@zackbart/connecta 0.1.0

package/dist/connectors/api.d.ts

@@ -0,0 +1,34 @@
+import type { Connector, ConnectorCredentialConfig, ConnectorCredentialValues, ConnectorContext, CredentialTestResult, JsonSchema, ToolAnnotations } from "../types.js";
+export interface ApiTool {
+    name: string;
+    description?: string;
+    /** A plain JSON Schema object describing the tool input. */
+    inputSchema?: JsonSchema;
+    /** A plain JSON Schema object describing the tool's structured output. */
+    outputSchema?: JsonSchema;
+    /**
+     * Standard MCP-style behavior hints. Only an explicit readOnlyHint: true
+     * admits the tool to call_tool, batch_call, and execute_code.
+     */
+    annotations?: ToolAnnotations;
+    handler: (args: any, ctx: ConnectorContext) => Promise<unknown> | unknown;
+}
+export interface ApiOptions {
+    /** Human-readable display name; the connector id remains the address prefix. */
+    title?: string;
+    description?: string;
+    /** Optional operator-managed credential exposed through ctx.credential and /ui. */
+    credential?: ConnectorCredentialConfig;
+    /** Optional validation behind /ui's Test action. */
+    testCredential?: (value: string, ctx: ConnectorContext) => Promise<CredentialTestResult>;
+    /** Optional validation for named multi-field credentials. */
+    testCredentials?: (values: ConnectorCredentialValues, ctx: ConnectorContext) => Promise<CredentialTestResult>;
+    tools: ApiTool[];
+}
+/**
+ * A connector defined entirely in code: static tool defs + fetch handlers.
+ * Tool inputs are plain JSON Schema objects (bring your own zod-to-json-schema
+ * conversion if you prefer zod). call_tool JSON-wraps the handler's return.
+ */
+export declare function api(id: string, opts: ApiOptions): Connector;
+//# sourceMappingURL=api.d.ts.map

package/dist/connectors/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/connectors/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,yBAAyB,EACzB,yBAAyB,EACzB,gBAAgB,EAChB,oBAAoB,EACpB,UAAU,EACV,eAAe,EAEhB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC3E;AAED,MAAM,WAAW,UAAU;IACzB,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC,oDAAoD;IACpD,cAAc,CAAC,EAAE,CACf,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,gBAAgB,KAClB,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACnC,6DAA6D;IAC7D,eAAe,CAAC,EAAE,CAChB,MAAM,EAAE,yBAAyB,EACjC,GAAG,EAAE,gBAAgB,KAClB,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACnC,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,SAAS,CA6B3D"}

package/dist/connectors/api.js

@@ -0,0 +1,36 @@
+/**
+ * A connector defined entirely in code: static tool defs + fetch handlers.
+ * Tool inputs are plain JSON Schema objects (bring your own zod-to-json-schema
+ * conversion if you prefer zod). call_tool JSON-wraps the handler's return.
+ */
+export function api(id, opts) {
+    const defs = opts.tools.map((t) => ({
+        name: t.name,
+        description: t.description,
+        inputSchema: t.inputSchema,
+        outputSchema: t.outputSchema,
+        annotations: t.annotations,
+    }));
+    const byName = new Map(opts.tools.map((t) => [t.name, t]));
+    return {
+        id,
+        title: opts.title,
+        kind: "api",
+        description: opts.description,
+        credential: opts.credential,
+        testCredential: opts.testCredential,
+        testCredentials: opts.testCredentials,
+        staticTools: defs,
+        async listTools() {
+            return defs;
+        },
+        async callTool(name, args, ctx) {
+            const tool = byName.get(name);
+            if (!tool) {
+                throw new Error(`Unknown tool "${name}" on connector "${id}"`);
+            }
+            return tool.handler(args ?? {}, ctx);
+        },
+    };
+}
+//# sourceMappingURL=api.js.map

package/dist/connectors/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/connectors/api.ts"],"names":[],"mappings":"AA6CA;;;;GAIG;AACH,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,IAAgB;IAC9C,MAAM,IAAI,GAAc,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;KAC3B,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO;QACL,EAAE;QACF,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,WAAW,EAAE,IAAI;QACjB,KAAK,CAAC,SAAS;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG;YAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,mBAAmB,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/connectors/remote-mcp.d.ts

