integrate-sdk 0.9.5-dev.0 → 0.9.9-dev.0

package/dist/code-mode/executor.js

@@ -2,6 +2,7 @@
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -20,6 +21,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -70,8 +72,37 @@ export { callTool };
 
 // executor.ts
 var sandboxFactoryOverride = null;
+var _sandboxAvailableCache = null;
+var _sandboxForcedUnavailableForTests = false;
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -159,6 +190,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -202,6 +235,8 @@ async function executeSandboxCode(options) {
   }
 }
 export {
+  isSandboxAvailable,
   executeSandboxCode,
+  __setSandboxUnavailableForTests,
   __setSandboxFactoryForTests
 };

package/dist/code-mode/index.d.ts

@@ -8,5 +8,5 @@
 export { generateCodeModeTypes, type GeneratedTypes, } from "./type-generator.js";
 export { executeSandboxCode, __setSandboxFactoryForTests, type ExecuteSandboxCodeOptions, type ExecuteSandboxCodeResult, } from "./executor.js";
 export { RUNTIME_STUB_SOURCE } from "./runtime-stub.js";
-export { buildCodeModeTool, CODE_MODE_TOOL_NAME, type CodeModeToolOptions, type CodeModeToolDefinition, } from "./tool-builder.js";
+export { buildCodeModeTool, canUseCodeMode, CODE_MODE_TOOL_NAME, type CodeModeToolOptions, type CodeModeToolDefinition, } from "./tool-builder.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/code-mode/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/code-mode/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,GACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,GAC9B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/code-mode/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,GACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,GAC9B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,mBAAmB,CAAC"}

package/dist/code-mode/index.js

@@ -217,6 +217,7 @@ function pascalCase(id) {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -235,6 +236,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -285,8 +287,37 @@ export { callTool };
 
 // executor.ts
 var sandboxFactoryOverride = null;
+var _sandboxAvailableCache = null;
+var _sandboxForcedUnavailableForTests = false;
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -374,6 +405,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -465,6 +498,34 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function diagnoseCodeMode(client) {
+  if (!await isSandboxAvailable()) {
+    return { available: false, reason: "sandbox-missing" };
+  }
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  if (!publicUrl) {
+    return { available: false, reason: "no-public-url" };
+  }
+  return { available: true };
+}
+async function canUseCodeMode(client) {
+  return (await diagnoseCodeMode(client)).available;
+}
+var CODE_MODE_UNAVAILABLE_MESSAGES = {
+  "sandbox-missing": "[integrate-sdk] Code Mode unavailable (reason: sandbox-missing) — falling back to tool mode. " + "Install `@vercel/sandbox` (e.g. `bun add @vercel/sandbox`) to enable Code Mode.",
+  "no-public-url": "[integrate-sdk] Code Mode unavailable (reason: no-public-url) — falling back to tool mode. " + "Set `codeMode.publicUrl` on your server config or the `INTEGRATE_PUBLIC_URL` env var."
+};
+var warnedCodeModeReasons = new Set;
+function __resetCodeModeFallbackWarnings() {
+  warnedCodeModeReasons.clear();
+}
+function warnCodeModeFallback(reason) {
+  if (warnedCodeModeReasons.has(reason))
+    return;
+  warnedCodeModeReasons.add(reason);
+  console.warn(CODE_MODE_UNAVAILABLE_MESSAGES[reason]);
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -477,6 +538,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -491,6 +553,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -520,6 +583,7 @@ ${generated.source}
 export {
   generateCodeModeTypes,
   executeSandboxCode,
+  canUseCodeMode,
   buildCodeModeTool,
   __setSandboxFactoryForTests,
   RUNTIME_STUB_SOURCE,

