default to fetch (#100)

Author: ctate

AGENTS.md

@@ -78,3 +78,8 @@ If any of the above commands fail or show errors:
   - `api.workflow.*` - Workflow CRUD and operations (create, update, delete, deploy, execute, etc.)
 - **No Barrel Files**: Do not create barrel/index files that re-export from other files
 
+## Plugin Guidelines
+- **No SDK Dependencies**: Plugin step files must use `fetch` directly instead of SDK client libraries. Do not add npm package dependencies for API integrations.
+- **No dependencies field**: Do not use the `dependencies` field in plugin `index.ts` files. All API calls should use native `fetch`.
+- **Why**: Using `fetch` instead of SDKs reduces supply chain attack surface. SDKs have transitive dependencies that could be compromised.
+

app/api/integrations/[integrationId]/test/route.ts

@@ -1,10 +1,6 @@
-import { LinearClient } from "@linear/sdk";
-import FirecrawlApp from "@mendable/firecrawl-js";
-import { WebClient } from "@slack/web-api";
 import { createGateway } from "ai";
 import { NextResponse } from "next/server";
 import postgres from "postgres";
-import { Resend } from "resend";
 import { auth } from "@/lib/auth";
 import { getIntegration } from "@/lib/db/integrations";
 
@@ -104,8 +100,35 @@ async function testLinearConnection(
       };
     }
 
-    const client = new LinearClient({ apiKey });
-    await client.viewer;
+    const response = await fetch("https://api.linear.app/graphql", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: apiKey,
+      },
+      body: JSON.stringify({
+        query: "query { viewer { id } }",
+      }),
+    });
+
+    if (!response.ok) {
+      return {
+        status: "error",
+        message: "Connection failed",
+      };
+    }
+
+    const result = (await response.json()) as {
+      data?: { viewer?: { id: string } };
+      errors?: Array<{ message: string }>;
+    };
+
+    if (result.errors?.length || !result.data?.viewer) {
+      return {
+        status: "error",
+        message: "Connection failed",
+      };
+    }
 
     return {
       status: "success",
@@ -130,13 +153,26 @@ async function testSlackConnection(
       };
     }
 
-    const client = new WebClient(apiKey);
-    const slackAuth = await client.auth.test();
+    const response = await fetch("https://slack.com/api/auth.test", {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+      },
+    });
+
+    if (!response.ok) {
+      return {
+        status: "error",
+        message: "Connection failed",
+      };
+    }
+
+    const result = (await response.json()) as { ok: boolean; error?: string };
 
-    if (!slackAuth.ok) {
+    if (!result.ok) {
       return {
         status: "error",
-        message: slackAuth.error || "Connection failed",
+        message: result.error || "Connection failed",
       };
     }
 
@@ -163,10 +199,14 @@ async function testResendConnection(
       };
     }
 
-    const resend = new Resend(apiKey);
-    const domains = await resend.domains.list();
+    const response = await fetch("https://api.resend.com/domains", {
+      method: "GET",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+      },
+    });
 
-    if (!domains.data) {
+    if (!response.ok) {
       return {
         status: "error",
         message: "Connection failed",
@@ -263,12 +303,19 @@ async function testFirecrawlConnection(
       };
     }
 
-    const app = new FirecrawlApp({ apiKey });
-    const result = await app.scrape("https://firecrawl.dev", {
-      formats: ["markdown"],
+    const response = await fetch("https://api.firecrawl.dev/v1/scrape", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${apiKey}`,
+      },
+      body: JSON.stringify({
+        url: "https://example.com",
+        formats: ["markdown"],
+      }),
     });
 
-    if (!result) {
+    if (!response.ok) {
       return {
         status: "error",
         message: "Authentication or scrape failed",

lib/codegen-registry.ts

@@ -419,8 +419,7 @@ export async function findIssuesStep(
 }
 `,
 
-  "resend/send-email": `import { Resend } from "resend";
-import { fetchCredentials } from "./lib/credential-helper";
+  "resend/send-email": `import { fetchCredentials } from "./lib/credential-helper";
 
 function getErrorMessage(error: unknown): string {
   if (error instanceof Error) return error.message;
@@ -471,33 +470,41 @@ export async function sendEmailStep(
   }
 
   try {
-    const resend = new Resend(apiKey);
+    const headers: Record<string, string> = {
+      Authorization: \`Bearer \${apiKey}\`,
+      "Content-Type": "application/json",
+    };
+
+    if (input.idempotencyKey) {
+      headers["Idempotency-Key"] = input.idempotencyKey;
+    }
 
-    const result = await resend.emails.send(
-      {
+    const response = await fetch(\`\${RESEND_API_URL}/emails\`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({
         from: senderEmail,
         to: input.emailTo,
         subject: input.emailSubject,
         text: input.emailBody,
         ...(input.emailCc && { cc: input.emailCc }),
         ...(input.emailBcc && { bcc: input.emailBcc }),
-        ...(input.emailReplyTo && { replyTo: input.emailReplyTo }),
-        ...(input.emailScheduledAt && { scheduledAt: input.emailScheduledAt }),
-        ...(input.emailTopicId && { topicId: input.emailTopicId }),
-      },
-      input.idempotencyKey
-        ? { idempotencyKey: input.idempotencyKey }
-        : undefined,
-    );
+        ...(input.emailReplyTo && { reply_to: input.emailReplyTo }),
+        ...(input.emailScheduledAt && { scheduled_at: input.emailScheduledAt }),
+      }),
+    });
 
