemoryIntegrationHealthcheckStore as b8, InMemoryIntegrationIdempotencyStore as b9, type IntegrationConnection as bA, type IntegrationConnectionStore as bB, type IntegrationConnector as bC, type IntegrationConnectorAction as bD, type IntegrationConnectorCategory as bE, type IntegrationConnectorTrigger as bF, type IntegrationCoveragePriority as bG, type IntegrationCoverageSpec as bH, type IntegrationDataClass as bI, IntegrationError as bJ, type IntegrationErrorCode as bK, type IntegrationEventStore as bL, type IntegrationGuardContext as bM, type IntegrationHealthcheckCheck as bN, type IntegrationHealthcheckResult as bO, type IntegrationHealthcheckStatus as bP, type IntegrationHealthcheckStore as bQ, IntegrationHub as bR, type IntegrationHubOptions as bS, type IntegrationIdempotencyRecord as bT, type IntegrationIdempotencyStore as bU, type IntegrationInvocationEnvelope as bV, type IntegrationInvocationEnvelopeValidationOptions as bW, type IntegrationPolicyDecision as bX, type IntegrationPolicyEffect as bY, type IntegrationPolicyEngine as bZ, type IntegrationPolicyRule as b_, InMemoryIntegrationSecretStore as ba, InMemoryIntegrationWorkflowStore as bb, type InferIntegrationRequirementsOptions as bc, type InstalledIntegrationWorkflow as bd, type IntegrationActionGuard as be, type IntegrationActionPack as bf, type IntegrationActionRequest as bg, type IntegrationActionResult as bh, type IntegrationActionRisk as bi, type IntegrationActor as bj, type IntegrationApprovalFilter as bk, type IntegrationApprovalRecord as bl, type IntegrationApprovalRequest as bm, type IntegrationApprovalResolution as bn, type IntegrationApprovalStatus as bo, type IntegrationApprovalStore as bp, type IntegrationAuditEvent as bq, type IntegrationAuditEventType as br, type IntegrationAuditFilter as bs, type IntegrationAuditSink as bt, type IntegrationAuditStore as bu, buildDefaultIntegrationRegistry, type IntegrationBridgePayload as bv, type IntegrationBridgeToolBinding as bw, type IntegrationCapability as bx, type IntegrationCatalogFreshnessOptions as by, type IntegrationCatalogFreshnessResult as bz, type IntegrationToolSearchResult as c, type TangleIntegrationsClientOptions as c$, type IntegrationProviderKind as c0, type IntegrationRateLimitDecision as c1, type IntegrationRateLimiter as c2, IntegrationRuntimeError as c3, IntegrationSandboxHost as c4, type IntegrationSandboxHostHub as c5, type IntegrationSandboxHostOptions as c6, type IntegrationSecretStore as c7, type IntegrationTriggerEvent as c8, type IntegrationTriggerSubscription as c9, type StartAuthResult as cA, type StartedTangleCatalogRuntimeNodeServer as cB, StaticIntegrationPolicyEngine as cC, type StaticIntegrationPolicyOptions as cD, type StoredIntegrationEvent as cE, TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID as cF, TANGLE_INTEGRATIONS_CATALOG_SOURCE as cG, type TangleCatalogExecutorInvocation as cH, type TangleCatalogExecutorProviderOptions as cI, type TangleCatalogHttpExecutorInvocation as cJ, type TangleCatalogHttpExecutorOptions as cK, type TangleCatalogRuntimeActionRequest as cL, type TangleCatalogRuntimeNodeServerOptions as cM, type TangleCatalogRuntimePackageManifest as cN, type TangleCatalogRuntimePackageManifestOptions as cO, type TangleCatalogRuntimePiece as cP, type TangleCatalogRuntimeRequest as cQ, type TangleCatalogTriggerInvocation as cR, type TangleIntegrationCatalogEntry as cS, type TangleIntegrationCatalogFreshnessOptions as cT, type TangleIntegrationCatalogFreshnessResult as cU, type TangleIntegrationContract as cV, type TangleIntegrationContractStatus as cW, type TangleIntegrationImplementationKind as cX, type TangleIntegrationInvokeInput as cY, type TangleIntegrationInvokeResult as cZ, TangleIntegrationsClient as c_, type IntegrationUserAction as ca, canonicalConnectorId, type IntegrationWebhookReceiverResult as cb, type IntegrationWorkflowDefinition as cc, IntegrationWorkflowRuntime as cd, type IntegrationWorkflowRuntimeHub as ce, type IntegrationWorkflowRuntimeOptions as cf, type IntegrationWorkflowStore as cg, type InvokeWithCapabilityRequest as ch, type IssueCapabilityRequest