@valon-technologies/gestalt 0.0.1-alpha.10 → 0.0.1-alpha.11

package/gen/v1/plugin_pb.ts

@@ -12,7 +12,7 @@ import type { JsonObject, Message } from "@bufbuild/protobuf";
  * Describes the file v1/plugin.proto.
  */
 export const file_v1_plugin: GenFile = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_empty, file_google_protobuf_struct, file_google_protobuf_timestamp]);
+  fileDesc("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", [file_google_protobuf_empty, file_google_protobuf_struct, file_google_protobuf_timestamp]);
 
 /**
  * CatalogParameter describes one input parameter surfaced in the generated
@@ -362,6 +362,16 @@ export type PluginInvocationGrant = Message<"gestalt.provider.v1.PluginInvocatio
    * @generated from field: repeated string operations = 2;
    */
   operations: string[];
+
+  /**
+   * @generated from field: repeated string surfaces = 3;
+   */
+  surfaces: string[];
+
+  /**
+   * @generated from field: bool all_operations = 4;
+   */
+  allOperations: boolean;
 };
 
 /**
@@ -465,6 +475,51 @@ export type PluginInvokeRequest = Message<"gestalt.provider.v1.PluginInvokeReque
 export const PluginInvokeRequestSchema: GenMessage<PluginInvokeRequest> = /*@__PURE__*/
   messageDesc(file_v1_plugin, 10);
 
+/**
+ * PluginInvokeGraphQLRequest invokes the raw GraphQL surface on another plugin
+ * through the host-side invoker service.
+ *
+ * @generated from message gestalt.provider.v1.PluginInvokeGraphQLRequest
+ */
+export type PluginInvokeGraphQLRequest = Message<"gestalt.provider.v1.PluginInvokeGraphQLRequest"> & {
+  /**
+   * @generated from field: string plugin = 1;
+   */
+  plugin: string;
+
+  /**
+   * @generated from field: string document = 2;
+   */
+  document: string;
+
+  /**
+   * @generated from field: google.protobuf.Struct variables = 3;
+   */
+  variables?: JsonObject;
+
+  /**
+   * @generated from field: string connection = 4;
+   */
+  connection: string;
+
+  /**
+   * @generated from field: string instance = 5;
+   */
+  instance: string;
+
+  /**
+   * @generated from field: string invocation_token = 6;
+   */
+  invocationToken: string;
+};
+
+/**
+ * Describes the message gestalt.provider.v1.PluginInvokeGraphQLRequest.
+ * Use `create(PluginInvokeGraphQLRequestSchema)` to create a new message.
+ */
+export const PluginInvokeGraphQLRequestSchema: GenMessage<PluginInvokeGraphQLRequest> = /*@__PURE__*/
+  messageDesc(file_v1_plugin, 11);
+
 /**
  * IntegrationToken is the host-managed token payload passed into post-connect
  * hooks.
@@ -543,7 +598,7 @@ export type IntegrationToken = Message<"gestalt.provider.v1.IntegrationToken"> &
  * Use `create(IntegrationTokenSchema)` to create a new message.
  */
 export const IntegrationTokenSchema: GenMessage<IntegrationToken> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 11);
+  messageDesc(file_v1_plugin, 12);
 
 /**
  * SubjectContext identifies the caller that initiated an operation.
@@ -577,7 +632,7 @@ export type SubjectContext = Message<"gestalt.provider.v1.SubjectContext"> & {
  * Use `create(SubjectContextSchema)` to create a new message.
  */
 export const SubjectContextSchema: GenMessage<SubjectContext> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 12);
+  messageDesc(file_v1_plugin, 13);
 
 /**
  * CredentialContext describes the resolved credential used for an operation.
@@ -611,7 +666,7 @@ export type CredentialContext = Message<"gestalt.provider.v1.CredentialContext">
  * Use `create(CredentialContextSchema)` to create a new message.
  */
 export const CredentialContextSchema: GenMessage<CredentialContext> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 13);
+  messageDesc(file_v1_plugin, 14);
 
