@tangle-network/agent-integrations 0.53.47 → 0.53.49

package/dist/index.js

@@ -119,19 +119,19 @@ import {
   validateIntegrationManifest,
   validateProviderPassthroughRequest,
   verifyCapabilityToken
-} from "./chunk-C7SE5X44.js";
+} from "./chunk-GUZA3U6T.js";
 import {
   InMemoryConnectStateStore,
   finishConnectFlow,
   revokeConnectFlow,
   startConnectFlow
-} from "./chunk-JR2RWYQO.js";
+} from "./chunk-UI3U62H6.js";
 import {
   expressTangleAuthMiddleware,
   extractToken,
   honoTangleAuthMiddleware,
   requireTangleAuth
-} from "./chunk-EKSAOR2I.js";
+} from "./chunk-ZZA4HOBE.js";
 import {
   IntegrationRuntimeError,
   normalizeIntegrationError,
@@ -141,7 +141,7 @@ import {
   IntegrationHubClient,
   IntegrationHubRequestError,
   createIntegrationHubClient
-} from "./chunk-TP4MD4PD.js";
+} from "./chunk-KBYYTHXQ.js";
 import {
   INTEGRATION_FAMILIES,
   INTEGRATION_KIND_ALIASES,
@@ -162,12 +162,12 @@ import {
   validateCredentialFormat,
   validateCredentialSet,
   validateIntegrationSpec
-} from "./chunk-U36WHHML.js";
+} from "./chunk-ZSXRS7D7.js";
 import {
   buildIntegrationCoverageConnectors,
   integrationCoverageChecklistMarkdown,
   listIntegrationCoverageSpecs
-} from "./chunk-AG4ORH2A.js";
+} from "./chunk-TKEVCGAI.js";
 import "./chunk-P4FFI752.js";
 import {
   bundledApiKeyHint,
@@ -178,7 +178,7 @@ import {
   listBundledAdapterKinds,
   listBundledAdapterManifests,
   listBundledConnectorAdapters
-} from "./chunk-DHF5EXLO.js";
+} from "./chunk-5UCHLQ3D.js";
 import {
   CONNECTOR_ADAPTER_FACTORIES,
   InMemoryOAuthFlowStore,
@@ -206,7 +206,9 @@ import {
   altTextAiConnector,
   alttextifyConnector,
   amazonBedrockConnector,
+  amazonCloudWatchConnector,
   amazonEventBridgeConnector,
+  amazonLambdaConnector,
   amazonS3Connector,
   amazonSecretsManagerConnector,
   amazonSesConnector,
@@ -216,6 +218,7 @@ import {
   aminosConnector,
   ampecoConnector,
   amplemarketConnector,
+  amplitudeConnector,
   anthropicConnector,
   anyhookWebsocketConnector,
   apifyConnector,
@@ -274,6 +277,7 @@ import {
   browseAiConnector,
   builtwithConnector,
   buttondownConnector,
+  calCom,
   calComConnector,
   calendlyConnector,
   cambAiConnector,
@@ -317,6 +321,7 @@ import {
   clockodoConnector,
   closeConnector,
   cloudconvertConnector,
+  cloudflareConnector,
   cloudinaryConnector,
   cloutlyConnector,
   codaConnector,
@@ -342,6 +347,7 @@ import {
   createLinkedinConnector,
   createMongoDbConnector,
   createMySqlConnector,
+  createOAuthTokenRequestHeaders,
   createPostgresConnector,
   createRabbitMqConnector,
   createRedisConnector,
@@ -682,6 +688,7 @@ import {
   reachinboxConnector,
   recallAiConnector,
   recurlyConnector,
+  reddit,
   redditConnector,
   redisConnector,
   redshiftConnector,
@@ -762,6 +769,8 @@ import {
   textcortexAiConnector,
   theirstackConnector,
   ticktickConnector,
+  tiktok,
+  tiktokConnector,
   timeOpsConnector,
   timelinesAiConnector,
   tlDvConnector,
@@ -832,7 +841,7 @@ import {
   zoomConnector,
   zoominfoConnector,
   zuoraConnector
-} from "./chunk-AGXTCR34.js";
+} from "./chunk-H5UCSRF4.js";
 import {
   DEFAULT_SIGNATURE_TOLERANCE_SECONDS,
   firstHeader,
@@ -856,7 +865,7 @@ import {
   createTangleIdentityClient,
   tangleIdentity,
   validateConnectorManifest
-} from "./chunk-WE7SQ7PB.js";
+} from "./chunk-W72KPXXX.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ACTIVEPIECES_OVERRIDES,
@@ -928,7 +937,9 @@ export {
   altTextAiConnector,
   alttextifyConnector,
   amazonBedrockConnector,
+  amazonCloudWatchConnector,
   amazonEventBridgeConnector,
+  amazonLambdaConnector,
   amazonS3Connector,
   amazonSecretsManagerConnector,
   amazonSesConnector,
@@ -938,6 +949,7 @@ export {
   aminosConnector,
   ampecoConnector,
   amplemarketConnector,
+  amplitudeConnector,
   anthropicConnector,
   anyhookWebsocketConnector,
   apifyConnector,
@@ -1017,6 +1029,7 @@ export {
   bundledAuthMode,
   bundledOAuth2Auth,
   buttondownConnector,
+  calCom,
   calComConnector,
   calendarExercisePlannerManifest,
   calendlyConnector,
@@ -1065,6 +1078,7 @@ export {
   clockodoConnector,
   closeConnector,
   cloudconvertConnector,
+  cloudflareConnector,
   cloudinaryConnector,
   cloutlyConnector,
   codaConnector,
@@ -1109,6 +1123,7 @@ export {
   createMockIntegrationProvider,
   createMongoDbConnector,
   createMySqlConnector,
+  createOAuthTokenRequestHeaders,
   createPlatformIntegrationPolicyPreset,
   createPostgresConnector,
   createRabbitMqConnector,
@@ -1507,6 +1522,7 @@ export {
   redactCapability,
   redactIntegrationBridgePayload,
   redactInvocationEnvelope,
+  reddit,
   redditConnector,
   redisConnector,
   redshiftConnector,
@@ -1611,6 +1627,8 @@ export {
   textcortexAiConnector,
   theirstackConnector,
   ticktickConnector,
+  tiktok,
+  tiktokConnector,
   timeOpsConnector,
   timelinesAiConnector,
   tlDvConnector,

