managed-deepagents 0.4.2 → 0.4.3-dev.94

package/dist/connectors/toolserver/connectors.js

@@ -0,0 +1,13 @@
+/**
+ * Per-integration factories on `connectors` for LangSmith tool-server tools.
+ *
+ * Built from {@link TOOL_SERVER_INTEGRATIONS}. Each property documents the
+ * provider, the tool names accepted by `includeTools` / `excludeTools`, and the
+ * shared {@link ToolServerConnectorConfig} options. Hover docs live here so IDE
+ * autocomplete on `connectors.gmail` (etc.) stays useful.
+ *
+ * GitHub and Slack are first-class connectors (sandbox / Events / messaging) and
+ * are intentionally omitted from this interface — see the `connectors` namespace.
+ */
+export {};
+//# sourceMappingURL=connectors.js.map

package/dist/connectors/toolserver/connectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectors.js","sourceRoot":"","sources":["../../../src/connectors/toolserver/connectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/connectors/toolserver/index.d.ts

@@ -0,0 +1,142 @@
+/**
+ * Tool server connectors — the integrations a workspace manages in LangSmith.
+ *
+ * A workspace connects Gmail, Slack, Linear, … once in LangSmith; declaring the
+ * matching connector is how a Managed Deep Agent gets those tools. The provider's
+ * tokens stay in LangSmith's vault: MDA calls LangSmith's tool server gateway,
+ * which resolves the credential for the subject and forwards to the tool server.
+ * The deployment never sees, stores, or refreshes a provider token.
+ *
+ * @example
+ * ```ts
+ * // connectors/gmail.ts
+ * import { connectors } from "managed-deepagents";
+ *
+ * export const connector = connectors.gmail({
+ *   includeTools: ["gmail_read_emails", "gmail_draft_email"],
+ * });
+ * ```
+ *
+ * ## Whose credentials
+ *
+ * Nothing here. Which workspace the call runs against, which key authenticates
+ * it, and whose connection it resolves are facts about the deployment, not
+ * choices the agent's source makes — so they come from the environment
+ * (`LANGSMITH_API_KEY`, `LANGSMITH_ENDPOINT`, `LANGSMITH_WORKSPACE_ID`) and the
+ * declaration is only ever about which tools the agent gets.
+ *
+ * The gateway resolves credentials for whoever the call authenticates as, so the
+ * subject is the deployment's key rather than the caller of the run: every thread
+ * reaches the same connection. A personal key resolves that user's connections,
+ * which is what makes `mda dev` work against your own Gmail. A key with no user
+ * behind it has no subject yet, and has to borrow an agent's shared connection
+ * via `MDA_TOOLSERVER_AGENT_ID` — see the loader for why that is an env var.
+ *
+ * Per-actor Fleet vault subjects: declaring a Fleet OAuth integration connector
+ * (e.g. `connectors.gmail`, `connectors.googleSheets`) on a user-scoped identity
+ * deployment mounts Connect-with-X automatically (unioned scopes) and routes
+ * toolserver calls with a derived `?agent_id=` at invoke time. Integrations live
+ * in {@link ./integrations.ts}.
