integrate-sdk 0.9.27-dev.0 → 0.9.27-dev.2

package/dist/adapters/svelte-kit.js

@@ -2737,6 +2737,34 @@ class OAuthManager {
 
 // ../client.ts
 var CLIENT_LOG_CONTEXT = "client";
+var NON_TOOL_PROXY_PROPERTIES = new Set([
+  "then",
+  "catch",
+  "finally",
+  "constructor",
+  "prototype",
+  "toString",
+  "valueOf",
+  "toJSON",
+  "inspect",
+  "hasOwnProperty",
+  "isPrototypeOf",
+  "propertyIsEnumerable",
+  "__proto__",
+  "__defineGetter__",
+  "__defineSetter__",
+  "__lookupGetter__",
+  "__lookupSetter__",
+  "__esModule",
+  Symbol.toStringTag,
+  Symbol.toPrimitive,
+  Symbol.iterator,
+  Symbol.asyncIterator,
+  Symbol.for("nodejs.util.inspect.custom")
+]);
+function isToolProxyProperty(property) {
+  return typeof property === "string" && !NON_TOOL_PROXY_PROPERTIES.has(property);
+}
 
 class SimpleEventEmitter {
   handlers = new Map;
@@ -2959,6 +2987,8 @@ class MCPClientBase {
     }
     return new Proxy({}, {
       get: (_target, methodName) => {
+        if (!isToolProxyProperty(methodName))
+          return;
         return async (args, options) => {
           const toolName = methodToToolName(methodName, integrationId);
           return await this.callToolWithRetry(toolName, args, 0, options);
@@ -2972,6 +3002,8 @@ class MCPClientBase {
   createServerProxy() {
     return new Proxy({}, {
       get: (_target, methodName) => {
+        if (!isToolProxyProperty(methodName))
+          return;
         if (methodName === "listConfiguredIntegrations") {
           return async (options) => {
             const transportHeaders = this.transport.headers || {};
@@ -3192,6 +3224,9 @@ class MCPClientBase {
   async _callToolByName(name, args, options) {
     return await this.callToolWithRetry(name, args, 0, options);
   }
+  async callTool(name, args, options) {
+    return await this.callToolWithRetry(name, args, 0, options);
+  }
   async callServerTool(name, args) {
     try {
       const response = await this.callToolThroughHandler(name, args);
@@ -3202,35 +3237,38 @@ class MCPClientBase {
     }
   }
   async callToolThroughHandler(name, args, provider, options) {
+    const integrationHeaders = this.getHeadersForTool(name);
     const transportHeaders = this.transport.headers || {};
     const hasApiKey = !!transportHeaders["X-API-KEY"];
     if (hasApiKey) {
       await this.ensureConnected();
+      const temporaryHeaders = { ...integrationHeaders };
       if (provider) {
         const tokenData = await this.oauthManager.getProviderToken(provider, undefined, options?.context);
-        if (tokenData && this.transport.setHeader) {
-          const previousAuthHeader = transportHeaders["Authorization"];
-          try {
-            this.transport.setHeader("Authorization", `Bearer ${tokenData.accessToken}`);
-            const result3 = await this.transport.sendRequest("tools/call", {
-              name,
-              arguments: args || {}
-            });
-            return result3;
-          } finally {
-            if (previousAuthHeader && this.transport.setHeader) {
-              this.transport.setHeader("Authorization", previousAuthHeader);
-            } else if (this.transport.removeHeader) {
-              this.transport.removeHeader("Authorization");
-            }
+        if (tokenData) {
+          temporaryHeaders["Authorization"] = `Bearer ${tokenData.accessToken}`;
+        }
+      }
+      const previousHeaders = new Map;
+      for (const [key, value] of Object.entries(temporaryHeaders)) {
+        previousHeaders.set(key, transportHeaders[key]);
+        this.transport.setHeader(key, value);
+      }
+      try {
+        const result2 = await this.transport.sendRequest("tools/call", {
+          name,
+          arguments: args || {}
+        });
+        return result2;
+      } finally {