@@ -0,0 +1,33 @@
+import type { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
+import type { Connector, ConnectorContext } from "../types.js";
+export type RemoteMcpAuth = {
+    type: "headers";
+    headers: Record<string, string>;
+} | {
+    type: "oauth";
+};
+export interface RemoteMcpOptions {
+    url: string;
+    /** Human-readable display name; the connector id remains the address prefix. */
+    title?: string;
+    description?: string;
+    auth?: RemoteMcpAuth;
+    /**
+     * @internal Testing seam. When set, this transport is used instead of the
+     * HTTP transport, letting tests point the connector at an in-process MCP
+     * server (e.g. via InMemoryTransport). Not part of the public API.
+     */
+    _transportFactory?: (ctx: ConnectorContext) => Transport;
+}
+/**
+ * Proxy a downstream remote MCP server. SDK clients and transports are scoped
+ * to one inbound request: reused by calls within a batch/execute_code run, but
+ * never carried into a later Cloudflare Worker request. Static-header auth
+ * passes headers via requestInit; "oauth" runs the full downstream OAuth flow
+ * via KvOAuthProvider.
+ *
+ * Auth failures degrade the connector to "auth_required" (never crash the
+ * server or hide other connectors).
+ */
+export declare function remoteMcp(id: string, opts: RemoteMcpOptions): Connector;
+//# sourceMappingURL=remote-mcp.d.ts.map

package/dist/connectors/remote-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-mcp.d.ts","sourceRoot":"","sources":["../../src/connectors/remote-mcp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAG/E,OAAO,KAAK,EACV,SAAS,EACT,gBAAgB,EAGjB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,SAAS,CAAC;CAC1D;AAeD;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,SAAS,CA6QvE"}

