wizards 0.2.26 → 0.2.28

package/apps/runtime/dist/db/migrations/tenant/meta/_journal.json

@@ -71,6 +71,13 @@
       "when": 1791311715390,
       "tag": "0009_knowledge",
       "breakpoints": true
+    },
+    {
+      "idx": 10,
+      "version": "6",
+      "when": 1791469862548,
+      "tag": "0010_plugin_connection",
+      "breakpoints": true
     }
   ]
 }

package/apps/runtime/dist/db/schema.js

@@ -497,3 +497,24 @@ export const marketplaceStar = sqliteTable("marketplace_star", {
     entryId: text("entry_id").notNull(),
     createdAt: createdAt(),
 }, (t) => [primaryKey({ columns: [t.tenantId, t.entryId] })]);
+/**
+ * An account a plugin connected for a space (`server.connections`): a calendar, a mailbox. Not
+ * a wizard's: it outlives runs and people. `data` is encrypted.
+ */
+export const pluginConnection = sqliteTable("plugin_connection", {
+    id: text("id").primaryKey(),
+    plugin: text("plugin").notNull(),
+    projectId: text("project_id")
+        .notNull()
+        .references(() => project.id, { onDelete: "cascade" }),
+    /** The built-in connector: `google-calendar`, `microsoft-outlook`. */
+    connector: text("connector").notNull(),
+    /** Shown to the person: the account's address. */
+    label: text("label").notNull(),
+    /** The connector's actions it was connected for. */
+    actions: text("actions", { mode: "json" }).$type().notNull(),
+    data: text("data").notNull(),
+    createdBy: text("created_by"),
+    createdAt: createdAt(),
+    updatedAt: updatedAt(),
+}, (t) => [index("plugin_connection_space").on(t.plugin, t.projectId)]);

package/apps/runtime/dist/engenty/connections-google/connectors/calendar.js

@@ -59,6 +59,12 @@ const attendeesField = z
     .array(z.string().describe("Attendee email address."))
     .optional()
     .describe("Optional list of attendee email addresses.");
+const sendUpdatesField = z
+    .enum(["all", "externalOnly", "none"])
+    .optional()
+    .describe('Whom Google e-mails about the change: "all" attendees, "externalOnly" (outside the organisation) or "none" (default).');
+/** `?sendUpdates=` for a write, when the caller asked Google to tell the attendees. */
+const updatesQuery = (value) => value ? `?sendUpdates=${encodeURIComponent(value)}` : "";
 export const calendarConnector = defineConnector({
     actions: [
         connectorAction({
@@ -237,12 +243,13 @@ export const calendarConnector = defineConnector({
             group: "write",
             handler: async (input, ctx) => {
                 const calendarId = input.calendar_id ?? "primary";
-                const created = await googleJson(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events`, {
+                const created = await googleJson(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events${updatesQuery(input.send_updates)}`, {
                     body: JSON.stringify({
                         end: toEventDateTime(input.end, input.time_zone),
                         start: toEventDateTime(input.start, input.time_zone),
                         summary: input.summary,
                         ...(input.description ? { description: input.description } : {}),
+                        ...(input.location ? { location: input.location } : {}),
                         ...(input.attendees?.length
                             ? { attendees: input.attendees.map((email) => ({ email })) }
                             : {}),
@@ -264,7 +271,12 @@ export const calendarConnector = defineConnector({
                     .optional()
                     .describe("Optional event description/notes."),
                 end: endField,
+                location: z
+                    .string()
+                    .optional()
+                    .describe("Where the event takes place: an address, a phone number or a meeting link."),
                 private_properties: privatePropertiesField,
+                send_updates: sendUpdatesField,
                 start: startField,
                 summary: z.string().describe("Event title."),
                 time_zone: timeZoneField,
@@ -284,6 +296,9 @@ export const calendarConnector = defineConnector({
                 if (input.description !== undefined) {
                     patch.description = input.description;
                 }
+                if (input.location !== undefined) {
+                    patch.location = input.location;
+                }
                 if (input.start !== undefined) {
                     patch.start = toEventDateTime(input.start, input.time_zone);
                 }
@@ -296,7 +311,7 @@ export const calendarConnector = defineConnector({
                 if (input.private_properties !== undefined) {
                     patch.extendedProperties = { private: input.private_properties };
                 }
-                const updated = await googleJson(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events/${encodeURIComponent(input.event_id)}`, {
+                const updated = await googleJson(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events/${encodeURIComponent(input.event_id)}${updatesQuery(input.send_updates)}`, {
                     body: JSON.stringify(patch),
                     headers: { "Content-Type": "application/json" },
                     method: "PATCH",
@@ -314,7 +329,12 @@ export const calendarConnector = defineConnector({
                     .describe("New event description (replaces the existing one)."),
                 end: endField.optional(),
                 event_id: z.string().describe("Calendar event id to update."),
+                location: z
+                    .string()
+                    .optional()
+                    .describe("New location (replaces the existing one)."),
                 private_properties: privatePropertiesField,
+                send_updates: sendUpdatesField,
                 start: startField.optional(),
                 summary: z.string().optional().describe("New event title."),
                 time_zone: timeZoneField,
@@ -322,6 +342,7 @@ export const calendarConnector = defineConnector({
                 .refine((v) => v.attendees !== undefined ||
                 v.description !== undefined ||
                 v.end !== undefined ||
+                v.location !== undefined ||
                 v.private_properties !== undefined ||
                 v.start !== undefined ||
                 v.summary !== undefined, { message: "Provide at least one field to update." }),
@@ -333,7 +354,7 @@ export const calendarConnector = defineConnector({
             group: "destructive",
             handler: async (input, ctx) => {
                 const calendarId = input.calendar_id ?? "primary";
-                await googleFetch(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events/${encodeURIComponent(input.event_id)}`, { method: "DELETE" });
+                await googleFetch(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events/${encodeURIComponent(input.event_id)}${updatesQuery(input.send_updates)}`, { method: "DELETE" });
                 return {
                     calendar_id: calendarId,
                     deleted: true,
@@ -344,6 +365,7 @@ export const calendarConnector = defineConnector({
             inputSchema: z.object({
                 calendar_id: calendarIdField,
                 event_id: z.string().describe("Calendar event id to delete."),
+                send_updates: sendUpdatesField,
             }),
             providerScopes: [SCOPE_EVENTS],
             summary: "Delete a calendar event",

