@tangle-network/agent-integrations 0.33.2 → 0.35.0

package/README.md

@@ -165,6 +165,9 @@ OAuth credentials.
 | `runIntegrationHealthchecks` | Checks connection status, registry executability, scope shape, and optional live provider tests. |
 | `receiveIntegrationWebhook` | Verifies inbound webhooks, dedupes provider events, and dispatches normalized trigger events. |
 | `buildIntegrationBridgeEnvironment` | Encodes scoped sandbox capabilities for sandbox processes or executor-style CLIs. |
+| `mintDelegatedToolToken` / `verifyDelegatedToolToken` | Signed-claims bearer (workspace + tool allow-list + TTL) for an external agent that calls back into the product's tools mid-session. |
+| `issueDelegatedToolLease` | Standardized lease (token + allow-list + expiry + callback URL) the product hands to its external agent. |
+| `handleDelegatedToolCall` / `handleDelegatedToolRequest` | Transport-agnostic JSON-RPC 2.0 callback handler with fail-closed gates (token fresh, tool allow-listed, integration connected) via product-supplied seams. |
 | `createTangleIntegrationsClient` | Tiny generated-app/sandbox client for platform `/v1/integrations/invoke`. |
 | `inferIntegrationManifestFromTools` / `validateIntegrationManifest` | Deterministic manifest helpers for Builder and platform APIs. |
 | `renderConsentSummary` / `renderApprovalCopy` | User-facing consent and approval copy from manifests/actions. |

package/dist/catalog.js

@@ -7,7 +7,7 @@ import {
   parseIntegrationToolName,
   searchIntegrationTools,
   toMcpTools
-} from "./chunk-C4CGT5JE.js";
+} from "./chunk-ZVGYRP2O.js";
 import "./chunk-D57YS6XC.js";
 import "./chunk-CR35IEKW.js";
 import "./chunk-H4XYLS7T.js";
@@ -15,7 +15,7 @@ import "./chunk-O553GSCX.js";
 import "./chunk-53NQJZAT.js";
 import "./chunk-7P2LN4VT.js";
 import "./chunk-376UBTNB.js";
-import "./chunk-DT3H3NIW.js";
+import "./chunk-6W72E2KN.js";
 import "./chunk-2TW2QKGZ.js";
 import "./chunk-ZDK7Y4QG.js";
 import "./chunk-PZ5AY32C.js";

package/dist/{chunk-DT3H3NIW.js → chunk-6W72E2KN.js}

@@ -468,6 +468,7 @@ __export(adapters_exports, {
   twilioConnector: () => twilioConnector,
   twilioSmsConnector: () => twilioSmsConnector,
   twinLabsConnector: () => twinLabsConnector,
+  twitter: () => twitter,
   twitterConnector: () => twitterConnector,
   typeformConnector: () => typeformConnector,
   typefullyConnector: () => typefullyConnector,
@@ -111089,7 +111090,10 @@ var twinLabsConnector = declarativeRestConnector({
 });
 
 // src/connectors/adapters/twitter.ts
-var twitterConnector = declarativeRestConnector({
+var AUTH_URL19 = "https://twitter.com/i/oauth2/authorize";
+var TOKEN_URL19 = "https://api.twitter.com/2/oauth2/token";
+var SCOPES14 = ["tweet.read", "tweet.write", "users.read", "like.write", "offline.access"];
+var TWITTER_SPEC = {
   kind: "twitter",
   displayName: "Twitter",
   description: "Post tweets and reply to tweets on Twitter.",
@@ -111099,9 +111103,9 @@ var twitterConnector = declarativeRestConnector({
     options: [
       {
         kind: "oauth2",
-        authorizationUrl: "https://twitter.com/i/oauth2/authorize",
-        tokenUrl: "https://api.twitter.com/2/oauth2/token",
-        scopes: ["tweet.read", "tweet.write", "users.read", "like.write", "offline.access"],
+        authorizationUrl: AUTH_URL19,
+        tokenUrl: TOKEN_URL19,
+        scopes: SCOPES14,
         clientIdEnv: "TWITTER_OAUTH_CLIENT_ID",
         clientSecretEnv: "TWITTER_OAUTH_CLIENT_SECRET"
       },
@@ -111214,7 +111218,75 @@ var twitterConnector = declarativeRestConnector({
       externalEffect: true
     }
   ]
-});
+};
+var twitterConnector = declarativeRestConnector(TWITTER_SPEC);
+function twitter(opts) {
+  const { clientId, clientSecret } = opts;
+  return {
+    ...declarativeRestConnector(TWITTER_SPEC),
+    async exchangeOAuth(input) {
+      if (!clientId || !clientSecret) {
+        throw new Error("Twitter OAuth client not configured (TWITTER_OAUTH_CLIENT_ID / _SECRET)");
+      }
+      const tokens = await twitterTokenRequest(clientId, clientSecret, {
+        grant_type: "authorization_code",
+        code: input.code,
+        redirect_uri: input.redirectUri,
+        code_verifier: input.codeVerifier,
+        client_id: clientId
+      });
+      return {
+        credentials: {
+          kind: "oauth2",
+          accessToken: tokens.accessToken,
+          refreshToken: tokens.refreshToken,
+          expiresAt: tokens.expiresIn ? Date.now() + tokens.expiresIn * 1e3 : void 0
+        },
+        scopes: tokens.scope?.split(/\s+/) ?? SCOPES14,
+        metadata: {}
+      };
+    },
+    async refreshToken(creds) {
+      if (creds.kind !== "oauth2" || !creds.refreshToken) {
+        throw new Error("twitter.refreshToken: missing refresh token (was offline.access granted?)");
+      }
+      const refreshed = await twitterTokenRequest(clientId, clientSecret, {
+        grant_type: "refresh_token",
+        refresh_token: creds.refreshToken,
+        client_id: clientId
+      });
+      return {
+        kind: "oauth2",
+        accessToken: refreshed.accessToken,
+        refreshToken: refreshed.refreshToken ?? creds.refreshToken,
+        expiresAt: refreshed.expiresIn ? Date.now() + refreshed.expiresIn * 1e3 : void 0
+      };
+    }
+  };
+}
+async function twitterTokenRequest(clientId, clientSecret, params) {
+  const res = await fetch(TOKEN_URL19, {
+    method: "POST",
+    headers: {
+      authorization: `Basic ${Buffer.from(`${clientId}:${clientSecret}`).toString("base64")}`,
+      "content-type": "application/x-www-form-urlencoded",
+      accept: "application/json"
+    },
+    body: new URLSearchParams(params),
+    signal: AbortSignal.timeout(15e3)
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => "");
+    throw new Error(`twitter ${params.grant_type} token request failed: ${res.status} ${res.statusText} \u2014 ${text.slice(0, 200)}`);
+  }
+  const json = await res.json();
+  return {
+    accessToken: json.access_token,
+    refreshToken: json.refresh_token,
+    expiresIn: json.expires_in,
+    scope: json.scope
+  };
+}
 
 // src/connectors/adapters/twilio.ts
 var twilioConnector = declarativeRestConnector({
@@ -118636,6 +118708,7 @@ export {
   typefullyConnector,
   twinLabsConnector,
   twitterConnector,
+  twitter,
   twilioConnector,
   upgradechatConnector,
   vapiConnector,
@@ -118672,4 +118745,4 @@ export {
   pipedreamConnector,
   adapters_exports
 };
-//# sourceMappingURL=chunk-DT3H3NIW.js.map
+//# sourceMappingURL=chunk-6W72E2KN.js.map