package/dist/connectors/remote-mcp.js

@@ -0,0 +1,255 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { UnauthorizedError } from "@modelcontextprotocol/sdk/client/auth.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { CfWorkerJsonSchemaValidator } from "@modelcontextprotocol/sdk/validation/cfworker";
+import { KvOAuthProvider } from "../auth/downstream-oauth.js";
+function msg(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+/**
+ * Proxy a downstream remote MCP server. SDK clients and transports are scoped
+ * to one inbound request: reused by calls within a batch/execute_code run, but
+ * never carried into a later Cloudflare Worker request. Static-header auth
+ * passes headers via requestInit; "oauth" runs the full downstream OAuth flow
+ * via KvOAuthProvider.
+ *
+ * Auth failures degrade the connector to "auth_required" (never crash the
+ * server or hide other connectors).
+ */
+export function remoteMcp(id, opts) {
+    // Weak keys ensure a completed request does not leave its SDK client,
+    // transport, response bodies, AbortSignals, or connection promise reachable
+    // from the isolate singleton. Those are request-bound in Cloudflare Workers.
+    const states = new WeakMap();
+    const isOauth = opts.auth?.type === "oauth";
+    const stateFor = (ctx) => {
+        const scope = ctx.requestScope ?? ctx;
+        let state = states.get(scope);
+        if (!state) {
+            state = {
+                client: null,
+                transport: null,
+                connecting: null,
+                authRequired: false,
+                provider: null,
+                connectedGeneration: null,
+            };
+            states.set(scope, state);
+        }
+        return state;
+    };
+    const getProvider = (ctx, state) => {
+        state.provider ??= new KvOAuthProvider(id, ctx.storage, `${ctx.baseUrl}/oauth/callback/${id}`);
+        return state.provider;
+    };
+    const buildTransport = (ctx, state) => {
+        if (opts._transportFactory)
+            return opts._transportFactory(ctx);
+        const url = new URL(opts.url);
+        if (opts.auth?.type === "oauth") {
+            return new StreamableHTTPClientTransport(url, {
+                authProvider: getProvider(ctx, state),
+            });
+        }
+        const headers = opts.auth?.type === "headers" ? opts.auth.headers : undefined;
+        return new StreamableHTTPClientTransport(url, headers ? { requestInit: { headers } } : undefined);
+    };
+    const reset = (state) => {
+        state.client = null;
+        state.transport = null;
+        state.connecting = null;
+        state.authRequired = false;
+        state.connectedGeneration = null;
+    };
+    const ensureConnected = async (ctx, state) => {
+        // Cross-isolate force re-auth: another isolate bumped the KV generation and
+        // wiped credentials. This request's cached client still speaks the old
+        // token — drop it so the next connect runs against current state.
+        if (state.client && isOauth && state.connectedGeneration !== null) {
+            if ((await getProvider(ctx, state).generation()) !==
+                state.connectedGeneration) {
+                reset(state);
+            }
+        }
+        if (state.client)
+            return;
+        state.connecting ??= (async () => {
+            const provider = isOauth ? getProvider(ctx, state) : null;
+            const genAtStart = provider ? await provider.generation() : 0;
+            // Stamp the provider so any saveTokens/saveClientInformation the SDK fires
+            // during this connect (code exchange, DCR) — or during a later refresh on
+            // the resulting client — is dropped if a concurrent force bumps the
+            // generation past this point, instead of re-persisting wiped credentials.
+            provider?.captureGeneration(genAtStart);
+            // The SDK defaults to AJV, which compiles every advertised outputSchema
+            // with `new Function`. Cloudflare Workers prohibit dynamic code
+            // generation, so a remote such as Stripe fails during tools/list unless
+            // the SDK's edge-safe validator is selected explicitly.
+            const c = new Client({ name: "connecta", version: "0.1.0" }, { jsonSchemaValidator: new CfWorkerJsonSchemaValidator() });
+            const t = buildTransport(ctx, state);
+            state.transport = t;
+            try {
+                await c.connect(t);
+                // A force re-auth that landed WHILE we were connecting wiped the creds
+                // this client just bound to. Discard it rather than cache a connection
+                // that resurrects the wiped-and-reauthorized connector from a stale
+                // isolate. Surfaces as auth_required — the connector genuinely needs
+                // re-consent now.
+                if (provider && (await provider.generation()) !== genAtStart) {
+                    try {
+                        await c.close();
+                    }
+                    catch {
+                        // discarding either way
+                    }
+                    throw new UnauthorizedError("Connector was re-authorized during connect; reconnect required.");
+                }
+                state.client = c;
+                state.connectedGeneration = genAtStart;
+                state.authRequired = false;
+            }
+            catch (err) {
+                // Only a real 401/UnauthorizedError means auth is the problem — a
+                // network error on an oauth connector must surface as "error", not
+                // "auth_required".
+                if (err instanceof UnauthorizedError) {
+                    state.authRequired = true;
+                }
+                throw err;
+            }
+            finally {
