@tool-bridge/server 0.3.0 → 0.5.0

package/dist/{chunk-JLTYA2B3.js → chunk-7PM4FD5K.js}

@@ -15083,23 +15083,50 @@ var NODE_KIND_BY_PROFILE = {
   "tools/v1": "tool",
   "context/v1": "context"
 };
+function projectExportAuth(exported) {
+  if (exported.oauth !== void 0) return { kind: "oauth" };
+  if (exported.credentialFields !== void 0) {
+    return { kind: "fields", fields: exported.credentialFields };
+  }
+  if (exported.auth?.kind === "none") return { kind: "none" };
+  if (exported.auth?.kind !== "single") {
+    throw new TBError(
+      "invalid_argument",
+      `catalog export '${exported.id}' \u5FC5\u987B\u663E\u5F0F\u58F0\u660E auth\u3001oauth \u6216 credentialFields`
+    );
+  }
+  return {
+    kind: "single",
+    required: exported.auth.required ?? false,
+    ...exported.auth.label !== void 0 ? { label: exported.auth.label } : {},
+    ...exported.auth.description !== void 0 ? { description: exported.auth.description } : {}
+  };
+}
 function projectListItem(entry) {
   const exports = entry.describe.exports;
   const kinds = /* @__PURE__ */ new Set();
+  const exportDetails = {};
   for (const e of exports) {
     const kind = NODE_KIND_BY_PROFILE[e.profile];
-    if (kind !== void 0) kinds.add(kind);
+    if (kind !== void 0) {
+      kinds.add(kind);
+      exportDetails[e.id] = {
+        id: e.id,
+        kind,
+        auth: projectExportAuth(e),
+        ...e.description !== void 0 ? { description: e.description } : {},
+        ...e.mountConfigFields !== void 0 ? { mountConfigFields: e.mountConfigFields } : {}
+      };
+    }
   }
-  const withFields = exports.find((e) => e.credentialFields !== void 0);
   const description = exports.find((e) => e.description !== void 0)?.description;
   return {
     id: entry.id,
     digest: entry.digest,
     exports: exports.map((e) => e.id),
+    exportDetails,
     nodeKinds: [...kinds].sort(),
-    needsOAuth: exports.some((e) => e.oauth !== void 0),
-    ...description !== void 0 ? { description } : {},
-    ...withFields?.credentialFields !== void 0 ? { credentialFields: withFields.credentialFields } : {}
+    ...description !== void 0 ? { description } : {}
   };
 }
 function matches2(item, query) {
@@ -15115,7 +15142,7 @@ function catalogCmds(nodePath) {
       path,
       h: "list built-in integrations available on this host (no credentials, read scope)",
       inputSchema: { type: "object", properties: { opts: LIST_OPTS_SCHEMA } },
-      returns: "Page<CatalogListItem> \u2014 id, exports, nodeKinds, credential field names",
+      returns: "Page<CatalogListItem> \u2014 id, exports, nodeKinds, exportDetails",
       scope: "read"
     },
     {
@@ -15396,6 +15423,15 @@ function optionalMethodsForCapabilities(capabilities) {
   return methods;
 }
 var EXPORT_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+var exportAuthSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("none") }),
+  external_exports.object({
+    kind: external_exports.literal("single"),
+    description: external_exports.string().optional(),
+    label: external_exports.string().optional(),
+    required: external_exports.boolean().optional()
+  })
+]);
 var exportSchema = external_exports.object({
   id: external_exports.string().regex(EXPORT_ID_RE, "export id \u987B\u4E3A [A-Za-z0-9._-] \u4E14\u4E0D\u4EE5\u6807\u70B9\u5F00\u5934"),
   profile: external_exports.enum(PLUGIN_PROFILES),
@@ -15403,17 +15439,19 @@ var exportSchema = external_exports.object({
   /** context/v1:实际提供的动词;tools/v1 由运行时 List 发现,可省。 */
   methods: external_exports.array(external_exports.string()).optional(),
   capabilities: external_exports.array(external_exports.string()).optional(),
+  /** export 的单值/无凭证声明;多字段与 OAuth 继续由各自字段表达。 */
+  auth: exportAuthSchema.optional(),
   /**
    * tools/v1 可选:一个**只读、零副作用、无必填入参**的工具名,平台在挂载时拿它做一次
