@xopcai/xopc 0.0.90 → 0.0.92

package/dist/src/connectors/catalog.js

@@ -0,0 +1,13 @@
+import { listConnectorProviderDefinitions, listConnectorProviders } from "./providers.js";
+//#region src/connectors/catalog.ts
+const CONNECTOR_BY_ID = new Map(listConnectorProviderDefinitions().map((connector) => [connector.id, connector]));
+function listConnectorCatalog() {
+	return listConnectorProviderDefinitions().sort((left, right) => left.displayName.localeCompare(right.displayName));
+}
+function getConnectorDefinition(connectorId) {
+	return CONNECTOR_BY_ID.get(connectorId);
+}
+//#endregion
+export { getConnectorDefinition, listConnectorCatalog, listConnectorProviders };
+
+//# sourceMappingURL=catalog.js.map

package/dist/src/connectors/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","names":[],"sources":["../../../src/connectors/catalog.ts"],"sourcesContent":["import { listConnectorProviderDefinitions, listConnectorProviders } from './providers.js';\nimport type { ConnectorDefinition } from './types.js';\n\nconst CONNECTOR_BY_ID = new Map(listConnectorProviderDefinitions().map((connector) => [connector.id, connector]));\n\nexport function listConnectorCatalog(): ConnectorDefinition[] {\n  return listConnectorProviderDefinitions().sort((left, right) => left.displayName.localeCompare(right.displayName));\n}\n\nexport function getConnectorDefinition(connectorId: string): ConnectorDefinition | undefined {\n  return CONNECTOR_BY_ID.get(connectorId);\n}\n\nexport { listConnectorProviders };\n"],"mappings":";;AAGA,MAAM,kBAAkB,IAAI,IAAI,kCAAkC,CAAC,KAAK,cAAc,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC;AAEjH,SAAgB,uBAA8C;AAC5D,QAAO,kCAAkC,CAAC,MAAM,MAAM,UAAU,KAAK,YAAY,cAAc,MAAM,YAAY,CAAC;;AAGpH,SAAgB,uBAAuB,aAAsD;AAC3F,QAAO,gBAAgB,IAAI,YAAY"}

package/dist/src/connectors/health.d.ts

@@ -0,0 +1,3 @@
+import type { Config } from '../config/schema.js';
+import type { ConnectorHealthResult } from './types.js';
+export declare function testConnectorInstance(config: Config, serverId: string): Promise<ConnectorHealthResult>;

package/dist/src/connectors/health.js

@@ -0,0 +1,61 @@
+import { getConnectorInstance } from "./instances.js";
+import { createBundleMcpToolRuntime, mapBundleMcpToolsForGateway } from "../agent/mcp/bundle-mcp-materialize.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
+//#region src/connectors/health.ts
+function classifyConnectorHealthError(error) {
+	const message = error instanceof Error ? error.message : String(error);
+	if (/timed out|timeout/i.test(message)) return "timeout";
+	if (/ECONN|ENOTFOUND|network|fetch failed/i.test(message)) return "network_failed";
+	if (/missing|required|credential|api key|token/i.test(message)) return "missing_secret";
+	if (/tools|listTools/i.test(message)) return "tools_list_failed";
+	if (/spawn|command|start|connect/i.test(message)) return "startup_failed";
+	return "unknown_error";
+}
+function healthActionForStatus(status) {
+	if (status === "missing_secret") return "Reconnect the connector and provide the required secret.";
+	if (status === "timeout" || status === "network_failed") return "Check network access and retry the connector health check.";
+	if (status === "startup_failed") return "Verify the connector runtime dependency is installed and reachable.";
+}
+async function testConnectorInstance(config, serverId) {
+	if (!getConnectorInstance(config, serverId)) return {
+		serverId,
+		ok: false,
+		status: "server_not_found",
+		toolCount: 0,
+		tools: [],
+		error: `Connector instance not found: ${serverId}`
+	};
+	const workspaceDir = getWorkspacePath(config) || "./workspace";
+	let runtime;
+	try {
+		runtime = await createBundleMcpToolRuntime({
+			workspaceDir,
+			cfg: config
+		});
+		const tools = mapBundleMcpToolsForGateway(runtime.tools, serverId);
+		return {
+			serverId,
+			ok: true,
+			status: "ok",
+			toolCount: tools.length,
+			tools
+		};
+	} catch (error) {
+		const status = classifyConnectorHealthError(error);
+		return {
+			serverId,
+			ok: false,
+			status,
+			toolCount: 0,
+			tools: [],
+			error: error instanceof Error ? error.message : String(error),
+			action: healthActionForStatus(status)
+		};
+	} finally {
+		await runtime?.dispose();
+	}
+}
+//#endregion
+export { testConnectorInstance };
+
+//# sourceMappingURL=health.js.map

package/dist/src/connectors/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","names":[],"sources":["../../../src/connectors/health.ts"],"sourcesContent":["import { getWorkspacePath } from '../config/workspace-path-helpers.js';\nimport {\n  createBundleMcpToolRuntime,\n  mapBundleMcpToolsForGateway,\n} from '../agent/mcp/bundle-mcp-materialize.js';\nimport type { Config } from '../config/schema.js';\nimport { getConnectorInstance } from './instances.js';\nimport type { ConnectorHealthResult, ConnectorHealthStatus } from './types.js';\n\nfunction classifyConnectorHealthError(error: unknown): ConnectorHealthStatus {\n  const message = error instanceof Error ? error.message : String(error);\n  if (/timed out|timeout/i.test(message)) {\n    return 'timeout';\n  }\n  if (/ECONN|ENOTFOUND|network|fetch failed/i.test(message)) {\n    return 'network_failed';\n  }\n  if (/missing|required|credential|api key|token/i.test(message)) {\n    return 'missing_secret';\n  }\n  if (/tools|listTools/i.test(message)) {\n    return 'tools_list_failed';\n  }\n  if (/spawn|command|start|connect/i.test(message)) {\n    return 'startup_failed';\n  }\n  return 'unknown_error';\n}\n\nfunction healthActionForStatus(status: ConnectorHealthStatus): string | undefined {\n  if (status === 'missing_secret') {\n    return 'Reconnect the connector and provide the required secret.';\n  }\n  if (status === 'timeout' || status === 'network_failed') {\n    return 'Check network access and retry the connector health check.';\n  }\n  if (status === 'startup_failed') {\n    return 'Verify the connector runtime dependency is installed and reachable.';\n  }\n  return undefined;\n}\n\nexport async function testConnectorInstance(config: Config, serverId: string): Promise<ConnectorHealthResult> {\n  const instance = getConnectorInstance(config, serverId);\n  if (!instance) {\n    return {\n      serverId,\n      ok: false,\n      status: 'server_not_found',\n      toolCount: 0,\n      tools: [],\n      error: `Connector instance not found: ${serverId}`,\n    };\n  }\n\n  const workspaceDir = getWorkspacePath(config) || './workspace';\n  let runtime: Awaited<ReturnType<typeof createBundleMcpToolRuntime>> | undefined;\n  try {\n    runtime = await createBundleMcpToolRuntime({\n      workspaceDir,\n      cfg: config,\n    });\n    const tools = mapBundleMcpToolsForGateway(runtime.tools, serverId);\n    return {\n      serverId,\n      ok: true,\n      status: 'ok',\n      toolCount: tools.length,\n      tools,\n    };\n  } catch (error) {\n    const status = classifyConnectorHealthError(error);\n    return {\n      serverId,\n      ok: false,\n      status,\n      toolCount: 0,\n      tools: [],\n      error: error instanceof Error ? error.message : String(error),\n      action: healthActionForStatus(status),\n    };\n  } finally {\n    await runtime?.dispose();\n  }\n}\n"],"mappings":";;;;AASA,SAAS,6BAA6B,OAAuC;CAC3E,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,KAAI,qBAAqB,KAAK,QAAQ,CACpC,QAAO;AAET,KAAI,wCAAwC,KAAK,QAAQ,CACvD,QAAO;AAET,KAAI,6CAA6C,KAAK,QAAQ,CAC5D,QAAO;AAET,KAAI,mBAAmB,KAAK,QAAQ,CAClC,QAAO;AAET,KAAI,+BAA+B,KAAK,QAAQ,CAC9C,QAAO;AAET,QAAO;;AAGT,SAAS,sBAAsB,QAAmD;AAChF,KAAI,WAAW,iBACb,QAAO;AAET,KAAI,WAAW,aAAa,WAAW,iBACrC,QAAO;AAET,KAAI,WAAW,iBACb,QAAO;;AAKX,eAAsB,sBAAsB,QAAgB,UAAkD;AAE5G,KAAI,CADa,qBAAqB,QAAQ,SACjC,CACX,QAAO;EACL;EACA,IAAI;EACJ,QAAQ;EACR,WAAW;EACX,OAAO,EAAE;EACT,OAAO,iCAAiC;EACzC;CAGH,MAAM,eAAe,iBAAiB,OAAO,IAAI;CACjD,IAAI;AACJ,KAAI;AACF,YAAU,MAAM,2BAA2B;GACzC;GACA,KAAK;GACN,CAAC;EACF,MAAM,QAAQ,4BAA4B,QAAQ,OAAO,SAAS;AAClE,SAAO;GACL;GACA,IAAI;GACJ,QAAQ;GACR,WAAW,MAAM;GACjB;GACD;UACM,OAAO;EACd,MAAM,SAAS,6BAA6B,MAAM;AAClD,SAAO;GACL;GACA,IAAI;GACJ;GACA,WAAW;GACX,OAAO,EAAE;GACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC7D,QAAQ,sBAAsB,OAAO;GACtC;WACO;AACR,QAAM,SAAS,SAAS"}