+                state.connecting = null;
+            }
+        })();
+        return state.connecting;
+    };
+    const connector = {
+        id,
+        title: opts.title,
+        kind: "mcp",
+        description: opts.description,
+        async listTools(ctx) {
+            const state = stateFor(ctx);
+            await ensureConnected(ctx, state);
+            const res = await state.client.listTools();
+            return res.tools.map((t) => ({
+                name: t.name,
+                description: t.description,
+                inputSchema: t.inputSchema,
+                outputSchema: t.outputSchema,
+                annotations: t.annotations,
+            }));
+        },
+        async callTool(name, args, ctx) {
+            const state = stateFor(ctx);
+            await ensureConnected(ctx, state);
+            return state.client.callTool({
+                name,
+                arguments: (args ?? {}),
+            }, undefined, ctx.timeoutMs || ctx.signal
+                ? {
+                    ...(ctx.timeoutMs ? { timeout: ctx.timeoutMs } : {}),
+                    ...(ctx.signal ? { signal: ctx.signal } : {}),
+                }
+                : undefined);
+        },
+        async status(ctx) {
+            const state = stateFor(ctx);
+            try {
+                await ensureConnected(ctx, state);
+                return { state: "ok" };
+            }
+            catch (err) {
+                if (state.authRequired) {
+                    const url = await getProvider(ctx, state).pendingAuthorizationUrl();
+                    return {
+                        state: "auth_required",
+                        authorizationUrl: url,
+                        message: "Authorization required — open the URL to connect.",
+                    };
+                }
+                return { state: "error", message: msg(err) };
+            }
+        },
+        async finishAuth(code, ctx) {
+            const state = stateFor(ctx);
+            const provider = getProvider(ctx, state);
+            // The provider here may carry no captured generation, so its token saves
+            // fail open. That is safe only because generation advances solely via the
+            // force path, which always wipes oauth:state — so verifyState rejects any
+            // pre-force callback before this runs. Keep those two facts coupled.
+            const t = (state.transport ??
+                buildTransport(ctx, state));
+            await t.finishAuth(code);
+            await provider.clearPending();
+            // Reset so the next use reconnects with the freshly stored tokens.
+            reset(state);
+        },
+    };
+    if (opts.auth?.type === "oauth") {
+        connector.verifyState = async (oauthState, ctx) => {
+            const state = stateFor(ctx);
+            return getProvider(ctx, state).verifyState(oauthState);
+        };
+        connector.startAuth = async (ctx, startOpts) => {
+            const state = stateFor(ctx);
+            const p = getProvider(ctx, state);
+            if (startOpts?.force) {
+                // Wipe stored credentials and drop the live connection so the next
+                // connect attempt runs the flow from scratch (DCR + PKCE + consent).
+                // Fence the in-flight connect first: a late-completing attempt must not
+                // resurrect the credentials we're about to wipe, nor leave `client` set
+                // (which would make ensureConnected below report already-authorized and
+                // silently defeat force).
+                await state.connecting?.catch(() => { });
+                try {
+                    await state.client?.close();
+                }
+                catch {
+                    // best-effort; the connection is being discarded either way
+                }
+                // Bump the shared generation FIRST so any other isolate — one mid-
+                // connect, or on its next tool call — sees the advance and drops its
+                // client instead of keeping the token we're about to revoke.
+                await p.bumpGeneration();
+                // Wipe KV before dropping in-memory state so nothing racing back in can
+                // write tokens over a half-cleared slot.
+                await p.invalidateCredentials("all");
+                await p.clearPending();
+                reset(state);
+            }
+            else {
+                // A consent URL already outstanding? Re-issue it rather than re-running
+                // the SDK flow, which would overwrite the PKCE verifier and invalidate
+                // the URL the operator may be mid-consent on.
+                const pending = await p.pendingAuthorizationUrl();
+                if (pending) {
+                    return {
+                        state: "auth_required",
+                        authorizationUrl: pending,
+                        message: "Authorization required — open the URL to connect.",
+                    };
+                }
+            }
+            try {
+                await ensureConnected(ctx, state);
+                return {
+                    state: "ok",
+                    message: "Already authorized — connection is healthy.",
+                };
+            }
+            catch (err) {
+                if (state.authRequired) {
+                    return {
+                        state: "auth_required",
+                        authorizationUrl: await p.pendingAuthorizationUrl(),
+                        message: "Authorization required — open the URL to connect.",
+                    };
+                }
+                return { state: "error", message: msg(err) };
+            }
+        };
+    }
+    return connector;
+}
+//# sourceMappingURL=remote-mcp.js.map