    * 真实调用来验证 `authRef` 指向的凭证可用(见 `credentialProbe` 的类型注释)。
    */
   credentialProbe: external_exports.string().optional(),
   /**
-   * 多字段凭证的字段声明(仅 tools/v1)。声明了它,平台就知道该 secret 存的是一个 JSON
+   * 多字段凭证的字段声明(tools/v1)。声明了它,平台就知道该 secret 存的是一个 JSON
    * 对象而非单值,并在挂载时校验字段齐全 —— 见 `credentialFields` 的类型注释。
    */
   /**
-   * provider 型 OAuth2 的声明(仅 tools/v1)。声明了它,平台就托管授权码流程:
+   * provider 型 OAuth2 的声明(tools/v1)。声明了它,平台就托管授权码流程:
    * `POST /<path>/~authorize` 发起、回调兑换、调用时自动刷新,插件只拿到 access token。
    */
   oauth: pluginOAuthSchema.optional(),
@@ -15424,6 +15462,17 @@ var exportSchema = external_exports.object({
     required: external_exports.boolean().optional(),
     /** 敏感字段:管理面不回显、日志不打印。缺省按敏感处理(fail safe)。 */
     secret: external_exports.boolean().optional()
+  })).min(1).optional(),
+  /**
+   * 非凭证的挂载配置字段(如 baseUrl / instanceUrl / region)。声明了它,平台就知道
+   * 该 export 挂载时还需要哪些 `providerConfig`,管理面据此渲染带标签的输入框而不是让
+   * 用户对着一个自由 k=v 框猜 —— 见 `mountConfigFields` 的类型注释。
+   */
+  mountConfigFields: external_exports.array(external_exports.object({
+    key: external_exports.string().regex(/^[A-Za-z_][\w]*$/, "\u5B57\u6BB5\u540D\u987B\u4E3A\u5408\u6CD5\u6807\u8BC6\u7B26"),
+    label: external_exports.string().optional(),
+    description: external_exports.string().optional(),
+    required: external_exports.boolean().optional()
   })).min(1).optional()
 });
 var describeSchema = external_exports.object({
@@ -15453,6 +15502,26 @@ function validatePluginContract(input) {
       throw new TBError("invalid_argument", `plugin '${manifest.id}' \u7684 export id \u91CD\u590D:'${exported.id}'`);
     }
     seen.add(exported.id);
+    if (exported.auth === void 0 && exported.oauth === void 0 && exported.credentialFields === void 0) {
+      throw new TBError(
+        "invalid_argument",
+        `plugin '${manifest.id}' export '${exported.id}' \u5FC5\u987B\u663E\u5F0F\u58F0\u660E auth\u3001oauth \u6216 credentialFields`
+      );
+    }
+    if (exported.auth !== void 0) {
+      if (exported.oauth !== void 0 || exported.credentialFields !== void 0) {
+        throw new TBError(
+          "invalid_argument",
+          `plugin '${manifest.id}' export '${exported.id}' \u7684 auth \u4E0D\u80FD\u4E0E oauth/credentialFields \u540C\u65F6\u58F0\u660E`
+        );
+      }
+      if (exported.auth.kind === "none" && exported.credentialProbe !== void 0) {
+        throw new TBError(
+          "invalid_argument",
+          `plugin '${manifest.id}' export '${exported.id}' \u58F0\u660E auth:none,\u4E0D\u80FD\u518D\u58F0\u660E credentialProbe`
+        );
+      }
+    }
     if (exported.credentialProbe !== void 0 && exported.profile !== "tools/v1") {
       throw new TBError(
         "invalid_argument",
@@ -15497,6 +15566,18 @@ function validatePluginContract(input) {
         keys.add(field.key);
       }
     }
+    if (exported.mountConfigFields !== void 0) {
+      const keys = /* @__PURE__ */ new Set();
+      for (const field of exported.mountConfigFields) {
+        if (keys.has(field.key)) {
+          throw new TBError(
+            "invalid_argument",
+            `plugin '${manifest.id}' export '${exported.id}' \u7684 mountConfigFields \u6709\u91CD\u590D\u5B57\u6BB5 '${field.key}'`
+          );
+        }
+        keys.add(field.key);
+      }
+    }
     if (exported.profile === "context/v1") {
       const known = new Set(CONTEXT_METHODS);
       const unknown2 = (exported.methods ?? []).filter((m) => !known.has(m));
@@ -15593,14 +15674,14 @@ var authSchema = external_exports.discriminatedUnion("kind", [
 ]);
 var manifestSchema = external_exports.object({
   id: external_exports.string().regex(ID_RE, "id \u987B\u4E3A path-segment \u5B89\u5168\u5B57\u7B26([A-Za-z0-9._-],\u4E0D\u4EE5\u6807\u70B9\u5F00\u5934)"),
