@vercel/connect 0.7.0 → 0.9.0

package/README.md

@@ -5,7 +5,7 @@ SDK for obtaining scoped tokens for third-party services on behalf of apps or us
 Seven entrypoints, all ESM:
 
 - `@vercel/connect` — core token / authorization SDK
-- `@vercel/connect/chat` — adapter helpers for the [Chat SDK](https://chat-sdk.dev) (`chat`): `connectSlackAdapter`, `connectDiscordAdapter`, `connectGitHubAdapter`, `connectLinearAdapter` (no Chat SDK dependency — returns structural config)
+- `@vercel/connect/chat` — adapter helpers for the [Chat SDK](https://chat-sdk.dev) (`chat`): `connectSlackAdapter`, `connectDiscordAdapter`, `connectGitHubAdapter`, `connectLinearAdapter`, `connectNotionAdapter`, `connectTelegramAdapter` (no Chat SDK dependency — returns structural config)
 - `@vercel/connect/ai-sdk` — [Vercel AI SDK](https://ai-sdk.dev) glue: re-exports `connectAuthProvider` for MCP transports (optional peers: `ai`, `@ai-sdk/mcp`)
 - `@vercel/connect/mcp` — canonical MCP-spec `OAuthClientProvider` for any MCP client (optional peer: `@ai-sdk/mcp`)
 - `@vercel/connect/eve` — adapter helpers for [Eve](https://github.com/vercel/eve) connections (optional peer: `eve`)
@@ -49,8 +49,8 @@ const { url } = await experimental_startInstallation(
 ### Chat SDK
 
 Spread the helper into the matching `create*Adapter` factory. Each helper
-wires both outbound app-scoped tokens and inbound Connect trigger-forwarded
-webhook verification (Vercel OIDC), so no provider secret lives in your env.
+wires outbound app-scoped tokens; trigger-capable providers also receive
+inbound Connect webhook verification via Vercel OIDC.
 
 ```ts
 import { createSlackAdapter } from '@chat-adapter/slack';
@@ -64,7 +64,10 @@ createSlackAdapter({
 
 `connectDiscordAdapter` (`botToken` and `applicationId`),
 `connectGitHubAdapter` (`installationToken`), and `connectLinearAdapter`
-(`accessToken`) follow the same shape. See the
+(`accessToken`) follow the same shape. `connectNotionAdapter` supplies only the
+outbound `token`; native Notion webhooks still require
+`NOTION_VERIFICATION_TOKEN`. `connectTelegramAdapter` supplies only
+`botToken`; Telegram retains native webhook verification or polling. See the
 [Chat SDK integration guide](https://github.com/vercel/vercel/blob/main/packages/connect/docs/chat-integration.md)
 for connector setup, trigger forwarding, and per-platform examples.
 

package/dist/chat/index.d.ts

@@ -21,8 +21,11 @@
  * ```
  */
 export { createConnectWebhookVerifier, type ConnectWebhookVerifier, type ConnectWebhookVerifierOptions, } from './webhook-verifier.js';
-export type { ConnectDiscordAdapterConfig, ConnectGitHubAdapterConfig, ConnectLinearAdapterConfig, ConnectTokenResolver, } from './types.js';
+export type { ConnectDiscordAdapterConfig, ConnectGitHubAdapterConfig, ConnectLinearAdapterConfig, ConnectLinqAdapterConfig, ConnectLinqCredentials, ConnectNotionAdapterConfig, ConnectTelegramAdapterConfig, ConnectTokenResolver, } from './types.js';
 export { connectDiscordAdapter, type ConnectDiscordAdapterParams, } from './discord-adapter.js';
 export { connectSlackAdapter, type ConnectSlackAdapterConfig, type ConnectSlackAdapterParams, } from './slack-adapter.js';
 export { connectGitHubAdapter, type ConnectGitHubAdapterParams, } from './github-adapter.js';
 export { connectLinearAdapter, type ConnectLinearAdapterParams, } from './linear-adapter.js';
+export { connectLinqAdapter, type ConnectLinqAdapterParams, } from './linq-adapter.js';
+export { connectNotionAdapter, type ConnectNotionAdapterParams, } from './notion-adapter.js';
+export { connectTelegramAdapter, type ConnectTelegramAdapterParams, } from './telegram-adapter.js';

