@tangle-network/agent-integrations 0.32.0 → 0.33.0

package/dist/{chunk-DN6DNPPH.js → chunk-XO2RSS6Y.js}

@@ -5,7 +5,7 @@ import {
 import {
   integrationSpecToConnector,
   listIntegrationSpecs
-} from "./chunk-VVC7U7W7.js";
+} from "./chunk-7T5YTVER.js";
 
 // src/activepieces-catalog.ts
 import { readFileSync } from "fs";
@@ -201,6 +201,16 @@ function dataClassFor(category) {
 // src/index.ts
 import { createHmac as createHmac2, randomUUID as randomUUID5, timingSafeEqual as timingSafeEqual2 } from "crypto";
 
+// src/core-error.ts
+var IntegrationError = class extends Error {
+  constructor(message, code) {
+    super(message);
+    this.code = code;
+    this.name = "IntegrationError";
+  }
+  code;
+};
+
 // src/adapter-provider.ts
 function createConnectorAdapterProvider(options) {
   const providerId = options.id ?? "first-party";
@@ -1186,6 +1196,116 @@ function assertBridgePayload(value) {
   if (!Array.isArray(payload.tools)) throw new Error("Invalid integration bridge tools.");
 }
 
+// src/apps.ts
+var TangleAppsClient = class {
+  endpoint;
+  fetchImpl;
+  constructor(options) {
+    this.endpoint = options.endpoint.replace(/\/$/, "");
+    this.fetchImpl = options.fetchImpl ?? fetch;
+  }
+  /**
+   * Register a product as an app (ONE-TIME, with the owner's bearer — a Tangle
+   * session or `sk-tan-*` key). Returns the client_id + the once-shown
+   * client_secret; persist the secret immediately (never retrievable again).
+   */
+  async registerApp(input, ownerBearer) {
+    const data = await this.request(
+      "POST",
+      "/v1/apps",
+      input,
+      ownerBearer
+    );
+    return { ...data.app, clientSecret: data.clientSecret };
+  }
+  /** List the caller's registered apps (no secrets). */
+  async listApps(ownerBearer) {
+    const data = await this.request("GET", "/v1/apps", void 0, ownerBearer);
+    return data.apps ?? [];
+  }
+  /** Revoke an app and cascade-kill its grants + tokens. */
+  revokeApp(appId, ownerBearer) {
+    return this.request("POST", `/v1/apps/${encodeURIComponent(appId)}/revoke`, {}, ownerBearer);
+  }
+  /**
+   * Durable re-mint: mint a fresh single-use `sk-tan-broker-` token against an
+   * existing consented grant using ONLY the app credentials — no user session,
+   * no `agc_` code. The runtime path: one call per `/v1/hub/exec`.
+   */
+  async mintBrokerToken(input) {
+    const data = await this.request(
+      "POST",
+      `/v1/apps/grants/${encodeURIComponent(input.grantId)}/mint-broker-token`,
+      {
+        client_id: input.clientId,
+        client_secret: input.clientSecret,
+        grant_id: input.grantId,
+        ...input.ttlSeconds ? { ttl_seconds: input.ttlSeconds } : {}
+      }
+    );
+    return toBrokerToken(data);
+  }
+  /**
+   * Exchange an `agc_` authorization code (from the user's one-time consent)
+   * for the first broker token + the durable grant. Use on the consent
+   * callback; afterward `mintBrokerToken` is enough.
+   */
+  async exchangeAuthCode(input) {
+    const data = await this.request("POST", "/v1/apps/oauth/token", {
+      grant_type: "authorization_code",
+      client_id: input.clientId,
+      client_secret: input.clientSecret,
+      code: input.code,
+      redirect_uri: input.redirectUri,
+      ...input.connectionId ? { connection_id: input.connectionId } : {}
+    });
+    return toBrokerToken(data);
+  }
+  async request(method, path, body, bearer) {
+    try {
+      const headers = { accept: "application/json" };
+      if (bearer) headers.authorization = `Bearer ${bearer}`;
+      if (body !== void 0) headers["content-type"] = "application/json";
+      const response = await this.fetchImpl(`${this.endpoint}${path}`, {
+        method,
+        headers,
+        body: body !== void 0 ? JSON.stringify(body) : void 0
+      });
+      const json = await response.json().catch(() => void 0);
+      if (!response.ok || json && json.success === false) {
+        const platformCode = json?.error && typeof json.error === "object" ? json.error.code : void 0;
+        const message = json?.error && typeof json.error === "object" && json.error.message || (typeof json?.error === "string" ? json.error : `Tangle apps request failed (HTTP ${response.status})`);
+        throw new IntegrationRuntimeError({
+          code: platformCode === "BROKER_DISABLED" ? "passthrough_disabled" : "unknown",
+          message,
+          status: response.status,
+          metadata: { platformCode, path }
+        });
+      }
+      return (json && "data" in json ? json.data : json) ?? {};
+    } catch (error) {
+      if (error instanceof IntegrationRuntimeError) throw error;
+      const normalized = normalizeIntegrationError(error);
+      throw new IntegrationRuntimeError({
+        code: normalized.code,
+        message: normalized.message,
+        metadata: { path, userAction: normalized.userAction }
+      });
+    }
+  }
+};
+function createTangleAppsClient(options) {
+  return new TangleAppsClient(options);
+}
+function toBrokerToken(data) {
+  return {
+    accessToken: data.access_token,
+    expiresIn: data.expires_in,
+    scope: data.scope,
+    connectionId: data.connection_id
+  };
+}
+
 // src/client.ts
 var TangleIntegrationsClient = class {
   endpoint;
@@ -3592,14 +3712,6 @@ function sameActor2(a, b) {
 }
 
 // src/index.ts
-var IntegrationError = class extends Error {
-  constructor(message, code) {
-    super(message);
-    this.code = code;
-    this.name = "IntegrationError";
-  }
-  code;
-};
 var InMemoryConnectionStore = class {
   connections = /* @__PURE__ */ new Map();
   get(connectionId) {
@@ -4713,6 +4825,7 @@ export {
   summarizeIntegrationRegistry,
   canonicalConnectorId,
   inferIntegrationSupportTier,
+  IntegrationError,
   createConnectorAdapterProvider,
   adapterManifestsToConnectors,
   createConnectorAdapterCatalogSource,
@@ -4741,6 +4854,8 @@ export {
   buildIntegrationBridgeEnvironment,
   parseIntegrationBridgeEnvironment,
   redactIntegrationBridgePayload,
+  TangleAppsClient,
+  createTangleAppsClient,
   TangleIntegrationsClient,
   createTangleIntegrationsClient,
   renderConsentSummary,
@@ -4796,7 +4911,6 @@ export {
   InMemoryIntegrationWorkflowStore,
   IntegrationWorkflowRuntime,
   createIntegrationWorkflowRuntime,
-  IntegrationError,
   InMemoryConnectionStore,
   IntegrationHub,
   sanitizeConnection,
@@ -4805,4 +4919,4 @@ export {
   signCapability,
   verifyCapabilityToken
 };
-//# sourceMappingURL=chunk-DN6DNPPH.js.map
+//# sourceMappingURL=chunk-XO2RSS6Y.js.map