-  protocolVersion: external_exports.string().default(PLUGIN_PROTOCOL_VERSION).refine((v) => v === PLUGIN_PROTOCOL_VERSION, {
+  protocolVersion: external_exports.string().refine((v) => v === PLUGIN_PROTOCOL_VERSION, {
     error: `protocolVersion \u987B\u4E3A '${PLUGIN_PROTOCOL_VERSION}'`
   }),
   endpoint: external_exports.string().min(1),
   auth: authSchema,
   healthPath: external_exports.string().regex(/^\//, "healthPath \u987B\u4EE5 '/' \u5F00\u5934"),
   enabled: external_exports.boolean()
-});
+}).strict();
 function parsePluginManifest(value, opts = {}) {
   const parsed = manifestSchema.safeParse(value);
   if (!parsed.success) {
@@ -15718,15 +15799,6 @@ function pluginCmds(nodePath) {
       inputSchema: idSchema2,
       returns: "{ id, healthy, checkedAt }",
       scope: "admin"
-    },
-    {
-      name: "catalog",
-      method: "POST",
-      path,
-      h: "list in-process plugins assembled by this host (available, not yet activated); register one via write with its endpoint value",
-      inputSchema: { type: "object", properties: {} },
-      returns: "{ items: Array<{ name, endpoint, registered, pluginId? }> }",
-      scope: "admin"
     }
   ];
 }
@@ -15746,10 +15818,14 @@ function createPluginModule(deps) {
   }
   async function view(record2) {
     const describe3 = await store.get(KEY_PLUGIN_META + record2.id);
-    return {
-      ...projectManifest(record2),
-      ...describe3?.exports !== void 0 ? { exports: describe3.exports } : {}
-    };
+    if (describe3 === null) {
+      throw new TBError(
+        "unavailable",
+        `plugin '${record2.id}' \u7F3A\u5C11 ~describe \u7F13\u5B58,\u8BF7\u91CD\u65B0\u6CE8\u518C`,
+        { retryable: false }
+      );
+    }
+    return { ...projectManifest(record2), exports: describe3.exports };
   }
   async function revokeToken(record2) {
     if (record2.tokenSkId !== void 0) await sk.delete(record2.tokenSkId);
@@ -15913,33 +15989,6 @@ function createPluginModule(deps) {
           const record2 = await probeAndRecord(manifest);
           return { id, healthy: record2.healthy, checkedAt: record2.checkedAt };
         }
-        case "catalog": {
-          const names = deps.bindings?.() ?? [];
-          const byEndpoint = /* @__PURE__ */ new Map();
-          let cursor;
-          do {
-            const page = await store.list(KEY_PLUGIN, {
-              limit: LIST_LIMIT_MAX,
-              ...cursor !== void 0 ? { cursor } : {}
-            });
-            for (const { value } of page.items) {
-              const record2 = value;
-              byEndpoint.set(record2.endpoint, record2.id);
-            }
-            cursor = page.cursor;
-          } while (cursor !== void 0);
-          const items = [...names].sort().map((name) => {
-            const endpoint = `binding:${name}`;
-            const pluginId = byEndpoint.get(endpoint);
-            return {
-              name,
-              endpoint,
-              registered: pluginId !== void 0,
-              ...pluginId !== void 0 ? { pluginId } : {}
-            };
-          });
-          return { items };
-        }
         default:
           throw new TBError("invalid_argument", `unknown cmd '${cmd}' on system/plugin`);
       }
@@ -18169,8 +18218,7 @@ async function resolveExternalExport(store, id, nodeKind, what, exportId) {
 }
 async function resolveIntegration(store, catalog, id, nodeKind, what, exportId) {
   const manifest = await store.get(KEY_PLUGIN + id);
-  const isBinding = manifest?.endpoint.startsWith("binding:") === true;
-  if (manifest !== null && !(isBinding && catalog[id] !== void 0)) {
+  if (manifest !== null) {
     return await resolveExternalExport(store, id, nodeKind, what, exportId);
   }
   return resolveBuiltinExport(catalog, id, nodeKind, what, exportId);
@@ -18346,25 +18394,6 @@ function decodePluginCall(body) {
   return parsed.data;
 }
 