 /**
  * AccessContext describes the host-side access decision for an operation.
@@ -635,7 +690,7 @@ export type AccessContext = Message<"gestalt.provider.v1.AccessContext"> & {
  * Use `create(AccessContextSchema)` to create a new message.
  */
 export const AccessContextSchema: GenMessage<AccessContext> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 14);
+  messageDesc(file_v1_plugin, 15);
 
 /**
  * RequestContext bundles the caller, credential, and access metadata for one
@@ -670,7 +725,7 @@ export type RequestContext = Message<"gestalt.provider.v1.RequestContext"> & {
  * Use `create(RequestContextSchema)` to create a new message.
  */
 export const RequestContextSchema: GenMessage<RequestContext> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 15);
+  messageDesc(file_v1_plugin, 16);
 
 /**
  * ExecuteRequest invokes one executable operation.
@@ -719,7 +774,7 @@ export type ExecuteRequest = Message<"gestalt.provider.v1.ExecuteRequest"> & {
  * Use `create(ExecuteRequestSchema)` to create a new message.
  */
 export const ExecuteRequestSchema: GenMessage<ExecuteRequest> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 16);
+  messageDesc(file_v1_plugin, 17);
 
 /**
  * GetSessionCatalogRequest asks a provider for request-scoped catalog
@@ -754,7 +809,7 @@ export type GetSessionCatalogRequest = Message<"gestalt.provider.v1.GetSessionCa
  * Use `create(GetSessionCatalogRequestSchema)` to create a new message.
  */
 export const GetSessionCatalogRequestSchema: GenMessage<GetSessionCatalogRequest> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 17);
+  messageDesc(file_v1_plugin, 18);
 
 /**
  * GetSessionCatalogResponse returns request-scoped catalog extensions.
@@ -773,7 +828,7 @@ export type GetSessionCatalogResponse = Message<"gestalt.provider.v1.GetSessionC
  * Use `create(GetSessionCatalogResponseSchema)` to create a new message.
  */
 export const GetSessionCatalogResponseSchema: GenMessage<GetSessionCatalogResponse> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 18);
+  messageDesc(file_v1_plugin, 19);
 
 /**
  * PostConnectRequest notifies a provider that a connection has completed.
@@ -792,7 +847,7 @@ export type PostConnectRequest = Message<"gestalt.provider.v1.PostConnectRequest
  * Use `create(PostConnectRequestSchema)` to create a new message.
  */
 export const PostConnectRequestSchema: GenMessage<PostConnectRequest> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 19);
+  messageDesc(file_v1_plugin, 20);
 
 /**
  * PostConnectResponse returns provider-defined metadata captured after
@@ -812,7 +867,7 @@ export type PostConnectResponse = Message<"gestalt.provider.v1.PostConnectRespon
  * Use `create(PostConnectResponseSchema)` to create a new message.
  */
 export const PostConnectResponseSchema: GenMessage<PostConnectResponse> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 20);
+  messageDesc(file_v1_plugin, 21);
 
 /**
  * StartProviderRequest configures an integration provider for one runtime
@@ -842,7 +897,7 @@ export type StartProviderRequest = Message<"gestalt.provider.v1.StartProviderReq
  * Use `create(StartProviderRequestSchema)` to create a new message.
  */
 export const StartProviderRequestSchema: GenMessage<StartProviderRequest> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 21);
+  messageDesc(file_v1_plugin, 22);
 
 /**
  * StartProviderResponse confirms the protocol version the provider is serving.
@@ -861,7 +916,7 @@ export type StartProviderResponse = Message<"gestalt.provider.v1.StartProviderRe
  * Use `create(StartProviderResponseSchema)` to create a new message.
  */
 export const StartProviderResponseSchema: GenMessage<StartProviderResponse> = /*@__PURE__*/
-  messageDesc(file_v1_plugin, 22);
+  messageDesc(file_v1_plugin, 23);
 
