@tangle-network/agent-integrations 0.34.0 → 0.36.0

package/README.md

@@ -165,6 +165,9 @@ OAuth credentials.
 | `runIntegrationHealthchecks` | Checks connection status, registry executability, scope shape, and optional live provider tests. |
 | `receiveIntegrationWebhook` | Verifies inbound webhooks, dedupes provider events, and dispatches normalized trigger events. |
 | `buildIntegrationBridgeEnvironment` | Encodes scoped sandbox capabilities for sandbox processes or executor-style CLIs. |
+| `mintDelegatedToolToken` / `verifyDelegatedToolToken` | Signed-claims bearer (workspace + tool allow-list + TTL) for an external agent that calls back into the product's tools mid-session. |
+| `issueDelegatedToolLease` | Standardized lease (token + allow-list + expiry + callback URL) the product hands to its external agent. |
+| `handleDelegatedToolCall` / `handleDelegatedToolRequest` | Transport-agnostic JSON-RPC 2.0 callback handler with fail-closed gates (token fresh, tool allow-listed, integration connected) via product-supplied seams. |
 | `createTangleIntegrationsClient` | Tiny generated-app/sandbox client for platform `/v1/integrations/invoke`. |
 | `inferIntegrationManifestFromTools` / `validateIntegrationManifest` | Deterministic manifest helpers for Builder and platform APIs. |
 | `renderConsentSummary` / `renderApprovalCopy` | User-facing consent and approval copy from manifests/actions. |

package/dist/catalog.d.ts

@@ -1,5 +1,5 @@
 import { IntegrationSupportTier, IntegrationRegistry, IntegrationRegistrySummary } from './registry.js';
-import { d as IntegrationConnectorCategory, e as IntegrationConnectorAction, f as IntegrationActionRisk, g as IntegrationDataClass, b as IntegrationConnector } from './core-types-CjWifQOf.js';
+import { d as IntegrationConnectorCategory, e as IntegrationConnectorAction, f as IntegrationActionRisk, g as IntegrationDataClass, b as IntegrationConnector } from './core-types-D4MGC44S.js';
 import './types-Bxg-wJkW.js';
 
 interface IntegrationToolDefinition {

package/dist/{consumer-yV4NtH2h.d.ts → consumer-Dzt2uOo_.d.ts}

@@ -1,4 +1,4 @@
-import { I as IntegrationActor, e as IntegrationConnectorAction, g as IntegrationDataClass, j as IntegrationActionGuard, c as IntegrationConnection, k as IntegrationActionRequest, b as IntegrationConnector, l as IntegrationActionResult } from './core-types-CjWifQOf.js';
+import { I as IntegrationActor, e as IntegrationConnectorAction, g as IntegrationDataClass, k as IntegrationActionGuard, c as IntegrationConnection, l as IntegrationActionRequest, b as IntegrationConnector, m as IntegrationActionResult } from './core-types-D4MGC44S.js';
 import { IntegrationSandboxBundle, IntegrationRequirementMode, IntegrationRequirementResolution, IntegrationManifest, IntegrationManifestResolution, IntegrationGrant } from './runtime.js';
 import { IntegrationRegistry } from './registry.js';
 

package/dist/consumer.d.ts

@@ -1,6 +1,6 @@
-import './core-types-CjWifQOf.js';
+import './core-types-D4MGC44S.js';
 import './runtime.js';
-export { C as CapabilityBundleResult, a as CheckConnectorInput, b as CheckConnectorResult, c as CreateGrantsInput, n as IntegrationHubAuth, o as IntegrationHubClient, p as IntegrationHubClientOptions, q as IntegrationHubRequestError, L as ListGrantsInput, M as MintCapabilityBundleInput, R as ResolveManifestInput, t as createIntegrationHubClient } from './consumer-yV4NtH2h.js';
+export { C as CapabilityBundleResult, a as CheckConnectorInput, b as CheckConnectorResult, c as CreateGrantsInput, n as IntegrationHubAuth, o as IntegrationHubClient, p as IntegrationHubClientOptions, q as IntegrationHubRequestError, L as ListGrantsInput, M as MintCapabilityBundleInput, R as ResolveManifestInput, t as createIntegrationHubClient } from './consumer-Dzt2uOo_.js';
 import './types-Bxg-wJkW.js';
 import './catalog.js';
 import './registry.js';

package/dist/{core-types-CjWifQOf.d.ts → core-types-D4MGC44S.d.ts}

@@ -13,7 +13,7 @@ import { a as ConnectorCredentials } from './types-Bxg-wJkW.js';
  * their own focused modules (`./core-error.ts`).
  */
 
-type IntegrationProviderKind = 'first_party' | 'nango' | 'pipedream' | 'zapier' | 'activepieces' | 'tangle_catalog' | 'executor' | 'custom';
+type IntegrationProviderKind = 'first_party' | 'nango' | 'pipedream' | 'zapier' | 'activepieces' | 'tangle_catalog' | 'executor' | 'custom' | 'mcp';
 type IntegrationConnectorCategory = 'email' | 'calendar' | 'chat' | 'crm' | 'storage' | 'docs' | 'database' | 'webhook' | 'workflow' | 'internal' | 'other';
 type IntegrationActionRisk = 'read' | 'write' | 'destructive';
 type IntegrationDataClass = 'public' | 'internal' | 'private' | 'sensitive' | 'secret';
@@ -352,4 +352,4 @@ interface IntegrationOAuthStateStore {
     sweep?(now: number): Promise<void> | void;
 }
 
-export type { StartAuthResult as A, InvokeWithCapabilityRequest as B, CompleteAuthRequest as C, IntegrationCapability as D, IntegrationHubOptions as E, IssueCapabilityRequest as F, IntegrationConnectorTrigger as G, HttpIntegrationProviderOptions as H, IntegrationActor as I, SecretRef as S, IssuedIntegrationCapability as a, IntegrationConnector as b, IntegrationConnection as c, IntegrationConnectorCategory as d, IntegrationConnectorAction as e, IntegrationActionRisk as f, IntegrationDataClass as g, IntegrationCatalogSource as h, IntegrationProviderKind as i, IntegrationActionGuard as j, IntegrationActionRequest as k, IntegrationActionResult as l, IntegrationPolicyEngine as m, IntegrationApprovalRequest as n, IntegrationGuardContext as o, IntegrationPolicyDecision as p, IntegrationProvider as q, IntegrationSecretStore as r, IntegrationConnectionStore as s, IntegrationCredentialsRotatedEvent as t, IntegrationOAuthStateStore as u, IntegrationOAuthState as v, IntegrationOAuthStateOutcome as w, IntegrationTriggerSubscription as x, IntegrationTriggerEvent as y, StartAuthRequest as z };
+export type { StartAuthResult as A, InvokeWithCapabilityRequest as B, CompleteAuthRequest as C, IntegrationCapability as D, IntegrationHubOptions as E, IssueCapabilityRequest as F, IntegrationConnectorTrigger as G, HttpIntegrationProviderOptions as H, IntegrationActor as I, SecretRef as S, IssuedIntegrationCapability as a, IntegrationConnector as b, IntegrationConnection as c, IntegrationConnectorCategory as d, IntegrationConnectorAction as e, IntegrationActionRisk as f, IntegrationDataClass as g, IntegrationCatalogSource as h, IntegrationProviderKind as i, IntegrationProvider as j, IntegrationActionGuard as k, IntegrationActionRequest as l, IntegrationActionResult as m, IntegrationPolicyEngine as n, IntegrationApprovalRequest as o, IntegrationGuardContext as p, IntegrationPolicyDecision as q, IntegrationSecretStore as r, IntegrationConnectionStore as s, IntegrationCredentialsRotatedEvent as t, IntegrationOAuthStateStore as u, IntegrationOAuthState as v, IntegrationOAuthStateOutcome as w, IntegrationTriggerSubscription as x, IntegrationTriggerEvent as y, StartAuthRequest as z };

package/dist/coverage-catalog.d.ts

@@ -1,4 +1,4 @@
-import { d as IntegrationConnectorCategory, b as IntegrationConnector, i as IntegrationProviderKind } from './core-types-CjWifQOf.js';
+import { d as IntegrationConnectorCategory, b as IntegrationConnector, i as IntegrationProviderKind } from './core-types-D4MGC44S.js';
 import './types-Bxg-wJkW.js';
 
 type IntegrationCoveragePriority = 'tier_0' | 'tier_1' | 'tier_2' | 'long_tail';

package/dist/delegated-tools/index.d.ts

@@ -0,0 +1,195 @@
+/**
+ * Short-lived, workspace-scoped bearer for the delegated-tool bridge.
+ *
+ * An external stateful agent — a voice caller, a long-running autonomous worker
+ * — is handed one of these tokens and calls BACK into the product's tools
+ * mid-session. The token names exactly which workspace and which tool names the
+ * external agent may reach, and it EXPIRES, so a leaked lease stops working once
+ * the session window closes. The product's connector credentials never leave the
+ * product; the external agent only ever holds this opaque token and reaches the
+ * product's callback endpoint (see {@link handleDelegatedToolCall}).
+ *
+ * This is a SIGNED-CLAIMS envelope, distinct from an identity capability token
+ * (`HMAC(secret, "user:<id>")`, verified against a known id). Here the verifier
+ * RECOVERS the claims (workspaceId, allowedTools, expiresAt) from the token
+ * itself, so the bridge endpoint needs no prior knowledge of the lease.
+ *
+ * Crypto: WebCrypto HMAC-SHA256, base64url, constant-time compare. Runs on
+ * Cloudflare Workers, Node, and the browser with no Node `crypto` dependency —
+ * matching the sibling capability-token primitive. Fail-closed: with no secret,
+ * mint returns `undefined` and verify returns `null`, so the bridge is simply
+ * absent rather than silently unauthenticated.
+ */
+interface DelegatedToolClaims {
+    workspaceId: string;
+    allowedTools: string[];
+    /** Epoch milliseconds at which the token stops verifying. */
+    expiresAt: number;
+}
+interface MintDelegatedToolTokenInput {
+    workspaceId: string;
+    allowedTools: string[];
+    ttlSeconds: number;
+    /** Shared HMAC secret. When absent, mint returns `undefined` (fail-closed). */
+    secret?: string;
+    /** Token prefix (namespaces the credential; lets verify reject foreign tokens
+     *  cheaply). Default `dtt_`. */
+    prefix?: string;
+    /** Override the clock (epoch ms) — for tests. Defaults to `Date.now()`. */
+    now?: number;
+}
+interface VerifyDelegatedToolTokenOptions {
+    secret?: string;
+    prefix?: string;
+    now?: number;
+}
+/**
+ * Mint a delegated-tool token carrying signed claims, or `undefined` when no
+ * secret is configured (fail-closed — the caller refuses to issue a lease rather
+ * than hand out an unauthenticated one).
+ */
+declare function mintDelegatedToolToken(input: MintDelegatedToolTokenInput): Promise<string | undefined>;
+/**
+ * Verify a delegated-tool token and recover its claims. Returns `null` (never
+ * throws) for an unconfigured secret, a wrong prefix, a malformed or forged
+ * token, or an expired one.
+ */
+declare function verifyDelegatedToolToken(token: string, opts: VerifyDelegatedToolTokenOptions): Promise<DelegatedToolClaims | null>;
+
+/**
+ * Transport-agnostic JSON-RPC 2.0 callback handler for the delegated-tool
+ * bridge — the endpoint an EXTERNAL stateful agent calls back into mid-session,
+ * authorized by the bearer minted via {@link mintDelegatedToolToken}.
+ *
+ * The product supplies three seams; the handler bakes in no domain assumptions
+ * (no voice/phony/calendar specifics):
+ *
+ *   - `verifyToken(bearer)` → claims | null — recover & validate the lease
+ *     (fresh, signed). Usually {@link verifyDelegatedToolToken} bound to a secret.
+ *   - `resolveTool(workspaceId, name)` → invocable | null — the product's tool
+ *     registry. `null` means "this workspace cannot reach that tool right now".
+ *   - `isIntegrationConnected(workspaceId, tool)` → boolean — the live
+ *     connectivity gate; a stale token naming a since-disconnected integration
+ *     resolves but fails this check.
+ *
+ * FAIL-CLOSED, in order, for `tools/call`: (1) bearer verifies, (2) tool is in
+ * the lease allow-list, (3) tool resolves for the workspace, (4) the backing
+ * integration is connected. Any miss returns a JSON-RPC error and the invocable
+ * is never touched.
+ *
+ * `tools/list` is advisory: it returns the intersection of the allow-list with
+ * what currently resolves + is connected, omitting (never erroring) the rest.
+ */
+
+interface DelegatedToolDescriptor {
+    /** Wire name the external agent calls by. */
+    name: string;
+    description?: string;
+    /** JSON Schema for the tool arguments. Defaults to `{ type: 'object' }`. */
+    inputSchema?: unknown;
+}
+interface ResolvedDelegatedTool extends DelegatedToolDescriptor {
+    /**
+     * Invoke the tool with the JSON-RPC `arguments`. Returns the JSON-RPC `result`
+     * payload on success. Throw {@link DelegatedToolInvocationError} to surface a
+     * structured JSON-RPC error (code + data); any other throw becomes -32000.
+     */
+    invoke(args: Record<string, unknown>): Promise<unknown>;
+}
+/** Throw from `resolveTool().invoke` to control the JSON-RPC error envelope. */
+declare class DelegatedToolInvocationError extends Error {
+    readonly code: number;
+    readonly data?: unknown;
+    constructor(message: string, options?: {
+        code?: number;
+        data?: unknown;
+    });
+}
+interface DelegatedToolCallSeams {
+    /** Recover lease claims from a raw bearer string, or `null` to reject. */
+    verifyToken(bearer: string): Promise<DelegatedToolClaims | null> | DelegatedToolClaims | null;
+    /** The product's tool registry. `null` ⇒ not reachable for this workspace. */
+    resolveTool(workspaceId: string, name: string): Promise<ResolvedDelegatedTool | null> | ResolvedDelegatedTool | null;
+    /** Live connectivity gate for the integration backing `tool`. */
+    isIntegrationConnected(workspaceId: string, tool: ResolvedDelegatedTool): Promise<boolean> | boolean;
+    /**
+     * Optional advertised name/version for the JSON-RPC `initialize` handshake.
+     * Defaults to `{ name: 'delegated-tools', version: '1' }`.
+     */
+    serverInfo?: {
+        name: string;
+        version: string;
+    };
+}
+interface JsonRpcRequest {
+    jsonrpc?: unknown;
+    id?: unknown;
+    method?: unknown;
+    params?: unknown;
+}
+interface JsonRpcResponse {
+    jsonrpc: '2.0';
+    id: string | number | null;
+    result?: unknown;
+    error?: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+}
+/**
+ * Handle one JSON-RPC call. Accepts a parsed body + the raw `authorization`
+ * header value. Returns the JSON-RPC response object (the transport wrapper —
+ * {@link handleDelegatedToolRequest} — turns it into an HTTP `Response`).
+ */
+declare function handleDelegatedToolCall(body: JsonRpcRequest, authorization: string | null | undefined, seams: DelegatedToolCallSeams): Promise<JsonRpcResponse>;
+/**
+ * HTTP transport wrapper around {@link handleDelegatedToolCall}: parses the
+ * request, enforces POST, maps the JSON-RPC response to a `Response`. Unauthorized
+ * is the only non-200 status (401) so an unauthenticated probe can't distinguish
+ * methods; every authenticated JSON-RPC error rides a 200 per the JSON-RPC contract.
+ */
+declare function handleDelegatedToolRequest(request: Request, seams: DelegatedToolCallSeams): Promise<Response>;
+
+/**
+ * Standardized lease payload the product hands to its external agent.
+ *
+ * The product resolves which tools a workspace may delegate right now, mints a
+ * scoped token over exactly those names ({@link mintDelegatedToolToken}), and
+ * packages the result as a lease. The external agent (or the broker that builds
+ * its session) reads `callbackUrl` + `token` to reach the product's
+ * {@link handleDelegatedToolRequest} endpoint mid-session.
+ *
+ * Standardizing the shape here means every caller's lease looks the same on the
+ * wire regardless of the external runtime (voice broker, autonomous worker).
+ */
+interface IssueDelegatedToolLeaseInput {
+    workspaceId: string;
+    allowedTools: string[];
+    ttlSeconds: number;
+    /** Shared HMAC secret for the token. Absent ⇒ lease cannot be issued. */
+    secret?: string;
+    /** Token prefix; forwarded to {@link mintDelegatedToolToken}. */
+    prefix?: string;
+    /** Endpoint the external agent calls back into. Echoed onto the lease. */
+    callbackUrl?: string;
+    /** Override the clock (epoch ms) — for tests. */
+    now?: number;
+}
+interface DelegatedToolLease {
+    token: string;
+    allowedTools: string[];
+    /** Epoch milliseconds at which the lease (and its token) expires. */
+    expiresAt: number;
+    callbackUrl?: string;
+}
+/**
+ * Issue a delegated-tool lease, or `null` when no secret is configured
+ * (fail-closed — the product refuses to hand out an unauthenticated lease).
+ * Pass an already-filtered `allowedTools`: this helper signs whatever it is
+ * given, so the product MUST intersect against what the workspace can delegate
+ * before calling.
+ */
+declare function issueDelegatedToolLease(input: IssueDelegatedToolLeaseInput): Promise<DelegatedToolLease | null>;
+
+export { type DelegatedToolCallSeams, type DelegatedToolClaims, type DelegatedToolDescriptor, DelegatedToolInvocationError, type DelegatedToolLease, type IssueDelegatedToolLeaseInput, type JsonRpcRequest, type JsonRpcResponse, type MintDelegatedToolTokenInput, type ResolvedDelegatedTool, type VerifyDelegatedToolTokenOptions, handleDelegatedToolCall, handleDelegatedToolRequest, issueDelegatedToolLease, mintDelegatedToolToken, verifyDelegatedToolToken };