package/dist/chat/index.js

@@ -25,3 +25,6 @@ export { connectDiscordAdapter, } from './discord-adapter.js';
 export { connectSlackAdapter, } from './slack-adapter.js';
 export { connectGitHubAdapter, } from './github-adapter.js';
 export { connectLinearAdapter, } from './linear-adapter.js';
+export { connectLinqAdapter, } from './linq-adapter.js';
+export { connectNotionAdapter, } from './notion-adapter.js';
+export { connectTelegramAdapter, } from './telegram-adapter.js';

package/dist/chat/linq-adapter.d.ts

@@ -0,0 +1,37 @@
+import { type ConnectOptions, type ConnectTokenParams } from '../index.js';
+import type { ConnectLinqAdapterConfig } from './types.js';
+/**
+ * Token parameters accepted by {@link connectLinqAdapter}.
+ *
+ * Mirrors {@link ConnectTokenParams} from `@vercel/connect`, minus `subject`.
+ * Linq credentials are app-scoped, so this helper always uses
+ * `{ type: 'app' }`.
+ */
+export type ConnectLinqAdapterParams = Omit<ConnectTokenParams, 'subject'>;
+/**
+ * Build a Linq adapter config fragment backed by a Vercel Connect connector.
+ *
+ * Spread the result into `createLinqAdapter` from `@linqapp/chat-sdk-adapter`:
+ *
+ * ```ts
+ * import { createLinqAdapter } from '@linqapp/chat-sdk-adapter';
+ * import { connectLinqAdapter } from '@vercel/connect/chat';
+ *
+ * createLinqAdapter({
+ *   ...connectLinqAdapter('linq/my-agent'),
+ * });
+ * ```
+ *
+ * Linq's SDK calls its Bearer credential `apiKey`; the lazy `credentials`
+ * provider supplies the app-scoped Connect token through that field only when
+ * the adapter needs it.
+ *
+ * Connect retains Linq's webhook signing secret and verifies trigger-forwarded
+ * webhooks before attaching a Vercel OIDC token. `webhookVerifier` validates
+ * that OIDC token, replacing Linq's native HMAC check.
+ *
+ * The optional `params` and `options` arguments mirror the signature of
+ * {@link getTokenResponse}, allowing callers to pass through fields like
+ * `installationId`, `scopes`, or `validityBufferMs`.
+ */
+export declare function connectLinqAdapter(connector: string, params?: ConnectLinqAdapterParams, options?: ConnectOptions): ConnectLinqAdapterConfig;

package/dist/chat/linq-adapter.js

@@ -0,0 +1,37 @@
+import { getTokenResponse, } from '../index.js';
+import { createConnectWebhookVerifier } from './webhook-verifier.js';
+/**
+ * Build a Linq adapter config fragment backed by a Vercel Connect connector.
+ *
+ * Spread the result into `createLinqAdapter` from `@linqapp/chat-sdk-adapter`:
+ *
+ * ```ts
+ * import { createLinqAdapter } from '@linqapp/chat-sdk-adapter';
+ * import { connectLinqAdapter } from '@vercel/connect/chat';
+ *
+ * createLinqAdapter({
+ *   ...connectLinqAdapter('linq/my-agent'),
+ * });
+ * ```
+ *
+ * Linq's SDK calls its Bearer credential `apiKey`; the lazy `credentials`
+ * provider supplies the app-scoped Connect token through that field only when
+ * the adapter needs it.
+ *
+ * Connect retains Linq's webhook signing secret and verifies trigger-forwarded
+ * webhooks before attaching a Vercel OIDC token. `webhookVerifier` validates
+ * that OIDC token, replacing Linq's native HMAC check.
+ *
+ * The optional `params` and `options` arguments mirror the signature of
+ * {@link getTokenResponse}, allowing callers to pass through fields like
+ * `installationId`, `scopes`, or `validityBufferMs`.
+ */
+export function connectLinqAdapter(connector, params = {}, options) {
+    return {
+        credentials: async () => {
+            const response = await getTokenResponse(connector, { ...params, subject: { type: 'app' } }, options);
+            return { apiKey: response.token };
+        },
+        webhookVerifier: createConnectWebhookVerifier(),
+    };
+}