package/apps/runtime/dist/engenty/connections-microsoft/outlook.js

@@ -25,6 +25,7 @@ function mapEventSummary(e) {
         isAllDay: e.isAllDay ?? false,
         location: e.location?.displayName ?? null,
         organizer: mapRecipient(e.organizer),
+        show_as: e.showAs ?? null,
         start: e.start ?? null,
         subject: e.subject ?? null,
     };
@@ -93,7 +94,7 @@ function draftMessagePayload(input) {
         toRecipients: toRecipients(input.to),
     };
 }
-const EVENT_SELECT = "id,subject,start,end,location,organizer,isAllDay";
+const EVENT_SELECT = "id,subject,start,end,location,organizer,isAllDay,showAs";
 async function fetchEventDetail(ctx, eventId) {
     const e = await graphJson(ctx, `/me/events/${encodeURIComponent(eventId)}?$select=${EVENT_SELECT},attendees,body,webLink`);
     return mapEventDetail(e);
@@ -232,6 +233,10 @@ export const microsoftOutlookConnector = defineConnector({
                     .optional()
                     .describe("Window start (ISO 8601). Provide both start and end to query a window."),
                 top: topField,
+                all: z
+                    .boolean()
+                    .optional()
+                    .describe("With start and end: every event of the window (up to 1000), not only the first `top`. For free/busy."),
             }),
             providerScopes: ["Calendars.Read"],
             run: async (input, ctx) => {
@@ -244,6 +249,20 @@ export const microsoftOutlookConnector = defineConnector({
                 if (input.start && input.end) {
                     params.set("startDateTime", input.start);
                     params.set("endDateTime", input.end);
+                    if (input.all) {
+                        // Page through the window, 100 at a time.
+                        const events = [];
+                        params.set("$top", "100");
+                        for (let skip = 0; skip < 1000; skip += 100) {
+                            params.set("$skip", String(skip));
+                            const page = await graphJson(ctx, `${calendarViewPath(input.calendar_id)}?${params.toString()}`);
+                            events.push(...(page.value ?? []));
+                            if ((page.value ?? []).length < 100) {
+                                break;
+                            }
+                        }
+                        return { events: events.map(mapEventSummary) };
+                    }
                     path = `${calendarViewPath(input.calendar_id)}?${params.toString()}`;
                 }
                 const data = await graphJson(ctx, path);
@@ -320,6 +339,10 @@ export const microsoftOutlookConnector = defineConnector({
                     .optional()
                     .describe("Plain-text event description."),
                 calendar_id: calendarIdField,
+                location: z
+                    .string()
+                    .optional()
+                    .describe("Where the event takes place: an address, a phone number or a meeting link."),
                 end: z
                     .string()
                     .describe("Event end, ISO 8601 date-time (e.g. 2026-07-04T15:00:00)."),
@@ -343,6 +366,7 @@ export const microsoftOutlookConnector = defineConnector({
                             ? { body: { content: input.body_text, contentType: "Text" } }
                             : {}),
                         end: { dateTime: input.end, timeZone: input.time_zone },
+                        ...(input.location ? { location: { displayName: input.location } } : {}),
                         start: { dateTime: input.start, timeZone: input.time_zone },
                         subject: input.subject,
                     },
@@ -367,6 +391,7 @@ export const microsoftOutlookConnector = defineConnector({
                     .describe("New plain-text event description."),
                 end: z.string().optional().describe("New end, ISO 8601 date-time."),
                 event_id: z.string().describe("Graph event id to update."),
+                location: z.string().optional().describe("New location (replaces the existing one)."),
                 start: z.string().optional().describe("New start, ISO 8601 date-time."),
                 subject: z.string().optional().describe("New event subject/title."),
                 time_zone: z
@@ -392,6 +417,9 @@ export const microsoftOutlookConnector = defineConnector({
                 if (input.attendees !== undefined) {
                     patch.attendees = toAttendees(input.attendees);
                 }
+                if (input.location !== undefined) {
+                    patch.location = { displayName: input.location };
+                }
                 if (Object.keys(patch).length === 0) {
                     throw new Error("update_event: no fields to update");
                 }