package/dist/mcp.d.ts

@@ -1,6 +1,6 @@
-import { d as IntegrationConnectorCategory, g as IntegrationDataClass, f as IntegrationActionRisk, j as IntegrationProvider, b as IntegrationConnector } from './core-types-Cx53j2Xp.js';
-import { M as McpCatalogTool } from './importers-YLXwPCz_.js';
-import './types-qFsboS2G.js';
+import { d as IntegrationConnectorCategory, g as IntegrationDataClass, f as IntegrationActionRisk, j as IntegrationProvider, b as IntegrationConnector } from './core-types-D26cY5tD.js';
+import { M as McpCatalogTool } from './importers-CQKts3pm.js';
+import './types-DpKn0frG.js';
 
 /**
  * Live MCP connector — attach a remote MCP (Model Context Protocol) server

package/dist/mcp.js

@@ -2,18 +2,18 @@ import {
   IntegrationError,
   createCatalogExecutorProvider,
   importMcpConnector
-} from "./chunk-C7SE5X44.js";
-import "./chunk-JR2RWYQO.js";
-import "./chunk-EKSAOR2I.js";
+} from "./chunk-GUZA3U6T.js";
+import "./chunk-UI3U62H6.js";
+import "./chunk-ZZA4HOBE.js";
 import "./chunk-H4XYLS7T.js";
-import "./chunk-TP4MD4PD.js";
-import "./chunk-U36WHHML.js";
-import "./chunk-AG4ORH2A.js";
+import "./chunk-KBYYTHXQ.js";
+import "./chunk-ZSXRS7D7.js";
+import "./chunk-TKEVCGAI.js";
 import "./chunk-P4FFI752.js";
-import "./chunk-DHF5EXLO.js";
-import "./chunk-AGXTCR34.js";
+import "./chunk-5UCHLQ3D.js";
+import "./chunk-H5UCSRF4.js";
 import "./chunk-XC54EOUQ.js";
-import "./chunk-WE7SQ7PB.js";
+import "./chunk-W72KPXXX.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/mcp.ts

