@amigo-ai/platform-sdk 0.66.0 → 0.67.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -25662,14 +25662,21 @@ export interface components {
25662
25662
  src__routes__integrations__test_endpoint__Request: {
25663
25663
  /**
25664
25664
  * Auth Params
25665
- * @description Caller-supplied values for auth-routed params.
25665
+ * @description Caller-supplied values for auth-routed params — the AUTH-ONLY channel.
25666
25666
  *
25667
25667
  * A ``custom_token_exchange`` integration declares ``param_headers`` /
25668
25668
  * ``param_body_fields`` whose ``param_name`` placeholders are NOT part of the
25669
25669
  * endpoint's ``input_schema`` (they feed the pre-flight token exchange, not the
25670
25670
  * endpoint call). They never reach the auth renderer through ``params`` alone, so
25671
25671
  * the renderer raised before any HTTP call. Supply them here to exercise the
25672
- * exchange end-to-end. Keys here also override matching flat-``params`` keys.
25672
+ * exchange end-to-end.
25673
+ *
25674
+ * PLA-980: these values resolve the token exchange but are STRIPPED before the
25675
+ * downstream endpoint request is built, so a pure-auth secret put here never
25676
+ * echoes into the outbound body/query. A param that legitimately feeds BOTH the
25677
+ * exchange and the endpoint call belongs in ``params`` (which keeps its existing
25678
+ * dual-use behavior). ``auth_params`` is for pure-auth keys absent from ``params``;
25679
+ * on a key collision the ``params`` value wins (for both the exchange and the call).
25673
25680
  */
25674
25681
  auth_params?: {
25675
25682
  [key: string]: unknown;