 /**
  * ConnectionMode describes which credential sources a provider accepts.
@@ -965,6 +1020,14 @@ export const PluginInvoker: GenService<{
     input: typeof PluginInvokeRequestSchema;
     output: typeof OperationResultSchema;
   },
+  /**
+   * @generated from rpc gestalt.provider.v1.PluginInvoker.InvokeGraphQL
+   */
+  invokeGraphQL: {
+    methodKind: "unary";
+    input: typeof PluginInvokeGraphQLRequestSchema;
+    output: typeof OperationResultSchema;
+  },
 }> = /*@__PURE__*/
   serviceDesc(file_v1_plugin, 1);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@valon-technologies/gestalt",
-  "version": "0.0.1-alpha.10",
+  "version": "0.0.1-alpha.11",
   "description": "TypeScript SDK for Gestalt executable providers",
   "type": "module",
   "repository": {

package/src/index.ts

@@ -53,6 +53,21 @@ export {
   type CatalogParameter,
   type CatalogSchema,
 } from "./catalog.ts";
+export {
+  hasPluginManifestMetadata,
+  manifestMetadataToYaml,
+  writeManifestMetadataYaml,
+  type HTTPAck,
+  type HTTPAuthScheme,
+  type HTTPBinding,
+  type HTTPIn,
+  type HTTPMediaType,
+  type HTTPRequestBody,
+  type HTTPSecretRef,
+  type HTTPSecurityScheme,
+  type HTTPSecuritySchemeType,
+  type PluginManifestMetadata,
+} from "./manifest-metadata.ts";
 export {
   buildProviderBinary,
   bunBuildCommand,
@@ -62,6 +77,8 @@ export {
 export {
   ENV_PLUGIN_INVOKER_SOCKET,
   PluginInvoker,
+  type PluginGraphQLInvokeOptions,
+  type PluginInvocationGrant,
   type PluginInvokeOptions,
 } from "./invoker.ts";
 export {
@@ -146,6 +163,7 @@ export {
   ENV_PROVIDER_PARENT_PID,
   ENV_PROVIDER_SOCKET,
   ENV_WRITE_CATALOG,
+  ENV_WRITE_MANIFEST_METADATA,
   createAuthenticationService,
   createCacheService,
   createSecretsService,

package/src/invoker.ts

@@ -16,7 +16,13 @@ export interface PluginInvokeOptions {
 
 export interface PluginInvocationGrant {
   plugin: string;
-  operations: string[];
+  operations?: string[];
+  surfaces?: string[];
+  allOperations?: boolean;
+}
+
+export interface PluginGraphQLInvokeOptions extends PluginInvokeOptions {
+  variables?: Record<string, unknown>;
 }
 
 export class PluginInvoker {
@@ -62,6 +68,32 @@ export class PluginInvoker {
     };
   }
 
+  async invokeGraphQL(
+    plugin: string,
+    document: string,
+    options?: PluginGraphQLInvokeOptions,
+  ): Promise<OperationResult> {
+    const trimmedDocument = document.trim();
+    if (!trimmedDocument) {
+      throw new Error("plugin invoker: graphql document is required");
+    }
+
+    const response = await this.client.invokeGraphQL({
+      invocationToken: this.invocationToken,
+      plugin,
+      document: trimmedDocument,
+      ...(options?.variables
+        ? { variables: toJsonObject(options.variables) }
+        : {}),
+      connection: options?.connection ?? "",
+      instance: options?.instance ?? "",
+    });
+    return {
+      status: response.status,
+      body: response.body,
+    };
+  }
+
   async exchangeInvocationToken(options?: {
     grants?: PluginInvocationGrant[];
     ttlSeconds?: number;
@@ -71,9 +103,13 @@ export class PluginInvoker {
       grants: (options?.grants ?? [])
         .map((grant) => ({
           plugin: grant.plugin.trim(),
-          operations: grant.operations
+          operations: (grant.operations ?? [])
             .map((operation) => operation.trim())
             .filter(Boolean),
+          surfaces: (grant.surfaces ?? [])
+            .map((surface) => surface.trim().toLowerCase())
+            .filter(Boolean),
+          allOperations: grant.allOperations ?? false,
         }))
         .filter((grant) => grant.plugin.length > 0),
       ttlSeconds: BigInt(Math.max(0, options?.ttlSeconds ?? 0)),

