@ankhorage/studio 0.11.12 → 0.12.0

package/README.md

@@ -3,7 +3,7 @@
 
 # @ankhorage/studio
 
-![license: MIT](././paradox/badges/license.svg) ![npm: v0.11.11](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
+![license: MIT](././paradox/badges/license.svg) ![npm: v0.11.12](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
 
 Standalone Studio authoring package for Ankhorage apps.
 

package/dist/externalApiApi.d.ts

@@ -0,0 +1,5 @@
+import type { ExternalApiConnectRequest, ExternalApiConnectResult, ExternalApiOperationTestRequest, ExternalApiOperationTestResult, ManualRestSourceRequest } from './externalApiAuthoringContracts';
+export declare function connectExternalApi(projectId: string, request: ExternalApiConnectRequest): Promise<ExternalApiConnectResult>;
+export declare function createManualRestSource(projectId: string, request: ManualRestSourceRequest): Promise<ExternalApiConnectResult>;
+export declare function testExternalApiOperation(projectId: string, request: ExternalApiOperationTestRequest): Promise<ExternalApiOperationTestResult>;
+//# sourceMappingURL=externalApiApi.d.ts.map

package/dist/externalApiApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalApiApi.d.ts","sourceRoot":"","sources":["../src/externalApiApi.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EAExB,+BAA+B,EAC/B,8BAA8B,EAC9B,uBAAuB,EACxB,MAAM,iCAAiC,CAAC;AAYzC,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAEnC;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,wBAAwB,CAAC,CAEnC;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,8BAA8B,CAAC,CAEzC"}