package/dist/connectors/remote-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-mcp.js","sourceRoot":"","sources":["../../src/connectors/remote-mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AA0B9D,SAAS,GAAG,CAAC,GAAY;IACvB,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAWD;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,EAAU,EAAE,IAAsB;IAC1D,sEAAsE;IACtE,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,IAAI,OAAO,EAA2B,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC;IAE5C,MAAM,QAAQ,GAAG,CAAC,GAAqB,EAAmB,EAAE;QAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC;QACtC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG;gBACN,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,KAAK;gBACnB,QAAQ,EAAE,IAAI;gBACd,mBAAmB,EAAE,IAAI;aAC1B,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAClB,GAAqB,EACrB,KAAsB,EACL,EAAE;QACnB,KAAK,CAAC,QAAQ,KAAK,IAAI,eAAe,CACpC,EAAE,EACF,GAAG,CAAC,OAAO,EACX,GAAG,GAAG,CAAC,OAAO,mBAAmB,EAAE,EAAE,CACtC,CAAC;QACF,OAAO,KAAK,CAAC,QAAQ,CAAC;IACxB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,CACrB,GAAqB,EACrB,KAAsB,EACX,EAAE;QACb,IAAI,IAAI,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YAChC,OAAO,IAAI,6BAA6B,CAAC,GAAG,EAAE;gBAC5C,YAAY,EAAE,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,OAAO,IAAI,6BAA6B,CACtC,GAAG,EACH,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CACnD,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,KAAsB,EAAE,EAAE;QACvC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;QACxB,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;QAC3B,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;IACnC,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAC3B,GAAqB,EACrB,KAAsB,EACP,EAAE;QACjB,4EAA4E;QAC5E,uEAAuE;QACvE,kEAAkE;QAClE,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,KAAK,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;YAClE,IACE,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;gBAC5C,KAAK,CAAC,mBAAmB,EACzB,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO;QACzB,KAAK,CAAC,UAAU,KAAK,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,2EAA2E;YAC3E,0EAA0E;YAC1E,oEAAoE;YACpE,0EAA0E;YAC1E,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACxC,wEAAwE;YACxE,gEAAgE;YAChE,wEAAwE;YACxE,wDAAwD;YACxD,MAAM,CAAC,GAAG,IAAI,MAAM,CAClB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EACtC,EAAE,mBAAmB,EAAE,IAAI,2BAA2B,EAAE,EAAE,CAC3D,CAAC;YACF,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACrC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACnB,uEAAuE;gBACvE,uEAAuE;gBACvE,oEAAoE;gBACpE,qEAAqE;gBACrE,kBAAkB;gBAClB,IAAI,QAAQ,IAAI,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,UAAU,EAAE,CAAC;oBAC7D,IAAI,CAAC;wBACH,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;oBAClB,CAAC;oBAAC,MAAM,CAAC;wBACP,wBAAwB;oBAC1B,CAAC;oBACD,MAAM,IAAI,iBAAiB,CACzB,iEAAiE,CAClE,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;gBACjB,KAAK,CAAC,mBAAmB,GAAG,UAAU,CAAC;gBACvC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,kEAAkE;gBAClE,mEAAmE;gBACnE,mBAAmB;gBACnB,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;oBACrC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;gBAC5B,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,KAAK,CAAC,UAAU,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,SAAS,GAAc;QAC3B,EAAE;QACF,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,IAAI,CAAC,WAAW;QAE7B,KAAK,CAAC,SAAS,CAAC,GAAG;YACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAO,CAAC,SAAS,EAAE,CAAC;YAC5C,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAClB,CAAC,CAAC,EAAW,EAAE,CAAC,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,WAAqC;gBACpD,YAAY,EAAE,CAAC,CAAC,YAAuC;gBACvD,WAAW,EAAE,CAAC,CAAC,WAAqC;aACrD,CAAC,CACH,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG;YAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC,MAAO,CAAC,QAAQ,CAC3B;gBACE,IAAI;gBACJ,SAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B;aACnD,EACD,SAAS,EACT,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM;gBACzB,CAAC,CAAC;oBACE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9C;gBACH,CAAC,CAAC,SAAS,CACd,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAClC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;oBACvB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,uBAAuB,EAAE,CAAC;oBACpE,OAAO;wBACL,KAAK,EAAE,eAAe;wBACtB,gBAAgB,EAAE,GAAG;wBACrB,OAAO,EAAE,mDAAmD;qBAC7D,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG;YACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzC,yEAAyE;YACzE,0EAA0E;YAC1E,0EAA0E;YAC1E,qEAAqE;YACrE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS;gBACxB,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAkC,CAAC;YAC/D,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACzB,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC9B,mEAAmE;YACnE,KAAK,CAAC,KAAK,CAAC,CAAC;QACf,CAAC;KACF,CAAC;IAEF,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,SAAS,CAAC,WAAW,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACzD,CAAC,CAAC;QAEF,SAAS,CAAC,SAAS,GAAG,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;YAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,SAAS,EAAE,KAAK,EAAE,CAAC;gBACrB,mEAAmE;gBACnE,qEAAqE;gBACrE,wEAAwE;gBACxE,wEAAwE;gBACxE,wEAAwE;gBACxE,0BAA0B;gBAC1B,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACxC,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBAC9B,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;gBACD,mEAAmE;gBACnE,qEAAqE;gBACrE,6DAA6D;gBAC7D,MAAM,CAAC,CAAC,cAAc,EAAE,CAAC;gBACzB,wEAAwE;gBACxE,yCAAyC;gBACzC,MAAM,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;gBACrC,MAAM,CAAC,CAAC,YAAY,EAAE,CAAC;gBACvB,KAAK,CAAC,KAAK,CAAC,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,wEAAwE;gBACxE,uEAAuE;gBACvE,8CAA8C;gBAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,uBAAuB,EAAE,CAAC;gBAClD,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;wBACL,KAAK,EAAE,eAAe;wBACtB,gBAAgB,EAAE,OAAO;wBACzB,OAAO,EAAE,mDAAmD;qBAC7D,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAClC,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,6CAA6C;iBACvD,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;oBACvB,OAAO;wBACL,KAAK,EAAE,eAAe;wBACtB,gBAAgB,EAAE,MAAM,CAAC,CAAC,uBAAuB,EAAE;wBACnD,OAAO,EAAE,mDAAmD;qBAC7D,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/credentials.d.ts