package/src/manifest-metadata.ts

@@ -0,0 +1,101 @@
+import { writeFileSync } from "node:fs";
+
+import YAML from "yaml";
+
+export type HTTPSecuritySchemeType =
+  | "slack_signature"
+  | "apiKey"
+  | "http"
+  | "none";
+
+export type HTTPIn = "header" | "query";
+
+export type HTTPAuthScheme = "basic" | "bearer";
+
+export interface HTTPSecretRef {
+  env?: string;
+  secret?: string;
+}
+
+export interface HTTPSecurityScheme {
+  type?: HTTPSecuritySchemeType;
+  description?: string;
+  name?: string;
+  in?: HTTPIn;
+  scheme?: HTTPAuthScheme;
+  secret?: HTTPSecretRef;
+}
+
+export interface HTTPMediaType {}
+
+export interface HTTPRequestBody {
+  required?: boolean;
+  content?: Record<string, HTTPMediaType>;
+}
+
+export interface HTTPAck {
+  status?: number;
+  headers?: Record<string, string>;
+  body?: any;
+}
+
+export interface HTTPBinding {
+  path: string;
+  method: string;
+  requestBody?: HTTPRequestBody;
+  security: string;
+  target: string;
+  ack?: HTTPAck;
+}
+
+export interface PluginManifestMetadata {
+  securitySchemes?: Record<string, HTTPSecurityScheme>;
+  http?: Record<string, HTTPBinding>;
+}
+
+export function hasPluginManifestMetadata(
+  metadata: PluginManifestMetadata | null | undefined,
+): boolean {
+  return !!(
+    metadata &&
+    ((metadata.securitySchemes &&
+      Object.keys(metadata.securitySchemes).length > 0) ||
+      (metadata.http && Object.keys(metadata.http).length > 0))
+  );
+}
+
+export function manifestMetadataToYaml(
+  metadata: PluginManifestMetadata | Record<string, unknown>,
+): string {
+  return YAML.stringify(toManifestMetadataJsonObject(metadata));
+}
+
+export function writeManifestMetadataYaml(
+  path: string,
+  metadata: PluginManifestMetadata | Record<string, unknown>,
+): void {
+  writeFileSync(path, manifestMetadataToYaml(metadata), "utf8");
+}
+
+function toManifestMetadataJsonObject(
+  metadata: PluginManifestMetadata | Record<string, unknown>,
+): Record<string, unknown> {
+  if (!("securitySchemes" in metadata) && !("http" in metadata)) {
+    return {
+      ...metadata,
+    };
+  }
+
+  const typedMetadata = metadata as PluginManifestMetadata;
+  const output: Record<string, unknown> = {};
+  if (
+    typedMetadata.securitySchemes &&
+    Object.keys(typedMetadata.securitySchemes).length > 0
+  ) {
+    output.securitySchemes = typedMetadata.securitySchemes;
+  }
+  if (typedMetadata.http && Object.keys(typedMetadata.http).length > 0) {
+    output.http = typedMetadata.http;
+  }
+  return output;
+}

package/src/plugin.ts

@@ -7,6 +7,15 @@ import {
   schemaToParameters,
   writeCatalogYaml,
 } from "./catalog.ts";
+import {
+  type HTTPAck,
+  type HTTPBinding,
+  type HTTPRequestBody,
+  type HTTPSecurityScheme,
+  type PluginManifestMetadata,
+  hasPluginManifestMetadata,
+  writeManifestMetadataYaml,
+} from "./manifest-metadata.ts";
 import {
   errorMessage,
   type MaybePromise,
@@ -82,6 +91,8 @@ export interface PluginDefinitionOptions extends RuntimeProviderOptions {
   connectionMode?: ConnectionMode;
   authTypes?: string[];
   connectionParams?: Record<string, ConnectionParamDefinition>;
+  securitySchemes?: Record<string, HTTPSecurityScheme>;
+  http?: Record<string, HTTPBinding>;
   iconSvg?: string;
   operations: Array<OperationDefinition<any, any>>;
   sessionCatalog?: SessionCatalogHandler;
@@ -134,6 +145,8 @@ export class PluginProvider extends RuntimeProvider {
   readonly connectionMode: ConnectionMode;
   readonly authTypes: string[];
   readonly connectionParams: Record<string, ConnectionParamDefinition>;
+  readonly securitySchemes: Record<string, HTTPSecurityScheme>;
+  readonly http: Record<string, HTTPBinding>;
 
