@tangle-network/agent-integrations 0.43.0 → 0.45.0

package/dist/index.js

@@ -119,19 +119,19 @@ import {
   validateIntegrationManifest,
   validateProviderPassthroughRequest,
   verifyCapabilityToken
-} from "./chunk-6OOMR4SL.js";
+} from "./chunk-E6BBOBYT.js";
 import {
   InMemoryConnectStateStore,
   finishConnectFlow,
   revokeConnectFlow,
   startConnectFlow
-} from "./chunk-RFBI7NUC.js";
+} from "./chunk-S2BUASSV.js";
 import {
   expressTangleAuthMiddleware,
   extractToken,
   honoTangleAuthMiddleware,
   requireTangleAuth
-} from "./chunk-DQADH6DL.js";
+} from "./chunk-LA76XB7M.js";
 import {
   IntegrationRuntimeError,
   normalizeIntegrationError,
@@ -141,7 +141,7 @@ import {
   IntegrationHubClient,
   IntegrationHubRequestError,
   createIntegrationHubClient
-} from "./chunk-GA7RAMMB.js";
+} from "./chunk-VLVSP7SP.js";
 import {
   INTEGRATION_FAMILIES,
   assertValidIntegrationSpec,
@@ -258,6 +258,8 @@ import {
   chatwootConnector,
   checkoutConnector,
   circleConnector,
+  classifyGoogleError,
+  classifyGoogleReason,
   clayConnector,
   clearoutConnector,
   clicdataConnector,
@@ -362,12 +364,14 @@ import {
   gmail,
   gongConnector,
   googleAnalyticsConnector,
+  googleApiError,
   googleBigqueryConnector,
   googleCalendar,
   googleCloudStorageConnector,
   googleContactsConnector,
   googleDocs,
   googleDrive,
+  googleErrorReason,
   googleForms,
   googleGeminiConnector,
   googleMeetConnector,
@@ -377,6 +381,7 @@ import {
   googleSheets,
   googleSlidesConnector,
   googleTasksConnector,
+  googleTestFailureReason,
   googleVertexaiConnector,
   googlechatConnector,
   gorgiasConnector,
@@ -709,7 +714,7 @@ import {
   zohoDeskConnector,
   zoominfoConnector,
   zuoraConnector
-} from "./chunk-HRPCFEGL.js";
+} from "./chunk-WTMOFI3U.js";
 import {
   DEFAULT_SIGNATURE_TOLERANCE_SECONDS,
   firstHeader,
@@ -722,6 +727,8 @@ import {
 import {
   CredentialsExpired,
   DEFAULT_TANGLE_PLATFORM_URL,
+  ProviderConfigError,
+  ProviderRateLimited,
   ResourceContention,
   TANGLE_API_KEY_PREFIX,
   TANGLE_SERVICE_TOKEN_PREFIX,
@@ -730,7 +737,7 @@ import {
   createTangleIdentityClient,
   tangleIdentity,
   validateConnectorManifest
-} from "./chunk-EQB46PIG.js";
+} from "./chunk-UWF33ESC.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ACTIVEPIECES_OVERRIDES,
@@ -764,6 +771,8 @@ export {
   IntegrationSandboxHost,
   IntegrationWorkflowRuntime,
   PROVIDER_PASSTHROUGH_ACTION,
+  ProviderConfigError,
+  ProviderRateLimited,
   ResourceContention,
   StaticIntegrationPolicyEngine,
   TANGLE_API_KEY_PREFIX,
@@ -884,6 +893,8 @@ export {
   chatwootConnector,
   checkoutConnector,
   circleConnector,
+  classifyGoogleError,
+  classifyGoogleReason,
   classifyIntegrationCatalogExecutability,
   clayConnector,
   clearoutConnector,
@@ -1030,12 +1041,14 @@ export {
   gmail,
   gongConnector,
   googleAnalyticsConnector,
+  googleApiError,
   googleBigqueryConnector,
   googleCalendar,
   googleCloudStorageConnector,
   googleContactsConnector,
   googleDocs,
   googleDrive,
+  googleErrorReason,
   googleForms,
   googleGeminiConnector,
   googleMeetConnector,
@@ -1045,6 +1058,7 @@ export {
   googleSheets,
   googleSlidesConnector,
   googleTasksConnector,
+  googleTestFailureReason,
   googleVertexaiConnector,
   googlechatConnector,
   gorgiasConnector,