as ci, type IssuedIntegrationCapability as cj, type ManifestValidationIssue as ck, type ManifestValidationResult as cl, type McpCatalog as cm, type McpCatalogTool as cn, type MissingRequirementExplanation as co, composeIntegrationRegistry, type NormalizedIntegrationError as cp, type NormalizedIntegrationResult as cq, type OpenApiDocument as cr, type OpenApiOperation as cs, PROVIDER_PASSTHROUGH_ACTION as ct, type PlatformIntegrationPolicyPresetOptions as cu, type ProviderHttpRequestInput as cv, type ProviderPassthroughPolicy as cw, type RenderConsentOptions as cx, type SecretRef as cy, type StartAuthRequest as cz, buildIntegrationCatalogView as d, listTangleIntegrationContracts as d$, type WorkspaceCapability as d0, type WorkspaceCapabilityDiscovery as d1, type WorkspaceToolSchema as d2, type WorkspaceTrigger as d3, adapterManifestsToConnectors as d4, assertValidIntegrationManifest as d5, auditIntegrationCatalogFreshness as d6, auditTangleIntegrationCatalogFreshness as d7, buildActivepiecesConnectors as d8, buildActivepiecesRuntimeRequest as d9, createIntegrationWorkflowRuntime as dA, createMockIntegrationProvider as dB, createPlatformIntegrationPolicyPreset as dC, createTangleCatalogExecutorProvider as dD, createTangleCatalogHttpExecutor as dE, createTangleCatalogRuntimeNodeRequestListener as dF, createTangleIntegrationsClient as dG, decodeIntegrationBridgePayload as dH, discoverWorkspaceCapabilities as dI, dispatchIntegrationInvocation as dJ, encodeIntegrationBridgePayload as dK, explainMissingRequirements as dL, extractActivepiecesPublicPieceCount as dM, extractExternalCatalogPublicCount as dN, filterDiscoveryByWorkspaceScopes as dO, getActivepiecesOverride as dP, healthcheckRequest as dQ, importGraphqlConnector as dR, importMcpConnector as dS, importOpenApiConnector as dT, inferIntegrationManifestFromTools as dU, integrationCoverageChecklistMarkdown as dV, invocationRequestFromEnvelope as dW, listActivepiecesCatalogEntries as dX, listIntegrationCoverageSpecs as dY, listTangleIntegrationCatalogEntries as dZ, listTangleIntegrationCatalogRuntimePackages as d_, buildApprovalRequest as da, buildCanonicalLaunchConnectors as db, buildIntegrationBridgeEnvironment as dc, buildIntegrationBridgePayload as dd, buildIntegrationCoverageConnectors as de, buildIntegrationInvocationEnvelope as df, buildTangleCatalogRuntimePackageManifest as dg, buildTangleCatalogRuntimeRequest as dh, buildTangleIntegrationCatalogConnectors as di, calendarExercisePlannerManifest as dj, canonicalActionConnectorId as dk, createActivepiecesExecutorProvider as dl, createActivepiecesHttpExecutor as dm, createApprovalBackedPolicyEngine as dn, createAuditingActionGuard as dp, createCatalogExecutorProvider as dq, createConnectionCredentialResolver as dr, createConnectorAdapterCatalogSource as ds, createConnectorAdapterProvider as dt, createCredentialBackedAdapterProvider as du, createDefaultIntegrationActionGuard as dv, createDefaultIntegrationPolicyEngine as dw, createGatewayCatalogProvider as dx, createHttpIntegrationProvider as dy, createIntegrationAuditEvent as dz, buildIntegrationToolCatalog as e, manifestToConnector as e0, normalizeGatewayCatalog as e1, normalizeIntegrationError as e2, normalizeIntegrationResult as e3, parseIntegrationBridgeEnvironment as e4, receiveIntegrationWebhook as e5, redactApprovalRequest as e6, redactCapability as e7, redactIntegrationBridgePayload as e8, redactInvocationEnvelope as e9, renderApprovalCopy as ea, renderConsentSummary as eb, renderTangleCatalogRuntimePnpmAddCommand as ec, resolveConnectionCredentials as ed, resolveIntegrationApproval as ee, revokeConnection as ef, runIntegrationHealthcheck as eg, runIntegrationHealthchecks as eh, sanitizeAuditConnection as ei, sanitizeConnection as ej, signActivepiecesRuntimeRequest as ek, signCapability as el, startTangleCatalogRuntimeNodeServer as em, statusForCode as en, storedEventToTriggerEvent as eo, validateIntegrationInvocationEnvelope as ep, validateIntegrationManifest as eq, validateProviderPassthroughRequest as er, verifyActivepiecesRuntimeSignature as es, verifyCapabilityToken as