+        for (const [key, previousValue] of previousHeaders.entries()) {
+          if (previousValue !== undefined) {
+            this.transport.setHeader(key, previousValue);
+          } else {
+            this.transport.removeHeader(key);
           }
         }
       }
-      const result2 = await this.transport.sendRequest("tools/call", {
-        name,
-        arguments: args || {}
-      });
-      return result2;
     }
     const url = this.apiBaseUrl ? `${this.apiBaseUrl}${this.apiRouteBase}/mcp` : `${this.apiRouteBase}/mcp`;
     const headers = {
@@ -3240,6 +3278,7 @@ class MCPClientBase {
     if (integrationsHeader) {
       headers["X-Integrations"] = integrationsHeader;
     }
+    Object.assign(headers, integrationHeaders);
     if (provider) {
       const tokenData = await this.oauthManager.getProviderToken(provider, undefined, options?.context);
       if (tokenData) {
@@ -3329,6 +3368,14 @@ class MCPClientBase {
     }
     return;
   }
+  getHeadersForTool(toolName) {
+    for (const integration of this.integrations) {
+      if (integration.tools.includes(toolName) && integration.getHeaders) {
+        return integration.getHeaders();
+      }
+    }
+    return {};
+  }
   getTool(name) {
     return this.availableTools.get(name);
   }
@@ -3709,45 +3756,48 @@ var logger22 = createLogger("Ramp");
 // ../integrations/onedrive.ts
 init_logger();
 var logger23 = createLogger("OneDrive");
+// ../integrations/dropbox.ts
+init_logger();
+var logger24 = createLogger("Dropbox");
 // ../integrations/word.ts
 init_logger();
-var logger24 = createLogger("Word");
+var logger25 = createLogger("Word");
 // ../integrations/excel.ts
 init_logger();
-var logger25 = createLogger("Excel");
+var logger26 = createLogger("Excel");
 // ../integrations/powerpoint.ts
 init_logger();
-var logger26 = createLogger("PowerPoint");
+var logger27 = createLogger("PowerPoint");
 // ../integrations/gdocs.ts
 init_logger();
-var logger27 = createLogger("Google Docs");
+var logger28 = createLogger("Google Docs");
 // ../integrations/gdrive.ts
 init_logger();
-var logger28 = createLogger("Google Drive");
+var logger29 = createLogger("Google Drive");
 // ../integrations/gsheets.ts
 init_logger();
-var logger29 = createLogger("Google Sheets");
+var logger30 = createLogger("Google Sheets");
 // ../integrations/gslides.ts
 init_logger();
-var logger30 = createLogger("Google Slides");
+var logger31 = createLogger("Google Slides");
 // ../integrations/polar.ts
 init_logger();
-var logger31 = createLogger("Polar");
+var logger32 = createLogger("Polar");
 // ../integrations/figma.ts
 init_logger();
-var logger32 = createLogger("Figma");
+var logger33 = createLogger("Figma");
 // ../integrations/intercom.ts
 init_logger();
-var logger33 = createLogger("Intercom");
+var logger34 = createLogger("Intercom");
 // ../integrations/hubspot.ts
 init_logger();
-var logger34 = createLogger("HubSpot");
+var logger35 = createLogger("HubSpot");
 // ../integrations/youtube.ts
 init_logger();
-var logger35 = createLogger("YouTube");
+var logger36 = createLogger("YouTube");
 // ../integrations/cursor.ts
 init_logger();
-var logger36 = createLogger("Cursor");
+var logger37 = createLogger("Cursor");
 // ../ai/trigger-tools.ts
 init_utils();
 
@@ -3766,7 +3816,7 @@ init_tool_builder();
 init_tool_builder();
 // ../server.ts
 var SERVER_LOG_CONTEXT3 = "server";
-var logger37 = createLogger("MCPServer", SERVER_LOG_CONTEXT3);
+var logger38 = createLogger("MCPServer", SERVER_LOG_CONTEXT3);
 var codeVerifierStorage = new Map;
 var unauthenticatedCodeModeWarnings = new Set;
 function toSolidStartHandler(clientOrHandlerOrOptions, _redirectOptions) {

package/dist/ai/anthropic.js

@@ -4681,6 +4681,32 @@ function camelToSnake(str) {
   return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());
 }
 