package/dist/chat/notion-adapter.d.ts

@@ -0,0 +1,28 @@
+import { type ConnectOptions, type ConnectTokenParams } from '../index.js';
+import type { ConnectNotionAdapterConfig } from './types.js';
+/**
+ * Token parameters accepted by {@link connectNotionAdapter}.
+ *
+ * Mirrors {@link ConnectTokenParams} from `@vercel/connect`, minus
+ * `subject` — Notion connection tokens are app-scoped, so this helper pins
+ * the subject to `{ type: "app" }`.
+ */
+export type ConnectNotionAdapterParams = Omit<ConnectTokenParams, 'subject'>;
+/**
+ * Build a Notion adapter config fragment backed by a Vercel Connect connector.
+ *
+ * The helper resolves outbound Notion API tokens only. Notion webhooks are
+ * delivered directly and must continue to use the adapter's native
+ * `verificationToken` / `NOTION_VERIFICATION_TOKEN` HMAC verification.
+ *
+ * ```ts
+ * import { createNotionAdapter } from "@chat-adapter/notion";
+ * import { connectNotionAdapter } from "@vercel/connect/chat";
+ *
+ * createNotionAdapter({
+ *   ...connectNotionAdapter("notion/acme-notion"),
+ *   verificationToken: process.env.NOTION_VERIFICATION_TOKEN,
+ * });
+ * ```
+ */
+export declare function connectNotionAdapter(connector: string, params?: ConnectNotionAdapterParams, options?: ConnectOptions): ConnectNotionAdapterConfig;

package/dist/chat/notion-adapter.js

@@ -0,0 +1,23 @@
+import { getToken, } from '../index.js';
+/**
+ * Build a Notion adapter config fragment backed by a Vercel Connect connector.
+ *
+ * The helper resolves outbound Notion API tokens only. Notion webhooks are
+ * delivered directly and must continue to use the adapter's native
+ * `verificationToken` / `NOTION_VERIFICATION_TOKEN` HMAC verification.
+ *
+ * ```ts
+ * import { createNotionAdapter } from "@chat-adapter/notion";
+ * import { connectNotionAdapter } from "@vercel/connect/chat";
+ *
+ * createNotionAdapter({
+ *   ...connectNotionAdapter("notion/acme-notion"),
+ *   verificationToken: process.env.NOTION_VERIFICATION_TOKEN,
+ * });
+ * ```
+ */
+export function connectNotionAdapter(connector, params = {}, options) {
+    return {
+        token: () => getToken(connector, { ...params, subject: { type: 'app' } }, options),
+    };
+}

package/dist/chat/telegram-adapter.d.ts

@@ -0,0 +1,29 @@
+import { type ConnectOptions, type ConnectTokenParams } from '../index.js';
+import type { ConnectTelegramAdapterConfig } from './types.js';
+/**
+ * Token parameters accepted by {@link connectTelegramAdapter}.
+ *
+ * Mirrors {@link ConnectTokenParams} from `@vercel/connect`, minus
+ * `subject` — Telegram bot tokens are app-scoped, so this helper pins the
+ * subject to `{ type: "app" }`.
+ */
+export type ConnectTelegramAdapterParams = Omit<ConnectTokenParams, 'subject'>;
+/**
+ * Build a Telegram adapter config fragment backed by a Vercel Connect
+ * connector.
+ *
+ * The helper resolves outbound Telegram Bot API tokens only. Telegram webhooks
+ * are delivered directly and must continue to use the adapter's native
+ * `secretToken` / `TELEGRAM_WEBHOOK_SECRET_TOKEN` verification, or polling.
+ *
+ * ```ts
+ * import { createTelegramAdapter } from "@chat-adapter/telegram";
+ * import { connectTelegramAdapter } from "@vercel/connect/chat";
+ *
+ * createTelegramAdapter({
+ *   ...connectTelegramAdapter("telegram/acme-telegram"),
+ *   secretToken: process.env.TELEGRAM_WEBHOOK_SECRET_TOKEN,
+ * });
+ * ```
+ */
+export declare function connectTelegramAdapter(connector: string, params?: ConnectTelegramAdapterParams, options?: ConnectOptions): ConnectTelegramAdapterConfig;

