integrate-sdk 0.9.5-dev.0 → 0.9.8-dev.0

package/dist/ai/google.js

@@ -4621,6 +4621,7 @@ function pascalCase(id) {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -4639,6 +4640,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -4689,6 +4691,29 @@ export { callTool };
 
 // ../code-mode/executor.ts
 var sandboxFactoryOverride = null;
+var _sandboxAvailableCache = null;
+var _sandboxForcedUnavailableForTests = false;
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+}
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
     return sandboxFactoryOverride;
@@ -4775,6 +4800,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -4866,6 +4893,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -4878,6 +4912,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -4892,6 +4927,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -5043,9 +5079,9 @@ async function getGoogleTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
   let googleTools;
-  if (mode === "code") {
+  if (effectiveMode === "code") {
     const TypeEnum = await getGoogleType();
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,

package/dist/ai/index.js

@@ -4621,6 +4621,7 @@ function pascalCase(id) {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -4639,6 +4640,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -4689,6 +4691,29 @@ export { callTool };
 
 // ../code-mode/executor.ts
 var sandboxFactoryOverride = null;
+var _sandboxAvailableCache = null;
+var _sandboxForcedUnavailableForTests = false;
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+}
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
     return sandboxFactoryOverride;
@@ -4775,6 +4800,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -4866,6 +4893,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -4878,6 +4912,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -4892,6 +4927,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -4989,8 +5025,8 @@ async function getAnthropicTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const anthropicTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const anthropicTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -5173,9 +5209,9 @@ async function getGoogleTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
   let googleTools;
-  if (mode === "code") {
+  if (effectiveMode === "code") {
     const TypeEnum = await getGoogleType();
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
@@ -5299,8 +5335,8 @@ async function getVercelAITools(client, options) {
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
   const vercelTools = {};
-  const mode = options?.mode ?? "code";
-  if (mode === "code") {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  if (effectiveMode === "code") {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -5349,8 +5385,8 @@ async function getOpenAITools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const openaiTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const openaiTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,

package/dist/ai/openai.d.ts

@@ -34,12 +34,12 @@ export interface OpenAIToolsOptions extends AIToolsOptions {
     /**
      * How to expose MCP tools to the model.
      *
-     * - `'code'` (default): Returns a single `execute_code` tool backed by a
+     * - `'code'`: Returns a single `execute_code` tool backed by a
      *   Vercel Sandbox. The model writes TypeScript that calls the typed
      *   `client.<integration>.<method>()` API and chains operations in one round-trip.
      * - `'tools'`: Legacy behavior — one OpenAI function tool per MCP tool.
      *
-     * @default 'code'
+     * @default auto-detects `'code'` when sandbox + public URL are available, otherwise `'tools'`
      */
     mode?: 'code' | 'tools';
 }

package/dist/ai/openai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../../src/ai/openai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAkE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAIjH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE;QACV,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,GAAG,IAAI,CAAC;IACT,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kDAAkD;IAClD,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AAiCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,UAAU,EAAE,CAAC,CAgEvB;AA0GD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,QAAQ,EAAE;IAAE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAA,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC,CAAA;CAAE,EAChE,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,GAAG;IAAE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAA,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAyB3H"}
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../../src/ai/openai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAkE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAQjH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE;QACV,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,GAAG,IAAI,CAAC;IACT,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kDAAkD;IAClD,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AAiCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,UAAU,EAAE,CAAC,CAmEvB;AA0GD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,QAAQ,EAAE;IAAE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAA,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC,CAAA;CAAE,EAChE,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,GAAG;IAAE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAA,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAyB3H"}

package/dist/ai/openai.js

@@ -4621,6 +4621,7 @@ function pascalCase(id) {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -4639,6 +4640,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -4689,6 +4691,29 @@ export { callTool };
 
 // ../code-mode/executor.ts
 var sandboxFactoryOverride = null;
+var _sandboxAvailableCache = null;
+var _sandboxForcedUnavailableForTests = false;
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+}
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
     return sandboxFactoryOverride;
@@ -4775,6 +4800,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -4866,6 +4893,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -4878,6 +4912,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -4892,6 +4927,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -4941,8 +4977,8 @@ async function getOpenAITools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const openaiTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const openaiTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,

package/dist/ai/vercel-ai.d.ts

@@ -25,14 +25,14 @@ export interface VercelAIToolsOptions extends AIToolsOptions {
     /**
      * How to expose MCP tools to the model.
      *
-     * - `'code'` (default): Returns a single `execute_code` tool. The model writes
+     * - `'code'`: Returns a single `execute_code` tool. The model writes
      *   a TypeScript snippet that calls the typed `client.<integration>.<method>()`
      *   API; the snippet runs in an isolated Vercel Sandbox and calls back into
      *   `/api/integrate/mcp`. Chains multiple operations in one round-trip.
      * - `'tools'`: Legacy behavior — returns one AI tool per MCP tool. Use this
      *   if you can't run `@vercel/sandbox` or need the model to see every tool.
      *
-     * @default 'code'
+     * @default auto-detects `'code'` when sandbox + public URL are available, otherwise `'tools'`
      */
     mode?: 'code' | 'tools';
 }

