integrate-sdk 0.9.5-dev.0 → 0.9.8-dev.0

package/dist/adapters/node.js

@@ -8541,6 +8541,7 @@ var init_type_generator = __esm(() => {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -8559,6 +8560,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -8610,11 +8612,40 @@ export { callTool };
 // ../code-mode/executor.ts
 var exports_executor = {};
 __export(exports_executor, {
+  isSandboxAvailable: () => isSandboxAvailable,
   executeSandboxCode: () => executeSandboxCode,
+  __setSandboxUnavailableForTests: () => __setSandboxUnavailableForTests,
   __setSandboxFactoryForTests: () => __setSandboxFactoryForTests
 });
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -8701,6 +8732,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -8743,7 +8776,7 @@ async function executeSandboxCode(options) {
     }
   }
 }
-var sandboxFactoryOverride = null, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
+var sandboxFactoryOverride = null, _sandboxAvailableCache = null, _sandboxForcedUnavailableForTests = false, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
 var init_executor = () => {};
 
 // ../code-mode/tool-builder.ts
@@ -8751,6 +8784,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -8763,6 +8803,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -8777,6 +8818,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -8854,8 +8896,8 @@ async function getVercelAITools(client, options) {
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
   const vercelTools = {};
-  const mode = options?.mode ?? "code";
-  if (mode === "code") {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  if (effectiveMode === "code") {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10313,8 +10355,8 @@ async function getOpenAITools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const openaiTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const openaiTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10493,8 +10535,8 @@ async function getAnthropicTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const anthropicTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const anthropicTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10682,9 +10724,9 @@ async function getGoogleTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
   let googleTools;
-  if (mode === "code") {
+  if (effectiveMode === "code") {
     const TypeEnum = await getGoogleType();
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
@@ -11231,6 +11273,24 @@ function createMCPServer(config) {
             } catch {}
           }
         }
+        if (!authHeader && config.getProviderToken) {
+          const codeModeHeader = webRequest.headers.get("x-integrate-code-mode");
+          const contextHeader = webRequest.headers.get("x-integrate-context");
+          const callbackApiKey = webRequest.headers.get("x-integrate-api-key");
+          const toolName = typeof body?.name === "string" ? body.name : "";
+          if (codeModeHeader === "1" && contextHeader && toolName && config.apiKey && callbackApiKey === config.apiKey) {
+            try {
+              const context2 = JSON.parse(contextHeader);
+              const provider = toolName.split("_")[0];
+              if (provider) {
+                const tokenData = await config.getProviderToken(provider, undefined, context2);
+                if (tokenData?.accessToken) {
+                  authHeader = `Bearer ${tokenData.accessToken}`;
+                }
+              }
+            } catch {}
+          }
+        }
         const { OAuthHandler } = await Promise.resolve().then(() => (init_base_handler(), exports_base_handler));
         const oauthHandler = new OAuthHandler({
           providers,

package/dist/adapters/svelte-kit.js

@@ -8541,6 +8541,7 @@ var init_type_generator = __esm(() => {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -8559,6 +8560,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -8610,11 +8612,40 @@ export { callTool };
 // ../code-mode/executor.ts
 var exports_executor = {};
 __export(exports_executor, {
+  isSandboxAvailable: () => isSandboxAvailable,
   executeSandboxCode: () => executeSandboxCode,
+  __setSandboxUnavailableForTests: () => __setSandboxUnavailableForTests,
   __setSandboxFactoryForTests: () => __setSandboxFactoryForTests
 });
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -8701,6 +8732,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -8743,7 +8776,7 @@ async function executeSandboxCode(options) {
     }
   }
 }
-var sandboxFactoryOverride = null, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
+var sandboxFactoryOverride = null, _sandboxAvailableCache = null, _sandboxForcedUnavailableForTests = false, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
 var init_executor = () => {};
 