+ */
+export { FLEET_OAUTH_INTEGRATIONS, GOOGLE_INTEGRATION, GOOGLE_TOOLSERVER_SLUGS, LINKEDIN_INTEGRATION, LINKEDIN_TOOLSERVER_SLUGS, MICROSOFT_INTEGRATION, MICROSOFT_TOOLSERVER_SLUGS, X_INTEGRATION, X_TOOLSERVER_SLUGS, integrationConnectorKinds, integrationById, integrationForSlug, googleConnectorKinds, googleScopesForConnectorKinds, hasIntegrationToolServerConnector, hasGoogleToolServerConnector, hasLinkedInToolServerConnector, hasMicrosoftToolServerConnector, hasXToolServerConnector, isFleetOAuthSlug, isGoogleToolServerSlug, isLinkedInToolServerSlug, isMicrosoftToolServerSlug, isXToolServerSlug, linkedinConnectorKinds, linkedinScopesForConnectorKinds, microsoftConnectorKinds, microsoftScopesForConnectorKinds, xConnectorKinds, xScopesForConnectorKinds, readIntegrationProviderSlug, readGoogleProviderSlug, readLinkedInProviderSlug, readMicrosoftProviderSlug, readXProviderSlug, scopesForIntegrationConnectorKinds, type FleetOAuthIntegration, type GoogleToolServerSlug, type LinkedInToolServerSlug, type MicrosoftToolServerSlug, type XToolServerSlug, } from "./integrations.js";
+import type { ZodRawShape, ZodType } from "zod";
+import type { Connector } from "../../runtime/connector.js";
+import { type ToolSelection, type ToolSelectionConnectorConfig } from "../tool-selection.js";
+import { type ToolServerSlug } from "./catalog.js";
+import type { ToolServerConnectors } from "./connectors.js";
+export { SLACK_SLUG, STANDALONE_TOOL_SERVER_INTEGRATIONS, TOOL_SERVER_INTEGRATIONS, integrationForFactory, } from "./catalog.js";
+export type { ToolServerFactoryName, ToolServerIntegration, ToolServerIntegrationEntry, ToolServerSlug, ToolsForFactory, } from "./catalog.js";
+export type { ToolServerConnectorFactoryFor, ToolServerConnectors, } from "./connectors.js";
+/**
+ * @deprecated Prefer {@link ToolSelection}. Kept so existing
+ * `import type { ToolServerToolSelection } from "managed-deepagents"` keeps
+ * compiling after the shared tool-selection rename.
+ */
+export type ToolServerToolSelection<TTool extends string = string> = ToolSelection<TTool>;
+/**
+ * Configuration accepted by every `connectors.<integration>` factory.
+ *
+ * Alias of {@link ToolSelectionConnectorConfig}: which tools the agent gets and
+ * how long it waits for one. How to reach LangSmith and whose credentials to
+ * use come from the deployment — see the module docs.
+ *
+ * When `TTool` is a catalog tool-name union (via {@link ToolsForFactory}),
+ * `includeTools` / `excludeTools` autocomplete the integration's tools.
+ * Omitting both means every tool the integration publishes; an empty
+ * `includeTools` selects none.
+ */
+export type ToolServerConnectorConfig<TTool extends string = string> = ToolSelectionConnectorConfig<TTool>;
+/**
+ * A declared tool server integration. Branded as a managed {@link Connector}
+ * whose `tools` hook loads the integration's tools at runtime, and whose `kind`
+ * is the integration's wire slug.
+ */
+export type ToolServerConnector<TTool extends string = string> = Connector & ToolServerConnectorConfig<TTool> & {
+    /** The tool server slug this connector loads from. */
+    readonly kind: ToolServerSlug;
+};
+/**
+ * A `connectors.<integration>` factory for a LangSmith tool-server integration
+ * (e.g. `connectors.gmail`, `connectors.linear`, `connectors.googleSheets`).
+ *
+ * Prefer the per-factory typings on {@link ToolServerConnectors} for hover docs
+ * and tool-name autocomplete. This alias is the shared untyped shape used when
+ * iterating the catalog.
+ *
+ * @param config - Optional tool selection and per-call timeout.
+ * @returns A branded connector discovered from `connectors/<name>.ts`.
+ *
+ * @example
+ * ```ts
+ * export const connector = connectors.gmail({
+ *   includeTools: ["gmail_read_emails", "gmail_draft_email"],
+ * });
+ * ```
+ *
+ * @see {@link ToolServerConnectorConfig}
+ * @see {@link ToolServerConnectors}
+ */
+export type ToolServerConnectorFactory = (config?: ToolServerConnectorConfig) => ToolServerConnector;
+/**
+ * Build the argument schema for one tool server integration.