package/dist/externalApiApi.js

@@ -0,0 +1,173 @@
+import { API_BASE } from './core/constants';
+class ExternalApiApiError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.name = 'ExternalApiApiError';
+        this.status = status;
+    }
+}
+export function connectExternalApi(projectId, request) {
+    return requestResult(projectId, 'connect', request, parseConnectResult);
+}
+export function createManualRestSource(projectId, request) {
+    return requestResult(projectId, 'manual-rest', request, parseConnectResult);
+}
+export function testExternalApiOperation(projectId, request) {
+    return requestResult(projectId, 'test', request, parseTestResult);
+}
+async function requestResult(projectId, action, body, parse) {
+    const response = await fetch(`${API_BASE}/projects/${encodeURIComponent(projectId)}/data-sources/${action}`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(body),
+    });
+    const value = await readJson(response);
+    if (!response.ok && !isStructuredFailure(value)) {
+        throw new ExternalApiApiError('The Studio external API request failed.', response.status);
+    }
+    return parse(value);
+}
+async function readJson(response) {
+    try {
+        return await response.json();
+    }
+    catch {
+        throw new ExternalApiApiError('The Studio host returned a non-JSON response.', response.status);
+    }
+}
+function parseConnectResult(value) {
+    const record = requireResultRecord(value);
+    const diagnostics = parseDiagnostics(record.diagnostics);
+    const attempts = parseAttempts(record.attempts);
+    if (!record.ok)
+        return { ok: false, diagnostics, attempts };
+    if (typeof record.sourceId !== 'string' ||
+        !isDataSourceKind(record.kind) ||
+        !isConnectedProtocol(record.protocol) ||
+        typeof record.created !== 'boolean') {
+        throw invalidResponse();
+    }
+    return {
+        ok: true,
+        sourceId: record.sourceId,
+        kind: record.kind,
+        protocol: record.protocol,
+        created: record.created,
+        diagnostics,
+        attempts,
+    };
+}
+function parseTestResult(value) {
+    const record = requireResultRecord(value);
+    const diagnostics = parseDiagnostics(record.diagnostics);
+    const request = parseRequestSummary(record.request);
+    const response = parseResponseSummary(record.response);
+    if (!record.ok)
+        return { ok: false, request, response, diagnostics };
+    if (!request)
+        throw invalidResponse();
+    const data = isDataContractValue(record.data) ? record.data : undefined;
+    return { ok: true, request, response, data, diagnostics };
+}
+function requireResultRecord(value) {
+    const record = readRecord(value);
+    if (!record || typeof record.ok !== 'boolean')
+        throw invalidResponse();
+    return { ...record, ok: record.ok };
+}
+function parseDiagnostics(value) {
+    if (!Array.isArray(value))
+        throw invalidResponse();
+    return value.map((entry) => {
+        const record = readRecord(entry);
+        if (!record ||
+            typeof record.code !== 'string' ||
+            typeof record.message !== 'string' ||
+            !isSeverity(record.severity)) {
+            throw invalidResponse();
+        }
+        return {
+            code: record.code,
+            message: record.message,
+            severity: record.severity,
+            dataSourceId: readString(record.dataSourceId),
+            endpointId: readString(record.endpointId),
+            operationId: readString(record.operationId),
+            path: readString(record.path),
+            hint: readString(record.hint),
+        };
+    });
+}
+function parseAttempts(value) {
+    if (!Array.isArray(value))
+        throw invalidResponse();
+    return value.map((entry) => {
+        const record = readRecord(entry);
+        if (!record || typeof record.url !== 'string' || typeof record.outcome !== 'string') {
+            throw invalidResponse();
+        }
+        return {
+            url: record.url,
+            outcome: record.outcome,
+            status: typeof record.status === 'number' ? record.status : undefined,
+        };
+    });
+}
+function parseRequestSummary(value) {
+    if (value === undefined)
+        return undefined;
+    const record = readRecord(value);
+    if (!record ||
+        typeof record.method !== 'string' ||
+        typeof record.url !== 'string' ||
+        typeof record.dryRun !== 'boolean') {
+        throw invalidResponse();
+    }
+    return { method: record.method, url: record.url, dryRun: record.dryRun };
+}
+function parseResponseSummary(value) {
+    if (value === undefined)
+        return undefined;
+    const record = readRecord(value);
+    if (!record || typeof record.status !== 'number' || typeof record.ok !== 'boolean') {
+        throw invalidResponse();
+    }
+    return { status: record.status, ok: record.ok };
+}
+function isStructuredFailure(value) {
+    return readRecord(value)?.ok === false;
+}
+function isConnectedProtocol(value) {
+    return value === 'graphql' || value === 'openapi' || value === 'rest';
+}
+function isDataSourceKind(value) {
+    return (value === 'database' ||
+        value === 'graphql' ||
+        value === 'managed-api' ||
+        value === 'openapi' ||
+        value === 'rest');
+}
+function isSeverity(value) {
+    return value === 'error' || value === 'info' || value === 'warning';
+}
+function isDataContractValue(value) {
+    if (value === null || ['boolean', 'number', 'string'].includes(typeof value))
+        return true;
+    if (Array.isArray(value))
+        return value.every(isDataContractValue);
+    const record = readRecord(value);
+    return record !== null && Object.values(record).every(isDataContractValue);
+}
+function readRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+function readString(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+function invalidResponse() {
+    return new ExternalApiApiError('The Studio host returned an invalid external API response.', 502);
+}
+//# sourceMappingURL=externalApiApi.js.map

package/dist/externalApiApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalApiApi.js","sourceRoot":"","sources":["../src/externalApiApi.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAU5C,MAAM,mBAAoB,SAAQ,KAAK;IAC5B,MAAM,CAAS;IAExB,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,OAAkC;IAElC,OAAO,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,OAAgC;IAEhC,OAAO,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,SAAiB,EACjB,OAAwC;IAExC,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,MAAc,EACd,IAAa,EACb,KAAkC;IAElC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,QAAQ,aAAa,kBAAkB,CAAC,SAAS,CAAC,iBAAiB,MAAM,EAAE,EAC9E;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CACF,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,mBAAmB,CAAC,yCAAyC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,+CAA+C,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IAC5D,IACE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrC,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,EACnC,CAAC;QACD,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW;QACX,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACrE,IAAI,CAAC,OAAO;QAAE,MAAM,eAAe,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,SAAS;QAAE,MAAM,eAAe,EAAE,CAAC;IACvE,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,eAAe,EAAE,CAAC;IACnD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,IACE,CAAC,MAAM;YACP,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC5B,CAAC;YACD,MAAM,eAAe,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7C,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC;YACzC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC;YAC3C,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;YAC7B,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;SAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,eAAe,EAAE,CAAC;IACnD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpF,MAAM,eAAe,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SACtE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,IACE,CAAC,MAAM;QACP,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;QAC9B,OAAO,MAAM,CAAC,MAAM,KAAK,SAAS,EAClC,CAAC;QACD,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACnF,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,KAAK,CAAC;AACzC,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC;AACxE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,KAAK,KAAK,UAAU;QACpB,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,aAAa;QACvB,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,MAAM,CACjB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,CAAC;AACtE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,mBAAmB,CAAC,4DAA4D,EAAE,GAAG,CAAC,CAAC;AACpG,CAAC"}