package/dist/src/connectors/install.d.ts

@@ -0,0 +1,5 @@
+import { CredentialResolver } from '../auth/credentials.js';
+import type { Config } from '../config/schema.js';
+import type { ConnectorInstallInput, ConnectorInstance } from './types.js';
+export declare function installConnector(config: Config, connectorId: string, input: ConnectorInstallInput, resolver?: CredentialResolver): Promise<ConnectorInstance>;
+export declare function uninstallConnector(config: Config, instanceId: string): ConnectorInstance;

package/dist/src/connectors/install.js

@@ -0,0 +1,46 @@
+import { CredentialResolver, init_credentials } from "../auth/credentials.js";
+import { getConnectorDefinition } from "./catalog.js";
+import { saveConnectorSecrets } from "./secret-store.js";
+import { isManagedConnectorServer, materializeConnectorMcpServer } from "./materialize.js";
+import { appendConnectorAuditRecord } from "./usage.js";
+import { listConnectorInstances } from "./instances.js";
+import { assertConnectorOAuthReady } from "./oauth.js";
+//#region src/connectors/install.ts
+init_credentials();
+async function installConnector(config, connectorId, input, resolver = new CredentialResolver()) {
+	const definition = getConnectorDefinition(connectorId);
+	if (!definition) throw new Error(`Unknown connector: ${connectorId}`);
+	const { serverId, server } = materializeConnectorMcpServer(definition, input);
+	const existingServer = config.mcp?.servers?.[serverId];
+	if (existingServer && !isManagedConnectorServer(existingServer)) throw new Error(`MCP server "${serverId}" already exists and is not managed by Connectors.`);
+	await assertConnectorOAuthReady(definition, resolver);
+	await saveConnectorSecrets(definition, input, resolver);
+	config.mcp = config.mcp ?? {};
+	config.mcp.servers = {
+		...config.mcp.servers ?? {},
+		[serverId]: server
+	};
+	const instance = listConnectorInstances(config).find((candidate) => candidate.instanceId === serverId);
+	if (!instance) throw new Error(`Connector "${connectorId}" was installed but could not be resolved.`);
+	appendConnectorAuditRecord(config, serverId, { action: "installed" });
+	return instance;
+}
+function uninstallConnector(config, instanceId) {
+	const server = config.mcp?.servers?.[instanceId];
+	if (!server) throw new Error(`Connector instance not found: ${instanceId}`);
+	if (!isManagedConnectorServer(server)) throw new Error(`MCP server "${instanceId}" is not managed by Connectors.`);
+	const instance = listConnectorInstances(config).find((candidate) => candidate.instanceId === instanceId);
+	if (!instance) throw new Error(`Connector instance not found: ${instanceId}`);
+	appendConnectorAuditRecord(config, instanceId, { action: "removed" });
+	const nextServers = { ...config.mcp?.servers ?? {} };
+	delete nextServers[instanceId];
+	config.mcp = {
+		...config.mcp ?? {},
+		servers: nextServers
+	};
+	return instance;
+}
+//#endregion
+export { installConnector, uninstallConnector };
+
+//# sourceMappingURL=install.js.map

package/dist/src/connectors/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","names":[],"sources":["../../../src/connectors/install.ts"],"sourcesContent":["import { CredentialResolver } from '../auth/credentials.js';\nimport type { Config } from '../config/schema.js';\nimport { getConnectorDefinition } from './catalog.js';\nimport { listConnectorInstances } from './instances.js';\nimport { isManagedConnectorServer, materializeConnectorMcpServer } from './materialize.js';\nimport { assertConnectorOAuthReady } from './oauth.js';\nimport { saveConnectorSecrets } from './secret-store.js';\nimport { appendConnectorAuditRecord } from './usage.js';\nimport type { ConnectorInstallInput, ConnectorInstance } from './types.js';\n\nexport async function installConnector(\n  config: Config,\n  connectorId: string,\n  input: ConnectorInstallInput,\n  resolver = new CredentialResolver(),\n): Promise<ConnectorInstance> {\n  const definition = getConnectorDefinition(connectorId);\n  if (!definition) {\n    throw new Error(`Unknown connector: ${connectorId}`);\n  }\n\n  const { serverId, server } = materializeConnectorMcpServer(definition, input);\n  const existingServer = config.mcp?.servers?.[serverId];\n  if (existingServer && !isManagedConnectorServer(existingServer)) {\n    throw new Error(`MCP server \"${serverId}\" already exists and is not managed by Connectors.`);\n  }\n\n  await assertConnectorOAuthReady(definition, resolver);\n  await saveConnectorSecrets(definition, input, resolver);\n\n  config.mcp = config.mcp ?? {};\n  config.mcp.servers = {\n    ...(config.mcp.servers ?? {}),\n    [serverId]: server,\n  };\n\n  const instance = listConnectorInstances(config).find((candidate) => candidate.instanceId === serverId);\n  if (!instance) {\n    throw new Error(`Connector \"${connectorId}\" was installed but could not be resolved.`);\n  }\n  appendConnectorAuditRecord(config, serverId, { action: 'installed' });\n  return instance;\n}\n\nexport function uninstallConnector(config: Config, instanceId: string): ConnectorInstance {\n  const server = config.mcp?.servers?.[instanceId];\n  if (!server) {\n    throw new Error(`Connector instance not found: ${instanceId}`);\n  }\n  if (!isManagedConnectorServer(server)) {\n    throw new Error(`MCP server \"${instanceId}\" is not managed by Connectors.`);\n  }\n\n  const instance = listConnectorInstances(config).find((candidate) => candidate.instanceId === instanceId);\n  if (!instance) {\n    throw new Error(`Connector instance not found: ${instanceId}`);\n  }\n  appendConnectorAuditRecord(config, instanceId, { action: 'removed' });\n\n  const nextServers = { ...(config.mcp?.servers ?? {}) };\n  delete nextServers[instanceId];\n  config.mcp = {\n    ...(config.mcp ?? {}),\n    servers: nextServers,\n  };\n  return instance;\n}\n"],"mappings":";;;;;;;;kBAA4D;AAU5D,eAAsB,iBACpB,QACA,aACA,OACA,WAAW,IAAI,oBAAoB,EACP;CAC5B,MAAM,aAAa,uBAAuB,YAAY;AACtD,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,sBAAsB,cAAc;CAGtD,MAAM,EAAE,UAAU,WAAW,8BAA8B,YAAY,MAAM;CAC7E,MAAM,iBAAiB,OAAO,KAAK,UAAU;AAC7C,KAAI,kBAAkB,CAAC,yBAAyB,eAAe,CAC7D,OAAM,IAAI,MAAM,eAAe,SAAS,oDAAoD;AAG9F,OAAM,0BAA0B,YAAY,SAAS;AACrD,OAAM,qBAAqB,YAAY,OAAO,SAAS;AAEvD,QAAO,MAAM,OAAO,OAAO,EAAE;AAC7B,QAAO,IAAI,UAAU;EACnB,GAAI,OAAO,IAAI,WAAW,EAAE;GAC3B,WAAW;EACb;CAED,MAAM,WAAW,uBAAuB,OAAO,CAAC,MAAM,cAAc,UAAU,eAAe,SAAS;AACtG,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,cAAc,YAAY,4CAA4C;AAExF,4BAA2B,QAAQ,UAAU,EAAE,QAAQ,aAAa,CAAC;AACrE,QAAO;;AAGT,SAAgB,mBAAmB,QAAgB,YAAuC;CACxF,MAAM,SAAS,OAAO,KAAK,UAAU;AACrC,KAAI,CAAC,OACH,OAAM,IAAI,MAAM,iCAAiC,aAAa;AAEhE,KAAI,CAAC,yBAAyB,OAAO,CACnC,OAAM,IAAI,MAAM,eAAe,WAAW,iCAAiC;CAG7E,MAAM,WAAW,uBAAuB,OAAO,CAAC,MAAM,cAAc,UAAU,eAAe,WAAW;AACxG,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,iCAAiC,aAAa;AAEhE,4BAA2B,QAAQ,YAAY,EAAE,QAAQ,WAAW,CAAC;CAErE,MAAM,cAAc,EAAE,GAAI,OAAO,KAAK,WAAW,EAAE,EAAG;AACtD,QAAO,YAAY;AACnB,QAAO,MAAM;EACX,GAAI,OAAO,OAAO,EAAE;EACpB,SAAS;EACV;AACD,QAAO"}