et, InMemoryIntegrationGrantStore as f, type IntegrationCapabilityBinding as g, type IntegrationGrant as h, integrationToolName as i, inferIntegrationSupportTier, type IntegrationGrantStore as j, type IntegrationManifest as k, type IntegrationManifestResolution as l, type IntegrationRequirement as m, type IntegrationRequirementMode as n, type IntegrationRequirementResolution as o, parseIntegrationToolName as p, type IntegrationRequirementStatus as q, IntegrationRuntime as r, searchIntegrationTools as s, summarizeIntegrationRegistry, toMcpTools as t, type IntegrationRuntimeHub as u, type IntegrationRuntimeOptions as v, type IntegrationSandboxBundle as w, createIntegrationRuntime as x, type TangleCatalogAuthResolverOptions as y, type TangleCatalogHttpAuthResolverOptions as z };
+export { createTangleCatalogInstalledPackageExecutor as $, type CreateGrantsInput as A, type IntegrationHubAuth as B, type CapabilityBundleResult as C, type ComposeIntegrationRegistryOptions, IntegrationHubClient as D, type IntegrationHubClientOptions as E, IntegrationHubRequestError as F, type MintCapabilityBundleInput as G, createIntegrationHubClient as H, type IntegrationCatalogView as I, type IntegrationCatalogSource, type IntegrationRegistry, type IntegrationRegistryConflict, type IntegrationRegistryEntry, type IntegrationRegistrySourceRef, type IntegrationRegistrySummary, type IntegrationSupportTier, type TangleCatalogAuthResolverOptions as J, type TangleCatalogHttpAuthResolverOptions as K, type ListGrantsInput as L, type McpToolDefinition as M, type TangleCatalogHttpAuthResolverRequest as N, type TangleCatalogInstalledPackageExecutorOptions as O, type TangleCatalogRuntimeHandlerOptions as P, type TangleCatalogRuntimeHttpRequest as Q, type ResolveManifestInput as R, type TangleCatalogRuntimeHttpResponse as S, TANGLE_CATALOG_RUNTIME_SIGNATURE_HEADER as T, type TangleCatalogRuntimeInvocation as U, type TangleCatalogRuntimeModuleAction as V, type TangleCatalogRuntimePackageCoverageOptions as W, type TangleCatalogRuntimePackageCoverageRow as X, auditTangleCatalogRuntimePackages as Y, createTangleCatalogCredentialAuthResolver as Z, createTangleCatalogHttpAuthResolver as _, type IntegrationToolDefinition as a, type CanonicalLaunchConnectorOptions as a$, createTangleCatalogRuntimeHandler as a0, signTangleCatalogRuntimeRequest as a1, tangleCatalogAuthValue as a2, verifyTangleCatalogRuntimeSignature as a3, type ApiKeyAuthSpec as a4, type ConsoleStep as a5, type CredentialFieldSpec as a6, type CredentialValidationInput as a7, type CredentialValidationResult as a8, type CustomAuthSpec as a9, consoleStepsToText as aA, getIntegrationFamily as aB, getIntegrationSpec as aC, integrationSpecToConnector as aD, listExecutableIntegrationSpecs as aE, listIntegrationSpecs as aF, renderAgentToolDescription as aG, renderConsoleSteps as aH, renderRunbookMarkdown as aI, specAuthToConnectorAuth as aJ, validateCredentialFormat as aK, validateCredentialSet as aL, validateIntegrationSpec as aM, ACTIVEPIECES_OVERRIDES as aN, ACTIVEPIECES_PUBLIC_CATALOG_URL as aO, ACTIVEPIECES_RUNTIME_SIGNATURE_HEADER as aP, type ActivepiecesCatalogAuthField as aQ, type ActivepiecesCatalogEntry as aR, type ActivepiecesExecutorInvocation as aS, type ActivepiecesExecutorProviderOptions as aT, type ActivepiecesHttpExecutorOptions as aU, type ActivepiecesPieceOverride as aV, type ActivepiecesRuntimeRequest as aW, ApprovalBackedPolicyEngine as aX, type ApprovalBackedPolicyOptions as aY, CANONICAL_INTEGRATION_ACTIONS as aZ, type CanonicalIntegrationActionId as a_, type HealthcheckPlan as aa, type HealthcheckSpec as ab, type HmacAuthSpec as ac, INTEGRATION_FAMILIES as ad, type IntegrationAuthMode as ae, type IntegrationAuthSpec as af, type IntegrationFamilyId as ag, type IntegrationFamilySpec as ah, type IntegrationLifecycleSpec as ai, type IntegrationPlannerHints as aj, type IntegrationSetupSpec as ak, type IntegrationSpec as al, type IntegrationSpecStatus as am, type IntegrationSpecValidationIssue as an, type IntegrationSpecValidationResult as ao, type NoneAuthSpec as ap, type NormalizedPermission as aq, type