openhands-extensions 0.9.0__tar.gz → 0.11.0__tar.gz

openhands_extensions-0.11.0/.github/workflows/deprecation-check.yml

@@ -0,0 +1,25 @@
+name: Deprecation deadlines
+
+# release-please opens its release PR with the OpenHands GitHub App token, so
+# this pull_request workflow also runs against the generated version bump.
+on:
+  pull_request:
+    branches: ["**"]
+  push:
+    branches: ["main", "master"]
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+          python-version: "3.12"
+
+      - name: Verify deprecation deadlines
+        run: uv run python scripts/check_deprecations.py

openhands_extensions-0.11.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.11.0"
+}

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/PKG-INFO

@@ -1,6 +1,9 @@
 Metadata-Version: 2.4
 Name: openhands-extensions
-Version: 0.9.0
+Version: 0.11.0
 Summary: OpenHands extensions, plugins, and skills (Python bindings for the integration catalog)
 License-File: LICENSE
 Requires-Python: >=3.12
+Requires-Dist: deprecation<3,>=2.1
+Requires-Dist: packaging<26,>=24
+Requires-Dist: pydantic<3,>=2.10

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/README.md

@@ -87,7 +87,7 @@ The JS and Python versions are kept in lock-step by `release-please` and guarded
 ## Extensions Catalog
 
 <!-- BEGIN AUTO-GENERATED CATALOG -->
-This repository contains **2 marketplace(s)** with **62 extensions** (52 skills, 10 plugins).
+This repository contains **2 marketplace(s)** with **63 extensions** (53 skills, 10 plugins).
 
 ### large-codebase
 
@@ -106,7 +106,7 @@ OpenHands skills for interacting, improving, and refactoring large codebases
 
 Official skills and plugins for OpenHands — the open-source AI software engineer.
 
-**58 extensions** (50 skills, 8 plugins)
+**59 extensions** (51 skills, 8 plugins)
 
 | Name | Type | Description | Commands |
 |------|------|-------------|----------|
@@ -164,6 +164,7 @@ Official skills and plugins for OpenHands — the open-source AI software engine
 | slack-standup-digest | skill | Create an automation that generates an async standup digest from Slack. Searches selected channels for messages since... | `/standup-digest:setup` |
 | ssh | skill | Establish and manage SSH connections to remote machines, including key generation, configuration, and file transfers.... | — |
 | swift-linux | skill | Install and configure Swift programming language on Debian Linux for server-side development. Use when building Swift... | — |
+| technical-writing | skill | Write and revise technical explanations in flowing, direct, conversational prose that stays concise without becoming ... | — |
 | theme-factory | skill | Toolkit for styling artifacts with a theme. These artifacts can be slides, docs, reportings, HTML landing pages, etc.... | — |
 | uv | skill | Common project, dependency, and environment operations using uv. | — |
 | vercel | skill | Deploy and manage applications on Vercel, including preview deployments and deployment protection. | — |

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/integrations/README.md

@@ -18,6 +18,31 @@ integrations so clients can consume one source of truth.
 Each integration carries its OAuth/MCP connection data directly. Do not add a
 separate provider catalog or per-language provider data.
 