package/dist/externalApiAuthoring.d.ts

@@ -0,0 +1,4 @@
+export type { ExternalApiConnectRequest, ExternalApiConnectResult, ExternalApiDiscoveryAttempt, ExternalApiOperationTestRequest, ExternalApiOperationTestResult, ExternalApiProtocol, ManualRestSourceRequest, } from './externalApiAuthoringContracts';
+export { type ExternalApiSourceIdResult, normalizeExternalApiSourceId, } from './normalizeExternalApiSourceId';
+export { type ExternalApiDataSourceUpsertResult, upsertExternalApiDataSource, } from './upsertExternalApiDataSource';
+//# sourceMappingURL=externalApiAuthoring.d.ts.map

package/dist/externalApiAuthoring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalApiAuthoring.d.ts","sourceRoot":"","sources":["../src/externalApiAuthoring.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,KAAK,yBAAyB,EAC9B,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,KAAK,iCAAiC,EACtC,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC"}

package/dist/externalApiAuthoring.js

@@ -0,0 +1,3 @@
+export { normalizeExternalApiSourceId, } from './normalizeExternalApiSourceId';
+export { upsertExternalApiDataSource, } from './upsertExternalApiDataSource';
+//# sourceMappingURL=externalApiAuthoring.js.map

package/dist/externalApiAuthoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalApiAuthoring.js","sourceRoot":"","sources":["../src/externalApiAuthoring.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAEL,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC"}

package/dist/externalApiAuthoringContracts.d.ts

@@ -0,0 +1,70 @@
+import type { CredentialRef, DataContractValue, DataOperationIntent, DataSourceDiagnostic, DataSourceKind } from '@ankhorage/contracts/data';
+export type ExternalApiProtocol = 'auto' | 'graphql' | 'openapi';
+export interface ExternalApiConnectRequest {
+    readonly sourceId: string;
+    readonly url: string;
+    readonly protocol: ExternalApiProtocol;
+    readonly name?: string;
+    readonly description?: string;
+    readonly credential?: CredentialRef;
+}
+export interface ManualRestSourceRequest {
+    readonly sourceId: string;
+    readonly baseUrl: string;
+    readonly endpointId: string;
+    readonly path: string;
+    readonly operationId: string;
+    readonly method: string;
+    readonly intent: DataOperationIntent;
+    readonly name?: string;
+    readonly description?: string;
+    readonly credential?: CredentialRef;
+}
+export interface ExternalApiDiscoveryAttempt {
+    readonly url: string;
+    readonly outcome: string;
+    readonly status?: number;
+}
+export type ExternalApiConnectResult = {
+    readonly ok: true;
+    readonly sourceId: string;
+    readonly kind: DataSourceKind;
+    readonly protocol: 'graphql' | 'openapi' | 'rest';
+    readonly created: boolean;
+    readonly attempts: readonly ExternalApiDiscoveryAttempt[];
+    readonly diagnostics: readonly DataSourceDiagnostic[];
+} | {
+    readonly ok: false;
+    readonly attempts: readonly ExternalApiDiscoveryAttempt[];
+    readonly diagnostics: readonly DataSourceDiagnostic[];
+};
+export interface ExternalApiOperationTestRequest {
+    readonly sourceId: string;
+    readonly endpointId: string;
+    readonly operationId: string;
+    readonly values?: Readonly<Record<string, DataContractValue>>;
+    readonly dryRun?: boolean;
+}
+interface ExternalApiSafeRequestSummary {
+    readonly method: string;
+    readonly url: string;
+    readonly dryRun: boolean;
+}
+interface ExternalApiSafeResponseSummary {
+    readonly status: number;
+    readonly ok: boolean;
+}
+export type ExternalApiOperationTestResult = {
+    readonly ok: true;
+    readonly request: ExternalApiSafeRequestSummary;
+    readonly response?: ExternalApiSafeResponseSummary;
+    readonly data?: DataContractValue;
+    readonly diagnostics: readonly DataSourceDiagnostic[];
+} | {
+    readonly ok: false;
+    readonly request?: ExternalApiSafeRequestSummary;
+    readonly response?: ExternalApiSafeResponseSummary;
+    readonly diagnostics: readonly DataSourceDiagnostic[];
+};
+export {};
+//# sourceMappingURL=externalApiAuthoringContracts.d.ts.map