package/dist/code-mode/runtime-stub.d.ts

@@ -12,5 +12,5 @@
  * dependencies. It is NOT imported by the host SDK — it only ships as a
  * literal payload to the sandbox.
  */
-export declare const RUNTIME_STUB_SOURCE = "// runtime.mjs \u2014 generated by integrate-sdk code mode\nconst MCP_URL = process.env.INTEGRATE_MCP_URL;\nconst SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;\nconst PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';\nconst INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';\nconst CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';\n\nif (!MCP_URL) {\n  throw new Error('INTEGRATE_MCP_URL is not set \u2014 the sandbox cannot reach the MCP route.');\n}\n\nfunction camelToSnake(str) {\n  return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());\n}\n\nasync function callTool(toolName, args) {\n  const headers = {\n    'Content-Type': 'application/json',\n    'x-integrate-code-mode': '1',\n  };\n  if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;\n  if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;\n  if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;\n  if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;\n\n  const res = await fetch(MCP_URL, {\n    method: 'POST',\n    headers,\n    body: JSON.stringify({ name: toolName, arguments: args || {} }),\n  });\n\n  const text = await res.text();\n  let payload;\n  try {\n    payload = text ? JSON.parse(text) : null;\n  } catch {\n    payload = { content: [{ type: 'text', text }] };\n  }\n\n  if (!res.ok) {\n    const message = (payload && (payload.error || payload.message)) || 'Tool call failed: HTTP ' + res.status;\n    const err = new Error(message);\n    err.status = res.status;\n    err.toolName = toolName;\n    throw err;\n  }\n\n  return payload;\n}\n\nfunction createIntegrationProxy(integrationId) {\n  return new Proxy({}, {\n    get(_target, methodName) {\n      if (typeof methodName !== 'string') return undefined;\n      return (args) => callTool(integrationId + '_' + camelToSnake(methodName), args);\n    },\n  });\n}\n\nexport const client = new Proxy({}, {\n  get(_target, integrationId) {\n    if (typeof integrationId !== 'string') return undefined;\n    return createIntegrationProxy(integrationId);\n  },\n});\n\nexport { callTool };\n";
+export declare const RUNTIME_STUB_SOURCE = "// runtime.mjs \u2014 generated by integrate-sdk code mode\nconst MCP_URL = process.env.INTEGRATE_MCP_URL;\nconst SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;\nconst API_KEY = process.env.INTEGRATE_API_KEY || '';\nconst PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';\nconst INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';\nconst CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';\n\nif (!MCP_URL) {\n  throw new Error('INTEGRATE_MCP_URL is not set \u2014 the sandbox cannot reach the MCP route.');\n}\n\nfunction camelToSnake(str) {\n  return str.replace(/[A-Z]/g, (letter) => '_' + letter.toLowerCase());\n}\n\nasync function callTool(toolName, args) {\n  const headers = {\n    'Content-Type': 'application/json',\n    'x-integrate-code-mode': '1',\n  };\n  if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;\n  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;\n  if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;\n  if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;\n  if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;\n\n  const res = await fetch(MCP_URL, {\n    method: 'POST',\n    headers,\n    body: JSON.stringify({ name: toolName, arguments: args || {} }),\n  });\n\n  const text = await res.text();\n  let payload;\n  try {\n    payload = text ? JSON.parse(text) : null;\n  } catch {\n    payload = { content: [{ type: 'text', text }] };\n  }\n\n  if (!res.ok) {\n    const message = (payload && (payload.error || payload.message)) || 'Tool call failed: HTTP ' + res.status;\n    const err = new Error(message);\n    err.status = res.status;\n    err.toolName = toolName;\n    throw err;\n  }\n\n  return payload;\n}\n\nfunction createIntegrationProxy(integrationId) {\n  return new Proxy({}, {\n    get(_target, methodName) {\n      if (typeof methodName !== 'string') return undefined;\n      return (args) => callTool(integrationId + '_' + camelToSnake(methodName), args);\n    },\n  });\n}\n\nexport const client = new Proxy({}, {\n  get(_target, integrationId) {\n    if (typeof integrationId !== 'string') return undefined;\n    return createIntegrationProxy(integrationId);\n  },\n});\n\nexport { callTool };\n";
 //# sourceMappingURL=runtime-stub.d.ts.map