OAuth2AuthSpec as ar, type PermissionDescriptor as as, type PostSetupCheck as at, type Quirk as au, type RenderSpecOptions as av, type RenderedConsoleStep as aw, type ScopeDescriptor as ax, assertValidIntegrationSpec as ay, buildHealthcheckPlan as az, type IntegrationToolSearchFilters as b, type IntegrationHealthcheckStore as b$, type CatalogExecutorInvocation as b0, type CatalogExecutorProviderOptions as b1, type CompleteAuthRequest as b2, type ConnectionCredentialResolverOptions as b3, type ConnectorAdapterProviderOptions as b4, type ConsentSummary as b5, DEFAULT_INTEGRATION_BRIDGE_ENV as b6, DefaultIntegrationActionGuard as b7, type DiscoverWorkspaceCapabilitiesInput as b8, type GatewayCatalogAction as b9, type IntegrationApprovalStatus as bA, type IntegrationApprovalStore as bB, type IntegrationAuditEvent as bC, type IntegrationAuditEventType as bD, type IntegrationAuditFilter as bE, type IntegrationAuditSink as bF, type IntegrationAuditStore as bG, type IntegrationBridgePayload as bH, type IntegrationBridgeToolBinding as bI, type IntegrationCapability as bJ, type IntegrationCatalogFreshnessOptions as bK, type IntegrationCatalogFreshnessResult as bL, type IntegrationConnection as bM, type IntegrationConnectionStore as bN, type IntegrationConnector as bO, type IntegrationConnectorAction as bP, type IntegrationConnectorCategory as bQ, type IntegrationConnectorTrigger as bR, type IntegrationCoveragePriority as bS, type IntegrationCoverageSpec as bT, type IntegrationDataClass as bU, IntegrationError as bV, type IntegrationEventStore as bW, type IntegrationGuardContext as bX, type IntegrationHealthcheckCheck as bY, type IntegrationHealthcheckResult as bZ, type IntegrationHealthcheckStatus as b_, type GatewayCatalogEntry as ba, type GatewayCatalogProviderOptions as bb, type GatewayCatalogTrigger as bc, type GraphqlOperationSpec as bd, type HttpIntegrationProviderOptions as be, type ImportCatalogOptions as bf, InMemoryConnectionStore as bg, InMemoryIntegrationApprovalStore as bh, InMemoryIntegrationAuditStore as bi, InMemoryIntegrationEventStore as bj, InMemoryIntegrationHealthcheckStore as bk, InMemoryIntegrationIdempotencyStore as bl, InMemoryIntegrationSecretStore as bm, InMemoryIntegrationWorkflowStore as bn, type InferIntegrationRequirementsOptions as bo, type InstalledIntegrationWorkflow as bp, type IntegrationActionGuard as bq, type IntegrationActionPack as br, type IntegrationActionRequest as bs, type IntegrationActionResult as bt, type IntegrationActionRisk as bu, buildDefaultIntegrationRegistry, type IntegrationActor as bv, type IntegrationApprovalFilter as bw, type IntegrationApprovalRecord as bx, type IntegrationApprovalRequest as by, type IntegrationApprovalResolution as bz, type IntegrationToolSearchResult as c, type TangleIntegrationCatalogFreshnessOptions as c$, IntegrationHub as c0, type IntegrationHubOptions as c1, type IntegrationIdempotencyRecord as c2, type IntegrationIdempotencyStore as c3, type IntegrationInvocationEnvelope as c4, type IntegrationInvocationEnvelopeValidationOptions as c5, type IntegrationPolicyDecision as c6, type IntegrationPolicyEffect as c7, type IntegrationPolicyEngine as c8, type IntegrationPolicyRule as c9, type OpenApiOperation as cA, PROVIDER_PASSTHROUGH_ACTION as cB, type PlatformIntegrationPolicyPresetOptions as cC, type ProviderHttpRequestInput as cD, type ProviderPassthroughPolicy as cE, type RenderConsentOptions as cF, type SecretRef as cG, type StartAuthRequest as cH, type StartAuthResult as cI, type StartedTangleCatalogRuntimeNodeServer as cJ, StaticIntegrationPolicyEngine as cK, type StaticIntegrationPolicyOptions as cL, type StoredIntegrationEvent as cM, TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID as cN, TANGLE_INTEGRATIONS_CATALOG_SOURCE as cO, type TangleCatalogExecutorInvocation as cP, type TangleCatalogExecutorProviderOptions as cQ, type TangleCatalogHttpExecutorInvocation as cR, type TangleCatalogHttpExecutorOptions as cS, type TangleCatalogRuntimeActionRequest as cT, type TangleCatalogRuntimeNodeServerOptions as cU, type TangleCatalogRuntimePackageManifest as cV, type