 // ../code-mode/tool-builder.ts
@@ -8751,6 +8784,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -8763,6 +8803,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -8777,6 +8818,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -8854,8 +8896,8 @@ async function getVercelAITools(client, options) {
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
   const vercelTools = {};
-  const mode = options?.mode ?? "code";
-  if (mode === "code") {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  if (effectiveMode === "code") {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10313,8 +10355,8 @@ async function getOpenAITools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const openaiTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const openaiTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10493,8 +10535,8 @@ async function getAnthropicTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const anthropicTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const anthropicTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10682,9 +10724,9 @@ async function getGoogleTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
   let googleTools;
-  if (mode === "code") {
+  if (effectiveMode === "code") {
     const TypeEnum = await getGoogleType();
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
@@ -11231,6 +11273,24 @@ function createMCPServer(config) {
             } catch {}
           }
         }
+        if (!authHeader && config.getProviderToken) {
+          const codeModeHeader = webRequest.headers.get("x-integrate-code-mode");
+          const contextHeader = webRequest.headers.get("x-integrate-context");
+          const callbackApiKey = webRequest.headers.get("x-integrate-api-key");
+          const toolName = typeof body?.name === "string" ? body.name : "";
+          if (codeModeHeader === "1" && contextHeader && toolName && config.apiKey && callbackApiKey === config.apiKey) {
+            try {
+              const context2 = JSON.parse(contextHeader);
+              const provider = toolName.split("_")[0];
+              if (provider) {
+                const tokenData = await config.getProviderToken(provider, undefined, context2);
+                if (tokenData?.accessToken) {
+                  authHeader = `Bearer ${tokenData.accessToken}`;
+                }
+              }
+            } catch {}
+          }
+        }
         const { OAuthHandler } = await Promise.resolve().then(() => (init_base_handler(), exports_base_handler));
         const oauthHandler = new OAuthHandler({
           providers,

package/dist/adapters/tanstack-start.js

@@ -8541,6 +8541,7 @@ var init_type_generator = __esm(() => {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -8559,6 +8560,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -8610,11 +8612,40 @@ export { callTool };
 // ../code-mode/executor.ts
 var exports_executor = {};
 __export(exports_executor, {
+  isSandboxAvailable: () => isSandboxAvailable,
   executeSandboxCode: () => executeSandboxCode,
+  __setSandboxUnavailableForTests: () => __setSandboxUnavailableForTests,
   __setSandboxFactoryForTests: () => __setSandboxFactoryForTests
 });
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -8701,6 +8732,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -8743,7 +8776,7 @@ async function executeSandboxCode(options) {
     }
   }
 }
-var sandboxFactoryOverride = null, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
+var sandboxFactoryOverride = null, _sandboxAvailableCache = null, _sandboxForcedUnavailableForTests = false, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
 var init_executor = () => {};
 
 // ../code-mode/tool-builder.ts
@@ -8751,6 +8784,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -8763,6 +8803,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -8777,6 +8818,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -8854,8 +8896,8 @@ async function getVercelAITools(client, options) {
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
   const vercelTools = {};
-  const mode = options?.mode ?? "code";
-  if (mode === "code") {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  if (effectiveMode === "code") {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10313,8 +10355,8 @@ async function getOpenAITools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const openaiTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const openaiTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10493,8 +10535,8 @@ async function getAnthropicTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const anthropicTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const anthropicTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10682,9 +10724,9 @@ async function getGoogleTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
   let googleTools;
-  if (mode === "code") {
+  if (effectiveMode === "code") {
     const TypeEnum = await getGoogleType();
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
@@ -11231,6 +11273,24 @@ function createMCPServer(config) {
             } catch {}
           }
         }
+        if (!authHeader && config.getProviderToken) {
+          const codeModeHeader = webRequest.headers.get("x-integrate-code-mode");
+          const contextHeader = webRequest.headers.get("x-integrate-context");
+          const callbackApiKey = webRequest.headers.get("x-integrate-api-key");
+          const toolName = typeof body?.name === "string" ? body.name : "";
+          if (codeModeHeader === "1" && contextHeader && toolName && config.apiKey && callbackApiKey === config.apiKey) {
+            try {
+              const context2 = JSON.parse(contextHeader);
+              const provider = toolName.split("_")[0];
+              if (provider) {
+                const tokenData = await config.getProviderToken(provider, undefined, context2);
+                if (tokenData?.accessToken) {
+                  authHeader = `Bearer ${tokenData.accessToken}`;
+                }
+              }
+            } catch {}
+          }
+        }
         const { OAuthHandler } = await Promise.resolve().then(() => (init_base_handler(), exports_base_handler));
         const oauthHandler = new OAuthHandler({
           providers,