+const NON_TOOL_PROPERTIES = new Set([
+  // Promise assimilation and object inspection should not become MCP calls.
+  'then',
+  'catch',
+  'finally',
+  'constructor',
+  'prototype',
+  'toString',
+  'valueOf',
+  'toJSON',
+  'inspect',
+  'hasOwnProperty',
+  'isPrototypeOf',
+  'propertyIsEnumerable',
+  '__proto__',
+  '__defineGetter__',
+  '__defineSetter__',
+  '__lookupGetter__',
+  '__lookupSetter__',
+  '__esModule',
+]);
+
+function isToolProperty(property) {
+  return typeof property === 'string' && !NON_TOOL_PROPERTIES.has(property);
+}
+
 async function callTool(toolName, args) {
   const headers = {
     'Content-Type': 'application/json',
@@ -4728,7 +4754,7 @@ async function callTool(toolName, args) {
 function createIntegrationProxy(integrationId) {
   return new Proxy({}, {
     get(_target, methodName) {
-      if (typeof methodName !== 'string') return undefined;
+      if (!isToolProperty(methodName)) return undefined;
       return (args) => {
         const alreadyFull = methodName.startsWith(integrationId + '_') || methodName.startsWith('___');
         const toolName = alreadyFull ? methodName : integrationId + '_' + camelToSnake(methodName);

package/dist/ai/google.js

@@ -4681,6 +4681,32 @@ function camelToSnake(str) {
   return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());
 }
 
+const NON_TOOL_PROPERTIES = new Set([
+  // Promise assimilation and object inspection should not become MCP calls.
+  'then',
+  'catch',
+  'finally',
+  'constructor',
+  'prototype',
+  'toString',
+  'valueOf',
+  'toJSON',
+  'inspect',
+  'hasOwnProperty',
+  'isPrototypeOf',
+  'propertyIsEnumerable',
+  '__proto__',
+  '__defineGetter__',
+  '__defineSetter__',
+  '__lookupGetter__',
+  '__lookupSetter__',
+  '__esModule',
+]);
+
+function isToolProperty(property) {
+  return typeof property === 'string' && !NON_TOOL_PROPERTIES.has(property);
+}
+
 async function callTool(toolName, args) {
   const headers = {
     'Content-Type': 'application/json',
@@ -4728,7 +4754,7 @@ async function callTool(toolName, args) {
 function createIntegrationProxy(integrationId) {
   return new Proxy({}, {
     get(_target, methodName) {
-      if (typeof methodName !== 'string') return undefined;
+      if (!isToolProperty(methodName)) return undefined;
       return (args) => {
         const alreadyFull = methodName.startsWith(integrationId + '_') || methodName.startsWith('___');
         const toolName = alreadyFull ? methodName : integrationId + '_' + camelToSnake(methodName);

package/dist/ai/index.js

@@ -4681,6 +4681,32 @@ function camelToSnake(str) {
   return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());
 }
 
+const NON_TOOL_PROPERTIES = new Set([
+  // Promise assimilation and object inspection should not become MCP calls.
+  'then',
+  'catch',
+  'finally',
+  'constructor',
+  'prototype',
+  'toString',
+  'valueOf',
+  'toJSON',
+  'inspect',
+  'hasOwnProperty',
+  'isPrototypeOf',
+  'propertyIsEnumerable',
+  '__proto__',
+  '__defineGetter__',
+  '__defineSetter__',
+  '__lookupGetter__',
+  '__lookupSetter__',
+  '__esModule',
+]);
+
+function isToolProperty(property) {
+  return typeof property === 'string' && !NON_TOOL_PROPERTIES.has(property);
+}
+
 async function callTool(toolName, args) {
   const headers = {
     'Content-Type': 'application/json',
@@ -4728,7 +4754,7 @@ async function callTool(toolName, args) {
 function createIntegrationProxy(integrationId) {
   return new Proxy({}, {
     get(_target, methodName) {
-      if (typeof methodName !== 'string') return undefined;
+      if (!isToolProperty(methodName)) return undefined;
       return (args) => {
         const alreadyFull = methodName.startsWith(integrationId + '_') || methodName.startsWith('___');
         const toolName = alreadyFull ? methodName : integrationId + '_' + camelToSnake(methodName);