package/dist/externalApiAuthoringContracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalApiAuthoringContracts.d.ts","sourceRoot":"","sources":["../src/externalApiAuthoringContracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACf,MAAM,2BAA2B,CAAC;AAEnC,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAEjE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;CACrC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,wBAAwB,GAChC;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACvD,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACvD,CAAC;AAEN,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,8BAA8B,GACtC;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B,CAAC;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACvD,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,OAAO,CAAC,EAAE,6BAA6B,CAAC;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B,CAAC;IACnD,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACvD,CAAC"}

package/dist/externalApiAuthoringContracts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=externalApiAuthoringContracts.js.map

package/dist/externalApiAuthoringContracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalApiAuthoringContracts.js","sourceRoot":"","sources":["../src/externalApiAuthoringContracts.ts"],"names":[],"mappings":""}

package/dist/host/dataSources/createProjectEndpointCredentialResolver.d.ts

@@ -0,0 +1,8 @@
+import type { EndpointTestCredentialResolver } from '@ankhorage/data-sources';
+import type { ProjectSecretService } from '../secrets/projectSecretService';
+export declare function createProjectEndpointCredentialResolver(args: {
+    readonly projectId: string;
+    readonly service: Pick<ProjectSecretService, 'resolve'>;
+    readonly environment?: string;
+}): EndpointTestCredentialResolver;
+//# sourceMappingURL=createProjectEndpointCredentialResolver.d.ts.map

package/dist/host/dataSources/createProjectEndpointCredentialResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createProjectEndpointCredentialResolver.d.ts","sourceRoot":"","sources":["../../../src/host/dataSources/createProjectEndpointCredentialResolver.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,8BAA8B,EAC/B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,wBAAgB,uCAAuC,CAAC,IAAI,EAAE;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B,GAAG,8BAA8B,CASjC"}

package/dist/host/dataSources/createProjectEndpointCredentialResolver.js

@@ -0,0 +1,43 @@
+export function createProjectEndpointCredentialResolver(args) {
+    return async (credential) => {
+        const result = await args.service.resolve({
+            projectId: args.projectId,
+            environment: args.environment,
+            ref: credential.id,
+        });
+        return result.ok ? mapCredential(credential, result.data) : undefined;
+    };
+}
+function mapCredential(credential, payload) {
+    if (credential.kind === 'bearer' || credential.kind === 'oauth2') {
+        const token = payload.token ?? payload.accessToken ?? payload.value;
+        return token ? { headers: { authorization: `Bearer ${token}` } } : undefined;
+    }
+    if (credential.kind === 'basic') {
+        const { username, password } = payload;
+        return username && password
+            ? {
+                headers: {
+                    authorization: `Basic ${Buffer.from(`${username}:${password}`).toString('base64')}`,
+                },
+            }
+            : undefined;
+    }
+    return mapScopedValueCredential(credential, payload);
+}
+function mapScopedValueCredential(credential, payload) {
+    const separator = credential.scope?.indexOf(':') ?? -1;
+    if (separator < 1)
+        return undefined;
+    const location = credential.scope?.slice(0, separator);
+    const name = credential.scope?.slice(separator + 1).trim();
+    const value = payload.value ?? payload.token ?? Object.values(payload)[0];
+    if (!name || !value)
+        return undefined;
+    if (location === 'header')
+        return { headers: { [name]: value } };
+    if (location === 'query')
+        return { query: { [name]: value } };
+    return undefined;
+}
+//# sourceMappingURL=createProjectEndpointCredentialResolver.js.map