+ *
+ * Delegates to {@link toolSelectionConnectorSchema} so marketplace bridges and
+ * tool-server factories reject blank/duplicate names and include∩exclude
+ * overlap the same way. `extra` adds whatever the integration accepts on top
+ * of the shared options.
+ *
+ * Strict, so an option that does not exist is an error rather than a silently
+ * ignored key — which matches the Python model's `extra="forbid"`, and is what
+ * tells a project that `apiKey` and friends now come from the environment.
+ *
+ * The result is cast to the caller's argument types. Zod cannot describe a
+ * prefaulted object as "accepts undefined, produces defaults" in one type, so
+ * the shape and the declared config interface are kept in step by review.
+ */
+export declare function toolServerConnectorSchema<TArgs, TInput>(extra?: ZodRawShape): ZodType<TArgs, TInput>;
+/**
+ * Build the `tools` hook that loads one integration's tools.
+ *
+ * Shared so every integration reaches the gateway the same way.
+ *
+ * The hook runs at agent-graph construction, so the loader is imported lazily —
+ * an authoring-only install never pulls in the MCP client.
+ */
+export declare function toolServerTools(slug: ToolServerSlug, label: string): (ctx: unknown, self: ToolServerConnectorConfig) => Promise<unknown[]>;
+/**
+ * Build the factory for one tool server integration.
+ *
+ * For the integrations that are only their tools. An integration with more to
+ * contribute (e.g. `connectors.slack`) calls `defineExtension` itself with
+ * {@link toolServerConnectorSchema} and {@link toolServerTools}.
+ */
+export declare function toolServerConnector(slug: ToolServerSlug, label: string): ToolServerConnectorFactory;
+/**
+ * The `connectors` entries for the integrations that have their own factory.
+ *
+ * Built from the catalog so a new integration is one entry, not an entry plus a
+ * namespace line that can be forgotten. Typed as {@link ToolServerConnectors} so
+ * hover docs and tool-name unions surface on `connectors.<factory>`.
+ */
+export declare const toolServerConnectors: ToolServerConnectors;
+//# sourceMappingURL=index.d.ts.map

package/dist/connectors/toolserver/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/toolserver/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,6BAA6B,EAC7B,iCAAiC,EACjC,4BAA4B,EAC5B,8BAA8B,EAC9B,+BAA+B,EAC/B,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,EACtB,+BAA+B,EAC/B,uBAAuB,EACvB,gCAAgC,EAChC,eAAe,EACf,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,kCAAkC,EAClC,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAGhD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,4BAA4B,EAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,EACL,UAAU,EACV,mCAAmC,EACnC,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,cAAc,EACd,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,6BAA6B,EAC7B,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAEzB;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,IAC/D,aAAa,CAAC,KAAK,CAAC,CAAC;AAEvB;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,yBAAyB,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,IACjE,4BAA4B,CAAC,KAAK,CAAC,CAAC;AAEtC;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,IAAI,SAAS,GACxE,yBAAyB,CAAC,KAAK,CAAC,GAAG;IACjC,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B,CAAC;AAEJ;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,0BAA0B,GAAG,CACvC,MAAM,CAAC,EAAE,yBAAyB,KAC/B,mBAAmB,CAAC;AAEzB;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EACrD,KAAK,GAAE,WAAgB,GACtB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAExB;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,MAAM,GACZ,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAKvE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,MAAM,GACZ,0BAA0B,CAU5B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,oBAKC,CAAC"}

package/dist/connectors/toolserver/index.js

@@ -0,0 +1,105 @@
+/**
+ * Tool server connectors — the integrations a workspace manages in LangSmith.
+ *
+ * A workspace connects Gmail, Slack, Linear, … once in LangSmith; declaring the
+ * matching connector is how a Managed Deep Agent gets those tools. The provider's
+ * tokens stay in LangSmith's vault: MDA calls LangSmith's tool server gateway,
+ * which resolves the credential for the subject and forwards to the tool server.
+ * The deployment never sees, stores, or refreshes a provider token.