   private readonly sessionCatalogHandler: SessionCatalogHandler | undefined;
   private readonly operations = new Map<string, OperationDefinition<any, any>>();
@@ -144,6 +157,8 @@ export class PluginProvider extends RuntimeProvider {
     this.connectionMode = options.connectionMode ?? "unspecified";
     this.authTypes = [...(options.authTypes ?? [])];
     this.connectionParams = normalizeConnectionParams(options.connectionParams);
+    this.securitySchemes = normalizeHTTPSecuritySchemes(options.securitySchemes);
+    this.http = normalizeHTTPBindings(options.http);
     this.sessionCatalogHandler = options.sessionCatalog;
 
     for (const rawEntry of options.operations) {
@@ -255,6 +270,38 @@ export class PluginProvider extends RuntimeProvider {
     return catalogToJson(this.staticCatalog());
   }
 
+  /**
+   * Returns generated manifest-backed HTTP/security metadata for the provider.
+   */
+  staticManifestMetadata(): PluginManifestMetadata {
+    const metadata: PluginManifestMetadata = {};
+    if (Object.keys(this.securitySchemes).length > 0) {
+      metadata.securitySchemes = cloneHTTPSecuritySchemes(this.securitySchemes);
+    }
+    if (Object.keys(this.http).length > 0) {
+      metadata.http = cloneHTTPBindings(this.http);
+    }
+    return metadata;
+  }
+
+  /**
+   * Reports whether the provider emits manifest metadata in addition to catalog metadata.
+   */
+  supportsManifestMetadata(): boolean {
+    return hasPluginManifestMetadata(this.staticManifestMetadata());
+  }
+
+  /**
+   * Writes generated manifest metadata to disk as YAML.
+   */
+  writeManifestMetadata(path: string): void {
+    const metadata = this.staticManifestMetadata();
+    if (!hasPluginManifestMetadata(metadata)) {
+      return;
+    }
+    writeManifestMetadataYaml(path, metadata);
+  }
+
   /**
    * Executes an operation against validated input and request metadata.
    */
@@ -349,6 +396,121 @@ function normalizeConnectionParams(
   return output;
 }
 