package/apps/runtime/dist/engine/input.js

@@ -1,4 +1,4 @@
-import { isDecidedField, isLocationValue, MAX_FILES, shownFields, } from "@engenty-wizards/shared/definition";
+import { isDecidedField, isLocationValue, MAX_FILES, offeredSlot, shownFields, } from "@engenty-wizards/shared/definition";
 function empty(v) {
     return v === undefined || v === null || v === "" || (Array.isArray(v) && v.length === 0);
 }
@@ -20,6 +20,11 @@ function coerce(field, raw) {
             return (Array.isArray(raw) ? raw : [raw])
                 .map(String)
                 .filter((v) => field.options?.includes(v));
+        // The offered time as written, also when the answer names the same moment in another offset.
+        case "slot": {
+            const v = String(raw).trim();
+            return v ? (offeredSlot(v, field.options ?? []) ?? v) : undefined;
+        }
         case "image":
         case "file": {
             const ids = (Array.isArray(raw) ? raw : [raw])
@@ -153,6 +158,10 @@ export function readPageInput(step, input, context = {}) {
             errors.push({ field: field.id, message: "Ungültige Auswahl" });
             continue;
         }
+        if (field.kind === "slot" && !empty(v) && !field.options?.includes(String(v))) {
+            errors.push({ field: field.id, message: "Dieser Termin wird nicht angeboten" });
+            continue;
+        }
         if (field.kind === "email" && !empty(v) && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(String(v))) {
             errors.push({ field: field.id, message: "Keine gültige E-Mail-Adresse" });
             continue;