package/dist/src/connectors/instances.d.ts

@@ -0,0 +1,4 @@
+import type { Config } from '../config/schema.js';
+import type { ConnectorInstance } from './types.js';
+export declare function listConnectorInstances(config: Config): ConnectorInstance[];
+export declare function getConnectorInstance(config: Config, instanceId: string): ConnectorInstance | undefined;

package/dist/src/connectors/instances.js

@@ -0,0 +1,43 @@
+import { getConnectorDefinition } from "./catalog.js";
+import { isManagedConnectorServer } from "./materialize.js";
+import { getConnectorAuditFromMarker, getConnectorUsageFromMarker } from "./usage.js";
+//#region src/connectors/instances.ts
+function secretStatusForServer(server) {
+	const marker = server.xopcConnector;
+	const definition = marker?.connectorId ? getConnectorDefinition(marker.connectorId) : void 0;
+	const env = server.env && typeof server.env === "object" && !Array.isArray(server.env) ? server.env : {};
+	const status = {};
+	for (const secret of definition?.setup.secrets ?? []) {
+		const value = env[secret.key];
+		status[secret.key] = Boolean(value && typeof value === "object" && !Array.isArray(value) && "xopcSecretRef" in value);
+	}
+	return status;
+}
+function listConnectorInstances(config) {
+	const servers = config.mcp?.servers ?? {};
+	return Object.entries(servers).flatMap(([serverId, server]) => {
+		if (!isManagedConnectorServer(server)) return [];
+		const connectorId = server.xopcConnector.connectorId;
+		return [{
+			instanceId: serverId,
+			connectorId,
+			displayName: getConnectorDefinition(connectorId)?.displayName ?? connectorId,
+			enabled: true,
+			status: "installed",
+			secretStatus: secretStatusForServer(server),
+			materialized: {
+				type: "mcp",
+				serverId
+			},
+			usage: getConnectorUsageFromMarker(server.xopcConnector),
+			audit: getConnectorAuditFromMarker(server.xopcConnector)
+		}];
+	}).sort((left, right) => left.displayName.localeCompare(right.displayName));
+}
+function getConnectorInstance(config, instanceId) {
+	return listConnectorInstances(config).find((instance) => instance.instanceId === instanceId);
+}
+//#endregion
+export { getConnectorInstance, listConnectorInstances };
+
+//# sourceMappingURL=instances.js.map

package/dist/src/connectors/instances.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instances.js","names":[],"sources":["../../../src/connectors/instances.ts"],"sourcesContent":["import type { Config } from '../config/schema.js';\nimport { getConnectorDefinition } from './catalog.js';\nimport { isManagedConnectorServer } from './materialize.js';\nimport { getConnectorAuditFromMarker, getConnectorUsageFromMarker } from './usage.js';\nimport type { ConnectorInstance } from './types.js';\n\nfunction secretStatusForServer(server: Record<string, unknown>): Record<string, boolean> {\n  const marker = server.xopcConnector as { connectorId?: string } | undefined;\n  const definition = marker?.connectorId ? getConnectorDefinition(marker.connectorId) : undefined;\n  const env = server.env && typeof server.env === 'object' && !Array.isArray(server.env)\n    ? (server.env as Record<string, unknown>)\n    : {};\n  const status: Record<string, boolean> = {};\n  for (const secret of definition?.setup.secrets ?? []) {\n    const value = env[secret.key];\n    status[secret.key] = Boolean(\n      value &&\n        typeof value === 'object' &&\n        !Array.isArray(value) &&\n        'xopcSecretRef' in value,\n    );\n  }\n  return status;\n}\n\nexport function listConnectorInstances(config: Config): ConnectorInstance[] {\n  const servers = config.mcp?.servers ?? {};\n  return Object.entries(servers)\n    .flatMap(([serverId, server]) => {\n      if (!isManagedConnectorServer(server)) {\n        return [];\n      }\n      const connectorId = server.xopcConnector.connectorId;\n      const definition = getConnectorDefinition(connectorId);\n      return [\n        {\n          instanceId: serverId,\n          connectorId,\n          displayName: definition?.displayName ?? connectorId,\n          enabled: true,\n          status: 'installed' as const,\n          secretStatus: secretStatusForServer(server),\n          materialized: {\n            type: 'mcp' as const,\n            serverId,\n          },\n          usage: getConnectorUsageFromMarker(server.xopcConnector),\n          audit: getConnectorAuditFromMarker(server.xopcConnector),\n        },\n      ];\n    })\n    .sort((left, right) => left.displayName.localeCompare(right.displayName));\n}\n\nexport function getConnectorInstance(config: Config, instanceId: string): ConnectorInstance | undefined {\n  return listConnectorInstances(config).find((instance) => instance.instanceId === instanceId);\n}\n"],"mappings":";;;;AAMA,SAAS,sBAAsB,QAA0D;CACvF,MAAM,SAAS,OAAO;CACtB,MAAM,aAAa,QAAQ,cAAc,uBAAuB,OAAO,YAAY,GAAG,KAAA;CACtF,MAAM,MAAM,OAAO,OAAO,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,OAAO,IAAI,GACjF,OAAO,MACR,EAAE;CACN,MAAM,SAAkC,EAAE;AAC1C,MAAK,MAAM,UAAU,YAAY,MAAM,WAAW,EAAE,EAAE;EACpD,MAAM,QAAQ,IAAI,OAAO;AACzB,SAAO,OAAO,OAAO,QACnB,SACE,OAAO,UAAU,YACjB,CAAC,MAAM,QAAQ,MAAM,IACrB,mBAAmB,MACtB;;AAEH,QAAO;;AAGT,SAAgB,uBAAuB,QAAqC;CAC1E,MAAM,UAAU,OAAO,KAAK,WAAW,EAAE;AACzC,QAAO,OAAO,QAAQ,QAAQ,CAC3B,SAAS,CAAC,UAAU,YAAY;AAC/B,MAAI,CAAC,yBAAyB,OAAO,CACnC,QAAO,EAAE;EAEX,MAAM,cAAc,OAAO,cAAc;AAEzC,SAAO,CACL;GACE,YAAY;GACZ;GACA,aALe,uBAAuB,YAKf,EAAE,eAAe;GACxC,SAAS;GACT,QAAQ;GACR,cAAc,sBAAsB,OAAO;GAC3C,cAAc;IACZ,MAAM;IACN;IACD;GACD,OAAO,4BAA4B,OAAO,cAAc;GACxD,OAAO,4BAA4B,OAAO,cAAc;GACzD,CACF;GACD,CACD,MAAM,MAAM,UAAU,KAAK,YAAY,cAAc,MAAM,YAAY,CAAC;;AAG7E,SAAgB,qBAAqB,QAAgB,YAAmD;AACtG,QAAO,uBAAuB,OAAO,CAAC,MAAM,aAAa,SAAS,eAAe,WAAW"}

package/dist/src/connectors/materialize.d.ts

@@ -0,0 +1,9 @@
+import type { ConnectorDefinition, ConnectorInstallInput, ManagedConnectorMarker } from './types.js';
+export declare function assertValidConnectorServerId(serverId: string): void;
+export declare function materializeConnectorMcpServer(definition: ConnectorDefinition, input: ConnectorInstallInput): {
+    serverId: string;
+    server: Record<string, unknown>;
+};
+export declare function isManagedConnectorServer(server: unknown): server is Record<string, unknown> & {
+    xopcConnector: ManagedConnectorMarker;
+};

