@tangle-network/agent-integrations 0.53.47 → 0.53.49

package/dist/{chunk-U36WHHML.js → chunk-ZSXRS7D7.js}

@@ -1,13 +1,13 @@
 import {
   buildIntegrationCoverageConnectors,
   listIntegrationCoverageSpecs
-} from "./chunk-AG4ORH2A.js";
+} from "./chunk-TKEVCGAI.js";
 import {
   bundledApiKeyHint,
   bundledAuthMode,
   bundledOAuth2Auth,
   getBundledAdapterManifest
-} from "./chunk-DHF5EXLO.js";
+} from "./chunk-5UCHLQ3D.js";
 
 // src/specs/types.ts
 function specAuthToConnectorAuth(auth) {
@@ -245,6 +245,7 @@ var INTEGRATION_KIND_ALIASES = {
   twilio: "twilio-sms",
   "twilio-voice": "twilio-sms",
   "telegram-bot": "telegram",
+  "x-twitter": "twitter",
   scrapegrapghai: "scrapegraphai"
 };
 function canonicalIntegrationKind(kind) {
@@ -253,6 +254,228 @@ function canonicalIntegrationKind(kind) {
 
 // src/specs/overrides.ts
 var INTEGRATION_OVERRIDES = {
+  tiktok: {
+    consoleUrl: "https://developers.tiktok.com/apps/",
+    consoleSteps: [
+      {
+        id: "app",
+        title: "Create or select the TikTok app",
+        detail: "Use one company-owned TikTok for Developers app for Tangle Integration Hub. Do not create a duplicate app."
+      },
+      {
+        id: "products",
+        title: "Enable Login Kit and Content Posting",
+        detail: "Enable Login Kit, Content Posting API, and the user.info.basic, video.list, and video.publish scopes."
+      },
+      {
+        id: "redirect",
+        title: "Register the callback",
+        detail: "Add {redirectUri} as an exact HTTPS web redirect URI.",
+        copyValue: "{redirectUri}"
+      },
+      {
+        id: "urls",
+        title: "Verify publishing URLs",
+        detail: "Verify every HTTPS domain or URL prefix TikTok may pull videos and photos from."
+      },
+      {
+        id: "test",
+        title: "Test a private post",
+        detail: "Connect a test creator, read creator information, publish private test media, and poll the publish id until completion."
+      }
+    ],
+    knownQuirks: [
+      {
+        id: "private-until-audit",
+        severity: "critical",
+        message: "TikTok restricts unaudited Content Posting clients to private posts. Public visibility requires TikTok app review."
+      },
+      {
+        id: "verified-pull-url",
+        severity: "critical",
+        message: "Direct posts can pull media only from an HTTPS domain or URL prefix verified for this TikTok app."
+      },
+      {
+        id: "creator-preflight",
+        severity: "warning",
+        message: "TikTok requires current creator options before each direct post. The adapter performs this preflight and rejects unavailable privacy or duration choices."
+      },
+      {
+        id: "token-lifetime",
+        severity: "info",
+        message: "Access tokens last about 24 hours. Refresh tokens last about 365 days and may rotate on refresh."
+      }
+    ],
+    postSetup: [
+      {
+        id: "tiktok.private-publish",
+        title: "Prove one private direct post",
+        detail: "Publish media from a verified URL and poll the returned publish id until TikTok reports PUBLISH_COMPLETE."
+      },
+      {
+        id: "tiktok.refresh",
+        title: "Prove token refresh",
+        detail: "Refresh the short-lived access token and preserve TikTok\u2019s newly returned refresh token."
+      }
+    ],
+    healthcheck: {
+      id: "tiktok.user.info",
+      level: "connection",
+      description: "Read the connected TikTok account with user.info.basic."
+    }
+  },
+  amplitude: {
+    consoleUrl: "https://analytics.amplitude.com/",
+    credentialFields: [
+      {
+        label: "Amplitude project credential JSON",
+        description: "JSON containing the API key and secret key for one Amplitude project.",
+        example: '{"apiKey":"...","secretKey":"..."}',
+        secret: true
+      }
+    ],
+    consoleSteps: [
+      {
+        id: "project",
+        title: "Select one Amplitude project",
+        detail: "Open Project Settings > General for the project that Tangle may access."
+      },
+      {
+        id: "credentials",
+        title: "Copy the project credentials",
+        detail: "Copy the API key and secret key into one JSON credential bundle."
+      },
+      {
+        id: "region",
+        title: "Set the data region",
+        detail: "Use the default US host. Set apiBaseUrl to the documented EU host only for an EU project."