package/apps/runtime/dist/mcp/tools.js

@@ -143,7 +143,7 @@ export function registerTools(server, who) {
     });
     tool("list_starters", "wizards:read", {
         title: "List starters",
-        description: "The marketplace's ready-made wizards (tweet with image, video ad, research briefing, dashboard, invoice, offer …), with what each makes and needs. Give a query to search them; without one you get the starters.",
+        description: "Ready-made wizards to start from: first those the space's plugins bring (marked with the plugin), then the marketplace's (tweet with image, video ad, research briefing, dashboard, invoice, offer …), with what each makes and needs. Give a query to search them; without one you get the starters.",
         input: z.object({ query: z.string().max(200).optional() }),
         readOnly: true,
     }, async ({ query }) => (await searchMarketplace({ q: query ?? "", lang: "de", limit: 30 })).entries
@@ -155,6 +155,9 @@ export function registerTools(server, who) {
         formats: s.formats,
         useCases: s.useCases,
         capabilities: s.capabilities,
+        ...(s.plugin ? { plugin: s.plugin.name } : {}),
+        // Not startable here: its plugins come with the Pro plan.
+        ...(s.needs?.length ? { needsPro: s.needs } : {}),
     })));
     tool("get_starter", "wizards:read", {
         title: "Get starter",
@@ -401,7 +404,7 @@ While status is running, get_run with waitSeconds. Hosts with MCP Apps also show
     }, async ({ runId, waitSeconds }) => runReport(who.userId, runId, waitSeconds));
     tool("answer_page", "runs:test", {
         title: "Answer page",
-        description: "Fill the page a run waits for: field id → value (items: an array of row objects; toggle: true/false; multiselect: an array). Returns the run, after waitSeconds.",
+        description: "Fill the page a run waits for: field id → value (items: an array of row objects; toggle: true/false; multiselect: an array; slot: one of the offered times, as given). Returns the run, after waitSeconds.",
         input: z.object({
             runId: z.string(),
             stepId: z.string().describe("waitingFor.page"),

package/apps/runtime/dist/plugins/loader.js

@@ -1,11 +1,12 @@
 import { existsSync, mkdirSync, watch } from "node:fs";
 import { join, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { PLUGIN_TOOL_NAME } from "@engenty-wizards/shared/definition";
+import { PLUGIN_ID, PLUGIN_TOOL_NAME, wizardSchema } from "@engenty-wizards/shared/definition";
 import { generateText, Output } from "ai";
 import { createJiti } from "jiti";
 import { readPage } from "../agents/website.js";
 import { packageRoot } from "../cli/home.js";
+import { pluginConnections } from "../connectors/plugin-connections.js";
 import { db, onTenantOpen } from "../db/client.js";
 import { parseDocument } from "../documents/parse.js";
 import { env } from "../env.js";
@@ -98,6 +99,9 @@ function apiFor(record) {
                 }
                 record.assistantTools.set(tool.name, tool);
             },
+            registerAssistantContext(context) {
+                record.assistantPages.push(context);
+            },
             registerPublicRoute(route) {
                 record.publicRoutes.push(compileRoute(route));
             },
@@ -153,6 +157,21 @@ function apiFor(record) {
                     object: (request.schema ? result.output : undefined),
                 };
             },
+            connections: pluginConnections(source.id),
+            registerStarter(starter) {
+                if (!PLUGIN_ID.test(starter.id)) {
+                    throw new Error(`Starter "${starter.id}": an id is lower case, digits and "-".`);
+                }
+                if (record.starters.has(starter.id)) {
+                    throw new Error(`Starter "${starter.id}" is registered twice.`);
+                }
+                const parsed = wizardSchema.safeParse(starter.definition);
+                if (!parsed.success) {
+                    const issue = parsed.error.issues[0];
+                    throw new Error(`Starter "${starter.id}": ${issue?.path.join(".") || "definition"}: ${issue?.message}`);
+                }
+                record.starters.set(starter.id, { ...starter, definition: parsed.data });
+            },
             onUnload(dispose) {
                 record.disposers.push(dispose);
             },
@@ -186,8 +205,10 @@ async function load(source) {
             record.tools.clear();
             record.contexts = [];
             record.assistantTools.clear();
+            record.assistantPages = [];
             record.publicRoutes = [];
             record.jobs.clear();
+            record.starters.clear();
             record.listeners = {};
             record.migrations = [];
             record.error = err?.message || String(err);

package/apps/runtime/dist/plugins/registry.js

@@ -17,8 +17,10 @@ export function emptyRecord(source) {
         tools: new Map(),
         contexts: [],
         assistantTools: new Map(),
+        assistantPages: [],
         publicRoutes: [],
         jobs: new Map(),
+        starters: new Map(),
         listeners: {},
         migrations: [],
         disposers: [],
@@ -83,6 +85,14 @@ export async function pluginToolsOf(tenantId) {
         description: tool.description,
     })));
 }
+/** The starters the tenant's plugins bring, in the order the plugins registered them. */
+export async function pluginStartersOf(tenantId) {
+    return (await pluginsOf(tenantId)).flatMap((plugin) => [...plugin.starters.values()].map((starter) => ({
+        id: `${plugin.source.id}.${starter.id}`,
+        plugin,
+        starter,
+    })));
+}
 /** The built studio half as it is on disk now; null when the plugin has none. */
 export function pluginAsset(record, kind) {
     const file = record.source[kind];