+ *
+ * @example
+ * ```ts
+ * // connectors/gmail.ts
+ * import { connectors } from "managed-deepagents";
+ *
+ * export const connector = connectors.gmail({
+ *   includeTools: ["gmail_read_emails", "gmail_draft_email"],
+ * });
+ * ```
+ *
+ * ## Whose credentials
+ *
+ * Nothing here. Which workspace the call runs against, which key authenticates
+ * it, and whose connection it resolves are facts about the deployment, not
+ * choices the agent's source makes — so they come from the environment
+ * (`LANGSMITH_API_KEY`, `LANGSMITH_ENDPOINT`, `LANGSMITH_WORKSPACE_ID`) and the
+ * declaration is only ever about which tools the agent gets.
+ *
+ * The gateway resolves credentials for whoever the call authenticates as, so the
+ * subject is the deployment's key rather than the caller of the run: every thread
+ * reaches the same connection. A personal key resolves that user's connections,
+ * which is what makes `mda dev` work against your own Gmail. A key with no user
+ * behind it has no subject yet, and has to borrow an agent's shared connection
+ * via `MDA_TOOLSERVER_AGENT_ID` — see the loader for why that is an env var.
+ *
+ * Per-actor Fleet vault subjects: declaring a Fleet OAuth integration connector
+ * (e.g. `connectors.gmail`, `connectors.googleSheets`) on a user-scoped identity
+ * deployment mounts Connect-with-X automatically (unioned scopes) and routes
+ * toolserver calls with a derived `?agent_id=` at invoke time. Integrations live
+ * in {@link ./integrations.ts}.
+ */
+export { FLEET_OAUTH_INTEGRATIONS, GOOGLE_INTEGRATION, GOOGLE_TOOLSERVER_SLUGS, LINKEDIN_INTEGRATION, LINKEDIN_TOOLSERVER_SLUGS, MICROSOFT_INTEGRATION, MICROSOFT_TOOLSERVER_SLUGS, X_INTEGRATION, X_TOOLSERVER_SLUGS, integrationConnectorKinds, integrationById, integrationForSlug, googleConnectorKinds, googleScopesForConnectorKinds, hasIntegrationToolServerConnector, hasGoogleToolServerConnector, hasLinkedInToolServerConnector, hasMicrosoftToolServerConnector, hasXToolServerConnector, isFleetOAuthSlug, isGoogleToolServerSlug, isLinkedInToolServerSlug, isMicrosoftToolServerSlug, isXToolServerSlug, linkedinConnectorKinds, linkedinScopesForConnectorKinds, microsoftConnectorKinds, microsoftScopesForConnectorKinds, xConnectorKinds, xScopesForConnectorKinds, readIntegrationProviderSlug, readGoogleProviderSlug, readLinkedInProviderSlug, readMicrosoftProviderSlug, readXProviderSlug, scopesForIntegrationConnectorKinds, } from "./integrations.js";
+import { defineExtension } from "../../extension.js";
+import { toolSelectionConnectorSchema, } from "../tool-selection.js";
+import { STANDALONE_TOOL_SERVER_INTEGRATIONS, } from "./catalog.js";
+export { SLACK_SLUG, STANDALONE_TOOL_SERVER_INTEGRATIONS, TOOL_SERVER_INTEGRATIONS, integrationForFactory, } from "./catalog.js";
+/**
+ * Build the argument schema for one tool server integration.
+ *
+ * Delegates to {@link toolSelectionConnectorSchema} so marketplace bridges and
+ * tool-server factories reject blank/duplicate names and include∩exclude
+ * overlap the same way. `extra` adds whatever the integration accepts on top
+ * of the shared options.
+ *
+ * Strict, so an option that does not exist is an error rather than a silently
+ * ignored key — which matches the Python model's `extra="forbid"`, and is what
+ * tells a project that `apiKey` and friends now come from the environment.
+ *
+ * The result is cast to the caller's argument types. Zod cannot describe a
+ * prefaulted object as "accepts undefined, produces defaults" in one type, so
+ * the shape and the declared config interface are kept in step by review.