+      },
+      {
+        id: "test",
+        title: "Test the project connection",
+        detail: "The connection check lists visible project events without changing analytics data."
+      }
+    ],
+    knownQuirks: [
+      {
+        id: "project-bound",
+        severity: "warning",
+        message: "The API key and secret key belong to one project. Use a separate connection for each project."
+      },
+      {
+        id: "region-bound",
+        severity: "critical",
+        message: "US and EU projects use different hosts. Tangle accepts only the two official Amplitude API hosts."
+      },
+      {
+        id: "annotation-authority",
+        severity: "warning",
+        message: "Annotation changes require suitable Amplitude authority and remain approval-gated."
+      }
+    ],
+    healthcheck: {
+      id: "amplitude.connection",
+      level: "connection",
+      description: "Authenticate with the project credential pair and list visible events."
+    }
+  },
+  cloudflare: {
+    consoleUrl: "https://dash.cloudflare.com/profile/api-tokens/",
+    credentialFields: [
+      {
+        label: "Dedicated Cloudflare API token",
+        description: "Create a new resource-scoped token for Tangle Integration Hub. Do not reuse an infrastructure token.",
+        secret: true
+      }
+    ],
+    consoleSteps: [
+      {
+        id: "token",
+        title: "Create a dedicated API token",
+        detail: "Create a custom token named Tangle Integration Hub. Do not use the legacy Global API Key."
+      },
+      {
+        id: "permissions",
+        title: "Grant narrow permissions",
+        detail: "Grant Account Settings Read, Zone Read, Zone Settings Read, and DNS Read or DNS Edit only."
+      },
+      {
+        id: "resources",
+        title: "Limit the token to selected zones",
+        detail: "Include only the accounts and zones that this connection must manage."
+      },
+      {
+        id: "store",
+        title: "Store the one-time token",
+        detail: "Copy the token once. Tangle Hub seals it before persistence."
+      },
+      {
+        id: "test",
+        title: "Verify token status",
+        detail: "The connection check calls the token verification endpoint and requires active status."
+      }
+    ],
+    knownQuirks: [
+      {
+        id: "no-global-key",
+        severity: "critical",
+        message: "Global API keys grant full user authority and are unsupported. Use a scoped API token."
+      },
+      {
+        id: "no-token-reuse",
+        severity: "critical",
+        message: "Never reuse a token used by Tangle deployment, Workers, Terraform, DNS automation, or other infrastructure."
+      },
+      {
+        id: "dns-impact",
+        severity: "critical",
+        message: "DNS updates can interrupt production traffic. Every DNS mutation remains approval-gated."
+      }
+    ],
+    healthcheck: {
+      id: "cloudflare.token",
+      level: "connection",
+      description: "Verify that the dedicated API token is valid and active."
+    }
+  },
+  nango: {
+    consoleUrl: "https://nango.dev/docs/getting-started/intro-to-nango",
+    credentialFields: [],
+    consoleSteps: [
+      {
+        id: "gateway",
+        title: "Choose a Nango gateway deployment",
+        detail: "Use Nango only when a product intentionally deploys Nango Cloud or a self-hosted Nango environment."
+      },
+      {
+        id: "runtime",
+        title: "Configure the gateway runtime",
+        detail: "Store the Nango host and environment secret in the product-owned gateway service, not as provider OAuth credentials."
+      },
+      {
+        id: "providers",
+        title: "Configure real provider integrations",
+        detail: "Register each external provider in Nango and test its connection lifecycle separately."
+      }
+    ],
+    knownQuirks: [
+      {
+        id: "gateway-not-provider",
+        severity: "critical",
+        message: "Nango is an integration gateway, not an end-user OAuth provider. This catalog entry has no generic Connect flow."
+      },
+      {
+        id: "no-runtime",
+        severity: "critical",
+        message: "This package does not ship a Nango gateway backend. The entry remains non-executable until a product deploys one."
+      }
+    ],
+    healthcheck: {
+      id: "nango.static",
+      level: "static",
+      description: "No Nango gateway runtime is configured by this package."