TangleCatalogRuntimePackageManifestOptions as cW, type TangleCatalogRuntimePiece as cX, type TangleCatalogRuntimeRequest as cY, type TangleCatalogTriggerInvocation as cZ, type TangleIntegrationCatalogEntry as c_, type IntegrationProvider as ca, canonicalConnectorId, type IntegrationProviderKind as cb, type IntegrationRateLimitDecision as cc, type IntegrationRateLimiter as cd, IntegrationSandboxHost as ce, type IntegrationSandboxHostHub as cf, type IntegrationSandboxHostOptions as cg, type IntegrationSecretStore as ch, type IntegrationTriggerEvent as ci, type IntegrationTriggerSubscription as cj, type IntegrationWebhookReceiverResult as ck, type IntegrationWorkflowDefinition as cl, IntegrationWorkflowRuntime as cm, type IntegrationWorkflowRuntimeHub as cn, type IntegrationWorkflowRuntimeOptions as co, composeIntegrationRegistry, type IntegrationWorkflowStore as cp, type InvokeWithCapabilityRequest as cq, type IssueCapabilityRequest as cr, type IssuedIntegrationCapability as cs, type ManifestValidationIssue as ct, type ManifestValidationResult as cu, type McpCatalog as cv, type McpCatalogTool as cw, type MissingRequirementExplanation as cx, type NormalizedIntegrationResult as cy, type OpenApiDocument as cz, buildIntegrationCatalogView as d, importOpenApiConnector as d$, type TangleIntegrationCatalogFreshnessResult as d0, type TangleIntegrationContract as d1, type TangleIntegrationContractStatus as d2, type TangleIntegrationImplementationKind as d3, type TangleIntegrationInvokeInput as d4, type TangleIntegrationInvokeResult as d5, TangleIntegrationsClient as d6, type TangleIntegrationsClientOptions as d7, type WorkspaceCapability as d8, type WorkspaceCapabilityDiscovery as d9, createConnectorAdapterCatalogSource as dA, createConnectorAdapterProvider as dB, createCredentialBackedAdapterProvider as dC, createDefaultIntegrationActionGuard as dD, createDefaultIntegrationPolicyEngine as dE, createGatewayCatalogProvider as dF, createHttpIntegrationProvider as dG, createIntegrationAuditEvent as dH, createIntegrationWorkflowRuntime as dI, createMockIntegrationProvider as dJ, createPlatformIntegrationPolicyPreset as dK, createTangleCatalogExecutorProvider as dL, createTangleCatalogHttpExecutor as dM, createTangleCatalogRuntimeNodeRequestListener as dN, createTangleIntegrationsClient as dO, decodeIntegrationBridgePayload as dP, discoverWorkspaceCapabilities as dQ, dispatchIntegrationInvocation as dR, encodeIntegrationBridgePayload as dS, explainMissingRequirements as dT, extractActivepiecesPublicPieceCount as dU, extractExternalCatalogPublicCount as dV, filterDiscoveryByWorkspaceScopes as dW, getActivepiecesOverride as dX, healthcheckRequest as dY, importGraphqlConnector as dZ, importMcpConnector as d_, type WorkspaceToolSchema as da, type WorkspaceTrigger as db, adapterManifestsToConnectors as dc, assertValidIntegrationManifest as dd, auditIntegrationCatalogFreshness as de, auditTangleIntegrationCatalogFreshness as df, buildActivepiecesConnectors as dg, buildActivepiecesRuntimeRequest as dh, buildApprovalRequest as di, buildCanonicalLaunchConnectors as dj, buildIntegrationBridgeEnvironment as dk, buildIntegrationBridgePayload as dl, buildIntegrationCoverageConnectors as dm, buildIntegrationInvocationEnvelope as dn, buildTangleCatalogRuntimePackageManifest as dp, buildTangleCatalogRuntimeRequest as dq, buildTangleIntegrationCatalogConnectors as dr, calendarExercisePlannerManifest as ds, canonicalActionConnectorId as dt, createActivepiecesExecutorProvider as du, createActivepiecesHttpExecutor as dv, createApprovalBackedPolicyEngine as dw, createAuditingActionGuard as dx, createCatalogExecutorProvider as dy, createConnectionCredentialResolver as dz, buildIntegrationToolCatalog as e, inferIntegrationManifestFromTools as e0, integrationCoverageChecklistMarkdown as e1, invocationRequestFromEnvelope as e2, listActivepiecesCatalogEntries as e3, listIntegrationCoverageSpecs as e4, listTangleIntegrationCatalogEntries as e5, listTangleIntegrationCatalogRuntimePackages as e6, listTangleIntegrationContracts as e7, manifestToConnector as e8, normalizeGatewayCatalog as