+function normalizeHTTPSecuritySchemes(
+  input: Record<string, HTTPSecurityScheme> | undefined,
+): Record<string, HTTPSecurityScheme> {
+  const output: Record<string, HTTPSecurityScheme> = {};
+  for (const [key, value] of Object.entries(input ?? {})) {
+    output[key] = cloneHTTPSecurityScheme(value);
+  }
+  return output;
+}
+
+function cloneHTTPSecuritySchemes(
+  input: Record<string, HTTPSecurityScheme>,
+): Record<string, HTTPSecurityScheme> {
+  const output: Record<string, HTTPSecurityScheme> = {};
+  for (const [key, value] of Object.entries(input)) {
+    output[key] = cloneHTTPSecurityScheme(value);
+  }
+  return output;
+}
+
+function cloneHTTPSecurityScheme(value: HTTPSecurityScheme): HTTPSecurityScheme {
+  const output: HTTPSecurityScheme = {};
+  if (value.type !== undefined) {
+    output.type = value.type;
+  }
+  if (value.description !== undefined) {
+    output.description = value.description;
+  }
+  if (value.name !== undefined) {
+    output.name = value.name;
+  }
+  if (value.in !== undefined) {
+    output.in = value.in;
+  }
+  if (value.scheme !== undefined) {
+    output.scheme = value.scheme;
+  }
+  if (value.secret) {
+    output.secret = {
+      ...value.secret,
+    };
+  }
+  return output;
+}
+
+function normalizeHTTPBindings(
+  input: Record<string, HTTPBinding> | undefined,
+): Record<string, HTTPBinding> {
+  const output: Record<string, HTTPBinding> = {};
+  for (const [key, value] of Object.entries(input ?? {})) {
+    output[key] = cloneHTTPBinding(value);
+  }
+  return output;
+}
+
+function cloneHTTPBindings(
+  input: Record<string, HTTPBinding>,
+): Record<string, HTTPBinding> {
+  const output: Record<string, HTTPBinding> = {};
+  for (const [key, value] of Object.entries(input)) {
+    output[key] = cloneHTTPBinding(value);
+  }
+  return output;
+}
+
+function cloneHTTPBinding(value: HTTPBinding): HTTPBinding {
+  const output: HTTPBinding = {
+    path: value.path,
+    method: value.method,
+    security: value.security,
+    target: value.target,
+  };
+  if (value.requestBody) {
+    output.requestBody = cloneHTTPRequestBody(value.requestBody);
+  }
+  if (value.ack) {
+    output.ack = cloneHTTPAck(value.ack);
+  }
+  return output;
+}
+
+function cloneHTTPRequestBody(value: HTTPRequestBody): HTTPRequestBody {
+  const output: HTTPRequestBody = {};
+  if (value.required !== undefined) {
+    output.required = value.required;
+  }
+  if (value.content) {
+    output.content = {};
+    for (const key of Object.keys(value.content)) {
+      output.content[key] = {};
+    }
+  }
+  return output;
+}
+
+function cloneHTTPAck(value: HTTPAck): HTTPAck {
+  const output: HTTPAck = {};
+  if (value.status !== undefined) {
+    output.status = value.status;
+  }
+  if (value.headers) {
+    output.headers = {
+      ...value.headers,
+    };
+  }
+  if (value.body !== undefined) {
+    output.body = cloneHTTPBodyValue(value.body);
+  }
+  return output;
+}
+
+function cloneHTTPBodyValue<T>(value: T): T {
+  return structuredClone(value);
+}
+
 function isResponse(value: unknown): value is Response<unknown> {
   if (typeof value !== "object" || value === null) {
     return false;

package/src/runtime.ts

@@ -106,6 +106,11 @@ export const ENV_PROVIDER_PARENT_PID = "GESTALT_PLUGIN_PARENT_PID";
  * Environment variable used to request static catalog generation.
  */
 export const ENV_WRITE_CATALOG = "GESTALT_PLUGIN_WRITE_CATALOG";
+/**
+ * Environment variable used to request generated manifest metadata export.
+ */
+export const ENV_WRITE_MANIFEST_METADATA =
+  "GESTALT_PLUGIN_WRITE_MANIFEST_METADATA";
 /**
  * Protocol version currently implemented by the TypeScript runtime.
  */
@@ -288,13 +293,19 @@ export async function runLoadedProvider(
   }
 
   const catalogPath = process.env[ENV_WRITE_CATALOG];
-  if (catalogPath) {
+  const manifestMetadataPath = process.env[ENV_WRITE_MANIFEST_METADATA];
+  if (catalogPath || manifestMetadataPath) {
     if (!isPluginProvider(provider)) {
       throw new Error(
-        "static catalog generation is only supported for plugin providers",
+        "static catalog and manifest metadata generation are only supported for plugin providers",
       );
     }
-    writeFileSync(catalogPath, catalogToYaml(provider.staticCatalog()), "utf8");
+    if (catalogPath) {
+      writeFileSync(catalogPath, catalogToYaml(provider.staticCatalog()), "utf8");
+    }
+    if (manifestMetadataPath && provider.supportsManifestMetadata()) {
+      provider.writeManifestMetadata(manifestMetadataPath);
+    }
     return;
   }