package/dist/ai/anthropic.d.ts

@@ -30,12 +30,12 @@ export interface AnthropicToolsOptions extends AIToolsOptions {
     /**
      * How to expose MCP tools to the model.
      *
-     * - `'code'` (default): Returns a single `execute_code` tool backed by a
+     * - `'code'`: Returns a single `execute_code` tool backed by a
      *   Vercel Sandbox. The model writes TypeScript that calls the typed
      *   `client.<integration>.<method>()` API and chains operations in one round-trip.
      * - `'tools'`: Legacy behavior — one Anthropic tool per MCP tool.
      *
-     * @default 'code'
+     * @default auto-detects `'code'` when sandbox + public URL are available, otherwise `'tools'`
      */
     mode?: 'code' | 'tools';
 }

package/dist/ai/anthropic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../src/ai/anthropic.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAkE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAIjH,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAE/C;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC3D,kDAAkD;IAClD,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AA4ID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,aAAa,EAAE,CAAC,CAgE1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAA,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACpG,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAA,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAkC5I"}
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../src/ai/anthropic.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAkE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAQjH,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAE/C;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC3D,kDAAkD;IAClD,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AA4ID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,aAAa,EAAE,CAAC,CAmE1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAA,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACpG,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAA,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAkC5I"}

package/dist/ai/anthropic.js

@@ -4621,6 +4621,7 @@ function pascalCase(id) {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -4639,6 +4640,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -4689,6 +4691,29 @@ export { callTool };
 
 // ../code-mode/executor.ts
 var sandboxFactoryOverride = null;
+var _sandboxAvailableCache = null;
+var _sandboxForcedUnavailableForTests = false;
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+}
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
     return sandboxFactoryOverride;
@@ -4775,6 +4800,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -4866,6 +4893,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -4878,6 +4912,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -4892,6 +4927,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -4989,8 +5025,8 @@ async function getAnthropicTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const anthropicTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const anthropicTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,

package/dist/ai/google.d.ts

@@ -19,12 +19,12 @@ export interface GoogleToolsOptions extends AIToolsOptions {
     /**
      * How to expose MCP tools to the model.
      *
-     * - `'code'` (default): Returns a single `execute_code` tool backed by a
+     * - `'code'`: Returns a single `execute_code` tool backed by a
      *   Vercel Sandbox. The model writes TypeScript that calls the typed
      *   `client.<integration>.<method>()` API and chains operations in one round-trip.
      * - `'tools'`: Legacy behavior — one Google FunctionDeclaration per MCP tool.
      *
-     * @default 'code'
+     * @default auto-detects `'code'` when sandbox + public URL are available, otherwise `'tools'`
      */
     mode?: 'code' | 'tools';
 }

package/dist/ai/google.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../src/ai/google.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAkE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAOjH,OAAO,KAAK,EACV,MAAM,EACN,mBAAmB,EACnB,YAAY,EACZ,IAAI,EACL,MAAM,eAAe,CAAC;AAGvB,MAAM,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAC7C,MAAM,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAC9C,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAuB7B;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,kDAAkD;IAClD,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AAsGD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,aAAa,EAAE,kBAAkB,EAAE,GAAG,SAAS,GAAG,IAAI,EACtD,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,MAAM,EAAE,CAAC,CA4DnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,UAAU,EAAE,CAAC,CA6EvB"}
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../src/ai/google.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAkE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAWjH,OAAO,KAAK,EACV,MAAM,EACN,mBAAmB,EACnB,YAAY,EACZ,IAAI,EACL,MAAM,eAAe,CAAC;AAGvB,MAAM,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAC7C,MAAM,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAC9C,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAuB7B;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,kDAAkD;IAClD,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AAsGD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,aAAa,EAAE,kBAAkB,EAAE,GAAG,SAAS,GAAG,IAAI,EACtD,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,MAAM,EAAE,CAAC,CA4DnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,UAAU,EAAE,CAAC,CAgFvB"}