-// ../core/src/plugin/package.ts
-var PLUGIN_BUNDLE_MAX_BYTES = 5 * 1024 * 1024;
-var NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-var SHA256_HEX_RE = /^[0-9a-f]{64}$/;
-var VERSION_RE = /^\d+\.\d+\.\d+(?:[-+.][A-Za-z0-9.-]+)?$/;
-var packageSchema = external_exports.object({
-  name: external_exports.string().regex(NAME_RE, "name \u987B\u4E3A path-segment \u5B89\u5168\u5B57\u7B26([A-Za-z0-9._-],\u4E0D\u4EE5\u6807\u70B9\u5F00\u5934)"),
-  version: external_exports.string().regex(VERSION_RE, "version \u987B\u4E3A semver(\u5982 1.2.3)"),
-  bundleUrl: external_exports.string().min(1),
-  sha256: external_exports.string().regex(SHA256_HEX_RE, "sha256 \u987B\u4E3A 64 \u4F4D hex \u5C0F\u5199"),
-  protocolVersion: external_exports.string().default(PLUGIN_PROTOCOL_VERSION).refine((v) => v === PLUGIN_PROTOCOL_VERSION, {
-    error: `protocolVersion \u987B\u4E3A '${PLUGIN_PROTOCOL_VERSION}'`
-  }),
-  healthPath: external_exports.string().regex(/^\//, "healthPath \u987B\u4EE5 '/' \u5F00\u5934"),
-  description: external_exports.string().optional(),
-  configSchema: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
-  mountConfigSchema: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
-});
-
 // ../core/src/search/shortTermSql.ts
 function shortTermsSql(patterns) {
   return `short_terms(pattern) AS (VALUES ${patterns.map(() => "(?)").join(", ")})`;