+    }
+  },
   mongodb: {
     credentialFields: [
       {
@@ -920,6 +1143,10 @@ function resolveConnectorAuthSpec(kind) {
       redirectUriTemplate: auth.redirectUriTemplate,
       clientIdEnv: auth.clientIdEnv,
       clientSecretEnv: auth.clientSecretEnv,
+      scopeSeparator: auth.scopeSeparator,
+      authorizationClientIdParam: auth.authorizationClientIdParam,
+      tokenClientIdParam: auth.tokenClientIdParam,
+      tokenClientSecretParam: auth.tokenClientSecretParam,
       tokenClientAuthMethod: auth.tokenClientAuthMethod,
       extraAuthParams: auth.extraAuthParams
     };
@@ -1050,17 +1277,22 @@ function authFor(spec, family, permissions, kind) {
     }))
   );
   const real = manifest ? bundledOAuth2Auth(manifest) : void 0;
+  const tokenClientAuthMethod = real?.tokenClientAuthMethod ?? "client_secret_post";
   return {
     mode: "oauth2",
     authorizationUrl: real?.authorizationUrl ?? f.authorizationUrl,
     tokenUrl: real?.tokenUrl ?? f.tokenUrl,
     clientIdEnv: real?.clientIdEnv ?? f.credentialFields.find((field) => !field.secret)?.env,
-    clientSecretEnv: real?.clientSecretEnv ?? f.credentialFields.find((field) => field.secret)?.env,
-    tokenClientAuthMethod: real?.tokenClientAuthMethod ?? "client_secret_post",
+    clientSecretEnv: tokenClientAuthMethod === "none" ? void 0 : real?.clientSecretEnv ?? f.credentialFields.find((field) => field.secret)?.env,
+    scopeSeparator: real?.scopeSeparator ?? " ",
+    authorizationClientIdParam: real?.authorizationClientIdParam ?? "client_id",
+    tokenClientIdParam: real?.tokenClientIdParam ?? "client_id",
+    tokenClientSecretParam: real?.tokenClientSecretParam ?? "client_secret",
+    tokenClientAuthMethod,
     scopes: real ? scopesFromManifest(real.scopes, permissions) : scopes,
     extraAuthParams: real?.extraAuthParams ?? extraAuthParamsFor(family),
     redirectUriTemplate: (f.redirectUriTemplate ?? "https://{host}/api/integrations/oauth/{kind}/callback").replace("{kind}", spec.id),
-    pkce: family === "google" || family === "microsoft-graph" ? "supported" : "unsupported"
+    pkce: real?.pkce ?? (family === "google" || family === "microsoft-graph" ? "supported" : "required")
   };
 }
 function actionsFromManifest(manifest, fallbackDataClass) {
@@ -1084,7 +1316,7 @@ function scopesFromManifest(providerScopes, permissions) {
   const writePermission = permissions.find((permission) => permission.risk === "write");
   const readPermission = permissions.find((permission) => permission.risk === "read") ?? permissions[0];
   return providerScopes.map((providerScope) => {
-    const mutating = /(?:^|[.\/_:-])(?:write|manage|create|modify|edit|update|delete|full|readwrite)(?:$|[.\/_:-])/i.test(
+    const mutating = /(?:^|[.\/_:-])(?:write|manage|create|modify|edit|update|delete|publish|full|readwrite)(?:$|[.\/_:-])/i.test(
       providerScope
     );
     const base = (mutating ? writePermission : readPermission) ?? readPermission;
@@ -1101,10 +1333,18 @@ function scopesFromManifest(providerScopes, permissions) {
 function credentialFieldsFor(auth) {
   if (auth.mode === "api_key" || auth.mode === "hmac") return [auth.credential];
   if (auth.mode === "oauth2") {
-    return [
-      { label: "Client ID", env: auth.clientIdEnv, description: "OAuth client ID.", secret: false },
-      { label: "Client Secret", env: auth.clientSecretEnv, description: "OAuth client secret.", secret: true }
+    const fields = [
+      { label: "Client ID", env: auth.clientIdEnv, description: "OAuth client ID.", secret: false }
     ];
+    if (auth.tokenClientAuthMethod !== "none") {
+      fields.push({
+        label: "Client Secret",
+        env: auth.clientSecretEnv,
+        description: "OAuth client secret.",
+        secret: true
+      });
+    }
+    return fields;
   }
   return [];
 }
@@ -1204,6 +1444,7 @@ function apiKeyFieldFor(kind) {
 }
 function apiKeyPlacementFor(kind) {
   if (kind === "sftp" || kind === "kafka") return void 0;
+  if (kind === "amplitude") return "basic";
   if (kind === "clickup" || kind === "gitlab") return "header";
   return "bearer";
 }
@@ -1343,4 +1584,4 @@ export {
   validateCredentialFormat,
   validateCredentialSet
 };
-//# sourceMappingURL=chunk-U36WHHML.js.map
+//# sourceMappingURL=chunk-ZSXRS7D7.js.map