+ */
+export function toolServerConnectorSchema(extra = {}) {
+    return toolSelectionConnectorSchema(extra);
+}
+/**
+ * Build the `tools` hook that loads one integration's tools.
+ *
+ * Shared so every integration reaches the gateway the same way.
+ *
+ * The hook runs at agent-graph construction, so the loader is imported lazily —
+ * an authoring-only install never pulls in the MCP client.
+ */
+export function toolServerTools(slug, label) {
+    return async (_ctx, self) => {
+        const { loadToolServerTools } = await import("./load.js");
+        return loadToolServerTools(slug, label, self);
+    };
+}
+/**
+ * Build the factory for one tool server integration.
+ *
+ * For the integrations that are only their tools. An integration with more to
+ * contribute (e.g. `connectors.slack`) calls `defineExtension` itself with
+ * {@link toolServerConnectorSchema} and {@link toolServerTools}.
+ */
+export function toolServerConnector(slug, label) {
+    return defineExtension("connector", {
+        kind: slug,
+        label,
+        args: toolServerConnectorSchema(),
+        tools: toolServerTools(slug, label),
+    });
+}
+/**
+ * The `connectors` entries for the integrations that have their own factory.
+ *
+ * Built from the catalog so a new integration is one entry, not an entry plus a
+ * namespace line that can be forgotten. Typed as {@link ToolServerConnectors} so
+ * hover docs and tool-name unions surface on `connectors.<factory>`.
+ */
+export const toolServerConnectors = Object.fromEntries(STANDALONE_TOOL_SERVER_INTEGRATIONS.map(({ slug, factory }) => [
+    factory,
+    toolServerConnector(slug, `connectors.${factory}`),
+]));
+//# sourceMappingURL=index.js.map

package/dist/connectors/toolserver/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/connectors/toolserver/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,6BAA6B,EAC7B,iCAAiC,EACjC,4BAA4B,EAC5B,8BAA8B,EAC9B,+BAA+B,EAC/B,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,EACtB,+BAA+B,EAC/B,uBAAuB,EACvB,gCAAgC,EAChC,eAAe,EACf,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,kCAAkC,GAMnC,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EACL,4BAA4B,GAG7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mCAAmC,GAEpC,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,UAAU,EACV,mCAAmC,EACnC,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAwEtB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAK,GAAgB,EAAE;IAEvB,OAAO,4BAA4B,CAAgB,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAoB,EACpB,KAAa;IAEb,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1D,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAoB,EACpB,KAAa;IAEb,OAAO,eAAe,CAAC,WAAW,EAAE;QAClC,IAAI,EAAE,IAAI;QACV,KAAK;QACL,IAAI,EAAE,yBAAyB,EAG5B;QACH,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAyB,MAAM,CAAC,WAAW,CAC1E,mCAAmC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC7D,OAAO;IACP,mBAAmB,CAAC,IAAsB,EAAE,cAAc,OAAO,EAAE,CAAC;CACrE,CAAC,CACgC,CAAC"}

package/dist/connectors/toolserver/integrations.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Fleet OAuth integrations for toolserver connectors that store per-actor
+ * tokens in the LangSmith vault.
+ *
+ * Adding an integration here is the main step for a new Fleet provider of the
+ * same kind (Google, Microsoft Graph, LinkedIn, X): toolserver load, Connect
+ * inference, scopes, and actor-subject enablement all read this catalog.
+ */
+import type { ToolServerSlug } from "./catalog.js";
+/**
+ * A group of toolserver slugs that share one LangSmith OAuth provider and one
+ * Connect-with-X ceremony.