package/dist/{chunk-K7FVSFUX.js → chunk-B4ZA7EGO.js}

@@ -10,7 +10,7 @@ import {
   isTBError,
   parseCredentialValues,
   toToolResult
-} from "./chunk-JLTYA2B3.js";
+} from "./chunk-7PM4FD5K.js";
 
 // ../plugin-sdk/src/index.ts
 var CONTEXT_VERB_BY_HANDLER = {
@@ -64,8 +64,10 @@ function createPlugin(opts = {}) {
             id: state.id,
             profile: "tools/v1",
             ...state.description !== void 0 ? { description: state.description } : {},
+            ...state.auth !== void 0 ? { auth: state.auth } : {},
             ...state.kind === "tools" && state.credentialProbe !== void 0 ? { credentialProbe: state.credentialProbe } : {},
             ...state.credentialFields !== void 0 ? { credentialFields: state.credentialFields } : {},
+            ...state.kind === "tools" && state.mountConfigFields !== void 0 ? { mountConfigFields: state.mountConfigFields } : {},
             ...state.kind === "tools" && state.oauth !== void 0 ? { oauth: state.oauth } : {}
           };
         }
@@ -75,8 +77,10 @@ function createPlugin(opts = {}) {
           id: state.id,
           profile: "context/v1",
           ...state.description !== void 0 ? { description: state.description } : {},
+          ...state.auth !== void 0 ? { auth: state.auth } : {},
           methods,
-          ...capabilities.length > 0 ? { capabilities } : {}
+          ...capabilities.length > 0 ? { capabilities } : {},
+          ...state.mountConfigFields !== void 0 ? { mountConfigFields: state.mountConfigFields } : {}
         };
       })
     };
@@ -226,16 +230,34 @@ function createPlugin(opts = {}) {
     tools(id, meta) {
       assertFreshId(id);
       const state = {
+        auth: void 0,
         kind: "tools",
         id,
         description: meta?.description,
         credentialProbe: void 0,
         credentialFields: void 0,
+        mountConfigFields: void 0,
         oauth: void 0,
         registry: new OperationRegistry()
       };
       exports.set(id, state);
       const surface = {
+        auth(config) {
+          if (state.oauth !== void 0 || state.credentialFields !== void 0) {
+            throw new TBError(
+              "invalid_argument",
+              `export '${id}' \u5DF2\u58F0\u660E oauth/credentials(),\u4E0D\u80FD\u518D\u58F0\u660E auth`
+            );
+          }
+          if (config.kind === "none" && state.credentialProbe !== void 0) {
+            throw new TBError(
+              "invalid_argument",
+              `export '${id}' \u5DF2\u58F0\u660E credentialProbe,\u4E0D\u80FD\u518D\u58F0\u660E auth:none`
+            );
+          }
+          state.auth = config;
+          return surface;
+        },
         register(name, spec, handler) {
           state.registry.register(name, spec, handler);
           return surface;
@@ -250,9 +272,19 @@ function createPlugin(opts = {}) {
               `export '${id}' \u5DF2\u58F0\u660E oauth,\u4E0D\u80FD\u518D\u58F0\u660E credentials()(oauth \u6A21\u5F0F\u4E0B authRef \u6307\u5411\u7684 secret \u56FA\u5B9A\u5B58 clientId/clientSecret)`