package/dist/ai/openai.js

@@ -4681,6 +4681,32 @@ function camelToSnake(str) {
   return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());
 }
 
+const NON_TOOL_PROPERTIES = new Set([
+  // Promise assimilation and object inspection should not become MCP calls.
+  'then',
+  'catch',
+  'finally',
+  'constructor',
+  'prototype',
+  'toString',
+  'valueOf',
+  'toJSON',
+  'inspect',
+  'hasOwnProperty',
+  'isPrototypeOf',
+  'propertyIsEnumerable',
+  '__proto__',
+  '__defineGetter__',
+  '__defineSetter__',
+  '__lookupGetter__',
+  '__lookupSetter__',
+  '__esModule',
+]);
+
+function isToolProperty(property) {
+  return typeof property === 'string' && !NON_TOOL_PROPERTIES.has(property);
+}
+
 async function callTool(toolName, args) {
   const headers = {
     'Content-Type': 'application/json',
@@ -4728,7 +4754,7 @@ async function callTool(toolName, args) {
 function createIntegrationProxy(integrationId) {
   return new Proxy({}, {
     get(_target, methodName) {
-      if (typeof methodName !== 'string') return undefined;
+      if (!isToolProperty(methodName)) return undefined;
       return (args) => {
         const alreadyFull = methodName.startsWith(integrationId + '_') || methodName.startsWith('___');
         const toolName = alreadyFull ? methodName : integrationId + '_' + camelToSnake(methodName);

package/dist/ai/vercel-ai.js

@@ -4681,6 +4681,32 @@ function camelToSnake(str) {
   return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());
 }
 
+const NON_TOOL_PROPERTIES = new Set([
+  // Promise assimilation and object inspection should not become MCP calls.
+  'then',
+  'catch',
+  'finally',
+  'constructor',
+  'prototype',
+  'toString',
+  'valueOf',
+  'toJSON',
+  'inspect',
+  'hasOwnProperty',
+  'isPrototypeOf',
+  'propertyIsEnumerable',
+  '__proto__',
+  '__defineGetter__',
+  '__defineSetter__',
+  '__lookupGetter__',
+  '__lookupSetter__',
+  '__esModule',
+]);
+
+function isToolProperty(property) {
+  return typeof property === 'string' && !NON_TOOL_PROPERTIES.has(property);
+}
+
 async function callTool(toolName, args) {
   const headers = {
     'Content-Type': 'application/json',
@@ -4728,7 +4754,7 @@ async function callTool(toolName, args) {
 function createIntegrationProxy(integrationId) {
   return new Proxy({}, {
     get(_target, methodName) {
-      if (typeof methodName !== 'string') return undefined;
+      if (!isToolProperty(methodName)) return undefined;
       return (args) => {
         const alreadyFull = methodName.startsWith(integrationId + '_') || methodName.startsWith('___');
         const toolName = alreadyFull ? methodName : integrationId + '_' + camelToSnake(methodName);

package/dist/code-mode/executor.js

@@ -34,6 +34,32 @@ function camelToSnake(str) {
   return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());
 }
 
