@tool-bridge/server 0.21.1 → 0.22.1

package/dist/workos-PKB2YR7S.js

@@ -0,0 +1,664 @@
+import {
+  createAuthedClient
+} from "./chunk-RTW5VRTK.js";
+import "./chunk-BNMLA2RC.js";
+import {
+  compactDefined
+} from "./chunk-JXHMDBAY.js";
+import {
+  createProviderPlugin,
+  upstreamError
+} from "./chunk-X7ZUTKHR.js";
+import "./chunk-7ISGFRC6.js";
+import "./chunk-UY6ANCOY.js";
+import {
+  TBError
+} from "./chunk-HA4BGL6C.js";
+import "./chunk-U67V476Y.js";
+
+// ../plugins/src/workos/api.ts
+var SERVICE = "workos";
+var API_BASE = "https://api.workos.com";
+function errorMessage(payload, status) {
+  const error = payload.error;
+  if (error !== null && typeof error === "object" && !Array.isArray(error)) {
+    const nested = error.message;
+    if (typeof nested === "string" && nested.trim() !== "") return nested.trim();
+  }
+  for (const value of [payload.message, payload.error_description, payload.error]) {
+    if (typeof value === "string" && value.trim() !== "") return value.trim();
+  }
+  return `WorkOS \u8FD4\u56DE HTTP ${status}`;
+}
+var http = createAuthedClient({
+  baseUrl: `${API_BASE}/`,
+  service: SERVICE,
+  auth: { kind: "bearer" },
+  headers: { accept: "application/json" },
+  mapError: ({ bodyKind, data, status }) => {
+    if (bodyKind === "invalid-json") {
+      return new TBError("unavailable", "WorkOS \u8FD4\u56DE\u4E86\u975E\u6CD5 JSON", { retryable: true });
+    }
+    const payload = bodyKind === "empty" ? {} : data !== null && typeof data === "object" && !Array.isArray(data) ? data : void 0;
+    return payload === void 0 ? new TBError("unavailable", "WorkOS \u8FD4\u56DE\u7684\u4E0D\u662F JSON \u5BF9\u8C61", { retryable: true }) : upstreamError(status, errorMessage(payload, status));
+  },
+  mapTransportError: ({ message }) => new TBError(
+    "unavailable",
+    message === void 0 ? "WorkOS \u8BF7\u6C42\u5931\u8D25" : `WorkOS \u8BF7\u6C42\u5931\u8D25: ${message}`,
+    { retryable: true }
+  )
+});
+async function request(ctx, input) {
+  const response = await http.request(ctx, {
+    method: input.method,
+    path: input.path,
+    // 多值过滤是重复同名键(与 Render 的逗号拼接不同)。
+    query: Object.entries(input.query ?? {}),
+    ...input.body === void 0 ? {} : { json: input.body },
+    invalidJsonMessage: "WorkOS \u8FD4\u56DE\u4E86\u975E\u6CD5 JSON"
+  });
+  const payload = response.bodyKind === "empty" ? {} : response.data !== null && typeof response.data === "object" && !Array.isArray(response.data) ? response.data : void 0;
+  if (payload === void 0) {
+    throw new TBError("unavailable", "WorkOS \u8FD4\u56DE\u7684\u4E0D\u662F JSON \u5BF9\u8C61", { retryable: true });
+  }
+  return payload;
+}
+function unwrap(payload, key) {
+  const value = payload[key];
+  if (value !== null && typeof value === "object" && !Array.isArray(value)) return value;
+  return payload;
+}
+function toRecord(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return {};
+  return value;
+}
+async function listAction(ctx, path, query, listKey) {
+  const payload = await request(ctx, { method: "GET", path, query });
+  return {
+    [listKey]: Array.isArray(payload.data) ? payload.data : [],
+    list_metadata: toRecord(payload.list_metadata),
+    raw: payload
+  };
+}
+async function wrappedAction(ctx, input, wrapperKey) {
+  const payload = await request(ctx, input);
+  return { [wrapperKey]: unwrap(payload, wrapperKey), raw: payload };
+}
+function userBody(input) {
+  return compactDefined({
+    email: input.email,
+    first_name: input.first_name,
+    last_name: input.last_name,
+    name: input.name,
+    email_verified: input.email_verified,
+    metadata: input.metadata,
+    external_id: input.external_id,
+    password: input.password
+  });
+}
+function organizationBody(input) {
+  return compactDefined({
+    name: input.name,
+    allow_profiles_outside_organization: input.allow_profiles_outside_organization,
+    domain_data: input.domain_data,
+    metadata: input.metadata,
+    external_id: input.external_id
+  });
+}
+async function listUsers(input, ctx) {
+  return await listAction(ctx, "/user_management/users", {
+    before: input.before,
+    after: input.after,
+    limit: input.limit,
+    order: input.order,
+    organization_id: input.organization_id,
+    email: input.email
+  }, "users");
+}