+ */
+export interface FleetOAuthIntegration {
+    /** Stable integration id (actor-subject registry key), e.g. `"google"`. */
+    readonly id: string;
+    /** Connect path segment / `connect.<id>()` name. */
+    readonly connectId: string;
+    /** Human label for agent hints ("Google", "Microsoft"). */
+    readonly displayName: string;
+    /** Default LangSmith OAuth provider slug. */
+    readonly defaultProviderSlug: string;
+    /** Optional env override for {@link defaultProviderSlug}. */
+    readonly providerSlugEnv?: string;
+    /** Toolserver wire slugs that belong to this integration. */
+    readonly toolServerSlugs: readonly ToolServerSlug[];
+    /** Scopes always included when any integration connector is present. */
+    readonly profileScopes?: readonly string[];
+    /** Extra OAuth scopes per toolserver slug. */
+    readonly scopesBySlug: Readonly<Partial<Record<ToolServerSlug, readonly string[]>>>;
+}
+/**
+ * Built-in Fleet OAuth integrations.
+ *
+ * To adopt another provider of the same kind: add a row, wire
+ * `connect.<id>()` (usually via {@link createFleetVaultConnectProvider}), and
+ * optionally a BYO OAuth adapter. Toolserver subject routing and connect
+ * inference pick the integration up automatically.
+ */
+export declare const FLEET_OAUTH_INTEGRATIONS: readonly FleetOAuthIntegration[];
+export declare function integrationById(id: string): FleetOAuthIntegration | undefined;
+export declare function integrationForSlug(slug: string | undefined): FleetOAuthIntegration | undefined;
+export declare function isFleetOAuthSlug(slug: string | undefined): boolean;
+/** Toolserver slugs for `integration` that appear in `kinds`. */
+export declare function integrationConnectorKinds(integration: FleetOAuthIntegration, kinds: readonly (string | undefined)[] | undefined): string[];
+export declare function hasIntegrationToolServerConnector(integration: FleetOAuthIntegration, kinds: readonly (string | undefined)[] | undefined): boolean;
+/**
+ * Union of OAuth scopes for the given connector kinds in `integration`.
+ *
+ * Includes {@link FleetOAuthIntegration.profileScopes} when at least one
+ * integration connector is present.
+ */
+export declare function scopesForIntegrationConnectorKinds(integration: FleetOAuthIntegration, kinds: readonly (string | undefined)[] | undefined): string[];
+export declare function readIntegrationProviderSlug(integration: FleetOAuthIntegration, env?: NodeJS.ProcessEnv): string;
+/** Google integration convenience — same UUID namespace / slug set as before. */
+export declare const GOOGLE_INTEGRATION: FleetOAuthIntegration;
+export declare const GOOGLE_TOOLSERVER_SLUGS: readonly ("apollo" | "ashby" | "base" | "exa" | "excel" | "gmail" | "google_bigquery" | "google_calendar" | "google_docs" | "google_drive" | "google_meet" | "google_sheets" | "google_slides" | "linear" | "linkedin" | "outlook" | "powerpoint" | "pylon" | "salesforce" | "sharepoint" | "slack" | "tavily" | "teams" | "word" | "x_com")[];
+export type GoogleToolServerSlug = (typeof GOOGLE_TOOLSERVER_SLUGS)[number];
+export declare function isGoogleToolServerSlug(slug: string | undefined): slug is GoogleToolServerSlug;
+export declare function googleConnectorKinds(kinds: readonly (string | undefined)[] | undefined): GoogleToolServerSlug[];
+export declare function googleScopesForConnectorKinds(kinds: readonly (string | undefined)[] | undefined): string[];
+export declare function hasGoogleToolServerConnector(kinds: readonly (string | undefined)[] | undefined): boolean;
+/** Env name for the Google Fleet provider slug. */
+export declare const MDA_GOOGLE_OAUTH_PROVIDER_ENV = "MDA_GOOGLE_OAUTH_PROVIDER";
+export declare const DEFAULT_GOOGLE_PROVIDER_SLUG: string;
+export declare function readGoogleProviderSlug(env?: NodeJS.ProcessEnv): string;