+const NON_TOOL_PROPERTIES = new Set([
+  // Promise assimilation and object inspection should not become MCP calls.
+  'then',
+  'catch',
+  'finally',
+  'constructor',
+  'prototype',
+  'toString',
+  'valueOf',
+  'toJSON',
+  'inspect',
+  'hasOwnProperty',
+  'isPrototypeOf',
+  'propertyIsEnumerable',
+  '__proto__',
+  '__defineGetter__',
+  '__defineSetter__',
+  '__lookupGetter__',
+  '__lookupSetter__',
+  '__esModule',
+]);
+
+function isToolProperty(property) {
+  return typeof property === 'string' && !NON_TOOL_PROPERTIES.has(property);
+}
+
 async function callTool(toolName, args) {
   const headers = {
     'Content-Type': 'application/json',
@@ -81,7 +107,7 @@ async function callTool(toolName, args) {
 function createIntegrationProxy(integrationId) {
   return new Proxy({}, {
     get(_target, methodName) {
-      if (typeof methodName !== 'string') return undefined;
+      if (!isToolProperty(methodName)) return undefined;
       return (args) => {
         const alreadyFull = methodName.startsWith(integrationId + '_') || methodName.startsWith('___');
         const toolName = alreadyFull ? methodName : integrationId + '_' + camelToSnake(methodName);

package/dist/code-mode/index.js

@@ -279,6 +279,32 @@ function camelToSnake(str) {
   return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());
 }
 
+const NON_TOOL_PROPERTIES = new Set([
+  // Promise assimilation and object inspection should not become MCP calls.
+  'then',
+  'catch',
+  'finally',
+  'constructor',
+  'prototype',
+  'toString',
+  'valueOf',
+  'toJSON',
+  'inspect',
+  'hasOwnProperty',
+  'isPrototypeOf',
+  'propertyIsEnumerable',
+  '__proto__',
+  '__defineGetter__',
+  '__defineSetter__',
+  '__lookupGetter__',
+  '__lookupSetter__',
+  '__esModule',
+]);
+
+function isToolProperty(property) {
+  return typeof property === 'string' && !NON_TOOL_PROPERTIES.has(property);
+}
+
 async function callTool(toolName, args) {
   const headers = {
     'Content-Type': 'application/json',
@@ -326,7 +352,7 @@ async function callTool(toolName, args) {
 function createIntegrationProxy(integrationId) {
   return new Proxy({}, {
     get(_target, methodName) {
-      if (typeof methodName !== 'string') return undefined;
+      if (!isToolProperty(methodName)) return undefined;
       return (args) => {
         const alreadyFull = methodName.startsWith(integrationId + '_') || methodName.startsWith('___');
         const toolName = alreadyFull ? methodName : integrationId + '_' + camelToSnake(methodName);