e9, normalizeIntegrationResult as ea, parseIntegrationBridgeEnvironment as eb, receiveIntegrationWebhook as ec, redactApprovalRequest as ed, redactCapability as ee, redactIntegrationBridgePayload as ef, redactInvocationEnvelope as eg, renderApprovalCopy as eh, renderConsentSummary as ei, renderTangleCatalogRuntimePnpmAddCommand as ej, resolveConnectionCredentials as ek, resolveIntegrationApproval as el, revokeConnection as em, runIntegrationHealthcheck as en, runIntegrationHealthchecks as eo, sanitizeAuditConnection as ep, sanitizeConnection as eq, signActivepiecesRuntimeRequest as er, signCapability as es, startTangleCatalogRuntimeNodeServer as et, storedEventToTriggerEvent as eu, validateIntegrationInvocationEnvelope as ev, validateIntegrationManifest as ew, validateProviderPassthroughRequest as ex, verifyActivepiecesRuntimeSignature as ey, verifyCapabilityToken as ez, InMemoryIntegrationGrantStore as f, type IntegrationCapabilityBinding as g, type IntegrationGrant as h, integrationToolName as i, inferIntegrationSupportTier, type IntegrationGrantStore as j, type IntegrationManifest as k, type IntegrationManifestResolution as l, type IntegrationRequirement as m, type IntegrationRequirementMode as n, type IntegrationRequirementResolution as o, parseIntegrationToolName as p, type IntegrationRequirementStatus as q, IntegrationRuntime as r, searchIntegrationTools as s, summarizeIntegrationRegistry, toMcpTools as t, type IntegrationRuntimeHub as u, type IntegrationRuntimeOptions as v, type IntegrationSandboxBundle as w, createIntegrationRuntime as x, type CheckConnectorInput as y, type CheckConnectorResult as z };

package/dist/registry.js

@@ -4,13 +4,15 @@ import {
   composeIntegrationRegistry,
   inferIntegrationSupportTier,
   summarizeIntegrationRegistry
-} from "./chunk-ICSBYCE2.js";
+} from "./chunk-TUX6MJJ4.js";
+import "./chunk-P24T3MLM.js";
 import "./chunk-SVQ4PHDZ.js";
+import "./chunk-H4XYLS7T.js";
+import "./chunk-YOKNZY2N.js";
 import "./chunk-4JQ754PA.js";
 import "./chunk-376UBTNB.js";
 import "./chunk-JU25UDN2.js";
 import "./chunk-2TW2QKGZ.js";
-import "./chunk-P24T3MLM.js";
 import "./chunk-ATYHZXLL.js";
 export {
   buildDefaultIntegrationRegistry,

package/dist/router-BncoovUh.d.ts

@@ -0,0 +1,149 @@
+/**
+ * @stable Provider-agnostic inbound webhook router.
+ *
+ * Consumer hooks a single HTTP handler at `/webhook/:provider/:event`
+ * (or whatever pathing they prefer) and forwards the request through
+ * `WebhookRouter.handle()`. The router:
+ *
+ *   1. Resolves the registered provider entry.
+ *   2. Calls the provider's `verifySignature(rawBody, headers, secrets)`.
+ *      Failure → 401 fast, no downstream work.
+ *   3. Calls the provider's `parse(rawBody, headers)` to extract zero or
+ *      more normalized events.
+ *   4. Enqueues each event for async processing via the consumer-supplied
+ *      `deliver(event)` callback (best-effort fire-and-forget — the
+ *      router does NOT block the HTTP response on the consumer's work).
+ *   5. Returns 200 fast with `{received: events.length}`.
+ *
+ * Replay protection: providers that sign timestamps (Stripe, Slack)
+ * already reject stale signatures inside `verifySignature`. For providers
+ * that don't (DocuSeal, GDrive push), the router exposes a pluggable
+ * `idempotency` hook: if `idempotency.seen(providerEventId)` returns
+ * true, the router 200s without invoking `deliver()`. Consumers wire
+ * this to a durable kv (D1 / Redis / Postgres unique-index).
+ *
+ * Why a router and not a per-provider express app: the runtime contract
+ * a product cares about is "an inbound event came in, here's the
+ * normalized envelope". Verification, parsing, and idempotency-dedup
+ * are mechanical and provider-specific — the router owns them. The
+ * consumer's `deliver()` is the only place product logic runs.
+ *
+ * Stability: `@stable` — additions to `WebhookEnvelope` must be
+ * additive; the router's HTTP contract (paths, status codes) is frozen
+ * at 200 (ok), 400 (bad request), 401 (bad signature), 404 (unknown
+ * provider), 405 (provider has no inbound surface).