package/dist/delegated-tools/index.js

@@ -0,0 +1,207 @@
+import "../chunk-PZ5AY32C.js";
+
+// src/delegated-tools/token.ts
+var DEFAULT_PREFIX = "dtt_";
+function base64urlEncode(input) {
+  const bytes = typeof input === "string" ? new TextEncoder().encode(input) : input;
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function base64urlDecodeToString(input) {
+  try {
+    const padded = input.replace(/-/g, "+").replace(/_/g, "/");
+    const binary = atob(padded);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+    return new TextDecoder().decode(bytes);
+  } catch {
+    return null;
+  }
+}
+async function sign(payload, secret) {
+  const enc = new TextEncoder();
+  const key = await crypto.subtle.importKey("raw", enc.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+  const sig = await crypto.subtle.sign("HMAC", key, enc.encode(payload));
+  return base64urlEncode(new Uint8Array(sig));
+}
+function timingSafeEqual(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+}
+async function mintDelegatedToolToken(input) {
+  const secret = input.secret?.trim();
+  if (!secret) return void 0;
+  const prefix = input.prefix ?? DEFAULT_PREFIX;
+  const now = input.now ?? Date.now();
+  const claims = {
+    workspaceId: input.workspaceId,
+    allowedTools: input.allowedTools,
+    expiresAt: now + input.ttlSeconds * 1e3
+  };
+  const payload = base64urlEncode(JSON.stringify(claims));
+  const signature = await sign(payload, secret);
+  return `${prefix}${payload}.${signature}`;
+}
+async function verifyDelegatedToolToken(token, opts) {
+  const secret = opts.secret?.trim();
+  const prefix = opts.prefix ?? DEFAULT_PREFIX;
+  if (!secret || !token.startsWith(prefix)) return null;
+  const body = token.slice(prefix.length);
+  const dot = body.indexOf(".");
+  if (dot <= 0) return null;
+  const payload = body.slice(0, dot);
+  const signature = body.slice(dot + 1);
+  if (!payload || !signature) return null;
+  const expected = await sign(payload, secret);
+  if (!timingSafeEqual(signature, expected)) return null;
+  const json = base64urlDecodeToString(payload);
+  if (json === null) return null;
+  let claims;
+  try {
+    claims = JSON.parse(json);
+  } catch {
+    return null;
+  }
+  if (!claims || typeof claims !== "object") return null;
+  const record = claims;
+  if (typeof record.workspaceId !== "string" || !record.workspaceId) return null;
+  if (typeof record.expiresAt !== "number" || !Number.isFinite(record.expiresAt)) return null;
+  if (!Array.isArray(record.allowedTools) || !record.allowedTools.every((tool) => typeof tool === "string")) return null;
+  const now = opts.now ?? Date.now();
+  if (record.expiresAt <= now) return null;
+  return {
+    workspaceId: record.workspaceId,
+    allowedTools: record.allowedTools,
+    expiresAt: record.expiresAt
+  };
+}
+
+// src/delegated-tools/handler.ts
+var DelegatedToolInvocationError = class extends Error {
+  code;
+  data;
+  constructor(message, options = {}) {
+    super(message);
+    this.name = "DelegatedToolInvocationError";
+    this.code = options.code ?? -32e3;
+    this.data = options.data;
+  }
+};
+var PROTOCOL_VERSION = "2024-11-05";
+function normalizeId(id) {
+  return typeof id === "string" || typeof id === "number" ? id : null;
+}
+function rpcResult(id, result) {
+  return { jsonrpc: "2.0", id: normalizeId(id), result };
+}
+function rpcError(id, code, message, data) {
+  return {
+    jsonrpc: "2.0",
+    id: normalizeId(id),
+    error: data === void 0 ? { code, message } : { code, message, data }
+  };
+}
+function extractBearer(authorization) {
+  return authorization?.match(/^Bearer\s+(.+)$/i)?.[1];
+}
+async function handleDelegatedToolCall(body, authorization, seams) {
+  const id = body.id ?? null;
+  const method = typeof body.method === "string" ? body.method : "";
+  const bearer = extractBearer(authorization);
+  const claims = bearer ? await seams.verifyToken(bearer) : null;
+  if (!claims) return rpcError(id, -32001, "Unauthorized");
+  if (method === "initialize") {
+    const info = seams.serverInfo ?? { name: "delegated-tools", version: "1" };
+    return rpcResult(id, {
+      protocolVersion: PROTOCOL_VERSION,
+      capabilities: { tools: {} },
+      serverInfo: info
+    });
+  }
+  if (method === "tools/list") {
+    const tools = [];
+    for (const name of claims.allowedTools) {
+      const tool = await seams.resolveTool(claims.workspaceId, name);
+      if (!tool) continue;
+      if (!await seams.isIntegrationConnected(claims.workspaceId, tool)) continue;
+      tools.push({
+        name: tool.name,
+        description: tool.description,
+        inputSchema: tool.inputSchema ?? { type: "object" }
+      });
+    }
+    return rpcResult(id, { tools });
+  }
+  if (method === "tools/call") {
+    const params = body.params ?? {};
+    const name = typeof params.name === "string" ? params.name : "";
+    const args = params.arguments && typeof params.arguments === "object" && !Array.isArray(params.arguments) ? params.arguments : {};
+    if (!name) return rpcError(id, -32602, "Missing tool name");
+    if (!claims.allowedTools.includes(name)) {
+      return rpcError(id, -32602, `Tool not delegated to this session: ${name}`);
+    }
+    const tool = await seams.resolveTool(claims.workspaceId, name);
+    if (!tool) return rpcError(id, -32602, `Tool not available for workspace: ${name}`);
+    if (!await seams.isIntegrationConnected(claims.workspaceId, tool)) {
+      return rpcError(id, -32602, `Integration not connected for tool: ${name}`);
+    }
+    try {
+      const result = await tool.invoke(args);
+      return rpcResult(id, result);
+    } catch (err) {
+      if (err instanceof DelegatedToolInvocationError) {
+        return rpcError(id, err.code, err.message, err.data);
+      }
+      return rpcError(id, -32e3, err instanceof Error ? err.message : "Tool invocation failed");
+    }
+  }
+  return rpcError(id, -32601, `Method not found: ${method || "(none)"}`);
+}
+async function handleDelegatedToolRequest(request, seams) {
+  if (request.method !== "POST") {
+    return Response.json({ error: "Method not allowed" }, { status: 405 });
+  }
+  let body;
+  try {
+    body = await request.json();
+  } catch {
+    return Response.json(rpcError(null, -32700, "Parse error"));
+  }
+  const response = await handleDelegatedToolCall(body, request.headers.get("authorization"), seams);
+  if (response.error?.code === -32001) {
+    return Response.json(response, { status: 401 });
+  }
+  return Response.json(response);
+}
+
+// src/delegated-tools/lease.ts
+async function issueDelegatedToolLease(input) {
+  const now = input.now ?? Date.now();
+  const token = await mintDelegatedToolToken({
+    workspaceId: input.workspaceId,
+    allowedTools: input.allowedTools,
+    ttlSeconds: input.ttlSeconds,
+    secret: input.secret,
+    prefix: input.prefix,
+    now
+  });
+  if (!token) return null;
+  return {
+    token,
+    allowedTools: input.allowedTools,
+    expiresAt: now + input.ttlSeconds * 1e3,
+    callbackUrl: input.callbackUrl
+  };
+}
+export {
+  DelegatedToolInvocationError,
+  handleDelegatedToolCall,
+  handleDelegatedToolRequest,
+  issueDelegatedToolLease,
+  mintDelegatedToolToken,
+  verifyDelegatedToolToken
+};
+//# sourceMappingURL=index.js.map