package/dist/middleware/index.d.ts

@@ -1,5 +1,5 @@
-import { T as TangleIdentityOptions, b as TangleIdentityClient, c as TangleTokenVerifyFailure } from '../tangle-id--7mgjNkq.js';
-import '../types-qFsboS2G.js';
+import { T as TangleIdentityOptions, b as TangleIdentityClient, c as TangleTokenVerifyFailure } from '../tangle-id-BCOVbWrP.js';
+import '../types-DpKn0frG.js';
 
 /**
  * @stable Drop-in request middleware that verifies id.tangle.tools

package/dist/middleware/index.js

@@ -3,8 +3,8 @@ import {
   extractToken,
   honoTangleAuthMiddleware,
   requireTangleAuth
-} from "../chunk-EKSAOR2I.js";
-import "../chunk-WE7SQ7PB.js";
+} from "../chunk-ZZA4HOBE.js";
+import "../chunk-W72KPXXX.js";
 import "../chunk-PZ5AY32C.js";
 export {
   expressTangleAuthMiddleware,

package/dist/registry.d.ts

@@ -1,5 +1,5 @@
-import { b as IntegrationConnector, h as IntegrationCatalogSource } from './core-types-Cx53j2Xp.js';
-import './types-qFsboS2G.js';
+import { b as IntegrationConnector, h as IntegrationCatalogSource } from './core-types-D26cY5tD.js';
+import './types-DpKn0frG.js';
 
 type IntegrationSupportTier = 'catalogOnly' | 'setupReady' | 'gatewayExecutable' | 'firstPartyExecutable' | 'sandboxExecutable';
 interface IntegrationRegistrySourceRef {

package/dist/registry.js

@@ -5,18 +5,18 @@ import {
   composeIntegrationRegistry,
   inferIntegrationSupportTier,
   summarizeIntegrationRegistry
-} from "./chunk-C7SE5X44.js";
-import "./chunk-JR2RWYQO.js";
-import "./chunk-EKSAOR2I.js";
+} from "./chunk-GUZA3U6T.js";
+import "./chunk-UI3U62H6.js";
+import "./chunk-ZZA4HOBE.js";
 import "./chunk-H4XYLS7T.js";
-import "./chunk-TP4MD4PD.js";
-import "./chunk-U36WHHML.js";
-import "./chunk-AG4ORH2A.js";
+import "./chunk-KBYYTHXQ.js";
+import "./chunk-ZSXRS7D7.js";
+import "./chunk-TKEVCGAI.js";
 import "./chunk-P4FFI752.js";
-import "./chunk-DHF5EXLO.js";
-import "./chunk-AGXTCR34.js";
+import "./chunk-5UCHLQ3D.js";
+import "./chunk-H5UCSRF4.js";
 import "./chunk-XC54EOUQ.js";
-import "./chunk-WE7SQ7PB.js";
+import "./chunk-W72KPXXX.js";
 import "./chunk-PZ5AY32C.js";
 export {
   buildDefaultIntegrationRegistry,

package/dist/runtime.d.ts

@@ -1,7 +1,7 @@
 import { IntegrationToolDefinition } from './catalog.js';
 import { IntegrationRegistryEntry, IntegrationRegistry } from './registry.js';
-import { I as IntegrationActor, a as IssuedIntegrationCapability, b as IntegrationConnector, c as IntegrationConnection } from './core-types-Cx53j2Xp.js';
-import './types-qFsboS2G.js';
+import { I as IntegrationActor, a as IssuedIntegrationCapability, b as IntegrationConnector, c as IntegrationConnection } from './core-types-D26cY5tD.js';
+import './types-DpKn0frG.js';
 