+Every entry must include `docsUrl`. Marketplace input fields must explicitly
+declare both their `type` and whether they are `required`, rather than relying
+on client defaults. When connection metadata includes an `identityMapping`, it
+must also identify the external principal. These requirements keep catalogs
+actionable and prevent clients from guessing security- or UX-relevant defaults.
+
+Connection options may also carry an optional `connectionModel`. This metadata
+lets consumers distinguish the authenticated principal from the external
+resource the credential can reach:
+
+- `principalType` describes who or what authenticated.
+- `credentialScope` describes the provider boundary enforced by the credential.
+- `resourceType` and `resourceCardinality` describe whether the grant represents
+  one workspace/site/tenant or can enumerate several.
+- `selectionMode` tells clients whether the resource is known during auth,
+  selected immediately after auth, or supplied at runtime.
+- `identityMapping` contains constrained dot paths for identity values returned
+  by OAuth, access-token claims, or a provider identity endpoint.
+- `resourceDiscovery` describes a read-only endpoint used to enumerate resources
+  when one grant covers several of them.
+
+These fields are descriptive; they never broaden the scopes enforced by the
+provider credential. Consumers must not claim resource-level isolation when a
+provider token is only account- or tenant-scoped.
+
 Consumers should use the read functions exported by the package:
 
 ```js

openhands_extensions-0.11.0/integrations/catalog/atlassian-rovo.json

@@ -0,0 +1,44 @@
+{
+  "id": "atlassian-rovo",
+  "name": "Atlassian Rovo",
+  "description": "Search, create, and update Jira issues, Confluence pages, Bitbucket repos, and Jira Service Management tickets - all through Atlassian's official hosted MCP server, powered by your Teamwork Graph.",
+  "categories": [
+    "Project management",
+    "Documentation",
+    "Engineering"
+  ],
+  "appUrl": "https://www.atlassian.com/rovo",
+  "docsUrl": "https://support.atlassian.com/atlassian-rovo-mcp-server/docs/getting-started-with-the-atlassian-remote-mcp-server/",
+  "notes": "OAuth 2.1 is handled entirely by the Atlassian Rovo MCP server. No client credentials required - sign in with your Atlassian account when the authentication flow starts.",
+  "iconBg": "#0052CC",
+  "logoUrl": "https://cdn.simpleicons.org/atlassian/FFFFFF",
+  "keywords": [
+    "atlassian",
+    "rovo",
+    "jira",
+    "confluence",
+    "bitbucket",
+    "jsm",
+    "tickets",
+    "wiki",
+    "issues",
+    "sprint",
+    "mcp"
+  ],
+  "connectionOptions": [
+    {
+      "id": "oauth",
+      "provider": "mcp",
+      "transport": {
+        "kind": "shttp",
+        "url": "https://mcp.atlassian.com/v1/mcp/authv2"
+      },
+      "auth": {
+        "strategy": "oauth2",
+        "oauth": {
+          "clientAuthentication": "none"
+        }
+      }
+    }
+  ]
+}

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/integrations/catalog/atlassian.json

@@ -24,6 +24,19 @@
     {
       "id": "oauth",
       "provider": "mcp",
+      "connectionModel": {
+        "principalType": "user",
+        "credentialScope": "account",
+        "resourceType": "site",
+        "resourceCardinality": "many",
+        "selectionMode": "post_auth",
+        "resourceDiscovery": {
+          "endpoint": "https://api.atlassian.com/oauth/token/accessible-resources",
+          "externalResourceIdPath": "id",
+          "resourceNamePath": "name",
+          "resourceUrlPath": "url"
+        }
+      },
       "transport": {
         "kind": "shttp",
         "url": "https://mcp.atlassian.com/v1/mcp"

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/integrations/catalog/github.json

@@ -14,6 +14,26 @@
     {
       "id": "oauth",
       "provider": "mcp",