package/dist/code-mode/runtime-stub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-stub.d.ts","sourceRoot":"","sources":["../../../src/code-mode/runtime-stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,mBAAmB,qmEAmE/B,CAAC"}
+{"version":3,"file":"runtime-stub.d.ts","sourceRoot":"","sources":["../../../src/code-mode/runtime-stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,mBAAmB,qtEAqE/B,CAAC"}

package/dist/code-mode/runtime-stub.js

@@ -2,6 +2,7 @@
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -20,6 +21,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;

package/dist/code-mode/tool-builder.d.ts

@@ -74,6 +74,23 @@ export declare function resolveCodeModeClientConfig(client: MCPClient<any>): {
         };
     };
 };
+export type CodeModeUnavailableReason = "sandbox-missing" | "no-public-url";
+export type CodeModeDiagnosis = {
+    available: true;
+} | {
+    available: false;
+    reason: CodeModeUnavailableReason;
+};
+export declare function diagnoseCodeMode(client: MCPClient<any>): Promise<CodeModeDiagnosis>;
+export declare function canUseCodeMode(client: MCPClient<any>): Promise<boolean>;
+/** @internal — used by unit tests to reset the warn-once throttle. */
+export declare function __resetCodeModeFallbackWarnings(): void;
+/**
+ * Called by AI helpers when auto-detection picks `tools` mode. Emits a
+ * throttled `console.warn` so operators can tell *why* Code Mode was
+ * silently downgraded. Each reason warns at most once per process.
+ */
+export declare function warnCodeModeFallback(reason: CodeModeUnavailableReason): void;
 /**
  * Build the `execute_code` tool definition. The returned `execute` function
  * is what the AI provider SDK ultimately invokes when the model picks the

package/dist/code-mode/tool-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-builder.d.ts","sourceRoot":"","sources":["../../../src/code-mode/tool-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAsB,KAAK,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAGlF,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAElD,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,iCAAiC;IACjC,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;aAAE,CAAA;SAAE,CAAC;KAClH,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE;YACV,IAAI,EAAE;gBAAE,IAAI,EAAE,QAAQ,CAAC;gBAAC,WAAW,EAAE,MAAM,CAAA;aAAE,CAAC;SAC/C,CAAC;QACF,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QACnB,oBAAoB,EAAE,KAAK,CAAC;KAC7B,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACzE;AAuBD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC;CAClH,CAGA;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,EAAE,mBAAmB,GAC3B,sBAAsB,CA6DxB"}
+{"version":3,"file":"tool-builder.d.ts","sourceRoot":"","sources":["../../../src/code-mode/tool-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,eAAe,CAAC;AAGvB,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAElD,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,iCAAiC;IACjC,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;aAAE,CAAA;SAAE,CAAC;KAClH,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE;YACV,IAAI,EAAE;gBAAE,IAAI,EAAE,QAAQ,CAAC;gBAAC,WAAW,EAAE,MAAM,CAAA;aAAE,CAAC;SAC/C,CAAC;QACF,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QACnB,oBAAoB,EAAE,KAAK,CAAC;KAC7B,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACzE;AAuBD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC;CAClH,CAGA;AAED,MAAM,MAAM,yBAAyB,GAAG,iBAAiB,GAAG,eAAe,CAAC;AAE5E,MAAM,MAAM,iBAAiB,GACzB;IAAE,SAAS,EAAE,IAAI,CAAA;CAAE,GACnB;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,yBAAyB,CAAA;CAAE,CAAC;AAE5D,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAUzF;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAE7E;AAaD,sEAAsE;AACtE,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CAI5E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,OAAO,EAAE,mBAAmB,GAC3B,sBAAsB,CA+DxB"}

package/dist/code-mode/tool-builder.js

@@ -217,6 +217,7 @@ function pascalCase(id) {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -235,6 +236,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -285,8 +287,37 @@ export { callTool };
 