+/** Microsoft Graph integration convenience helpers. */
+export declare const MICROSOFT_INTEGRATION: FleetOAuthIntegration;
+export declare const MICROSOFT_TOOLSERVER_SLUGS: readonly ("apollo" | "ashby" | "base" | "exa" | "excel" | "gmail" | "google_bigquery" | "google_calendar" | "google_docs" | "google_drive" | "google_meet" | "google_sheets" | "google_slides" | "linear" | "linkedin" | "outlook" | "powerpoint" | "pylon" | "salesforce" | "sharepoint" | "slack" | "tavily" | "teams" | "word" | "x_com")[];
+export type MicrosoftToolServerSlug = (typeof MICROSOFT_TOOLSERVER_SLUGS)[number];
+export declare function isMicrosoftToolServerSlug(slug: string | undefined): slug is MicrosoftToolServerSlug;
+export declare function microsoftConnectorKinds(kinds: readonly (string | undefined)[] | undefined): MicrosoftToolServerSlug[];
+export declare function microsoftScopesForConnectorKinds(kinds: readonly (string | undefined)[] | undefined): string[];
+export declare function hasMicrosoftToolServerConnector(kinds: readonly (string | undefined)[] | undefined): boolean;
+/** Env name for the Microsoft Fleet provider slug. */
+export declare const MDA_MICROSOFT_OAUTH_PROVIDER_ENV = "MDA_MICROSOFT_OAUTH_PROVIDER";
+export declare const DEFAULT_MICROSOFT_PROVIDER_SLUG: string;
+export declare function readMicrosoftProviderSlug(env?: NodeJS.ProcessEnv): string;
+/** LinkedIn integration convenience helpers. */
+export declare const LINKEDIN_INTEGRATION: FleetOAuthIntegration;
+export declare const LINKEDIN_TOOLSERVER_SLUGS: readonly ("apollo" | "ashby" | "base" | "exa" | "excel" | "gmail" | "google_bigquery" | "google_calendar" | "google_docs" | "google_drive" | "google_meet" | "google_sheets" | "google_slides" | "linear" | "linkedin" | "outlook" | "powerpoint" | "pylon" | "salesforce" | "sharepoint" | "slack" | "tavily" | "teams" | "word" | "x_com")[];
+export type LinkedInToolServerSlug = (typeof LINKEDIN_TOOLSERVER_SLUGS)[number];
+export declare function isLinkedInToolServerSlug(slug: string | undefined): slug is LinkedInToolServerSlug;
+export declare function linkedinConnectorKinds(kinds: readonly (string | undefined)[] | undefined): LinkedInToolServerSlug[];
+export declare function linkedinScopesForConnectorKinds(kinds: readonly (string | undefined)[] | undefined): string[];
+export declare function hasLinkedInToolServerConnector(kinds: readonly (string | undefined)[] | undefined): boolean;
+/** Env name for the LinkedIn Fleet provider slug. */
+export declare const MDA_LINKEDIN_OAUTH_PROVIDER_ENV = "MDA_LINKEDIN_OAUTH_PROVIDER";
+export declare const DEFAULT_LINKEDIN_PROVIDER_SLUG: string;
+export declare function readLinkedInProviderSlug(env?: NodeJS.ProcessEnv): string;
+/** X (Twitter) integration convenience helpers. */
+export declare const X_INTEGRATION: FleetOAuthIntegration;
+export declare const X_TOOLSERVER_SLUGS: readonly ("apollo" | "ashby" | "base" | "exa" | "excel" | "gmail" | "google_bigquery" | "google_calendar" | "google_docs" | "google_drive" | "google_meet" | "google_sheets" | "google_slides" | "linear" | "linkedin" | "outlook" | "powerpoint" | "pylon" | "salesforce" | "sharepoint" | "slack" | "tavily" | "teams" | "word" | "x_com")[];
+export type XToolServerSlug = (typeof X_TOOLSERVER_SLUGS)[number];
+export declare function isXToolServerSlug(slug: string | undefined): slug is XToolServerSlug;
+export declare function xConnectorKinds(kinds: readonly (string | undefined)[] | undefined): XToolServerSlug[];
+export declare function xScopesForConnectorKinds(kinds: readonly (string | undefined)[] | undefined): string[];
+export declare function hasXToolServerConnector(kinds: readonly (string | undefined)[] | undefined): boolean;
+/** Env name for the X Fleet provider slug. */
+export declare const MDA_X_OAUTH_PROVIDER_ENV = "MDA_X_OAUTH_PROVIDER";