+async function getUser(input, ctx) {
+  return await wrappedAction(
+    ctx,
+    { method: "GET", path: `/user_management/users/${encodeURIComponent(input.id)}` },
+    "user"
+  );
+}
+async function createUser(input, ctx) {
+  return await wrappedAction(
+    ctx,
+    { method: "POST", path: "/user_management/users", body: userBody(input) },
+    "user"
+  );
+}
+async function updateUser(input, ctx) {
+  return await wrappedAction(
+    ctx,
+    {
+      method: "PUT",
+      path: `/user_management/users/${encodeURIComponent(input.id)}`,
+      body: userBody(input)
+    },
+    "user"
+  );
+}
+async function listOrganizations(input, ctx) {
+  return await listAction(ctx, "/organizations", {
+    before: input.before,
+    after: input.after,
+    limit: input.limit,
+    order: input.order,
+    domains: input.domains,
+    search: input.search
+  }, "organizations");
+}
+async function getOrganization(input, ctx) {
+  return await wrappedAction(
+    ctx,
+    { method: "GET", path: `/organizations/${encodeURIComponent(input.id)}` },
+    "organization"
+  );
+}
+async function createOrganization(input, ctx) {
+  return await wrappedAction(
+    ctx,
+    { method: "POST", path: "/organizations", body: organizationBody(input) },
+    "organization"
+  );
+}
+async function updateOrganization(input, ctx) {
+  return await wrappedAction(
+    ctx,
+    {
+      method: "PUT",
+      path: `/organizations/${encodeURIComponent(input.id)}`,
+      body: organizationBody(input)
+    },
+    "organization"
+  );
+}
+async function listOrganizationMemberships(input, ctx) {
+  return await listAction(ctx, "/user_management/organization_memberships", {
+    before: input.before,
+    after: input.after,
+    limit: input.limit,
+    order: input.order,
+    organization_id: input.organization_id,
+    user_id: input.user_id,
+    statuses: input.statuses
+  }, "organization_memberships");
+}
+async function getOrganizationMembership(input, ctx) {
+  return await wrappedAction(
+    ctx,
+    {
+      method: "GET",
+      path: `/user_management/organization_memberships/${encodeURIComponent(input.id)}`
+    },
+    "organization_membership"
+  );
+}
+async function createOrganizationMembership(input, ctx) {
+  return await wrappedAction(
+    ctx,
+    {
+      method: "POST",
+      path: "/user_management/organization_memberships",
+      body: compactDefined({
+        user_id: input.user_id,
+        organization_id: input.organization_id,
+        role_slug: input.role_slug,
+        role_slugs: input.role_slugs
+      })
+    },
+    "organization_membership"
+  );
+}
+async function updateOrganizationMembership(input, ctx) {
+  return await wrappedAction(
+    ctx,
+    {
+      method: "PUT",
+      path: `/user_management/organization_memberships/${encodeURIComponent(input.id)}`,
+      body: compactDefined({ role_slug: input.role_slug, role_slugs: input.role_slugs })
+    },
+    "organization_membership"
+  );
+}
+async function deactivateOrganizationMembership(input, ctx) {
+  return await wrappedAction(
+    ctx,
+    {
+      method: "PUT",
+      path: `/user_management/organization_memberships/${encodeURIComponent(input.id)}/deactivate`
+    },
+    "organization_membership"
+  );
+}
+async function reactivateOrganizationMembership(input, ctx) {
+  return await wrappedAction(
+    ctx,
+    {
+      method: "PUT",
+      path: `/user_management/organization_memberships/${encodeURIComponent(input.id)}/reactivate`
+    },
+    "organization_membership"
+  );
+}
+
+// ../plugins/src/workos/schema.ts
+import { z } from "zod/v4";
+var listUsersInput = z.strictObject({
+  before: z.string().min(1).describe("An object ID that defines the cursor position before the requested page.").optional(),
+  after: z.string().min(1).describe("An object ID that defines the cursor position after the requested page.").optional(),
+  limit: z.int().min(1).max(100).describe("Upper limit on the number of objects to return, between 1 and 100.").optional(),
+  order: z.enum(["normal", "desc", "asc"]).describe("Order the results by creation time.").optional(),
+  organization_id: z.string().min(1).describe("Filter users by the organization they are members of.").optional(),
+  email: z.string().min(1).describe("Filter users by their email address.").optional()