 // executor.ts
 var sandboxFactoryOverride = null;
+var _sandboxAvailableCache = null;
+var _sandboxForcedUnavailableForTests = false;
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -374,6 +405,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -465,6 +498,34 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function diagnoseCodeMode(client) {
+  if (!await isSandboxAvailable()) {
+    return { available: false, reason: "sandbox-missing" };
+  }
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  if (!publicUrl) {
+    return { available: false, reason: "no-public-url" };
+  }
+  return { available: true };
+}
+async function canUseCodeMode(client) {
+  return (await diagnoseCodeMode(client)).available;
+}
+var CODE_MODE_UNAVAILABLE_MESSAGES = {
+  "sandbox-missing": "[integrate-sdk] Code Mode unavailable (reason: sandbox-missing) — falling back to tool mode. " + "Install `@vercel/sandbox` (e.g. `bun add @vercel/sandbox`) to enable Code Mode.",
+  "no-public-url": "[integrate-sdk] Code Mode unavailable (reason: no-public-url) — falling back to tool mode. " + "Set `codeMode.publicUrl` on your server config or the `INTEGRATE_PUBLIC_URL` env var."
+};
+var warnedCodeModeReasons = new Set;
+function __resetCodeModeFallbackWarnings() {
+  warnedCodeModeReasons.clear();
+}
+function warnCodeModeFallback(reason) {
+  if (warnedCodeModeReasons.has(reason))
+    return;
+  warnedCodeModeReasons.add(reason);
+  console.warn(CODE_MODE_UNAVAILABLE_MESSAGES[reason]);
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -477,6 +538,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -491,6 +553,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -518,7 +581,11 @@ ${generated.source}
   };
 }
 export {
+  warnCodeModeFallback,
   resolveCodeModeClientConfig,
+  diagnoseCodeMode,
+  canUseCodeMode,
   buildCodeModeTool,
+  __resetCodeModeFallbackWarnings,
   CODE_MODE_TOOL_NAME
 };

package/dist/index.js

@@ -8943,6 +8943,7 @@ var init_type_generator = __esm(() => {
 var RUNTIME_STUB_SOURCE = `// runtime.mjs — generated by integrate-sdk code mode
 const MCP_URL = process.env.INTEGRATE_MCP_URL;
 const SESSION_TOKEN = process.env.INTEGRATE_SESSION_TOKEN;
+const API_KEY = process.env.INTEGRATE_API_KEY || '';
 const PROVIDER_TOKENS = process.env.INTEGRATE_PROVIDER_TOKENS || '';
 const INTEGRATIONS_HEADER = process.env.INTEGRATE_INTEGRATIONS || '';
 const CONTEXT_JSON = process.env.INTEGRATE_CONTEXT || '';
@@ -8961,6 +8962,7 @@ async function callTool(toolName, args) {
     'x-integrate-code-mode': '1',
   };
   if (SESSION_TOKEN) headers['Authorization'] = 'Bearer ' + SESSION_TOKEN;
+  if (API_KEY) headers['x-integrate-api-key'] = API_KEY;
   if (PROVIDER_TOKENS) headers['x-integrate-tokens'] = PROVIDER_TOKENS;
   if (INTEGRATIONS_HEADER) headers['x-integrations'] = INTEGRATIONS_HEADER;
   if (CONTEXT_JSON) headers['x-integrate-context'] = CONTEXT_JSON;
@@ -9012,11 +9014,40 @@ export { callTool };
 // src/code-mode/executor.ts
 var exports_executor = {};
 __export(exports_executor, {
+  isSandboxAvailable: () => isSandboxAvailable,
   executeSandboxCode: () => executeSandboxCode,
+  __setSandboxUnavailableForTests: () => __setSandboxUnavailableForTests,
   __setSandboxFactoryForTests: () => __setSandboxFactoryForTests
 });
 function __setSandboxFactoryForTests(factory) {
   sandboxFactoryOverride = factory;
+  _sandboxForcedUnavailableForTests = false;
+  _sandboxAvailableCache = null;
+}
+function __setSandboxUnavailableForTests(force) {
+  _sandboxForcedUnavailableForTests = force;
+  _sandboxAvailableCache = null;
+}
+async function isSandboxAvailable() {
+  if (_sandboxAvailableCache !== null)
+    return _sandboxAvailableCache;
+  if (_sandboxForcedUnavailableForTests) {
+    _sandboxAvailableCache = false;
+    return false;
+  }
+  if (sandboxFactoryOverride) {
+    _sandboxAvailableCache = true;
+    return true;
+  }
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    await dynamicImport("@" + "vercel/sandbox");
+    _sandboxAvailableCache = true;
+    return true;
+  } catch {
+    _sandboxAvailableCache = false;
+    return false;
+  }
 }
 async function loadSandboxFactory() {
   if (sandboxFactoryOverride)
@@ -9103,6 +9134,8 @@ async function executeSandboxCode(options) {
     const env = {
       INTEGRATE_MCP_URL: options.mcpUrl
     };
+    if (options.apiKey)
+      env.INTEGRATE_API_KEY = options.apiKey;
     if (options.sessionToken)
       env.INTEGRATE_SESSION_TOKEN = options.sessionToken;
     if (options.providerTokens && Object.keys(options.providerTokens).length > 0) {
@@ -9145,7 +9178,7 @@ async function executeSandboxCode(options) {
     }
   }
 }
-var sandboxFactoryOverride = null, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
+var sandboxFactoryOverride = null, _sandboxAvailableCache = null, _sandboxForcedUnavailableForTests = false, RESULT_SENTINEL = "__INTEGRATE_RESULT__";
 var init_executor = () => {};
 