             );
           }
+          if (state.auth !== void 0) {
+            throw new TBError("invalid_argument", `export '${id}' \u5DF2\u58F0\u660E auth,\u4E0D\u80FD\u518D\u58F0\u660E credentials()`);
+          }
           state.credentialFields = fields;
           return surface;
         },
+        mountConfig(fields) {
+          if (fields.length === 0) {
+            throw new TBError("invalid_argument", "mountConfig() \u81F3\u5C11\u8981\u58F0\u660E\u4E00\u4E2A\u5B57\u6BB5");
+          }
+          state.mountConfigFields = fields;
+          return surface;
+        },
         oauth(config) {
           if (state.credentialFields !== void 0) {
             throw new TBError(
@@ -260,6 +292,9 @@ function createPlugin(opts = {}) {
               `export '${id}' \u5DF2\u58F0\u660E credentials(),\u4E0D\u80FD\u518D\u58F0\u660E oauth(oauth \u6A21\u5F0F\u4E0B authRef \u6307\u5411\u7684 secret \u56FA\u5B9A\u5B58 clientId/clientSecret)`
             );
           }
+          if (state.auth !== void 0) {
+            throw new TBError("invalid_argument", `export '${id}' \u5DF2\u58F0\u660E auth,\u4E0D\u80FD\u518D\u58F0\u660E oauth`);
+          }
           if (state.credentialProbe !== void 0) {
             throw new TBError(
               "invalid_argument",
@@ -282,6 +317,9 @@ function createPlugin(opts = {}) {
               `export '${id}' \u5DF2\u58F0\u660E oauth,\u4E0D\u80FD\u518D\u58F0\u660E credentialProbe(\u51ED\u8BC1\u53EF\u7528\u6027\u7531\u6388\u6743\u6D41\u7A0B\u672C\u8EAB\u8BC1\u660E;\u62FF client \u51ED\u8BC1\u53BB\u8C03\u63A2\u9488\u65E2\u8BC1\u660E\u4E0D\u4E86\u4EC0\u4E48,\u53C8\u4F1A\u628A clientSecret \u9001\u8FDB\u63D2\u4EF6)`
             );
           }
+          if (state.auth?.kind === "none") {
+            throw new TBError("invalid_argument", `export '${id}' \u58F0\u660E auth:none,\u4E0D\u80FD\u518D\u58F0\u660E credentialProbe`);
+          }
           state.credentialProbe = name;
           return surface;
         }
@@ -290,7 +328,11 @@ function createPlugin(opts = {}) {
     },
     proxyTools(id, handlers) {
       assertFreshId(id);
+      if (handlers.auth !== void 0 && handlers.credentialFields !== void 0) {
+        throw new TBError("invalid_argument", `export '${id}' \u7684 auth \u4E0D\u80FD\u4E0E credentialFields \u540C\u65F6\u58F0\u660E`);
+      }
       exports.set(id, {
+        auth: handlers.auth,
         kind: "proxyTools",
         id,
         description: handlers.description,
@@ -302,10 +344,12 @@ function createPlugin(opts = {}) {
     context(id, handlers) {
       assertFreshId(id);
       exports.set(id, {
+        auth: handlers.auth,
         kind: "context",
         id,
         description: handlers.description,
-        handlers
+        handlers,
+        mountConfigFields: handlers.mountConfigFields
       });
       return plugin;
     },