+}).describe("Input parameters for listing WorkOS users.");
+var listUsersOutput = z.strictObject({
+  users: z.array(z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("The unique ID of the user.").optional(),
+    email: z.string().describe("The email address of the user.").optional(),
+    first_name: z.string().describe("The first name of the user.").nullable().optional(),
+    last_name: z.string().describe("The last name of the user.").nullable().optional(),
+    name: z.string().describe("The user's full name.").nullable().optional(),
+    email_verified: z.boolean().describe("Whether the user's email has been verified.").optional(),
+    external_id: z.string().describe("The external ID of the user.").nullable().optional(),
+    metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+    created_at: z.string().describe("An ISO 8601 timestamp for when the user was created.").optional(),
+    updated_at: z.string().describe("An ISO 8601 timestamp for when the user was last updated.").optional()
+  }).describe("WorkOS user object.")).describe("Users returned by WorkOS."),
+  list_metadata: z.looseObject({
+    before: z.string().describe("Cursor for the previous page when returned by WorkOS.").nullable().optional(),
+    after: z.string().describe("Cursor for the next page when returned by WorkOS.").nullable().optional()
+  }).describe("WorkOS pagination metadata returned for a list request."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A page of WorkOS users.");
+var getUserInput = z.strictObject({
+  id: z.string().min(1).describe("The unique ID of the user.")
+}).describe("Input parameters for getting a WorkOS user.");
+var getUserOutput = z.strictObject({
+  user: z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("The unique ID of the user.").optional(),
+    email: z.string().describe("The email address of the user.").optional(),
+    first_name: z.string().describe("The first name of the user.").nullable().optional(),
+    last_name: z.string().describe("The last name of the user.").nullable().optional(),
+    name: z.string().describe("The user's full name.").nullable().optional(),
+    email_verified: z.boolean().describe("Whether the user's email has been verified.").optional(),
+    external_id: z.string().describe("The external ID of the user.").nullable().optional(),
+    metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+    created_at: z.string().describe("An ISO 8601 timestamp for when the user was created.").optional(),
+    updated_at: z.string().describe("An ISO 8601 timestamp for when the user was last updated.").optional()
+  }).describe("WorkOS user object."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A WorkOS user response.");
+var createUserInput = z.strictObject({
+  email: z.email().describe("The email address of the user."),
+  first_name: z.string().min(1).describe("The first name of the user.").optional(),
+  last_name: z.string().min(1).describe("The last name of the user.").optional(),
+  name: z.string().min(1).describe("The user's full name.").optional(),
+  email_verified: z.boolean().describe("Whether the user's email address was previously verified.").optional(),
+  metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+  external_id: z.string().min(1).describe("The external identifier of the user.").optional(),
+  password: z.string().min(1).describe("The password to set for the user.").optional()
+}).describe("Input parameters for creating a WorkOS user.");
+var createUserOutput = z.strictObject({
+  user: z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("The unique ID of the user.").optional(),
+    email: z.string().describe("The email address of the user.").optional(),
+    first_name: z.string().describe("The first name of the user.").nullable().optional(),
+    last_name: z.string().describe("The last name of the user.").nullable().optional(),
+    name: z.string().describe("The user's full name.").nullable().optional(),
+    email_verified: z.boolean().describe("Whether the user's email has been verified.").optional(),
+    external_id: z.string().describe("The external ID of the user.").nullable().optional(),
+    metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+    created_at: z.string().describe("An ISO 8601 timestamp for when the user was created.").optional(),