package/dist/src/connectors/materialize.js

@@ -0,0 +1,76 @@
+import { McpServerSchema, init_schema } from "../config/schema.js";
+import { createConnectorSecretReference } from "./secret-store.js";
+//#region src/connectors/materialize.ts
+init_schema();
+const SERVER_ID_PATTERN = /^[a-z][a-z0-9_-]{0,63}$/;
+const TEMPLATE_PATTERN = /^\{\{(secrets|config)\.([A-Za-z0-9_.-]+)\}\}$/;
+function assertValidConnectorServerId(serverId) {
+	if (!SERVER_ID_PATTERN.test(serverId)) throw new Error("Connector server name must start with a lowercase letter and only contain lowercase letters, numbers, dashes, and underscores.");
+}
+function readInputValue(definition, input, scope, key) {
+	if (scope === "secrets") return createConnectorSecretReference(definition.id, key);
+	return input.config?.[key];
+}
+function resolveTemplateValue(value, definition, input) {
+	if (typeof value !== "string") return value;
+	const match = TEMPLATE_PATTERN.exec(value.trim());
+	if (!match) return value;
+	return readInputValue(definition, input, match[1], match[2]);
+}
+function materializeTemplate(value, definition, input) {
+	const resolved = resolveTemplateValue(value, definition, input);
+	if (Array.isArray(resolved)) return resolved.map((item) => materializeTemplate(item, definition, input));
+	if (resolved && typeof resolved === "object") {
+		const output = {};
+		for (const [key, child] of Object.entries(resolved)) {
+			const materializedChild = materializeTemplate(child, definition, input);
+			if (materializedChild !== void 0) output[key] = materializedChild;
+		}
+		return output;
+	}
+	return resolved;
+}
+function assertRequiredInputs(definition, input) {
+	for (const secret of definition.setup.secrets ?? []) {
+		const value = input.secrets?.[secret.key];
+		if (secret.required && (typeof value !== "string" || value.trim().length === 0)) throw new Error(`Missing required secret: ${secret.key}`);
+	}
+	for (const field of definition.setup.config ?? []) {
+		const value = input.config?.[field.key];
+		if (field.required && (value === void 0 || value === null || value === "")) throw new Error(`Missing required config: ${field.key}`);
+	}
+}
+function materializeConnectorMcpServer(definition, input) {
+	assertRequiredInputs(definition, input);
+	if (definition.runtime.type !== "mcp") throw new Error(`Unsupported connector runtime: ${definition.runtime.type}`);
+	const rawServerId = materializeTemplate(definition.runtime.serverId, definition, input);
+	if (typeof rawServerId !== "string") throw new Error("Connector server name must be a string.");
+	const serverId = rawServerId.trim();
+	assertValidConnectorServerId(serverId);
+	const rawServer = materializeTemplate(definition.runtime.serverTemplate, definition, input);
+	if (!rawServer || typeof rawServer !== "object" || Array.isArray(rawServer)) throw new Error("Connector MCP server template must resolve to a JSON object.");
+	const marker = {
+		managed: true,
+		connectorId: definition.id,
+		version: definition.version
+	};
+	const server = {
+		...rawServer,
+		xopcConnector: marker
+	};
+	const parsed = McpServerSchema.safeParse(server);
+	if (!parsed.success) throw new Error(parsed.error.issues[0]?.message ?? "Invalid MCP server config.");
+	return {
+		serverId,
+		server
+	};
+}
+function isManagedConnectorServer(server) {
+	if (!server || typeof server !== "object" || Array.isArray(server)) return false;
+	const marker = server.xopcConnector;
+	return Boolean(marker && typeof marker === "object" && !Array.isArray(marker) && marker.managed === true && typeof marker.connectorId === "string");
+}
+//#endregion
+export { assertValidConnectorServerId, isManagedConnectorServer, materializeConnectorMcpServer };
+
+//# sourceMappingURL=materialize.js.map