package/dist/delegated-tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/delegated-tools/token.ts","../../src/delegated-tools/handler.ts","../../src/delegated-tools/lease.ts"],"sourcesContent":["/**\n * Short-lived, workspace-scoped bearer for the delegated-tool bridge.\n *\n * An external stateful agent — a voice caller, a long-running autonomous worker\n * — is handed one of these tokens and calls BACK into the product's tools\n * mid-session. The token names exactly which workspace and which tool names the\n * external agent may reach, and it EXPIRES, so a leaked lease stops working once\n * the session window closes. The product's connector credentials never leave the\n * product; the external agent only ever holds this opaque token and reaches the\n * product's callback endpoint (see {@link handleDelegatedToolCall}).\n *\n * This is a SIGNED-CLAIMS envelope, distinct from an identity capability token\n * (`HMAC(secret, \"user:<id>\")`, verified against a known id). Here the verifier\n * RECOVERS the claims (workspaceId, allowedTools, expiresAt) from the token\n * itself, so the bridge endpoint needs no prior knowledge of the lease.\n *\n * Crypto: WebCrypto HMAC-SHA256, base64url, constant-time compare. Runs on\n * Cloudflare Workers, Node, and the browser with no Node `crypto` dependency —\n * matching the sibling capability-token primitive. Fail-closed: with no secret,\n * mint returns `undefined` and verify returns `null`, so the bridge is simply\n * absent rather than silently unauthenticated.\n */\n\nconst DEFAULT_PREFIX = 'dtt_'\n\nexport interface DelegatedToolClaims {\n  workspaceId: string\n  allowedTools: string[]\n  /** Epoch milliseconds at which the token stops verifying. */\n  expiresAt: number\n}\n\nexport interface MintDelegatedToolTokenInput {\n  workspaceId: string\n  allowedTools: string[]\n  ttlSeconds: number\n  /** Shared HMAC secret. When absent, mint returns `undefined` (fail-closed). */\n  secret?: string\n  /** Token prefix (namespaces the credential; lets verify reject foreign tokens\n   *  cheaply). Default `dtt_`. */\n  prefix?: string\n  /** Override the clock (epoch ms) — for tests. Defaults to `Date.now()`. */\n  now?: number\n}\n\nexport interface VerifyDelegatedToolTokenOptions {\n  secret?: string\n  prefix?: string\n  now?: number\n}\n\nfunction base64urlEncode(input: string | Uint8Array): string {\n  const bytes = typeof input === 'string' ? new TextEncoder().encode(input) : input\n  let binary = ''\n  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]!)\n  return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '')\n}\n\nfunction base64urlDecodeToString(input: string): string | null {\n  try {\n    const padded = input.replace(/-/g, '+').replace(/_/g, '/')\n    const binary = atob(padded)\n    const bytes = new Uint8Array(binary.length)\n    for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i)\n    return new TextDecoder().decode(bytes)\n  } catch {\n    return null\n  }\n}\n\nasync function sign(payload: string, secret: string): Promise<string> {\n  const enc = new TextEncoder()\n  const key = await crypto.subtle.importKey('raw', enc.encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign'])\n  const sig = await crypto.subtle.sign('HMAC', key, enc.encode(payload))\n  return base64urlEncode(new Uint8Array(sig))\n}\n\n/** Length-independent-leak-free compare for two same-charset strings. */\nfunction timingSafeEqual(a: string, b: string): boolean {\n  if (a.length !== b.length) return false\n  let diff = 0\n  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i)\n  return diff === 0\n}\n\n/**\n * Mint a delegated-tool token carrying signed claims, or `undefined` when no\n * secret is configured (fail-closed — the caller refuses to issue a lease rather\n * than hand out an unauthenticated one).\n */\nexport async function mintDelegatedToolToken(input: MintDelegatedToolTokenInput): Promise<string | undefined> {\n  const secret = input.secret?.trim()\n  if (!secret) return undefined\n  const prefix = input.prefix ?? DEFAULT_PREFIX\n  const now = input.now ?? Date.now()\n  const claims: DelegatedToolClaims = {\n    workspaceId: input.workspaceId,\n    allowedTools: input.allowedTools,\n    expiresAt: now + input.ttlSeconds * 1000,\n  }\n  const payload = base64urlEncode(JSON.stringify(claims))\n  const signature = await sign(payload, secret)\n  return `${prefix}${payload}.${signature}`\n}\n\n/**\n * Verify a delegated-tool token and recover its claims. Returns `null` (never\n * throws) for an unconfigured secret, a wrong prefix, a malformed or forged\n * token, or an expired one.\n */\nexport async function verifyDelegatedToolToken(\n  token: string,\n  opts: VerifyDelegatedToolTokenOptions,\n): Promise<DelegatedToolClaims | null> {\n  const secret = opts.secret?.trim()\n  const prefix = opts.prefix ?? DEFAULT_PREFIX\n  if (!secret || !token.startsWith(prefix)) return null\n  const body = token.slice(prefix.length)\n  const dot = body.indexOf('.')\n  if (dot <= 0) return null\n  const payload = body.slice(0, dot)\n  const signature = body.slice(dot + 1)\n  if (!payload || !signature) return null\n\n  const expected = await sign(payload, secret)\n  if (!timingSafeEqual(signature, expected)) return null\n\n  const json = base64urlDecodeToString(payload)\n  if (json === null) return null\n\n  let claims: unknown\n  try {\n    claims = JSON.parse(json)\n  } catch {\n    return null\n  }\n  if (!claims || typeof claims !== 'object') return null\n  const record = claims as Record<string, unknown>\n  if (typeof record.workspaceId !== 'string' || !record.workspaceId) return null\n  if (typeof record.expiresAt !== 'number' || !Number.isFinite(record.expiresAt)) return null\n  if (!Array.isArray(record.allowedTools) || !record.allowedTools.every((tool) => typeof tool === 'string')) return null\n\n  const now = opts.now ?? Date.now()\n  if (record.expiresAt <= now) return null\n\n  return {\n    workspaceId: record.workspaceId,\n    allowedTools: record.allowedTools as string[],\n    expiresAt: record.expiresAt,\n  }\n}\n","/**\n * Transport-agnostic JSON-RPC 2.0 callback handler for the delegated-tool\n * bridge — the endpoint an EXTERNAL stateful agent calls back into mid-session,\n * authorized by the bearer minted via {@link mintDelegatedToolToken}.\n *\n * The product supplies three seams; the handler bakes in no domain assumptions\n * (no voice/phony/calendar specifics):\n *\n *   - `verifyToken(bearer)` → claims | null — recover & validate the lease\n *     (fresh, signed). Usually {@link verifyDelegatedToolToken} bound to a secret.\n *   - `resolveTool(workspaceId, name)` → invocable | null — the product's tool\n *     registry. `null` means \"this workspace cannot reach that tool right now\".\n *   - `isIntegrationConnected(workspaceId, tool)` → boolean — the live\n *     connectivity gate; a stale token naming a since-disconnected integration\n *     resolves but fails this check.\n *\n * FAIL-CLOSED, in order, for `tools/call`: (1) bearer verifies, (2) tool is in\n * the lease allow-list, (3) tool resolves for the workspace, (4) the backing\n * integration is connected. Any miss returns a JSON-RPC error and the invocable\n * is never touched.\n *\n * `tools/list` is advisory: it returns the intersection of the allow-list with\n * what currently resolves + is connected, omitting (never erroring) the rest.\n */\n\nimport type { DelegatedToolClaims } from './token.js'\n\nexport interface DelegatedToolDescriptor {\n  /** Wire name the external agent calls by. */\n  name: string\n  description?: string\n  /** JSON Schema for the tool arguments. Defaults to `{ type: 'object' }`. */\n  inputSchema?: unknown\n}\n\nexport interface ResolvedDelegatedTool extends DelegatedToolDescriptor {\n  /**\n   * Invoke the tool with the JSON-RPC `arguments`. Returns the JSON-RPC `result`\n   * payload on success. Throw {@link DelegatedToolInvocationError} to surface a\n   * structured JSON-RPC error (code + data); any other throw becomes -32000.\n   */\n  invoke(args: Record<string, unknown>): Promise<unknown>\n}\n\n/** Throw from `resolveTool().invoke` to control the JSON-RPC error envelope. */\nexport class DelegatedToolInvocationError extends Error {\n  readonly code: number\n  readonly data?: unknown\n  constructor(message: string, options: { code?: number; data?: unknown } = {}) {\n    super(message)\n    this.name = 'DelegatedToolInvocationError'\n    this.code = options.code ?? -32000\n    this.data = options.data\n  }\n}\n\nexport interface DelegatedToolCallSeams {\n  /** Recover lease claims from a raw bearer string, or `null` to reject. */\n  verifyToken(bearer: string): Promise<DelegatedToolClaims | null> | DelegatedToolClaims | null\n  /** The product's tool registry. `null` ⇒ not reachable for this workspace. */\n  resolveTool(\n    workspaceId: string,\n    name: string,\n  ): Promise<ResolvedDelegatedTool | null> | ResolvedDelegatedTool | null\n  /** Live connectivity gate for the integration backing `tool`. */\n  isIntegrationConnected(\n    workspaceId: string,\n    tool: ResolvedDelegatedTool,\n  ): Promise<boolean> | boolean\n  /**\n   * Optional advertised name/version for the JSON-RPC `initialize` handshake.\n   * Defaults to `{ name: 'delegated-tools', version: '1' }`.\n   */\n  serverInfo?: { name: string; version: string }\n}\n\nexport interface JsonRpcRequest {\n  jsonrpc?: unknown\n  id?: unknown\n  method?: unknown\n  params?: unknown\n}\n\nexport interface JsonRpcResponse {\n  jsonrpc: '2.0'\n  id: string | number | null\n  result?: unknown\n  error?: { code: number; message: string; data?: unknown }\n}\n\nconst PROTOCOL_VERSION = '2024-11-05'\n\nfunction normalizeId(id: unknown): string | number | null {\n  return typeof id === 'string' || typeof id === 'number' ? id : null\n}\n\nfunction rpcResult(id: unknown, result: unknown): JsonRpcResponse {\n  return { jsonrpc: '2.0', id: normalizeId(id), result }\n}\n\nfunction rpcError(id: unknown, code: number, message: string, data?: unknown): JsonRpcResponse {\n  return {\n    jsonrpc: '2.0',\n    id: normalizeId(id),\n    error: data === undefined ? { code, message } : { code, message, data },\n  }\n}\n\nfunction extractBearer(authorization: string | null | undefined): string | undefined {\n  return authorization?.match(/^Bearer\\s+(.+)$/i)?.[1]\n}\n\n/**\n * Handle one JSON-RPC call. Accepts a parsed body + the raw `authorization`\n * header value. Returns the JSON-RPC response object (the transport wrapper —\n * {@link handleDelegatedToolRequest} — turns it into an HTTP `Response`).\n */\nexport async function handleDelegatedToolCall(\n  body: JsonRpcRequest,\n  authorization: string | null | undefined,\n  seams: DelegatedToolCallSeams,\n): Promise<JsonRpcResponse> {\n  const id = body.id ?? null\n  const method = typeof body.method === 'string' ? body.method : ''\n\n  const bearer = extractBearer(authorization)\n  const claims = bearer ? await seams.verifyToken(bearer) : null\n  if (!claims) return rpcError(id, -32001, 'Unauthorized')\n\n  if (method === 'initialize') {\n    const info = seams.serverInfo ?? { name: 'delegated-tools', version: '1' }\n    return rpcResult(id, {\n      protocolVersion: PROTOCOL_VERSION,\n      capabilities: { tools: {} },\n      serverInfo: info,\n    })\n  }\n\n  if (method === 'tools/list') {\n    const tools: DelegatedToolDescriptor[] = []\n    for (const name of claims.allowedTools) {\n      const tool = await seams.resolveTool(claims.workspaceId, name)\n      if (!tool) continue\n      if (!(await seams.isIntegrationConnected(claims.workspaceId, tool))) continue\n      tools.push({\n        name: tool.name,\n        description: tool.description,\n        inputSchema: tool.inputSchema ?? { type: 'object' },\n      })\n    }\n    return rpcResult(id, { tools })\n  }\n\n  if (method === 'tools/call') {\n    const params = (body.params ?? {}) as { name?: unknown; arguments?: unknown }\n    const name = typeof params.name === 'string' ? params.name : ''\n    const args =\n      params.arguments && typeof params.arguments === 'object' && !Array.isArray(params.arguments)\n        ? (params.arguments as Record<string, unknown>)\n        : {}\n\n    if (!name) return rpcError(id, -32602, 'Missing tool name')\n    if (!claims.allowedTools.includes(name)) {\n      return rpcError(id, -32602, `Tool not delegated to this session: ${name}`)\n    }\n    const tool = await seams.resolveTool(claims.workspaceId, name)\n    if (!tool) return rpcError(id, -32602, `Tool not available for workspace: ${name}`)\n    if (!(await seams.isIntegrationConnected(claims.workspaceId, tool))) {\n      return rpcError(id, -32602, `Integration not connected for tool: ${name}`)\n    }\n\n    try {\n      const result = await tool.invoke(args)\n      return rpcResult(id, result)\n    } catch (err) {\n      if (err instanceof DelegatedToolInvocationError) {\n        return rpcError(id, err.code, err.message, err.data)\n      }\n      return rpcError(id, -32000, err instanceof Error ? err.message : 'Tool invocation failed')\n    }\n  }\n\n  return rpcError(id, -32601, `Method not found: ${method || '(none)'}`)\n}\n\n/**\n * HTTP transport wrapper around {@link handleDelegatedToolCall}: parses the\n * request, enforces POST, maps the JSON-RPC response to a `Response`. Unauthorized\n * is the only non-200 status (401) so an unauthenticated probe can't distinguish\n * methods; every authenticated JSON-RPC error rides a 200 per the JSON-RPC contract.\n */\nexport async function handleDelegatedToolRequest(\n  request: Request,\n  seams: DelegatedToolCallSeams,\n): Promise<Response> {\n  if (request.method !== 'POST') {\n    return Response.json({ error: 'Method not allowed' }, { status: 405 })\n  }\n\n  let body: JsonRpcRequest\n  try {\n    body = (await request.json()) as JsonRpcRequest\n  } catch {\n    return Response.json(rpcError(null, -32700, 'Parse error'))\n  }\n\n  const response = await handleDelegatedToolCall(body, request.headers.get('authorization'), seams)\n  if (response.error?.code === -32001) {\n    return Response.json(response, { status: 401 })\n  }\n  return Response.json(response)\n}\n","/**\n * Standardized lease payload the product hands to its external agent.\n *\n * The product resolves which tools a workspace may delegate right now, mints a\n * scoped token over exactly those names ({@link mintDelegatedToolToken}), and\n * packages the result as a lease. The external agent (or the broker that builds\n * its session) reads `callbackUrl` + `token` to reach the product's\n * {@link handleDelegatedToolRequest} endpoint mid-session.\n *\n * Standardizing the shape here means every caller's lease looks the same on the\n * wire regardless of the external runtime (voice broker, autonomous worker).\n */\n\nimport { mintDelegatedToolToken } from './token.js'\n\nexport interface IssueDelegatedToolLeaseInput {\n  workspaceId: string\n  allowedTools: string[]\n  ttlSeconds: number\n  /** Shared HMAC secret for the token. Absent ⇒ lease cannot be issued. */\n  secret?: string\n  /** Token prefix; forwarded to {@link mintDelegatedToolToken}. */\n  prefix?: string\n  /** Endpoint the external agent calls back into. Echoed onto the lease. */\n  callbackUrl?: string\n  /** Override the clock (epoch ms) — for tests. */\n  now?: number\n}\n\nexport interface DelegatedToolLease {\n  token: string\n  allowedTools: string[]\n  /** Epoch milliseconds at which the lease (and its token) expires. */\n  expiresAt: number\n  callbackUrl?: string\n}\n\n/**\n * Issue a delegated-tool lease, or `null` when no secret is configured\n * (fail-closed — the product refuses to hand out an unauthenticated lease).\n * Pass an already-filtered `allowedTools`: this helper signs whatever it is\n * given, so the product MUST intersect against what the workspace can delegate\n * before calling.\n */\nexport async function issueDelegatedToolLease(\n  input: IssueDelegatedToolLeaseInput,\n): Promise<DelegatedToolLease | null> {\n  const now = input.now ?? Date.now()\n  const token = await mintDelegatedToolToken({\n    workspaceId: input.workspaceId,\n    allowedTools: input.allowedTools,\n    ttlSeconds: input.ttlSeconds,\n    secret: input.secret,\n    prefix: input.prefix,\n    now,\n  })\n  if (!token) return null\n  return {\n    token,\n    allowedTools: input.allowedTools,\n    expiresAt: now + input.ttlSeconds * 1000,\n    callbackUrl: input.callbackUrl,\n  }\n}\n"],"mappings":";;;AAuBA,IAAM,iBAAiB;AA4BvB,SAAS,gBAAgB,OAAoC;AAC3D,QAAM,QAAQ,OAAO,UAAU,WAAW,IAAI,YAAY,EAAE,OAAO,KAAK,IAAI;AAC5E,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,IAAK,WAAU,OAAO,aAAa,MAAM,CAAC,CAAE;AAC9E,SAAO,KAAK,MAAM,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AAC/E;AAEA,SAAS,wBAAwB,OAA8B;AAC7D,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AACzD,UAAM,SAAS,KAAK,MAAM;AAC1B,UAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,IAAK,OAAM,CAAC,IAAI,OAAO,WAAW,CAAC;AACtE,WAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,EACvC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,KAAK,SAAiB,QAAiC;AACpE,QAAM,MAAM,IAAI,YAAY;AAC5B,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,IAAI,OAAO,MAAM,GAAG,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;AACvH,QAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,OAAO,CAAC;AACrE,SAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;AAC5C;AAGA,SAAS,gBAAgB,GAAW,GAAoB;AACtD,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,SAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC;AAC3E,SAAO,SAAS;AAClB;AAOA,eAAsB,uBAAuB,OAAiE;AAC5G,QAAM,SAAS,MAAM,QAAQ,KAAK;AAClC,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,MAAM,MAAM,OAAO,KAAK,IAAI;AAClC,QAAM,SAA8B;AAAA,IAClC,aAAa,MAAM;AAAA,IACnB,cAAc,MAAM;AAAA,IACpB,WAAW,MAAM,MAAM,aAAa;AAAA,EACtC;AACA,QAAM,UAAU,gBAAgB,KAAK,UAAU,MAAM,CAAC;AACtD,QAAM,YAAY,MAAM,KAAK,SAAS,MAAM;AAC5C,SAAO,GAAG,MAAM,GAAG,OAAO,IAAI,SAAS;AACzC;AAOA,eAAsB,yBACpB,OACA,MACqC;AACrC,QAAM,SAAS,KAAK,QAAQ,KAAK;AACjC,QAAM,SAAS,KAAK,UAAU;AAC9B,MAAI,CAAC,UAAU,CAAC,MAAM,WAAW,MAAM,EAAG,QAAO;AACjD,QAAM,OAAO,MAAM,MAAM,OAAO,MAAM;AACtC,QAAM,MAAM,KAAK,QAAQ,GAAG;AAC5B,MAAI,OAAO,EAAG,QAAO;AACrB,QAAM,UAAU,KAAK,MAAM,GAAG,GAAG;AACjC,QAAM,YAAY,KAAK,MAAM,MAAM,CAAC;AACpC,MAAI,CAAC,WAAW,CAAC,UAAW,QAAO;AAEnC,QAAM,WAAW,MAAM,KAAK,SAAS,MAAM;AAC3C,MAAI,CAAC,gBAAgB,WAAW,QAAQ,EAAG,QAAO;AAElD,QAAM,OAAO,wBAAwB,OAAO;AAC5C,MAAI,SAAS,KAAM,QAAO;AAE1B,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,IAAI;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,QAAM,SAAS;AACf,MAAI,OAAO,OAAO,gBAAgB,YAAY,CAAC,OAAO,YAAa,QAAO;AAC1E,MAAI,OAAO,OAAO,cAAc,YAAY,CAAC,OAAO,SAAS,OAAO,SAAS,EAAG,QAAO;AACvF,MAAI,CAAC,MAAM,QAAQ,OAAO,YAAY,KAAK,CAAC,OAAO,aAAa,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ,EAAG,QAAO;AAElH,QAAM,MAAM,KAAK,OAAO,KAAK,IAAI;AACjC,MAAI,OAAO,aAAa,IAAK,QAAO;AAEpC,SAAO;AAAA,IACL,aAAa,OAAO;AAAA,IACpB,cAAc,OAAO;AAAA,IACrB,WAAW,OAAO;AAAA,EACpB;AACF;;;ACzGO,IAAM,+BAAN,cAA2C,MAAM;AAAA,EAC7C;AAAA,EACA;AAAA,EACT,YAAY,SAAiB,UAA6C,CAAC,GAAG;AAC5E,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO,QAAQ,QAAQ;AAC5B,SAAK,OAAO,QAAQ;AAAA,EACtB;AACF;AAoCA,IAAM,mBAAmB;AAEzB,SAAS,YAAY,IAAqC;AACxD,SAAO,OAAO,OAAO,YAAY,OAAO,OAAO,WAAW,KAAK;AACjE;AAEA,SAAS,UAAU,IAAa,QAAkC;AAChE,SAAO,EAAE,SAAS,OAAO,IAAI,YAAY,EAAE,GAAG,OAAO;AACvD;AAEA,SAAS,SAAS,IAAa,MAAc,SAAiB,MAAiC;AAC7F,SAAO;AAAA,IACL,SAAS;AAAA,IACT,IAAI,YAAY,EAAE;AAAA,IAClB,OAAO,SAAS,SAAY,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,SAAS,KAAK;AAAA,EACxE;AACF;AAEA,SAAS,cAAc,eAA8D;AACnF,SAAO,eAAe,MAAM,kBAAkB,IAAI,CAAC;AACrD;AAOA,eAAsB,wBACpB,MACA,eACA,OAC0B;AAC1B,QAAM,KAAK,KAAK,MAAM;AACtB,QAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;AAE/D,QAAM,SAAS,cAAc,aAAa;AAC1C,QAAM,SAAS,SAAS,MAAM,MAAM,YAAY,MAAM,IAAI;AAC1D,MAAI,CAAC,OAAQ,QAAO,SAAS,IAAI,QAAQ,cAAc;AAEvD,MAAI,WAAW,cAAc;AAC3B,UAAM,OAAO,MAAM,cAAc,EAAE,MAAM,mBAAmB,SAAS,IAAI;AACzE,WAAO,UAAU,IAAI;AAAA,MACnB,iBAAiB;AAAA,MACjB,cAAc,EAAE,OAAO,CAAC,EAAE;AAAA,MAC1B,YAAY;AAAA,IACd,CAAC;AAAA,EACH;AAEA,MAAI,WAAW,cAAc;AAC3B,UAAM,QAAmC,CAAC;AAC1C,eAAW,QAAQ,OAAO,cAAc;AACtC,YAAM,OAAO,MAAM,MAAM,YAAY,OAAO,aAAa,IAAI;AAC7D,UAAI,CAAC,KAAM;AACX,UAAI,CAAE,MAAM,MAAM,uBAAuB,OAAO,aAAa,IAAI,EAAI;AACrE,YAAM,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,aAAa,KAAK;AAAA,QAClB,aAAa,KAAK,eAAe,EAAE,MAAM,SAAS;AAAA,MACpD,CAAC;AAAA,IACH;AACA,WAAO,UAAU,IAAI,EAAE,MAAM,CAAC;AAAA,EAChC;AAEA,MAAI,WAAW,cAAc;AAC3B,UAAM,SAAU,KAAK,UAAU,CAAC;AAChC,UAAM,OAAO,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAC7D,UAAM,OACJ,OAAO,aAAa,OAAO,OAAO,cAAc,YAAY,CAAC,MAAM,QAAQ,OAAO,SAAS,IACtF,OAAO,YACR,CAAC;AAEP,QAAI,CAAC,KAAM,QAAO,SAAS,IAAI,QAAQ,mBAAmB;AAC1D,QAAI,CAAC,OAAO,aAAa,SAAS,IAAI,GAAG;AACvC,aAAO,SAAS,IAAI,QAAQ,uCAAuC,IAAI,EAAE;AAAA,IAC3E;AACA,UAAM,OAAO,MAAM,MAAM,YAAY,OAAO,aAAa,IAAI;AAC7D,QAAI,CAAC,KAAM,QAAO,SAAS,IAAI,QAAQ,qCAAqC,IAAI,EAAE;AAClF,QAAI,CAAE,MAAM,MAAM,uBAAuB,OAAO,aAAa,IAAI,GAAI;AACnE,aAAO,SAAS,IAAI,QAAQ,uCAAuC,IAAI,EAAE;AAAA,IAC3E;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,OAAO,IAAI;AACrC,aAAO,UAAU,IAAI,MAAM;AAAA,IAC7B,SAAS,KAAK;AACZ,UAAI,eAAe,8BAA8B;AAC/C,eAAO,SAAS,IAAI,IAAI,MAAM,IAAI,SAAS,IAAI,IAAI;AAAA,MACrD;AACA,aAAO,SAAS,IAAI,OAAQ,eAAe,QAAQ,IAAI,UAAU,wBAAwB;AAAA,IAC3F;AAAA,EACF;AAEA,SAAO,SAAS,IAAI,QAAQ,qBAAqB,UAAU,QAAQ,EAAE;AACvE;AAQA,eAAsB,2BACpB,SACA,OACmB;AACnB,MAAI,QAAQ,WAAW,QAAQ;AAC7B,WAAO,SAAS,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,MAAI;AACJ,MAAI;AACF,WAAQ,MAAM,QAAQ,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,SAAS,KAAK,SAAS,MAAM,QAAQ,aAAa,CAAC;AAAA,EAC5D;AAEA,QAAM,WAAW,MAAM,wBAAwB,MAAM,QAAQ,QAAQ,IAAI,eAAe,GAAG,KAAK;AAChG,MAAI,SAAS,OAAO,SAAS,QAAQ;AACnC,WAAO,SAAS,KAAK,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChD;AACA,SAAO,SAAS,KAAK,QAAQ;AAC/B;;;ACvKA,eAAsB,wBACpB,OACoC;AACpC,QAAM,MAAM,MAAM,OAAO,KAAK,IAAI;AAClC,QAAM,QAAQ,MAAM,uBAAuB;AAAA,IACzC,aAAa,MAAM;AAAA,IACnB,cAAc,MAAM;AAAA,IACpB,YAAY,MAAM;AAAA,IAClB,QAAQ,MAAM;AAAA,IACd,QAAQ,MAAM;AAAA,IACd;AAAA,EACF,CAAC;AACD,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO;AAAA,IACL;AAAA,IACA,cAAc,MAAM;AAAA,IACpB,WAAW,MAAM,MAAM,aAAa;AAAA,IACpC,aAAa,MAAM;AAAA,EACrB;AACF;","names":[]}