package/dist/chat/telegram-adapter.js

@@ -0,0 +1,24 @@
+import { getToken, } from '../index.js';
+/**
+ * Build a Telegram adapter config fragment backed by a Vercel Connect
+ * connector.
+ *
+ * The helper resolves outbound Telegram Bot API tokens only. Telegram webhooks
+ * are delivered directly and must continue to use the adapter's native
+ * `secretToken` / `TELEGRAM_WEBHOOK_SECRET_TOKEN` verification, or polling.
+ *
+ * ```ts
+ * import { createTelegramAdapter } from "@chat-adapter/telegram";
+ * import { connectTelegramAdapter } from "@vercel/connect/chat";
+ *
+ * createTelegramAdapter({
+ *   ...connectTelegramAdapter("telegram/acme-telegram"),
+ *   secretToken: process.env.TELEGRAM_WEBHOOK_SECRET_TOKEN,
+ * });
+ * ```
+ */
+export function connectTelegramAdapter(connector, params = {}, options) {
+    return {
+        botToken: () => getToken(connector, { ...params, subject: { type: 'app' } }, options),
+    };
+}

package/dist/chat/types.d.ts

@@ -38,3 +38,41 @@ export interface ConnectLinearAdapterConfig {
     accessToken: ConnectTokenResolver;
     webhookVerifier: ConnectWebhookVerifier;
 }
+/**
+ * Credentials resolved lazily by the Linq Chat SDK adapter.
+ *
+ * Structurally matches the return value of its `credentials` option.
+ */
+export interface ConnectLinqCredentials {
+    apiKey: string;
+}
+/**
+ * Partial Linq adapter config backed by Vercel Connect.
+ *
+ * Structurally matches the `credentials` and `webhookVerifier` options of
+ * `createLinqAdapter` from `@linqapp/chat-sdk-adapter`.
+ */
+export interface ConnectLinqAdapterConfig {
+    credentials: () => Promise<ConnectLinqCredentials>;
+    webhookVerifier: (request: Request, rawBody: Uint8Array) => Promise<unknown> | unknown;
+}
+/**
+ * Partial Notion adapter config backed by Vercel Connect.
+ *
+ * Structurally matches the `token` option of `createNotionAdapter` from
+ * `@chat-adapter/notion`. Notion webhooks continue to use native HMAC
+ * verification and are not part of this config fragment.
+ */
+export interface ConnectNotionAdapterConfig {
+    token: ConnectTokenResolver;
+}
+/**
+ * Partial Telegram adapter config backed by Vercel Connect.
+ *
+ * Structurally matches the `botToken` option of `createTelegramAdapter` from
+ * `@chat-adapter/telegram`. Telegram webhooks continue to use native secret
+ * token verification and are not part of this config fragment.
+ */
+export interface ConnectTelegramAdapterConfig {
+    botToken: ConnectTokenResolver;
+}

package/dist/chat/webhook-verifier.d.ts

@@ -9,7 +9,7 @@ import { verifyVercelOidcToken } from '@vercel/oidc';
  * subpath stay decoupled from `@chat-adapter/*` while remaining
  * structurally compatible.
  */
-export type ConnectWebhookVerifier = (request: Request, body: string) => Promise<unknown> | unknown;
+export type ConnectWebhookVerifier = (request: Request, body: string | Uint8Array) => Promise<unknown> | unknown;
 /**
  * Options forwarded to {@link verifyVercelOidcToken}. Defaults to
  * matching `project_id` / `environment` against the current Vercel