 type IntegrationRequirementMode = 'read' | 'write' | 'trigger';
 type IntegrationRequirementStatus = 'ready' | 'missing_connection' | 'not_executable' | 'unknown_connector';

package/dist/runtime.js

@@ -2,18 +2,18 @@ import {
   InMemoryIntegrationGrantStore,
   IntegrationRuntime,
   createIntegrationRuntime
-} from "./chunk-C7SE5X44.js";
-import "./chunk-JR2RWYQO.js";
-import "./chunk-EKSAOR2I.js";
+} from "./chunk-GUZA3U6T.js";
+import "./chunk-UI3U62H6.js";
+import "./chunk-ZZA4HOBE.js";
 import "./chunk-H4XYLS7T.js";
-import "./chunk-TP4MD4PD.js";
-import "./chunk-U36WHHML.js";
-import "./chunk-AG4ORH2A.js";
+import "./chunk-KBYYTHXQ.js";
+import "./chunk-ZSXRS7D7.js";
+import "./chunk-TKEVCGAI.js";
 import "./chunk-P4FFI752.js";
-import "./chunk-DHF5EXLO.js";
-import "./chunk-AGXTCR34.js";
+import "./chunk-5UCHLQ3D.js";
+import "./chunk-H5UCSRF4.js";
 import "./chunk-XC54EOUQ.js";
-import "./chunk-WE7SQ7PB.js";
+import "./chunk-W72KPXXX.js";
 import "./chunk-PZ5AY32C.js";
 export {
   InMemoryIntegrationGrantStore,

package/dist/specs.d.ts

@@ -1,5 +1,5 @@
-import { f as IntegrationActionRisk, g as IntegrationDataClass, d as IntegrationConnectorCategory, e as IntegrationConnectorAction, G as IntegrationConnectorTrigger, b as IntegrationConnector } from './core-types-Cx53j2Xp.js';
-import { O as OAuth2TokenClientAuthMethod } from './types-qFsboS2G.js';
+import { f as IntegrationActionRisk, g as IntegrationDataClass, d as IntegrationConnectorCategory, e as IntegrationConnectorAction, G as IntegrationConnectorTrigger, b as IntegrationConnector } from './core-types-D26cY5tD.js';
+import { O as OAuth2TokenClientAuthMethod } from './types-DpKn0frG.js';
 
 type IntegrationAuthMode = 'oauth2' | 'api_key' | 'hmac' | 'none' | 'custom';
 type IntegrationSpecStatus = 'catalog' | 'executable' | 'deprecated';
@@ -38,6 +38,10 @@ interface OAuth2AuthSpec {
     tokenUrl?: string;
     clientIdEnv?: string;
     clientSecretEnv?: string;
+    scopeSeparator?: ' ' | ',';
+    authorizationClientIdParam?: string;
+    tokenClientIdParam?: string;
+    tokenClientSecretParam?: string;
     /** OAuth client authentication at the token endpoint. Defaults to
      * `client_secret_post` when omitted. */
     tokenClientAuthMethod?: OAuth2TokenClientAuthMethod;
@@ -202,7 +206,11 @@ interface ConnectorAuthSpec {
     redirectUriTemplate?: string;
     clientIdEnv?: string;
     clientSecretEnv?: string;
-    tokenClientAuthMethod?: 'client_secret_post' | 'client_secret_basic';
+    scopeSeparator?: ' ' | ',';
+    authorizationClientIdParam?: string;
+    tokenClientIdParam?: string;
+    tokenClientSecretParam?: string;
+    tokenClientAuthMethod?: OAuth2TokenClientAuthMethod;
     extraAuthParams?: Record<string, string>;
 }
 declare function resolveConnectorAuthSpec(kind: string): ConnectorAuthSpec | undefined;