package/dist/mcp.d.ts

@@ -1,6 +1,6 @@
-import { d as IntegrationConnectorCategory, g as IntegrationDataClass, f as IntegrationActionRisk, j as IntegrationProvider, b as IntegrationConnector } from './core-types-17jYpwtm.js';
-import { M as McpCatalogTool } from './importers-C_mQqIJP.js';
-import './types-BLOYLnKZ.js';
+import { d as IntegrationConnectorCategory, g as IntegrationDataClass, f as IntegrationActionRisk, j as IntegrationProvider, b as IntegrationConnector } from './core-types-BZLzY8Oa.js';
+import { M as McpCatalogTool } from './importers-6Beu0SQ9.js';
+import './types-rBPdMcpb.js';
 
 /**
  * Live MCP connector — attach a remote MCP (Model Context Protocol) server

package/dist/mcp.js

@@ -2,17 +2,17 @@ import {
   IntegrationError,
   createCatalogExecutorProvider,
   importMcpConnector
-} from "./chunk-6OOMR4SL.js";
-import "./chunk-RFBI7NUC.js";
-import "./chunk-DQADH6DL.js";
+} from "./chunk-E6BBOBYT.js";
+import "./chunk-S2BUASSV.js";
+import "./chunk-LA76XB7M.js";
 import "./chunk-H4XYLS7T.js";
-import "./chunk-GA7RAMMB.js";
+import "./chunk-VLVSP7SP.js";
 import "./chunk-IA5GCKM6.js";
 import "./chunk-7P2LN4VT.js";
 import "./chunk-376UBTNB.js";
-import "./chunk-HRPCFEGL.js";
+import "./chunk-WTMOFI3U.js";
 import "./chunk-2TW2QKGZ.js";
-import "./chunk-EQB46PIG.js";
+import "./chunk-UWF33ESC.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/mcp.ts

package/dist/middleware/index.d.ts

@@ -1,5 +1,5 @@
-import { T as TangleIdentityOptions, b as TangleIdentityClient, c as TangleTokenVerifyFailure } from '../tangle-id-CpdEOacl.js';
-import '../types-BLOYLnKZ.js';
+import { T as TangleIdentityOptions, b as TangleIdentityClient, c as TangleTokenVerifyFailure } from '../tangle-id-_uZ3ywCF.js';
+import '../types-rBPdMcpb.js';
 
 /**
  * @stable Drop-in request middleware that verifies id.tangle.tools

package/dist/middleware/index.js

@@ -3,8 +3,8 @@ import {
   extractToken,
   honoTangleAuthMiddleware,
   requireTangleAuth
-} from "../chunk-DQADH6DL.js";
-import "../chunk-EQB46PIG.js";
+} from "../chunk-LA76XB7M.js";
+import "../chunk-UWF33ESC.js";
 import "../chunk-PZ5AY32C.js";
 export {
   expressTangleAuthMiddleware,

package/dist/registry.d.ts

@@ -1,5 +1,5 @@
-import { b as IntegrationConnector, h as IntegrationCatalogSource } from './core-types-17jYpwtm.js';
-import './types-BLOYLnKZ.js';
+import { b as IntegrationConnector, h as IntegrationCatalogSource } from './core-types-BZLzY8Oa.js';
+import './types-rBPdMcpb.js';
 
 type IntegrationSupportTier = 'catalogOnly' | 'setupReady' | 'gatewayExecutable' | 'firstPartyExecutable' | 'sandboxExecutable';
 interface IntegrationRegistrySourceRef {

