integrate-sdk 0.9.5-dev.0 → 0.9.8-dev.0

package/dist/code-mode/index.js

@@ -217,6 +217,7 @@ function pascalCase(id) {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -235,6 +236,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -285,8 +287,37 @@ export { callTool };
 
 // executor.ts
 var sandboxFactoryOverride = null;
+var _sandboxAvailableCache = null;
+var _sandboxForcedUnavailableForTests = false;
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -374,6 +405,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -465,6 +498,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -477,6 +517,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -491,6 +532,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -520,6 +562,7 @@ ${generated.source}
 export {
   generateCodeModeTypes,
   executeSandboxCode,
+  canUseCodeMode,
   buildCodeModeTool,
   __setSandboxFactoryForTests,
   RUNTIME_STUB_SOURCE,

package/dist/code-mode/runtime-stub.d.ts

@@ -12,5 +12,5 @@
  * dependencies. It is NOT imported by the host SDK — it only ships as a
  * literal payload to the sandbox.
  */
-export declare const RUNTIME_STUB_SOURCE = "// runtime.mjs \u2014 generated by integrate-sdk code mode\nconst MCP_URL = process.env.INTEGRATE_MCP_URL;\nconst SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;\nconst PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';\nconst INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';\nconst CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';\n\nif (!MCP_URL) {\n  throw new Error('INTEGRATE_MCP_URL is not set \u2014 the sandbox cannot reach the MCP route.');\n}\n\nfunction camelToSnake(str) {\n  return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());\n}\n\nasync function callTool(toolName, args) {\n  const headers = {\n    'Content-Type': 'application/json',\n    'x-integrate-code-mode': '1',\n  };\n  if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;\n  if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;\n  if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;\n  if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;\n\n  const res = await fetch(MCP_URL, {\n    method: 'POST',\n    headers,\n    body: JSON.stringify({ name: toolName, arguments: args || {} }),\n  });\n\n  const text = await res.text();\n  let payload;\n  try {\n    payload = text ? JSON.parse(text) : null;\n  } catch {\n    payload = { content: [{ type: 'text', text }] };\n  }\n\n  if (!res.ok) {\n    const message = (payload && (payload.error || payload.message)) || 'Tool call failed: HTTP ' + res.status;\n    const err = new Error(message);\n    err.status = res.status;\n    err.toolName = toolName;\n    throw err;\n  }\n\n  return payload;\n}\n\nfunction createIntegrationProxy(integrationId) {\n  return new Proxy({}, {\n    get(_target, methodName) {\n      if (typeof methodName !== 'string') return undefined;\n      return (args) => callTool(integrationId + '_' + camelToSnake(methodName), args);\n    },\n  });\n}\n\nexport const client = new Proxy({}, {\n  get(_target, integrationId) {\n    if (typeof integrationId !== 'string') return undefined;\n    return createIntegrationProxy(integrationId);\n  },\n});\n\nexport { callTool };\n";
+export declare const RUNTIME_STUB_SOURCE = "// runtime.mjs \u2014 generated by integrate-sdk code mode\nconst MCP_URL = process.env.INTEGRATE_MCP_URL;\nconst SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;\nconst API_KEY = process.env.INTEGRATE_API_KEY || '';\nconst PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';\nconst INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';\nconst CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';\n\nif (!MCP_URL) {\n  throw new Error('INTEGRATE_MCP_URL is not set \u2014 the sandbox cannot reach the MCP route.');\n}\n\nfunction camelToSnake(str) {\n  return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());\n}\n\nasync function callTool(toolName, args) {\n  const headers = {\n    'Content-Type': 'application/json',\n    'x-integrate-code-mode': '1',\n  };\n  if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;\n  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;\n  if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;\n  if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;\n  if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;\n\n  const res = await fetch(MCP_URL, {\n    method: 'POST',\n    headers,\n    body: JSON.stringify({ name: toolName, arguments: args || {} }),\n  });\n\n  const text = await res.text();\n  let payload;\n  try {\n    payload = text ? JSON.parse(text) : null;\n  } catch {\n    payload = { content: [{ type: 'text', text }] };\n  }\n\n  if (!res.ok) {\n    const message = (payload && (payload.error || payload.message)) || 'Tool call failed: HTTP ' + res.status;\n    const err = new Error(message);\n    err.status = res.status;\n    err.toolName = toolName;\n    throw err;\n  }\n\n  return payload;\n}\n\nfunction createIntegrationProxy(integrationId) {\n  return new Proxy({}, {\n    get(_target, methodName) {\n      if (typeof methodName !== 'string') return undefined;\n      return (args) => callTool(integrationId + '_' + camelToSnake(methodName), args);\n    },\n  });\n}\n\nexport const client = new Proxy({}, {\n  get(_target, integrationId) {\n    if (typeof integrationId !== 'string') return undefined;\n    return createIntegrationProxy(integrationId);\n  },\n});\n\nexport { callTool };\n";
 //# sourceMappingURL=runtime-stub.d.ts.map