+export declare const DEFAULT_X_PROVIDER_SLUG: string;
+export declare function readXProviderSlug(env?: NodeJS.ProcessEnv): string;
+//# sourceMappingURL=integrations.d.ts.map

package/dist/connectors/toolserver/integrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.d.ts","sourceRoot":"","sources":["../../../src/connectors/toolserver/integrations.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,6CAA6C;IAC7C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,6DAA6D;IAC7D,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,6DAA6D;IAC7D,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,wEAAwE;IACxE,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,8CAA8C;IAC9C,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAC7B,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CACnD,CAAC;CACH;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,qBAAqB,EAoHpE,CAAC;AAaF,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAE7E;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,qBAAqB,GAAG,SAAS,CAEnC;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAElE;AAED,iEAAiE;AACjE,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,qBAAqB,EAClC,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,MAAM,EAAE,CASV;AAED,wBAAgB,iCAAiC,CAC/C,WAAW,EAAE,qBAAqB,EAClC,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,OAAO,CAET;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,qBAAqB,EAClC,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,MAAM,EAAE,CAwBV;AAED,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,qBAAqB,EAClC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAQR;AAED,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,uBAA6B,CAAC;AAE7D,eAAO,MAAM,uBAAuB,gVAAqC,CAAC;AAE1E,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,IAAI,IAAI,oBAAoB,CAE9B;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,oBAAoB,EAAE,CAKxB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,MAAM,EAAE,CAEV;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,OAAO,CAET;AAED,mDAAmD;AACnD,eAAO,MAAM,6BAA6B,8BAA8B,CAAC;AACzE,eAAO,MAAM,4BAA4B,QACD,CAAC;AAEzC,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAER;AAED,uDAAuD;AACvD,eAAO,MAAM,qBAAqB,uBAAgC,CAAC;AAEnE,eAAO,MAAM,0BAA0B,gVAAwC,CAAC;AAEhF,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9C,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,IAAI,IAAI,uBAAuB,CAEjC;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,uBAAuB,EAAE,CAK3B;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,MAAM,EAAE,CAEV;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,OAAO,CAET;AAED,sDAAsD;AACtD,eAAO,MAAM,gCAAgC,iCAAiC,CAAC;AAC/E,eAAO,MAAM,+BAA+B,QACD,CAAC;AAE5C,wBAAgB,yBAAyB,CACvC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAER;AAED,gDAAgD;AAChD,eAAO,MAAM,oBAAoB,uBAA+B,CAAC;AAEjE,eAAO,MAAM,yBAAyB,gVAAuC,CAAC;AAE9E,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,IAAI,IAAI,sBAAsB,CAEhC;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,sBAAsB,EAAE,CAK1B;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,MAAM,EAAE,CAEV;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,OAAO,CAET;AAED,qDAAqD;AACrD,eAAO,MAAM,+BAA+B,gCAAgC,CAAC;AAC7E,eAAO,MAAM,8BAA8B,QACD,CAAC;AAE3C,wBAAgB,wBAAwB,CACtC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAER;AAED,mDAAmD;AACnD,eAAO,MAAM,aAAa,uBAAwB,CAAC;AAEnD,eAAO,MAAM,kBAAkB,gVAAgC,CAAC;AAEhE,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,IAAI,IAAI,eAAe,CAEzB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,eAAe,EAAE,CAEnB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,MAAM,EAAE,CAEV;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,GACjD,OAAO,CAET;AAED,8CAA8C;AAC9C,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAC/D,eAAO,MAAM,uBAAuB,QAAoC,CAAC;AAEzE,wBAAgB,iBAAiB,CAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAER"}