@@ -0,0 +1,33 @@
+import type { ConnectorCredentialValues, KVStorage } from "./types.js";
+export interface CredentialFieldMetadata {
+    configured: true;
+    lastFour: string;
+    updatedAt: string;
+}
+export interface CredentialMetadata {
+    configured: true;
+    /** Backward-compatible metadata for the reserved single credential field. */
+    lastFour?: string;
+    updatedAt: string;
+    /** Per-field masked metadata for named multi-value credentials. */
+    fields?: Record<string, CredentialFieldMetadata>;
+}
+/**
+ * Encrypted, connector-scoped credential vault over the deployment's existing
+ * KVStorage. Only ciphertext enters KV; the AES-GCM key remains an environment
+ * secret outside the store.
+ */
+export declare class CredentialVault {
+    private readonly storage;
+    private readonly key;
+    constructor(storage: KVStorage, encryptionKey: string);
+    private additionalData;
+    private read;
+    get(connectorId: string, field?: string): Promise<string | null>;
+    getAll(connectorId: string): Promise<ConnectorCredentialValues | null>;
+    metadata(connectorId: string): Promise<CredentialMetadata | null>;
+    set(connectorId: string, value: string, updatedBy: string): Promise<CredentialMetadata>;
+    setAll(connectorId: string, values: ConnectorCredentialValues, updatedBy: string): Promise<CredentialMetadata>;
+    delete(connectorId: string): Promise<void>;
+}
+//# sourceMappingURL=credentials.d.ts.map