package/dist/registry.js

@@ -5,17 +5,17 @@ import {
   composeIntegrationRegistry,
   inferIntegrationSupportTier,
   summarizeIntegrationRegistry
-} from "./chunk-6OOMR4SL.js";
-import "./chunk-RFBI7NUC.js";
-import "./chunk-DQADH6DL.js";
+} from "./chunk-E6BBOBYT.js";
+import "./chunk-S2BUASSV.js";
+import "./chunk-LA76XB7M.js";
 import "./chunk-H4XYLS7T.js";
-import "./chunk-GA7RAMMB.js";
+import "./chunk-VLVSP7SP.js";
 import "./chunk-IA5GCKM6.js";
 import "./chunk-7P2LN4VT.js";
 import "./chunk-376UBTNB.js";
-import "./chunk-HRPCFEGL.js";
+import "./chunk-WTMOFI3U.js";
 import "./chunk-2TW2QKGZ.js";
-import "./chunk-EQB46PIG.js";
+import "./chunk-UWF33ESC.js";
 import "./chunk-PZ5AY32C.js";
 export {
   buildDefaultIntegrationRegistry,

package/dist/runtime.d.ts

@@ -1,7 +1,7 @@
 import { IntegrationToolDefinition } from './catalog.js';
 import { IntegrationRegistryEntry, IntegrationRegistry } from './registry.js';
-import { I as IntegrationActor, a as IssuedIntegrationCapability, b as IntegrationConnector, c as IntegrationConnection } from './core-types-17jYpwtm.js';
-import './types-BLOYLnKZ.js';
+import { I as IntegrationActor, a as IssuedIntegrationCapability, b as IntegrationConnector, c as IntegrationConnection } from './core-types-BZLzY8Oa.js';
+import './types-rBPdMcpb.js';
 
 type IntegrationRequirementMode = 'read' | 'write' | 'trigger';
 type IntegrationRequirementStatus = 'ready' | 'missing_connection' | 'not_executable' | 'unknown_connector';

package/dist/runtime.js

@@ -2,17 +2,17 @@ import {
   InMemoryIntegrationGrantStore,
   IntegrationRuntime,
   createIntegrationRuntime
-} from "./chunk-6OOMR4SL.js";
-import "./chunk-RFBI7NUC.js";
-import "./chunk-DQADH6DL.js";
+} from "./chunk-E6BBOBYT.js";
+import "./chunk-S2BUASSV.js";
+import "./chunk-LA76XB7M.js";
 import "./chunk-H4XYLS7T.js";
-import "./chunk-GA7RAMMB.js";
+import "./chunk-VLVSP7SP.js";
 import "./chunk-IA5GCKM6.js";
 import "./chunk-7P2LN4VT.js";
 import "./chunk-376UBTNB.js";
-import "./chunk-HRPCFEGL.js";
+import "./chunk-WTMOFI3U.js";
 import "./chunk-2TW2QKGZ.js";
-import "./chunk-EQB46PIG.js";
+import "./chunk-UWF33ESC.js";
 import "./chunk-PZ5AY32C.js";
 export {
   InMemoryIntegrationGrantStore,

package/dist/specs.d.ts

@@ -1,5 +1,5 @@
-import { f as IntegrationActionRisk, g as IntegrationDataClass, d as IntegrationConnectorCategory, e as IntegrationConnectorAction, G as IntegrationConnectorTrigger, b as IntegrationConnector } from './core-types-17jYpwtm.js';
-import './types-BLOYLnKZ.js';
+import { f as IntegrationActionRisk, g as IntegrationDataClass, d as IntegrationConnectorCategory, e as IntegrationConnectorAction, G as IntegrationConnectorTrigger, b as IntegrationConnector } from './core-types-BZLzY8Oa.js';
+import './types-rBPdMcpb.js';
 
 type IntegrationAuthMode = 'oauth2' | 'api_key' | 'hmac' | 'none' | 'custom';
 type IntegrationSpecStatus = 'catalog' | 'executable' | 'deprecated';

package/dist/{tangle-id-CpdEOacl.d.ts → tangle-id-_uZ3ywCF.d.ts}

@@ -1,4 +1,4 @@
-import { C as ConnectorAdapter } from './types-BLOYLnKZ.js';
+import { C as ConnectorAdapter } from './types-rBPdMcpb.js';
 