+      "connectionModel": {
+        "principalType": "user",
+        "credentialScope": "account",
+        "resourceType": "organization",
+        "resourceCardinality": "many",
+        "selectionMode": "post_auth",
+        "identityMapping": {
+          "source": "identity_api",
+          "endpoint": "https://api.github.com/user",
+          "externalPrincipalIdPath": "id",
+          "resourceNamePath": "login",
+          "resourceUrlPath": "html_url"
+        },
+        "resourceDiscovery": {
+          "endpoint": "https://api.github.com/user/orgs",
+          "externalResourceIdPath": "id",
+          "resourceNamePath": "login",
+          "resourceUrlPath": "html_url"
+        }
+      },
       "auth": {
         "strategy": "oauth2",
         "oauth": {
@@ -41,7 +61,7 @@
         "strategy": "api_key",
         "credentialLabel": "Personal access token",
         "credentialPlaceholder": "github_pat_...",
-        "credentialHelp": "Classic or fine-grained personal access token from GitHub settings.",
+        "credentialHelp": "Create a token in [GitHub settings](https://github.com/settings/personal-access-tokens): classic tokens need the repo and read:user scopes; fine-grained tokens need read access to Contents, Issues, and Pull requests for the repositories you use.",
         "credentialSecretName": "GITHUB_PERSONAL_ACCESS_TOKEN",
         "saveCredentialAsSecretByDefault": true
       }

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/integrations/catalog/linear.json

@@ -52,7 +52,7 @@
         "apiKeyOptional": true,
         "credentialLabel": "Linear API key",
         "credentialPlaceholder": "Paste your Linear API key",
-        "credentialHelp": "Optional when the endpoint accepts your OAuth session; otherwise sent as Authorization: Bearer <token>."
+        "credentialHelp": "Create a personal API key (grant at least read access) under Security & access in [Linear settings](https://linear.app/settings/account/security). Sent as Authorization: Bearer <token>; optional when the endpoint accepts your OAuth session."
       }
     }
   ],

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/integrations/catalog/microsoft-outlook.json

@@ -14,6 +14,19 @@
     {
       "id": "oauth",
       "provider": "http",
+      "connectionModel": {
+        "principalType": "user",
+        "credentialScope": "tenant",
+        "resourceType": "tenant",
+        "resourceCardinality": "one",
+        "selectionMode": "automatic",
+        "identityMapping": {
+          "source": "access_token_claims",
+          "externalPrincipalIdPath": "oid",
+          "externalTenantIdPath": "tid",
+          "externalResourceIdPath": "tid"
+        }
+      },
       "auth": {
         "strategy": "oauth2",
         "oauth": {

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/integrations/catalog/microsoft-teams.json

@@ -14,6 +14,19 @@
     {
       "id": "oauth",
       "provider": "http",
+      "connectionModel": {
+        "principalType": "user",
+        "credentialScope": "tenant",
+        "resourceType": "tenant",
+        "resourceCardinality": "one",
+        "selectionMode": "automatic",
+        "identityMapping": {
+          "source": "access_token_claims",
+          "externalPrincipalIdPath": "oid",
+          "externalTenantIdPath": "tid",
+          "externalResourceIdPath": "tid"
+        }
+      },
       "auth": {
         "strategy": "oauth2",
         "oauth": {

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/integrations/catalog/notion.json

@@ -13,6 +13,19 @@
     {
       "id": "oauth",
       "provider": "http",
+      "connectionModel": {
+        "principalType": "user",
+        "credentialScope": "resource",
+        "resourceType": "workspace",
+        "resourceCardinality": "one",
+        "selectionMode": "automatic",
+        "identityMapping": {
+          "source": "oauth_token_response",