package/dist/eve/index.d.ts

@@ -11,5 +11,6 @@ export { CONNECT_OAUTH_ISSUER, connectOAuth, type ConnectOAuthAudienceEnvironmen
 export { connectDiscordCredentials, type ConnectDiscordCredentialsParams, } from './discord-credentials.js';
 export { connectGitHubCredentials, type ConnectGitHubCredentialsParams, } from './github-credentials.js';
 export { connectLinearCredentials, type ConnectLinearCredentialsParams, } from './linear-credentials.js';
+export { connectLinqCredentials, type ConnectLinqCredentials, type ConnectLinqCredentialsParams, } from './linq-credentials.js';
 export { connectPhotonCredentials, type ConnectPhotonCredentialProvider, type PhotonCredentials, type ConnectPhotonCredentialsParams, } from './photon-credentials.js';
 export { connectSlackCredentials, type ConnectSlackCredentialsParams, } from './slack-credentials.js';

package/dist/eve/index.js

@@ -11,5 +11,6 @@ export { CONNECT_OAUTH_ISSUER, connectOAuth, } from './connect-oauth.js';
 export { connectDiscordCredentials, } from './discord-credentials.js';
 export { connectGitHubCredentials, } from './github-credentials.js';
 export { connectLinearCredentials, } from './linear-credentials.js';
+export { connectLinqCredentials, } from './linq-credentials.js';
 export { connectPhotonCredentials, } from './photon-credentials.js';
 export { connectSlackCredentials, } from './slack-credentials.js';

package/dist/eve/linq-credentials.d.ts

@@ -0,0 +1,34 @@
+import { vercelOidc } from 'eve/channels/auth';
+import { type ConnectOptions, type ConnectTokenParams } from '../index.js';
+/** Linq channel credentials returned by {@link connectLinqCredentials}. */
+export interface ConnectLinqCredentials {
+    /** Short-lived API key for outbound Linq API calls. */
+    apiKey: () => Promise<string>;
+    /** Verifies webhooks forwarded by Vercel Connect. */
+    webhookVerifier: ReturnType<typeof vercelOidc>;
+}
+/**
+ * Token parameters accepted by {@link connectLinqCredentials}.
+ *
+ * Mirrors {@link ConnectTokenParams} from `@vercel/connect`, minus `subject`.
+ * Linq credentials are app-scoped, so this helper always uses
+ * `{ type: 'app' }`.
+ */
+export type ConnectLinqCredentialsParams = Omit<ConnectTokenParams, 'subject'>;
+/**
+ * Build Linq channel credentials backed by a Vercel Connect connector.
+ *
+ * The API-key resolver keeps token rotation delegated to Connect.
+ * `webhookVerifier` validates the Vercel OIDC token Connect attaches after it
+ * has verified and forwarded the provider webhook.
+ *
+ * ```ts
+ * import { connectLinqCredentials } from '@vercel/connect/eve';
+ * import { linqChannel } from 'eve/channels/linq';
+ *
+ * export default linqChannel({
+ *   credentials: connectLinqCredentials('linq/my-agent'),
+ * });
+ * ```
+ */
+export declare function connectLinqCredentials(connector: string, params?: ConnectLinqCredentialsParams, options?: ConnectOptions): ConnectLinqCredentials;

package/dist/eve/linq-credentials.js

@@ -0,0 +1,24 @@
+import { vercelOidc } from 'eve/channels/auth';
+import { getToken, } from '../index.js';
+/**
+ * Build Linq channel credentials backed by a Vercel Connect connector.
+ *
+ * The API-key resolver keeps token rotation delegated to Connect.
+ * `webhookVerifier` validates the Vercel OIDC token Connect attaches after it
+ * has verified and forwarded the provider webhook.
+ *
+ * ```ts
+ * import { connectLinqCredentials } from '@vercel/connect/eve';
+ * import { linqChannel } from 'eve/channels/linq';
+ *
+ * export default linqChannel({
+ *   credentials: connectLinqCredentials('linq/my-agent'),
+ * });
+ * ```
+ */
+export function connectLinqCredentials(connector, params = {}, options) {
+    return {
+        apiKey: () => getToken(connector, { ...params, subject: { type: 'app' } }, options),
+        webhookVerifier: vercelOidc(),
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vercel/connect",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "license": "Apache-2.0",
   "type": "module",
   "repository": {
@@ -42,7 +42,7 @@
     "dist"
   ],
   "dependencies": {
-    "@vercel/oidc": "3.8.4"
+    "@vercel/oidc": "3.8.5"
   },
   "peerDependencies": {
     "@ai-sdk/mcp": "^1 || ^2",