package/dist/importers-DANyqwIT.d.ts

@@ -0,0 +1,57 @@
+import { d as IntegrationConnectorCategory, b as IntegrationConnector, g as IntegrationDataClass, f as IntegrationActionRisk } from './core-types-D4MGC44S.js';
+
+interface ImportCatalogOptions {
+    providerId: string;
+    connectorId: string;
+    connectorTitle: string;
+    category?: IntegrationConnectorCategory;
+    auth?: IntegrationConnector['auth'];
+    scopes?: string[];
+    dataClass?: IntegrationDataClass;
+    defaultRisk?: IntegrationActionRisk;
+}
+interface OpenApiDocument {
+    openapi?: string;
+    swagger?: string;
+    info?: {
+        title?: string;
+    };
+    paths?: Record<string, Record<string, OpenApiOperation | unknown>>;
+}
+interface OpenApiOperation {
+    operationId?: string;
+    summary?: string;
+    description?: string;
+    parameters?: unknown[];
+    requestBody?: unknown;
+    responses?: unknown;
+    security?: Array<Record<string, string[]>>;
+    tags?: string[];
+}
+interface GraphqlOperationSpec {
+    name: string;
+    kind: 'query' | 'mutation';
+    description?: string;
+    inputSchema?: unknown;
+    outputSchema?: unknown;
+    requiredScopes?: string[];
+}
+interface McpCatalogTool {
+    name: string;
+    description?: string;
+    inputSchema?: unknown;
+    annotations?: {
+        readOnlyHint?: boolean;
+        destructiveHint?: boolean;
+        openWorldHint?: boolean;
+        title?: string;
+    };
+}
+interface McpCatalog {
+    tools: McpCatalogTool[];
+}
+declare function importOpenApiConnector(document: OpenApiDocument, options: ImportCatalogOptions): IntegrationConnector;
+declare function importGraphqlConnector(operations: GraphqlOperationSpec[], options: ImportCatalogOptions): IntegrationConnector;
+declare function importMcpConnector(catalog: McpCatalog, options: ImportCatalogOptions): IntegrationConnector;
+
+export { type GraphqlOperationSpec as G, type ImportCatalogOptions as I, type McpCatalogTool as M, type OpenApiDocument as O, type McpCatalog as a, type OpenApiOperation as b, importMcpConnector as c, importOpenApiConnector as d, importGraphqlConnector as i };