 /**
  * @stable Tangle Identity — `id.tangle.tools` connector + verifier.

package/dist/{types-BLOYLnKZ.d.ts → types-rBPdMcpb.d.ts}

@@ -331,6 +331,14 @@ interface RateLimitSpec {
      *  matches how upstreams meter (per-app), so almost always pick true. */
     scope?: 'oauth-client' | 'data-source';
 }
+/** Source mapping for `OAuth2AuthSpec.tokenMetadata`. A bare string names the
+ *  token-response field to capture (capture-if-present). The object form marks
+ *  the field `required` so a missing/empty value fails the token exchange loud
+ *  rather than silently capturing nothing. */
+type TokenMetadataSource = string | {
+    field: string;
+    required?: boolean;
+};
 type OAuth2AuthSpec = {
     kind: 'oauth2';
     /** OAuth2 grant type. Defaults to `'authorization_code'` (the interactive
@@ -362,6 +370,18 @@ type OAuth2AuthSpec = {
      *  Defaults to true. Set false for providers that reject a per-request
      *  scope and pin scopes app-side (e.g. HelloSign/Dropbox Sign). */
     sendScopeParam?: boolean;
+    /** Declarative capture of provider-specific fields from the OAuth token
+     *  response into the connection's `metadata`, keyed by the connection-metadata
+     *  key to write → the token-response field to read. The counterpart to
+     *  `baseUrl.metadataKey`: providers like Gong return a per-customer host
+     *  (`api_base_url_for_customer`) at token exchange that every later call must
+     *  target, but the standard token parser keeps only the canonical OAuth
+     *  fields and drops the rest. Declaring the mapping here makes `completeAuth`
+     *  persist the value into `metadata` so `baseUrl` resolution finds it. Mark a
+     *  field `required` to fail the exchange loud when it is absent (surfacing the
+     *  break at connect, not first call). Optional and backward-compatible —
+     *  connectors that omit it are unaffected. */
+    tokenMetadata?: Record<string, TokenMetadataSource>;
 };
 type ApiKeyAuthSpec = {
     kind: 'api-key';
@@ -388,13 +408,60 @@ declare class ResourceContention extends Error {
     readonly name = "ResourceContention";
     constructor(message: string, alternatives?: unknown[], currentState?: unknown | undefined);
 }
-/** Thrown when the connector finds the user's grant has been revoked or
- *  the access token is no longer valid AND refresh failed. Surfaces to
- *  the UI as "Reconnect required". */
+/** Structured HTTP failure detail attached to the typed provider errors below.
+ *  The platform classifier reads `status`/`reason` off the thrown instance to
+ *  route a 403 by WHY it failed (credential vs config/permission vs quota)
+ *  instead of regexing a flattened message. */
+interface ProviderHttpErrorInit {
+    /** Upstream HTTP status (e.g. 401, 403, 429). */
+    status: number;
+    /** Provider-specific machine reason (e.g. Google's `accessNotConfigured`,
+     *  `dailyLimitExceeded`, `invalid_grant`) — the actionable signal. */
+    reason?: string;
+    /** Parsed upstream error body, kept for diagnostics/audit. */
+    body?: unknown;
+}
+/** Thrown when the connector finds the user's grant has been revoked or the
+ *  access token is no longer valid AND refresh failed — reconnecting fixes it.
+ *  Surfaces to the UI as "Reconnect required". Carries optional structured
+ *  `{status, reason, body}` so the platform can confirm a 401/403 really is a
+ *  credential reason before flipping the connection to reconnect_required. */
 declare class CredentialsExpired extends Error {
     readonly dataSourceId: string;
     readonly name = "CredentialsExpired";
-    constructor(message: string, dataSourceId: string);
+    readonly status?: number;
+    readonly reason?: string;
+    readonly body?: unknown;
+    constructor(message: string, dataSourceId: string, init?: ProviderHttpErrorInit);
+}
+/** Thrown when the provider rejects the call for a configuration or permission
+ *  reason that reconnecting the credential CANNOT fix — the API isn't enabled
+ *  for the project (`accessNotConfigured`), a required scope is missing
+ *  (`insufficientPermissions`), or the resource is forbidden
+ *  (`PERMISSION_DENIED`). Distinct from CredentialsExpired so the platform
+ *  surfaces "fix the project/scope" instead of sending the user into an
+ *  unresolvable reconnect loop. */
+declare class ProviderConfigError extends Error {
+    readonly dataSourceId: string;
+    readonly name = "ProviderConfigError";
+    readonly status: number;
+    readonly reason?: string;
+    readonly body?: unknown;
+    constructor(message: string, dataSourceId: string, init: ProviderHttpErrorInit);
+}
+/** Thrown when the provider throttles the call (quota / rate limit). Gmail and
+ *  Calendar surface daily/per-user limits as HTTP 403 with a quota `reason`
+ *  (`rateLimitExceeded`/`dailyLimitExceeded`/`userRateLimitExceeded`), NOT 429
+ *  — so it is classified by reason, not status, and must never read as a
+ *  credential failure. The message includes "rate limit" so a platform that
+ *  only inspects the message still routes it to rate-limited. */
+declare class ProviderRateLimited extends Error {
+    readonly dataSourceId: string;
+    readonly name = "ProviderRateLimited";
+    readonly status: number;
+    readonly reason?: string;
+    readonly body?: unknown;
+    constructor(message: string, dataSourceId: string, init: ProviderHttpErrorInit);
 }
 interface ConnectorManifestValidationIssue {
     path: string;
@@ -411,4 +478,4 @@ interface ConnectorManifestValidationResult {
 declare function validateConnectorManifest(manifest: ConnectorManifest): ConnectorManifestValidationResult;
 declare function assertValidConnectorManifest(manifest: ConnectorManifest): void;
 