+    updated_at: z.string().describe("An ISO 8601 timestamp for when the user was last updated.").optional()
+  }).describe("WorkOS user object."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A WorkOS user response.");
+var updateUserInput = z.strictObject({
+  id: z.string().min(1).describe("The unique ID of the user."),
+  first_name: z.string().min(1).describe("The first name of the user.").optional(),
+  last_name: z.string().min(1).describe("The last name of the user.").optional(),
+  name: z.string().min(1).describe("The user's full name.").optional(),
+  email_verified: z.boolean().describe("Whether the user's email address was previously verified.").optional(),
+  metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+  external_id: z.string().min(1).describe("The external identifier of the user.").optional(),
+  password: z.string().min(1).describe("The password to set for the user.").optional()
+}).describe("Input parameters for updating a WorkOS user.");
+var updateUserOutput = z.strictObject({
+  user: z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("The unique ID of the user.").optional(),
+    email: z.string().describe("The email address of the user.").optional(),
+    first_name: z.string().describe("The first name of the user.").nullable().optional(),
+    last_name: z.string().describe("The last name of the user.").nullable().optional(),
+    name: z.string().describe("The user's full name.").nullable().optional(),
+    email_verified: z.boolean().describe("Whether the user's email has been verified.").optional(),
+    external_id: z.string().describe("The external ID of the user.").nullable().optional(),
+    metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+    created_at: z.string().describe("An ISO 8601 timestamp for when the user was created.").optional(),
+    updated_at: z.string().describe("An ISO 8601 timestamp for when the user was last updated.").optional()
+  }).describe("WorkOS user object."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A WorkOS user response.");
+var listOrganizationsInput = z.strictObject({
+  before: z.string().min(1).describe("An object ID that defines the cursor position before the requested page.").optional(),
+  after: z.string().min(1).describe("An object ID that defines the cursor position after the requested page.").optional(),
+  limit: z.int().min(1).max(100).describe("Upper limit on the number of objects to return, between 1 and 100.").optional(),
+  order: z.enum(["normal", "desc", "asc"]).describe("Order the results by creation time.").optional(),
+  domains: z.array(z.string().min(1).describe("A domain name.")).describe("Domains to match against organizations.").optional(),
+  search: z.string().min(1).describe("Search text matched against organization names.").optional()
+}).describe("Input parameters for listing WorkOS organizations.");
+var listOrganizationsOutput = z.strictObject({
+  organizations: z.array(z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("Unique identifier of the organization.").optional(),
+    name: z.string().describe("A descriptive name for the organization.").optional(),
+    domains: z.array(z.looseObject({}).describe("Organization domain.")).describe("Domains associated with the organization.").optional(),
+    metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+    external_id: z.string().describe("The external ID of the organization.").nullable().optional(),
+    created_at: z.string().describe("The timestamp when the organization was created.").optional(),
+    updated_at: z.string().describe("The timestamp when the organization was last updated.").optional()
+  }).describe("WorkOS organization object.")).describe("Organizations returned by WorkOS."),
+  list_metadata: z.looseObject({
+    before: z.string().describe("Cursor for the previous page when returned by WorkOS.").nullable().optional(),
+    after: z.string().describe("Cursor for the next page when returned by WorkOS.").nullable().optional()
+  }).describe("WorkOS pagination metadata returned for a list request."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A page of WorkOS organizations.");
+var getOrganizationInput = z.strictObject({
+  id: z.string().min(1).describe("Unique identifier of the organization.")