+ */
+interface WebhookHeaders {
+    [name: string]: string | string[] | undefined;
+}
+/** Normalized inbound event the router emits after parsing. */
+interface WebhookEnvelope<TPayload = unknown> {
+    /** Provider id (matches the `:provider` path segment). */
+    provider: string;
+    /** Optional event class — e.g., 'customer.subscription.deleted'. The
+     *  provider's parser decides. Used for routing inside `deliver()`. */
+    eventType: string;
+    /** Provider-emitted event id, when present. Used for the idempotency
+     *  short-circuit. */
+    providerEventId?: string;
+    /** Wall-clock receive time. */
+    receivedAt: number;
+    /** Provider payload, normalized to the provider's documented event
+     *  shape. The router does NOT reshape this — `parse()` is the contract. */
+    payload: TPayload;
+    /** Headers passed through for downstream handlers that want them
+     *  (e.g., to extract custom routing metadata). Always lowercased keys. */
+    headers: Record<string, string>;
+}
+type SignatureVerification = {
+    valid: true;
+} | {
+    valid: false;
+    reason: string;
+};
+/** Per-provider plug-in. Stateless — the router calls `verifySignature`
+ *  then `parse` on every request. The provider's HTTP-shape concerns
+ *  (e.g., raw body required) are documented per provider. */
+interface WebhookProvider {
+    /** Stable provider id (`stripe`, `docuseal`, `gdrive`, ...). */
+    id: string;
+    /** Verify the inbound signature. Receives the EXACT raw body string —
+     *  consumers MUST preserve raw bytes through their HTTP server (do not
+     *  parse JSON before forwarding here). */
+    verifySignature(input: {
+        rawBody: string;
+        headers: WebhookHeaders;
+        secret: string;
+    }): SignatureVerification;
+    /** Parse the validated raw body into zero or more normalized events.
+     *  A single push payload may carry multiple events (e.g., Slack bulk
+     *  delivery). Return [] to ack the push as a no-op. */
+    parse(input: {
+        rawBody: string;
+        headers: WebhookHeaders;
+        now?: number;
+    }): WebhookEnvelope[] | Promise<WebhookEnvelope[]>;
+}
+interface WebhookIdempotencyStore {
+    /** Returns true if this providerEventId has been processed already.
+     *  Implementations should be O(1) (Redis SETNX, D1 UNIQUE constraint). */
+    seen(providerEventId: string): Promise<boolean> | boolean;
+    /** Marks a providerEventId as processed. Called AFTER `deliver()` has
+     *  been invoked. */
+    remember(providerEventId: string, ttlMs: number): Promise<void> | void;
+}
+interface WebhookRouterOptions {
+    /** Provider registry. Pass any number of providers; routing is by id. */
+    providers: WebhookProvider[];
+    /** Async callback invoked with every accepted event. Fire-and-forget
+     *  from the router's perspective — the HTTP response is sent before
+     *  this resolves. Throws are caught and reported via `onError`. */
+    deliver(event: WebhookEnvelope): Promise<void> | void;
+    /** Resolve the signing secret for a provider id at request time. The
+     *  router never holds secrets — the consumer's vault resolves them. */
+    resolveSecret(providerId: string, headers: WebhookHeaders): Promise<string | null> | string | null;
+    /** Optional idempotency-dedup hook. Required for providers that don't
+     *  sign timestamps in their signature scheme (DocuSeal, Drive push). */
+    idempotency?: WebhookIdempotencyStore;
+    /** TTL on idempotency entries. Default 7 days — long enough that a
+     *  provider's normal retry-window can't re-deliver. */
+    idempotencyTtlMs?: number;
+    /** Surface delivery errors. Default: console.error. */
+    onError?(err: unknown, context: {
+        provider: string;
+        eventType?: string;
+        providerEventId?: string;
+    }): void;
+    /** Override `now()` for tests. */
+    now?(): number;
+}
+interface WebhookRouterRequest {
+    providerId: string;
+    rawBody: string;
+    headers: WebhookHeaders;
+}
+interface WebhookRouterResponse {
+    status: number;
+    body: unknown;
+    headers?: Record<string, string>;
+}
+/**
+ * Router instance. Stateless aside from the provider registry — safe to
+ * share across requests; build once per process.