package/dist/specs.js

@@ -16,12 +16,12 @@ import {
   validateCredentialFormat,
   validateCredentialSet,
   validateIntegrationSpec
-} from "./chunk-U36WHHML.js";
-import "./chunk-AG4ORH2A.js";
-import "./chunk-DHF5EXLO.js";
-import "./chunk-AGXTCR34.js";
+} from "./chunk-ZSXRS7D7.js";
+import "./chunk-TKEVCGAI.js";
+import "./chunk-5UCHLQ3D.js";
+import "./chunk-H5UCSRF4.js";
 import "./chunk-XC54EOUQ.js";
-import "./chunk-WE7SQ7PB.js";
+import "./chunk-W72KPXXX.js";
 import "./chunk-PZ5AY32C.js";
 export {
   INTEGRATION_FAMILIES,

package/dist/{tangle-id--7mgjNkq.d.ts → tangle-id-BCOVbWrP.d.ts}

@@ -1,4 +1,4 @@
-import { C as ConnectorAdapter } from './types-qFsboS2G.js';
+import { C as ConnectorAdapter } from './types-DpKn0frG.js';
 
 /**
  * @stable Tangle Identity — `id.tangle.tools` connector + verifier.

package/dist/{types-qFsboS2G.d.ts → types-DpKn0frG.d.ts}

@@ -198,7 +198,7 @@ interface ConnectorInvocation {
      *  reconnect. Adapters MUST invoke this with the FULL rotated envelope,
      *  not a partial — the previous refresh token is preserved by the caller's
      *  refresh logic, not inferred here. */
-    onCredentialsRotated?: (credentials: ConnectorCredentials) => void;
+    onCredentialsRotated?: (credentials: ConnectorCredentials) => Promise<void> | void;
 }
 /** A single inbound event extracted from a push payload. The webhook
  *  receiver persists one `InboundEvent` row per entry the connector returns. */
@@ -275,7 +275,8 @@ interface ConnectorAdapter {
     exchangeOAuth?(input: {
         code: string;
         state: string;
-        codeVerifier: string;
+        /** Required unless this connector declares PKCE as unsupported. */
+        codeVerifier?: string;
         redirectUri: string;
     }): Promise<{
         credentials: ConnectorCredentials;
@@ -289,7 +290,9 @@ interface ConnectorAdapter {
      *  UI. Should perform the cheapest possible read that proves the grant
      *  is still valid. Returns `{ok: false, reason}` rather than throwing
      *  for the common case (token expired, scope missing). */
-    test(source: ResolvedDataSource): Promise<{
+    test(source: ResolvedDataSource, 
+    /** Optional persistence sink for credentials rotated by the health check. */
+    onCredentialsRotated?: (credentials: ConnectorCredentials) => Promise<void> | void): Promise<{
         ok: true;
     } | {
         ok: false;
@@ -345,12 +348,12 @@ type TokenMetadataSource = string | {
     field: string;
     required?: boolean;
 };
-/** How an OAuth token endpoint receives this application's client credentials.
+/** How an OAuth token endpoint authenticates this client.
  *
- * OAuth providers default to `client_secret_post`, which sends both values in
- * the form body. `client_secret_basic` instead sends an HTTP Basic header and
- * deliberately omits the credentials from that body. */
-type OAuth2TokenClientAuthMethod = 'client_secret_post' | 'client_secret_basic';
+ * Public clients use `none` and send only the client id. OAuth providers
+ * otherwise default to `client_secret_post`, which sends both values in the
+ * form body. `client_secret_basic` sends an HTTP Basic header instead. */
+type OAuth2TokenClientAuthMethod = 'none' | 'client_secret_post' | 'client_secret_basic';
 type OAuth2AuthSpec = {
     kind: 'oauth2';
     /** OAuth2 grant type. Defaults to `'authorization_code'` (the interactive
@@ -370,13 +373,25 @@ type OAuth2AuthSpec = {
     /** Separator used when serializing multiple scopes into the authorization
      *  URL. OAuth defaults to spaces; Zoho requires comma-delimited scopes. */
     scopeSeparator?: ' ' | ',';
+    /** Provider PKCE posture. Defaults to the host flow policy when omitted. */
+    pkce?: 'required' | 'supported' | 'unsupported';
+    /** Query parameter that receives the OAuth client id on the authorization
+     *  URL. Defaults to `client_id`; TikTok calls this value `client_key`. */
+    authorizationClientIdParam?: string;
     /** Whether the connector supports incremental authorization (Google
      *  does; many don't). */
     incremental?: boolean;
     /** Env-var name holding the OAuth client_id. */
     clientIdEnv: string;
-    /** Env-var name holding the OAuth client_secret. */
-    clientSecretEnv: string;
+    /** Env-var name holding the OAuth client_secret. Omit only for public
+     *  clients whose tokenClientAuthMethod is `none`. */
+    clientSecretEnv?: string;
+    /** Form parameter that receives the client id during token exchange.
+     *  Defaults to `client_id`; TikTok calls this value `client_key`. */
+    tokenClientIdParam?: string;
+    /** Form parameter that receives the client secret during token exchange.
+     *  Defaults to `client_secret`. */
+    tokenClientSecretParam?: string;
     /** OAuth client authentication for the authorization-code token exchange.
      * Defaults to `client_secret_post` for backward compatibility. */
     tokenClientAuthMethod?: OAuth2TokenClientAuthMethod;
@@ -384,6 +399,10 @@ type OAuth2AuthSpec = {
      *  Google's `access_type=offline&prompt=consent` to obtain refresh
      *  tokens). */
     extraAuthParams?: Record<string, string>;
+    /** Non-secret headers sent to the token endpoint. Use this for provider
+     *  identification headers such as Reddit's required User-Agent. The runtime
+     *  always owns Authorization and Content-Type. */
+    tokenRequestHeaders?: Record<string, string>;
     /** Whether to send the `scope` query param on the authorization URL.
      *  Defaults to true. Set false for providers that reject a per-request
      *  scope and pin scopes app-side (e.g. HelloSign/Dropbox Sign). */