 // src/code-mode/tool-builder.ts
@@ -9153,6 +9186,23 @@ function resolveCodeModeClientConfig(client) {
   const oauthConfig = client.__oauthConfig;
   return oauthConfig?.codeMode ?? {};
 }
+async function diagnoseCodeMode(client) {
+  if (!await isSandboxAvailable()) {
+    return { available: false, reason: "sandbox-missing" };
+  }
+  const serverConfig = resolveCodeModeClientConfig(client);
+  const publicUrl = serverConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+  if (!publicUrl) {
+    return { available: false, reason: "no-public-url" };
+  }
+  return { available: true };
+}
+function warnCodeModeFallback(reason) {
+  if (warnedCodeModeReasons.has(reason))
+    return;
+  warnedCodeModeReasons.add(reason);
+  console.warn(CODE_MODE_UNAVAILABLE_MESSAGES[reason]);
+}
 function buildCodeModeTool(client, options) {
   const { tools, providerTokens, context, integrationIds } = options;
   const generated = generateCodeModeTypes(tools);
@@ -9165,6 +9215,7 @@ ${generated.source}
 \`\`\``;
   const execute = async ({ code }) => {
     const publicUrl = sandboxOverrides.publicUrl ?? serverCodeModeConfig.publicUrl ?? getEnv("INTEGRATE_PUBLIC_URL");
+    const apiKey = client.__oauthConfig?.apiKey;
     if (!publicUrl) {
       return {
         success: false,
@@ -9179,6 +9230,7 @@ ${generated.source}
     return executeSandboxCode({
       code,
       mcpUrl,
+      apiKey,
       providerTokens,
       context,
       integrationsHeader: integrationIds && integrationIds.length > 0 ? integrationIds.join(",") : undefined,
@@ -9205,7 +9257,7 @@ ${generated.source}
     execute
   };
 }
-var CODE_MODE_TOOL_NAME = "execute_code", DEFAULT_INSTRUCTIONS;
+var CODE_MODE_TOOL_NAME = "execute_code", DEFAULT_INSTRUCTIONS, CODE_MODE_UNAVAILABLE_MESSAGES, warnedCodeModeReasons;
 var init_tool_builder = __esm(() => {
   init_type_generator();
   init_executor();
@@ -9230,6 +9282,11 @@ var init_tool_builder = __esm(() => {
     "API surface:"
   ].join(`
 `);
+  CODE_MODE_UNAVAILABLE_MESSAGES = {
+    "sandbox-missing": "[integrate-sdk] Code Mode unavailable (reason: sandbox-missing) — falling back to tool mode. " + "Install `@vercel/sandbox` (e.g. `bun add @vercel/sandbox`) to enable Code Mode.",
+    "no-public-url": "[integrate-sdk] Code Mode unavailable (reason: no-public-url) — falling back to tool mode. " + "Set `codeMode.publicUrl` on your server config or the `INTEGRATE_PUBLIC_URL` env var."
+  };
+  warnedCodeModeReasons = new Set;
 });
 