package/dist/src/connectors/materialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialize.js","names":[],"sources":["../../../src/connectors/materialize.ts"],"sourcesContent":["import { McpServerSchema } from '../config/schema.js';\nimport { createConnectorSecretReference } from './secret-store.js';\nimport type { ConnectorDefinition, ConnectorInstallInput, ManagedConnectorMarker } from './types.js';\n\nconst SERVER_ID_PATTERN = /^[a-z][a-z0-9_-]{0,63}$/;\nconst TEMPLATE_PATTERN = /^\\{\\{(secrets|config)\\.([A-Za-z0-9_.-]+)\\}\\}$/;\n\nexport function assertValidConnectorServerId(serverId: string): void {\n  if (!SERVER_ID_PATTERN.test(serverId)) {\n    throw new Error('Connector server name must start with a lowercase letter and only contain lowercase letters, numbers, dashes, and underscores.');\n  }\n}\n\nfunction readInputValue(\n  definition: ConnectorDefinition,\n  input: ConnectorInstallInput,\n  scope: 'secrets' | 'config',\n  key: string,\n): unknown {\n  if (scope === 'secrets') {\n    return createConnectorSecretReference(definition.id, key);\n  }\n  return input.config?.[key];\n}\n\nfunction resolveTemplateValue(value: unknown, definition: ConnectorDefinition, input: ConnectorInstallInput): unknown {\n  if (typeof value !== 'string') {\n    return value;\n  }\n  const match = TEMPLATE_PATTERN.exec(value.trim());\n  if (!match) {\n    return value;\n  }\n  return readInputValue(definition, input, match[1] as 'secrets' | 'config', match[2]);\n}\n\nfunction materializeTemplate(value: unknown, definition: ConnectorDefinition, input: ConnectorInstallInput): unknown {\n  const resolved = resolveTemplateValue(value, definition, input);\n  if (Array.isArray(resolved)) {\n    return resolved.map((item) => materializeTemplate(item, definition, input));\n  }\n  if (resolved && typeof resolved === 'object') {\n    const output: Record<string, unknown> = {};\n    for (const [key, child] of Object.entries(resolved as Record<string, unknown>)) {\n      const materializedChild = materializeTemplate(child, definition, input);\n      if (materializedChild !== undefined) {\n        output[key] = materializedChild;\n      }\n    }\n    return output;\n  }\n  return resolved;\n}\n\nfunction assertRequiredInputs(definition: ConnectorDefinition, input: ConnectorInstallInput): void {\n  for (const secret of definition.setup.secrets ?? []) {\n    const value = input.secrets?.[secret.key];\n    if (secret.required && (typeof value !== 'string' || value.trim().length === 0)) {\n      throw new Error(`Missing required secret: ${secret.key}`);\n    }\n  }\n  for (const field of definition.setup.config ?? []) {\n    const value = input.config?.[field.key];\n    if (field.required && (value === undefined || value === null || value === '')) {\n      throw new Error(`Missing required config: ${field.key}`);\n    }\n  }\n}\n\nexport function materializeConnectorMcpServer(\n  definition: ConnectorDefinition,\n  input: ConnectorInstallInput,\n): { serverId: string; server: Record<string, unknown> } {\n  assertRequiredInputs(definition, input);\n  if (definition.runtime.type !== 'mcp') {\n    throw new Error(`Unsupported connector runtime: ${definition.runtime.type}`);\n  }\n\n  const rawServerId = materializeTemplate(definition.runtime.serverId, definition, input);\n  if (typeof rawServerId !== 'string') {\n    throw new Error('Connector server name must be a string.');\n  }\n  const serverId = rawServerId.trim();\n  assertValidConnectorServerId(serverId);\n\n  const rawServer = materializeTemplate(definition.runtime.serverTemplate, definition, input);\n  if (!rawServer || typeof rawServer !== 'object' || Array.isArray(rawServer)) {\n    throw new Error('Connector MCP server template must resolve to a JSON object.');\n  }\n\n  const marker: ManagedConnectorMarker = {\n    managed: true,\n    connectorId: definition.id,\n    version: definition.version,\n  };\n  const server = {\n    ...(rawServer as Record<string, unknown>),\n    xopcConnector: marker,\n  };\n  const parsed = McpServerSchema.safeParse(server);\n  if (!parsed.success) {\n    throw new Error(parsed.error.issues[0]?.message ?? 'Invalid MCP server config.');\n  }\n  return { serverId, server };\n}\n\nexport function isManagedConnectorServer(server: unknown): server is Record<string, unknown> & { xopcConnector: ManagedConnectorMarker } {\n  if (!server || typeof server !== 'object' || Array.isArray(server)) {\n    return false;\n  }\n  const marker = (server as Record<string, unknown>).xopcConnector;\n  return Boolean(\n    marker &&\n      typeof marker === 'object' &&\n      !Array.isArray(marker) &&\n      (marker as Record<string, unknown>).managed === true &&\n      typeof (marker as Record<string, unknown>).connectorId === 'string',\n  );\n}\n"],"mappings":";;;aAAsD;AAItD,MAAM,oBAAoB;AAC1B,MAAM,mBAAmB;AAEzB,SAAgB,6BAA6B,UAAwB;AACnE,KAAI,CAAC,kBAAkB,KAAK,SAAS,CACnC,OAAM,IAAI,MAAM,iIAAiI;;AAIrJ,SAAS,eACP,YACA,OACA,OACA,KACS;AACT,KAAI,UAAU,UACZ,QAAO,+BAA+B,WAAW,IAAI,IAAI;AAE3D,QAAO,MAAM,SAAS;;AAGxB,SAAS,qBAAqB,OAAgB,YAAiC,OAAuC;AACpH,KAAI,OAAO,UAAU,SACnB,QAAO;CAET,MAAM,QAAQ,iBAAiB,KAAK,MAAM,MAAM,CAAC;AACjD,KAAI,CAAC,MACH,QAAO;AAET,QAAO,eAAe,YAAY,OAAO,MAAM,IAA4B,MAAM,GAAG;;AAGtF,SAAS,oBAAoB,OAAgB,YAAiC,OAAuC;CACnH,MAAM,WAAW,qBAAqB,OAAO,YAAY,MAAM;AAC/D,KAAI,MAAM,QAAQ,SAAS,CACzB,QAAO,SAAS,KAAK,SAAS,oBAAoB,MAAM,YAAY,MAAM,CAAC;AAE7E,KAAI,YAAY,OAAO,aAAa,UAAU;EAC5C,MAAM,SAAkC,EAAE;AAC1C,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAoC,EAAE;GAC9E,MAAM,oBAAoB,oBAAoB,OAAO,YAAY,MAAM;AACvE,OAAI,sBAAsB,KAAA,EACxB,QAAO,OAAO;;AAGlB,SAAO;;AAET,QAAO;;AAGT,SAAS,qBAAqB,YAAiC,OAAoC;AACjG,MAAK,MAAM,UAAU,WAAW,MAAM,WAAW,EAAE,EAAE;EACnD,MAAM,QAAQ,MAAM,UAAU,OAAO;AACrC,MAAI,OAAO,aAAa,OAAO,UAAU,YAAY,MAAM,MAAM,CAAC,WAAW,GAC3E,OAAM,IAAI,MAAM,4BAA4B,OAAO,MAAM;;AAG7D,MAAK,MAAM,SAAS,WAAW,MAAM,UAAU,EAAE,EAAE;EACjD,MAAM,QAAQ,MAAM,SAAS,MAAM;AACnC,MAAI,MAAM,aAAa,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IACxE,OAAM,IAAI,MAAM,4BAA4B,MAAM,MAAM;;;AAK9D,SAAgB,8BACd,YACA,OACuD;AACvD,sBAAqB,YAAY,MAAM;AACvC,KAAI,WAAW,QAAQ,SAAS,MAC9B,OAAM,IAAI,MAAM,kCAAkC,WAAW,QAAQ,OAAO;CAG9E,MAAM,cAAc,oBAAoB,WAAW,QAAQ,UAAU,YAAY,MAAM;AACvF,KAAI,OAAO,gBAAgB,SACzB,OAAM,IAAI,MAAM,0CAA0C;CAE5D,MAAM,WAAW,YAAY,MAAM;AACnC,8BAA6B,SAAS;CAEtC,MAAM,YAAY,oBAAoB,WAAW,QAAQ,gBAAgB,YAAY,MAAM;AAC3F,KAAI,CAAC,aAAa,OAAO,cAAc,YAAY,MAAM,QAAQ,UAAU,CACzE,OAAM,IAAI,MAAM,+DAA+D;CAGjF,MAAM,SAAiC;EACrC,SAAS;EACT,aAAa,WAAW;EACxB,SAAS,WAAW;EACrB;CACD,MAAM,SAAS;EACb,GAAI;EACJ,eAAe;EAChB;CACD,MAAM,SAAS,gBAAgB,UAAU,OAAO;AAChD,KAAI,CAAC,OAAO,QACV,OAAM,IAAI,MAAM,OAAO,MAAM,OAAO,IAAI,WAAW,6BAA6B;AAElF,QAAO;EAAE;EAAU;EAAQ;;AAG7B,SAAgB,yBAAyB,QAAgG;AACvI,KAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CAChE,QAAO;CAET,MAAM,SAAU,OAAmC;AACnD,QAAO,QACL,UACE,OAAO,WAAW,YAClB,CAAC,MAAM,QAAQ,OAAO,IACrB,OAAmC,YAAY,QAChD,OAAQ,OAAmC,gBAAgB,SAC9D"}

package/dist/src/connectors/oauth.d.ts

@@ -0,0 +1,22 @@
+import { CredentialResolver } from '../auth/credentials.js';
+import type { ConnectorDefinition } from './types.js';
+export type ConnectorOAuthStartResult = {
+    connectorId: string;
+    provider: 'github';
+    deviceCode: string;
+    userCode: string;
+    verificationUri: string;
+    expiresInSeconds: number;
+    intervalSeconds: number;
+};
+export type ConnectorOAuthCompleteResult = {
+    connectorId: string;
+    provider: 'github';
+    connected: true;
+};
+export declare function githubConnectorOAuthCredentialProviderId(definition: ConnectorDefinition): string;
+export declare function assertConnectorOAuthReady(definition: ConnectorDefinition, resolver?: CredentialResolver): Promise<void>;
+export declare function startConnectorOAuth(definition: ConnectorDefinition): Promise<ConnectorOAuthStartResult>;
+export declare function completeConnectorOAuth(definition: ConnectorDefinition, params: {
+    deviceCode: string;
+}, resolver?: CredentialResolver): Promise<ConnectorOAuthCompleteResult>;