package/dist/code-mode/runtime-stub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-stub.d.ts","sourceRoot":"","sources":["../../../src/code-mode/runtime-stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,mBAAmB,qmEAmE/B,CAAC"}
+{"version":3,"file":"runtime-stub.d.ts","sourceRoot":"","sources":["../../../src/code-mode/runtime-stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,mBAAmB,qtEAqE/B,CAAC"}

package/dist/code-mode/runtime-stub.js

@@ -2,6 +2,7 @@
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -20,6 +21,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;

package/dist/code-mode/tool-builder.d.ts

@@ -74,6 +74,7 @@ export declare function resolveCodeModeClientConfig(client: MCPClient<any>): {
         };
     };
 };
+export declare function canUseCodeMode(client: MCPClient<any>): Promise<boolean>;
 /**
  * Build the `execute_code` tool definition. The returned `execute` function
  * is what the AI provider SDK ultimately invokes when the model picks the

package/dist/code-mode/tool-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-builder.d.ts","sourceRoot":"","sources":["../../../src/code-mode/tool-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAsB,KAAK,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAGlF,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAElD,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,iCAAiC;IACjC,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;aAAE,CAAA;SAAE,CAAC;KAClH,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE;YACV,IAAI,EAAE;gBAAE,IAAI,EAAE,QAAQ,CAAC;gBAAC,WAAW,EAAE,MAAM,CAAA;aAAE,CAAC;SAC/C,CAAC;QACF,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QACnB,oBAAoB,EAAE,KAAK,CAAC;KAC7B,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACzE;AAuBD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC;CAClH,CAGA;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,EAAE,mBAAmB,GAC3B,sBAAsB,CA6DxB"}
+{"version":3,"file":"tool-builder.d.ts","sourceRoot":"","sources":["../../../src/code-mode/tool-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,eAAe,CAAC;AAGvB,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAElD,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,iCAAiC;IACjC,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;aAAE,CAAA;SAAE,CAAC;KAClH,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE;YACV,IAAI,EAAE;gBAAE,IAAI,EAAE,QAAQ,CAAC;gBAAC,WAAW,EAAE,MAAM,CAAA;aAAE,CAAC;SAC/C,CAAC;QACF,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QACnB,oBAAoB,EAAE,KAAK,CAAC;KAC7B,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACzE;AAuBD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC;CAClH,CAGA;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAK7E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,EAAE,mBAAmB,GAC3B,sBAAsB,CA+DxB"}

package/dist/code-mode/tool-builder.js

@@ -217,6 +217,7 @@ function pascalCase(id) {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -235,6 +236,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -285,8 +287,37 @@ export { callTool };
 
 // executor.ts
 var sandboxFactoryOverride = null;
+var _sandboxAvailableCache = null;
+var _sandboxForcedUnavailableForTests = false;
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -374,6 +405,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -465,6 +498,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -477,6 +517,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -491,6 +532,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -519,6 +561,7 @@ ${generated.source}
 }
 export {
   resolveCodeModeClientConfig,
+  canUseCodeMode,
   buildCodeModeTool,
   CODE_MODE_TOOL_NAME
 };

package/dist/index.js

@@ -8943,6 +8943,7 @@ var init_type_generator = __esm(() => {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -8961,6 +8962,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -9012,11 +9014,40 @@ export { callTool };
 // src/code-mode/executor.ts
 var exports_executor = {};
 __export(exports_executor, {
+  isSandboxAvailable: () => isSandboxAvailable,
   executeSandboxCode: () => executeSandboxCode,
+  __setSandboxUnavailableForTests: () => __setSandboxUnavailableForTests,
   __setSandboxFactoryForTests: () => __setSandboxFactoryForTests
 });
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -9103,6 +9134,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -9145,7 +9178,7 @@ async function executeSandboxCode(options) {
     }
   }
 }
-var sandboxFactoryOverride = null, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
+var sandboxFactoryOverride = null, _sandboxAvailableCache = null, _sandboxForcedUnavailableForTests = false, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
 var init_executor = () => {};
 