package/dist/code-mode/runtime-stub.d.ts

@@ -12,5 +12,5 @@
  * dependencies. It is NOT imported by the host SDK — it only ships as a
  * literal payload to the sandbox.
  */
-export declare const RUNTIME_STUB_SOURCE = "// runtime.mjs \u2014 generated by integrate-sdk code mode\nconst MCP_URL = process.env.INTEGRATE_MCP_URL;\nconst SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;\nconst API_KEY = process.env.INTEGRATE_API_KEY || '';\nconst PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';\nconst INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';\nconst CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';\n\nif (!MCP_URL) {\n  throw new Error('INTEGRATE_MCP_URL is not set \u2014 the sandbox cannot reach the MCP route.');\n}\n\nfunction camelToSnake(str) {\n  return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());\n}\n\nasync function callTool(toolName, args) {\n  const headers = {\n    'Content-Type': 'application/json',\n    'x-integrate-code-mode': '1',\n  };\n  if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;\n  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;\n  if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;\n  if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;\n  if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;\n\n  const res = await fetch(MCP_URL, {\n    method: 'POST',\n    headers,\n    body: JSON.stringify({ name: toolName, arguments: args || {} }),\n  });\n\n  const text = await res.text();\n\n  let payload;\n  try {\n    payload = text ? JSON.parse(text) : null;\n  } catch {\n    payload = { content: [{ type: 'text', text }] };\n  }\n\n  if (!res.ok) {\n    let message = (payload && (payload.error || payload.message)) || 'Tool call failed: HTTP ' + res.status;\n    if ((res.status === 401 || res.status === 403) && typeof text === 'string' && text.indexOf('Authorization header') !== -1) {\n      message =\n        'Code Mode callback was rejected by the MCP server (HTTP ' + res.status + '). ' +\n        'The SDK route could not synthesize an Authorization header. Check the host-side ' +\n        'createMCPServer config (apiKey, getProviderToken) or pass providerTokens to the ' +\n        'AI helper. Original upstream message: ' + text;\n    }\n    const err = new Error(message);\n    err.status = res.status;\n    err.toolName = toolName;\n    throw err;\n  }\n\n  return payload;\n}\n\nfunction createIntegrationProxy(integrationId) {\n  return new Proxy({}, {\n    get(_target, methodName) {\n      if (typeof methodName !== 'string') return undefined;\n      return (args) => {\n        const alreadyFull = methodName.startsWith(integrationId + '_') || methodName.startsWith('___');\n        const toolName = alreadyFull ? methodName : integrationId + '_' + camelToSnake(methodName);\n        return callTool(toolName, args);\n      };\n    },\n  });\n}\n\nexport const client = new Proxy({}, {\n  get(_target, integrationId) {\n    if (typeof integrationId !== 'string') return undefined;\n    return createIntegrationProxy(integrationId);\n  },\n});\n\nexport { callTool };\n";
+export declare const RUNTIME_STUB_SOURCE = "// runtime.mjs \u2014 generated by integrate-sdk code mode\nconst MCP_URL = process.env.INTEGRATE_MCP_URL;\nconst SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;\nconst API_KEY = process.env.INTEGRATE_API_KEY || '';\nconst PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';\nconst INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';\nconst CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';\n\nif (!MCP_URL) {\n  throw new Error('INTEGRATE_MCP_URL is not set \u2014 the sandbox cannot reach the MCP route.');\n}\n\nfunction camelToSnake(str) {\n  return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());\n}\n\nconst NON_TOOL_PROPERTIES = new Set([\n  // Promise assimilation and object inspection should not become MCP calls.\n  'then',\n  'catch',\n  'finally',\n  'constructor',\n  'prototype',\n  'toString',\n  'valueOf',\n  'toJSON',\n  'inspect',\n  'hasOwnProperty',\n  'isPrototypeOf',\n  'propertyIsEnumerable',\n  '__proto__',\n  '__defineGetter__',\n  '__defineSetter__',\n  '__lookupGetter__',\n  '__lookupSetter__',\n  '__esModule',\n]);\n\nfunction isToolProperty(property) {\n  return typeof property === 'string' && !NON_TOOL_PROPERTIES.has(property);\n}\n\nasync function callTool(toolName, args) {\n  const headers = {\n    'Content-Type': 'application/json',\n    'x-integrate-code-mode': '1',\n  };\n  if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;\n  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;\n  if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;\n  if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;\n  if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;\n\n  const res = await fetch(MCP_URL, {\n    method: 'POST',\n    headers,\n    body: JSON.stringify({ name: toolName, arguments: args || {} }),\n  });\n\n  const text = await res.text();\n\n  let payload;\n  try {\n    payload = text ? JSON.parse(text) : null;\n  } catch {\n    payload = { content: [{ type: 'text', text }] };\n  }\n\n  if (!res.ok) {\n    let message = (payload && (payload.error || payload.message)) || 'Tool call failed: HTTP ' + res.status;\n    if ((res.status === 401 || res.status === 403) && typeof text === 'string' && text.indexOf('Authorization header') !== -1) {\n      message =\n        'Code Mode callback was rejected by the MCP server (HTTP ' + res.status + '). ' +\n        'The SDK route could not synthesize an Authorization header. Check the host-side ' +\n        'createMCPServer config (apiKey, getProviderToken) or pass providerTokens to the ' +\n        'AI helper. Original upstream message: ' + text;\n    }\n    const err = new Error(message);\n    err.status = res.status;\n    err.toolName = toolName;\n    throw err;\n  }\n\n  return payload;\n}\n\nfunction createIntegrationProxy(integrationId) {\n  return new Proxy({}, {\n    get(_target, methodName) {\n      if (!isToolProperty(methodName)) return undefined;\n      return (args) => {\n        const alreadyFull = methodName.startsWith(integrationId + '_') || methodName.startsWith('___');\n        const toolName = alreadyFull ? methodName : integrationId + '_' + camelToSnake(methodName);\n        return callTool(toolName, args);\n      };\n    },\n  });\n}\n\nexport const client = new Proxy({}, {\n  get(_target, integrationId) {\n    if (typeof integrationId !== 'string') return undefined;\n    return createIntegrationProxy(integrationId);\n  },\n});\n\nexport { callTool };\n";
 //# sourceMappingURL=runtime-stub.d.ts.map