+}).describe("Input parameters for getting a WorkOS organization.");
+var getOrganizationOutput = z.strictObject({
+  organization: z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("Unique identifier of the organization.").optional(),
+    name: z.string().describe("A descriptive name for the organization.").optional(),
+    domains: z.array(z.looseObject({}).describe("Organization domain.")).describe("Domains associated with the organization.").optional(),
+    metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+    external_id: z.string().describe("The external ID of the organization.").nullable().optional(),
+    created_at: z.string().describe("The timestamp when the organization was created.").optional(),
+    updated_at: z.string().describe("The timestamp when the organization was last updated.").optional()
+  }).describe("WorkOS organization object."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A WorkOS organization response.");
+var createOrganizationInput = z.strictObject({
+  name: z.string().min(1).describe("The name of the organization."),
+  allow_profiles_outside_organization: z.boolean().describe("Whether the organization allows profiles from outside the organization to sign in.").optional(),
+  domain_data: z.array(z.looseObject({
+    domain: z.string().describe("The organization domain name.").optional(),
+    state: z.string().describe("The domain verification state.").optional()
+  }).describe("WorkOS organization domain data.")).describe("Domains associated with the organization, including verification state.").optional(),
+  metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+  external_id: z.string().min(1).describe("An external identifier for the organization.").optional()
+}).describe("Input parameters for creating a WorkOS organization.");
+var createOrganizationOutput = z.strictObject({
+  organization: z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("Unique identifier of the organization.").optional(),
+    name: z.string().describe("A descriptive name for the organization.").optional(),
+    domains: z.array(z.looseObject({}).describe("Organization domain.")).describe("Domains associated with the organization.").optional(),
+    metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+    external_id: z.string().describe("The external ID of the organization.").nullable().optional(),
+    created_at: z.string().describe("The timestamp when the organization was created.").optional(),
+    updated_at: z.string().describe("The timestamp when the organization was last updated.").optional()
+  }).describe("WorkOS organization object."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A WorkOS organization response.");
+var updateOrganizationInput = z.strictObject({
+  id: z.string().min(1).describe("Unique identifier of the organization."),
+  name: z.string().min(1).describe("The name of the organization.").optional(),
+  allow_profiles_outside_organization: z.boolean().describe("Whether the organization allows profiles from outside the organization to sign in.").optional(),
+  domain_data: z.array(z.looseObject({
+    domain: z.string().describe("The organization domain name.").optional(),
+    state: z.string().describe("The domain verification state.").optional()
+  }).describe("WorkOS organization domain data.")).describe("Domains associated with the organization, including verification state.").optional(),
+  metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+  external_id: z.string().min(1).describe("An external identifier for the organization.").optional()
+}).describe("Input parameters for updating a WorkOS organization.");
+var updateOrganizationOutput = z.strictObject({
+  organization: z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("Unique identifier of the organization.").optional(),
+    name: z.string().describe("A descriptive name for the organization.").optional(),
+    domains: z.array(z.looseObject({}).describe("Organization domain.")).describe("Domains associated with the organization.").optional(),
+    metadata: z.looseObject({}).describe("Metadata key/value pairs associated with the resource.").optional(),
+    external_id: z.string().describe("The external ID of the organization.").nullable().optional(),
+    created_at: z.string().describe("The timestamp when the organization was created.").optional(),
+    updated_at: z.string().describe("The timestamp when the organization was last updated.").optional()
+  }).describe("WorkOS organization object."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A WorkOS organization response.");
+var listOrganizationMembershipsInput = z.strictObject({
+  before: z.string().min(1).describe("An object ID that defines the cursor position before the requested page.").optional(),
+  after: z.string().min(1).describe("An object ID that defines the cursor position after the requested page.").optional(),
+  limit: z.int().min(1).max(100).describe("Upper limit on the number of objects to return, between 1 and 100.").optional(),
+  order: z.enum(["normal", "desc", "asc"]).describe("Order the results by creation time.").optional(),
+  organization_id: z.string().min(1).describe("The ID of the organization which the user belongs to.").optional(),
+  user_id: z.string().min(1).describe("The ID of the user.").optional(),
+  statuses: z.array(z.enum(["active", "inactive", "pending"]).describe("A WorkOS organization membership status.")).describe("Statuses to include in the membership list.").optional()
+}).describe("Input parameters for listing WorkOS organization memberships.");