package/dist/chunk-FHYFPPBZ.js

@@ -0,0 +1,90 @@
+import {
+  createPlugin
+} from "./chunk-B4ZA7EGO.js";
+import {
+  TBError
+} from "./chunk-7PM4FD5K.js";
+
+// ../plugins/src/_runtime/plugin.ts
+function requireApiKey(ctx, service) {
+  const key = ctx.upstreamAuth;
+  if (key === void 0 || key === "") {
+    throw new TBError(
+      "unavailable",
+      `${service} \u9700\u8981 API key:\u7ED9\u6302\u8F7D\u8282\u70B9\u914D config.authRef \u6307\u5411\u5DF2\u5B58\u5165 system/secret \u7684\u51ED\u8BC1`
+    );
+  }
+  return key;
+}
+function requireCredential(ctx, service, field) {
+  const values = ctx.credentials;
+  if (values === void 0) {
+    throw new TBError(
+      "unavailable",
+      `${service} \u9700\u8981\u591A\u5B57\u6BB5\u51ED\u8BC1:\u7ED9\u6302\u8F7D\u8282\u70B9\u914D config.authRef \u6307\u5411\u5DF2\u5B58\u5165 system/secret \u7684\u51ED\u8BC1(\u7528 \`tb secret set <name> --field ...\` \u5199\u5165)`
+    );
+  }
+  const value = values[field];
+  if (value === void 0 || value === "") {
+    throw new TBError("internal", `${service} \u7684\u51ED\u8BC1\u5B57\u6BB5 '${field}' \u672A\u5728 credentialFields \u91CC\u58F0\u660E`);
+  }
+  return value;
+}
+function createProviderPlugin(input) {
+  const names = Object.keys(input.actions);
+  const handlerNames = Object.keys(input.handlers);
+  const missing = names.filter((name) => !handlerNames.includes(name));
+  const extra = handlerNames.filter((name) => !names.includes(name));
+  if (missing.length > 0 || extra.length > 0) {
+    throw new Error(
+      `action \u8868\u4E0E handler \u8868\u4E0D\u543B\u5408:\u7F3A handler [${missing.join(", ")}];\u591A\u4F59 handler [${extra.join(", ")}]`
+    );
+  }
+  const plugin = createPlugin({ token: (env) => env.PLUGIN_TOKEN });
+  const tools = plugin.tools(input.exportId ?? "actions", { description: input.description });
+  if (input.auth !== void 0) {
+    tools.auth(input.auth);
+  } else if (input.oauth === void 0 && input.credentialFields === void 0) {
+    tools.auth({ kind: "single", required: true });
+  }
+  if (input.oauth !== void 0) tools.oauth(input.oauth);
+  if (input.credentialFields !== void 0) tools.credentials(input.credentialFields);
+  if (input.mountConfigFields !== void 0) tools.mountConfig(input.mountConfigFields);
+  for (const name of names) {
+    tools.register(name, input.actions[name], (args, ctx) => input.handlers[name](args, {
+      upstreamAuth: ctx.upstreamAuth,
+      credentials: ctx.credentials,
+      config: ctx.mountConfig
+    }));
+  }
+  if (input.credentialProbe !== void 0) {
+    const effect = input.actions[input.credentialProbe]?.effect;
+    if (effect !== "read") {
+      throw new Error(
+        `credentialProbe '${input.credentialProbe}' \u7684 effect \u662F '${effect ?? "\u672A\u58F0\u660E"}', \u63A2\u9488\u5FC5\u987B\u662F read \u2014\u2014 \u6302\u8F7D\u65F6\u4F1A\u771F\u5B9E\u8C03\u7528\u5B83`
+      );
+    }
+    tools.probeCredentialWith(input.credentialProbe);
+  }
+  return plugin;
+}
+
+// ../plugins/src/_runtime/upstreamError.ts
+function upstreamError(status, message) {
+  if (status === 401) {
+    return new TBError("permission_denied", message, { httpStatus: 401 });
+  }
+  if (status === 403) return new TBError("permission_denied", message);
+  if (status === 404) return new TBError("not_found", message);
+  if (status === 409) return new TBError("conflict", message);
+  if (status === 429) return new TBError("rate_limited", message, { retryable: true });
+  if (status >= 500) return new TBError("unavailable", message, { retryable: true });
+  return new TBError("invalid_argument", message);
+}
+
+export {
+  requireApiKey,
+  requireCredential,
+  createProviderPlugin,
+  upstreamError
+};

package/dist/{circleci-MX3TX3HC.js → circleci-QY36SZIM.js}

@@ -1,14 +1,16 @@
 import {
   createProviderPlugin,
-  guardedFetch,
   requireApiKey,
   upstreamError
-} from "./chunk-CSJEZHQO.js";
-import "./chunk-K7FVSFUX.js";
+} from "./chunk-FHYFPPBZ.js";
+import {
+  guardedFetch
+} from "./chunk-7GP7DRES.js";
+import "./chunk-B4ZA7EGO.js";
 import {
   TBError,
   external_exports
-} from "./chunk-JLTYA2B3.js";
+} from "./chunk-7PM4FD5K.js";
 import "./chunk-MLKGABMK.js";
 
 // ../plugins/src/circleci/api.ts

package/dist/{clerk-MRPORVF4.js → clerk-ECH23XL5.js}

@@ -1,13 +1,15 @@
 import {
   createProviderPlugin,
-  guardedFetch,
   requireApiKey,
   upstreamError
-} from "./chunk-CSJEZHQO.js";
-import "./chunk-K7FVSFUX.js";
+} from "./chunk-FHYFPPBZ.js";
+import {
+  guardedFetch
+} from "./chunk-7GP7DRES.js";
+import "./chunk-B4ZA7EGO.js";
 import {
   external_exports
-} from "./chunk-JLTYA2B3.js";
+} from "./chunk-7PM4FD5K.js";
 import "./chunk-MLKGABMK.js";
 