package/docs/integration-execution-audit.md

@@ -23,15 +23,15 @@ This audit separates product contracts from implementation backends:
 | Custom-auth connectors with auth field metadata | 11 |
 | Runtime package dependencies declared by this package | 0 |
 | Setup specs | 246 |
-| Executable setup specs | 228 |
-| Catalog/setup-only specs | 18 |
+| Executable setup specs | 234 |
+| Catalog/setup-only specs | 12 |
 | Tangle first-class contracts | 669 |
 | Contracts with runtime packages | 669 |
 | Contracts with mapped actions | 669 |
 | Contracts with mapped triggers | 669 |
 | Contracts with mapped auth | 669 |
 | Native adapter backends | 516 |
-| Native adapter surfaces shipped | 622 |
+| Native adapter surfaces shipped | 627 |
 | Package-runtime backends | 153 |
 | Runtime manifest dependencies for catalog-only connectors | 162 |
 | Catalog-only connectors exposable behind runtime | 153 |
@@ -100,6 +100,7 @@ The full set is in the machine-readable matrix; representative native adapters:
 - `aminos`
 - `ampeco`
 - `amplemarket`
+- `amplitude`
 - `anthropic`
 - `anyhook-websocket`
 - `apify`
@@ -119,6 +120,8 @@ The full set is in the machine-readable matrix; representative native adapters:
 - `avalara`
 - `avian`
 - `avoma`
+- `aws-cloudwatch`
+- `aws-lambda`
 - `azure-ad`
 - `azure-blob-storage`
 - `azure-communication-services`
@@ -145,11 +148,8 @@ The full set is in the machine-readable matrix; representative native adapters:
 - `billplz`
 - `bitly`
 - `bland-ai`
-- `bluesky`
-- `bolna`
-- `bonjoro`
 
-...and 542 more native adapter surfaces.
+...and 547 more native adapter surfaces.
 