package/dist/index.d.ts

@@ -1,9 +1,9 @@
 import { IntegrationRegistrySummary, IntegrationRegistryConflict, ComposeIntegrationRegistryOptions, IntegrationRegistry } from './registry.js';
 export { IntegrationCatalogExecutability, IntegrationRegistryEntry, IntegrationRegistrySourceRef, IntegrationSupportTier, buildDefaultIntegrationRegistry, canonicalConnectorId, classifyIntegrationCatalogExecutability, composeIntegrationRegistry, inferIntegrationSupportTier, summarizeIntegrationRegistry } from './registry.js';
-import { m as IntegrationPolicyEngine, n as IntegrationApprovalRequest, I as IntegrationActor, o as IntegrationGuardContext, p as IntegrationPolicyDecision, b as IntegrationConnector, e as IntegrationConnectorAction, i as IntegrationProviderKind, c as IntegrationConnection, h as IntegrationCatalogSource, q as IntegrationProvider, r as IntegrationSecretStore, s as IntegrationConnectionStore, t as IntegrationCredentialsRotatedEvent, u as IntegrationOAuthStateStore, v as IntegrationOAuthState, w as IntegrationOAuthStateOutcome, S as SecretRef, d as IntegrationConnectorCategory, f as IntegrationActionRisk, g as IntegrationDataClass, x as IntegrationTriggerSubscription, y as IntegrationTriggerEvent, j as IntegrationActionGuard, l as IntegrationActionResult, k as IntegrationActionRequest, z as StartAuthRequest, A as StartAuthResult, C as CompleteAuthRequest, B as InvokeWithCapabilityRequest, D as IntegrationCapability, E as IntegrationHubOptions, F as IssueCapabilityRequest, a as IssuedIntegrationCapability, H as HttpIntegrationProviderOptions } from './core-types-CjWifQOf.js';
-export { G as IntegrationConnectorTrigger } from './core-types-CjWifQOf.js';
-import { I as IntegrationAuditSink } from './consumer-yV4NtH2h.js';
-export { C as CapabilityBundleResult, a as CheckConnectorInput, b as CheckConnectorResult, c as CreateGrantsInput, d as InMemoryIntegrationAuditStore, e as InMemoryIntegrationHealthcheckStore, f as IntegrationAuditEvent, g as IntegrationAuditEventType, h as IntegrationAuditFilter, i as IntegrationAuditStore, j as IntegrationHealthcheckCheck, k as IntegrationHealthcheckResult, l as IntegrationHealthcheckStatus, m as IntegrationHealthcheckStore, n as IntegrationHubAuth, o as IntegrationHubClient, p as IntegrationHubClientOptions, q as IntegrationHubRequestError, L as ListGrantsInput, M as MintCapabilityBundleInput, R as ResolveManifestInput, r as createAuditingActionGuard, s as createIntegrationAuditEvent, t as createIntegrationHubClient, u as healthcheckRequest, v as runIntegrationHealthcheck, w as runIntegrationHealthchecks, x as sanitizeAuditConnection } from './consumer-yV4NtH2h.js';
+import { n as IntegrationPolicyEngine, o as IntegrationApprovalRequest, I as IntegrationActor, p as IntegrationGuardContext, q as IntegrationPolicyDecision, b as IntegrationConnector, e as IntegrationConnectorAction, i as IntegrationProviderKind, c as IntegrationConnection, h as IntegrationCatalogSource, j as IntegrationProvider, r as IntegrationSecretStore, s as IntegrationConnectionStore, t as IntegrationCredentialsRotatedEvent, u as IntegrationOAuthStateStore, v as IntegrationOAuthState, w as IntegrationOAuthStateOutcome, S as SecretRef, d as IntegrationConnectorCategory, f as IntegrationActionRisk, g as IntegrationDataClass, x as IntegrationTriggerSubscription, y as IntegrationTriggerEvent, k as IntegrationActionGuard, m as IntegrationActionResult, l as IntegrationActionRequest, z as StartAuthRequest, A as StartAuthResult, C as CompleteAuthRequest, B as InvokeWithCapabilityRequest, D as IntegrationCapability, E as IntegrationHubOptions, F as IssueCapabilityRequest, a as IssuedIntegrationCapability, H as HttpIntegrationProviderOptions } from './core-types-D4MGC44S.js';
+export { G as IntegrationConnectorTrigger } from './core-types-D4MGC44S.js';
+import { I as IntegrationAuditSink } from './consumer-Dzt2uOo_.js';
+export { C as CapabilityBundleResult, a as CheckConnectorInput, b as CheckConnectorResult, c as CreateGrantsInput, d as InMemoryIntegrationAuditStore, e as InMemoryIntegrationHealthcheckStore, f as IntegrationAuditEvent, g as IntegrationAuditEventType, h as IntegrationAuditFilter, i as IntegrationAuditStore, j as IntegrationHealthcheckCheck, k as IntegrationHealthcheckResult, l as IntegrationHealthcheckStatus, m as IntegrationHealthcheckStore, n as IntegrationHubAuth, o as IntegrationHubClient, p as IntegrationHubClientOptions, q as IntegrationHubRequestError, L as ListGrantsInput, M as MintCapabilityBundleInput, R as ResolveManifestInput, r as createAuditingActionGuard, s as createIntegrationAuditEvent, t as createIntegrationHubClient, u as healthcheckRequest, v as runIntegrationHealthcheck, w as runIntegrationHealthchecks, x as sanitizeAuditConnection } from './consumer-Dzt2uOo_.js';
 import { IntegrationSandboxBundle, IntegrationManifest, IntegrationManifestResolution, IntegrationRuntime, IntegrationGrantStore, IntegrationRequirementMode } from './runtime.js';
 export { InMemoryIntegrationGrantStore, IntegrationCapabilityBinding, IntegrationGrant, IntegrationRequirement, IntegrationRequirementResolution, IntegrationRequirementStatus, IntegrationRuntimeHub, IntegrationRuntimeOptions, createIntegrationRuntime } from './runtime.js';
 import { C as ConnectorAdapter, R as ResolvedDataSource, a as ConnectorCredentials } from './types-Bxg-wJkW.js';
@@ -15,6 +15,7 @@ export { DEFAULT_SIGNATURE_TOLERANCE_SECONDS, ExchangeCodeInput, GenericHmacVeri
 export { DocuSealOptions, EtsyOptions, GmailOptions, GoogleCalendarOptions, GoogleDocsOptions, GoogleDriveOptions, GoogleFormsOptions, GoogleSheetsOptions, HelloSignOptions, HubSpotOptions, MicrosoftCalendarOptions, MicrosoftGraphOptions, MicrosoftTeamsOptions, NotionDatabaseOptions, OneDriveOptions, OutlookMailOptions, PandaDocOptions, RestConnectorSpec, RestCredentialPlacement, RestOperationSpec, RestRequestSpec, SharePointOptions, SlackOptions, TELEGRAM_FILE_DOWNLOAD_ROOT, TwitterOptions, WhatsappBusinessOptions, activecampaignConnector, acumbamailConnector, adobeCreativeCloudConnector, afforaiConnector, agentxConnector, aidbaseConnector, aipriseConnector, airOpsConnector, aircallConnector, airtableConnector, airtopConnector, alaiConnector, altTextAiConnector, alttextifyConnector, amazonBedrockConnector, amazonSecretsManagerConnector, amazonSesConnector, amazonSnsConnector, amazonSqsConnector, amazonTextractConnector, aminosConnector, ampecoConnector, anthropicConnector, apitableConnector, apitemplateIoConnector, apolloConnector, appfollowConnector, asanaConnector, ashbyConnector, asknewsConnector, assemblyaiConnector, attioConnector, auth0Connector, autocallsConnector, avianConnector, avomaConnector, azureAdConnector, azureCommunicationServicesConnector, azureOpenaiConnector, backblazeConnector, bamboohrConnector, barcodeLookupConnector, baremetricsConnector, basecampConnector, beamerConnector, bettermodeConnector, bexioConnector, bigcommerceConnector, biginByZohoConnector, billplzConnector, bitlyConnector, blandAiConnector, blueskyConnector, bolnaConnector, bonjoroConnector, bookedinConnector, boxConnector, braveSearchConnector, brazeConnector, brilliantDirectoriesConnector, browseAiConnector, calComConnector, calendlyConnector, campaignMonitorConnector, cannyConnector, canvaConnector, capsuleCrmConnector, captainDataConnector, cashfreePaymentsConnector, certopusConnector, chainalysisApiConnector, chargebeeConnector, chargekeepConnector, chartlyConnector, chatDataConnector, chatbaseConnector, chatlingConnector, chatnodeConnector, chatwootConnector, checkoutConnector, circleConnector, clearoutConnector, clicdataConnector, clickupConnector, clioConnector, clockifyConnector, clockodoConnector, closeConnector, cloudconvertConnector, cloudinaryConnector, cloutlyConnector, codaConnector, cognitoFormsConnector, cohereConnector, cometapiConnector, comfyicuConnector, confluenceConnector, constantContactConnector, contentfulConnector, convertkitConnector, copperConnector, copyAiConnector, crispConnector, cryptolensConnector, customerIoConnector, customgptConnector, dashworksConnector, datadogConnector, datafuelConnector, datocmsConnector, declarativeRestConnector, deepseekConnector, denserAiConnector, descriptConnector, devinConnector, discordConnector, dittofeedConnector, doctlyConnector, documentproConnector, documergeConnector, docuseal, docusignConnector, dropboxConnector, dubConnector, dumplingAiConnector, dustConnector, easyPeasyAiConnector, ebayConnector, edenAiConnector, elasticEmailConnector, emailitConnector, emailoctopusConnector, enrichlayerConnector, esignaturesConnector, etsyConnector, exaConnector, facebookLeadsConnector, facebookPagesConnector, fathomAnalyticsConnector, fathomConnector, figjamConnector, figmaConnector, filloutFormsConnector, firebaseConnector, fireberryConnector, firecrawlConnector, firefliesAiConnector, flipandoConnector, flowiseConnector, flowluConnector, folkConnector, foreplayCoConnector, formbricksConnector, formstackConnector, fountainConnector, fragmentConnector, frameConnector, freeAgentConnector, freshsalesConnector, freshserviceConnector, frontConnector, gameballConnector, geminiConnector, ghostcmsConnector, gistlyConnector, giteaConnector, githubConnector, gitlabConnector, glideConnector, gmail, googleBigqueryConnector, googleCalendar, googleCloudStorageConnector, googleContactsConnector, googleDocs, googleDrive, googleForms, googleGeminiConnector, googleMyBusinessConnector, googleSearchConnector, googleSearchConsoleConnector, googleSheets, googleSlidesConnector, googleTasksConnector, googleVertexaiConnector, googlechatConnector, gorgiasConnector, gotifyConnector, gptzeroDetectAiConnector, granolaConnector, greenhouseConnector, greenptConnector, greipConnector, griptapeConnector, gristConnector, guideliteConnector, gustoConnector, harvestConnector, hashiCorpVaultConnector, hastewireConnector, heartbeatConnector, hedyConnector, hellosign, helpscoutConnector, heygenConnector, heymarketSmsConnector, housecallProConnector, hubspot, huggingFaceConnector, huggingfaceConnector, humeAiConnector, hunterConnector, hystructConnector, ibmCognoseConnector, imageRouterConnector, imapConnector, influencersClubConnector, insightlyConnector, insightoAiConnector, instaChartsConnector, instantlyAiConnector, instasentConnector, intercomConnector, invoiceninjaConnector, jinaAiConnector, jiraCloudConnector, jiraDataCenterConnector, joggAiConnector, jotformConnector, justInvoiceConnector, kallabotAiConnector, kapsoConnector, kimaiConnector, kissflowConnector, kizeoFormsConnector, klaviyoConnector, klentyConnector, knackConnector, knockConnector, koFiConnector, kommoConnector, kudosityConnector, kustomerConnector, leadConnectorConnector, leapAiConnector, leexiConnector, lemlistConnector, lemonSqueezyConnector, letsCalendarConnector, lettaConnector, leverConnector, lightfunnelsConnector, linearConnector, linkaConnector, linkupConnector, llmrailsConnector, lobstermailConnector, localaiConnector, loftyConnector, logrocketConnector, logsnagConnector, lokaliseConnector, loopsConnector, lucidyaConnector, lushaConnector, luxuryPresenceConnector, magicalApiConnector, mailchainConnector, mailchimpConnector, mailerLiteConnector, mailercheckConnector, mailerooConnector, mailgunConnector, makeConnector, manychatConnector, marketoConnector, mastodonConnector, matomoConnector, matrixConnector, mattermostConnector, mauticConnector, medullarConnector, meetgeekAiConnector, memConnector, messagebirdConnector, metabaseConnector, microsoft365PeopleConnector, microsoft365PlannerConnector, microsoftCalendar, microsoftDynamics365BusinessCentralConnector, microsoftDynamicsCrmConnector, microsoftExcel365Connector, microsoftGraph, microsoftOnedriveConnector, microsoftOnenoteConnector, microsoftOutlookCalendarConnector, microsoftOutlookConnector, microsoftPowerBiConnector, microsoftSharepointConnector, microsoftTeams, microsoftTodoConnector, millionverifierConnector, mindStudioConnector, mindeeConnector, miroConnector, missiveConnector, mixmaxConnector, mixpanelConnector, mollieConnector, mondayConnector, mongodbConnector, n8nConnector, netlifyConnector, niftyConnector, ninjapipeConnector, nocodbConnector, notionConnector, notionDatabase, ntfyConnector, odooConnector, omniCoConnector, omnihrConnector, oneDrive, openPhoneConnector, openRouterConnector, openaiConnector, openmicAiConnector, opnformConnector, opportifyConnector, opsgenieConnector, oracleDatabaseConnector, orimonConnector, outlookMail, paddleConnector, pagerdutyConnector, pandadoc, paperformConnector, parseurConnector, pastefyConnector, paywhirlConnector, pdfmonkeyConnector, peekshotConnector, perplexityAiConnector, personalAiConnector, phonyConnector, pinchPaymentsConnector, pineconeConnector, pipedreamConnector, pipedriveConnector, placidConnector, plausibleConnector, pocketbaseConnector, pollybotAiConnector, postgresConnector, posthogConnector, postizConnector, postmarkConnector, predictLeadsConnector, productboardConnector, proxycurlConnector, pushbulletConnector, pushoverConnector, qawafelConnector, qdrantConnector, quadernoConnector, quickbooksConnector, quickzuConnector, raiaAiConnector, rapidtextAiConnector, reachinboxConnector, recallAiConnector, redditConnector, reoonVerifierConnector, replyIoConnector, retableConnector, retellAiConnector, ripplingConnector, robollyConnector, runwareConnector, saasticConnector, saleorConnector, salesforceConnector, sanityConnector, sardisConnector, savvycalConnector, scrapegraphaiConnector, scrapelessConnector, seekTableConnector, sendgridConnector, sendinblueConnector, sendpulseConnector, senjaConnector, sentryConnector, serpstatConnector, serviceNowConnector, sharepoint, shippoConnector, shopifyConnector, shortIoConnector, signNowConnector, signrequestConnector, simplirouteConnector, simplybookmeConnector, skyprepConnector, slack, slackEventsConnector, smartleadConnector, smartsheetConnector, smartsuiteConnector, smooveConnector, smsmodeConnector, snowflakeConnector, socialkitConnector, squareConnector, stripeConnector, stripePackConnector, stripeWebhookReceiverConnector, supabaseConnector, supadataConnector, swarmnodeConnector, systemeIoConnector, tableauConnector, talkableConnector, tallyConnector, teableConnector, telegramConnector, telnyxConnector, tenzoConnector, textcortexAiConnector, ticktickConnector, timeOpsConnector, timelinesAiConnector, tlDvConnector, todoistConnector, togglTrackConnector, totalcmsConnector, trelloConnector, twentyConnector, twilioConnector, twilioSmsConnector, twinLabsConnector, twitter, twitterConnector, typeformConnector, typefullyConnector, umamiConnector, upgradechatConnector, uscreenConnector, validatedmailsConnector, vapiConnector, vboutConnector, vercelConnector, videoaskConnector, vidlab7Connector, vlmRunConnector, voucheryIoConnector, vtexConnector, vtigerConnector, wafeqConnector, weaviateConnector, webflowConnector, webhookConnector, webscrapingAiConnector, whatConvertsConnector, whatsappBusiness, whatsappConnector, whatsscaleConnector, wonderchatConnector, woocommerceConnector, woodpeckerConnector, wootricConnector, wordpressConnector, workableConnector, workdayConnector, wrikeConnector, writesonicBulkConnector, wufooConnector, xeroConnector, youcanbookmeConnector, zagomailConnector, zapierConnector, zendeskConnector, zendeskSellConnector, zeplinConnector, zerobounceConnector, zohoBookingsConnector, zohoCrmConnector, zohoDeskConnector, zuoraConnector } from './connectors/adapters/index.js';
 export { D as DEFAULT_TANGLE_PLATFORM_URL, d as TANGLE_API_KEY_PREFIX, e as TANGLE_SERVICE_TOKEN_PREFIX, b as TangleIdentityClient, T as TangleIdentityOptions, f as TangleIdentityUnreachableError, c as TangleTokenVerifyFailure, g as TangleTokenVerifyResult, a as TangleUserSummary, h as TangleWorkspaceSummary, i as createTangleIdentityClient, t as tangleIdentity } from './tangle-id-hDDWP-2f.js';
 export { IntegrationCatalogView, IntegrationToolDefinition, IntegrationToolSearchFilters, IntegrationToolSearchResult, McpToolDefinition, buildIntegrationCatalogView, buildIntegrationToolCatalog, describeIntegrationTool, flattenIntegrationToolDefinition, integrationToolName, parseIntegrationToolName, searchIntegrationTools, toMcpTools } from './catalog.js';
+export { G as GraphqlOperationSpec, I as ImportCatalogOptions, a as McpCatalog, M as McpCatalogTool, O as OpenApiDocument, b as OpenApiOperation, i as importGraphqlConnector, c as importMcpConnector, d as importOpenApiConnector } from './importers-DANyqwIT.js';
 export { IntegrationActionPack, IntegrationCoveragePriority, IntegrationCoverageSpec, buildIntegrationCoverageConnectors, integrationCoverageChecklistMarkdown, listIntegrationCoverageSpecs } from './coverage-catalog.js';
 export { ApiKeyAuthSpec, ConnectorAuthSpec, ConsoleStep, CredentialFieldSpec, CredentialValidationInput, CredentialValidationResult, CustomAuthSpec, HealthcheckPlan, HealthcheckSpec, HmacAuthSpec, INTEGRATION_FAMILIES, IntegrationAuthMode, IntegrationAuthSpec, IntegrationFamilyId, IntegrationFamilySpec, IntegrationLifecycleSpec, IntegrationPlannerHints, IntegrationSetupSpec, IntegrationSpec, IntegrationSpecStatus, IntegrationSpecValidationIssue, IntegrationSpecValidationResult, NoneAuthSpec, NormalizedPermission, OAuth2AuthSpec, PermissionDescriptor, PostSetupCheck, Quirk, RenderSpecOptions, RenderedConsoleStep, ScopeDescriptor, assertValidIntegrationSpec, buildHealthcheckPlan, consoleStepsToText, getIntegrationFamily, getIntegrationSpec, integrationSpecToConnector, listExecutableIntegrationSpecs, listIntegrationSpecs, renderAgentToolDescription, renderConsoleSteps, renderRunbookMarkdown, resolveConnectorAuthSpec, specAuthToConnectorAuth, validateCredentialFormat, validateCredentialSet, validateIntegrationSpec } from './specs.js';
 
@@ -879,60 +880,6 @@ declare class IntegrationSandboxHost {
     dispatch(envelope: IntegrationInvocationEnvelope): Promise<NormalizedIntegrationResult>;
 }
 
-interface ImportCatalogOptions {
-    providerId: string;
-    connectorId: string;
-    connectorTitle: string;
-    category?: IntegrationConnectorCategory;
-    auth?: IntegrationConnector['auth'];
-    scopes?: string[];
-    dataClass?: IntegrationDataClass;
-    defaultRisk?: IntegrationActionRisk;
-}
-interface OpenApiDocument {
-    openapi?: string;
-    swagger?: string;
-    info?: {
-        title?: string;
-    };
-    paths?: Record<string, Record<string, OpenApiOperation | unknown>>;
-}
-interface OpenApiOperation {
-    operationId?: string;
-    summary?: string;
-    description?: string;
-    parameters?: unknown[];
-    requestBody?: unknown;
-    responses?: unknown;
-    security?: Array<Record<string, string[]>>;
-    tags?: string[];
-}
-interface GraphqlOperationSpec {
-    name: string;
-    kind: 'query' | 'mutation';
-    description?: string;
-    inputSchema?: unknown;
-    outputSchema?: unknown;
-    requiredScopes?: string[];
-}
-interface McpCatalogTool {
-    name: string;
-    description?: string;
-    inputSchema?: unknown;
-    annotations?: {
-        readOnlyHint?: boolean;
-        destructiveHint?: boolean;
-        openWorldHint?: boolean;
-        title?: string;
-    };
-}
-interface McpCatalog {
-    tools: McpCatalogTool[];
-}
-declare function importOpenApiConnector(document: OpenApiDocument, options: ImportCatalogOptions): IntegrationConnector;
-declare function importGraphqlConnector(operations: GraphqlOperationSpec[], options: ImportCatalogOptions): IntegrationConnector;
-declare function importMcpConnector(catalog: McpCatalog, options: ImportCatalogOptions): IntegrationConnector;
-
 interface GatewayCatalogProviderOptions {
     id: string;
     kind: Extract<IntegrationProviderKind, 'nango' | 'pipedream' | 'activepieces' | 'tangle_catalog' | 'zapier' | 'executor' | 'custom'>;
@@ -1299,4 +1246,4 @@ declare function createHttpIntegrationProvider(options: HttpIntegrationProviderO
 declare function signCapability(capability: IntegrationCapability, secret: string): string;
 declare function verifyCapabilityToken(token: string, secret: string): IntegrationCapability;
 