 // ../plugins/src/clerk/api.ts

package/dist/{cloudflare_dns-OWP7DD7L.js → cloudflare_dns-F6DN2F3X.js}

@@ -1,14 +1,16 @@
 import {
   createProviderPlugin,
-  guardedFetch,
   requireApiKey,
   upstreamError
-} from "./chunk-CSJEZHQO.js";
-import "./chunk-K7FVSFUX.js";
+} from "./chunk-FHYFPPBZ.js";
+import {
+  guardedFetch
+} from "./chunk-7GP7DRES.js";
+import "./chunk-B4ZA7EGO.js";
 import {
   TBError,
   external_exports
-} from "./chunk-JLTYA2B3.js";
+} from "./chunk-7PM4FD5K.js";
 import "./chunk-MLKGABMK.js";
 
 // ../plugins/src/cloudflare_dns/api.ts

package/dist/{cohere-GPECP66S.js → cohere-HD4XZOPJ.js}

@@ -1,13 +1,15 @@
 import {
   createProviderPlugin,
-  guardedFetch,
   requireApiKey,
   upstreamError
-} from "./chunk-CSJEZHQO.js";
-import "./chunk-K7FVSFUX.js";
+} from "./chunk-FHYFPPBZ.js";
+import {
+  guardedFetch
+} from "./chunk-7GP7DRES.js";
+import "./chunk-B4ZA7EGO.js";
 import {
   external_exports
-} from "./chunk-JLTYA2B3.js";
+} from "./chunk-7PM4FD5K.js";
 import "./chunk-MLKGABMK.js";
 
 // ../plugins/src/cohere/api.ts

package/dist/{confluence-BN7LZ6BC.js → confluence-J4AZ2KYL.js}

@@ -1,14 +1,16 @@
 import {
   createProviderPlugin,
-  guardedFetch,
   requireCredential,
   upstreamError
-} from "./chunk-CSJEZHQO.js";
-import "./chunk-K7FVSFUX.js";
+} from "./chunk-FHYFPPBZ.js";
+import {
+  guardedFetch
+} from "./chunk-7GP7DRES.js";
+import "./chunk-B4ZA7EGO.js";
 import {
   TBError,
   external_exports
-} from "./chunk-JLTYA2B3.js";
+} from "./chunk-7PM4FD5K.js";
 import "./chunk-MLKGABMK.js";
 
 // ../plugins/src/confluence/api.ts

package/dist/{convertapi-SBEOFOFQ.js → convertapi-BXBII5Z6.js}

@@ -1,15 +1,17 @@
 import {
-  assertPublicHttpUrl,
   createProviderPlugin,
-  guardedFetch,
   requireApiKey,
   upstreamError
-} from "./chunk-CSJEZHQO.js";
-import "./chunk-K7FVSFUX.js";
+} from "./chunk-FHYFPPBZ.js";
+import {
+  assertPublicHttpUrl,
+  guardedFetch
+} from "./chunk-7GP7DRES.js";
+import "./chunk-B4ZA7EGO.js";
 import {
   TBError,
   external_exports
-} from "./chunk-JLTYA2B3.js";
+} from "./chunk-7PM4FD5K.js";
 import "./chunk-MLKGABMK.js";
 
 // ../plugins/src/convertapi/schema.ts

package/dist/{currencyapi-P2YY7Y7P.js → currencyapi-HEEQ7EQJ.js}

@@ -1,13 +1,15 @@
 import {
   createProviderPlugin,
-  guardedFetch,
   requireApiKey,
   upstreamError
-} from "./chunk-CSJEZHQO.js";
-import "./chunk-K7FVSFUX.js";
+} from "./chunk-FHYFPPBZ.js";
+import {
+  guardedFetch
+} from "./chunk-7GP7DRES.js";
+import "./chunk-B4ZA7EGO.js";
 import {
   external_exports
-} from "./chunk-JLTYA2B3.js";
+} from "./chunk-7PM4FD5K.js";
 import "./chunk-MLKGABMK.js";
 
 // ../plugins/src/currencyapi/api.ts