+var listOrganizationMembershipsOutput = z.strictObject({
+  organization_memberships: z.array(z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("The unique ID of the organization membership.").optional(),
+    userId: z.string().describe("The ID of the WorkOS user.").optional(),
+    organizationId: z.string().describe("The ID of the WorkOS organization.").optional(),
+    organizationName: z.string().describe("The name of the WorkOS organization.").optional(),
+    status: z.enum(["active", "inactive", "pending"]).describe("A WorkOS organization membership status.").optional(),
+    createdAt: z.string().describe("The timestamp when the organization membership was created.").optional(),
+    updatedAt: z.string().describe("The timestamp when the organization membership was last updated.").optional()
+  }).describe("WorkOS organization membership object.")).describe("Organization memberships returned by WorkOS."),
+  list_metadata: z.looseObject({
+    before: z.string().describe("Cursor for the previous page when returned by WorkOS.").nullable().optional(),
+    after: z.string().describe("Cursor for the next page when returned by WorkOS.").nullable().optional()
+  }).describe("WorkOS pagination metadata returned for a list request."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A page of WorkOS organization memberships.");
+var getOrganizationMembershipInput = z.strictObject({
+  id: z.string().min(1).describe("The unique ID of the organization membership.")
+}).describe("Input parameters for getting a WorkOS organization membership.");
+var getOrganizationMembershipOutput = z.strictObject({
+  organization_membership: z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("The unique ID of the organization membership.").optional(),
+    userId: z.string().describe("The ID of the WorkOS user.").optional(),
+    organizationId: z.string().describe("The ID of the WorkOS organization.").optional(),
+    organizationName: z.string().describe("The name of the WorkOS organization.").optional(),
+    status: z.enum(["active", "inactive", "pending"]).describe("A WorkOS organization membership status.").optional(),
+    createdAt: z.string().describe("The timestamp when the organization membership was created.").optional(),
+    updatedAt: z.string().describe("The timestamp when the organization membership was last updated.").optional()
+  }).describe("WorkOS organization membership object."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A WorkOS organization membership response.");
+var createOrganizationMembershipInput = z.strictObject({
+  user_id: z.string().min(1).describe("The ID of the user."),
+  organization_id: z.string().min(1).describe("The ID of the organization which the user belongs to."),
+  role_slug: z.string().min(1).describe("A single role identifier.").optional(),
+  role_slugs: z.array(z.string().min(1).describe("A role identifier.")).describe("Role identifiers to assign to the user.").optional()
+}).describe("Input parameters for creating a WorkOS organization membership.");
+var createOrganizationMembershipOutput = z.strictObject({
+  organization_membership: z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("The unique ID of the organization membership.").optional(),
+    userId: z.string().describe("The ID of the WorkOS user.").optional(),
+    organizationId: z.string().describe("The ID of the WorkOS organization.").optional(),
+    organizationName: z.string().describe("The name of the WorkOS organization.").optional(),
+    status: z.enum(["active", "inactive", "pending"]).describe("A WorkOS organization membership status.").optional(),
+    createdAt: z.string().describe("The timestamp when the organization membership was created.").optional(),
+    updatedAt: z.string().describe("The timestamp when the organization membership was last updated.").optional()
+  }).describe("WorkOS organization membership object."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A WorkOS organization membership response.");
+var updateOrganizationMembershipInput = z.strictObject({
+  id: z.string().min(1).describe("The unique ID of the organization membership."),
+  role_slug: z.string().min(1).describe("A single role identifier.").optional(),
+  role_slugs: z.array(z.string().min(1).describe("A role identifier.")).describe("Role identifiers to assign to the user.").optional()
+}).describe("Input parameters for updating a WorkOS organization membership.");
+var updateOrganizationMembershipOutput = z.strictObject({
+  organization_membership: z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("The unique ID of the organization membership.").optional(),
+    userId: z.string().describe("The ID of the WorkOS user.").optional(),
+    organizationId: z.string().describe("The ID of the WorkOS organization.").optional(),
+    organizationName: z.string().describe("The name of the WorkOS organization.").optional(),
+    status: z.enum(["active", "inactive", "pending"]).describe("A WorkOS organization membership status.").optional(),
+    createdAt: z.string().describe("The timestamp when the organization membership was created.").optional(),
+    updatedAt: z.string().describe("The timestamp when the organization membership was last updated.").optional()
+  }).describe("WorkOS organization membership object."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A WorkOS organization membership response.");
+var deactivateOrganizationMembershipInput = z.strictObject({
+  id: z.string().min(1).describe("The unique ID of the organization membership.")