 // src/code-mode/tool-builder.ts
@@ -9153,6 +9186,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -9165,6 +9205,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -9179,6 +9220,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -9256,8 +9298,8 @@ async function getVercelAITools(client, options) {
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
   const vercelTools = {};
-  const mode = options?.mode ?? "code";
-  if (mode === "code") {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  if (effectiveMode === "code") {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10715,8 +10757,8 @@ async function getOpenAITools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const openaiTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const openaiTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10895,8 +10937,8 @@ async function getAnthropicTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const anthropicTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const anthropicTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -11084,9 +11126,9 @@ async function getGoogleTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
   let googleTools;
-  if (mode === "code") {
+  if (effectiveMode === "code") {
     const TypeEnum = await getGoogleType();
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
@@ -11633,6 +11675,24 @@ function createMCPServer(config) {
             } catch {}
           }
         }
+        if (!authHeader && config.getProviderToken) {
+          const codeModeHeader = webRequest.headers.get("x-integrate-code-mode");
+          const contextHeader = webRequest.headers.get("x-integrate-context");
+          const callbackApiKey = webRequest.headers.get("x-integrate-api-key");
+          const toolName = typeof body?.name === "string" ? body.name : "";
+          if (codeModeHeader === "1" && contextHeader && toolName && config.apiKey && callbackApiKey === config.apiKey) {
+            try {
+              const context2 = JSON.parse(contextHeader);
+              const provider = toolName.split("_")[0];
+              if (provider) {
+                const tokenData = await config.getProviderToken(provider, undefined, context2);
+                if (tokenData?.accessToken) {
+                  authHeader = `Bearer ${tokenData.accessToken}`;
+                }
+              }
+            } catch {}
+          }
+        }
         const { OAuthHandler: OAuthHandler2 } = await Promise.resolve().then(() => (init_base_handler(), exports_base_handler));
         const oauthHandler = new OAuthHandler2({
           providers,

package/dist/oauth.js

@@ -8777,6 +8777,7 @@ var init_type_generator = __esm(() => {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -8795,6 +8796,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -8846,11 +8848,40 @@ export { callTool };
 // src/code-mode/executor.ts
 var exports_executor = {};
 __export(exports_executor, {
+  isSandboxAvailable: () => isSandboxAvailable,
   executeSandboxCode: () => executeSandboxCode,
+  __setSandboxUnavailableForTests: () => __setSandboxUnavailableForTests,
   __setSandboxFactoryForTests: () => __setSandboxFactoryForTests
 });
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -8937,6 +8968,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -8979,7 +9012,7 @@ async function executeSandboxCode(options) {
     }
   }
 }
-var sandboxFactoryOverride = null, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
+var sandboxFactoryOverride = null, _sandboxAvailableCache = null, _sandboxForcedUnavailableForTests = false, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
 var init_executor = () => {};
 
 // src/code-mode/tool-builder.ts
@@ -8987,6 +9020,13 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function canUseCodeMode(client) {
+  if (!await isSandboxAvailable())
+    return false;
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  return !!publicUrl;
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -8999,6 +9039,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -9013,6 +9054,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -9090,8 +9132,8 @@ async function getVercelAITools(client, options) {
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
   const vercelTools = {};
-  const mode = options?.mode ?? "code";
-  if (mode === "code") {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  if (effectiveMode === "code") {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10549,8 +10591,8 @@ async function getOpenAITools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const openaiTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const openaiTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10729,8 +10771,8 @@ async function getAnthropicTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const anthropicTools = mode === "code" ? (() => {
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
+  const anthropicTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10918,9 +10960,9 @@ async function getGoogleTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
+  const effectiveMode = options?.mode !== undefined ? options.mode : await canUseCodeMode(client) ? "code" : "tools";
   let googleTools;
-  if (mode === "code") {
+  if (effectiveMode === "code") {
     const TypeEnum = await getGoogleType();
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
@@ -11467,6 +11509,24 @@ function createMCPServer(config) {
             } catch {}
           }
         }
+        if (!authHeader && config.getProviderToken) {
+          const codeModeHeader = webRequest.headers.get("x-integrate-code-mode");
+          const contextHeader = webRequest.headers.get("x-integrate-context");
+          const callbackApiKey = webRequest.headers.get("x-integrate-api-key");
+          const toolName = typeof body?.name === "string" ? body.name : "";
+          if (codeModeHeader === "1" && contextHeader && toolName && config.apiKey && callbackApiKey === config.apiKey) {
+            try {
+              const context2 = JSON.parse(contextHeader);
+              const provider = toolName.split("_")[0];
+              if (provider) {
+                const tokenData = await config.getProviderToken(provider, undefined, context2);
+                if (tokenData?.accessToken) {
+                  authHeader = `Bearer ${tokenData.accessToken}`;
+                }
+              }
+            } catch {}
+          }
+        }
         const { OAuthHandler: OAuthHandler2 } = await Promise.resolve().then(() => (init_base_handler(), exports_base_handler));
         const oauthHandler = new OAuthHandler2({
           providers,