-export { ACTIVEPIECES_OVERRIDES, ACTIVEPIECES_PUBLIC_CATALOG_URL, type ActivepiecesCatalogAuthField, type ActivepiecesCatalogEntry, type ActivepiecesExecutorInvocation, type ActivepiecesExecutorProviderOptions, type ActivepiecesPieceOverride, type AppSummary, ApprovalBackedPolicyEngine, type ApprovalBackedPolicyOptions, type BrokerToken, CANONICAL_INTEGRATION_ACTIONS, type CanonicalIntegrationActionId, type CanonicalLaunchConnectorOptions, type CatalogExecutorInvocation, type CatalogExecutorProviderOptions, CompleteAuthRequest, ComposeIntegrationRegistryOptions, type ConnectionCredentialResolverOptions, ConnectorAdapter, type ConnectorAdapterProviderOptions, ConnectorCredentials, type ConsentSummary, type CredentialBackedAdapterProviderOptions, DEFAULT_INTEGRATION_BRIDGE_ENV, DefaultIntegrationActionGuard, type DiscoverWorkspaceCapabilitiesInput, type GatewayCatalogAction, type GatewayCatalogEntry, type GatewayCatalogProviderOptions, type GatewayCatalogTrigger, type GraphqlOperationSpec, HttpIntegrationProviderOptions, type ImportCatalogOptions, InMemoryConnectionStore, InMemoryIntegrationApprovalStore, InMemoryIntegrationEventStore, InMemoryIntegrationIdempotencyStore, InMemoryIntegrationOAuthStateStore, InMemoryIntegrationSecretStore, InMemoryIntegrationWorkflowStore, type InferIntegrationRequirementsOptions, type InstalledIntegrationWorkflow, IntegrationActionGuard, IntegrationActionRequest, IntegrationActionResult, IntegrationActionRisk, IntegrationActor, type IntegrationApprovalFilter, type IntegrationApprovalRecord, IntegrationApprovalRequest, type IntegrationApprovalResolution, type IntegrationApprovalStatus, type IntegrationApprovalStore, IntegrationAuditSink, type IntegrationBridgePayload, type IntegrationBridgeToolBinding, IntegrationCapability, type IntegrationCatalogFreshnessOptions, type IntegrationCatalogFreshnessResult, IntegrationCatalogSource, IntegrationConnection, IntegrationConnectionStore, IntegrationConnector, IntegrationConnectorAction, IntegrationConnectorCategory, IntegrationCredentialsRotatedEvent, IntegrationDataClass, IntegrationError, type IntegrationErrorRuntimeCode, type IntegrationEventStore, IntegrationGrantStore, IntegrationGuardContext, IntegrationHub, IntegrationHubOptions, type IntegrationIdempotencyRecord, type IntegrationIdempotencyStore, type IntegrationInvocationEnvelope, type IntegrationInvocationEnvelopeValidationOptions, IntegrationManifest, IntegrationManifestResolution, IntegrationOAuthState, IntegrationOAuthStateOutcome, IntegrationOAuthStateStore, IntegrationPolicyDecision, type IntegrationPolicyEffect, IntegrationPolicyEngine, type IntegrationPolicyRule, IntegrationProvider, IntegrationProviderKind, type IntegrationRateLimitDecision, type IntegrationRateLimiter, IntegrationRegistry, IntegrationRegistryConflict, IntegrationRegistrySummary, IntegrationRequirementMode, IntegrationRuntime, IntegrationSandboxBundle, IntegrationSandboxHost, type IntegrationSandboxHostHub, type IntegrationSandboxHostOptions, IntegrationSecretStore, IntegrationTriggerEvent, IntegrationTriggerSubscription, type IntegrationWebhookReceiverResult, type IntegrationWorkflowDefinition, IntegrationWorkflowRuntime, type IntegrationWorkflowRuntimeHub, type IntegrationWorkflowRuntimeOptions, type IntegrationWorkflowStore, InvokeWithCapabilityRequest, IssueCapabilityRequest, IssuedIntegrationCapability, type ManifestValidationIssue, type ManifestValidationResult, type McpCatalog, type McpCatalogTool, type MissingRequirementExplanation, type NormalizedIntegrationResult, type OAuthClientCredentials, type OpenApiDocument, type OpenApiOperation, PROVIDER_PASSTHROUGH_ACTION, type PlatformIntegrationPolicyPresetOptions, type ProviderHttpRequestInput, type ProviderPassthroughPolicy, type RegisterAppInput, type RegisteredApp, type RenderConsentOptions, ResolvedDataSource, SecretRef, StartAuthRequest, StartAuthResult, StaticIntegrationPolicyEngine, type StaticIntegrationPolicyOptions, type StoredIntegrationEvent, TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID, TANGLE_INTEGRATIONS_CATALOG_SOURCE, TangleAppsClient, type TangleAppsClientOptions, type TangleCatalogExecutorInvocation, type TangleCatalogExecutorProviderOptions, type TangleCatalogRuntimePackageManifest, type TangleCatalogRuntimePackageManifestOptions, type TangleCatalogTriggerInvocation, type TangleIntegrationCatalogEntry, type TangleIntegrationCatalogFreshnessOptions, type TangleIntegrationCatalogFreshnessResult, type TangleIntegrationContract, type TangleIntegrationContractStatus, type TangleIntegrationImplementationKind, type TangleIntegrationInvokeInput, type TangleIntegrationInvokeResult, TangleIntegrationsClient, type TangleIntegrationsClientOptions, type WorkspaceCapability, type WorkspaceCapabilityDiscovery, type WorkspaceToolSchema, type WorkspaceTrigger, adapterManifestsToConnectors, assertValidIntegrationManifest, auditIntegrationCatalogFreshness, auditTangleIntegrationCatalogFreshness, buildActivepiecesConnectors, buildApprovalRequest, buildCanonicalLaunchConnectors, buildIntegrationBridgeEnvironment, buildIntegrationBridgePayload, buildIntegrationInvocationEnvelope, buildTangleCatalogRuntimePackageManifest, buildTangleIntegrationCatalogConnectors, calendarExercisePlannerManifest, canonicalActionConnectorId, createActivepiecesExecutorProvider, createApprovalBackedPolicyEngine, createCatalogExecutorProvider, createConnectionCredentialResolver, createConnectorAdapterCatalogSource, createConnectorAdapterProvider, createCredentialBackedAdapterProvider, createDefaultIntegrationActionGuard, createDefaultIntegrationPolicyEngine, createGatewayCatalogProvider, createHttpIntegrationProvider, createIntegrationWorkflowRuntime, createMockIntegrationProvider, createPlatformIntegrationPolicyPreset, createTangleAppsClient, createTangleCatalogExecutorProvider, createTangleIntegrationsClient, decodeIntegrationBridgePayload, discoverWorkspaceCapabilities, dispatchIntegrationInvocation, encodeIntegrationBridgePayload, explainMissingRequirements, extractActivepiecesPublicPieceCount, extractExternalCatalogPublicCount, filterDiscoveryByWorkspaceScopes, getActivepiecesOverride, importGraphqlConnector, importMcpConnector, importOpenApiConnector, inferIntegrationManifestFromTools, invocationRequestFromEnvelope, listActivepiecesCatalogEntries, listTangleIntegrationCatalogEntries, listTangleIntegrationCatalogRuntimePackages, listTangleIntegrationContracts, listTangleNativeAdapterIds, manifestToConnector, normalizeGatewayCatalog, normalizeIntegrationResult, parseIntegrationBridgeEnvironment, receiveIntegrationWebhook, redactApprovalRequest, redactCapability, redactIntegrationBridgePayload, redactInvocationEnvelope, renderApprovalCopy, renderConsentSummary, renderTangleCatalogRuntimePnpmAddCommand, resolveConnectionCredentials, resolveIntegrationApproval, revokeConnection, sanitizeConnection, signCapability, storedEventToTriggerEvent, validateIntegrationInvocationEnvelope, validateIntegrationManifest, validateProviderPassthroughRequest, verifyCapabilityToken };
+export { ACTIVEPIECES_OVERRIDES, ACTIVEPIECES_PUBLIC_CATALOG_URL, type ActivepiecesCatalogAuthField, type ActivepiecesCatalogEntry, type ActivepiecesExecutorInvocation, type ActivepiecesExecutorProviderOptions, type ActivepiecesPieceOverride, type AppSummary, ApprovalBackedPolicyEngine, type ApprovalBackedPolicyOptions, type BrokerToken, CANONICAL_INTEGRATION_ACTIONS, type CanonicalIntegrationActionId, type CanonicalLaunchConnectorOptions, type CatalogExecutorInvocation, type CatalogExecutorProviderOptions, CompleteAuthRequest, ComposeIntegrationRegistryOptions, type ConnectionCredentialResolverOptions, ConnectorAdapter, type ConnectorAdapterProviderOptions, ConnectorCredentials, type ConsentSummary, type CredentialBackedAdapterProviderOptions, DEFAULT_INTEGRATION_BRIDGE_ENV, DefaultIntegrationActionGuard, type DiscoverWorkspaceCapabilitiesInput, type GatewayCatalogAction, type GatewayCatalogEntry, type GatewayCatalogProviderOptions, type GatewayCatalogTrigger, HttpIntegrationProviderOptions, InMemoryConnectionStore, InMemoryIntegrationApprovalStore, InMemoryIntegrationEventStore, InMemoryIntegrationIdempotencyStore, InMemoryIntegrationOAuthStateStore, InMemoryIntegrationSecretStore, InMemoryIntegrationWorkflowStore, type InferIntegrationRequirementsOptions, type InstalledIntegrationWorkflow, IntegrationActionGuard, IntegrationActionRequest, IntegrationActionResult, IntegrationActionRisk, IntegrationActor, type IntegrationApprovalFilter, type IntegrationApprovalRecord, IntegrationApprovalRequest, type IntegrationApprovalResolution, type IntegrationApprovalStatus, type IntegrationApprovalStore, IntegrationAuditSink, type IntegrationBridgePayload, type IntegrationBridgeToolBinding, IntegrationCapability, type IntegrationCatalogFreshnessOptions, type IntegrationCatalogFreshnessResult, IntegrationCatalogSource, IntegrationConnection, IntegrationConnectionStore, IntegrationConnector, IntegrationConnectorAction, IntegrationConnectorCategory, IntegrationCredentialsRotatedEvent, IntegrationDataClass, IntegrationError, type IntegrationErrorRuntimeCode, type IntegrationEventStore, IntegrationGrantStore, IntegrationGuardContext, IntegrationHub, IntegrationHubOptions, type IntegrationIdempotencyRecord, type IntegrationIdempotencyStore, type IntegrationInvocationEnvelope, type IntegrationInvocationEnvelopeValidationOptions, IntegrationManifest, IntegrationManifestResolution, IntegrationOAuthState, IntegrationOAuthStateOutcome, IntegrationOAuthStateStore, IntegrationPolicyDecision, type IntegrationPolicyEffect, IntegrationPolicyEngine, type IntegrationPolicyRule, IntegrationProvider, IntegrationProviderKind, type IntegrationRateLimitDecision, type IntegrationRateLimiter, IntegrationRegistry, IntegrationRegistryConflict, IntegrationRegistrySummary, IntegrationRequirementMode, IntegrationRuntime, IntegrationSandboxBundle, IntegrationSandboxHost, type IntegrationSandboxHostHub, type IntegrationSandboxHostOptions, IntegrationSecretStore, IntegrationTriggerEvent, IntegrationTriggerSubscription, type IntegrationWebhookReceiverResult, type IntegrationWorkflowDefinition, IntegrationWorkflowRuntime, type IntegrationWorkflowRuntimeHub, type IntegrationWorkflowRuntimeOptions, type IntegrationWorkflowStore, InvokeWithCapabilityRequest, IssueCapabilityRequest, IssuedIntegrationCapability, type ManifestValidationIssue, type ManifestValidationResult, type MissingRequirementExplanation, type NormalizedIntegrationResult, type OAuthClientCredentials, PROVIDER_PASSTHROUGH_ACTION, type PlatformIntegrationPolicyPresetOptions, type ProviderHttpRequestInput, type ProviderPassthroughPolicy, type RegisterAppInput, type RegisteredApp, type RenderConsentOptions, ResolvedDataSource, SecretRef, StartAuthRequest, StartAuthResult, StaticIntegrationPolicyEngine, type StaticIntegrationPolicyOptions, type StoredIntegrationEvent, TANGLE_INTEGRATIONS_CATALOG_PROVIDER_ID, TANGLE_INTEGRATIONS_CATALOG_SOURCE, TangleAppsClient, type TangleAppsClientOptions, type TangleCatalogExecutorInvocation, type TangleCatalogExecutorProviderOptions, type TangleCatalogRuntimePackageManifest, type TangleCatalogRuntimePackageManifestOptions, type TangleCatalogTriggerInvocation, type TangleIntegrationCatalogEntry, type TangleIntegrationCatalogFreshnessOptions, type TangleIntegrationCatalogFreshnessResult, type TangleIntegrationContract, type TangleIntegrationContractStatus, type TangleIntegrationImplementationKind, type TangleIntegrationInvokeInput, type TangleIntegrationInvokeResult, TangleIntegrationsClient, type TangleIntegrationsClientOptions, type WorkspaceCapability, type WorkspaceCapabilityDiscovery, type WorkspaceToolSchema, type WorkspaceTrigger, adapterManifestsToConnectors, assertValidIntegrationManifest, auditIntegrationCatalogFreshness, auditTangleIntegrationCatalogFreshness, buildActivepiecesConnectors, buildApprovalRequest, buildCanonicalLaunchConnectors, buildIntegrationBridgeEnvironment, buildIntegrationBridgePayload, buildIntegrationInvocationEnvelope, buildTangleCatalogRuntimePackageManifest, buildTangleIntegrationCatalogConnectors, calendarExercisePlannerManifest, canonicalActionConnectorId, createActivepiecesExecutorProvider, createApprovalBackedPolicyEngine, createCatalogExecutorProvider, createConnectionCredentialResolver, createConnectorAdapterCatalogSource, createConnectorAdapterProvider, createCredentialBackedAdapterProvider, createDefaultIntegrationActionGuard, createDefaultIntegrationPolicyEngine, createGatewayCatalogProvider, createHttpIntegrationProvider, createIntegrationWorkflowRuntime, createMockIntegrationProvider, createPlatformIntegrationPolicyPreset, createTangleAppsClient, createTangleCatalogExecutorProvider, createTangleIntegrationsClient, decodeIntegrationBridgePayload, discoverWorkspaceCapabilities, dispatchIntegrationInvocation, encodeIntegrationBridgePayload, explainMissingRequirements, extractActivepiecesPublicPieceCount, extractExternalCatalogPublicCount, filterDiscoveryByWorkspaceScopes, getActivepiecesOverride, inferIntegrationManifestFromTools, invocationRequestFromEnvelope, listActivepiecesCatalogEntries, listTangleIntegrationCatalogEntries, listTangleIntegrationCatalogRuntimePackages, listTangleIntegrationContracts, listTangleNativeAdapterIds, manifestToConnector, normalizeGatewayCatalog, normalizeIntegrationResult, parseIntegrationBridgeEnvironment, receiveIntegrationWebhook, redactApprovalRequest, redactCapability, redactIntegrationBridgePayload, redactInvocationEnvelope, renderApprovalCopy, renderConsentSummary, renderTangleCatalogRuntimePnpmAddCommand, resolveConnectionCredentials, resolveIntegrationApproval, revokeConnection, sanitizeConnection, signCapability, storedEventToTriggerEvent, validateIntegrationInvocationEnvelope, validateIntegrationManifest, validateProviderPassthroughRequest, verifyCapabilityToken };