package/dist/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAqBvE,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,IAAI,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,IAAI,CAAC;IACjB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;CAClD;AAkGD;;;;GAIG;AACH,qBAAa,eAAe;IAIxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;gBAGtB,OAAO,EAAE,SAAS,EACnC,aAAa,EAAE,MAAM;IAiBvB,OAAO,CAAC,cAAc;YAIR,IAAI;IAoBZ,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,SAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIjE,MAAM,CACV,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC;IAKtC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAsBjE,GAAG,CACP,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,kBAAkB,CAAC;IAIxB,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,yBAAyB,EACjC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,kBAAkB,CAAC;IA2BxB,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGjD"}

package/dist/credentials.js

@@ -0,0 +1,177 @@
+const KEY_BYTES = 32;
+const IV_BYTES = 12;
+const MAX_CREDENTIAL_BYTES = 16_384;
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+function storageKey(connectorId) {
+    return `conn:${connectorId}:credential:v1`;
+}
+function bytesToBase64(bytes) {
+    let binary = "";
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary);
+}
+function base64ToBytes(value) {
+    let binary;
+    try {
+        binary = atob(value);
+    }
+    catch {
+        throw new Error("credentialEncryptionKey must be a base64-encoded 32-byte key");
+    }
+    return Uint8Array.from(binary, (char) => char.charCodeAt(0));
+}
+function parseEnvelope(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed.version !== 1 ||
+            parsed.algorithm !== "AES-GCM" ||
+            typeof parsed.iv !== "string" ||
+            typeof parsed.ciphertext !== "string") {
+            throw new Error("invalid envelope");
+        }
+        return parsed;
+    }
+    catch {
+        throw new Error("Stored credential is invalid or corrupted");
+    }
+}
+function parsePlaintext(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        const values = typeof parsed.value === "string"
+            ? { value: parsed.value }
+            : parsed.values;
+        if (!values ||
+            typeof values !== "object" ||
+            Array.isArray(values) ||
+            !Object.entries(values).every(([field, value]) => /^[A-Za-z][A-Za-z0-9_-]*$/.test(field) &&
+                typeof value === "string") ||
+            typeof parsed.updatedAt !== "string" ||
+            typeof parsed.updatedBy !== "string") {
+            throw new Error("invalid plaintext");
+        }
+        return {
+            values: { ...values },
+            updatedAt: parsed.updatedAt,
+            updatedBy: parsed.updatedBy,
+        };
+    }
+    catch {
+        throw new Error("Stored credential is invalid or corrupted");
+    }
+}
+function validateValues(values) {
+    const entries = Object.entries(values);
+    if (entries.length === 0)
+        throw new Error("Credential cannot be empty");
+    const normalized = {};
+    for (const [field, value] of entries) {
+        if (!/^[A-Za-z][A-Za-z0-9_-]*$/.test(field)) {
+            throw new Error(`Invalid credential field "${field}"`);
+        }
+        if (typeof value !== "string" || !value.trim()) {
+            throw new Error(`Credential field "${field}" cannot be empty`);
+        }
+        normalized[field] = value;
+    }
+    if (encoder.encode(JSON.stringify(normalized)).byteLength >
+        MAX_CREDENTIAL_BYTES) {
+        throw new Error(`Credential cannot exceed ${MAX_CREDENTIAL_BYTES} bytes`);
+    }
+    return normalized;
+}
+/**
+ * Encrypted, connector-scoped credential vault over the deployment's existing
+ * KVStorage. Only ciphertext enters KV; the AES-GCM key remains an environment
+ * secret outside the store.
+ */
+export class CredentialVault {
+    storage;
+    key;
+    constructor(storage, encryptionKey) {
+        this.storage = storage;
+        const raw = base64ToBytes(encryptionKey.trim());
+        if (raw.byteLength !== KEY_BYTES) {
+            throw new Error("credentialEncryptionKey must be a base64-encoded 32-byte key");
+        }
+        this.key = crypto.subtle.importKey("raw", raw, { name: "AES-GCM" }, false, ["encrypt", "decrypt"]);
+    }
+    additionalData(connectorId) {
+        return encoder.encode(`connecta:credential:${connectorId}:v1`);
+    }
+    async read(connectorId) {
+        const raw = await this.storage.get(storageKey(connectorId));
+        if (!raw)
+            return null;
+        const envelope = parseEnvelope(raw);
+        try {
+            const plaintext = await crypto.subtle.decrypt({
+                name: "AES-GCM",
+                iv: base64ToBytes(envelope.iv),
+                additionalData: this.additionalData(connectorId),
+            }, await this.key, base64ToBytes(envelope.ciphertext));
+            return parsePlaintext(decoder.decode(plaintext));
+        }
+        catch {
+            throw new Error("Stored credential could not be decrypted");
+        }
+    }
+    async get(connectorId, field = "value") {
+        return (await this.read(connectorId))?.values[field] ?? null;
+    }
+    async getAll(connectorId) {
+        const credential = await this.read(connectorId);
+        return credential ? { ...credential.values } : null;
+    }
+    async metadata(connectorId) {
+        const credential = await this.read(connectorId);
+        if (!credential)
+            return null;
+        const fields = Object.fromEntries(Object.entries(credential.values).map(([field, value]) => [
+            field,
+            {
+                configured: true,
+                lastFour: value.slice(-4),
+                updatedAt: credential.updatedAt,
+            },
+        ]));
+        const single = fields.value;
+        return {
+            configured: true,
+            ...(single ? { lastFour: single.lastFour } : {}),
+            updatedAt: credential.updatedAt,
+            fields,
+        };
+    }
+    async set(connectorId, value, updatedBy) {
+        return this.setAll(connectorId, { value }, updatedBy);
+    }
+    async setAll(connectorId, values, updatedBy) {
+        const normalized = validateValues(values);
+        const plaintext = {
+            values: normalized,
+            updatedAt: new Date().toISOString(),
+            updatedBy,
+        };
+        const iv = crypto.getRandomValues(new Uint8Array(IV_BYTES));
+        const ciphertext = await crypto.subtle.encrypt({
+            name: "AES-GCM",
+            iv,
+            additionalData: this.additionalData(connectorId),
+        }, await this.key, encoder.encode(JSON.stringify(plaintext)));
+        const envelope = {
+            version: 1,
+            algorithm: "AES-GCM",
+            iv: bytesToBase64(iv),
+            ciphertext: bytesToBase64(new Uint8Array(ciphertext)),
+        };
+        await this.storage.set(storageKey(connectorId), JSON.stringify(envelope));
+        return (await this.metadata(connectorId));
+    }
+    async delete(connectorId) {
+        await this.storage.delete(storageKey(connectorId));
+    }
+}
+//# sourceMappingURL=credentials.js.map