package/dist/host/dataSources/createProjectEndpointCredentialResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createProjectEndpointCredentialResolver.js","sourceRoot":"","sources":["../../../src/host/dataSources/createProjectEndpointCredentialResolver.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,uCAAuC,CAAC,IAIvD;IACC,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACxC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,EAAE,UAAU,CAAC,EAAE;SACnB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,UAAyB,EACzB,OAAsB;IAEtB,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC;QACpE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QACvC,OAAO,QAAQ,IAAI,QAAQ;YACzB,CAAC,CAAC;gBACE,OAAO,EAAE;oBACP,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;iBACpF;aACF;YACH,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IACD,OAAO,wBAAwB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAyB,EACzB,OAAsB;IAEtB,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;IACjE,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/host/dataSources/createTrustedEndpointTestFetch.d.ts

@@ -0,0 +1,3 @@
+import type { EndpointTestFetch } from '@ankhorage/data-sources';
+export declare function createTrustedEndpointTestFetch(): EndpointTestFetch;
+//# sourceMappingURL=createTrustedEndpointTestFetch.d.ts.map

package/dist/host/dataSources/createTrustedEndpointTestFetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createTrustedEndpointTestFetch.d.ts","sourceRoot":"","sources":["../../../src/host/dataSources/createTrustedEndpointTestFetch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAIjE,wBAAgB,8BAA8B,IAAI,iBAAiB,CAElE"}

package/dist/host/dataSources/createTrustedEndpointTestFetch.js

@@ -0,0 +1,5 @@
+import { requestTrustedExternalApi } from './requestTrustedExternalApi';
+export function createTrustedEndpointTestFetch() {
+    return (url, init) => requestTrustedExternalApi(url, init);
+}
+//# sourceMappingURL=createTrustedEndpointTestFetch.js.map

package/dist/host/dataSources/createTrustedEndpointTestFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createTrustedEndpointTestFetch.js","sourceRoot":"","sources":["../../../src/host/dataSources/createTrustedEndpointTestFetch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAExE,MAAM,UAAU,8BAA8B;IAC5C,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC"}

package/dist/host/dataSources/createTrustedExternalApiFetch.d.ts

@@ -0,0 +1,3 @@
+import type { ExternalApiFetch } from '@ankhorage/data-sources';
+export declare function createTrustedExternalApiFetch(): ExternalApiFetch;
+//# sourceMappingURL=createTrustedExternalApiFetch.d.ts.map

package/dist/host/dataSources/createTrustedExternalApiFetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createTrustedExternalApiFetch.d.ts","sourceRoot":"","sources":["../../../src/host/dataSources/createTrustedExternalApiFetch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAIhE,wBAAgB,6BAA6B,IAAI,gBAAgB,CAEhE"}

package/dist/host/dataSources/createTrustedExternalApiFetch.js

@@ -0,0 +1,5 @@
+import { requestTrustedExternalApi } from './requestTrustedExternalApi';
+export function createTrustedExternalApiFetch() {
+    return (url, init) => requestTrustedExternalApi(url, init);
+}
+//# sourceMappingURL=createTrustedExternalApiFetch.js.map

package/dist/host/dataSources/createTrustedExternalApiFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createTrustedExternalApiFetch.js","sourceRoot":"","sources":["../../../src/host/dataSources/createTrustedExternalApiFetch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAExE,MAAM,UAAU,6BAA6B;IAC3C,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC"}

package/dist/host/dataSources/requestTrustedExternalApi.d.ts

@@ -0,0 +1,12 @@
+export declare function requestTrustedExternalApi(rawUrl: string, init: {
+    readonly method: string;
+    readonly headers: Readonly<Record<string, string>>;
+    readonly body?: string;
+}, options?: {
+    readonly timeoutMs?: number;
+    readonly maxResponseBytes?: number;
+}): Promise<{
+    readonly status: number;
+    text(): Promise<string>;
+}>;
+//# sourceMappingURL=requestTrustedExternalApi.d.ts.map