+          "externalPrincipalIdPath": "owner.user.id",
+          "externalResourceIdPath": "workspace_id",
+          "resourceNamePath": "workspace_name"
+        }
+      },
       "auth": {
         "strategy": "oauth2",
         "oauth": {

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/integrations/catalog/onedrive.json

@@ -14,6 +14,19 @@
     {
       "id": "oauth",
       "provider": "http",
+      "connectionModel": {
+        "principalType": "user",
+        "credentialScope": "tenant",
+        "resourceType": "tenant",
+        "resourceCardinality": "one",
+        "selectionMode": "automatic",
+        "identityMapping": {
+          "source": "access_token_claims",
+          "externalPrincipalIdPath": "oid",
+          "externalTenantIdPath": "tid",
+          "externalResourceIdPath": "tid"
+        }
+      },
       "auth": {
         "strategy": "oauth2",
         "oauth": {

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/integrations/catalog/sharepoint.json

@@ -14,6 +14,19 @@
     {
       "id": "oauth",
       "provider": "http",
+      "connectionModel": {
+        "principalType": "user",
+        "credentialScope": "tenant",
+        "resourceType": "tenant",
+        "resourceCardinality": "one",
+        "selectionMode": "automatic",
+        "identityMapping": {
+          "source": "access_token_claims",
+          "externalPrincipalIdPath": "oid",
+          "externalTenantIdPath": "tid",
+          "externalResourceIdPath": "tid"
+        }
+      },
       "auth": {
         "strategy": "oauth2",
         "oauth": {

{openhands_extensions-0.9.0 → openhands_extensions-0.11.0}/integrations/catalog/slack.json

@@ -8,12 +8,26 @@
   ],
   "appUrl": "https://slack.com",
   "docsUrl": "https://github.com/zencoderai/slack-mcp-server",
-  "notes": "Uses Slack's official hosted MCP server with confidential OAuth user-token auth.",
+  "notes": "The OAuth option uses Slack's official hosted MCP server (confidential OAuth user-token auth); the local option runs the open-source zencoderai stdio server with a bot token.",
   "popularityRank": 95,
   "connectionOptions": [
     {
       "id": "oauth",
       "provider": "mcp",
+      "connectionModel": {
+        "principalType": "user",
+        "credentialScope": "resource",
+        "resourceType": "workspace",
+        "resourceCardinality": "one",
+        "selectionMode": "automatic",
+        "identityMapping": {
+          "source": "oauth_token_response",
+          "externalPrincipalIdPath": "authed_user.id",
+          "externalTenantIdPath": "enterprise.id",
+          "externalResourceIdPath": "team.id",
+          "resourceNamePath": "team.name"
+        }
+      },
       "auth": {
         "strategy": "oauth2",
         "oauth": {
@@ -87,5 +101,5 @@
     "messaging",
     "team"
   ],
-  "installHint": "Create a Slack app with the required scopes, then paste its bot token below."
+  "installHint": "Create a Slack app with bot token scopes channels:history, channels:read, chat:write, reactions:write, users:read, and users.profile:read, then paste its bot token below."
 }

openhands_extensions-0.11.0/integrations/catalog/vanta.json

@@ -0,0 +1,55 @@
+{
+  "id": "vanta",
+  "name": "Vanta",
+  "description": "Query Vanta compliance controls, tests, evidence, risks, and vulnerabilities from the agent.",
+  "categories": [
+    "Security",
+    "Compliance"
+  ],
+  "appUrl": "https://www.vanta.com",
+  "docsUrl": "https://developer.vanta.com/docs/vanta-mcp",
+  "notes": "Vanta's hosted remote MCP server (beta, requires a Vanta Admin role). Regional endpoints: US https://mcp.vanta.com/mcp, EU https://mcp.eu.vanta.com/mcp, AUS https://mcp.aus.vanta.com/mcp. Authentication is OAuth only - no API keys.",
+  "popularityRank": 64,
+  "connectionOptions": [
+    {
+      "id": "oauth",
+      "provider": "mcp",
+      "auth": {