+ */
+declare class WebhookRouter {
+    private readonly providers;
+    private readonly deliver;
+    private readonly resolveSecret;
+    private readonly idempotency?;
+    private readonly idempotencyTtlMs;
+    private readonly onError;
+    private readonly nowFn;
+    constructor(opts: WebhookRouterOptions);
+    /** Process one inbound webhook request. Pure with respect to side-
+     *  effects on the router instance — safe to call concurrently. */
+    handle(request: WebhookRouterRequest): Promise<WebhookRouterResponse>;
+    private deliverEach;
+}
+
+export { type SignatureVerification as S, type WebhookProvider as W, type WebhookEnvelope as a, type WebhookHeaders as b, type WebhookIdempotencyStore as c, WebhookRouter as d, type WebhookRouterOptions as e, type WebhookRouterRequest as f, type WebhookRouterResponse as g };

package/dist/runtime.d.ts

@@ -1,5 +1,6 @@
 export { f as InMemoryIntegrationGrantStore, g as IntegrationCapabilityBinding, h as IntegrationGrant, j as IntegrationGrantStore, k as IntegrationManifest, l as IntegrationManifestResolution, m as IntegrationRequirement, n as IntegrationRequirementMode, o as IntegrationRequirementResolution, q as IntegrationRequirementStatus, r as IntegrationRuntime, u as IntegrationRuntimeHub, v as IntegrationRuntimeOptions, w as IntegrationSandboxBundle, x as createIntegrationRuntime } from './registry.js';
 import './tangle-id-CTU4kGId.js';
+import './errors-Bg3_rxnQ.js';
 import './connect/index.js';
 import './middleware/index.js';
 import './connectors/index.js';

package/dist/runtime.js

@@ -2,13 +2,15 @@ import {
   InMemoryIntegrationGrantStore,
   IntegrationRuntime,
   createIntegrationRuntime
-} from "./chunk-ICSBYCE2.js";
+} from "./chunk-TUX6MJJ4.js";
+import "./chunk-P24T3MLM.js";
 import "./chunk-SVQ4PHDZ.js";
+import "./chunk-H4XYLS7T.js";
+import "./chunk-YOKNZY2N.js";
 import "./chunk-4JQ754PA.js";
 import "./chunk-376UBTNB.js";
 import "./chunk-JU25UDN2.js";
 import "./chunk-2TW2QKGZ.js";
-import "./chunk-P24T3MLM.js";
 import "./chunk-ATYHZXLL.js";
 export {
   InMemoryIntegrationGrantStore,

package/dist/specs.d.ts

@@ -1,5 +1,6 @@
-export { U as ApiKeyAuthSpec, V as ConsoleStep, W as CredentialFieldSpec, X as CredentialValidationInput, Y as CredentialValidationResult, Z as CustomAuthSpec, _ as HealthcheckPlan, $ as HealthcheckSpec, a0 as HmacAuthSpec, a1 as INTEGRATION_FAMILIES, a2 as IntegrationAuthMode, a3 as IntegrationAuthSpec, a4 as IntegrationFamilyId, a5 as IntegrationFamilySpec, a6 as IntegrationLifecycleSpec, a7 as IntegrationPlannerHints, a8 as IntegrationSetupSpec, a9 as IntegrationSpec, aa as IntegrationSpecStatus, ab as IntegrationSpecValidationIssue, ac as IntegrationSpecValidationResult, ad as NoneAuthSpec, ae as NormalizedPermission, af as OAuth2AuthSpec, ag as PermissionDescriptor, ah as PostSetupCheck, ai as Quirk, aj as RenderSpecOptions, ak as RenderedConsoleStep, al as ScopeDescriptor, am as assertValidIntegrationSpec, an as buildHealthcheckPlan, ao as consoleStepsToText, ap as getIntegrationFamily, aq as getIntegrationSpec, ar as integrationSpecToConnector, as as listExecutableIntegrationSpecs, at as listIntegrationSpecs, au as renderAgentToolDescription, av as renderConsoleSteps, aw as renderRunbookMarkdown, ax as specAuthToConnectorAuth, ay as validateCredentialFormat, az as validateCredentialSet, aA as validateIntegrationSpec } from './registry.js';
+export { a4 as ApiKeyAuthSpec, a5 as ConsoleStep, a6 as CredentialFieldSpec, a7 as CredentialValidationInput, a8 as CredentialValidationResult, a9 as CustomAuthSpec, aa as HealthcheckPlan, ab as HealthcheckSpec, ac as HmacAuthSpec, ad as INTEGRATION_FAMILIES, ae as IntegrationAuthMode, af as IntegrationAuthSpec, ag as IntegrationFamilyId, ah as IntegrationFamilySpec, ai as IntegrationLifecycleSpec, aj as IntegrationPlannerHints, ak as IntegrationSetupSpec, al as IntegrationSpec, am as IntegrationSpecStatus, an as IntegrationSpecValidationIssue, ao as IntegrationSpecValidationResult, ap as NoneAuthSpec, aq as NormalizedPermission, ar as OAuth2AuthSpec, as as PermissionDescriptor, at as PostSetupCheck, au as Quirk, av as RenderSpecOptions, aw as RenderedConsoleStep, ax as ScopeDescriptor, ay as assertValidIntegrationSpec, az as buildHealthcheckPlan, aA as consoleStepsToText, aB as getIntegrationFamily, aC as getIntegrationSpec, aD as integrationSpecToConnector, aE as listExecutableIntegrationSpecs, aF as listIntegrationSpecs, aG as renderAgentToolDescription, aH as renderConsoleSteps, aI as renderRunbookMarkdown, aJ as specAuthToConnectorAuth, aK as validateCredentialFormat, aL as validateCredentialSet, aM as validateIntegrationSpec } from './registry.js';
 import './tangle-id-CTU4kGId.js';
+import './errors-Bg3_rxnQ.js';
 import './connect/index.js';
 import './middleware/index.js';
 import './connectors/index.js';