package/dist/host/dataSources/requestTrustedExternalApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestTrustedExternalApi.d.ts","sourceRoot":"","sources":["../../../src/host/dataSources/requestTrustedExternalApi.ts"],"names":[],"mappings":"AASA,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IACJ,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB,EACD,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GAChF,OAAO,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,CAAC,CAa/D"}

package/dist/host/dataSources/requestTrustedExternalApi.js

@@ -0,0 +1,44 @@
+const DEFAULT_TIMEOUT_MS = 10_000;
+const DEFAULT_MAX_RESPONSE_BYTES = 2 * 1024 * 1024;
+const BLOCKED_HOSTNAMES = new Set([
+    '100.100.100.200',
+    '169.254.169.254',
+    '[fd00:ec2::254]',
+    'metadata.google.internal',
+]);
+export async function requestTrustedExternalApi(rawUrl, init, options = {}) {
+    const url = parseTrustedUrl(rawUrl);
+    const response = await fetch(url, {
+        method: init.method,
+        headers: init.headers,
+        body: init.body,
+        credentials: 'omit',
+        redirect: 'error',
+        signal: AbortSignal.timeout(options.timeoutMs ?? DEFAULT_TIMEOUT_MS),
+    });
+    const maxBytes = options.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES;
+    const textPromise = readLimitedResponseText(response, maxBytes);
+    return { status: response.status, text: () => textPromise };
+}
+function parseTrustedUrl(rawUrl) {
+    const url = new URL(rawUrl);
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        throw new Error('External API transport supports HTTP and HTTPS only.');
+    }
+    if (url.username || url.password || BLOCKED_HOSTNAMES.has(url.hostname.toLowerCase())) {
+        throw new Error('External API target is blocked by the trusted transport policy.');
+    }
+    return url;
+}
+async function readLimitedResponseText(response, maxBytes) {
+    const contentLength = Number(response.headers.get('content-length'));
+    if (Number.isFinite(contentLength) && contentLength > maxBytes) {
+        throw new Error('External API response exceeds the configured size limit.');
+    }
+    const bytes = await response.arrayBuffer();
+    if (bytes.byteLength > maxBytes) {
+        throw new Error('External API response exceeds the configured size limit.');
+    }
+    return new TextDecoder().decode(bytes);
+}
+//# sourceMappingURL=requestTrustedExternalApi.js.map

package/dist/host/dataSources/requestTrustedExternalApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestTrustedExternalApi.js","sourceRoot":"","sources":["../../../src/host/dataSources/requestTrustedExternalApi.ts"],"names":[],"mappings":"AAAA,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,0BAA0B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACnD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,0BAA0B;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAc,EACd,IAIC,EACD,UAA+E,EAAE;IAEjF,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,MAAM;QACnB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;KACrE,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IACxE,MAAM,WAAW,GAAG,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,QAAkB,EAAE,QAAgB;IACzE,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,QAAQ,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC"}

package/dist/host/dataSources/sanitizeExternalApiOperationTestResult.d.ts

@@ -0,0 +1,4 @@
+import type { EndpointTestResult } from '@ankhorage/data-sources';
+import type { ExternalApiOperationTestResult } from '../../externalApiAuthoringContracts';
+export declare function sanitizeExternalApiOperationTestResult(result: EndpointTestResult): ExternalApiOperationTestResult;
+//# sourceMappingURL=sanitizeExternalApiOperationTestResult.d.ts.map

package/dist/host/dataSources/sanitizeExternalApiOperationTestResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizeExternalApiOperationTestResult.d.ts","sourceRoot":"","sources":["../../../src/host/dataSources/sanitizeExternalApiOperationTestResult.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAE1F,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,kBAAkB,GACzB,8BAA8B,CAqBhC"}