+        "strategy": "oauth2",
+        "oauth": {
+          "authorizationUrl": "https://app.vanta.com/oauth/authorize",
+          "tokenUrl": "https://api.vanta.com/oauth/token",
+          "registrationUrl": "https://api.vanta.com/oauth/register",
+          "scopes": [
+            "mcp-api.all:read"
+          ],
+          "optionalScopes": [
+            "mcp-api.all:write"
+          ],
+          "pkce": true,
+          "clientAuthentication": "none",
+          "additionalAuthorizationParams": {
+            "resource": "https://mcp.vanta.com"
+          },
+          "additionalTokenParams": {
+            "resource": "https://mcp.vanta.com"
+          }
+        }
+      },
+      "transport": {
+        "kind": "shttp",
+        "url": "https://mcp.vanta.com/mcp"
+      }
+    }
+  ],
+  "iconBg": "#003D2B",
+  "keywords": [
+    "compliance",
+    "soc2",
+    "security",
+    "audit",
+    "risk",
+    "vanta"
+  ],
+  "installHint": "Connect via the OAuth MCP option. After connecting, complete the OAuth flow in your browser as a Vanta Admin. EU tenants should use https://mcp.eu.vanta.com/mcp and AUS tenants https://mcp.aus.vanta.com/mcp as the transport URL. The legacy local server @vantasdk/vanta-mcp-server is deprecated - prefer the hosted remote server."
+}

openhands_extensions-0.11.0/integrations/catalog-index.js

@@ -0,0 +1,157 @@
+// This file is auto-generated by scripts/build-integration-catalog.mjs.
+// Do not edit it manually. To update it after changing integrations/catalog/*.json,
+// run: npm run build:integrations
+
+import entry0 from "./catalog/github.json" with { type: "json" };
+import entry1 from "./catalog/slack.json" with { type: "json" };
+import entry2 from "./catalog/tavily.json" with { type: "json" };
+import entry3 from "./catalog/atlassian.json" with { type: "json" };
+import entry4 from "./catalog/linear.json" with { type: "json" };
+import entry5 from "./catalog/notion.json" with { type: "json" };
+import entry6 from "./catalog/vanta.json" with { type: "json" };
+import entry7 from "./catalog/ordinal.json" with { type: "json" };
+import entry8 from "./catalog/elevenlabs.json" with { type: "json" };
+import entry9 from "./catalog/bitbucket.json" with { type: "json" };
+import entry10 from "./catalog/xero.json" with { type: "json" };
+import entry11 from "./catalog/quickbooks.json" with { type: "json" };
+import entry12 from "./catalog/okta.json" with { type: "json" };
+import entry13 from "./catalog/netlify.json" with { type: "json" };
+import entry14 from "./catalog/vercel.json" with { type: "json" };
+import entry15 from "./catalog/supabase.json" with { type: "json" };
+import entry16 from "./catalog/posthog.json" with { type: "json" };
+import entry17 from "./catalog/sentry.json" with { type: "json" };
+import entry18 from "./catalog/datadog.json" with { type: "json" };
+import entry19 from "./catalog/canva.json" with { type: "json" };
+import entry20 from "./catalog/miro.json" with { type: "json" };
+import entry21 from "./catalog/webflow.json" with { type: "json" };
+import entry22 from "./catalog/zoom.json" with { type: "json" };
+import entry23 from "./catalog/discord.json" with { type: "json" };
+import entry24 from "./catalog/stripe.json" with { type: "json" };
+import entry25 from "./catalog/intercom.json" with { type: "json" };
+import entry26 from "./catalog/hubspot.json" with { type: "json" };
+import entry27 from "./catalog/salesforce.json" with { type: "json" };
+import entry28 from "./catalog/sharepoint.json" with { type: "json" };
+import entry29 from "./catalog/onedrive.json" with { type: "json" };
+import entry30 from "./catalog/microsoft-teams.json" with { type: "json" };
+import entry31 from "./catalog/microsoft-outlook.json" with { type: "json" };
+import entry32 from "./catalog/box.json" with { type: "json" };
+import entry33 from "./catalog/airtable.json" with { type: "json" };