package/dist/code-mode/runtime-stub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-stub.d.ts","sourceRoot":"","sources":["../../../src/code-mode/runtime-stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,mBAAmB,o4FAiF/B,CAAC"}
+{"version":3,"file":"runtime-stub.d.ts","sourceRoot":"","sources":["../../../src/code-mode/runtime-stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,mBAAmB,q7GA2G/B,CAAC"}

package/dist/code-mode/runtime-stub.js

@@ -34,6 +34,32 @@ function camelToSnake(str) {
   return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());
 }
 
+const NON_TOOL_PROPERTIES = new Set([
+  // Promise assimilation and object inspection should not become MCP calls.
+  'then',
+  'catch',
+  'finally',
+  'constructor',
+  'prototype',
+  'toString',
+  'valueOf',
+  'toJSON',
+  'inspect',
+  'hasOwnProperty',
+  'isPrototypeOf',
+  'propertyIsEnumerable',
+  '__proto__',
+  '__defineGetter__',
+  '__defineSetter__',
+  '__lookupGetter__',
+  '__lookupSetter__',
+  '__esModule',
+]);
+
+function isToolProperty(property) {
+  return typeof property === 'string' && !NON_TOOL_PROPERTIES.has(property);
+}
+
 async function callTool(toolName, args) {
   const headers = {
     'Content-Type': 'application/json',
@@ -81,7 +107,7 @@ async function callTool(toolName, args) {
 function createIntegrationProxy(integrationId) {
   return new Proxy({}, {
     get(_target, methodName) {
-      if (typeof methodName !== 'string') return undefined;
+      if (!isToolProperty(methodName)) return undefined;
       return (args) => {
         const alreadyFull = methodName.startsWith(integrationId + '_') || methodName.startsWith('___');
         const toolName = alreadyFull ? methodName : integrationId + '_' + camelToSnake(methodName);

package/dist/code-mode/tool-builder.js

@@ -279,6 +279,32 @@ function camelToSnake(str) {
   return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());
 }
 
+const NON_TOOL_PROPERTIES = new Set([
+  // Promise assimilation and object inspection should not become MCP calls.
+  'then',
+  'catch',
+  'finally',
+  'constructor',
+  'prototype',
+  'toString',
+  'valueOf',
+  'toJSON',
+  'inspect',
+  'hasOwnProperty',
+  'isPrototypeOf',
+  'propertyIsEnumerable',
+  '__proto__',
+  '__defineGetter__',
+  '__defineSetter__',
+  '__lookupGetter__',
+  '__lookupSetter__',
+  '__esModule',
+]);
+
+function isToolProperty(property) {
+  return typeof property === 'string' && !NON_TOOL_PROPERTIES.has(property);
+}
+
 async function callTool(toolName, args) {
   const headers = {
     'Content-Type': 'application/json',
@@ -326,7 +352,7 @@ async function callTool(toolName, args) {
 function createIntegrationProxy(integrationId) {
   return new Proxy({}, {
     get(_target, methodName) {
-      if (typeof methodName !== 'string') return undefined;
+      if (!isToolProperty(methodName)) return undefined;
       return (args) => {
         const alreadyFull = methodName.startsWith(integrationId + '_') || methodName.startsWith('___');
         const toolName = alreadyFull ? methodName : integrationId + '_' + camelToSnake(methodName);