package/apps/runtime/dist/routes/marketplace.js

@@ -1,4 +1,4 @@
-import { CAPABILITY_IDS, INDUSTRY_IDS, ITEM_FORMAT_IDS, USE_CASE_IDS, } from "@engenty-wizards/shared/marketplace";
+import { CAPABILITY_IDS, INDUSTRY_IDS, ITEM_FORMAT_IDS, MARKETPLACE_PLAN_IDS, USE_CASE_IDS, } from "@engenty-wizards/shared/marketplace";
 import { Hono } from "hono";
 import { z } from "zod";
 import { asLang, marketplaceDetail, searchMarketplace, starEntry, } from "../services/marketplace.js";
@@ -9,6 +9,7 @@ const searchSchema = z.object({
     industry: z.enum(INDUSTRY_IDS).optional(),
     format: z.enum(ITEM_FORMAT_IDS).optional(),
     capability: z.enum(CAPABILITY_IDS).optional(),
+    plan: z.enum(MARKETPLACE_PLAN_IDS).optional(),
     starred: z
         .enum(["1", "0"])
         .optional()

package/apps/runtime/dist/routes/runs.js

@@ -9,6 +9,7 @@ import { nanoid } from "nanoid";
 import { z } from "zod";
 import { principalOf } from "../auth/index.js";
 import { ConnectError, connectionViews, connectWithCredentials, disconnect, finishOAuth, oauthStateRun, startOAuth, } from "../connectors/index.js";
+import { finishPluginOAuth, pluginStateTenant } from "../connectors/plugin-connections.js";
 import { db, schema, withTenant } from "../db/client.js";
 import { answerAsk, pendingAsk } from "../engine/asks.js";
 import { signalChanged, subscribe } from "../engine/events.js";
@@ -795,12 +796,19 @@ export const connectCallback = new Hono().get("/callback", async (c) => {
     let message = c.req.query("error") === "exchange_failed"
         ? "Verbinden hat nicht geklappt. Bitte noch einmal versuchen."
         : "Verbinden wurde abgebrochen.";
-    const tenant = state ? await tenantOfRun(oauthStateRun(state) ?? "") : null;
+    // A plugin's sign-in (server.connections) names its tenant; a wizard's names its run.
+    const pluginTenant = state ? pluginStateTenant(state) : null;
+    const tenant = state ? (pluginTenant ?? (await tenantOfRun(oauthStateRun(state) ?? ""))) : null;
     const answer = ticket ? { ticket } : code ? { code } : null;
     if (answer && state && tenant) {
         try {
-            const done = await withTenant(tenant, () => finishOAuth(answer, state));
-            signalChanged(done.runId);
+            if (pluginTenant) {
+                await withTenant(tenant, () => finishPluginOAuth(answer, state));
+            }
+            else {
+                const done = await withTenant(tenant, () => finishOAuth(answer, state));
+                signalChanged(done.runId);
+            }
             ok = true;
             message = "Verbunden. Du kannst dieses Fenster schließen.";
         }

package/apps/runtime/dist/routes/studio.js

@@ -1,6 +1,6 @@
 import { mkdirSync } from "node:fs";
 import { join } from "node:path";
-import { MODEL_CLASSES, TEXT_CLASSES } from "@engenty-wizards/shared/definition";
+import { MODEL_CLASSES, PLUGIN_ID, TEXT_CLASSES } from "@engenty-wizards/shared/definition";
 import { CATEGORY_TYPES, whereSchema } from "@engenty-wizards/shared/knowledge";
 import { PROJECT_FILE_KINDS } from "@engenty-wizards/shared/projects";
 import { isCreditsRef } from "@engenty-wizards/shared/providers";
@@ -405,6 +405,7 @@ export const studio = new Hono()
             .max(24)
             .default([]),
         part: z.enum(["info", "knowledge"]).default("info"),
+        plugin: z.string().regex(PLUGIN_ID).optional(),
     })
         .parse(await c.req.json());
     if (!(await canSpend())) {
@@ -420,6 +421,7 @@ export const studio = new Hono()
                 message: body.message,
                 history: body.history,
                 part: body.part,
+                plugin: body.plugin,
                 signal: abort.signal,
                 onText: (delta) => {
                     void stream.writeSSE({ event: "text", data: JSON.stringify(delta) });