package/dist/mcp.d.ts

@@ -0,0 +1,95 @@
+import { d as IntegrationConnectorCategory, g as IntegrationDataClass, f as IntegrationActionRisk, j as IntegrationProvider, b as IntegrationConnector } from './core-types-D4MGC44S.js';
+import { M as McpCatalogTool } from './importers-DANyqwIT.js';
+import './types-Bxg-wJkW.js';
+
+/**
+ * Live MCP connector — attach a remote MCP (Model Context Protocol) server
+ * as an {@link IntegrationProvider}, so its tools flow through the same
+ * catalog / grants / approvals machinery as every other connector instead of
+ * forming a parallel, ungoverned tool path.
+ *
+ * Transport is Streamable HTTP only (single POST endpoint, JSON or SSE
+ * response framing) — this package runs in edge workers, so stdio servers are
+ * out of scope; front them with any HTTP-bridging MCP host.
+ *
+ * Discovery reuses {@link importMcpConnector}: `tools/list` output becomes an
+ * `IntegrationConnector` whose per-action risk comes from MCP tool
+ * annotations (readOnlyHint / destructiveHint) with a text-heuristic
+ * fallback, so non-read MCP tools default to `approvalRequired` — fail-closed
+ * against servers that don't annotate.
+ *
+ * Credentials: the server's auth header is supplied at construction by the
+ * product (which owns secret storage) and held in memory only. Connection
+ * rows carry no MCP secrets.
+ */
+
+/** Protocol revision sent on `initialize` and the `MCP-Protocol-Version`
+ *  header. Servers negotiate down from this. */
+declare const MCP_PROTOCOL_VERSION = "2025-06-18";
+interface McpServerConfig {
+    /** The server's single Streamable-HTTP endpoint. */
+    url: string;
+    /** Static request headers — typically `{ Authorization: 'Bearer …' }`.
+     *  Held in memory only; never persisted by this module. */
+    headers?: Record<string, string>;
+    protocolVersion?: string;
+    clientInfo?: {
+        name: string;
+        version: string;
+    };
+    /** Injectable for tests / custom egress policies (SSRF pinning). */
+    fetchImpl?: typeof fetch;
+}
+interface McpToolCallResult {
+    /** MCP content blocks (text, image, resource, …) verbatim. */
+    content: unknown[];
+    isError: boolean;
+    /** `structuredContent` from servers that return it. */
+    structured?: unknown;
+}
+/**
+ * Minimal Streamable-HTTP MCP client: `initialize` handshake (capturing the
+ * server's `Mcp-Session-Id`), paginated `tools/list`, and `tools/call`.
+ * Lazily initializes on first use; safe to share across calls within an
+ * isolate.
+ */
+declare class McpHttpClient {
+    private readonly config;
+    private nextId;
+    private sessionId;
+    private negotiatedVersion;
+    private initializing;
+    constructor(config: McpServerConfig);
+    private get fetchImpl();
+    private post;
+    private request;
+    /** Idempotent handshake; concurrent callers share one in-flight init. */
+    initialize(): Promise<void>;
+    /** Full tool catalog, following `nextCursor` pagination. */
+    listTools(): Promise<McpCatalogTool[]>;
+    callTool(name: string, args: unknown): Promise<McpToolCallResult>;
+}
+interface CreateMcpProviderOptions {
+    /** Provider id, unique within the hub (e.g. `mcp:linear`). */
+    id: string;
+    server: McpServerConfig;
+    connectorId: string;
+    connectorTitle: string;
+    category?: IntegrationConnectorCategory;
+    scopes?: string[];
+    dataClass?: IntegrationDataClass;
+    /** Risk for tools whose annotations/name don't classify them. Defaults to
+     *  'write' (⇒ approvalRequired) — fail-closed. */
+    defaultRisk?: IntegrationActionRisk;
+}
+/** Discover a live MCP server's tools as an {@link IntegrationConnector}. */
+declare function discoverMcpConnector(client: McpHttpClient, options: CreateMcpProviderOptions): Promise<IntegrationConnector>;
+/**
+ * Build an {@link IntegrationProvider} over one remote MCP server: live
+ * `tools/list` discovery at construction, `tools/call` on invoke. A tool
+ * result with `isError` maps to `{ ok: false }` (the model sees the failure
+ * content); transport and JSON-RPC failures throw {@link IntegrationError}.
+ */
+declare function createMcpProvider(options: CreateMcpProviderOptions): Promise<IntegrationProvider>;
+
+export { type CreateMcpProviderOptions, MCP_PROTOCOL_VERSION, McpHttpClient, type McpServerConfig, type McpToolCallResult, createMcpProvider, discoverMcpConnector };