package/dist/ai/vercel-ai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vercel-ai.d.ts","sourceRoot":"","sources":["../../../src/ai/vercel-ai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AAIpB;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IAC1D,kDAAkD;IAClD,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AA+BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,CAAC,EAAE,oBAAoB,gCAuD/B"}
+{"version":3,"file":"vercel-ai.d.ts","sourceRoot":"","sources":["../../../src/ai/vercel-ai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AAQpB;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IAC1D,kDAAkD;IAClD,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AA+BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,CAAC,EAAE,oBAAoB,gCA0D/B"}

package/dist/ai/vercel-ai.js

@@ -4621,6 +4621,7 @@ function pascalCase(id) {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -4639,6 +4640,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -4689,6 +4691,29 @@ export { callTool };
 
 // ../code-mode/executor.ts
 var sandboxFactoryOverride = null;
+var _sandboxAvailableCache = null;
+var _sandboxForcedUnavailableForTests = false;
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+}
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
     return sandboxFactoryOverride;
@@ -4775,6 +4800,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -4866,6 +4893,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -4878,6 +4912,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -4892,6 +4927,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -4943,8 +4979,8 @@ async function getVercelAITools(client, options) {
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
   const vercelTools = {};
-  const mode = options?.mode ?? "code";
-  if (mode === "code") {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  if (effectiveMode === "code") {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,

package/dist/code-mode/executor.d.ts

@@ -43,11 +43,16 @@ interface SandboxFactory {
 }
 /** @internal — used by unit tests to stub the sandbox SDK. */
 export declare function __setSandboxFactoryForTests(factory: SandboxFactory | null): void;
+/** @internal — used by unit tests to simulate missing @vercel/sandbox. */
+export declare function __setSandboxUnavailableForTests(force: boolean): void;
+export declare function isSandboxAvailable(): Promise<boolean>;
 export interface ExecuteSandboxCodeOptions {
     /** Source code the LLM produced. Treated as an async function body. */
     code: string;
     /** Fully-qualified MCP route URL, e.g. `https://myapp.com/api/integrate/mcp`. */
     mcpUrl: string;
+    /** Server API key forwarded to trusted sandbox callbacks. */
+    apiKey?: string;
     /** Session token forwarded as `Authorization: Bearer <token>` by the stub. */
     sessionToken?: string;
     /**

package/dist/code-mode/executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/code-mode/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGrD;;;;GAIG;AACH,UAAU,WAAW;IACnB,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,UAAU,CACR,MAAM,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,GACA,OAAO,CAAC;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1B;AAED,UAAU,cAAc;IACtB,MAAM,CAAC,OAAO,EAAE;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC1B;AAQD,8DAA8D;AAC9D,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAEhF;AAkBD,MAAM,WAAW,yBAAyB;IACxC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,qDAAqD;IACrD,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC;CAClH;AAED,MAAM,WAAW,wBAAwB;IACvC,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA4DD;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAqE9G"}
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/code-mode/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGrD;;;;GAIG;AACH,UAAU,WAAW;IACnB,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,UAAU,CACR,MAAM,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,GACA,OAAO,CAAC;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1B;AAED,UAAU,cAAc;IACtB,MAAM,CAAC,OAAO,EAAE;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC1B;AAUD,8DAA8D;AAC9D,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAIhF;AAED,0EAA0E;AAC1E,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAGpE;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC,CAmB3D;AAkBD,MAAM,WAAW,yBAAyB;IACxC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,qDAAqD;IACrD,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC;CAClH;AAED,MAAM,WAAW,wBAAwB;IACvC,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA4DD;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAsE9G"}

package/dist/code-mode/executor.js

@@ -2,6 +2,7 @@
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -20,6 +21,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -70,8 +72,37 @@ export { callTool };
 
 // executor.ts
 var sandboxFactoryOverride = null;
+var _sandboxAvailableCache = null;
+var _sandboxForcedUnavailableForTests = false;
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -159,6 +190,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -202,6 +235,8 @@ async function executeSandboxCode(options) {
   }
 }
 export {
+  isSandboxAvailable,
   executeSandboxCode,
+  __setSandboxUnavailableForTests,
   __setSandboxFactoryForTests
 };

package/dist/code-mode/index.d.ts

@@ -8,5 +8,5 @@
 export { generateCodeModeTypes, type GeneratedTypes, } from "./type-generator.js";
 export { executeSandboxCode, __setSandboxFactoryForTests, type ExecuteSandboxCodeOptions, type ExecuteSandboxCodeResult, } from "./executor.js";
 export { RUNTIME_STUB_SOURCE } from "./runtime-stub.js";
-export { buildCodeModeTool, CODE_MODE_TOOL_NAME, type CodeModeToolOptions, type CodeModeToolDefinition, } from "./tool-builder.js";
+export { buildCodeModeTool, canUseCodeMode, CODE_MODE_TOOL_NAME, type CodeModeToolOptions, type CodeModeToolDefinition, } from "./tool-builder.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/code-mode/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/code-mode/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,GACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,GAC9B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/code-mode/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,GACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,GAC9B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,mBAAmB,CAAC"}