package/dist/src/connectors/oauth.js

@@ -0,0 +1,99 @@
+import { CredentialResolver, init_credentials } from "../auth/credentials.js";
+import { connectorSecretProviderId } from "./secret-store.js";
+//#region src/connectors/oauth.ts
+init_credentials();
+const GITHUB_DEVICE_CODE_URL = "https://github.com/login/device/code";
+const GITHUB_ACCESS_TOKEN_URL = "https://github.com/login/oauth/access_token";
+const GITHUB_OAUTH_FIELD_KEY = "GITHUB_PERSONAL_ACCESS_TOKEN";
+const DEFAULT_GITHUB_SCOPES = [
+	"repo",
+	"read:user",
+	"read:org"
+];
+function githubOAuthClientId() {
+	const clientId = process.env.XOPC_GITHUB_OAUTH_CLIENT_ID?.trim() ?? "";
+	if (!clientId) throw new Error("GitHub OAuth is not configured. Set XOPC_GITHUB_OAUTH_CLIENT_ID to enable GitHub Connect.");
+	return clientId;
+}
+function assertConnectorSupportsOAuth(definition) {
+	if (definition.auth.mode !== "oauth" || !definition.capabilities.includes("auth.oauth")) throw new Error(`Connector "${definition.id}" does not support OAuth.`);
+	if (definition.id !== "github") throw new Error(`OAuth provider is not implemented for connector: ${definition.id}`);
+}
+async function readJsonResponse(response, context) {
+	const data = await response.json().catch(async () => ({ error_description: await response.text() }));
+	if (!response.ok) {
+		const errorData = data;
+		throw new Error(`${context}: ${errorData.error_description ?? errorData.error ?? response.statusText}`);
+	}
+	return data;
+}
+function githubConnectorOAuthCredentialProviderId(definition) {
+	return connectorSecretProviderId(definition.id, GITHUB_OAUTH_FIELD_KEY);
+}
+async function assertConnectorOAuthReady(definition, resolver = new CredentialResolver()) {
+	if (definition.auth.mode !== "oauth") return;
+	assertConnectorSupportsOAuth(definition);
+	if (!(await resolver.loadOAuthToken(githubConnectorOAuthCredentialProviderId(definition)))?.access) throw new Error(`Connect ${definition.displayName} with OAuth before installing this connector.`);
+}
+async function startConnectorOAuth(definition) {
+	assertConnectorSupportsOAuth(definition);
+	const clientId = githubOAuthClientId();
+	const data = await readJsonResponse(await fetch(GITHUB_DEVICE_CODE_URL, {
+		method: "POST",
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({
+			client_id: clientId,
+			scope: DEFAULT_GITHUB_SCOPES.join(" ")
+		})
+	}), "GitHub device authorization failed");
+	return {
+		connectorId: definition.id,
+		provider: "github",
+		deviceCode: data.device_code,
+		userCode: data.user_code,
+		verificationUri: data.verification_uri,
+		expiresInSeconds: data.expires_in,
+		intervalSeconds: data.interval ?? 5
+	};
+}
+async function completeConnectorOAuth(definition, params, resolver = new CredentialResolver()) {
+	assertConnectorSupportsOAuth(definition);
+	const deviceCode = params.deviceCode.trim();
+	if (!deviceCode) throw new Error("Missing GitHub OAuth device code.");
+	const data = await readJsonResponse(await fetch(GITHUB_ACCESS_TOKEN_URL, {
+		method: "POST",
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({
+			client_id: githubOAuthClientId(),
+			device_code: deviceCode,
+			grant_type: "urn:ietf:params:oauth:grant-type:device_code"
+		})
+	}), "GitHub token exchange failed");
+	if (data.error) {
+		if (data.error === "authorization_pending") throw new Error("GitHub authorization is still pending. Complete the browser step and try again.");
+		if (data.error === "slow_down") throw new Error("GitHub asked us to slow down. Wait a few seconds and try again.");
+		throw new Error(data.error_description ?? data.error);
+	}
+	if (!data.access_token) throw new Error("GitHub token exchange did not return an access token.");
+	await resolver.saveOAuthToken(githubConnectorOAuthCredentialProviderId(definition), {
+		access: data.access_token,
+		refresh: "",
+		scope: data.scope?.split(/\s+/).filter(Boolean),
+		createdAt: (/* @__PURE__ */ new Date()).toISOString()
+	});
+	return {
+		connectorId: definition.id,
+		provider: "github",
+		connected: true
+	};
+}
+//#endregion
+export { assertConnectorOAuthReady, completeConnectorOAuth, githubConnectorOAuthCredentialProviderId, startConnectorOAuth };
+
+//# sourceMappingURL=oauth.js.map

package/dist/src/connectors/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","names":[],"sources":["../../../src/connectors/oauth.ts"],"sourcesContent":["import { CredentialResolver } from '../auth/credentials.js';\nimport { connectorSecretProviderId } from './secret-store.js';\nimport type { ConnectorDefinition } from './types.js';\n\nexport type ConnectorOAuthStartResult = {\n  connectorId: string;\n  provider: 'github';\n  deviceCode: string;\n  userCode: string;\n  verificationUri: string;\n  expiresInSeconds: number;\n  intervalSeconds: number;\n};\n\nexport type ConnectorOAuthCompleteResult = {\n  connectorId: string;\n  provider: 'github';\n  connected: true;\n};\n\ntype GitHubDeviceCodeResponse = {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  expires_in: number;\n  interval?: number;\n};\n\ntype GitHubTokenResponse = {\n  access_token?: string;\n  token_type?: string;\n  scope?: string;\n  error?: string;\n  error_description?: string;\n  interval?: number;\n};\n\nconst GITHUB_DEVICE_CODE_URL = 'https://github.com/login/device/code';\nconst GITHUB_ACCESS_TOKEN_URL = 'https://github.com/login/oauth/access_token';\nconst GITHUB_OAUTH_FIELD_KEY = 'GITHUB_PERSONAL_ACCESS_TOKEN';\nconst DEFAULT_GITHUB_SCOPES = ['repo', 'read:user', 'read:org'];\n\nfunction githubOAuthClientId(): string {\n  const clientId = process.env.XOPC_GITHUB_OAUTH_CLIENT_ID?.trim() ?? '';\n  if (!clientId) {\n    throw new Error('GitHub OAuth is not configured. Set XOPC_GITHUB_OAUTH_CLIENT_ID to enable GitHub Connect.');\n  }\n  return clientId;\n}\n\nfunction assertConnectorSupportsOAuth(definition: ConnectorDefinition): void {\n  if (definition.auth.mode !== 'oauth' || !definition.capabilities.includes('auth.oauth')) {\n    throw new Error(`Connector \"${definition.id}\" does not support OAuth.`);\n  }\n  if (definition.id !== 'github') {\n    throw new Error(`OAuth provider is not implemented for connector: ${definition.id}`);\n  }\n}\n\nasync function readJsonResponse<T>(response: Response, context: string): Promise<T> {\n  const data = await response.json().catch(async () => ({ error_description: await response.text() }));\n  if (!response.ok) {\n    const errorData = data as { error_description?: string; error?: string };\n    throw new Error(`${context}: ${errorData.error_description ?? errorData.error ?? response.statusText}`);\n  }\n  return data as T;\n}\n\nexport function githubConnectorOAuthCredentialProviderId(definition: ConnectorDefinition): string {\n  return connectorSecretProviderId(definition.id, GITHUB_OAUTH_FIELD_KEY);\n}\n\nexport async function assertConnectorOAuthReady(\n  definition: ConnectorDefinition,\n  resolver = new CredentialResolver(),\n): Promise<void> {\n  if (definition.auth.mode !== 'oauth') {\n    return;\n  }\n  assertConnectorSupportsOAuth(definition);\n  const token = await resolver.loadOAuthToken(githubConnectorOAuthCredentialProviderId(definition));\n  if (!token?.access) {\n    throw new Error(`Connect ${definition.displayName} with OAuth before installing this connector.`);\n  }\n}\n\nexport async function startConnectorOAuth(definition: ConnectorDefinition): Promise<ConnectorOAuthStartResult> {\n  assertConnectorSupportsOAuth(definition);\n  const clientId = githubOAuthClientId();\n  const response = await fetch(GITHUB_DEVICE_CODE_URL, {\n    method: 'POST',\n    headers: {\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      client_id: clientId,\n      scope: DEFAULT_GITHUB_SCOPES.join(' '),\n    }),\n  });\n  const data = await readJsonResponse<GitHubDeviceCodeResponse>(response, 'GitHub device authorization failed');\n  return {\n    connectorId: definition.id,\n    provider: 'github',\n    deviceCode: data.device_code,\n    userCode: data.user_code,\n    verificationUri: data.verification_uri,\n    expiresInSeconds: data.expires_in,\n    intervalSeconds: data.interval ?? 5,\n  };\n}\n\nexport async function completeConnectorOAuth(\n  definition: ConnectorDefinition,\n  params: { deviceCode: string },\n  resolver = new CredentialResolver(),\n): Promise<ConnectorOAuthCompleteResult> {\n  assertConnectorSupportsOAuth(definition);\n  const deviceCode = params.deviceCode.trim();\n  if (!deviceCode) {\n    throw new Error('Missing GitHub OAuth device code.');\n  }\n\n  const response = await fetch(GITHUB_ACCESS_TOKEN_URL, {\n    method: 'POST',\n    headers: {\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      client_id: githubOAuthClientId(),\n      device_code: deviceCode,\n      grant_type: 'urn:ietf:params:oauth:grant-type:device_code',\n    }),\n  });\n  const data = await readJsonResponse<GitHubTokenResponse>(response, 'GitHub token exchange failed');\n  if (data.error) {\n    if (data.error === 'authorization_pending') {\n      throw new Error('GitHub authorization is still pending. Complete the browser step and try again.');\n    }\n    if (data.error === 'slow_down') {\n      throw new Error('GitHub asked us to slow down. Wait a few seconds and try again.');\n    }\n    throw new Error(data.error_description ?? data.error);\n  }\n  if (!data.access_token) {\n    throw new Error('GitHub token exchange did not return an access token.');\n  }\n\n  await resolver.saveOAuthToken(githubConnectorOAuthCredentialProviderId(definition), {\n    access: data.access_token,\n    refresh: '',\n    scope: data.scope?.split(/\\s+/).filter(Boolean),\n    createdAt: new Date().toISOString(),\n  });\n  return {\n    connectorId: definition.id,\n    provider: 'github',\n    connected: true,\n  };\n}\n"],"mappings":";;;kBAA4D;AAqC5D,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;AAChC,MAAM,yBAAyB;AAC/B,MAAM,wBAAwB;CAAC;CAAQ;CAAa;CAAW;AAE/D,SAAS,sBAA8B;CACrC,MAAM,WAAW,QAAQ,IAAI,6BAA6B,MAAM,IAAI;AACpE,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,4FAA4F;AAE9G,QAAO;;AAGT,SAAS,6BAA6B,YAAuC;AAC3E,KAAI,WAAW,KAAK,SAAS,WAAW,CAAC,WAAW,aAAa,SAAS,aAAa,CACrF,OAAM,IAAI,MAAM,cAAc,WAAW,GAAG,2BAA2B;AAEzE,KAAI,WAAW,OAAO,SACpB,OAAM,IAAI,MAAM,oDAAoD,WAAW,KAAK;;AAIxF,eAAe,iBAAoB,UAAoB,SAA6B;CAClF,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,MAAM,aAAa,EAAE,mBAAmB,MAAM,SAAS,MAAM,EAAE,EAAE;AACpG,KAAI,CAAC,SAAS,IAAI;EAChB,MAAM,YAAY;AAClB,QAAM,IAAI,MAAM,GAAG,QAAQ,IAAI,UAAU,qBAAqB,UAAU,SAAS,SAAS,aAAa;;AAEzG,QAAO;;AAGT,SAAgB,yCAAyC,YAAyC;AAChG,QAAO,0BAA0B,WAAW,IAAI,uBAAuB;;AAGzE,eAAsB,0BACpB,YACA,WAAW,IAAI,oBAAoB,EACpB;AACf,KAAI,WAAW,KAAK,SAAS,QAC3B;AAEF,8BAA6B,WAAW;AAExC,KAAI,EAAC,MADe,SAAS,eAAe,yCAAyC,WAAW,CAAC,GACrF,OACV,OAAM,IAAI,MAAM,WAAW,WAAW,YAAY,+CAA+C;;AAIrG,eAAsB,oBAAoB,YAAqE;AAC7G,8BAA6B,WAAW;CACxC,MAAM,WAAW,qBAAqB;CAYtC,MAAM,OAAO,MAAM,iBAA2C,MAXvC,MAAM,wBAAwB;EACnD,QAAQ;EACR,SAAS;GACP,QAAQ;GACR,gBAAgB;GACjB;EACD,MAAM,KAAK,UAAU;GACnB,WAAW;GACX,OAAO,sBAAsB,KAAK,IAAI;GACvC,CAAC;EACH,CAAC,EACsE,qCAAqC;AAC7G,QAAO;EACL,aAAa,WAAW;EACxB,UAAU;EACV,YAAY,KAAK;EACjB,UAAU,KAAK;EACf,iBAAiB,KAAK;EACtB,kBAAkB,KAAK;EACvB,iBAAiB,KAAK,YAAY;EACnC;;AAGH,eAAsB,uBACpB,YACA,QACA,WAAW,IAAI,oBAAoB,EACI;AACvC,8BAA6B,WAAW;CACxC,MAAM,aAAa,OAAO,WAAW,MAAM;AAC3C,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,oCAAoC;CAetD,MAAM,OAAO,MAAM,iBAAsC,MAZlC,MAAM,yBAAyB;EACpD,QAAQ;EACR,SAAS;GACP,QAAQ;GACR,gBAAgB;GACjB;EACD,MAAM,KAAK,UAAU;GACnB,WAAW,qBAAqB;GAChC,aAAa;GACb,YAAY;GACb,CAAC;EACH,CAAC,EACiE,+BAA+B;AAClG,KAAI,KAAK,OAAO;AACd,MAAI,KAAK,UAAU,wBACjB,OAAM,IAAI,MAAM,kFAAkF;AAEpG,MAAI,KAAK,UAAU,YACjB,OAAM,IAAI,MAAM,kEAAkE;AAEpF,QAAM,IAAI,MAAM,KAAK,qBAAqB,KAAK,MAAM;;AAEvD,KAAI,CAAC,KAAK,aACR,OAAM,IAAI,MAAM,wDAAwD;AAG1E,OAAM,SAAS,eAAe,yCAAyC,WAAW,EAAE;EAClF,QAAQ,KAAK;EACb,SAAS;EACT,OAAO,KAAK,OAAO,MAAM,MAAM,CAAC,OAAO,QAAQ;EAC/C,4BAAW,IAAI,MAAM,EAAC,aAAa;EACpC,CAAC;AACF,QAAO;EACL,aAAa,WAAW;EACxB,UAAU;EACV,WAAW;EACZ"}