package/dist/mcp.js

@@ -0,0 +1,166 @@
+import {
+  IntegrationError,
+  createCatalogExecutorProvider,
+  importMcpConnector
+} from "./chunk-ZVGYRP2O.js";
+import "./chunk-D57YS6XC.js";
+import "./chunk-CR35IEKW.js";
+import "./chunk-H4XYLS7T.js";
+import "./chunk-O553GSCX.js";
+import "./chunk-53NQJZAT.js";
+import "./chunk-7P2LN4VT.js";
+import "./chunk-376UBTNB.js";
+import "./chunk-6W72E2KN.js";
+import "./chunk-2TW2QKGZ.js";
+import "./chunk-ZDK7Y4QG.js";
+import "./chunk-PZ5AY32C.js";
+
+// src/mcp.ts
+var MCP_PROTOCOL_VERSION = "2025-06-18";
+var McpHttpClient = class {
+  constructor(config) {
+    this.config = config;
+  }
+  config;
+  nextId = 1;
+  sessionId;
+  negotiatedVersion;
+  initializing;
+  get fetchImpl() {
+    return this.config.fetchImpl ?? fetch;
+  }
+  async post(body) {
+    const headers = {
+      "Content-Type": "application/json",
+      Accept: "application/json, text/event-stream",
+      ...this.config.headers ?? {}
+    };
+    const version = this.negotiatedVersion ?? this.config.protocolVersion ?? MCP_PROTOCOL_VERSION;
+    headers["MCP-Protocol-Version"] = version;
+    if (this.sessionId) headers["Mcp-Session-Id"] = this.sessionId;
+    let response;
+    try {
+      response = await this.fetchImpl(this.config.url, {
+        method: "POST",
+        headers,
+        body: JSON.stringify(body)
+      });
+    } catch (error) {
+      throw new IntegrationError(
+        `MCP server unreachable: ${error instanceof Error ? error.message : String(error)}`,
+        "provider_failure"
+      );
+    }
+    const session = response.headers.get("mcp-session-id");
+    if (session) this.sessionId = session;
+    if (!response.ok) {
+      throw new IntegrationError(`MCP server returned HTTP ${response.status}`, "provider_failure");
+    }
+    if (body.id === void 0) return void 0;
+    const contentType = response.headers.get("content-type") ?? "";
+    const text = await response.text();
+    const message = contentType.includes("text/event-stream") ? findSseResponse(text, body.id) : JSON.parse(text);
+    if (!message) {
+      throw new IntegrationError("MCP server response missing a result for the request", "provider_failure");
+    }
+    if (message.error) {
+      throw new IntegrationError(`MCP error ${message.error.code}: ${message.error.message}`, "provider_failure");
+    }
+    return message;
+  }
+  async request(method, params) {
+    const response = await this.post({ jsonrpc: "2.0", id: this.nextId++, method, ...params ? { params } : {} });
+    return response?.result;
+  }
+  /** Idempotent handshake; concurrent callers share one in-flight init. */
+  async initialize() {
+    if (this.negotiatedVersion) return;
+    this.initializing ??= (async () => {
+      const result = await this.request("initialize", {
+        protocolVersion: this.config.protocolVersion ?? MCP_PROTOCOL_VERSION,
+        capabilities: {},
+        clientInfo: this.config.clientInfo ?? { name: "tangle-agent-integrations", version: "1" }
+      });
+      this.negotiatedVersion = result?.protocolVersion ?? this.config.protocolVersion ?? MCP_PROTOCOL_VERSION;
+      await this.post({ jsonrpc: "2.0", method: "notifications/initialized" });
+    })().catch((error) => {
+      this.initializing = void 0;
+      throw error;
+    });
+    await this.initializing;
+  }
+  /** Full tool catalog, following `nextCursor` pagination. */
+  async listTools() {
+    await this.initialize();
+    const tools = [];
+    let cursor;
+    do {
+      const result = await this.request("tools/list", cursor ? { cursor } : {});
+      tools.push(...result?.tools ?? []);
+      cursor = result?.nextCursor;
+    } while (cursor);
+    return tools;
+  }
+  async callTool(name, args) {
+    await this.initialize();
+    const result = await this.request("tools/call", { name, arguments: args ?? {} });
+    return {
+      content: result?.content ?? [],
+      isError: result?.isError === true,
+      structured: result?.structuredContent
+    };
+  }
+};
+async function discoverMcpConnector(client, options) {
+  const tools = await client.listTools();
+  return importMcpConnector(
+    { tools },
+    {
+      providerId: options.id,
+      connectorId: options.connectorId,
+      connectorTitle: options.connectorTitle,
+      category: options.category,
+      auth: "custom",
+      scopes: options.scopes,
+      dataClass: options.dataClass,
+      defaultRisk: options.defaultRisk ?? "write"
+    }
+  );
+}
+async function createMcpProvider(options) {
+  const client = new McpHttpClient(options.server);
+  const connector = await discoverMcpConnector(client, options);
+  return createCatalogExecutorProvider({
+    id: options.id,
+    kind: "mcp",
+    connectors: [connector],
+    async executeAction({ request, action }) {
+      const result = await client.callTool(action.id, request.input);
+      return {
+        ok: !result.isError,
+        action: action.id,
+        output: result.structured ?? result.content,
+        metadata: { mcp: true, ...result.isError ? { isError: true } : {} }
+      };
+    }
+  });
+}
+function findSseResponse(body, id) {
+  for (const event of body.split(/\n\n/)) {
+    const data = event.split("\n").filter((line) => line.startsWith("data:")).map((line) => line.slice(5).trim()).join("");
+    if (!data) continue;
+    try {
+      const parsed = JSON.parse(data);
+      if (parsed.id === id) return parsed;
+    } catch {
+    }
+  }
+  return void 0;
+}
+export {
+  MCP_PROTOCOL_VERSION,
+  McpHttpClient,
+  createMcpProvider,
+  discoverMcpConnector
+};
+//# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mcp.ts"],"sourcesContent":["/**\n * Live MCP connector — attach a remote MCP (Model Context Protocol) server\n * as an {@link IntegrationProvider}, so its tools flow through the same\n * catalog / grants / approvals machinery as every other connector instead of\n * forming a parallel, ungoverned tool path.\n *\n * Transport is Streamable HTTP only (single POST endpoint, JSON or SSE\n * response framing) — this package runs in edge workers, so stdio servers are\n * out of scope; front them with any HTTP-bridging MCP host.\n *\n * Discovery reuses {@link importMcpConnector}: `tools/list` output becomes an\n * `IntegrationConnector` whose per-action risk comes from MCP tool\n * annotations (readOnlyHint / destructiveHint) with a text-heuristic\n * fallback, so non-read MCP tools default to `approvalRequired` — fail-closed\n * against servers that don't annotate.\n *\n * Credentials: the server's auth header is supplied at construction by the\n * product (which owns secret storage) and held in memory only. Connection\n * rows carry no MCP secrets.\n */\n\nimport { IntegrationError } from './core-error.js'\nimport type {\n  IntegrationActionResult,\n  IntegrationActionRisk,\n  IntegrationConnector,\n  IntegrationConnectorCategory,\n  IntegrationDataClass,\n  IntegrationProvider,\n} from './core-types.js'\nimport { createCatalogExecutorProvider } from './catalog-executor.js'\nimport { importMcpConnector, type McpCatalogTool } from './importers.js'\n\n/** Protocol revision sent on `initialize` and the `MCP-Protocol-Version`\n *  header. Servers negotiate down from this. */\nexport const MCP_PROTOCOL_VERSION = '2025-06-18'\n\nexport interface McpServerConfig {\n  /** The server's single Streamable-HTTP endpoint. */\n  url: string\n  /** Static request headers — typically `{ Authorization: 'Bearer …' }`.\n   *  Held in memory only; never persisted by this module. */\n  headers?: Record<string, string>\n  protocolVersion?: string\n  clientInfo?: { name: string; version: string }\n  /** Injectable for tests / custom egress policies (SSRF pinning). */\n  fetchImpl?: typeof fetch\n}\n\nexport interface McpToolCallResult {\n  /** MCP content blocks (text, image, resource, …) verbatim. */\n  content: unknown[]\n  isError: boolean\n  /** `structuredContent` from servers that return it. */\n  structured?: unknown\n}\n\ninterface JsonRpcResponse {\n  jsonrpc: '2.0'\n  id?: number | string | null\n  result?: unknown\n  error?: { code: number; message: string; data?: unknown }\n}\n\n/**\n * Minimal Streamable-HTTP MCP client: `initialize` handshake (capturing the\n * server's `Mcp-Session-Id`), paginated `tools/list`, and `tools/call`.\n * Lazily initializes on first use; safe to share across calls within an\n * isolate.\n */\nexport class McpHttpClient {\n  private nextId = 1\n  private sessionId: string | undefined\n  private negotiatedVersion: string | undefined\n  private initializing: Promise<void> | undefined\n\n  constructor(private readonly config: McpServerConfig) {}\n\n  private get fetchImpl(): typeof fetch {\n    return this.config.fetchImpl ?? fetch\n  }\n\n  private async post(body: Record<string, unknown>): Promise<JsonRpcResponse | undefined> {\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json, text/event-stream',\n      ...(this.config.headers ?? {}),\n    }\n    const version = this.negotiatedVersion ?? this.config.protocolVersion ?? MCP_PROTOCOL_VERSION\n    headers['MCP-Protocol-Version'] = version\n    if (this.sessionId) headers['Mcp-Session-Id'] = this.sessionId\n\n    let response: Response\n    try {\n      response = await this.fetchImpl(this.config.url, {\n        method: 'POST',\n        headers,\n        body: JSON.stringify(body),\n      })\n    } catch (error) {\n      throw new IntegrationError(\n        `MCP server unreachable: ${error instanceof Error ? error.message : String(error)}`,\n        'provider_failure',\n      )\n    }\n    const session = response.headers.get('mcp-session-id')\n    if (session) this.sessionId = session\n\n    if (!response.ok) {\n      throw new IntegrationError(`MCP server returned HTTP ${response.status}`, 'provider_failure')\n    }\n    // Notifications get 202/204 with no body.\n    if (body.id === undefined) return undefined\n    const contentType = response.headers.get('content-type') ?? ''\n    const text = await response.text()\n    const message = contentType.includes('text/event-stream')\n      ? findSseResponse(text, body.id as number)\n      : (JSON.parse(text) as JsonRpcResponse)\n    if (!message) {\n      throw new IntegrationError('MCP server response missing a result for the request', 'provider_failure')\n    }\n    if (message.error) {\n      throw new IntegrationError(`MCP error ${message.error.code}: ${message.error.message}`, 'provider_failure')\n    }\n    return message\n  }\n\n  private async request(method: string, params?: Record<string, unknown>): Promise<unknown> {\n    const response = await this.post({ jsonrpc: '2.0', id: this.nextId++, method, ...(params ? { params } : {}) })\n    return response?.result\n  }\n\n  /** Idempotent handshake; concurrent callers share one in-flight init. */\n  async initialize(): Promise<void> {\n    if (this.negotiatedVersion) return\n    this.initializing ??= (async () => {\n      const result = (await this.request('initialize', {\n        protocolVersion: this.config.protocolVersion ?? MCP_PROTOCOL_VERSION,\n        capabilities: {},\n        clientInfo: this.config.clientInfo ?? { name: 'tangle-agent-integrations', version: '1' },\n      })) as { protocolVersion?: string } | undefined\n      this.negotiatedVersion = result?.protocolVersion ?? this.config.protocolVersion ?? MCP_PROTOCOL_VERSION\n      await this.post({ jsonrpc: '2.0', method: 'notifications/initialized' })\n    })().catch((error) => {\n      this.initializing = undefined\n      throw error\n    })\n    await this.initializing\n  }\n\n  /** Full tool catalog, following `nextCursor` pagination. */\n  async listTools(): Promise<McpCatalogTool[]> {\n    await this.initialize()\n    const tools: McpCatalogTool[] = []\n    let cursor: string | undefined\n    do {\n      const result = (await this.request('tools/list', cursor ? { cursor } : {})) as\n        | { tools?: McpCatalogTool[]; nextCursor?: string }\n        | undefined\n      tools.push(...(result?.tools ?? []))\n      cursor = result?.nextCursor\n    } while (cursor)\n    return tools\n  }\n\n  async callTool(name: string, args: unknown): Promise<McpToolCallResult> {\n    await this.initialize()\n    const result = (await this.request('tools/call', { name, arguments: args ?? {} })) as\n      | { content?: unknown[]; isError?: boolean; structuredContent?: unknown }\n      | undefined\n    return {\n      content: result?.content ?? [],\n      isError: result?.isError === true,\n      structured: result?.structuredContent,\n    }\n  }\n}\n\nexport interface CreateMcpProviderOptions {\n  /** Provider id, unique within the hub (e.g. `mcp:linear`). */\n  id: string\n  server: McpServerConfig\n  connectorId: string\n  connectorTitle: string\n  category?: IntegrationConnectorCategory\n  scopes?: string[]\n  dataClass?: IntegrationDataClass\n  /** Risk for tools whose annotations/name don't classify them. Defaults to\n   *  'write' (⇒ approvalRequired) — fail-closed. */\n  defaultRisk?: IntegrationActionRisk\n}\n\n/** Discover a live MCP server's tools as an {@link IntegrationConnector}. */\nexport async function discoverMcpConnector(\n  client: McpHttpClient,\n  options: CreateMcpProviderOptions,\n): Promise<IntegrationConnector> {\n  const tools = await client.listTools()\n  return importMcpConnector(\n    { tools },\n    {\n      providerId: options.id,\n      connectorId: options.connectorId,\n      connectorTitle: options.connectorTitle,\n      category: options.category,\n      auth: 'custom',\n      scopes: options.scopes,\n      dataClass: options.dataClass,\n      defaultRisk: options.defaultRisk ?? 'write',\n    },\n  )\n}\n\n/**\n * Build an {@link IntegrationProvider} over one remote MCP server: live\n * `tools/list` discovery at construction, `tools/call` on invoke. A tool\n * result with `isError` maps to `{ ok: false }` (the model sees the failure\n * content); transport and JSON-RPC failures throw {@link IntegrationError}.\n */\nexport async function createMcpProvider(options: CreateMcpProviderOptions): Promise<IntegrationProvider> {\n  const client = new McpHttpClient(options.server)\n  const connector = await discoverMcpConnector(client, options)\n  return createCatalogExecutorProvider({\n    id: options.id,\n    kind: 'mcp',\n    connectors: [connector],\n    async executeAction({ request, action }): Promise<IntegrationActionResult> {\n      const result = await client.callTool(action.id, request.input)\n      return {\n        ok: !result.isError,\n        action: action.id,\n        output: result.structured ?? result.content,\n        metadata: { mcp: true, ...(result.isError ? { isError: true } : {}) },\n      }\n    },\n  })\n}\n\nfunction findSseResponse(body: string, id: number): JsonRpcResponse | undefined {\n  for (const event of body.split(/\\n\\n/)) {\n    const data = event\n      .split('\\n')\n      .filter((line) => line.startsWith('data:'))\n      .map((line) => line.slice(5).trim())\n      .join('')\n    if (!data) continue\n    try {\n      const parsed = JSON.parse(data) as JsonRpcResponse\n      if (parsed.id === id) return parsed\n    } catch {\n      // non-JSON SSE frame (keepalive/comment) — skip\n    }\n  }\n  return undefined\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAmCO,IAAM,uBAAuB;AAmC7B,IAAM,gBAAN,MAAoB;AAAA,EAMzB,YAA6B,QAAyB;AAAzB;AAAA,EAA0B;AAAA,EAA1B;AAAA,EALrB,SAAS;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EAIR,IAAY,YAA0B;AACpC,WAAO,KAAK,OAAO,aAAa;AAAA,EAClC;AAAA,EAEA,MAAc,KAAK,MAAqE;AACtF,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,MACR,GAAI,KAAK,OAAO,WAAW,CAAC;AAAA,IAC9B;AACA,UAAM,UAAU,KAAK,qBAAqB,KAAK,OAAO,mBAAmB;AACzE,YAAQ,sBAAsB,IAAI;AAClC,QAAI,KAAK,UAAW,SAAQ,gBAAgB,IAAI,KAAK;AAErD,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,KAAK,UAAU,KAAK,OAAO,KAAK;AAAA,QAC/C,QAAQ;AAAA,QACR;AAAA,QACA,MAAM,KAAK,UAAU,IAAI;AAAA,MAC3B,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,2BAA2B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,QACjF;AAAA,MACF;AAAA,IACF;AACA,UAAM,UAAU,SAAS,QAAQ,IAAI,gBAAgB;AACrD,QAAI,QAAS,MAAK,YAAY;AAE9B,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,4BAA4B,SAAS,MAAM,IAAI,kBAAkB;AAAA,IAC9F;AAEA,QAAI,KAAK,OAAO,OAAW,QAAO;AAClC,UAAM,cAAc,SAAS,QAAQ,IAAI,cAAc,KAAK;AAC5D,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAM,UAAU,YAAY,SAAS,mBAAmB,IACpD,gBAAgB,MAAM,KAAK,EAAY,IACtC,KAAK,MAAM,IAAI;AACpB,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,iBAAiB,wDAAwD,kBAAkB;AAAA,IACvG;AACA,QAAI,QAAQ,OAAO;AACjB,YAAM,IAAI,iBAAiB,aAAa,QAAQ,MAAM,IAAI,KAAK,QAAQ,MAAM,OAAO,IAAI,kBAAkB;AAAA,IAC5G;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,QAAgB,QAAoD;AACxF,UAAM,WAAW,MAAM,KAAK,KAAK,EAAE,SAAS,OAAO,IAAI,KAAK,UAAU,QAAQ,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC,EAAG,CAAC;AAC7G,WAAO,UAAU;AAAA,EACnB;AAAA;AAAA,EAGA,MAAM,aAA4B;AAChC,QAAI,KAAK,kBAAmB;AAC5B,SAAK,kBAAkB,YAAY;AACjC,YAAM,SAAU,MAAM,KAAK,QAAQ,cAAc;AAAA,QAC/C,iBAAiB,KAAK,OAAO,mBAAmB;AAAA,QAChD,cAAc,CAAC;AAAA,QACf,YAAY,KAAK,OAAO,cAAc,EAAE,MAAM,6BAA6B,SAAS,IAAI;AAAA,MAC1F,CAAC;AACD,WAAK,oBAAoB,QAAQ,mBAAmB,KAAK,OAAO,mBAAmB;AACnF,YAAM,KAAK,KAAK,EAAE,SAAS,OAAO,QAAQ,4BAA4B,CAAC;AAAA,IACzE,GAAG,EAAE,MAAM,CAAC,UAAU;AACpB,WAAK,eAAe;AACpB,YAAM;AAAA,IACR,CAAC;AACD,UAAM,KAAK;AAAA,EACb;AAAA;AAAA,EAGA,MAAM,YAAuC;AAC3C,UAAM,KAAK,WAAW;AACtB,UAAM,QAA0B,CAAC;AACjC,QAAI;AACJ,OAAG;AACD,YAAM,SAAU,MAAM,KAAK,QAAQ,cAAc,SAAS,EAAE,OAAO,IAAI,CAAC,CAAC;AAGzE,YAAM,KAAK,GAAI,QAAQ,SAAS,CAAC,CAAE;AACnC,eAAS,QAAQ;AAAA,IACnB,SAAS;AACT,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAc,MAA2C;AACtE,UAAM,KAAK,WAAW;AACtB,UAAM,SAAU,MAAM,KAAK,QAAQ,cAAc,EAAE,MAAM,WAAW,QAAQ,CAAC,EAAE,CAAC;AAGhF,WAAO;AAAA,MACL,SAAS,QAAQ,WAAW,CAAC;AAAA,MAC7B,SAAS,QAAQ,YAAY;AAAA,MAC7B,YAAY,QAAQ;AAAA,IACtB;AAAA,EACF;AACF;AAiBA,eAAsB,qBACpB,QACA,SAC+B;AAC/B,QAAM,QAAQ,MAAM,OAAO,UAAU;AACrC,SAAO;AAAA,IACL,EAAE,MAAM;AAAA,IACR;AAAA,MACE,YAAY,QAAQ;AAAA,MACpB,aAAa,QAAQ;AAAA,MACrB,gBAAgB,QAAQ;AAAA,MACxB,UAAU,QAAQ;AAAA,MAClB,MAAM;AAAA,MACN,QAAQ,QAAQ;AAAA,MAChB,WAAW,QAAQ;AAAA,MACnB,aAAa,QAAQ,eAAe;AAAA,IACtC;AAAA,EACF;AACF;AAQA,eAAsB,kBAAkB,SAAiE;AACvG,QAAM,SAAS,IAAI,cAAc,QAAQ,MAAM;AAC/C,QAAM,YAAY,MAAM,qBAAqB,QAAQ,OAAO;AAC5D,SAAO,8BAA8B;AAAA,IACnC,IAAI,QAAQ;AAAA,IACZ,MAAM;AAAA,IACN,YAAY,CAAC,SAAS;AAAA,IACtB,MAAM,cAAc,EAAE,SAAS,OAAO,GAAqC;AACzE,YAAM,SAAS,MAAM,OAAO,SAAS,OAAO,IAAI,QAAQ,KAAK;AAC7D,aAAO;AAAA,QACL,IAAI,CAAC,OAAO;AAAA,QACZ,QAAQ,OAAO;AAAA,QACf,QAAQ,OAAO,cAAc,OAAO;AAAA,QACpC,UAAU,EAAE,KAAK,MAAM,GAAI,OAAO,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC,EAAG;AAAA,MACtE;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,gBAAgB,MAAc,IAAyC;AAC9E,aAAW,SAAS,KAAK,MAAM,MAAM,GAAG;AACtC,UAAM,OAAO,MACV,MAAM,IAAI,EACV,OAAO,CAAC,SAAS,KAAK,WAAW,OAAO,CAAC,EACzC,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,EAClC,KAAK,EAAE;AACV,QAAI,CAAC,KAAM;AACX,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,UAAI,OAAO,OAAO,GAAI,QAAO;AAAA,IAC/B,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;","names":[]}

package/dist/registry.d.ts

@@ -1,4 +1,4 @@
-import { b as IntegrationConnector, h as IntegrationCatalogSource } from './core-types-CjWifQOf.js';
+import { b as IntegrationConnector, h as IntegrationCatalogSource } from './core-types-D4MGC44S.js';
 import './types-Bxg-wJkW.js';
 
 type IntegrationSupportTier = 'catalogOnly' | 'setupReady' | 'gatewayExecutable' | 'firstPartyExecutable' | 'sandboxExecutable';

package/dist/runtime.d.ts

@@ -1,6 +1,6 @@
 import { IntegrationToolDefinition } from './catalog.js';
 import { IntegrationRegistryEntry, IntegrationRegistry } from './registry.js';
-import { I as IntegrationActor, a as IssuedIntegrationCapability, b as IntegrationConnector, c as IntegrationConnection } from './core-types-CjWifQOf.js';
+import { I as IntegrationActor, a as IssuedIntegrationCapability, b as IntegrationConnector, c as IntegrationConnection } from './core-types-D4MGC44S.js';
 import './types-Bxg-wJkW.js';
 
 type IntegrationRequirementMode = 'read' | 'write' | 'trigger';

package/dist/specs.d.ts

@@ -1,4 +1,4 @@
-import { f as IntegrationActionRisk, g as IntegrationDataClass, d as IntegrationConnectorCategory, e as IntegrationConnectorAction, G as IntegrationConnectorTrigger, b as IntegrationConnector } from './core-types-CjWifQOf.js';
+import { f as IntegrationActionRisk, g as IntegrationDataClass, d as IntegrationConnectorCategory, e as IntegrationConnectorAction, G as IntegrationConnectorTrigger, b as IntegrationConnector } from './core-types-D4MGC44S.js';
 import './types-Bxg-wJkW.js';
 
 type IntegrationAuthMode = 'oauth2' | 'api_key' | 'hmac' | 'none' | 'custom';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-integrations",
-  "version": "0.34.0",
+  "version": "0.36.0",
   "description": "Vendor-neutral integration contracts and runtime helpers for sandbox and agent apps.",
   "homepage": "https://github.com/tangle-network/agent-integrations#readme",
   "repository": {
@@ -54,6 +54,11 @@
       "import": "./dist/webhooks/index.js",
       "default": "./dist/webhooks/index.js"
     },
+    "./delegated-tools": {
+      "types": "./dist/delegated-tools/index.d.ts",
+      "import": "./dist/delegated-tools/index.js",
+      "default": "./dist/delegated-tools/index.js"
+    },
     "./registry": {
       "types": "./dist/registry.d.ts",
       "import": "./dist/registry.js",
@@ -78,6 +83,11 @@
       "types": "./dist/coverage-catalog.d.ts",
       "import": "./dist/coverage-catalog.js",
       "default": "./dist/coverage-catalog.js"
+    },
+    "./mcp": {
+      "types": "./dist/mcp.d.ts",
+      "import": "./dist/mcp.js",
+      "default": "./dist/mcp.js"
     }
   },
   "files": [