-    if (result.error) {
+    if (!response.ok) {
+      const errorData = (await response.json()) as ResendErrorResponse;
       return {
         success: false,
-        error: result.error.message || "Failed to send email",
+        error:
+          errorData.message || \`HTTP \${response.status}: Failed to send email\`,
       };
     }
 
-    return { success: true, id: result.data?.id || "" };
+    const data = (await response.json()) as ResendEmailResponse;
+    return { success: true, id: data.id };
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     return {

plugins/firecrawl/index.ts

@@ -32,10 +32,6 @@ const firecrawlPlugin: IntegrationPlugin = {
     },
   },
 
-  dependencies: {
-    "@mendable/firecrawl-js": "^4.6.2",
-  },
-
   actions: [
     {
       slug: "scrape",

plugins/firecrawl/steps/scrape.ts

@@ -1,11 +1,21 @@
 import "server-only";
 
-import FirecrawlApp from "@mendable/firecrawl-js";
 import { fetchCredentials } from "@/lib/credential-fetcher";
 import { type StepInput, withStepLogging } from "@/lib/steps/step-handler";
 import { getErrorMessage } from "@/lib/utils";
 import type { FirecrawlCredentials } from "../credentials";
 
+const FIRECRAWL_API_URL = "https://api.firecrawl.dev/v1";
+
+type FirecrawlScrapeResponse = {
+  success: boolean;
+  data?: {
+    markdown?: string;
+    metadata?: Record<string, unknown>;
+  };
+  error?: string;
+};
+
 type ScrapeResult = {
   markdown?: string;
   metadata?: Record<string, unknown>;
@@ -35,14 +45,32 @@ async function stepHandler(
   }
 
   try {
-    const firecrawl = new FirecrawlApp({ apiKey });
-    const result = await firecrawl.scrape(input.url, {
-      formats: input.formats || ["markdown"],
+    const response = await fetch(`${FIRECRAWL_API_URL}/scrape`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${apiKey}`,
+      },
+      body: JSON.stringify({
+        url: input.url,
+        formats: input.formats || ["markdown"],
+      }),
     });
 
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new Error(`HTTP ${response.status}: ${errorText}`);
+    }
+
+    const result = (await response.json()) as FirecrawlScrapeResponse;
+
+    if (!result.success) {
+      throw new Error(result.error || "Scrape failed");
+    }
+
     return {
-      markdown: result.markdown,
-      metadata: result.metadata,
+      markdown: result.data?.markdown,
+      metadata: result.data?.metadata,
     };
   } catch (error) {
     throw new Error(`Failed to scrape: ${getErrorMessage(error)}`);

plugins/firecrawl/steps/search.ts

@@ -1,13 +1,20 @@
 import "server-only";
 
-import FirecrawlApp from "@mendable/firecrawl-js";
 import { fetchCredentials } from "@/lib/credential-fetcher";
 import { type StepInput, withStepLogging } from "@/lib/steps/step-handler";
 import { getErrorMessage } from "@/lib/utils";
 import type { FirecrawlCredentials } from "../credentials";
 
+const FIRECRAWL_API_URL = "https://api.firecrawl.dev/v1";
+
+type FirecrawlSearchResponse = {
+  success: boolean;
+  data?: unknown[];
+  error?: string;
+};
+
 type SearchResult = {
-  web?: unknown[];
+  data?: unknown[];
 };
 
 export type FirecrawlSearchCoreInput = {
@@ -37,14 +44,32 @@ async function stepHandler(
   }
 
   try {
-    const firecrawl = new FirecrawlApp({ apiKey });
-    const result = await firecrawl.search(input.query, {
-      limit: input.limit ? Number(input.limit) : undefined,
-      scrapeOptions: input.scrapeOptions,
+    const response = await fetch(`${FIRECRAWL_API_URL}/search`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${apiKey}`,
+      },
+      body: JSON.stringify({
+        query: input.query,
+        limit: input.limit ? Number(input.limit) : undefined,
+        scrapeOptions: input.scrapeOptions,
+      }),
     });
 
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new Error(`HTTP ${response.status}: ${errorText}`);
+    }
+
+    const result = (await response.json()) as FirecrawlSearchResponse;
+
+    if (!result.success) {
+      throw new Error(result.error || "Search failed");
+    }
+
     return {
-      web: result.web,
+      data: result.data,
     };
   } catch (error) {
     throw new Error(`Failed to search: ${getErrorMessage(error)}`);

plugins/linear/index.ts

@@ -42,10 +42,6 @@ const linearPlugin: IntegrationPlugin = {
     },
   },
 
-  dependencies: {
-    "@linear/sdk": "^63.2.0",
-  },
-
   actions: [
     {
       slug: "create-ticket",