package/dist/src/connectors/providers.d.ts

@@ -0,0 +1,9 @@
+import type { ConnectorDefinition } from './types.js';
+export type ConnectorProvider = {
+    id: string;
+    displayName: string;
+    listConnectors(): readonly ConnectorDefinition[];
+};
+export declare const builtinConnectorProvider: ConnectorProvider;
+export declare function listConnectorProviders(): ConnectorProvider[];
+export declare function listConnectorProviderDefinitions(): ConnectorDefinition[];

package/dist/src/connectors/providers.js

@@ -0,0 +1,20 @@
+import { BUILTIN_CONNECTORS } from "./builtin-catalog.js";
+//#region src/connectors/providers.ts
+const builtinConnectorProvider = {
+	id: "builtin",
+	displayName: "Built-in connectors",
+	listConnectors() {
+		return BUILTIN_CONNECTORS;
+	}
+};
+const CONNECTOR_PROVIDERS = [builtinConnectorProvider];
+function listConnectorProviders() {
+	return [...CONNECTOR_PROVIDERS];
+}
+function listConnectorProviderDefinitions() {
+	return CONNECTOR_PROVIDERS.flatMap((provider) => provider.listConnectors());
+}
+//#endregion
+export { builtinConnectorProvider, listConnectorProviderDefinitions, listConnectorProviders };
+
+//# sourceMappingURL=providers.js.map

package/dist/src/connectors/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","names":[],"sources":["../../../src/connectors/providers.ts"],"sourcesContent":["import { BUILTIN_CONNECTORS } from './builtin-catalog.js';\nimport type { ConnectorDefinition } from './types.js';\n\nexport type ConnectorProvider = {\n  id: string;\n  displayName: string;\n  listConnectors(): readonly ConnectorDefinition[];\n};\n\nexport const builtinConnectorProvider: ConnectorProvider = {\n  id: 'builtin',\n  displayName: 'Built-in connectors',\n  listConnectors() {\n    return BUILTIN_CONNECTORS;\n  },\n};\n\nconst CONNECTOR_PROVIDERS: readonly ConnectorProvider[] = [builtinConnectorProvider];\n\nexport function listConnectorProviders(): ConnectorProvider[] {\n  return [...CONNECTOR_PROVIDERS];\n}\n\nexport function listConnectorProviderDefinitions(): ConnectorDefinition[] {\n  return CONNECTOR_PROVIDERS.flatMap((provider) => provider.listConnectors());\n}\n"],"mappings":";;AASA,MAAa,2BAA8C;CACzD,IAAI;CACJ,aAAa;CACb,iBAAiB;AACf,SAAO;;CAEV;AAED,MAAM,sBAAoD,CAAC,yBAAyB;AAEpF,SAAgB,yBAA8C;AAC5D,QAAO,CAAC,GAAG,oBAAoB;;AAGjC,SAAgB,mCAA0D;AACxE,QAAO,oBAAoB,SAAS,aAAa,SAAS,gBAAgB,CAAC"}

package/dist/src/connectors/secret-store.d.ts

@@ -0,0 +1,7 @@
+import { CredentialResolver } from '../auth/credentials.js';
+import type { ConnectorDefinition, ConnectorInstallInput, ConnectorSecretReference } from './types.js';
+export declare function connectorSecretProviderId(connectorId: string, fieldKey: string): string;
+export declare function createConnectorSecretReference(connectorId: string, fieldKey: string): ConnectorSecretReference;
+export declare function isConnectorSecretReference(value: unknown): value is ConnectorSecretReference;
+export declare function saveConnectorSecrets(definition: ConnectorDefinition, input: ConnectorInstallInput, resolver?: CredentialResolver): Promise<void>;
+export declare function resolveConnectorSecretReferences(value: unknown, resolver?: CredentialResolver): Promise<unknown>;