package/dist/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAEA,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AA8BlC,SAAS,UAAU,CAAC,WAAmB;IACrC,OAAO,QAAQ,WAAW,gBAAgB,CAAC;AAC7C,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QACpD,IACE,MAAM,CAAC,OAAO,KAAK,CAAC;YACpB,MAAM,CAAC,SAAS,KAAK,SAAS;YAC9B,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;YAC7B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAkB,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAE5B,CAAC;QACF,MAAM,MAAM,GACV,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAC9B,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;YACzB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QACpB,IACE,CAAC,MAAM;YACP,OAAO,MAAM,KAAK,QAAQ;YAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAC3B,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CACjB,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;gBACtC,OAAO,KAAK,KAAK,QAAQ,CAC5B;YACD,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YACpC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,OAAO;YACL,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,MAAiC;IAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACxE,MAAM,UAAU,GAA8B,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,mBAAmB,CAAC,CAAC;QACjE,CAAC;QACD,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IAC5B,CAAC;IACD,IACE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;QACrD,oBAAoB,EACpB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,oBAAoB,QAAQ,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,eAAe;IAIP;IAHF,GAAG,CAAqB;IAEzC,YACmB,OAAkB,EACnC,aAAqB;QADJ,YAAO,GAAP,OAAO,CAAW;QAGnC,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAChC,KAAK,EACL,GAAG,EACH,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,WAAmB;QACxC,OAAO,OAAO,CAAC,MAAM,CAAC,uBAAuB,WAAW,KAAK,CAAC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,WAAmB;QACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C;gBACE,IAAI,EAAE,SAAS;gBACf,EAAE,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;aACjD,EACD,MAAM,IAAI,CAAC,GAAG,EACd,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,CACnC,CAAC;YACF,OAAO,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,KAAK,GAAG,OAAO;QAC5C,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,MAAM,CACV,WAAmB;QAEnB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAmB;QAChC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YACxD,KAAK;YACL;gBACE,UAAU,EAAE,IAAa;gBACzB,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACzB,SAAS,EAAE,UAAU,CAAC,SAAS;aAChC;SACF,CAAC,CACH,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;QAC5B,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,MAAM;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,KAAa,EACb,SAAiB;QAEjB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,WAAmB,EACnB,MAAiC,EACjC,SAAiB;QAEjB,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAwB;YACrC,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS;SACV,CAAC;QACF,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC5C;YACE,IAAI,EAAE,SAAS;YACf,EAAE;YACF,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;SACjD,EACD,MAAM,IAAI,CAAC,GAAG,EACd,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAC1C,CAAC;QACF,MAAM,QAAQ,GAAa;YACzB,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,SAAS;YACpB,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;YACrB,UAAU,EAAE,aAAa,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;SACtD,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IACrD,CAAC;CACF"}

package/dist/execute.d.ts

@@ -0,0 +1,40 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ActivityRequestContext } from "./activity.js";
+import { type ToolResult } from "./meta-tools.js";
+import type { Registry } from "./registry.js";
+import type { Connector, Executor, ExecutorProvider, Logger } from "./types.js";
+/** Keep one model-written program from amplifying into an unbounded fan-out. */
+export declare const EXECUTE_MAX_HOST_CALLS = 20;
+export declare const EXECUTE_MAX_BATCH_CALLS = 10;
+export declare const EXECUTE_HOST_CALL_TIMEOUT_MS = 15000;
+/** Convert a connector/tool name into a valid JS identifier. */
+export declare function sanitizeIdentifier(name: string): string;
+/**
+ * Unwrap an MCP CallToolResult so sandbox code sees plain values:
+ * isError throws (a real exception the code can catch), structuredContent
+ * wins when present, all-text content is JSON.parsed when possible.
+ * Non-MCP connectors already return plain values.
+ */
+export declare function unwrapForSandbox(kind: Connector["kind"], result: unknown): unknown;
+/**
+ * Expose the registry to a sandbox: one provider (global namespace) per
+ * connector with a function per tool, plus `connecta.call(address, args)` as
+ * the raw-address escape hatch. Broken connectors are skipped, not fatal.
+ */
+export declare function buildSandboxProviders(registry: Registry, baseUrl: string, logger: Logger, activity?: ActivityRequestContext, limits?: {
+    signal?: AbortSignal;
+    maxHostCalls?: number;
+    hostCallTimeoutMs?: number;
+}): Promise<ExecutorProvider[]>;
+/** The execute_code handler. Exported for direct testing. */
+export declare function createExecuteTool(registry: Registry, baseUrl: string, executor: Executor, logger: Logger, activity?: ActivityRequestContext): ({ code }: {
+    code: string;
+}) => Promise<ToolResult>;
+/** Register the execute_code meta-tool. Only called when an executor is configured. */
+export declare function registerExecuteTool(server: McpServer, registry: Registry, ctx: {
+    baseUrl: string;
+    executor: Executor;
+    logger: Logger;
+    activity?: ActivityRequestContext;
+}): void;
+//# sourceMappingURL=execute.d.ts.map