 Executable setup specs:
 
@@ -165,6 +165,7 @@ Executable setup specs:
 - `amazon-s3`
 - `amazon-sns`
 - `amazon-sqs`
+- `amplitude`
 - `anthropic`
 - `anyhook-websocket`
 - `apify`
@@ -173,6 +174,8 @@ Executable setup specs:
 - `attio`
 - `auth0`
 - `avalara`
+- `aws-cloudwatch`
+- `aws-lambda`
 - `azure-blob-storage`
 - `azure-event-grid`
 - `azure-service-bus`
@@ -207,6 +210,7 @@ Executable setup specs:
 - `clickup`
 - `clio`
 - `close`
+- `cloudflare`
 - `coda`
 - `cody`
 - `confluence`
@@ -358,8 +362,10 @@ Executable setup specs:
 - `supabase`
 - `taxjar`
 - `telegram`
+- `tiktok`
 - `trello`
 - `twilio-sms`
+- `twitter`
 - `typeform`
 - `vercel`
 - `weaviate`
@@ -388,8 +394,8 @@ Executable setup specs:
 | --- | --- | --- |
 | Tangle first-class contracts | Done | 669 connectors have Tangle-owned action/trigger/auth/runtime contracts. |
 | Connector discovery/catalog search | Done | 669 catalog connectors, 3790 actions, 998 triggers normalized into Tangle catalog shapes. |
-| Native adapter execution | Done for listed native backends | 622 reviewed native adapter surfaces ship from this package; 516 overlap the 669 catalog contracts. |
-| OAuth/API-key setup metadata | Partial | 246 setup specs exist; 228 are executable setup specs and 18 are catalog/setup-only. |
+| Native adapter execution | Done for listed native backends | 627 reviewed native adapter surfaces ship from this package; 516 overlap the 669 catalog contracts. |
+| OAuth/API-key setup metadata | Partial | 246 setup specs exist; 234 are executable setup specs and 12 are catalog/setup-only. |
 | Direct adapter backlog | Tracked | 153 contracts still need native/direct adapters before they should be product-executable. |
 | Legacy runtime dependency manifest | Deprecated | `buildTangleCatalogRuntimePackageManifest()` is retained only as an audit/provenance helper; products should not deploy a package runner for normal execution. |
 | Runtime package coverage audit | Removed from launch path | Package-runner smoke is no longer a product launch gate; port demanded integrations to direct adapters instead. |
@@ -403,7 +409,7 @@ Executable setup specs:
 | Bucket | Count | What it means |
 | --- | ---: | --- |
 | Contracts needing native/direct adapters | 153 | Connector has a Tangle contract but no reviewed direct adapter yet. |
-| Commercial/setup-only provider contracts | 18 | Provider is discoverable with honest setup metadata but cannot execute until a supported API backend and customer credentials exist. |
+| Commercial/setup-only provider contracts | 12 | Provider is discoverable with honest setup metadata but cannot execute until a supported API backend and customer credentials exist. |
 | Catalog connectors with zero upstream action names | 0 | These entries need catalog action-name mapping before exact package-runtime invocation can work. |
 | Custom-auth catalog connectors needing manual credential-field mapping | 0 | These are still custom auth and no field names were extracted from source. |
 | Catalog connectors with triggers needing runtime-service hosting | 288 | Trigger metadata and provider hooks exist; runtime services still need package-specific webhook/polling hosting. |
@@ -468,7 +474,7 @@ Manual custom auth mapping gap: none.
    There are 998 catalog triggers and 998 upstream trigger names. The provider flow supports trigger subscribe/unsubscribe/normalize hooks. Runtime services still need live webhook/polling smoke verification.
 
 5. **Native adapter coverage is intentionally smaller than contract breadth.**
-   This repo ships 622 native adapter surfaces. 516 overlap the 669 catalog contracts; the remaining catalog contracts are not product-executable until ported.
+   This repo ships 627 native adapter surfaces. 516 overlap the 669 catalog contracts; the remaining catalog contracts are not product-executable until ported.
 
 ## Concrete Launch Interpretation