package/dist/src/connectors/secret-store.js

@@ -0,0 +1,47 @@
+import { CredentialResolver, init_credentials } from "../auth/credentials.js";
+//#region src/connectors/secret-store.ts
+init_credentials();
+function normalizeSecretSegment(value) {
+	return value.trim().toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^-+|-+$/g, "");
+}
+function connectorSecretProviderId(connectorId, fieldKey) {
+	return `connector-${normalizeSecretSegment(connectorId)}-${normalizeSecretSegment(fieldKey)}`;
+}
+function createConnectorSecretReference(connectorId, fieldKey) {
+	return { xopcSecretRef: {
+		provider: connectorSecretProviderId(connectorId, fieldKey),
+		fieldKey
+	} };
+}
+function isConnectorSecretReference(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+	const ref = value.xopcSecretRef;
+	return Boolean(ref && typeof ref === "object" && !Array.isArray(ref) && typeof ref.provider === "string" && typeof ref.fieldKey === "string");
+}
+async function saveConnectorSecrets(definition, input, resolver = new CredentialResolver()) {
+	for (const secret of definition.setup.secrets ?? []) {
+		const rawValue = input.secrets?.[secret.key];
+		if (typeof rawValue !== "string" || rawValue.trim().length === 0) continue;
+		await resolver.saveApiKey(connectorSecretProviderId(definition.id, secret.key), rawValue.trim(), { profileName: "default" });
+	}
+}
+async function resolveSecretReference(reference, resolver) {
+	return await resolver.resolveApiKey(reference.xopcSecretRef.provider) ?? void 0;
+}
+async function resolveConnectorSecretReferences(value, resolver = new CredentialResolver()) {
+	if (isConnectorSecretReference(value)) return resolveSecretReference(value, resolver);
+	if (Array.isArray(value)) return (await Promise.all(value.map((item) => resolveConnectorSecretReferences(item, resolver)))).filter((item) => item !== void 0);
+	if (value && typeof value === "object") {
+		const output = {};
+		for (const [key, child] of Object.entries(value)) {
+			const resolved = await resolveConnectorSecretReferences(child, resolver);
+			if (resolved !== void 0) output[key] = resolved;
+		}
+		return output;
+	}
+	return value;
+}
+//#endregion
+export { connectorSecretProviderId, createConnectorSecretReference, isConnectorSecretReference, resolveConnectorSecretReferences, saveConnectorSecrets };
+
+//# sourceMappingURL=secret-store.js.map

package/dist/src/connectors/secret-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-store.js","names":[],"sources":["../../../src/connectors/secret-store.ts"],"sourcesContent":["import { CredentialResolver } from '../auth/credentials.js';\nimport type { ConnectorDefinition, ConnectorInstallInput, ConnectorSecretReference } from './types.js';\n\nfunction normalizeSecretSegment(value: string): string {\n  return value.trim().toLowerCase().replace(/[^a-z0-9_-]+/g, '-').replace(/^-+|-+$/g, '');\n}\n\nexport function connectorSecretProviderId(connectorId: string, fieldKey: string): string {\n  const normalizedConnectorId = normalizeSecretSegment(connectorId);\n  const normalizedFieldKey = normalizeSecretSegment(fieldKey);\n  return `connector-${normalizedConnectorId}-${normalizedFieldKey}`;\n}\n\nexport function createConnectorSecretReference(connectorId: string, fieldKey: string): ConnectorSecretReference {\n  return {\n    xopcSecretRef: {\n      provider: connectorSecretProviderId(connectorId, fieldKey),\n      fieldKey,\n    },\n  };\n}\n\nexport function isConnectorSecretReference(value: unknown): value is ConnectorSecretReference {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) {\n    return false;\n  }\n  const ref = (value as Record<string, unknown>).xopcSecretRef;\n  return Boolean(\n    ref &&\n      typeof ref === 'object' &&\n      !Array.isArray(ref) &&\n      typeof (ref as Record<string, unknown>).provider === 'string' &&\n      typeof (ref as Record<string, unknown>).fieldKey === 'string',\n  );\n}\n\nexport async function saveConnectorSecrets(\n  definition: ConnectorDefinition,\n  input: ConnectorInstallInput,\n  resolver = new CredentialResolver(),\n): Promise<void> {\n  for (const secret of definition.setup.secrets ?? []) {\n    const rawValue = input.secrets?.[secret.key];\n    if (typeof rawValue !== 'string' || rawValue.trim().length === 0) {\n      continue;\n    }\n    await resolver.saveApiKey(connectorSecretProviderId(definition.id, secret.key), rawValue.trim(), {\n      profileName: 'default',\n    });\n  }\n}\n\nasync function resolveSecretReference(\n  reference: ConnectorSecretReference,\n  resolver: CredentialResolver,\n): Promise<string | undefined> {\n  const value = await resolver.resolveApiKey(reference.xopcSecretRef.provider);\n  return value ?? undefined;\n}\n\nexport async function resolveConnectorSecretReferences(\n  value: unknown,\n  resolver = new CredentialResolver(),\n): Promise<unknown> {\n  if (isConnectorSecretReference(value)) {\n    return resolveSecretReference(value, resolver);\n  }\n  if (Array.isArray(value)) {\n    const items = await Promise.all(value.map((item) => resolveConnectorSecretReferences(item, resolver)));\n    return items.filter((item) => item !== undefined);\n  }\n  if (value && typeof value === 'object') {\n    const output: Record<string, unknown> = {};\n    for (const [key, child] of Object.entries(value as Record<string, unknown>)) {\n      const resolved = await resolveConnectorSecretReferences(child, resolver);\n      if (resolved !== undefined) {\n        output[key] = resolved;\n      }\n    }\n    return output;\n  }\n  return value;\n}\n"],"mappings":";;kBAA4D;AAG5D,SAAS,uBAAuB,OAAuB;AACrD,QAAO,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,iBAAiB,IAAI,CAAC,QAAQ,YAAY,GAAG;;AAGzF,SAAgB,0BAA0B,aAAqB,UAA0B;AAGvF,QAAO,aAFuB,uBAAuB,YAEZ,CAAC,GADf,uBAAuB,SACa;;AAGjE,SAAgB,+BAA+B,aAAqB,UAA4C;AAC9G,QAAO,EACL,eAAe;EACb,UAAU,0BAA0B,aAAa,SAAS;EAC1D;EACD,EACF;;AAGH,SAAgB,2BAA2B,OAAmD;AAC5F,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,QAAO;CAET,MAAM,MAAO,MAAkC;AAC/C,QAAO,QACL,OACE,OAAO,QAAQ,YACf,CAAC,MAAM,QAAQ,IAAI,IACnB,OAAQ,IAAgC,aAAa,YACrD,OAAQ,IAAgC,aAAa,SACxD;;AAGH,eAAsB,qBACpB,YACA,OACA,WAAW,IAAI,oBAAoB,EACpB;AACf,MAAK,MAAM,UAAU,WAAW,MAAM,WAAW,EAAE,EAAE;EACnD,MAAM,WAAW,MAAM,UAAU,OAAO;AACxC,MAAI,OAAO,aAAa,YAAY,SAAS,MAAM,CAAC,WAAW,EAC7D;AAEF,QAAM,SAAS,WAAW,0BAA0B,WAAW,IAAI,OAAO,IAAI,EAAE,SAAS,MAAM,EAAE,EAC/F,aAAa,WACd,CAAC;;;AAIN,eAAe,uBACb,WACA,UAC6B;AAE7B,QAAO,MADa,SAAS,cAAc,UAAU,cAAc,SAAS,IAC5D,KAAA;;AAGlB,eAAsB,iCACpB,OACA,WAAW,IAAI,oBAAoB,EACjB;AAClB,KAAI,2BAA2B,MAAM,CACnC,QAAO,uBAAuB,OAAO,SAAS;AAEhD,KAAI,MAAM,QAAQ,MAAM,CAEtB,SAAO,MADa,QAAQ,IAAI,MAAM,KAAK,SAAS,iCAAiC,MAAM,SAAS,CAAC,CAAC,EACzF,QAAQ,SAAS,SAAS,KAAA,EAAU;AAEnD,KAAI,SAAS,OAAO,UAAU,UAAU;EACtC,MAAM,SAAkC,EAAE;AAC1C,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAiC,EAAE;GAC3E,MAAM,WAAW,MAAM,iCAAiC,OAAO,SAAS;AACxE,OAAI,aAAa,KAAA,EACf,QAAO,OAAO;;AAGlB,SAAO;;AAET,QAAO"}