+import entry34 from "./catalog/monday.json" with { type: "json" };
+import entry35 from "./catalog/trello.json" with { type: "json" };
+import entry36 from "./catalog/asana.json" with { type: "json" };
+import entry37 from "./catalog/confluence.json" with { type: "json" };
+import entry38 from "./catalog/jira.json" with { type: "json" };
+import entry39 from "./catalog/google-calendar.json" with { type: "json" };
+import entry40 from "./catalog/gmail.json" with { type: "json" };
+import entry41 from "./catalog/google-sheets.json" with { type: "json" };
+import entry42 from "./catalog/google-drive.json" with { type: "json" };
+import entry43 from "./catalog/figma.json" with { type: "json" };
+import entry44 from "./catalog/google-docs.json" with { type: "json" };
+import entry45 from "./catalog/apify.json" with { type: "json" };
+import entry46 from "./catalog/atlassian-rovo.json" with { type: "json" };
+import entry47 from "./catalog/brave-search.json" with { type: "json" };
+import entry48 from "./catalog/browser-mcp.json" with { type: "json" };
+import entry49 from "./catalog/clickhouse.json" with { type: "json" };
+import entry50 from "./catalog/cloudflare-bindings.json" with { type: "json" };
+import entry51 from "./catalog/cloudflare-browser-rendering.json" with { type: "json" };
+import entry52 from "./catalog/cloudflare-builds.json" with { type: "json" };
+import entry53 from "./catalog/cloudflare-docs.json" with { type: "json" };
+import entry54 from "./catalog/cloudflare-observability.json" with { type: "json" };
+import entry55 from "./catalog/deepwiki.json" with { type: "json" };
+import entry56 from "./catalog/everything.json" with { type: "json" };
+import entry57 from "./catalog/exa.json" with { type: "json" };
+import entry58 from "./catalog/fetch.json" with { type: "json" };
+import entry59 from "./catalog/filesystem.json" with { type: "json" };
+import entry60 from "./catalog/firecrawl.json" with { type: "json" };
+import entry61 from "./catalog/git.json" with { type: "json" };
+import entry62 from "./catalog/huggingface.json" with { type: "json" };
+import entry63 from "./catalog/kagi.json" with { type: "json" };
+import entry64 from "./catalog/memory.json" with { type: "json" };
+import entry65 from "./catalog/mongodb.json" with { type: "json" };
+import entry66 from "./catalog/neon.json" with { type: "json" };
+import entry67 from "./catalog/obsidian.json" with { type: "json" };
+import entry68 from "./catalog/paypal.json" with { type: "json" };
+import entry69 from "./catalog/playwright.json" with { type: "json" };
+import entry70 from "./catalog/redis.json" with { type: "json" };
+import entry71 from "./catalog/resend.json" with { type: "json" };
+import entry72 from "./catalog/sequential-thinking.json" with { type: "json" };
+import entry73 from "./catalog/superhuman-mail.json" with { type: "json" };
+import entry74 from "./catalog/time.json" with { type: "json" };
+
+export const INTEGRATION_CATALOG_ENTRIES = [
+  entry0,
+  entry1,
+  entry2,
+  entry3,
+  entry4,
+  entry5,
+  entry6,
+  entry7,
+  entry8,
+  entry9,
+  entry10,
+  entry11,
+  entry12,
+  entry13,
+  entry14,
+  entry15,
+  entry16,
+  entry17,
+  entry18,
+  entry19,
+  entry20,
+  entry21,
+  entry22,
+  entry23,
+  entry24,
+  entry25,
+  entry26,
+  entry27,
+  entry28,
+  entry29,
+  entry30,
+  entry31,
+  entry32,
+  entry33,
+  entry34,
+  entry35,
+  entry36,
+  entry37,
+  entry38,
+  entry39,
+  entry40,
+  entry41,
+  entry42,
+  entry43,
+  entry44,
+  entry45,
+  entry46,
+  entry47,
+  entry48,
+  entry49,
+  entry50,
+  entry51,
+  entry52,
+  entry53,
+  entry54,
+  entry55,
+  entry56,
+  entry57,
+  entry58,
+  entry59,
+  entry60,
+  entry61,
+  entry62,
+  entry63,
+  entry64,
+  entry65,
+  entry66,
+  entry67,
+  entry68,
+  entry69,
+  entry70,
+  entry71,
+  entry72,
+  entry73,
+  entry74,
+];