+}).describe("Input parameters for deactivating a WorkOS organization membership.");
+var deactivateOrganizationMembershipOutput = z.strictObject({
+  organization_membership: z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("The unique ID of the organization membership.").optional(),
+    userId: z.string().describe("The ID of the WorkOS user.").optional(),
+    organizationId: z.string().describe("The ID of the WorkOS organization.").optional(),
+    organizationName: z.string().describe("The name of the WorkOS organization.").optional(),
+    status: z.enum(["active", "inactive", "pending"]).describe("A WorkOS organization membership status.").optional(),
+    createdAt: z.string().describe("The timestamp when the organization membership was created.").optional(),
+    updatedAt: z.string().describe("The timestamp when the organization membership was last updated.").optional()
+  }).describe("WorkOS organization membership object."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A WorkOS organization membership response.");
+var reactivateOrganizationMembershipInput = z.strictObject({
+  id: z.string().min(1).describe("The unique ID of the organization membership.")
+}).describe("Input parameters for reactivating a WorkOS organization membership.");
+var reactivateOrganizationMembershipOutput = z.strictObject({
+  organization_membership: z.looseObject({
+    object: z.string().describe("Object type returned by WorkOS.").optional(),
+    id: z.string().describe("The unique ID of the organization membership.").optional(),
+    userId: z.string().describe("The ID of the WorkOS user.").optional(),
+    organizationId: z.string().describe("The ID of the WorkOS organization.").optional(),
+    organizationName: z.string().describe("The name of the WorkOS organization.").optional(),
+    status: z.enum(["active", "inactive", "pending"]).describe("A WorkOS organization membership status.").optional(),
+    createdAt: z.string().describe("The timestamp when the organization membership was created.").optional(),
+    updatedAt: z.string().describe("The timestamp when the organization membership was last updated.").optional()
+  }).describe("WorkOS organization membership object."),
+  raw: z.looseObject({}).describe("Raw WorkOS response payload.")
+}).describe("A WorkOS organization membership response.");
+var workosActions = {
+  list_users: {
+    description: "List WorkOS AuthKit users with optional cursor and identity filters.",
+    effect: "read",
+    inputSchema: listUsersInput,
+    outputSchema: z.toJSONSchema(listUsersOutput, { io: "output", unrepresentable: "any" })
+  },
+  get_user: {
+    description: "Get a WorkOS AuthKit user by ID.",
+    effect: "read",
+    inputSchema: getUserInput,
+    outputSchema: z.toJSONSchema(getUserOutput, { io: "output", unrepresentable: "any" })
+  },
+  create_user: {
+    description: "Create a WorkOS AuthKit user in the current environment.",
+    effect: "write",
+    inputSchema: createUserInput,
+    outputSchema: z.toJSONSchema(createUserOutput, { io: "output", unrepresentable: "any" })
+  },
+  update_user: {
+    description: "Update properties of an existing WorkOS AuthKit user.",
+    effect: "write",
+    inputSchema: updateUserInput,
+    outputSchema: z.toJSONSchema(updateUserOutput, { io: "output", unrepresentable: "any" })
+  },
+  list_organizations: {
+    description: "List WorkOS organizations with optional cursor, domain, and text filters.",
+    effect: "read",
+    inputSchema: listOrganizationsInput,
+    outputSchema: z.toJSONSchema(listOrganizationsOutput, { io: "output", unrepresentable: "any" })
+  },
+  get_organization: {
+    description: "Get a WorkOS organization by ID.",
+    effect: "read",