-export { type AuthSpec as A, type ConnectorAdapter as C, type DataSourceMetadata as D, type EventHandlerResult as E, type InboundEvent as I, type ResolvedDataSource as R, type ConnectorCredentials as a, type CASStrategy as b, type Capability as c, type CapabilityClass as d, type CapabilityMutation as e, type CapabilityMutationResult as f, type CapabilityParameterSchema as g, type CapabilityRead as h, type CapabilityReadResult as i, type ConnectorInvocation as j, type ConnectorManifest as k, type ConnectorManifestValidationIssue as l, type ConnectorManifestValidationResult as m, type ConsistencyModel as n, CredentialsExpired as o, type RateLimitSpec as p, ResourceContention as q, assertValidConnectorManifest as r, validateConnectorManifest as v };
+export { type AuthSpec as A, type ConnectorAdapter as C, type DataSourceMetadata as D, type EventHandlerResult as E, type InboundEvent as I, ProviderConfigError as P, type ResolvedDataSource as R, type TokenMetadataSource as T, type ConnectorCredentials as a, type CASStrategy as b, type Capability as c, type CapabilityClass as d, type CapabilityMutation as e, type CapabilityMutationResult as f, type CapabilityParameterSchema as g, type CapabilityRead as h, type CapabilityReadResult as i, type ConnectorInvocation as j, type ConnectorManifest as k, type ConnectorManifestValidationIssue as l, type ConnectorManifestValidationResult as m, type ConsistencyModel as n, CredentialsExpired as o, type ProviderHttpErrorInit as p, ProviderRateLimited as q, type RateLimitSpec as r, ResourceContention as s, assertValidConnectorManifest as t, validateConnectorManifest as v };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-integrations",
-  "version": "0.43.0",
+  "version": "0.45.0",
   "description": "Vendor-neutral integration contracts and runtime helpers for sandbox and agent apps.",
   "homepage": "https://github.com/tangle-network/agent-integrations#readme",
   "repository": {