package/dist/host/dataSources/sanitizeExternalApiOperationTestResult.js

@@ -0,0 +1,34 @@
+export function sanitizeExternalApiOperationTestResult(result) {
+    const request = result.request
+        ? {
+            method: result.request.method,
+            url: redactQueryValues(result.request.url),
+            dryRun: result.request.dryRun,
+        }
+        : undefined;
+    const response = result.response
+        ? { status: result.response.status, ok: result.response.ok }
+        : undefined;
+    return result.ok
+        ? {
+            ok: true,
+            request: request ?? { method: 'UNKNOWN', url: '', dryRun: false },
+            response,
+            data: result.data,
+            diagnostics: result.diagnostics,
+        }
+        : { ok: false, request, response, diagnostics: result.diagnostics };
+}
+function redactQueryValues(rawUrl) {
+    try {
+        const url = new URL(rawUrl);
+        for (const key of [...url.searchParams.keys()]) {
+            url.searchParams.set(key, '[redacted]');
+        }
+        return url.toString();
+    }
+    catch {
+        return rawUrl.split('?')[0] ?? rawUrl;
+    }
+}
+//# sourceMappingURL=sanitizeExternalApiOperationTestResult.js.map

package/dist/host/dataSources/sanitizeExternalApiOperationTestResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizeExternalApiOperationTestResult.js","sourceRoot":"","sources":["../../../src/host/dataSources/sanitizeExternalApiOperationTestResult.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,sCAAsC,CACpD,MAA0B;IAE1B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO;QAC5B,CAAC,CAAC;YACE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;YAC7B,GAAG,EAAE,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAC1C,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;SAC9B;QACH,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ;QAC9B,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE;QAC5D,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO,MAAM,CAAC,EAAE;QACd,CAAC,CAAC;YACE,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,OAAO,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACjE,QAAQ;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC;QACH,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/host/dataSources/studioExternalApiService.d.ts

@@ -0,0 +1,24 @@
+import { type EndpointTestFetch, type ExternalApiFetch } from '@ankhorage/data-sources';
+import type { ExternalApiConnectRequest, ExternalApiConnectResult, ExternalApiOperationTestRequest, ExternalApiOperationTestResult, ManualRestSourceRequest } from '../../externalApiAuthoringContracts';
+import type { ProjectManager } from '../orchestrator/projectManager';
+import type { ProjectSecretService } from '../secrets/projectSecretService';
+export declare class StudioExternalApiService {
+    private readonly projectManager;
+    private readonly discoveryFetch;
+    private readonly endpointFetch;
+    private readonly secretService?;
+    constructor(options: {
+        readonly projectManager: Pick<ProjectManager, 'getProjectManifest' | 'getStudioManifest' | 'saveStudioManifest'>;
+        readonly discoveryFetch?: ExternalApiFetch;
+        readonly endpointFetch?: EndpointTestFetch;
+        readonly secretService?: Pick<ProjectSecretService, 'resolve'>;
+    });
+    connect(projectId: string, request: ExternalApiConnectRequest): Promise<ExternalApiConnectResult>;
+    createManualRest(projectId: string, request: ManualRestSourceRequest): Promise<ExternalApiConnectResult>;
+    testOperation(projectId: string, request: ExternalApiOperationTestRequest): Promise<ExternalApiOperationTestResult>;
+    private discoverOpenApi;
+    private connectGraphQl;
+    private persist;
+    private readEditableManifest;
+}
+//# sourceMappingURL=studioExternalApiService.d.ts.map

package/dist/host/dataSources/studioExternalApiService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"studioExternalApiService.d.ts","sourceRoot":"","sources":["../../../src/host/dataSources/studioExternalApiService.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAGtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EACxB,+BAA+B,EAC/B,8BAA8B,EAC9B,uBAAuB,EACxB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAY5E,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA0B;IACzD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAmB;IAClD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoB;IAClD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAwC;gBAE3D,OAAO,EAAE;QACnB,QAAQ,CAAC,cAAc,EAAE,IAAI,CAC3B,cAAc,EACd,oBAAoB,GAAG,mBAAmB,GAAG,oBAAoB,CAClE,CAAC;QACF,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC;QAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;QAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;KAChE;IAOK,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC;IAY9B,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,wBAAwB,CAAC;IA6B9B,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,8BAA8B,CAAC;IAsB1C,OAAO,CAAC,eAAe;YAWT,cAAc;YAuBd,OAAO;YAwBP,oBAAoB;CAOnC"}