 // src/ai/vercel-ai.ts
@@ -9256,8 +9313,19 @@ async function getVercelAITools(client, options) {
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
   const vercelTools = {};
-  const mode = options?.mode ?? "code";
-  if (mode === "code") {
+  let effectiveMode;
+  if (options?.mode !== undefined) {
+    effectiveMode = options.mode;
+  } else {
+    const diagnosis = await diagnoseCodeMode(client);
+    if (diagnosis.available) {
+      effectiveMode = "code";
+    } else {
+      warnCodeModeFallback(diagnosis.reason);
+      effectiveMode = "tools";
+    }
+  }
+  if (effectiveMode === "code") {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10715,8 +10783,19 @@ async function getOpenAITools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const openaiTools = mode === "code" ? (() => {
+  let effectiveMode;
+  if (options?.mode !== undefined) {
+    effectiveMode = options.mode;
+  } else {
+    const diagnosis = await diagnoseCodeMode(client);
+    if (diagnosis.available) {
+      effectiveMode = "code";
+    } else {
+      warnCodeModeFallback(diagnosis.reason);
+      effectiveMode = "tools";
+    }
+  }
+  const openaiTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -10895,8 +10974,19 @@ async function getAnthropicTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
-  const anthropicTools = mode === "code" ? (() => {
+  let effectiveMode;
+  if (options?.mode !== undefined) {
+    effectiveMode = options.mode;
+  } else {
+    const diagnosis = await diagnoseCodeMode(client);
+    if (diagnosis.available) {
+      effectiveMode = "code";
+    } else {
+      warnCodeModeFallback(diagnosis.reason);
+      effectiveMode = "tools";
+    }
+  }
+  const anthropicTools = effectiveMode === "code" ? (() => {
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
       providerTokens,
@@ -11084,9 +11174,20 @@ async function getGoogleTools(client, options) {
   const finalOptions = providerTokens ? { ...options, providerTokens } : options;
   await ensureClientConnected(client);
   const mcpTools = await client.getEnabledToolsAsync();
-  const mode = options?.mode ?? "code";
+  let effectiveMode;
+  if (options?.mode !== undefined) {
+    effectiveMode = options.mode;
+  } else {
+    const diagnosis = await diagnoseCodeMode(client);
+    if (diagnosis.available) {
+      effectiveMode = "code";
+    } else {
+      warnCodeModeFallback(diagnosis.reason);
+      effectiveMode = "tools";
+    }
+  }
   let googleTools;
-  if (mode === "code") {
+  if (effectiveMode === "code") {
     const TypeEnum = await getGoogleType();
     const codeTool = buildCodeModeTool(client, {
       tools: mcpTools,
@@ -11633,6 +11734,24 @@ function createMCPServer(config) {
             } catch {}
           }
         }
+        if (!authHeader && config.getProviderToken) {
+          const codeModeHeader = webRequest.headers.get("x-integrate-code-mode");
+          const contextHeader = webRequest.headers.get("x-integrate-context");
+          const callbackApiKey = webRequest.headers.get("x-integrate-api-key");
+          const toolName = typeof body?.name === "string" ? body.name : "";
+          if (codeModeHeader === "1" && contextHeader && toolName && config.apiKey && callbackApiKey === config.apiKey) {
+            try {
+              const context2 = JSON.parse(contextHeader);
+              const provider = toolName.split("_")[0];
+              if (provider) {
+                const tokenData = await config.getProviderToken(provider, undefined, context2);
+                if (tokenData?.accessToken) {
+                  authHeader = `Bearer ${tokenData.accessToken}`;
+                }
+              }
+            } catch {}
+          }
+        }
         const { OAuthHandler: OAuthHandler2 } = await Promise.resolve().then(() => (init_base_handler(), exports_base_handler));
         const oauthHandler = new OAuthHandler2({
           providers,