+    inputSchema: getOrganizationInput,
+    outputSchema: z.toJSONSchema(getOrganizationOutput, { io: "output", unrepresentable: "any" })
+  },
+  create_organization: {
+    description: "Create a WorkOS organization in the current environment.",
+    effect: "write",
+    inputSchema: createOrganizationInput,
+    outputSchema: z.toJSONSchema(createOrganizationOutput, { io: "output", unrepresentable: "any" })
+  },
+  update_organization: {
+    description: "Update properties of an existing WorkOS organization.",
+    effect: "write",
+    inputSchema: updateOrganizationInput,
+    outputSchema: z.toJSONSchema(updateOrganizationOutput, { io: "output", unrepresentable: "any" })
+  },
+  list_organization_memberships: {
+    description: "List WorkOS organization memberships filtered by user, organization, or membership status.",
+    effect: "read",
+    inputSchema: listOrganizationMembershipsInput,
+    outputSchema: z.toJSONSchema(listOrganizationMembershipsOutput, { io: "output", unrepresentable: "any" })
+  },
+  get_organization_membership: {
+    description: "Get a WorkOS organization membership by ID.",
+    effect: "read",
+    inputSchema: getOrganizationMembershipInput,
+    outputSchema: z.toJSONSchema(getOrganizationMembershipOutput, { io: "output", unrepresentable: "any" })
+  },
+  create_organization_membership: {
+    description: "Create an active WorkOS organization membership for a user and organization.",
+    effect: "write",
+    inputSchema: createOrganizationMembershipInput,
+    outputSchema: z.toJSONSchema(createOrganizationMembershipOutput, { io: "output", unrepresentable: "any" })
+  },
+  update_organization_membership: {
+    description: "Update roles on an existing WorkOS organization membership.",
+    effect: "write",
+    inputSchema: updateOrganizationMembershipInput,
+    outputSchema: z.toJSONSchema(updateOrganizationMembershipOutput, { io: "output", unrepresentable: "any" })
+  },
+  deactivate_organization_membership: {
+    description: "Deactivate an active WorkOS organization membership.",
+    effect: "write",
+    inputSchema: deactivateOrganizationMembershipInput,
+    outputSchema: z.toJSONSchema(deactivateOrganizationMembershipOutput, { io: "output", unrepresentable: "any" })
+  },
+  reactivate_organization_membership: {
+    description: "Reactivate an inactive WorkOS organization membership.",
+    effect: "write",
+    inputSchema: reactivateOrganizationMembershipInput,
+    outputSchema: z.toJSONSchema(reactivateOrganizationMembershipOutput, { io: "output", unrepresentable: "any" })
+  }
+};
+
+// ../plugins/src/workos/index.ts
+function createWorkosPlugin() {
+  return createProviderPlugin({
+    description: "WorkOS",
+    actions: workosActions,
+    // 上游的 credentialValidators 打的是 /organizations?limit=1;list_organizations 无必填入参,
+    // 是它的同一个调用。
+    credentialProbe: "list_organizations",
+    handlers: {
+      list_users: listUsers,
+      get_user: getUser,
+      create_user: createUser,
+      update_user: updateUser,
+      list_organizations: listOrganizations,
+      get_organization: getOrganization,
+      create_organization: createOrganization,
+      update_organization: updateOrganization,
+      list_organization_memberships: listOrganizationMemberships,
+      get_organization_membership: getOrganizationMembership,
+      create_organization_membership: createOrganizationMembership,
+      update_organization_membership: updateOrganizationMembership,
+      deactivate_organization_membership: deactivateOrganizationMembership,
+      reactivate_organization_membership: reactivateOrganizationMembership
+    }
+  });
+}
+var workos_default = createWorkosPlugin();
+export {
+  createWorkosPlugin,
+  workos_default as default
+};